From 3be20f90fc8e3a8d7e0b61f6332b106017cfd113 Mon Sep 17 00:00:00 2001 From: zhouhongshuo <409581486@qq.com> Date: Mon, 26 Aug 2024 00:08:18 +0800 Subject: [PATCH] chushihua --- .devcontainer/devcontainer.json | 49 + .dockerignore | 3 + .editorconfig | 513 + .gitattributes | 4 + .github/FUNDING.yml | 1 + .github/ISSUE_TEMPLATE/bug_report.en.yml | 80 + .github/ISSUE_TEMPLATE/bug_report.zh.yml | 80 + .github/ISSUE_TEMPLATE/config.yml | 5 + .github/ISSUE_TEMPLATE/feature_request.en.yml | 38 + .github/ISSUE_TEMPLATE/feature_request.zh.yml | 38 + .../actions/docker-buildx-push/action.yaml | 75 + .github/actions/setup-env/action.yaml | 40 + .github/dependabot.yml | 12 + .github/pull_request_template.md | 59 + .github/workflows/halo.yaml | 126 + .gitignore | 78 + .gitpod.yml | 8 + CODE_OF_CONDUCT.md | 128 + CONTRIBUTING.md | 68 + Dockerfile | 28 + LICENSE | 674 + OWNERS | 11 + README.md | 71 + SECURITY.md | 42 + api-docs/openapi/v3_0/aggregated.json | 23049 ++++++++++++++++ .../v3_0/apis_console.api_v1alpha1.json | 6456 +++++ .../v3_0/apis_extension.api_v1alpha1.json | 12697 +++++++++ .../v3_0/apis_public.api_v1alpha1.json | 2096 ++ .../openapi/v3_0/apis_uc.api_v1alpha1.json | 1978 ++ api/build.gradle | 101 + .../run/halo/app/content/ContentWrapper.java | 43 + .../halo/app/content/ExcerptGenerator.java | 32 + .../java/run/halo/app/content/PatchUtils.java | 88 + .../halo/app/content/PostContentService.java | 15 + .../app/content/comment/CommentSubject.java | 26 + .../app/core/endpoint/WebSocketEndpoint.java | 34 + .../app/core/extension/AnnotationSetting.java | 36 + .../halo/app/core/extension/AuthProvider.java | 80 + .../run/halo/app/core/extension/Counter.java | 41 + .../run/halo/app/core/extension/Device.java | 65 + .../run/halo/app/core/extension/Menu.java | 39 + .../run/halo/app/core/extension/MenuItem.java | 84 + .../run/halo/app/core/extension/Plugin.java | 164 + .../app/core/extension/RememberMeToken.java | 37 + .../halo/app/core/extension/ReverseProxy.java | 29 + .../run/halo/app/core/extension/Role.java | 187 + .../halo/app/core/extension/RoleBinding.java | 169 + .../run/halo/app/core/extension/Setting.java | 51 + .../run/halo/app/core/extension/Theme.java | 177 + .../run/halo/app/core/extension/User.java | 117 + .../app/core/extension/UserConnection.java | 83 + .../core/extension/attachment/Attachment.java | 68 + .../core/extension/attachment/Constant.java | 28 + .../app/core/extension/attachment/Group.java | 48 + .../app/core/extension/attachment/Policy.java | 39 + .../extension/attachment/PolicyTemplate.java | 34 + .../endpoint/AttachmentHandler.java | 74 + .../attachment/endpoint/DeleteOption.java | 9 + .../attachment/endpoint/SimpleFilePart.java | 40 + .../attachment/endpoint/UploadOption.java | 23 + .../app/core/extension/content/Category.java | 117 + .../app/core/extension/content/Comment.java | 164 + .../app/core/extension/content/Constant.java | 13 + .../halo/app/core/extension/content/Post.java | 245 + .../app/core/extension/content/Reply.java | 56 + .../core/extension/content/SinglePage.java | 120 + .../app/core/extension/content/Snapshot.java | 90 + .../halo/app/core/extension/content/Tag.java | 85 + .../extension/endpoint/CustomEndpoint.java | 20 + .../core/extension/endpoint/SortResolver.java | 31 + .../extension/notification/Notification.java | 58 + .../notification/NotificationTemplate.java | 59 + .../notification/NotifierDescriptor.java | 54 + .../core/extension/notification/Reason.java | 72 + .../extension/notification/ReasonType.java | 58 + .../extension/notification/Subscription.java | 144 + .../extension/service/AttachmentService.java | 94 + .../halo/app/event/post/PostDeletedEvent.java | 24 + .../run/halo/app/event/post/PostEvent.java | 27 + .../app/event/post/PostPublishedEvent.java | 12 + .../app/event/post/PostUnpublishedEvent.java | 12 + .../halo/app/event/post/PostUpdatedEvent.java | 12 + .../event/post/PostVisibleChangedEvent.java | 30 + .../halo/app/extension/AbstractExtension.java | 30 + .../run/halo/app/extension/Comparators.java | 37 + .../run/halo/app/extension/ConfigMap.java | 33 + .../extension/DefaultExtensionMatcher.java | 57 + .../run/halo/app/extension/Extension.java | 23 + .../halo/app/extension/ExtensionClient.java | 96 + .../halo/app/extension/ExtensionMatcher.java | 23 + .../halo/app/extension/ExtensionOperator.java | 80 + .../run/halo/app/extension/ExtensionUtil.java | 61 + .../main/java/run/halo/app/extension/GVK.java | 42 + .../run/halo/app/extension/GroupKind.java | 11 + .../run/halo/app/extension/GroupVersion.java | 40 + .../halo/app/extension/GroupVersionKind.java | 64 + .../run/halo/app/extension/JsonExtension.java | 259 + .../run/halo/app/extension/ListOptions.java | 127 + .../run/halo/app/extension/ListResult.java | 161 + .../java/run/halo/app/extension/Metadata.java | 55 + .../halo/app/extension/MetadataOperator.java | 99 + .../run/halo/app/extension/MetadataUtil.java | 45 + .../run/halo/app/extension/PageRequest.java | 65 + .../halo/app/extension/PageRequestImpl.java | 90 + .../extension/ReactiveExtensionClient.java | 96 + .../main/java/run/halo/app/extension/Ref.java | 77 + .../java/run/halo/app/extension/Scheme.java | 92 + .../run/halo/app/extension/SchemeManager.java | 65 + .../java/run/halo/app/extension/Secret.java | 54 + .../run/halo/app/extension/Unstructured.java | 283 + .../java/run/halo/app/extension/Watcher.java | 89 + .../extension/WatcherExtensionMatchers.java | 91 + .../halo/app/extension/WatcherPredicates.java | 99 + .../app/extension/controller/Controller.java | 11 + .../controller/ControllerBuilder.java | 146 + .../controller/DefaultController.java | 251 + .../extension/controller/DefaultQueue.java | 159 + .../controller/ExtensionWatcher.java | 76 + .../app/extension/controller/Reconciler.java | 24 + .../extension/controller/RequestQueue.java | 89 + .../controller/RequestSynchronizer.java | 73 + .../controller/RequeueException.java | 31 + .../extension/controller/Synchronizer.java | 9 + .../exception/ExtensionException.java | 26 + .../exception/SchemeNotFoundException.java | 18 + .../index/AbstractIndexAttribute.java | 33 + .../index/FunctionalIndexAttribute.java | 49 + .../FunctionalMultiValueIndexAttribute.java | 41 + .../app/extension/index/IndexAttribute.java | 23 + .../index/IndexAttributeFactory.java | 20 + .../app/extension/index/IndexDescriptor.java | 20 + .../halo/app/extension/index/IndexEntry.java | 132 + .../extension/index/IndexEntryOperator.java | 55 + .../index/IndexEntryOperatorImpl.java | 112 + .../halo/app/extension/index/IndexSpec.java | 39 + .../extension/index/IndexSpecRegistry.java | 54 + .../halo/app/extension/index/IndexSpecs.java | 54 + .../extension/index/IndexedQueryEngine.java | 44 + .../run/halo/app/extension/index/Indexer.java | 106 + .../app/extension/index/KeyComparator.java | 47 + .../halo/app/extension/index/query/All.java | 20 + .../halo/app/extension/index/query/And.java | 43 + .../app/extension/index/query/Between.java | 31 + .../app/extension/index/query/EqualQuery.java | 32 + .../index/query/GreaterThanQuery.java | 31 + .../app/extension/index/query/InQuery.java | 29 + .../app/extension/index/query/IsNotNull.java | 20 + .../app/extension/index/query/IsNull.java | 28 + .../extension/index/query/LessThanQuery.java | 31 + .../extension/index/query/LogicalQuery.java | 33 + .../halo/app/extension/index/query/Not.java | 32 + .../app/extension/index/query/NotEqual.java | 36 + .../halo/app/extension/index/query/Or.java | 28 + .../halo/app/extension/index/query/Query.java | 22 + .../extension/index/query/QueryFactory.java | 233 + .../extension/index/query/QueryIndexView.java | 143 + .../index/query/QueryIndexViewImpl.java | 230 + .../extension/index/query/SimpleQuery.java | 35 + .../extension/index/query/StringContains.java | 36 + .../extension/index/query/StringEndsWith.java | 36 + .../index/query/StringStartsWith.java | 36 + .../app/extension/router/IListRequest.java | 96 + .../extension/router/QueryParamBuildUtil.java | 36 + .../app/extension/router/SortableRequest.java | 109 + .../router/selector/EqualityMatcher.java | 73 + .../FieldCriteriaPredicateConverter.java | 37 + .../router/selector/FieldSelector.java | 26 + .../selector/FieldSelectorConverter.java | 45 + .../LabelCriteriaPredicateConverter.java | 42 + .../router/selector/LabelSelector.java | 117 + .../selector/LabelSelectorConverter.java | 44 + .../extension/router/selector/Operator.java | 102 + .../router/selector/SelectorConverter.java | 27 + .../router/selector/SelectorCriteria.java | 7 + .../router/selector/SelectorMatcher.java | 14 + .../router/selector/SelectorUtil.java | 104 + .../extension/router/selector/SetMatcher.java | 77 + .../halo/app/infra/AnonymousUserConst.java | 11 + .../run/halo/app/infra/BackupRootGetter.java | 14 + .../java/run/halo/app/infra/Condition.java | 65 + .../run/halo/app/infra/ConditionList.java | 156 + .../run/halo/app/infra/ConditionStatus.java | 11 + .../halo/app/infra/ExternalLinkProcessor.java | 20 + .../halo/app/infra/ExternalUrlSupplier.java | 41 + .../halo/app/infra/FileCategoryMatcher.java | 107 + .../run/halo/app/infra/SystemSetting.java | 140 + .../halo/app/infra/SystemVersionSupplier.java | 15 + .../run/halo/app/infra/model/License.java | 12 + .../app/infra/utils/FileTypeDetectUtils.java | 34 + .../app/infra/utils/GenericClassUtils.java | 43 + .../app/infra/utils/JsonParseException.java | 30 + .../run/halo/app/infra/utils/JsonUtils.java | 105 + .../run/halo/app/infra/utils/PathUtils.java | 121 + .../java/run/halo/app/migration/Backup.java | 65 + .../java/run/halo/app/migration/Constant.java | 12 + .../app/notification/NotificationCenter.java | 46 + .../app/notification/NotificationContext.java | 48 + .../NotificationReasonEmitter.java | 22 + .../app/notification/ReactiveNotifier.java | 20 + .../app/notification/ReasonAttributes.java | 13 + .../halo/app/notification/ReasonPayload.java | 60 + .../halo/app/notification/UserIdentity.java | 57 + .../java/run/halo/app/plugin/ApiVersion.java | 26 + .../java/run/halo/app/plugin/BasePlugin.java | 41 + .../app/plugin/PluginConfigUpdatedEvent.java | 32 + .../run/halo/app/plugin/PluginContext.java | 31 + .../halo/app/plugin/PluginsRootGetter.java | 14 + .../app/plugin/ReactiveSettingFetcher.java | 23 + .../run/halo/app/plugin/SettingFetcher.java | 20 + .../java/run/halo/app/plugin/SharedEvent.java | 21 + .../app/plugin/event/PluginStartedEvent.java | 17 + .../extensionpoint/ExtensionGetter.java | 37 + .../run/halo/app/search/HaloDocument.java | 106 + .../app/search/HaloDocumentsProvider.java | 27 + .../run/halo/app/search/SearchEngine.java | 47 + .../run/halo/app/search/SearchOption.java | 79 + .../java/run/halo/app/search/SearchParam.java | 108 + .../run/halo/app/search/SearchResult.java | 13 + .../run/halo/app/search/SearchService.java | 21 + .../event/HaloDocumentAddRequestEvent.java | 21 + .../event/HaloDocumentDeleteRequestEvent.java | 27 + .../HaloDocumentRebuildRequestEvent.java | 13 + .../run/halo/app/search/post/PostDoc.java | 23 + .../run/halo/app/search/post/PostHit.java | 20 + .../app/security/AdditionalWebFilter.java | 25 + .../app/security/AfterSecurityWebFilter.java | 14 + ...nymousAuthenticationSecurityWebFilter.java | 13 + .../AuthenticationSecurityWebFilter.java | 13 + .../app/security/BeforeSecurityWebFilter.java | 14 + .../security/FormLoginSecurityWebFilter.java | 13 + .../app/security/LoginHandlerEnhancer.java | 34 + .../app/security/PersonalAccessToken.java | 53 + ...UsernamePasswordAuthenticationManager.java | 18 + .../app/security/device/DeviceService.java | 14 + .../app/theme/ReactivePostContentHandler.java | 40 + .../ReactiveSinglePageContentHandler.java | 38 + .../halo/app/theme/TemplateNameResolver.java | 45 + .../halo/app/theme/dialect/CommentWidget.java | 20 + .../dialect/TemplateFooterProcessor.java | 20 + .../theme/dialect/TemplateHeadProcessor.java | 23 + .../run/halo/app/theme/finders/Finder.java | 26 + .../theme/finders/vo/ExtensionVoOperator.java | 16 + .../run/halo/app/theme/router/ModelConst.java | 14 + .../halo/app/theme/router/PageUrlUtils.java | 108 + .../theme/router/UrlContextListResult.java | 84 + .../app/core/extension/content/PostTest.java | 45 + .../notification/SubscriptionTest.java | 28 + .../halo/app/extension/ExtensionUtilTest.java | 59 + .../run/halo/app/extension/FakeExtension.java | 18 + .../halo/app/extension/ListOptionsTest.java | 51 + .../app/extension/PageRequestImplTest.java | 27 + .../run/halo/app/extension/SecretTest.java | 84 + .../controller/ControllerBuilderTest.java | 117 + .../controller/DefaultControllerTest.java | 300 + .../controller/DefaultDelayQueueTest.java | 137 + .../controller/DelayedEntryTest.java | 60 + .../controller/ExtensionWatcherTest.java | 152 + .../controller/RequestSynchronizerTest.java | 107 + ...unctionalMultiValueIndexAttributeTest.java | 58 + .../index/IndexAttributeFactoryTest.java | 41 + .../app/extension/index/IndexSpecTest.java | 76 + .../extension/index/KeyComparatorTest.java | 79 + .../extension/index/query/InQueryTest.java | 24 + .../extension/index/query/IsNotNullTest.java | 20 + .../index/query/StringContainsTest.java | 20 + .../FieldCriteriaPredicateConverterTest.java | 96 + .../LabelCriteriaPredicateConverterTest.java | 101 + .../router/selector/LabelSelectorTest.java | 24 + .../router/selector/OperatorTest.java | 64 + .../selector/SelectorConverterTest.java | 42 + .../router/selector/SelectorUtilTest.java | 44 + .../infra/utils/GenericClassUtilsTest.java | 19 + .../halo/app/infra/utils/JsonUtilsTest.java | 35 + .../halo/app/infra/utils/PathUtilsTest.java | 98 + application/build.gradle | 166 + .../main/java/run/halo/app/Application.java | 31 + .../app/actuator/DatabaseInfoContributor.java | 48 + .../halo/app/actuator/GlobalInfoEndpoint.java | 171 + .../halo/app/actuator/RestartEndpoint.java | 77 + .../app/config/ExtensionConfiguration.java | 37 + .../halo/app/config/HaloConfiguration.java | 37 + .../run/halo/app/config/SwaggerConfig.java | 151 + .../run/halo/app/config/WebFluxConfig.java | 239 + .../app/config/WebServerSecurityConfig.java | 153 + .../run/halo/app/console/ProxyFilter.java | 71 + .../console/WebSocketRequestPredicate.java | 15 + .../WebSocketServerWebExchangeMatcher.java | 16 + .../run/halo/app/console/WebSocketUtils.java | 20 + .../app/content/AbstractContentService.java | 194 + .../app/content/AbstractEventReconciler.java | 62 + .../app/content/CategoryPostCountUpdater.java | 163 + .../run/halo/app/content/CategoryService.java | 15 + .../java/run/halo/app/content/Content.java | 4 + .../run/halo/app/content/ContentRequest.java | 53 + .../halo/app/content/ContentUpdateParam.java | 9 + .../run/halo/app/content/Contributor.java | 16 + .../java/run/halo/app/content/ListedPost.java | 41 + .../halo/app/content/ListedSinglePage.java | 33 + .../halo/app/content/ListedSnapshotDto.java | 42 + .../app/content/NotificationReasonConst.java | 14 + .../app/content/PostContentServiceImpl.java | 58 + .../content/PostHideFromListStateUpdater.java | 55 + .../java/run/halo/app/content/PostQuery.java | 157 + .../run/halo/app/content/PostRequest.java | 25 + .../run/halo/app/content/PostService.java | 53 + .../java/run/halo/app/content/PostSorter.java | 78 + .../run/halo/app/content/SinglePageQuery.java | 208 + .../halo/app/content/SinglePageRequest.java | 24 + .../halo/app/content/SinglePageService.java | 33 + .../run/halo/app/content/SnapshotService.java | 22 + .../main/java/run/halo/app/content/Stats.java | 42 + .../halo/app/content/TagPostCountUpdater.java | 135 + .../content/comment/CommentEmailOwner.java | 43 + .../CommentNotificationReasonPublisher.java | 343 + .../app/content/comment/CommentQuery.java | 110 + .../app/content/comment/CommentRequest.java | 57 + .../app/content/comment/CommentService.java | 22 + .../content/comment/CommentServiceImpl.java | 256 + .../app/content/comment/CommentStats.java | 23 + .../app/content/comment/ListedComment.java | 31 + .../halo/app/content/comment/ListedReply.java | 28 + .../halo/app/content/comment/OwnerInfo.java | 62 + .../content/comment/PostCommentSubject.java | 48 + .../ReplyNotificationSubscriptionHelper.java | 73 + .../halo/app/content/comment/ReplyQuery.java | 67 + .../app/content/comment/ReplyRequest.java | 55 + .../app/content/comment/ReplyService.java | 20 + .../app/content/comment/ReplyServiceImpl.java | 260 + .../comment/SinglePageCommentSubject.java | 49 + .../app/content/impl/CategoryServiceImpl.java | 71 + .../app/content/impl/PostServiceImpl.java | 404 + .../content/impl/SinglePageServiceImpl.java | 321 + .../app/content/impl/SnapshotServiceImpl.java | 125 + .../permalinks/CategoryPermalinkPolicy.java | 48 + .../content/permalinks/ExtensionLocator.java | 44 + .../content/permalinks/PermalinkPolicy.java | 16 + .../permalinks/PostPermalinkPolicy.java | 73 + .../permalinks/TagPermalinkPolicy.java | 47 + .../endpoint/WebSocketEndpointManager.java | 16 + .../endpoint/WebSocketHandlerMapping.java | 140 + .../endpoint/AttachmentEndpoint.java | 316 + .../LocalAttachmentUploadHandler.java | 310 + .../endpoint/AuthProviderEndpoint.java | 86 + .../extension/endpoint/CommentEndpoint.java | 133 + .../endpoint/CustomEndpointsBuilder.java | 46 + .../extension/endpoint/PluginEndpoint.java | 742 + .../core/extension/endpoint/PostEndpoint.java | 409 + .../extension/endpoint/ReplyEndpoint.java | 54 + .../endpoint/SinglePageEndpoint.java | 342 + .../extension/endpoint/StatsEndpoint.java | 113 + .../SystemInitializationEndpoint.java | 146 + .../core/extension/endpoint/TagEndpoint.java | 139 + .../extension/endpoint/TrackerEndpoint.java | 138 + .../core/extension/endpoint/UserEndpoint.java | 812 + .../AnnotationSettingReconciler.java | 54 + .../reconciler/AuthProviderReconciler.java | 50 + .../reconciler/CategoryReconciler.java | 121 + .../reconciler/CommentReconciler.java | 193 + .../reconciler/MenuItemReconciler.java | 135 + .../reconciler/PluginReconciler.java | 846 + .../reconciler/PostCounterReconciler.java | 53 + .../extension/reconciler/PostReconciler.java | 439 + .../extension/reconciler/ReplyReconciler.java | 98 + .../reconciler/ReverseProxyReconciler.java | 105 + .../extension/reconciler/RoleReconciler.java | 65 + .../reconciler/SinglePageReconciler.java | 413 + .../reconciler/SystemSettingReconciler.java | 300 + .../extension/reconciler/TagReconciler.java | 79 + .../extension/reconciler/ThemeReconciler.java | 229 + .../extension/reconciler/UserReconciler.java | 197 + .../attachment/AttachmentReconciler.java | 125 + .../extension/service/DefaultRoleService.java | 252 + .../service/EmailPasswordRecoveryService.java | 38 + .../service/EmailVerificationService.java | 47 + .../core/extension/service/PluginService.java | 113 + .../core/extension/service/RoleService.java | 53 + .../core/extension/service/UserService.java | 29 + .../extension/service/UserServiceImpl.java | 240 + .../impl/DefaultAttachmentService.java | 140 + .../EmailPasswordRecoveryServiceImpl.java | 208 + .../impl/EmailVerificationServiceImpl.java | 273 + .../service/impl/PluginServiceImpl.java | 638 + .../core/extension/theme/SettingUtils.java | 175 + .../core/extension/theme/ThemeEndpoint.java | 537 + .../core/extension/theme/ThemeService.java | 20 + .../extension/theme/ThemeServiceImpl.java | 322 + .../app/core/extension/theme/ThemeUtils.java | 205 + .../uc/content/UcPostAttachmentEndpoint.java | 208 + .../endpoint/uc/content/UcPostEndpoint.java | 332 + .../uc/content/UcSnapshotEndpoint.java | 123 + .../post/CategoryHiddenStateChangeEvent.java | 24 + .../app/event/post/CommentCreatedEvent.java | 22 + .../CommentUnreadReplyCountChangedEvent.java | 22 + .../halo/app/event/post/DownvotedEvent.java | 14 + .../app/event/post/PostStatsChangedEvent.java | 23 + .../app/event/post/ReplyChangedEvent.java | 14 + .../app/event/post/ReplyCreatedEvent.java | 16 + .../app/event/post/ReplyDeletedEvent.java | 10 + .../run/halo/app/event/post/ReplyEvent.java | 21 + .../run/halo/app/event/post/UpvotedEvent.java | 14 + .../run/halo/app/event/post/VisitedEvent.java | 22 + .../run/halo/app/event/post/VotedEvent.java | 22 + .../app/event/user/PasswordChangedEvent.java | 14 + .../app/extension/DefaultSchemeManager.java | 75 + .../DefaultSchemeWatcherManager.java | 34 + .../extension/DelegateExtensionClient.java | 82 + .../app/extension/ExtensionConverter.java | 31 + .../app/extension/ExtensionStoreUtil.java | 42 + .../app/extension/JSONExtensionConverter.java | 145 + .../ReactiveExtensionClientImpl.java | 487 + .../app/extension/SchemeWatcherManager.java | 49 + .../controller/ControllerManager.java | 19 + .../controller/DefaultControllerManager.java | 83 + .../exception/ExtensionConvertException.java | 17 + .../exception/ExtensionNotFoundException.java | 13 + .../exception/SchemaViolationException.java | 28 + .../extension/gc/GcControllerInitializer.java | 28 + .../halo/app/extension/gc/GcReconciler.java | 88 + .../run/halo/app/extension/gc/GcRequest.java | 12 + .../halo/app/extension/gc/GcSynchronizer.java | 79 + .../run/halo/app/extension/gc/GcWatcher.java | 64 + .../index/DefaultExtensionIterator.java | 66 + .../extension/index/DefaultIndexSpecs.java | 64 + .../app/extension/index/DefaultIndexer.java | 233 + .../extension/index/ExtensionIterator.java | 17 + .../index/ExtensionPaginatedLister.java | 23 + .../app/extension/index/IndexBuilder.java | 26 + .../app/extension/index/IndexBuilderImpl.java | 65 + .../extension/index/IndexEntryContainer.java | 71 + .../app/extension/index/IndexEntryImpl.java | 165 + .../index/IndexSpecRegistryImpl.java | 85 + .../index/IndexedQueryEngineImpl.java | 211 + .../app/extension/index/IndexerFactory.java | 56 + .../extension/index/IndexerFactoryImpl.java | 84 + .../extension/index/IndexerTransaction.java | 40 + .../index/IndexerTransactionImpl.java | 105 + .../extension/index/LabelIndexSpecUtils.java | 55 + .../extension/index/PrimaryKeySpecUtils.java | 30 + .../ExtensionCompositeRouterFunction.java | 87 + .../router/ExtensionCreateHandler.java | 45 + .../router/ExtensionDeleteHandler.java | 40 + .../extension/router/ExtensionGetHandler.java | 39 + .../router/ExtensionListHandler.java | 42 + .../router/ExtensionPatchHandler.java | 80 + .../ExtensionRouterFunctionFactory.java | 161 + .../router/ExtensionUpdateHandler.java | 48 + .../halo/app/extension/router/JsonPatch.java | 104 + .../app/extension/store/ExtensionStore.java | 55 + .../extension/store/ExtensionStoreClient.java | 64 + .../store/ExtensionStoreClientJPAImpl.java | 57 + .../store/ExtensionStoreRepository.java | 38 + .../store/ReactiveExtensionStoreClient.java | 31 + .../ReactiveExtensionStoreClientImpl.java | 71 + .../app/infra/DefaultBackupRootGetter.java | 20 + .../infra/DefaultExternalLinkProcessor.java | 54 + .../DefaultInitializationStateGetter.java | 68 + .../DefaultReactiveUrlDataBufferFetcher.java | 34 + .../infra/DefaultSystemVersionSupplier.java | 34 + .../app/infra/DefaultThemeInitializer.java | 65 + .../app/infra/DefaultThemeRootGetter.java | 21 + .../app/infra/ExtensionInitializedEvent.java | 16 + .../infra/ExtensionResourceInitializer.java | 118 + .../HaloPropertiesExternalUrlSupplier.java | 71 + .../app/infra/InitializationStateGetter.java | 26 + .../ReactiveExtensionPaginatedOperator.java | 37 + ...eactiveExtensionPaginatedOperatorImpl.java | 132 + .../infra/ReactiveUrlDataBufferFetcher.java | 23 + .../run/halo/app/infra/SchemeInitializer.java | 578 + .../SystemConfigurableEnvironmentFetcher.java | 154 + .../java/run/halo/app/infra/SystemState.java | 74 + .../run/halo/app/infra/ThemeRootGetter.java | 13 + .../run/halo/app/infra/ValidationUtils.java | 40 + .../exception/AccessDeniedException.java | 24 + .../AttachmentAlreadyExistsException.java | 16 + .../exception/DuplicateNameException.java | 24 + .../exception/EmailVerificationFailed.java | 26 + .../halo/app/infra/exception/Exceptions.java | 106 + .../exception/FileSizeExceededException.java | 18 + .../FileTypeNotAllowedException.java | 18 + .../infra/exception/NotFoundException.java | 31 + .../PluginAlreadyExistsException.java | 21 + ...PluginDependenciesNotEnabledException.java | 32 + .../exception/PluginDependencyException.java | 56 + .../PluginDependentsNotDisabledException.java | 32 + .../PluginInstallationException.java | 19 + .../exception/RateLimitExceededException.java | 15 + .../RequestBodyValidationException.java | 63 + .../ThemeAlreadyExistsException.java | 26 + .../exception/ThemeInstallationException.java | 17 + .../exception/ThemeUninstallException.java | 16 + .../exception/ThemeUpgradeException.java | 17 + .../UnsatisfiedAttributeValueException.java | 20 + .../exception/UserNotFoundException.java | 13 + .../handlers/HaloErrorConfiguration.java | 64 + .../HaloErrorWebExceptionHandler.java | 80 + .../ProblemDetailErrorAttributes.java | 54 + .../properties/AttachmentProperties.java | 26 + .../app/infra/properties/CacheProperties.java | 10 + .../infra/properties/ConsoleProperties.java | 14 + .../infra/properties/ExtensionProperties.java | 17 + .../app/infra/properties/HaloProperties.java | 77 + .../app/infra/properties/JwtProperties.java | 133 + .../app/infra/properties/ProxyProperties.java | 18 + .../infra/properties/SecurityProperties.java | 50 + .../app/infra/properties/ThemeProperties.java | 26 + .../app/infra/properties/UcProperties.java | 14 + .../run/halo/app/infra/utils/Base62Utils.java | 58 + .../halo/app/infra/utils/DataBufferUtils.java | 43 + .../halo/app/infra/utils/FileNameUtils.java | 44 + .../run/halo/app/infra/utils/FileUtils.java | 337 + .../run/halo/app/infra/utils/HaloUtils.java | 73 + .../halo/app/infra/utils/IpAddressUtils.java | 71 + .../halo/app/infra/utils/VersionUtils.java | 49 + .../infra/utils/YamlUnstructuredLoader.java | 50 + .../run/halo/app/metrics/CounterService.java | 15 + .../halo/app/metrics/CounterServiceImpl.java | 33 + .../java/run/halo/app/metrics/MeterUtils.java | 124 + .../halo/app/metrics/PostStatsUpdater.java | 90 + .../app/metrics/ReplyEventReconciler.java | 163 + .../app/metrics/VisitedEventReconciler.java | 174 + .../app/metrics/VotedEventReconciler.java | 141 + .../run/halo/app/migration/BackupFile.java | 34 + .../halo/app/migration/BackupReconciler.java | 133 + .../halo/app/migration/MigrationEndpoint.java | 234 + .../halo/app/migration/MigrationService.java | 40 + .../migration/impl/MigrationServiceImpl.java | 318 + .../DefaultNotificationCenter.java | 292 + .../DefaultNotificationReasonEmitter.java | 89 + .../DefaultNotificationSender.java | 150 + .../DefaultNotificationService.java | 68 + .../DefaultNotificationTemplateRender.java | 66 + .../DefaultNotifierConfigStore.java | 93 + .../DefaultSubscriberEmailResolver.java | 57 + .../halo/app/notification/EmailNotifier.java | 123 + .../app/notification/EmailSenderHelper.java | 47 + .../notification/EmailSenderHelperImpl.java | 68 + .../halo/app/notification/LanguageUtils.java | 48 + .../app/notification/NotificationSender.java | 21 + .../NotificationTemplateRender.java | 15 + .../app/notification/NotificationTrigger.java | 57 + .../app/notification/NotifierConfigStore.java | 22 + .../ReasonNotificationTemplateSelector.java | 31 + ...easonNotificationTemplateSelectorImpl.java | 75 + .../app/notification/RecipientResolver.java | 9 + .../notification/RecipientResolverImpl.java | 116 + .../run/halo/app/notification/Subscriber.java | 28 + .../notification/SubscriberEmailResolver.java | 24 + .../notification/SubscriptionMigration.java | 155 + .../app/notification/SubscriptionService.java | 26 + .../notification/SubscriptionServiceImpl.java | 103 + .../UserNotificationPreference.java | 44 + .../UserNotificationPreferenceService.java | 17 + ...UserNotificationPreferenceServiceImpl.java | 69 + .../notification/UserNotificationQuery.java | 42 + .../notification/UserNotificationService.java | 42 + .../endpoint/ConsoleNotifierEndpoint.java | 89 + .../EmailConfigValidationEndpoint.java | 116 + .../endpoint/SubscriptionRouter.java | 95 + .../endpoint/UserNotificationEndpoint.java | 165 + .../UserNotificationPreferencesEndpoint.java | 230 + .../endpoint/UserNotifierEndpoint.java | 95 + .../app/plugin/AggregatedRouterFunction.java | 38 + .../DefaultDevelopmentPluginRepository.java | 52 + ...efaultPluginApplicationContextFactory.java | 380 + .../halo/app/plugin/DefaultPluginGetter.java | 29 + .../DefaultPluginRouterFunctionRegistry.java | 62 + .../plugin/DefaultReactiveSettingFetcher.java | 213 + .../app/plugin/DefaultSettingFetcher.java | 46 + .../run/halo/app/plugin/DevPluginLoader.java | 43 + .../halo/app/plugin/HaloPluginManager.java | 207 + .../app/plugin/HaloSharedEventDelegator.java | 40 + .../app/plugin/PluginApplicationContext.java | 137 + .../PluginApplicationContextFactory.java | 15 + .../app/plugin/PluginAutoConfiguration.java | 85 + .../plugin/PluginBeforeStopSyncListener.java | 73 + .../java/run/halo/app/plugin/PluginConst.java | 29 + .../app/plugin/PluginControllerManager.java | 49 + .../plugin/PluginDevelopmentInitializer.java | 66 + .../plugin/PluginExtensionLoaderUtils.java | 60 + .../run/halo/app/plugin/PluginGetter.java | 24 + .../app/plugin/PluginNotFoundException.java | 19 + .../run/halo/app/plugin/PluginProperties.java | 63 + .../PluginRequestMappingHandlerMapping.java | 137 + .../plugin/PluginRouterFunctionRegistry.java | 12 + .../plugin/PluginSharedEventDelegator.java | 44 + .../app/plugin/PluginStartedListener.java | 85 + .../halo/app/plugin/PluginStartingError.java | 22 + .../java/run/halo/app/plugin/PluginUtils.java | 35 + .../app/plugin/PluginsRootGetterImpl.java | 28 + .../plugin/PropertyPluginStatusProvider.java | 60 + .../SharedApplicationContextFactory.java | 77 + .../app/plugin/SharedEventDispatcher.java | 50 + .../app/plugin/SpringComponentsFinder.java | 86 + .../app/plugin/SpringExtensionFactory.java | 133 + .../run/halo/app/plugin/SpringPlugin.java | 103 + .../halo/app/plugin/SpringPluginFactory.java | 42 + .../halo/app/plugin/SpringPluginManager.java | 22 + .../plugin/YamlPluginDescriptorFinder.java | 77 + .../run/halo/app/plugin/YamlPluginFinder.java | 128 + .../event/HaloPluginBeforeStopEvent.java | 21 + .../plugin/event/HaloPluginStartedEvent.java | 23 + .../plugin/event/HaloPluginStoppedEvent.java | 29 + .../event/SpringPluginStartedEvent.java | 18 + .../event/SpringPluginStartingEvent.java | 18 + .../event/SpringPluginStoppedEvent.java | 18 + .../event/SpringPluginStoppingEvent.java | 18 + .../DefaultExtensionGetter.java | 102 + .../extensionpoint/ExtensionDefinition.java | 47 + .../ExtensionPointDefinition.java | 81 + .../plugin/resources/BundleResourceUtils.java | 56 + .../ReverseProxyRouterFunctionFactory.java | 183 + .../ReverseProxyRouterFunctionRegistry.java | 86 + .../search/HaloDocumentEventsListener.java | 70 + .../run/halo/app/search/IndexEndpoint.java | 95 + .../run/halo/app/search/IndicesEndpoint.java | 59 + .../SearchEngineUnavailableException.java | 16 + .../halo/app/search/SearchServiceImpl.java | 36 + .../app/search/extension/SearchEngine.java | 47 + .../app/search/lucene/LuceneSearchEngine.java | 440 + .../app/search/post/PostEventsListener.java | 71 + .../post/PostHaloDocumentsProvider.java | 81 + .../app/security/AuthProviderService.java | 20 + .../app/security/AuthProviderServiceImpl.java | 183 + .../run/halo/app/security/CorsConfigurer.java | 33 + .../run/halo/app/security/CsrfConfigurer.java | 31 + ...DefaultServerAuthenticationEntryPoint.java | 31 + .../DefaultSuperAdminInitializer.java | 81 + .../security/DefaultUserDetailService.java | 82 + .../security/ExceptionSecurityConfigurer.java | 22 + .../halo/app/security/HaloUserDetails.java | 21 + .../InitializeRedirectionWebFilter.java | 62 + .../halo/app/security/ListedAuthProvider.java | 45 + .../security/LoginHandlerEnhancerImpl.java | 39 + .../security/LogoutSecurityConfigurer.java | 77 + .../SecurityWebFiltersConfigurer.java | 80 + .../app/security/SuperAdminInitializer.java | 32 + .../authentication/CryptoService.java | 37 + .../authentication/SecurityConfigurer.java | 9 + .../authentication/WebExchangeMatchers.java | 16 + .../authentication/impl/RsaKeyService.java | 162 + .../jwt/JwtAuthenticationConfigurer.java | 70 + .../jwt/LoginAuthenticationConverter.java | 37 + .../LoginAuthenticationFailureHandler.java | 31 + .../jwt/LoginAuthenticationManager.java | 19 + .../LoginAuthenticationSuccessHandler.java | 62 + .../authentication/login/HaloUser.java | 120 + .../InvalidEncryptedMessageException.java | 17 + .../login/LoginAuthenticationConverter.java | 71 + .../login/LoginSecurityConfigurer.java | 95 + .../login/PublicKeyRouteBuilder.java | 47 + ...sswordDelegatingAuthenticationManager.java | 53 + .../login/UsernamePasswordHandler.java | 114 + .../pat/PatAuthenticationManager.java | 152 + .../authentication/pat/PatEndpoint.java | 100 + .../pat/PatServerWebExchangeMatcher.java | 30 + .../pat/UserScopedPatHandler.java | 20 + .../pat/impl/UserScopedPatHandlerImpl.java | 259 + .../CookieSignatureKeyResolver.java | 8 + .../DefaultCookieSignatureKeyResolver.java | 17 + .../PersistentRememberMeTokenRepository.java | 18 + ...rsistentRememberMeTokenRepositoryImpl.java | 103 + ...ersistentTokenBasedRememberMeServices.java | 190 + .../RememberMeAuthenticationManager.java | 56 + .../rememberme/RememberMeConfigurer.java | 41 + .../rememberme/RememberMeCookieResolver.java | 20 + .../RememberMeCookieResolverImpl.java | 54 + .../rememberme/RememberMeServices.java | 14 + .../rememberme/RememberMeTokenRevoker.java | 30 + .../rememberme/RememberTokenCleaner.java | 58 + .../TokenBasedRememberMeServices.java | 395 + .../DefaultTwoFactorAuthResponseHandler.java | 56 + .../twofactor/TwoFactorAuthEndpoint.java | 283 + .../TwoFactorAuthRequiredException.java | 17 + .../TwoFactorAuthResponseHandler.java | 10 + .../TwoFactorAuthSecurityConfigurer.java | 47 + .../twofactor/TwoFactorAuthSettings.java | 22 + .../twofactor/TwoFactorAuthentication.java | 49 + .../TwoFactorAuthorizationManager.java | 36 + .../twofactor/TwoFactorUtils.java | 23 + .../totp/DefaultTotpAuthService.java | 107 + .../twofactor/totp/TotpAuthService.java | 13 + .../totp/TotpAuthenticationFilter.java | 137 + .../totp/TotpAuthenticationToken.java | 33 + .../security/authorization/Attributes.java | 72 + .../authorization/AttributesRecord.java | 80 + .../authorization/AuthorityUtils.java | 64 + .../AuthorizationRuleResolver.java | 13 + .../authorization/AuthorizingVisitor.java | 52 + .../authorization/DefaultRuleResolver.java | 74 + .../authorization/PolicyRuleList.java | 35 + .../authorization/RbacRequestEvaluation.java | 161 + .../security/authorization/RequestInfo.java | 61 + .../RequestInfoAuthorizationManager.java | 46 + .../authorization/RequestInfoFactory.java | 233 + .../authorization/RuleAccumulator.java | 11 + .../security/device/DeviceCookieResolver.java | 19 + .../device/DeviceCookieResolverImpl.java | 47 + .../app/security/device/DeviceEndpoint.java | 163 + .../app/security/device/DeviceReconciler.java | 72 + .../security/device/DeviceServiceImpl.java | 255 + .../security/device/DeviceSessionFilter.java | 23 + .../security/device/NewDeviceLoginEvent.java | 15 + .../device/NewDeviceLoginListener.java | 74 + .../jackson2/HaloSecurityJackson2Module.java | 28 + .../app/security/jackson2/HaloUserMixin.java | 20 + .../TwoFactorAuthenticationMixin.java | 25 + ...emoryReactiveIndexedSessionRepository.java | 144 + .../ReactiveIndexedSessionRepository.java | 9 + .../session/SessionInvalidationListener.java | 38 + .../halo/app/theme/DefaultTemplateEnum.java | 44 + .../theme/DefaultTemplateNameResolver.java | 56 + .../app/theme/DefaultViewNameResolver.java | 58 + .../run/halo/app/theme/HaloViewResolver.java | 104 + .../app/theme/ReactivePropertyAccessor.java | 118 + ...activeSpelVariableExpressionEvaluator.java | 44 + .../theme/SiteSettingVariablesAcquirer.java | 35 + .../halo/app/theme/TemplateEngineManager.java | 170 + .../java/run/halo/app/theme/ThemeContext.java | 24 + .../ThemeContextBasedVariablesAcquirer.java | 36 + .../run/halo/app/theme/ThemeLinkBuilder.java | 71 + .../app/theme/ThemeLocaleContextResolver.java | 92 + .../run/halo/app/theme/ThemeResolver.java | 73 + .../ViewContextBasedVariablesAcquirer.java | 11 + .../run/halo/app/theme/ViewNameResolver.java | 20 + .../app/theme/config/ThemeConfiguration.java | 40 + .../theme/config/ThemeWebFluxConfigurer.java | 96 + .../dialect/CommentElementTagProcessor.java | 50 + .../CommentEnabledVariableProcessor.java | 91 + .../dialect/ContentTemplateHeadProcessor.java | 118 + .../dialect/DefaultFaviconHeadProcessor.java | 46 + .../dialect/DefaultLinkExpressionFactory.java | 66 + .../dialect/DuplicateMetaTagProcessor.java | 90 + .../theme/dialect/GeneratorMetaProcessor.java | 43 + .../dialect/GlobalHeadInjectionProcessor.java | 93 + .../app/theme/dialect/GlobalSeoProcessor.java | 60 + .../dialect/HaloExpressionObjectFactory.java | 40 + .../theme/dialect/HaloProcessorDialect.java | 46 + .../dialect/HaloSpringSecurityDialect.java | 53 + .../theme/dialect/HaloTrackerProcessor.java | 63 + ...dePropertyAccessorBoundariesProcessor.java | 49 + .../dialect/LinkExpressionObjectDialect.java | 27 + .../TemplateFooterElementTagProcessor.java | 85 + .../dialect/TemplateGlobalHeadProcessor.java | 63 + .../theme/dialect/expression/Annotations.java | 65 + .../theme/endpoint/CategoryQueryEndpoint.java | 139 + .../theme/endpoint/CommentFinderEndpoint.java | 408 + .../app/theme/endpoint/MenuQueryEndpoint.java | 92 + .../theme/endpoint/PluginQueryEndpoint.java | 62 + .../app/theme/endpoint/PostPublicQuery.java | 22 + .../app/theme/endpoint/PostQueryEndpoint.java | 119 + .../app/theme/endpoint/PublicApiUtils.java | 70 + .../theme/endpoint/PublicUserEndpoint.java | 285 + .../endpoint/SinglePageQueryEndpoint.java | 108 + .../endpoint/SiteStatsQueryEndpoint.java | 57 + .../app/theme/endpoint/TagQueryEndpoint.java | 144 + ...aultThemeTemplateAvailabilityProvider.java | 25 + .../app/theme/engine/HaloTemplateEngine.java | 53 + .../PluginClassloaderTemplateResolver.java | 105 + .../ThemeTemplateAvailabilityProvider.java | 9 + .../app/theme/finders/CategoryFinder.java | 35 + .../halo/app/theme/finders/CommentFinder.java | 26 + .../finders/CommentPublicQueryService.java | 32 + .../app/theme/finders/ContributorFinder.java | 17 + .../theme/finders/DefaultFinderRegistry.java | 110 + .../app/theme/finders/FinderRegistry.java | 20 + .../halo/app/theme/finders/MenuFinder.java | 17 + .../halo/app/theme/finders/PluginFinder.java | 14 + .../halo/app/theme/finders/PostFinder.java | 54 + .../theme/finders/PostPublicQueryService.java | 54 + .../finders/SinglePageConversionService.java | 55 + .../app/theme/finders/SinglePageFinder.java | 29 + .../app/theme/finders/SiteStatsFinder.java | 15 + .../run/halo/app/theme/finders/TagFinder.java | 34 + .../halo/app/theme/finders/ThemeFinder.java | 17 + .../finders/impl/CategoryFinderImpl.java | 291 + .../theme/finders/impl/CommentFinderImpl.java | 48 + .../impl/CommentPublicQueryServiceImpl.java | 318 + .../finders/impl/ContributorFinderImpl.java | 38 + .../theme/finders/impl/MenuFinderImpl.java | 156 + .../theme/finders/impl/PluginFinderImpl.java | 46 + .../theme/finders/impl/PostFinderImpl.java | 283 + .../impl/PostPublicQueryServiceImpl.java | 191 + .../impl/SinglePageConversionServiceImpl.java | 153 + .../finders/impl/SinglePageFinderImpl.java | 126 + .../finders/impl/SiteStatsFinderImpl.java | 71 + .../app/theme/finders/impl/TagFinderImpl.java | 112 + .../theme/finders/impl/ThemeFinderImpl.java | 66 + .../app/theme/finders/vo/CategoryTreeVo.java | 72 + .../halo/app/theme/finders/vo/CategoryVo.java | 42 + .../app/theme/finders/vo/CommentStatsVo.java | 22 + .../halo/app/theme/finders/vo/CommentVo.java | 50 + .../theme/finders/vo/CommentWithReplyVo.java | 31 + .../halo/app/theme/finders/vo/ContentVo.java | 32 + .../app/theme/finders/vo/ContributorVo.java | 49 + .../app/theme/finders/vo/ListedPostVo.java | 59 + .../theme/finders/vo/ListedSinglePageVo.java | 53 + .../halo/app/theme/finders/vo/MenuItemVo.java | 62 + .../run/halo/app/theme/finders/vo/MenuVo.java | 59 + .../theme/finders/vo/NavigationPostVo.java | 38 + .../app/theme/finders/vo/PostArchiveVo.java | 20 + .../finders/vo/PostArchiveYearMonthVo.java | 20 + .../run/halo/app/theme/finders/vo/PostVo.java | 62 + .../halo/app/theme/finders/vo/ReplyVo.java | 51 + .../app/theme/finders/vo/SinglePageVo.java | 43 + .../app/theme/finders/vo/SiteSettingVo.java | 132 + .../app/theme/finders/vo/SiteStatsVo.java | 35 + .../halo/app/theme/finders/vo/StatsVo.java | 29 + .../run/halo/app/theme/finders/vo/TagVo.java | 39 + .../halo/app/theme/finders/vo/ThemeVo.java | 42 + .../run/halo/app/theme/finders/vo/UserVo.java | 40 + .../finders/vo/VisualizableTreeNode.java | 37 + .../message/ThemeMessageResolutionUtils.java | 261 + .../theme/message/ThemeMessageResolver.java | 37 + .../DefaultQueryPostPredicateResolver.java | 73 + .../ExtensionPermalinkPatternUpdater.java | 84 + .../halo/app/theme/router/ModelMapUtils.java | 56 + .../router/PermalinkRuleChangedEvent.java | 30 + .../halo/app/theme/router/PermalinkWatch.java | 19 + .../theme/router/PreviewRouterFunction.java | 174 + .../ReactiveQueryPostPredicateResolver.java | 19 + .../app/theme/router/SinglePageRoute.java | 172 + .../router/ThemeCompositeRouterFunction.java | 137 + .../TitleVisibilityIdentifyCalculator.java | 34 + .../router/factories/ArchiveRouteFactory.java | 123 + .../factories/AuthorPostsRouteFactory.java | 99 + .../factories/CategoriesRouteFactory.java | 43 + .../factories/CategoryPostRouteFactory.java | 125 + .../router/factories/IndexRouteFactory.java | 81 + .../router/factories/PostRouteFactory.java | 258 + .../theme/router/factories/RouteFactory.java | 33 + .../router/factories/TagPostRouteFactory.java | 116 + .../router/factories/TagsRouteFactory.java | 47 + .../AdditionalWebFilterChainProxy.java | 35 + .../META-INF/spring-devtools.properties | 2 + .../main/resources/META-INF/spring.factories | 1 + .../src/main/resources/application-dev.yaml | 47 + .../src/main/resources/application-doc.yaml | 17 + .../main/resources/application-mariadb.yaml | 9 + .../src/main/resources/application-mysql.yaml | 9 + .../resources/application-postgresql.yaml | 9 + .../src/main/resources/application-win.yaml | 5 + .../src/main/resources/application.yaml | 99 + application/src/main/resources/banner.txt | 8 + .../resources/config/i18n/messages.properties | 83 + .../config/i18n/messages_zh.properties | 55 + .../extensions/attachment-local-policy.yaml | 75 + .../resources/extensions/authproviders.yaml | 16 + .../extensions/extension-definitions.yaml | 49 + .../extensionpoint-definitions.yaml | 99 + .../extensions/notification-templates.yaml | 189 + .../resources/extensions/notification.yaml | 231 + .../extensions/role-template-actuator.yaml | 14 + .../extensions/role-template-anonymous.yaml | 48 + .../extensions/role-template-attachment.yaml | 43 + .../role-template-authenticated.yaml | 155 + .../extensions/role-template-cache.yaml | 16 + .../extensions/role-template-category.yaml | 30 + .../extensions/role-template-comment.yaml | 38 + .../extensions/role-template-configmap.yaml | 32 + .../extensions/role-template-menu.yaml | 32 + .../extensions/role-template-migration.yaml | 24 + .../role-template-notification.yaml | 21 + .../extensions/role-template-permissions.yaml | 32 + .../extensions/role-template-plugin.yaml | 45 + .../extensions/role-template-post.yaml | 41 + .../extensions/role-template-role.yaml | 33 + .../extensions/role-template-setting.yaml | 38 + .../extensions/role-template-singlepage.yaml | 39 + .../extensions/role-template-snapshot.yaml | 25 + .../extensions/role-template-tag.yaml | 28 + .../extensions/role-template-theme.yaml | 42 + .../extensions/role-template-uc-content.yaml | 116 + .../extensions/role-template-user.yaml | 54 + .../extensions/searchengine-lucene.yaml | 11 + .../system-configurable-configmap.yaml | 52 + .../extensions/system-default-role.yaml | 28 + .../resources/extensions/system-setting.yaml | 195 + .../src/main/resources/extensions/user.yaml | 28 + application/src/main/resources/schema-h2.sql | 7 + .../src/main/resources/schema-mariadb.sql | 7 + .../src/main/resources/schema-mysql.sql | 7 + .../src/main/resources/schema-postgresql.sql | 7 + .../src/main/resources/static/halo-tracker.js | 1 + .../static/images/extension-points/lucene.png | Bin 0 -> 10005 bytes .../main/resources/templates/error/error.html | 130 + .../src/main/resources/themes/theme-earth.zip | Bin 0 -> 361683 bytes .../java/run/halo/app/ApplicationTests.java | 13 + .../run/halo/app/PathPrefixPredicateTest.java | 37 + .../java/run/halo/app/XForwardHeaderTest.java | 55 + .../java/run/halo/app/config/CorsTest.java | 93 + .../config/ExtensionConfigurationTest.java | 268 + .../app/config/HaloConfigurationTest.java | 44 + .../halo/app/config/SecurityConfigTest.java | 39 + .../run/halo/app/config/ServerCodecTest.java | 94 + .../halo/app/config/WebFluxConfigTest.java | 157 + ...WebSocketServerWebExchangeMatcherTest.java | 39 + .../halo/app/console/WebSocketUtilsTest.java | 51 + .../content/CategoryPostCountUpdaterTest.java | 227 + .../halo/app/content/ContentRequestTest.java | 127 + .../app/content/PostIntegrationTests.java | 144 + .../java/run/halo/app/content/TestPost.java | 92 + .../comment/CommentEmailOwnerTest.java | 52 + ...ommentNotificationReasonPublisherTest.java | 470 + .../content/comment/CommentRequestTest.java | 86 + .../CommentServiceImplIntegrationTest.java | 159 + .../comment/CommentServiceImplTest.java | 434 + .../comment/PostCommentSubjectTest.java | 67 + ...plyNotificationSubscriptionHelperTest.java | 136 + .../ReplyServiceImplIntegrationTest.java | 152 + .../comment/SinglePageCommentSubjectTest.java | 75 + .../CategoryPermalinkPolicyTest.java | 64 + .../permalinks/PostPermalinkPolicyTest.java | 115 + .../permalinks/TagPermalinkPolicyTest.java | 67 + .../endpoint/WebSocketHandlerMappingTest.java | 55 + .../run/halo/app/core/extension/PostTest.java | 32 + .../app/core/extension/RoleBindingTest.java | 60 + .../halo/app/core/extension/SettingTest.java | 103 + .../run/halo/app/core/extension/TestRole.java | 60 + .../halo/app/core/extension/ThemeTest.java | 152 + .../endpoint/AttachmentEndpointTest.java | 266 + .../endpoint/EmailVerificationCodeTest.java | 122 + .../endpoint/PluginEndpointTest.java | 506 + .../extension/endpoint/PostEndpointTest.java | 182 + .../endpoint/SinglePageEndpointTest.java | 92 + .../SystemInitializationEndpointTest.java | 89 + .../extension/endpoint/TagEndpointTest.java | 104 + .../endpoint/UserEndpointIntegrationTest.java | 125 + .../extension/endpoint/UserEndpointTest.java | 514 + .../reconciler/CommentReconcilerTest.java | 114 + .../reconciler/MenuItemReconcilerTest.java | 218 + .../reconciler/PluginReconcilerTest.java | 565 + .../reconciler/PostReconcilerTest.java | 236 + .../ReverseProxyReconcilerTest.java | 68 + .../reconciler/SinglePageReconcilerTest.java | 254 + .../SystemSettingReconcilerTest.java | 187 + .../reconciler/TagReconcilerTest.java | 89 + .../reconciler/ThemeReconcilerTest.java | 335 + .../reconciler/UserReconcilerTest.java | 113 + .../service/DefaultRoleServiceTest.java | 331 + .../service/UserServiceImplTest.java | 405 + .../EmailPasswordRecoveryServiceImplTest.java | 83 + .../EmailVerificationServiceImplTest.java | 86 + .../service/impl/PluginServiceImplTest.java | 509 + .../extension/theme/SettingUtilsTest.java | 137 + .../extension/theme/ThemeEndpointTest.java | 363 + .../extension/theme/ThemeServiceImplTest.java | 463 + .../app/extension/AbstractExtensionTest.java | 52 + .../halo/app/extension/ComparatorsTest.java | 97 + .../run/halo/app/extension/ConfigMapTest.java | 103 + .../extension/DefaultSchemeManagerTest.java | 140 + .../DefaultSchemeWatcherManagerTest.java | 59 + .../app/extension/ExtensionOperatorTest.java | 41 + .../app/extension/ExtensionStoreUtilTest.java | 47 + .../run/halo/app/extension/FakeExtension.java | 31 + .../app/extension/GroupVersionKindTest.java | 87 + .../halo/app/extension/GroupVersionTest.java | 29 + .../extension/JsonExtensionConverterTest.java | 104 + .../halo/app/extension/JsonExtensionTest.java | 80 + .../halo/app/extension/ListResultTest.java | 78 + .../app/extension/MetadataOperatorTest.java | 91 + .../ReactiveExtensionClientTest.java | 734 + .../java/run/halo/app/extension/RefTest.java | 25 + .../run/halo/app/extension/SchemeTest.java | 114 + .../halo/app/extension/UnstructuredTest.java | 152 + .../app/extension/gc/GcReconcilerTest.java | 127 + .../app/extension/gc/GcSynchronizerTest.java | 52 + .../halo/app/extension/gc/GcWatcherTest.java | 92 + .../index/DefaultExtensionIteratorTest.java | 85 + .../index/DefaultIndexSpecsTest.java | 75 + .../extension/index/DefaultIndexerTest.java | 277 + .../extension/index/IndexDescriptorTest.java | 40 + .../index/IndexEntryContainerTest.java | 56 + .../extension/index/IndexEntryImplTest.java | 150 + .../index/IndexEntryOperatorImplTest.java | 177 + .../index/IndexSpecRegistryImplTest.java | 73 + .../index/IndexedQueryEngineImplTest.java | 194 + .../index/IndexerFactoryImplTest.java | 93 + .../index/LabelIndexSpecUtilsTest.java | 48 + .../index/PrimaryKeySpecUtilsTest.java | 46 + .../app/extension/index/query/AndTest.java | 128 + .../index/query/IndexViewDataSet.java | 340 + .../index/query/QueryFactoryTest.java | 310 + .../index/query/QueryIndexViewImplTest.java | 301 + .../ExtensionCompositeRouterFunctionTest.java | 96 + .../router/ExtensionCreateHandlerTest.java | 115 + .../router/ExtensionDeleteHandlerTest.java | 110 + .../router/ExtensionGetHandlerTest.java | 76 + .../router/ExtensionListHandlerTest.java | 69 + .../ExtensionRouterFunctionFactoryTest.java | 181 + .../router/ExtensionUpdateHandlerTest.java | 129 + .../router/PathPatternGeneratorTest.java | 36 + .../ReactiveExtensionStoreClientImplTest.java | 102 + .../run/halo/app/infra/ConditionListTest.java | 237 + .../infra/DefaultBackupRootGetterTest.java | 33 + .../DefaultExternalLinkProcessorTest.java | 49 + .../DefaultSystemVersionSupplierTest.java | 65 + .../ExtensionResourceInitializerTest.java | 173 + ...HaloPropertiesExternalUrlSupplierTest.java | 119 + .../infra/InitializationStateGetterTest.java | 84 + ...iveExtensionPaginatedOperatorImplTest.java | 107 + ...temConfigurableEnvironmentFetcherTest.java | 168 + .../run/halo/app/infra/SystemSettingTest.java | 60 + .../run/halo/app/infra/SystemStateTest.java | 51 + .../halo/app/infra/ValidationUtilsTest.java | 92 + .../exception/handlers/I18nExceptionTest.java | 209 + .../halo/app/infra/utils/Base62UtilsTest.java | 47 + .../app/infra/utils/FileNameUtilsTest.java | 78 + .../infra/utils/FileTypeDetectUtilsTest.java | 45 + .../halo/app/infra/utils/FileUtilsTest.java | 118 + .../app/infra/utils/IpAddressUtilsTest.java | 64 + .../app/infra/utils/VersionUtilsTest.java | 51 + .../utils/YamlUnstructuredLoaderTest.java | 116 + .../run/halo/app/metrics/MeterUtilsTest.java | 128 + .../app/migration/BackupReconcilerTest.java | 250 + .../impl/MigrationServiceImplTest.java | 294 + .../DefaultNotificationCenterTest.java | 325 + .../DefaultNotificationReasonEmitterTest.java | 200 + .../DefaultNotificationSenderTest.java | 32 + ...DefaultNotificationTemplateRenderTest.java | 104 + .../DefaultNotifierConfigStoreTest.java | 185 + .../DefaultSubscriberEmailResolverTest.java | 70 + .../app/notification/LanguageUtilsTest.java | 47 + .../notification/NotificationContextTest.java | 66 + .../notification/NotificationTriggerTest.java | 58 + ...nNotificationTemplateSelectorImplTest.java | 178 + .../app/notification/ReasonPayloadTest.java | 45 + .../RecipientResolverImplTest.java | 180 + .../SubscriptionServiceImplTest.java | 74 + .../SubscriptionServiceIntegrationTest.java | 171 + .../app/notification/UserIdentityTest.java | 21 + ...NotificationPreferenceServiceImplTest.java | 139 + .../UserNotificationPreferenceTest.java | 43 + .../endpoint/SubscriptionRouterTest.java | 46 + ...erNotificationPreferencesEndpointTest.java | 71 + ...efaultDevelopmentPluginRepositoryTest.java | 43 + ...ltPluginApplicationContextFactoryTest.java | 48 + ...faultPluginRouterFunctionRegistryTest.java | 34 + .../app/plugin/DefaultSettingFetcherTest.java | 218 + .../app/plugin/HaloPluginManagerTest.java | 63 + .../PluginExtensionLoaderUtilsTest.java | 40 + ...luginRequestMappingHandlerMappingTest.java | 309 + .../app/plugin/PluginsRootGetterImplTest.java | 30 + .../SharedApplicationContextFactoryTest.java | 29 + .../app/plugin/SharedEventDispatcherTest.java | 108 + .../plugin/SpringComponentsFinderTest.java | 95 + .../YamlPluginDescriptorFinderTest.java | 100 + .../halo/app/plugin/YamlPluginFinderTest.java | 174 + .../DefaultExtensionGetterTest.java | 250 + .../resources/BundleResourceUtilsTest.java | 67 + ...ReverseProxyRouterFunctionFactoryTest.java | 132 + ...everseProxyRouterFunctionRegistryTest.java | 76 + .../HaloDocumentEventsListenerTest.java | 84 + .../halo/app/search/IndexEndpointTest.java | 126 + .../halo/app/search/IndicesEndpointTest.java | 52 + .../app/search/SearchServiceImplTest.java | 106 + .../LuceneSearchEngineIntegrationTest.java | 245 + .../search/lucene/LuceneSearchEngineTest.java | 185 + .../search/post/PostEventsListenerTest.java | 124 + .../post/PostHaloDocumentsProviderTest.java | 89 + .../security/AuthProviderServiceImplTest.java | 185 + ...ultServerAuthenticationEntryPointTest.java | 35 + .../DefaultUserDetailServiceTest.java | 223 + .../InitializeRedirectionWebFilterTest.java | 109 + .../run/halo/app/security/ResponseMap.java | 7 + .../security/SuperAdminInitializerTest.java | 62 + .../WebExchangeMatchersTest.java | 38 + .../impl/RsaKeyServiceTest.java | 122 + .../LoginAuthenticationConverterTest.java | 131 + .../login/PublicKeyRouteBuilderTest.java | 52 + .../security/authentication/pat/PatTest.java | 40 + ...stentTokenBasedRememberMeServicesTest.java | 163 + .../rememberme/RememberTokenCleanerTest.java | 39 + .../TokenBasedRememberMeServicesTest.java | 85 + .../twofactor/TwoFactorAuthSettingsTest.java | 41 + .../authorization/AuthorityUtilsTest.java | 47 + .../authorization/AuthorizationTest.java | 151 + .../DefaultRuleResolverTest.java | 144 + .../authorization/PolicyRuleTest.java | 89 + .../RbacRequestEvaluationTest.java | 47 + .../RequestInfoResolverTest.java | 304 + .../device/DeviceServiceImplTest.java | 24 + .../HaloSecurityJacksonModuleTest.java | 66 + ...yReactiveIndexedSessionRepositoryTest.java | 107 + .../ReactiveFinderExpressionParserTests.java | 162 + .../SiteSettingVariablesAcquirerTest.java | 62 + .../run/halo/app/theme/ThemeContextTest.java | 35 + .../halo/app/theme/ThemeLinkBuilderTest.java | 133 + .../theme/ThemeLocaleContextResolverTest.java | 193 + .../halo/app/theme/ViewNameResolverTest.java | 110 + .../CommentElementTagProcessorTest.java | 144 + .../CommentEnabledVariableProcessorTest.java | 121 + ...tTemplateHeadProcessorIntegrationTest.java | 205 + .../ContentTemplateHeadProcessorTest.java | 88 + .../DuplicateMetaTagProcessorTest.java | 51 + .../dialect/GeneratorMetaProcessorTest.java | 59 + .../dialect/HaloProcessorDialectTest.java | 442 + .../LinkExpressionObjectDialectTest.java | 25 + ...TemplateFooterElementTagProcessorTest.java | 136 + .../endpoint/CategoryQueryEndpointTest.java | 106 + .../endpoint/CommentFinderEndpointTest.java | 208 + .../theme/endpoint/MenuQueryEndpointTest.java | 122 + .../endpoint/PluginQueryEndpointTest.java | 55 + .../theme/endpoint/PostQueryEndpointTest.java | 115 + .../theme/endpoint/PublicApiUtilsTest.java | 48 + .../endpoint/PublicUserEndpointTest.java | 92 + .../endpoint/SinglePageQueryEndpointTest.java | 106 + ...ThemeTemplateAvailabilityProviderTest.java | 47 + ...PluginClassloaderTemplateResolverTest.java | 53 + .../app/theme/finders/FinderRegistryTest.java | 68 + .../finders/impl/CategoryFinderImplTest.java | 570 + .../CommentPublicQueryServiceImplTest.java | 233 + ...mentPublicQueryServiceIntegrationTest.java | 510 + .../finders/impl/MenuFinderImplTest.java | 135 + .../finders/impl/PluginFinderImplTest.java | 89 + .../finders/impl/PostFinderImplTest.java | 217 + .../impl/PostPublicQueryServiceImplTest.java | 79 + .../SinglePageConversionServiceImplTest.java | 91 + .../impl/SinglePageFinderImplTest.java | 70 + .../theme/finders/impl/TagFinderImplTest.java | 129 + .../halo/app/theme/finders/vo/UserVoTest.java | 85 + .../ThemeMessageResolutionUtilsTest.java | 59 + .../ThemeMessageResolverIntegrationTest.java | 157 + .../run/halo/app/theme/router/EmptyView.java | 24 + .../app/theme/router/PageUrlUtilsTest.java | 63 + .../router/PreviewRouterFunctionTest.java | 175 + ...eactiveQueryPostPredicateResolverTest.java | 87 + .../app/theme/router/SinglePageRouteTest.java | 257 + .../factories/ArchiveRouteFactoryTest.java | 66 + .../AuthorPostsRouteFactoryTest.java | 43 + .../factories/CategoriesRouteFactoryTest.java | 41 + .../factories/IndexRouteFactoryTest.java | 42 + .../factories/PostRouteFactoryTest.java | 113 + .../router/factories/RouteFactoryTest.java | 60 + .../factories/RouteFactoryTestSuite.java | 66 + .../factories/TagPostRouteFactoryTest.java | 72 + application/src/test/resources/apiToken.salt | 1 + application/src/test/resources/app.key | 28 + application/src/test/resources/app.pub | 9 + .../src/test/resources/application.yaml | 40 + .../backup-for-restoration/extensions.data | 1 + .../backup-for-restoration/workdir/fake-file | 1 + .../categories/independent-post-count.json | 422 + .../resources/config/i18n/messages.properties | 9 + .../config/i18n/messages_zh.properties | 3 + .../test/resources/console/assets/fake.txt | 1 + .../src/test/resources/console/index.html | 1 + .../test/resources/folder-to-zip/examplefile | 1 + .../plugin-0.0.1/extensions/reverseProxy.yaml | 13 + .../plugin/plugin-0.0.1/extensions/roles.yaml | 13 + .../plugin-0.0.1/extensions/setting.yaml | 6 + .../plugin/plugin-0.0.1/extensions/test.yml | 13 + .../resources/plugin/plugin-0.0.1/plugin.yaml | 18 + .../resources/plugin/plugin-0.0.2/plugin.yaml | 16 + .../META-INF/plugin-components.idx | 2 + .../plugin-for-reverseproxy/static/test.txt | 1 + .../src/test/resources/plugin/plugin.yaml | 18 + .../resources/presets/plugins/fake-plugin.jar | Bin 0 -> 698 bytes .../themes/default/i18n/default.properties | 1 + .../themes/default/i18n/en.properties | 1 + .../themes/default/templates/index.html | 12 + .../themes/default/templates/timezone.html | 1 + .../test/resources/themes/default/theme.yaml | 15 + .../i18n/default.properties | 1 + .../i18n/en.properties | 1 + .../templates/index.html | 12 + .../templates/timezone.html | 1 + .../themes/other/i18n/default.properties | 1 + .../resources/themes/other/i18n/en.properties | 1 + .../themes/other/templates/index.html | 10 + .../test/resources/themes/other/theme.yaml | 15 + .../src/test/resources/themes/test-theme.zip | Bin 0 -> 1052 bytes build.gradle | 10 + buildSrc/build.gradle | 3 + buildSrc/src/main/groovy/halo.publish.gradle | 56 + config/checkstyle/checkstyle.xml | 365 + docs/authentication/README.md | 228 + docs/backup-and-restore.md | 240 + docs/cache/page.md | 33 + docs/developer-guide/custom-endpoint.md | 50 + .../plugin-configuration-properties.md | 78 + docs/email-verification/README.md | 129 + docs/extension-points/authentication.md | 118 + docs/extension-points/content.md | 107 + docs/extension-points/search-engine.md | 64 + docs/full-text-search/README.md | 356 + docs/full-text-search/algolia.png | Bin 0 -> 35691 bytes docs/full-text-search/meilisearch.jpg | Bin 0 -> 91333 bytes docs/index/README.md | 316 + docs/notification/README.md | 366 + docs/notification/image-knhw.png | Bin 0 -> 69390 bytes docs/notification/notification-ui.png | Bin 0 -> 375962 bytes docs/plugin/shared-event.md | 83 + docs/plugin/websocket.md | 49 + e2e/Dockerfile | 4 + e2e/Makefile | 6 + e2e/README.md | 24 + e2e/compose-mysql.yaml | 46 + e2e/compose-postgres.yaml | 48 + e2e/compose.yaml | 21 + e2e/start.sh | 10 + e2e/testsuite.yaml | 290 + gradle.properties | 2 + gradle/wrapper/gradle-wrapper.jar | Bin 0 -> 43462 bytes gradle/wrapper/gradle-wrapper.properties | 7 + gradlew | 249 + gradlew.bat | 92 + hack/cherry_pick_pull.sh | 257 + platform/application/build.gradle | 61 + platform/plugin/build.gradle | 21 + settings.gradle | 9 + 1210 files changed, 151127 insertions(+) create mode 100644 .devcontainer/devcontainer.json create mode 100644 .dockerignore create mode 100644 .editorconfig create mode 100644 .gitattributes create mode 100644 .github/FUNDING.yml create mode 100644 .github/ISSUE_TEMPLATE/bug_report.en.yml create mode 100644 .github/ISSUE_TEMPLATE/bug_report.zh.yml create mode 100644 .github/ISSUE_TEMPLATE/config.yml create mode 100644 .github/ISSUE_TEMPLATE/feature_request.en.yml create mode 100644 .github/ISSUE_TEMPLATE/feature_request.zh.yml create mode 100644 .github/actions/docker-buildx-push/action.yaml create mode 100644 .github/actions/setup-env/action.yaml create mode 100644 .github/dependabot.yml create mode 100644 .github/pull_request_template.md create mode 100644 .github/workflows/halo.yaml create mode 100644 .gitignore create mode 100644 .gitpod.yml create mode 100644 CODE_OF_CONDUCT.md create mode 100644 CONTRIBUTING.md create mode 100644 Dockerfile create mode 100644 LICENSE create mode 100644 OWNERS create mode 100644 README.md create mode 100644 SECURITY.md create mode 100644 api-docs/openapi/v3_0/aggregated.json create mode 100644 api-docs/openapi/v3_0/apis_console.api_v1alpha1.json create mode 100644 api-docs/openapi/v3_0/apis_extension.api_v1alpha1.json create mode 100644 api-docs/openapi/v3_0/apis_public.api_v1alpha1.json create mode 100644 api-docs/openapi/v3_0/apis_uc.api_v1alpha1.json create mode 100644 api/build.gradle create mode 100644 api/src/main/java/run/halo/app/content/ContentWrapper.java create mode 100644 api/src/main/java/run/halo/app/content/ExcerptGenerator.java create mode 100644 api/src/main/java/run/halo/app/content/PatchUtils.java create mode 100644 api/src/main/java/run/halo/app/content/PostContentService.java create mode 100644 api/src/main/java/run/halo/app/content/comment/CommentSubject.java create mode 100644 api/src/main/java/run/halo/app/core/endpoint/WebSocketEndpoint.java create mode 100644 api/src/main/java/run/halo/app/core/extension/AnnotationSetting.java create mode 100644 api/src/main/java/run/halo/app/core/extension/AuthProvider.java create mode 100644 api/src/main/java/run/halo/app/core/extension/Counter.java create mode 100644 api/src/main/java/run/halo/app/core/extension/Device.java create mode 100644 api/src/main/java/run/halo/app/core/extension/Menu.java create mode 100644 api/src/main/java/run/halo/app/core/extension/MenuItem.java create mode 100644 api/src/main/java/run/halo/app/core/extension/Plugin.java create mode 100644 api/src/main/java/run/halo/app/core/extension/RememberMeToken.java create mode 100644 api/src/main/java/run/halo/app/core/extension/ReverseProxy.java create mode 100644 api/src/main/java/run/halo/app/core/extension/Role.java create mode 100644 api/src/main/java/run/halo/app/core/extension/RoleBinding.java create mode 100644 api/src/main/java/run/halo/app/core/extension/Setting.java create mode 100644 api/src/main/java/run/halo/app/core/extension/Theme.java create mode 100644 api/src/main/java/run/halo/app/core/extension/User.java create mode 100644 api/src/main/java/run/halo/app/core/extension/UserConnection.java create mode 100644 api/src/main/java/run/halo/app/core/extension/attachment/Attachment.java create mode 100644 api/src/main/java/run/halo/app/core/extension/attachment/Constant.java create mode 100644 api/src/main/java/run/halo/app/core/extension/attachment/Group.java create mode 100644 api/src/main/java/run/halo/app/core/extension/attachment/Policy.java create mode 100644 api/src/main/java/run/halo/app/core/extension/attachment/PolicyTemplate.java create mode 100644 api/src/main/java/run/halo/app/core/extension/attachment/endpoint/AttachmentHandler.java create mode 100644 api/src/main/java/run/halo/app/core/extension/attachment/endpoint/DeleteOption.java create mode 100644 api/src/main/java/run/halo/app/core/extension/attachment/endpoint/SimpleFilePart.java create mode 100644 api/src/main/java/run/halo/app/core/extension/attachment/endpoint/UploadOption.java create mode 100644 api/src/main/java/run/halo/app/core/extension/content/Category.java create mode 100644 api/src/main/java/run/halo/app/core/extension/content/Comment.java create mode 100644 api/src/main/java/run/halo/app/core/extension/content/Constant.java create mode 100644 api/src/main/java/run/halo/app/core/extension/content/Post.java create mode 100644 api/src/main/java/run/halo/app/core/extension/content/Reply.java create mode 100644 api/src/main/java/run/halo/app/core/extension/content/SinglePage.java create mode 100644 api/src/main/java/run/halo/app/core/extension/content/Snapshot.java create mode 100644 api/src/main/java/run/halo/app/core/extension/content/Tag.java create mode 100644 api/src/main/java/run/halo/app/core/extension/endpoint/CustomEndpoint.java create mode 100644 api/src/main/java/run/halo/app/core/extension/endpoint/SortResolver.java create mode 100644 api/src/main/java/run/halo/app/core/extension/notification/Notification.java create mode 100644 api/src/main/java/run/halo/app/core/extension/notification/NotificationTemplate.java create mode 100644 api/src/main/java/run/halo/app/core/extension/notification/NotifierDescriptor.java create mode 100644 api/src/main/java/run/halo/app/core/extension/notification/Reason.java create mode 100644 api/src/main/java/run/halo/app/core/extension/notification/ReasonType.java create mode 100644 api/src/main/java/run/halo/app/core/extension/notification/Subscription.java create mode 100644 api/src/main/java/run/halo/app/core/extension/service/AttachmentService.java create mode 100644 api/src/main/java/run/halo/app/event/post/PostDeletedEvent.java create mode 100644 api/src/main/java/run/halo/app/event/post/PostEvent.java create mode 100644 api/src/main/java/run/halo/app/event/post/PostPublishedEvent.java create mode 100644 api/src/main/java/run/halo/app/event/post/PostUnpublishedEvent.java create mode 100644 api/src/main/java/run/halo/app/event/post/PostUpdatedEvent.java create mode 100644 api/src/main/java/run/halo/app/event/post/PostVisibleChangedEvent.java create mode 100644 api/src/main/java/run/halo/app/extension/AbstractExtension.java create mode 100644 api/src/main/java/run/halo/app/extension/Comparators.java create mode 100644 api/src/main/java/run/halo/app/extension/ConfigMap.java create mode 100644 api/src/main/java/run/halo/app/extension/DefaultExtensionMatcher.java create mode 100644 api/src/main/java/run/halo/app/extension/Extension.java create mode 100644 api/src/main/java/run/halo/app/extension/ExtensionClient.java create mode 100644 api/src/main/java/run/halo/app/extension/ExtensionMatcher.java create mode 100644 api/src/main/java/run/halo/app/extension/ExtensionOperator.java create mode 100644 api/src/main/java/run/halo/app/extension/ExtensionUtil.java create mode 100644 api/src/main/java/run/halo/app/extension/GVK.java create mode 100644 api/src/main/java/run/halo/app/extension/GroupKind.java create mode 100644 api/src/main/java/run/halo/app/extension/GroupVersion.java create mode 100644 api/src/main/java/run/halo/app/extension/GroupVersionKind.java create mode 100644 api/src/main/java/run/halo/app/extension/JsonExtension.java create mode 100644 api/src/main/java/run/halo/app/extension/ListOptions.java create mode 100644 api/src/main/java/run/halo/app/extension/ListResult.java create mode 100644 api/src/main/java/run/halo/app/extension/Metadata.java create mode 100644 api/src/main/java/run/halo/app/extension/MetadataOperator.java create mode 100644 api/src/main/java/run/halo/app/extension/MetadataUtil.java create mode 100644 api/src/main/java/run/halo/app/extension/PageRequest.java create mode 100644 api/src/main/java/run/halo/app/extension/PageRequestImpl.java create mode 100644 api/src/main/java/run/halo/app/extension/ReactiveExtensionClient.java create mode 100644 api/src/main/java/run/halo/app/extension/Ref.java create mode 100644 api/src/main/java/run/halo/app/extension/Scheme.java create mode 100644 api/src/main/java/run/halo/app/extension/SchemeManager.java create mode 100644 api/src/main/java/run/halo/app/extension/Secret.java create mode 100644 api/src/main/java/run/halo/app/extension/Unstructured.java create mode 100644 api/src/main/java/run/halo/app/extension/Watcher.java create mode 100644 api/src/main/java/run/halo/app/extension/WatcherExtensionMatchers.java create mode 100644 api/src/main/java/run/halo/app/extension/WatcherPredicates.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/Controller.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/ControllerBuilder.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/DefaultController.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/DefaultQueue.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/ExtensionWatcher.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/Reconciler.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/RequestQueue.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/RequestSynchronizer.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/RequeueException.java create mode 100644 api/src/main/java/run/halo/app/extension/controller/Synchronizer.java create mode 100644 api/src/main/java/run/halo/app/extension/exception/ExtensionException.java create mode 100644 api/src/main/java/run/halo/app/extension/exception/SchemeNotFoundException.java create mode 100644 api/src/main/java/run/halo/app/extension/index/AbstractIndexAttribute.java create mode 100644 api/src/main/java/run/halo/app/extension/index/FunctionalIndexAttribute.java create mode 100644 api/src/main/java/run/halo/app/extension/index/FunctionalMultiValueIndexAttribute.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexAttribute.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexAttributeFactory.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexDescriptor.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexEntry.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexEntryOperator.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexEntryOperatorImpl.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexSpec.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexSpecRegistry.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexSpecs.java create mode 100644 api/src/main/java/run/halo/app/extension/index/IndexedQueryEngine.java create mode 100644 api/src/main/java/run/halo/app/extension/index/Indexer.java create mode 100644 api/src/main/java/run/halo/app/extension/index/KeyComparator.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/All.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/And.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/Between.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/EqualQuery.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/GreaterThanQuery.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/InQuery.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/IsNotNull.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/IsNull.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/LessThanQuery.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/LogicalQuery.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/Not.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/NotEqual.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/Or.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/Query.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/QueryFactory.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/QueryIndexView.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/QueryIndexViewImpl.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/SimpleQuery.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/StringContains.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/StringEndsWith.java create mode 100644 api/src/main/java/run/halo/app/extension/index/query/StringStartsWith.java create mode 100644 api/src/main/java/run/halo/app/extension/router/IListRequest.java create mode 100644 api/src/main/java/run/halo/app/extension/router/QueryParamBuildUtil.java create mode 100644 api/src/main/java/run/halo/app/extension/router/SortableRequest.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/EqualityMatcher.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/FieldCriteriaPredicateConverter.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/FieldSelector.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/FieldSelectorConverter.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/LabelCriteriaPredicateConverter.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/LabelSelector.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/LabelSelectorConverter.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/Operator.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/SelectorConverter.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/SelectorCriteria.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/SelectorMatcher.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/SelectorUtil.java create mode 100644 api/src/main/java/run/halo/app/extension/router/selector/SetMatcher.java create mode 100644 api/src/main/java/run/halo/app/infra/AnonymousUserConst.java create mode 100644 api/src/main/java/run/halo/app/infra/BackupRootGetter.java create mode 100644 api/src/main/java/run/halo/app/infra/Condition.java create mode 100644 api/src/main/java/run/halo/app/infra/ConditionList.java create mode 100644 api/src/main/java/run/halo/app/infra/ConditionStatus.java create mode 100644 api/src/main/java/run/halo/app/infra/ExternalLinkProcessor.java create mode 100644 api/src/main/java/run/halo/app/infra/ExternalUrlSupplier.java create mode 100644 api/src/main/java/run/halo/app/infra/FileCategoryMatcher.java create mode 100644 api/src/main/java/run/halo/app/infra/SystemSetting.java create mode 100644 api/src/main/java/run/halo/app/infra/SystemVersionSupplier.java create mode 100644 api/src/main/java/run/halo/app/infra/model/License.java create mode 100644 api/src/main/java/run/halo/app/infra/utils/FileTypeDetectUtils.java create mode 100644 api/src/main/java/run/halo/app/infra/utils/GenericClassUtils.java create mode 100644 api/src/main/java/run/halo/app/infra/utils/JsonParseException.java create mode 100644 api/src/main/java/run/halo/app/infra/utils/JsonUtils.java create mode 100644 api/src/main/java/run/halo/app/infra/utils/PathUtils.java create mode 100644 api/src/main/java/run/halo/app/migration/Backup.java create mode 100644 api/src/main/java/run/halo/app/migration/Constant.java create mode 100644 api/src/main/java/run/halo/app/notification/NotificationCenter.java create mode 100644 api/src/main/java/run/halo/app/notification/NotificationContext.java create mode 100644 api/src/main/java/run/halo/app/notification/NotificationReasonEmitter.java create mode 100644 api/src/main/java/run/halo/app/notification/ReactiveNotifier.java create mode 100644 api/src/main/java/run/halo/app/notification/ReasonAttributes.java create mode 100644 api/src/main/java/run/halo/app/notification/ReasonPayload.java create mode 100644 api/src/main/java/run/halo/app/notification/UserIdentity.java create mode 100644 api/src/main/java/run/halo/app/plugin/ApiVersion.java create mode 100644 api/src/main/java/run/halo/app/plugin/BasePlugin.java create mode 100644 api/src/main/java/run/halo/app/plugin/PluginConfigUpdatedEvent.java create mode 100644 api/src/main/java/run/halo/app/plugin/PluginContext.java create mode 100644 api/src/main/java/run/halo/app/plugin/PluginsRootGetter.java create mode 100644 api/src/main/java/run/halo/app/plugin/ReactiveSettingFetcher.java create mode 100644 api/src/main/java/run/halo/app/plugin/SettingFetcher.java create mode 100644 api/src/main/java/run/halo/app/plugin/SharedEvent.java create mode 100644 api/src/main/java/run/halo/app/plugin/event/PluginStartedEvent.java create mode 100644 api/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionGetter.java create mode 100644 api/src/main/java/run/halo/app/search/HaloDocument.java create mode 100644 api/src/main/java/run/halo/app/search/HaloDocumentsProvider.java create mode 100644 api/src/main/java/run/halo/app/search/SearchEngine.java create mode 100644 api/src/main/java/run/halo/app/search/SearchOption.java create mode 100644 api/src/main/java/run/halo/app/search/SearchParam.java create mode 100644 api/src/main/java/run/halo/app/search/SearchResult.java create mode 100644 api/src/main/java/run/halo/app/search/SearchService.java create mode 100644 api/src/main/java/run/halo/app/search/event/HaloDocumentAddRequestEvent.java create mode 100644 api/src/main/java/run/halo/app/search/event/HaloDocumentDeleteRequestEvent.java create mode 100644 api/src/main/java/run/halo/app/search/event/HaloDocumentRebuildRequestEvent.java create mode 100644 api/src/main/java/run/halo/app/search/post/PostDoc.java create mode 100644 api/src/main/java/run/halo/app/search/post/PostHit.java create mode 100644 api/src/main/java/run/halo/app/security/AdditionalWebFilter.java create mode 100644 api/src/main/java/run/halo/app/security/AfterSecurityWebFilter.java create mode 100644 api/src/main/java/run/halo/app/security/AnonymousAuthenticationSecurityWebFilter.java create mode 100644 api/src/main/java/run/halo/app/security/AuthenticationSecurityWebFilter.java create mode 100644 api/src/main/java/run/halo/app/security/BeforeSecurityWebFilter.java create mode 100644 api/src/main/java/run/halo/app/security/FormLoginSecurityWebFilter.java create mode 100644 api/src/main/java/run/halo/app/security/LoginHandlerEnhancer.java create mode 100644 api/src/main/java/run/halo/app/security/PersonalAccessToken.java create mode 100644 api/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordAuthenticationManager.java create mode 100644 api/src/main/java/run/halo/app/security/device/DeviceService.java create mode 100644 api/src/main/java/run/halo/app/theme/ReactivePostContentHandler.java create mode 100644 api/src/main/java/run/halo/app/theme/ReactiveSinglePageContentHandler.java create mode 100644 api/src/main/java/run/halo/app/theme/TemplateNameResolver.java create mode 100644 api/src/main/java/run/halo/app/theme/dialect/CommentWidget.java create mode 100644 api/src/main/java/run/halo/app/theme/dialect/TemplateFooterProcessor.java create mode 100644 api/src/main/java/run/halo/app/theme/dialect/TemplateHeadProcessor.java create mode 100644 api/src/main/java/run/halo/app/theme/finders/Finder.java create mode 100644 api/src/main/java/run/halo/app/theme/finders/vo/ExtensionVoOperator.java create mode 100644 api/src/main/java/run/halo/app/theme/router/ModelConst.java create mode 100644 api/src/main/java/run/halo/app/theme/router/PageUrlUtils.java create mode 100644 api/src/main/java/run/halo/app/theme/router/UrlContextListResult.java create mode 100644 api/src/test/java/run/halo/app/core/extension/content/PostTest.java create mode 100644 api/src/test/java/run/halo/app/core/extension/notification/SubscriptionTest.java create mode 100644 api/src/test/java/run/halo/app/extension/ExtensionUtilTest.java create mode 100644 api/src/test/java/run/halo/app/extension/FakeExtension.java create mode 100644 api/src/test/java/run/halo/app/extension/ListOptionsTest.java create mode 100644 api/src/test/java/run/halo/app/extension/PageRequestImplTest.java create mode 100644 api/src/test/java/run/halo/app/extension/SecretTest.java create mode 100644 api/src/test/java/run/halo/app/extension/controller/ControllerBuilderTest.java create mode 100644 api/src/test/java/run/halo/app/extension/controller/DefaultControllerTest.java create mode 100644 api/src/test/java/run/halo/app/extension/controller/DefaultDelayQueueTest.java create mode 100644 api/src/test/java/run/halo/app/extension/controller/DelayedEntryTest.java create mode 100644 api/src/test/java/run/halo/app/extension/controller/ExtensionWatcherTest.java create mode 100644 api/src/test/java/run/halo/app/extension/controller/RequestSynchronizerTest.java create mode 100644 api/src/test/java/run/halo/app/extension/index/FunctionalMultiValueIndexAttributeTest.java create mode 100644 api/src/test/java/run/halo/app/extension/index/IndexAttributeFactoryTest.java create mode 100644 api/src/test/java/run/halo/app/extension/index/IndexSpecTest.java create mode 100644 api/src/test/java/run/halo/app/extension/index/KeyComparatorTest.java create mode 100644 api/src/test/java/run/halo/app/extension/index/query/InQueryTest.java create mode 100644 api/src/test/java/run/halo/app/extension/index/query/IsNotNullTest.java create mode 100644 api/src/test/java/run/halo/app/extension/index/query/StringContainsTest.java create mode 100644 api/src/test/java/run/halo/app/extension/router/selector/FieldCriteriaPredicateConverterTest.java create mode 100644 api/src/test/java/run/halo/app/extension/router/selector/LabelCriteriaPredicateConverterTest.java create mode 100644 api/src/test/java/run/halo/app/extension/router/selector/LabelSelectorTest.java create mode 100644 api/src/test/java/run/halo/app/extension/router/selector/OperatorTest.java create mode 100644 api/src/test/java/run/halo/app/extension/router/selector/SelectorConverterTest.java create mode 100644 api/src/test/java/run/halo/app/extension/router/selector/SelectorUtilTest.java create mode 100644 api/src/test/java/run/halo/app/infra/utils/GenericClassUtilsTest.java create mode 100644 api/src/test/java/run/halo/app/infra/utils/JsonUtilsTest.java create mode 100644 api/src/test/java/run/halo/app/infra/utils/PathUtilsTest.java create mode 100644 application/build.gradle create mode 100644 application/src/main/java/run/halo/app/Application.java create mode 100644 application/src/main/java/run/halo/app/actuator/DatabaseInfoContributor.java create mode 100644 application/src/main/java/run/halo/app/actuator/GlobalInfoEndpoint.java create mode 100644 application/src/main/java/run/halo/app/actuator/RestartEndpoint.java create mode 100644 application/src/main/java/run/halo/app/config/ExtensionConfiguration.java create mode 100644 application/src/main/java/run/halo/app/config/HaloConfiguration.java create mode 100644 application/src/main/java/run/halo/app/config/SwaggerConfig.java create mode 100644 application/src/main/java/run/halo/app/config/WebFluxConfig.java create mode 100644 application/src/main/java/run/halo/app/config/WebServerSecurityConfig.java create mode 100644 application/src/main/java/run/halo/app/console/ProxyFilter.java create mode 100644 application/src/main/java/run/halo/app/console/WebSocketRequestPredicate.java create mode 100644 application/src/main/java/run/halo/app/console/WebSocketServerWebExchangeMatcher.java create mode 100644 application/src/main/java/run/halo/app/console/WebSocketUtils.java create mode 100644 application/src/main/java/run/halo/app/content/AbstractContentService.java create mode 100644 application/src/main/java/run/halo/app/content/AbstractEventReconciler.java create mode 100644 application/src/main/java/run/halo/app/content/CategoryPostCountUpdater.java create mode 100644 application/src/main/java/run/halo/app/content/CategoryService.java create mode 100644 application/src/main/java/run/halo/app/content/Content.java create mode 100644 application/src/main/java/run/halo/app/content/ContentRequest.java create mode 100644 application/src/main/java/run/halo/app/content/ContentUpdateParam.java create mode 100644 application/src/main/java/run/halo/app/content/Contributor.java create mode 100644 application/src/main/java/run/halo/app/content/ListedPost.java create mode 100644 application/src/main/java/run/halo/app/content/ListedSinglePage.java create mode 100644 application/src/main/java/run/halo/app/content/ListedSnapshotDto.java create mode 100644 application/src/main/java/run/halo/app/content/NotificationReasonConst.java create mode 100644 application/src/main/java/run/halo/app/content/PostContentServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/content/PostHideFromListStateUpdater.java create mode 100644 application/src/main/java/run/halo/app/content/PostQuery.java create mode 100644 application/src/main/java/run/halo/app/content/PostRequest.java create mode 100644 application/src/main/java/run/halo/app/content/PostService.java create mode 100644 application/src/main/java/run/halo/app/content/PostSorter.java create mode 100644 application/src/main/java/run/halo/app/content/SinglePageQuery.java create mode 100644 application/src/main/java/run/halo/app/content/SinglePageRequest.java create mode 100644 application/src/main/java/run/halo/app/content/SinglePageService.java create mode 100644 application/src/main/java/run/halo/app/content/SnapshotService.java create mode 100644 application/src/main/java/run/halo/app/content/Stats.java create mode 100644 application/src/main/java/run/halo/app/content/TagPostCountUpdater.java create mode 100644 application/src/main/java/run/halo/app/content/comment/CommentEmailOwner.java create mode 100644 application/src/main/java/run/halo/app/content/comment/CommentNotificationReasonPublisher.java create mode 100644 application/src/main/java/run/halo/app/content/comment/CommentQuery.java create mode 100644 application/src/main/java/run/halo/app/content/comment/CommentRequest.java create mode 100644 application/src/main/java/run/halo/app/content/comment/CommentService.java create mode 100644 application/src/main/java/run/halo/app/content/comment/CommentServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/content/comment/CommentStats.java create mode 100644 application/src/main/java/run/halo/app/content/comment/ListedComment.java create mode 100644 application/src/main/java/run/halo/app/content/comment/ListedReply.java create mode 100644 application/src/main/java/run/halo/app/content/comment/OwnerInfo.java create mode 100644 application/src/main/java/run/halo/app/content/comment/PostCommentSubject.java create mode 100644 application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java create mode 100644 application/src/main/java/run/halo/app/content/comment/ReplyQuery.java create mode 100644 application/src/main/java/run/halo/app/content/comment/ReplyRequest.java create mode 100644 application/src/main/java/run/halo/app/content/comment/ReplyService.java create mode 100644 application/src/main/java/run/halo/app/content/comment/ReplyServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/content/comment/SinglePageCommentSubject.java create mode 100644 application/src/main/java/run/halo/app/content/impl/CategoryServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/content/impl/PostServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/content/impl/SinglePageServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/content/impl/SnapshotServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/content/permalinks/CategoryPermalinkPolicy.java create mode 100644 application/src/main/java/run/halo/app/content/permalinks/ExtensionLocator.java create mode 100644 application/src/main/java/run/halo/app/content/permalinks/PermalinkPolicy.java create mode 100644 application/src/main/java/run/halo/app/content/permalinks/PostPermalinkPolicy.java create mode 100644 application/src/main/java/run/halo/app/content/permalinks/TagPermalinkPolicy.java create mode 100644 application/src/main/java/run/halo/app/core/endpoint/WebSocketEndpointManager.java create mode 100644 application/src/main/java/run/halo/app/core/endpoint/WebSocketHandlerMapping.java create mode 100644 application/src/main/java/run/halo/app/core/extension/attachment/endpoint/AttachmentEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/attachment/endpoint/LocalAttachmentUploadHandler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/AuthProviderEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/CommentEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/CustomEndpointsBuilder.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/PluginEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/PostEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/ReplyEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/SinglePageEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/StatsEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/SystemInitializationEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/TagEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/TrackerEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/endpoint/UserEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/AnnotationSettingReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/AuthProviderReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/CategoryReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/CommentReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/MenuItemReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/PluginReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/PostCounterReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/PostReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/ReplyReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/ReverseProxyReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/RoleReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/SinglePageReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/SystemSettingReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/TagReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/ThemeReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/UserReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/reconciler/attachment/AttachmentReconciler.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/DefaultRoleService.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/EmailPasswordRecoveryService.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/EmailVerificationService.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/PluginService.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/RoleService.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/UserService.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/UserServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/impl/DefaultAttachmentService.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/impl/EmailPasswordRecoveryServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/impl/EmailVerificationServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/core/extension/service/impl/PluginServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/core/extension/theme/SettingUtils.java create mode 100644 application/src/main/java/run/halo/app/core/extension/theme/ThemeEndpoint.java create mode 100644 application/src/main/java/run/halo/app/core/extension/theme/ThemeService.java create mode 100644 application/src/main/java/run/halo/app/core/extension/theme/ThemeServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/core/extension/theme/ThemeUtils.java create mode 100644 application/src/main/java/run/halo/app/endpoint/uc/content/UcPostAttachmentEndpoint.java create mode 100644 application/src/main/java/run/halo/app/endpoint/uc/content/UcPostEndpoint.java create mode 100644 application/src/main/java/run/halo/app/endpoint/uc/content/UcSnapshotEndpoint.java create mode 100644 application/src/main/java/run/halo/app/event/post/CategoryHiddenStateChangeEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/CommentCreatedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/CommentUnreadReplyCountChangedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/DownvotedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/PostStatsChangedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/ReplyChangedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/ReplyCreatedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/ReplyDeletedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/ReplyEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/UpvotedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/VisitedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/post/VotedEvent.java create mode 100644 application/src/main/java/run/halo/app/event/user/PasswordChangedEvent.java create mode 100644 application/src/main/java/run/halo/app/extension/DefaultSchemeManager.java create mode 100644 application/src/main/java/run/halo/app/extension/DefaultSchemeWatcherManager.java create mode 100644 application/src/main/java/run/halo/app/extension/DelegateExtensionClient.java create mode 100644 application/src/main/java/run/halo/app/extension/ExtensionConverter.java create mode 100644 application/src/main/java/run/halo/app/extension/ExtensionStoreUtil.java create mode 100644 application/src/main/java/run/halo/app/extension/JSONExtensionConverter.java create mode 100644 application/src/main/java/run/halo/app/extension/ReactiveExtensionClientImpl.java create mode 100644 application/src/main/java/run/halo/app/extension/SchemeWatcherManager.java create mode 100644 application/src/main/java/run/halo/app/extension/controller/ControllerManager.java create mode 100644 application/src/main/java/run/halo/app/extension/controller/DefaultControllerManager.java create mode 100644 application/src/main/java/run/halo/app/extension/exception/ExtensionConvertException.java create mode 100644 application/src/main/java/run/halo/app/extension/exception/ExtensionNotFoundException.java create mode 100644 application/src/main/java/run/halo/app/extension/exception/SchemaViolationException.java create mode 100644 application/src/main/java/run/halo/app/extension/gc/GcControllerInitializer.java create mode 100644 application/src/main/java/run/halo/app/extension/gc/GcReconciler.java create mode 100644 application/src/main/java/run/halo/app/extension/gc/GcRequest.java create mode 100644 application/src/main/java/run/halo/app/extension/gc/GcSynchronizer.java create mode 100644 application/src/main/java/run/halo/app/extension/gc/GcWatcher.java create mode 100644 application/src/main/java/run/halo/app/extension/index/DefaultExtensionIterator.java create mode 100644 application/src/main/java/run/halo/app/extension/index/DefaultIndexSpecs.java create mode 100644 application/src/main/java/run/halo/app/extension/index/DefaultIndexer.java create mode 100644 application/src/main/java/run/halo/app/extension/index/ExtensionIterator.java create mode 100644 application/src/main/java/run/halo/app/extension/index/ExtensionPaginatedLister.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexBuilder.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexBuilderImpl.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexEntryContainer.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexEntryImpl.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexSpecRegistryImpl.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexedQueryEngineImpl.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexerFactory.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexerFactoryImpl.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexerTransaction.java create mode 100644 application/src/main/java/run/halo/app/extension/index/IndexerTransactionImpl.java create mode 100644 application/src/main/java/run/halo/app/extension/index/LabelIndexSpecUtils.java create mode 100644 application/src/main/java/run/halo/app/extension/index/PrimaryKeySpecUtils.java create mode 100644 application/src/main/java/run/halo/app/extension/router/ExtensionCompositeRouterFunction.java create mode 100644 application/src/main/java/run/halo/app/extension/router/ExtensionCreateHandler.java create mode 100644 application/src/main/java/run/halo/app/extension/router/ExtensionDeleteHandler.java create mode 100644 application/src/main/java/run/halo/app/extension/router/ExtensionGetHandler.java create mode 100644 application/src/main/java/run/halo/app/extension/router/ExtensionListHandler.java create mode 100644 application/src/main/java/run/halo/app/extension/router/ExtensionPatchHandler.java create mode 100644 application/src/main/java/run/halo/app/extension/router/ExtensionRouterFunctionFactory.java create mode 100644 application/src/main/java/run/halo/app/extension/router/ExtensionUpdateHandler.java create mode 100644 application/src/main/java/run/halo/app/extension/router/JsonPatch.java create mode 100644 application/src/main/java/run/halo/app/extension/store/ExtensionStore.java create mode 100644 application/src/main/java/run/halo/app/extension/store/ExtensionStoreClient.java create mode 100644 application/src/main/java/run/halo/app/extension/store/ExtensionStoreClientJPAImpl.java create mode 100644 application/src/main/java/run/halo/app/extension/store/ExtensionStoreRepository.java create mode 100644 application/src/main/java/run/halo/app/extension/store/ReactiveExtensionStoreClient.java create mode 100644 application/src/main/java/run/halo/app/extension/store/ReactiveExtensionStoreClientImpl.java create mode 100644 application/src/main/java/run/halo/app/infra/DefaultBackupRootGetter.java create mode 100644 application/src/main/java/run/halo/app/infra/DefaultExternalLinkProcessor.java create mode 100644 application/src/main/java/run/halo/app/infra/DefaultInitializationStateGetter.java create mode 100644 application/src/main/java/run/halo/app/infra/DefaultReactiveUrlDataBufferFetcher.java create mode 100644 application/src/main/java/run/halo/app/infra/DefaultSystemVersionSupplier.java create mode 100644 application/src/main/java/run/halo/app/infra/DefaultThemeInitializer.java create mode 100644 application/src/main/java/run/halo/app/infra/DefaultThemeRootGetter.java create mode 100644 application/src/main/java/run/halo/app/infra/ExtensionInitializedEvent.java create mode 100644 application/src/main/java/run/halo/app/infra/ExtensionResourceInitializer.java create mode 100644 application/src/main/java/run/halo/app/infra/HaloPropertiesExternalUrlSupplier.java create mode 100644 application/src/main/java/run/halo/app/infra/InitializationStateGetter.java create mode 100644 application/src/main/java/run/halo/app/infra/ReactiveExtensionPaginatedOperator.java create mode 100644 application/src/main/java/run/halo/app/infra/ReactiveExtensionPaginatedOperatorImpl.java create mode 100644 application/src/main/java/run/halo/app/infra/ReactiveUrlDataBufferFetcher.java create mode 100644 application/src/main/java/run/halo/app/infra/SchemeInitializer.java create mode 100644 application/src/main/java/run/halo/app/infra/SystemConfigurableEnvironmentFetcher.java create mode 100644 application/src/main/java/run/halo/app/infra/SystemState.java create mode 100644 application/src/main/java/run/halo/app/infra/ThemeRootGetter.java create mode 100644 application/src/main/java/run/halo/app/infra/ValidationUtils.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/AccessDeniedException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/AttachmentAlreadyExistsException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/DuplicateNameException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/EmailVerificationFailed.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/Exceptions.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/FileSizeExceededException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/FileTypeNotAllowedException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/NotFoundException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/PluginAlreadyExistsException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/PluginDependenciesNotEnabledException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/PluginDependencyException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/PluginDependentsNotDisabledException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/PluginInstallationException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/RateLimitExceededException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/RequestBodyValidationException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/ThemeAlreadyExistsException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/ThemeInstallationException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/ThemeUninstallException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/ThemeUpgradeException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/UnsatisfiedAttributeValueException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/UserNotFoundException.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/handlers/HaloErrorConfiguration.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/handlers/HaloErrorWebExceptionHandler.java create mode 100644 application/src/main/java/run/halo/app/infra/exception/handlers/ProblemDetailErrorAttributes.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/AttachmentProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/CacheProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/ConsoleProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/ExtensionProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/HaloProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/JwtProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/ProxyProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/SecurityProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/ThemeProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/properties/UcProperties.java create mode 100644 application/src/main/java/run/halo/app/infra/utils/Base62Utils.java create mode 100644 application/src/main/java/run/halo/app/infra/utils/DataBufferUtils.java create mode 100644 application/src/main/java/run/halo/app/infra/utils/FileNameUtils.java create mode 100644 application/src/main/java/run/halo/app/infra/utils/FileUtils.java create mode 100644 application/src/main/java/run/halo/app/infra/utils/HaloUtils.java create mode 100644 application/src/main/java/run/halo/app/infra/utils/IpAddressUtils.java create mode 100644 application/src/main/java/run/halo/app/infra/utils/VersionUtils.java create mode 100644 application/src/main/java/run/halo/app/infra/utils/YamlUnstructuredLoader.java create mode 100644 application/src/main/java/run/halo/app/metrics/CounterService.java create mode 100644 application/src/main/java/run/halo/app/metrics/CounterServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/metrics/MeterUtils.java create mode 100644 application/src/main/java/run/halo/app/metrics/PostStatsUpdater.java create mode 100644 application/src/main/java/run/halo/app/metrics/ReplyEventReconciler.java create mode 100644 application/src/main/java/run/halo/app/metrics/VisitedEventReconciler.java create mode 100644 application/src/main/java/run/halo/app/metrics/VotedEventReconciler.java create mode 100644 application/src/main/java/run/halo/app/migration/BackupFile.java create mode 100644 application/src/main/java/run/halo/app/migration/BackupReconciler.java create mode 100644 application/src/main/java/run/halo/app/migration/MigrationEndpoint.java create mode 100644 application/src/main/java/run/halo/app/migration/MigrationService.java create mode 100644 application/src/main/java/run/halo/app/migration/impl/MigrationServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/notification/DefaultNotificationCenter.java create mode 100644 application/src/main/java/run/halo/app/notification/DefaultNotificationReasonEmitter.java create mode 100644 application/src/main/java/run/halo/app/notification/DefaultNotificationSender.java create mode 100644 application/src/main/java/run/halo/app/notification/DefaultNotificationService.java create mode 100644 application/src/main/java/run/halo/app/notification/DefaultNotificationTemplateRender.java create mode 100644 application/src/main/java/run/halo/app/notification/DefaultNotifierConfigStore.java create mode 100644 application/src/main/java/run/halo/app/notification/DefaultSubscriberEmailResolver.java create mode 100644 application/src/main/java/run/halo/app/notification/EmailNotifier.java create mode 100644 application/src/main/java/run/halo/app/notification/EmailSenderHelper.java create mode 100644 application/src/main/java/run/halo/app/notification/EmailSenderHelperImpl.java create mode 100644 application/src/main/java/run/halo/app/notification/LanguageUtils.java create mode 100644 application/src/main/java/run/halo/app/notification/NotificationSender.java create mode 100644 application/src/main/java/run/halo/app/notification/NotificationTemplateRender.java create mode 100644 application/src/main/java/run/halo/app/notification/NotificationTrigger.java create mode 100644 application/src/main/java/run/halo/app/notification/NotifierConfigStore.java create mode 100644 application/src/main/java/run/halo/app/notification/ReasonNotificationTemplateSelector.java create mode 100644 application/src/main/java/run/halo/app/notification/ReasonNotificationTemplateSelectorImpl.java create mode 100644 application/src/main/java/run/halo/app/notification/RecipientResolver.java create mode 100644 application/src/main/java/run/halo/app/notification/RecipientResolverImpl.java create mode 100644 application/src/main/java/run/halo/app/notification/Subscriber.java create mode 100644 application/src/main/java/run/halo/app/notification/SubscriberEmailResolver.java create mode 100644 application/src/main/java/run/halo/app/notification/SubscriptionMigration.java create mode 100644 application/src/main/java/run/halo/app/notification/SubscriptionService.java create mode 100644 application/src/main/java/run/halo/app/notification/SubscriptionServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/notification/UserNotificationPreference.java create mode 100644 application/src/main/java/run/halo/app/notification/UserNotificationPreferenceService.java create mode 100644 application/src/main/java/run/halo/app/notification/UserNotificationPreferenceServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/notification/UserNotificationQuery.java create mode 100644 application/src/main/java/run/halo/app/notification/UserNotificationService.java create mode 100644 application/src/main/java/run/halo/app/notification/endpoint/ConsoleNotifierEndpoint.java create mode 100644 application/src/main/java/run/halo/app/notification/endpoint/EmailConfigValidationEndpoint.java create mode 100644 application/src/main/java/run/halo/app/notification/endpoint/SubscriptionRouter.java create mode 100644 application/src/main/java/run/halo/app/notification/endpoint/UserNotificationEndpoint.java create mode 100644 application/src/main/java/run/halo/app/notification/endpoint/UserNotificationPreferencesEndpoint.java create mode 100644 application/src/main/java/run/halo/app/notification/endpoint/UserNotifierEndpoint.java create mode 100644 application/src/main/java/run/halo/app/plugin/AggregatedRouterFunction.java create mode 100644 application/src/main/java/run/halo/app/plugin/DefaultDevelopmentPluginRepository.java create mode 100644 application/src/main/java/run/halo/app/plugin/DefaultPluginApplicationContextFactory.java create mode 100644 application/src/main/java/run/halo/app/plugin/DefaultPluginGetter.java create mode 100644 application/src/main/java/run/halo/app/plugin/DefaultPluginRouterFunctionRegistry.java create mode 100644 application/src/main/java/run/halo/app/plugin/DefaultReactiveSettingFetcher.java create mode 100644 application/src/main/java/run/halo/app/plugin/DefaultSettingFetcher.java create mode 100644 application/src/main/java/run/halo/app/plugin/DevPluginLoader.java create mode 100644 application/src/main/java/run/halo/app/plugin/HaloPluginManager.java create mode 100644 application/src/main/java/run/halo/app/plugin/HaloSharedEventDelegator.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginApplicationContext.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginApplicationContextFactory.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginAutoConfiguration.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginBeforeStopSyncListener.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginConst.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginControllerManager.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginDevelopmentInitializer.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginExtensionLoaderUtils.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginGetter.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginNotFoundException.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginProperties.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginRequestMappingHandlerMapping.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginRouterFunctionRegistry.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginSharedEventDelegator.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginStartedListener.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginStartingError.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginUtils.java create mode 100644 application/src/main/java/run/halo/app/plugin/PluginsRootGetterImpl.java create mode 100644 application/src/main/java/run/halo/app/plugin/PropertyPluginStatusProvider.java create mode 100644 application/src/main/java/run/halo/app/plugin/SharedApplicationContextFactory.java create mode 100644 application/src/main/java/run/halo/app/plugin/SharedEventDispatcher.java create mode 100644 application/src/main/java/run/halo/app/plugin/SpringComponentsFinder.java create mode 100644 application/src/main/java/run/halo/app/plugin/SpringExtensionFactory.java create mode 100644 application/src/main/java/run/halo/app/plugin/SpringPlugin.java create mode 100644 application/src/main/java/run/halo/app/plugin/SpringPluginFactory.java create mode 100644 application/src/main/java/run/halo/app/plugin/SpringPluginManager.java create mode 100644 application/src/main/java/run/halo/app/plugin/YamlPluginDescriptorFinder.java create mode 100644 application/src/main/java/run/halo/app/plugin/YamlPluginFinder.java create mode 100644 application/src/main/java/run/halo/app/plugin/event/HaloPluginBeforeStopEvent.java create mode 100644 application/src/main/java/run/halo/app/plugin/event/HaloPluginStartedEvent.java create mode 100644 application/src/main/java/run/halo/app/plugin/event/HaloPluginStoppedEvent.java create mode 100644 application/src/main/java/run/halo/app/plugin/event/SpringPluginStartedEvent.java create mode 100644 application/src/main/java/run/halo/app/plugin/event/SpringPluginStartingEvent.java create mode 100644 application/src/main/java/run/halo/app/plugin/event/SpringPluginStoppedEvent.java create mode 100644 application/src/main/java/run/halo/app/plugin/event/SpringPluginStoppingEvent.java create mode 100644 application/src/main/java/run/halo/app/plugin/extensionpoint/DefaultExtensionGetter.java create mode 100644 application/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionDefinition.java create mode 100644 application/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionPointDefinition.java create mode 100644 application/src/main/java/run/halo/app/plugin/resources/BundleResourceUtils.java create mode 100644 application/src/main/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionFactory.java create mode 100644 application/src/main/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionRegistry.java create mode 100644 application/src/main/java/run/halo/app/search/HaloDocumentEventsListener.java create mode 100644 application/src/main/java/run/halo/app/search/IndexEndpoint.java create mode 100644 application/src/main/java/run/halo/app/search/IndicesEndpoint.java create mode 100644 application/src/main/java/run/halo/app/search/SearchEngineUnavailableException.java create mode 100644 application/src/main/java/run/halo/app/search/SearchServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/search/extension/SearchEngine.java create mode 100644 application/src/main/java/run/halo/app/search/lucene/LuceneSearchEngine.java create mode 100644 application/src/main/java/run/halo/app/search/post/PostEventsListener.java create mode 100644 application/src/main/java/run/halo/app/search/post/PostHaloDocumentsProvider.java create mode 100644 application/src/main/java/run/halo/app/security/AuthProviderService.java create mode 100644 application/src/main/java/run/halo/app/security/AuthProviderServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/security/CorsConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/CsrfConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/DefaultServerAuthenticationEntryPoint.java create mode 100644 application/src/main/java/run/halo/app/security/DefaultSuperAdminInitializer.java create mode 100644 application/src/main/java/run/halo/app/security/DefaultUserDetailService.java create mode 100644 application/src/main/java/run/halo/app/security/ExceptionSecurityConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/HaloUserDetails.java create mode 100644 application/src/main/java/run/halo/app/security/InitializeRedirectionWebFilter.java create mode 100644 application/src/main/java/run/halo/app/security/ListedAuthProvider.java create mode 100644 application/src/main/java/run/halo/app/security/LoginHandlerEnhancerImpl.java create mode 100644 application/src/main/java/run/halo/app/security/LogoutSecurityConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/SecurityWebFiltersConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/SuperAdminInitializer.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/CryptoService.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/SecurityConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/WebExchangeMatchers.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/impl/RsaKeyService.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/jwt/JwtAuthenticationConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationConverter.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationFailureHandler.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationManager.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationSuccessHandler.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/login/HaloUser.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/login/InvalidEncryptedMessageException.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/login/LoginAuthenticationConverter.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/login/LoginSecurityConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/login/PublicKeyRouteBuilder.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordDelegatingAuthenticationManager.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordHandler.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/pat/PatAuthenticationManager.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/pat/PatEndpoint.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/pat/PatServerWebExchangeMatcher.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/pat/UserScopedPatHandler.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/pat/impl/UserScopedPatHandlerImpl.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/CookieSignatureKeyResolver.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/DefaultCookieSignatureKeyResolver.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentRememberMeTokenRepository.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentRememberMeTokenRepositoryImpl.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentTokenBasedRememberMeServices.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeAuthenticationManager.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeCookieResolver.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeCookieResolverImpl.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeServices.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeTokenRevoker.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/RememberTokenCleaner.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/rememberme/TokenBasedRememberMeServices.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/DefaultTwoFactorAuthResponseHandler.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthEndpoint.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthRequiredException.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthResponseHandler.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSecurityConfigurer.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSettings.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthentication.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthorizationManager.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorUtils.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/totp/DefaultTotpAuthService.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthService.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthenticationFilter.java create mode 100644 application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthenticationToken.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/Attributes.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/AttributesRecord.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/AuthorityUtils.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/AuthorizationRuleResolver.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/AuthorizingVisitor.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/DefaultRuleResolver.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/PolicyRuleList.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/RbacRequestEvaluation.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/RequestInfo.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/RequestInfoAuthorizationManager.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/RequestInfoFactory.java create mode 100644 application/src/main/java/run/halo/app/security/authorization/RuleAccumulator.java create mode 100644 application/src/main/java/run/halo/app/security/device/DeviceCookieResolver.java create mode 100644 application/src/main/java/run/halo/app/security/device/DeviceCookieResolverImpl.java create mode 100644 application/src/main/java/run/halo/app/security/device/DeviceEndpoint.java create mode 100644 application/src/main/java/run/halo/app/security/device/DeviceReconciler.java create mode 100644 application/src/main/java/run/halo/app/security/device/DeviceServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/security/device/DeviceSessionFilter.java create mode 100644 application/src/main/java/run/halo/app/security/device/NewDeviceLoginEvent.java create mode 100644 application/src/main/java/run/halo/app/security/device/NewDeviceLoginListener.java create mode 100644 application/src/main/java/run/halo/app/security/jackson2/HaloSecurityJackson2Module.java create mode 100644 application/src/main/java/run/halo/app/security/jackson2/HaloUserMixin.java create mode 100644 application/src/main/java/run/halo/app/security/jackson2/TwoFactorAuthenticationMixin.java create mode 100644 application/src/main/java/run/halo/app/security/session/InMemoryReactiveIndexedSessionRepository.java create mode 100644 application/src/main/java/run/halo/app/security/session/ReactiveIndexedSessionRepository.java create mode 100644 application/src/main/java/run/halo/app/security/session/SessionInvalidationListener.java create mode 100644 application/src/main/java/run/halo/app/theme/DefaultTemplateEnum.java create mode 100644 application/src/main/java/run/halo/app/theme/DefaultTemplateNameResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/DefaultViewNameResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/HaloViewResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/ReactivePropertyAccessor.java create mode 100644 application/src/main/java/run/halo/app/theme/ReactiveSpelVariableExpressionEvaluator.java create mode 100644 application/src/main/java/run/halo/app/theme/SiteSettingVariablesAcquirer.java create mode 100644 application/src/main/java/run/halo/app/theme/TemplateEngineManager.java create mode 100644 application/src/main/java/run/halo/app/theme/ThemeContext.java create mode 100644 application/src/main/java/run/halo/app/theme/ThemeContextBasedVariablesAcquirer.java create mode 100644 application/src/main/java/run/halo/app/theme/ThemeLinkBuilder.java create mode 100644 application/src/main/java/run/halo/app/theme/ThemeLocaleContextResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/ThemeResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/ViewContextBasedVariablesAcquirer.java create mode 100644 application/src/main/java/run/halo/app/theme/ViewNameResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/config/ThemeConfiguration.java create mode 100644 application/src/main/java/run/halo/app/theme/config/ThemeWebFluxConfigurer.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/CommentElementTagProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/CommentEnabledVariableProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/DefaultFaviconHeadProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/DefaultLinkExpressionFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/DuplicateMetaTagProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/GeneratorMetaProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/GlobalHeadInjectionProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/GlobalSeoProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/HaloExpressionObjectFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/HaloProcessorDialect.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/HaloSpringSecurityDialect.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/HaloTrackerProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/JsonNodePropertyAccessorBoundariesProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/LinkExpressionObjectDialect.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/TemplateFooterElementTagProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/TemplateGlobalHeadProcessor.java create mode 100644 application/src/main/java/run/halo/app/theme/dialect/expression/Annotations.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/CategoryQueryEndpoint.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/CommentFinderEndpoint.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/MenuQueryEndpoint.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/PluginQueryEndpoint.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/PostPublicQuery.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/PostQueryEndpoint.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/PublicApiUtils.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/PublicUserEndpoint.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/SinglePageQueryEndpoint.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/SiteStatsQueryEndpoint.java create mode 100644 application/src/main/java/run/halo/app/theme/endpoint/TagQueryEndpoint.java create mode 100644 application/src/main/java/run/halo/app/theme/engine/DefaultThemeTemplateAvailabilityProvider.java create mode 100644 application/src/main/java/run/halo/app/theme/engine/HaloTemplateEngine.java create mode 100644 application/src/main/java/run/halo/app/theme/engine/PluginClassloaderTemplateResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/engine/ThemeTemplateAvailabilityProvider.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/CategoryFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/CommentFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/CommentPublicQueryService.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/ContributorFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/DefaultFinderRegistry.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/FinderRegistry.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/MenuFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/PluginFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/PostFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/PostPublicQueryService.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/SinglePageConversionService.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/SinglePageFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/SiteStatsFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/TagFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/ThemeFinder.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/CategoryFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/CommentFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/ContributorFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/MenuFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/PluginFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/PostFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/PostPublicQueryServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/SinglePageConversionServiceImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/SinglePageFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/SiteStatsFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/TagFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/impl/ThemeFinderImpl.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/CategoryTreeVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/CategoryVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/CommentStatsVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/CommentVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/CommentWithReplyVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/ContentVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/ContributorVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/ListedPostVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/ListedSinglePageVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/MenuItemVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/MenuVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/NavigationPostVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/PostArchiveVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/PostArchiveYearMonthVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/PostVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/ReplyVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/SinglePageVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/SiteSettingVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/SiteStatsVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/StatsVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/TagVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/ThemeVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/UserVo.java create mode 100644 application/src/main/java/run/halo/app/theme/finders/vo/VisualizableTreeNode.java create mode 100644 application/src/main/java/run/halo/app/theme/message/ThemeMessageResolutionUtils.java create mode 100644 application/src/main/java/run/halo/app/theme/message/ThemeMessageResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/router/DefaultQueryPostPredicateResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/router/ExtensionPermalinkPatternUpdater.java create mode 100644 application/src/main/java/run/halo/app/theme/router/ModelMapUtils.java create mode 100644 application/src/main/java/run/halo/app/theme/router/PermalinkRuleChangedEvent.java create mode 100644 application/src/main/java/run/halo/app/theme/router/PermalinkWatch.java create mode 100644 application/src/main/java/run/halo/app/theme/router/PreviewRouterFunction.java create mode 100644 application/src/main/java/run/halo/app/theme/router/ReactiveQueryPostPredicateResolver.java create mode 100644 application/src/main/java/run/halo/app/theme/router/SinglePageRoute.java create mode 100644 application/src/main/java/run/halo/app/theme/router/ThemeCompositeRouterFunction.java create mode 100644 application/src/main/java/run/halo/app/theme/router/TitleVisibilityIdentifyCalculator.java create mode 100644 application/src/main/java/run/halo/app/theme/router/factories/ArchiveRouteFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/router/factories/AuthorPostsRouteFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/router/factories/CategoriesRouteFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/router/factories/CategoryPostRouteFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/router/factories/IndexRouteFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/router/factories/PostRouteFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/router/factories/RouteFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/router/factories/TagPostRouteFactory.java create mode 100644 application/src/main/java/run/halo/app/theme/router/factories/TagsRouteFactory.java create mode 100644 application/src/main/java/run/halo/app/webfilter/AdditionalWebFilterChainProxy.java create mode 100644 application/src/main/resources/META-INF/spring-devtools.properties create mode 100644 application/src/main/resources/META-INF/spring.factories create mode 100644 application/src/main/resources/application-dev.yaml create mode 100644 application/src/main/resources/application-doc.yaml create mode 100644 application/src/main/resources/application-mariadb.yaml create mode 100644 application/src/main/resources/application-mysql.yaml create mode 100644 application/src/main/resources/application-postgresql.yaml create mode 100644 application/src/main/resources/application-win.yaml create mode 100644 application/src/main/resources/application.yaml create mode 100644 application/src/main/resources/banner.txt create mode 100644 application/src/main/resources/config/i18n/messages.properties create mode 100644 application/src/main/resources/config/i18n/messages_zh.properties create mode 100644 application/src/main/resources/extensions/attachment-local-policy.yaml create mode 100644 application/src/main/resources/extensions/authproviders.yaml create mode 100644 application/src/main/resources/extensions/extension-definitions.yaml create mode 100644 application/src/main/resources/extensions/extensionpoint-definitions.yaml create mode 100644 application/src/main/resources/extensions/notification-templates.yaml create mode 100644 application/src/main/resources/extensions/notification.yaml create mode 100644 application/src/main/resources/extensions/role-template-actuator.yaml create mode 100644 application/src/main/resources/extensions/role-template-anonymous.yaml create mode 100644 application/src/main/resources/extensions/role-template-attachment.yaml create mode 100644 application/src/main/resources/extensions/role-template-authenticated.yaml create mode 100644 application/src/main/resources/extensions/role-template-cache.yaml create mode 100644 application/src/main/resources/extensions/role-template-category.yaml create mode 100644 application/src/main/resources/extensions/role-template-comment.yaml create mode 100644 application/src/main/resources/extensions/role-template-configmap.yaml create mode 100644 application/src/main/resources/extensions/role-template-menu.yaml create mode 100644 application/src/main/resources/extensions/role-template-migration.yaml create mode 100644 application/src/main/resources/extensions/role-template-notification.yaml create mode 100644 application/src/main/resources/extensions/role-template-permissions.yaml create mode 100644 application/src/main/resources/extensions/role-template-plugin.yaml create mode 100644 application/src/main/resources/extensions/role-template-post.yaml create mode 100644 application/src/main/resources/extensions/role-template-role.yaml create mode 100644 application/src/main/resources/extensions/role-template-setting.yaml create mode 100644 application/src/main/resources/extensions/role-template-singlepage.yaml create mode 100644 application/src/main/resources/extensions/role-template-snapshot.yaml create mode 100644 application/src/main/resources/extensions/role-template-tag.yaml create mode 100644 application/src/main/resources/extensions/role-template-theme.yaml create mode 100644 application/src/main/resources/extensions/role-template-uc-content.yaml create mode 100644 application/src/main/resources/extensions/role-template-user.yaml create mode 100644 application/src/main/resources/extensions/searchengine-lucene.yaml create mode 100644 application/src/main/resources/extensions/system-configurable-configmap.yaml create mode 100644 application/src/main/resources/extensions/system-default-role.yaml create mode 100644 application/src/main/resources/extensions/system-setting.yaml create mode 100644 application/src/main/resources/extensions/user.yaml create mode 100644 application/src/main/resources/schema-h2.sql create mode 100644 application/src/main/resources/schema-mariadb.sql create mode 100644 application/src/main/resources/schema-mysql.sql create mode 100644 application/src/main/resources/schema-postgresql.sql create mode 100644 application/src/main/resources/static/halo-tracker.js create mode 100644 application/src/main/resources/static/images/extension-points/lucene.png create mode 100644 application/src/main/resources/templates/error/error.html create mode 100644 application/src/main/resources/themes/theme-earth.zip create mode 100644 application/src/test/java/run/halo/app/ApplicationTests.java create mode 100644 application/src/test/java/run/halo/app/PathPrefixPredicateTest.java create mode 100644 application/src/test/java/run/halo/app/XForwardHeaderTest.java create mode 100644 application/src/test/java/run/halo/app/config/CorsTest.java create mode 100644 application/src/test/java/run/halo/app/config/ExtensionConfigurationTest.java create mode 100644 application/src/test/java/run/halo/app/config/HaloConfigurationTest.java create mode 100644 application/src/test/java/run/halo/app/config/SecurityConfigTest.java create mode 100644 application/src/test/java/run/halo/app/config/ServerCodecTest.java create mode 100644 application/src/test/java/run/halo/app/config/WebFluxConfigTest.java create mode 100644 application/src/test/java/run/halo/app/console/WebSocketServerWebExchangeMatcherTest.java create mode 100644 application/src/test/java/run/halo/app/console/WebSocketUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/content/CategoryPostCountUpdaterTest.java create mode 100644 application/src/test/java/run/halo/app/content/ContentRequestTest.java create mode 100644 application/src/test/java/run/halo/app/content/PostIntegrationTests.java create mode 100644 application/src/test/java/run/halo/app/content/TestPost.java create mode 100644 application/src/test/java/run/halo/app/content/comment/CommentEmailOwnerTest.java create mode 100644 application/src/test/java/run/halo/app/content/comment/CommentNotificationReasonPublisherTest.java create mode 100644 application/src/test/java/run/halo/app/content/comment/CommentRequestTest.java create mode 100644 application/src/test/java/run/halo/app/content/comment/CommentServiceImplIntegrationTest.java create mode 100644 application/src/test/java/run/halo/app/content/comment/CommentServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/content/comment/PostCommentSubjectTest.java create mode 100644 application/src/test/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelperTest.java create mode 100644 application/src/test/java/run/halo/app/content/comment/ReplyServiceImplIntegrationTest.java create mode 100644 application/src/test/java/run/halo/app/content/comment/SinglePageCommentSubjectTest.java create mode 100644 application/src/test/java/run/halo/app/content/permalinks/CategoryPermalinkPolicyTest.java create mode 100644 application/src/test/java/run/halo/app/content/permalinks/PostPermalinkPolicyTest.java create mode 100644 application/src/test/java/run/halo/app/content/permalinks/TagPermalinkPolicyTest.java create mode 100644 application/src/test/java/run/halo/app/core/endpoint/WebSocketHandlerMappingTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/PostTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/RoleBindingTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/SettingTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/TestRole.java create mode 100644 application/src/test/java/run/halo/app/core/extension/ThemeTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/attachment/endpoint/AttachmentEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/endpoint/EmailVerificationCodeTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/endpoint/PluginEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/endpoint/PostEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/endpoint/SinglePageEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/endpoint/SystemInitializationEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/endpoint/TagEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/endpoint/UserEndpointIntegrationTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/endpoint/UserEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/CommentReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/MenuItemReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/PluginReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/PostReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/ReverseProxyReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/SinglePageReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/SystemSettingReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/TagReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/ThemeReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/reconciler/UserReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/service/DefaultRoleServiceTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/service/UserServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/service/impl/EmailPasswordRecoveryServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/service/impl/EmailVerificationServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/service/impl/PluginServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/theme/SettingUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/theme/ThemeEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/core/extension/theme/ThemeServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/extension/AbstractExtensionTest.java create mode 100644 application/src/test/java/run/halo/app/extension/ComparatorsTest.java create mode 100644 application/src/test/java/run/halo/app/extension/ConfigMapTest.java create mode 100644 application/src/test/java/run/halo/app/extension/DefaultSchemeManagerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/DefaultSchemeWatcherManagerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/ExtensionOperatorTest.java create mode 100644 application/src/test/java/run/halo/app/extension/ExtensionStoreUtilTest.java create mode 100644 application/src/test/java/run/halo/app/extension/FakeExtension.java create mode 100644 application/src/test/java/run/halo/app/extension/GroupVersionKindTest.java create mode 100644 application/src/test/java/run/halo/app/extension/GroupVersionTest.java create mode 100644 application/src/test/java/run/halo/app/extension/JsonExtensionConverterTest.java create mode 100644 application/src/test/java/run/halo/app/extension/JsonExtensionTest.java create mode 100644 application/src/test/java/run/halo/app/extension/ListResultTest.java create mode 100644 application/src/test/java/run/halo/app/extension/MetadataOperatorTest.java create mode 100644 application/src/test/java/run/halo/app/extension/ReactiveExtensionClientTest.java create mode 100644 application/src/test/java/run/halo/app/extension/RefTest.java create mode 100644 application/src/test/java/run/halo/app/extension/SchemeTest.java create mode 100644 application/src/test/java/run/halo/app/extension/UnstructuredTest.java create mode 100644 application/src/test/java/run/halo/app/extension/gc/GcReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/gc/GcSynchronizerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/gc/GcWatcherTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/DefaultExtensionIteratorTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/DefaultIndexSpecsTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/DefaultIndexerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/IndexDescriptorTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/IndexEntryContainerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/IndexEntryImplTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/IndexEntryOperatorImplTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/IndexSpecRegistryImplTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/IndexedQueryEngineImplTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/IndexerFactoryImplTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/LabelIndexSpecUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/PrimaryKeySpecUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/query/AndTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/query/IndexViewDataSet.java create mode 100644 application/src/test/java/run/halo/app/extension/index/query/QueryFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/extension/index/query/QueryIndexViewImplTest.java create mode 100644 application/src/test/java/run/halo/app/extension/router/ExtensionCompositeRouterFunctionTest.java create mode 100644 application/src/test/java/run/halo/app/extension/router/ExtensionCreateHandlerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/router/ExtensionDeleteHandlerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/router/ExtensionGetHandlerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/router/ExtensionListHandlerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/router/ExtensionRouterFunctionFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/extension/router/ExtensionUpdateHandlerTest.java create mode 100644 application/src/test/java/run/halo/app/extension/router/PathPatternGeneratorTest.java create mode 100644 application/src/test/java/run/halo/app/extension/store/ReactiveExtensionStoreClientImplTest.java create mode 100644 application/src/test/java/run/halo/app/infra/ConditionListTest.java create mode 100644 application/src/test/java/run/halo/app/infra/DefaultBackupRootGetterTest.java create mode 100644 application/src/test/java/run/halo/app/infra/DefaultExternalLinkProcessorTest.java create mode 100644 application/src/test/java/run/halo/app/infra/DefaultSystemVersionSupplierTest.java create mode 100644 application/src/test/java/run/halo/app/infra/ExtensionResourceInitializerTest.java create mode 100644 application/src/test/java/run/halo/app/infra/HaloPropertiesExternalUrlSupplierTest.java create mode 100644 application/src/test/java/run/halo/app/infra/InitializationStateGetterTest.java create mode 100644 application/src/test/java/run/halo/app/infra/ReactiveExtensionPaginatedOperatorImplTest.java create mode 100644 application/src/test/java/run/halo/app/infra/SystemConfigurableEnvironmentFetcherTest.java create mode 100644 application/src/test/java/run/halo/app/infra/SystemSettingTest.java create mode 100644 application/src/test/java/run/halo/app/infra/SystemStateTest.java create mode 100644 application/src/test/java/run/halo/app/infra/ValidationUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/infra/exception/handlers/I18nExceptionTest.java create mode 100644 application/src/test/java/run/halo/app/infra/utils/Base62UtilsTest.java create mode 100644 application/src/test/java/run/halo/app/infra/utils/FileNameUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/infra/utils/FileTypeDetectUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/infra/utils/FileUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/infra/utils/IpAddressUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/infra/utils/VersionUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/infra/utils/YamlUnstructuredLoaderTest.java create mode 100644 application/src/test/java/run/halo/app/metrics/MeterUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/migration/BackupReconcilerTest.java create mode 100644 application/src/test/java/run/halo/app/migration/impl/MigrationServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/notification/DefaultNotificationCenterTest.java create mode 100644 application/src/test/java/run/halo/app/notification/DefaultNotificationReasonEmitterTest.java create mode 100644 application/src/test/java/run/halo/app/notification/DefaultNotificationSenderTest.java create mode 100644 application/src/test/java/run/halo/app/notification/DefaultNotificationTemplateRenderTest.java create mode 100644 application/src/test/java/run/halo/app/notification/DefaultNotifierConfigStoreTest.java create mode 100644 application/src/test/java/run/halo/app/notification/DefaultSubscriberEmailResolverTest.java create mode 100644 application/src/test/java/run/halo/app/notification/LanguageUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/notification/NotificationContextTest.java create mode 100644 application/src/test/java/run/halo/app/notification/NotificationTriggerTest.java create mode 100644 application/src/test/java/run/halo/app/notification/ReasonNotificationTemplateSelectorImplTest.java create mode 100644 application/src/test/java/run/halo/app/notification/ReasonPayloadTest.java create mode 100644 application/src/test/java/run/halo/app/notification/RecipientResolverImplTest.java create mode 100644 application/src/test/java/run/halo/app/notification/SubscriptionServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/notification/SubscriptionServiceIntegrationTest.java create mode 100644 application/src/test/java/run/halo/app/notification/UserIdentityTest.java create mode 100644 application/src/test/java/run/halo/app/notification/UserNotificationPreferenceServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/notification/UserNotificationPreferenceTest.java create mode 100644 application/src/test/java/run/halo/app/notification/endpoint/SubscriptionRouterTest.java create mode 100644 application/src/test/java/run/halo/app/notification/endpoint/UserNotificationPreferencesEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/DefaultDevelopmentPluginRepositoryTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/DefaultPluginApplicationContextFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/DefaultPluginRouterFunctionRegistryTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/DefaultSettingFetcherTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/HaloPluginManagerTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/PluginExtensionLoaderUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/PluginRequestMappingHandlerMappingTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/PluginsRootGetterImplTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/SharedApplicationContextFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/SharedEventDispatcherTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/SpringComponentsFinderTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/YamlPluginDescriptorFinderTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/YamlPluginFinderTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/extensionpoint/DefaultExtensionGetterTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/resources/BundleResourceUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionRegistryTest.java create mode 100644 application/src/test/java/run/halo/app/search/HaloDocumentEventsListenerTest.java create mode 100644 application/src/test/java/run/halo/app/search/IndexEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/search/IndicesEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/search/SearchServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/search/lucene/LuceneSearchEngineIntegrationTest.java create mode 100644 application/src/test/java/run/halo/app/search/lucene/LuceneSearchEngineTest.java create mode 100644 application/src/test/java/run/halo/app/search/post/PostEventsListenerTest.java create mode 100644 application/src/test/java/run/halo/app/search/post/PostHaloDocumentsProviderTest.java create mode 100644 application/src/test/java/run/halo/app/security/AuthProviderServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/security/DefaultServerAuthenticationEntryPointTest.java create mode 100644 application/src/test/java/run/halo/app/security/DefaultUserDetailServiceTest.java create mode 100644 application/src/test/java/run/halo/app/security/InitializeRedirectionWebFilterTest.java create mode 100644 application/src/test/java/run/halo/app/security/ResponseMap.java create mode 100644 application/src/test/java/run/halo/app/security/SuperAdminInitializerTest.java create mode 100644 application/src/test/java/run/halo/app/security/authentication/WebExchangeMatchersTest.java create mode 100644 application/src/test/java/run/halo/app/security/authentication/impl/RsaKeyServiceTest.java create mode 100644 application/src/test/java/run/halo/app/security/authentication/login/LoginAuthenticationConverterTest.java create mode 100644 application/src/test/java/run/halo/app/security/authentication/login/PublicKeyRouteBuilderTest.java create mode 100644 application/src/test/java/run/halo/app/security/authentication/pat/PatTest.java create mode 100644 application/src/test/java/run/halo/app/security/authentication/rememberme/PersistentTokenBasedRememberMeServicesTest.java create mode 100644 application/src/test/java/run/halo/app/security/authentication/rememberme/RememberTokenCleanerTest.java create mode 100644 application/src/test/java/run/halo/app/security/authentication/rememberme/TokenBasedRememberMeServicesTest.java create mode 100644 application/src/test/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSettingsTest.java create mode 100644 application/src/test/java/run/halo/app/security/authorization/AuthorityUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/security/authorization/AuthorizationTest.java create mode 100644 application/src/test/java/run/halo/app/security/authorization/DefaultRuleResolverTest.java create mode 100644 application/src/test/java/run/halo/app/security/authorization/PolicyRuleTest.java create mode 100644 application/src/test/java/run/halo/app/security/authorization/RbacRequestEvaluationTest.java create mode 100644 application/src/test/java/run/halo/app/security/authorization/RequestInfoResolverTest.java create mode 100644 application/src/test/java/run/halo/app/security/device/DeviceServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/security/jackson2/HaloSecurityJacksonModuleTest.java create mode 100644 application/src/test/java/run/halo/app/security/session/InMemoryReactiveIndexedSessionRepositoryTest.java create mode 100644 application/src/test/java/run/halo/app/theme/ReactiveFinderExpressionParserTests.java create mode 100644 application/src/test/java/run/halo/app/theme/SiteSettingVariablesAcquirerTest.java create mode 100644 application/src/test/java/run/halo/app/theme/ThemeContextTest.java create mode 100644 application/src/test/java/run/halo/app/theme/ThemeLinkBuilderTest.java create mode 100644 application/src/test/java/run/halo/app/theme/ThemeLocaleContextResolverTest.java create mode 100644 application/src/test/java/run/halo/app/theme/ViewNameResolverTest.java create mode 100644 application/src/test/java/run/halo/app/theme/dialect/CommentElementTagProcessorTest.java create mode 100644 application/src/test/java/run/halo/app/theme/dialect/CommentEnabledVariableProcessorTest.java create mode 100644 application/src/test/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessorIntegrationTest.java create mode 100644 application/src/test/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessorTest.java create mode 100644 application/src/test/java/run/halo/app/theme/dialect/DuplicateMetaTagProcessorTest.java create mode 100644 application/src/test/java/run/halo/app/theme/dialect/GeneratorMetaProcessorTest.java create mode 100644 application/src/test/java/run/halo/app/theme/dialect/HaloProcessorDialectTest.java create mode 100644 application/src/test/java/run/halo/app/theme/dialect/LinkExpressionObjectDialectTest.java create mode 100644 application/src/test/java/run/halo/app/theme/dialect/TemplateFooterElementTagProcessorTest.java create mode 100644 application/src/test/java/run/halo/app/theme/endpoint/CategoryQueryEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/theme/endpoint/CommentFinderEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/theme/endpoint/MenuQueryEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/theme/endpoint/PluginQueryEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/theme/endpoint/PostQueryEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/theme/endpoint/PublicApiUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/theme/endpoint/PublicUserEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/theme/endpoint/SinglePageQueryEndpointTest.java create mode 100644 application/src/test/java/run/halo/app/theme/engine/DefaultThemeTemplateAvailabilityProviderTest.java create mode 100644 application/src/test/java/run/halo/app/theme/engine/PluginClassloaderTemplateResolverTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/FinderRegistryTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/CategoryFinderImplTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceIntegrationTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/MenuFinderImplTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/PluginFinderImplTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/PostFinderImplTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/PostPublicQueryServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/SinglePageConversionServiceImplTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/SinglePageFinderImplTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/impl/TagFinderImplTest.java create mode 100644 application/src/test/java/run/halo/app/theme/finders/vo/UserVoTest.java create mode 100644 application/src/test/java/run/halo/app/theme/message/ThemeMessageResolutionUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/theme/message/ThemeMessageResolverIntegrationTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/EmptyView.java create mode 100644 application/src/test/java/run/halo/app/theme/router/PageUrlUtilsTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/PreviewRouterFunctionTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/ReactiveQueryPostPredicateResolverTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/SinglePageRouteTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/factories/ArchiveRouteFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/factories/AuthorPostsRouteFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/factories/CategoriesRouteFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/factories/IndexRouteFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/factories/PostRouteFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/factories/RouteFactoryTest.java create mode 100644 application/src/test/java/run/halo/app/theme/router/factories/RouteFactoryTestSuite.java create mode 100644 application/src/test/java/run/halo/app/theme/router/factories/TagPostRouteFactoryTest.java create mode 100644 application/src/test/resources/apiToken.salt create mode 100644 application/src/test/resources/app.key create mode 100644 application/src/test/resources/app.pub create mode 100644 application/src/test/resources/application.yaml create mode 100644 application/src/test/resources/backups/backup-for-restoration/extensions.data create mode 100644 application/src/test/resources/backups/backup-for-restoration/workdir/fake-file create mode 100644 application/src/test/resources/categories/independent-post-count.json create mode 100644 application/src/test/resources/config/i18n/messages.properties create mode 100644 application/src/test/resources/config/i18n/messages_zh.properties create mode 100644 application/src/test/resources/console/assets/fake.txt create mode 100644 application/src/test/resources/console/index.html create mode 100644 application/src/test/resources/folder-to-zip/examplefile create mode 100644 application/src/test/resources/plugin/plugin-0.0.1/extensions/reverseProxy.yaml create mode 100644 application/src/test/resources/plugin/plugin-0.0.1/extensions/roles.yaml create mode 100644 application/src/test/resources/plugin/plugin-0.0.1/extensions/setting.yaml create mode 100644 application/src/test/resources/plugin/plugin-0.0.1/extensions/test.yml create mode 100644 application/src/test/resources/plugin/plugin-0.0.1/plugin.yaml create mode 100644 application/src/test/resources/plugin/plugin-0.0.2/plugin.yaml create mode 100644 application/src/test/resources/plugin/plugin-for-finder/META-INF/plugin-components.idx create mode 100644 application/src/test/resources/plugin/plugin-for-reverseproxy/static/test.txt create mode 100644 application/src/test/resources/plugin/plugin.yaml create mode 100644 application/src/test/resources/presets/plugins/fake-plugin.jar create mode 100644 application/src/test/resources/themes/default/i18n/default.properties create mode 100644 application/src/test/resources/themes/default/i18n/en.properties create mode 100644 application/src/test/resources/themes/default/templates/index.html create mode 100644 application/src/test/resources/themes/default/templates/timezone.html create mode 100644 application/src/test/resources/themes/default/theme.yaml create mode 100644 application/src/test/resources/themes/invalid-missing-manifest/i18n/default.properties create mode 100644 application/src/test/resources/themes/invalid-missing-manifest/i18n/en.properties create mode 100644 application/src/test/resources/themes/invalid-missing-manifest/templates/index.html create mode 100644 application/src/test/resources/themes/invalid-missing-manifest/templates/timezone.html create mode 100644 application/src/test/resources/themes/other/i18n/default.properties create mode 100644 application/src/test/resources/themes/other/i18n/en.properties create mode 100644 application/src/test/resources/themes/other/templates/index.html create mode 100644 application/src/test/resources/themes/other/theme.yaml create mode 100644 application/src/test/resources/themes/test-theme.zip create mode 100644 build.gradle create mode 100644 buildSrc/build.gradle create mode 100644 buildSrc/src/main/groovy/halo.publish.gradle create mode 100644 config/checkstyle/checkstyle.xml create mode 100644 docs/authentication/README.md create mode 100644 docs/backup-and-restore.md create mode 100644 docs/cache/page.md create mode 100644 docs/developer-guide/custom-endpoint.md create mode 100644 docs/developer-guide/plugin-configuration-properties.md create mode 100644 docs/email-verification/README.md create mode 100644 docs/extension-points/authentication.md create mode 100644 docs/extension-points/content.md create mode 100644 docs/extension-points/search-engine.md create mode 100644 docs/full-text-search/README.md create mode 100644 docs/full-text-search/algolia.png create mode 100644 docs/full-text-search/meilisearch.jpg create mode 100644 docs/index/README.md create mode 100644 docs/notification/README.md create mode 100644 docs/notification/image-knhw.png create mode 100644 docs/notification/notification-ui.png create mode 100644 docs/plugin/shared-event.md create mode 100644 docs/plugin/websocket.md create mode 100644 e2e/Dockerfile create mode 100644 e2e/Makefile create mode 100644 e2e/README.md create mode 100644 e2e/compose-mysql.yaml create mode 100644 e2e/compose-postgres.yaml create mode 100644 e2e/compose.yaml create mode 100644 e2e/start.sh create mode 100644 e2e/testsuite.yaml create mode 100644 gradle.properties create mode 100644 gradle/wrapper/gradle-wrapper.jar create mode 100644 gradle/wrapper/gradle-wrapper.properties create mode 100644 gradlew create mode 100644 gradlew.bat create mode 100644 hack/cherry_pick_pull.sh create mode 100644 platform/application/build.gradle create mode 100644 platform/plugin/build.gradle create mode 100644 settings.gradle diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json new file mode 100644 index 0000000..1c64b43 --- /dev/null +++ b/.devcontainer/devcontainer.json @@ -0,0 +1,49 @@ +// For format details, see https://aka.ms/devcontainer.json. For config options, see the +// README at: https://github.com/devcontainers/templates/tree/main/src/docker-in-docker +{ + "name": "Halo Dev Container", + // Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile + "image": "mcr.microsoft.com/devcontainers/base:bullseye", + + "features": { + "ghcr.io/devcontainers/features/docker-in-docker:2": { + "version": "20.10", + "enableNonRootDocker": "true", + "moby": "true" + }, + "ghcr.io/devcontainers/features/java:1": { + "version": "17", + "jdkDistro": "tem" + }, + "ghcr.io/devcontainers/features/node:1": { + "version": "20" + }, + "ghcr.io/devcontainers/features/github-cli:1": {} + }, + "customizations": { + "vscode": { + "extensions": [ + "Vue.volar", + "vscodevim.vim", + "shengchen.vscode-checkstyle", + "streetsidesoftware.code-spell-checker", + "vscjava.vscode-gradle", + "vmware.vscode-boot-dev-pack", + "vscjava.vscode-java-pack", + "bradlc.vscode-tailwindcss" + ] + } + } + + // Use 'forwardPorts' to make a list of ports inside the container available locally. + // "forwardPorts": [], + + // Use 'postCreateCommand' to run commands after the container is created. + // "postCreateCommand": "docker --version", + + // Configure tool-specific properties. + // "customizations": {}, + + // Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root. + // "remoteUser": "root" +} diff --git a/.dockerignore b/.dockerignore new file mode 100644 index 0000000..494ab7a --- /dev/null +++ b/.dockerignore @@ -0,0 +1,3 @@ +ui +.github +.git \ No newline at end of file diff --git a/.editorconfig b/.editorconfig new file mode 100644 index 0000000..8508475 --- /dev/null +++ b/.editorconfig @@ -0,0 +1,513 @@ +[*] +charset = utf-8 +end_of_line = lf +indent_size = 4 +indent_style = space +insert_final_newline = false +max_line_length = 120 +tab_width = 4 +ij_continuation_indent_size = 8 +ij_formatter_off_tag = @formatter:off +ij_formatter_on_tag = @formatter:on +ij_formatter_tags_enabled = true +ij_smart_tabs = false +ij_wrap_on_typing = false + +[*.java] +max_line_length = 100 +ij_continuation_indent_size = 4 +ij_java_align_consecutive_assignments = false +ij_java_align_consecutive_variable_declarations = false +ij_java_align_group_field_declarations = false +ij_java_align_multiline_annotation_parameters = false +ij_java_align_multiline_array_initializer_expression = false +ij_java_align_multiline_assignment = false +ij_java_align_multiline_binary_operation = false +ij_java_align_multiline_chained_methods = false +ij_java_align_multiline_extends_list = false +ij_java_align_multiline_for = true +ij_java_align_multiline_method_parentheses = false +ij_java_align_multiline_parameters = false +ij_java_align_multiline_parameters_in_calls = false +ij_java_align_multiline_parenthesized_expression = false +ij_java_align_multiline_records = true +ij_java_align_multiline_resources = true +ij_java_align_multiline_ternary_operation = false +ij_java_align_multiline_text_blocks = false +ij_java_align_multiline_throws_list = false +ij_java_align_subsequent_simple_methods = false +ij_java_align_throws_keyword = false +ij_java_annotation_parameter_wrap = off +ij_java_array_initializer_new_line_after_left_brace = false +ij_java_array_initializer_right_brace_on_new_line = false +ij_java_array_initializer_wrap = normal +ij_java_assert_statement_colon_on_next_line = false +ij_java_assert_statement_wrap = normal +ij_java_assignment_wrap = normal +ij_java_binary_operation_sign_on_next_line = true +ij_java_binary_operation_wrap = normal +ij_java_blank_lines_after_anonymous_class_header = 0 +ij_java_blank_lines_after_class_header = 0 +ij_java_blank_lines_after_imports = 1 +ij_java_blank_lines_after_package = 1 +ij_java_blank_lines_around_class = 1 +ij_java_blank_lines_around_field = 0 +ij_java_blank_lines_around_field_in_interface = 0 +ij_java_blank_lines_around_initializer = 1 +ij_java_blank_lines_around_method = 1 +ij_java_blank_lines_around_method_in_interface = 1 +ij_java_blank_lines_before_class_end = 0 +ij_java_blank_lines_before_imports = 0 +ij_java_blank_lines_before_method_body = 0 +ij_java_blank_lines_before_package = 1 +ij_java_block_brace_style = end_of_line +ij_java_block_comment_at_first_column = false +ij_java_call_parameters_new_line_after_left_paren = false +ij_java_call_parameters_right_paren_on_new_line = false +ij_java_call_parameters_wrap = normal +ij_java_case_statement_on_separate_line = true +ij_java_catch_on_new_line = false +ij_java_class_annotation_wrap = split_into_lines +ij_java_class_brace_style = end_of_line +ij_java_class_count_to_use_import_on_demand = 999 +ij_java_class_names_in_javadoc = 1 +ij_java_do_not_indent_top_level_class_members = false +ij_java_do_not_wrap_after_single_annotation = false +ij_java_do_while_brace_force = always +ij_java_doc_add_blank_line_after_description = true +ij_java_doc_add_blank_line_after_param_comments = false +ij_java_doc_add_blank_line_after_return = false +ij_java_doc_add_p_tag_on_empty_lines = true +ij_java_doc_align_exception_comments = true +ij_java_doc_align_param_comments = false +ij_java_doc_do_not_wrap_if_one_line = false +ij_java_doc_enable_formatting = true +ij_java_doc_enable_leading_asterisks = true +ij_java_doc_indent_on_continuation = false +ij_java_doc_keep_empty_lines = true +ij_java_doc_keep_empty_parameter_tag = true +ij_java_doc_keep_empty_return_tag = true +ij_java_doc_keep_empty_throws_tag = true +ij_java_doc_keep_invalid_tags = true +ij_java_doc_param_description_on_new_line = false +ij_java_doc_preserve_line_breaks = false +ij_java_doc_use_throws_not_exception_tag = true +ij_java_else_on_new_line = false +ij_java_enum_constants_wrap = normal +ij_java_extends_keyword_wrap = normal +ij_java_extends_list_wrap = normal +ij_java_field_annotation_wrap = split_into_lines +ij_java_finally_on_new_line = false +ij_java_for_brace_force = always +ij_java_for_statement_new_line_after_left_paren = false +ij_java_for_statement_right_paren_on_new_line = false +ij_java_for_statement_wrap = normal +ij_java_generate_final_locals = false +ij_java_generate_final_parameters = false +ij_java_if_brace_force = always +ij_java_imports_layout = $*, |, *, |, * +ij_java_indent_case_from_switch = true +ij_java_insert_inner_class_imports = false +ij_java_insert_override_annotation = true +ij_java_keep_blank_lines_before_right_brace = 2 +ij_java_keep_blank_lines_between_package_declaration_and_header = 2 +ij_java_keep_blank_lines_in_code = 2 +ij_java_keep_blank_lines_in_declarations = 2 +ij_java_keep_control_statement_in_one_line = true +ij_java_keep_first_column_comment = true +ij_java_keep_indents_on_empty_lines = false +ij_java_keep_line_breaks = true +ij_java_keep_multiple_expressions_in_one_line = false +ij_java_keep_simple_blocks_in_one_line = false +ij_java_keep_simple_classes_in_one_line = false +ij_java_keep_simple_lambdas_in_one_line = false +ij_java_keep_simple_methods_in_one_line = false +ij_java_label_indent_absolute = false +ij_java_label_indent_size = 0 +ij_java_lambda_brace_style = end_of_line +ij_java_layout_static_imports_separately = true +ij_java_line_comment_add_space = true +ij_java_line_comment_at_first_column = false +ij_java_method_annotation_wrap = split_into_lines +ij_java_method_brace_style = end_of_line +ij_java_method_call_chain_wrap = normal +ij_java_method_parameters_new_line_after_left_paren = false +ij_java_method_parameters_right_paren_on_new_line = false +ij_java_method_parameters_wrap = normal +ij_java_modifier_list_wrap = false +ij_java_names_count_to_use_import_on_demand = 999 +ij_java_new_line_after_lparen_in_record_header = false +ij_java_parameter_annotation_wrap = normal +ij_java_parentheses_expression_new_line_after_left_paren = false +ij_java_parentheses_expression_right_paren_on_new_line = false +ij_java_place_assignment_sign_on_next_line = false +ij_java_prefer_longer_names = true +ij_java_prefer_parameters_wrap = false +ij_java_record_components_wrap = normal +ij_java_repeat_synchronized = true +ij_java_replace_instanceof_and_cast = false +ij_java_replace_null_check = true +ij_java_replace_sum_lambda_with_method_ref = true +ij_java_resource_list_new_line_after_left_paren = false +ij_java_resource_list_right_paren_on_new_line = false +ij_java_resource_list_wrap = normal +ij_java_rparen_on_new_line_in_record_header = false +ij_java_space_after_closing_angle_bracket_in_type_argument = false +ij_java_space_after_colon = true +ij_java_space_after_comma = true +ij_java_space_after_comma_in_type_arguments = true +ij_java_space_after_for_semicolon = true +ij_java_space_after_quest = true +ij_java_space_after_type_cast = true +ij_java_space_before_annotation_array_initializer_left_brace = false +ij_java_space_before_annotation_parameter_list = false +ij_java_space_before_array_initializer_left_brace = true +ij_java_space_before_catch_keyword = true +ij_java_space_before_catch_left_brace = true +ij_java_space_before_catch_parentheses = true +ij_java_space_before_class_left_brace = true +ij_java_space_before_colon = true +ij_java_space_before_colon_in_foreach = true +ij_java_space_before_comma = false +ij_java_space_before_do_left_brace = true +ij_java_space_before_else_keyword = true +ij_java_space_before_else_left_brace = true +ij_java_space_before_finally_keyword = true +ij_java_space_before_finally_left_brace = true +ij_java_space_before_for_left_brace = true +ij_java_space_before_for_parentheses = true +ij_java_space_before_for_semicolon = false +ij_java_space_before_if_left_brace = true +ij_java_space_before_if_parentheses = true +ij_java_space_before_method_call_parentheses = false +ij_java_space_before_method_left_brace = true +ij_java_space_before_method_parentheses = false +ij_java_space_before_opening_angle_bracket_in_type_parameter = false +ij_java_space_before_quest = true +ij_java_space_before_switch_left_brace = true +ij_java_space_before_switch_parentheses = true +ij_java_space_before_synchronized_left_brace = true +ij_java_space_before_synchronized_parentheses = true +ij_java_space_before_try_left_brace = true +ij_java_space_before_try_parentheses = true +ij_java_space_before_type_parameter_list = false +ij_java_space_before_while_keyword = true +ij_java_space_before_while_left_brace = true +ij_java_space_before_while_parentheses = true +ij_java_space_inside_one_line_enum_braces = false +ij_java_space_within_empty_array_initializer_braces = false +ij_java_space_within_empty_method_call_parentheses = false +ij_java_space_within_empty_method_parentheses = false +ij_java_spaces_around_additive_operators = true +ij_java_spaces_around_assignment_operators = true +ij_java_spaces_around_bitwise_operators = true +ij_java_spaces_around_equality_operators = true +ij_java_spaces_around_lambda_arrow = true +ij_java_spaces_around_logical_operators = true +ij_java_spaces_around_method_ref_dbl_colon = false +ij_java_spaces_around_multiplicative_operators = true +ij_java_spaces_around_relational_operators = true +ij_java_spaces_around_shift_operators = true +ij_java_spaces_around_type_bounds_in_type_parameters = true +ij_java_spaces_around_unary_operator = false +ij_java_spaces_within_angle_brackets = false +ij_java_spaces_within_annotation_parentheses = false +ij_java_spaces_within_array_initializer_braces = false +ij_java_spaces_within_braces = false +ij_java_spaces_within_brackets = false +ij_java_spaces_within_cast_parentheses = false +ij_java_spaces_within_catch_parentheses = false +ij_java_spaces_within_for_parentheses = false +ij_java_spaces_within_if_parentheses = false +ij_java_spaces_within_method_call_parentheses = false +ij_java_spaces_within_method_parentheses = false +ij_java_spaces_within_parentheses = false +ij_java_spaces_within_switch_parentheses = false +ij_java_spaces_within_synchronized_parentheses = false +ij_java_spaces_within_try_parentheses = false +ij_java_spaces_within_while_parentheses = false +ij_java_special_else_if_treatment = true +ij_java_subclass_name_suffix = Impl +ij_java_ternary_operation_signs_on_next_line = true +ij_java_ternary_operation_wrap = normal +ij_java_test_name_suffix = Test +ij_java_throws_keyword_wrap = normal +ij_java_throws_list_wrap = normal +ij_java_use_external_annotations = false +ij_java_use_fq_class_names = false +ij_java_use_relative_indents = false +ij_java_use_single_class_imports = true +ij_java_variable_annotation_wrap = normal +ij_java_visibility = public +ij_java_while_brace_force = always +ij_java_while_on_new_line = false +ij_java_wrap_comments = false +ij_java_wrap_first_method_in_call_chain = false +ij_java_wrap_long_lines = true + +[*.properties] +ij_properties_align_group_field_declarations = false +ij_properties_keep_blank_lines = false +ij_properties_key_value_delimiter = equals +ij_properties_spaces_around_key_value_delimiter = false + +[.editorconfig] +ij_editorconfig_align_group_field_declarations = false +ij_editorconfig_space_after_colon = false +ij_editorconfig_space_after_comma = true +ij_editorconfig_space_before_colon = false +ij_editorconfig_space_before_comma = false +ij_editorconfig_spaces_around_assignment_operators = true + +[{*.ant, *.fxml, *.jhm, *.jnlp, *.jrxml, *.jspx, *.pom, *.rng, *.tagx, *.tld, *.wsdl, *.xml, *.xsd, *.xsl, *.xslt, *.xul}] +ij_xml_align_attributes = true +ij_xml_align_text = false +ij_xml_attribute_wrap = normal +ij_xml_block_comment_at_first_column = true +ij_xml_keep_blank_lines = 2 +ij_xml_keep_indents_on_empty_lines = false +ij_xml_keep_line_breaks = true +ij_xml_keep_line_breaks_in_text = true +ij_xml_keep_whitespaces = false +ij_xml_keep_whitespaces_around_cdata = preserve +ij_xml_keep_whitespaces_inside_cdata = false +ij_xml_line_comment_at_first_column = true +ij_xml_space_after_tag_name = false +ij_xml_space_around_equals_in_attribute = false +ij_xml_space_inside_empty_tag = false +ij_xml_text_wrap = normal + +[{*.bash, *.sh, *.zsh}] +indent_size = 2 +tab_width = 2 +ij_shell_binary_ops_start_line = false +ij_shell_keep_column_alignment_padding = false +ij_shell_minify_program = false +ij_shell_redirect_followed_by_space = false +ij_shell_switch_cases_indented = false + +[{*.gant, *.gradle, *.groovy, *.gy}] +ij_groovy_align_group_field_declarations = false +ij_groovy_align_multiline_array_initializer_expression = false +ij_groovy_align_multiline_assignment = false +ij_groovy_align_multiline_binary_operation = false +ij_groovy_align_multiline_chained_methods = false +ij_groovy_align_multiline_extends_list = false +ij_groovy_align_multiline_for = true +ij_groovy_align_multiline_list_or_map = true +ij_groovy_align_multiline_method_parentheses = false +ij_groovy_align_multiline_parameters = true +ij_groovy_align_multiline_parameters_in_calls = false +ij_groovy_align_multiline_resources = true +ij_groovy_align_multiline_ternary_operation = false +ij_groovy_align_multiline_throws_list = false +ij_groovy_align_named_args_in_map = true +ij_groovy_align_throws_keyword = false +ij_groovy_array_initializer_new_line_after_left_brace = false +ij_groovy_array_initializer_right_brace_on_new_line = false +ij_groovy_array_initializer_wrap = off +ij_groovy_assert_statement_wrap = off +ij_groovy_assignment_wrap = off +ij_groovy_binary_operation_wrap = off +ij_groovy_blank_lines_after_class_header = 0 +ij_groovy_blank_lines_after_imports = 1 +ij_groovy_blank_lines_after_package = 1 +ij_groovy_blank_lines_around_class = 1 +ij_groovy_blank_lines_around_field = 0 +ij_groovy_blank_lines_around_field_in_interface = 0 +ij_groovy_blank_lines_around_method = 1 +ij_groovy_blank_lines_around_method_in_interface = 1 +ij_groovy_blank_lines_before_imports = 1 +ij_groovy_blank_lines_before_method_body = 0 +ij_groovy_blank_lines_before_package = 0 +ij_groovy_block_brace_style = end_of_line +ij_groovy_block_comment_at_first_column = true +ij_groovy_call_parameters_new_line_after_left_paren = false +ij_groovy_call_parameters_right_paren_on_new_line = false +ij_groovy_call_parameters_wrap = off +ij_groovy_catch_on_new_line = false +ij_groovy_class_annotation_wrap = split_into_lines +ij_groovy_class_brace_style = end_of_line +ij_groovy_class_count_to_use_import_on_demand = 5 +ij_groovy_do_while_brace_force = never +ij_groovy_else_on_new_line = false +ij_groovy_enum_constants_wrap = off +ij_groovy_extends_keyword_wrap = off +ij_groovy_extends_list_wrap = off +ij_groovy_field_annotation_wrap = split_into_lines +ij_groovy_finally_on_new_line = false +ij_groovy_for_brace_force = never +ij_groovy_for_statement_new_line_after_left_paren = false +ij_groovy_for_statement_right_paren_on_new_line = false +ij_groovy_for_statement_wrap = off +ij_groovy_if_brace_force = never +ij_groovy_import_annotation_wrap = 2 +ij_groovy_indent_case_from_switch = true +ij_groovy_indent_label_blocks = true +ij_groovy_insert_inner_class_imports = false +ij_groovy_keep_blank_lines_before_right_brace = 2 +ij_groovy_keep_blank_lines_in_code = 2 +ij_groovy_keep_blank_lines_in_declarations = 2 +ij_groovy_keep_control_statement_in_one_line = true +ij_groovy_keep_first_column_comment = true +ij_groovy_keep_indents_on_empty_lines = false +ij_groovy_keep_line_breaks = true +ij_groovy_keep_multiple_expressions_in_one_line = false +ij_groovy_keep_simple_blocks_in_one_line = false +ij_groovy_keep_simple_classes_in_one_line = true +ij_groovy_keep_simple_lambdas_in_one_line = true +ij_groovy_keep_simple_methods_in_one_line = true +ij_groovy_label_indent_absolute = false +ij_groovy_label_indent_size = 0 +ij_groovy_lambda_brace_style = end_of_line +ij_groovy_layout_static_imports_separately = true +ij_groovy_line_comment_add_space = false +ij_groovy_line_comment_at_first_column = true +ij_groovy_method_annotation_wrap = split_into_lines +ij_groovy_method_brace_style = end_of_line +ij_groovy_method_call_chain_wrap = off +ij_groovy_method_parameters_new_line_after_left_paren = false +ij_groovy_method_parameters_right_paren_on_new_line = false +ij_groovy_method_parameters_wrap = off +ij_groovy_modifier_list_wrap = false +ij_groovy_names_count_to_use_import_on_demand = 3 +ij_groovy_parameter_annotation_wrap = off +ij_groovy_parentheses_expression_new_line_after_left_paren = false +ij_groovy_parentheses_expression_right_paren_on_new_line = false +ij_groovy_prefer_parameters_wrap = false +ij_groovy_resource_list_new_line_after_left_paren = false +ij_groovy_resource_list_right_paren_on_new_line = false +ij_groovy_resource_list_wrap = off +ij_groovy_space_after_assert_separator = true +ij_groovy_space_after_colon = true +ij_groovy_space_after_comma = true +ij_groovy_space_after_comma_in_type_arguments = true +ij_groovy_space_after_for_semicolon = true +ij_groovy_space_after_quest = true +ij_groovy_space_after_type_cast = true +ij_groovy_space_before_annotation_parameter_list = false +ij_groovy_space_before_array_initializer_left_brace = false +ij_groovy_space_before_assert_separator = false +ij_groovy_space_before_catch_keyword = true +ij_groovy_space_before_catch_left_brace = true +ij_groovy_space_before_catch_parentheses = true +ij_groovy_space_before_class_left_brace = true +ij_groovy_space_before_closure_left_brace = true +ij_groovy_space_before_colon = true +ij_groovy_space_before_comma = false +ij_groovy_space_before_do_left_brace = true +ij_groovy_space_before_else_keyword = true +ij_groovy_space_before_else_left_brace = true +ij_groovy_space_before_finally_keyword = true +ij_groovy_space_before_finally_left_brace = true +ij_groovy_space_before_for_left_brace = true +ij_groovy_space_before_for_parentheses = true +ij_groovy_space_before_for_semicolon = false +ij_groovy_space_before_if_left_brace = true +ij_groovy_space_before_if_parentheses = true +ij_groovy_space_before_method_call_parentheses = false +ij_groovy_space_before_method_left_brace = true +ij_groovy_space_before_method_parentheses = false +ij_groovy_space_before_quest = true +ij_groovy_space_before_switch_left_brace = true +ij_groovy_space_before_switch_parentheses = true +ij_groovy_space_before_synchronized_left_brace = true +ij_groovy_space_before_synchronized_parentheses = true +ij_groovy_space_before_try_left_brace = true +ij_groovy_space_before_try_parentheses = true +ij_groovy_space_before_while_keyword = true +ij_groovy_space_before_while_left_brace = true +ij_groovy_space_before_while_parentheses = true +ij_groovy_space_in_named_argument = true +ij_groovy_space_in_named_argument_before_colon = false +ij_groovy_space_within_empty_array_initializer_braces = false +ij_groovy_space_within_empty_method_call_parentheses = false +ij_groovy_spaces_around_additive_operators = true +ij_groovy_spaces_around_assignment_operators = true +ij_groovy_spaces_around_bitwise_operators = true +ij_groovy_spaces_around_equality_operators = true +ij_groovy_spaces_around_lambda_arrow = true +ij_groovy_spaces_around_logical_operators = true +ij_groovy_spaces_around_multiplicative_operators = true +ij_groovy_spaces_around_regex_operators = true +ij_groovy_spaces_around_relational_operators = true +ij_groovy_spaces_around_shift_operators = true +ij_groovy_spaces_within_annotation_parentheses = false +ij_groovy_spaces_within_array_initializer_braces = false +ij_groovy_spaces_within_braces = true +ij_groovy_spaces_within_brackets = false +ij_groovy_spaces_within_cast_parentheses = false +ij_groovy_spaces_within_catch_parentheses = false +ij_groovy_spaces_within_for_parentheses = false +ij_groovy_spaces_within_gstring_injection_braces = false +ij_groovy_spaces_within_if_parentheses = false +ij_groovy_spaces_within_list_or_map = false +ij_groovy_spaces_within_method_call_parentheses = false +ij_groovy_spaces_within_method_parentheses = false +ij_groovy_spaces_within_parentheses = false +ij_groovy_spaces_within_switch_parentheses = false +ij_groovy_spaces_within_synchronized_parentheses = false +ij_groovy_spaces_within_try_parentheses = false +ij_groovy_spaces_within_tuple_expression = false +ij_groovy_spaces_within_while_parentheses = false +ij_groovy_special_else_if_treatment = true +ij_groovy_ternary_operation_wrap = off +ij_groovy_throws_keyword_wrap = off +ij_groovy_throws_list_wrap = off +ij_groovy_use_flying_geese_braces = false +ij_groovy_use_fq_class_names = false +ij_groovy_use_fq_class_names_in_javadoc = true +ij_groovy_use_relative_indents = false +ij_groovy_use_single_class_imports = true +ij_groovy_variable_annotation_wrap = off +ij_groovy_while_brace_force = never +ij_groovy_while_on_new_line = false +ij_groovy_wrap_long_lines = false + +[{*.har, *.json}] +indent_size = 2 +ij_json_keep_blank_lines_in_code = 0 +ij_json_keep_indents_on_empty_lines = false +ij_json_keep_line_breaks = true +ij_json_space_after_colon = true +ij_json_space_after_comma = true +ij_json_space_before_colon = true +ij_json_space_before_comma = false +ij_json_spaces_within_braces = false +ij_json_spaces_within_brackets = false +ij_json_wrap_long_lines = false + +[{*.htm, *.html, *.sht, *.shtm, *.shtml}] +ij_html_add_new_line_before_tags = body, div, p, form, h1, h2, h3 +ij_html_align_attributes = true +ij_html_align_text = false +ij_html_attribute_wrap = normal +ij_html_block_comment_at_first_column = true +ij_html_do_not_align_children_of_min_lines = 0 +ij_html_do_not_break_if_inline_tags = title, h1, h2, h3, h4, h5, h6, p +ij_html_do_not_indent_children_of_tags = html, body, thead, tbody, tfoot +ij_html_enforce_quotes = false +ij_html_inline_tags = a, abbr, acronym, b, basefont, bdo, big, br, cite, cite, code, dfn, em, font, i, img, input, kbd, label, q, s, samp, select, small, span, strike, strong, sub, sup, textarea, tt, u, var +ij_html_keep_blank_lines = 2 +ij_html_keep_indents_on_empty_lines = false +ij_html_keep_line_breaks = true +ij_html_keep_line_breaks_in_text = true +ij_html_keep_whitespaces = false +ij_html_keep_whitespaces_inside = span, pre, textarea +ij_html_line_comment_at_first_column = true +ij_html_new_line_after_last_attribute = never +ij_html_new_line_before_first_attribute = never +ij_html_quote_style = double +ij_html_remove_new_line_before_tags = br +ij_html_space_after_tag_name = false +ij_html_space_around_equality_in_attribute = false +ij_html_space_inside_empty_tag = false +ij_html_text_wrap = normal + +[{*.yaml, *.yml}] +indent_size = 2 +ij_yaml_keep_indents_on_empty_lines = false +ij_yaml_keep_line_breaks = true + +[*.md] +indent_size = 2 \ No newline at end of file diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..c161ab5 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,4 @@ +*.js linguist-language=Java +*.css linguist-language=Java +*.ftl linguist-language=FreeMarker +*.html linguist-language=Vue diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml new file mode 100644 index 0000000..2644645 --- /dev/null +++ b/.github/FUNDING.yml @@ -0,0 +1 @@ +custom: ["https://afdian.com/a/halo-dev"] diff --git a/.github/ISSUE_TEMPLATE/bug_report.en.yml b/.github/ISSUE_TEMPLATE/bug_report.en.yml new file mode 100644 index 0000000..0ab1c8b --- /dev/null +++ b/.github/ISSUE_TEMPLATE/bug_report.en.yml @@ -0,0 +1,80 @@ +name: Bug Report +description: File a bug report +labels: [bug] +body: + - type: markdown + id: preface + attributes: + value: | + Thank you for taking the time to fill out this issue report! Before we begin, we highly recommend reading through the [Open Source Guides](https://opensource.guide/), which will greatly improve our mutual efficiency. + + **Before submitting, please check:** + + - You have searched for related issues in the [issues](https://github.com/halo-dev/halo/issues) list. + - This is an issue with the Halo project itself. If it is not an issue with the project itself(For example: Installation and deployment issues.), it is recommended to submit it in the [Discussions](https://github.com/halo-dev/halo/discussions). + - You have tried disabling all plugins to rule out plugins as the cause of the problem. + - If it is an issue with plugins and themes, please submit it in the respective plugin and theme repositories. + - type: markdown + id: environment + attributes: + value: "## Environment" + - type: textarea + id: system-information + attributes: + label: "System information" + description: "Access the actuator page of the Console, click the copy button in the upper right corner, and paste the information here." + placeholder: | + - External url: https://demo.halo.run + - Start time: 2024-07-21 14:50 + - Version: 2.x.x + - Build time: 2024-07-15 18:19 + - Git Commit: 6d4bedd + - Java: IBM Semeru Runtime Open Edition / ... + - Database: PostgreSQL / 16.3 ... + - Operating system: Linux / 5.15.0-88 ... + - Activated theme: ... + - Enabled plugins: + - ... + validations: + required: true + - type: dropdown + id: operation-method + validations: + required: true + attributes: + label: "What is the project operation method?" + options: + - Docker + - Docker Compose + - Fat Jar + - Source Code + - type: markdown + id: details + attributes: + value: "## Details" + - type: textarea + id: what-happened + attributes: + label: "What happened?" + description: "For ease of management, please do not report multiple unrelated issues under the same issue." + validations: + required: true + - type: textarea + id: reproduce-steps + attributes: + label: "Reproduce Steps" + description: "If it can be consistently reproduced, please provide detailed steps." + placeholder: | + 1. Open '...' + 2. Click '...' + - type: textarea + id: logs + attributes: + label: "Relevant log output" + description: "Please copy and paste any relevant log output. This will be automatically formatted into code, so no need for backticks." + render: shell + - type: textarea + id: additional-information + attributes: + label: "Additional information" + description: "If you have other information to note, you can fill it in here (screenshots, videos, etc.)." diff --git a/.github/ISSUE_TEMPLATE/bug_report.zh.yml b/.github/ISSUE_TEMPLATE/bug_report.zh.yml new file mode 100644 index 0000000..0cc3f6b --- /dev/null +++ b/.github/ISSUE_TEMPLATE/bug_report.zh.yml @@ -0,0 +1,80 @@ +name: Bug 反馈 +description: 提交 Bug 反馈 +labels: [bug] +body: + - type: markdown + id: preface + attributes: + value: | + 感谢你花时间填写此错误报告！在开始之前，我们非常推荐阅读一遍[《开源软件指南》](https://opensource.guide/zh-hans/)，这会在很大程度上提高我们彼此的效率。 + + **在提交之前，请检查：** + + - 已经在 [issues](https://github.com/halo-dev/halo/issues) 列表中搜索了相关问题。 + - 这是 Halo 项目本身存在的问题，如果是非项目本身的问题（如：安装部署问题），建议在 [Discussions](https://github.com/halo-dev/halo/discussions) 提交。 + - 已经尝试过停用所有的插件，排除是插件导致的问题。 + - 如果是插件和主题的问题，请在对应的插件和主题仓库提交。 + - type: markdown + id: environment + attributes: + value: "## 环境信息" + - type: textarea + id: system-information + attributes: + label: "系统信息" + description: "访问 Console 的概览页面，点击右上角的复制按钮，将信息粘贴到此处。" + placeholder: | + - 外部访问地址: https://demo.halo.run + - 启动时间: 2024-07-21 14:50 + - 版本: 2.x.x + - 构建时间: 2024-07-15 18:19 + - Git Commit: 6d4bedd + - Java: IBM Semeru Runtime Open Edition / ... + - 数据库: PostgreSQL / 16.3 ... + - 操作系统: Linux / 5.15.0-88 ... + - 已激活主题: ... + - 已启动插件: + - ... + validations: + required: true + - type: dropdown + id: operation-method + validations: + required: true + attributes: + label: "使用的哪种方式运行？" + options: + - Docker + - Docker Compose + - Fat Jar + - Source Code + - type: markdown + id: details + attributes: + value: "## 详细信息" + - type: textarea + id: what-happened + attributes: + label: "发生了什么？" + description: "为了方便我们管理，请不要在同一个 issue 下报告多个不相关的问题。" + validations: + required: true + - type: textarea + id: reproduce-steps + attributes: + label: "复现步骤" + description: "如果可以稳定复现，请提供详细的步骤。" + placeholder: | + 1. 打开 '...' + 2. 点击 '...' + - type: textarea + id: logs + attributes: + label: "相关日志输出" + description: "请复制并粘贴任何相关的日志输出。这将自动格式化为代码，因此无需反引号。" + render: shell + - type: textarea + id: additional-information + attributes: + label: "附加信息" + description: "如果你还有其他需要提供的信息，可以在这里填写（可以提供截图、视频等）。" diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml new file mode 100644 index 0000000..fbbb7b5 --- /dev/null +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -0,0 +1,5 @@ +blank_issues_enabled: false +contact_links: + - name: 对 Halo 有其他问题 + url: https://bbs.halo.run + about: 如果你对 Halo 有其他想要提问的，我们欢迎到我们的官方社区进行提问。 \ No newline at end of file diff --git a/.github/ISSUE_TEMPLATE/feature_request.en.yml b/.github/ISSUE_TEMPLATE/feature_request.en.yml new file mode 100644 index 0000000..e00b707 --- /dev/null +++ b/.github/ISSUE_TEMPLATE/feature_request.en.yml @@ -0,0 +1,38 @@ +name: Feature Request +description: File a feature request +body: + - type: markdown + id: preface + attributes: + value: | + Hello! Thank you for submitting a new feature suggestion for Halo. Before we begin, we highly recommend reading through the [Open Source Guides](https://opensource.guide/), which will greatly improve our mutual efficiency. + + **Before submitting, please check:** + + - You have searched for related issues in the [issues](https://github.com/halo-dev/halo/issues) list. + - This is a feature related to Halo. If it is not an issue with the project itself, it is recommended to submit it in the [Discussions](https://github.com/halo-dev/halo/discussions). + - If it is a feature suggestion for plugins and themes, please submit it in the respective plugin and theme repositories. + - type: markdown + id: environment + attributes: + value: "## Environment" + - type: input + id: version + attributes: + label: "Your current Halo version" + - type: markdown + id: details + attributes: + value: "## Details" + - type: textarea + id: description + attributes: + label: "Describe this feature" + description: "For ease of management, please do not submit multiple unrelated features under the same issue." + validations: + required: true + - type: textarea + id: additional-information + attributes: + label: "Additional information" + description: "If you have other information to note, you can fill it in here (screenshots, videos, etc.)." \ No newline at end of file diff --git a/.github/ISSUE_TEMPLATE/feature_request.zh.yml b/.github/ISSUE_TEMPLATE/feature_request.zh.yml new file mode 100644 index 0000000..5768cb3 --- /dev/null +++ b/.github/ISSUE_TEMPLATE/feature_request.zh.yml @@ -0,0 +1,38 @@ +name: 新特性建议 +description: 提交新特性建议 +body: + - type: markdown + id: preface + attributes: + value: | + 你好！感谢你为 Halo 提交新特性建议。在开始之前，我们非常推荐阅读一遍[《开源软件指南》](https://opensource.guide/zh-hans/)，这会在很大程度上提高我们彼此的效率。 + + **在提交之前，请检查：** + + - 已经在 [issues](https://github.com/halo-dev/halo/issues) 列表中搜索了相关问题。 + - 这是和 Halo 相关的特性，如果是非项目本身的问题，建议在 [Discussions](https://github.com/halo-dev/halo/discussions) 提交。 + - 如果是插件和主题特性建议，请在对应的插件和主题仓库提交。 + - type: markdown + id: environment + attributes: + value: "## 环境信息" + - type: input + id: version + attributes: + label: "你当前使用的版本" + - type: markdown + id: details + attributes: + value: "## 详细信息" + - type: textarea + id: description + attributes: + label: "描述一下此特性" + description: "为了方便我们管理，请不要在同一个 issue 下提交多个没有相关性的特性。" + validations: + required: true + - type: textarea + id: additional-information + attributes: + label: "附加信息" + description: "如果你还有其他需要提供的信息，可以在这里填写（可以提供截图、视频等）。" \ No newline at end of file diff --git a/.github/actions/docker-buildx-push/action.yaml b/.github/actions/docker-buildx-push/action.yaml new file mode 100644 index 0000000..d377b43 --- /dev/null +++ b/.github/actions/docker-buildx-push/action.yaml @@ -0,0 +1,75 @@ +name: "Docker buildx and push" +description: "Buildx and push the Docker image." + +inputs: + ghcr-token: + description: Token of current GitHub account in GitHub container registry. + required: false + default: "" + dockerhub-user: + description: "User name for the DockerHub account" + required: false + default: "" + dockerhub-token: + description: Token for the DockerHub account + required: false + default: "" + push: + description: Should push the docker image or not. + required: false + default: "false" + platforms: + description: Target platforms for building image + required: false + default: "linux/amd64,linux/arm/v7,linux/arm64/v8,linux/ppc64le,linux/s390x" + image-name: + description: The basic name of docker. + required: false + default: "halo" + +runs: + using: "composite" + steps: + - name: Docker meta for Halo + id: meta + uses: docker/metadata-action@v5 + with: + images: | + ghcr.io/${{ github.repository_owner }}/${{ inputs.image-name }} + halohub/${{ inputs.image-name }} + tags: | + type=schedule,pattern=nightly-{{date 'YYYYMMDD'}},enabled=${{ github.event_name == 'schedule' }} + type=ref,event=branch,enabled=${{ github.event_name == 'push' }} + type=ref,event=pr,enabled=${{ github.event_name == 'pull_request' }} + type=semver,pattern={{major}} + type=semver,pattern={{major}}.{{minor}} + type=semver,pattern={{ version }} + type=sha,enabled=${{ github.event_name == 'push' }} + flavor: | + latest=false + - name: Set up QEMU + uses: docker/setup-qemu-action@v3 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 + - name: Login to GHCR + uses: docker/login-action@v3 + if: inputs.ghcr-token != '' && github.event_name != 'pull_request' + with: + registry: ghcr.io + username: ${{ github.repository_owner }} + password: ${{ inputs.ghcr-token }} + - name: Login to DockerHub + if: inputs.dockerhub-token != '' && github.event_name != 'pull_request' + uses: docker/login-action@v3 + with: + username: ${{ inputs.dockerhub-user }} + password: ${{ inputs.dockerhub-token }} + - name: Build and push + uses: docker/build-push-action@v5 + with: + context: . + file: ./Dockerfile + platforms: ${{ inputs.platforms }} + labels: ${{ steps.meta.outputs.labels }} + tags: ${{ steps.meta.outputs.tags }} + push: ${{ (inputs.ghcr-token != '' || inputs.dockerhub-token != '') && inputs.push == 'true' }} diff --git a/.github/actions/setup-env/action.yaml b/.github/actions/setup-env/action.yaml new file mode 100644 index 0000000..b373b75 --- /dev/null +++ b/.github/actions/setup-env/action.yaml @@ -0,0 +1,40 @@ +name: Setup Environment +description: Setup environment to check and build Halo, including console and core projects. + +inputs: + node-version: + description: Node.js version. + required: false + default: "20" + + pnpm-version: + description: pnpm version. + required: false + default: "9" + + java-version: + description: Java version. + required: false + default: "17" + +runs: + using: "composite" + steps: + - uses: pnpm/action-setup@v3 + name: Setup pnpm + with: + version: ${{ inputs.pnpm-version }} + + - name: Set up Node.js + uses: actions/setup-node@v4 + with: + node-version: ${{ inputs.node-version }} + cache: "pnpm" + cache-dependency-path: "ui/pnpm-lock.yaml" + + - name: Setup JDK + uses: actions/setup-java@v4 + with: + distribution: "temurin" + cache: "gradle" + java-version: ${{ inputs.java-version }} diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..a910d63 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,12 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for more information: +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates +# https://containers.dev/guide/dependabot + +version: 2 +updates: + - package-ecosystem: "devcontainers" + directory: "/" + schedule: + interval: weekly diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md new file mode 100644 index 0000000..59c3107 --- /dev/null +++ b/.github/pull_request_template.md @@ -0,0 +1,59 @@ + + +#### What type of PR is this? + + + +#### What this PR does / why we need it: + +#### Which issue(s) this PR fixes: + + +Fixes # + +#### Special notes for your reviewer: + +#### Does this PR introduce a user-facing change? + + + +```release-note +``` diff --git a/.github/workflows/halo.yaml b/.github/workflows/halo.yaml new file mode 100644 index 0000000..b83bae4 --- /dev/null +++ b/.github/workflows/halo.yaml @@ -0,0 +1,126 @@ +name: Halo Workflow + +on: + pull_request: + branches: + - main + - release-* + paths: + - "**" + - "!**.md" + push: + branches: + - main + - release-* + paths: + - "**" + - "!**.md" + release: + types: + - published + +concurrency: + group: ${{github.workflow}} - ${{github.ref}} + cancel-in-progress: true + +jobs: + test: + if: github.event_name == 'pull_request' || github.event_name == 'push' + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - name: Setup Environment + uses: ./.github/actions/setup-env + - name: Check Halo + run: ./gradlew check + - name: Upload coverage reports to Codecov + if: github.repository == 'halo-dev/halo' + uses: codecov/codecov-action@v4 + + build: + runs-on: ubuntu-latest + if: always() && (needs.test.result == 'skipped' || needs.test.result == 'success') + needs: test + steps: + - uses: actions/checkout@v4 + - name: Setup Environment + uses: ./.github/actions/setup-env + - name: Reset version of Halo + if: github.event_name == 'release' + shell: bash + run: | + # Set the version with tag name when releasing + version=${{ github.event.release.tag_name }} + version=${version#v} + sed -i "s/version=.*-SNAPSHOT$/version=$version/1" gradle.properties + - name: Build Halo + run: ./gradlew clean && ./gradlew downloadPluginPresets && ./gradlew build -x check + - name: Upload Artifacts + if: github.repository == 'halo-dev/halo' + uses: actions/upload-artifact@v4 + with: + name: halo-artifacts + path: application/build/libs + retention-days: 1 + + github-release: + runs-on: ubuntu-latest + if: always() && needs.build.result == 'success' && github.event_name == 'release' + needs: build + steps: + - uses: actions/checkout@v4 + - name: Download Artifacts + uses: actions/download-artifact@v4 + with: + name: halo-artifacts + path: application/build/libs + - name: Upload Artifacts + if: github.repository == 'halo-dev/halo' + env: + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + run: gh release upload ${{ github.event.release.tag_name }} application/build/libs/* + + docker-build-and-push: + if: always() && needs.build.result == 'success' && (github.event_name == 'push' || github.event_name == 'release') + runs-on: ubuntu-latest + needs: build + steps: + - uses: actions/checkout@v4 + - name: Download Artifacts + uses: actions/download-artifact@v4 + with: + name: halo-artifacts + path: application/build/libs + - name: Docker Buildx and Push + uses: ./.github/actions/docker-buildx-push + with: + image-name: ${{ github.event_name == 'release' && 'halo' || 'halo-dev' }} + ghcr-token: ${{ secrets.GITHUB_TOKEN }} + dockerhub-user: ${{ secrets.DOCKER_USERNAME }} + dockerhub-token: ${{ secrets.DOCKER_TOKEN }} + push: true + platforms: linux/amd64,linux/arm64/v8,linux/ppc64le,linux/s390x + + e2e-test: + if: always() && needs.build.result == 'success' && (github.event_name == 'pull_request' || github.event_name == 'push') + runs-on: ubuntu-latest + needs: build + steps: + - uses: actions/checkout@v4 + - name: Download Artifacts + uses: actions/download-artifact@v4 + with: + name: halo-artifacts + path: application/build/libs + - name: Docker Build + uses: docker/build-push-action@v5 + with: + tags: ghcr.io/halo-dev/halo-dev:main + push: false + context: . + - name: E2E Testing + continue-on-error: true + run: | + sudo curl -L https://github.com/docker/compose/releases/download/v2.23.0/docker-compose-linux-x86_64 -o /usr/local/bin/docker-compose + sudo chmod u+x /usr/local/bin/docker-compose + cd e2e && make all diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..db22387 --- /dev/null +++ b/.gitignore @@ -0,0 +1,78 @@ +### Maven +target/ +logs/ +!.mvn/wrapper/maven-wrapper.jar + +### Gradle +.gradle +build/ +out/ +!gradle/wrapper/gradle-wrapper.jar +bin/ + +### STS ### +.apt_generated +.classpath +.factorypath +.project +.settings +.springBeans +.sts4-cache + +### IntelliJ IDEA ### +.idea +*.iws +*.iml +*.ipr +log/ + +### NetBeans ### +nbproject/private/ +build/ +nbbuild/ +dist/ +nbdist/ +.nb-gradle/ + +### Mac +.DS_Store +*/.DS_Store + +### VS Code ### +*.project +*.factorypath + +### Compiled class file +*.class + +### Log file +*.log + +### BlueJ files +*.ctxt + +### Mobile Tools for Java (J2ME) +.mtj.tmp/ + +### Package Files +*.war +*.nar +*.ear +*.zip +*.tar.gz +*.rar + +### VSCode +.vscode + +### Local file +application-local.yml +application-local.yaml +application-local.properties + +### Zip file for test +!application/src/test/resources/themes/*.zip +!application/src/main/resources/themes/*.zip +application/src/main/resources/console/ +application/src/main/resources/uc/ +application/src/main/resources/presets/ diff --git a/.gitpod.yml b/.gitpod.yml new file mode 100644 index 0000000..512cc0a --- /dev/null +++ b/.gitpod.yml @@ -0,0 +1,8 @@ +# This configuration file was automatically generated by Gitpod. +# Please adjust to your needs (see https://www.gitpod.io/docs/introduction/learn-gitpod/gitpod-yaml) +# and commit this file to your remote git repository to share the goodness with others. + +# Learn more from ready-to-use templates: https://www.gitpod.io/docs/introduction/getting-started/quickstart + +tasks: + - init: ./gradlew clean build -x check && sdk install java 17.0.3-ms diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md new file mode 100644 index 0000000..b799482 --- /dev/null +++ b/CODE_OF_CONDUCT.md @@ -0,0 +1,128 @@ +# Contributor Covenant Code of Conduct + +## Our Pledge + +We as members, contributors, and leaders pledge to make participation in our +community a harassment-free experience for everyone, regardless of age, body +size, visible or invisible disability, ethnicity, sex characteristics, gender +identity and expression, level of experience, education, socio-economic status, +nationality, personal appearance, race, religion, or sexual identity +and orientation. + +We pledge to act and interact in ways that contribute to an open, welcoming, +diverse, inclusive, and healthy community. + +## Our Standards + +Examples of behavior that contributes to a positive environment for our +community include: + +* Demonstrating empathy and kindness toward other people +* Being respectful of differing opinions, viewpoints, and experiences +* Giving and gracefully accepting constructive feedback +* Accepting responsibility and apologizing to those affected by our mistakes, + and learning from the experience +* Focusing on what is best not just for us as individuals, but for the + overall community + +Examples of unacceptable behavior include: + +* The use of sexualized language or imagery, and sexual attention or + advances of any kind +* Trolling, insulting or derogatory comments, and personal or political attacks +* Public or private harassment +* Publishing others' private information, such as a physical or email + address, without their explicit permission +* Other conduct which could reasonably be considered inappropriate in a + professional setting + +## Enforcement Responsibilities + +Community leaders are responsible for clarifying and enforcing our standards of +acceptable behavior and will take appropriate and fair corrective action in +response to any behavior that they deem inappropriate, threatening, offensive, +or harmful. + +Community leaders have the right and responsibility to remove, edit, or reject +comments, commits, code, wiki edits, issues, and other contributions that are +not aligned to this Code of Conduct, and will communicate reasons for moderation +decisions when appropriate. + +## Scope + +This Code of Conduct applies within all community spaces, and also applies when +an individual is officially representing the community in public spaces. +Examples of representing our community include using an official e-mail address, +posting via an official social media account, or acting as an appointed +representative at an online or offline event. + +## Enforcement + +Instances of abusive, harassing, or otherwise unacceptable behavior may be +reported to the community leaders responsible for enforcement at +hi@halo.run. +All complaints will be reviewed and investigated promptly and fairly. + +All community leaders are obligated to respect the privacy and security of the +reporter of any incident. + +## Enforcement Guidelines + +Community leaders will follow these Community Impact Guidelines in determining +the consequences for any action they deem in violation of this Code of Conduct: + +### 1. Correction + +**Community Impact**: Use of inappropriate language or other behavior deemed +unprofessional or unwelcome in the community. + +**Consequence**: A private, written warning from community leaders, providing +clarity around the nature of the violation and an explanation of why the +behavior was inappropriate. A public apology may be requested. + +### 2. Warning + +**Community Impact**: A violation through a single incident or series +of actions. + +**Consequence**: A warning with consequences for continued behavior. No +interaction with the people involved, including unsolicited interaction with +those enforcing the Code of Conduct, for a specified period of time. This +includes avoiding interactions in community spaces as well as external channels +like social media. Violating these terms may lead to a temporary or +permanent ban. + +### 3. Temporary Ban + +**Community Impact**: A serious violation of community standards, including +sustained inappropriate behavior. + +**Consequence**: A temporary ban from any sort of interaction or public +communication with the community for a specified period of time. No public or +private interaction with the people involved, including unsolicited interaction +with those enforcing the Code of Conduct, is allowed during this period. +Violating these terms may lead to a permanent ban. + +### 4. Permanent Ban + +**Community Impact**: Demonstrating a pattern of violation of community +standards, including sustained inappropriate behavior, harassment of an +individual, or aggression toward or disparagement of classes of individuals. + +**Consequence**: A permanent ban from any sort of public interaction within +the community. + +## Attribution + +This Code of Conduct is adapted from the [Contributor Covenant][homepage], +version 2.0, available at +https://www.contributor-covenant.org/version/2/0/code_of_conduct.html. + +Community Impact Guidelines were inspired by [Mozilla's code of conduct +enforcement ladder](https://github.com/mozilla/diversity). + +[homepage]: https://www.contributor-covenant.org + +For answers to common questions about this code of conduct, see the FAQ at +https://www.contributor-covenant.org/faq. Translations are available at +https://www.contributor-covenant.org/translations. diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md new file mode 100644 index 0000000..a3ed620 --- /dev/null +++ b/CONTRIBUTING.md @@ -0,0 +1,68 @@ +> 欢迎你参与 Halo 的开发，下面是参与代码贡献的指南，以供参考。 + +### 代码贡献步骤 + +#### 0. 提交 issue + +任何新功能或者功能改进建议都先提交 issue 讨论一下再进行开发，bug 修复可以直接提交 pull request。 + +#### 1. Fork 此仓库 + +点击右上角的 `fork` 按钮即可。 + +#### 2. Clone 仓库到本地 + +```bash +git clone https://github.com/{YOUR_USERNAME}/halo + +git submodule init + +git submodule update +``` + +#### 3. 创建新的开发分支 + +```bash +git checkout -b {BRANCH_NAME} +``` + +#### 4. 提交代码 + +```bash +git push origin {BRANCH_NAME} +``` + +#### 5. 提交 pull request + +回到自己的仓库页面，选择 `New pull request` 按钮，创建 `Pull request` 到原仓库的 `main` 分支。 + +然后等待我们 Review 即可，如有 `Change Request`，再本地修改之后再次提交即可。 + +#### 6. 更新主仓库代码到自己的仓库 + +```bash +git remote add upstream git@github.com:halo-dev/halo.git + +git pull upstream main + +git push +``` + +### E2E + +Please consider adding some [e2e test cases](e2e/README.md) to make sure the APIs work as expected. + +### 开发规范 + +请参考 [https://docs.halo.run/developer-guide/core/code-style](https://docs.halo.run/developer-guide/core/code-style)，请确保所有代码格式化之后再提交。 + +### Usage of Cherry Pick Script + +We can use the cherry pick script to cherry-pick commits in pull request as follows: + +```bash +GITHUB_USER={your_github_user} hack/cherry_pick_pull.sh upstream/{target_branch} {pull_request_number} +``` + +> This script is from . + diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..369303d --- /dev/null +++ b/Dockerfile @@ -0,0 +1,28 @@ +FROM eclipse-temurin:21-jre as builder + +WORKDIR application +ARG JAR_FILE=application/build/libs/*.jar +COPY ${JAR_FILE} application.jar +RUN java -Djarmode=layertools -jar application.jar extract + +################################ + +FROM ibm-semeru-runtimes:open-21-jre +LABEL maintainer="johnniang " +WORKDIR application +COPY --from=builder application/dependencies/ ./ +COPY --from=builder application/spring-boot-loader/ ./ +COPY --from=builder application/snapshot-dependencies/ ./ +COPY --from=builder application/application/ ./ + +ENV JVM_OPTS="-Xmx256m -Xms256m" \ + HALO_WORK_DIR="/root/.halo2" \ + SPRING_CONFIG_LOCATION="optional:classpath:/;optional:file:/root/.halo2/" \ + TZ=Asia/Shanghai + +RUN ln -sf /usr/share/zoneinfo/$TZ /etc/localtime \ + && echo $TZ > /etc/timezone + +Expose 8090 + +ENTRYPOINT ["sh", "-c", "java ${JVM_OPTS} org.springframework.boot.loader.launch.JarLauncher ${0} ${@}"] diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..94a9ed0 --- /dev/null +++ b/LICENSE @@ -0,0 +1,674 @@ + GNU GENERAL PUBLIC LICENSE + Version 3, 29 June 2007 + + Copyright (C) 2007 Free Software Foundation, Inc. + Everyone is permitted to copy and distribute verbatim copies + of this license document, but changing it is not allowed. + + Preamble + + The GNU General Public License is a free, copyleft license for +software and other kinds of works. + + The licenses for most software and other practical works are designed +to take away your freedom to share and change the works. By contrast, +the GNU General Public License is intended to guarantee your freedom to +share and change all versions of a program--to make sure it remains free +software for all its users. We, the Free Software Foundation, use the +GNU General Public License for most of our software; it applies also to +any other work released this way by its authors. You can apply it to +your programs, too. + + When we speak of free software, we are referring to freedom, not +price. Our General Public Licenses are designed to make sure that you +have the freedom to distribute copies of free software (and charge for +them if you wish), that you receive source code or can get it if you +want it, that you can change the software or use pieces of it in new +free programs, and that you know you can do these things. + + To protect your rights, we need to prevent others from denying you +these rights or asking you to surrender the rights. Therefore, you have +certain responsibilities if you distribute copies of the software, or if +you modify it: responsibilities to respect the freedom of others. + + For example, if you distribute copies of such a program, whether +gratis or for a fee, you must pass on to the recipients the same +freedoms that you received. You must make sure that they, too, receive +or can get the source code. And you must show them these terms so they +know their rights. + + Developers that use the GNU GPL protect your rights with two steps: +(1) assert copyright on the software, and (2) offer you this License +giving you legal permission to copy, distribute and/or modify it. + + For the developers' and authors' protection, the GPL clearly explains +that there is no warranty for this free software. For both users' and +authors' sake, the GPL requires that modified versions be marked as +changed, so that their problems will not be attributed erroneously to +authors of previous versions. + + Some devices are designed to deny users access to install or run +modified versions of the software inside them, although the manufacturer +can do so. This is fundamentally incompatible with the aim of +protecting users' freedom to change the software. The systematic +pattern of such abuse occurs in the area of products for individuals to +use, which is precisely where it is most unacceptable. Therefore, we +have designed this version of the GPL to prohibit the practice for those +products. If such problems arise substantially in other domains, we +stand ready to extend this provision to those domains in future versions +of the GPL, as needed to protect the freedom of users. + + Finally, every program is threatened constantly by software patents. +States should not allow patents to restrict development and use of +software on general-purpose computers, but in those that do, we wish to +avoid the special danger that patents applied to a free program could +make it effectively proprietary. To prevent this, the GPL assures that +patents cannot be used to render the program non-free. + + The precise terms and conditions for copying, distribution and +modification follow. + + TERMS AND CONDITIONS + + 0. Definitions. + + "This License" refers to version 3 of the GNU General Public License. + + "Copyright" also means copyright-like laws that apply to other kinds of +works, such as semiconductor masks. + + "The Program" refers to any copyrightable work licensed under this +License. Each licensee is addressed as "you". "Licensees" and +"recipients" may be individuals or organizations. + + To "modify" a work means to copy from or adapt all or part of the work +in a fashion requiring copyright permission, other than the making of an +exact copy. The resulting work is called a "modified version" of the +earlier work or a work "based on" the earlier work. + + A "covered work" means either the unmodified Program or a work based +on the Program. + + To "propagate" a work means to do anything with it that, without +permission, would make you directly or secondarily liable for +infringement under applicable copyright law, except executing it on a +computer or modifying a private copy. Propagation includes copying, +distribution (with or without modification), making available to the +public, and in some countries other activities as well. + + To "convey" a work means any kind of propagation that enables other +parties to make or receive copies. Mere interaction with a user through +a computer network, with no transfer of a copy, is not conveying. + + An interactive user interface displays "Appropriate Legal Notices" +to the extent that it includes a convenient and prominently visible +feature that (1) displays an appropriate copyright notice, and (2) +tells the user that there is no warranty for the work (except to the +extent that warranties are provided), that licensees may convey the +work under this License, and how to view a copy of this License. If +the interface presents a list of user commands or options, such as a +menu, a prominent item in the list meets this criterion. + + 1. Source Code. + + The "source code" for a work means the preferred form of the work +for making modifications to it. "Object code" means any non-source +form of a work. + + A "Standard Interface" means an interface that either is an official +standard defined by a recognized standards body, or, in the case of +interfaces specified for a particular programming language, one that +is widely used among developers working in that language. + + The "System Libraries" of an executable work include anything, other +than the work as a whole, that (a) is included in the normal form of +packaging a Major Component, but which is not part of that Major +Component, and (b) serves only to enable use of the work with that +Major Component, or to implement a Standard Interface for which an +implementation is available to the public in source code form. A +"Major Component", in this context, means a major essential component +(kernel, window system, and so on) of the specific operating system +(if any) on which the executable work runs, or a compiler used to +produce the work, or an object code interpreter used to run it. + + The "Corresponding Source" for a work in object code form means all +the source code needed to generate, install, and (for an executable +work) run the object code and to modify the work, including scripts to +control those activities. However, it does not include the work's +System Libraries, or general-purpose tools or generally available free +programs which are used unmodified in performing those activities but +which are not part of the work. For example, Corresponding Source +includes interface definition files associated with source files for +the work, and the source code for shared libraries and dynamically +linked subprograms that the work is specifically designed to require, +such as by intimate data communication or control flow between those +subprograms and other parts of the work. + + The Corresponding Source need not include anything that users +can regenerate automatically from other parts of the Corresponding +Source. + + The Corresponding Source for a work in source code form is that +same work. + + 2. Basic Permissions. + + All rights granted under this License are granted for the term of +copyright on the Program, and are irrevocable provided the stated +conditions are met. This License explicitly affirms your unlimited +permission to run the unmodified Program. The output from running a +covered work is covered by this License only if the output, given its +content, constitutes a covered work. This License acknowledges your +rights of fair use or other equivalent, as provided by copyright law. + + You may make, run and propagate covered works that you do not +convey, without conditions so long as your license otherwise remains +in force. You may convey covered works to others for the sole purpose +of having them make modifications exclusively for you, or provide you +with facilities for running those works, provided that you comply with +the terms of this License in conveying all material for which you do +not control copyright. Those thus making or running the covered works +for you must do so exclusively on your behalf, under your direction +and control, on terms that prohibit them from making any copies of +your copyrighted material outside their relationship with you. + + Conveying under any other circumstances is permitted solely under +the conditions stated below. Sublicensing is not allowed; section 10 +makes it unnecessary. + + 3. Protecting Users' Legal Rights From Anti-Circumvention Law. + + No covered work shall be deemed part of an effective technological +measure under any applicable law fulfilling obligations under article +11 of the WIPO copyright treaty adopted on 20 December 1996, or +similar laws prohibiting or restricting circumvention of such +measures. + + When you convey a covered work, you waive any legal power to forbid +circumvention of technological measures to the extent such circumvention +is effected by exercising rights under this License with respect to +the covered work, and you disclaim any intention to limit operation or +modification of the work as a means of enforcing, against the work's +users, your or third parties' legal rights to forbid circumvention of +technological measures. + + 4. Conveying Verbatim Copies. + + You may convey verbatim copies of the Program's source code as you +receive it, in any medium, provided that you conspicuously and +appropriately publish on each copy an appropriate copyright notice; +keep intact all notices stating that this License and any +non-permissive terms added in accord with section 7 apply to the code; +keep intact all notices of the absence of any warranty; and give all +recipients a copy of this License along with the Program. + + You may charge any price or no price for each copy that you convey, +and you may offer support or warranty protection for a fee. + + 5. Conveying Modified Source Versions. + + You may convey a work based on the Program, or the modifications to +produce it from the Program, in the form of source code under the +terms of section 4, provided that you also meet all of these conditions: + + a) The work must carry prominent notices stating that you modified + it, and giving a relevant date. + + b) The work must carry prominent notices stating that it is + released under this License and any conditions added under section + 7. This requirement modifies the requirement in section 4 to + "keep intact all notices". + + c) You must license the entire work, as a whole, under this + License to anyone who comes into possession of a copy. This + License will therefore apply, along with any applicable section 7 + additional terms, to the whole of the work, and all its parts, + regardless of how they are packaged. This License gives no + permission to license the work in any other way, but it does not + invalidate such permission if you have separately received it. + + d) If the work has interactive user interfaces, each must display + Appropriate Legal Notices; however, if the Program has interactive + interfaces that do not display Appropriate Legal Notices, your + work need not make them do so. + + A compilation of a covered work with other separate and independent +works, which are not by their nature extensions of the covered work, +and which are not combined with it such as to form a larger program, +in or on a volume of a storage or distribution medium, is called an +"aggregate" if the compilation and its resulting copyright are not +used to limit the access or legal rights of the compilation's users +beyond what the individual works permit. Inclusion of a covered work +in an aggregate does not cause this License to apply to the other +parts of the aggregate. + + 6. Conveying Non-Source Forms. + + You may convey a covered work in object code form under the terms +of sections 4 and 5, provided that you also convey the +machine-readable Corresponding Source under the terms of this License, +in one of these ways: + + a) Convey the object code in, or embodied in, a physical product + (including a physical distribution medium), accompanied by the + Corresponding Source fixed on a durable physical medium + customarily used for software interchange. + + b) Convey the object code in, or embodied in, a physical product + (including a physical distribution medium), accompanied by a + written offer, valid for at least three years and valid for as + long as you offer spare parts or customer support for that product + model, to give anyone who possesses the object code either (1) a + copy of the Corresponding Source for all the software in the + product that is covered by this License, on a durable physical + medium customarily used for software interchange, for a price no + more than your reasonable cost of physically performing this + conveying of source, or (2) access to copy the + Corresponding Source from a network server at no charge. + + c) Convey individual copies of the object code with a copy of the + written offer to provide the Corresponding Source. This + alternative is allowed only occasionally and noncommercially, and + only if you received the object code with such an offer, in accord + with subsection 6b. + + d) Convey the object code by offering access from a designated + place (gratis or for a charge), and offer equivalent access to the + Corresponding Source in the same way through the same place at no + further charge. You need not require recipients to copy the + Corresponding Source along with the object code. If the place to + copy the object code is a network server, the Corresponding Source + may be on a different server (operated by you or a third party) + that supports equivalent copying facilities, provided you maintain + clear directions next to the object code saying where to find the + Corresponding Source. Regardless of what server hosts the + Corresponding Source, you remain obligated to ensure that it is + available for as long as needed to satisfy these requirements. + + e) Convey the object code using peer-to-peer transmission, provided + you inform other peers where the object code and Corresponding + Source of the work are being offered to the general public at no + charge under subsection 6d. + + A separable portion of the object code, whose source code is excluded +from the Corresponding Source as a System Library, need not be +included in conveying the object code work. + + A "User Product" is either (1) a "consumer product", which means any +tangible personal property which is normally used for personal, family, +or household purposes, or (2) anything designed or sold for incorporation +into a dwelling. In determining whether a product is a consumer product, +doubtful cases shall be resolved in favor of coverage. For a particular +product received by a particular user, "normally used" refers to a +typical or common use of that class of product, regardless of the status +of the particular user or of the way in which the particular user +actually uses, or expects or is expected to use, the product. A product +is a consumer product regardless of whether the product has substantial +commercial, industrial or non-consumer uses, unless such uses represent +the only significant mode of use of the product. + + "Installation Information" for a User Product means any methods, +procedures, authorization keys, or other information required to install +and execute modified versions of a covered work in that User Product from +a modified version of its Corresponding Source. The information must +suffice to ensure that the continued functioning of the modified object +code is in no case prevented or interfered with solely because +modification has been made. + + If you convey an object code work under this section in, or with, or +specifically for use in, a User Product, and the conveying occurs as +part of a transaction in which the right of possession and use of the +User Product is transferred to the recipient in perpetuity or for a +fixed term (regardless of how the transaction is characterized), the +Corresponding Source conveyed under this section must be accompanied +by the Installation Information. But this requirement does not apply +if neither you nor any third party retains the ability to install +modified object code on the User Product (for example, the work has +been installed in ROM). + + The requirement to provide Installation Information does not include a +requirement to continue to provide support service, warranty, or updates +for a work that has been modified or installed by the recipient, or for +the User Product in which it has been modified or installed. Access to a +network may be denied when the modification itself materially and +adversely affects the operation of the network or violates the rules and +protocols for communication across the network. + + Corresponding Source conveyed, and Installation Information provided, +in accord with this section must be in a format that is publicly +documented (and with an implementation available to the public in +source code form), and must require no special password or key for +unpacking, reading or copying. + + 7. Additional Terms. + + "Additional permissions" are terms that supplement the terms of this +License by making exceptions from one or more of its conditions. +Additional permissions that are applicable to the entire Program shall +be treated as though they were included in this License, to the extent +that they are valid under applicable law. If additional permissions +apply only to part of the Program, that part may be used separately +under those permissions, but the entire Program remains governed by +this License without regard to the additional permissions. + + When you convey a copy of a covered work, you may at your option +remove any additional permissions from that copy, or from any part of +it. (Additional permissions may be written to require their own +removal in certain cases when you modify the work.) You may place +additional permissions on material, added by you to a covered work, +for which you have or can give appropriate copyright permission. + + Notwithstanding any other provision of this License, for material you +add to a covered work, you may (if authorized by the copyright holders of +that material) supplement the terms of this License with terms: + + a) Disclaiming warranty or limiting liability differently from the + terms of sections 15 and 16 of this License; or + + b) Requiring preservation of specified reasonable legal notices or + author attributions in that material or in the Appropriate Legal + Notices displayed by works containing it; or + + c) Prohibiting misrepresentation of the origin of that material, or + requiring that modified versions of such material be marked in + reasonable ways as different from the original version; or + + d) Limiting the use for publicity purposes of names of licensors or + authors of the material; or + + e) Declining to grant rights under trademark law for use of some + trade names, trademarks, or service marks; or + + f) Requiring indemnification of licensors and authors of that + material by anyone who conveys the material (or modified versions of + it) with contractual assumptions of liability to the recipient, for + any liability that these contractual assumptions directly impose on + those licensors and authors. + + All other non-permissive additional terms are considered "further +restrictions" within the meaning of section 10. If the Program as you +received it, or any part of it, contains a notice stating that it is +governed by this License along with a term that is a further +restriction, you may remove that term. If a license document contains +a further restriction but permits relicensing or conveying under this +License, you may add to a covered work material governed by the terms +of that license document, provided that the further restriction does +not survive such relicensing or conveying. + + If you add terms to a covered work in accord with this section, you +must place, in the relevant source files, a statement of the +additional terms that apply to those files, or a notice indicating +where to find the applicable terms. + + Additional terms, permissive or non-permissive, may be stated in the +form of a separately written license, or stated as exceptions; +the above requirements apply either way. + + 8. Termination. + + You may not propagate or modify a covered work except as expressly +provided under this License. Any attempt otherwise to propagate or +modify it is void, and will automatically terminate your rights under +this License (including any patent licenses granted under the third +paragraph of section 11). + + However, if you cease all violation of this License, then your +license from a particular copyright holder is reinstated (a) +provisionally, unless and until the copyright holder explicitly and +finally terminates your license, and (b) permanently, if the copyright +holder fails to notify you of the violation by some reasonable means +prior to 60 days after the cessation. + + Moreover, your license from a particular copyright holder is +reinstated permanently if the copyright holder notifies you of the +violation by some reasonable means, this is the first time you have +received notice of violation of this License (for any work) from that +copyright holder, and you cure the violation prior to 30 days after +your receipt of the notice. + + Termination of your rights under this section does not terminate the +licenses of parties who have received copies or rights from you under +this License. If your rights have been terminated and not permanently +reinstated, you do not qualify to receive new licenses for the same +material under section 10. + + 9. Acceptance Not Required for Having Copies. + + You are not required to accept this License in order to receive or +run a copy of the Program. Ancillary propagation of a covered work +occurring solely as a consequence of using peer-to-peer transmission +to receive a copy likewise does not require acceptance. However, +nothing other than this License grants you permission to propagate or +modify any covered work. These actions infringe copyright if you do +not accept this License. Therefore, by modifying or propagating a +covered work, you indicate your acceptance of this License to do so. + + 10. Automatic Licensing of Downstream Recipients. + + Each time you convey a covered work, the recipient automatically +receives a license from the original licensors, to run, modify and +propagate that work, subject to this License. You are not responsible +for enforcing compliance by third parties with this License. + + An "entity transaction" is a transaction transferring control of an +organization, or substantially all assets of one, or subdividing an +organization, or merging organizations. If propagation of a covered +work results from an entity transaction, each party to that +transaction who receives a copy of the work also receives whatever +licenses to the work the party's predecessor in interest had or could +give under the previous paragraph, plus a right to possession of the +Corresponding Source of the work from the predecessor in interest, if +the predecessor has it or can get it with reasonable efforts. + + You may not impose any further restrictions on the exercise of the +rights granted or affirmed under this License. For example, you may +not impose a license fee, royalty, or other charge for exercise of +rights granted under this License, and you may not initiate litigation +(including a cross-claim or counterclaim in a lawsuit) alleging that +any patent claim is infringed by making, using, selling, offering for +sale, or importing the Program or any portion of it. + + 11. Patents. + + A "contributor" is a copyright holder who authorizes use under this +License of the Program or a work on which the Program is based. The +work thus licensed is called the contributor's "contributor version". + + A contributor's "essential patent claims" are all patent claims +owned or controlled by the contributor, whether already acquired or +hereafter acquired, that would be infringed by some manner, permitted +by this License, of making, using, or selling its contributor version, +but do not include claims that would be infringed only as a +consequence of further modification of the contributor version. For +purposes of this definition, "control" includes the right to grant +patent sublicenses in a manner consistent with the requirements of +this License. + + Each contributor grants you a non-exclusive, worldwide, royalty-free +patent license under the contributor's essential patent claims, to +make, use, sell, offer for sale, import and otherwise run, modify and +propagate the contents of its contributor version. + + In the following three paragraphs, a "patent license" is any express +agreement or commitment, however denominated, not to enforce a patent +(such as an express permission to practice a patent or covenant not to +sue for patent infringement). To "grant" such a patent license to a +party means to make such an agreement or commitment not to enforce a +patent against the party. + + If you convey a covered work, knowingly relying on a patent license, +and the Corresponding Source of the work is not available for anyone +to copy, free of charge and under the terms of this License, through a +publicly available network server or other readily accessible means, +then you must either (1) cause the Corresponding Source to be so +available, or (2) arrange to deprive yourself of the benefit of the +patent license for this particular work, or (3) arrange, in a manner +consistent with the requirements of this License, to extend the patent +license to downstream recipients. "Knowingly relying" means you have +actual knowledge that, but for the patent license, your conveying the +covered work in a country, or your recipient's use of the covered work +in a country, would infringe one or more identifiable patents in that +country that you have reason to believe are valid. + + If, pursuant to or in connection with a single transaction or +arrangement, you convey, or propagate by procuring conveyance of, a +covered work, and grant a patent license to some of the parties +receiving the covered work authorizing them to use, propagate, modify +or convey a specific copy of the covered work, then the patent license +you grant is automatically extended to all recipients of the covered +work and works based on it. + + A patent license is "discriminatory" if it does not include within +the scope of its coverage, prohibits the exercise of, or is +conditioned on the non-exercise of one or more of the rights that are +specifically granted under this License. You may not convey a covered +work if you are a party to an arrangement with a third party that is +in the business of distributing software, under which you make payment +to the third party based on the extent of your activity of conveying +the work, and under which the third party grants, to any of the +parties who would receive the covered work from you, a discriminatory +patent license (a) in connection with copies of the covered work +conveyed by you (or copies made from those copies), or (b) primarily +for and in connection with specific products or compilations that +contain the covered work, unless you entered into that arrangement, +or that patent license was granted, prior to 28 March 2007. + + Nothing in this License shall be construed as excluding or limiting +any implied license or other defenses to infringement that may +otherwise be available to you under applicable patent law. + + 12. No Surrender of Others' Freedom. + + If conditions are imposed on you (whether by court order, agreement or +otherwise) that contradict the conditions of this License, they do not +excuse you from the conditions of this License. If you cannot convey a +covered work so as to satisfy simultaneously your obligations under this +License and any other pertinent obligations, then as a consequence you may +not convey it at all. For example, if you agree to terms that obligate you +to collect a royalty for further conveying from those to whom you convey +the Program, the only way you could satisfy both those terms and this +License would be to refrain entirely from conveying the Program. + + 13. Use with the GNU Affero General Public License. + + Notwithstanding any other provision of this License, you have +permission to link or combine any covered work with a work licensed +under version 3 of the GNU Affero General Public License into a single +combined work, and to convey the resulting work. The terms of this +License will continue to apply to the part which is the covered work, +but the special requirements of the GNU Affero General Public License, +section 13, concerning interaction through a network will apply to the +combination as such. + + 14. Revised Versions of this License. + + The Free Software Foundation may publish revised and/or new versions of +the GNU General Public License from time to time. Such new versions will +be similar in spirit to the present version, but may differ in detail to +address new problems or concerns. + + Each version is given a distinguishing version number. If the +Program specifies that a certain numbered version of the GNU General +Public License "or any later version" applies to it, you have the +option of following the terms and conditions either of that numbered +version or of any later version published by the Free Software +Foundation. If the Program does not specify a version number of the +GNU General Public License, you may choose any version ever published +by the Free Software Foundation. + + If the Program specifies that a proxy can decide which future +versions of the GNU General Public License can be used, that proxy's +public statement of acceptance of a version permanently authorizes you +to choose that version for the Program. + + Later license versions may give you additional or different +permissions. However, no additional obligations are imposed on any +author or copyright holder as a result of your choosing to follow a +later version. + + 15. Disclaimer of Warranty. + + THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY +APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT +HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY +OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, +THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM +IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF +ALL NECESSARY SERVICING, REPAIR OR CORRECTION. + + 16. Limitation of Liability. + + IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING +WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS +THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY +GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE +USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF +DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD +PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), +EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF +SUCH DAMAGES. + + 17. Interpretation of Sections 15 and 16. + + If the disclaimer of warranty and limitation of liability provided +above cannot be given local legal effect according to their terms, +reviewing courts shall apply local law that most closely approximates +an absolute waiver of all civil liability in connection with the +Program, unless a warranty or assumption of liability accompanies a +copy of the Program in return for a fee. + + END OF TERMS AND CONDITIONS + + How to Apply These Terms to Your New Programs + + If you develop a new program, and you want it to be of the greatest +possible use to the public, the best way to achieve this is to make it +free software which everyone can redistribute and change under these terms. + + To do so, attach the following notices to the program. It is safest +to attach them to the start of each source file to most effectively +state the exclusion of warranty; and each file should have at least +the "copyright" line and a pointer to where the full notice is found. + + + Copyright (C) + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see . + +Also add information on how to contact you by electronic and paper mail. + + If the program does terminal interaction, make it output a short +notice like this when it starts in an interactive mode: + + Copyright (C) + This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. + This is free software, and you are welcome to redistribute it + under certain conditions; type `show c' for details. + +The hypothetical commands `show w' and `show c' should show the appropriate +parts of the General Public License. Of course, your program's commands +might be different; for a GUI interface, you would use an "about box". + + You should also get your employer (if you work as a programmer) or school, +if any, to sign a "copyright disclaimer" for the program, if necessary. +For more information on this, and how to apply and follow the GNU GPL, see +. + + The GNU General Public License does not permit incorporating your program +into proprietary programs. If your program is a subroutine library, you +may consider it more useful to permit linking proprietary applications with +the library. If this is what you want to do, use the GNU Lesser General +Public License instead of this License. But first, please read +. diff --git a/OWNERS b/OWNERS new file mode 100644 index 0000000..a707d8b --- /dev/null +++ b/OWNERS @@ -0,0 +1,11 @@ +reviewers: +- ruibaby +- guqing +- JohnNiang +- wan92hen +- LIlGG + +approvers: +- ruibaby +- guqing +- JohnNiang diff --git a/README.md b/README.md new file mode 100644 index 0000000..737e67f --- /dev/null +++ b/README.md @@ -0,0 +1,71 @@ +

+ + Halo logo + +

+ +

Halo [ˈheɪloʊ]，强大易用的开源建站工具。

+ +

+GitHub release +Docker pulls +GitHub last commit +GitHub Workflow Status +Codecov percentage +Halo - Powerful and easy-to-use Open-Source website building tool | Product Hunt +
+官网 +文档 +社区 +Gitee +Telegram 频道 +

+ +[![Watch the video](https://www.halo.run/upload/halo-github-screenshot.png)](https://www.bilibili.com/video/BV15x4y1U7RU/?share_source=copy_web&vd_source=0ab6cf86ca512a363f04f18b86f55b86) + +------------------------------ + +## 快速开始 + +```bash +docker run -d --name halo -p 8090:8090 -v ~/.halo2:/root/.halo2 halohub/halo:2.18 +``` + +以上仅作为体验使用，详细部署文档请查阅： + +## 在线体验 + +- 环境地址： +- 后台地址： +- 用户名：`demo` +- 密码：`P@ssw0rd123..` + +## 生态 + +可访问 [官方应用市场](https://www.halo.run/store/apps) 或 [awesome-halo 仓库](https://github.com/halo-sigs/awesome-halo) 查看适用于 Halo 2.x 的主题和插件。 + +## 许可证 + +[![license](https://img.shields.io/github/license/halo-dev/halo.svg?style=flat-square)](https://github.com/halo-dev/halo/blob/master/LICENSE) + +Halo 使用 GPL-v3.0 协议开源，请遵守开源协议。 + +## 赞助 + +如果 Halo 对你有帮助，欢迎[赞助我们](https://afdian.com/a/halo-dev)，感谢以下赞助者对 Halo 项目的支持： + +

+ + sponsors + +

+ +## 贡献 + +参考 [CONTRIBUTING](https://github.com/halo-dev/halo/blob/main/CONTRIBUTING.md)。 + + + +## 状态 + +![Repobeats analytics](https://repobeats.axiom.co/api/embed/ad008b2151c22e7cf734d2688befaa795d593b95.svg "Repobeats analytics image") diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..c2fa5cd --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,42 @@ +# Security Policy + +## Supported Versions + +Halo currently supports the versions listed below, where as: + +- :white_check_mark: indicates an active development roadmap, is therefore maintaining, and **will** receive Security + Vulnerability Report. +- :x: indicates such version has already deprecated and **will not** be receiving Security Vulnerability Report. + +| Version | Supported | +| ------- | ------------------ | +| 0.x | :x: | +| 1.x | :x: | +| 2.x | :white_check_mark: | + +## Reporting a Vulnerability + +We first appreciate and are very thankful that you've found a vulnerability issue in Halo! By disclosing such issue to +Halo development team you are helping Halo to become a much more safer project than before! ;) + +To protect the existing users of Halo, we kindly ask you to not disclose the vulnerability to anyone except the Halo +development team before a fix has been rolled out. + +To Report a Vulnerability, please complete the form below, and send such report by email to `hi@halo.run`. + +``` +Vulnerability has been observed in... + - Docker? [n/y]: + if yes for the question above, + - `docker -v`: + - `docker images halohub/halo`: + + - by `java -jar halo.jar`? [n/y]: + if yes for the question above, + - `uname -a`: + - `java -version`: + +- Affected by Halo version(s) [e.g. v2.4.0]: +- Vulnerability self-scoring [1-10]: +- Would you like to be attributed? (Whether you agree us to appreciate you by putting your name in the CHANGELOG of the next fix release) [n/y]: +``` diff --git a/api-docs/openapi/v3_0/aggregated.json b/api-docs/openapi/v3_0/aggregated.json new file mode 100644 index 0000000..ec15fbc --- /dev/null +++ b/api-docs/openapi/v3_0/aggregated.json @@ -0,0 +1,23049 @@ +{ + "openapi": "3.0.1", + "info": { + "title": "Halo", + "version": "2.19.0-SNAPSHOT" + }, + "servers": [ + { + "url": "http://localhost:8091", + "description": "Generated server url" + } + ], + "security": [ + { + "basicAuth": [], + "bearerAuth": [] + } + ], + "paths": { + "/api/v1alpha1/annotationsettings": { + "get": { + "description": "List AnnotationSetting", + "operationId": "listAnnotationSetting", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSettingList" + } + } + }, + "description": "Response annotationsettings" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + }, + "post": { + "description": "Create AnnotationSetting", + "operationId": "createAnnotationSetting", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Fresh annotationsetting" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Response annotationsettings created just now" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + } + }, + "/api/v1alpha1/annotationsettings/{name}": { + "delete": { + "description": "Delete AnnotationSetting", + "operationId": "deleteAnnotationSetting", + "parameters": [ + { + "description": "Name of annotationsetting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response annotationsetting deleted just now" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + }, + "get": { + "description": "Get AnnotationSetting", + "operationId": "getAnnotationSetting", + "parameters": [ + { + "description": "Name of annotationsetting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Response single annotationsetting" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + }, + "patch": { + "description": "Patch AnnotationSetting", + "operationId": "patchAnnotationSetting", + "parameters": [ + { + "description": "Name of annotationsetting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Response annotationsetting patched just now" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + }, + "put": { + "description": "Update AnnotationSetting", + "operationId": "updateAnnotationSetting", + "parameters": [ + { + "description": "Name of annotationsetting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Updated annotationsetting" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Response annotationsettings updated just now" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + } + }, + "/api/v1alpha1/configmaps": { + "get": { + "description": "List ConfigMap", + "operationId": "listConfigMap", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMapList" + } + } + }, + "description": "Response configmaps" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + }, + "post": { + "description": "Create ConfigMap", + "operationId": "createConfigMap", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Fresh configmap" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Response configmaps created just now" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + } + }, + "/api/v1alpha1/configmaps/{name}": { + "delete": { + "description": "Delete ConfigMap", + "operationId": "deleteConfigMap", + "parameters": [ + { + "description": "Name of configmap", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response configmap deleted just now" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + }, + "get": { + "description": "Get ConfigMap", + "operationId": "getConfigMap", + "parameters": [ + { + "description": "Name of configmap", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Response single configmap" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + }, + "patch": { + "description": "Patch ConfigMap", + "operationId": "patchConfigMap", + "parameters": [ + { + "description": "Name of configmap", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Response configmap patched just now" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + }, + "put": { + "description": "Update ConfigMap", + "operationId": "updateConfigMap", + "parameters": [ + { + "description": "Name of configmap", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Updated configmap" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Response configmaps updated just now" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + } + }, + "/api/v1alpha1/menuitems": { + "get": { + "description": "List MenuItem", + "operationId": "listMenuItem", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItemList" + } + } + }, + "description": "Response menuitems" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + }, + "post": { + "description": "Create MenuItem", + "operationId": "createMenuItem", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Fresh menuitem" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Response menuitems created just now" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + } + }, + "/api/v1alpha1/menuitems/{name}": { + "delete": { + "description": "Delete MenuItem", + "operationId": "deleteMenuItem", + "parameters": [ + { + "description": "Name of menuitem", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response menuitem deleted just now" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + }, + "get": { + "description": "Get MenuItem", + "operationId": "getMenuItem", + "parameters": [ + { + "description": "Name of menuitem", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Response single menuitem" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + }, + "patch": { + "description": "Patch MenuItem", + "operationId": "patchMenuItem", + "parameters": [ + { + "description": "Name of menuitem", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Response menuitem patched just now" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + }, + "put": { + "description": "Update MenuItem", + "operationId": "updateMenuItem", + "parameters": [ + { + "description": "Name of menuitem", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Updated menuitem" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Response menuitems updated just now" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + } + }, + "/api/v1alpha1/menus": { + "get": { + "description": "List Menu", + "operationId": "listMenu", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuList" + } + } + }, + "description": "Response menus" + } + }, + "tags": [ + "MenuV1alpha1" + ] + }, + "post": { + "description": "Create Menu", + "operationId": "createMenu", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Fresh menu" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Response menus created just now" + } + }, + "tags": [ + "MenuV1alpha1" + ] + } + }, + "/api/v1alpha1/menus/{name}": { + "delete": { + "description": "Delete Menu", + "operationId": "deleteMenu", + "parameters": [ + { + "description": "Name of menu", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response menu deleted just now" + } + }, + "tags": [ + "MenuV1alpha1" + ] + }, + "get": { + "description": "Get Menu", + "operationId": "getMenu", + "parameters": [ + { + "description": "Name of menu", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Response single menu" + } + }, + "tags": [ + "MenuV1alpha1" + ] + }, + "patch": { + "description": "Patch Menu", + "operationId": "patchMenu", + "parameters": [ + { + "description": "Name of menu", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Response menu patched just now" + } + }, + "tags": [ + "MenuV1alpha1" + ] + }, + "put": { + "description": "Update Menu", + "operationId": "updateMenu", + "parameters": [ + { + "description": "Name of menu", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Updated menu" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Response menus updated just now" + } + }, + "tags": [ + "MenuV1alpha1" + ] + } + }, + "/api/v1alpha1/rolebindings": { + "get": { + "description": "List RoleBinding", + "operationId": "listRoleBinding", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBindingList" + } + } + }, + "description": "Response rolebindings" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + }, + "post": { + "description": "Create RoleBinding", + "operationId": "createRoleBinding", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Fresh rolebinding" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Response rolebindings created just now" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + } + }, + "/api/v1alpha1/rolebindings/{name}": { + "delete": { + "description": "Delete RoleBinding", + "operationId": "deleteRoleBinding", + "parameters": [ + { + "description": "Name of rolebinding", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response rolebinding deleted just now" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + }, + "get": { + "description": "Get RoleBinding", + "operationId": "getRoleBinding", + "parameters": [ + { + "description": "Name of rolebinding", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Response single rolebinding" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + }, + "patch": { + "description": "Patch RoleBinding", + "operationId": "patchRoleBinding", + "parameters": [ + { + "description": "Name of rolebinding", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Response rolebinding patched just now" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + }, + "put": { + "description": "Update RoleBinding", + "operationId": "updateRoleBinding", + "parameters": [ + { + "description": "Name of rolebinding", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Updated rolebinding" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Response rolebindings updated just now" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + } + }, + "/api/v1alpha1/roles": { + "get": { + "description": "List Role", + "operationId": "listRole", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleList" + } + } + }, + "description": "Response roles" + } + }, + "tags": [ + "RoleV1alpha1" + ] + }, + "post": { + "description": "Create Role", + "operationId": "createRole", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Fresh role" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Response roles created just now" + } + }, + "tags": [ + "RoleV1alpha1" + ] + } + }, + "/api/v1alpha1/roles/{name}": { + "delete": { + "description": "Delete Role", + "operationId": "deleteRole", + "parameters": [ + { + "description": "Name of role", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response role deleted just now" + } + }, + "tags": [ + "RoleV1alpha1" + ] + }, + "get": { + "description": "Get Role", + "operationId": "getRole", + "parameters": [ + { + "description": "Name of role", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Response single role" + } + }, + "tags": [ + "RoleV1alpha1" + ] + }, + "patch": { + "description": "Patch Role", + "operationId": "patchRole", + "parameters": [ + { + "description": "Name of role", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Response role patched just now" + } + }, + "tags": [ + "RoleV1alpha1" + ] + }, + "put": { + "description": "Update Role", + "operationId": "updateRole", + "parameters": [ + { + "description": "Name of role", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Updated role" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Response roles updated just now" + } + }, + "tags": [ + "RoleV1alpha1" + ] + } + }, + "/api/v1alpha1/secrets": { + "get": { + "description": "List Secret", + "operationId": "listSecret", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SecretList" + } + } + }, + "description": "Response secrets" + } + }, + "tags": [ + "SecretV1alpha1" + ] + }, + "post": { + "description": "Create Secret", + "operationId": "createSecret", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Fresh secret" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Response secrets created just now" + } + }, + "tags": [ + "SecretV1alpha1" + ] + } + }, + "/api/v1alpha1/secrets/{name}": { + "delete": { + "description": "Delete Secret", + "operationId": "deleteSecret", + "parameters": [ + { + "description": "Name of secret", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response secret deleted just now" + } + }, + "tags": [ + "SecretV1alpha1" + ] + }, + "get": { + "description": "Get Secret", + "operationId": "getSecret", + "parameters": [ + { + "description": "Name of secret", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Response single secret" + } + }, + "tags": [ + "SecretV1alpha1" + ] + }, + "patch": { + "description": "Patch Secret", + "operationId": "patchSecret", + "parameters": [ + { + "description": "Name of secret", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Response secret patched just now" + } + }, + "tags": [ + "SecretV1alpha1" + ] + }, + "put": { + "description": "Update Secret", + "operationId": "updateSecret", + "parameters": [ + { + "description": "Name of secret", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Updated secret" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Response secrets updated just now" + } + }, + "tags": [ + "SecretV1alpha1" + ] + } + }, + "/api/v1alpha1/settings": { + "get": { + "description": "List Setting", + "operationId": "listSetting", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SettingList" + } + } + }, + "description": "Response settings" + } + }, + "tags": [ + "SettingV1alpha1" + ] + }, + "post": { + "description": "Create Setting", + "operationId": "createSetting", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Fresh setting" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Response settings created just now" + } + }, + "tags": [ + "SettingV1alpha1" + ] + } + }, + "/api/v1alpha1/settings/{name}": { + "delete": { + "description": "Delete Setting", + "operationId": "deleteSetting", + "parameters": [ + { + "description": "Name of setting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response setting deleted just now" + } + }, + "tags": [ + "SettingV1alpha1" + ] + }, + "get": { + "description": "Get Setting", + "operationId": "getSetting", + "parameters": [ + { + "description": "Name of setting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Response single setting" + } + }, + "tags": [ + "SettingV1alpha1" + ] + }, + "patch": { + "description": "Patch Setting", + "operationId": "patchSetting", + "parameters": [ + { + "description": "Name of setting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Response setting patched just now" + } + }, + "tags": [ + "SettingV1alpha1" + ] + }, + "put": { + "description": "Update Setting", + "operationId": "updateSetting", + "parameters": [ + { + "description": "Name of setting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Updated setting" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Response settings updated just now" + } + }, + "tags": [ + "SettingV1alpha1" + ] + } + }, + "/api/v1alpha1/users": { + "get": { + "description": "List User", + "operationId": "listUser", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserList" + } + } + }, + "description": "Response users" + } + }, + "tags": [ + "UserV1alpha1" + ] + }, + "post": { + "description": "Create User", + "operationId": "createUser", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Fresh user" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Response users created just now" + } + }, + "tags": [ + "UserV1alpha1" + ] + } + }, + "/api/v1alpha1/users/{name}": { + "delete": { + "description": "Delete User", + "operationId": "deleteUser", + "parameters": [ + { + "description": "Name of user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response user deleted just now" + } + }, + "tags": [ + "UserV1alpha1" + ] + }, + "get": { + "description": "Get User", + "operationId": "getUser", + "parameters": [ + { + "description": "Name of user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Response single user" + } + }, + "tags": [ + "UserV1alpha1" + ] + }, + "patch": { + "description": "Patch User", + "operationId": "patchUser", + "parameters": [ + { + "description": "Name of user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Response user patched just now" + } + }, + "tags": [ + "UserV1alpha1" + ] + }, + "put": { + "description": "Update User", + "operationId": "updateUser", + "parameters": [ + { + "description": "Name of user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Updated user" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Response users updated just now" + } + }, + "tags": [ + "UserV1alpha1" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/attachments": { + "get": { + "operationId": "SearchAttachments", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Filter attachments without group. This parameter will ignore group parameter.", + "in": "query", + "name": "ungrouped", + "schema": { + "type": "boolean" + } + }, + { + "description": "Keyword for searching.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Acceptable media types.", + "in": "query", + "name": "accepts", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AttachmentList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AttachmentV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/attachments/upload": { + "post": { + "operationId": "UploadAttachment", + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/IUploadRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AttachmentV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/auth-providers": { + "get": { + "description": "Lists all auth providers", + "operationId": "listAuthProviders", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ListedAuthProvider" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AuthProviderV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/auth-providers/{name}/disable": { + "put": { + "description": "Disables an auth provider", + "operationId": "disableAuthProvider", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AuthProviderV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/auth-providers/{name}/enable": { + "put": { + "description": "Enables an auth provider", + "operationId": "enableAuthProvider", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AuthProviderV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/comments": { + "get": { + "description": "List comments.", + "operationId": "ListComments", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Comments filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Commenter kind.", + "in": "query", + "name": "ownerKind", + "schema": { + "type": "string" + } + }, + { + "description": "Commenter name.", + "in": "query", + "name": "ownerName", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedCommentList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Console" + ] + }, + "post": { + "description": "Create a comment.", + "operationId": "CreateComment", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/CommentRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/comments/{name}/reply": { + "post": { + "description": "Create a reply.", + "operationId": "CreateReply", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/ReplyRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/indices/-/rebuild": { + "post": { + "description": "Rebuild all indices", + "operationId": "RebuildAllIndices", + "responses": {}, + "tags": [ + "IndicesV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/indices/post": { + "post": { + "deprecated": true, + "description": "Build or rebuild post indices for full text search. This method is deprecated, please use POST /indices/-/rebuild instead.", + "operationId": "BuildPostIndices", + "responses": {}, + "tags": [ + "IndicesV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/notifiers/{name}/sender-config": { + "get": { + "description": "Fetch sender config of notifier", + "operationId": "FetchSenderConfig", + "parameters": [ + { + "description": "Notifier name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "object" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "NotifierV1alpha1Console" + ] + }, + "post": { + "description": "Save sender config of notifier", + "operationId": "SaveSenderConfig", + "parameters": [ + { + "description": "Notifier name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "type": "object" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "NotifierV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugin-presets": { + "get": { + "description": "List all plugin presets in the system.", + "operationId": "ListPluginPresets", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Plugin" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins": { + "get": { + "description": "List plugins using query criteria and sort params", + "operationId": "ListPlugins", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Keyword of plugin name or description", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Whether the plugin is enabled", + "in": "query", + "name": "enabled", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PluginList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/-/bundle.css": { + "get": { + "description": "Merge all CSS bundles of enabled plugins into one.", + "operationId": "fetchCssBundle", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "string" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/-/bundle.js": { + "get": { + "description": "Merge all JS bundles of enabled plugins into one.", + "operationId": "fetchJsBundle", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "string" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/-/install-from-uri": { + "post": { + "description": "Install a plugin from uri.", + "operationId": "InstallPluginFromUri", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/InstallFromUriRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/install": { + "post": { + "description": "Install a plugin by uploading a Jar file.", + "operationId": "InstallPlugin", + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/PluginInstallRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/config": { + "get": { + "description": "Fetch configMap of plugin by configured configMapName.", + "operationId": "fetchPluginConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + }, + "put": { + "description": "Update the configMap of plugin setting.", + "operationId": "updatePluginConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/plugin-state": { + "put": { + "description": "Change the running state of a plugin by name.", + "operationId": "ChangePluginRunningState", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/PluginRunningStateRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/reload": { + "put": { + "description": "Reload a plugin by name.", + "operationId": "reloadPlugin", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/reset-config": { + "put": { + "description": "Reset the configMap of plugin setting.", + "operationId": "ResetPluginConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/setting": { + "get": { + "description": "Fetch setting of plugin.", + "operationId": "fetchPluginSetting", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/upgrade": { + "post": { + "description": "Upgrade a plugin by uploading a Jar file", + "operationId": "UpgradePlugin", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/PluginInstallRequest" + } + } + }, + "required": true + }, + "responses": {}, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/upgrade-from-uri": { + "post": { + "description": "Upgrade a plugin from uri.", + "operationId": "UpgradePluginFromUri", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/UpgradeFromUriRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts": { + "get": { + "description": "List posts.", + "operationId": "ListPosts", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Posts filtered by publish phase.", + "in": "query", + "name": "publishPhase", + "schema": { + "type": "string", + "enum": [ + "DRAFT", + "PENDING_APPROVAL", + "PUBLISHED", + "FAILED" + ] + } + }, + { + "description": "Posts filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Posts filtered by category including sub-categories.", + "in": "query", + "name": "categoryWithChildren", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedPostList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + }, + "post": { + "description": "Draft a post.", + "operationId": "DraftPost", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/PostRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}": { + "put": { + "description": "Update a post.", + "operationId": "UpdateDraftPost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/PostRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/content": { + "delete": { + "description": "Delete a content for post.", + "operationId": "deletePostContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "snapshotName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + }, + "get": { + "description": "Fetch content of post.", + "operationId": "fetchPostContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "snapshotName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + }, + "put": { + "description": "Update a post\u0027s content.", + "operationId": "UpdatePostContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/Content" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/head-content": { + "get": { + "description": "Fetch head content of post.", + "operationId": "fetchPostHeadContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/publish": { + "put": { + "description": "Publish a post.", + "operationId": "PublishPost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Head snapshot name of content.", + "in": "query", + "name": "headSnapshot", + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "async", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/recycle": { + "put": { + "description": "Recycle a post.", + "operationId": "RecyclePost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/release-content": { + "get": { + "description": "Fetch release content of post.", + "operationId": "fetchPostReleaseContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/revert-content": { + "put": { + "description": "Revert to specified snapshot for post content.", + "operationId": "revertToSpecifiedSnapshotForPost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/RevertSnapshotForPostParam" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/snapshot": { + "get": { + "description": "List all snapshots for post content.", + "operationId": "listPostSnapshots", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ListedSnapshotDto" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/unpublish": { + "put": { + "description": "Publish a post.", + "operationId": "UnpublishPost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/replies": { + "get": { + "description": "List replies.", + "operationId": "ListReplies", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Replies filtered by commentName.", + "in": "query", + "name": "commentName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedReplyList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ReplyV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages": { + "get": { + "description": "List single pages.", + "operationId": "ListSinglePages", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "SinglePages filtered by contributor.", + "in": "query", + "name": "contributor", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "SinglePages filtered by publish phase.", + "in": "query", + "name": "publishPhase", + "schema": { + "type": "string", + "enum": [ + "DRAFT", + "PENDING_APPROVAL", + "PUBLISHED", + "FAILED" + ] + } + }, + { + "description": "SinglePages filtered by visibility.", + "in": "query", + "name": "visible", + "schema": { + "type": "string", + "enum": [ + "PUBLIC", + "INTERNAL", + "PRIVATE" + ] + } + }, + { + "description": "SinglePages filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedSinglePageList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + }, + "post": { + "description": "Draft a single page.", + "operationId": "DraftSinglePage", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/SinglePageRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}": { + "put": { + "description": "Update a single page.", + "operationId": "UpdateDraftSinglePage", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/SinglePageRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/content": { + "delete": { + "description": "Delete a content for post.", + "operationId": "deleteSinglePageContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "snapshotName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + }, + "get": { + "description": "Fetch content of single page.", + "operationId": "fetchSinglePageContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "snapshotName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + }, + "put": { + "description": "Update a single page\u0027s content.", + "operationId": "UpdateSinglePageContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/Content" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/head-content": { + "get": { + "description": "Fetch head content of single page.", + "operationId": "fetchSinglePageHeadContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/publish": { + "put": { + "description": "Publish a single page.", + "operationId": "PublishSinglePage", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/release-content": { + "get": { + "description": "Fetch release content of single page.", + "operationId": "fetchSinglePageReleaseContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/revert-content": { + "put": { + "description": "Revert to specified snapshot for single page content.", + "operationId": "revertToSpecifiedSnapshotForSinglePage", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/RevertSnapshotForSingleParam" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/snapshot": { + "get": { + "description": "List all snapshots for single page content.", + "operationId": "listSinglePageSnapshots", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ListedSnapshotDto" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/stats": { + "get": { + "description": "Get stats.", + "operationId": "getStats", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/DashboardStats" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SystemV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/system/initialize": { + "post": { + "description": "Initialize system", + "operationId": "initialize", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SystemInitializationRequest" + } + } + } + }, + "responses": { + "201": { + "description": "System initialization successfully.", + "headers": { + "Location": { + "description": "Redirect URL.", + "schema": { + "type": "string" + }, + "style": "simple" + } + } + } + }, + "tags": [ + "SystemV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/tags": { + "get": { + "description": "List Post Tags.", + "operationId": "ListPostTags", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Post tags filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TagList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TagV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes": { + "get": { + "description": "List themes.", + "operationId": "ListThemes", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Whether to list uninstalled themes.", + "in": "query", + "name": "uninstalled", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ThemeList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/-/activation": { + "get": { + "description": "Fetch the activated theme.", + "operationId": "fetchActivatedTheme", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/-/install-from-uri": { + "post": { + "description": "Install a theme from uri.", + "operationId": "InstallThemeFromUri", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/InstallFromUriRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/install": { + "post": { + "description": "Install a theme by uploading a zip file.", + "operationId": "InstallTheme", + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/ThemeInstallRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/activation": { + "put": { + "description": "Activate a theme by name.", + "operationId": "activateTheme", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/config": { + "get": { + "description": "Fetch configMap of theme by configured configMapName.", + "operationId": "fetchThemeConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + }, + "put": { + "description": "Update the configMap of theme setting.", + "operationId": "updateThemeConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/invalidate-cache": { + "put": { + "description": "Invalidate theme template cache.", + "operationId": "InvalidateCache", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "204": { + "description": "No Content" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/reload": { + "put": { + "description": "Reload theme setting.", + "operationId": "Reload", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/reset-config": { + "put": { + "description": "Reset the configMap of theme setting.", + "operationId": "ResetThemeConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/setting": { + "get": { + "description": "Fetch setting of theme.", + "operationId": "fetchThemeSetting", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/upgrade": { + "post": { + "description": "Upgrade theme", + "operationId": "UpgradeTheme", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/UpgradeRequest" + } + } + }, + "required": true + }, + "responses": {}, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/upgrade-from-uri": { + "post": { + "description": "Upgrade a theme from uri.", + "operationId": "UpgradeThemeFromUri", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/UpgradeFromUriRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users": { + "get": { + "description": "List users", + "operationId": "ListUsers", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Keyword to search", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Role name", + "in": "query", + "name": "role", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserEndpoint.ListedUserList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + }, + "post": { + "description": "Creates a new user.", + "operationId": "CreateUser", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CreateUserRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/-": { + "get": { + "description": "Get current user detail", + "operationId": "GetCurrentUserDetail", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/DetailedUser" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + }, + "put": { + "description": "Update current user profile, but password.", + "operationId": "UpdateCurrentUser", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/-/password": { + "put": { + "description": "Change own password of user.", + "operationId": "ChangeOwnPassword", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ChangeOwnPasswordRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/-/send-email-verification-code": { + "post": { + "description": "Send email verification code for user", + "operationId": "SendEmailVerificationCode", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/EmailVerifyRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/-/verify-email": { + "post": { + "description": "Verify email for user by code.", + "operationId": "VerifyEmail", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/VerifyCodeRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/{name}": { + "get": { + "description": "Get user detail by name", + "operationId": "GetUserDetail", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/DetailedUser" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/{name}/avatar": { + "delete": { + "description": "delete user avatar", + "operationId": "DeleteUserAvatar", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + }, + "post": { + "description": "upload user avatar", + "operationId": "UploadUserAvatar", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/IAvatarUploadRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/{name}/password": { + "put": { + "description": "Change anyone password of user for admin.", + "operationId": "ChangeAnyonePassword", + "parameters": [ + { + "description": "Name of user. If the name is equal to \u0027-\u0027, it will change the password of current user.", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ChangePasswordRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/{name}/permissions": { + "get": { + "description": "Get permissions of user", + "operationId": "GetPermissions", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserPermission" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + }, + "post": { + "description": "Grant permissions to user", + "operationId": "GrantPermission", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/GrantRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/categories": { + "get": { + "description": "Lists categories.", + "operationId": "queryCategories", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CategoryVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CategoryV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/categories/{name}": { + "get": { + "description": "Gets category by name.", + "operationId": "queryCategoryByName", + "parameters": [ + { + "description": "Category name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CategoryVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CategoryV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/categories/{name}/posts": { + "get": { + "description": "Lists posts by category name.", + "operationId": "queryPostsByCategoryName", + "parameters": [ + { + "description": "Category name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedPostVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CategoryV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/posts": { + "get": { + "description": "Lists posts.", + "operationId": "queryPosts", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedPostVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/posts/{name}": { + "get": { + "description": "Gets a post by name.", + "operationId": "queryPostByName", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PostVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/posts/{name}/navigation": { + "get": { + "description": "Gets a post navigation by name.", + "operationId": "queryPostNavigationByName", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NavigationPostVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/singlepages": { + "get": { + "description": "Lists single pages", + "operationId": "querySinglePages", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedSinglePageVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/singlepages/{name}": { + "get": { + "description": "Gets single page by name", + "operationId": "querySinglePageByName", + "parameters": [ + { + "description": "SinglePage name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePageVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/tags": { + "get": { + "description": "Lists tags", + "operationId": "queryTags", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TagVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TagV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/tags/{name}": { + "get": { + "description": "Gets tag by name", + "operationId": "queryTagByName", + "parameters": [ + { + "description": "Tag name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TagVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TagV1alpha1Public" + ] + } + }, + "/apis/api.content.halo.run/v1alpha1/tags/{name}/posts": { + "get": { + "description": "Lists posts by tag name", + "operationId": "queryPostsByTagName", + "parameters": [ + { + "description": "Tag name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedPostVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TagV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/comments": { + "get": { + "description": "List comments.", + "operationId": "ListComments_1", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "The comment subject group.", + "in": "query", + "name": "group", + "schema": { + "type": "string" + } + }, + { + "description": "The comment subject version.", + "in": "query", + "name": "version", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "The comment subject kind.", + "in": "query", + "name": "kind", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "The comment subject name.", + "in": "query", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Whether to include replies. Default is false.", + "in": "query", + "name": "withReplies", + "schema": { + "type": "boolean" + } + }, + { + "description": "Reply size of the comment, default is 10, only works when withReplies is true.", + "in": "query", + "name": "replySize", + "schema": { + "type": "integer", + "format": "int32" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CommentWithReplyVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + }, + "post": { + "description": "Create a comment.", + "operationId": "CreateComment_1", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/CommentRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/comments/{name}": { + "get": { + "description": "Get a comment.", + "operationId": "GetComment", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CommentVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/comments/{name}/reply": { + "get": { + "description": "List comment replies.", + "operationId": "ListCommentReplies", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReplyVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + }, + "post": { + "description": "Create a reply.", + "operationId": "CreateReply_1", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/ReplyRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/indices/-/search": { + "post": { + "description": "Search indices.", + "operationId": "IndicesSearch", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchOption" + } + } + }, + "description": "Please note that the \"filterPublished\", \"filterExposed\" and \"filterRecycled\" fields are ignored in this endpoint." + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchResult" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "IndexV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/indices/post": { + "get": { + "deprecated": true, + "description": "Search posts with fuzzy query. This method is deprecated, please use POST /indices/-/search instead.", + "operationId": "SearchPost", + "parameters": [ + { + "description": "Keyword to search", + "in": "query", + "name": "keyword", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Limit of search results", + "in": "query", + "name": "limit", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Highlight pre tag", + "in": "query", + "name": "highlightPreTag", + "schema": { + "type": "string" + } + }, + { + "description": "Highlight post tag", + "in": "query", + "name": "highlightPostTag", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchResult" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "IndexV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/menus/-": { + "get": { + "description": "Gets primary menu.", + "operationId": "queryPrimaryMenu", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "MenuV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/menus/{name}": { + "get": { + "description": "Gets menu by name.", + "operationId": "queryMenuByName", + "parameters": [ + { + "description": "Menu name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "MenuV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/stats/-": { + "get": { + "description": "Gets site stats", + "operationId": "queryStats", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SiteStatsVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SystemV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/trackers/counter": { + "post": { + "description": "Count an extension resource visits.", + "operationId": "count", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/CounterRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "MetricsV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/trackers/downvote": { + "post": { + "description": "Downvote an extension resource.", + "operationId": "downvote", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/VoteRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "MetricsV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/trackers/upvote": { + "post": { + "description": "Upvote an extension resource.", + "operationId": "upvote", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/VoteRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "MetricsV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/users/-/send-password-reset-email": { + "post": { + "description": "Send password reset email when forgot password", + "operationId": "SendPasswordResetEmail", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PasswordResetEmailRequest" + } + } + }, + "required": true + }, + "responses": { + "204 NO_CONTENT": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/users/-/send-register-verify-email": { + "post": { + "description": "Send registration verification email, which can be called when mustVerifyEmailOnRegistration in user settings is true", + "operationId": "SendRegisterVerifyEmail", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RegisterVerifyEmailRequest" + } + } + }, + "required": true + }, + "responses": { + "204 NO_CONTENT": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/users/-/signup": { + "post": { + "description": "Sign up a new user", + "operationId": "SignUp", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SignUpRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/users/{name}/reset-password": { + "put": { + "description": "Reset password by token", + "operationId": "ResetPasswordByToken", + "parameters": [ + { + "description": "The name of the user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ResetPasswordRequest" + } + } + }, + "required": true + }, + "responses": { + "204 NO_CONTENT": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Public" + ] + } + }, + "/apis/api.notification.halo.run/v1alpha1/notifiers/{name}/receiver-config": { + "get": { + "description": "Fetch receiver config of notifier", + "operationId": "FetchReceiverConfig", + "parameters": [ + { + "description": "Notifier name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "object" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "NotifierV1alpha1Uc" + ] + }, + "post": { + "description": "Save receiver config of notifier", + "operationId": "SaveReceiverConfig", + "parameters": [ + { + "description": "Notifier name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "type": "object" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "NotifierV1alpha1Uc" + ] + } + }, + "/apis/api.notification.halo.run/v1alpha1/subscriptions/{name}/unsubscribe": { + "get": { + "description": "Unsubscribe a subscription", + "operationId": "Unsubscribe", + "parameters": [ + { + "description": "Subscription name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Unsubscribe token", + "in": "query", + "name": "token", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "string" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "api.notification.halo.run/v1alpha1/Subscription" + ] + } + }, + "/apis/api.notification.halo.run/v1alpha1/userspaces/{username}/notification-preferences": { + "get": { + "description": "List notification preferences for the authenticated user.", + "operationId": "ListUserNotificationPreferences", + "parameters": [ + { + "description": "Username", + "in": "path", + "name": "username", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonTypeNotifierMatrix" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "NotificationV1alpha1Uc" + ] + }, + "post": { + "description": "Save notification preferences for the authenticated user.", + "operationId": "SaveUserNotificationPreferences", + "parameters": [ + { + "description": "Username", + "in": "path", + "name": "username", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonTypeNotifierCollectionRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonTypeNotifierMatrix" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "NotificationV1alpha1Uc" + ] + } + }, + "/apis/api.notification.halo.run/v1alpha1/userspaces/{username}/notifications": { + "get": { + "description": "List notifications for the authenticated user.", + "operationId": "ListUserNotifications", + "parameters": [ + { + "description": "Username", + "in": "path", + "name": "username", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotificationList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "NotificationV1alpha1Uc" + ] + } + }, + "/apis/api.notification.halo.run/v1alpha1/userspaces/{username}/notifications/-/mark-specified-as-read": { + "put": { + "description": "Mark the specified notifications as read.", + "operationId": "MarkNotificationsAsRead", + "parameters": [ + { + "description": "Username", + "in": "path", + "name": "username", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/MarkSpecifiedRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "NotificationV1alpha1Uc" + ] + } + }, + "/apis/api.notification.halo.run/v1alpha1/userspaces/{username}/notifications/{name}": { + "delete": { + "description": "Delete the specified notification.", + "operationId": "DeleteSpecifiedNotification", + "parameters": [ + { + "description": "Username", + "in": "path", + "name": "username", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Notification name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Notification" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "NotificationV1alpha1Uc" + ] + } + }, + "/apis/api.notification.halo.run/v1alpha1/userspaces/{username}/notifications/{name}/mark-as-read": { + "put": { + "description": "Mark the specified notification as read.", + "operationId": "MarkNotificationAsRead", + "parameters": [ + { + "description": "Username", + "in": "path", + "name": "username", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Notification name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Notification" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "NotificationV1alpha1Uc" + ] + } + }, + "/apis/api.plugin.halo.run/v1alpha1/plugins/{name}/available": { + "get": { + "description": "Gets plugin available by name.", + "operationId": "queryPluginAvailableByName", + "parameters": [ + { + "description": "Plugin name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "boolean" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Public" + ] + } + }, + "/apis/auth.halo.run/v1alpha1/authproviders": { + "get": { + "description": "List AuthProvider", + "operationId": "listAuthProvider", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProviderList" + } + } + }, + "description": "Response authproviders" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + }, + "post": { + "description": "Create AuthProvider", + "operationId": "createAuthProvider", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Fresh authprovider" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Response authproviders created just now" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + } + }, + "/apis/auth.halo.run/v1alpha1/authproviders/{name}": { + "delete": { + "description": "Delete AuthProvider", + "operationId": "deleteAuthProvider", + "parameters": [ + { + "description": "Name of authprovider", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response authprovider deleted just now" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + }, + "get": { + "description": "Get AuthProvider", + "operationId": "getAuthProvider", + "parameters": [ + { + "description": "Name of authprovider", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Response single authprovider" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + }, + "patch": { + "description": "Patch AuthProvider", + "operationId": "patchAuthProvider", + "parameters": [ + { + "description": "Name of authprovider", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Response authprovider patched just now" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + }, + "put": { + "description": "Update AuthProvider", + "operationId": "updateAuthProvider", + "parameters": [ + { + "description": "Name of authprovider", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Updated authprovider" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Response authproviders updated just now" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + } + }, + "/apis/auth.halo.run/v1alpha1/userconnections": { + "get": { + "description": "List UserConnection", + "operationId": "listUserConnection", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnectionList" + } + } + }, + "description": "Response userconnections" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + }, + "post": { + "description": "Create UserConnection", + "operationId": "createUserConnection", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Fresh userconnection" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Response userconnections created just now" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + } + }, + "/apis/auth.halo.run/v1alpha1/userconnections/{name}": { + "delete": { + "description": "Delete UserConnection", + "operationId": "deleteUserConnection", + "parameters": [ + { + "description": "Name of userconnection", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response userconnection deleted just now" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + }, + "get": { + "description": "Get UserConnection", + "operationId": "getUserConnection", + "parameters": [ + { + "description": "Name of userconnection", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Response single userconnection" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + }, + "patch": { + "description": "Patch UserConnection", + "operationId": "patchUserConnection", + "parameters": [ + { + "description": "Name of userconnection", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Response userconnection patched just now" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + }, + "put": { + "description": "Update UserConnection", + "operationId": "updateUserConnection", + "parameters": [ + { + "description": "Name of userconnection", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Updated userconnection" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Response userconnections updated just now" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + } + }, + "/apis/console.api.migration.halo.run/v1alpha1/backup-files": { + "get": { + "description": "Get backup files from backup root.", + "operationId": "getBackupFiles", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/BackupFile" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "MigrationV1alpha1Console" + ] + } + }, + "/apis/console.api.migration.halo.run/v1alpha1/backups/{name}/files/{filename}": { + "get": { + "operationId": "DownloadBackups", + "parameters": [ + { + "description": "Backup name.", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Backup filename.", + "in": "path", + "name": "filename", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "MigrationV1alpha1Console" + ] + } + }, + "/apis/console.api.migration.halo.run/v1alpha1/restorations": { + "post": { + "description": "Restore backup by uploading file or providing download link or backup name.", + "operationId": "RestoreBackup", + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/RestoreRequest" + } + } + }, + "required": true + }, + "responses": {}, + "tags": [ + "MigrationV1alpha1Console" + ] + } + }, + "/apis/console.api.notification.halo.run/v1alpha1/notifiers/default-email-notifier/verify-connection": { + "post": { + "description": "Verify email sender config.", + "operationId": "VerifyEmailSenderConfig", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/EmailConfigValidationRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "NotifierV1alpha1Console" + ] + } + }, + "/apis/content.halo.run/v1alpha1/categories": { + "get": { + "description": "List Category", + "operationId": "listCategory", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CategoryList" + } + } + }, + "description": "Response categories" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + }, + "post": { + "description": "Create Category", + "operationId": "createCategory", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Fresh category" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Response categories created just now" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/categories/{name}": { + "delete": { + "description": "Delete Category", + "operationId": "deleteCategory", + "parameters": [ + { + "description": "Name of category", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response category deleted just now" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + }, + "get": { + "description": "Get Category", + "operationId": "getCategory", + "parameters": [ + { + "description": "Name of category", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Response single category" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + }, + "patch": { + "description": "Patch Category", + "operationId": "patchCategory", + "parameters": [ + { + "description": "Name of category", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Response category patched just now" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + }, + "put": { + "description": "Update Category", + "operationId": "updateCategory", + "parameters": [ + { + "description": "Name of category", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Updated category" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Response categories updated just now" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/comments": { + "get": { + "description": "List Comment", + "operationId": "listComment", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CommentList" + } + } + }, + "description": "Response comments" + } + }, + "tags": [ + "CommentV1alpha1" + ] + }, + "post": { + "description": "Create Comment", + "operationId": "createComment", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Fresh comment" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Response comments created just now" + } + }, + "tags": [ + "CommentV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/comments/{name}": { + "delete": { + "description": "Delete Comment", + "operationId": "deleteComment", + "parameters": [ + { + "description": "Name of comment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response comment deleted just now" + } + }, + "tags": [ + "CommentV1alpha1" + ] + }, + "get": { + "description": "Get Comment", + "operationId": "getComment", + "parameters": [ + { + "description": "Name of comment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Response single comment" + } + }, + "tags": [ + "CommentV1alpha1" + ] + }, + "patch": { + "description": "Patch Comment", + "operationId": "patchComment", + "parameters": [ + { + "description": "Name of comment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Response comment patched just now" + } + }, + "tags": [ + "CommentV1alpha1" + ] + }, + "put": { + "description": "Update Comment", + "operationId": "updateComment", + "parameters": [ + { + "description": "Name of comment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Updated comment" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Response comments updated just now" + } + }, + "tags": [ + "CommentV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/posts": { + "get": { + "description": "List Post", + "operationId": "listPost", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PostList" + } + } + }, + "description": "Response posts" + } + }, + "tags": [ + "PostV1alpha1" + ] + }, + "post": { + "description": "Create Post", + "operationId": "createPost", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Fresh post" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Response posts created just now" + } + }, + "tags": [ + "PostV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/posts/{name}": { + "delete": { + "description": "Delete Post", + "operationId": "deletePost", + "parameters": [ + { + "description": "Name of post", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response post deleted just now" + } + }, + "tags": [ + "PostV1alpha1" + ] + }, + "get": { + "description": "Get Post", + "operationId": "getPost", + "parameters": [ + { + "description": "Name of post", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Response single post" + } + }, + "tags": [ + "PostV1alpha1" + ] + }, + "patch": { + "description": "Patch Post", + "operationId": "patchPost", + "parameters": [ + { + "description": "Name of post", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Response post patched just now" + } + }, + "tags": [ + "PostV1alpha1" + ] + }, + "put": { + "description": "Update Post", + "operationId": "updatePost", + "parameters": [ + { + "description": "Name of post", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Updated post" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Response posts updated just now" + } + }, + "tags": [ + "PostV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/replies": { + "get": { + "description": "List Reply", + "operationId": "listReply", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReplyList" + } + } + }, + "description": "Response replies" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + }, + "post": { + "description": "Create Reply", + "operationId": "createReply", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Fresh reply" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Response replies created just now" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/replies/{name}": { + "delete": { + "description": "Delete Reply", + "operationId": "deleteReply", + "parameters": [ + { + "description": "Name of reply", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response reply deleted just now" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + }, + "get": { + "description": "Get Reply", + "operationId": "getReply", + "parameters": [ + { + "description": "Name of reply", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Response single reply" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + }, + "patch": { + "description": "Patch Reply", + "operationId": "patchReply", + "parameters": [ + { + "description": "Name of reply", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Response reply patched just now" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + }, + "put": { + "description": "Update Reply", + "operationId": "updateReply", + "parameters": [ + { + "description": "Name of reply", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Updated reply" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Response replies updated just now" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/singlepages": { + "get": { + "description": "List SinglePage", + "operationId": "listSinglePage", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePageList" + } + } + }, + "description": "Response singlepages" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + }, + "post": { + "description": "Create SinglePage", + "operationId": "createSinglePage", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Fresh singlepage" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Response singlepages created just now" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/singlepages/{name}": { + "delete": { + "description": "Delete SinglePage", + "operationId": "deleteSinglePage", + "parameters": [ + { + "description": "Name of singlepage", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response singlepage deleted just now" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + }, + "get": { + "description": "Get SinglePage", + "operationId": "getSinglePage", + "parameters": [ + { + "description": "Name of singlepage", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Response single singlepage" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + }, + "patch": { + "description": "Patch SinglePage", + "operationId": "patchSinglePage", + "parameters": [ + { + "description": "Name of singlepage", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Response singlepage patched just now" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + }, + "put": { + "description": "Update SinglePage", + "operationId": "updateSinglePage", + "parameters": [ + { + "description": "Name of singlepage", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Updated singlepage" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Response singlepages updated just now" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/snapshots": { + "get": { + "description": "List Snapshot", + "operationId": "listSnapshot", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SnapshotList" + } + } + }, + "description": "Response snapshots" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + }, + "post": { + "description": "Create Snapshot", + "operationId": "createSnapshot", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Fresh snapshot" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Response snapshots created just now" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/snapshots/{name}": { + "delete": { + "description": "Delete Snapshot", + "operationId": "deleteSnapshot", + "parameters": [ + { + "description": "Name of snapshot", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response snapshot deleted just now" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + }, + "get": { + "description": "Get Snapshot", + "operationId": "getSnapshot", + "parameters": [ + { + "description": "Name of snapshot", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Response single snapshot" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + }, + "patch": { + "description": "Patch Snapshot", + "operationId": "patchSnapshot", + "parameters": [ + { + "description": "Name of snapshot", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Response snapshot patched just now" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + }, + "put": { + "description": "Update Snapshot", + "operationId": "updateSnapshot", + "parameters": [ + { + "description": "Name of snapshot", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Updated snapshot" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Response snapshots updated just now" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/tags": { + "get": { + "description": "List Tag", + "operationId": "listTag", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TagList" + } + } + }, + "description": "Response tags" + } + }, + "tags": [ + "TagV1alpha1" + ] + }, + "post": { + "description": "Create Tag", + "operationId": "createTag", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Fresh tag" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Response tags created just now" + } + }, + "tags": [ + "TagV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/tags/{name}": { + "delete": { + "description": "Delete Tag", + "operationId": "deleteTag", + "parameters": [ + { + "description": "Name of tag", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response tag deleted just now" + } + }, + "tags": [ + "TagV1alpha1" + ] + }, + "get": { + "description": "Get Tag", + "operationId": "getTag", + "parameters": [ + { + "description": "Name of tag", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Response single tag" + } + }, + "tags": [ + "TagV1alpha1" + ] + }, + "patch": { + "description": "Patch Tag", + "operationId": "patchTag", + "parameters": [ + { + "description": "Name of tag", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Response tag patched just now" + } + }, + "tags": [ + "TagV1alpha1" + ] + }, + "put": { + "description": "Update Tag", + "operationId": "updateTag", + "parameters": [ + { + "description": "Name of tag", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Updated tag" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Response tags updated just now" + } + }, + "tags": [ + "TagV1alpha1" + ] + } + }, + "/apis/metrics.halo.run/v1alpha1/counters": { + "get": { + "description": "List Counter", + "operationId": "listCounter", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CounterList" + } + } + }, + "description": "Response counters" + } + }, + "tags": [ + "CounterV1alpha1" + ] + }, + "post": { + "description": "Create Counter", + "operationId": "createCounter", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Fresh counter" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Response counters created just now" + } + }, + "tags": [ + "CounterV1alpha1" + ] + } + }, + "/apis/metrics.halo.run/v1alpha1/counters/{name}": { + "delete": { + "description": "Delete Counter", + "operationId": "deleteCounter", + "parameters": [ + { + "description": "Name of counter", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response counter deleted just now" + } + }, + "tags": [ + "CounterV1alpha1" + ] + }, + "get": { + "description": "Get Counter", + "operationId": "getCounter", + "parameters": [ + { + "description": "Name of counter", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Response single counter" + } + }, + "tags": [ + "CounterV1alpha1" + ] + }, + "patch": { + "description": "Patch Counter", + "operationId": "patchCounter", + "parameters": [ + { + "description": "Name of counter", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Response counter patched just now" + } + }, + "tags": [ + "CounterV1alpha1" + ] + }, + "put": { + "description": "Update Counter", + "operationId": "updateCounter", + "parameters": [ + { + "description": "Name of counter", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Updated counter" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Response counters updated just now" + } + }, + "tags": [ + "CounterV1alpha1" + ] + } + }, + "/apis/migration.halo.run/v1alpha1/backups": { + "get": { + "description": "List Backup", + "operationId": "listBackup", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/BackupList" + } + } + }, + "description": "Response backups" + } + }, + "tags": [ + "BackupV1alpha1" + ] + }, + "post": { + "description": "Create Backup", + "operationId": "createBackup", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Fresh backup" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Response backups created just now" + } + }, + "tags": [ + "BackupV1alpha1" + ] + } + }, + "/apis/migration.halo.run/v1alpha1/backups/{name}": { + "delete": { + "description": "Delete Backup", + "operationId": "deleteBackup", + "parameters": [ + { + "description": "Name of backup", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response backup deleted just now" + } + }, + "tags": [ + "BackupV1alpha1" + ] + }, + "get": { + "description": "Get Backup", + "operationId": "getBackup", + "parameters": [ + { + "description": "Name of backup", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Response single backup" + } + }, + "tags": [ + "BackupV1alpha1" + ] + }, + "patch": { + "description": "Patch Backup", + "operationId": "patchBackup", + "parameters": [ + { + "description": "Name of backup", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Response backup patched just now" + } + }, + "tags": [ + "BackupV1alpha1" + ] + }, + "put": { + "description": "Update Backup", + "operationId": "updateBackup", + "parameters": [ + { + "description": "Name of backup", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Updated backup" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Response backups updated just now" + } + }, + "tags": [ + "BackupV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/notifications": { + "get": { + "description": "List Notification", + "operationId": "listNotification", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotificationList" + } + } + }, + "description": "Response notifications" + } + }, + "tags": [ + "NotificationV1alpha1" + ] + }, + "post": { + "description": "Create Notification", + "operationId": "createNotification", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Notification" + } + } + }, + "description": "Fresh notification" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Notification" + } + } + }, + "description": "Response notifications created just now" + } + }, + "tags": [ + "NotificationV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/notifications/{name}": { + "delete": { + "description": "Delete Notification", + "operationId": "deleteNotification", + "parameters": [ + { + "description": "Name of notification", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response notification deleted just now" + } + }, + "tags": [ + "NotificationV1alpha1" + ] + }, + "get": { + "description": "Get Notification", + "operationId": "getNotification", + "parameters": [ + { + "description": "Name of notification", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Notification" + } + } + }, + "description": "Response single notification" + } + }, + "tags": [ + "NotificationV1alpha1" + ] + }, + "patch": { + "description": "Patch Notification", + "operationId": "patchNotification", + "parameters": [ + { + "description": "Name of notification", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Notification" + } + } + }, + "description": "Response notification patched just now" + } + }, + "tags": [ + "NotificationV1alpha1" + ] + }, + "put": { + "description": "Update Notification", + "operationId": "updateNotification", + "parameters": [ + { + "description": "Name of notification", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Notification" + } + } + }, + "description": "Updated notification" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Notification" + } + } + }, + "description": "Response notifications updated just now" + } + }, + "tags": [ + "NotificationV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/notificationtemplates": { + "get": { + "description": "List NotificationTemplate", + "operationId": "listNotificationTemplate", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotificationTemplateList" + } + } + }, + "description": "Response notificationtemplates" + } + }, + "tags": [ + "NotificationTemplateV1alpha1" + ] + }, + "post": { + "description": "Create NotificationTemplate", + "operationId": "createNotificationTemplate", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotificationTemplate" + } + } + }, + "description": "Fresh notificationtemplate" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotificationTemplate" + } + } + }, + "description": "Response notificationtemplates created just now" + } + }, + "tags": [ + "NotificationTemplateV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/notificationtemplates/{name}": { + "delete": { + "description": "Delete NotificationTemplate", + "operationId": "deleteNotificationTemplate", + "parameters": [ + { + "description": "Name of notificationtemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response notificationtemplate deleted just now" + } + }, + "tags": [ + "NotificationTemplateV1alpha1" + ] + }, + "get": { + "description": "Get NotificationTemplate", + "operationId": "getNotificationTemplate", + "parameters": [ + { + "description": "Name of notificationtemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotificationTemplate" + } + } + }, + "description": "Response single notificationtemplate" + } + }, + "tags": [ + "NotificationTemplateV1alpha1" + ] + }, + "patch": { + "description": "Patch NotificationTemplate", + "operationId": "patchNotificationTemplate", + "parameters": [ + { + "description": "Name of notificationtemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotificationTemplate" + } + } + }, + "description": "Response notificationtemplate patched just now" + } + }, + "tags": [ + "NotificationTemplateV1alpha1" + ] + }, + "put": { + "description": "Update NotificationTemplate", + "operationId": "updateNotificationTemplate", + "parameters": [ + { + "description": "Name of notificationtemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotificationTemplate" + } + } + }, + "description": "Updated notificationtemplate" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotificationTemplate" + } + } + }, + "description": "Response notificationtemplates updated just now" + } + }, + "tags": [ + "NotificationTemplateV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/notifierDescriptors": { + "get": { + "description": "List NotifierDescriptor", + "operationId": "listNotifierDescriptor", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotifierDescriptorList" + } + } + }, + "description": "Response notifierDescriptors" + } + }, + "tags": [ + "NotifierDescriptorV1alpha1" + ] + }, + "post": { + "description": "Create NotifierDescriptor", + "operationId": "createNotifierDescriptor", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotifierDescriptor" + } + } + }, + "description": "Fresh notifierDescriptor" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotifierDescriptor" + } + } + }, + "description": "Response notifierDescriptors created just now" + } + }, + "tags": [ + "NotifierDescriptorV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/notifierDescriptors/{name}": { + "delete": { + "description": "Delete NotifierDescriptor", + "operationId": "deleteNotifierDescriptor", + "parameters": [ + { + "description": "Name of notifierDescriptor", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response notifierDescriptor deleted just now" + } + }, + "tags": [ + "NotifierDescriptorV1alpha1" + ] + }, + "get": { + "description": "Get NotifierDescriptor", + "operationId": "getNotifierDescriptor", + "parameters": [ + { + "description": "Name of notifierDescriptor", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotifierDescriptor" + } + } + }, + "description": "Response single notifierDescriptor" + } + }, + "tags": [ + "NotifierDescriptorV1alpha1" + ] + }, + "patch": { + "description": "Patch NotifierDescriptor", + "operationId": "patchNotifierDescriptor", + "parameters": [ + { + "description": "Name of notifierDescriptor", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotifierDescriptor" + } + } + }, + "description": "Response notifierDescriptor patched just now" + } + }, + "tags": [ + "NotifierDescriptorV1alpha1" + ] + }, + "put": { + "description": "Update NotifierDescriptor", + "operationId": "updateNotifierDescriptor", + "parameters": [ + { + "description": "Name of notifierDescriptor", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotifierDescriptor" + } + } + }, + "description": "Updated notifierDescriptor" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/NotifierDescriptor" + } + } + }, + "description": "Response notifierDescriptors updated just now" + } + }, + "tags": [ + "NotifierDescriptorV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/reasons": { + "get": { + "description": "List Reason", + "operationId": "listReason", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonList" + } + } + }, + "description": "Response reasons" + } + }, + "tags": [ + "ReasonV1alpha1" + ] + }, + "post": { + "description": "Create Reason", + "operationId": "createReason", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reason" + } + } + }, + "description": "Fresh reason" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reason" + } + } + }, + "description": "Response reasons created just now" + } + }, + "tags": [ + "ReasonV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/reasons/{name}": { + "delete": { + "description": "Delete Reason", + "operationId": "deleteReason", + "parameters": [ + { + "description": "Name of reason", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response reason deleted just now" + } + }, + "tags": [ + "ReasonV1alpha1" + ] + }, + "get": { + "description": "Get Reason", + "operationId": "getReason", + "parameters": [ + { + "description": "Name of reason", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reason" + } + } + }, + "description": "Response single reason" + } + }, + "tags": [ + "ReasonV1alpha1" + ] + }, + "patch": { + "description": "Patch Reason", + "operationId": "patchReason", + "parameters": [ + { + "description": "Name of reason", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reason" + } + } + }, + "description": "Response reason patched just now" + } + }, + "tags": [ + "ReasonV1alpha1" + ] + }, + "put": { + "description": "Update Reason", + "operationId": "updateReason", + "parameters": [ + { + "description": "Name of reason", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reason" + } + } + }, + "description": "Updated reason" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reason" + } + } + }, + "description": "Response reasons updated just now" + } + }, + "tags": [ + "ReasonV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/reasontypes": { + "get": { + "description": "List ReasonType", + "operationId": "listReasonType", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonTypeList" + } + } + }, + "description": "Response reasontypes" + } + }, + "tags": [ + "ReasonTypeV1alpha1" + ] + }, + "post": { + "description": "Create ReasonType", + "operationId": "createReasonType", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonType" + } + } + }, + "description": "Fresh reasontype" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonType" + } + } + }, + "description": "Response reasontypes created just now" + } + }, + "tags": [ + "ReasonTypeV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/reasontypes/{name}": { + "delete": { + "description": "Delete ReasonType", + "operationId": "deleteReasonType", + "parameters": [ + { + "description": "Name of reasontype", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response reasontype deleted just now" + } + }, + "tags": [ + "ReasonTypeV1alpha1" + ] + }, + "get": { + "description": "Get ReasonType", + "operationId": "getReasonType", + "parameters": [ + { + "description": "Name of reasontype", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonType" + } + } + }, + "description": "Response single reasontype" + } + }, + "tags": [ + "ReasonTypeV1alpha1" + ] + }, + "patch": { + "description": "Patch ReasonType", + "operationId": "patchReasonType", + "parameters": [ + { + "description": "Name of reasontype", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonType" + } + } + }, + "description": "Response reasontype patched just now" + } + }, + "tags": [ + "ReasonTypeV1alpha1" + ] + }, + "put": { + "description": "Update ReasonType", + "operationId": "updateReasonType", + "parameters": [ + { + "description": "Name of reasontype", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonType" + } + } + }, + "description": "Updated reasontype" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReasonType" + } + } + }, + "description": "Response reasontypes updated just now" + } + }, + "tags": [ + "ReasonTypeV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/subscriptions": { + "get": { + "description": "List Subscription", + "operationId": "listSubscription", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SubscriptionList" + } + } + }, + "description": "Response subscriptions" + } + }, + "tags": [ + "SubscriptionV1alpha1" + ] + }, + "post": { + "description": "Create Subscription", + "operationId": "createSubscription", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Subscription" + } + } + }, + "description": "Fresh subscription" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Subscription" + } + } + }, + "description": "Response subscriptions created just now" + } + }, + "tags": [ + "SubscriptionV1alpha1" + ] + } + }, + "/apis/notification.halo.run/v1alpha1/subscriptions/{name}": { + "delete": { + "description": "Delete Subscription", + "operationId": "deleteSubscription", + "parameters": [ + { + "description": "Name of subscription", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response subscription deleted just now" + } + }, + "tags": [ + "SubscriptionV1alpha1" + ] + }, + "get": { + "description": "Get Subscription", + "operationId": "getSubscription", + "parameters": [ + { + "description": "Name of subscription", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Subscription" + } + } + }, + "description": "Response single subscription" + } + }, + "tags": [ + "SubscriptionV1alpha1" + ] + }, + "patch": { + "description": "Patch Subscription", + "operationId": "patchSubscription", + "parameters": [ + { + "description": "Name of subscription", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Subscription" + } + } + }, + "description": "Response subscription patched just now" + } + }, + "tags": [ + "SubscriptionV1alpha1" + ] + }, + "put": { + "description": "Update Subscription", + "operationId": "updateSubscription", + "parameters": [ + { + "description": "Name of subscription", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Subscription" + } + } + }, + "description": "Updated subscription" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Subscription" + } + } + }, + "description": "Response subscriptions updated just now" + } + }, + "tags": [ + "SubscriptionV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/extensiondefinitions": { + "get": { + "description": "List ExtensionDefinition", + "operationId": "listExtensionDefinition", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinitionList" + } + } + }, + "description": "Response extensiondefinitions" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + }, + "post": { + "description": "Create ExtensionDefinition", + "operationId": "createExtensionDefinition", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Fresh extensiondefinition" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Response extensiondefinitions created just now" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/extensiondefinitions/{name}": { + "delete": { + "description": "Delete ExtensionDefinition", + "operationId": "deleteExtensionDefinition", + "parameters": [ + { + "description": "Name of extensiondefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response extensiondefinition deleted just now" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + }, + "get": { + "description": "Get ExtensionDefinition", + "operationId": "getExtensionDefinition", + "parameters": [ + { + "description": "Name of extensiondefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Response single extensiondefinition" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + }, + "patch": { + "description": "Patch ExtensionDefinition", + "operationId": "patchExtensionDefinition", + "parameters": [ + { + "description": "Name of extensiondefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Response extensiondefinition patched just now" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + }, + "put": { + "description": "Update ExtensionDefinition", + "operationId": "updateExtensionDefinition", + "parameters": [ + { + "description": "Name of extensiondefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Updated extensiondefinition" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Response extensiondefinitions updated just now" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/extensionpointdefinitions": { + "get": { + "description": "List ExtensionPointDefinition", + "operationId": "listExtensionPointDefinition", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinitionList" + } + } + }, + "description": "Response extensionpointdefinitions" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + }, + "post": { + "description": "Create ExtensionPointDefinition", + "operationId": "createExtensionPointDefinition", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Fresh extensionpointdefinition" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Response extensionpointdefinitions created just now" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/extensionpointdefinitions/{name}": { + "delete": { + "description": "Delete ExtensionPointDefinition", + "operationId": "deleteExtensionPointDefinition", + "parameters": [ + { + "description": "Name of extensionpointdefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response extensionpointdefinition deleted just now" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + }, + "get": { + "description": "Get ExtensionPointDefinition", + "operationId": "getExtensionPointDefinition", + "parameters": [ + { + "description": "Name of extensionpointdefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Response single extensionpointdefinition" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + }, + "patch": { + "description": "Patch ExtensionPointDefinition", + "operationId": "patchExtensionPointDefinition", + "parameters": [ + { + "description": "Name of extensionpointdefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Response extensionpointdefinition patched just now" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + }, + "put": { + "description": "Update ExtensionPointDefinition", + "operationId": "updateExtensionPointDefinition", + "parameters": [ + { + "description": "Name of extensionpointdefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Updated extensionpointdefinition" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Response extensionpointdefinitions updated just now" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/plugins": { + "get": { + "description": "List Plugin", + "operationId": "listPlugin", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PluginList" + } + } + }, + "description": "Response plugins" + } + }, + "tags": [ + "PluginV1alpha1" + ] + }, + "post": { + "description": "Create Plugin", + "operationId": "createPlugin", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Fresh plugin" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Response plugins created just now" + } + }, + "tags": [ + "PluginV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/plugins/{name}": { + "delete": { + "description": "Delete Plugin", + "operationId": "deletePlugin", + "parameters": [ + { + "description": "Name of plugin", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response plugin deleted just now" + } + }, + "tags": [ + "PluginV1alpha1" + ] + }, + "get": { + "description": "Get Plugin", + "operationId": "getPlugin", + "parameters": [ + { + "description": "Name of plugin", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Response single plugin" + } + }, + "tags": [ + "PluginV1alpha1" + ] + }, + "patch": { + "description": "Patch Plugin", + "operationId": "patchPlugin", + "parameters": [ + { + "description": "Name of plugin", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Response plugin patched just now" + } + }, + "tags": [ + "PluginV1alpha1" + ] + }, + "put": { + "description": "Update Plugin", + "operationId": "updatePlugin", + "parameters": [ + { + "description": "Name of plugin", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Updated plugin" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Response plugins updated just now" + } + }, + "tags": [ + "PluginV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/reverseproxies": { + "get": { + "description": "List ReverseProxy", + "operationId": "listReverseProxy", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxyList" + } + } + }, + "description": "Response reverseproxies" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + }, + "post": { + "description": "Create ReverseProxy", + "operationId": "createReverseProxy", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Fresh reverseproxy" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Response reverseproxies created just now" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/reverseproxies/{name}": { + "delete": { + "description": "Delete ReverseProxy", + "operationId": "deleteReverseProxy", + "parameters": [ + { + "description": "Name of reverseproxy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response reverseproxy deleted just now" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + }, + "get": { + "description": "Get ReverseProxy", + "operationId": "getReverseProxy", + "parameters": [ + { + "description": "Name of reverseproxy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Response single reverseproxy" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + }, + "patch": { + "description": "Patch ReverseProxy", + "operationId": "patchReverseProxy", + "parameters": [ + { + "description": "Name of reverseproxy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Response reverseproxy patched just now" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + }, + "put": { + "description": "Update ReverseProxy", + "operationId": "updateReverseProxy", + "parameters": [ + { + "description": "Name of reverseproxy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Updated reverseproxy" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Response reverseproxies updated just now" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/searchengines": { + "get": { + "description": "List SearchEngine", + "operationId": "listSearchEngine", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngineList" + } + } + }, + "description": "Response searchengines" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + }, + "post": { + "description": "Create SearchEngine", + "operationId": "createSearchEngine", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Fresh searchengine" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Response searchengines created just now" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/searchengines/{name}": { + "delete": { + "description": "Delete SearchEngine", + "operationId": "deleteSearchEngine", + "parameters": [ + { + "description": "Name of searchengine", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response searchengine deleted just now" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + }, + "get": { + "description": "Get SearchEngine", + "operationId": "getSearchEngine", + "parameters": [ + { + "description": "Name of searchengine", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Response single searchengine" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + }, + "patch": { + "description": "Patch SearchEngine", + "operationId": "patchSearchEngine", + "parameters": [ + { + "description": "Name of searchengine", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Response searchengine patched just now" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + }, + "put": { + "description": "Update SearchEngine", + "operationId": "updateSearchEngine", + "parameters": [ + { + "description": "Name of searchengine", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Updated searchengine" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Response searchengines updated just now" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/devices": { + "get": { + "description": "List Device", + "operationId": "listDevice", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/DeviceList" + } + } + }, + "description": "Response devices" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + }, + "post": { + "description": "Create Device", + "operationId": "createDevice", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Fresh device" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Response devices created just now" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/devices/{name}": { + "delete": { + "description": "Delete Device", + "operationId": "deleteDevice", + "parameters": [ + { + "description": "Name of device", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response device deleted just now" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + }, + "get": { + "description": "Get Device", + "operationId": "getDevice", + "parameters": [ + { + "description": "Name of device", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Response single device" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + }, + "patch": { + "description": "Patch Device", + "operationId": "patchDevice", + "parameters": [ + { + "description": "Name of device", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Response device patched just now" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + }, + "put": { + "description": "Update Device", + "operationId": "updateDevice", + "parameters": [ + { + "description": "Name of device", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Updated device" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Response devices updated just now" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/personalaccesstokens": { + "get": { + "description": "List PersonalAccessToken", + "operationId": "listPersonalAccessToken", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessTokenList" + } + } + }, + "description": "Response personalaccesstokens" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + }, + "post": { + "description": "Create PersonalAccessToken", + "operationId": "createPersonalAccessToken", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Fresh personalaccesstoken" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Response personalaccesstokens created just now" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/personalaccesstokens/{name}": { + "delete": { + "description": "Delete PersonalAccessToken", + "operationId": "deletePersonalAccessToken", + "parameters": [ + { + "description": "Name of personalaccesstoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response personalaccesstoken deleted just now" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + }, + "get": { + "description": "Get PersonalAccessToken", + "operationId": "getPersonalAccessToken", + "parameters": [ + { + "description": "Name of personalaccesstoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Response single personalaccesstoken" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + }, + "patch": { + "description": "Patch PersonalAccessToken", + "operationId": "patchPersonalAccessToken", + "parameters": [ + { + "description": "Name of personalaccesstoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Response personalaccesstoken patched just now" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + }, + "put": { + "description": "Update PersonalAccessToken", + "operationId": "updatePersonalAccessToken", + "parameters": [ + { + "description": "Name of personalaccesstoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Updated personalaccesstoken" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Response personalaccesstokens updated just now" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/remembermetokens": { + "get": { + "description": "List RememberMeToken", + "operationId": "listRememberMeToken", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeTokenList" + } + } + }, + "description": "Response remembermetokens" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + }, + "post": { + "description": "Create RememberMeToken", + "operationId": "createRememberMeToken", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Fresh remembermetoken" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Response remembermetokens created just now" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/remembermetokens/{name}": { + "delete": { + "description": "Delete RememberMeToken", + "operationId": "deleteRememberMeToken", + "parameters": [ + { + "description": "Name of remembermetoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response remembermetoken deleted just now" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + }, + "get": { + "description": "Get RememberMeToken", + "operationId": "getRememberMeToken", + "parameters": [ + { + "description": "Name of remembermetoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Response single remembermetoken" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + }, + "patch": { + "description": "Patch RememberMeToken", + "operationId": "patchRememberMeToken", + "parameters": [ + { + "description": "Name of remembermetoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Response remembermetoken patched just now" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + }, + "put": { + "description": "Update RememberMeToken", + "operationId": "updateRememberMeToken", + "parameters": [ + { + "description": "Name of remembermetoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Updated remembermetoken" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Response remembermetokens updated just now" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/attachments": { + "get": { + "description": "List Attachment", + "operationId": "listAttachment", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AttachmentList" + } + } + }, + "description": "Response attachments" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + }, + "post": { + "description": "Create Attachment", + "operationId": "createAttachment", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Fresh attachment" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Response attachments created just now" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/attachments/{name}": { + "delete": { + "description": "Delete Attachment", + "operationId": "deleteAttachment", + "parameters": [ + { + "description": "Name of attachment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response attachment deleted just now" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + }, + "get": { + "description": "Get Attachment", + "operationId": "getAttachment", + "parameters": [ + { + "description": "Name of attachment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Response single attachment" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + }, + "patch": { + "description": "Patch Attachment", + "operationId": "patchAttachment", + "parameters": [ + { + "description": "Name of attachment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Response attachment patched just now" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + }, + "put": { + "description": "Update Attachment", + "operationId": "updateAttachment", + "parameters": [ + { + "description": "Name of attachment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Updated attachment" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Response attachments updated just now" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/groups": { + "get": { + "description": "List Group", + "operationId": "listGroup", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/GroupList" + } + } + }, + "description": "Response groups" + } + }, + "tags": [ + "GroupV1alpha1" + ] + }, + "post": { + "description": "Create Group", + "operationId": "createGroup", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Fresh group" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Response groups created just now" + } + }, + "tags": [ + "GroupV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/groups/{name}": { + "delete": { + "description": "Delete Group", + "operationId": "deleteGroup", + "parameters": [ + { + "description": "Name of group", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response group deleted just now" + } + }, + "tags": [ + "GroupV1alpha1" + ] + }, + "get": { + "description": "Get Group", + "operationId": "getGroup", + "parameters": [ + { + "description": "Name of group", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Response single group" + } + }, + "tags": [ + "GroupV1alpha1" + ] + }, + "patch": { + "description": "Patch Group", + "operationId": "patchGroup", + "parameters": [ + { + "description": "Name of group", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Response group patched just now" + } + }, + "tags": [ + "GroupV1alpha1" + ] + }, + "put": { + "description": "Update Group", + "operationId": "updateGroup", + "parameters": [ + { + "description": "Name of group", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Updated group" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Response groups updated just now" + } + }, + "tags": [ + "GroupV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/policies": { + "get": { + "description": "List Policy", + "operationId": "listPolicy", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyList" + } + } + }, + "description": "Response policies" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + }, + "post": { + "description": "Create Policy", + "operationId": "createPolicy", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Fresh policy" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Response policies created just now" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/policies/{name}": { + "delete": { + "description": "Delete Policy", + "operationId": "deletePolicy", + "parameters": [ + { + "description": "Name of policy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response policy deleted just now" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + }, + "get": { + "description": "Get Policy", + "operationId": "getPolicy", + "parameters": [ + { + "description": "Name of policy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Response single policy" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + }, + "patch": { + "description": "Patch Policy", + "operationId": "patchPolicy", + "parameters": [ + { + "description": "Name of policy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Response policy patched just now" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + }, + "put": { + "description": "Update Policy", + "operationId": "updatePolicy", + "parameters": [ + { + "description": "Name of policy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Updated policy" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Response policies updated just now" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/policytemplates": { + "get": { + "description": "List PolicyTemplate", + "operationId": "listPolicyTemplate", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplateList" + } + } + }, + "description": "Response policytemplates" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + }, + "post": { + "description": "Create PolicyTemplate", + "operationId": "createPolicyTemplate", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Fresh policytemplate" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Response policytemplates created just now" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/policytemplates/{name}": { + "delete": { + "description": "Delete PolicyTemplate", + "operationId": "deletePolicyTemplate", + "parameters": [ + { + "description": "Name of policytemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response policytemplate deleted just now" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + }, + "get": { + "description": "Get PolicyTemplate", + "operationId": "getPolicyTemplate", + "parameters": [ + { + "description": "Name of policytemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Response single policytemplate" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + }, + "patch": { + "description": "Patch PolicyTemplate", + "operationId": "patchPolicyTemplate", + "parameters": [ + { + "description": "Name of policytemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Response policytemplate patched just now" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + }, + "put": { + "description": "Update PolicyTemplate", + "operationId": "updatePolicyTemplate", + "parameters": [ + { + "description": "Name of policytemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Updated policytemplate" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Response policytemplates updated just now" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + } + }, + "/apis/theme.halo.run/v1alpha1/themes": { + "get": { + "description": "List Theme", + "operationId": "listTheme", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ThemeList" + } + } + }, + "description": "Response themes" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + }, + "post": { + "description": "Create Theme", + "operationId": "createTheme", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Fresh theme" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Response themes created just now" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + } + }, + "/apis/theme.halo.run/v1alpha1/themes/{name}": { + "delete": { + "description": "Delete Theme", + "operationId": "deleteTheme", + "parameters": [ + { + "description": "Name of theme", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response theme deleted just now" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + }, + "get": { + "description": "Get Theme", + "operationId": "getTheme", + "parameters": [ + { + "description": "Name of theme", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Response single theme" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + }, + "patch": { + "description": "Patch Theme", + "operationId": "patchTheme", + "parameters": [ + { + "description": "Name of theme", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Response theme patched just now" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + }, + "put": { + "description": "Update Theme", + "operationId": "updateTheme", + "parameters": [ + { + "description": "Name of theme", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Updated theme" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Response themes updated just now" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/attachments": { + "post": { + "description": "Create attachment for the given post.", + "operationId": "CreateAttachmentForPost", + "parameters": [ + { + "description": "Wait for permalink.", + "in": "query", + "name": "waitForPermalink", + "schema": { + "type": "boolean" + } + } + ], + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/PostAttachmentRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AttachmentV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts": { + "get": { + "description": "List posts owned by the current user.", + "operationId": "ListMyPosts", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Posts filtered by publish phase.", + "in": "query", + "name": "publishPhase", + "schema": { + "type": "string", + "enum": [ + "DRAFT", + "PENDING_APPROVAL", + "PUBLISHED", + "FAILED" + ] + } + }, + { + "description": "Posts filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Posts filtered by category including sub-categories.", + "in": "query", + "name": "categoryWithChildren", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedPostList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + }, + "post": { + "description": "Create my post. If you want to create a post with content, please set\n annotation: \"content.halo.run/content-json\" into annotations and refer\n to Content for corresponding data type.\n", + "operationId": "CreateMyPost", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts/{name}": { + "get": { + "description": "Get post that belongs to the current user.", + "operationId": "GetMyPost", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + }, + "put": { + "description": "Update my post.", + "operationId": "UpdateMyPost", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts/{name}/draft": { + "get": { + "description": "Get my post draft.", + "operationId": "GetMyPostDraft", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Should include patched content and raw or not.", + "in": "query", + "name": "patched", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + }, + "put": { + "description": "Update draft of my post. Please make sure set annotation:\n\"content.halo.run/content-json\" into annotations and refer to\nContent for corresponding data type.\n", + "operationId": "UpdateMyPostDraft", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts/{name}/publish": { + "put": { + "description": "Publish my post.", + "operationId": "PublishMyPost", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts/{name}/unpublish": { + "put": { + "description": "Unpublish my post.", + "operationId": "UnpublishMyPost", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/snapshots/{name}": { + "get": { + "description": "Get snapshot for one post.", + "operationId": "GetSnapshotForPost", + "parameters": [ + { + "description": "Snapshot name.", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Post name.", + "in": "query", + "name": "postName", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Should include patched content and raw or not.", + "in": "query", + "name": "patched", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SnapshotV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/settings": { + "get": { + "description": "Get Two-factor authentication settings.", + "operationId": "GetTwoFactorAuthenticationSettings", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/settings/disabled": { + "put": { + "description": "Disable Two-factor authentication", + "operationId": "DisableTwoFactor", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PasswordRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/settings/enabled": { + "put": { + "description": "Enable Two-factor authentication", + "operationId": "EnableTwoFactor", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PasswordRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/totp": { + "post": { + "description": "Configure a TOTP", + "operationId": "ConfigurerTotp", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TotpRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/totp/-": { + "delete": { + "operationId": "DeleteTotp", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PasswordRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/totp/auth-link": { + "get": { + "description": "Get TOTP auth link, including secret", + "operationId": "GetTotpAuthLink", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TotpAuthLinkResponse" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/devices": { + "get": { + "description": "List all user devices", + "operationId": "ListDevices", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/UserDevice" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "DeviceV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/devices/{deviceId}": { + "delete": { + "description": "Revoke a own device", + "operationId": "RevokeDevice", + "parameters": [ + { + "description": "Device ID", + "in": "path", + "name": "deviceId", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "204 NO_CONTENT": { + "description": "default response" + } + }, + "tags": [ + "DeviceV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/personalaccesstokens": { + "get": { + "description": "Obtain PAT list.", + "operationId": "ObtainPats", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + }, + "post": { + "description": "Generate a PAT.", + "operationId": "GeneratePat", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/personalaccesstokens/{name}": { + "delete": { + "description": "Delete a PAT", + "operationId": "DeletePat", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + }, + "get": { + "description": "Obtain a PAT.", + "operationId": "ObtainPat", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/personalaccesstokens/{name}/actions/restoration": { + "put": { + "description": "Restore a PAT.", + "operationId": "RestorePat", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/personalaccesstokens/{name}/actions/revocation": { + "put": { + "description": "Revoke a PAT", + "operationId": "RevokePat", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + } + }, + "/login/public-key": { + "get": { + "description": "Read public key for encrypting password.", + "operationId": "GetPublicKey", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PublicKeyResponse" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "Login" + ] + } + } + }, + "components": { + "schemas": { + "AddOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "add" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "AnnotationSetting": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/AnnotationSettingSpec" + } + } + }, + "AnnotationSettingList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/AnnotationSetting" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "AnnotationSettingSpec": { + "required": [ + "formSchema", + "targetRef" + ], + "type": "object", + "properties": { + "formSchema": { + "minLength": 1, + "type": "array", + "items": { + "minLength": 1, + "type": "object" + } + }, + "targetRef": { + "$ref": "#/components/schemas/GroupKind" + } + } + }, + "Attachment": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/AttachmentSpec" + }, + "status": { + "$ref": "#/components/schemas/AttachmentStatus" + } + } + }, + "AttachmentList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Attachment" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "AttachmentSpec": { + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "Display name of attachment" + }, + "groupName": { + "type": "string", + "description": "Group name" + }, + "mediaType": { + "type": "string", + "description": "Media type of attachment" + }, + "ownerName": { + "type": "string", + "description": "Name of User who uploads the attachment" + }, + "policyName": { + "type": "string", + "description": "Policy name" + }, + "size": { + "minimum": 0, + "type": "integer", + "description": "Size of attachment. Unit is Byte", + "format": "int64" + }, + "tags": { + "uniqueItems": true, + "type": "array", + "description": "Tags of attachment", + "items": { + "type": "string", + "description": "Tag name" + } + } + } + }, + "AttachmentStatus": { + "type": "object", + "properties": { + "permalink": { + "type": "string", + "description": "Permalink of attachment.\nIf it is in local storage, the public URL will be set.\nIf it is in s3 storage, the Object URL will be set.\n" + } + } + }, + "AuthProvider": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/AuthProviderSpec" + } + } + }, + "AuthProviderList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/AuthProvider" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "AuthProviderSpec": { + "required": [ + "authenticationUrl", + "displayName" + ], + "type": "object", + "properties": { + "authenticationUrl": { + "type": "string", + "description": "Authentication url of the auth provider" + }, + "bindingUrl": { + "type": "string" + }, + "configMapRef": { + "$ref": "#/components/schemas/ConfigMapRef" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string", + "description": "Display name of the auth provider" + }, + "helpPage": { + "type": "string" + }, + "logo": { + "type": "string" + }, + "priority": { + "type": "integer", + "format": "int32" + }, + "settingRef": { + "$ref": "#/components/schemas/SettingRef" + }, + "unbindUrl": { + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "Author": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "Backup": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/BackupSpec" + }, + "status": { + "$ref": "#/components/schemas/BackupStatus" + } + } + }, + "BackupFile": { + "type": "object", + "properties": { + "filename": { + "type": "string" + }, + "lastModifiedTime": { + "type": "string", + "format": "date-time" + }, + "size": { + "type": "integer", + "format": "int64" + } + } + }, + "BackupList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Backup" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "BackupSpec": { + "type": "object", + "properties": { + "expiresAt": { + "type": "string", + "format": "date-time" + }, + "format": { + "type": "string", + "description": "Backup file format. Currently, only zip format is supported." + } + } + }, + "BackupStatus": { + "type": "object", + "properties": { + "completionTimestamp": { + "type": "string", + "format": "date-time" + }, + "failureMessage": { + "type": "string" + }, + "failureReason": { + "type": "string" + }, + "filename": { + "type": "string" + }, + "phase": { + "type": "string", + "enum": [ + "PENDING", + "RUNNING", + "SUCCEEDED", + "FAILED" + ] + }, + "size": { + "type": "integer", + "format": "int64" + }, + "startTimestamp": { + "type": "string", + "format": "date-time" + } + } + }, + "Category": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/CategorySpec" + }, + "status": { + "$ref": "#/components/schemas/CategoryStatus" + } + } + }, + "CategoryList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Category" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "CategorySpec": { + "required": [ + "displayName", + "priority", + "slug" + ], + "type": "object", + "properties": { + "children": { + "type": "array", + "items": { + "type": "string" + } + }, + "cover": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "postTemplate": { + "maxLength": 255, + "type": "string" + }, + "preventParentPostCascadeQuery": { + "type": "boolean" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "template": { + "maxLength": 255, + "type": "string" + } + } + }, + "CategoryStatus": { + "type": "object", + "properties": { + "permalink": { + "type": "string" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "visiblePostCount": { + "type": "integer", + "format": "int32" + } + } + }, + "CategoryVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "spec": { + "$ref": "#/components/schemas/CategorySpec" + }, + "status": { + "$ref": "#/components/schemas/CategoryStatus" + } + } + }, + "CategoryVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/CategoryVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ChangeOwnPasswordRequest": { + "required": [ + "oldPassword", + "password" + ], + "type": "object", + "properties": { + "oldPassword": { + "type": "string", + "description": "Old password." + }, + "password": { + "minLength": 6, + "type": "string", + "description": "New password." + } + } + }, + "ChangePasswordRequest": { + "required": [ + "password" + ], + "type": "object", + "properties": { + "password": { + "minLength": 6, + "type": "string", + "description": "New password." + } + } + }, + "Comment": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/CommentSpec" + }, + "status": { + "$ref": "#/components/schemas/CommentStatus" + } + } + }, + "CommentEmailOwner": { + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "CommentList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Comment" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "CommentOwner": { + "required": [ + "kind", + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "displayName": { + "type": "string" + }, + "kind": { + "minLength": 1, + "type": "string" + }, + "name": { + "maxLength": 64, + "type": "string" + } + } + }, + "CommentRequest": { + "required": [ + "content", + "raw", + "subjectRef" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": false + }, + "content": { + "minLength": 1, + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentEmailOwner" + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + } + } + }, + "CommentSpec": { + "required": [ + "allowNotification", + "approved", + "content", + "hidden", + "owner", + "priority", + "raw", + "subjectRef", + "top" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": true + }, + "approved": { + "type": "boolean", + "default": false + }, + "approvedTime": { + "type": "string", + "format": "date-time" + }, + "content": { + "minLength": 1, + "type": "string" + }, + "creationTime": { + "type": "string", + "format": "date-time" + }, + "hidden": { + "type": "boolean", + "default": false + }, + "ipAddress": { + "type": "string" + }, + "lastReadTime": { + "type": "string", + "format": "date-time" + }, + "owner": { + "$ref": "#/components/schemas/CommentOwner" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + }, + "top": { + "type": "boolean", + "default": false + }, + "userAgent": { + "type": "string" + } + } + }, + "CommentStats": { + "type": "object", + "properties": { + "upvote": { + "type": "integer", + "format": "int32" + } + } + }, + "CommentStatsVo": { + "type": "object", + "properties": { + "upvote": { + "type": "integer", + "format": "int32" + } + } + }, + "CommentStatus": { + "type": "object", + "properties": { + "hasNewReply": { + "type": "boolean" + }, + "lastReplyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "replyCount": { + "type": "integer", + "format": "int32" + }, + "unreadReplyCount": { + "type": "integer", + "format": "int32" + }, + "visibleReplyCount": { + "type": "integer", + "format": "int32" + } + } + }, + "CommentVo": { + "required": [ + "metadata", + "owner", + "spec", + "stats" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "spec": { + "$ref": "#/components/schemas/CommentSpec" + }, + "stats": { + "$ref": "#/components/schemas/CommentStatsVo" + }, + "status": { + "$ref": "#/components/schemas/CommentStatus" + } + }, + "description": "A chunk of items." + }, + "CommentVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/CommentVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "CommentWithReplyVo": { + "required": [ + "metadata", + "owner", + "spec", + "stats" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "replies": { + "$ref": "#/components/schemas/ListResultReplyVo" + }, + "spec": { + "$ref": "#/components/schemas/CommentSpec" + }, + "stats": { + "$ref": "#/components/schemas/CommentStatsVo" + }, + "status": { + "$ref": "#/components/schemas/CommentStatus" + } + }, + "description": "A chunk of items." + }, + "CommentWithReplyVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/CommentWithReplyVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "Condition": { + "required": [ + "lastTransitionTime", + "status", + "type" + ], + "type": "object", + "properties": { + "lastTransitionTime": { + "type": "string", + "format": "date-time" + }, + "message": { + "maxLength": 32768, + "type": "string" + }, + "reason": { + "maxLength": 1024, + "pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$", + "type": "string" + }, + "status": { + "type": "string", + "enum": [ + "TRUE", + "FALSE", + "UNKNOWN" + ] + }, + "type": { + "maxLength": 316, + "pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$", + "type": "string" + } + } + }, + "ConfigMap": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "data": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + } + } + }, + "ConfigMapList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ConfigMap" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ConfigMapRef": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + } + } + }, + "Content": { + "type": "object", + "properties": { + "content": { + "type": "string" + }, + "raw": { + "type": "string" + }, + "rawType": { + "type": "string" + } + } + }, + "ContentUpdateParam": { + "type": "object", + "properties": { + "content": { + "type": "string" + }, + "raw": { + "type": "string" + }, + "rawType": { + "type": "string" + }, + "version": { + "type": "integer", + "format": "int64" + } + } + }, + "ContentVo": { + "type": "object", + "properties": { + "content": { + "type": "string" + }, + "raw": { + "type": "string" + } + } + }, + "ContentWrapper": { + "type": "object", + "properties": { + "content": { + "type": "string" + }, + "raw": { + "type": "string" + }, + "rawType": { + "type": "string" + }, + "snapshotName": { + "type": "string" + } + } + }, + "Contributor": { + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "ContributorVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "bio": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "name": { + "type": "string" + }, + "permalink": { + "type": "string" + } + } + }, + "CopyOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "copy" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "Counter": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "approvedComment": { + "type": "integer", + "format": "int32" + }, + "downvote": { + "type": "integer", + "format": "int32" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "totalComment": { + "type": "integer", + "format": "int32" + }, + "upvote": { + "type": "integer", + "format": "int32" + }, + "visit": { + "type": "integer", + "format": "int32" + } + } + }, + "CounterList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Counter" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "CounterRequest": { + "type": "object", + "properties": { + "group": { + "type": "string" + }, + "hostname": { + "type": "string" + }, + "language": { + "type": "string" + }, + "name": { + "type": "string" + }, + "plural": { + "type": "string" + }, + "referrer": { + "type": "string" + }, + "screen": { + "type": "string" + } + } + }, + "CreateUserRequest": { + "required": [ + "email", + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "avatar": { + "type": "string" + }, + "bio": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "name": { + "type": "string" + }, + "password": { + "type": "string" + }, + "phone": { + "type": "string" + }, + "roles": { + "uniqueItems": true, + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "CustomTemplates": { + "type": "object", + "properties": { + "category": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TemplateDescriptor" + } + }, + "page": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TemplateDescriptor" + } + }, + "post": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TemplateDescriptor" + } + } + } + }, + "DashboardStats": { + "type": "object", + "properties": { + "approvedComments": { + "type": "integer", + "format": "int32" + }, + "comments": { + "type": "integer", + "format": "int32" + }, + "posts": { + "type": "integer", + "format": "int32" + }, + "upvotes": { + "type": "integer", + "format": "int32" + }, + "users": { + "type": "integer", + "format": "int32" + }, + "visits": { + "type": "integer", + "format": "int32" + } + } + }, + "DetailedUser": { + "required": [ + "roles", + "user" + ], + "type": "object", + "properties": { + "roles": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "user": { + "$ref": "#/components/schemas/User" + } + } + }, + "Device": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec", + "status" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/DeviceSpec" + }, + "status": { + "$ref": "#/components/schemas/DeviceStatus" + } + } + }, + "DeviceList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Device" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "DeviceSpec": { + "required": [ + "ipAddress", + "principalName", + "sessionId" + ], + "type": "object", + "properties": { + "ipAddress": { + "maxLength": 129, + "type": "string" + }, + "lastAccessedTime": { + "type": "string", + "format": "date-time" + }, + "lastAuthenticatedTime": { + "type": "string", + "format": "date-time" + }, + "principalName": { + "minLength": 1, + "type": "string" + }, + "rememberMeSeriesId": { + "type": "string" + }, + "sessionId": { + "minLength": 1, + "type": "string" + }, + "userAgent": { + "maxLength": 500, + "type": "string" + } + } + }, + "DeviceStatus": { + "type": "object", + "properties": { + "browser": { + "type": "string" + }, + "os": { + "type": "string" + } + } + }, + "EmailConfigValidationRequest": { + "type": "object", + "properties": { + "displayName": { + "type": "string" + }, + "enable": { + "type": "boolean" + }, + "encryption": { + "type": "string" + }, + "host": { + "type": "string" + }, + "password": { + "type": "string" + }, + "port": { + "type": "integer", + "format": "int32" + }, + "sender": { + "type": "string" + }, + "username": { + "type": "string" + } + } + }, + "EmailVerifyRequest": { + "required": [ + "email" + ], + "type": "object", + "properties": { + "email": { + "type": "string" + } + } + }, + "Excerpt": { + "required": [ + "autoGenerate" + ], + "type": "object", + "properties": { + "autoGenerate": { + "type": "boolean", + "default": true + }, + "raw": { + "type": "string" + } + } + }, + "Extension": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + } + } + }, + "ExtensionDefinition": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ExtensionSpec" + } + } + }, + "ExtensionDefinitionList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ExtensionPointDefinition": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ExtensionPointSpec" + } + } + }, + "ExtensionPointDefinitionList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ExtensionPointSpec": { + "required": [ + "className", + "displayName", + "type" + ], + "type": "object", + "properties": { + "className": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "icon": { + "type": "string" + }, + "type": { + "type": "string", + "enum": [ + "SINGLETON", + "MULTI_INSTANCE" + ] + } + } + }, + "ExtensionSpec": { + "required": [ + "className", + "displayName", + "extensionPointName" + ], + "type": "object", + "properties": { + "className": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "extensionPointName": { + "type": "string" + }, + "icon": { + "type": "string" + } + } + }, + "FileReverseProxyProvider": { + "type": "object", + "properties": { + "directory": { + "type": "string" + }, + "filename": { + "type": "string" + } + } + }, + "GrantRequest": { + "type": "object", + "properties": { + "roles": { + "uniqueItems": true, + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "Group": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/GroupSpec" + }, + "status": { + "$ref": "#/components/schemas/GroupStatus" + } + } + }, + "GroupKind": { + "type": "object", + "properties": { + "group": { + "type": "string" + }, + "kind": { + "type": "string" + } + } + }, + "GroupList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Group" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "GroupSpec": { + "required": [ + "displayName" + ], + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "Display name of group" + } + } + }, + "GroupStatus": { + "type": "object", + "properties": { + "totalAttachments": { + "minimum": 0, + "type": "integer", + "description": "Total of attachments under the current group", + "format": "int64" + }, + "updateTimestamp": { + "type": "string", + "description": "Update timestamp of the group", + "format": "date-time" + } + } + }, + "HaloDocument": { + "required": [ + "content", + "id", + "metadataName", + "ownerName", + "permalink", + "title", + "type" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "categories": { + "type": "array", + "items": { + "type": "string" + } + }, + "content": { + "type": "string" + }, + "creationTimestamp": { + "type": "string", + "format": "date-time" + }, + "description": { + "type": "string" + }, + "exposed": { + "type": "boolean" + }, + "id": { + "type": "string" + }, + "metadataName": { + "type": "string" + }, + "ownerName": { + "type": "string" + }, + "permalink": { + "type": "string" + }, + "published": { + "type": "boolean" + }, + "recycled": { + "type": "boolean" + }, + "tags": { + "type": "array", + "items": { + "type": "string" + } + }, + "title": { + "type": "string" + }, + "type": { + "type": "string" + }, + "updateTimestamp": { + "type": "string", + "format": "date-time" + } + } + }, + "IAvatarUploadRequest": { + "required": [ + "file" + ], + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + } + } + }, + "IUploadRequest": { + "required": [ + "file", + "policyName" + ], + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + }, + "groupName": { + "type": "string", + "description": "The name of the group to which the attachment belongs" + }, + "policyName": { + "type": "string", + "description": "Storage policy name" + } + } + }, + "InstallFromUriRequest": { + "required": [ + "uri" + ], + "type": "object", + "properties": { + "uri": { + "type": "string", + "format": "uri" + } + } + }, + "InterestReason": { + "required": [ + "reasonType", + "subject" + ], + "type": "object", + "properties": { + "expression": { + "type": "string", + "description": "The expression to be interested in" + }, + "reasonType": { + "type": "string", + "description": "The name of the reason definition to be interested in" + }, + "subject": { + "$ref": "#/components/schemas/InterestReasonSubject" + } + }, + "description": "The reason to be interested in" + }, + "InterestReasonSubject": { + "required": [ + "apiVersion", + "kind" + ], + "type": "object", + "properties": { + "apiVersion": { + "minLength": 1, + "type": "string" + }, + "kind": { + "minLength": 1, + "type": "string" + }, + "name": { + "type": "string", + "description": "if name is not specified, it presents all subjects of the specified reason type and custom resources" + } + }, + "description": "The subject name of reason type to be interested in" + }, + "JsonPatch": { + "minItems": 1, + "uniqueItems": true, + "type": "array", + "description": "JSON schema for JSONPatch operations", + "items": { + "oneOf": [ + { + "$ref": "#/components/schemas/AddOperation" + }, + { + "$ref": "#/components/schemas/ReplaceOperation" + }, + { + "$ref": "#/components/schemas/TestOperation" + }, + { + "$ref": "#/components/schemas/RemoveOperation" + }, + { + "$ref": "#/components/schemas/MoveOperation" + }, + { + "$ref": "#/components/schemas/CopyOperation" + } + ] + } + }, + "License": { + "type": "object", + "properties": { + "name": { + "type": "string" + }, + "url": { + "type": "string" + } + } + }, + "ListResultReplyVo": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ReplyVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedAuthProvider": { + "required": [ + "displayName", + "name" + ], + "type": "object", + "properties": { + "authenticationUrl": { + "type": "string" + }, + "bindingUrl": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "enabled": { + "type": "boolean" + }, + "helpPage": { + "type": "string" + }, + "isBound": { + "type": "boolean" + }, + "logo": { + "type": "string" + }, + "name": { + "type": "string" + }, + "privileged": { + "type": "boolean" + }, + "supportsBinding": { + "type": "boolean" + }, + "unbindingUrl": { + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "ListedComment": { + "required": [ + "comment", + "owner", + "stats" + ], + "type": "object", + "properties": { + "comment": { + "$ref": "#/components/schemas/Comment" + }, + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "stats": { + "$ref": "#/components/schemas/CommentStats" + }, + "subject": { + "$ref": "#/components/schemas/Extension" + } + }, + "description": "A chunk of items." + }, + "ListedCommentList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedComment" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedPost": { + "required": [ + "categories", + "contributors", + "owner", + "post", + "stats", + "tags" + ], + "type": "object", + "properties": { + "categories": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Category" + } + }, + "contributors": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Contributor" + } + }, + "owner": { + "$ref": "#/components/schemas/Contributor" + }, + "post": { + "$ref": "#/components/schemas/Post" + }, + "stats": { + "$ref": "#/components/schemas/Stats" + }, + "tags": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "A chunk of items." + }, + "ListedPostList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedPost" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedPostVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "categories": { + "type": "array", + "items": { + "$ref": "#/components/schemas/CategoryVo" + } + }, + "contributors": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ContributorVo" + } + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/ContributorVo" + }, + "spec": { + "$ref": "#/components/schemas/PostSpec" + }, + "stats": { + "$ref": "#/components/schemas/StatsVo" + }, + "status": { + "$ref": "#/components/schemas/PostStatus" + }, + "tags": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TagVo" + } + } + } + }, + "ListedPostVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedPostVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedReply": { + "required": [ + "owner", + "reply", + "stats" + ], + "type": "object", + "properties": { + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "reply": { + "$ref": "#/components/schemas/Reply" + }, + "stats": { + "$ref": "#/components/schemas/CommentStats" + } + }, + "description": "A chunk of items." + }, + "ListedReplyList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedReply" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedSinglePage": { + "required": [ + "contributors", + "owner", + "page", + "stats" + ], + "type": "object", + "properties": { + "contributors": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Contributor" + } + }, + "owner": { + "$ref": "#/components/schemas/Contributor" + }, + "page": { + "$ref": "#/components/schemas/SinglePage" + }, + "stats": { + "$ref": "#/components/schemas/Stats" + } + }, + "description": "A chunk of items." + }, + "ListedSinglePageList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedSinglePage" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedSinglePageVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "contributors": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ContributorVo" + } + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/ContributorVo" + }, + "spec": { + "$ref": "#/components/schemas/SinglePageSpec" + }, + "stats": { + "$ref": "#/components/schemas/StatsVo" + }, + "status": { + "$ref": "#/components/schemas/SinglePageStatus" + } + }, + "description": "A chunk of items." + }, + "ListedSinglePageVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedSinglePageVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedSnapshotDto": { + "required": [ + "metadata", + "spec" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ListedSnapshotSpec" + } + } + }, + "ListedSnapshotSpec": { + "required": [ + "owner" + ], + "type": "object", + "properties": { + "modifyTime": { + "type": "string", + "format": "date-time" + }, + "owner": { + "type": "string" + } + } + }, + "ListedUser": { + "required": [ + "roles", + "user" + ], + "type": "object", + "properties": { + "roles": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "user": { + "$ref": "#/components/schemas/User" + } + }, + "description": "A chunk of items." + }, + "LoginHistory": { + "required": [ + "loginAt", + "sourceIp", + "successful", + "userAgent" + ], + "type": "object", + "properties": { + "loginAt": { + "type": "string", + "format": "date-time" + }, + "reason": { + "type": "string" + }, + "sourceIp": { + "type": "string" + }, + "successful": { + "type": "boolean" + }, + "userAgent": { + "type": "string" + } + } + }, + "MarkSpecifiedRequest": { + "type": "object", + "properties": { + "names": { + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "Menu": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/MenuSpec" + } + } + }, + "MenuItem": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/MenuItemSpec" + }, + "status": { + "$ref": "#/components/schemas/MenuItemStatus" + } + } + }, + "MenuItemList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/MenuItem" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "MenuItemSpec": { + "type": "object", + "properties": { + "children": { + "uniqueItems": true, + "type": "array", + "description": "Children of this menu item", + "items": { + "type": "string", + "description": "The name of menu item child" + } + }, + "displayName": { + "type": "string", + "description": "The display name of menu item." + }, + "href": { + "type": "string", + "description": "The href of this menu item." + }, + "priority": { + "type": "integer", + "description": "The priority is for ordering.", + "format": "int32" + }, + "target": { + "type": "string", + "description": "The \u003ca\u003e target attribute of this menu item.", + "enum": [ + "_blank", + "_self", + "_parent", + "_top" + ] + }, + "targetRef": { + "$ref": "#/components/schemas/Ref" + } + }, + "description": "The spec of menu item." + }, + "MenuItemStatus": { + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "Calculated Display name of menu item." + }, + "href": { + "type": "string", + "description": "Calculated href of manu item." + } + }, + "description": "The status of menu item." + }, + "MenuItemVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "displayName": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "parentName": { + "type": "string" + }, + "spec": { + "$ref": "#/components/schemas/MenuItemSpec" + }, + "status": { + "$ref": "#/components/schemas/MenuItemStatus" + } + } + }, + "MenuList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Menu" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "MenuSpec": { + "required": [ + "displayName" + ], + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "The display name of the menu." + }, + "menuItems": { + "uniqueItems": true, + "type": "array", + "description": "Names of menu children below this menu.", + "items": { + "type": "string", + "description": "Names of menu children below this menu." + } + } + }, + "description": "The spec of menu." + }, + "MenuVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "menuItems": { + "type": "array", + "items": { + "$ref": "#/components/schemas/MenuItemVo" + } + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/MenuSpec" + } + } + }, + "Metadata": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "creationTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "deletionTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "finalizers": { + "uniqueItems": true, + "type": "array", + "nullable": true, + "items": { + "type": "string", + "nullable": true + } + }, + "generateName": { + "type": "string", + "description": "The name field will be generated automatically according to the given generateName field" + }, + "labels": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "name": { + "type": "string", + "description": "Metadata name" + }, + "version": { + "type": "integer", + "format": "int64", + "nullable": true + } + } + }, + "MoveOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "move" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "NavigationPostVo": { + "type": "object", + "properties": { + "current": { + "$ref": "#/components/schemas/PostVo" + }, + "next": { + "$ref": "#/components/schemas/PostVo" + }, + "previous": { + "$ref": "#/components/schemas/PostVo" + } + } + }, + "Notification": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/NotificationSpec" + } + } + }, + "NotificationList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Notification" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "NotificationSpec": { + "required": [ + "htmlContent", + "rawContent", + "reason", + "recipient", + "title" + ], + "type": "object", + "properties": { + "htmlContent": { + "type": "string" + }, + "lastReadAt": { + "type": "string", + "format": "date-time" + }, + "rawContent": { + "type": "string" + }, + "reason": { + "minLength": 1, + "type": "string", + "description": "The name of reason" + }, + "recipient": { + "minLength": 1, + "type": "string", + "description": "The name of user" + }, + "title": { + "minLength": 1, + "type": "string" + }, + "unread": { + "type": "boolean" + } + } + }, + "NotificationTemplate": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/NotificationTemplateSpec" + } + } + }, + "NotificationTemplateList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/NotificationTemplate" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "NotificationTemplateSpec": { + "type": "object", + "properties": { + "reasonSelector": { + "$ref": "#/components/schemas/ReasonSelector" + }, + "template": { + "$ref": "#/components/schemas/TemplateContent" + } + } + }, + "NotifierDescriptor": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/NotifierDescriptorSpec" + } + } + }, + "NotifierDescriptorList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/NotifierDescriptor" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "NotifierDescriptorSpec": { + "required": [ + "displayName", + "notifierExtName" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "notifierExtName": { + "minLength": 1, + "type": "string" + }, + "receiverSettingRef": { + "$ref": "#/components/schemas/NotifierSettingRef" + }, + "senderSettingRef": { + "$ref": "#/components/schemas/NotifierSettingRef" + } + } + }, + "NotifierInfo": { + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "NotifierSettingRef": { + "required": [ + "group", + "name" + ], + "type": "object", + "properties": { + "group": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "OwnerInfo": { + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "PasswordRequest": { + "required": [ + "password" + ], + "type": "object", + "properties": { + "password": { + "type": "string" + } + } + }, + "PasswordResetEmailRequest": { + "required": [ + "email", + "username" + ], + "type": "object", + "properties": { + "email": { + "type": "string" + }, + "username": { + "type": "string" + } + } + }, + "PatSpec": { + "required": [ + "name", + "tokenId", + "username" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "expiresAt": { + "type": "string", + "format": "date-time" + }, + "lastUsed": { + "type": "string", + "format": "date-time" + }, + "name": { + "type": "string" + }, + "revoked": { + "type": "boolean" + }, + "revokesAt": { + "type": "string", + "format": "date-time" + }, + "roles": { + "type": "array", + "items": { + "type": "string" + } + }, + "scopes": { + "type": "array", + "items": { + "type": "string" + } + }, + "tokenId": { + "type": "string" + }, + "username": { + "type": "string" + } + } + }, + "PersonalAccessToken": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PatSpec" + } + } + }, + "PersonalAccessTokenList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "Plugin": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PluginSpec" + }, + "status": { + "$ref": "#/components/schemas/PluginStatus" + } + } + }, + "PluginAuthor": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "PluginInstallRequest": { + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + }, + "presetName": { + "type": "string", + "description": "Plugin preset name. We will find the plugin from plugin presets" + }, + "source": { + "type": "string", + "description": "Install source. Default is file.", + "enum": [ + "FILE", + "PRESET", + "URL" + ] + } + } + }, + "PluginList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Plugin" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "PluginRunningStateRequest": { + "type": "object", + "properties": { + "async": { + "type": "boolean" + }, + "enable": { + "type": "boolean" + } + } + }, + "PluginSpec": { + "required": [ + "version" + ], + "type": "object", + "properties": { + "author": { + "$ref": "#/components/schemas/PluginAuthor" + }, + "configMapName": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "enabled": { + "type": "boolean" + }, + "homepage": { + "type": "string" + }, + "issues": { + "type": "string" + }, + "license": { + "type": "array", + "items": { + "$ref": "#/components/schemas/License" + } + }, + "logo": { + "type": "string" + }, + "pluginClass": { + "type": "string", + "deprecated": true + }, + "pluginDependencies": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "repo": { + "type": "string" + }, + "requires": { + "type": "string" + }, + "settingName": { + "type": "string" + }, + "version": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + } + } + }, + "PluginStatus": { + "type": "object", + "properties": { + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "entry": { + "type": "string" + }, + "lastProbeState": { + "type": "string", + "enum": [ + "CREATED", + "DISABLED", + "RESOLVED", + "STARTED", + "STOPPED", + "FAILED", + "UNLOADED" + ] + }, + "lastStartTime": { + "type": "string", + "format": "date-time" + }, + "loadLocation": { + "type": "string", + "description": "Load location of the plugin, often a path.", + "format": "uri" + }, + "logo": { + "type": "string" + }, + "phase": { + "type": "string", + "enum": [ + "PENDING", + "STARTING", + "CREATED", + "DISABLING", + "DISABLED", + "RESOLVED", + "STARTED", + "STOPPED", + "FAILED", + "UNKNOWN" + ] + }, + "stylesheet": { + "type": "string" + } + } + }, + "Policy": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PolicySpec" + } + } + }, + "PolicyList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Policy" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "PolicyRule": { + "type": "object", + "properties": { + "apiGroups": { + "type": "array", + "items": { + "type": "string" + } + }, + "nonResourceURLs": { + "type": "array", + "items": { + "type": "string" + } + }, + "resourceNames": { + "type": "array", + "items": { + "type": "string" + } + }, + "resources": { + "type": "array", + "items": { + "type": "string" + } + }, + "verbs": { + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "PolicySpec": { + "required": [ + "displayName", + "templateName" + ], + "type": "object", + "properties": { + "configMapName": { + "type": "string", + "description": "Reference name of ConfigMap extension" + }, + "displayName": { + "type": "string", + "description": "Display name of policy" + }, + "templateName": { + "type": "string", + "description": "Reference name of PolicyTemplate" + } + } + }, + "PolicyTemplate": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PolicyTemplateSpec" + } + } + }, + "PolicyTemplateList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/PolicyTemplate" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "PolicyTemplateSpec": { + "required": [ + "settingName" + ], + "type": "object", + "properties": { + "displayName": { + "type": "string" + }, + "settingName": { + "type": "string" + } + } + }, + "Post": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PostSpec" + }, + "status": { + "$ref": "#/components/schemas/PostStatus" + } + } + }, + "PostAttachmentRequest": { + "required": [ + "file" + ], + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + }, + "postName": { + "type": "string", + "description": "Post name." + }, + "singlePageName": { + "type": "string", + "description": "Single page name." + } + } + }, + "PostList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Post" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "PostRequest": { + "required": [ + "post" + ], + "type": "object", + "properties": { + "content": { + "$ref": "#/components/schemas/ContentUpdateParam" + }, + "post": { + "$ref": "#/components/schemas/Post" + } + } + }, + "PostSpec": { + "required": [ + "allowComment", + "deleted", + "excerpt", + "pinned", + "priority", + "publish", + "slug", + "title", + "visible" + ], + "type": "object", + "properties": { + "allowComment": { + "type": "boolean", + "default": true + }, + "baseSnapshot": { + "type": "string" + }, + "categories": { + "type": "array", + "items": { + "type": "string" + } + }, + "cover": { + "type": "string" + }, + "deleted": { + "type": "boolean", + "default": false + }, + "excerpt": { + "$ref": "#/components/schemas/Excerpt" + }, + "headSnapshot": { + "type": "string" + }, + "htmlMetas": { + "type": "array", + "items": { + "type": "object", + "additionalProperties": { + "type": "string" + } + } + }, + "owner": { + "type": "string" + }, + "pinned": { + "type": "boolean", + "default": false + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "publish": { + "type": "boolean", + "default": false + }, + "publishTime": { + "type": "string", + "format": "date-time" + }, + "releaseSnapshot": { + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "tags": { + "type": "array", + "items": { + "type": "string" + } + }, + "template": { + "type": "string" + }, + "title": { + "minLength": 1, + "type": "string" + }, + "visible": { + "type": "string", + "default": "PUBLIC", + "enum": [ + "PUBLIC", + "INTERNAL", + "PRIVATE" + ] + } + } + }, + "PostStatus": { + "required": [ + "phase" + ], + "type": "object", + "properties": { + "commentsCount": { + "type": "integer", + "format": "int32" + }, + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "contributors": { + "type": "array", + "items": { + "type": "string" + } + }, + "excerpt": { + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "inProgress": { + "type": "boolean" + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "phase": { + "type": "string" + } + } + }, + "PostVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "categories": { + "type": "array", + "items": { + "$ref": "#/components/schemas/CategoryVo" + } + }, + "content": { + "$ref": "#/components/schemas/ContentVo" + }, + "contributors": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ContributorVo" + } + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/ContributorVo" + }, + "spec": { + "$ref": "#/components/schemas/PostSpec" + }, + "stats": { + "$ref": "#/components/schemas/StatsVo" + }, + "status": { + "$ref": "#/components/schemas/PostStatus" + }, + "tags": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TagVo" + } + } + } + }, + "PublicKeyResponse": { + "type": "object", + "properties": { + "base64Format": { + "type": "string" + } + } + }, + "Reason": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ReasonSpec" + } + } + }, + "ReasonAttributes": { + "type": "object", + "properties": { + "empty": { + "type": "boolean" + } + }, + "description": "Attributes used to transfer data" + }, + "ReasonList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Reason" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ReasonProperty": { + "required": [ + "name", + "type" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "name": { + "minLength": 1, + "type": "string" + }, + "optional": { + "type": "boolean", + "default": false + }, + "type": { + "minLength": 1, + "type": "string" + } + } + }, + "ReasonSelector": { + "required": [ + "language", + "reasonType" + ], + "type": "object", + "properties": { + "language": { + "minLength": 1, + "type": "string", + "default": "default" + }, + "reasonType": { + "minLength": 1, + "type": "string" + } + } + }, + "ReasonSpec": { + "required": [ + "author", + "reasonType", + "subject" + ], + "type": "object", + "properties": { + "attributes": { + "$ref": "#/components/schemas/ReasonAttributes" + }, + "author": { + "type": "string" + }, + "reasonType": { + "type": "string" + }, + "subject": { + "$ref": "#/components/schemas/ReasonSubject" + } + } + }, + "ReasonSubject": { + "required": [ + "apiVersion", + "kind", + "name", + "title" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "name": { + "type": "string" + }, + "title": { + "type": "string" + }, + "url": { + "type": "string" + } + } + }, + "ReasonType": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ReasonTypeSpec" + } + } + }, + "ReasonTypeInfo": { + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "name": { + "type": "string" + }, + "uiPermissions": { + "uniqueItems": true, + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "ReasonTypeList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ReasonType" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ReasonTypeNotifierCollectionRequest": { + "required": [ + "reasonTypeNotifiers" + ], + "type": "object", + "properties": { + "reasonTypeNotifiers": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ReasonTypeNotifierRequest" + } + } + } + }, + "ReasonTypeNotifierMatrix": { + "type": "object", + "properties": { + "notifiers": { + "type": "array", + "items": { + "$ref": "#/components/schemas/NotifierInfo" + } + }, + "reasonTypes": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ReasonTypeInfo" + } + }, + "stateMatrix": { + "type": "array", + "items": { + "type": "array", + "items": { + "type": "boolean" + } + } + } + } + }, + "ReasonTypeNotifierRequest": { + "type": "object", + "properties": { + "notifiers": { + "type": "array", + "items": { + "type": "string" + } + }, + "reasonType": { + "type": "string" + } + } + }, + "ReasonTypeSpec": { + "required": [ + "description", + "displayName" + ], + "type": "object", + "properties": { + "description": { + "minLength": 1, + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "properties": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ReasonProperty" + } + } + } + }, + "Ref": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "group": { + "type": "string", + "description": "Extension group" + }, + "kind": { + "type": "string", + "description": "Extension kind" + }, + "name": { + "type": "string", + "description": "Extension name. This field is mandatory" + }, + "version": { + "type": "string", + "description": "Extension version" + } + }, + "description": "Extension reference object. The name is mandatory" + }, + "RegisterVerifyEmailRequest": { + "required": [ + "email" + ], + "type": "object", + "properties": { + "email": { + "type": "string" + } + } + }, + "RememberMeToken": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/RememberMeTokenSpec" + } + } + }, + "RememberMeTokenList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/RememberMeToken" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "RememberMeTokenSpec": { + "required": [ + "series", + "tokenValue", + "username" + ], + "type": "object", + "properties": { + "lastUsed": { + "type": "string", + "format": "date-time" + }, + "series": { + "minLength": 1, + "type": "string" + }, + "tokenValue": { + "minLength": 1, + "type": "string" + }, + "username": { + "minLength": 1, + "type": "string" + } + } + }, + "RemoveOperation": { + "required": [ + "op", + "path" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "remove" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "ReplaceOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "replace" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Reply": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec", + "status" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ReplySpec" + }, + "status": { + "$ref": "#/components/schemas/ReplyStatus" + } + } + }, + "ReplyList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Reply" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ReplyRequest": { + "required": [ + "content", + "raw" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": false + }, + "content": { + "minLength": 1, + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentEmailOwner" + }, + "quoteReply": { + "type": "string" + }, + "raw": { + "minLength": 1, + "type": "string" + } + } + }, + "ReplySpec": { + "required": [ + "allowNotification", + "approved", + "commentName", + "content", + "hidden", + "owner", + "priority", + "raw", + "top" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": true + }, + "approved": { + "type": "boolean", + "default": false + }, + "approvedTime": { + "type": "string", + "format": "date-time" + }, + "commentName": { + "minLength": 1, + "type": "string" + }, + "content": { + "minLength": 1, + "type": "string" + }, + "creationTime": { + "type": "string", + "format": "date-time" + }, + "hidden": { + "type": "boolean", + "default": false + }, + "ipAddress": { + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentOwner" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "quoteReply": { + "type": "string" + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "top": { + "type": "boolean", + "default": false + }, + "userAgent": { + "type": "string" + } + } + }, + "ReplyStatus": { + "type": "object", + "properties": { + "observedVersion": { + "type": "integer", + "format": "int64" + } + } + }, + "ReplyVo": { + "required": [ + "metadata", + "owner", + "spec", + "stats" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "spec": { + "$ref": "#/components/schemas/ReplySpec" + }, + "stats": { + "$ref": "#/components/schemas/CommentStatsVo" + } + }, + "description": "A chunk of items." + }, + "ReplyVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ReplyVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ResetPasswordRequest": { + "required": [ + "newPassword", + "token" + ], + "type": "object", + "properties": { + "newPassword": { + "minLength": 6, + "type": "string" + }, + "token": { + "type": "string" + } + } + }, + "RestoreRequest": { + "type": "object", + "properties": { + "backupName": { + "type": "string", + "description": "Backup metadata name." + }, + "downloadUrl": { + "type": "string", + "description": "Remote backup HTTP URL." + }, + "file": { + "type": "string", + "format": "binary" + }, + "filename": { + "type": "string", + "description": "Filename of backup file in backups root." + } + } + }, + "ReverseProxy": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "rules": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ReverseProxyRule" + } + } + } + }, + "ReverseProxyList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ReverseProxy" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ReverseProxyRule": { + "type": "object", + "properties": { + "file": { + "$ref": "#/components/schemas/FileReverseProxyProvider" + }, + "path": { + "type": "string" + } + } + }, + "RevertSnapshotForPostParam": { + "required": [ + "snapshotName" + ], + "type": "object", + "properties": { + "snapshotName": { + "minLength": 1, + "type": "string" + } + } + }, + "RevertSnapshotForSingleParam": { + "required": [ + "snapshotName" + ], + "type": "object", + "properties": { + "snapshotName": { + "minLength": 1, + "type": "string" + } + } + }, + "Role": { + "required": [ + "apiVersion", + "kind", + "metadata", + "rules" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "rules": { + "type": "array", + "items": { + "$ref": "#/components/schemas/PolicyRule" + } + } + } + }, + "RoleBinding": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "roleRef": { + "$ref": "#/components/schemas/RoleRef" + }, + "subjects": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Subject" + } + } + } + }, + "RoleBindingList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/RoleBinding" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "RoleList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "RoleRef": { + "type": "object", + "properties": { + "apiGroup": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "SearchEngine": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SearchEngineSpec" + } + } + }, + "SearchEngineList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/SearchEngine" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "SearchEngineSpec": { + "required": [ + "displayName" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "logo": { + "type": "string" + }, + "postSearchImpl": { + "type": "string" + }, + "settingRef": { + "$ref": "#/components/schemas/Ref" + }, + "website": { + "type": "string" + } + } + }, + "SearchOption": { + "required": [ + "keyword" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "filterExposed": { + "type": "boolean" + }, + "filterPublished": { + "type": "boolean" + }, + "filterRecycled": { + "type": "boolean" + }, + "highlightPostTag": { + "type": "string" + }, + "highlightPreTag": { + "type": "string" + }, + "includeCategoryNames": { + "type": "array", + "items": { + "type": "string" + } + }, + "includeOwnerNames": { + "type": "array", + "items": { + "type": "string" + } + }, + "includeTagNames": { + "type": "array", + "items": { + "type": "string" + } + }, + "includeTypes": { + "type": "array", + "items": { + "type": "string" + } + }, + "keyword": { + "type": "string" + }, + "limit": { + "maximum": 1000, + "minimum": 1, + "type": "integer", + "format": "int32" + } + } + }, + "SearchResult": { + "type": "object", + "properties": { + "hits": { + "type": "array", + "items": { + "$ref": "#/components/schemas/HaloDocument" + } + }, + "keyword": { + "type": "string" + }, + "limit": { + "type": "integer", + "format": "int32" + }, + "processingTimeMillis": { + "type": "integer", + "format": "int64" + }, + "total": { + "type": "integer", + "format": "int64" + } + } + }, + "Secret": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "data": { + "type": "object", + "additionalProperties": { + "type": "string", + "format": "byte" + } + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "stringData": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "type": { + "type": "string" + } + } + }, + "SecretList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Secret" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "Setting": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SettingSpec" + } + } + }, + "SettingForm": { + "minLength": 1, + "required": [ + "formSchema", + "group" + ], + "type": "object", + "properties": { + "formSchema": { + "type": "array", + "items": { + "type": "object" + } + }, + "group": { + "type": "string" + }, + "label": { + "type": "string" + } + } + }, + "SettingList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Setting" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "SettingRef": { + "required": [ + "group", + "name" + ], + "type": "object", + "properties": { + "group": { + "minLength": 1, + "type": "string" + }, + "name": { + "minLength": 1, + "type": "string" + } + } + }, + "SettingSpec": { + "required": [ + "forms" + ], + "type": "object", + "properties": { + "forms": { + "minLength": 1, + "type": "array", + "items": { + "$ref": "#/components/schemas/SettingForm" + } + } + } + }, + "SignUpRequest": { + "required": [ + "password", + "user" + ], + "type": "object", + "properties": { + "password": { + "minLength": 6, + "type": "string" + }, + "user": { + "$ref": "#/components/schemas/User" + }, + "verifyCode": { + "maxLength": 6, + "minLength": 6, + "type": "string" + } + } + }, + "SinglePage": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SinglePageSpec" + }, + "status": { + "$ref": "#/components/schemas/SinglePageStatus" + } + } + }, + "SinglePageList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/SinglePage" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "SinglePageRequest": { + "required": [ + "content", + "page" + ], + "type": "object", + "properties": { + "content": { + "$ref": "#/components/schemas/ContentUpdateParam" + }, + "page": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "SinglePageSpec": { + "required": [ + "allowComment", + "deleted", + "excerpt", + "pinned", + "priority", + "publish", + "slug", + "title", + "visible" + ], + "type": "object", + "properties": { + "allowComment": { + "type": "boolean", + "default": true + }, + "baseSnapshot": { + "type": "string" + }, + "cover": { + "type": "string" + }, + "deleted": { + "type": "boolean", + "default": false + }, + "excerpt": { + "$ref": "#/components/schemas/Excerpt" + }, + "headSnapshot": { + "type": "string" + }, + "htmlMetas": { + "type": "array", + "items": { + "type": "object", + "additionalProperties": { + "type": "string" + } + } + }, + "owner": { + "type": "string" + }, + "pinned": { + "type": "boolean", + "default": false + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "publish": { + "type": "boolean", + "default": false + }, + "publishTime": { + "type": "string", + "format": "date-time" + }, + "releaseSnapshot": { + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "template": { + "type": "string" + }, + "title": { + "minLength": 1, + "type": "string" + }, + "visible": { + "type": "string", + "default": "PUBLIC", + "enum": [ + "PUBLIC", + "INTERNAL", + "PRIVATE" + ] + } + } + }, + "SinglePageStatus": { + "required": [ + "phase" + ], + "type": "object", + "properties": { + "commentsCount": { + "type": "integer", + "format": "int32" + }, + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "contributors": { + "type": "array", + "items": { + "type": "string" + } + }, + "excerpt": { + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "inProgress": { + "type": "boolean" + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "phase": { + "type": "string" + } + } + }, + "SinglePageVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "content": { + "$ref": "#/components/schemas/ContentVo" + }, + "contributors": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ContributorVo" + } + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/ContributorVo" + }, + "spec": { + "$ref": "#/components/schemas/SinglePageSpec" + }, + "stats": { + "$ref": "#/components/schemas/StatsVo" + }, + "status": { + "$ref": "#/components/schemas/SinglePageStatus" + } + } + }, + "SiteStatsVo": { + "type": "object", + "properties": { + "category": { + "type": "integer", + "format": "int32" + }, + "comment": { + "type": "integer", + "format": "int32" + }, + "post": { + "type": "integer", + "format": "int32" + }, + "upvote": { + "type": "integer", + "format": "int32" + }, + "visit": { + "type": "integer", + "format": "int32" + } + } + }, + "SnapShotSpec": { + "required": [ + "owner", + "rawType", + "subjectRef" + ], + "type": "object", + "properties": { + "contentPatch": { + "type": "string" + }, + "contributors": { + "uniqueItems": true, + "type": "array", + "items": { + "type": "string" + } + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "owner": { + "minLength": 1, + "type": "string" + }, + "parentSnapshotName": { + "type": "string" + }, + "rawPatch": { + "type": "string" + }, + "rawType": { + "maxLength": 50, + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + } + } + }, + "Snapshot": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SnapShotSpec" + } + } + }, + "SnapshotList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Snapshot" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "Stats": { + "type": "object", + "properties": { + "approvedComment": { + "type": "integer", + "format": "int32" + }, + "totalComment": { + "type": "integer", + "format": "int32" + }, + "upvote": { + "type": "integer", + "format": "int32" + }, + "visit": { + "type": "integer", + "format": "int32" + } + } + }, + "StatsVo": { + "type": "object", + "properties": { + "comment": { + "type": "integer", + "format": "int32" + }, + "upvote": { + "type": "integer", + "format": "int32" + }, + "visit": { + "type": "integer", + "format": "int32" + } + } + }, + "Subject": { + "type": "object", + "properties": { + "apiGroup": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "Subscription": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SubscriptionSpec" + } + } + }, + "SubscriptionList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Subscription" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "SubscriptionSpec": { + "required": [ + "reason", + "subscriber", + "unsubscribeToken" + ], + "type": "object", + "properties": { + "disabled": { + "type": "boolean", + "description": "Perhaps users need to unsubscribe and interact without receiving notifications again" + }, + "reason": { + "$ref": "#/components/schemas/InterestReason" + }, + "subscriber": { + "$ref": "#/components/schemas/SubscriptionSubscriber" + }, + "unsubscribeToken": { + "type": "string", + "description": "The token to unsubscribe" + } + } + }, + "SubscriptionSubscriber": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + } + }, + "description": "The subscriber to be notified" + }, + "SystemInitializationRequest": { + "required": [ + "password", + "username" + ], + "type": "object", + "properties": { + "email": { + "type": "string" + }, + "password": { + "minLength": 3, + "type": "string" + }, + "siteTitle": { + "type": "string" + }, + "username": { + "minLength": 1, + "type": "string" + } + } + }, + "Tag": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/TagSpec" + }, + "status": { + "$ref": "#/components/schemas/TagStatus" + } + } + }, + "TagList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Tag" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "TagSpec": { + "required": [ + "displayName", + "slug" + ], + "type": "object", + "properties": { + "color": { + "pattern": "^#([a-fA-F0-9]{6}|[a-fA-F0-9]{3})$", + "type": "string" + }, + "cover": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + } + } + }, + "TagStatus": { + "type": "object", + "properties": { + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "visiblePostCount": { + "type": "integer", + "format": "int32" + } + } + }, + "TagVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "spec": { + "$ref": "#/components/schemas/TagSpec" + }, + "status": { + "$ref": "#/components/schemas/TagStatus" + } + } + }, + "TagVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/TagVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "TemplateContent": { + "required": [ + "title" + ], + "type": "object", + "properties": { + "htmlBody": { + "type": "string" + }, + "rawBody": { + "type": "string" + }, + "title": { + "minLength": 1, + "type": "string" + } + } + }, + "TemplateDescriptor": { + "required": [ + "file", + "name" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "file": { + "minLength": 1, + "type": "string" + }, + "name": { + "minLength": 1, + "type": "string" + }, + "screenshot": { + "type": "string" + } + } + }, + "TestOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "test" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Theme": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ThemeSpec" + }, + "status": { + "$ref": "#/components/schemas/ThemeStatus" + } + } + }, + "ThemeInstallRequest": { + "type": "object" + }, + "ThemeList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Theme" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ThemeSpec": { + "required": [ + "author", + "displayName", + "version" + ], + "type": "object", + "properties": { + "author": { + "$ref": "#/components/schemas/Author" + }, + "configMapName": { + "type": "string" + }, + "customTemplates": { + "$ref": "#/components/schemas/CustomTemplates" + }, + "description": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "homepage": { + "type": "string" + }, + "issues": { + "type": "string" + }, + "license": { + "type": "array", + "items": { + "$ref": "#/components/schemas/License" + } + }, + "logo": { + "type": "string" + }, + "repo": { + "type": "string" + }, + "require": { + "type": "string", + "description": "Deprecated, use `requires` instead.", + "deprecated": true + }, + "requires": { + "type": "string" + }, + "settingName": { + "type": "string" + }, + "version": { + "type": "string" + }, + "website": { + "type": "string", + "deprecated": true + } + } + }, + "ThemeStatus": { + "type": "object", + "properties": { + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "location": { + "type": "string" + }, + "phase": { + "type": "string", + "enum": [ + "READY", + "FAILED", + "UNKNOWN" + ] + } + } + }, + "TotpAuthLinkResponse": { + "type": "object", + "properties": { + "authLink": { + "type": "string", + "format": "uri" + }, + "rawSecret": { + "type": "string" + } + } + }, + "TotpRequest": { + "required": [ + "code", + "password", + "secret" + ], + "type": "object", + "properties": { + "code": { + "type": "string" + }, + "password": { + "type": "string" + }, + "secret": { + "type": "string" + } + } + }, + "TwoFactorAuthSettings": { + "type": "object", + "properties": { + "available": { + "type": "boolean" + }, + "emailVerified": { + "type": "boolean" + }, + "enabled": { + "type": "boolean" + }, + "totpConfigured": { + "type": "boolean" + } + } + }, + "UpgradeFromUriRequest": { + "required": [ + "uri" + ], + "type": "object", + "properties": { + "uri": { + "type": "string", + "format": "uri" + } + } + }, + "UpgradeRequest": { + "required": [ + "file" + ], + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + } + } + }, + "User": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/UserSpec" + }, + "status": { + "$ref": "#/components/schemas/UserStatus" + } + } + }, + "UserConnection": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/UserConnectionSpec" + } + } + }, + "UserConnectionList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/UserConnection" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "UserConnectionSpec": { + "required": [ + "accessToken", + "displayName", + "providerUserId", + "registrationId", + "username" + ], + "type": "object", + "properties": { + "accessToken": { + "type": "string" + }, + "avatarUrl": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "expiresAt": { + "type": "string", + "format": "date-time" + }, + "profileUrl": { + "type": "string" + }, + "providerUserId": { + "type": "string" + }, + "refreshToken": { + "type": "string" + }, + "registrationId": { + "type": "string" + }, + "updatedAt": { + "type": "string", + "format": "date-time" + }, + "username": { + "type": "string" + } + } + }, + "UserDevice": { + "required": [ + "active", + "currentDevice", + "device" + ], + "type": "object", + "properties": { + "active": { + "type": "boolean" + }, + "currentDevice": { + "type": "boolean" + }, + "device": { + "$ref": "#/components/schemas/Device" + } + } + }, + "UserEndpoint.ListedUserList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedUser" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "UserList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/User" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "UserPermission": { + "required": [ + "permissions", + "roles", + "uiPermissions" + ], + "type": "object", + "properties": { + "permissions": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "roles": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "uiPermissions": { + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "UserSpec": { + "required": [ + "displayName", + "email" + ], + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "bio": { + "type": "string" + }, + "disabled": { + "type": "boolean" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "emailVerified": { + "type": "boolean" + }, + "loginHistoryLimit": { + "type": "integer", + "format": "int32" + }, + "password": { + "type": "string" + }, + "phone": { + "type": "string" + }, + "registeredAt": { + "type": "string", + "format": "date-time" + }, + "totpEncryptedSecret": { + "type": "string" + }, + "twoFactorAuthEnabled": { + "type": "boolean" + } + } + }, + "UserStatus": { + "type": "object", + "properties": { + "lastLoginAt": { + "type": "string", + "format": "date-time" + }, + "loginHistories": { + "type": "array", + "items": { + "$ref": "#/components/schemas/LoginHistory" + } + }, + "permalink": { + "type": "string" + } + } + }, + "VerifyCodeRequest": { + "required": [ + "code", + "password" + ], + "type": "object", + "properties": { + "code": { + "minLength": 1, + "type": "string" + }, + "password": { + "type": "string" + } + } + }, + "VoteRequest": { + "type": "object", + "properties": { + "group": { + "type": "string" + }, + "name": { + "type": "string" + }, + "plural": { + "type": "string" + } + } + } + }, + "securitySchemes": { + "basicAuth": { + "scheme": "basic", + "type": "http" + }, + "bearerAuth": { + "bearerFormat": "JWT", + "scheme": "bearer", + "type": "http" + } + } + } +} \ No newline at end of file diff --git a/api-docs/openapi/v3_0/apis_console.api_v1alpha1.json b/api-docs/openapi/v3_0/apis_console.api_v1alpha1.json new file mode 100644 index 0000000..b91a91f --- /dev/null +++ b/api-docs/openapi/v3_0/apis_console.api_v1alpha1.json @@ -0,0 +1,6456 @@ +{ + "openapi": "3.0.1", + "info": { + "title": "Halo", + "version": "2.19.0-SNAPSHOT" + }, + "servers": [ + { + "url": "http://localhost:8091", + "description": "Generated server url" + } + ], + "security": [ + { + "basicAuth": [], + "bearerAuth": [] + } + ], + "paths": { + "/apis/api.console.halo.run/v1alpha1/attachments": { + "get": { + "operationId": "SearchAttachments", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Filter attachments without group. This parameter will ignore group parameter.", + "in": "query", + "name": "ungrouped", + "schema": { + "type": "boolean" + } + }, + { + "description": "Keyword for searching.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Acceptable media types.", + "in": "query", + "name": "accepts", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AttachmentList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AttachmentV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/attachments/upload": { + "post": { + "operationId": "UploadAttachment", + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/IUploadRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AttachmentV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/auth-providers": { + "get": { + "description": "Lists all auth providers", + "operationId": "listAuthProviders", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ListedAuthProvider" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AuthProviderV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/auth-providers/{name}/disable": { + "put": { + "description": "Disables an auth provider", + "operationId": "disableAuthProvider", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AuthProviderV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/auth-providers/{name}/enable": { + "put": { + "description": "Enables an auth provider", + "operationId": "enableAuthProvider", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AuthProviderV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/comments": { + "get": { + "description": "List comments.", + "operationId": "ListComments", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Comments filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Commenter kind.", + "in": "query", + "name": "ownerKind", + "schema": { + "type": "string" + } + }, + { + "description": "Commenter name.", + "in": "query", + "name": "ownerName", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedCommentList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Console" + ] + }, + "post": { + "description": "Create a comment.", + "operationId": "CreateComment", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/CommentRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/comments/{name}/reply": { + "post": { + "description": "Create a reply.", + "operationId": "CreateReply", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/ReplyRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/indices/-/rebuild": { + "post": { + "description": "Rebuild all indices", + "operationId": "RebuildAllIndices", + "responses": {}, + "tags": [ + "IndicesV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/indices/post": { + "post": { + "deprecated": true, + "description": "Build or rebuild post indices for full text search. This method is deprecated, please use POST /indices/-/rebuild instead.", + "operationId": "BuildPostIndices", + "responses": {}, + "tags": [ + "IndicesV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/notifiers/{name}/sender-config": { + "get": { + "description": "Fetch sender config of notifier", + "operationId": "FetchSenderConfig", + "parameters": [ + { + "description": "Notifier name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "object" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "NotifierV1alpha1Console" + ] + }, + "post": { + "description": "Save sender config of notifier", + "operationId": "SaveSenderConfig", + "parameters": [ + { + "description": "Notifier name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "type": "object" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "NotifierV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugin-presets": { + "get": { + "description": "List all plugin presets in the system.", + "operationId": "ListPluginPresets", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Plugin" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins": { + "get": { + "description": "List plugins using query criteria and sort params", + "operationId": "ListPlugins", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Keyword of plugin name or description", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Whether the plugin is enabled", + "in": "query", + "name": "enabled", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PluginList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/-/bundle.css": { + "get": { + "description": "Merge all CSS bundles of enabled plugins into one.", + "operationId": "fetchCssBundle", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "string" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/-/bundle.js": { + "get": { + "description": "Merge all JS bundles of enabled plugins into one.", + "operationId": "fetchJsBundle", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "string" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/-/install-from-uri": { + "post": { + "description": "Install a plugin from uri.", + "operationId": "InstallPluginFromUri", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/InstallFromUriRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/install": { + "post": { + "description": "Install a plugin by uploading a Jar file.", + "operationId": "InstallPlugin", + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/PluginInstallRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/config": { + "get": { + "description": "Fetch configMap of plugin by configured configMapName.", + "operationId": "fetchPluginConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + }, + "put": { + "description": "Update the configMap of plugin setting.", + "operationId": "updatePluginConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/plugin-state": { + "put": { + "description": "Change the running state of a plugin by name.", + "operationId": "ChangePluginRunningState", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/PluginRunningStateRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/reload": { + "put": { + "description": "Reload a plugin by name.", + "operationId": "reloadPlugin", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/reset-config": { + "put": { + "description": "Reset the configMap of plugin setting.", + "operationId": "ResetPluginConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/setting": { + "get": { + "description": "Fetch setting of plugin.", + "operationId": "fetchPluginSetting", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/upgrade": { + "post": { + "description": "Upgrade a plugin by uploading a Jar file", + "operationId": "UpgradePlugin", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/PluginInstallRequest" + } + } + }, + "required": true + }, + "responses": {}, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/plugins/{name}/upgrade-from-uri": { + "post": { + "description": "Upgrade a plugin from uri.", + "operationId": "UpgradePluginFromUri", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/UpgradeFromUriRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PluginV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts": { + "get": { + "description": "List posts.", + "operationId": "ListPosts", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Posts filtered by publish phase.", + "in": "query", + "name": "publishPhase", + "schema": { + "type": "string", + "enum": [ + "DRAFT", + "PENDING_APPROVAL", + "PUBLISHED", + "FAILED" + ] + } + }, + { + "description": "Posts filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Posts filtered by category including sub-categories.", + "in": "query", + "name": "categoryWithChildren", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedPostList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + }, + "post": { + "description": "Draft a post.", + "operationId": "DraftPost", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/PostRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}": { + "put": { + "description": "Update a post.", + "operationId": "UpdateDraftPost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/PostRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/content": { + "delete": { + "description": "Delete a content for post.", + "operationId": "deletePostContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "snapshotName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + }, + "get": { + "description": "Fetch content of post.", + "operationId": "fetchPostContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "snapshotName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + }, + "put": { + "description": "Update a post\u0027s content.", + "operationId": "UpdatePostContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/Content" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/head-content": { + "get": { + "description": "Fetch head content of post.", + "operationId": "fetchPostHeadContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/publish": { + "put": { + "description": "Publish a post.", + "operationId": "PublishPost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Head snapshot name of content.", + "in": "query", + "name": "headSnapshot", + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "async", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/recycle": { + "put": { + "description": "Recycle a post.", + "operationId": "RecyclePost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/release-content": { + "get": { + "description": "Fetch release content of post.", + "operationId": "fetchPostReleaseContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/revert-content": { + "put": { + "description": "Revert to specified snapshot for post content.", + "operationId": "revertToSpecifiedSnapshotForPost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/RevertSnapshotForPostParam" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/snapshot": { + "get": { + "description": "List all snapshots for post content.", + "operationId": "listPostSnapshots", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ListedSnapshotDto" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/posts/{name}/unpublish": { + "put": { + "description": "Publish a post.", + "operationId": "UnpublishPost", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/replies": { + "get": { + "description": "List replies.", + "operationId": "ListReplies", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Replies filtered by commentName.", + "in": "query", + "name": "commentName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedReplyList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ReplyV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages": { + "get": { + "description": "List single pages.", + "operationId": "ListSinglePages", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "SinglePages filtered by contributor.", + "in": "query", + "name": "contributor", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "SinglePages filtered by publish phase.", + "in": "query", + "name": "publishPhase", + "schema": { + "type": "string", + "enum": [ + "DRAFT", + "PENDING_APPROVAL", + "PUBLISHED", + "FAILED" + ] + } + }, + { + "description": "SinglePages filtered by visibility.", + "in": "query", + "name": "visible", + "schema": { + "type": "string", + "enum": [ + "PUBLIC", + "INTERNAL", + "PRIVATE" + ] + } + }, + { + "description": "SinglePages filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedSinglePageList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + }, + "post": { + "description": "Draft a single page.", + "operationId": "DraftSinglePage", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/SinglePageRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}": { + "put": { + "description": "Update a single page.", + "operationId": "UpdateDraftSinglePage", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/SinglePageRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/content": { + "delete": { + "description": "Delete a content for post.", + "operationId": "deleteSinglePageContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "snapshotName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + }, + "get": { + "description": "Fetch content of single page.", + "operationId": "fetchSinglePageContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "in": "query", + "name": "snapshotName", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + }, + "put": { + "description": "Update a single page\u0027s content.", + "operationId": "UpdateSinglePageContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/Content" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/head-content": { + "get": { + "description": "Fetch head content of single page.", + "operationId": "fetchSinglePageHeadContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/publish": { + "put": { + "description": "Publish a single page.", + "operationId": "PublishSinglePage", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/release-content": { + "get": { + "description": "Fetch release content of single page.", + "operationId": "fetchSinglePageReleaseContent", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ContentWrapper" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/revert-content": { + "put": { + "description": "Revert to specified snapshot for single page content.", + "operationId": "revertToSpecifiedSnapshotForSinglePage", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/RevertSnapshotForSingleParam" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/singlepages/{name}/snapshot": { + "get": { + "description": "List all snapshots for single page content.", + "operationId": "listSinglePageSnapshots", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ListedSnapshotDto" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SinglePageV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/stats": { + "get": { + "description": "Get stats.", + "operationId": "getStats", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/DashboardStats" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SystemV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/system/initialize": { + "post": { + "description": "Initialize system", + "operationId": "initialize", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SystemInitializationRequest" + } + } + } + }, + "responses": { + "201": { + "description": "System initialization successfully.", + "headers": { + "Location": { + "description": "Redirect URL.", + "schema": { + "type": "string" + }, + "style": "simple" + } + } + } + }, + "tags": [ + "SystemV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/tags": { + "get": { + "description": "List Post Tags.", + "operationId": "ListPostTags", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Post tags filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TagList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TagV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes": { + "get": { + "description": "List themes.", + "operationId": "ListThemes", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Whether to list uninstalled themes.", + "in": "query", + "name": "uninstalled", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ThemeList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/-/activation": { + "get": { + "description": "Fetch the activated theme.", + "operationId": "fetchActivatedTheme", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/-/install-from-uri": { + "post": { + "description": "Install a theme from uri.", + "operationId": "InstallThemeFromUri", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/InstallFromUriRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/install": { + "post": { + "description": "Install a theme by uploading a zip file.", + "operationId": "InstallTheme", + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/ThemeInstallRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/activation": { + "put": { + "description": "Activate a theme by name.", + "operationId": "activateTheme", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/config": { + "get": { + "description": "Fetch configMap of theme by configured configMapName.", + "operationId": "fetchThemeConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + }, + "put": { + "description": "Update the configMap of theme setting.", + "operationId": "updateThemeConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/invalidate-cache": { + "put": { + "description": "Invalidate theme template cache.", + "operationId": "InvalidateCache", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "204": { + "description": "No Content" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/reload": { + "put": { + "description": "Reload theme setting.", + "operationId": "Reload", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/reset-config": { + "put": { + "description": "Reset the configMap of theme setting.", + "operationId": "ResetThemeConfig", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/setting": { + "get": { + "description": "Fetch setting of theme.", + "operationId": "fetchThemeSetting", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/upgrade": { + "post": { + "description": "Upgrade theme", + "operationId": "UpgradeTheme", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/UpgradeRequest" + } + } + }, + "required": true + }, + "responses": {}, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/themes/{name}/upgrade-from-uri": { + "post": { + "description": "Upgrade a theme from uri.", + "operationId": "UpgradeThemeFromUri", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/UpgradeFromUriRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "ThemeV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users": { + "get": { + "description": "List users", + "operationId": "ListUsers", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Keyword to search", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Role name", + "in": "query", + "name": "role", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserEndpoint.ListedUserList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + }, + "post": { + "description": "Creates a new user.", + "operationId": "CreateUser", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CreateUserRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/-": { + "get": { + "description": "Get current user detail", + "operationId": "GetCurrentUserDetail", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/DetailedUser" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + }, + "put": { + "description": "Update current user profile, but password.", + "operationId": "UpdateCurrentUser", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/-/password": { + "put": { + "description": "Change own password of user.", + "operationId": "ChangeOwnPassword", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ChangeOwnPasswordRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/-/send-email-verification-code": { + "post": { + "description": "Send email verification code for user", + "operationId": "SendEmailVerificationCode", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/EmailVerifyRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/-/verify-email": { + "post": { + "description": "Verify email for user by code.", + "operationId": "VerifyEmail", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/VerifyCodeRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/{name}": { + "get": { + "description": "Get user detail by name", + "operationId": "GetUserDetail", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/DetailedUser" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/{name}/avatar": { + "delete": { + "description": "delete user avatar", + "operationId": "DeleteUserAvatar", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + }, + "post": { + "description": "upload user avatar", + "operationId": "UploadUserAvatar", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/IAvatarUploadRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/{name}/password": { + "put": { + "description": "Change anyone password of user for admin.", + "operationId": "ChangeAnyonePassword", + "parameters": [ + { + "description": "Name of user. If the name is equal to \u0027-\u0027, it will change the password of current user.", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ChangePasswordRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/api.console.halo.run/v1alpha1/users/{name}/permissions": { + "get": { + "description": "Get permissions of user", + "operationId": "GetPermissions", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserPermission" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + }, + "post": { + "description": "Grant permissions to user", + "operationId": "GrantPermission", + "parameters": [ + { + "description": "User name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/GrantRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Console" + ] + } + }, + "/apis/console.api.migration.halo.run/v1alpha1/backup-files": { + "get": { + "description": "Get backup files from backup root.", + "operationId": "getBackupFiles", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/BackupFile" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "MigrationV1alpha1Console" + ] + } + }, + "/apis/console.api.migration.halo.run/v1alpha1/backups/{name}/files/{filename}": { + "get": { + "operationId": "DownloadBackups", + "parameters": [ + { + "description": "Backup name.", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Backup filename.", + "in": "path", + "name": "filename", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "MigrationV1alpha1Console" + ] + } + }, + "/apis/console.api.migration.halo.run/v1alpha1/restorations": { + "post": { + "description": "Restore backup by uploading file or providing download link or backup name.", + "operationId": "RestoreBackup", + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/RestoreRequest" + } + } + }, + "required": true + }, + "responses": {}, + "tags": [ + "MigrationV1alpha1Console" + ] + } + }, + "/apis/console.api.notification.halo.run/v1alpha1/notifiers/default-email-notifier/verify-connection": { + "post": { + "description": "Verify email sender config.", + "operationId": "VerifyEmailSenderConfig", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/EmailConfigValidationRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "NotifierV1alpha1Console" + ] + } + } + }, + "components": { + "schemas": { + "AddOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "add" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Attachment": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/AttachmentSpec" + }, + "status": { + "$ref": "#/components/schemas/AttachmentStatus" + } + } + }, + "AttachmentList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Attachment" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "AttachmentSpec": { + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "Display name of attachment" + }, + "groupName": { + "type": "string", + "description": "Group name" + }, + "mediaType": { + "type": "string", + "description": "Media type of attachment" + }, + "ownerName": { + "type": "string", + "description": "Name of User who uploads the attachment" + }, + "policyName": { + "type": "string", + "description": "Policy name" + }, + "size": { + "minimum": 0, + "type": "integer", + "description": "Size of attachment. Unit is Byte", + "format": "int64" + }, + "tags": { + "uniqueItems": true, + "type": "array", + "description": "Tags of attachment", + "items": { + "type": "string", + "description": "Tag name" + } + } + } + }, + "AttachmentStatus": { + "type": "object", + "properties": { + "permalink": { + "type": "string", + "description": "Permalink of attachment.\nIf it is in local storage, the public URL will be set.\nIf it is in s3 storage, the Object URL will be set.\n" + } + } + }, + "AuthProvider": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/AuthProviderSpec" + } + } + }, + "AuthProviderSpec": { + "required": [ + "authenticationUrl", + "displayName" + ], + "type": "object", + "properties": { + "authenticationUrl": { + "type": "string", + "description": "Authentication url of the auth provider" + }, + "bindingUrl": { + "type": "string" + }, + "configMapRef": { + "$ref": "#/components/schemas/ConfigMapRef" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string", + "description": "Display name of the auth provider" + }, + "helpPage": { + "type": "string" + }, + "logo": { + "type": "string" + }, + "priority": { + "type": "integer", + "format": "int32" + }, + "settingRef": { + "$ref": "#/components/schemas/SettingRef" + }, + "unbindUrl": { + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "Author": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "BackupFile": { + "type": "object", + "properties": { + "filename": { + "type": "string" + }, + "lastModifiedTime": { + "type": "string", + "format": "date-time" + }, + "size": { + "type": "integer", + "format": "int64" + } + } + }, + "Category": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/CategorySpec" + }, + "status": { + "$ref": "#/components/schemas/CategoryStatus" + } + } + }, + "CategorySpec": { + "required": [ + "displayName", + "priority", + "slug" + ], + "type": "object", + "properties": { + "children": { + "type": "array", + "items": { + "type": "string" + } + }, + "cover": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "postTemplate": { + "maxLength": 255, + "type": "string" + }, + "preventParentPostCascadeQuery": { + "type": "boolean" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "template": { + "maxLength": 255, + "type": "string" + } + } + }, + "CategoryStatus": { + "type": "object", + "properties": { + "permalink": { + "type": "string" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "visiblePostCount": { + "type": "integer", + "format": "int32" + } + } + }, + "ChangeOwnPasswordRequest": { + "required": [ + "oldPassword", + "password" + ], + "type": "object", + "properties": { + "oldPassword": { + "type": "string", + "description": "Old password." + }, + "password": { + "minLength": 6, + "type": "string", + "description": "New password." + } + } + }, + "ChangePasswordRequest": { + "required": [ + "password" + ], + "type": "object", + "properties": { + "password": { + "minLength": 6, + "type": "string", + "description": "New password." + } + } + }, + "Comment": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/CommentSpec" + }, + "status": { + "$ref": "#/components/schemas/CommentStatus" + } + } + }, + "CommentEmailOwner": { + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "CommentOwner": { + "required": [ + "kind", + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "displayName": { + "type": "string" + }, + "kind": { + "minLength": 1, + "type": "string" + }, + "name": { + "maxLength": 64, + "type": "string" + } + } + }, + "CommentRequest": { + "required": [ + "content", + "raw", + "subjectRef" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": false + }, + "content": { + "minLength": 1, + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentEmailOwner" + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + } + } + }, + "CommentSpec": { + "required": [ + "allowNotification", + "approved", + "content", + "hidden", + "owner", + "priority", + "raw", + "subjectRef", + "top" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": true + }, + "approved": { + "type": "boolean", + "default": false + }, + "approvedTime": { + "type": "string", + "format": "date-time" + }, + "content": { + "minLength": 1, + "type": "string" + }, + "creationTime": { + "type": "string", + "format": "date-time" + }, + "hidden": { + "type": "boolean", + "default": false + }, + "ipAddress": { + "type": "string" + }, + "lastReadTime": { + "type": "string", + "format": "date-time" + }, + "owner": { + "$ref": "#/components/schemas/CommentOwner" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + }, + "top": { + "type": "boolean", + "default": false + }, + "userAgent": { + "type": "string" + } + } + }, + "CommentStats": { + "type": "object", + "properties": { + "upvote": { + "type": "integer", + "format": "int32" + } + } + }, + "CommentStatus": { + "type": "object", + "properties": { + "hasNewReply": { + "type": "boolean" + }, + "lastReplyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "replyCount": { + "type": "integer", + "format": "int32" + }, + "unreadReplyCount": { + "type": "integer", + "format": "int32" + }, + "visibleReplyCount": { + "type": "integer", + "format": "int32" + } + } + }, + "Condition": { + "required": [ + "lastTransitionTime", + "status", + "type" + ], + "type": "object", + "properties": { + "lastTransitionTime": { + "type": "string", + "format": "date-time" + }, + "message": { + "maxLength": 32768, + "type": "string" + }, + "reason": { + "maxLength": 1024, + "pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$", + "type": "string" + }, + "status": { + "type": "string", + "enum": [ + "TRUE", + "FALSE", + "UNKNOWN" + ] + }, + "type": { + "maxLength": 316, + "pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$", + "type": "string" + } + } + }, + "ConfigMap": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "data": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + } + } + }, + "ConfigMapRef": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + } + } + }, + "Content": { + "type": "object", + "properties": { + "content": { + "type": "string" + }, + "raw": { + "type": "string" + }, + "rawType": { + "type": "string" + } + } + }, + "ContentUpdateParam": { + "type": "object", + "properties": { + "content": { + "type": "string" + }, + "raw": { + "type": "string" + }, + "rawType": { + "type": "string" + }, + "version": { + "type": "integer", + "format": "int64" + } + } + }, + "ContentWrapper": { + "type": "object", + "properties": { + "content": { + "type": "string" + }, + "raw": { + "type": "string" + }, + "rawType": { + "type": "string" + }, + "snapshotName": { + "type": "string" + } + } + }, + "Contributor": { + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "CopyOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "copy" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "CreateUserRequest": { + "required": [ + "email", + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "avatar": { + "type": "string" + }, + "bio": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "name": { + "type": "string" + }, + "password": { + "type": "string" + }, + "phone": { + "type": "string" + }, + "roles": { + "uniqueItems": true, + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "CustomTemplates": { + "type": "object", + "properties": { + "category": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TemplateDescriptor" + } + }, + "page": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TemplateDescriptor" + } + }, + "post": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TemplateDescriptor" + } + } + } + }, + "DashboardStats": { + "type": "object", + "properties": { + "approvedComments": { + "type": "integer", + "format": "int32" + }, + "comments": { + "type": "integer", + "format": "int32" + }, + "posts": { + "type": "integer", + "format": "int32" + }, + "upvotes": { + "type": "integer", + "format": "int32" + }, + "users": { + "type": "integer", + "format": "int32" + }, + "visits": { + "type": "integer", + "format": "int32" + } + } + }, + "DetailedUser": { + "required": [ + "roles", + "user" + ], + "type": "object", + "properties": { + "roles": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "user": { + "$ref": "#/components/schemas/User" + } + } + }, + "EmailConfigValidationRequest": { + "type": "object", + "properties": { + "displayName": { + "type": "string" + }, + "enable": { + "type": "boolean" + }, + "encryption": { + "type": "string" + }, + "host": { + "type": "string" + }, + "password": { + "type": "string" + }, + "port": { + "type": "integer", + "format": "int32" + }, + "sender": { + "type": "string" + }, + "username": { + "type": "string" + } + } + }, + "EmailVerifyRequest": { + "required": [ + "email" + ], + "type": "object", + "properties": { + "email": { + "type": "string" + } + } + }, + "Excerpt": { + "required": [ + "autoGenerate" + ], + "type": "object", + "properties": { + "autoGenerate": { + "type": "boolean", + "default": true + }, + "raw": { + "type": "string" + } + } + }, + "Extension": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + } + } + }, + "GrantRequest": { + "type": "object", + "properties": { + "roles": { + "uniqueItems": true, + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "IAvatarUploadRequest": { + "required": [ + "file" + ], + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + } + } + }, + "IUploadRequest": { + "required": [ + "file", + "policyName" + ], + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + }, + "groupName": { + "type": "string", + "description": "The name of the group to which the attachment belongs" + }, + "policyName": { + "type": "string", + "description": "Storage policy name" + } + } + }, + "InstallFromUriRequest": { + "required": [ + "uri" + ], + "type": "object", + "properties": { + "uri": { + "type": "string", + "format": "uri" + } + } + }, + "JsonPatch": { + "minItems": 1, + "uniqueItems": true, + "type": "array", + "description": "JSON schema for JSONPatch operations", + "items": { + "oneOf": [ + { + "$ref": "#/components/schemas/AddOperation" + }, + { + "$ref": "#/components/schemas/ReplaceOperation" + }, + { + "$ref": "#/components/schemas/TestOperation" + }, + { + "$ref": "#/components/schemas/RemoveOperation" + }, + { + "$ref": "#/components/schemas/MoveOperation" + }, + { + "$ref": "#/components/schemas/CopyOperation" + } + ] + } + }, + "License": { + "type": "object", + "properties": { + "name": { + "type": "string" + }, + "url": { + "type": "string" + } + } + }, + "ListedAuthProvider": { + "required": [ + "displayName", + "name" + ], + "type": "object", + "properties": { + "authenticationUrl": { + "type": "string" + }, + "bindingUrl": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "enabled": { + "type": "boolean" + }, + "helpPage": { + "type": "string" + }, + "isBound": { + "type": "boolean" + }, + "logo": { + "type": "string" + }, + "name": { + "type": "string" + }, + "privileged": { + "type": "boolean" + }, + "supportsBinding": { + "type": "boolean" + }, + "unbindingUrl": { + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "ListedComment": { + "required": [ + "comment", + "owner", + "stats" + ], + "type": "object", + "properties": { + "comment": { + "$ref": "#/components/schemas/Comment" + }, + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "stats": { + "$ref": "#/components/schemas/CommentStats" + }, + "subject": { + "$ref": "#/components/schemas/Extension" + } + }, + "description": "A chunk of items." + }, + "ListedCommentList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedComment" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedPost": { + "required": [ + "categories", + "contributors", + "owner", + "post", + "stats", + "tags" + ], + "type": "object", + "properties": { + "categories": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Category" + } + }, + "contributors": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Contributor" + } + }, + "owner": { + "$ref": "#/components/schemas/Contributor" + }, + "post": { + "$ref": "#/components/schemas/Post" + }, + "stats": { + "$ref": "#/components/schemas/Stats" + }, + "tags": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "A chunk of items." + }, + "ListedPostList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedPost" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedReply": { + "required": [ + "owner", + "reply", + "stats" + ], + "type": "object", + "properties": { + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "reply": { + "$ref": "#/components/schemas/Reply" + }, + "stats": { + "$ref": "#/components/schemas/CommentStats" + } + }, + "description": "A chunk of items." + }, + "ListedReplyList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedReply" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedSinglePage": { + "required": [ + "contributors", + "owner", + "page", + "stats" + ], + "type": "object", + "properties": { + "contributors": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Contributor" + } + }, + "owner": { + "$ref": "#/components/schemas/Contributor" + }, + "page": { + "$ref": "#/components/schemas/SinglePage" + }, + "stats": { + "$ref": "#/components/schemas/Stats" + } + }, + "description": "A chunk of items." + }, + "ListedSinglePageList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedSinglePage" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ListedSnapshotDto": { + "required": [ + "metadata", + "spec" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ListedSnapshotSpec" + } + } + }, + "ListedSnapshotSpec": { + "required": [ + "owner" + ], + "type": "object", + "properties": { + "modifyTime": { + "type": "string", + "format": "date-time" + }, + "owner": { + "type": "string" + } + } + }, + "ListedUser": { + "required": [ + "roles", + "user" + ], + "type": "object", + "properties": { + "roles": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "user": { + "$ref": "#/components/schemas/User" + } + }, + "description": "A chunk of items." + }, + "LoginHistory": { + "required": [ + "loginAt", + "sourceIp", + "successful", + "userAgent" + ], + "type": "object", + "properties": { + "loginAt": { + "type": "string", + "format": "date-time" + }, + "reason": { + "type": "string" + }, + "sourceIp": { + "type": "string" + }, + "successful": { + "type": "boolean" + }, + "userAgent": { + "type": "string" + } + } + }, + "Metadata": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "creationTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "deletionTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "finalizers": { + "uniqueItems": true, + "type": "array", + "nullable": true, + "items": { + "type": "string", + "nullable": true + } + }, + "generateName": { + "type": "string", + "description": "The name field will be generated automatically according to the given generateName field" + }, + "labels": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "name": { + "type": "string", + "description": "Metadata name" + }, + "version": { + "type": "integer", + "format": "int64", + "nullable": true + } + } + }, + "MoveOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "move" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "OwnerInfo": { + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "Plugin": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PluginSpec" + }, + "status": { + "$ref": "#/components/schemas/PluginStatus" + } + } + }, + "PluginAuthor": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "PluginInstallRequest": { + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + }, + "presetName": { + "type": "string", + "description": "Plugin preset name. We will find the plugin from plugin presets" + }, + "source": { + "type": "string", + "description": "Install source. Default is file.", + "enum": [ + "FILE", + "PRESET", + "URL" + ] + } + } + }, + "PluginList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Plugin" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "PluginRunningStateRequest": { + "type": "object", + "properties": { + "async": { + "type": "boolean" + }, + "enable": { + "type": "boolean" + } + } + }, + "PluginSpec": { + "required": [ + "version" + ], + "type": "object", + "properties": { + "author": { + "$ref": "#/components/schemas/PluginAuthor" + }, + "configMapName": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "enabled": { + "type": "boolean" + }, + "homepage": { + "type": "string" + }, + "issues": { + "type": "string" + }, + "license": { + "type": "array", + "items": { + "$ref": "#/components/schemas/License" + } + }, + "logo": { + "type": "string" + }, + "pluginClass": { + "type": "string", + "deprecated": true + }, + "pluginDependencies": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "repo": { + "type": "string" + }, + "requires": { + "type": "string" + }, + "settingName": { + "type": "string" + }, + "version": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + } + } + }, + "PluginStatus": { + "type": "object", + "properties": { + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "entry": { + "type": "string" + }, + "lastProbeState": { + "type": "string", + "enum": [ + "CREATED", + "DISABLED", + "RESOLVED", + "STARTED", + "STOPPED", + "FAILED", + "UNLOADED" + ] + }, + "lastStartTime": { + "type": "string", + "format": "date-time" + }, + "loadLocation": { + "type": "string", + "description": "Load location of the plugin, often a path.", + "format": "uri" + }, + "logo": { + "type": "string" + }, + "phase": { + "type": "string", + "enum": [ + "PENDING", + "STARTING", + "CREATED", + "DISABLING", + "DISABLED", + "RESOLVED", + "STARTED", + "STOPPED", + "FAILED", + "UNKNOWN" + ] + }, + "stylesheet": { + "type": "string" + } + } + }, + "PolicyRule": { + "type": "object", + "properties": { + "apiGroups": { + "type": "array", + "items": { + "type": "string" + } + }, + "nonResourceURLs": { + "type": "array", + "items": { + "type": "string" + } + }, + "resourceNames": { + "type": "array", + "items": { + "type": "string" + } + }, + "resources": { + "type": "array", + "items": { + "type": "string" + } + }, + "verbs": { + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "Post": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PostSpec" + }, + "status": { + "$ref": "#/components/schemas/PostStatus" + } + } + }, + "PostRequest": { + "required": [ + "post" + ], + "type": "object", + "properties": { + "content": { + "$ref": "#/components/schemas/ContentUpdateParam" + }, + "post": { + "$ref": "#/components/schemas/Post" + } + } + }, + "PostSpec": { + "required": [ + "allowComment", + "deleted", + "excerpt", + "pinned", + "priority", + "publish", + "slug", + "title", + "visible" + ], + "type": "object", + "properties": { + "allowComment": { + "type": "boolean", + "default": true + }, + "baseSnapshot": { + "type": "string" + }, + "categories": { + "type": "array", + "items": { + "type": "string" + } + }, + "cover": { + "type": "string" + }, + "deleted": { + "type": "boolean", + "default": false + }, + "excerpt": { + "$ref": "#/components/schemas/Excerpt" + }, + "headSnapshot": { + "type": "string" + }, + "htmlMetas": { + "type": "array", + "items": { + "type": "object", + "additionalProperties": { + "type": "string" + } + } + }, + "owner": { + "type": "string" + }, + "pinned": { + "type": "boolean", + "default": false + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "publish": { + "type": "boolean", + "default": false + }, + "publishTime": { + "type": "string", + "format": "date-time" + }, + "releaseSnapshot": { + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "tags": { + "type": "array", + "items": { + "type": "string" + } + }, + "template": { + "type": "string" + }, + "title": { + "minLength": 1, + "type": "string" + }, + "visible": { + "type": "string", + "default": "PUBLIC", + "enum": [ + "PUBLIC", + "INTERNAL", + "PRIVATE" + ] + } + } + }, + "PostStatus": { + "required": [ + "phase" + ], + "type": "object", + "properties": { + "commentsCount": { + "type": "integer", + "format": "int32" + }, + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "contributors": { + "type": "array", + "items": { + "type": "string" + } + }, + "excerpt": { + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "inProgress": { + "type": "boolean" + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "phase": { + "type": "string" + } + } + }, + "Ref": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "group": { + "type": "string", + "description": "Extension group" + }, + "kind": { + "type": "string", + "description": "Extension kind" + }, + "name": { + "type": "string", + "description": "Extension name. This field is mandatory" + }, + "version": { + "type": "string", + "description": "Extension version" + } + }, + "description": "Extension reference object. The name is mandatory" + }, + "RemoveOperation": { + "required": [ + "op", + "path" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "remove" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "ReplaceOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "replace" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Reply": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec", + "status" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ReplySpec" + }, + "status": { + "$ref": "#/components/schemas/ReplyStatus" + } + } + }, + "ReplyRequest": { + "required": [ + "content", + "raw" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": false + }, + "content": { + "minLength": 1, + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentEmailOwner" + }, + "quoteReply": { + "type": "string" + }, + "raw": { + "minLength": 1, + "type": "string" + } + } + }, + "ReplySpec": { + "required": [ + "allowNotification", + "approved", + "commentName", + "content", + "hidden", + "owner", + "priority", + "raw", + "top" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": true + }, + "approved": { + "type": "boolean", + "default": false + }, + "approvedTime": { + "type": "string", + "format": "date-time" + }, + "commentName": { + "minLength": 1, + "type": "string" + }, + "content": { + "minLength": 1, + "type": "string" + }, + "creationTime": { + "type": "string", + "format": "date-time" + }, + "hidden": { + "type": "boolean", + "default": false + }, + "ipAddress": { + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentOwner" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "quoteReply": { + "type": "string" + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "top": { + "type": "boolean", + "default": false + }, + "userAgent": { + "type": "string" + } + } + }, + "ReplyStatus": { + "type": "object", + "properties": { + "observedVersion": { + "type": "integer", + "format": "int64" + } + } + }, + "RestoreRequest": { + "type": "object", + "properties": { + "backupName": { + "type": "string", + "description": "Backup metadata name." + }, + "downloadUrl": { + "type": "string", + "description": "Remote backup HTTP URL." + }, + "file": { + "type": "string", + "format": "binary" + }, + "filename": { + "type": "string", + "description": "Filename of backup file in backups root." + } + } + }, + "RevertSnapshotForPostParam": { + "required": [ + "snapshotName" + ], + "type": "object", + "properties": { + "snapshotName": { + "minLength": 1, + "type": "string" + } + } + }, + "RevertSnapshotForSingleParam": { + "required": [ + "snapshotName" + ], + "type": "object", + "properties": { + "snapshotName": { + "minLength": 1, + "type": "string" + } + } + }, + "Role": { + "required": [ + "apiVersion", + "kind", + "metadata", + "rules" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "rules": { + "type": "array", + "items": { + "$ref": "#/components/schemas/PolicyRule" + } + } + } + }, + "Setting": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SettingSpec" + } + } + }, + "SettingForm": { + "minLength": 1, + "required": [ + "formSchema", + "group" + ], + "type": "object", + "properties": { + "formSchema": { + "type": "array", + "items": { + "type": "object" + } + }, + "group": { + "type": "string" + }, + "label": { + "type": "string" + } + } + }, + "SettingRef": { + "required": [ + "group", + "name" + ], + "type": "object", + "properties": { + "group": { + "minLength": 1, + "type": "string" + }, + "name": { + "minLength": 1, + "type": "string" + } + } + }, + "SettingSpec": { + "required": [ + "forms" + ], + "type": "object", + "properties": { + "forms": { + "minLength": 1, + "type": "array", + "items": { + "$ref": "#/components/schemas/SettingForm" + } + } + } + }, + "SinglePage": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SinglePageSpec" + }, + "status": { + "$ref": "#/components/schemas/SinglePageStatus" + } + } + }, + "SinglePageRequest": { + "required": [ + "content", + "page" + ], + "type": "object", + "properties": { + "content": { + "$ref": "#/components/schemas/ContentUpdateParam" + }, + "page": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "SinglePageSpec": { + "required": [ + "allowComment", + "deleted", + "excerpt", + "pinned", + "priority", + "publish", + "slug", + "title", + "visible" + ], + "type": "object", + "properties": { + "allowComment": { + "type": "boolean", + "default": true + }, + "baseSnapshot": { + "type": "string" + }, + "cover": { + "type": "string" + }, + "deleted": { + "type": "boolean", + "default": false + }, + "excerpt": { + "$ref": "#/components/schemas/Excerpt" + }, + "headSnapshot": { + "type": "string" + }, + "htmlMetas": { + "type": "array", + "items": { + "type": "object", + "additionalProperties": { + "type": "string" + } + } + }, + "owner": { + "type": "string" + }, + "pinned": { + "type": "boolean", + "default": false + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "publish": { + "type": "boolean", + "default": false + }, + "publishTime": { + "type": "string", + "format": "date-time" + }, + "releaseSnapshot": { + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "template": { + "type": "string" + }, + "title": { + "minLength": 1, + "type": "string" + }, + "visible": { + "type": "string", + "default": "PUBLIC", + "enum": [ + "PUBLIC", + "INTERNAL", + "PRIVATE" + ] + } + } + }, + "SinglePageStatus": { + "required": [ + "phase" + ], + "type": "object", + "properties": { + "commentsCount": { + "type": "integer", + "format": "int32" + }, + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "contributors": { + "type": "array", + "items": { + "type": "string" + } + }, + "excerpt": { + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "inProgress": { + "type": "boolean" + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "phase": { + "type": "string" + } + } + }, + "Stats": { + "type": "object", + "properties": { + "approvedComment": { + "type": "integer", + "format": "int32" + }, + "totalComment": { + "type": "integer", + "format": "int32" + }, + "upvote": { + "type": "integer", + "format": "int32" + }, + "visit": { + "type": "integer", + "format": "int32" + } + } + }, + "SystemInitializationRequest": { + "required": [ + "password", + "username" + ], + "type": "object", + "properties": { + "email": { + "type": "string" + }, + "password": { + "minLength": 3, + "type": "string" + }, + "siteTitle": { + "type": "string" + }, + "username": { + "minLength": 1, + "type": "string" + } + } + }, + "Tag": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/TagSpec" + }, + "status": { + "$ref": "#/components/schemas/TagStatus" + } + }, + "description": "A chunk of items." + }, + "TagList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Tag" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "TagSpec": { + "required": [ + "displayName", + "slug" + ], + "type": "object", + "properties": { + "color": { + "pattern": "^#([a-fA-F0-9]{6}|[a-fA-F0-9]{3})$", + "type": "string" + }, + "cover": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + } + } + }, + "TagStatus": { + "type": "object", + "properties": { + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "visiblePostCount": { + "type": "integer", + "format": "int32" + } + } + }, + "TemplateDescriptor": { + "required": [ + "file", + "name" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "file": { + "minLength": 1, + "type": "string" + }, + "name": { + "minLength": 1, + "type": "string" + }, + "screenshot": { + "type": "string" + } + } + }, + "TestOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "test" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Theme": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ThemeSpec" + }, + "status": { + "$ref": "#/components/schemas/ThemeStatus" + } + } + }, + "ThemeInstallRequest": { + "type": "object" + }, + "ThemeList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Theme" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ThemeSpec": { + "required": [ + "author", + "displayName", + "version" + ], + "type": "object", + "properties": { + "author": { + "$ref": "#/components/schemas/Author" + }, + "configMapName": { + "type": "string" + }, + "customTemplates": { + "$ref": "#/components/schemas/CustomTemplates" + }, + "description": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "homepage": { + "type": "string" + }, + "issues": { + "type": "string" + }, + "license": { + "type": "array", + "items": { + "$ref": "#/components/schemas/License" + } + }, + "logo": { + "type": "string" + }, + "repo": { + "type": "string" + }, + "require": { + "type": "string", + "description": "Deprecated, use `requires` instead.", + "deprecated": true + }, + "requires": { + "type": "string" + }, + "settingName": { + "type": "string" + }, + "version": { + "type": "string" + }, + "website": { + "type": "string", + "deprecated": true + } + } + }, + "ThemeStatus": { + "type": "object", + "properties": { + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "location": { + "type": "string" + }, + "phase": { + "type": "string", + "enum": [ + "READY", + "FAILED", + "UNKNOWN" + ] + } + } + }, + "UpgradeFromUriRequest": { + "required": [ + "uri" + ], + "type": "object", + "properties": { + "uri": { + "type": "string", + "format": "uri" + } + } + }, + "UpgradeRequest": { + "required": [ + "file" + ], + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + } + } + }, + "User": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/UserSpec" + }, + "status": { + "$ref": "#/components/schemas/UserStatus" + } + } + }, + "UserEndpoint.ListedUserList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedUser" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "UserPermission": { + "required": [ + "permissions", + "roles", + "uiPermissions" + ], + "type": "object", + "properties": { + "permissions": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "roles": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "uiPermissions": { + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "UserSpec": { + "required": [ + "displayName", + "email" + ], + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "bio": { + "type": "string" + }, + "disabled": { + "type": "boolean" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "emailVerified": { + "type": "boolean" + }, + "loginHistoryLimit": { + "type": "integer", + "format": "int32" + }, + "password": { + "type": "string" + }, + "phone": { + "type": "string" + }, + "registeredAt": { + "type": "string", + "format": "date-time" + }, + "totpEncryptedSecret": { + "type": "string" + }, + "twoFactorAuthEnabled": { + "type": "boolean" + } + } + }, + "UserStatus": { + "type": "object", + "properties": { + "lastLoginAt": { + "type": "string", + "format": "date-time" + }, + "loginHistories": { + "type": "array", + "items": { + "$ref": "#/components/schemas/LoginHistory" + } + }, + "permalink": { + "type": "string" + } + } + }, + "VerifyCodeRequest": { + "required": [ + "code", + "password" + ], + "type": "object", + "properties": { + "code": { + "minLength": 1, + "type": "string" + }, + "password": { + "type": "string" + } + } + } + }, + "securitySchemes": { + "basicAuth": { + "scheme": "basic", + "type": "http" + }, + "bearerAuth": { + "bearerFormat": "JWT", + "scheme": "bearer", + "type": "http" + } + } + } +} \ No newline at end of file diff --git a/api-docs/openapi/v3_0/apis_extension.api_v1alpha1.json b/api-docs/openapi/v3_0/apis_extension.api_v1alpha1.json new file mode 100644 index 0000000..8015200 --- /dev/null +++ b/api-docs/openapi/v3_0/apis_extension.api_v1alpha1.json @@ -0,0 +1,12697 @@ +{ + "openapi": "3.0.1", + "info": { + "title": "Halo", + "version": "2.19.0-SNAPSHOT" + }, + "servers": [ + { + "url": "http://localhost:8091", + "description": "Generated server url" + } + ], + "security": [ + { + "basicAuth": [], + "bearerAuth": [] + } + ], + "paths": { + "/api/v1alpha1/annotationsettings": { + "get": { + "description": "List AnnotationSetting", + "operationId": "listAnnotationSetting", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSettingList" + } + } + }, + "description": "Response annotationsettings" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + }, + "post": { + "description": "Create AnnotationSetting", + "operationId": "createAnnotationSetting", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Fresh annotationsetting" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Response annotationsettings created just now" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + } + }, + "/api/v1alpha1/annotationsettings/{name}": { + "delete": { + "description": "Delete AnnotationSetting", + "operationId": "deleteAnnotationSetting", + "parameters": [ + { + "description": "Name of annotationsetting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response annotationsetting deleted just now" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + }, + "get": { + "description": "Get AnnotationSetting", + "operationId": "getAnnotationSetting", + "parameters": [ + { + "description": "Name of annotationsetting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Response single annotationsetting" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + }, + "patch": { + "description": "Patch AnnotationSetting", + "operationId": "patchAnnotationSetting", + "parameters": [ + { + "description": "Name of annotationsetting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Response annotationsetting patched just now" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + }, + "put": { + "description": "Update AnnotationSetting", + "operationId": "updateAnnotationSetting", + "parameters": [ + { + "description": "Name of annotationsetting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Updated annotationsetting" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AnnotationSetting" + } + } + }, + "description": "Response annotationsettings updated just now" + } + }, + "tags": [ + "AnnotationSettingV1alpha1" + ] + } + }, + "/api/v1alpha1/configmaps": { + "get": { + "description": "List ConfigMap", + "operationId": "listConfigMap", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMapList" + } + } + }, + "description": "Response configmaps" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + }, + "post": { + "description": "Create ConfigMap", + "operationId": "createConfigMap", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Fresh configmap" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Response configmaps created just now" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + } + }, + "/api/v1alpha1/configmaps/{name}": { + "delete": { + "description": "Delete ConfigMap", + "operationId": "deleteConfigMap", + "parameters": [ + { + "description": "Name of configmap", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response configmap deleted just now" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + }, + "get": { + "description": "Get ConfigMap", + "operationId": "getConfigMap", + "parameters": [ + { + "description": "Name of configmap", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Response single configmap" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + }, + "patch": { + "description": "Patch ConfigMap", + "operationId": "patchConfigMap", + "parameters": [ + { + "description": "Name of configmap", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Response configmap patched just now" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + }, + "put": { + "description": "Update ConfigMap", + "operationId": "updateConfigMap", + "parameters": [ + { + "description": "Name of configmap", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Updated configmap" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ConfigMap" + } + } + }, + "description": "Response configmaps updated just now" + } + }, + "tags": [ + "ConfigMapV1alpha1" + ] + } + }, + "/api/v1alpha1/menuitems": { + "get": { + "description": "List MenuItem", + "operationId": "listMenuItem", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItemList" + } + } + }, + "description": "Response menuitems" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + }, + "post": { + "description": "Create MenuItem", + "operationId": "createMenuItem", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Fresh menuitem" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Response menuitems created just now" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + } + }, + "/api/v1alpha1/menuitems/{name}": { + "delete": { + "description": "Delete MenuItem", + "operationId": "deleteMenuItem", + "parameters": [ + { + "description": "Name of menuitem", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response menuitem deleted just now" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + }, + "get": { + "description": "Get MenuItem", + "operationId": "getMenuItem", + "parameters": [ + { + "description": "Name of menuitem", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Response single menuitem" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + }, + "patch": { + "description": "Patch MenuItem", + "operationId": "patchMenuItem", + "parameters": [ + { + "description": "Name of menuitem", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Response menuitem patched just now" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + }, + "put": { + "description": "Update MenuItem", + "operationId": "updateMenuItem", + "parameters": [ + { + "description": "Name of menuitem", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Updated menuitem" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuItem" + } + } + }, + "description": "Response menuitems updated just now" + } + }, + "tags": [ + "MenuItemV1alpha1" + ] + } + }, + "/api/v1alpha1/menus": { + "get": { + "description": "List Menu", + "operationId": "listMenu", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuList" + } + } + }, + "description": "Response menus" + } + }, + "tags": [ + "MenuV1alpha1" + ] + }, + "post": { + "description": "Create Menu", + "operationId": "createMenu", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Fresh menu" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Response menus created just now" + } + }, + "tags": [ + "MenuV1alpha1" + ] + } + }, + "/api/v1alpha1/menus/{name}": { + "delete": { + "description": "Delete Menu", + "operationId": "deleteMenu", + "parameters": [ + { + "description": "Name of menu", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response menu deleted just now" + } + }, + "tags": [ + "MenuV1alpha1" + ] + }, + "get": { + "description": "Get Menu", + "operationId": "getMenu", + "parameters": [ + { + "description": "Name of menu", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Response single menu" + } + }, + "tags": [ + "MenuV1alpha1" + ] + }, + "patch": { + "description": "Patch Menu", + "operationId": "patchMenu", + "parameters": [ + { + "description": "Name of menu", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Response menu patched just now" + } + }, + "tags": [ + "MenuV1alpha1" + ] + }, + "put": { + "description": "Update Menu", + "operationId": "updateMenu", + "parameters": [ + { + "description": "Name of menu", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Updated menu" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Menu" + } + } + }, + "description": "Response menus updated just now" + } + }, + "tags": [ + "MenuV1alpha1" + ] + } + }, + "/api/v1alpha1/rolebindings": { + "get": { + "description": "List RoleBinding", + "operationId": "listRoleBinding", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBindingList" + } + } + }, + "description": "Response rolebindings" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + }, + "post": { + "description": "Create RoleBinding", + "operationId": "createRoleBinding", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Fresh rolebinding" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Response rolebindings created just now" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + } + }, + "/api/v1alpha1/rolebindings/{name}": { + "delete": { + "description": "Delete RoleBinding", + "operationId": "deleteRoleBinding", + "parameters": [ + { + "description": "Name of rolebinding", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response rolebinding deleted just now" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + }, + "get": { + "description": "Get RoleBinding", + "operationId": "getRoleBinding", + "parameters": [ + { + "description": "Name of rolebinding", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Response single rolebinding" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + }, + "patch": { + "description": "Patch RoleBinding", + "operationId": "patchRoleBinding", + "parameters": [ + { + "description": "Name of rolebinding", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Response rolebinding patched just now" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + }, + "put": { + "description": "Update RoleBinding", + "operationId": "updateRoleBinding", + "parameters": [ + { + "description": "Name of rolebinding", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Updated rolebinding" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleBinding" + } + } + }, + "description": "Response rolebindings updated just now" + } + }, + "tags": [ + "RoleBindingV1alpha1" + ] + } + }, + "/api/v1alpha1/roles": { + "get": { + "description": "List Role", + "operationId": "listRole", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RoleList" + } + } + }, + "description": "Response roles" + } + }, + "tags": [ + "RoleV1alpha1" + ] + }, + "post": { + "description": "Create Role", + "operationId": "createRole", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Fresh role" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Response roles created just now" + } + }, + "tags": [ + "RoleV1alpha1" + ] + } + }, + "/api/v1alpha1/roles/{name}": { + "delete": { + "description": "Delete Role", + "operationId": "deleteRole", + "parameters": [ + { + "description": "Name of role", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response role deleted just now" + } + }, + "tags": [ + "RoleV1alpha1" + ] + }, + "get": { + "description": "Get Role", + "operationId": "getRole", + "parameters": [ + { + "description": "Name of role", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Response single role" + } + }, + "tags": [ + "RoleV1alpha1" + ] + }, + "patch": { + "description": "Patch Role", + "operationId": "patchRole", + "parameters": [ + { + "description": "Name of role", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Response role patched just now" + } + }, + "tags": [ + "RoleV1alpha1" + ] + }, + "put": { + "description": "Update Role", + "operationId": "updateRole", + "parameters": [ + { + "description": "Name of role", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Updated role" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Role" + } + } + }, + "description": "Response roles updated just now" + } + }, + "tags": [ + "RoleV1alpha1" + ] + } + }, + "/api/v1alpha1/secrets": { + "get": { + "description": "List Secret", + "operationId": "listSecret", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SecretList" + } + } + }, + "description": "Response secrets" + } + }, + "tags": [ + "SecretV1alpha1" + ] + }, + "post": { + "description": "Create Secret", + "operationId": "createSecret", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Fresh secret" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Response secrets created just now" + } + }, + "tags": [ + "SecretV1alpha1" + ] + } + }, + "/api/v1alpha1/secrets/{name}": { + "delete": { + "description": "Delete Secret", + "operationId": "deleteSecret", + "parameters": [ + { + "description": "Name of secret", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response secret deleted just now" + } + }, + "tags": [ + "SecretV1alpha1" + ] + }, + "get": { + "description": "Get Secret", + "operationId": "getSecret", + "parameters": [ + { + "description": "Name of secret", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Response single secret" + } + }, + "tags": [ + "SecretV1alpha1" + ] + }, + "patch": { + "description": "Patch Secret", + "operationId": "patchSecret", + "parameters": [ + { + "description": "Name of secret", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Response secret patched just now" + } + }, + "tags": [ + "SecretV1alpha1" + ] + }, + "put": { + "description": "Update Secret", + "operationId": "updateSecret", + "parameters": [ + { + "description": "Name of secret", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Updated secret" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Secret" + } + } + }, + "description": "Response secrets updated just now" + } + }, + "tags": [ + "SecretV1alpha1" + ] + } + }, + "/api/v1alpha1/settings": { + "get": { + "description": "List Setting", + "operationId": "listSetting", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SettingList" + } + } + }, + "description": "Response settings" + } + }, + "tags": [ + "SettingV1alpha1" + ] + }, + "post": { + "description": "Create Setting", + "operationId": "createSetting", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Fresh setting" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Response settings created just now" + } + }, + "tags": [ + "SettingV1alpha1" + ] + } + }, + "/api/v1alpha1/settings/{name}": { + "delete": { + "description": "Delete Setting", + "operationId": "deleteSetting", + "parameters": [ + { + "description": "Name of setting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response setting deleted just now" + } + }, + "tags": [ + "SettingV1alpha1" + ] + }, + "get": { + "description": "Get Setting", + "operationId": "getSetting", + "parameters": [ + { + "description": "Name of setting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Response single setting" + } + }, + "tags": [ + "SettingV1alpha1" + ] + }, + "patch": { + "description": "Patch Setting", + "operationId": "patchSetting", + "parameters": [ + { + "description": "Name of setting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Response setting patched just now" + } + }, + "tags": [ + "SettingV1alpha1" + ] + }, + "put": { + "description": "Update Setting", + "operationId": "updateSetting", + "parameters": [ + { + "description": "Name of setting", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Updated setting" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Setting" + } + } + }, + "description": "Response settings updated just now" + } + }, + "tags": [ + "SettingV1alpha1" + ] + } + }, + "/api/v1alpha1/users": { + "get": { + "description": "List User", + "operationId": "listUser", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserList" + } + } + }, + "description": "Response users" + } + }, + "tags": [ + "UserV1alpha1" + ] + }, + "post": { + "description": "Create User", + "operationId": "createUser", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Fresh user" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Response users created just now" + } + }, + "tags": [ + "UserV1alpha1" + ] + } + }, + "/api/v1alpha1/users/{name}": { + "delete": { + "description": "Delete User", + "operationId": "deleteUser", + "parameters": [ + { + "description": "Name of user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response user deleted just now" + } + }, + "tags": [ + "UserV1alpha1" + ] + }, + "get": { + "description": "Get User", + "operationId": "getUser", + "parameters": [ + { + "description": "Name of user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Response single user" + } + }, + "tags": [ + "UserV1alpha1" + ] + }, + "patch": { + "description": "Patch User", + "operationId": "patchUser", + "parameters": [ + { + "description": "Name of user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Response user patched just now" + } + }, + "tags": [ + "UserV1alpha1" + ] + }, + "put": { + "description": "Update User", + "operationId": "updateUser", + "parameters": [ + { + "description": "Name of user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Updated user" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "Response users updated just now" + } + }, + "tags": [ + "UserV1alpha1" + ] + } + }, + "/apis/auth.halo.run/v1alpha1/authproviders": { + "get": { + "description": "List AuthProvider", + "operationId": "listAuthProvider", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProviderList" + } + } + }, + "description": "Response authproviders" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + }, + "post": { + "description": "Create AuthProvider", + "operationId": "createAuthProvider", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Fresh authprovider" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Response authproviders created just now" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + } + }, + "/apis/auth.halo.run/v1alpha1/authproviders/{name}": { + "delete": { + "description": "Delete AuthProvider", + "operationId": "deleteAuthProvider", + "parameters": [ + { + "description": "Name of authprovider", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response authprovider deleted just now" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + }, + "get": { + "description": "Get AuthProvider", + "operationId": "getAuthProvider", + "parameters": [ + { + "description": "Name of authprovider", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Response single authprovider" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + }, + "patch": { + "description": "Patch AuthProvider", + "operationId": "patchAuthProvider", + "parameters": [ + { + "description": "Name of authprovider", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Response authprovider patched just now" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + }, + "put": { + "description": "Update AuthProvider", + "operationId": "updateAuthProvider", + "parameters": [ + { + "description": "Name of authprovider", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Updated authprovider" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AuthProvider" + } + } + }, + "description": "Response authproviders updated just now" + } + }, + "tags": [ + "AuthProviderV1alpha1" + ] + } + }, + "/apis/auth.halo.run/v1alpha1/userconnections": { + "get": { + "description": "List UserConnection", + "operationId": "listUserConnection", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnectionList" + } + } + }, + "description": "Response userconnections" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + }, + "post": { + "description": "Create UserConnection", + "operationId": "createUserConnection", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Fresh userconnection" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Response userconnections created just now" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + } + }, + "/apis/auth.halo.run/v1alpha1/userconnections/{name}": { + "delete": { + "description": "Delete UserConnection", + "operationId": "deleteUserConnection", + "parameters": [ + { + "description": "Name of userconnection", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response userconnection deleted just now" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + }, + "get": { + "description": "Get UserConnection", + "operationId": "getUserConnection", + "parameters": [ + { + "description": "Name of userconnection", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Response single userconnection" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + }, + "patch": { + "description": "Patch UserConnection", + "operationId": "patchUserConnection", + "parameters": [ + { + "description": "Name of userconnection", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Response userconnection patched just now" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + }, + "put": { + "description": "Update UserConnection", + "operationId": "updateUserConnection", + "parameters": [ + { + "description": "Name of userconnection", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Updated userconnection" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/UserConnection" + } + } + }, + "description": "Response userconnections updated just now" + } + }, + "tags": [ + "UserConnectionV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/categories": { + "get": { + "description": "List Category", + "operationId": "listCategory", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CategoryList" + } + } + }, + "description": "Response categories" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + }, + "post": { + "description": "Create Category", + "operationId": "createCategory", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Fresh category" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Response categories created just now" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/categories/{name}": { + "delete": { + "description": "Delete Category", + "operationId": "deleteCategory", + "parameters": [ + { + "description": "Name of category", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response category deleted just now" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + }, + "get": { + "description": "Get Category", + "operationId": "getCategory", + "parameters": [ + { + "description": "Name of category", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Response single category" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + }, + "patch": { + "description": "Patch Category", + "operationId": "patchCategory", + "parameters": [ + { + "description": "Name of category", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Response category patched just now" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + }, + "put": { + "description": "Update Category", + "operationId": "updateCategory", + "parameters": [ + { + "description": "Name of category", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Updated category" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Category" + } + } + }, + "description": "Response categories updated just now" + } + }, + "tags": [ + "CategoryV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/comments": { + "get": { + "description": "List Comment", + "operationId": "listComment", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CommentList" + } + } + }, + "description": "Response comments" + } + }, + "tags": [ + "CommentV1alpha1" + ] + }, + "post": { + "description": "Create Comment", + "operationId": "createComment", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Fresh comment" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Response comments created just now" + } + }, + "tags": [ + "CommentV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/comments/{name}": { + "delete": { + "description": "Delete Comment", + "operationId": "deleteComment", + "parameters": [ + { + "description": "Name of comment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response comment deleted just now" + } + }, + "tags": [ + "CommentV1alpha1" + ] + }, + "get": { + "description": "Get Comment", + "operationId": "getComment", + "parameters": [ + { + "description": "Name of comment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Response single comment" + } + }, + "tags": [ + "CommentV1alpha1" + ] + }, + "patch": { + "description": "Patch Comment", + "operationId": "patchComment", + "parameters": [ + { + "description": "Name of comment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Response comment patched just now" + } + }, + "tags": [ + "CommentV1alpha1" + ] + }, + "put": { + "description": "Update Comment", + "operationId": "updateComment", + "parameters": [ + { + "description": "Name of comment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Updated comment" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "Response comments updated just now" + } + }, + "tags": [ + "CommentV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/posts": { + "get": { + "description": "List Post", + "operationId": "listPost", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PostList" + } + } + }, + "description": "Response posts" + } + }, + "tags": [ + "PostV1alpha1" + ] + }, + "post": { + "description": "Create Post", + "operationId": "createPost", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Fresh post" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Response posts created just now" + } + }, + "tags": [ + "PostV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/posts/{name}": { + "delete": { + "description": "Delete Post", + "operationId": "deletePost", + "parameters": [ + { + "description": "Name of post", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response post deleted just now" + } + }, + "tags": [ + "PostV1alpha1" + ] + }, + "get": { + "description": "Get Post", + "operationId": "getPost", + "parameters": [ + { + "description": "Name of post", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Response single post" + } + }, + "tags": [ + "PostV1alpha1" + ] + }, + "patch": { + "description": "Patch Post", + "operationId": "patchPost", + "parameters": [ + { + "description": "Name of post", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Response post patched just now" + } + }, + "tags": [ + "PostV1alpha1" + ] + }, + "put": { + "description": "Update Post", + "operationId": "updatePost", + "parameters": [ + { + "description": "Name of post", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Updated post" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "Response posts updated just now" + } + }, + "tags": [ + "PostV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/replies": { + "get": { + "description": "List Reply", + "operationId": "listReply", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReplyList" + } + } + }, + "description": "Response replies" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + }, + "post": { + "description": "Create Reply", + "operationId": "createReply", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Fresh reply" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Response replies created just now" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/replies/{name}": { + "delete": { + "description": "Delete Reply", + "operationId": "deleteReply", + "parameters": [ + { + "description": "Name of reply", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response reply deleted just now" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + }, + "get": { + "description": "Get Reply", + "operationId": "getReply", + "parameters": [ + { + "description": "Name of reply", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Response single reply" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + }, + "patch": { + "description": "Patch Reply", + "operationId": "patchReply", + "parameters": [ + { + "description": "Name of reply", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Response reply patched just now" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + }, + "put": { + "description": "Update Reply", + "operationId": "updateReply", + "parameters": [ + { + "description": "Name of reply", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Updated reply" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "Response replies updated just now" + } + }, + "tags": [ + "ReplyV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/singlepages": { + "get": { + "description": "List SinglePage", + "operationId": "listSinglePage", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePageList" + } + } + }, + "description": "Response singlepages" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + }, + "post": { + "description": "Create SinglePage", + "operationId": "createSinglePage", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Fresh singlepage" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Response singlepages created just now" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/singlepages/{name}": { + "delete": { + "description": "Delete SinglePage", + "operationId": "deleteSinglePage", + "parameters": [ + { + "description": "Name of singlepage", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response singlepage deleted just now" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + }, + "get": { + "description": "Get SinglePage", + "operationId": "getSinglePage", + "parameters": [ + { + "description": "Name of singlepage", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Response single singlepage" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + }, + "patch": { + "description": "Patch SinglePage", + "operationId": "patchSinglePage", + "parameters": [ + { + "description": "Name of singlepage", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Response singlepage patched just now" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + }, + "put": { + "description": "Update SinglePage", + "operationId": "updateSinglePage", + "parameters": [ + { + "description": "Name of singlepage", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Updated singlepage" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SinglePage" + } + } + }, + "description": "Response singlepages updated just now" + } + }, + "tags": [ + "SinglePageV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/snapshots": { + "get": { + "description": "List Snapshot", + "operationId": "listSnapshot", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SnapshotList" + } + } + }, + "description": "Response snapshots" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + }, + "post": { + "description": "Create Snapshot", + "operationId": "createSnapshot", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Fresh snapshot" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Response snapshots created just now" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/snapshots/{name}": { + "delete": { + "description": "Delete Snapshot", + "operationId": "deleteSnapshot", + "parameters": [ + { + "description": "Name of snapshot", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response snapshot deleted just now" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + }, + "get": { + "description": "Get Snapshot", + "operationId": "getSnapshot", + "parameters": [ + { + "description": "Name of snapshot", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Response single snapshot" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + }, + "patch": { + "description": "Patch Snapshot", + "operationId": "patchSnapshot", + "parameters": [ + { + "description": "Name of snapshot", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Response snapshot patched just now" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + }, + "put": { + "description": "Update Snapshot", + "operationId": "updateSnapshot", + "parameters": [ + { + "description": "Name of snapshot", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Updated snapshot" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "Response snapshots updated just now" + } + }, + "tags": [ + "SnapshotV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/tags": { + "get": { + "description": "List Tag", + "operationId": "listTag", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TagList" + } + } + }, + "description": "Response tags" + } + }, + "tags": [ + "TagV1alpha1" + ] + }, + "post": { + "description": "Create Tag", + "operationId": "createTag", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Fresh tag" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Response tags created just now" + } + }, + "tags": [ + "TagV1alpha1" + ] + } + }, + "/apis/content.halo.run/v1alpha1/tags/{name}": { + "delete": { + "description": "Delete Tag", + "operationId": "deleteTag", + "parameters": [ + { + "description": "Name of tag", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response tag deleted just now" + } + }, + "tags": [ + "TagV1alpha1" + ] + }, + "get": { + "description": "Get Tag", + "operationId": "getTag", + "parameters": [ + { + "description": "Name of tag", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Response single tag" + } + }, + "tags": [ + "TagV1alpha1" + ] + }, + "patch": { + "description": "Patch Tag", + "operationId": "patchTag", + "parameters": [ + { + "description": "Name of tag", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Response tag patched just now" + } + }, + "tags": [ + "TagV1alpha1" + ] + }, + "put": { + "description": "Update Tag", + "operationId": "updateTag", + "parameters": [ + { + "description": "Name of tag", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Updated tag" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "Response tags updated just now" + } + }, + "tags": [ + "TagV1alpha1" + ] + } + }, + "/apis/metrics.halo.run/v1alpha1/counters": { + "get": { + "description": "List Counter", + "operationId": "listCounter", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CounterList" + } + } + }, + "description": "Response counters" + } + }, + "tags": [ + "CounterV1alpha1" + ] + }, + "post": { + "description": "Create Counter", + "operationId": "createCounter", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Fresh counter" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Response counters created just now" + } + }, + "tags": [ + "CounterV1alpha1" + ] + } + }, + "/apis/metrics.halo.run/v1alpha1/counters/{name}": { + "delete": { + "description": "Delete Counter", + "operationId": "deleteCounter", + "parameters": [ + { + "description": "Name of counter", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response counter deleted just now" + } + }, + "tags": [ + "CounterV1alpha1" + ] + }, + "get": { + "description": "Get Counter", + "operationId": "getCounter", + "parameters": [ + { + "description": "Name of counter", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Response single counter" + } + }, + "tags": [ + "CounterV1alpha1" + ] + }, + "patch": { + "description": "Patch Counter", + "operationId": "patchCounter", + "parameters": [ + { + "description": "Name of counter", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Response counter patched just now" + } + }, + "tags": [ + "CounterV1alpha1" + ] + }, + "put": { + "description": "Update Counter", + "operationId": "updateCounter", + "parameters": [ + { + "description": "Name of counter", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Updated counter" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Counter" + } + } + }, + "description": "Response counters updated just now" + } + }, + "tags": [ + "CounterV1alpha1" + ] + } + }, + "/apis/migration.halo.run/v1alpha1/backups": { + "get": { + "description": "List Backup", + "operationId": "listBackup", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/BackupList" + } + } + }, + "description": "Response backups" + } + }, + "tags": [ + "BackupV1alpha1" + ] + }, + "post": { + "description": "Create Backup", + "operationId": "createBackup", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Fresh backup" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Response backups created just now" + } + }, + "tags": [ + "BackupV1alpha1" + ] + } + }, + "/apis/migration.halo.run/v1alpha1/backups/{name}": { + "delete": { + "description": "Delete Backup", + "operationId": "deleteBackup", + "parameters": [ + { + "description": "Name of backup", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response backup deleted just now" + } + }, + "tags": [ + "BackupV1alpha1" + ] + }, + "get": { + "description": "Get Backup", + "operationId": "getBackup", + "parameters": [ + { + "description": "Name of backup", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Response single backup" + } + }, + "tags": [ + "BackupV1alpha1" + ] + }, + "patch": { + "description": "Patch Backup", + "operationId": "patchBackup", + "parameters": [ + { + "description": "Name of backup", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Response backup patched just now" + } + }, + "tags": [ + "BackupV1alpha1" + ] + }, + "put": { + "description": "Update Backup", + "operationId": "updateBackup", + "parameters": [ + { + "description": "Name of backup", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Updated backup" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Backup" + } + } + }, + "description": "Response backups updated just now" + } + }, + "tags": [ + "BackupV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/extensiondefinitions": { + "get": { + "description": "List ExtensionDefinition", + "operationId": "listExtensionDefinition", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinitionList" + } + } + }, + "description": "Response extensiondefinitions" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + }, + "post": { + "description": "Create ExtensionDefinition", + "operationId": "createExtensionDefinition", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Fresh extensiondefinition" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Response extensiondefinitions created just now" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/extensiondefinitions/{name}": { + "delete": { + "description": "Delete ExtensionDefinition", + "operationId": "deleteExtensionDefinition", + "parameters": [ + { + "description": "Name of extensiondefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response extensiondefinition deleted just now" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + }, + "get": { + "description": "Get ExtensionDefinition", + "operationId": "getExtensionDefinition", + "parameters": [ + { + "description": "Name of extensiondefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Response single extensiondefinition" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + }, + "patch": { + "description": "Patch ExtensionDefinition", + "operationId": "patchExtensionDefinition", + "parameters": [ + { + "description": "Name of extensiondefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Response extensiondefinition patched just now" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + }, + "put": { + "description": "Update ExtensionDefinition", + "operationId": "updateExtensionDefinition", + "parameters": [ + { + "description": "Name of extensiondefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Updated extensiondefinition" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + } + }, + "description": "Response extensiondefinitions updated just now" + } + }, + "tags": [ + "ExtensionDefinitionV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/extensionpointdefinitions": { + "get": { + "description": "List ExtensionPointDefinition", + "operationId": "listExtensionPointDefinition", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinitionList" + } + } + }, + "description": "Response extensionpointdefinitions" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + }, + "post": { + "description": "Create ExtensionPointDefinition", + "operationId": "createExtensionPointDefinition", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Fresh extensionpointdefinition" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Response extensionpointdefinitions created just now" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/extensionpointdefinitions/{name}": { + "delete": { + "description": "Delete ExtensionPointDefinition", + "operationId": "deleteExtensionPointDefinition", + "parameters": [ + { + "description": "Name of extensionpointdefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response extensionpointdefinition deleted just now" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + }, + "get": { + "description": "Get ExtensionPointDefinition", + "operationId": "getExtensionPointDefinition", + "parameters": [ + { + "description": "Name of extensionpointdefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Response single extensionpointdefinition" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + }, + "patch": { + "description": "Patch ExtensionPointDefinition", + "operationId": "patchExtensionPointDefinition", + "parameters": [ + { + "description": "Name of extensionpointdefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Response extensionpointdefinition patched just now" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + }, + "put": { + "description": "Update ExtensionPointDefinition", + "operationId": "updateExtensionPointDefinition", + "parameters": [ + { + "description": "Name of extensionpointdefinition", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Updated extensionpointdefinition" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + } + }, + "description": "Response extensionpointdefinitions updated just now" + } + }, + "tags": [ + "ExtensionPointDefinitionV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/plugins": { + "get": { + "description": "List Plugin", + "operationId": "listPlugin", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PluginList" + } + } + }, + "description": "Response plugins" + } + }, + "tags": [ + "PluginV1alpha1" + ] + }, + "post": { + "description": "Create Plugin", + "operationId": "createPlugin", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Fresh plugin" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Response plugins created just now" + } + }, + "tags": [ + "PluginV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/plugins/{name}": { + "delete": { + "description": "Delete Plugin", + "operationId": "deletePlugin", + "parameters": [ + { + "description": "Name of plugin", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response plugin deleted just now" + } + }, + "tags": [ + "PluginV1alpha1" + ] + }, + "get": { + "description": "Get Plugin", + "operationId": "getPlugin", + "parameters": [ + { + "description": "Name of plugin", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Response single plugin" + } + }, + "tags": [ + "PluginV1alpha1" + ] + }, + "patch": { + "description": "Patch Plugin", + "operationId": "patchPlugin", + "parameters": [ + { + "description": "Name of plugin", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Response plugin patched just now" + } + }, + "tags": [ + "PluginV1alpha1" + ] + }, + "put": { + "description": "Update Plugin", + "operationId": "updatePlugin", + "parameters": [ + { + "description": "Name of plugin", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Updated plugin" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Plugin" + } + } + }, + "description": "Response plugins updated just now" + } + }, + "tags": [ + "PluginV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/reverseproxies": { + "get": { + "description": "List ReverseProxy", + "operationId": "listReverseProxy", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxyList" + } + } + }, + "description": "Response reverseproxies" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + }, + "post": { + "description": "Create ReverseProxy", + "operationId": "createReverseProxy", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Fresh reverseproxy" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Response reverseproxies created just now" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/reverseproxies/{name}": { + "delete": { + "description": "Delete ReverseProxy", + "operationId": "deleteReverseProxy", + "parameters": [ + { + "description": "Name of reverseproxy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response reverseproxy deleted just now" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + }, + "get": { + "description": "Get ReverseProxy", + "operationId": "getReverseProxy", + "parameters": [ + { + "description": "Name of reverseproxy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Response single reverseproxy" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + }, + "patch": { + "description": "Patch ReverseProxy", + "operationId": "patchReverseProxy", + "parameters": [ + { + "description": "Name of reverseproxy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Response reverseproxy patched just now" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + }, + "put": { + "description": "Update ReverseProxy", + "operationId": "updateReverseProxy", + "parameters": [ + { + "description": "Name of reverseproxy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Updated reverseproxy" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReverseProxy" + } + } + }, + "description": "Response reverseproxies updated just now" + } + }, + "tags": [ + "ReverseProxyV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/searchengines": { + "get": { + "description": "List SearchEngine", + "operationId": "listSearchEngine", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngineList" + } + } + }, + "description": "Response searchengines" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + }, + "post": { + "description": "Create SearchEngine", + "operationId": "createSearchEngine", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Fresh searchengine" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Response searchengines created just now" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + } + }, + "/apis/plugin.halo.run/v1alpha1/searchengines/{name}": { + "delete": { + "description": "Delete SearchEngine", + "operationId": "deleteSearchEngine", + "parameters": [ + { + "description": "Name of searchengine", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response searchengine deleted just now" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + }, + "get": { + "description": "Get SearchEngine", + "operationId": "getSearchEngine", + "parameters": [ + { + "description": "Name of searchengine", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Response single searchengine" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + }, + "patch": { + "description": "Patch SearchEngine", + "operationId": "patchSearchEngine", + "parameters": [ + { + "description": "Name of searchengine", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Response searchengine patched just now" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + }, + "put": { + "description": "Update SearchEngine", + "operationId": "updateSearchEngine", + "parameters": [ + { + "description": "Name of searchengine", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Updated searchengine" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchEngine" + } + } + }, + "description": "Response searchengines updated just now" + } + }, + "tags": [ + "SearchEngineV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/devices": { + "get": { + "description": "List Device", + "operationId": "listDevice", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/DeviceList" + } + } + }, + "description": "Response devices" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + }, + "post": { + "description": "Create Device", + "operationId": "createDevice", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Fresh device" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Response devices created just now" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/devices/{name}": { + "delete": { + "description": "Delete Device", + "operationId": "deleteDevice", + "parameters": [ + { + "description": "Name of device", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response device deleted just now" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + }, + "get": { + "description": "Get Device", + "operationId": "getDevice", + "parameters": [ + { + "description": "Name of device", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Response single device" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + }, + "patch": { + "description": "Patch Device", + "operationId": "patchDevice", + "parameters": [ + { + "description": "Name of device", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Response device patched just now" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + }, + "put": { + "description": "Update Device", + "operationId": "updateDevice", + "parameters": [ + { + "description": "Name of device", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Updated device" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Device" + } + } + }, + "description": "Response devices updated just now" + } + }, + "tags": [ + "DeviceV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/personalaccesstokens": { + "get": { + "description": "List PersonalAccessToken", + "operationId": "listPersonalAccessToken", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessTokenList" + } + } + }, + "description": "Response personalaccesstokens" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + }, + "post": { + "description": "Create PersonalAccessToken", + "operationId": "createPersonalAccessToken", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Fresh personalaccesstoken" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Response personalaccesstokens created just now" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/personalaccesstokens/{name}": { + "delete": { + "description": "Delete PersonalAccessToken", + "operationId": "deletePersonalAccessToken", + "parameters": [ + { + "description": "Name of personalaccesstoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response personalaccesstoken deleted just now" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + }, + "get": { + "description": "Get PersonalAccessToken", + "operationId": "getPersonalAccessToken", + "parameters": [ + { + "description": "Name of personalaccesstoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Response single personalaccesstoken" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + }, + "patch": { + "description": "Patch PersonalAccessToken", + "operationId": "patchPersonalAccessToken", + "parameters": [ + { + "description": "Name of personalaccesstoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Response personalaccesstoken patched just now" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + }, + "put": { + "description": "Update PersonalAccessToken", + "operationId": "updatePersonalAccessToken", + "parameters": [ + { + "description": "Name of personalaccesstoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Updated personalaccesstoken" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "Response personalaccesstokens updated just now" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/remembermetokens": { + "get": { + "description": "List RememberMeToken", + "operationId": "listRememberMeToken", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeTokenList" + } + } + }, + "description": "Response remembermetokens" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + }, + "post": { + "description": "Create RememberMeToken", + "operationId": "createRememberMeToken", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Fresh remembermetoken" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Response remembermetokens created just now" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + } + }, + "/apis/security.halo.run/v1alpha1/remembermetokens/{name}": { + "delete": { + "description": "Delete RememberMeToken", + "operationId": "deleteRememberMeToken", + "parameters": [ + { + "description": "Name of remembermetoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response remembermetoken deleted just now" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + }, + "get": { + "description": "Get RememberMeToken", + "operationId": "getRememberMeToken", + "parameters": [ + { + "description": "Name of remembermetoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Response single remembermetoken" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + }, + "patch": { + "description": "Patch RememberMeToken", + "operationId": "patchRememberMeToken", + "parameters": [ + { + "description": "Name of remembermetoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Response remembermetoken patched just now" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + }, + "put": { + "description": "Update RememberMeToken", + "operationId": "updateRememberMeToken", + "parameters": [ + { + "description": "Name of remembermetoken", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Updated remembermetoken" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RememberMeToken" + } + } + }, + "description": "Response remembermetokens updated just now" + } + }, + "tags": [ + "RememberMeTokenV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/attachments": { + "get": { + "description": "List Attachment", + "operationId": "listAttachment", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/AttachmentList" + } + } + }, + "description": "Response attachments" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + }, + "post": { + "description": "Create Attachment", + "operationId": "createAttachment", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Fresh attachment" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Response attachments created just now" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/attachments/{name}": { + "delete": { + "description": "Delete Attachment", + "operationId": "deleteAttachment", + "parameters": [ + { + "description": "Name of attachment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response attachment deleted just now" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + }, + "get": { + "description": "Get Attachment", + "operationId": "getAttachment", + "parameters": [ + { + "description": "Name of attachment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Response single attachment" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + }, + "patch": { + "description": "Patch Attachment", + "operationId": "patchAttachment", + "parameters": [ + { + "description": "Name of attachment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Response attachment patched just now" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + }, + "put": { + "description": "Update Attachment", + "operationId": "updateAttachment", + "parameters": [ + { + "description": "Name of attachment", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Updated attachment" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "Response attachments updated just now" + } + }, + "tags": [ + "AttachmentV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/groups": { + "get": { + "description": "List Group", + "operationId": "listGroup", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/GroupList" + } + } + }, + "description": "Response groups" + } + }, + "tags": [ + "GroupV1alpha1" + ] + }, + "post": { + "description": "Create Group", + "operationId": "createGroup", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Fresh group" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Response groups created just now" + } + }, + "tags": [ + "GroupV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/groups/{name}": { + "delete": { + "description": "Delete Group", + "operationId": "deleteGroup", + "parameters": [ + { + "description": "Name of group", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response group deleted just now" + } + }, + "tags": [ + "GroupV1alpha1" + ] + }, + "get": { + "description": "Get Group", + "operationId": "getGroup", + "parameters": [ + { + "description": "Name of group", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Response single group" + } + }, + "tags": [ + "GroupV1alpha1" + ] + }, + "patch": { + "description": "Patch Group", + "operationId": "patchGroup", + "parameters": [ + { + "description": "Name of group", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Response group patched just now" + } + }, + "tags": [ + "GroupV1alpha1" + ] + }, + "put": { + "description": "Update Group", + "operationId": "updateGroup", + "parameters": [ + { + "description": "Name of group", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Updated group" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Group" + } + } + }, + "description": "Response groups updated just now" + } + }, + "tags": [ + "GroupV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/policies": { + "get": { + "description": "List Policy", + "operationId": "listPolicy", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyList" + } + } + }, + "description": "Response policies" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + }, + "post": { + "description": "Create Policy", + "operationId": "createPolicy", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Fresh policy" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Response policies created just now" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/policies/{name}": { + "delete": { + "description": "Delete Policy", + "operationId": "deletePolicy", + "parameters": [ + { + "description": "Name of policy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response policy deleted just now" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + }, + "get": { + "description": "Get Policy", + "operationId": "getPolicy", + "parameters": [ + { + "description": "Name of policy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Response single policy" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + }, + "patch": { + "description": "Patch Policy", + "operationId": "patchPolicy", + "parameters": [ + { + "description": "Name of policy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Response policy patched just now" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + }, + "put": { + "description": "Update Policy", + "operationId": "updatePolicy", + "parameters": [ + { + "description": "Name of policy", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Updated policy" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Policy" + } + } + }, + "description": "Response policies updated just now" + } + }, + "tags": [ + "PolicyV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/policytemplates": { + "get": { + "description": "List PolicyTemplate", + "operationId": "listPolicyTemplate", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplateList" + } + } + }, + "description": "Response policytemplates" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + }, + "post": { + "description": "Create PolicyTemplate", + "operationId": "createPolicyTemplate", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Fresh policytemplate" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Response policytemplates created just now" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + } + }, + "/apis/storage.halo.run/v1alpha1/policytemplates/{name}": { + "delete": { + "description": "Delete PolicyTemplate", + "operationId": "deletePolicyTemplate", + "parameters": [ + { + "description": "Name of policytemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response policytemplate deleted just now" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + }, + "get": { + "description": "Get PolicyTemplate", + "operationId": "getPolicyTemplate", + "parameters": [ + { + "description": "Name of policytemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Response single policytemplate" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + }, + "patch": { + "description": "Patch PolicyTemplate", + "operationId": "patchPolicyTemplate", + "parameters": [ + { + "description": "Name of policytemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Response policytemplate patched just now" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + }, + "put": { + "description": "Update PolicyTemplate", + "operationId": "updatePolicyTemplate", + "parameters": [ + { + "description": "Name of policytemplate", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Updated policytemplate" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PolicyTemplate" + } + } + }, + "description": "Response policytemplates updated just now" + } + }, + "tags": [ + "PolicyTemplateV1alpha1" + ] + } + }, + "/apis/theme.halo.run/v1alpha1/themes": { + "get": { + "description": "List Theme", + "operationId": "listTheme", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ThemeList" + } + } + }, + "description": "Response themes" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + }, + "post": { + "description": "Create Theme", + "operationId": "createTheme", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Fresh theme" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Response themes created just now" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + } + }, + "/apis/theme.halo.run/v1alpha1/themes/{name}": { + "delete": { + "description": "Delete Theme", + "operationId": "deleteTheme", + "parameters": [ + { + "description": "Name of theme", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "description": "Response theme deleted just now" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + }, + "get": { + "description": "Get Theme", + "operationId": "getTheme", + "parameters": [ + { + "description": "Name of theme", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Response single theme" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + }, + "patch": { + "description": "Patch Theme", + "operationId": "patchTheme", + "parameters": [ + { + "description": "Name of theme", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json-patch+json": { + "schema": { + "$ref": "#/components/schemas/JsonPatch" + } + } + } + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Response theme patched just now" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + }, + "put": { + "description": "Update Theme", + "operationId": "updateTheme", + "parameters": [ + { + "description": "Name of theme", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Updated theme" + }, + "responses": { + "200": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Theme" + } + } + }, + "description": "Response themes updated just now" + } + }, + "tags": [ + "ThemeV1alpha1" + ] + } + } + }, + "components": { + "schemas": { + "AddOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "add" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "AnnotationSetting": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/AnnotationSettingSpec" + } + } + }, + "AnnotationSettingList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/AnnotationSetting" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "AnnotationSettingSpec": { + "required": [ + "formSchema", + "targetRef" + ], + "type": "object", + "properties": { + "formSchema": { + "minLength": 1, + "type": "array", + "items": { + "minLength": 1, + "type": "object" + } + }, + "targetRef": { + "$ref": "#/components/schemas/GroupKind" + } + } + }, + "Attachment": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/AttachmentSpec" + }, + "status": { + "$ref": "#/components/schemas/AttachmentStatus" + } + } + }, + "AttachmentList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Attachment" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "AttachmentSpec": { + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "Display name of attachment" + }, + "groupName": { + "type": "string", + "description": "Group name" + }, + "mediaType": { + "type": "string", + "description": "Media type of attachment" + }, + "ownerName": { + "type": "string", + "description": "Name of User who uploads the attachment" + }, + "policyName": { + "type": "string", + "description": "Policy name" + }, + "size": { + "minimum": 0, + "type": "integer", + "description": "Size of attachment. Unit is Byte", + "format": "int64" + }, + "tags": { + "uniqueItems": true, + "type": "array", + "description": "Tags of attachment", + "items": { + "type": "string", + "description": "Tag name" + } + } + } + }, + "AttachmentStatus": { + "type": "object", + "properties": { + "permalink": { + "type": "string", + "description": "Permalink of attachment.\nIf it is in local storage, the public URL will be set.\nIf it is in s3 storage, the Object URL will be set.\n" + } + } + }, + "AuthProvider": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/AuthProviderSpec" + } + } + }, + "AuthProviderList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/AuthProvider" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "AuthProviderSpec": { + "required": [ + "authenticationUrl", + "displayName" + ], + "type": "object", + "properties": { + "authenticationUrl": { + "type": "string", + "description": "Authentication url of the auth provider" + }, + "bindingUrl": { + "type": "string" + }, + "configMapRef": { + "$ref": "#/components/schemas/ConfigMapRef" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string", + "description": "Display name of the auth provider" + }, + "helpPage": { + "type": "string" + }, + "logo": { + "type": "string" + }, + "priority": { + "type": "integer", + "format": "int32" + }, + "settingRef": { + "$ref": "#/components/schemas/SettingRef" + }, + "unbindUrl": { + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "Author": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "Backup": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/BackupSpec" + }, + "status": { + "$ref": "#/components/schemas/BackupStatus" + } + } + }, + "BackupList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Backup" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "BackupSpec": { + "type": "object", + "properties": { + "expiresAt": { + "type": "string", + "format": "date-time" + }, + "format": { + "type": "string", + "description": "Backup file format. Currently, only zip format is supported." + } + } + }, + "BackupStatus": { + "type": "object", + "properties": { + "completionTimestamp": { + "type": "string", + "format": "date-time" + }, + "failureMessage": { + "type": "string" + }, + "failureReason": { + "type": "string" + }, + "filename": { + "type": "string" + }, + "phase": { + "type": "string", + "enum": [ + "PENDING", + "RUNNING", + "SUCCEEDED", + "FAILED" + ] + }, + "size": { + "type": "integer", + "format": "int64" + }, + "startTimestamp": { + "type": "string", + "format": "date-time" + } + } + }, + "Category": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/CategorySpec" + }, + "status": { + "$ref": "#/components/schemas/CategoryStatus" + } + } + }, + "CategoryList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Category" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "CategorySpec": { + "required": [ + "displayName", + "priority", + "slug" + ], + "type": "object", + "properties": { + "children": { + "type": "array", + "items": { + "type": "string" + } + }, + "cover": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "postTemplate": { + "maxLength": 255, + "type": "string" + }, + "preventParentPostCascadeQuery": { + "type": "boolean" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "template": { + "maxLength": 255, + "type": "string" + } + } + }, + "CategoryStatus": { + "type": "object", + "properties": { + "permalink": { + "type": "string" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "visiblePostCount": { + "type": "integer", + "format": "int32" + } + } + }, + "Comment": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/CommentSpec" + }, + "status": { + "$ref": "#/components/schemas/CommentStatus" + } + } + }, + "CommentList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Comment" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "CommentOwner": { + "required": [ + "kind", + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "displayName": { + "type": "string" + }, + "kind": { + "minLength": 1, + "type": "string" + }, + "name": { + "maxLength": 64, + "type": "string" + } + } + }, + "CommentSpec": { + "required": [ + "allowNotification", + "approved", + "content", + "hidden", + "owner", + "priority", + "raw", + "subjectRef", + "top" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": true + }, + "approved": { + "type": "boolean", + "default": false + }, + "approvedTime": { + "type": "string", + "format": "date-time" + }, + "content": { + "minLength": 1, + "type": "string" + }, + "creationTime": { + "type": "string", + "format": "date-time" + }, + "hidden": { + "type": "boolean", + "default": false + }, + "ipAddress": { + "type": "string" + }, + "lastReadTime": { + "type": "string", + "format": "date-time" + }, + "owner": { + "$ref": "#/components/schemas/CommentOwner" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + }, + "top": { + "type": "boolean", + "default": false + }, + "userAgent": { + "type": "string" + } + } + }, + "CommentStatus": { + "type": "object", + "properties": { + "hasNewReply": { + "type": "boolean" + }, + "lastReplyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "replyCount": { + "type": "integer", + "format": "int32" + }, + "unreadReplyCount": { + "type": "integer", + "format": "int32" + }, + "visibleReplyCount": { + "type": "integer", + "format": "int32" + } + } + }, + "Condition": { + "required": [ + "lastTransitionTime", + "status", + "type" + ], + "type": "object", + "properties": { + "lastTransitionTime": { + "type": "string", + "format": "date-time" + }, + "message": { + "maxLength": 32768, + "type": "string" + }, + "reason": { + "maxLength": 1024, + "pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$", + "type": "string" + }, + "status": { + "type": "string", + "enum": [ + "TRUE", + "FALSE", + "UNKNOWN" + ] + }, + "type": { + "maxLength": 316, + "pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$", + "type": "string" + } + } + }, + "ConfigMap": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "data": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + } + } + }, + "ConfigMapList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ConfigMap" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ConfigMapRef": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + } + } + }, + "CopyOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "copy" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "Counter": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "approvedComment": { + "type": "integer", + "format": "int32" + }, + "downvote": { + "type": "integer", + "format": "int32" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "totalComment": { + "type": "integer", + "format": "int32" + }, + "upvote": { + "type": "integer", + "format": "int32" + }, + "visit": { + "type": "integer", + "format": "int32" + } + } + }, + "CounterList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Counter" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "CustomTemplates": { + "type": "object", + "properties": { + "category": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TemplateDescriptor" + } + }, + "page": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TemplateDescriptor" + } + }, + "post": { + "type": "array", + "items": { + "$ref": "#/components/schemas/TemplateDescriptor" + } + } + } + }, + "Device": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec", + "status" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/DeviceSpec" + }, + "status": { + "$ref": "#/components/schemas/DeviceStatus" + } + } + }, + "DeviceList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Device" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "DeviceSpec": { + "required": [ + "ipAddress", + "principalName", + "sessionId" + ], + "type": "object", + "properties": { + "ipAddress": { + "maxLength": 129, + "type": "string" + }, + "lastAccessedTime": { + "type": "string", + "format": "date-time" + }, + "lastAuthenticatedTime": { + "type": "string", + "format": "date-time" + }, + "principalName": { + "minLength": 1, + "type": "string" + }, + "rememberMeSeriesId": { + "type": "string" + }, + "sessionId": { + "minLength": 1, + "type": "string" + }, + "userAgent": { + "maxLength": 500, + "type": "string" + } + } + }, + "DeviceStatus": { + "type": "object", + "properties": { + "browser": { + "type": "string" + }, + "os": { + "type": "string" + } + } + }, + "Excerpt": { + "required": [ + "autoGenerate" + ], + "type": "object", + "properties": { + "autoGenerate": { + "type": "boolean", + "default": true + }, + "raw": { + "type": "string" + } + } + }, + "ExtensionDefinition": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ExtensionSpec" + } + } + }, + "ExtensionDefinitionList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ExtensionDefinition" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ExtensionPointDefinition": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ExtensionPointSpec" + } + } + }, + "ExtensionPointDefinitionList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ExtensionPointDefinition" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ExtensionPointSpec": { + "required": [ + "className", + "displayName", + "type" + ], + "type": "object", + "properties": { + "className": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "icon": { + "type": "string" + }, + "type": { + "type": "string", + "enum": [ + "SINGLETON", + "MULTI_INSTANCE" + ] + } + } + }, + "ExtensionSpec": { + "required": [ + "className", + "displayName", + "extensionPointName" + ], + "type": "object", + "properties": { + "className": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "extensionPointName": { + "type": "string" + }, + "icon": { + "type": "string" + } + } + }, + "FileReverseProxyProvider": { + "type": "object", + "properties": { + "directory": { + "type": "string" + }, + "filename": { + "type": "string" + } + } + }, + "Group": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/GroupSpec" + }, + "status": { + "$ref": "#/components/schemas/GroupStatus" + } + } + }, + "GroupKind": { + "type": "object", + "properties": { + "group": { + "type": "string" + }, + "kind": { + "type": "string" + } + } + }, + "GroupList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Group" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "GroupSpec": { + "required": [ + "displayName" + ], + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "Display name of group" + } + } + }, + "GroupStatus": { + "type": "object", + "properties": { + "totalAttachments": { + "minimum": 0, + "type": "integer", + "description": "Total of attachments under the current group", + "format": "int64" + }, + "updateTimestamp": { + "type": "string", + "description": "Update timestamp of the group", + "format": "date-time" + } + } + }, + "JsonPatch": { + "minItems": 1, + "uniqueItems": true, + "type": "array", + "description": "JSON schema for JSONPatch operations", + "items": { + "oneOf": [ + { + "$ref": "#/components/schemas/AddOperation" + }, + { + "$ref": "#/components/schemas/ReplaceOperation" + }, + { + "$ref": "#/components/schemas/TestOperation" + }, + { + "$ref": "#/components/schemas/RemoveOperation" + }, + { + "$ref": "#/components/schemas/MoveOperation" + }, + { + "$ref": "#/components/schemas/CopyOperation" + } + ] + } + }, + "License": { + "type": "object", + "properties": { + "name": { + "type": "string" + }, + "url": { + "type": "string" + } + } + }, + "LoginHistory": { + "required": [ + "loginAt", + "sourceIp", + "successful", + "userAgent" + ], + "type": "object", + "properties": { + "loginAt": { + "type": "string", + "format": "date-time" + }, + "reason": { + "type": "string" + }, + "sourceIp": { + "type": "string" + }, + "successful": { + "type": "boolean" + }, + "userAgent": { + "type": "string" + } + } + }, + "Menu": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/MenuSpec" + } + } + }, + "MenuItem": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/MenuItemSpec" + }, + "status": { + "$ref": "#/components/schemas/MenuItemStatus" + } + } + }, + "MenuItemList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/MenuItem" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "MenuItemSpec": { + "type": "object", + "properties": { + "children": { + "uniqueItems": true, + "type": "array", + "description": "Children of this menu item", + "items": { + "type": "string", + "description": "The name of menu item child" + } + }, + "displayName": { + "type": "string", + "description": "The display name of menu item." + }, + "href": { + "type": "string", + "description": "The href of this menu item." + }, + "priority": { + "type": "integer", + "description": "The priority is for ordering.", + "format": "int32" + }, + "target": { + "type": "string", + "description": "The \u003ca\u003e target attribute of this menu item.", + "enum": [ + "_blank", + "_self", + "_parent", + "_top" + ] + }, + "targetRef": { + "$ref": "#/components/schemas/Ref" + } + }, + "description": "The spec of menu item." + }, + "MenuItemStatus": { + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "Calculated Display name of menu item." + }, + "href": { + "type": "string", + "description": "Calculated href of manu item." + } + }, + "description": "The status of menu item." + }, + "MenuList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Menu" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "MenuSpec": { + "required": [ + "displayName" + ], + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "The display name of the menu." + }, + "menuItems": { + "uniqueItems": true, + "type": "array", + "description": "Names of menu children below this menu.", + "items": { + "type": "string", + "description": "Names of menu children below this menu." + } + } + }, + "description": "The spec of menu." + }, + "Metadata": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "creationTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "deletionTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "finalizers": { + "uniqueItems": true, + "type": "array", + "nullable": true, + "items": { + "type": "string", + "nullable": true + } + }, + "generateName": { + "type": "string", + "description": "The name field will be generated automatically according to the given generateName field" + }, + "labels": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "name": { + "type": "string", + "description": "Metadata name" + }, + "version": { + "type": "integer", + "format": "int64", + "nullable": true + } + } + }, + "MoveOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "move" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "PatSpec": { + "required": [ + "name", + "tokenId", + "username" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "expiresAt": { + "type": "string", + "format": "date-time" + }, + "lastUsed": { + "type": "string", + "format": "date-time" + }, + "name": { + "type": "string" + }, + "revoked": { + "type": "boolean" + }, + "revokesAt": { + "type": "string", + "format": "date-time" + }, + "roles": { + "type": "array", + "items": { + "type": "string" + } + }, + "scopes": { + "type": "array", + "items": { + "type": "string" + } + }, + "tokenId": { + "type": "string" + }, + "username": { + "type": "string" + } + } + }, + "PersonalAccessToken": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PatSpec" + } + } + }, + "PersonalAccessTokenList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "Plugin": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PluginSpec" + }, + "status": { + "$ref": "#/components/schemas/PluginStatus" + } + } + }, + "PluginAuthor": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "name": { + "minLength": 1, + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "PluginList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Plugin" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "PluginSpec": { + "required": [ + "version" + ], + "type": "object", + "properties": { + "author": { + "$ref": "#/components/schemas/PluginAuthor" + }, + "configMapName": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "enabled": { + "type": "boolean" + }, + "homepage": { + "type": "string" + }, + "issues": { + "type": "string" + }, + "license": { + "type": "array", + "items": { + "$ref": "#/components/schemas/License" + } + }, + "logo": { + "type": "string" + }, + "pluginClass": { + "type": "string", + "deprecated": true + }, + "pluginDependencies": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "repo": { + "type": "string" + }, + "requires": { + "type": "string" + }, + "settingName": { + "type": "string" + }, + "version": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + } + } + }, + "PluginStatus": { + "type": "object", + "properties": { + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "entry": { + "type": "string" + }, + "lastProbeState": { + "type": "string", + "enum": [ + "CREATED", + "DISABLED", + "RESOLVED", + "STARTED", + "STOPPED", + "FAILED", + "UNLOADED" + ] + }, + "lastStartTime": { + "type": "string", + "format": "date-time" + }, + "loadLocation": { + "type": "string", + "description": "Load location of the plugin, often a path.", + "format": "uri" + }, + "logo": { + "type": "string" + }, + "phase": { + "type": "string", + "enum": [ + "PENDING", + "STARTING", + "CREATED", + "DISABLING", + "DISABLED", + "RESOLVED", + "STARTED", + "STOPPED", + "FAILED", + "UNKNOWN" + ] + }, + "stylesheet": { + "type": "string" + } + } + }, + "Policy": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PolicySpec" + } + } + }, + "PolicyList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Policy" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "PolicyRule": { + "type": "object", + "properties": { + "apiGroups": { + "type": "array", + "items": { + "type": "string" + } + }, + "nonResourceURLs": { + "type": "array", + "items": { + "type": "string" + } + }, + "resourceNames": { + "type": "array", + "items": { + "type": "string" + } + }, + "resources": { + "type": "array", + "items": { + "type": "string" + } + }, + "verbs": { + "type": "array", + "items": { + "type": "string" + } + } + } + }, + "PolicySpec": { + "required": [ + "displayName", + "templateName" + ], + "type": "object", + "properties": { + "configMapName": { + "type": "string", + "description": "Reference name of ConfigMap extension" + }, + "displayName": { + "type": "string", + "description": "Display name of policy" + }, + "templateName": { + "type": "string", + "description": "Reference name of PolicyTemplate" + } + } + }, + "PolicyTemplate": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PolicyTemplateSpec" + } + } + }, + "PolicyTemplateList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/PolicyTemplate" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "PolicyTemplateSpec": { + "required": [ + "settingName" + ], + "type": "object", + "properties": { + "displayName": { + "type": "string" + }, + "settingName": { + "type": "string" + } + } + }, + "Post": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PostSpec" + }, + "status": { + "$ref": "#/components/schemas/PostStatus" + } + } + }, + "PostList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Post" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "PostSpec": { + "required": [ + "allowComment", + "deleted", + "excerpt", + "pinned", + "priority", + "publish", + "slug", + "title", + "visible" + ], + "type": "object", + "properties": { + "allowComment": { + "type": "boolean", + "default": true + }, + "baseSnapshot": { + "type": "string" + }, + "categories": { + "type": "array", + "items": { + "type": "string" + } + }, + "cover": { + "type": "string" + }, + "deleted": { + "type": "boolean", + "default": false + }, + "excerpt": { + "$ref": "#/components/schemas/Excerpt" + }, + "headSnapshot": { + "type": "string" + }, + "htmlMetas": { + "type": "array", + "items": { + "type": "object", + "additionalProperties": { + "type": "string" + } + } + }, + "owner": { + "type": "string" + }, + "pinned": { + "type": "boolean", + "default": false + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "publish": { + "type": "boolean", + "default": false + }, + "publishTime": { + "type": "string", + "format": "date-time" + }, + "releaseSnapshot": { + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "tags": { + "type": "array", + "items": { + "type": "string" + } + }, + "template": { + "type": "string" + }, + "title": { + "minLength": 1, + "type": "string" + }, + "visible": { + "type": "string", + "default": "PUBLIC", + "enum": [ + "PUBLIC", + "INTERNAL", + "PRIVATE" + ] + } + } + }, + "PostStatus": { + "required": [ + "phase" + ], + "type": "object", + "properties": { + "commentsCount": { + "type": "integer", + "format": "int32" + }, + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "contributors": { + "type": "array", + "items": { + "type": "string" + } + }, + "excerpt": { + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "inProgress": { + "type": "boolean" + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "phase": { + "type": "string" + } + } + }, + "Ref": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "group": { + "type": "string", + "description": "Extension group" + }, + "kind": { + "type": "string", + "description": "Extension kind" + }, + "name": { + "type": "string", + "description": "Extension name. This field is mandatory" + }, + "version": { + "type": "string", + "description": "Extension version" + } + }, + "description": "Extension reference object. The name is mandatory" + }, + "RememberMeToken": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/RememberMeTokenSpec" + } + } + }, + "RememberMeTokenList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/RememberMeToken" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "RememberMeTokenSpec": { + "required": [ + "series", + "tokenValue", + "username" + ], + "type": "object", + "properties": { + "lastUsed": { + "type": "string", + "format": "date-time" + }, + "series": { + "minLength": 1, + "type": "string" + }, + "tokenValue": { + "minLength": 1, + "type": "string" + }, + "username": { + "minLength": 1, + "type": "string" + } + } + }, + "RemoveOperation": { + "required": [ + "op", + "path" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "remove" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "ReplaceOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "replace" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Reply": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec", + "status" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ReplySpec" + }, + "status": { + "$ref": "#/components/schemas/ReplyStatus" + } + } + }, + "ReplyList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Reply" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ReplySpec": { + "required": [ + "allowNotification", + "approved", + "commentName", + "content", + "hidden", + "owner", + "priority", + "raw", + "top" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": true + }, + "approved": { + "type": "boolean", + "default": false + }, + "approvedTime": { + "type": "string", + "format": "date-time" + }, + "commentName": { + "minLength": 1, + "type": "string" + }, + "content": { + "minLength": 1, + "type": "string" + }, + "creationTime": { + "type": "string", + "format": "date-time" + }, + "hidden": { + "type": "boolean", + "default": false + }, + "ipAddress": { + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentOwner" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "quoteReply": { + "type": "string" + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "top": { + "type": "boolean", + "default": false + }, + "userAgent": { + "type": "string" + } + } + }, + "ReplyStatus": { + "type": "object", + "properties": { + "observedVersion": { + "type": "integer", + "format": "int64" + } + } + }, + "ReverseProxy": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "rules": { + "type": "array", + "items": { + "$ref": "#/components/schemas/ReverseProxyRule" + } + } + } + }, + "ReverseProxyList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ReverseProxy" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ReverseProxyRule": { + "type": "object", + "properties": { + "file": { + "$ref": "#/components/schemas/FileReverseProxyProvider" + }, + "path": { + "type": "string" + } + } + }, + "Role": { + "required": [ + "apiVersion", + "kind", + "metadata", + "rules" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "rules": { + "type": "array", + "items": { + "$ref": "#/components/schemas/PolicyRule" + } + } + } + }, + "RoleBinding": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "roleRef": { + "$ref": "#/components/schemas/RoleRef" + }, + "subjects": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Subject" + } + } + } + }, + "RoleBindingList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/RoleBinding" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "RoleList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Role" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "RoleRef": { + "type": "object", + "properties": { + "apiGroup": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "SearchEngine": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SearchEngineSpec" + } + } + }, + "SearchEngineList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/SearchEngine" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "SearchEngineSpec": { + "required": [ + "displayName" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "logo": { + "type": "string" + }, + "postSearchImpl": { + "type": "string" + }, + "settingRef": { + "$ref": "#/components/schemas/Ref" + }, + "website": { + "type": "string" + } + } + }, + "Secret": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "data": { + "type": "object", + "additionalProperties": { + "type": "string", + "format": "byte" + } + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "stringData": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "type": { + "type": "string" + } + } + }, + "SecretList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Secret" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "Setting": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SettingSpec" + } + } + }, + "SettingForm": { + "minLength": 1, + "required": [ + "formSchema", + "group" + ], + "type": "object", + "properties": { + "formSchema": { + "type": "array", + "items": { + "type": "object" + } + }, + "group": { + "type": "string" + }, + "label": { + "type": "string" + } + } + }, + "SettingList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Setting" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "SettingRef": { + "required": [ + "group", + "name" + ], + "type": "object", + "properties": { + "group": { + "minLength": 1, + "type": "string" + }, + "name": { + "minLength": 1, + "type": "string" + } + } + }, + "SettingSpec": { + "required": [ + "forms" + ], + "type": "object", + "properties": { + "forms": { + "minLength": 1, + "type": "array", + "items": { + "$ref": "#/components/schemas/SettingForm" + } + } + } + }, + "SinglePage": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SinglePageSpec" + }, + "status": { + "$ref": "#/components/schemas/SinglePageStatus" + } + } + }, + "SinglePageList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/SinglePage" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "SinglePageSpec": { + "required": [ + "allowComment", + "deleted", + "excerpt", + "pinned", + "priority", + "publish", + "slug", + "title", + "visible" + ], + "type": "object", + "properties": { + "allowComment": { + "type": "boolean", + "default": true + }, + "baseSnapshot": { + "type": "string" + }, + "cover": { + "type": "string" + }, + "deleted": { + "type": "boolean", + "default": false + }, + "excerpt": { + "$ref": "#/components/schemas/Excerpt" + }, + "headSnapshot": { + "type": "string" + }, + "htmlMetas": { + "type": "array", + "items": { + "type": "object", + "additionalProperties": { + "type": "string" + } + } + }, + "owner": { + "type": "string" + }, + "pinned": { + "type": "boolean", + "default": false + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "publish": { + "type": "boolean", + "default": false + }, + "publishTime": { + "type": "string", + "format": "date-time" + }, + "releaseSnapshot": { + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "template": { + "type": "string" + }, + "title": { + "minLength": 1, + "type": "string" + }, + "visible": { + "type": "string", + "default": "PUBLIC", + "enum": [ + "PUBLIC", + "INTERNAL", + "PRIVATE" + ] + } + } + }, + "SinglePageStatus": { + "required": [ + "phase" + ], + "type": "object", + "properties": { + "commentsCount": { + "type": "integer", + "format": "int32" + }, + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "contributors": { + "type": "array", + "items": { + "type": "string" + } + }, + "excerpt": { + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "inProgress": { + "type": "boolean" + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "phase": { + "type": "string" + } + } + }, + "SnapShotSpec": { + "required": [ + "owner", + "rawType", + "subjectRef" + ], + "type": "object", + "properties": { + "contentPatch": { + "type": "string" + }, + "contributors": { + "uniqueItems": true, + "type": "array", + "items": { + "type": "string" + } + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "owner": { + "minLength": 1, + "type": "string" + }, + "parentSnapshotName": { + "type": "string" + }, + "rawPatch": { + "type": "string" + }, + "rawType": { + "maxLength": 50, + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + } + } + }, + "Snapshot": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SnapShotSpec" + } + } + }, + "SnapshotList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Snapshot" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "Subject": { + "type": "object", + "properties": { + "apiGroup": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "Tag": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/TagSpec" + }, + "status": { + "$ref": "#/components/schemas/TagStatus" + } + } + }, + "TagList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Tag" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "TagSpec": { + "required": [ + "displayName", + "slug" + ], + "type": "object", + "properties": { + "color": { + "pattern": "^#([a-fA-F0-9]{6}|[a-fA-F0-9]{3})$", + "type": "string" + }, + "cover": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + } + } + }, + "TagStatus": { + "type": "object", + "properties": { + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "visiblePostCount": { + "type": "integer", + "format": "int32" + } + } + }, + "TemplateDescriptor": { + "required": [ + "file", + "name" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "file": { + "minLength": 1, + "type": "string" + }, + "name": { + "minLength": 1, + "type": "string" + }, + "screenshot": { + "type": "string" + } + } + }, + "TestOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "test" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Theme": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ThemeSpec" + }, + "status": { + "$ref": "#/components/schemas/ThemeStatus" + } + } + }, + "ThemeList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/Theme" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ThemeSpec": { + "required": [ + "author", + "displayName", + "version" + ], + "type": "object", + "properties": { + "author": { + "$ref": "#/components/schemas/Author" + }, + "configMapName": { + "type": "string" + }, + "customTemplates": { + "$ref": "#/components/schemas/CustomTemplates" + }, + "description": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "homepage": { + "type": "string" + }, + "issues": { + "type": "string" + }, + "license": { + "type": "array", + "items": { + "$ref": "#/components/schemas/License" + } + }, + "logo": { + "type": "string" + }, + "repo": { + "type": "string" + }, + "require": { + "type": "string", + "description": "Deprecated, use `requires` instead.", + "deprecated": true + }, + "requires": { + "type": "string" + }, + "settingName": { + "type": "string" + }, + "version": { + "type": "string" + }, + "website": { + "type": "string", + "deprecated": true + } + } + }, + "ThemeStatus": { + "type": "object", + "properties": { + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "location": { + "type": "string" + }, + "phase": { + "type": "string", + "enum": [ + "READY", + "FAILED", + "UNKNOWN" + ] + } + } + }, + "User": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/UserSpec" + }, + "status": { + "$ref": "#/components/schemas/UserStatus" + } + } + }, + "UserConnection": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/UserConnectionSpec" + } + } + }, + "UserConnectionList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/UserConnection" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "UserConnectionSpec": { + "required": [ + "accessToken", + "displayName", + "providerUserId", + "registrationId", + "username" + ], + "type": "object", + "properties": { + "accessToken": { + "type": "string" + }, + "avatarUrl": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "expiresAt": { + "type": "string", + "format": "date-time" + }, + "profileUrl": { + "type": "string" + }, + "providerUserId": { + "type": "string" + }, + "refreshToken": { + "type": "string" + }, + "registrationId": { + "type": "string" + }, + "updatedAt": { + "type": "string", + "format": "date-time" + }, + "username": { + "type": "string" + } + } + }, + "UserList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/User" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "UserSpec": { + "required": [ + "displayName", + "email" + ], + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "bio": { + "type": "string" + }, + "disabled": { + "type": "boolean" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "emailVerified": { + "type": "boolean" + }, + "loginHistoryLimit": { + "type": "integer", + "format": "int32" + }, + "password": { + "type": "string" + }, + "phone": { + "type": "string" + }, + "registeredAt": { + "type": "string", + "format": "date-time" + }, + "totpEncryptedSecret": { + "type": "string" + }, + "twoFactorAuthEnabled": { + "type": "boolean" + } + } + }, + "UserStatus": { + "type": "object", + "properties": { + "lastLoginAt": { + "type": "string", + "format": "date-time" + }, + "loginHistories": { + "type": "array", + "items": { + "$ref": "#/components/schemas/LoginHistory" + } + }, + "permalink": { + "type": "string" + } + } + } + }, + "securitySchemes": { + "basicAuth": { + "scheme": "basic", + "type": "http" + }, + "bearerAuth": { + "bearerFormat": "JWT", + "scheme": "bearer", + "type": "http" + } + } + } +} \ No newline at end of file diff --git a/api-docs/openapi/v3_0/apis_public.api_v1alpha1.json b/api-docs/openapi/v3_0/apis_public.api_v1alpha1.json new file mode 100644 index 0000000..92502e8 --- /dev/null +++ b/api-docs/openapi/v3_0/apis_public.api_v1alpha1.json @@ -0,0 +1,2096 @@ +{ + "openapi": "3.0.1", + "info": { + "title": "Halo", + "version": "2.19.0-SNAPSHOT" + }, + "servers": [ + { + "url": "http://localhost:8091", + "description": "Generated server url" + } + ], + "security": [ + { + "basicAuth": [], + "bearerAuth": [] + } + ], + "paths": { + "/apis/api.halo.run/v1alpha1/comments": { + "get": { + "description": "List comments.", + "operationId": "ListComments", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "The comment subject group.", + "in": "query", + "name": "group", + "schema": { + "type": "string" + } + }, + { + "description": "The comment subject version.", + "in": "query", + "name": "version", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "The comment subject kind.", + "in": "query", + "name": "kind", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "The comment subject name.", + "in": "query", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Whether to include replies. Default is false.", + "in": "query", + "name": "withReplies", + "schema": { + "type": "boolean" + } + }, + { + "description": "Reply size of the comment, default is 10, only works when withReplies is true.", + "in": "query", + "name": "replySize", + "schema": { + "type": "integer", + "format": "int32" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CommentWithReplyVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + }, + "post": { + "description": "Create a comment.", + "operationId": "CreateComment", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/CommentRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Comment" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/comments/{name}": { + "get": { + "description": "Get a comment.", + "operationId": "GetComment", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/CommentVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/comments/{name}/reply": { + "get": { + "description": "List comment replies.", + "operationId": "ListCommentReplies", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ReplyVoList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + }, + "post": { + "description": "Create a reply.", + "operationId": "CreateReply", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/ReplyRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Reply" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "CommentV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/indices/-/search": { + "post": { + "description": "Search indices.", + "operationId": "IndicesSearch", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchOption" + } + } + }, + "description": "Please note that the \"filterPublished\", \"filterExposed\" and \"filterRecycled\" fields are ignored in this endpoint." + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchResult" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "IndexV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/indices/post": { + "get": { + "deprecated": true, + "description": "Search posts with fuzzy query. This method is deprecated, please use POST /indices/-/search instead.", + "operationId": "SearchPost", + "parameters": [ + { + "description": "Keyword to search", + "in": "query", + "name": "keyword", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Limit of search results", + "in": "query", + "name": "limit", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Highlight pre tag", + "in": "query", + "name": "highlightPreTag", + "schema": { + "type": "string" + } + }, + { + "description": "Highlight post tag", + "in": "query", + "name": "highlightPostTag", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SearchResult" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "IndexV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/menus/-": { + "get": { + "description": "Gets primary menu.", + "operationId": "queryPrimaryMenu", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "MenuV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/menus/{name}": { + "get": { + "description": "Gets menu by name.", + "operationId": "queryMenuByName", + "parameters": [ + { + "description": "Menu name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/MenuVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "MenuV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/stats/-": { + "get": { + "description": "Gets site stats", + "operationId": "queryStats", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SiteStatsVo" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SystemV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/trackers/counter": { + "post": { + "description": "Count an extension resource visits.", + "operationId": "count", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/CounterRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "MetricsV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/trackers/downvote": { + "post": { + "description": "Downvote an extension resource.", + "operationId": "downvote", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/VoteRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "MetricsV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/trackers/upvote": { + "post": { + "description": "Upvote an extension resource.", + "operationId": "upvote", + "requestBody": { + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/VoteRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "MetricsV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/users/-/send-password-reset-email": { + "post": { + "description": "Send password reset email when forgot password", + "operationId": "SendPasswordResetEmail", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PasswordResetEmailRequest" + } + } + }, + "required": true + }, + "responses": { + "204 NO_CONTENT": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/users/-/send-register-verify-email": { + "post": { + "description": "Send registration verification email, which can be called when mustVerifyEmailOnRegistration in user settings is true", + "operationId": "SendRegisterVerifyEmail", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/RegisterVerifyEmailRequest" + } + } + }, + "required": true + }, + "responses": { + "204 NO_CONTENT": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/users/-/signup": { + "post": { + "description": "Sign up a new user", + "operationId": "SignUp", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/SignUpRequest" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/User" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Public" + ] + } + }, + "/apis/api.halo.run/v1alpha1/users/{name}/reset-password": { + "put": { + "description": "Reset password by token", + "operationId": "ResetPasswordByToken", + "parameters": [ + { + "description": "The name of the user", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ResetPasswordRequest" + } + } + }, + "required": true + }, + "responses": { + "204 NO_CONTENT": { + "content": {}, + "description": "default response" + } + }, + "tags": [ + "UserV1alpha1Public" + ] + } + } + }, + "components": { + "schemas": { + "AddOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "add" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Comment": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/CommentSpec" + }, + "status": { + "$ref": "#/components/schemas/CommentStatus" + } + } + }, + "CommentEmailOwner": { + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "website": { + "type": "string" + } + } + }, + "CommentOwner": { + "required": [ + "kind", + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "displayName": { + "type": "string" + }, + "kind": { + "minLength": 1, + "type": "string" + }, + "name": { + "maxLength": 64, + "type": "string" + } + } + }, + "CommentRequest": { + "required": [ + "content", + "raw", + "subjectRef" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": false + }, + "content": { + "minLength": 1, + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentEmailOwner" + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + } + } + }, + "CommentSpec": { + "required": [ + "allowNotification", + "approved", + "content", + "hidden", + "owner", + "priority", + "raw", + "subjectRef", + "top" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": true + }, + "approved": { + "type": "boolean", + "default": false + }, + "approvedTime": { + "type": "string", + "format": "date-time" + }, + "content": { + "minLength": 1, + "type": "string" + }, + "creationTime": { + "type": "string", + "format": "date-time" + }, + "hidden": { + "type": "boolean", + "default": false + }, + "ipAddress": { + "type": "string" + }, + "lastReadTime": { + "type": "string", + "format": "date-time" + }, + "owner": { + "$ref": "#/components/schemas/CommentOwner" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + }, + "top": { + "type": "boolean", + "default": false + }, + "userAgent": { + "type": "string" + } + } + }, + "CommentStatsVo": { + "type": "object", + "properties": { + "upvote": { + "type": "integer", + "format": "int32" + } + } + }, + "CommentStatus": { + "type": "object", + "properties": { + "hasNewReply": { + "type": "boolean" + }, + "lastReplyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "replyCount": { + "type": "integer", + "format": "int32" + }, + "unreadReplyCount": { + "type": "integer", + "format": "int32" + }, + "visibleReplyCount": { + "type": "integer", + "format": "int32" + } + } + }, + "CommentVo": { + "required": [ + "metadata", + "owner", + "spec", + "stats" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "spec": { + "$ref": "#/components/schemas/CommentSpec" + }, + "stats": { + "$ref": "#/components/schemas/CommentStatsVo" + }, + "status": { + "$ref": "#/components/schemas/CommentStatus" + } + }, + "description": "A chunk of items." + }, + "CommentVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/CommentVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "CommentWithReplyVo": { + "required": [ + "metadata", + "owner", + "spec", + "stats" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "replies": { + "$ref": "#/components/schemas/ListResultReplyVo" + }, + "spec": { + "$ref": "#/components/schemas/CommentSpec" + }, + "stats": { + "$ref": "#/components/schemas/CommentStatsVo" + }, + "status": { + "$ref": "#/components/schemas/CommentStatus" + } + }, + "description": "A chunk of items." + }, + "CommentWithReplyVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/CommentWithReplyVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "CopyOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "copy" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "CounterRequest": { + "type": "object", + "properties": { + "group": { + "type": "string" + }, + "hostname": { + "type": "string" + }, + "language": { + "type": "string" + }, + "name": { + "type": "string" + }, + "plural": { + "type": "string" + }, + "referrer": { + "type": "string" + }, + "screen": { + "type": "string" + } + } + }, + "HaloDocument": { + "required": [ + "content", + "id", + "metadataName", + "ownerName", + "permalink", + "title", + "type" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "categories": { + "type": "array", + "items": { + "type": "string" + } + }, + "content": { + "type": "string" + }, + "creationTimestamp": { + "type": "string", + "format": "date-time" + }, + "description": { + "type": "string" + }, + "exposed": { + "type": "boolean" + }, + "id": { + "type": "string" + }, + "metadataName": { + "type": "string" + }, + "ownerName": { + "type": "string" + }, + "permalink": { + "type": "string" + }, + "published": { + "type": "boolean" + }, + "recycled": { + "type": "boolean" + }, + "tags": { + "type": "array", + "items": { + "type": "string" + } + }, + "title": { + "type": "string" + }, + "type": { + "type": "string" + }, + "updateTimestamp": { + "type": "string", + "format": "date-time" + } + } + }, + "JsonPatch": { + "minItems": 1, + "uniqueItems": true, + "type": "array", + "description": "JSON schema for JSONPatch operations", + "items": { + "oneOf": [ + { + "$ref": "#/components/schemas/AddOperation" + }, + { + "$ref": "#/components/schemas/ReplaceOperation" + }, + { + "$ref": "#/components/schemas/TestOperation" + }, + { + "$ref": "#/components/schemas/RemoveOperation" + }, + { + "$ref": "#/components/schemas/MoveOperation" + }, + { + "$ref": "#/components/schemas/CopyOperation" + } + ] + } + }, + "ListResultReplyVo": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ReplyVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "LoginHistory": { + "required": [ + "loginAt", + "sourceIp", + "successful", + "userAgent" + ], + "type": "object", + "properties": { + "loginAt": { + "type": "string", + "format": "date-time" + }, + "reason": { + "type": "string" + }, + "sourceIp": { + "type": "string" + }, + "successful": { + "type": "boolean" + }, + "userAgent": { + "type": "string" + } + } + }, + "MenuItemSpec": { + "type": "object", + "properties": { + "children": { + "uniqueItems": true, + "type": "array", + "description": "Children of this menu item", + "items": { + "type": "string", + "description": "The name of menu item child" + } + }, + "displayName": { + "type": "string", + "description": "The display name of menu item." + }, + "href": { + "type": "string", + "description": "The href of this menu item." + }, + "priority": { + "type": "integer", + "description": "The priority is for ordering.", + "format": "int32" + }, + "target": { + "type": "string", + "description": "The \u003ca\u003e target attribute of this menu item.", + "enum": [ + "_blank", + "_self", + "_parent", + "_top" + ] + }, + "targetRef": { + "$ref": "#/components/schemas/Ref" + } + } + }, + "MenuItemStatus": { + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "Calculated Display name of menu item." + }, + "href": { + "type": "string", + "description": "Calculated href of manu item." + } + } + }, + "MenuItemVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "displayName": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "parentName": { + "type": "string" + }, + "spec": { + "$ref": "#/components/schemas/MenuItemSpec" + }, + "status": { + "$ref": "#/components/schemas/MenuItemStatus" + } + } + }, + "MenuSpec": { + "required": [ + "displayName" + ], + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "The display name of the menu." + }, + "menuItems": { + "uniqueItems": true, + "type": "array", + "description": "Names of menu children below this menu.", + "items": { + "type": "string", + "description": "Names of menu children below this menu." + } + } + } + }, + "MenuVo": { + "required": [ + "metadata" + ], + "type": "object", + "properties": { + "menuItems": { + "type": "array", + "items": { + "$ref": "#/components/schemas/MenuItemVo" + } + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/MenuSpec" + } + } + }, + "Metadata": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "creationTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "deletionTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "finalizers": { + "uniqueItems": true, + "type": "array", + "nullable": true, + "items": { + "type": "string", + "nullable": true + } + }, + "generateName": { + "type": "string", + "description": "The name field will be generated automatically according to the given generateName field" + }, + "labels": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "name": { + "type": "string", + "description": "Metadata name" + }, + "version": { + "type": "integer", + "format": "int64", + "nullable": true + } + } + }, + "MoveOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "move" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "OwnerInfo": { + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "PasswordResetEmailRequest": { + "required": [ + "email", + "username" + ], + "type": "object", + "properties": { + "email": { + "type": "string" + }, + "username": { + "type": "string" + } + } + }, + "Ref": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "group": { + "type": "string", + "description": "Extension group" + }, + "kind": { + "type": "string", + "description": "Extension kind" + }, + "name": { + "type": "string", + "description": "Extension name. This field is mandatory" + }, + "version": { + "type": "string", + "description": "Extension version" + } + }, + "description": "Extension reference object. The name is mandatory" + }, + "RegisterVerifyEmailRequest": { + "required": [ + "email" + ], + "type": "object", + "properties": { + "email": { + "type": "string" + } + } + }, + "RemoveOperation": { + "required": [ + "op", + "path" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "remove" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "ReplaceOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "replace" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Reply": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec", + "status" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/ReplySpec" + }, + "status": { + "$ref": "#/components/schemas/ReplyStatus" + } + } + }, + "ReplyRequest": { + "required": [ + "content", + "raw" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": false + }, + "content": { + "minLength": 1, + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentEmailOwner" + }, + "quoteReply": { + "type": "string" + }, + "raw": { + "minLength": 1, + "type": "string" + } + } + }, + "ReplySpec": { + "required": [ + "allowNotification", + "approved", + "commentName", + "content", + "hidden", + "owner", + "priority", + "raw", + "top" + ], + "type": "object", + "properties": { + "allowNotification": { + "type": "boolean", + "default": true + }, + "approved": { + "type": "boolean", + "default": false + }, + "approvedTime": { + "type": "string", + "format": "date-time" + }, + "commentName": { + "minLength": 1, + "type": "string" + }, + "content": { + "minLength": 1, + "type": "string" + }, + "creationTime": { + "type": "string", + "format": "date-time" + }, + "hidden": { + "type": "boolean", + "default": false + }, + "ipAddress": { + "type": "string" + }, + "owner": { + "$ref": "#/components/schemas/CommentOwner" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "quoteReply": { + "type": "string" + }, + "raw": { + "minLength": 1, + "type": "string" + }, + "top": { + "type": "boolean", + "default": false + }, + "userAgent": { + "type": "string" + } + } + }, + "ReplyStatus": { + "type": "object", + "properties": { + "observedVersion": { + "type": "integer", + "format": "int64" + } + } + }, + "ReplyVo": { + "required": [ + "metadata", + "owner", + "spec", + "stats" + ], + "type": "object", + "properties": { + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "owner": { + "$ref": "#/components/schemas/OwnerInfo" + }, + "spec": { + "$ref": "#/components/schemas/ReplySpec" + }, + "stats": { + "$ref": "#/components/schemas/CommentStatsVo" + } + }, + "description": "A chunk of items." + }, + "ReplyVoList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ReplyVo" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "ResetPasswordRequest": { + "required": [ + "newPassword", + "token" + ], + "type": "object", + "properties": { + "newPassword": { + "minLength": 6, + "type": "string" + }, + "token": { + "type": "string" + } + } + }, + "SearchOption": { + "required": [ + "keyword" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "filterExposed": { + "type": "boolean" + }, + "filterPublished": { + "type": "boolean" + }, + "filterRecycled": { + "type": "boolean" + }, + "highlightPostTag": { + "type": "string" + }, + "highlightPreTag": { + "type": "string" + }, + "includeCategoryNames": { + "type": "array", + "items": { + "type": "string" + } + }, + "includeOwnerNames": { + "type": "array", + "items": { + "type": "string" + } + }, + "includeTagNames": { + "type": "array", + "items": { + "type": "string" + } + }, + "includeTypes": { + "type": "array", + "items": { + "type": "string" + } + }, + "keyword": { + "type": "string" + }, + "limit": { + "maximum": 1000, + "minimum": 1, + "type": "integer", + "format": "int32" + } + } + }, + "SearchResult": { + "type": "object", + "properties": { + "hits": { + "type": "array", + "items": { + "$ref": "#/components/schemas/HaloDocument" + } + }, + "keyword": { + "type": "string" + }, + "limit": { + "type": "integer", + "format": "int32" + }, + "processingTimeMillis": { + "type": "integer", + "format": "int64" + }, + "total": { + "type": "integer", + "format": "int64" + } + } + }, + "SignUpRequest": { + "required": [ + "password", + "user" + ], + "type": "object", + "properties": { + "password": { + "minLength": 6, + "type": "string" + }, + "user": { + "$ref": "#/components/schemas/User" + }, + "verifyCode": { + "maxLength": 6, + "minLength": 6, + "type": "string" + } + } + }, + "SiteStatsVo": { + "type": "object", + "properties": { + "category": { + "type": "integer", + "format": "int32" + }, + "comment": { + "type": "integer", + "format": "int32" + }, + "post": { + "type": "integer", + "format": "int32" + }, + "upvote": { + "type": "integer", + "format": "int32" + }, + "visit": { + "type": "integer", + "format": "int32" + } + } + }, + "TestOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "test" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "User": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/UserSpec" + }, + "status": { + "$ref": "#/components/schemas/UserStatus" + } + } + }, + "UserSpec": { + "required": [ + "displayName", + "email" + ], + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "bio": { + "type": "string" + }, + "disabled": { + "type": "boolean" + }, + "displayName": { + "type": "string" + }, + "email": { + "type": "string" + }, + "emailVerified": { + "type": "boolean" + }, + "loginHistoryLimit": { + "type": "integer", + "format": "int32" + }, + "password": { + "type": "string" + }, + "phone": { + "type": "string" + }, + "registeredAt": { + "type": "string", + "format": "date-time" + }, + "totpEncryptedSecret": { + "type": "string" + }, + "twoFactorAuthEnabled": { + "type": "boolean" + } + } + }, + "UserStatus": { + "type": "object", + "properties": { + "lastLoginAt": { + "type": "string", + "format": "date-time" + }, + "loginHistories": { + "type": "array", + "items": { + "$ref": "#/components/schemas/LoginHistory" + } + }, + "permalink": { + "type": "string" + } + } + }, + "VoteRequest": { + "type": "object", + "properties": { + "group": { + "type": "string" + }, + "name": { + "type": "string" + }, + "plural": { + "type": "string" + } + } + } + }, + "securitySchemes": { + "basicAuth": { + "scheme": "basic", + "type": "http" + }, + "bearerAuth": { + "bearerFormat": "JWT", + "scheme": "bearer", + "type": "http" + } + } + } +} \ No newline at end of file diff --git a/api-docs/openapi/v3_0/apis_uc.api_v1alpha1.json b/api-docs/openapi/v3_0/apis_uc.api_v1alpha1.json new file mode 100644 index 0000000..fc82fe6 --- /dev/null +++ b/api-docs/openapi/v3_0/apis_uc.api_v1alpha1.json @@ -0,0 +1,1978 @@ +{ + "openapi": "3.0.1", + "info": { + "title": "Halo", + "version": "2.19.0-SNAPSHOT" + }, + "servers": [ + { + "url": "http://localhost:8091", + "description": "Generated server url" + } + ], + "security": [ + { + "basicAuth": [], + "bearerAuth": [] + } + ], + "paths": { + "/apis/uc.api.content.halo.run/v1alpha1/attachments": { + "post": { + "description": "Create attachment for the given post.", + "operationId": "CreateAttachmentForPost", + "parameters": [ + { + "description": "Wait for permalink.", + "in": "query", + "name": "waitForPermalink", + "schema": { + "type": "boolean" + } + } + ], + "requestBody": { + "content": { + "multipart/form-data": { + "schema": { + "$ref": "#/components/schemas/PostAttachmentRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Attachment" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "AttachmentV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts": { + "get": { + "description": "List posts owned by the current user.", + "operationId": "ListMyPosts", + "parameters": [ + { + "description": "Page number. Default is 0.", + "in": "query", + "name": "page", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Size number. Default is 0.", + "in": "query", + "name": "size", + "schema": { + "type": "integer", + "format": "int32" + } + }, + { + "description": "Label selector. e.g.: hidden!\u003dtrue", + "in": "query", + "name": "labelSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Field selector. e.g.: metadata.name\u003d\u003dhalo", + "in": "query", + "name": "fieldSelector", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Sorting criteria in the format: property,(asc|desc). Default sort order is ascending. Multiple sort criteria are supported.", + "in": "query", + "name": "sort", + "schema": { + "type": "array", + "items": { + "type": "string" + } + } + }, + { + "description": "Posts filtered by publish phase.", + "in": "query", + "name": "publishPhase", + "schema": { + "type": "string", + "enum": [ + "DRAFT", + "PENDING_APPROVAL", + "PUBLISHED", + "FAILED" + ] + } + }, + { + "description": "Posts filtered by keyword.", + "in": "query", + "name": "keyword", + "schema": { + "type": "string" + } + }, + { + "description": "Posts filtered by category including sub-categories.", + "in": "query", + "name": "categoryWithChildren", + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/ListedPostList" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + }, + "post": { + "description": "Create my post. If you want to create a post with content, please set\n annotation: \"content.halo.run/content-json\" into annotations and refer\n to Content for corresponding data type.\n", + "operationId": "CreateMyPost", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts/{name}": { + "get": { + "description": "Get post that belongs to the current user.", + "operationId": "GetMyPost", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + }, + "put": { + "description": "Update my post.", + "operationId": "UpdateMyPost", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts/{name}/draft": { + "get": { + "description": "Get my post draft.", + "operationId": "GetMyPostDraft", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Should include patched content and raw or not.", + "in": "query", + "name": "patched", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + }, + "put": { + "description": "Update draft of my post. Please make sure set annotation:\n\"content.halo.run/content-json\" into annotations and refer to\nContent for corresponding data type.\n", + "operationId": "UpdateMyPostDraft", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts/{name}/publish": { + "put": { + "description": "Publish my post.", + "operationId": "PublishMyPost", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/posts/{name}/unpublish": { + "put": { + "description": "Unpublish my post.", + "operationId": "UnpublishMyPost", + "parameters": [ + { + "description": "Post name", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Post" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PostV1alpha1Uc" + ] + } + }, + "/apis/uc.api.content.halo.run/v1alpha1/snapshots/{name}": { + "get": { + "description": "Get snapshot for one post.", + "operationId": "GetSnapshotForPost", + "parameters": [ + { + "description": "Snapshot name.", + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Post name.", + "in": "query", + "name": "postName", + "required": true, + "schema": { + "type": "string" + } + }, + { + "description": "Should include patched content and raw or not.", + "in": "query", + "name": "patched", + "schema": { + "type": "boolean" + } + } + ], + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/Snapshot" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "SnapshotV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/settings": { + "get": { + "description": "Get Two-factor authentication settings.", + "operationId": "GetTwoFactorAuthenticationSettings", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/settings/disabled": { + "put": { + "description": "Disable Two-factor authentication", + "operationId": "DisableTwoFactor", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PasswordRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/settings/enabled": { + "put": { + "description": "Enable Two-factor authentication", + "operationId": "EnableTwoFactor", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PasswordRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/totp": { + "post": { + "description": "Configure a TOTP", + "operationId": "ConfigurerTotp", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TotpRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/totp/-": { + "delete": { + "operationId": "DeleteTotp", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PasswordRequest" + } + } + } + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TwoFactorAuthSettings" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/authentications/two-factor/totp/auth-link": { + "get": { + "description": "Get TOTP auth link, including secret", + "operationId": "GetTotpAuthLink", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/TotpAuthLinkResponse" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "TwoFactorAuthV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/devices": { + "get": { + "description": "List all user devices", + "operationId": "ListDevices", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/UserDevice" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "DeviceV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/devices/{deviceId}": { + "delete": { + "description": "Revoke a own device", + "operationId": "RevokeDevice", + "parameters": [ + { + "description": "Device ID", + "in": "path", + "name": "deviceId", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": { + "204 NO_CONTENT": { + "description": "default response" + } + }, + "tags": [ + "DeviceV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/personalaccesstokens": { + "get": { + "description": "Obtain PAT list.", + "operationId": "ObtainPats", + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "type": "array", + "items": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + }, + "post": { + "description": "Generate a PAT.", + "operationId": "GeneratePat", + "requestBody": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "required": true + }, + "responses": { + "default": { + "content": { + "*/*": { + "schema": { + "$ref": "#/components/schemas/PersonalAccessToken" + } + } + }, + "description": "default response" + } + }, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/personalaccesstokens/{name}": { + "delete": { + "description": "Delete a PAT", + "operationId": "DeletePat", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + }, + "get": { + "description": "Obtain a PAT.", + "operationId": "ObtainPat", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/personalaccesstokens/{name}/actions/restoration": { + "put": { + "description": "Restore a PAT.", + "operationId": "RestorePat", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + } + }, + "/apis/uc.api.security.halo.run/v1alpha1/personalaccesstokens/{name}/actions/revocation": { + "put": { + "description": "Revoke a PAT", + "operationId": "RevokePat", + "parameters": [ + { + "in": "path", + "name": "name", + "required": true, + "schema": { + "type": "string" + } + } + ], + "responses": {}, + "tags": [ + "PersonalAccessTokenV1alpha1Uc" + ] + } + } + }, + "components": { + "schemas": { + "AddOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "add" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "Attachment": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/AttachmentSpec" + }, + "status": { + "$ref": "#/components/schemas/AttachmentStatus" + } + } + }, + "AttachmentSpec": { + "type": "object", + "properties": { + "displayName": { + "type": "string", + "description": "Display name of attachment" + }, + "groupName": { + "type": "string", + "description": "Group name" + }, + "mediaType": { + "type": "string", + "description": "Media type of attachment" + }, + "ownerName": { + "type": "string", + "description": "Name of User who uploads the attachment" + }, + "policyName": { + "type": "string", + "description": "Policy name" + }, + "size": { + "minimum": 0, + "type": "integer", + "description": "Size of attachment. Unit is Byte", + "format": "int64" + }, + "tags": { + "uniqueItems": true, + "type": "array", + "description": "Tags of attachment", + "items": { + "type": "string", + "description": "Tag name" + } + } + } + }, + "AttachmentStatus": { + "type": "object", + "properties": { + "permalink": { + "type": "string", + "description": "Permalink of attachment.\nIf it is in local storage, the public URL will be set.\nIf it is in s3 storage, the Object URL will be set.\n" + } + } + }, + "Category": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/CategorySpec" + }, + "status": { + "$ref": "#/components/schemas/CategoryStatus" + } + } + }, + "CategorySpec": { + "required": [ + "displayName", + "priority", + "slug" + ], + "type": "object", + "properties": { + "children": { + "type": "array", + "items": { + "type": "string" + } + }, + "cover": { + "type": "string" + }, + "description": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "postTemplate": { + "maxLength": 255, + "type": "string" + }, + "preventParentPostCascadeQuery": { + "type": "boolean" + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "template": { + "maxLength": 255, + "type": "string" + } + } + }, + "CategoryStatus": { + "type": "object", + "properties": { + "permalink": { + "type": "string" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "visiblePostCount": { + "type": "integer", + "format": "int32" + } + } + }, + "Condition": { + "required": [ + "lastTransitionTime", + "status", + "type" + ], + "type": "object", + "properties": { + "lastTransitionTime": { + "type": "string", + "format": "date-time" + }, + "message": { + "maxLength": 32768, + "type": "string" + }, + "reason": { + "maxLength": 1024, + "pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$", + "type": "string" + }, + "status": { + "type": "string", + "enum": [ + "TRUE", + "FALSE", + "UNKNOWN" + ] + }, + "type": { + "maxLength": 316, + "pattern": "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$", + "type": "string" + } + } + }, + "Contributor": { + "type": "object", + "properties": { + "avatar": { + "type": "string" + }, + "displayName": { + "type": "string" + }, + "name": { + "type": "string" + } + } + }, + "CopyOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "copy" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "Device": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec", + "status" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/DeviceSpec" + }, + "status": { + "$ref": "#/components/schemas/DeviceStatus" + } + } + }, + "DeviceSpec": { + "required": [ + "ipAddress", + "principalName", + "sessionId" + ], + "type": "object", + "properties": { + "ipAddress": { + "maxLength": 129, + "type": "string" + }, + "lastAccessedTime": { + "type": "string", + "format": "date-time" + }, + "lastAuthenticatedTime": { + "type": "string", + "format": "date-time" + }, + "principalName": { + "minLength": 1, + "type": "string" + }, + "rememberMeSeriesId": { + "type": "string" + }, + "sessionId": { + "minLength": 1, + "type": "string" + }, + "userAgent": { + "maxLength": 500, + "type": "string" + } + } + }, + "DeviceStatus": { + "type": "object", + "properties": { + "browser": { + "type": "string" + }, + "os": { + "type": "string" + } + } + }, + "Excerpt": { + "required": [ + "autoGenerate" + ], + "type": "object", + "properties": { + "autoGenerate": { + "type": "boolean", + "default": true + }, + "raw": { + "type": "string" + } + } + }, + "JsonPatch": { + "minItems": 1, + "uniqueItems": true, + "type": "array", + "description": "JSON schema for JSONPatch operations", + "items": { + "oneOf": [ + { + "$ref": "#/components/schemas/AddOperation" + }, + { + "$ref": "#/components/schemas/ReplaceOperation" + }, + { + "$ref": "#/components/schemas/TestOperation" + }, + { + "$ref": "#/components/schemas/RemoveOperation" + }, + { + "$ref": "#/components/schemas/MoveOperation" + }, + { + "$ref": "#/components/schemas/CopyOperation" + } + ] + } + }, + "ListedPost": { + "required": [ + "categories", + "contributors", + "owner", + "post", + "stats", + "tags" + ], + "type": "object", + "properties": { + "categories": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Category" + } + }, + "contributors": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Contributor" + } + }, + "owner": { + "$ref": "#/components/schemas/Contributor" + }, + "post": { + "$ref": "#/components/schemas/Post" + }, + "stats": { + "$ref": "#/components/schemas/Stats" + }, + "tags": { + "type": "array", + "items": { + "$ref": "#/components/schemas/Tag" + } + } + }, + "description": "A chunk of items." + }, + "ListedPostList": { + "required": [ + "first", + "hasNext", + "hasPrevious", + "items", + "last", + "page", + "size", + "total", + "totalPages" + ], + "type": "object", + "properties": { + "first": { + "type": "boolean", + "description": "Indicates whether current page is the first page." + }, + "hasNext": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "hasPrevious": { + "type": "boolean", + "description": "Indicates whether current page has previous page." + }, + "items": { + "type": "array", + "description": "A chunk of items.", + "items": { + "$ref": "#/components/schemas/ListedPost" + } + }, + "last": { + "type": "boolean", + "description": "Indicates whether current page is the last page." + }, + "page": { + "type": "integer", + "description": "Page number, starts from 1. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "size": { + "type": "integer", + "description": "Size of each page. If not set or equal to 0, it means no pagination.", + "format": "int32" + }, + "total": { + "type": "integer", + "description": "Total elements.", + "format": "int64" + }, + "totalPages": { + "type": "integer", + "description": "Indicates total pages.", + "format": "int64" + } + } + }, + "Metadata": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "annotations": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "creationTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "deletionTimestamp": { + "type": "string", + "format": "date-time", + "nullable": true + }, + "finalizers": { + "uniqueItems": true, + "type": "array", + "nullable": true, + "items": { + "type": "string", + "nullable": true + } + }, + "generateName": { + "type": "string", + "description": "The name field will be generated automatically according to the given generateName field" + }, + "labels": { + "type": "object", + "additionalProperties": { + "type": "string" + } + }, + "name": { + "type": "string", + "description": "Metadata name" + }, + "version": { + "type": "integer", + "format": "int64", + "nullable": true + } + } + }, + "MoveOperation": { + "required": [ + "op", + "from", + "path" + ], + "type": "object", + "properties": { + "from": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "op": { + "type": "string", + "enum": [ + "move" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "PasswordRequest": { + "required": [ + "password" + ], + "type": "object", + "properties": { + "password": { + "type": "string" + } + } + }, + "PatSpec": { + "required": [ + "name", + "tokenId", + "username" + ], + "type": "object", + "properties": { + "description": { + "type": "string" + }, + "expiresAt": { + "type": "string", + "format": "date-time" + }, + "lastUsed": { + "type": "string", + "format": "date-time" + }, + "name": { + "type": "string" + }, + "revoked": { + "type": "boolean" + }, + "revokesAt": { + "type": "string", + "format": "date-time" + }, + "roles": { + "type": "array", + "items": { + "type": "string" + } + }, + "scopes": { + "type": "array", + "items": { + "type": "string" + } + }, + "tokenId": { + "type": "string" + }, + "username": { + "type": "string" + } + } + }, + "PersonalAccessToken": { + "required": [ + "apiVersion", + "kind", + "metadata" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PatSpec" + } + } + }, + "Post": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/PostSpec" + }, + "status": { + "$ref": "#/components/schemas/PostStatus" + } + } + }, + "PostAttachmentRequest": { + "required": [ + "file" + ], + "type": "object", + "properties": { + "file": { + "type": "string", + "format": "binary" + }, + "postName": { + "type": "string", + "description": "Post name." + }, + "singlePageName": { + "type": "string", + "description": "Single page name." + } + } + }, + "PostSpec": { + "required": [ + "allowComment", + "deleted", + "excerpt", + "pinned", + "priority", + "publish", + "slug", + "title", + "visible" + ], + "type": "object", + "properties": { + "allowComment": { + "type": "boolean", + "default": true + }, + "baseSnapshot": { + "type": "string" + }, + "categories": { + "type": "array", + "items": { + "type": "string" + } + }, + "cover": { + "type": "string" + }, + "deleted": { + "type": "boolean", + "default": false + }, + "excerpt": { + "$ref": "#/components/schemas/Excerpt" + }, + "headSnapshot": { + "type": "string" + }, + "htmlMetas": { + "type": "array", + "items": { + "type": "object", + "additionalProperties": { + "type": "string" + } + } + }, + "owner": { + "type": "string" + }, + "pinned": { + "type": "boolean", + "default": false + }, + "priority": { + "type": "integer", + "format": "int32", + "default": 0 + }, + "publish": { + "type": "boolean", + "default": false + }, + "publishTime": { + "type": "string", + "format": "date-time" + }, + "releaseSnapshot": { + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + }, + "tags": { + "type": "array", + "items": { + "type": "string" + } + }, + "template": { + "type": "string" + }, + "title": { + "minLength": 1, + "type": "string" + }, + "visible": { + "type": "string", + "default": "PUBLIC", + "enum": [ + "PUBLIC", + "INTERNAL", + "PRIVATE" + ] + } + } + }, + "PostStatus": { + "required": [ + "phase" + ], + "type": "object", + "properties": { + "commentsCount": { + "type": "integer", + "format": "int32" + }, + "conditions": { + "type": "array", + "properties": { + "empty": { + "type": "boolean" + } + }, + "items": { + "$ref": "#/components/schemas/Condition" + } + }, + "contributors": { + "type": "array", + "items": { + "type": "string" + } + }, + "excerpt": { + "type": "string" + }, + "hideFromList": { + "type": "boolean" + }, + "inProgress": { + "type": "boolean" + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "phase": { + "type": "string" + } + } + }, + "Ref": { + "required": [ + "name" + ], + "type": "object", + "properties": { + "group": { + "type": "string", + "description": "Extension group" + }, + "kind": { + "type": "string", + "description": "Extension kind" + }, + "name": { + "type": "string", + "description": "Extension name. This field is mandatory" + }, + "version": { + "type": "string", + "description": "Extension version" + } + }, + "description": "Extension reference object. The name is mandatory" + }, + "RemoveOperation": { + "required": [ + "op", + "path" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "remove" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + } + } + }, + "ReplaceOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "replace" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "SnapShotSpec": { + "required": [ + "owner", + "rawType", + "subjectRef" + ], + "type": "object", + "properties": { + "contentPatch": { + "type": "string" + }, + "contributors": { + "uniqueItems": true, + "type": "array", + "items": { + "type": "string" + } + }, + "lastModifyTime": { + "type": "string", + "format": "date-time" + }, + "owner": { + "minLength": 1, + "type": "string" + }, + "parentSnapshotName": { + "type": "string" + }, + "rawPatch": { + "type": "string" + }, + "rawType": { + "maxLength": 50, + "minLength": 1, + "type": "string" + }, + "subjectRef": { + "$ref": "#/components/schemas/Ref" + } + } + }, + "Snapshot": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/SnapShotSpec" + } + } + }, + "Stats": { + "type": "object", + "properties": { + "approvedComment": { + "type": "integer", + "format": "int32" + }, + "totalComment": { + "type": "integer", + "format": "int32" + }, + "upvote": { + "type": "integer", + "format": "int32" + }, + "visit": { + "type": "integer", + "format": "int32" + } + } + }, + "Tag": { + "required": [ + "apiVersion", + "kind", + "metadata", + "spec" + ], + "type": "object", + "properties": { + "apiVersion": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "metadata": { + "$ref": "#/components/schemas/Metadata" + }, + "spec": { + "$ref": "#/components/schemas/TagSpec" + }, + "status": { + "$ref": "#/components/schemas/TagStatus" + } + } + }, + "TagSpec": { + "required": [ + "displayName", + "slug" + ], + "type": "object", + "properties": { + "color": { + "pattern": "^#([a-fA-F0-9]{6}|[a-fA-F0-9]{3})$", + "type": "string" + }, + "cover": { + "type": "string" + }, + "displayName": { + "minLength": 1, + "type": "string" + }, + "slug": { + "minLength": 1, + "type": "string" + } + } + }, + "TagStatus": { + "type": "object", + "properties": { + "observedVersion": { + "type": "integer", + "format": "int64" + }, + "permalink": { + "type": "string" + }, + "postCount": { + "type": "integer", + "format": "int32" + }, + "visiblePostCount": { + "type": "integer", + "format": "int32" + } + } + }, + "TestOperation": { + "required": [ + "op", + "path", + "value" + ], + "type": "object", + "properties": { + "op": { + "type": "string", + "enum": [ + "test" + ] + }, + "path": { + "pattern": "^(/[^/~]*(~[01][^/~]*)*)*$", + "type": "string", + "description": "A JSON Pointer path pointing to the location to move/copy from.", + "example": "/a/b/c" + }, + "value": { + "description": "Value can be any JSON value" + } + } + }, + "TotpAuthLinkResponse": { + "type": "object", + "properties": { + "authLink": { + "type": "string", + "format": "uri" + }, + "rawSecret": { + "type": "string" + } + } + }, + "TotpRequest": { + "required": [ + "code", + "password", + "secret" + ], + "type": "object", + "properties": { + "code": { + "type": "string" + }, + "password": { + "type": "string" + }, + "secret": { + "type": "string" + } + } + }, + "TwoFactorAuthSettings": { + "type": "object", + "properties": { + "available": { + "type": "boolean" + }, + "emailVerified": { + "type": "boolean" + }, + "enabled": { + "type": "boolean" + }, + "totpConfigured": { + "type": "boolean" + } + } + }, + "UserDevice": { + "required": [ + "active", + "currentDevice", + "device" + ], + "type": "object", + "properties": { + "active": { + "type": "boolean" + }, + "currentDevice": { + "type": "boolean" + }, + "device": { + "$ref": "#/components/schemas/Device" + } + } + } + }, + "securitySchemes": { + "basicAuth": { + "scheme": "basic", + "type": "http" + }, + "bearerAuth": { + "bearerFormat": "JWT", + "scheme": "bearer", + "type": "http" + } + } + } +} \ No newline at end of file diff --git a/api/build.gradle b/api/build.gradle new file mode 100644 index 0000000..717b853 --- /dev/null +++ b/api/build.gradle @@ -0,0 +1,101 @@ +plugins { + id 'java-library' + id 'halo.publish' + id 'jacoco' + id "io.freefair.lombok" +} + +group = 'run.halo.app' +description = 'API of halo project, connecting by other projects.' + +java { + sourceCompatibility = JavaVersion.VERSION_17 + targetCompatibility = JavaVersion.VERSION_17 +} + +compileJava.options.encoding = "UTF-8" +compileTestJava.options.encoding = "UTF-8" +javadoc.options.encoding = "UTF-8" + +repositories { + mavenCentral() + maven { url 'https://repo.spring.io/milestone' } + maven { url 'https://s01.oss.sonatype.org/content/repositories/snapshots' } +} + +dependencies { + api platform(project(':platform:application')) + + api 'org.springframework.boot:spring-boot-starter-actuator' + api 'org.springframework.boot:spring-boot-starter-data-jpa' + api 'org.springframework.boot:spring-boot-starter-mail' + api 'org.springframework.boot:spring-boot-starter-thymeleaf' + api 'org.springframework.boot:spring-boot-starter-webflux' + api 'org.springframework.boot:spring-boot-starter-validation' + api 'org.springframework.boot:spring-boot-starter-data-r2dbc' + api 'org.springframework.session:spring-session-core' + + // Spring Security + api 'org.springframework.boot:spring-boot-starter-security' + api 'org.springframework.security:spring-security-oauth2-jose' + api 'org.springframework.security:spring-security-oauth2-client' + api 'org.springframework.security:spring-security-oauth2-resource-server' + + // Cache + api "org.springframework.boot:spring-boot-starter-cache" + api "com.github.ben-manes.caffeine:caffeine" + + api "org.springdoc:springdoc-openapi-starter-webflux-ui" + api 'org.openapi4j:openapi-schema-validator' + api "net.bytebuddy:byte-buddy" + + // Apache Lucene + api "org.apache.lucene:lucene-core" + api "org.apache.lucene:lucene-queryparser" + api "org.apache.lucene:lucene-highlighter" + api "org.apache.lucene:lucene-backward-codecs" + api 'org.apache.lucene:lucene-analysis-common' + + api "org.apache.commons:commons-lang3" + api "io.seruco.encoding:base62" + api "org.pf4j:pf4j" + api "com.google.guava:guava" + api "org.jsoup:jsoup" + api "io.github.java-diff-utils:java-diff-utils" + api "org.springframework.integration:spring-integration-core" + api "com.github.java-json-tools:json-patch" + api "org.thymeleaf.extras:thymeleaf-extras-springsecurity6" + api 'org.apache.tika:tika-core' + + api "io.github.resilience4j:resilience4j-spring-boot3" + api "io.github.resilience4j:resilience4j-reactor" + + api "com.j256.two-factor-auth:two-factor-auth" + + runtimeOnly 'io.r2dbc:r2dbc-h2' + runtimeOnly 'org.postgresql:postgresql' + runtimeOnly 'org.postgresql:r2dbc-postgresql' + runtimeOnly 'org.mariadb:r2dbc-mariadb' + runtimeOnly 'io.asyncer:r2dbc-mysql' + + testImplementation 'org.springframework.boot:spring-boot-starter-test' + testImplementation 'org.springframework.security:spring-security-test' + testImplementation 'io.projectreactor:reactor-test' +} + +java { + withSourcesJar() + withJavadocJar() +} + +tasks.named('test') { + useJUnitPlatform() + finalizedBy jacocoTestReport +} + +tasks.named('jacocoTestReport') { + reports { + xml.required = true + html.required = false + } +} diff --git a/api/src/main/java/run/halo/app/content/ContentWrapper.java b/api/src/main/java/run/halo/app/content/ContentWrapper.java new file mode 100644 index 0000000..e29185a --- /dev/null +++ b/api/src/main/java/run/halo/app/content/ContentWrapper.java @@ -0,0 +1,43 @@ +package run.halo.app.content; + +import lombok.Builder; +import lombok.Data; +import org.apache.commons.lang3.StringUtils; +import org.springframework.util.Assert; +import run.halo.app.core.extension.content.Snapshot; + +/** + * @author guqing + * @since 2.0.0 + */ +@Data +@Builder +public class ContentWrapper { + private String snapshotName; + private String raw; + private String content; + private String rawType; + + public static ContentWrapper patchSnapshot(Snapshot patchSnapshot, Snapshot baseSnapshot) { + Assert.notNull(baseSnapshot, "The baseSnapshot must not be null."); + String baseSnapshotName = baseSnapshot.getMetadata().getName(); + if (StringUtils.equals(patchSnapshot.getMetadata().getName(), baseSnapshotName)) { + return ContentWrapper.builder() + .snapshotName(patchSnapshot.getMetadata().getName()) + .raw(patchSnapshot.getSpec().getRawPatch()) + .content(patchSnapshot.getSpec().getContentPatch()) + .rawType(patchSnapshot.getSpec().getRawType()) + .build(); + } + String patchedContent = PatchUtils.applyPatch(baseSnapshot.getSpec().getContentPatch(), + patchSnapshot.getSpec().getContentPatch()); + String patchedRaw = PatchUtils.applyPatch(baseSnapshot.getSpec().getRawPatch(), + patchSnapshot.getSpec().getRawPatch()); + return ContentWrapper.builder() + .snapshotName(patchSnapshot.getMetadata().getName()) + .raw(patchedRaw) + .content(patchedContent) + .rawType(patchSnapshot.getSpec().getRawType()) + .build(); + } +} diff --git a/api/src/main/java/run/halo/app/content/ExcerptGenerator.java b/api/src/main/java/run/halo/app/content/ExcerptGenerator.java new file mode 100644 index 0000000..d25b681 --- /dev/null +++ b/api/src/main/java/run/halo/app/content/ExcerptGenerator.java @@ -0,0 +1,32 @@ +package run.halo.app.content; + +import java.util.Set; +import lombok.Data; +import lombok.experimental.Accessors; +import org.pf4j.ExtensionPoint; +import reactor.core.publisher.Mono; + +public interface ExcerptGenerator extends ExtensionPoint { + + Mono generate(ExcerptGenerator.Context context); + + @Data + @Accessors(chain = true) + class Context { + private String raw; + /** + * html content. + */ + private String content; + + private String rawType; + /** + * keywords in the content to help the excerpt generation more accurate. + */ + private Set keywords; + /** + * Max length of the generated excerpt. + */ + private int maxLength; + } +} diff --git a/api/src/main/java/run/halo/app/content/PatchUtils.java b/api/src/main/java/run/halo/app/content/PatchUtils.java new file mode 100644 index 0000000..1813c75 --- /dev/null +++ b/api/src/main/java/run/halo/app/content/PatchUtils.java @@ -0,0 +1,88 @@ +package run.halo.app.content; + +import com.fasterxml.jackson.core.type.TypeReference; +import com.github.difflib.DiffUtils; +import com.github.difflib.patch.AbstractDelta; +import com.github.difflib.patch.ChangeDelta; +import com.github.difflib.patch.Chunk; +import com.github.difflib.patch.DeleteDelta; +import com.github.difflib.patch.DeltaType; +import com.github.difflib.patch.InsertDelta; +import com.github.difflib.patch.Patch; +import com.github.difflib.patch.PatchFailedException; +import com.google.common.base.Splitter; +import java.util.Collections; +import java.util.List; +import lombok.Data; +import org.apache.commons.lang3.StringUtils; +import run.halo.app.infra.utils.JsonUtils; + +/** + * @author guqing + * @since 2.0.0 + */ +public class PatchUtils { + private static final String DELIMITER = "\n"; + private static final Splitter lineSplitter = Splitter.on(DELIMITER); + + public static Patch create(String deltasJson) { + List deltas = JsonUtils.jsonToObject(deltasJson, new TypeReference<>() { + }); + Patch patch = new Patch<>(); + for (Delta delta : deltas) { + StringChunk sourceChunk = delta.getSource(); + StringChunk targetChunk = delta.getTarget(); + Chunk orgChunk = new Chunk<>(sourceChunk.getPosition(), sourceChunk.getLines(), + sourceChunk.getChangePosition()); + Chunk revChunk = new Chunk<>(targetChunk.getPosition(), targetChunk.getLines(), + targetChunk.getChangePosition()); + switch (delta.getType()) { + case DELETE -> patch.addDelta(new DeleteDelta<>(orgChunk, revChunk)); + case INSERT -> patch.addDelta(new InsertDelta<>(orgChunk, revChunk)); + case CHANGE -> patch.addDelta(new ChangeDelta<>(orgChunk, revChunk)); + default -> throw new IllegalArgumentException("Unsupported delta type."); + } + } + return patch; + } + + public static String patchToJson(Patch patch) { + List> deltas = patch.getDeltas(); + return JsonUtils.objectToJson(deltas); + } + + public static String applyPatch(String original, String patchJson) { + Patch patch = PatchUtils.create(patchJson); + try { + return String.join(DELIMITER, patch.applyTo(breakLine(original))); + } catch (PatchFailedException e) { + throw new RuntimeException(e); + } + } + + public static String diffToJsonPatch(String original, String revised) { + Patch patch = DiffUtils.diff(breakLine(original), breakLine(revised)); + return PatchUtils.patchToJson(patch); + } + + public static List breakLine(String content) { + if (StringUtils.isBlank(content)) { + return Collections.emptyList(); + } + return lineSplitter.splitToList(content); + } + + @Data + public static class Delta { + private StringChunk source; + private StringChunk target; + private DeltaType type; + } + + @Data + public static class StringChunk { + private int position; + private List lines; + private List changePosition; + } +} diff --git a/api/src/main/java/run/halo/app/content/PostContentService.java b/api/src/main/java/run/halo/app/content/PostContentService.java new file mode 100644 index 0000000..e8fb6ed --- /dev/null +++ b/api/src/main/java/run/halo/app/content/PostContentService.java @@ -0,0 +1,15 @@ +package run.halo.app.content; + +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +public interface PostContentService { + + Mono getHeadContent(String postName); + + Mono getReleaseContent(String postName); + + Mono getSpecifiedContent(String postName, String snapshotName); + + Flux listSnapshots(String postName); +} diff --git a/api/src/main/java/run/halo/app/content/comment/CommentSubject.java b/api/src/main/java/run/halo/app/content/comment/CommentSubject.java new file mode 100644 index 0000000..f170623 --- /dev/null +++ b/api/src/main/java/run/halo/app/content/comment/CommentSubject.java @@ -0,0 +1,26 @@ +package run.halo.app.content.comment; + +import org.pf4j.ExtensionPoint; +import reactor.core.publisher.Mono; +import run.halo.app.extension.Extension; +import run.halo.app.extension.Ref; + +/** + * Comment subject. + * + * @author guqing + * @since 2.0.0 + */ +public interface CommentSubject extends ExtensionPoint { + + Mono get(String name); + + default Mono getSubjectDisplay(String name) { + return Mono.empty(); + } + + boolean supports(Ref ref); + + record SubjectDisplay(String title, String url, String kindName) { + } +} diff --git a/api/src/main/java/run/halo/app/core/endpoint/WebSocketEndpoint.java b/api/src/main/java/run/halo/app/core/endpoint/WebSocketEndpoint.java new file mode 100644 index 0000000..33d141d --- /dev/null +++ b/api/src/main/java/run/halo/app/core/endpoint/WebSocketEndpoint.java @@ -0,0 +1,34 @@ +package run.halo.app.core.endpoint; + +import org.springframework.web.reactive.socket.WebSocketHandler; +import run.halo.app.extension.GroupVersion; + +/** + * Endpoint for WebSocket. + * + * @author johnniang + */ +public interface WebSocketEndpoint { + + /** + * Path of the URL after group version. + * + * @return path of the URL. + */ + String urlPath(); + + /** + * Group and version parts of the endpoint. + * + * @return GroupVersion. + */ + GroupVersion groupVersion(); + + /** + * Real WebSocket handler for the endpoint. + * + * @return WebSocket handler. + */ + WebSocketHandler handler(); + +} diff --git a/api/src/main/java/run/halo/app/core/extension/AnnotationSetting.java b/api/src/main/java/run/halo/app/core/extension/AnnotationSetting.java new file mode 100644 index 0000000..e8e2bfd --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/AnnotationSetting.java @@ -0,0 +1,36 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static run.halo.app.core.extension.AnnotationSetting.KIND; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.GroupKind; + +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "", version = "v1alpha1", kind = KIND, + plural = "annotationsettings", singular = "annotationsetting") +public class AnnotationSetting extends AbstractExtension { + public static final String TARGET_REF_LABEL = "halo.run/target-ref"; + + public static final String KIND = "AnnotationSetting"; + + @Schema(requiredMode = REQUIRED) + private AnnotationSettingSpec spec; + + @Data + public static class AnnotationSettingSpec { + @Schema(requiredMode = REQUIRED) + private GroupKind targetRef; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private List formSchema; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/AuthProvider.java b/api/src/main/java/run/halo/app/core/extension/AuthProvider.java new file mode 100644 index 0000000..5f496c6 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/AuthProvider.java @@ -0,0 +1,80 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + * Auth provider extension. + * + * @author guqing + * @since 2.4.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@ToString(callSuper = true) +@GVK(group = "auth.halo.run", version = "v1alpha1", kind = "AuthProvider", + singular = "authprovider", plural = "authproviders") +public class AuthProvider extends AbstractExtension { + + public static final String AUTH_BINDING_LABEL = "auth.halo.run/auth-binding"; + + public static final String PRIVILEGED_LABEL = "auth.halo.run/privileged"; + + @Schema(requiredMode = REQUIRED) + private AuthProviderSpec spec; + + @Data + @ToString + public static class AuthProviderSpec { + + @Schema(requiredMode = REQUIRED, description = "Display name of the auth provider") + private String displayName; + + private String description; + + private String logo; + + private String website; + + private String helpPage; + + @Schema(requiredMode = REQUIRED, description = "Authentication url of the auth provider") + private String authenticationUrl; + + private String bindingUrl; + + private String unbindUrl; + + private int priority; + + @Schema(requiredMode = NOT_REQUIRED) + private SettingRef settingRef; + + @Schema(requiredMode = NOT_REQUIRED) + private ConfigMapRef configMapRef; + } + + @Data + @ToString + public static class SettingRef { + @Schema(requiredMode = REQUIRED, minLength = 1) + private String name; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String group; + } + + @Data + @ToString + public static class ConfigMapRef { + @Schema(requiredMode = REQUIRED, minLength = 1) + private String name; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/Counter.java b/api/src/main/java/run/halo/app/core/extension/Counter.java new file mode 100644 index 0000000..9e7ed04 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/Counter.java @@ -0,0 +1,41 @@ +package run.halo.app.core.extension; + +import lombok.Data; +import lombok.EqualsAndHashCode; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.Metadata; + +/** + * A counter for number of requests by extension resource name. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@GVK(group = "metrics.halo.run", version = "v1alpha1", kind = "Counter", plural = "counters", + singular = "counter") +@EqualsAndHashCode(callSuper = true) +public class Counter extends AbstractExtension { + + private Integer visit; + + private Integer upvote; + + private Integer downvote; + + private Integer totalComment; + + private Integer approvedComment; + + public static Counter emptyCounter(String name) { + Counter counter = new Counter(); + counter.setMetadata(new Metadata()); + counter.getMetadata().setName(name); + counter.setUpvote(0); + counter.setTotalComment(0); + counter.setApprovedComment(0); + counter.setVisit(0); + return counter; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/Device.java b/api/src/main/java/run/halo/app/core/extension/Device.java new file mode 100644 index 0000000..40f4043 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/Device.java @@ -0,0 +1,65 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.Getter; +import lombok.experimental.Accessors; +import org.springframework.lang.NonNull; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = Device.GROUP, version = Device.VERSION, kind = Device.KIND, plural = "devices", + singular = "device") +public class Device extends AbstractExtension { + public static final String GROUP = "security.halo.run"; + public static final String VERSION = "v1alpha1"; + public static final String KIND = "Device"; + + @Schema(requiredMode = REQUIRED) + private Spec spec; + + @Getter(onMethod_ = @NonNull) + private Status status = new Status(); + + public void setStatus(Status status) { + this.status = (status == null ? new Status() : status); + } + + @Data + @Accessors(chain = true) + @Schema(name = "DeviceSpec") + public static class Spec { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String sessionId; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String principalName; + + @Schema(requiredMode = REQUIRED, maxLength = 129) + private String ipAddress; + + @Schema(maxLength = 500) + private String userAgent; + + private String rememberMeSeriesId; + + private Instant lastAccessedTime; + + private Instant lastAuthenticatedTime; + } + + @Data + @Accessors(chain = true) + @Schema(name = "DeviceStatus") + public static class Status { + private String browser; + private String os; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/Menu.java b/api/src/main/java/run/halo/app/core/extension/Menu.java new file mode 100644 index 0000000..02117a4 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/Menu.java @@ -0,0 +1,39 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.LinkedHashSet; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "", version = "v1alpha1", kind = "Menu", plural = "menus", singular = "menu") +public class Menu extends AbstractExtension { + + @Schema(description = "The spec of menu.", requiredMode = REQUIRED) + private Spec spec; + + @Data + @Schema(name = "MenuSpec") + public static class Spec { + + @Schema(description = "The display name of the menu.", requiredMode = REQUIRED) + private String displayName; + + @Schema(description = "Names of menu children below this menu.") + @ArraySchema( + arraySchema = @Schema(description = "Menu items of this menu."), + schema = @Schema(description = "Name of menu item.") + ) + private LinkedHashSet menuItems; + + } + +} diff --git a/api/src/main/java/run/halo/app/core/extension/MenuItem.java b/api/src/main/java/run/halo/app/core/extension/MenuItem.java new file mode 100644 index 0000000..51301d0 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/MenuItem.java @@ -0,0 +1,84 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import com.fasterxml.jackson.annotation.JsonCreator; +import com.fasterxml.jackson.annotation.JsonValue; +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.LinkedHashSet; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.Ref; + +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "", version = "v1alpha1", kind = "MenuItem", + plural = "menuitems", singular = "menuitem") +public class MenuItem extends AbstractExtension { + + @Schema(description = "The spec of menu item.", requiredMode = REQUIRED) + private MenuItemSpec spec; + + @Schema(description = "The status of menu item.") + private MenuItemStatus status; + + public enum Target { + BLANK("_blank"), + SELF("_self"), + PARENT("_parent"), + TOP("_top"); + + private final String value; + + @JsonCreator + Target(String value) { + this.value = value; + } + + @JsonValue + public String getValue() { + return value; + } + } + + @Data + public static class MenuItemSpec { + + @Schema(description = "The display name of menu item.") + private String displayName; + + @Schema(description = "The href of this menu item.") + private String href; + + @Schema(description = "The target attribute of this menu item.") + private Target target; + + @Schema(description = "The priority is for ordering.") + private Integer priority; + + @ArraySchema( + arraySchema = @Schema(description = "Children of this menu item"), + schema = @Schema(description = "The name of menu item child")) + private LinkedHashSet children; + + @Schema(description = "Target reference. Like Category, Tag, Post or SinglePage") + private Ref targetRef; + + } + + @Data + public static class MenuItemStatus { + + @Schema(description = "Calculated Display name of menu item.") + private String displayName; + + @Schema(description = "Calculated href of manu item.") + private String href; + + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/Plugin.java b/api/src/main/java/run/halo/app/core/extension/Plugin.java new file mode 100644 index 0000000..8d1db1b --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/Plugin.java @@ -0,0 +1,164 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import io.swagger.v3.oas.annotations.media.Schema; +import java.net.URI; +import java.time.Instant; +import java.util.HashMap; +import java.util.List; +import java.util.Map; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import org.pf4j.PluginState; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.infra.ConditionList; + +/** + * A custom resource for Plugin. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@GVK(group = "plugin.halo.run", version = "v1alpha1", kind = "Plugin", plural = "plugins", + singular = "plugin") +@EqualsAndHashCode(callSuper = true) +public class Plugin extends AbstractExtension { + + @Schema(requiredMode = REQUIRED) + private PluginSpec spec; + + private PluginStatus status; + + /** + * Gets plugin status. + * + * @return empty object if status is null. + */ + @NonNull + @JsonIgnore + public PluginStatus statusNonNull() { + if (this.status == null) { + this.status = new PluginStatus(); + } + return status; + } + + @Data + public static class PluginSpec { + + private String displayName; + + /** + * plugin version. + * + * @see semantic version + */ + @Schema(requiredMode = REQUIRED, + pattern = "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-(" + + "(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\." + + "(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\" + + ".[0-9a-zA-Z-]+)*))?$") + private String version; + + private PluginAuthor author; + + private String logo; + + private Map pluginDependencies = new HashMap<>(4); + + private String homepage; + + private String repo; + + private String issues; + + private String description; + + private List license; + + /** + * SemVer format. + */ + private String requires = "*"; + + @Deprecated + private String pluginClass; + + private Boolean enabled = false; + + private String settingName; + + private String configMapName; + } + + /** + * In the future, we may consider using {@link run.halo.app.infra.model.License} instead of it. + * But now, replace it will lead to incompatibility with downstream. + */ + @Data + public static class License { + private String name; + private String url; + } + + @Data + public static class PluginStatus { + + private Phase phase; + + private ConditionList conditions; + + private Instant lastStartTime; + + private PluginState lastProbeState; + + private String entry; + + private String stylesheet; + + private String logo; + + @Schema(description = "Load location of the plugin, often a path.") + private URI loadLocation; + + public static ConditionList nullSafeConditions(@NonNull PluginStatus status) { + Assert.notNull(status, "The status must not be null."); + if (status.getConditions() == null) { + status.setConditions(new ConditionList()); + } + return status.getConditions(); + } + } + + public enum Phase { + PENDING, + STARTING, + CREATED, + DISABLING, + DISABLED, + RESOLVED, + STARTED, + STOPPED, + FAILED, + UNKNOWN, + ; + } + + @Data + @ToString + public static class PluginAuthor { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String name; + + private String website; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/RememberMeToken.java b/api/src/main/java/run/halo/app/core/extension/RememberMeToken.java new file mode 100644 index 0000000..e0a143e --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/RememberMeToken.java @@ -0,0 +1,37 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.experimental.Accessors; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "security.halo.run", version = "v1alpha1", kind = "RememberMeToken", plural = + "remembermetokens", singular = "remembermetoken") +public class RememberMeToken extends AbstractExtension { + + @Schema(requiredMode = REQUIRED) + private Spec spec; + + @Data + @Accessors(chain = true) + @Schema(name = "RememberMeTokenSpec") + public static class Spec { + @Schema(requiredMode = REQUIRED, minLength = 1) + private String username; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String series; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String tokenValue; + + private Instant lastUsed; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/ReverseProxy.java b/api/src/main/java/run/halo/app/core/extension/ReverseProxy.java new file mode 100644 index 0000000..5cdf922 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/ReverseProxy.java @@ -0,0 +1,29 @@ +package run.halo.app.core.extension; + +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + *

The reverse proxy custom resource is used to configure a path to proxy it to a directory or + * file.

+ *

HTTP proxy may be added in the future.

+ * + * @author guqing + * @since 2.0.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "plugin.halo.run", kind = "ReverseProxy", version = "v1alpha1", + plural = "reverseproxies", singular = "reverseproxy") +public class ReverseProxy extends AbstractExtension { + private List rules; + + public record ReverseProxyRule(String path, FileReverseProxyProvider file) { + } + + public record FileReverseProxyProvider(String directory, String filename) { + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/Role.java b/api/src/main/java/run/halo/app/core/extension/Role.java new file mode 100644 index 0000000..ebda43f --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/Role.java @@ -0,0 +1,187 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static java.util.Arrays.compare; +import static run.halo.app.core.extension.Role.GROUP; +import static run.halo.app.core.extension.Role.KIND; +import static run.halo.app.core.extension.Role.VERSION; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.Getter; +import lombok.ToString; +import org.springframework.lang.NonNull; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + * @author guqing + * @since 2.0.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@ToString(callSuper = true) +@GVK(group = GROUP, + version = VERSION, + kind = KIND, + plural = "roles", + singular = "role") +public class Role extends AbstractExtension { + public static final String ROLE_DEPENDENCY_RULES = + "rbac.authorization.halo.run/dependency-rules"; + public static final String ROLE_AGGREGATE_LABEL_PREFIX = + "rbac.authorization.halo.run/aggregate-to-"; + public static final String ROLE_DEPENDENCIES_ANNO = "rbac.authorization.halo.run/dependencies"; + public static final String UI_PERMISSIONS_ANNO = "rbac.authorization.halo.run/ui-permissions"; + + public static final String SYSTEM_RESERVED_LABELS = + "rbac.authorization.halo.run/system-reserved"; + public static final String HIDDEN_LABEL_NAME = "halo.run/hidden"; + public static final String TEMPLATE_LABEL_NAME = "halo.run/role-template"; + public static final String UI_PERMISSIONS_AGGREGATED_ANNO = + "rbac.authorization.halo.run/ui-permissions-aggregated"; + + public static final String GROUP = ""; + public static final String VERSION = "v1alpha1"; + public static final String KIND = "Role"; + + @Schema(requiredMode = REQUIRED) + List rules; + + /** + * PolicyRule holds information that describes a policy rule, but does not contain information + * about whom the rule applies to or which namespace the rule applies to. + * + * @author guqing + * @since 2.0.0 + */ + @Getter + @EqualsAndHashCode + public static class PolicyRule implements Comparable { + /** + * APIGroups is the name of the APIGroup that contains the resources. + * If multiple API groups are specified, any action requested against one of the enumerated + * resources in any API group will be allowed. + */ + final String[] apiGroups; + + /** + * Resources is a list of resources this rule applies to. '*' represents all resources in + * the specified apiGroups. + * '*/foo' represents the subresource 'foo' for all resources in the specified + * apiGroups. + */ + final String[] resources; + + /** + * ResourceNames is an optional white list of names that the rule applies to. An empty set + * means that everything is allowed. + */ + final String[] resourceNames; + + /** + * NonResourceURLs is a set of partial urls that a user should have access to. + * *s are allowed, but only as the full, final step in the path + * If an action is not a resource API request, then the URL is split on '/' and is checked + * against the NonResourceURLs to look for a match. + * Since non-resource URLs are not namespaced, this field is only applicable for + * ClusterRoles referenced from a ClusterRoleBinding. + * Rules can either apply to API resources (such as "pods" or "secrets") or non-resource + * URL paths (such as "/api"), but not both. + */ + final String[] nonResourceURLs; + + /** + * about who the rule applies to or which namespace the rule applies to. + */ + final String[] verbs; + + public PolicyRule() { + this(null, null, null, null, null); + } + + public PolicyRule(String[] apiGroups, String[] resources, + String[] resourceNames, + String[] nonResourceURLs, String[] verbs) { + this.apiGroups = nullElseEmpty(apiGroups); + this.resources = nullElseEmpty(resources); + this.resourceNames = nullElseEmpty(resourceNames); + this.nonResourceURLs = nullElseEmpty(nonResourceURLs); + this.verbs = nullElseEmpty(verbs); + } + + String[] nullElseEmpty(String... items) { + if (items == null) { + return new String[] {}; + } + return items; + } + + @Override + public int compareTo(@NonNull PolicyRule other) { + int result = compare(apiGroups, other.apiGroups); + if (result != 0) { + return result; + } + result = compare(resources, other.resources); + if (result != 0) { + return result; + } + result = compare(resourceNames, other.resourceNames); + if (result != 0) { + return result; + } + result = compare(nonResourceURLs, other.nonResourceURLs); + if (result != 0) { + return result; + } + result = compare(verbs, other.verbs); + return result; + } + + public static class Builder { + String[] apiGroups; + + String[] resources; + + String[] resourceNames; + + String[] nonResourceURLs; + + String[] verbs; + + public Builder apiGroups(String... apiGroups) { + this.apiGroups = apiGroups; + return this; + } + + public Builder resources(String... resources) { + this.resources = resources; + return this; + } + + public Builder resourceNames(String... resourceNames) { + this.resourceNames = resourceNames; + return this; + } + + public Builder nonResourceURLs(String... nonResourceURLs) { + this.nonResourceURLs = nonResourceURLs; + return this; + } + + public Builder verbs(String... verbs) { + this.verbs = verbs; + return this; + } + + public PolicyRule build() { + return new PolicyRule(apiGroups, resources, resourceNames, + nonResourceURLs, + verbs); + } + } + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/RoleBinding.java b/api/src/main/java/run/halo/app/core/extension/RoleBinding.java new file mode 100644 index 0000000..09ad638 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/RoleBinding.java @@ -0,0 +1,169 @@ +package run.halo.app.core.extension; + +import static run.halo.app.core.extension.RoleBinding.GROUP; +import static run.halo.app.core.extension.RoleBinding.KIND; +import static run.halo.app.core.extension.RoleBinding.VERSION; + +import java.util.LinkedList; +import java.util.List; +import java.util.Set; +import java.util.function.Predicate; +import lombok.AllArgsConstructor; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.NoArgsConstructor; +import lombok.ToString; +import org.springframework.util.StringUtils; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.ExtensionOperator; +import run.halo.app.extension.GVK; +import run.halo.app.extension.Metadata; + +/** + * RoleBinding references a role, but does not contain it. + * It can reference a Role in the global. + * It adds who information via Subjects. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@ToString(callSuper = true) +@GVK(group = GROUP, + version = VERSION, + kind = KIND, + plural = "rolebindings", + singular = "rolebinding") +public class RoleBinding extends AbstractExtension { + + public static final String GROUP = ""; + + public static final String VERSION = "v1alpha1"; + + public static final String KIND = "RoleBinding"; + + /** + * Subjects holds references to the objects the role applies to. + */ + List subjects; + + /** + * RoleRef can reference a Role in the current namespace or a ClusterRole in the global + * namespace. + * If the RoleRef cannot be resolved, the Authorizer must return an error. + */ + RoleRef roleRef; + + /** + * RoleRef contains information that points to the role being used. + * + * @author guqing + * @since 2.0.0 + */ + @Data + public static class RoleRef { + + /** + * Kind is the type of resource being referenced. + */ + String kind; + + /** + * Name is the name of resource being referenced. + */ + String name; + + /** + * APIGroup is the group for the resource being referenced. + */ + String apiGroup; + } + + /** + * @author guqing + * @since 2.0.0 + */ + @Data + @NoArgsConstructor + @AllArgsConstructor + public static class Subject { + /** + * Kind of object being referenced. Values defined by this API group are "User", "Group", + * and "ServiceAccount". + * If the Authorizer does not recognize the kind value, the Authorizer should report + * an error. + */ + String kind; + + /** + * Name of the object being referenced. + */ + String name; + + /** + * APIGroup holds the API group of the referenced subject. + * Defaults to "" for ServiceAccount subjects. + * Defaults to "rbac.authorization.halo.run" for User and Group subjects. + */ + String apiGroup; + + public static Predicate isUser(String username) { + return subject -> User.KIND.equals(subject.getKind()) + && User.GROUP.equals(subject.getApiGroup()) + && username.equals(subject.getName()); + } + + public static Predicate containsUser(Set usernames) { + return subject -> User.KIND.equals(subject.getKind()) + && User.GROUP.equals(subject.apiGroup) + && usernames.contains(subject.getName()); + } + + @Override + public String toString() { + if (StringUtils.hasText(apiGroup)) { + return apiGroup + "/" + kind + "/" + name; + } + return kind + "/" + name; + } + } + + public static RoleBinding create(String username, String roleName) { + var metadata = new Metadata(); + metadata.setName(String.join("-", username, roleName, "binding")); + + var roleRef = new RoleRef(); + roleRef.setKind(Role.KIND); + roleRef.setName(roleName); + roleRef.setApiGroup(Role.GROUP); + + var subject = new Subject(); + subject.setKind(User.KIND); + subject.setName(username); + subject.setApiGroup(User.GROUP); + + var binding = new RoleBinding(); + binding.setMetadata(metadata); + binding.setRoleRef(roleRef); + + // keep the subjects mutable + var subjects = new LinkedList(); + subjects.add(subject); + + binding.setSubjects(subjects); + return binding; + } + + public static Predicate containsUser(String username) { + return ExtensionOperator.isNotDeleted().and( + binding -> binding.getSubjects().stream() + .anyMatch(Subject.isUser(username))); + } + + public static Predicate containsUser(Set usernames) { + return ExtensionOperator.isNotDeleted() + .and(binding -> binding.getSubjects().stream() + .anyMatch(Subject.containsUser(usernames))); + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/Setting.java b/api/src/main/java/run/halo/app/core/extension/Setting.java new file mode 100644 index 0000000..8820d00 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/Setting.java @@ -0,0 +1,51 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static run.halo.app.extension.GroupVersionKind.fromExtension; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.GroupVersionKind; + +/** + * {@link Setting} is a custom extension to generate forms based on configuration. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "", version = "v1alpha1", kind = Setting.KIND, + plural = "settings", singular = "setting") +public class Setting extends AbstractExtension { + + public static final String KIND = "Setting"; + + public static final GroupVersionKind GVK = fromExtension(Setting.class); + + @Schema(requiredMode = REQUIRED) + private SettingSpec spec; + + @Data + public static class SettingSpec { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private List forms; + } + + @Data + public static class SettingForm { + + @Schema(requiredMode = REQUIRED) + private String group; + + private String label; + + @Schema(requiredMode = REQUIRED) + private List formSchema; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/Theme.java b/api/src/main/java/run/halo/app/core/extension/Theme.java new file mode 100644 index 0000000..ccb7b80 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/Theme.java @@ -0,0 +1,177 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import org.apache.commons.lang3.ObjectUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.infra.ConditionList; +import run.halo.app.infra.model.License; + +/** + *

Theme extension.

+ * + * @author guqing + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "theme.halo.run", version = "v1alpha1", kind = Theme.KIND, + plural = "themes", singular = "theme") +public class Theme extends AbstractExtension { + + public static final String KIND = "Theme"; + + public static final String THEME_NAME_LABEL = "theme.halo.run/theme-name"; + + @Schema(requiredMode = REQUIRED) + private ThemeSpec spec; + + private ThemeStatus status; + + @Data + @ToString + public static class ThemeSpec { + private static final String WILDCARD = "*"; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String displayName; + + @Schema(requiredMode = REQUIRED) + private Author author; + + private String description; + + private String logo; + + @Deprecated(forRemoval = true, since = "2.7.0") + private String website; + + private String homepage; + + private String repo; + + private String issues; + + private String version; + + @Deprecated(forRemoval = true, since = "2.2.0") + @Schema(description = "Deprecated, use `requires` instead.") + private String require; + + @Schema(requiredMode = NOT_REQUIRED) + private String requires; + + private String settingName; + + private String configMapName; + + private List license; + + @Schema + private CustomTemplates customTemplates; + + @NonNull + public String getVersion() { + return StringUtils.defaultString(this.version, WILDCARD); + } + + /** + * if requires is not empty, then return requires, else return require or {@code WILDCARD}. + * + * @return requires to satisfies system version + */ + @NonNull + public String getRequires() { + if (StringUtils.isNotBlank(this.requires)) { + return this.requires; + } + return StringUtils.defaultString(this.require, WILDCARD); + } + + /** + * Compatible with {@link #website} property. + */ + public String getHomepage() { + return StringUtils.defaultString(this.homepage, this.website); + } + } + + @Data + public static class ThemeStatus { + private ThemePhase phase; + private ConditionList conditions; + private String location; + } + + /** + * Null-safe get {@link ConditionList} from theme status. + * + * @param theme theme must not be null + * @return condition list + */ + public static ConditionList nullSafeConditionList(Theme theme) { + Assert.notNull(theme, "The theme must not be null"); + ThemeStatus status = ObjectUtils.defaultIfNull(theme.getStatus(), new ThemeStatus()); + theme.setStatus(status); + + ConditionList conditions = + ObjectUtils.defaultIfNull(status.getConditions(), new ConditionList()); + status.setConditions(conditions); + return conditions; + } + + public enum ThemePhase { + READY, + FAILED, + UNKNOWN, + } + + @Data + @ToString + public static class Author { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String name; + + private String website; + } + + @Data + public static class CustomTemplates { + private List post; + private List category; + private List page; + } + + /** + * Type used to describe custom template page. + * + * @author guqing + * @since 2.0.0 + */ + @Data + public static class TemplateDescriptor { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String name; + + private String description; + + private String screenshot; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String file; + } + +} diff --git a/api/src/main/java/run/halo/app/core/extension/User.java b/api/src/main/java/run/halo/app/core/extension/User.java new file mode 100644 index 0000000..f925bc9 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/User.java @@ -0,0 +1,117 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static run.halo.app.core.extension.User.GROUP; +import static run.halo.app.core.extension.User.KIND; +import static run.halo.app.core.extension.User.VERSION; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + * The extension represents user details of Halo. + * + * @author johnniang + */ +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = GROUP, + version = VERSION, + kind = KIND, + singular = "user", + plural = "users") +public class User extends AbstractExtension { + + public static final String GROUP = ""; + public static final String VERSION = "v1alpha1"; + public static final String KIND = "User"; + + public static final String USER_RELATED_ROLES_INDEX = "roles"; + + public static final String ROLE_NAMES_ANNO = "rbac.authorization.halo.run/role-names"; + + public static final String EMAIL_TO_VERIFY = "halo.run/email-to-verify"; + + public static final String LAST_AVATAR_ATTACHMENT_NAME_ANNO = + "halo.run/last-avatar-attachment-name"; + + public static final String AVATAR_ATTACHMENT_NAME_ANNO = "halo.run/avatar-attachment-name"; + + public static final String HIDDEN_USER_LABEL = "halo.run/hidden-user"; + + public static final String REQUEST_TO_UPDATE = "halo.run/request-to-update"; + + @Schema(requiredMode = REQUIRED) + private UserSpec spec = new UserSpec(); + + private UserStatus status = new UserStatus(); + + @Data + public static class UserSpec { + + @Schema(requiredMode = REQUIRED) + private String displayName; + + private String avatar; + + @Schema(requiredMode = REQUIRED) + private String email; + + private boolean emailVerified; + + private String phone; + + private String password; + + private String bio; + + private Instant registeredAt; + + private Boolean twoFactorAuthEnabled; + + private String totpEncryptedSecret; + + private Boolean disabled; + + private Integer loginHistoryLimit; + + } + + @Data + public static class UserStatus { + + private Instant lastLoginAt; + + private String permalink; + + private List loginHistories; + + } + + @Data + public static class LoginHistory { + + @Schema(requiredMode = REQUIRED) + private Instant loginAt; + + @Schema(requiredMode = REQUIRED) + private String sourceIp; + + @Schema(requiredMode = REQUIRED) + private String userAgent; + + @Schema(requiredMode = REQUIRED) + private Boolean successful; + + private String reason; + + } + +} diff --git a/api/src/main/java/run/halo/app/core/extension/UserConnection.java b/api/src/main/java/run/halo/app/core/extension/UserConnection.java new file mode 100644 index 0000000..1b9fb72 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/UserConnection.java @@ -0,0 +1,83 @@ +package run.halo.app.core.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import lombok.Data; +import lombok.EqualsAndHashCode; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.Metadata; + +/** + * User connection extension. + * + * @author guqing + * @since 2.4.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "auth.halo.run", version = "v1alpha1", kind = "UserConnection", + singular = "userconnection", plural = "userconnections") +public class UserConnection extends AbstractExtension { + + @Schema(requiredMode = REQUIRED) + private UserConnectionSpec spec; + + @Data + public static class UserConnectionSpec { + + /** + * The name of the OAuth provider (e.g. Google, Facebook, Twitter). + */ + @Schema(requiredMode = REQUIRED) + private String registrationId; + + /** + * The {@link Metadata#getName()} of the user associated with the OAuth connection. + */ + @Schema(requiredMode = REQUIRED) + private String username; + + /** + * The unique identifier for the user's connection to the OAuth provider. + * for example, the user's GitHub id. + */ + @Schema(requiredMode = REQUIRED) + private String providerUserId; + + /** + * The display name for the user's connection to the OAuth provider. + */ + @Schema(requiredMode = REQUIRED) + private String displayName; + + /** + * The URL to the user's profile page on the OAuth provider. + * For example, the user's GitHub profile URL. + */ + private String profileUrl; + + /** + * The URL to the user's avatar image on the OAuth provider. + * For example, the user's GitHub avatar URL. + */ + private String avatarUrl; + + /** + * The access token provided by the OAuth provider. + */ + @Schema(requiredMode = REQUIRED) + private String accessToken; + + /** + * The refresh token provided by the OAuth provider (if applicable). + */ + private String refreshToken; + + private Instant expiresAt; + + private Instant updatedAt; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/attachment/Attachment.java b/api/src/main/java/run/halo/app/core/extension/attachment/Attachment.java new file mode 100644 index 0000000..974c977 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/attachment/Attachment.java @@ -0,0 +1,68 @@ +package run.halo.app.core.extension.attachment; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static run.halo.app.core.extension.attachment.Attachment.KIND; + +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.Set; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, kind = KIND, + plural = "attachments", singular = "attachment") +public class Attachment extends AbstractExtension { + + public static final String KIND = "Attachment"; + + @Schema(requiredMode = REQUIRED) + private AttachmentSpec spec; + + private AttachmentStatus status; + + @Data + public static class AttachmentSpec { + + @Schema(description = "Display name of attachment") + private String displayName; + + @Schema(description = "Group name") + private String groupName; + + @Schema(description = "Policy name") + private String policyName; + + @Schema(description = "Name of User who uploads the attachment") + private String ownerName; + + @Schema(description = "Media type of attachment") + private String mediaType; + + @Schema(description = "Size of attachment. Unit is Byte", minimum = "0") + private Long size; + + @ArraySchema( + arraySchema = @Schema(description = "Tags of attachment"), + schema = @Schema(description = "Tag name")) + private Set tags; + + } + + @Data + public static class AttachmentStatus { + + @Schema(description = """ + Permalink of attachment. + If it is in local storage, the public URL will be set. + If it is in s3 storage, the Object URL will be set. + """) + private String permalink; + + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/attachment/Constant.java b/api/src/main/java/run/halo/app/core/extension/attachment/Constant.java new file mode 100644 index 0000000..9528df6 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/attachment/Constant.java @@ -0,0 +1,28 @@ +package run.halo.app.core.extension.attachment; + +import run.halo.app.core.extension.attachment.endpoint.AttachmentHandler; + +public enum Constant { + ; + + public static final String GROUP = "storage.halo.run"; + public static final String VERSION = "v1alpha1"; + /** + * The relative path starting from attachments folder is for deletion. + */ + public static final String LOCAL_REL_PATH_ANNO_KEY = GROUP + "/local-relative-path"; + /** + * The encoded URI is for building external url. + */ + public static final String URI_ANNO_KEY = GROUP + "/uri"; + + /** + * Do not use this key to set external link. You could implement + * {@link AttachmentHandler#getPermalink} by your self. + *

+ */ + public static final String EXTERNAL_LINK_ANNO_KEY = GROUP + "/external-link"; + + public static final String FINALIZER_NAME = "attachment-manager"; + +} diff --git a/api/src/main/java/run/halo/app/core/extension/attachment/Group.java b/api/src/main/java/run/halo/app/core/extension/attachment/Group.java new file mode 100644 index 0000000..dcc6179 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/attachment/Group.java @@ -0,0 +1,48 @@ +package run.halo.app.core.extension.attachment; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static run.halo.app.core.extension.attachment.Group.KIND; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, kind = KIND, + plural = "groups", singular = "group") +public class Group extends AbstractExtension { + + public static final String KIND = "Group"; + public static final String HIDDEN_LABEL = "halo.run/hidden"; + + @Schema(requiredMode = REQUIRED) + private GroupSpec spec; + + private GroupStatus status; + + @Data + public static class GroupSpec { + + @Schema(requiredMode = REQUIRED, description = "Display name of group") + private String displayName; + + } + + @Data + public static class GroupStatus { + + @Schema(description = "Update timestamp of the group") + private Instant updateTimestamp; + + @Schema(description = "Total of attachments under the current group", minimum = "0") + private Long totalAttachments; + + } + +} diff --git a/api/src/main/java/run/halo/app/core/extension/attachment/Policy.java b/api/src/main/java/run/halo/app/core/extension/attachment/Policy.java new file mode 100644 index 0000000..450548a --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/attachment/Policy.java @@ -0,0 +1,39 @@ +package run.halo.app.core.extension.attachment; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static run.halo.app.core.extension.attachment.Policy.KIND; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, kind = KIND, + plural = "policies", singular = "policy") +public class Policy extends AbstractExtension { + + public static final String KIND = "Policy"; + + @Schema(requiredMode = REQUIRED) + private PolicySpec spec; + + @Data + public static class PolicySpec { + + @Schema(requiredMode = REQUIRED, description = "Display name of policy") + private String displayName; + + @Schema(requiredMode = REQUIRED, description = "Reference name of PolicyTemplate") + private String templateName; + + @Schema(description = "Reference name of ConfigMap extension") + private String configMapName; + + } + +} diff --git a/api/src/main/java/run/halo/app/core/extension/attachment/PolicyTemplate.java b/api/src/main/java/run/halo/app/core/extension/attachment/PolicyTemplate.java new file mode 100644 index 0000000..509f08a --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/attachment/PolicyTemplate.java @@ -0,0 +1,34 @@ +package run.halo.app.core.extension.attachment; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static run.halo.app.core.extension.attachment.PolicyTemplate.KIND; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, kind = KIND, + plural = "policytemplates", singular = "policytemplate") +public class PolicyTemplate extends AbstractExtension { + + public static final String KIND = "PolicyTemplate"; + + private PolicyTemplateSpec spec; + + @Data + public static class PolicyTemplateSpec { + + private String displayName; + + @Schema(requiredMode = REQUIRED) + private String settingName; + + } + +} diff --git a/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/AttachmentHandler.java b/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/AttachmentHandler.java new file mode 100644 index 0000000..38369f7 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/AttachmentHandler.java @@ -0,0 +1,74 @@ +package run.halo.app.core.extension.attachment.endpoint; + +import java.net.URI; +import java.time.Duration; +import org.pf4j.ExtensionPoint; +import org.springframework.http.codec.multipart.FilePart; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.attachment.Policy; +import run.halo.app.extension.ConfigMap; + +public interface AttachmentHandler extends ExtensionPoint { + + Mono upload(UploadContext context); + + Mono delete(DeleteContext context); + + /** + * Gets a shared URL which could be accessed publicly. + * 1. If the attachment is in local storage, the permalink will be returned. + * 2. If the attachment is in s3 storage, the Presigned URL will be returned. + *

+ * Please note that the default implementation is only for back compatibility. + * + * @param attachment contains detail of attachment. + * @param policy is storage policy. + * @param configMap contains configuration needed by handler. + * @param ttl indicates how long the URL is alive. + * @return shared URL which could be accessed publicly. Might be relative URL. + */ + default Mono getSharedURL(Attachment attachment, + Policy policy, + ConfigMap configMap, + Duration ttl) { + return Mono.empty(); + } + + /** + * Gets a permalink representing a unique attachment. + * If the attachment is in local storage, the permalink will be returned. + * If the attachment is in s3 storage, the Object URL will be returned. + *

+ * Please note that the default implementation is only for back compatibility. + * + * @param attachment contains detail of attachment. + * @param policy is storage policy. + * @param configMap contains configuration needed by handler. + * @return permalink representing a unique attachment. Might be relative URL. + */ + default Mono getPermalink(Attachment attachment, + Policy policy, + ConfigMap configMap) { + return Mono.empty(); + } + + interface UploadContext { + + FilePart file(); + + Policy policy(); + + ConfigMap configMap(); + + } + + interface DeleteContext { + Attachment attachment(); + + Policy policy(); + + ConfigMap configMap(); + } + +} diff --git a/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/DeleteOption.java b/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/DeleteOption.java new file mode 100644 index 0000000..1235954 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/DeleteOption.java @@ -0,0 +1,9 @@ +package run.halo.app.core.extension.attachment.endpoint; + +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.attachment.Policy; +import run.halo.app.extension.ConfigMap; + +public record DeleteOption(Attachment attachment, Policy policy, ConfigMap configMap) + implements AttachmentHandler.DeleteContext { +} diff --git a/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/SimpleFilePart.java b/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/SimpleFilePart.java new file mode 100644 index 0000000..e2a9d26 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/SimpleFilePart.java @@ -0,0 +1,40 @@ +package run.halo.app.core.extension.attachment.endpoint; + +import java.nio.file.Path; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.core.io.buffer.DataBufferUtils; +import org.springframework.http.HttpHeaders; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +/** + * SimpleFilePart is an adapter of simple data for uploading. + * + * @param filename is name of the attachment file. + * @param content is binary data of the attachment file. + * @param mediaType is media type of the attachment file. + */ +public record SimpleFilePart( + String filename, + Flux content, + MediaType mediaType +) implements FilePart { + @Override + public Mono transferTo(Path dest) { + return DataBufferUtils.write(content(), dest); + } + + @Override + public String name() { + return filename(); + } + + @Override + public HttpHeaders headers() { + var headers = new HttpHeaders(); + headers.setContentType(mediaType); + return HttpHeaders.readOnlyHttpHeaders(headers); + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/UploadOption.java b/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/UploadOption.java new file mode 100644 index 0000000..0a050ef --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/attachment/endpoint/UploadOption.java @@ -0,0 +1,23 @@ +package run.halo.app.core.extension.attachment.endpoint; + +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import reactor.core.publisher.Flux; +import run.halo.app.core.extension.attachment.Policy; +import run.halo.app.extension.ConfigMap; + +public record UploadOption(FilePart file, + Policy policy, + ConfigMap configMap) implements AttachmentHandler.UploadContext { + + public static UploadOption from(String filename, + Flux content, + MediaType mediaType, + Policy policy, + ConfigMap configMap) { + var filePart = new SimpleFilePart(filename, content, mediaType); + return new UploadOption(filePart, policy, configMap); + } + +} diff --git a/api/src/main/java/run/halo/app/core/extension/content/Category.java b/api/src/main/java/run/halo/app/core/extension/content/Category.java new file mode 100644 index 0000000..245f681 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/content/Category.java @@ -0,0 +1,117 @@ +package run.halo.app.core.extension.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static run.halo.app.core.extension.content.Category.KIND; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.GroupVersionKind; + +/** + * @author guqing + * @see issue#2322 + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, + kind = KIND, plural = "categories", singular = "category") +@EqualsAndHashCode(callSuper = true) +public class Category extends AbstractExtension { + + public static final String KIND = "Category"; + public static final String LAST_HIDDEN_STATE_ANNO = "content.halo.run/last-hidden-state"; + + public static final GroupVersionKind GVK = GroupVersionKind.fromExtension(Category.class); + + @Schema(requiredMode = REQUIRED) + private CategorySpec spec; + + @Schema + private CategoryStatus status; + + @JsonIgnore + public boolean isDeleted() { + return getMetadata().getDeletionTimestamp() != null; + } + + @Data + public static class CategorySpec { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String displayName; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String slug; + + private String description; + + private String cover; + + @Schema(requiredMode = NOT_REQUIRED, maxLength = 255) + private String template; + + /** + *

Used to specify the template for the posts associated with the category.

+ *

The priority is not as high as that of the post.

+ *

If the post also specifies a template, the post's template will prevail.

+ */ + @Schema(requiredMode = NOT_REQUIRED, maxLength = 255) + private String postTemplate; + + @Schema(requiredMode = REQUIRED, defaultValue = "0") + private Integer priority; + + private List children; + + /** + *

if a category is queried for related posts, the default behavior is to + * query all posts under the category including its subcategories, but if this field is + * set to true, cascade query behavior will be terminated here.

+ *

For example, if a category has subcategories A and B, and A has subcategories C and + * D and C marked this field as true, when querying posts under A category,all posts under A + * and B will be queried, but C and D will not be queried.

+ */ + private boolean preventParentPostCascadeQuery; + + /** + *

Whether to hide the category from the category list.

+ *

When set to true, the category including its subcategories and related posts will + * not be displayed in the category list, but it can still be accessed by permalink.

+ *

Limitation: It only takes effect on the theme-side categorized list and it only + * allows to be set to true on the first level(root node) of categories.

+ */ + private boolean hideFromList; + } + + @JsonIgnore + public CategoryStatus getStatusOrDefault() { + if (this.status == null) { + this.status = new CategoryStatus(); + } + return this.status; + } + + @Data + public static class CategoryStatus { + + private String permalink; + + /** + * 包括当前和其下所有层级的文章数量 (depth=max). + */ + public Integer postCount; + + /** + * 包括当前和其下所有层级的已发布且公开的文章数量 (depth=max). + */ + public Integer visiblePostCount; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/content/Comment.java b/api/src/main/java/run/halo/app/core/extension/content/Comment.java new file mode 100644 index 0000000..b77dc4e --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/content/Comment.java @@ -0,0 +1,164 @@ +package run.halo.app.core.extension.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import java.util.List; +import java.util.Map; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import org.springframework.lang.Nullable; +import org.springframework.util.CollectionUtils; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.Ref; + +/** + * @author guqing + * @see issue#2322 + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, kind = Comment.KIND, + plural = "comments", singular = "comment") +@EqualsAndHashCode(callSuper = true) +public class Comment extends AbstractExtension { + + public static final String KIND = "Comment"; + + public static final String REQUIRE_SYNC_ON_STARTUP_INDEX_NAME = "requireSyncOnStartup"; + + @Schema(requiredMode = REQUIRED) + private CommentSpec spec; + + @Schema + private CommentStatus status; + + @JsonIgnore + public CommentStatus getStatusOrDefault() { + if (this.status == null) { + this.status = new CommentStatus(); + } + return this.status; + } + + @Data + @ToString(callSuper = true) + @EqualsAndHashCode(callSuper = true) + public static class CommentSpec extends BaseCommentSpec { + + @Schema(requiredMode = REQUIRED) + private Ref subjectRef; + + private Instant lastReadTime; + } + + @Data + public static class BaseCommentSpec { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String raw; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String content; + + @Schema(requiredMode = REQUIRED) + private CommentOwner owner; + + private String userAgent; + + private String ipAddress; + + private Instant approvedTime; + + /** + * The user-defined creation time default is metadata.creationTimestamp. + */ + private Instant creationTime; + + @Schema(requiredMode = REQUIRED, defaultValue = "0") + private Integer priority; + + @Schema(requiredMode = REQUIRED, defaultValue = "false") + private Boolean top; + + @Schema(requiredMode = REQUIRED, defaultValue = "true") + private Boolean allowNotification; + + @Schema(requiredMode = REQUIRED, defaultValue = "false") + private Boolean approved; + + @Schema(requiredMode = REQUIRED, defaultValue = "false") + private Boolean hidden; + } + + @Data + public static class CommentOwner { + public static final String KIND_EMAIL = "Email"; + public static final String AVATAR_ANNO = "avatar"; + public static final String WEBSITE_ANNO = "website"; + public static final String EMAIL_HASH_ANNO = "email-hash"; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String kind; + + @Schema(requiredMode = REQUIRED, maxLength = 64) + private String name; + + private String displayName; + + private Map annotations; + + @Nullable + @JsonIgnore + public String getAnnotation(String key) { + return annotations == null ? null : annotations.get(key); + } + + public static String ownerIdentity(String kind, String name) { + return kind + "#" + name; + } + } + + @Data + public static class CommentStatus { + + private Instant lastReplyTime; + + private Integer replyCount; + + private Integer visibleReplyCount; + + private Integer unreadReplyCount; + + private Boolean hasNewReply; + + private Long observedVersion; + } + + public static String toSubjectRefKey(Ref subjectRef) { + return subjectRef.getGroup() + "/" + subjectRef.getKind() + "/" + subjectRef.getName(); + } + + public static int getUnreadReplyCount(List replies, Instant lastReadTime) { + if (CollectionUtils.isEmpty(replies)) { + return 0; + } + long unreadReplyCount = replies.stream() + .filter(existingReply -> { + if (lastReadTime == null) { + return true; + } + Instant creationTime = defaultIfNull(existingReply.getSpec().getCreationTime(), + existingReply.getMetadata().getCreationTimestamp()); + return creationTime.isAfter(lastReadTime); + }) + .count(); + return (int) unreadReplyCount; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/content/Constant.java b/api/src/main/java/run/halo/app/core/extension/content/Constant.java new file mode 100644 index 0000000..154b4ba --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/content/Constant.java @@ -0,0 +1,13 @@ +package run.halo.app.core.extension.content; + +public enum Constant { + ; + + public static final String GROUP = "content.halo.run"; + public static final String VERSION = "v1alpha1"; + + public static final String LAST_READ_TIME_ANNO = "content.halo.run/last-read-time"; + public static final String PERMALINK_PATTERN_ANNO = "content.halo.run/permalink-pattern"; + + public static final String CHECKSUM_CONFIG_ANNO = "checksum/config"; +} diff --git a/api/src/main/java/run/halo/app/core/extension/content/Post.java b/api/src/main/java/run/halo/app/core/extension/content/Post.java new file mode 100644 index 0000000..0cc785d --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/content/Post.java @@ -0,0 +1,245 @@ +package run.halo.app.core.extension.content; + +import static java.lang.Boolean.parseBoolean; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import io.swagger.v3.oas.annotations.media.Schema; +import io.swagger.v3.oas.annotations.media.Schema.RequiredMode; +import java.time.Instant; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.MetadataOperator; +import run.halo.app.infra.ConditionList; + +/** + *

Post extension.

+ * + * @author guqing + * @see issue#2322 + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, kind = Post.KIND, + plural = "posts", singular = "post") +@EqualsAndHashCode(callSuper = true) +public class Post extends AbstractExtension { + + public static final String KIND = "Post"; + + public static final String REQUIRE_SYNC_ON_STARTUP_INDEX_NAME = "requireSyncOnStartup"; + + public static final GroupVersionKind GVK = GroupVersionKind.fromExtension(Post.class); + + public static final String CATEGORIES_ANNO = "content.halo.run/categories"; + public static final String LAST_RELEASED_SNAPSHOT_ANNO = + "content.halo.run/last-released-snapshot"; + public static final String LAST_ASSOCIATED_TAGS_ANNO = "content.halo.run/last-associated-tags"; + public static final String LAST_ASSOCIATED_CATEGORIES_ANNO = + "content.halo.run/last-associated-categories"; + + public static final String STATS_ANNO = "content.halo.run/stats"; + + /** + *

The key of the label that indicates that the post is scheduled to be published.

+ *

Can be used to query posts that are scheduled to be published.

+ */ + public static final String SCHEDULING_PUBLISH_LABEL = "content.halo.run/scheduling-publish"; + + public static final String DELETED_LABEL = "content.halo.run/deleted"; + public static final String PUBLISHED_LABEL = "content.halo.run/published"; + public static final String OWNER_LABEL = "content.halo.run/owner"; + public static final String VISIBLE_LABEL = "content.halo.run/visible"; + + public static final String ARCHIVE_YEAR_LABEL = "content.halo.run/archive-year"; + + public static final String ARCHIVE_MONTH_LABEL = "content.halo.run/archive-month"; + public static final String ARCHIVE_DAY_LABEL = "content.halo.run/archive-day"; + + @Schema(requiredMode = RequiredMode.REQUIRED) + private PostSpec spec; + + @Schema + private PostStatus status; + + @JsonIgnore + public PostStatus getStatusOrDefault() { + if (this.status == null) { + this.status = new PostStatus(); + } + return status; + } + + @JsonIgnore + public boolean isDeleted() { + return Objects.equals(true, spec.getDeleted()) + || getMetadata().getDeletionTimestamp() != null; + } + + @JsonIgnore + public boolean isPublished() { + return isPublished(this.getMetadata()); + } + + public static boolean isPublished(MetadataOperator metadata) { + var labels = metadata.getLabels(); + return labels != null && parseBoolean(labels.getOrDefault(PUBLISHED_LABEL, "false")); + } + + public static boolean isRecycled(MetadataOperator metadata) { + var labels = metadata.getLabels(); + return labels != null && parseBoolean(labels.getOrDefault(DELETED_LABEL, "false")); + } + + public static boolean isPublic(PostSpec spec) { + return spec.getVisible() == null || VisibleEnum.PUBLIC.equals(spec.getVisible()); + } + + @Data + public static class PostSpec { + @Schema(requiredMode = RequiredMode.REQUIRED, minLength = 1) + private String title; + + @Schema(requiredMode = RequiredMode.REQUIRED, minLength = 1) + private String slug; + + /** + * 文章引用到的已发布的内容，用于主题端显示. + */ + private String releaseSnapshot; + + private String headSnapshot; + + private String baseSnapshot; + + private String owner; + + private String template; + + private String cover; + + @Schema(requiredMode = RequiredMode.REQUIRED, defaultValue = "false") + private Boolean deleted; + + @Schema(requiredMode = RequiredMode.REQUIRED, defaultValue = "false") + private Boolean publish; + + private Instant publishTime; + + @Schema(requiredMode = RequiredMode.REQUIRED, defaultValue = "false") + private Boolean pinned; + + @Schema(requiredMode = RequiredMode.REQUIRED, defaultValue = "true") + private Boolean allowComment; + + @Schema(requiredMode = RequiredMode.REQUIRED, defaultValue = "PUBLIC") + private VisibleEnum visible; + + @Schema(requiredMode = RequiredMode.REQUIRED, defaultValue = "0") + private Integer priority; + + @Schema(requiredMode = RequiredMode.REQUIRED) + private Excerpt excerpt; + + private List categories; + + private List tags; + + private List> htmlMetas; + } + + @Data + public static class PostStatus { + @Schema(requiredMode = RequiredMode.REQUIRED) + private String phase; + + @Schema + private ConditionList conditions; + + private String permalink; + + private String excerpt; + + private Boolean inProgress; + + private Integer commentsCount; + + private List contributors; + + /** + * see {@link Category.CategorySpec#isHideFromList()}. + */ + private Boolean hideFromList; + + private Instant lastModifyTime; + + private Long observedVersion; + + @JsonIgnore + public ConditionList getConditionsOrDefault() { + if (this.conditions == null) { + this.conditions = new ConditionList(); + } + return conditions; + } + } + + @Data + public static class Excerpt { + + @Schema(requiredMode = RequiredMode.REQUIRED, defaultValue = "true") + private Boolean autoGenerate; + + private String raw; + } + + public enum PostPhase { + DRAFT, + PENDING_APPROVAL, + PUBLISHED, + FAILED; + + /** + * Convert string value to {@link PostPhase}. + * + * @param value enum value string + * @return {@link PostPhase} if found, otherwise null + */ + public static PostPhase from(String value) { + for (PostPhase phase : PostPhase.values()) { + if (phase.name().equalsIgnoreCase(value)) { + return phase; + } + } + return null; + } + } + + public enum VisibleEnum { + PUBLIC, + INTERNAL, + PRIVATE; + + /** + * Convert value string to {@link VisibleEnum}. + * + * @param value enum value string + * @return {@link VisibleEnum} if found, otherwise null + */ + public static VisibleEnum from(String value) { + for (VisibleEnum visible : VisibleEnum.values()) { + if (visible.name().equalsIgnoreCase(value)) { + return visible; + } + } + return null; + } + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/content/Reply.java b/api/src/main/java/run/halo/app/core/extension/content/Reply.java new file mode 100644 index 0000000..b7b1dfe --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/content/Reply.java @@ -0,0 +1,56 @@ +package run.halo.app.core.extension.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.Getter; +import lombok.ToString; +import org.springframework.lang.NonNull; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + * @author guqing + * @see issue#2322 + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, kind = Reply.KIND, + plural = "replies", singular = "reply") +@EqualsAndHashCode(callSuper = true) +public class Reply extends AbstractExtension { + + public static final String KIND = "Reply"; + + public static final String REQUIRE_SYNC_ON_STARTUP_INDEX_NAME = "requireSyncOnStartup"; + + @Schema(requiredMode = REQUIRED) + private ReplySpec spec; + + @Schema + @Getter(onMethod_ = @NonNull) + private Status status = new Status(); + + @Data + @EqualsAndHashCode(callSuper = true) + public static class ReplySpec extends Comment.BaseCommentSpec { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String commentName; + + private String quoteReply; + } + + @Data + @Schema(name = "ReplyStatus") + public static class Status { + private Long observedVersion; + } + + public void setStatus(Status status) { + this.status = status == null ? new Status() : status; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/content/SinglePage.java b/api/src/main/java/run/halo/app/core/extension/content/SinglePage.java new file mode 100644 index 0000000..3742482 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/content/SinglePage.java @@ -0,0 +1,120 @@ +package run.halo.app.core.extension.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import java.util.List; +import java.util.Map; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.MetadataUtil; + +/** + *

Single page extension.

+ * + * @author guqing + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, kind = SinglePage.KIND, + plural = "singlepages", singular = "singlepage") +@EqualsAndHashCode(callSuper = true) +public class SinglePage extends AbstractExtension { + + public static final String KIND = "SinglePage"; + + public static final GroupVersionKind GVK = GroupVersionKind.fromExtension(SinglePage.class); + public static final String DELETED_LABEL = "content.halo.run/deleted"; + public static final String PUBLISHED_LABEL = "content.halo.run/published"; + public static final String LAST_RELEASED_SNAPSHOT_ANNO = + "content.halo.run/last-released-snapshot"; + public static final String OWNER_LABEL = "content.halo.run/owner"; + public static final String VISIBLE_LABEL = "content.halo.run/visible"; + + @Schema(requiredMode = REQUIRED) + private SinglePageSpec spec; + + @Schema + private SinglePageStatus status; + + @JsonIgnore + public SinglePageStatus getStatusOrDefault() { + if (this.status == null) { + this.status = new SinglePageStatus(); + } + return this.status; + } + + @JsonIgnore + public boolean isPublished() { + Map labels = getMetadata().getLabels(); + return labels != null && labels.getOrDefault(PUBLISHED_LABEL, "false").equals("true"); + } + + @Data + public static class SinglePageSpec { + @Schema(requiredMode = REQUIRED, minLength = 1) + private String title; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String slug; + + /** + * 引用到的已发布的内容，用于主题端显示. + */ + private String releaseSnapshot; + + private String headSnapshot; + + private String baseSnapshot; + + private String owner; + + private String template; + + private String cover; + + @Schema(requiredMode = REQUIRED, defaultValue = "false") + private Boolean deleted; + + @Schema(requiredMode = REQUIRED, defaultValue = "false") + private Boolean publish; + + private Instant publishTime; + + @Schema(requiredMode = REQUIRED, defaultValue = "false") + private Boolean pinned; + + @Schema(requiredMode = REQUIRED, defaultValue = "true") + private Boolean allowComment; + + @Schema(requiredMode = REQUIRED, defaultValue = "PUBLIC") + private Post.VisibleEnum visible; + + @Schema(requiredMode = REQUIRED, defaultValue = "0") + private Integer priority; + + @Schema(requiredMode = REQUIRED) + private Post.Excerpt excerpt; + + private List> htmlMetas; + } + + @Data + @EqualsAndHashCode(callSuper = true) + public static class SinglePageStatus extends Post.PostStatus { + + } + + public static void changePublishedState(SinglePage page, boolean value) { + Map labels = MetadataUtil.nullSafeLabels(page); + labels.put(PUBLISHED_LABEL, String.valueOf(value)); + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/content/Snapshot.java b/api/src/main/java/run/halo/app/core/extension/content/Snapshot.java new file mode 100644 index 0000000..3e58127 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/content/Snapshot.java @@ -0,0 +1,90 @@ +package run.halo.app.core.extension.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import java.util.LinkedHashSet; +import java.util.Set; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.Ref; + +/** + * @author guqing + * @see issue#2322 + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, kind = Snapshot.KIND, + plural = "snapshots", singular = "snapshot") +@EqualsAndHashCode(callSuper = true) +public class Snapshot extends AbstractExtension { + public static final String KIND = "Snapshot"; + public static final String KEEP_RAW_ANNO = "content.halo.run/keep-raw"; + public static final String PATCHED_CONTENT_ANNO = "content.halo.run/patched-content"; + public static final String PATCHED_RAW_ANNO = "content.halo.run/patched-raw"; + + @Schema(requiredMode = REQUIRED) + private SnapShotSpec spec; + + @Data + public static class SnapShotSpec { + + @Schema(requiredMode = REQUIRED) + private Ref subjectRef; + + /** + * such as: markdown | html | json | asciidoc | latex. + */ + @Schema(requiredMode = REQUIRED, minLength = 1, maxLength = 50) + private String rawType; + + private String rawPatch; + + private String contentPatch; + + private String parentSnapshotName; + + private Instant lastModifyTime; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String owner; + + private Set contributors; + } + + public static void addContributor(Snapshot snapshot, String name) { + Assert.notNull(name, "The username must not be null."); + Set contributors = snapshot.getSpec().getContributors(); + if (contributors == null) { + contributors = new LinkedHashSet<>(); + snapshot.getSpec().setContributors(contributors); + } + contributors.add(name); + } + + /** + * Check if the given snapshot is a base snapshot. + * + * @param snapshot must not be null. + * @return true if the given snapshot is a base snapshot; false otherwise. + */ + public static boolean isBaseSnapshot(@NonNull Snapshot snapshot) { + var annotations = snapshot.getMetadata().getAnnotations(); + if (annotations == null) { + return false; + } + return Boolean.parseBoolean(annotations.get(Snapshot.KEEP_RAW_ANNO)); + } + + public static String toSubjectRefKey(Ref subjectRef) { + return subjectRef.getGroup() + "/" + subjectRef.getKind() + "/" + subjectRef.getName(); + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/content/Tag.java b/api/src/main/java/run/halo/app/core/extension/content/Tag.java new file mode 100644 index 0000000..ea0654f --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/content/Tag.java @@ -0,0 +1,85 @@ +package run.halo.app.core.extension.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.GroupVersionKind; + +/** + * @author guqing + * @see issue#2322 + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@GVK(group = Constant.GROUP, version = Constant.VERSION, + kind = Tag.KIND, plural = "tags", singular = "tag") +@EqualsAndHashCode(callSuper = true) +public class Tag extends AbstractExtension { + + public static final String KIND = "Tag"; + + public static final GroupVersionKind GVK = GroupVersionKind.fromExtension(Tag.class); + + public static final String REQUIRE_SYNC_ON_STARTUP_INDEX_NAME = "requireSyncOnStartup"; + + @Schema(requiredMode = REQUIRED) + private TagSpec spec; + + @Schema + private TagStatus status; + + @Data + public static class TagSpec { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String displayName; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String slug; + + /** + * Color regex explanation. + * 
+         * ^                 # start of the line
+         * #                 # start with a number sign `#`
+         * (                 # start of (group 1)
+         *   [a-fA-F0-9]{6}  # support z-f, A-F and 0-9, with a length of 6
+         *   |               # or
+         *   [a-fA-F0-9]{3}  # support z-f, A-F and 0-9, with a length of 3
+         * )                 # end of (group 1)
+         * $                 # end of the line
+         *
+ */ + @Schema(pattern = "^#([a-fA-F0-9]{6}|[a-fA-F0-9]{3})$") + private String color; + + private String cover; + } + + @JsonIgnore + public TagStatus getStatusOrDefault() { + if (this.status == null) { + this.status = new TagStatus(); + } + return this.status; + } + + @Data + public static class TagStatus { + + private String permalink; + + public Integer visiblePostCount; + + public Integer postCount; + + private Long observedVersion; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/endpoint/CustomEndpoint.java b/api/src/main/java/run/halo/app/core/extension/endpoint/CustomEndpoint.java new file mode 100644 index 0000000..86acd19 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/endpoint/CustomEndpoint.java @@ -0,0 +1,20 @@ +package run.halo.app.core.extension.endpoint; + +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.extension.GroupVersion; + +/** + * RouterFunction provider for custom endpoints. + * + * @author johnniang + */ +public interface CustomEndpoint { + + RouterFunction endpoint(); + + default GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("api.console.halo.run/v1alpha1"); + } + +} diff --git a/api/src/main/java/run/halo/app/core/extension/endpoint/SortResolver.java b/api/src/main/java/run/halo/app/core/extension/endpoint/SortResolver.java new file mode 100644 index 0000000..9b9b9e6 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/endpoint/SortResolver.java @@ -0,0 +1,31 @@ +package run.halo.app.core.extension.endpoint; + +import org.springframework.core.MethodParameter; +import org.springframework.data.domain.Sort; +import org.springframework.data.web.ReactiveSortHandlerMethodArgumentResolver; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import org.springframework.web.server.ServerWebExchange; + +public interface SortResolver { + + SortResolver defaultInstance = new DefaultSortResolver(); + + @NonNull + Sort resolve(@NonNull ServerWebExchange exchange); + + class DefaultSortResolver extends ReactiveSortHandlerMethodArgumentResolver + implements SortResolver { + + @Override + @NonNull + protected Sort getDefaultFromAnnotationOrFallback(@Nullable MethodParameter parameter) { + return Sort.unsorted(); + } + + @Override + public Sort resolve(ServerWebExchange exchange) { + return resolveArgumentValue(null, null, exchange); + } + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/notification/Notification.java b/api/src/main/java/run/halo/app/core/extension/notification/Notification.java new file mode 100644 index 0000000..b10f08d --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/notification/Notification.java @@ -0,0 +1,58 @@ +package run.halo.app.core.extension.notification; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import lombok.Data; +import lombok.EqualsAndHashCode; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + *

{@link Notification} is a custom extension that used to store notification information for + * inner use, it's on-site notification.

+ * + *

Supports the following operations:

+ *
    + *
  • Marked as read: {@link NotificationSpec#setUnread(boolean)}
    • + *
  • Get the last read time: {@link NotificationSpec#getLastReadAt()}
    • + *
  • Filter by recipient: {@link NotificationSpec#getRecipient()}
    • + *
+ * + * @author guqing + * @see Reason + * @see ReasonType + * @since 2.10.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "notification.halo.run", version = "v1alpha1", kind = "Notification", plural = + "notifications", singular = "notification") +public class Notification extends AbstractExtension { + + @Schema + private NotificationSpec spec; + + @Data + public static class NotificationSpec { + @Schema(requiredMode = REQUIRED, minLength = 1, description = "The name of user") + private String recipient; + + @Schema(requiredMode = REQUIRED, minLength = 1, description = "The name of reason") + private String reason; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String title; + + @Schema(requiredMode = REQUIRED) + private String rawContent; + + @Schema(requiredMode = REQUIRED) + private String htmlContent; + + private boolean unread; + + private Instant lastReadAt; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/notification/NotificationTemplate.java b/api/src/main/java/run/halo/app/core/extension/notification/NotificationTemplate.java new file mode 100644 index 0000000..a7b0c8f --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/notification/NotificationTemplate.java @@ -0,0 +1,59 @@ +package run.halo.app.core.extension.notification; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + *

{@link NotificationTemplate} is a custom extension that defines a notification template.

+ *

It describes the notification template's name, description, and the template content.

+ *

{@link Spec#getReasonSelector()} is used to select the template by reasonType and language, + * if multiple templates are matched, the best match will be selected. This is useful when you + * want to override the default template.

+ * + * @author guqing + * @since 2.10.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "notification.halo.run", version = "v1alpha1", kind = "NotificationTemplate", + plural = "notificationtemplates", singular = "notificationtemplate") +public class NotificationTemplate extends AbstractExtension { + + @Schema + private Spec spec; + + @Data + @Schema(name = "NotificationTemplateSpec") + public static class Spec { + @Schema + private ReasonSelector reasonSelector; + + @Schema + private Template template; + } + + @Data + @Schema(name = "TemplateContent") + public static class Template { + @Schema(requiredMode = REQUIRED, minLength = 1) + private String title; + + private String htmlBody; + + private String rawBody; + } + + @Data + public static class ReasonSelector { + @Schema(requiredMode = REQUIRED, minLength = 1) + private String reasonType; + + @Schema(requiredMode = REQUIRED, minLength = 1, defaultValue = "default") + private String language; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/notification/NotifierDescriptor.java b/api/src/main/java/run/halo/app/core/extension/notification/NotifierDescriptor.java new file mode 100644 index 0000000..e7adb3f --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/notification/NotifierDescriptor.java @@ -0,0 +1,54 @@ +package run.halo.app.core.extension.notification; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + *

{@link NotifierDescriptor} is a custom extension that defines a notifier.

+ *

It describes the notifier's name, description, and the extension name of the notifier to + * let the user know what the notifier is and what it can do in the UI and also let the + * {@code NotificationCenter} know how to load the notifier and prepare the notifier's settings.

+ * + * @author guqing + * @since 2.10.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "notification.halo.run", version = "v1alpha1", kind = "NotifierDescriptor", + plural = "notifierDescriptors", singular = "notifierDescriptor") +public class NotifierDescriptor extends AbstractExtension { + + @Schema + private Spec spec; + + @Data + @Schema(name = "NotifierDescriptorSpec") + public static class Spec { + @Schema(requiredMode = REQUIRED, minLength = 1) + private String displayName; + + private String description; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String notifierExtName; + + private SettingRef senderSettingRef; + + private SettingRef receiverSettingRef; + } + + @Data + @Schema(name = "NotifierSettingRef") + public static class SettingRef { + @Schema(requiredMode = REQUIRED) + private String name; + + @Schema(requiredMode = REQUIRED) + private String group; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/notification/Reason.java b/api/src/main/java/run/halo/app/core/extension/notification/Reason.java new file mode 100644 index 0000000..3a83521 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/notification/Reason.java @@ -0,0 +1,72 @@ +package run.halo.app.core.extension.notification; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.AllArgsConstructor; +import lombok.Builder; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.NoArgsConstructor; +import lombok.experimental.Accessors; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.notification.ReasonAttributes; + +/** + *

{@link Reason} is a custom extension that defines a reason for a notification, It represents + * an instance of a {@link ReasonType}.

+ *

It can be understood as an event that triggers a notification.

+ * + * @author guqing + * @since 2.10.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "notification.halo.run", version = "v1alpha1", kind = "Reason", plural = + "reasons", singular = "reason") +public class Reason extends AbstractExtension { + + @Schema + private Spec spec; + + @Data + @Accessors(chain = true) + @Schema(name = "ReasonSpec") + public static class Spec { + @Schema(requiredMode = REQUIRED) + private String reasonType; + + @Schema(requiredMode = REQUIRED) + private Subject subject; + + @Schema(requiredMode = REQUIRED) + private String author; + + @Schema(implementation = ReasonAttributes.class, requiredMode = NOT_REQUIRED, + description = "Attributes used to transfer data") + private ReasonAttributes attributes; + } + + @Data + @Builder + @NoArgsConstructor + @AllArgsConstructor + @Schema(name = "ReasonSubject") + public static class Subject { + @Schema(requiredMode = REQUIRED) + private String apiVersion; + + @Schema(requiredMode = REQUIRED) + private String kind; + + @Schema(requiredMode = REQUIRED) + private String name; + + @Schema(requiredMode = REQUIRED) + private String title; + + private String url; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/notification/ReasonType.java b/api/src/main/java/run/halo/app/core/extension/notification/ReasonType.java new file mode 100644 index 0000000..222819f --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/notification/ReasonType.java @@ -0,0 +1,58 @@ +package run.halo.app.core.extension.notification; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + *

{@link ReasonType} is a custom extension that defines a type of reason.

+ *

One {@link ReasonType} can have multiple {@link Reason}s to notify.

+ * + * @author guqing + * @see NotificationTemplate + * @see Reason + * @since 2.10.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "notification.halo.run", version = "v1alpha1", kind = "ReasonType", + plural = "reasontypes", singular = "reasontype") +public class ReasonType extends AbstractExtension { + public static final String LOCALIZED_RESOURCE_NAME_ANNO = + "notification.halo.run/localized-resource-name"; + + @Schema + private Spec spec; + + @Data + @Schema(name = "ReasonTypeSpec") + public static class Spec { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String displayName; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String description; + + private List properties; + } + + @Data + public static class ReasonProperty { + @Schema(requiredMode = REQUIRED, minLength = 1) + private String name; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String type; + + private String description; + + @Schema(defaultValue = "false") + private boolean optional; + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/notification/Subscription.java b/api/src/main/java/run/halo/app/core/extension/notification/Subscription.java new file mode 100644 index 0000000..bd19c21 --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/notification/Subscription.java @@ -0,0 +1,144 @@ +package run.halo.app.core.extension.notification; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.apache.commons.lang3.StringUtils.defaultString; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.UUID; +import lombok.AllArgsConstructor; +import lombok.Builder; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.NoArgsConstructor; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + *

{@link Subscription} is a custom extension that defines a subscriber to be notified when a + * certain {@link Reason} is triggered.

+ *

It holds a {@link Subscriber} to the user to be notified, a {@link InterestReason} to + * subscribe to.

+ * + * @author guqing + * @since 2.10.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "notification.halo.run", version = "v1alpha1", kind = "Subscription", + plural = "subscriptions", singular = "subscription") +public class Subscription extends AbstractExtension { + + @Schema + private Spec spec; + + @Data + @Schema(name = "SubscriptionSpec") + public static class Spec { + @Schema(requiredMode = REQUIRED, description = "The subscriber to be notified") + private Subscriber subscriber; + + @Schema(requiredMode = REQUIRED, description = "The token to unsubscribe") + private String unsubscribeToken; + + @Schema(requiredMode = REQUIRED, description = "The reason to be interested in") + private InterestReason reason; + + @Schema(description = "Perhaps users need to unsubscribe and " + + "interact without receiving notifications again") + private boolean disabled; + } + + @Data + public static class InterestReason { + @Schema(requiredMode = REQUIRED, description = "The name of the reason definition to be " + + "interested in") + private String reasonType; + + @Schema(requiredMode = REQUIRED, description = "The subject name of reason type to be" + + " interested in") + private ReasonSubject subject; + + @Schema(requiredMode = NOT_REQUIRED, description = "The expression to be interested in") + private String expression; + + /** + *

Since 2.15.0, we have added a new field expression to the + * InterestReason object, so subject can be null.

+ *

In this particular scenario, when the subject is null, we assign it a + * default ReasonSubject object. The properties of this object are set to + * specific values that do not occur in actual applications, thus we can consider this as + * nonexistent data. + * The purpose of this approach is to maintain backward compatibility, even if the + * subject can be null in the new version of the code.

+ */ + public static void ensureSubjectHasValue(InterestReason interestReason) { + if (interestReason.getSubject() == null) { + interestReason.setSubject(createFallbackSubject()); + } + } + + /** + * Check if the given reason subject is a fallback subject. + */ + public static boolean isFallbackSubject(ReasonSubject reasonSubject) { + if (reasonSubject == null) { + return true; + } + var fallback = createFallbackSubject(); + return fallback.getKind().equals(reasonSubject.getKind()) + && fallback.getApiVersion().equals(reasonSubject.getApiVersion()); + } + + static ReasonSubject createFallbackSubject() { + return ReasonSubject.builder() + .apiVersion("notification.halo.run/v1alpha1") + .kind("NonexistentKind") + .build(); + } + } + + @Data + @Builder + @AllArgsConstructor + @NoArgsConstructor + @Schema(name = "InterestReasonSubject") + public static class ReasonSubject { + + @Schema(requiredMode = NOT_REQUIRED, description = "if name is not specified, it presents " + + "all subjects of the specified reason type and custom resources") + private String name; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String apiVersion; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String kind; + + @Override + public String toString() { + return kind + "#" + apiVersion + "/" + defaultString(name); + } + } + + @Data + @Schema(name = "SubscriptionSubscriber") + public static class Subscriber { + @Schema(requiredMode = REQUIRED, minLength = 1) + private String name; + + @Override + public String toString() { + return name; + } + } + + /** + * Generate unsubscribe token for unsubscribe. + * + * @return unsubscribe token + */ + public static String generateUnsubscribeToken() { + return UUID.randomUUID().toString(); + } +} diff --git a/api/src/main/java/run/halo/app/core/extension/service/AttachmentService.java b/api/src/main/java/run/halo/app/core/extension/service/AttachmentService.java new file mode 100644 index 0000000..275460b --- /dev/null +++ b/api/src/main/java/run/halo/app/core/extension/service/AttachmentService.java @@ -0,0 +1,94 @@ +package run.halo.app.core.extension.service; + +import java.net.URI; +import java.time.Duration; +import java.util.function.Consumer; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.attachment.Attachment; + +/** + * AttachmentService. + * + * @author johnniang + * @since 2.5.0 + */ +public interface AttachmentService { + + /** + * Uploads the given attachment to specific storage using handlers in plugins. + *

+ * If no handler can be found to upload the given attachment, ServerError exception will be + * thrown. + * + * @param policyName is attachment policy name. + * @param groupName is group name the attachment belongs. + * @param filePart contains filename, content and media type. + * @param beforeCreating is an attachment modifier before creating. + * @return attachment. + */ + Mono upload( + @NonNull String username, + @NonNull String policyName, + @Nullable String groupName, + @NonNull FilePart filePart, + @Nullable Consumer beforeCreating); + + /** + * Uploads the given attachment to specific storage using handlers in plugins. Please note + * that we will make sure the request is authenticated, or an unauthorized exception throws. + *

+ * If no handler can be found to upload the given attachment, ServerError exception will be + * thrown. + * + * @param policyName is attachment policy name. + * @param groupName is group name the attachment belongs. + * @param filename is filename of the attachment. + * @param content is binary data of the attachment. + * @param mediaType is media type of the attachment. + * @return attachment. + */ + Mono upload(@NonNull String policyName, + @Nullable String groupName, + @NonNull String filename, + @NonNull Flux content, + @Nullable MediaType mediaType); + + /** + * Deletes an attachment using handlers in plugins. + *

+ * If no handler can be found to delete the given attachment, Mono.empty() will return. + * + * @param attachment is to be deleted. + * @return deleted attachment. + */ + Mono delete(Attachment attachment); + + /** + * Gets permalink using handlers in plugins. + *

+ * If no handler can be found to delete the given attachment, Mono.empty() will return. + * + * @param attachment is created attachment. + * @return permalink + */ + Mono getPermalink(Attachment attachment); + + /** + * Gets shared URL using handlers in plugins. + *

+ * If no handler can be found to delete the given attachment, Mono.empty() will return. + * + * @param attachment is created attachment. + * @param ttl is time to live of the shared URL. + * @return time-to-live shared URL. Please note that, if the attachment is stored in local, the + * shared URL is equal to permalink. + */ + Mono getSharedURL(Attachment attachment, Duration ttl); + +} diff --git a/api/src/main/java/run/halo/app/event/post/PostDeletedEvent.java b/api/src/main/java/run/halo/app/event/post/PostDeletedEvent.java new file mode 100644 index 0000000..7330f8e --- /dev/null +++ b/api/src/main/java/run/halo/app/event/post/PostDeletedEvent.java @@ -0,0 +1,24 @@ +package run.halo.app.event.post; + +import run.halo.app.core.extension.content.Post; +import run.halo.app.plugin.SharedEvent; + +@SharedEvent +public class PostDeletedEvent extends PostEvent { + + private final Post post; + + public PostDeletedEvent(Object source, Post post) { + super(source, post.getMetadata().getName()); + this.post = post; + } + + /** + * Get original post. + * + * @return original post. + */ + public Post getPost() { + return post; + } +} diff --git a/api/src/main/java/run/halo/app/event/post/PostEvent.java b/api/src/main/java/run/halo/app/event/post/PostEvent.java new file mode 100644 index 0000000..1d672b2 --- /dev/null +++ b/api/src/main/java/run/halo/app/event/post/PostEvent.java @@ -0,0 +1,27 @@ +package run.halo.app.event.post; + +import org.springframework.context.ApplicationEvent; + +/** + * An abstract class for post events. + * + * @author johnniang + */ +public abstract class PostEvent extends ApplicationEvent { + + private final String name; + + public PostEvent(Object source, String name) { + super(source); + this.name = name; + } + + /** + * Gets post metadata name. + * + * @return post metadata name + */ + public String getName() { + return name; + } +} diff --git a/api/src/main/java/run/halo/app/event/post/PostPublishedEvent.java b/api/src/main/java/run/halo/app/event/post/PostPublishedEvent.java new file mode 100644 index 0000000..0c446d8 --- /dev/null +++ b/api/src/main/java/run/halo/app/event/post/PostPublishedEvent.java @@ -0,0 +1,12 @@ +package run.halo.app.event.post; + +import run.halo.app.plugin.SharedEvent; + +@SharedEvent +public class PostPublishedEvent extends PostEvent { + + public PostPublishedEvent(Object source, String postName) { + super(source, postName); + } + +} diff --git a/api/src/main/java/run/halo/app/event/post/PostUnpublishedEvent.java b/api/src/main/java/run/halo/app/event/post/PostUnpublishedEvent.java new file mode 100644 index 0000000..52c1c03 --- /dev/null +++ b/api/src/main/java/run/halo/app/event/post/PostUnpublishedEvent.java @@ -0,0 +1,12 @@ +package run.halo.app.event.post; + +import run.halo.app.plugin.SharedEvent; + +@SharedEvent +public class PostUnpublishedEvent extends PostEvent { + + public PostUnpublishedEvent(Object source, String postName) { + super(source, postName); + } + +} diff --git a/api/src/main/java/run/halo/app/event/post/PostUpdatedEvent.java b/api/src/main/java/run/halo/app/event/post/PostUpdatedEvent.java new file mode 100644 index 0000000..74c9123 --- /dev/null +++ b/api/src/main/java/run/halo/app/event/post/PostUpdatedEvent.java @@ -0,0 +1,12 @@ +package run.halo.app.event.post; + +import run.halo.app.plugin.SharedEvent; + +@SharedEvent +public class PostUpdatedEvent extends PostEvent { + + public PostUpdatedEvent(Object source, String postName) { + super(source, postName); + } + +} diff --git a/api/src/main/java/run/halo/app/event/post/PostVisibleChangedEvent.java b/api/src/main/java/run/halo/app/event/post/PostVisibleChangedEvent.java new file mode 100644 index 0000000..c3579f8 --- /dev/null +++ b/api/src/main/java/run/halo/app/event/post/PostVisibleChangedEvent.java @@ -0,0 +1,30 @@ +package run.halo.app.event.post; + +import org.springframework.lang.Nullable; +import run.halo.app.core.extension.content.Post; +import run.halo.app.plugin.SharedEvent; + +@SharedEvent +public class PostVisibleChangedEvent extends PostEvent { + + @Nullable + private final Post.VisibleEnum oldVisible; + + private final Post.VisibleEnum newVisible; + + public PostVisibleChangedEvent(Object source, String postName, + @Nullable Post.VisibleEnum oldVisible, Post.VisibleEnum newVisible) { + super(source, postName); + this.oldVisible = oldVisible; + this.newVisible = newVisible; + } + + @Nullable + public Post.VisibleEnum getOldVisible() { + return oldVisible; + } + + public Post.VisibleEnum getNewVisible() { + return newVisible; + } +} diff --git a/api/src/main/java/run/halo/app/extension/AbstractExtension.java b/api/src/main/java/run/halo/app/extension/AbstractExtension.java new file mode 100644 index 0000000..65f6b6f --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/AbstractExtension.java @@ -0,0 +1,30 @@ +package run.halo.app.extension; + +import lombok.Data; + +/** + * AbstractExtension contains basic structure of Extension and implements the Extension interface. + * + * @author johnniang + */ +@Data +public abstract class AbstractExtension implements Extension { + + private String apiVersion; + + private String kind; + + private MetadataOperator metadata; + + @Override + public String getApiVersion() { + var apiVersionFromGvk = Extension.super.getApiVersion(); + return apiVersionFromGvk != null ? apiVersionFromGvk : this.apiVersion; + } + + @Override + public String getKind() { + var kindFromGvk = Extension.super.getKind(); + return kindFromGvk != null ? kindFromGvk : this.kind; + } +} diff --git a/api/src/main/java/run/halo/app/extension/Comparators.java b/api/src/main/java/run/halo/app/extension/Comparators.java new file mode 100644 index 0000000..c03e5e5 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/Comparators.java @@ -0,0 +1,37 @@ +package run.halo.app.extension; + +import java.time.Instant; +import java.util.Comparator; + +public enum Comparators { + ; + + public static Comparator compareCreationTimestamp(boolean asc) { + var comparator = + Comparator.comparing(e -> e.getMetadata().getCreationTimestamp()); + return asc ? comparator : comparator.reversed(); + } + + public static Comparator compareName(boolean asc) { + var comparator = Comparator.comparing(e -> e.getMetadata().getName()); + return asc ? comparator : comparator.reversed(); + } + + public static Comparator defaultComparator() { + Comparator comparator = compareCreationTimestamp(false); + comparator = comparator.thenComparing(compareName(true)); + return comparator; + } + + /** + * Get a nulls comparator. + * + * @param isAscending is ascending + * @return if ascending, return nulls high, else return nulls low + */ + public static Comparator nullsComparator(boolean isAscending) { + return isAscending + ? org.springframework.util.comparator.Comparators.nullsHigh() + : org.springframework.util.comparator.Comparators.nullsLow(); + } +} diff --git a/api/src/main/java/run/halo/app/extension/ConfigMap.java b/api/src/main/java/run/halo/app/extension/ConfigMap.java new file mode 100644 index 0000000..abcf422 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/ConfigMap.java @@ -0,0 +1,33 @@ +package run.halo.app.extension; + +import java.util.LinkedHashMap; +import java.util.Map; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; + +/** + *

ConfigMap holds configuration data to consume.

+ * + * @author guqing + * @since 2.0.0 + */ +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "", version = "v1alpha1", kind = ConfigMap.KIND, plural = "configmaps", + singular = "configmap") +public class ConfigMap extends AbstractExtension { + + public static final String KIND = "ConfigMap"; + + private Map data; + + public ConfigMap putDataItem(String key, String dataItem) { + if (this.data == null) { + this.data = new LinkedHashMap<>(); + } + this.data.put(key, dataItem); + return this; + } +} diff --git a/api/src/main/java/run/halo/app/extension/DefaultExtensionMatcher.java b/api/src/main/java/run/halo/app/extension/DefaultExtensionMatcher.java new file mode 100644 index 0000000..a3026fe --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/DefaultExtensionMatcher.java @@ -0,0 +1,57 @@ +package run.halo.app.extension; + +import lombok.Builder; +import lombok.Getter; +import lombok.RequiredArgsConstructor; +import org.springframework.util.CollectionUtils; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; + +@Getter +@RequiredArgsConstructor +@Builder(builderMethodName = "internalBuilder") +public class DefaultExtensionMatcher implements ExtensionMatcher { + private final ExtensionClient client; + private final GroupVersionKind gvk; + private final LabelSelector labelSelector; + private final FieldSelector fieldSelector; + + public static DefaultExtensionMatcherBuilder builder(ExtensionClient client, + GroupVersionKind gvk) { + return internalBuilder().client(client).gvk(gvk); + } + + /** + * Match the given extension with the current matcher. + * + * @param extension extension to match + * @return true if the extension matches the current matcher + */ + @Override + public boolean match(Extension extension) { + if (!gvk.equals(extension.groupVersionKind())) { + return false; + } + if (!hasFieldSelector() && !hasLabelSelector()) { + return true; + } + var listOptions = new ListOptions(); + listOptions.setLabelSelector(labelSelector); + var fieldQuery = QueryFactory.all(); + if (hasFieldSelector()) { + fieldQuery = QueryFactory.and(fieldQuery, fieldSelector.query()); + } + listOptions.setFieldSelector(new FieldSelector(fieldQuery)); + return client.indexedQueryEngine().retrieve(getGvk(), + listOptions, PageRequestImpl.ofSize(1)).getTotal() > 0; + } + + boolean hasFieldSelector() { + return fieldSelector != null && fieldSelector.query() != null; + } + + boolean hasLabelSelector() { + return labelSelector != null && !CollectionUtils.isEmpty(labelSelector.getMatchers()); + } +} diff --git a/api/src/main/java/run/halo/app/extension/Extension.java b/api/src/main/java/run/halo/app/extension/Extension.java new file mode 100644 index 0000000..87dbf21 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/Extension.java @@ -0,0 +1,23 @@ +package run.halo.app.extension; + +import java.util.Comparator; +import java.util.Objects; + +/** + * Extension is an interface which represents an Extension. It contains setters and getters of + * GroupVersionKind and Metadata. + */ +public interface Extension extends ExtensionOperator, Comparable { + + @Override + default int compareTo(Extension another) { + if (another == null || another.getMetadata() == null) { + return 1; + } + if (getMetadata() == null) { + return -1; + } + return Objects.compare(getMetadata().getName(), another.getMetadata().getName(), + Comparator.naturalOrder()); + } +} diff --git a/api/src/main/java/run/halo/app/extension/ExtensionClient.java b/api/src/main/java/run/halo/app/extension/ExtensionClient.java new file mode 100644 index 0000000..b64dba0 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/ExtensionClient.java @@ -0,0 +1,96 @@ +package run.halo.app.extension; + +import java.util.Comparator; +import java.util.List; +import java.util.Optional; +import java.util.function.Predicate; +import org.springframework.data.domain.Sort; +import run.halo.app.extension.index.IndexedQueryEngine; + +/** + * ExtensionClient is an interface which contains some operations on Extension instead of + * ExtensionStore. + *

+ * Please note that this client can only use in non-reactive environment. If you want to + * use Extension client in reactive environment, please use {@link ReactiveExtensionClient} instead. + * + * @author johnniang + */ +public interface ExtensionClient { + + /** + * Lists Extensions by Extension type, filter and sorter. + * + * @param type is the class type of Extension. + * @param predicate filters the reEnqueue. + * @param comparator sorts the reEnqueue. + * @param is Extension type. + * @return all filtered and sorted Extensions. + */ + List list(Class type, Predicate predicate, + Comparator comparator); + + /** + * Lists Extensions by Extension type, filter, sorter and page info. + * + * @param type is the class type of Extension. + * @param predicate filters the reEnqueue. + * @param comparator sorts the reEnqueue. + * @param page is page number which starts from 0. + * @param size is page size. + * @param is Extension type. + * @return a list of Extensions. + */ + ListResult list(Class type, Predicate predicate, + Comparator comparator, int page, int size); + + List listAll(Class type, ListOptions options, Sort sort); + + ListResult listBy(Class type, ListOptions options, + PageRequest page); + + /** + * Fetches Extension by its type and name. + * + * @param type is Extension type. + * @param name is Extension name. + * @param is Extension type. + * @return an optional Extension. + */ + Optional fetch(Class type, String name); + + Optional fetch(GroupVersionKind gvk, String name); + + + /** + * Creates an Extension. + * + * @param extension is fresh Extension to be created. Please make sure the Extension name does + * not exist. + * @param is Extension type. + */ + void create(E extension); + + /** + * Updates an Extension. + * + * @param extension is an Extension to be updated. Please make sure the resource version is + * latest. + * @param is Extension type. + */ + void update(E extension); + + /** + * Deletes an Extension. + * + * @param extension is an Extension to be deleted. Please make sure the resource version is + * latest. + * @param is Extension type. + */ + void delete(E extension); + + IndexedQueryEngine indexedQueryEngine(); + + void watch(Watcher watcher); + +} diff --git a/api/src/main/java/run/halo/app/extension/ExtensionMatcher.java b/api/src/main/java/run/halo/app/extension/ExtensionMatcher.java new file mode 100644 index 0000000..ccc2582 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/ExtensionMatcher.java @@ -0,0 +1,23 @@ +package run.halo.app.extension; + +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; + +public interface ExtensionMatcher { + @Deprecated(since = "2.17.0", forRemoval = true) + default GroupVersionKind getGvk() { + return null; + } + + @Deprecated(since = "2.17.0", forRemoval = true) + default LabelSelector getLabelSelector() { + return null; + } + + @Deprecated(since = "2.17.0", forRemoval = true) + default FieldSelector getFieldSelector() { + return null; + } + + boolean match(Extension extension); +} diff --git a/api/src/main/java/run/halo/app/extension/ExtensionOperator.java b/api/src/main/java/run/halo/app/extension/ExtensionOperator.java new file mode 100644 index 0000000..293426f --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/ExtensionOperator.java @@ -0,0 +1,80 @@ +package run.halo.app.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import com.fasterxml.jackson.annotation.JsonProperty; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.function.Predicate; +import org.springframework.util.StringUtils; + +/** + * ExtensionOperator contains some getters and setters for required fields of Extension. + * + * @author johnniang + */ +public interface ExtensionOperator { + + @Schema(requiredMode = REQUIRED) + @JsonProperty("apiVersion") + default String getApiVersion() { + final var gvk = getClass().getAnnotation(GVK.class); + if (gvk == null) { + // return null if having no GVK annotation + return null; + } + if (StringUtils.hasText(gvk.group())) { + return gvk.group() + "/" + gvk.version(); + } + return gvk.version(); + } + + @Schema(requiredMode = REQUIRED) + @JsonProperty("kind") + default String getKind() { + final var gvk = getClass().getAnnotation(GVK.class); + if (gvk == null) { + // return null if having no GVK annotation + return null; + } + return gvk.kind(); + } + + @Schema(requiredMode = REQUIRED, implementation = Metadata.class) + @JsonProperty("metadata") + MetadataOperator getMetadata(); + + void setApiVersion(String apiVersion); + + void setKind(String kind); + + void setMetadata(MetadataOperator metadata); + + /** + * Sets GroupVersionKind of the Extension. + * + * @param gvk is GroupVersionKind data. + */ + default void groupVersionKind(GroupVersionKind gvk) { + setApiVersion(gvk.groupVersion().toString()); + setKind(gvk.kind()); + } + + /** + * Gets GroupVersionKind of the Extension. + * + * @return GroupVersionKind of the Extension. + */ + @JsonIgnore + default GroupVersionKind groupVersionKind() { + return GroupVersionKind.fromAPIVersionAndKind(getApiVersion(), getKind()); + } + + static Predicate isNotDeleted() { + return ext -> ext.getMetadata().getDeletionTimestamp() == null; + } + + static boolean isDeleted(ExtensionOperator extension) { + return ExtensionUtil.isDeleted(extension); + } +} diff --git a/api/src/main/java/run/halo/app/extension/ExtensionUtil.java b/api/src/main/java/run/halo/app/extension/ExtensionUtil.java new file mode 100644 index 0000000..cb50cd3 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/ExtensionUtil.java @@ -0,0 +1,61 @@ +package run.halo.app.extension; + +import java.util.Collections; +import java.util.HashSet; +import java.util.Set; +import org.springframework.data.domain.Sort; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.index.query.QueryFactory; + +public enum ExtensionUtil { + ; + + public static boolean isDeleted(ExtensionOperator extension) { + return extension.getMetadata() != null + && extension.getMetadata().getDeletionTimestamp() != null; + } + + public static boolean addFinalizers(MetadataOperator metadata, Set finalizers) { + var modifiableFinalizers = new HashSet<>( + metadata.getFinalizers() == null ? Collections.emptySet() : metadata.getFinalizers()); + var added = modifiableFinalizers.addAll(finalizers); + if (added) { + metadata.setFinalizers(modifiableFinalizers); + } + return added; + } + + public static boolean removeFinalizers(MetadataOperator metadata, Set finalizers) { + if (metadata.getFinalizers() == null) { + return false; + } + var existingFinalizers = new HashSet<>(metadata.getFinalizers()); + var removed = existingFinalizers.removeAll(finalizers); + if (removed) { + metadata.setFinalizers(existingFinalizers); + } + return removed; + } + + /** + * Query for not deleting. + * + * @return Query + */ + public static Query notDeleting() { + return QueryFactory.isNull("metadata.deletionTimestamp"); + } + + /** + * Default sort by creation timestamp desc and name asc. + * + * @return Sort + */ + public static Sort defaultSort() { + return Sort.by( + Sort.Order.desc("metadata.creationTimestamp"), + Sort.Order.asc("metadata.name") + ); + } + +} diff --git a/api/src/main/java/run/halo/app/extension/GVK.java b/api/src/main/java/run/halo/app/extension/GVK.java new file mode 100644 index 0000000..ebc023a --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/GVK.java @@ -0,0 +1,42 @@ +package run.halo.app.extension; + +import java.lang.annotation.ElementType; +import java.lang.annotation.Retention; +import java.lang.annotation.RetentionPolicy; +import java.lang.annotation.Target; + +/** + * GVK is an annotation to specific metadata of Extension. + * + * @author johnniang + */ +@Retention(RetentionPolicy.RUNTIME) +@Target(ElementType.TYPE) +public @interface GVK { + + /** + * @return group name of Extension. + */ + String group(); + + /** + * @return version name of Extension. + */ + String version(); + + /** + * @return kind name of Extension. + */ + String kind(); + + /** + * @return plural name of Extension. + */ + String plural(); + + /** + * @return singular name of Extension. + */ + String singular(); + +} diff --git a/api/src/main/java/run/halo/app/extension/GroupKind.java b/api/src/main/java/run/halo/app/extension/GroupKind.java new file mode 100644 index 0000000..d1fc850 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/GroupKind.java @@ -0,0 +1,11 @@ +package run.halo.app.extension; + +/** + * GroupKind contains group and kind data only. + * + * @param group is group name of Extension. + * @param kind is kind name of Extension. + * @author johnniang + */ +public record GroupKind(String group, String kind) { +} diff --git a/api/src/main/java/run/halo/app/extension/GroupVersion.java b/api/src/main/java/run/halo/app/extension/GroupVersion.java new file mode 100644 index 0000000..bf00f93 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/GroupVersion.java @@ -0,0 +1,40 @@ +package run.halo.app.extension; + +import org.springframework.util.Assert; +import org.springframework.util.StringUtils; + +/** + * GroupVersion contains group and version name of an Extension only. + * + * @param group is group name of Extension. + * @param version is version name of Extension. + * @author johnniang + */ +public record GroupVersion(String group, String version) { + + @Override + public String toString() { + return StringUtils.hasText(group) ? group + "/" + version : version; + } + + /** + * Parses APIVersion into GroupVersion record. + * + * @param apiVersion must not be blank. + * 1. If the given apiVersion does not contain any "/", we treat the group is empty. + * 2. If the given apiVersion contains more than 1 "/", we will throw an + * IllegalArgumentException. + * @return record contains group and version. + */ + public static GroupVersion parseAPIVersion(String apiVersion) { + Assert.hasText(apiVersion, "API version must not be blank"); + + var groupVersion = apiVersion.split("/"); + return switch (groupVersion.length) { + case 1 -> new GroupVersion("", apiVersion); + case 2 -> new GroupVersion(groupVersion[0], groupVersion[1]); + default -> + throw new IllegalArgumentException("Unexpected APIVersion string: " + apiVersion); + }; + } +} diff --git a/api/src/main/java/run/halo/app/extension/GroupVersionKind.java b/api/src/main/java/run/halo/app/extension/GroupVersionKind.java new file mode 100644 index 0000000..2686ca8 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/GroupVersionKind.java @@ -0,0 +1,64 @@ +package run.halo.app.extension; + +import org.springframework.util.Assert; +import org.springframework.util.StringUtils; + +/** + * GroupVersionKind contains group, version and kind name of an Extension. + * + * @param group is group name of Extension. + * @param version is version name of Extension. + * @param kind is kind name of Extension. + * @author johnniang + */ +public record GroupVersionKind(String group, String version, String kind) { + + public GroupVersionKind { + Assert.hasText(version, "Version must not be blank"); + Assert.hasText(kind, "Kind must not be blank"); + } + + /** + * Gets group and version name of Extension. + * + * @return group and version name of Extension. + */ + public GroupVersion groupVersion() { + return new GroupVersion(group, version); + } + + public GroupKind groupKind() { + return new GroupKind(group, kind); + } + + public boolean hasGroup() { + return StringUtils.hasText(group); + } + + /** + * Composes GroupVersionKind from API version and kind name. + * + * @param apiVersion is API version. Like "core.halo.run/v1alpha1" + * @param kind is kind name of Extension. + * @return GroupVersionKind of an Extension. + */ + public static GroupVersionKind fromAPIVersionAndKind(String apiVersion, String kind) { + Assert.hasText(kind, "Kind must not be blank"); + + var gv = GroupVersion.parseAPIVersion(apiVersion); + return new GroupVersionKind(gv.group(), gv.version(), kind); + } + + public static GroupVersionKind fromExtension(Class extension) { + GVK gvk = extension.getAnnotation(GVK.class); + return new GroupVersionKind(gvk.group(), gvk.version(), gvk.kind()); + } + + @Override + public String toString() { + if (hasGroup()) { + return group + "/" + version + "/" + kind; + } + return version + "/" + kind; + } +} diff --git a/api/src/main/java/run/halo/app/extension/JsonExtension.java b/api/src/main/java/run/halo/app/extension/JsonExtension.java new file mode 100644 index 0000000..c140df3 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/JsonExtension.java @@ -0,0 +1,259 @@ +package run.halo.app.extension; + +import com.fasterxml.jackson.core.JsonGenerator; +import com.fasterxml.jackson.core.JsonParser; +import com.fasterxml.jackson.core.type.TypeReference; +import com.fasterxml.jackson.databind.DeserializationContext; +import com.fasterxml.jackson.databind.JsonDeserializer; +import com.fasterxml.jackson.databind.JsonNode; +import com.fasterxml.jackson.databind.JsonSerializer; +import com.fasterxml.jackson.databind.ObjectMapper; +import com.fasterxml.jackson.databind.SerializerProvider; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import com.fasterxml.jackson.databind.annotation.JsonSerialize; +import com.fasterxml.jackson.databind.node.LongNode; +import com.fasterxml.jackson.databind.node.ObjectNode; +import com.fasterxml.jackson.databind.node.TextNode; +import java.io.IOException; +import java.time.Instant; +import java.util.Map; +import java.util.Objects; +import java.util.Set; + +/** + * JsonExtension is representation an extension using ObjectNode. This extension is preparing for + * patching in the future. + * + * @author johnniang + */ +@JsonSerialize(using = JsonExtension.ObjectNodeExtensionSerializer.class) +@JsonDeserialize(using = JsonExtension.ObjectNodeExtensionDeSerializer.class) +public class JsonExtension implements Extension { + + private final ObjectMapper objectMapper; + + private final ObjectNode objectNode; + + public JsonExtension(ObjectMapper objectMapper) { + this(objectMapper, objectMapper.createObjectNode()); + } + + public JsonExtension(ObjectMapper objectMapper, ObjectNode objectNode) { + this.objectMapper = objectMapper; + this.objectNode = objectNode; + } + + public JsonExtension(ObjectMapper objectMapper, Extension e) { + this(objectMapper, (ObjectNode) objectMapper.valueToTree(e)); + } + + @Override + public MetadataOperator getMetadata() { + var metadataNode = objectNode.get("metadata"); + if (metadataNode == null) { + return null; + } + return new ObjectNodeMetadata((ObjectNode) metadataNode); + } + + @Override + public String getApiVersion() { + var apiVersionNode = objectNode.get("apiVersion"); + return apiVersionNode == null ? null : apiVersionNode.asText(); + } + + @Override + public String getKind() { + return objectNode.get("kind").asText(); + } + + @Override + public void setApiVersion(String apiVersion) { + objectNode.set("apiVersion", new TextNode(apiVersion)); + } + + @Override + public void setKind(String kind) { + objectNode.set("kind", new TextNode(kind)); + } + + @Override + public void setMetadata(MetadataOperator metadata) { + objectNode.set("metadata", objectMapper.valueToTree(metadata)); + } + + public static class ObjectNodeExtensionSerializer extends JsonSerializer { + + @Override + public void serialize(JsonExtension value, JsonGenerator gen, + SerializerProvider serializers) throws IOException { + gen.writeTree(value.objectNode); + } + } + + public static class ObjectNodeExtensionDeSerializer + extends JsonDeserializer { + + @Override + public JsonExtension deserialize(JsonParser p, DeserializationContext ctxt) + throws IOException { + var mapper = (ObjectMapper) p.getCodec(); + var treeNode = mapper.readTree(p); + return new JsonExtension(mapper, (ObjectNode) treeNode); + } + } + + /** + * Get internal representation. + * + * @return internal representation + */ + public ObjectNode getInternal() { + return objectNode; + } + + /** + * Get object mapper. + * + * @return object mapper + */ + public ObjectMapper getObjectMapper() { + return objectMapper; + } + + public MetadataOperator getMetadataOrCreate() { + var metadataNode = objectMapper.createObjectNode(); + objectNode.set("metadata", metadataNode); + return new ObjectNodeMetadata(metadataNode); + } + + @Override + public boolean equals(Object o) { + if (this == o) { + return true; + } + if (o == null || getClass() != o.getClass()) { + return false; + } + JsonExtension that = (JsonExtension) o; + return Objects.equals(objectNode, that.objectNode); + } + + @Override + public int hashCode() { + return Objects.hash(objectNode); + } + + class ObjectNodeMetadata implements MetadataOperator { + + private final ObjectNode objectNode; + + public ObjectNodeMetadata(ObjectNode objectNode) { + this.objectNode = objectNode; + } + + @Override + public String getName() { + var nameNode = objectNode.get("name"); + return objectMapper.convertValue(nameNode, String.class); + } + + @Override + public String getGenerateName() { + var generateNameNode = objectNode.get("generateName"); + return objectMapper.convertValue(generateNameNode, String.class); + } + + @Override + public Map getLabels() { + var labelsNode = objectNode.get("labels"); + return objectMapper.convertValue(labelsNode, new TypeReference<>() { + }); + } + + @Override + public Map getAnnotations() { + var annotationsNode = objectNode.get("annotations"); + return objectMapper.convertValue(annotationsNode, new TypeReference<>() { + }); + } + + @Override + public Long getVersion() { + JsonNode versionNode = objectNode.get("version"); + return objectMapper.convertValue(versionNode, Long.class); + } + + @Override + public Instant getCreationTimestamp() { + return objectMapper.convertValue(objectNode.get("creationTimestamp"), Instant.class); + } + + @Override + public Instant getDeletionTimestamp() { + return objectMapper.convertValue(objectNode.get("deletionTimestamp"), Instant.class); + } + + @Override + public Set getFinalizers() { + return objectMapper.convertValue(objectNode.get("finalizers"), new TypeReference<>() { + }); + } + + @Override + public void setName(String name) { + if (name != null) { + objectNode.set("name", TextNode.valueOf(name)); + } + } + + @Override + public void setGenerateName(String generateName) { + if (generateName != null) { + objectNode.set("generateName", TextNode.valueOf(generateName)); + } + } + + @Override + public void setLabels(Map labels) { + if (labels != null) { + objectNode.set("labels", objectMapper.valueToTree(labels)); + } + } + + @Override + public void setAnnotations(Map annotations) { + if (annotations != null) { + objectNode.set("annotations", objectMapper.valueToTree(annotations)); + } + } + + @Override + public void setVersion(Long version) { + if (version != null) { + objectNode.set("version", LongNode.valueOf(version)); + } + } + + @Override + public void setCreationTimestamp(Instant creationTimestamp) { + if (creationTimestamp != null) { + objectNode.set("creationTimestamp", objectMapper.valueToTree(creationTimestamp)); + } + } + + @Override + public void setDeletionTimestamp(Instant deletionTimestamp) { + if (deletionTimestamp != null) { + objectNode.set("deletionTimestamp", objectMapper.valueToTree(deletionTimestamp)); + } + } + + @Override + public void setFinalizers(Set finalizers) { + if (finalizers != null) { + objectNode.set("finalizers", objectMapper.valueToTree(finalizers)); + } + } + } +} diff --git a/api/src/main/java/run/halo/app/extension/ListOptions.java b/api/src/main/java/run/halo/app/extension/ListOptions.java new file mode 100644 index 0000000..09c72cf --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/ListOptions.java @@ -0,0 +1,127 @@ +package run.halo.app.extension; + +import java.util.List; +import lombok.Data; +import lombok.experimental.Accessors; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; +import run.halo.app.extension.router.selector.SelectorMatcher; + +@Data +@Accessors(chain = true) +public class ListOptions { + private LabelSelector labelSelector; + private FieldSelector fieldSelector; + + @Override + public String toString() { + var sb = new StringBuilder(); + if (fieldSelector != null) { + var query = fieldSelector.query().toString(); + sb.append("fieldSelector: ") + .append(query.startsWith("(") ? query : "(" + query + ")"); + } + if (labelSelector != null) { + if (!sb.isEmpty()) { + sb.append(", "); + } + sb.append("labelSelector: (").append(labelSelector).append(")"); + } + return sb.toString(); + } + + public static ListOptionsBuilder builder() { + return new ListOptionsBuilder(); + } + + public static ListOptionsBuilder builder(ListOptions listOptions) { + return new ListOptionsBuilder(listOptions); + } + + public static class ListOptionsBuilder { + private LabelSelectorBuilder labelSelectorBuilder; + private Query query; + + public ListOptionsBuilder() { + } + + /** + * Create a new list options builder with the given list options. + */ + public ListOptionsBuilder(ListOptions listOptions) { + if (listOptions.getLabelSelector() != null) { + this.labelSelectorBuilder = new LabelSelectorBuilder( + listOptions.getLabelSelector().getMatchers(), this); + } + if (listOptions.getFieldSelector() != null) { + this.query = listOptions.getFieldSelector().query(); + } + } + + /** + * Create a new label selector builder. + */ + public LabelSelectorBuilder labelSelector() { + if (labelSelectorBuilder == null) { + labelSelectorBuilder = new LabelSelectorBuilder(this); + } + return labelSelectorBuilder; + } + + public ListOptionsBuilder fieldQuery(Query query) { + this.query = query; + return this; + } + + /** + * And the given query to the current query. + */ + public ListOptionsBuilder andQuery(Query query) { + this.query = (this.query == null ? query : QueryFactory.and(this.query, query)); + return this; + } + + /** + * Or the given query to the current query. + */ + public ListOptionsBuilder orQuery(Query query) { + this.query = (this.query == null ? query : QueryFactory.or(this.query, query)); + return this; + } + + /** + * Build the list options. + */ + public ListOptions build() { + var listOptions = new ListOptions(); + if (labelSelectorBuilder != null) { + listOptions.setLabelSelector(labelSelectorBuilder.build()); + } + if (query != null) { + listOptions.setFieldSelector(FieldSelector.of(query)); + } + return listOptions; + } + } + + public static class LabelSelectorBuilder + extends LabelSelector.LabelSelectorBuilder { + private final ListOptionsBuilder listOptionsBuilder; + + public LabelSelectorBuilder(List givenMatchers, + ListOptionsBuilder listOptionsBuilder) { + super(givenMatchers); + this.listOptionsBuilder = listOptionsBuilder; + } + + public LabelSelectorBuilder(ListOptionsBuilder listOptionsBuilder) { + this.listOptionsBuilder = listOptionsBuilder; + } + + public ListOptionsBuilder end() { + return this.listOptionsBuilder; + } + } +} diff --git a/api/src/main/java/run/halo/app/extension/ListResult.java b/api/src/main/java/run/halo/app/extension/ListResult.java new file mode 100644 index 0000000..679e0ea --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/ListResult.java @@ -0,0 +1,161 @@ +package run.halo.app.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import com.fasterxml.jackson.annotation.JsonProperty; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.ArrayList; +import java.util.Collections; +import java.util.Iterator; +import java.util.List; +import java.util.Optional; +import java.util.function.Supplier; +import java.util.stream.Stream; +import lombok.Data; +import org.springframework.util.Assert; +import run.halo.app.infra.utils.GenericClassUtils; + +@Data +public class ListResult implements Iterable, Supplier> { + + @Schema(description = "Page number, starts from 1. If not set or equal to 0, it means no " + + "pagination.", requiredMode = REQUIRED) + private final int page; + + @Schema(description = "Size of each page. If not set or equal to 0, it means no pagination.", + requiredMode = REQUIRED) + private final int size; + + @Schema(description = "Total elements.", requiredMode = REQUIRED) + private final long total; + + @Schema(description = "A chunk of items.", requiredMode = REQUIRED) + private final List items; + + public ListResult(int page, int size, long total, List items) { + Assert.isTrue(total >= 0, "Total elements must be greater than or equal to 0"); + if (page < 0) { + page = 0; + } + if (size < 0) { + size = 0; + } + if (items == null) { + items = Collections.emptyList(); + } + this.page = page; + this.size = size; + this.total = total; + this.items = items; + } + + public ListResult(List items) { + this(0, 0, items.size(), items); + } + + @Schema(description = "Indicates whether current page is the first page.", + requiredMode = REQUIRED) + public boolean isFirst() { + return !hasPrevious(); + } + + @Schema(description = "Indicates whether current page is the last page.", + requiredMode = REQUIRED) + public boolean isLast() { + return !hasNext(); + } + + @Schema(description = "Indicates whether current page has previous page.", + requiredMode = REQUIRED) + @JsonProperty("hasNext") + public boolean hasNext() { + if (page <= 0) { + return false; + } + return page < getTotalPages(); + } + + @Schema(description = "Indicates whether current page has previous page.", + requiredMode = REQUIRED) + @JsonProperty("hasPrevious") + public boolean hasPrevious() { + return page > 1; + } + + @Override + public Iterator iterator() { + return items.iterator(); + } + + @Schema(description = "Indicates total pages.", requiredMode = REQUIRED) + @JsonProperty("totalPages") + public long getTotalPages() { + return size == 0 ? 1 : (total + size - 1) / size; + } + + /** + * Generate generic ListResult class. Like {@code ListResult}, {@code ListResult}, + * etc. + * + * @param scheme scheme of the generic type. + * @return generic ListResult class. + */ + public static Class generateGenericClass(Scheme scheme) { + return GenericClassUtils.generateConcreteClass(ListResult.class, + scheme.type(), + () -> { + var pkgName = scheme.type().getPackageName(); + return pkgName + '.' + scheme.groupVersionKind().kind() + "List"; + }); + } + + /** + * Generate generic ListResult class. Like {@code ListResult}, {@code ListResult}, + * etc. + * + * @param type the generic type of {@link ListResult}. + * @return generic ListResult class. + */ + public static Class generateGenericClass(Class type) { + return GenericClassUtils.generateConcreteClass(ListResult.class, type, + () -> type.getName() + "List"); + } + + public static ListResult emptyResult() { + return new ListResult<>(List.of()); + } + + /** + * Manually paginate the List collection. + */ + public static List subList(List list, int page, int size) { + if (page < 1) { + page = 1; + } + if (size < 1) { + return list; + } + List listSort = new ArrayList<>(); + int total = list.size(); + int pageStart = page == 1 ? 0 : (page - 1) * size; + int pageEnd = Math.min(total, page * size); + if (total > pageStart) { + listSort = list.subList(pageStart, pageEnd); + } + return listSort; + } + + /** + * Gets the first element of the list result. + */ + public static Optional first(ListResult listResult) { + return Optional.ofNullable(listResult) + .map(ListResult::getItems) + .map(list -> list.isEmpty() ? null : list.get(0)); + } + + @Override + public Stream get() { + return items.stream(); + } +} diff --git a/api/src/main/java/run/halo/app/extension/Metadata.java b/api/src/main/java/run/halo/app/extension/Metadata.java new file mode 100644 index 0000000..c6418b5 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/Metadata.java @@ -0,0 +1,55 @@ +package run.halo.app.extension; + +import java.time.Instant; +import java.util.Map; +import java.util.Set; +import lombok.Data; +import lombok.EqualsAndHashCode; + +/** + * Metadata of Extension. + * + * @author johnniang + */ +@Data +@EqualsAndHashCode(exclude = "version") +public class Metadata implements MetadataOperator { + + /** + * Metadata name. The name is unique globally. + */ + private String name; + + /** + * Generate name is for generating metadata name automatically. + */ + private String generateName; + + /** + * Labels are like key-value format. + */ + private Map labels; + + /** + * Annotations are like key-value format. + */ + private Map annotations; + + /** + * Current version of the Extension. It will be bumped up every update. + */ + private Long version; + + /** + * Creation timestamp of the Extension. + */ + private Instant creationTimestamp; + + /** + * Deletion timestamp of the Extension. + */ + private Instant deletionTimestamp; + + private Set finalizers; + +} diff --git a/api/src/main/java/run/halo/app/extension/MetadataOperator.java b/api/src/main/java/run/halo/app/extension/MetadataOperator.java new file mode 100644 index 0000000..f731228 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/MetadataOperator.java @@ -0,0 +1,99 @@ +package run.halo.app.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import java.util.Map; +import java.util.Objects; +import java.util.Set; + +/** + * MetadataOperator contains some getters and setters for required fields of metadata. + * + * @author johnniang + */ +@JsonDeserialize(as = Metadata.class) +@Schema(implementation = Metadata.class) +public interface MetadataOperator { + + @Schema(name = "name", description = "Metadata name", requiredMode = REQUIRED) + @JsonProperty("name") + String getName(); + + @Schema(name = "generateName", description = "The name field will be generated automatically " + + "according to the given generateName field") + String getGenerateName(); + + @Schema(name = "labels") + @JsonProperty("labels") + Map getLabels(); + + @Schema(name = "annotations") + @JsonProperty("annotations") + Map getAnnotations(); + + @Schema(name = "version", nullable = true) + @JsonProperty("version") + Long getVersion(); + + @Schema(name = "creationTimestamp", nullable = true) + @JsonProperty("creationTimestamp") + Instant getCreationTimestamp(); + + @Schema(name = "deletionTimestamp", nullable = true) + @JsonProperty("deletionTimestamp") + Instant getDeletionTimestamp(); + + @Schema(name = "finalizers", nullable = true) + Set getFinalizers(); + + void setName(String name); + + void setGenerateName(String generateName); + + void setLabels(Map labels); + + void setAnnotations(Map annotations); + + void setVersion(Long version); + + void setCreationTimestamp(Instant creationTimestamp); + + void setDeletionTimestamp(Instant deletionTimestamp); + + void setFinalizers(Set finalizers); + + static boolean metadataDeepEquals(MetadataOperator left, MetadataOperator right) { + if (left == null && right == null) { + return true; + } + if (left == null || right == null) { + return false; + } + if (!Objects.equals(left.getName(), right.getName())) { + return false; + } + if (!Objects.equals(left.getLabels(), right.getLabels())) { + return false; + } + if (!Objects.equals(left.getAnnotations(), right.getAnnotations())) { + return false; + } + if (!Objects.equals(left.getCreationTimestamp(), right.getCreationTimestamp())) { + return false; + } + if (!Objects.equals(left.getDeletionTimestamp(), right.getDeletionTimestamp())) { + return false; + } + if (!Objects.equals(left.getVersion(), right.getVersion())) { + return false; + } + if (!Objects.equals(left.getFinalizers(), right.getFinalizers())) { + return false; + } + return true; + } +} diff --git a/api/src/main/java/run/halo/app/extension/MetadataUtil.java b/api/src/main/java/run/halo/app/extension/MetadataUtil.java new file mode 100644 index 0000000..9670786 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/MetadataUtil.java @@ -0,0 +1,45 @@ +package run.halo.app.extension; + +import java.util.HashMap; +import java.util.Map; +import org.springframework.util.Assert; + +public enum MetadataUtil { + ; + + public static final String SYSTEM_FINALIZER = "system-protection"; + + /** + * Gets extension metadata labels null safe. + * + * @param extension extension must not be null + * @return extension metadata labels + */ + public static Map nullSafeLabels(AbstractExtension extension) { + Assert.notNull(extension, "The extension must not be null."); + Assert.notNull(extension.getMetadata(), "The extension metadata must not be null."); + Map labels = extension.getMetadata().getLabels(); + if (labels == null) { + labels = new HashMap<>(); + extension.getMetadata().setLabels(labels); + } + return labels; + } + + /** + * Gets extension metadata annotations null safe. + * + * @param extension extension must not be null + * @return extension metadata annotations + */ + public static Map nullSafeAnnotations(AbstractExtension extension) { + Assert.notNull(extension, "The extension must not be null."); + Assert.notNull(extension.getMetadata(), "The extension metadata must not be null."); + Map annotations = extension.getMetadata().getAnnotations(); + if (annotations == null) { + annotations = new HashMap<>(); + extension.getMetadata().setAnnotations(annotations); + } + return annotations; + } +} diff --git a/api/src/main/java/run/halo/app/extension/PageRequest.java b/api/src/main/java/run/halo/app/extension/PageRequest.java new file mode 100644 index 0000000..d2ed458 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/PageRequest.java @@ -0,0 +1,65 @@ +package run.halo.app.extension; + +import org.springframework.data.domain.Sort; +import org.springframework.util.Assert; + +/** + *

{@link PageRequest} is an interface for pagination information.

+ *

Page number starts from 1.

+ *

if page size is 0, it means no pagination and all results will be returned.

+ * + * @author guqing + * @see PageRequestImpl + * @since 2.12.0 + */ +public interface PageRequest { + int getPageNumber(); + + int getPageSize(); + + PageRequest previous(); + + PageRequest next(); + + /** + * Returns the previous {@link PageRequest} or the first {@link PageRequest} if the current one + * already is the first one. + * + * @return a new {@link org.springframework.data.domain.PageRequest} with + * {@link #getPageNumber()} - 1 as {@link #getPageNumber()} + */ + PageRequest previousOrFirst(); + + /** + * Returns the {@link PageRequest} requesting the first page. + * + * @return a new {@link org.springframework.data.domain.PageRequest} with + * {@link #getPageNumber()} = 1 as {@link #getPageNumber()} + */ + PageRequest first(); + + /** + * Creates a new {@link PageRequest} with {@code pageNumber} applied. + * + * @param pageNumber 1-based page index. + * @return a new {@link org.springframework.data.domain.PageRequest} + */ + PageRequest withPage(int pageNumber); + + PageRequestImpl withSort(Sort sort); + + boolean hasPrevious(); + + Sort getSort(); + + /** + * Returns the current {@link Sort} or the given one if the current one is unsorted. + * + * @param sort must not be {@literal null}. + * @return the current {@link Sort} or the given one if the current one is unsorted. + */ + default Sort getSortOr(Sort sort) { + Assert.notNull(sort, "Fallback Sort must not be null"); + return getSort().isSorted() ? getSort() : sort; + } +} diff --git a/api/src/main/java/run/halo/app/extension/PageRequestImpl.java b/api/src/main/java/run/halo/app/extension/PageRequestImpl.java new file mode 100644 index 0000000..62da566 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/PageRequestImpl.java @@ -0,0 +1,90 @@ +package run.halo.app.extension; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import org.springframework.data.domain.Sort; +import org.springframework.util.Assert; + +public class PageRequestImpl implements PageRequest { + + private final int pageNumber; + private final int pageSize; + private final Sort sort; + + public PageRequestImpl(int pageNumber, int pageSize, Sort sort) { + Assert.notNull(sort, "Sort must not be null"); + if (pageNumber < 1) { + pageNumber = 1; + } + if (pageSize < 0) { + pageSize = 0; + } + this.pageNumber = pageNumber; + this.pageSize = pageSize; + this.sort = sort; + } + + public static PageRequestImpl of(int pageNumber, int pageSize) { + return of(pageNumber, pageSize, Sort.unsorted()); + } + + public static PageRequestImpl of(int pageNumber, int pageSize, Sort sort) { + return new PageRequestImpl(pageNumber, pageSize, sort); + } + + public static PageRequestImpl ofSize(int pageSize) { + return PageRequestImpl.of(1, pageSize); + } + + @Override + public int getPageNumber() { + return pageNumber; + } + + @Override + public int getPageSize() { + return pageSize; + } + + @Override + public PageRequest previous() { + return getPageNumber() == 0 ? this + : new PageRequestImpl(getPageNumber() - 1, getPageSize(), getSort()); + } + + @Override + public Sort getSort() { + return sort; + } + + @Override + public PageRequest next() { + return new PageRequestImpl(getPageNumber() + 1, getPageSize(), getSort()); + } + + @Override + public PageRequest previousOrFirst() { + return hasPrevious() ? previous() : first(); + } + + @Override + public PageRequest first() { + return new PageRequestImpl(1, getPageSize(), getSort()); + } + + @Override + public PageRequest withPage(int pageNumber) { + return new PageRequestImpl(pageNumber, getPageSize(), getSort()); + } + + @Override + public PageRequestImpl withSort(Sort sort) { + return new PageRequestImpl(getPageNumber(), getPageSize(), + defaultIfNull(sort, Sort.unsorted())); + } + + @Override + public boolean hasPrevious() { + return pageNumber > 1; + } +} diff --git a/api/src/main/java/run/halo/app/extension/ReactiveExtensionClient.java b/api/src/main/java/run/halo/app/extension/ReactiveExtensionClient.java new file mode 100644 index 0000000..586f713 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/ReactiveExtensionClient.java @@ -0,0 +1,96 @@ +package run.halo.app.extension; + +import java.util.Comparator; +import java.util.function.Predicate; +import org.springframework.data.domain.Sort; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.extension.index.IndexedQueryEngine; + +/** + * ExtensionClient is an interface which contains some operations on Extension instead of + * ExtensionStore. + * + * @author johnniang + */ +public interface ReactiveExtensionClient { + + /** + * Lists Extensions by Extension type, filter and sorter. + * + * @param type is the class type of Extension. + * @param predicate filters the reEnqueue. + * @param comparator sorts the reEnqueue. + * @param is Extension type. + * @return all filtered and sorted Extensions. + */ + Flux list(Class type, Predicate predicate, + Comparator comparator); + + /** + * Lists Extensions by Extension type, filter, sorter and page info. + * + * @param type is the class type of Extension. + * @param predicate filters the reEnqueue. + * @param comparator sorts the reEnqueue. + * @param page is page number which starts from 0. + * @param size is page size. + * @param is Extension type. + * @return a list of Extensions. + */ + Mono> list(Class type, Predicate predicate, + Comparator comparator, int page, int size); + + Flux listAll(Class type, ListOptions options, Sort sort); + + Mono> listBy(Class type, ListOptions options, + PageRequest pageable); + + /** + * Fetches Extension by its type and name. + * + * @param type is Extension type. + * @param name is Extension name. + * @param is Extension type. + * @return an optional Extension. + */ + Mono fetch(Class type, String name); + + Mono fetch(GroupVersionKind gvk, String name); + + Mono get(Class type, String name); + + Mono getJsonExtension(GroupVersionKind gvk, String name); + + /** + * Creates an Extension. + * + * @param extension is fresh Extension to be created. Please make sure the Extension name does + * not exist. + * @param is Extension type. + */ + Mono create(E extension); + + /** + * Updates an Extension. + * + * @param extension is an Extension to be updated. Please make sure the resource version is + * latest. + * @param is Extension type. + */ + Mono update(E extension); + + /** + * Deletes an Extension. + * + * @param extension is an Extension to be deleted. Please make sure the resource version is + * latest. + * @param is Extension type. + */ + Mono delete(E extension); + + IndexedQueryEngine indexedQueryEngine(); + + void watch(Watcher watcher); + +} diff --git a/api/src/main/java/run/halo/app/extension/Ref.java b/api/src/main/java/run/halo/app/extension/Ref.java new file mode 100644 index 0000000..d275e6c --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/Ref.java @@ -0,0 +1,77 @@ +package run.halo.app.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.Objects; +import lombok.Data; +import org.springframework.lang.NonNull; + +@Data +@Schema(description = "Extension reference object. The name is mandatory") +public class Ref { + + @Schema(description = "Extension group") + private String group; + + @Schema(description = "Extension version") + private String version; + + @Schema(description = "Extension kind") + private String kind; + + @Schema(requiredMode = REQUIRED, description = "Extension name. This field is mandatory") + private String name; + + public static Ref of(String name) { + Ref ref = new Ref(); + ref.setName(name); + return ref; + } + + public static Ref of(String name, GroupVersionKind gvk) { + Ref ref = new Ref(); + ref.setName(name); + ref.setGroup(gvk.group()); + ref.setVersion(gvk.version()); + ref.setKind(gvk.kind()); + return ref; + } + + public static Ref of(Extension extension) { + var metadata = extension.getMetadata(); + var gvk = extension.groupVersionKind(); + var ref = new Ref(); + ref.setName(metadata.getName()); + ref.setGroup(gvk.group()); + ref.setVersion(gvk.version()); + ref.setKind(gvk.kind()); + return ref; + } + + /** + * Check the ref has the same group and kind. + * + * @param ref is target reference + * @param gvk is group version kind + * @return true if they have the same group and kind. + */ + public static boolean groupKindEquals(Ref ref, GroupVersionKind gvk) { + return Objects.equals(ref.getGroup(), gvk.group()) + && Objects.equals(ref.getKind(), gvk.kind()); + } + + /** + * Check if the extension is equal to the ref. + * + * @param ref must not be null. + * @param extension must not be null. + * @return true if they are equal; false otherwise. + */ + public static boolean equals(@NonNull Ref ref, @NonNull ExtensionOperator extension) { + var gvk = extension.groupVersionKind(); + var name = extension.getMetadata().getName(); + return groupKindEquals(ref, gvk) && Objects.equals(ref.getName(), name); + } + +} diff --git a/api/src/main/java/run/halo/app/extension/Scheme.java b/api/src/main/java/run/halo/app/extension/Scheme.java new file mode 100644 index 0000000..a0deb49 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/Scheme.java @@ -0,0 +1,92 @@ +package run.halo.app.extension; + +import com.fasterxml.jackson.databind.node.ObjectNode; +import io.swagger.v3.core.converter.ModelConverters; +import io.swagger.v3.core.util.Json; +import java.util.Map; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; +import run.halo.app.extension.exception.ExtensionException; + +/** + * This class represents scheme of an Extension. + * + * @param type is Extension type. + * @param groupVersionKind is GroupVersionKind of Extension. + * @param plural is plural name of Extension. + * @param singular is singular name of Extension. + * @param openApiSchema is JSON schema of Extension. + * @author johnniang + */ +public record Scheme(Class type, + GroupVersionKind groupVersionKind, + String plural, + String singular, + ObjectNode openApiSchema) { + public Scheme { + Assert.notNull(type, "Type of Extension must not be null"); + Assert.notNull(groupVersionKind, "GroupVersionKind of Extension must not be null"); + Assert.hasText(plural, "Plural name of Extension must not be blank"); + Assert.hasText(singular, "Singular name of Extension must not be blank"); + Assert.notNull(openApiSchema, "Json Schema must not be null"); + } + + /** + * Builds Scheme from type with @GVK annotation. + * + * @param type is Extension type with GVK annotation. + * @return Scheme definition. + * @throws ExtensionException when the type has not annotated @GVK. + */ + public static Scheme buildFromType(Class type) { + // concrete scheme from annotation + var gvk = getGvkFromType(type); + + // TODO Move the generation logic outside. + // generate OpenAPI schema + var resolvedSchema = ModelConverters.getInstance().readAllAsResolvedSchema(type); + var mapper = Json.mapper(); + var schema = (ObjectNode) mapper.valueToTree(resolvedSchema.schema); + // for schema validation. + schema.set("components", + mapper.valueToTree(Map.of("schemas", resolvedSchema.referencedSchemas))); + + return new Scheme(type, + new GroupVersionKind(gvk.group(), gvk.version(), gvk.kind()), + gvk.plural(), + gvk.singular(), + schema); + } + + /** + * Gets GVK annotation from Extension type. + * + * @param type is Extension type with GVK annotation. + * @return GVK annotation. + * @throws ExtensionException when the type has not annotated @GVK. + */ + @NonNull + public static GVK getGvkFromType(@NonNull Class type) { + var gvk = type.getAnnotation(GVK.class); + Assert.notNull(gvk, + "Missing annotation " + GVK.class.getName() + " on type " + type.getName()); + return gvk; + } + + @Override + public boolean equals(Object o) { + if (this == o) { + return true; + } + if (o == null || getClass() != o.getClass()) { + return false; + } + Scheme scheme = (Scheme) o; + return groupVersionKind.equals(scheme.groupVersionKind); + } + + @Override + public int hashCode() { + return groupVersionKind.hashCode(); + } +} diff --git a/api/src/main/java/run/halo/app/extension/SchemeManager.java b/api/src/main/java/run/halo/app/extension/SchemeManager.java new file mode 100644 index 0000000..d051a80 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/SchemeManager.java @@ -0,0 +1,65 @@ +package run.halo.app.extension; + +import java.util.List; +import java.util.Objects; +import java.util.Optional; +import java.util.function.Consumer; +import org.springframework.lang.NonNull; +import run.halo.app.extension.exception.SchemeNotFoundException; +import run.halo.app.extension.index.IndexSpecs; + +public interface SchemeManager { + + void register(@NonNull Scheme scheme); + + void register(@NonNull Scheme scheme, Consumer specsConsumer); + + /** + * Registers an Extension using its type. + * + * @param type is Extension type. + * @param Extension class. + */ + default void register(Class type) { + register(Scheme.buildFromType(type)); + } + + default void register(Class type, Consumer specsConsumer) { + register(Scheme.buildFromType(type), specsConsumer); + } + + void unregister(@NonNull Scheme scheme); + + default int size() { + return schemes().size(); + } + + @NonNull + List schemes(); + + @NonNull + default Optional fetch(@NonNull GroupVersionKind gvk) { + return schemes().stream() + .filter(scheme -> Objects.equals(scheme.groupVersionKind(), gvk)) + .findFirst(); + } + + @NonNull + default Scheme get(@NonNull GroupVersionKind gvk) { + return fetch(gvk).orElseThrow( + () -> new SchemeNotFoundException(gvk)); + } + + @NonNull + default Scheme get(Class type) { + var gvk = Scheme.getGvkFromType(type); + return get(new GroupVersionKind(gvk.group(), gvk.version(), gvk.kind())); + } + + @NonNull + default Scheme get(Extension ext) { + var gvk = ext.groupVersionKind(); + return get(gvk); + } + +} diff --git a/api/src/main/java/run/halo/app/extension/Secret.java b/api/src/main/java/run/halo/app/extension/Secret.java new file mode 100644 index 0000000..ce029d8 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/Secret.java @@ -0,0 +1,54 @@ +package run.halo.app.extension; + +import java.util.Map; +import lombok.Data; +import lombok.EqualsAndHashCode; + +/** + * Secret is a small piece of sensitive data which should be kept secret, such as a password, + * a token, or a key. + * + * @author guqing + * @see + * kebernetes Secret + * @since 2.0.0 + */ +@Data +@EqualsAndHashCode(callSuper = true) +@GVK(group = "", version = "v1alpha1", kind = Secret.KIND, plural = "secrets", singular = "secret") +public class Secret extends AbstractExtension { + public static final String KIND = "Secret"; + + public static final String SECRET_TYPE_OPAQUE = "Opaque"; + + public static final int MAX_SECRET_SIZE = 1024 * 1024; + + /** + * Used to facilitate programmatic handling of secret data. + * More info: + * secret-types + */ + private String type; + + /** + *

The total bytes of the values in + * the Data field must be less than {@link #MAX_SECRET_SIZE} bytes.

+ *

{@code data} contains the secret data. Each key must consist of alphanumeric + * characters, '-', '_' or '.'. The serialized form of the secret data is a + * base64 encoded string, representing the arbitrary (possibly non-string) + * data value here. Described in + * rfc4648#section-4 + *

+ */ + private Map data; + + /** + * {@code stringData} allows specifying non-binary secret data in string form. + * It is provided as a write-only input field for convenience. + * All keys and values are merged into the data field on write, overwriting any existing + * values. + * The stringData field is never output when reading from the API. + */ + private Map stringData; + +} diff --git a/api/src/main/java/run/halo/app/extension/Unstructured.java b/api/src/main/java/run/halo/app/extension/Unstructured.java new file mode 100644 index 0000000..2ea80b5 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/Unstructured.java @@ -0,0 +1,283 @@ +package run.halo.app.extension; + +import com.fasterxml.jackson.core.JsonGenerator; +import com.fasterxml.jackson.core.JsonParser; +import com.fasterxml.jackson.databind.DeserializationContext; +import com.fasterxml.jackson.databind.JsonDeserializer; +import com.fasterxml.jackson.databind.JsonSerializer; +import com.fasterxml.jackson.databind.ObjectMapper; +import com.fasterxml.jackson.databind.SerializerProvider; +import com.fasterxml.jackson.databind.annotation.JsonDeserialize; +import com.fasterxml.jackson.databind.annotation.JsonSerialize; +import io.swagger.v3.core.util.Json; +import java.io.IOException; +import java.time.Instant; +import java.util.Arrays; +import java.util.Collection; +import java.util.Collections; +import java.util.HashMap; +import java.util.LinkedHashSet; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import java.util.Optional; +import java.util.Set; +import lombok.EqualsAndHashCode; + +/** + * Unstructured is a generic Extension, which wraps ObjectNode to maintain the Extension data, like + * apiVersion, kind, metadata and others. + * + * @author johnniang + */ +@JsonSerialize(using = Unstructured.UnstructuredSerializer.class) +@JsonDeserialize(using = Unstructured.UnstructuredDeserializer.class) +@SuppressWarnings("rawtypes") +public class Unstructured implements Extension { + + public static final ObjectMapper OBJECT_MAPPER = Json.mapper(); + + private final Map data; + + public Unstructured() { + this(new HashMap()); + } + + public Unstructured(Map data) { + this.data = data; + } + + public Map getData() { + return Collections.unmodifiableMap(data); + } + + @Override + public String getApiVersion() { + return (String) data.get("apiVersion"); + } + + @Override + public String getKind() { + return (String) data.get("kind"); + } + + @Override + public MetadataOperator getMetadata() { + return new UnstructuredMetadata(); + } + + @EqualsAndHashCode(exclude = "version") + class UnstructuredMetadata implements MetadataOperator { + + @Override + public String getName() { + return (String) getNestedValue(data, "metadata", "name").orElse(null); + } + + @Override + public String getGenerateName() { + return (String) getNestedValue(data, "metadata", "generateName").orElse(null); + } + + @Override + public Map getLabels() { + return getNestedStringStringMap(data, "metadata", "labels").orElse(null); + } + + @Override + public Map getAnnotations() { + return getNestedStringStringMap(data, "metadata", "annotations").orElse(null); + } + + @Override + public Long getVersion() { + return getNestedLong(data, "metadata", "version").orElse(null); + } + + @Override + public Instant getCreationTimestamp() { + return getNestedInstant(data, "metadata", "creationTimestamp").orElse(null); + } + + @Override + public Instant getDeletionTimestamp() { + return getNestedInstant(data, "metadata", "deletionTimestamp").orElse(null); + } + + @Override + public Set getFinalizers() { + return getNestedStringSet(data, "metadata", "finalizers").orElse(null); + } + + @Override + public void setName(String name) { + setNestedValue(data, name, "metadata", "name"); + } + + @Override + public void setGenerateName(String generateName) { + setNestedValue(data, generateName, "metadata", "generateName"); + } + + @Override + public void setLabels(Map labels) { + setNestedValue(data, labels, "metadata", "labels"); + } + + @Override + public void setAnnotations(Map annotations) { + setNestedValue(data, annotations, "metadata", "annotations"); + } + + @Override + public void setVersion(Long version) { + setNestedValue(data, version, "metadata", "version"); + } + + @Override + public void setCreationTimestamp(Instant creationTimestamp) { + setNestedValue(data, creationTimestamp, "metadata", "creationTimestamp"); + } + + @Override + public void setDeletionTimestamp(Instant deletionTimestamp) { + setNestedValue(data, deletionTimestamp, "metadata", "deletionTimestamp"); + } + + @Override + public void setFinalizers(Set finalizers) { + setNestedValue(data, finalizers, "metadata", "finalizers"); + } + } + + + @Override + public void setApiVersion(String apiVersion) { + setNestedValue(data, apiVersion, "apiVersion"); + } + + @Override + public void setKind(String kind) { + setNestedValue(data, kind, "kind"); + } + + @Override + @SuppressWarnings("unchecked") + public void setMetadata(MetadataOperator metadata) { + Map metadataMap = OBJECT_MAPPER.convertValue(metadata, Map.class); + data.put("metadata", metadataMap); + } + + public static Optional getNestedValue(Map map, String... fields) { + if (fields == null || fields.length == 0) { + return Optional.of(map); + } + Map tempMap = map; + for (int i = 0; i < fields.length - 1; i++) { + Object value = tempMap.get(fields[i]); + if (!(value instanceof Map)) { + return Optional.empty(); + } + tempMap = (Map) value; + } + return Optional.ofNullable(tempMap.get(fields[fields.length - 1])); + } + + @SuppressWarnings("unchecked") + public static Optional> getNestedStringList(Map map, String... fields) { + return getNestedValue(map, fields).map(value -> (List) value); + } + + public static Optional> getNestedStringSet(Map map, String... fields) { + return getNestedValue(map, fields).map(value -> { + if (value instanceof Collection collection) { + return new LinkedHashSet<>(collection); + } + throw new IllegalArgumentException( + "Incorrect value type: " + value.getClass() + ", expected: " + Set.class); + }); + } + + @SuppressWarnings("unchecked") + public static void setNestedValue(Map map, Object value, String... fields) { + if (fields == null || fields.length == 0) { + // do nothing when no fields provided + return; + } + var prevFields = Arrays.stream(fields, 0, fields.length - 1) + .toArray(String[]::new); + getNestedMap(map, prevFields).ifPresent(m -> { + var lastField = fields[fields.length - 1]; + m.put(lastField, value); + }); + } + + public static Optional getNestedMap(Map map, String... fields) { + return getNestedValue(map, fields).map(value -> (Map) value); + } + + @SuppressWarnings("unchecked") + public static Optional> getNestedStringStringMap(Map map, + String... fields) { + return getNestedValue(map, fields) + .map(labelsObj -> (Map) labelsObj); + } + + public static Optional getNestedInstant(Map map, String... fields) { + return getNestedValue(map, fields) + .map(instantValue -> { + if (instantValue instanceof Instant instant) { + return instant; + } + return Instant.parse(instantValue.toString()); + }); + + } + + public static Optional getNestedLong(Map map, String... fields) { + return getNestedValue(map, fields) + .map(longObj -> { + if (longObj instanceof Long l) { + return l; + } + return Long.valueOf(longObj.toString()); + }); + } + + public static class UnstructuredSerializer extends JsonSerializer { + + @Override + public void serialize(Unstructured value, JsonGenerator gen, SerializerProvider serializers) + throws IOException { + gen.writeObject(value.data); + } + + } + + public static class UnstructuredDeserializer extends JsonDeserializer { + + @Override + public Unstructured deserialize(JsonParser p, DeserializationContext ctxt) + throws IOException { + Map data = p.getCodec().readValue(p, Map.class); + return new Unstructured(data); + } + } + + @Override + public boolean equals(Object o) { + if (this == o) { + return true; + } + if (o == null || getClass() != o.getClass()) { + return false; + } + Unstructured that = (Unstructured) o; + return Objects.equals(data, that.data); + } + + @Override + public int hashCode() { + return Objects.hash(data); + } +} diff --git a/api/src/main/java/run/halo/app/extension/Watcher.java b/api/src/main/java/run/halo/app/extension/Watcher.java new file mode 100644 index 0000000..210189b --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/Watcher.java @@ -0,0 +1,89 @@ +package run.halo.app.extension; + +import java.util.List; +import java.util.concurrent.CopyOnWriteArrayList; +import reactor.core.Disposable; +import run.halo.app.extension.controller.Reconciler; + +public interface Watcher extends Disposable { + + default void onAdd(Reconciler.Request request) { + // Do nothing here, just for sync all on start. + } + + default void onAdd(Extension extension) { + // Do nothing here + } + + default void onUpdate(Extension oldExtension, Extension newExtension) { + // Do nothing here + } + + default void onDelete(Extension extension) { + // Do nothing here + } + + default void registerDisposeHook(Runnable dispose) { + } + + class WatcherComposite implements Watcher { + + private final List watchers; + + private volatile boolean disposed = false; + + private Runnable disposeHook; + + public WatcherComposite() { + watchers = new CopyOnWriteArrayList<>(); + } + + @Override + public void onAdd(Extension extension) { + // TODO Deep copy extension and execute onAdd asynchronously + watchers.forEach(watcher -> watcher.onAdd(extension)); + } + + @Override + public void onUpdate(Extension oldExtension, Extension newExtension) { + // TODO Deep copy extension and execute onUpdate asynchronously + watchers.forEach(watcher -> watcher.onUpdate(oldExtension, newExtension)); + } + + @Override + public void onDelete(Extension extension) { + // TODO Deep copy extension and execute onDelete asynchronously + watchers.forEach(watcher -> watcher.onDelete(extension)); + } + + public void addWatcher(Watcher watcher) { + if (!watcher.isDisposed() && !watchers.contains(watcher)) { + watchers.add(watcher); + watcher.registerDisposeHook(() -> removeWatcher(watcher)); + } + } + + public void removeWatcher(Watcher watcher) { + watchers.remove(watcher); + } + + @Override + public void registerDisposeHook(Runnable dispose) { + this.disposeHook = dispose; + } + + @Override + public void dispose() { + this.disposed = true; + this.watchers.clear(); + if (this.disposeHook != null) { + this.disposeHook.run(); + } + } + + @Override + public boolean isDisposed() { + return this.disposed; + } + } +} diff --git a/api/src/main/java/run/halo/app/extension/WatcherExtensionMatchers.java b/api/src/main/java/run/halo/app/extension/WatcherExtensionMatchers.java new file mode 100644 index 0000000..d8fce31 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/WatcherExtensionMatchers.java @@ -0,0 +1,91 @@ +package run.halo.app.extension; + +import java.util.Objects; +import lombok.Builder; +import lombok.Getter; +import org.springframework.util.Assert; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; + +public class WatcherExtensionMatchers { + @Getter + private final ExtensionClient client; + private final GroupVersionKind gvk; + private final ExtensionMatcher onAddMatcher; + private final ExtensionMatcher onUpdateMatcher; + private final ExtensionMatcher onDeleteMatcher; + + /** + * Constructs a new {@link WatcherExtensionMatchers} with the given + * {@link DefaultExtensionMatcher}. + */ + @Builder(builderMethodName = "internalBuilder") + public WatcherExtensionMatchers(ExtensionClient client, + GroupVersionKind gvk, ExtensionMatcher onAddMatcher, + ExtensionMatcher onUpdateMatcher, ExtensionMatcher onDeleteMatcher) { + Assert.notNull(client, "The client must not be null."); + Assert.notNull(gvk, "The gvk must not be null."); + this.client = client; + this.gvk = gvk; + this.onAddMatcher = + Objects.requireNonNullElse(onAddMatcher, emptyMatcher(client, gvk)); + this.onUpdateMatcher = + Objects.requireNonNullElse(onUpdateMatcher, emptyMatcher(client, gvk)); + this.onDeleteMatcher = + Objects.requireNonNullElse(onDeleteMatcher, emptyMatcher(client, gvk)); + } + + public GroupVersionKind getGroupVersionKind() { + return this.gvk; + } + + public ExtensionMatcher onAddMatcher() { + return delegateExtensionMatcher(this.onAddMatcher); + } + + public ExtensionMatcher onUpdateMatcher() { + return delegateExtensionMatcher(this.onUpdateMatcher); + } + + public ExtensionMatcher onDeleteMatcher() { + return delegateExtensionMatcher(this.onDeleteMatcher); + } + + public static WatcherExtensionMatchersBuilder builder(ExtensionClient client, + GroupVersionKind gvk) { + return internalBuilder().gvk(gvk).client(client); + } + + static ExtensionMatcher emptyMatcher(ExtensionClient client, + GroupVersionKind gvk) { + return DefaultExtensionMatcher.builder(client, gvk).build(); + } + + /** + * Remove this method when the deprecated methods are removed. + */ + ExtensionMatcher delegateExtensionMatcher(ExtensionMatcher matcher) { + return new ExtensionMatcher() { + + @Override + public GroupVersionKind getGvk() { + return matcher.getGvk(); + } + + @Override + public LabelSelector getLabelSelector() { + return matcher.getLabelSelector(); + } + + @Override + public FieldSelector getFieldSelector() { + return matcher.getFieldSelector(); + } + + @Override + public boolean match(Extension extension) { + return extension.groupVersionKind().equals(gvk) && matcher.match(extension); + } + }; + } +} diff --git a/api/src/main/java/run/halo/app/extension/WatcherPredicates.java b/api/src/main/java/run/halo/app/extension/WatcherPredicates.java new file mode 100644 index 0000000..62a6afd --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/WatcherPredicates.java @@ -0,0 +1,99 @@ +package run.halo.app.extension; + +import java.util.function.BiPredicate; +import java.util.function.Predicate; + +public class WatcherPredicates { + + static final Predicate EMPTY_PREDICATE = (e) -> true; + + static final BiPredicate EMPTY_BI_PREDICATE = (oldExt, newExt) -> true; + private final Predicate onAddPredicate; + private final BiPredicate onUpdatePredicate; + private final Predicate onDeletePredicate; + + public WatcherPredicates(Predicate onAddPredicate, + BiPredicate onUpdatePredicate, + Predicate onDeletePredicate) { + this.onAddPredicate = onAddPredicate; + this.onUpdatePredicate = onUpdatePredicate; + this.onDeletePredicate = onDeletePredicate; + } + + public Predicate onAddPredicate() { + if (onAddPredicate == null) { + return EMPTY_PREDICATE; + } + return onAddPredicate; + } + + public BiPredicate onUpdatePredicate() { + if (onUpdatePredicate == null) { + return EMPTY_BI_PREDICATE; + } + return onUpdatePredicate; + } + + public Predicate onDeletePredicate() { + if (onDeletePredicate == null) { + return EMPTY_PREDICATE; + } + return onDeletePredicate; + } + + public static final class Builder { + + private Predicate onAddPredicate; + private BiPredicate onUpdatePredicate; + private Predicate onDeletePredicate; + + private GroupVersionKind gvk; + + public Builder withGroupVersionKind(GroupVersionKind gvk) { + this.gvk = gvk; + return this; + } + + public Builder onAddPredicate(Predicate onAddPredicate) { + this.onAddPredicate = onAddPredicate; + return this; + } + + public Builder onUpdatePredicate( + BiPredicate onUpdatePredicate) { + this.onUpdatePredicate = onUpdatePredicate; + return this; + } + + public Builder onDeletePredicate(Predicate onDeletePredicate) { + this.onDeletePredicate = onDeletePredicate; + return this; + } + + public WatcherPredicates build() { + Predicate gvkPredicate = EMPTY_PREDICATE; + BiPredicate gvkBiPredicate = EMPTY_BI_PREDICATE; + if (gvk != null) { + gvkPredicate = e -> gvk.equals(e.groupVersionKind()); + gvkBiPredicate = (oldE, newE) -> oldE.groupVersionKind().equals(gvk) + && newE.groupVersionKind().equals(gvk); + } + if (onAddPredicate == null) { + onAddPredicate = EMPTY_PREDICATE; + } + if (onUpdatePredicate == null) { + onUpdatePredicate = EMPTY_BI_PREDICATE; + } + if (onDeletePredicate == null) { + onDeletePredicate = EMPTY_PREDICATE; + } + + onAddPredicate = gvkPredicate.and(onAddPredicate); + onUpdatePredicate = gvkBiPredicate.and(onUpdatePredicate); + onDeletePredicate = gvkPredicate.and(onDeletePredicate); + + return new WatcherPredicates(onAddPredicate, onUpdatePredicate, onDeletePredicate); + } + + } +} diff --git a/api/src/main/java/run/halo/app/extension/controller/Controller.java b/api/src/main/java/run/halo/app/extension/controller/Controller.java new file mode 100644 index 0000000..680f09b --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/Controller.java @@ -0,0 +1,11 @@ +package run.halo.app.extension.controller; + +import reactor.core.Disposable; + +public interface Controller extends Disposable { + + String getName(); + + void start(); + +} diff --git a/api/src/main/java/run/halo/app/extension/controller/ControllerBuilder.java b/api/src/main/java/run/halo/app/extension/controller/ControllerBuilder.java new file mode 100644 index 0000000..6c36e25 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/ControllerBuilder.java @@ -0,0 +1,146 @@ +package run.halo.app.extension.controller; + +import java.time.Duration; +import java.time.Instant; +import java.util.function.Supplier; +import org.springframework.util.Assert; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionMatcher; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.WatcherExtensionMatchers; +import run.halo.app.extension.controller.Reconciler.Request; + +public class ControllerBuilder { + + private final String name; + + private Duration minDelay; + + private Duration maxDelay; + + private final Reconciler reconciler; + + private Supplier nowSupplier; + + private Extension extension; + + private ExtensionMatcher onAddMatcher; + + private ExtensionMatcher onDeleteMatcher; + + private ExtensionMatcher onUpdateMatcher; + + private ListOptions syncAllListOptions; + + private final ExtensionClient client; + + private boolean syncAllOnStart = true; + + private int workerCount = 1; + + public ControllerBuilder(Reconciler reconciler, ExtensionClient client) { + Assert.notNull(reconciler, "Reconciler must not be null"); + Assert.notNull(client, "Extension client must not be null"); + this.name = reconciler.getClass().getName(); + this.reconciler = reconciler; + this.client = client; + } + + public ControllerBuilder minDelay(Duration minDelay) { + this.minDelay = minDelay; + return this; + } + + public ControllerBuilder maxDelay(Duration maxDelay) { + this.maxDelay = maxDelay; + return this; + } + + public ControllerBuilder nowSupplier(Supplier nowSupplier) { + this.nowSupplier = nowSupplier; + return this; + } + + public ControllerBuilder extension(Extension extension) { + this.extension = extension; + return this; + } + + public ControllerBuilder onAddMatcher(ExtensionMatcher onAddMatcher) { + this.onAddMatcher = onAddMatcher; + return this; + } + + public ControllerBuilder onDeleteMatcher(ExtensionMatcher onDeleteMatcher) { + this.onDeleteMatcher = onDeleteMatcher; + return this; + } + + public ControllerBuilder onUpdateMatcher(ExtensionMatcher extensionMatcher) { + this.onUpdateMatcher = extensionMatcher; + return this; + } + + public ControllerBuilder syncAllOnStart(boolean syncAllAtStart) { + this.syncAllOnStart = syncAllAtStart; + return this; + } + + public ControllerBuilder syncAllListOptions(ListOptions syncAllListOptions) { + this.syncAllListOptions = syncAllListOptions; + return this; + } + + public ControllerBuilder workerCount(int workerCount) { + this.workerCount = workerCount; + return this; + } + + public Controller build() { + if (nowSupplier == null) { + nowSupplier = Instant::now; + } + if (minDelay == null || minDelay.isNegative() || minDelay.isZero()) { + minDelay = Duration.ofMillis(5); + } + if (maxDelay == null || maxDelay.isNegative() || maxDelay.isZero()) { + maxDelay = Duration.ofSeconds(1000); + } + Assert.isTrue(minDelay.compareTo(maxDelay) <= 0, + "Min delay must be less than or equal to max delay"); + Assert.notNull(extension, "Extension must not be null"); + Assert.notNull(reconciler, "Reconciler must not be null"); + + var queue = new DefaultQueue(nowSupplier, minDelay); + var extensionMatchers = WatcherExtensionMatchers.builder(client, + extension.groupVersionKind()) + .onAddMatcher(onAddMatcher) + .onUpdateMatcher(onUpdateMatcher) + .onDeleteMatcher(onDeleteMatcher) + .build(); + var watcher = new ExtensionWatcher(queue, extensionMatchers); + var synchronizer = new RequestSynchronizer(syncAllOnStart, + client, + extension, + watcher, + determineSyncAllListOptions()); + return new DefaultController<>(name, reconciler, queue, synchronizer, minDelay, maxDelay, + workerCount); + } + + ListOptions determineSyncAllListOptions() { + if (syncAllListOptions != null) { + return syncAllListOptions; + } + // In order to be compatible with the previous version of the code + // The previous version of the code determined syncAllListOptions through onAddMatcher + // TODO Will be removed later + if (onAddMatcher != null) { + return new ListOptions() + .setLabelSelector(onAddMatcher.getLabelSelector()) + .setFieldSelector(onAddMatcher.getFieldSelector()); + } + return new ListOptions(); + } +} diff --git a/api/src/main/java/run/halo/app/extension/controller/DefaultController.java b/api/src/main/java/run/halo/app/extension/controller/DefaultController.java new file mode 100644 index 0000000..532acfd --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/DefaultController.java @@ -0,0 +1,251 @@ +package run.halo.app.extension.controller; + +import java.time.Duration; +import java.time.Instant; +import java.util.concurrent.ExecutorService; +import java.util.concurrent.Executors; +import java.util.concurrent.ThreadFactory; +import java.util.concurrent.TimeUnit; +import java.util.concurrent.atomic.AtomicLong; +import java.util.function.Supplier; +import java.util.stream.IntStream; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.concurrent.BasicThreadFactory; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.lang.Nullable; +import org.springframework.util.Assert; +import org.springframework.util.StopWatch; +import run.halo.app.extension.controller.RequestQueue.DelayedEntry; + +@Slf4j +public class DefaultController implements Controller { + + private final String name; + + private final Reconciler reconciler; + + private final Supplier nowSupplier; + + private final RequestQueue queue; + + private volatile boolean disposed = false; + + private volatile boolean started = false; + + private final ExecutorService executor; + + @Nullable + private final Synchronizer synchronizer; + + private final Duration minDelay; + + private final Duration maxDelay; + + private final int workerCount; + + private final AtomicLong workerCounter; + + public DefaultController(String name, + Reconciler reconciler, + RequestQueue queue, + Synchronizer synchronizer, + Supplier nowSupplier, + Duration minDelay, + Duration maxDelay, + ExecutorService executor, int workerCount) { + Assert.isTrue(workerCount > 0, "Worker count must not be less than 1"); + this.name = name; + this.reconciler = reconciler; + this.nowSupplier = nowSupplier; + this.queue = queue; + this.synchronizer = synchronizer; + this.minDelay = minDelay; + this.maxDelay = maxDelay; + this.executor = executor; + this.workerCount = workerCount; + this.workerCounter = new AtomicLong(); + } + + public DefaultController(String name, + Reconciler reconciler, + RequestQueue queue, + Synchronizer synchronizer, + Duration minDelay, + Duration maxDelay) { + this(name, reconciler, queue, synchronizer, Instant::now, minDelay, maxDelay, 1); + } + + public DefaultController(String name, + Reconciler reconciler, + RequestQueue queue, + Synchronizer synchronizer, + Duration minDelay, + Duration maxDelay, int workerCount) { + this(name, reconciler, queue, synchronizer, Instant::now, minDelay, maxDelay, workerCount); + } + + public DefaultController(String name, + Reconciler reconciler, + RequestQueue queue, + Synchronizer synchronizer, + Supplier nowSupplier, + Duration minDelay, + Duration maxDelay, int workerCount) { + this(name, reconciler, queue, synchronizer, nowSupplier, minDelay, maxDelay, + Executors.newFixedThreadPool(workerCount, threadFactory(name)), workerCount); + } + + private static ThreadFactory threadFactory(String name) { + return new BasicThreadFactory.Builder() + .namingPattern(name + "-t-%d") + .daemon(false) + .uncaughtExceptionHandler((t, e) -> + log.error("Controller " + t.getName() + " encountered an error unexpectedly", e)) + .build(); + } + + @Override + public String getName() { + return name; + } + + public int getWorkerCount() { + return workerCount; + } + + @Override + public void start() { + if (isStarted() || isDisposed()) { + log.warn("Controller {} is already started or disposed.", getName()); + return; + } + this.started = true; + log.info("Starting controller {}", name); + IntStream.range(0, getWorkerCount()) + .mapToObj(i -> new Worker()) + .forEach(executor::submit); + } + + /** + * Worker for controller. + * + * @author johnniang + */ + class Worker implements Runnable { + + private final String name; + + Worker() { + this.name = + DefaultController.this.getName() + "-worker-" + workerCounter.incrementAndGet(); + } + + public String getName() { + return name; + } + + @Override + public void run() { + log.info("Controller worker {} started", this.name); + if (synchronizer != null) { + synchronizer.start(); + } + while (!isDisposed() && !Thread.currentThread().isInterrupted()) { + try { + var entry = queue.take(); + Reconciler.Result result; + try { + log.debug("{} >>> Reconciling request {} at {}", this.name, + entry.getEntry(), + nowSupplier.get()); + var watch = new StopWatch(this.name + ":reconcile: " + entry.getEntry()); + watch.start("reconciliation"); + result = reconciler.reconcile(entry.getEntry()); + watch.stop(); + log.debug("{} >>> Reconciled request: {} with result: {}, usage: {}", + this.name, entry.getEntry(), result, watch.getTotalTimeMillis()); + } catch (Throwable t) { + result = new Reconciler.Result(true, null); + if (t instanceof OptimisticLockingFailureException) { + log.warn("Optimistic locking failure when reconciling request: {}/{}", + this.name, entry.getEntry()); + } else if (t instanceof RequeueException re) { + result = re.getResult(); + } else { + log.error("Reconciler in " + this.name + + " aborted with an error, re-enqueuing...", + t); + } + } finally { + queue.done(entry.getEntry()); + } + if (result == null) { + result = new Reconciler.Result(false, null); + } + if (!result.reEnqueue()) { + continue; + } + var retryAfter = result.retryAfter(); + if (retryAfter == null) { + retryAfter = entry.getRetryAfter(); + if (retryAfter == null + || retryAfter.isNegative() + || retryAfter.isZero() + || retryAfter.compareTo(minDelay) < 0) { + // set min retry after + retryAfter = minDelay; + } else { + try { + // TODO Refactor the retryAfter with ratelimiter + retryAfter = retryAfter.multipliedBy(2); + } catch (ArithmeticException e) { + retryAfter = maxDelay; + } + } + if (retryAfter.compareTo(maxDelay) > 0) { + retryAfter = maxDelay; + } + } + queue.add( + new DelayedEntry<>(entry.getEntry(), retryAfter, nowSupplier)); + } catch (InterruptedException e) { + Thread.currentThread().interrupt(); + log.info("Controller worker {} interrupted", name); + } + } + log.info("Controller worker {} is stopped", name); + } + } + + @Override + public void dispose() { + disposed = true; + log.info("Disposing controller {}", name); + + if (synchronizer != null) { + synchronizer.dispose(); + } + + executor.shutdownNow(); + try { + if (!executor.awaitTermination(10, TimeUnit.SECONDS)) { + log.warn("Wait timeout for controller {} shutdown", name); + } else { + log.info("Controller {} is disposed", name); + } + } catch (InterruptedException e) { + log.warn("Interrupted while waiting for controller {} shutdown", name); + } finally { + queue.dispose(); + } + } + + @Override + public boolean isDisposed() { + return disposed; + } + + public boolean isStarted() { + return started; + } +} diff --git a/api/src/main/java/run/halo/app/extension/controller/DefaultQueue.java b/api/src/main/java/run/halo/app/extension/controller/DefaultQueue.java new file mode 100644 index 0000000..e3556f5 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/DefaultQueue.java @@ -0,0 +1,159 @@ +package run.halo.app.extension.controller; + +import java.time.Duration; +import java.time.Instant; +import java.util.HashSet; +import java.util.Optional; +import java.util.Set; +import java.util.concurrent.DelayQueue; +import java.util.concurrent.locks.Lock; +import java.util.concurrent.locks.ReentrantLock; +import java.util.function.Supplier; +import lombok.extern.slf4j.Slf4j; + +@Slf4j +public class DefaultQueue implements RequestQueue { + + private final Lock lock; + + private final DelayQueue> queue; + + private final Supplier nowSupplier; + + private volatile boolean disposed = false; + + private final Duration minDelay; + + private final Set processing; + + private final Set dirty; + + public DefaultQueue(Supplier nowSupplier) { + this(nowSupplier, Duration.ZERO); + } + + public DefaultQueue(Supplier nowSupplier, Duration minDelay) { + this.lock = new ReentrantLock(); + this.nowSupplier = nowSupplier; + this.minDelay = minDelay; + this.processing = new HashSet<>(); + this.dirty = new HashSet<>(); + this.queue = new DelayQueue<>(); + } + + @Override + public boolean addImmediately(R request) { + log.debug("Adding request {} immediately", request); + var delayedEntry = new DelayedEntry<>(request, minDelay, nowSupplier); + return add(delayedEntry); + } + + @Override + public boolean add(DelayedEntry entry) { + lock.lock(); + try { + if (isDisposed()) { + return false; + } + log.debug("Adding request {} after {}", entry.getEntry(), entry.getRetryAfter()); + if (entry.getRetryAfter().compareTo(minDelay) < 0) { + log.warn("Request {} will be retried after {} ms, but minimum delay is {} ms", + entry.getEntry(), entry.getRetryAfter().toMillis(), minDelay.toMillis()); + entry = new DelayedEntry<>(entry.getEntry(), minDelay, nowSupplier); + } + if (dirty.contains(entry.getEntry())) { + var oldEntry = findOldEntry(entry); + if (oldEntry.isEmpty()) { + return false; + } + var oldReadyAt = oldEntry.get().getReadyAt(); + var readyAt = entry.getReadyAt(); + if (!readyAt.isBefore(oldReadyAt)) { + return false; + } + } + dirty.add(entry.getEntry()); + if (processing.contains(entry.getEntry())) { + return false; + } + + boolean added = queue.add(entry); + log.debug("Added request {} after {}", entry.getEntry(), entry.getRetryAfter()); + return added; + } finally { + lock.unlock(); + } + } + + @Override + public DelayedEntry take() throws InterruptedException { + var entry = queue.take(); + log.debug("Take request {} at {}", entry.getEntry(), Instant.now()); + lock.lockInterruptibly(); + try { + if (isDisposed()) { + throw new InterruptedException( + "Queue has been disposed. Cannot take any elements now"); + } + processing.add(entry.getEntry()); + dirty.remove(entry.getEntry()); + return entry; + } finally { + lock.unlock(); + } + } + + @Override + public void done(R request) { + lock.lock(); + try { + if (isDisposed()) { + return; + } + processing.remove(request); + if (dirty.contains(request)) { + queue.add(new DelayedEntry<>(request, minDelay, nowSupplier)); + } + } finally { + lock.unlock(); + } + } + + @Override + public long size() { + return queue.size(); + } + + @Override + public DelayedEntry peek() { + return queue.peek(); + } + + @Override + public void dispose() { + lock.lock(); + try { + disposed = true; + queue.clear(); + processing.clear(); + dirty.clear(); + } finally { + lock.unlock(); + } + } + + @Override + public boolean isDisposed() { + return this.disposed; + } + + private Optional> findOldEntry(DelayedEntry entry) { + for (DelayedEntry element : queue) { + if (element.equals(entry)) { + return Optional.of(element); + } + } + return Optional.empty(); + } + +} diff --git a/api/src/main/java/run/halo/app/extension/controller/ExtensionWatcher.java b/api/src/main/java/run/halo/app/extension/controller/ExtensionWatcher.java new file mode 100644 index 0000000..3e0f854 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/ExtensionWatcher.java @@ -0,0 +1,76 @@ +package run.halo.app.extension.controller; + +import run.halo.app.extension.Extension; +import run.halo.app.extension.Watcher; +import run.halo.app.extension.WatcherExtensionMatchers; +import run.halo.app.extension.controller.Reconciler.Request; + +public class ExtensionWatcher implements Watcher { + + private final RequestQueue queue; + + private volatile boolean disposed = false; + + private Runnable disposeHook; + + private final WatcherExtensionMatchers matchers; + + public ExtensionWatcher(RequestQueue queue, WatcherExtensionMatchers matchers) { + this.queue = queue; + this.matchers = matchers; + } + + @Override + public void onAdd(Request request) { + if (isDisposed()) { + return; + } + queue.addImmediately(request); + } + + @Override + public void onAdd(Extension extension) { + if (isDisposed() || !matchers.onAddMatcher().match(extension)) { + return; + } + // TODO filter the event + queue.addImmediately(new Request(extension.getMetadata().getName())); + } + + @Override + public void onUpdate(Extension oldExtension, Extension newExtension) { + if (isDisposed() || !matchers.onUpdateMatcher().match(newExtension)) { + return; + } + // TODO filter the event + queue.addImmediately(new Request(newExtension.getMetadata().getName())); + } + + @Override + public void onDelete(Extension extension) { + if (isDisposed() || !matchers.onDeleteMatcher().match(extension)) { + return; + } + // TODO filter the event + queue.addImmediately(new Request(extension.getMetadata().getName())); + } + + @Override + public void registerDisposeHook(Runnable dispose) { + this.disposeHook = dispose; + } + + @Override + public void dispose() { + disposed = true; + if (this.disposeHook != null) { + this.disposeHook.run(); + } + } + + @Override + public boolean isDisposed() { + return this.disposed; + } + +} diff --git a/api/src/main/java/run/halo/app/extension/controller/Reconciler.java b/api/src/main/java/run/halo/app/extension/controller/Reconciler.java new file mode 100644 index 0000000..c8a6c92 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/Reconciler.java @@ -0,0 +1,24 @@ +package run.halo.app.extension.controller; + +import java.time.Duration; + +public interface Reconciler { + + Result reconcile(R request); + + Controller setupWith(ControllerBuilder builder); + + record Request(String name) { + } + + record Result(boolean reEnqueue, Duration retryAfter) { + + public static Result doNotRetry() { + return new Result(false, null); + } + + public static Result requeue(Duration retryAfter) { + return new Result(true, retryAfter); + } + } +} diff --git a/api/src/main/java/run/halo/app/extension/controller/RequestQueue.java b/api/src/main/java/run/halo/app/extension/controller/RequestQueue.java new file mode 100644 index 0000000..f95acc6 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/RequestQueue.java @@ -0,0 +1,89 @@ +package run.halo.app.extension.controller; + +import java.time.Duration; +import java.time.Instant; +import java.util.Objects; +import java.util.concurrent.Delayed; +import java.util.concurrent.TimeUnit; +import java.util.function.Supplier; +import reactor.core.Disposable; + +public interface RequestQueue extends Disposable { + + boolean addImmediately(E request); + + boolean add(DelayedEntry entry); + + DelayedEntry take() throws InterruptedException; + + void done(E request); + + long size(); + + DelayedEntry peek(); + + class DelayedEntry implements Delayed { + + private final E entry; + + private final Instant readyAt; + + private final Supplier nowSupplier; + + private final Duration retryAfter; + + DelayedEntry(E entry, Duration retryAfter, Supplier nowSupplier) { + this.entry = entry; + this.readyAt = nowSupplier.get().plusMillis(retryAfter.toMillis()); + this.nowSupplier = nowSupplier; + this.retryAfter = retryAfter; + } + + public DelayedEntry(E entry, Instant readyAt, Supplier nowSupplier) { + this.entry = entry; + this.readyAt = readyAt; + this.nowSupplier = nowSupplier; + this.retryAfter = Duration.between(nowSupplier.get(), readyAt); + } + + @Override + public long getDelay(TimeUnit unit) { + Duration diff = Duration.between(nowSupplier.get(), readyAt); + return unit.convert(diff); + } + + public Duration getRetryAfter() { + return retryAfter; + } + + public Instant getReadyAt() { + return readyAt; + } + + @Override + public int compareTo(Delayed o) { + return Long.compare(getDelay(TimeUnit.MILLISECONDS), o.getDelay(TimeUnit.MILLISECONDS)); + } + + public E getEntry() { + return entry; + } + + @Override + public boolean equals(Object o) { + if (this == o) { + return true; + } + if (o == null || getClass() != o.getClass()) { + return false; + } + DelayedEntry that = (DelayedEntry) o; + return Objects.equals(entry, that.entry); + } + + @Override + public int hashCode() { + return Objects.hash(entry); + } + } +} diff --git a/api/src/main/java/run/halo/app/extension/controller/RequestSynchronizer.java b/api/src/main/java/run/halo/app/extension/controller/RequestSynchronizer.java new file mode 100644 index 0000000..bdb7ddf --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/RequestSynchronizer.java @@ -0,0 +1,73 @@ +package run.halo.app.extension.controller; + +import lombok.Getter; +import lombok.extern.slf4j.Slf4j; +import org.springframework.data.domain.Sort; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.Watcher; +import run.halo.app.extension.controller.Reconciler.Request; +import run.halo.app.extension.index.IndexedQueryEngine; + +@Slf4j +public class RequestSynchronizer implements Synchronizer { + + private final ExtensionClient client; + + private final GroupVersionKind type; + + private final boolean syncAllOnStart; + + private volatile boolean disposed = false; + + private final IndexedQueryEngine indexedQueryEngine; + + private final Watcher watcher; + + private final ListOptions listOptions; + + @Getter + private volatile boolean started = false; + + public RequestSynchronizer(boolean syncAllOnStart, + ExtensionClient client, + Extension extension, + Watcher watcher, + ListOptions listOptions) { + this.syncAllOnStart = syncAllOnStart; + this.client = client; + this.type = extension.groupVersionKind(); + this.watcher = watcher; + this.indexedQueryEngine = client.indexedQueryEngine(); + this.listOptions = listOptions; + } + + @Override + public void start() { + if (isDisposed() || started) { + return; + } + log.info("Starting request({}) synchronizer...", type); + started = true; + + if (syncAllOnStart) { + indexedQueryEngine.retrieveAll(type, listOptions, Sort.by("metadata.creationTimestamp")) + .forEach(name -> watcher.onAdd(new Request(name))); + } + client.watch(this.watcher); + log.info("Started request({}) synchronizer.", type); + } + + @Override + public void dispose() { + disposed = true; + watcher.dispose(); + } + + @Override + public boolean isDisposed() { + return this.disposed; + } +} diff --git a/api/src/main/java/run/halo/app/extension/controller/RequeueException.java b/api/src/main/java/run/halo/app/extension/controller/RequeueException.java new file mode 100644 index 0000000..bbb96f2 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/RequeueException.java @@ -0,0 +1,31 @@ +package run.halo.app.extension.controller; + +import run.halo.app.extension.controller.Reconciler.Result; + + +/** + * Requeue with result data after throwing this exception. + * + * @author johnniang + */ +public class RequeueException extends RuntimeException { + + private final Result result; + + public RequeueException(Result result) { + this(result, null); + } + + public RequeueException(Result result, String reason) { + this(result, reason, null); + } + + public RequeueException(Result result, String reason, Throwable t) { + super(reason, t); + this.result = result; + } + + public Result getResult() { + return result; + } +} diff --git a/api/src/main/java/run/halo/app/extension/controller/Synchronizer.java b/api/src/main/java/run/halo/app/extension/controller/Synchronizer.java new file mode 100644 index 0000000..00299f0 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/controller/Synchronizer.java @@ -0,0 +1,9 @@ +package run.halo.app.extension.controller; + +import reactor.core.Disposable; + +public interface Synchronizer extends Disposable { + + void start(); + +} diff --git a/api/src/main/java/run/halo/app/extension/exception/ExtensionException.java b/api/src/main/java/run/halo/app/extension/exception/ExtensionException.java new file mode 100644 index 0000000..7222974 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/exception/ExtensionException.java @@ -0,0 +1,26 @@ +package run.halo.app.extension.exception; + +import org.springframework.http.HttpStatus; +import org.springframework.http.HttpStatusCode; +import org.springframework.web.server.ResponseStatusException; + +/** + * ExtensionException is the superclass of those exceptions that can be thrown by Extension module. + * + * @author johnniang + */ +public class ExtensionException extends ResponseStatusException { + + public ExtensionException(String reason) { + this(reason, null); + } + + public ExtensionException(String reason, Throwable cause) { + this(HttpStatus.INTERNAL_SERVER_ERROR, reason, cause, null, new Object[] {reason}); + } + + protected ExtensionException(HttpStatusCode status, String reason, Throwable cause, + String messageDetailCode, Object[] messageDetailArguments) { + super(status, reason, cause, messageDetailCode, messageDetailArguments); + } +} diff --git a/api/src/main/java/run/halo/app/extension/exception/SchemeNotFoundException.java b/api/src/main/java/run/halo/app/extension/exception/SchemeNotFoundException.java new file mode 100644 index 0000000..ee6b01d --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/exception/SchemeNotFoundException.java @@ -0,0 +1,18 @@ +package run.halo.app.extension.exception; + +import org.springframework.http.HttpStatus; +import run.halo.app.extension.GroupVersionKind; + +/** + * SchemeNotFoundException is thrown while we try to get a scheme but not found. + * + * @author johnniang + */ +public class SchemeNotFoundException extends ExtensionException { + + public SchemeNotFoundException(GroupVersionKind gvk) { + super(HttpStatus.INTERNAL_SERVER_ERROR, "Scheme not found for " + gvk, null, null, + new Object[] {gvk}); + } + +} diff --git a/api/src/main/java/run/halo/app/extension/index/AbstractIndexAttribute.java b/api/src/main/java/run/halo/app/extension/index/AbstractIndexAttribute.java new file mode 100644 index 0000000..bfe56a7 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/AbstractIndexAttribute.java @@ -0,0 +1,33 @@ +package run.halo.app.extension.index; + +import lombok.EqualsAndHashCode; +import org.springframework.util.Assert; +import run.halo.app.extension.Extension; +import run.halo.app.extension.GVK; + +@EqualsAndHashCode +public abstract class AbstractIndexAttribute implements IndexAttribute { + private final Class objectType; + + /** + * Creates a new {@link AbstractIndexAttribute} for the given object type. + * + * @param objectType must not be {@literal null}. + */ + public AbstractIndexAttribute(Class objectType) { + Assert.notNull(objectType, "Object type must not be null"); + Assert.state(isValidExtension(objectType), + "Invalid extension type, make sure you have annotated it with @" + GVK.class + .getSimpleName()); + this.objectType = objectType; + } + + @Override + public Class getObjectType() { + return this.objectType; + } + + boolean isValidExtension(Class type) { + return type.getAnnotation(GVK.class) != null; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/FunctionalIndexAttribute.java b/api/src/main/java/run/halo/app/extension/index/FunctionalIndexAttribute.java new file mode 100644 index 0000000..c33f0cd --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/FunctionalIndexAttribute.java @@ -0,0 +1,49 @@ +package run.halo.app.extension.index; + +import java.util.Set; +import java.util.function.Function; +import lombok.EqualsAndHashCode; +import org.springframework.lang.Nullable; +import org.springframework.util.Assert; +import run.halo.app.extension.Extension; + +@EqualsAndHashCode(callSuper = true) +public class FunctionalIndexAttribute + extends AbstractIndexAttribute { + + @EqualsAndHashCode.Exclude + private final Function valueFunc; + + /** + * Creates a new {@link FunctionalIndexAttribute} for the given object type and value function. + * + * @param objectType must not be {@literal null}. + * @param valueFunc value function must not be {@literal null}. + */ + public FunctionalIndexAttribute(Class objectType, + Function valueFunc) { + super(objectType); + Assert.notNull(valueFunc, "Value function must not be null"); + this.valueFunc = valueFunc; + } + + @Override + public Set getValues(Extension object) { + var value = getValue(object); + return value == null ? Set.of() : Set.of(value); + } + + /** + * Gets the value for the given object. + * + * @param object the object to get the value for. + * @return returns the value for the given object. + */ + @Nullable + public String getValue(Extension object) { + if (getObjectType().isInstance(object)) { + return valueFunc.apply(getObjectType().cast(object)); + } + throw new IllegalArgumentException("Object type does not match"); + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/FunctionalMultiValueIndexAttribute.java b/api/src/main/java/run/halo/app/extension/index/FunctionalMultiValueIndexAttribute.java new file mode 100644 index 0000000..adbc529 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/FunctionalMultiValueIndexAttribute.java @@ -0,0 +1,41 @@ +package run.halo.app.extension.index; + +import java.util.Set; +import java.util.function.Function; +import lombok.EqualsAndHashCode; +import org.springframework.util.Assert; +import run.halo.app.extension.Extension; + +@EqualsAndHashCode(callSuper = true) +public class FunctionalMultiValueIndexAttribute + extends AbstractIndexAttribute { + + @EqualsAndHashCode.Exclude + private final Function> valueFunc; + + /** + * Creates a new {@link FunctionalIndexAttribute} for the given object type and value function. + * + * @param objectType object type must not be {@literal null}. + * @param valueFunc value function must not be {@literal null}. + */ + public FunctionalMultiValueIndexAttribute(Class objectType, + Function> valueFunc) { + super(objectType); + Assert.notNull(valueFunc, "Value function must not be null"); + this.valueFunc = valueFunc; + } + + @Override + public Set getValues(Extension object) { + if (getObjectType().isInstance(object)) { + return getNonNullValues(getObjectType().cast(object)); + } + throw new IllegalArgumentException("Object type does not match"); + } + + private Set getNonNullValues(E object) { + var values = valueFunc.apply(object); + return values == null ? Set.of() : values; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexAttribute.java b/api/src/main/java/run/halo/app/extension/index/IndexAttribute.java new file mode 100644 index 0000000..a75e40a --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexAttribute.java @@ -0,0 +1,23 @@ +package run.halo.app.extension.index; + +import java.util.Set; +import run.halo.app.extension.Extension; + +public interface IndexAttribute { + + /** + * Specify this class is belonged to which extension. + * + * @return the extension class. + */ + Class getObjectType(); + + /** + * Get the value of the attribute. + * + * @param object the object to get value from. + * @param the type of the object. + * @return the value of the attribute must not be null. + */ + Set getValues(E object); +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexAttributeFactory.java b/api/src/main/java/run/halo/app/extension/index/IndexAttributeFactory.java new file mode 100644 index 0000000..81755f0 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexAttributeFactory.java @@ -0,0 +1,20 @@ +package run.halo.app.extension.index; + +import java.util.Set; +import java.util.function.Function; +import lombok.experimental.UtilityClass; +import run.halo.app.extension.Extension; + +@UtilityClass +public class IndexAttributeFactory { + + public static IndexAttribute simpleAttribute(Class type, + Function valueFunc) { + return new FunctionalIndexAttribute<>(type, valueFunc); + } + + public static IndexAttribute multiValueAttribute(Class type, + Function> valueFunc) { + return new FunctionalMultiValueIndexAttribute<>(type, valueFunc); + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexDescriptor.java b/api/src/main/java/run/halo/app/extension/index/IndexDescriptor.java new file mode 100644 index 0000000..086ffe8 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexDescriptor.java @@ -0,0 +1,20 @@ +package run.halo.app.extension.index; + +import lombok.Data; +import lombok.ToString; + +@Data +@ToString(callSuper = true) +public class IndexDescriptor { + + private final IndexSpec spec; + + /** + * Record whether the index is ready, managed by {@code IndexBuilder}. + */ + private boolean ready; + + public IndexDescriptor(IndexSpec spec) { + this.spec = spec; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexEntry.java b/api/src/main/java/run/halo/app/extension/index/IndexEntry.java new file mode 100644 index 0000000..d6ec03e --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexEntry.java @@ -0,0 +1,132 @@ +package run.halo.app.extension.index; + +import java.util.Collection; +import java.util.List; +import java.util.Map; +import java.util.NavigableSet; +import run.halo.app.extension.Metadata; + +/** + *

{@link IndexEntry} used to store the mapping between index key and + * {@link Metadata#getName()}.

+ *

For example, if we have a {@link Metadata} with name {@code foo} and labels {@code bar=1} + * and {@code baz=2}, then the index entry will be:

+ * 
+ *     bar=1 -> foo
+ *     baz=2 -> foo
+ *
+ *

And if we have another {@link Metadata} with name {@code bar} and labels {@code bar=1} + * and {@code baz=3}, then the index entry will be:

+ * 
+ *     bar=1 -> foo, bar
+ *     baz=2 -> foo
+ *     baz=3 -> bar
+ *
+ *

{@link #getIndexDescriptor()} describes the owner of this index entry.

+ *

Index entries is ordered by key, and the order is determined by + * {@link IndexSpec#getOrder()}.

+ *

Do not modify the returned result for all methods of this class.

+ *

This class is thread-safe.

+ * + * @author guqing + * @since 2.12.0 + */ +public interface IndexEntry { + + /** + * Acquires the read lock for reading such as {@link #getObjectNamesBy(String)}, + * {@link #entries()}, {@link #indexedKeys()}, because the returned result set of these + * methods is not immutable. + */ + void acquireReadLock(); + + /** + * Releases the read lock. + */ + void releaseReadLock(); + + /** + *

Adds a new entry to this index entry.

+ *

For example, if we have a {@link Metadata} with name {@code foo} and labels {@code bar=1} + * and {@code baz=2} and index order is {@link IndexSpec.OrderType#ASC}, then the index entry + * will be:

+ * 
+     *     bar=1 -> foo
+     *     baz=2 -> foo
+     *
+ * + * @param indexKeys index keys + * @param objectKey object key (usually is {@link Metadata#getName()}). + */ + void addEntry(List indexKeys, String objectKey); + + /** + * Removes the entry with the given {@code indexedKey} and {@code objectKey}. + * + * @param indexedKey indexed key + * @param objectKey object key (usually is {@link Metadata#getName()}). + */ + void removeEntry(String indexedKey, String objectKey); + + /** + * Removes all entries with the given {@code objectKey}. + * + * @param objectKey object key(usually is {@link Metadata#getName()}). + */ + void remove(String objectKey); + + /** + * Returns the {@link IndexDescriptor} of this entry. + * + * @return the {@link IndexDescriptor} of this entry. + */ + IndexDescriptor getIndexDescriptor(); + + /** + * Returns the indexed keys of this entry in order. + * + * @return distinct indexed keys of this entry. + */ + NavigableSet indexedKeys(); + + /** + *

Returns the entries of this entry in order.

+ *

Note That: Any modification to the returned result will affect the original data + * directly.

+ * + * @return entries of this entry. + */ + Collection> entries(); + + /** + *

Returns the position of the object name in the indexed attribute value mapping for + * sorting.

+ * For example: + * 
+     * metadata.name | field1
+     * ------------- | ------
+     * foo           | 1
+     * bar           | 2
+     * baz           | 2
+     *
+ * "field1" is the indexed attribute, and the position of the object name in the indexed + * attribute + * value mapping for sorting is: + * 
+     * foo -> 0
+     * bar -> 1
+     * baz -> 1
+     *
+ * "bar" and "baz" have the same value, so they have the same position. + */ + Map getIdPositionMap(); + + /** + * Returns the object names of this entry in order. + * + * @return object names of this entry. + */ + List getObjectNamesBy(String indexKey); + + void clear(); +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexEntryOperator.java b/api/src/main/java/run/halo/app/extension/index/IndexEntryOperator.java new file mode 100644 index 0000000..5f3360b --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexEntryOperator.java @@ -0,0 +1,55 @@ +package run.halo.app.extension.index; + +import java.util.Collection; +import java.util.NavigableSet; +import java.util.Set; + +public interface IndexEntryOperator { + + /** + * Search all values that key less than the target key. + * + * @param key target key + * @param orEqual whether to include the value of the target key + * @return object names that key less than the target key + */ + NavigableSet lessThan(String key, boolean orEqual); + + /** + * Search all values that key greater than the target key. + * + * @param key target key + * @param orEqual whether to include the value of the target key + * @return object names that key greater than the target key + */ + NavigableSet greaterThan(String key, boolean orEqual); + + /** + * Search all values that key in the range of [start, end]. + * + * @param start start key + * @param end end key + * @param startInclusive whether to include the value of the start key + * @param endInclusive whether to include the value of the end key + * @return object names that key in the range of [start, end] + */ + NavigableSet range(String start, String end, boolean startInclusive, + boolean endInclusive); + + /** + * Find all values that key equals to the target key. + * + * @param key target key + * @return object names that key equals to the target key + */ + NavigableSet find(String key); + + NavigableSet findIn(Collection keys); + + /** + * Get all values in the index entry. + * + * @return a set of all object names + */ + Set getValues(); +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexEntryOperatorImpl.java b/api/src/main/java/run/halo/app/extension/index/IndexEntryOperatorImpl.java new file mode 100644 index 0000000..8570e31 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexEntryOperatorImpl.java @@ -0,0 +1,112 @@ +package run.halo.app.extension.index; + +import java.util.Collection; +import java.util.HashSet; +import java.util.Map; +import java.util.NavigableSet; +import java.util.Set; +import java.util.TreeSet; +import org.springframework.util.Assert; + +public class IndexEntryOperatorImpl implements IndexEntryOperator { + private final IndexEntry indexEntry; + + public IndexEntryOperatorImpl(IndexEntry indexEntry) { + this.indexEntry = indexEntry; + } + + private static NavigableSet createNavigableSet() { + return new TreeSet<>(KeyComparator.INSTANCE); + } + + @Override + public NavigableSet lessThan(String key, boolean orEqual) { + Assert.notNull(key, "Key must not be null."); + indexEntry.acquireReadLock(); + try { + var navigableIndexedKeys = indexEntry.indexedKeys(); + var headSetKeys = navigableIndexedKeys.headSet(key, orEqual); + return findIn(headSetKeys); + } finally { + indexEntry.releaseReadLock(); + } + } + + @Override + public NavigableSet greaterThan(String key, boolean orEqual) { + Assert.notNull(key, "Key must not be null."); + indexEntry.acquireReadLock(); + try { + var navigableIndexedKeys = indexEntry.indexedKeys(); + var tailSetKeys = navigableIndexedKeys.tailSet(key, orEqual); + return findIn(tailSetKeys); + } finally { + indexEntry.releaseReadLock(); + } + } + + @Override + public NavigableSet range(String start, String end, boolean startInclusive, + boolean endInclusive) { + Assert.notNull(start, "The start must not be null."); + Assert.notNull(end, "The end must not be null."); + indexEntry.acquireReadLock(); + try { + var navigableIndexedKeys = indexEntry.indexedKeys(); + var tailSetKeys = navigableIndexedKeys.subSet(start, startInclusive, end, endInclusive); + return findIn(tailSetKeys); + } finally { + indexEntry.releaseReadLock(); + } + } + + @Override + public NavigableSet find(String key) { + Assert.notNull(key, "The key must not be null."); + indexEntry.acquireReadLock(); + try { + var resultSet = createNavigableSet(); + var result = indexEntry.getObjectNamesBy(key); + if (result != null) { + resultSet.addAll(result); + } + return resultSet; + } finally { + indexEntry.releaseReadLock(); + } + } + + @Override + public NavigableSet findIn(Collection keys) { + if (keys == null || keys.isEmpty()) { + return createNavigableSet(); + } + indexEntry.acquireReadLock(); + try { + var keysToSearch = new HashSet<>(keys); + var resultSet = createNavigableSet(); + for (var entry : indexEntry.entries()) { + if (keysToSearch.contains(entry.getKey())) { + resultSet.add(entry.getValue()); + } + } + return resultSet; + } finally { + indexEntry.releaseReadLock(); + } + } + + @Override + public Set getValues() { + indexEntry.acquireReadLock(); + try { + Set uniqueValues = new HashSet<>(); + for (Map.Entry entry : indexEntry.entries()) { + uniqueValues.add(entry.getValue()); + } + return uniqueValues; + } finally { + indexEntry.releaseReadLock(); + } + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexSpec.java b/api/src/main/java/run/halo/app/extension/index/IndexSpec.java new file mode 100644 index 0000000..e351d8e --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexSpec.java @@ -0,0 +1,39 @@ +package run.halo.app.extension.index; + +import com.google.common.base.Objects; +import lombok.Data; +import lombok.experimental.Accessors; + +@Data +@Accessors(chain = true) +public class IndexSpec { + private String name; + + private IndexAttribute indexFunc; + + private OrderType order; + + private boolean unique; + + public enum OrderType { + ASC, + DESC + } + + @Override + public boolean equals(Object o) { + if (this == o) { + return true; + } + if (o == null || getClass() != o.getClass()) { + return false; + } + IndexSpec indexSpec = (IndexSpec) o; + return Objects.equal(name, indexSpec.name); + } + + @Override + public int hashCode() { + return Objects.hashCode(name); + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexSpecRegistry.java b/api/src/main/java/run/halo/app/extension/index/IndexSpecRegistry.java new file mode 100644 index 0000000..451ca42 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexSpecRegistry.java @@ -0,0 +1,54 @@ +package run.halo.app.extension.index; + +import org.springframework.lang.NonNull; +import run.halo.app.extension.Extension; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.Scheme; + +/** + *

{@link IndexSpecRegistry} is a registry for {@link IndexSpecs} to manage {@link IndexSpecs} + * for different {@link Extension}.

+ * + * @author guqing + * @since 2.12.0 + */ +public interface IndexSpecRegistry { + /** + *

Create a new {@link IndexSpecs} for the given {@link Scheme}.

+ *

The returned {@link IndexSpecs} is always includes some default {@link IndexSpec} that + * does not need to be registered again:

+ *
    + *
  • {@link Metadata#getName()} for unique primary index spec named metadata_name
    • + *
  • {@link Metadata#getCreationTimestamp()} for creation_timestamp index spec
    • + *
  • {@link Metadata#getDeletionTimestamp()} for deletion_timestamp index spec
    • + *
  • {@link Metadata#getLabels()} for labels index spec
    • + *
+ * + * @param scheme must not be {@literal null}. + * @return the {@link IndexSpecs} for the given {@link Scheme}. + */ + IndexSpecs indexFor(Scheme scheme); + + /** + * Get {@link IndexSpecs} for the given {@link Scheme} type registered before. + * + * @param scheme must not be {@literal null}. + * @return the {@link IndexSpecs} for the given {@link Scheme}. + * @throws IllegalArgumentException if no {@link IndexSpecs} found for the given + * {@link Scheme}. + */ + IndexSpecs getIndexSpecs(Scheme scheme); + + boolean contains(Scheme scheme); + + void removeIndexSpecs(Scheme scheme); + + /** + * Get key space for an extension type. + * + * @param scheme is a scheme of an Extension. + * @return key space(never null) + */ + @NonNull + String getKeySpace(Scheme scheme); +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexSpecs.java b/api/src/main/java/run/halo/app/extension/index/IndexSpecs.java new file mode 100644 index 0000000..c84bead --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexSpecs.java @@ -0,0 +1,54 @@ +package run.halo.app.extension.index; + +import java.util.List; +import org.springframework.lang.Nullable; + +/** + * An interface that defines a collection of {@link IndexSpec}, and provides methods to add, + * remove, and get {@link IndexSpec}. + * + * @author guqing + * @since 2.12.0 + */ +public interface IndexSpecs { + + /** + * Add a new {@link IndexSpec} to the collection. + * + * @param indexSpec the index spec to add. + * @throws IllegalArgumentException if the index spec with the same name already exists or + * the index spec is invalid + */ + void add(IndexSpec indexSpec); + + /** + * Get all {@link IndexSpec} in the collection. + * + * @return all index specs + */ + List getIndexSpecs(); + + /** + * Get the {@link IndexSpec} with the given name. + * + * @param indexName the name of the index spec to get. + * @return the index spec with the given name, or {@code null} if not found. + */ + @Nullable + IndexSpec getIndexSpec(String indexName); + + /** + * Check if the collection contains the {@link IndexSpec} with the given name. + * + * @param indexName the name of the index spec to check. + * @return {@code true} if the collection contains the index spec with the given name, + */ + boolean contains(String indexName); + + /** + * Remove the {@link IndexSpec} with the given name. + * + * @param name the name of the index spec to remove. + */ + void remove(String name); +} diff --git a/api/src/main/java/run/halo/app/extension/index/IndexedQueryEngine.java b/api/src/main/java/run/halo/app/extension/index/IndexedQueryEngine.java new file mode 100644 index 0000000..b6c4623 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/IndexedQueryEngine.java @@ -0,0 +1,44 @@ +package run.halo.app.extension.index; + +import java.util.List; +import org.springframework.data.domain.Sort; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.PageRequest; + +/** + *

An interface for querying indexed object records from the index store.

+ *

It provides a way to retrieve the object records by the given {@link GroupVersionKind} and + * {@link ListOptions}, the final result will be ordered by the index what {@link ListOptions} + * used and specified by the {@link PageRequest#getSort()}.

+ * + * @author guqing + * @since 2.12.0 + */ +public interface IndexedQueryEngine { + + /** + * Page retrieve the object records by the given {@link GroupVersionKind} and + * {@link ListOptions}. + * + * @param type the type of the object must exist in + * {@link run.halo.app.extension.SchemeManager}. + * @param options the list options to use for retrieving the object records. + * @param page which page to retrieve and how large the page should be. + * @return a collection of {@link Metadata#getName()} for the given page. + */ + ListResult retrieve(GroupVersionKind type, ListOptions options, PageRequest page); + + /** + * Retrieve all the object records by the given {@link GroupVersionKind} and + * {@link ListOptions}. + * + * @param type the type of the object must exist in {@link run.halo.app.extension.SchemeManager} + * @param options the list options to use for retrieving the object records + * @param sort the sort to use for retrieving the object records + * @return a collection of {@link Metadata#getName()} + */ + List retrieveAll(GroupVersionKind type, ListOptions options, Sort sort); +} diff --git a/api/src/main/java/run/halo/app/extension/index/Indexer.java b/api/src/main/java/run/halo/app/extension/index/Indexer.java new file mode 100644 index 0000000..e92f336 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/Indexer.java @@ -0,0 +1,106 @@ +package run.halo.app.extension.index; + +import java.util.Iterator; +import java.util.function.Function; +import org.springframework.lang.NonNull; +import run.halo.app.extension.Extension; + +/** + *

The {@link Indexer} is owned by the {@link Extension} and is responsible for the lookup and + * lifetimes of the indexes in a {@link Extension} collection. Every {@link Extension} has + * exactly one instance of this class.

+ *

Callers are expected to have acquired the necessary locks while accessing this interface.

+ * To inspect the contents of this {@link Indexer}, callers may obtain an iterator from + * getIndexIterator(). + * + * @author guqing + * @since 2.12.0 + */ +public interface Indexer { + + /** + *

Index the specified {@link Extension} by {@link IndexDescriptor}s.

+ *

First, the {@link Indexer} will index the {@link Extension} by the + * {@link IndexDescriptor}s and record the index entries to {@code IndexerTransaction} and + * commit the transaction, if any error occurs, the transaction will be rollback to keep the + * {@link Indexer} consistent.

+ * + * @param extension the {@link Extension} to be indexed + * @param the type of the {@link Extension} + */ + void indexRecord(E extension); + + /** + *

Update indexes for the specified {@link Extension} by {@link IndexDescriptor}s.

+ *

First, the {@link Indexer} will remove the index entries of the {@link Extension} by + * the old {@link IndexDescriptor}s and reindex the {@link Extension} to generate change logs + * to {@code IndexerTransaction} and commit the transaction, if any error occurs, the + * transaction will be rollback to keep the {@link Indexer} consistent.

+ * + * @param extension the {@link Extension} to be updated + * @param the type of the {@link Extension} + */ + void updateRecord(E extension); + + /** + *

Remove indexes (index entries) for the specified {@link Extension} already indexed by + * {@link IndexDescriptor}s.

+ * + * @param extensionName the {@link Extension} to be removed + */ + void unIndexRecord(String extensionName); + + /** + *

Find index by name.

+ *

The index name uniquely identifies an index.

+ * + * @param name index name + * @return index descriptor if found, null otherwise + */ + IndexDescriptor findIndexByName(String name); + + /** + *

Create an index entry for the specified {@link IndexDescriptor}.

+ * + * @param descriptor the {@link IndexDescriptor} to be recorded + * @return the {@link IndexEntry} created + */ + IndexEntry createIndexEntry(IndexDescriptor descriptor); + + /** + *

Remove all index entries that match the given {@link IndexDescriptor}.

+ * + * @param matchFn the {@link IndexDescriptor} to be matched + */ + void removeIndexRecords(Function matchFn); + + /** + *

Get the {@link IndexEntry} by index name if found and ready.

+ * + * @param name an index name + * @return the {@link IndexEntry} if found + * @throws IllegalArgumentException if the index name is not found or the index is not ready + */ + @NonNull + IndexEntry getIndexEntry(String name); + + /** + *

Gets an iterator over all the ready {@link IndexEntry}s, in no particular order.

+ * + * @return an iterator over all the ready {@link IndexEntry}s + * @see IndexDescriptor#isReady() + */ + Iterator readyIndexesIterator(); + + /** + *

Gets an iterator over all the {@link IndexEntry}s, in no particular order.

+ * + * @return an iterator over all the {@link IndexEntry}s + * @see IndexDescriptor#isReady() + */ + Iterator allIndexesIterator(); + + void acquireReadLock(); + + void releaseReadLock(); +} diff --git a/api/src/main/java/run/halo/app/extension/index/KeyComparator.java b/api/src/main/java/run/halo/app/extension/index/KeyComparator.java new file mode 100644 index 0000000..750bee3 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/KeyComparator.java @@ -0,0 +1,47 @@ +package run.halo.app.extension.index; + +import java.util.Comparator; +import org.springframework.lang.Nullable; + +public class KeyComparator implements Comparator { + public static final KeyComparator INSTANCE = new KeyComparator(); + + @Override + public int compare(@Nullable String a, @Nullable String b) { + if (a == null && b == null) { + return 0; + } else if (a == null) { + // null less than everything + return 1; + } else if (b == null) { + // null less than everything + return -1; + } + + int i = 0; + int j = 0; + while (i < a.length() && j < b.length()) { + if (Character.isDigit(a.charAt(i)) && Character.isDigit(b.charAt(j))) { + // handle number part + int num1 = 0; + int num2 = 0; + while (i < a.length() && Character.isDigit(a.charAt(i))) { + num1 = num1 * 10 + (a.charAt(i++) - '0'); + } + while (j < b.length() && Character.isDigit(b.charAt(j))) { + num2 = num2 * 10 + (b.charAt(j++) - '0'); + } + if (num1 != num2) { + return num1 - num2; + } + } else if (a.charAt(i) != b.charAt(j)) { + // handle non-number part + return a.charAt(i) - b.charAt(j); + } else { + i++; + j++; + } + } + return a.length() - b.length(); + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/All.java b/api/src/main/java/run/halo/app/extension/index/query/All.java new file mode 100644 index 0000000..46b47b4 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/All.java @@ -0,0 +1,20 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; + +public class All extends SimpleQuery { + + public All(String fieldName) { + super(fieldName, null); + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + return indexView.getIdsForField(fieldName); + } + + @Override + public String toString() { + return fieldName + " != null"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/And.java b/api/src/main/java/run/halo/app/extension/index/query/And.java new file mode 100644 index 0000000..b47e8f0 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/And.java @@ -0,0 +1,43 @@ +package run.halo.app.extension.index.query; + +import com.google.common.collect.Sets; +import java.util.Collection; +import java.util.NavigableSet; +import java.util.stream.Collectors; + +public class And extends LogicalQuery { + + /** + * Creates a new And query with the given child queries. + * + * @param childQueries The child queries + */ + public And(Collection childQueries) { + super(childQueries); + if (this.size < 2) { + throw new IllegalStateException( + "An 'And' query cannot have fewer than 2 child queries, " + childQueries.size() + + " were supplied"); + } + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + NavigableSet resultSet = null; + for (Query query : childQueries) { + NavigableSet currentResult = query.matches(indexView); + if (resultSet == null) { + resultSet = Sets.newTreeSet(currentResult); + } else { + resultSet.retainAll(currentResult); + } + } + return resultSet == null ? Sets.newTreeSet() : resultSet; + } + + @Override + public String toString() { + return "(" + childQueries.stream().map(Query::toString) + .collect(Collectors.joining(" AND ")) + ")"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/Between.java b/api/src/main/java/run/halo/app/extension/index/query/Between.java new file mode 100644 index 0000000..e512a3f --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/Between.java @@ -0,0 +1,31 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; + +public class Between extends SimpleQuery { + private final String lowerValue; + private final boolean lowerInclusive; + private final String upperValue; + private final boolean upperInclusive; + + public Between(String fieldName, String lowerValue, boolean lowerInclusive, + String upperValue, boolean upperInclusive) { + // value and isFieldRef are not used in Between + super(fieldName, null, false); + this.lowerValue = lowerValue; + this.lowerInclusive = lowerInclusive; + this.upperValue = upperValue; + this.upperInclusive = upperInclusive; + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + return indexView.between(fieldName, lowerValue, lowerInclusive, upperValue, upperInclusive); + } + + @Override + public String toString() { + return fieldName + " BETWEEN " + (lowerInclusive ? "[" : "(") + lowerValue + ", " + + upperValue + (upperInclusive ? "]" : ")"); + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/EqualQuery.java b/api/src/main/java/run/halo/app/extension/index/query/EqualQuery.java new file mode 100644 index 0000000..0ce826a --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/EqualQuery.java @@ -0,0 +1,32 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; +import org.springframework.util.Assert; + +public class EqualQuery extends SimpleQuery { + + public EqualQuery(String fieldName, String value) { + super(fieldName, value); + } + + public EqualQuery(String fieldName, String value, boolean isFieldRef) { + super(fieldName, value, isFieldRef); + Assert.notNull(value, "Value must not be null, use IsNull or IsNotNull instead"); + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + if (isFieldRef) { + return indexView.findMatchingIdsWithEqualValues(fieldName, value); + } + return indexView.findIds(fieldName, value); + } + + @Override + public String toString() { + if (isFieldRef) { + return fieldName + " = " + value; + } + return fieldName + " = '" + value + "'"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/GreaterThanQuery.java b/api/src/main/java/run/halo/app/extension/index/query/GreaterThanQuery.java new file mode 100644 index 0000000..101286d --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/GreaterThanQuery.java @@ -0,0 +1,31 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; + +public class GreaterThanQuery extends SimpleQuery { + private final boolean orEqual; + + public GreaterThanQuery(String fieldName, String value, boolean orEqual) { + this(fieldName, value, orEqual, false); + } + + public GreaterThanQuery(String fieldName, String value, boolean orEqual, boolean isFieldRef) { + super(fieldName, value, isFieldRef); + this.orEqual = orEqual; + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + if (isFieldRef) { + return indexView.findMatchingIdsWithGreaterValues(fieldName, value, orEqual); + } + return indexView.findIdsGreaterThan(fieldName, value, orEqual); + } + + @Override + public String toString() { + return fieldName + + (orEqual ? " >= " : " > ") + + (isFieldRef ? value : "'" + value + "'"); + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/InQuery.java b/api/src/main/java/run/halo/app/extension/index/query/InQuery.java new file mode 100644 index 0000000..b9aa026 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/InQuery.java @@ -0,0 +1,29 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; +import java.util.Set; +import java.util.stream.Collectors; +import run.halo.app.extension.index.IndexEntryOperatorImpl; + +public class InQuery extends SimpleQuery { + private final Set values; + + public InQuery(String columnName, Set values) { + super(columnName, null); + this.values = values; + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + var indexEntry = indexView.getIndexEntry(fieldName); + var operator = new IndexEntryOperatorImpl(indexEntry); + return operator.findIn(values); + } + + @Override + public String toString() { + return fieldName + " IN (" + values.stream() + .map(value -> "'" + value + "'") + .collect(Collectors.joining(", ")) + ")"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/IsNotNull.java b/api/src/main/java/run/halo/app/extension/index/query/IsNotNull.java new file mode 100644 index 0000000..1c66133 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/IsNotNull.java @@ -0,0 +1,20 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; + +public class IsNotNull extends SimpleQuery { + + protected IsNotNull(String fieldName) { + super(fieldName, null); + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + return indexView.getIdsForField(fieldName); + } + + @Override + public String toString() { + return fieldName + " IS NOT NULL"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/IsNull.java b/api/src/main/java/run/halo/app/extension/index/query/IsNull.java new file mode 100644 index 0000000..d74040c --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/IsNull.java @@ -0,0 +1,28 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; + +public class IsNull extends SimpleQuery { + + protected IsNull(String fieldName) { + super(fieldName, null); + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + indexView.acquireReadLock(); + try { + var allIds = indexView.getAllIds(); + var idsForNonNullValue = indexView.getIdsForField(fieldName); + allIds.removeAll(idsForNonNullValue); + return allIds; + } finally { + indexView.releaseReadLock(); + } + } + + @Override + public String toString() { + return fieldName + " IS NULL"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/LessThanQuery.java b/api/src/main/java/run/halo/app/extension/index/query/LessThanQuery.java new file mode 100644 index 0000000..d7168e8 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/LessThanQuery.java @@ -0,0 +1,31 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; + +public class LessThanQuery extends SimpleQuery { + private final boolean orEqual; + + public LessThanQuery(String fieldName, String value, boolean orEqual) { + this(fieldName, value, orEqual, false); + } + + public LessThanQuery(String fieldName, String value, boolean orEqual, boolean isFieldRef) { + super(fieldName, value, isFieldRef); + this.orEqual = orEqual; + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + if (isFieldRef) { + return indexView.findMatchingIdsWithSmallerValues(fieldName, value, orEqual); + } + return indexView.findIdsLessThan(fieldName, value, orEqual); + } + + @Override + public String toString() { + return fieldName + + (orEqual ? " <= " : " < ") + + (isFieldRef ? value : "'" + value + "'"); + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/LogicalQuery.java b/api/src/main/java/run/halo/app/extension/index/query/LogicalQuery.java new file mode 100644 index 0000000..2311109 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/LogicalQuery.java @@ -0,0 +1,33 @@ +package run.halo.app.extension.index.query; + +import java.util.Collection; +import java.util.Objects; +import lombok.Getter; + +@Getter +public abstract class LogicalQuery implements Query { + protected final Collection childQueries; + protected final int size; + + /** + * Creates a new logical query with the given child queries. + * + * @param childQueries with the given child queries. + */ + public LogicalQuery(Collection childQueries) { + Objects.requireNonNull(childQueries, + "The child queries supplied to a logical query cannot be null"); + for (Query query : childQueries) { + if (!isValid(query)) { + throw new IllegalStateException("Unexpected type of query: " + (query == null ? null + : query + ", " + query.getClass())); + } + } + this.size = childQueries.size(); + this.childQueries = childQueries; + } + + boolean isValid(Query query) { + return query instanceof LogicalQuery || query instanceof SimpleQuery; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/Not.java b/api/src/main/java/run/halo/app/extension/index/query/Not.java new file mode 100644 index 0000000..98d0e29 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/Not.java @@ -0,0 +1,32 @@ +package run.halo.app.extension.index.query; + +import static java.util.Objects.requireNonNull; + +import java.util.Collections; +import java.util.NavigableSet; +import lombok.Getter; + +@Getter +public class Not extends LogicalQuery { + + private final Query negatedQuery; + + public Not(Query negatedQuery) { + super(Collections.singleton( + requireNonNull(negatedQuery, "The negated query must not be null."))); + this.negatedQuery = negatedQuery; + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + var negatedResult = negatedQuery.matches(indexView); + var allIds = indexView.getAllIds(); + allIds.removeAll(negatedResult); + return allIds; + } + + @Override + public String toString() { + return "NOT (" + negatedQuery + ")"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/NotEqual.java b/api/src/main/java/run/halo/app/extension/index/query/NotEqual.java new file mode 100644 index 0000000..af8f694 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/NotEqual.java @@ -0,0 +1,36 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; +import org.springframework.util.Assert; + +public class NotEqual extends SimpleQuery { + private final EqualQuery equalQuery; + + public NotEqual(String fieldName, String value) { + this(fieldName, value, false); + } + + public NotEqual(String fieldName, String value, boolean isFieldRef) { + super(fieldName, value, isFieldRef); + Assert.notNull(value, "Value must not be null, use IsNull or IsNotNull instead"); + this.equalQuery = new EqualQuery(fieldName, value, isFieldRef); + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + indexView.acquireReadLock(); + try { + NavigableSet equalNames = equalQuery.matches(indexView); + NavigableSet allNames = indexView.getAllIds(); + allNames.removeAll(equalNames); + return allNames; + } finally { + indexView.releaseReadLock(); + } + } + + @Override + public String toString() { + return fieldName + " != " + (isFieldRef ? value : "'" + value + "'"); + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/Or.java b/api/src/main/java/run/halo/app/extension/index/query/Or.java new file mode 100644 index 0000000..c8579c5 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/Or.java @@ -0,0 +1,28 @@ +package run.halo.app.extension.index.query; + +import com.google.common.collect.Sets; +import java.util.Collection; +import java.util.NavigableSet; +import java.util.stream.Collectors; + +public class Or extends LogicalQuery { + + public Or(Collection childQueries) { + super(childQueries); + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + var resultSet = Sets.newTreeSet(); + for (Query query : childQueries) { + resultSet.addAll(query.matches(indexView)); + } + return resultSet; + } + + @Override + public String toString() { + return "(" + childQueries.stream().map(Query::toString) + .collect(Collectors.joining(" OR ")) + ")"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/Query.java b/api/src/main/java/run/halo/app/extension/index/query/Query.java new file mode 100644 index 0000000..1ad4716 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/Query.java @@ -0,0 +1,22 @@ +package run.halo.app.extension.index.query; + +import java.util.NavigableSet; +import run.halo.app.extension.Metadata; + +/** + * A {@link Query} is used to match {@link QueryIndexView} objects. + * + * @author guqing + * @since 2.12.0 + */ +public interface Query { + + /** + * Matches the given {@link QueryIndexView} and returns the matched object names see + * {@link Metadata#getName()}. + * + * @param indexView the {@link QueryIndexView} to match. + * @return the matched object names ordered by natural order. + */ + NavigableSet matches(QueryIndexView indexView); +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/QueryFactory.java b/api/src/main/java/run/halo/app/extension/index/query/QueryFactory.java new file mode 100644 index 0000000..741d96c --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/QueryFactory.java @@ -0,0 +1,233 @@ +package run.halo.app.extension.index.query; + +import java.util.ArrayList; +import java.util.Arrays; +import java.util.Collection; +import java.util.Collections; +import java.util.HashSet; +import java.util.List; +import java.util.Set; +import lombok.experimental.UtilityClass; +import org.springframework.util.Assert; + +@UtilityClass +public class QueryFactory { + + public static Query all() { + return new All("metadata.name"); + } + + public static Query all(String fieldName) { + return new All(fieldName); + } + + public static Query isNull(String fieldName) { + return new IsNull(fieldName); + } + + public static Query isNotNull(String fieldName) { + return new IsNotNull(fieldName); + } + + /** + * Create a {@link NotEqual} for the given {@code fieldName} and {@code attributeValue}. + */ + public static Query notEqual(String fieldName, String attributeValue) { + if (attributeValue == null) { + return new IsNotNull(fieldName); + } + return new NotEqual(fieldName, attributeValue); + } + + public static Query notEqualOtherField(String fieldName, String otherFieldName) { + return new NotEqual(fieldName, otherFieldName, true); + } + + /** + * Create a {@link EqualQuery} for the given {@code fieldName} and {@code attributeValue}. + */ + public static Query equal(String fieldName, String attributeValue) { + if (attributeValue == null) { + return new IsNull(fieldName); + } + return new EqualQuery(fieldName, attributeValue); + } + + public static Query equalOtherField(String fieldName, String otherFieldName) { + return new EqualQuery(fieldName, otherFieldName, true); + } + + public static Query lessThanOtherField(String fieldName, String otherFieldName) { + return new LessThanQuery(fieldName, otherFieldName, false, true); + } + + public static Query lessThanOrEqualOtherField(String fieldName, String otherFieldName) { + return new LessThanQuery(fieldName, otherFieldName, true, true); + } + + public static Query lessThan(String fieldName, String attributeValue) { + return new LessThanQuery(fieldName, attributeValue, false); + } + + public static Query lessThanOrEqual(String fieldName, String attributeValue) { + return new LessThanQuery(fieldName, attributeValue, true); + } + + public static Query greaterThan(String fieldName, String attributeValue) { + return new GreaterThanQuery(fieldName, attributeValue, false); + } + + public static Query greaterThanOrEqual(String fieldName, String attributeValue) { + return new GreaterThanQuery(fieldName, attributeValue, true); + } + + public static Query greaterThanOtherField(String fieldName, String otherFieldName) { + return new GreaterThanQuery(fieldName, otherFieldName, false, true); + } + + public static Query greaterThanOrEqualOtherField(String fieldName, + String otherFieldName) { + return new GreaterThanQuery(fieldName, otherFieldName, true, true); + } + + public static Query in(String fieldName, String... attributeValues) { + return in(fieldName, Set.of(attributeValues)); + } + + /** + * Create an {@link InQuery} for the given {@code fieldName} and {@code values}. + */ + public static Query in(String fieldName, Collection values) { + Assert.notNull(values, "Values must not be null"); + if (values.size() == 1) { + String singleValue = values.iterator().next(); + return equal(fieldName, singleValue); + } + // Copy the values into a Set if necessary... + var valueSet = (values instanceof Set ? (Set) values + : new HashSet<>(values)); + return new InQuery(fieldName, valueSet); + } + + /** + * Create an {@link And} for the given {@link Query}s. + */ + public static Query and(Collection queries) { + Assert.notEmpty(queries, "Queries must not be empty"); + if (queries.size() == 1) { + return queries.iterator().next(); + } + return new And(queries); + } + + public static And and(Query query1, Query query2) { + Collection queries = Arrays.asList(query1, query2); + return new And(queries); + } + + /** + * Create an {@link And} for the given {@link Query}s. + */ + public static Query and(Query query1, Query query2, Query... additionalQueries) { + var queries = new ArrayList(2 + additionalQueries.length); + queries.add(query1); + queries.add(query2); + Collections.addAll(queries, additionalQueries); + return new And(queries); + } + + /** + * Create an {@link And} for the given {@link Query}s. + */ + public static Query and(Query query1, Query query2, Collection additionalQueries) { + var queries = new ArrayList(2 + additionalQueries.size()); + queries.add(query1); + queries.add(query2); + queries.addAll(additionalQueries); + return new And(queries); + } + + public static Query or(Query query1, Query query2) { + Collection queries = Arrays.asList(query1, query2); + return new Or(queries); + } + + /** + * Create an {@link Or} for the given {@link Query}s. + */ + public static Query or(Query query1, Query query2, Query... additionalQueries) { + var queries = new ArrayList(2 + additionalQueries.length); + queries.add(query1); + queries.add(query2); + Collections.addAll(queries, additionalQueries); + return new Or(queries); + } + + /** + * Create an {@link Or} for the given {@link Query}s. + */ + public static Query or(Query query1, Query query2, Collection additionalQueries) { + var queries = new ArrayList(2 + additionalQueries.size()); + queries.add(query1); + queries.add(query2); + queries.addAll(additionalQueries); + return new Or(queries); + } + + public static Query not(Query query) { + return new Not(query); + } + + public static Query betweenLowerExclusive(String fieldName, String lowerValue, + String upperValue) { + return new Between(fieldName, lowerValue, false, upperValue, true); + } + + public static Query betweenUpperExclusive(String fieldName, String lowerValue, + String upperValue) { + return new Between(fieldName, lowerValue, true, upperValue, false); + } + + public static Query betweenExclusive(String fieldName, String lowerValue, + String upperValue) { + return new Between(fieldName, lowerValue, false, upperValue, false); + } + + public static Query between(String fieldName, String lowerValue, String upperValue) { + return new Between(fieldName, lowerValue, true, upperValue, true); + } + + public static Query startsWith(String fieldName, String value) { + return new StringStartsWith(fieldName, value); + } + + public static Query endsWith(String fieldName, String value) { + return new StringEndsWith(fieldName, value); + } + + public static Query contains(String fieldName, String value) { + return new StringContains(fieldName, value); + } + + /** + * Get all the field names used in the given query. + * + * @param query the query + * @return the field names used in the given query + */ + public static List getFieldNamesUsedInQuery(Query query) { + List fieldNames = new ArrayList<>(); + + if (query instanceof SimpleQuery simpleQuery) { + if (simpleQuery.isFieldRef()) { + fieldNames.add(simpleQuery.getValue()); + } + fieldNames.add(simpleQuery.getFieldName()); + } else if (query instanceof LogicalQuery logicalQuery) { + for (Query childQuery : logicalQuery.getChildQueries()) { + fieldNames.addAll(getFieldNamesUsedInQuery(childQuery)); + } + } + return fieldNames; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/QueryIndexView.java b/api/src/main/java/run/halo/app/extension/index/query/QueryIndexView.java new file mode 100644 index 0000000..eb6a915 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/QueryIndexView.java @@ -0,0 +1,143 @@ +package run.halo.app.extension.index.query; + +import java.util.List; +import java.util.NavigableSet; +import org.springframework.data.domain.Sort; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.index.IndexEntry; +import run.halo.app.extension.index.IndexSpec; + +/** + *

A view of an index entries that can be queried.

+ *

Explanation of naming:

+ *
    + *
  • fieldName: a field of an index, usually {@link IndexSpec#getName()}
    • + *
  • fieldValue: a value of a field, e.g. a value of a field "name" could be "foo"
    • + *
  • id: the id of an object pointing to object position, see {@link Metadata#getName()}
    • + *
+ * + * @author guqing + * @since 2.12.0 + */ +public interface QueryIndexView { + + /** + * Gets all object ids for a given field name and field value. + * + * @param fieldName the field name + * @param fieldValue the field value + * @return all indexed object ids associated with the given field name and field value + * @throws IllegalArgumentException if the field name is not indexed + */ + NavigableSet findIds(String fieldName, String fieldValue); + + /** + * Gets all object ids for a given field name without null cells. + * + * @param fieldName the field name + * @return all indexed object ids for the given field name + * @throws IllegalArgumentException if the field name is not indexed + */ + NavigableSet getIdsForField(String fieldName); + + /** + * Gets all object ids in this view. + * + * @return all object ids in this view + */ + NavigableSet getAllIds(); + + /** + *

Finds and returns a set of unique identifiers (metadata.name) for entries that have + * matching values across two fields and where the values are equal.

+ * For example: + * 
+     * metadata.name | field1 | field2
+     * ------------- | ------ | ------
+     * foo           | 1      | 1
+     * bar           | 2      | 3
+     * baz           | 3      | 3
+     *
+ * findMatchingIdsWithEqualValues("field1", "field2") would return ["foo","baz"] + * + * @see #findMatchingIdsWithGreaterValues(String, String, boolean) + * @see #findMatchingIdsWithSmallerValues(String, String, boolean) + */ + NavigableSet findMatchingIdsWithEqualValues(String fieldName1, String fieldName2); + + /** + *

Finds and returns a set of unique identifiers (metadata.name) for entries that have + * matching values across two fields, but where the value associated with fieldName1 is + * greater than the value associated with fieldName2.

+ * For example: + * 
+     *     metadata.name | field1 | field2
+     *     ------------- | ------ | ------
+     *     foo           | 1      | 1
+     *     bar           | 2      | 3
+     *     baz           | 3      | 3
+     *     qux           | 4      | 2
+     *
+ *

findMatchingIdsWithGreaterValues("field1", "field2")would return ["qux"]

+ *

findMatchingIdsWithGreaterValues("field2", "field1")would return ["bar"]

+ *

findMatchingIdsWithGreaterValues("field1", "field2", true)would return + * ["foo","baz","qux"]

+ * + * @param fieldName1 The field name whose values are compared as the larger values. + * @param fieldName2 The field name whose values are compared as the smaller values. + * @param orEqual whether to include equal values + * @return A result set of ids where the entries in fieldName1 have greater values than those + * in fieldName2 for entries that have the same id across both fields + */ + NavigableSet findMatchingIdsWithGreaterValues(String fieldName1, String fieldName2, + boolean orEqual); + + NavigableSet findIdsGreaterThan(String fieldName, String fieldValue, boolean orEqual); + + /** + *

Finds and returns a set of unique identifiers (metadata.name) for entries that have + * matching values across two fields, but where the value associated with fieldName1 is + * less than the value associated with fieldName2.

+ * For example: + * 
+     *     metadata.name | field1 | field2
+     *     ------------- | ------ | ------
+     *     foo           | 1      | 1
+     *     bar           | 2      | 3
+     *     baz           | 3      | 3
+     *     qux           | 4      | 2
+     *
+ *

findMatchingIdsWithSmallerValues("field1", "field2") would return ["bar"]

+ *

findMatchingIdsWithSmallerValues("field2", "field1") would return ["qux"]

+ *

findMatchingIdsWithSmallerValues("field1", "field2", true) would return + * ["foo","bar","baz"]

+ * + * @param fieldName1 The field name whose values are compared as the smaller values. + * @param fieldName2 The field name whose values are compared as the larger values. + * @param orEqual whether to include equal values + * @return A result set of ids where the entries in fieldName1 have smaller values than those + * in fieldName2 for entries that have the same id across both fields + */ + NavigableSet findMatchingIdsWithSmallerValues(String fieldName1, String fieldName2, + boolean orEqual); + + NavigableSet findIdsLessThan(String fieldName, String fieldValue, boolean orEqual); + + NavigableSet between(String fieldName, String lowerValue, boolean lowerInclusive, + String upperValue, boolean upperInclusive); + + List sortBy(NavigableSet resultSet, Sort sort); + + IndexEntry getIndexEntry(String fieldName); + + /** + * Acquire a read lock on the indexer. + * if you need to operate on more than one {@code IndexEntry} at the same time, you need to + * lock first. + * + * @see #getIndexEntry(String) + */ + void acquireReadLock(); + + void releaseReadLock(); +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/QueryIndexViewImpl.java b/api/src/main/java/run/halo/app/extension/index/query/QueryIndexViewImpl.java new file mode 100644 index 0000000..e5456a9 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/QueryIndexViewImpl.java @@ -0,0 +1,230 @@ +package run.halo.app.extension.index.query; + +import java.util.ArrayList; +import java.util.Comparator; +import java.util.HashMap; +import java.util.List; +import java.util.Map; +import java.util.NavigableSet; +import java.util.Set; +import java.util.TreeSet; +import java.util.function.BiPredicate; +import org.springframework.data.domain.Sort; +import run.halo.app.extension.index.IndexEntry; +import run.halo.app.extension.index.IndexEntryOperator; +import run.halo.app.extension.index.IndexEntryOperatorImpl; +import run.halo.app.extension.index.Indexer; +import run.halo.app.extension.index.KeyComparator; + +/** + * A default implementation for {@link run.halo.app.extension.index.query.QueryIndexView}. + * + * @author guqing + * @since 2.17.0 + */ +public class QueryIndexViewImpl implements QueryIndexView { + + public static final String PRIMARY_INDEX_NAME = "metadata.name"; + + private final Indexer indexer; + + /** + * Construct a new {@link QueryIndexViewImpl} with the given {@link Indexer}. + * + * @throws IllegalArgumentException if the primary index does not exist + */ + public QueryIndexViewImpl(Indexer indexer) { + // check if primary index exists + indexer.getIndexEntry(PRIMARY_INDEX_NAME); + this.indexer = indexer; + } + + @Override + public NavigableSet findIds(String fieldName, String fieldValue) { + var operator = getEntryOperator(fieldName); + return operator.find(fieldValue); + } + + @Override + public NavigableSet getIdsForField(String fieldName) { + var operator = getEntryOperator(fieldName); + return new TreeSet<>(operator.getValues()); + } + + @Override + public NavigableSet getAllIds() { + return new TreeSet<>(allIds()); + } + + @Override + public NavigableSet findMatchingIdsWithEqualValues(String fieldName1, + String fieldName2) { + indexer.acquireReadLock(); + try { + return findIdsWithKeyComparator(fieldName1, fieldName2, (k1, k2) -> { + var compare = KeyComparator.INSTANCE.compare(k1, k2); + return compare == 0; + }); + } finally { + indexer.releaseReadLock(); + } + } + + @Override + public NavigableSet findMatchingIdsWithGreaterValues(String fieldName1, + String fieldName2, boolean orEqual) { + indexer.acquireReadLock(); + try { + return findIdsWithKeyComparator(fieldName1, fieldName2, (k1, k2) -> { + var compare = KeyComparator.INSTANCE.compare(k1, k2); + return orEqual ? compare <= 0 : compare < 0; + }); + } finally { + indexer.releaseReadLock(); + } + } + + @Override + public NavigableSet findIdsGreaterThan(String fieldName, String fieldValue, + boolean orEqual) { + var operator = getEntryOperator(fieldName); + return operator.greaterThan(fieldValue, orEqual); + } + + @Override + public NavigableSet findMatchingIdsWithSmallerValues(String fieldName1, + String fieldName2, boolean orEqual) { + indexer.acquireReadLock(); + try { + return findIdsWithKeyComparator(fieldName1, fieldName2, (k1, k2) -> { + var compare = KeyComparator.INSTANCE.compare(k1, k2); + return orEqual ? compare >= 0 : compare > 0; + }); + } finally { + indexer.releaseReadLock(); + } + } + + @Override + public NavigableSet findIdsLessThan(String fieldName, String fieldValue, + boolean orEqual) { + var operator = getEntryOperator(fieldName); + return operator.lessThan(fieldValue, orEqual); + } + + @Override + public NavigableSet between(String fieldName, String lowerValue, boolean lowerInclusive, + String upperValue, boolean upperInclusive) { + var operator = getEntryOperator(fieldName); + return operator.range(lowerValue, upperValue, lowerInclusive, upperInclusive); + } + + @Override + public List sortBy(NavigableSet ids, Sort sort) { + if (sort.isUnsorted()) { + return new ArrayList<>(ids); + } + indexer.acquireReadLock(); + try { + var combinedComparator = sort.stream() + .map(this::comparatorFrom) + .reduce(Comparator::thenComparing) + .orElseThrow(); + return ids.stream() + .sorted(combinedComparator) + .toList(); + } finally { + indexer.releaseReadLock(); + } + } + + Comparator comparatorFrom(Sort.Order order) { + var indexEntry = getIndexEntry(order.getProperty()); + var idPositionMap = indexEntry.getIdPositionMap(); + var isDesc = order.isDescending(); + // This sort algorithm works leveraging on that the idPositionMap is a map of id -> position + // if the id is not in the map, it means that it is not indexed, and it will be placed at + // the end + return (a, b) -> { + var indexOfA = idPositionMap.get(a); + var indexOfB = idPositionMap.get(b); + + var isAIndexed = indexOfA != null; + var isBIndexed = indexOfB != null; + + if (!isAIndexed && !isBIndexed) { + return 0; + } + // un-indexed item are always at the end + if (!isAIndexed) { + return isDesc ? -1 : 1; + } + if (!isBIndexed) { + return isDesc ? 1 : -1; + } + return isDesc ? Integer.compare(indexOfB, indexOfA) + : Integer.compare(indexOfA, indexOfB); + }; + } + + @Override + public IndexEntry getIndexEntry(String fieldName) { + return indexer.getIndexEntry(fieldName); + } + + @Override + public void acquireReadLock() { + indexer.acquireReadLock(); + } + + @Override + public void releaseReadLock() { + indexer.releaseReadLock(); + } + + private IndexEntryOperator getEntryOperator(String fieldName) { + var indexEntry = getIndexEntry(fieldName); + return createIndexEntryOperator(indexEntry); + } + + private IndexEntryOperator createIndexEntryOperator(IndexEntry entry) { + return new IndexEntryOperatorImpl(entry); + } + + private Set allIds() { + var indexEntry = getIndexEntry(PRIMARY_INDEX_NAME); + return createIndexEntryOperator(indexEntry).getValues(); + } + + /** + * Must lock the indexer before calling this method. + */ + private NavigableSet findIdsWithKeyComparator(String fieldName1, String fieldName2, + BiPredicate keyComparator) { + // get entries from indexer for fieldName1 + var entriesA = getIndexEntry(fieldName1).entries(); + + Map> keyMap = new HashMap<>(); + for (Map.Entry entry : entriesA) { + keyMap.computeIfAbsent(entry.getValue(), v -> new ArrayList<>()).add(entry.getKey()); + } + + NavigableSet result = new TreeSet<>(); + + // get entries from indexer for fieldName2 + var entriesB = getIndexEntry(fieldName2).entries(); + for (Map.Entry entry : entriesB) { + List matchedKeys = keyMap.get(entry.getValue()); + if (matchedKeys != null) { + for (String key : matchedKeys) { + if (keyComparator.test(entry.getKey(), key)) { + result.add(entry.getValue()); + // found one match, no need to continue + break; + } + } + } + } + return result; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/SimpleQuery.java b/api/src/main/java/run/halo/app/extension/index/query/SimpleQuery.java new file mode 100644 index 0000000..9310661 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/SimpleQuery.java @@ -0,0 +1,35 @@ +package run.halo.app.extension.index.query; + +import lombok.Getter; +import org.apache.commons.lang3.StringUtils; +import org.springframework.util.Assert; + +@Getter +public abstract class SimpleQuery implements Query { + protected final String fieldName; + protected final String value; + /** + *

Whether the value if a field reference.

+ * For example, {@code fieldName = "salary", value = "cost"} can lead to a query： + * 
+     *     salary > cost
+     *
+ * means that we want to find all the records whose salary is greater than cost. + * + * @see EqualQuery + * @see GreaterThanQuery + * @see LessThanQuery + */ + protected final boolean isFieldRef; + + protected SimpleQuery(String fieldName, String value) { + this(fieldName, value, false); + } + + protected SimpleQuery(String fieldName, String value, boolean isFieldRef) { + Assert.isTrue(StringUtils.isNotBlank(fieldName), "fieldName cannot be blank."); + this.fieldName = fieldName; + this.value = value; + this.isFieldRef = isFieldRef; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/StringContains.java b/api/src/main/java/run/halo/app/extension/index/query/StringContains.java new file mode 100644 index 0000000..f6e7dc5 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/StringContains.java @@ -0,0 +1,36 @@ +package run.halo.app.extension.index.query; + +import com.google.common.collect.Sets; +import java.util.Map; +import java.util.NavigableSet; +import org.apache.commons.lang3.StringUtils; + +public class StringContains extends SimpleQuery { + public StringContains(String fieldName, String value) { + super(fieldName, value); + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + var resultSet = Sets.newTreeSet(); + var indexEntry = indexView.getIndexEntry(fieldName); + + indexEntry.acquireReadLock(); + try { + for (Map.Entry entry : indexEntry.entries()) { + var fieldValue = entry.getKey(); + if (StringUtils.containsIgnoreCase(fieldValue, value)) { + resultSet.add(entry.getValue()); + } + } + return resultSet; + } finally { + indexEntry.releaseReadLock(); + } + } + + @Override + public String toString() { + return "contains(" + fieldName + ", '" + value + "')"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/StringEndsWith.java b/api/src/main/java/run/halo/app/extension/index/query/StringEndsWith.java new file mode 100644 index 0000000..51853be --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/StringEndsWith.java @@ -0,0 +1,36 @@ +package run.halo.app.extension.index.query; + +import com.google.common.collect.Sets; +import java.util.Map; +import java.util.NavigableSet; +import org.apache.commons.lang3.StringUtils; + +public class StringEndsWith extends SimpleQuery { + public StringEndsWith(String fieldName, String value) { + super(fieldName, value); + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + var resultSet = Sets.newTreeSet(); + var indexEntry = indexView.getIndexEntry(fieldName); + + indexEntry.acquireReadLock(); + try { + for (Map.Entry entry : indexEntry.entries()) { + var fieldValue = entry.getKey(); + if (StringUtils.endsWith(fieldValue, value)) { + resultSet.add(entry.getValue()); + } + } + return resultSet; + } finally { + indexEntry.releaseReadLock(); + } + } + + @Override + public String toString() { + return "endsWith(" + fieldName + ", '" + value + "')"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/index/query/StringStartsWith.java b/api/src/main/java/run/halo/app/extension/index/query/StringStartsWith.java new file mode 100644 index 0000000..bad07d8 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/index/query/StringStartsWith.java @@ -0,0 +1,36 @@ +package run.halo.app.extension.index.query; + +import com.google.common.collect.Sets; +import java.util.Map; +import java.util.NavigableSet; +import org.apache.commons.lang3.StringUtils; + +public class StringStartsWith extends SimpleQuery { + public StringStartsWith(String fieldName, String value) { + super(fieldName, value); + } + + @Override + public NavigableSet matches(QueryIndexView indexView) { + var resultSet = Sets.newTreeSet(); + var indexEntry = indexView.getIndexEntry(fieldName); + + indexEntry.acquireReadLock(); + try { + for (Map.Entry entry : indexEntry.entries()) { + var fieldValue = entry.getKey(); + if (StringUtils.startsWith(fieldValue, value)) { + resultSet.add(entry.getValue()); + } + } + return resultSet; + } finally { + indexEntry.releaseReadLock(); + } + } + + @Override + public String toString() { + return "startsWith(" + fieldName + ", '" + value + "')"; + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/IListRequest.java b/api/src/main/java/run/halo/app/extension/router/IListRequest.java new file mode 100644 index 0000000..ce7f938 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/IListRequest.java @@ -0,0 +1,96 @@ +package run.halo.app.extension.router; + +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.Collections; +import java.util.List; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springframework.boot.convert.ApplicationConversionService; +import org.springframework.core.convert.ConversionService; +import org.springframework.util.MultiValueMap; +import org.springframework.util.StringUtils; + +public interface IListRequest { + + @Schema(description = "The page number. Zero indicates no page.") + Integer getPage(); + + @Schema(description = "Size of one page. Zero indicates no limit.") + Integer getSize(); + + @Schema(description = "Label selector for filtering.") + List getLabelSelector(); + + @Schema(description = "Field selector for filtering.") + List getFieldSelector(); + + class QueryListRequest implements IListRequest { + + protected final MultiValueMap queryParams; + + private final ConversionService conversionService = + ApplicationConversionService.getSharedInstance(); + + public QueryListRequest(MultiValueMap queryParams) { + this.queryParams = queryParams; + } + + @Override + public Integer getPage() { + var page = queryParams.getFirst("page"); + if (StringUtils.hasText(page)) { + return conversionService.convert(page, Integer.class); + } + return 0; + } + + @Override + public Integer getSize() { + var size = queryParams.getFirst("size"); + if (StringUtils.hasText(size)) { + return conversionService.convert(size, Integer.class); + } + return 0; + } + + @Override + public List getLabelSelector() { + return queryParams.getOrDefault("labelSelector", Collections.emptyList()); + } + + @Override + public List getFieldSelector() { + return queryParams.getOrDefault("fieldSelector", Collections.emptyList()); + } + } + + static void buildParameters(Builder builder) { + builder.parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("page") + .implementation(Integer.class) + .required(false) + .description("Page number. Default is 0.")) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("size") + .implementation(Integer.class) + .required(false) + .description("Size number. Default is 0.")) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("labelSelector") + .required(false) + .description("Label selector. e.g.: hidden!=true") + .implementationArray(String.class)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("fieldSelector") + .required(false) + .description("Field selector. e.g.: metadata.name==halo") + .implementationArray(String.class) + ); + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/QueryParamBuildUtil.java b/api/src/main/java/run/halo/app/extension/router/QueryParamBuildUtil.java new file mode 100644 index 0000000..b17f21b --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/QueryParamBuildUtil.java @@ -0,0 +1,36 @@ +package run.halo.app.extension.router; + +import static org.springdoc.core.fn.builders.arrayschema.Builder.arraySchemaBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import java.lang.reflect.Type; +import lombok.experimental.UtilityClass; +import lombok.extern.slf4j.Slf4j; +import org.springdoc.core.fn.builders.operation.Builder; + +@Slf4j +@UtilityClass +public class QueryParamBuildUtil { + + public static org.springdoc.core.fn.builders.parameter.Builder sortParameter() { + return parameterBuilder() + .in(ParameterIn.QUERY) + .name("sort") + .required(false) + .description(""" + Sorting criteria in the format: property,(asc|desc). \ + Default sort order is ascending. Multiple sort criteria are supported.\ + """) + .array(arraySchemaBuilder().schema(schemaBuilder().type("string"))); + } + + @Deprecated(since = "2.15.0") + public static void buildParametersFromType(Builder operationBuilder, Type queryParamType) { + log.warn( + "Deprecated method QueryParamBuildUtil.buildParametersFromType is called, please use " + + "'org.springdoc.core.fn.builders.operation.Builder#parameter' method instead." + + "This method will be removed in Halo 2.20.0 version."); + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/SortableRequest.java b/api/src/main/java/run/halo/app/extension/router/SortableRequest.java new file mode 100644 index 0000000..6776900 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/SortableRequest.java @@ -0,0 +1,109 @@ +package run.halo.app.extension.router; + +import static org.springframework.data.domain.Sort.Order.asc; +import static org.springframework.data.domain.Sort.Order.desc; +import static run.halo.app.extension.Comparators.compareCreationTimestamp; +import static run.halo.app.extension.Comparators.compareName; +import static run.halo.app.extension.Comparators.nullsComparator; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToListOptions; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToPredicate; + +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.Comparator; +import java.util.function.Function; +import java.util.function.Predicate; +import java.util.stream.Stream; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springframework.beans.BeanWrapper; +import org.springframework.beans.BeanWrapperImpl; +import org.springframework.data.domain.Sort; +import org.springframework.web.server.ServerWebExchange; +import run.halo.app.core.extension.endpoint.SortResolver; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.PageRequestImpl; + +public class SortableRequest extends IListRequest.QueryListRequest { + + protected final ServerWebExchange exchange; + + public SortableRequest(ServerWebExchange exchange) { + super(exchange.getRequest().getQueryParams()); + this.exchange = exchange; + } + + @ArraySchema(uniqueItems = true, + arraySchema = @Schema(name = "sort", + description = "Sort property and direction of the list result. Support sorting based " + + "on attribute name path."), + schema = @Schema(description = "like field,asc or field,desc", + implementation = String.class, + example = "metadata.creationTimestamp,desc")) + public Sort getSort() { + return SortResolver.defaultInstance.resolve(exchange) + .and(Sort.by(desc("metadata.creationTimestamp"), + asc("metadata.name")) + ); + } + + /** + * Build predicate from query params, default is label and field selector, you can + * override this method to change it. + * + * @return predicate + */ + public Predicate toPredicate() { + return labelAndFieldSelectorToPredicate(getLabelSelector(), getFieldSelector()); + } + + /** + * Build {@link ListOptions} from query params. + * + * @return a list options. + */ + public ListOptions toListOptions() { + return labelAndFieldSelectorToListOptions(getLabelSelector(), getFieldSelector()); + } + + public PageRequest toPageRequest() { + return PageRequestImpl.of(getPage(), getSize(), getSort()); + } + + /** + * Build comparator from sort. + * + * @param Extension type + * @return comparator + */ + public Comparator toComparator() { + var sort = getSort(); + var fallbackComparator = Stream.>of( + compareCreationTimestamp(false), + compareName(true) + ); + var comparatorStream = sort.stream().map(order -> { + var property = order.getProperty(); + var direction = order.getDirection(); + Function function = extension -> { + BeanWrapper beanWrapper = new BeanWrapperImpl(extension); + return beanWrapper.getPropertyValue(property); + }; + var comparator = + Comparator.comparing(function, nullsComparator(direction.isAscending())); + if (direction.isDescending()) { + comparator = comparator.reversed(); + } + return comparator; + }); + return Stream.concat(comparatorStream, fallbackComparator) + .reduce(Comparator::thenComparing) + .orElse(null); + } + + public static void buildParameters(Builder builder) { + IListRequest.buildParameters(builder); + builder.parameter(QueryParamBuildUtil.sortParameter()); + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/EqualityMatcher.java b/api/src/main/java/run/halo/app/extension/router/selector/EqualityMatcher.java new file mode 100644 index 0000000..a534891 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/EqualityMatcher.java @@ -0,0 +1,73 @@ +package run.halo.app.extension.router.selector; + +import java.util.function.Function; +import java.util.function.Predicate; + +public class EqualityMatcher implements SelectorMatcher { + private final Operator operator; + private final String key; + private final String value; + + EqualityMatcher(String key, Operator operator, String value) { + this.key = key; + this.operator = operator; + this.value = value; + } + + /** + * The "equal" matcher. Matches a label if the label is present and equal. + * + * @param key the matching label key + * @param value the matching label value + * @return the equality matcher + */ + public static EqualityMatcher equal(String key, String value) { + return new EqualityMatcher(key, Operator.EQUAL, value); + } + + /** + * The "not equal" matcher. Matches a label if the label is not present or not equal. + * + * @param key the matching label key + * @param value the matching label value + * @return the equality matcher + */ + public static EqualityMatcher notEqual(String key, String value) { + return new EqualityMatcher(key, Operator.NOT_EQUAL, value); + } + + @Override + public String toString() { + return key + + " " + + operator.name().toLowerCase() + + " " + + value; + } + + @Override + public boolean test(String s) { + return operator.with(value).test(s); + } + + @Override + public String getKey() { + return key; + } + + protected enum Operator { + EQUAL(arg -> arg::equals), + DOUBLE_EQUAL(arg -> arg::equals), + NOT_EQUAL(arg -> v -> !arg.equals(v)); + + private final Function> matcherFunc; + + Operator(Function> matcherFunc) { + this.matcherFunc = matcherFunc; + } + + Predicate with(String value) { + return matcherFunc.apply(value); + } + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/FieldCriteriaPredicateConverter.java b/api/src/main/java/run/halo/app/extension/router/selector/FieldCriteriaPredicateConverter.java new file mode 100644 index 0000000..f3294ea --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/FieldCriteriaPredicateConverter.java @@ -0,0 +1,37 @@ +package run.halo.app.extension.router.selector; + +import java.util.function.Predicate; +import org.springframework.core.convert.converter.Converter; +import org.springframework.lang.NonNull; +import run.halo.app.extension.Extension; + +@Deprecated(since = "2.12.0") +public class FieldCriteriaPredicateConverter + implements Converter> { + + @Override + @NonNull + public Predicate convert(SelectorCriteria criteria) { + // current we only support name field. + return ext -> { + if ("name".equals(criteria.key())) { + var name = ext.getMetadata().getName(); + if (name == null) { + return false; + } + switch (criteria.operator()) { + case Equals, IN -> { + return criteria.values().contains(name); + } + case NotEquals -> { + return !criteria.values().contains(name); + } + default -> { + return false; + } + } + } + return false; + }; + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/FieldSelector.java b/api/src/main/java/run/halo/app/extension/router/selector/FieldSelector.java new file mode 100644 index 0000000..44d261f --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/FieldSelector.java @@ -0,0 +1,26 @@ +package run.halo.app.extension.router.selector; + +import java.util.Objects; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.index.query.QueryFactory; + +public record FieldSelector(@NonNull Query query) { + public FieldSelector(Query query) { + this.query = Objects.requireNonNullElseGet(query, QueryFactory::all); + } + + public static FieldSelector of(Query query) { + return new FieldSelector(query); + } + + public static FieldSelector all() { + return new FieldSelector(QueryFactory.all()); + } + + public FieldSelector andQuery(Query other) { + Assert.notNull(other, "Query must not be null"); + return of(QueryFactory.and(query(), other)); + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/FieldSelectorConverter.java b/api/src/main/java/run/halo/app/extension/router/selector/FieldSelectorConverter.java new file mode 100644 index 0000000..8d630b8 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/FieldSelectorConverter.java @@ -0,0 +1,45 @@ +package run.halo.app.extension.router.selector; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import java.util.Set; +import org.springframework.core.convert.converter.Converter; +import org.springframework.lang.NonNull; +import org.springframework.util.CollectionUtils; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.index.query.QueryFactory; + +public class FieldSelectorConverter implements Converter { + + @NonNull + @Override + public Query convert(@NonNull SelectorCriteria criteria) { + var key = criteria.key(); + // compatible with old field selector + if ("name".equals(key)) { + key = "metadata.name"; + } + switch (criteria.operator()) { + case Equals -> { + return QueryFactory.equal(key, getSingleValue(criteria)); + } + case NotEquals -> { + return QueryFactory.notEqual(key, getSingleValue(criteria)); + } + // compatible with old field selector + case IN -> { + var valueArr = defaultIfNull(criteria.values(), Set.of()); + return QueryFactory.in(key, valueArr); + } + default -> throw new IllegalArgumentException( + "Unsupported operator: " + criteria.operator()); + } + } + + String getSingleValue(SelectorCriteria criteria) { + if (CollectionUtils.isEmpty(criteria.values())) { + return null; + } + return criteria.values().iterator().next(); + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/LabelCriteriaPredicateConverter.java b/api/src/main/java/run/halo/app/extension/router/selector/LabelCriteriaPredicateConverter.java new file mode 100644 index 0000000..5832e7c --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/LabelCriteriaPredicateConverter.java @@ -0,0 +1,42 @@ +package run.halo.app.extension.router.selector; + +import java.util.function.Predicate; +import org.springframework.core.convert.converter.Converter; +import org.springframework.lang.NonNull; +import run.halo.app.extension.Extension; + +@Deprecated(since = "2.12.0") +public class LabelCriteriaPredicateConverter + implements Converter> { + + @Override + @NonNull + public Predicate convert(SelectorCriteria criteria) { + return ext -> { + var labels = ext.getMetadata().getLabels(); + switch (criteria.operator()) { + case Equals -> { + if (labels == null || !labels.containsKey(criteria.key())) { + return false; + } + return criteria.values().contains(labels.get(criteria.key())); + } + case NotEquals -> { + if (labels == null || !labels.containsKey(criteria.key())) { + return false; + } + return !criteria.values().contains(labels.get(criteria.key())); + } + case NotExist -> { + return labels == null || !labels.containsKey(criteria.key()); + } + case Exist -> { + return labels != null && labels.containsKey(criteria.key()); + } + default -> { + return false; + } + } + }; + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/LabelSelector.java b/api/src/main/java/run/halo/app/extension/router/selector/LabelSelector.java new file mode 100644 index 0000000..1e33e2a --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/LabelSelector.java @@ -0,0 +1,117 @@ +package run.halo.app.extension.router.selector; + +import java.util.ArrayList; +import java.util.List; +import java.util.Map; +import java.util.function.Predicate; +import java.util.stream.Collectors; +import lombok.Data; +import lombok.experimental.Accessors; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; + +@Data +@Accessors(chain = true) +public class LabelSelector implements Predicate> { + private List matchers; + + @Override + public boolean test(@NonNull Map labels) { + Assert.notNull(labels, "Labels must not be null"); + if (matchers == null || matchers.isEmpty()) { + return true; + } + return matchers.stream() + .allMatch(matcher -> matcher.test(labels.get(matcher.getKey()))); + } + + @Override + public String toString() { + if (matchers == null || matchers.isEmpty()) { + return ""; + } + return matchers.stream() + .map(SelectorMatcher::toString) + .collect(Collectors.joining(", ")); + } + + /** + * Returns a new label selector that is the result of ANDing the current selector with the + * given selector. + * + * @param other the selector to AND with + * @return a new label selector + */ + public LabelSelector and(LabelSelector other) { + var labelSelector = new LabelSelector(); + var matchers = new ArrayList(); + matchers.addAll(this.matchers); + matchers.addAll(other.matchers); + labelSelector.setMatchers(matchers); + return labelSelector; + } + + public static LabelSelectorBuilder builder() { + return new LabelSelectorBuilder<>(); + } + + public static class LabelSelectorBuilder> { + private final List matchers = new ArrayList<>(); + + public LabelSelectorBuilder() { + } + + /** + * Create a new label selector builder with the given matchers. + */ + public LabelSelectorBuilder(List givenMatchers) { + if (givenMatchers != null) { + matchers.addAll(givenMatchers); + } + } + + @SuppressWarnings("unchecked") + private T self() { + return (T) this; + } + + public T eq(String key, String value) { + matchers.add(EqualityMatcher.equal(key, value)); + return self(); + } + + public T notEq(String key, String value) { + matchers.add(EqualityMatcher.notEqual(key, value)); + return self(); + } + + public T in(String key, String... values) { + matchers.add(SetMatcher.in(key, values)); + return self(); + } + + public T notIn(String key, String... values) { + matchers.add(SetMatcher.notIn(key, values)); + return self(); + } + + public T exists(String key) { + matchers.add(SetMatcher.exists(key)); + return self(); + } + + public T notExists(String key) { + matchers.add(SetMatcher.notExists(key)); + return self(); + } + + /** + * Build the label selector. + */ + public LabelSelector build() { + var labelSelector = new LabelSelector(); + labelSelector.setMatchers(matchers); + return labelSelector; + } + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/LabelSelectorConverter.java b/api/src/main/java/run/halo/app/extension/router/selector/LabelSelectorConverter.java new file mode 100644 index 0000000..d3e21dd --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/LabelSelectorConverter.java @@ -0,0 +1,44 @@ +package run.halo.app.extension.router.selector; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import java.util.Set; +import org.springframework.core.convert.converter.Converter; +import org.springframework.lang.NonNull; +import org.springframework.util.CollectionUtils; + +public class LabelSelectorConverter implements Converter { + + @NonNull + @Override + public SelectorMatcher convert(@NonNull SelectorCriteria criteria) { + switch (criteria.operator()) { + case Equals -> { + return EqualityMatcher.equal(criteria.key(), getSingleValue(criteria)); + } + case NotEquals -> { + return EqualityMatcher.notEqual(criteria.key(), getSingleValue(criteria)); + } + case NotExist -> { + return SetMatcher.notExists(criteria.key()); + } + case Exist -> { + return SetMatcher.exists(criteria.key()); + } + case IN -> { + var valueArr = + defaultIfNull(criteria.values(), Set.of()).toArray(new String[0]); + return SetMatcher.in(criteria.key(), valueArr); + } + default -> throw new IllegalArgumentException( + "Unsupported operator: " + criteria.operator()); + } + } + + String getSingleValue(SelectorCriteria criteria) { + if (CollectionUtils.isEmpty(criteria.values())) { + return null; + } + return criteria.values().iterator().next(); + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/Operator.java b/api/src/main/java/run/halo/app/extension/router/selector/Operator.java new file mode 100644 index 0000000..cab3dc1 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/Operator.java @@ -0,0 +1,102 @@ +package run.halo.app.extension.router.selector; + +import java.util.Set; +import org.springframework.core.convert.converter.Converter; +import org.springframework.lang.Nullable; + +public enum Operator implements Converter { + + Equals("=", 3) { + @Override + @Nullable + public SelectorCriteria convert(@Nullable String selector) { + if (preFlightCheck(selector, 3)) { + var i = selector.indexOf(getOperator()); + if (i > 0 && (i + getOperator().length()) <= selector.length() - 1) { + String key = selector.substring(0, i); + String value = selector.substring(i + getOperator().length()); + return new SelectorCriteria(key, this, Set.of(value)); + } + } + return null; + } + }, + IN("=(", 2) { + @Override + public SelectorCriteria convert(String selector) { + if (preFlightCheck(selector, 5)) { + var idx = selector.indexOf(getOperator()); + if (idx > 0 && (idx + getOperator().length()) < selector.length() - 2 + && selector.charAt(selector.length() - 1) == ')') { + var key = selector.substring(0, idx); + var valuesString = + selector.substring(idx + getOperator().length(), selector.length() - 1); + String[] values = valuesString.split(","); + return new SelectorCriteria(key, this, Set.of(values)); + } + } + return null; + } + }, + NotEquals("!=", 1) { + @Override + @Nullable + public SelectorCriteria convert(@Nullable String selector) { + if (preFlightCheck(selector, 4)) { + var i = selector.indexOf(getOperator()); + if (i > 0 && (i + getOperator().length()) < selector.length() - 1) { + String key = selector.substring(0, i); + String value = selector.substring(i + getOperator().length()); + return new SelectorCriteria(key, this, Set.of(value)); + } + } + return null; + } + }, + NotExist("!", 0) { + @Override + @Nullable + public SelectorCriteria convert(@Nullable String selector) { + if (preFlightCheck(selector, 2)) { + if (selector.startsWith(getOperator())) { + return new SelectorCriteria(selector.substring(1), this, Set.of()); + } + } + return null; + } + }, + Exist("", Integer.MAX_VALUE) { + @Override + public SelectorCriteria convert(String selector) { + if (preFlightCheck(selector, 1)) { + // TODO validate the source with regex in the future + return new SelectorCriteria(selector, this, Set.of()); + } + return null; + } + }; + private final String operator; + + /** + * Parse order. + */ + private final int order; + + Operator(String operator, int order) { + this.operator = operator; + this.order = order; + } + + public String getOperator() { + return operator; + } + + public int getOrder() { + return order; + } + + protected boolean preFlightCheck(String selector, int minLength) { + return selector != null && selector.length() >= minLength; + } + +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/SelectorConverter.java b/api/src/main/java/run/halo/app/extension/router/selector/SelectorConverter.java new file mode 100644 index 0000000..b3dddc0 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/SelectorConverter.java @@ -0,0 +1,27 @@ +package run.halo.app.extension.router.selector; + +import java.util.Arrays; +import java.util.Comparator; +import java.util.Objects; +import lombok.extern.slf4j.Slf4j; +import org.springframework.core.convert.converter.Converter; +import org.springframework.lang.Nullable; + +@Slf4j +public class SelectorConverter implements Converter { + + @Override + @Nullable + public SelectorCriteria convert(@Nullable String selector) { + return Arrays.stream(Operator.values()) + .sorted(Comparator.comparing(Operator::getOrder)) + .map(operator -> { + log.debug("Resolving selector: {} with operator: {}", selector, operator); + return operator.convert(selector); + }) + .filter(Objects::nonNull) + .findFirst() + .orElse(null); + } + +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/SelectorCriteria.java b/api/src/main/java/run/halo/app/extension/router/selector/SelectorCriteria.java new file mode 100644 index 0000000..13693e5 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/SelectorCriteria.java @@ -0,0 +1,7 @@ +package run.halo.app.extension.router.selector; + +import java.util.Set; + +public record SelectorCriteria(String key, Operator operator, Set values) { + +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/SelectorMatcher.java b/api/src/main/java/run/halo/app/extension/router/selector/SelectorMatcher.java new file mode 100644 index 0000000..3e4110f --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/SelectorMatcher.java @@ -0,0 +1,14 @@ +package run.halo.app.extension.router.selector; + +public interface SelectorMatcher { + + String getKey(); + + /** + * Returns true if a field value matches. + * + * @param s the field value + * @return the boolean + */ + boolean test(String s); +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/SelectorUtil.java b/api/src/main/java/run/halo/app/extension/router/selector/SelectorUtil.java new file mode 100644 index 0000000..d506670 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/SelectorUtil.java @@ -0,0 +1,104 @@ +package run.halo.app.extension.router.selector; + +import java.util.List; +import java.util.Objects; +import java.util.Optional; +import java.util.function.Predicate; +import org.springframework.data.util.Predicates; +import org.springframework.web.server.ServerWebInputException; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.index.query.QueryFactory; + +public final class SelectorUtil { + + private SelectorUtil() { + } + + public static Predicate labelSelectorsToPredicate( + List labelSelectors) { + if (labelSelectors == null) { + labelSelectors = List.of(); + } + + final var labelPredicateConverter = + new SelectorConverter().andThen(new LabelCriteriaPredicateConverter()); + + return labelSelectors.stream() + .map(selector -> { + var predicate = labelPredicateConverter.convert(selector); + if (predicate == null) { + throw new ServerWebInputException("Invalid label selector: " + selector); + } + return predicate; + }) + .reduce(Predicate::and) + .orElse(Predicates.isTrue()); + } + + public static Predicate fieldSelectorToPredicate( + List fieldSelectors) { + if (fieldSelectors == null) { + fieldSelectors = List.of(); + } + + final var fieldPredicateConverter = + new SelectorConverter().andThen(new FieldCriteriaPredicateConverter()); + + return fieldSelectors.stream() + .map(selector -> { + var predicate = fieldPredicateConverter.convert(selector); + if (predicate == null) { + throw new ServerWebInputException("Invalid field selector: " + selector); + } + return predicate; + }) + .reduce(Predicate::and) + .orElse(Predicates.isTrue()); + } + + public static Predicate labelAndFieldSelectorToPredicate( + List labelSelectors, List fieldSelectors) { + return SelectorUtil.labelSelectorsToPredicate(labelSelectors) + .and(fieldSelectorToPredicate(fieldSelectors)); + } + + /** + * Convert label and field selector expressions to {@link ListOptions}. + * + * @param labelSelectorTerms label selector expressions + * @param fieldSelectorTerms field selector expressions + * @return list options(never null) + */ + public static ListOptions labelAndFieldSelectorToListOptions( + List labelSelectorTerms, List fieldSelectorTerms) { + var selectorConverter = new SelectorConverter(); + + var labelConverter = new LabelSelectorConverter(); + var labelMatchers = Optional.ofNullable(labelSelectorTerms) + .map(selectors -> selectors.stream() + .map(selectorConverter::convert) + .filter(Objects::nonNull) + .map(labelConverter::convert) + .toList()) + .orElse(List.of()); + + var fieldConverter = new FieldSelectorConverter(); + var fieldQuery = Optional.ofNullable(fieldSelectorTerms) + .map(selectors -> selectors.stream() + .map(selectorConverter::convert) + .filter(Objects::nonNull) + .map(fieldConverter::convert) + .toList() + ) + .orElse(List.of()); + var listOptions = new ListOptions(); + listOptions.setLabelSelector(new LabelSelector().setMatchers(labelMatchers)); + if (!fieldQuery.isEmpty()) { + listOptions.setFieldSelector(FieldSelector.of(QueryFactory.and(fieldQuery))); + } else { + listOptions.setFieldSelector(FieldSelector.all()); + } + return listOptions; + } +} diff --git a/api/src/main/java/run/halo/app/extension/router/selector/SetMatcher.java b/api/src/main/java/run/halo/app/extension/router/selector/SetMatcher.java new file mode 100644 index 0000000..20d5ff9 --- /dev/null +++ b/api/src/main/java/run/halo/app/extension/router/selector/SetMatcher.java @@ -0,0 +1,77 @@ +package run.halo.app.extension.router.selector; + +import java.util.Arrays; +import java.util.Objects; +import java.util.function.Function; +import java.util.function.Predicate; + +public class SetMatcher implements SelectorMatcher { + private final SetMatcher.Operator operator; + private final String key; + private final String[] values; + + SetMatcher(String key, SetMatcher.Operator operator) { + this(key, operator, new String[] {}); + } + + SetMatcher(String key, SetMatcher.Operator operator, String[] values) { + this.key = key; + this.operator = operator; + this.values = values; + } + + public static SetMatcher in(String key, String... values) { + return new SetMatcher(key, Operator.IN, values); + } + + public static SetMatcher notIn(String key, String... values) { + return new SetMatcher(key, Operator.NOT_IN, values); + } + + public static SetMatcher exists(String key) { + return new SetMatcher(key, Operator.EXISTS); + } + + public static SetMatcher notExists(String key) { + return new SetMatcher(key, Operator.NOT_EXISTS); + } + + @Override + public String getKey() { + return key; + } + + @Override + public boolean test(String s) { + return operator.with(values).test(s); + } + + @Override + public String toString() { + if (Operator.EXISTS.equals(operator) || Operator.NOT_EXISTS.equals(operator)) { + return key + " " + operator; + } + return key + " " + operator + " (" + String.join(", ", values) + ")"; + } + + private enum Operator { + IN(values -> v -> contains(values, v)), + NOT_IN(values -> v -> !contains(values, v)), + EXISTS(values -> Objects::nonNull), + NOT_EXISTS(values -> Objects::isNull); + + private final Function> matcherFunc; + + Operator(Function> matcherFunc) { + this.matcherFunc = matcherFunc; + } + + private static boolean contains(String[] strArray, String s) { + return Arrays.asList(strArray).contains(s); + } + + Predicate with(String... values) { + return matcherFunc.apply(values); + } + } +} diff --git a/api/src/main/java/run/halo/app/infra/AnonymousUserConst.java b/api/src/main/java/run/halo/app/infra/AnonymousUserConst.java new file mode 100644 index 0000000..5bdced6 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/AnonymousUserConst.java @@ -0,0 +1,11 @@ +package run.halo.app.infra; + +public interface AnonymousUserConst { + String PRINCIPAL = "anonymousUser"; + + String Role = "anonymous"; + + static boolean isAnonymousUser(String principal) { + return PRINCIPAL.equals(principal); + } +} diff --git a/api/src/main/java/run/halo/app/infra/BackupRootGetter.java b/api/src/main/java/run/halo/app/infra/BackupRootGetter.java new file mode 100644 index 0000000..ecf3c86 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/BackupRootGetter.java @@ -0,0 +1,14 @@ +package run.halo.app.infra; + +import java.nio.file.Path; +import java.util.function.Supplier; + +/** + * Utility of getting backup root path. + * + * @author johnniang + * @since 2.9.0 + */ +public interface BackupRootGetter extends Supplier { + +} diff --git a/api/src/main/java/run/halo/app/infra/Condition.java b/api/src/main/java/run/halo/app/infra/Condition.java new file mode 100644 index 0000000..43bc34f --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/Condition.java @@ -0,0 +1,65 @@ +package run.halo.app.infra; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import lombok.AllArgsConstructor; +import lombok.Builder; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.NoArgsConstructor; + +/** + * EqualsAndHashCode 排除了lastTransitionTime否则失败时，lastTransitionTime 会被更新 + * 导致 equals 为 false，一直被加入队列. + * + * @author guqing + * @see + * pod-conditions + * @since 2.0.0 + */ +@Data +@Builder +@NoArgsConstructor +@AllArgsConstructor +@EqualsAndHashCode(exclude = "lastTransitionTime") +public class Condition { + /** + * type of condition in CamelCase or in foo.example.com/CamelCase. + * example: Ready, Initialized. + * maxLength: 316. + */ + @Schema(requiredMode = REQUIRED, maxLength = 316, + pattern = "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(" + + "([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$") + private String type; + + /** + * Status is the status of the condition. Can be True, False, Unknown. + */ + @Schema(requiredMode = REQUIRED) + private ConditionStatus status; + + /** + * Last time the condition transitioned from one status to another. + */ + @Schema(requiredMode = REQUIRED) + private Instant lastTransitionTime; + + /** + * Human-readable message indicating details about last transition. + * This may be an empty string. + */ + @Schema(maxLength = 32768) + @Builder.Default + private String message = ""; + + /** + * Unique, one-word, CamelCase reason for the condition's last transition. + */ + @Schema(maxLength = 1024, + pattern = "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$") + @Builder.Default + private String reason = ""; +} diff --git a/api/src/main/java/run/halo/app/infra/ConditionList.java b/api/src/main/java/run/halo/app/infra/ConditionList.java new file mode 100644 index 0000000..57fb716 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/ConditionList.java @@ -0,0 +1,156 @@ +package run.halo.app.infra; + +import java.util.AbstractCollection; +import java.util.Deque; +import java.util.Iterator; +import java.util.LinkedList; +import java.util.Objects; +import java.util.function.Consumer; +import org.springframework.lang.NonNull; + +/** + *

This {@link ConditionList} to stores multiple {@link Condition}.

+ *

The element added after is always the first, the first to be removed is always the first to + * be added.

+ *

The queue head is the one whose element index is 0

+ * Note that: this class is not thread-safe. + * + * @author guqing + * @since 2.0.0 + */ +public class ConditionList extends AbstractCollection { + private static final int EVICT_THRESHOLD = 20; + private final Deque conditions = new LinkedList<>(); + + @Override + public boolean add(@NonNull Condition condition) { + if (isSame(conditions.peekFirst(), condition)) { + return false; + } + return conditions.add(condition); + } + + public boolean addFirst(@NonNull Condition condition) { + if (isSame(conditions.peekFirst(), condition)) { + return false; + } + conditions.addFirst(condition); + return true; + } + + /** + * Add {@param #condition} and evict the first item if the size of conditions is greater than + * {@link #EVICT_THRESHOLD}. + * + * @param condition item to add + */ + public boolean addAndEvictFIFO(@NonNull Condition condition) { + return addAndEvictFIFO(condition, EVICT_THRESHOLD); + } + + /** + * Add {@param #condition} and evict the first item if the size of conditions is greater than + * {@param evictThreshold}. + * + * @param condition item to add + */ + public boolean addAndEvictFIFO(@NonNull Condition condition, int evictThreshold) { + var current = getCondition(condition.getType()); + if (current != null) { + // do not update last transition time if status is not changed + if (Objects.equals(condition.getStatus(), current.getStatus())) { + condition.setLastTransitionTime(current.getLastTransitionTime()); + } + } + + conditions.remove(current); + conditions.addFirst(condition); + + while (conditions.size() > evictThreshold) { + removeLast(); + } + return true; + } + + private Condition getCondition(String type) { + for (Condition condition : conditions) { + if (condition.getType().equals(type)) { + return condition; + } + } + return null; + } + + + public void remove(Condition condition) { + conditions.remove(condition); + } + + /** + * Retrieves, but does not remove, the head of the queue represented by + * this deque (in other words, the first element of this deque), or + * returns {@code null} if this deque is empty. + * + *

This method is equivalent to {@link #peekFirst()}. + * + * @return the head of the queue represented by this deque, or + * {@code null} if this deque is empty + */ + public Condition peek() { + return peekFirst(); + } + + public Condition peekFirst() { + return conditions.peekFirst(); + } + + public Condition removeLast() { + return conditions.removeLast(); + } + + @Override + public void clear() { + conditions.clear(); + } + + public int size() { + return conditions.size(); + } + + private boolean isSame(Condition a, Condition b) { + if (a == null || b == null) { + return false; + } + return Objects.equals(a.getType(), b.getType()) + && Objects.equals(a.getStatus(), b.getStatus()) + && Objects.equals(a.getReason(), b.getReason()) + && Objects.equals(a.getMessage(), b.getMessage()); + } + + @Override + public Iterator iterator() { + return conditions.iterator(); + } + + @Override + public void forEach(Consumer action) { + conditions.forEach(action); + } + + @Override + public boolean equals(Object o) { + if (this == o) { + return true; + } + if (o == null || getClass() != o.getClass()) { + return false; + } + ConditionList that = (ConditionList) o; + return Objects.equals(conditions, that.conditions); + } + + @Override + public int hashCode() { + return Objects.hash(conditions); + } +} diff --git a/api/src/main/java/run/halo/app/infra/ConditionStatus.java b/api/src/main/java/run/halo/app/infra/ConditionStatus.java new file mode 100644 index 0000000..24e0bae --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/ConditionStatus.java @@ -0,0 +1,11 @@ +package run.halo.app.infra; + +/** + * @author guqing + * @since 2.0.0 + */ +public enum ConditionStatus { + TRUE, + FALSE, + UNKNOWN +} diff --git a/api/src/main/java/run/halo/app/infra/ExternalLinkProcessor.java b/api/src/main/java/run/halo/app/infra/ExternalLinkProcessor.java new file mode 100644 index 0000000..ea653c7 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/ExternalLinkProcessor.java @@ -0,0 +1,20 @@ +package run.halo.app.infra; + +/** + * {@link ExternalLinkProcessor} to process an in-site link to an external link. + * + * @author guqing + * @see ExternalUrlSupplier + * @since 2.9.0 + */ +public interface ExternalLinkProcessor { + + /** + * If the link is in-site link, then process it to an external link with + * {@link ExternalUrlSupplier#getRaw()}, otherwise return the original link. + * + * @param link link to process + * @return processed link or original link + */ + String processLink(String link); +} diff --git a/api/src/main/java/run/halo/app/infra/ExternalUrlSupplier.java b/api/src/main/java/run/halo/app/infra/ExternalUrlSupplier.java new file mode 100644 index 0000000..0e8e91d --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/ExternalUrlSupplier.java @@ -0,0 +1,41 @@ +package run.halo.app.infra; + +import java.net.URI; +import java.net.URL; +import java.util.function.Supplier; +import javax.annotation.Nullable; +import org.springframework.http.HttpRequest; + +/** + * Represents a supplier of external url configuration. + * + * @author johnniang + */ +public interface ExternalUrlSupplier extends Supplier { + + /** + * Gets URI according to external URL and use-absolute-permalink properties. + * + * @return URI "/" returned if use-absolute-permalink is false. Or external URL will be + * returned.(never null) + */ + @Override + URI get(); + + /** + * Gets URL according to external URL and server request URL. + * + * @param request represents an HTTP request message, consisting of a method and a URI. + * @return External URL will be return if it is provided, or request URI will be returned. + * (never null) + */ + URL getURL(HttpRequest request); + + /** + * Gets user-configured external URL from HaloProperties#getExternalUrl(). + * + * @return user-configured external URL or null if it is not provided. + */ + @Nullable + URL getRaw(); +} diff --git a/api/src/main/java/run/halo/app/infra/FileCategoryMatcher.java b/api/src/main/java/run/halo/app/infra/FileCategoryMatcher.java new file mode 100644 index 0000000..705c8f6 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/FileCategoryMatcher.java @@ -0,0 +1,107 @@ +package run.halo.app.infra; + +import java.util.Set; + +/** + *

Classifies files based on their MIME types.

+ *

It provides different categories such as IMAGE, SVG, AUDIO, VIDEO, ARCHIVE, and DOCUMENT. + * Each category has a match method that checks if a given MIME type belongs to that + * category.

+ *

The categories are defined as follows:

+ * 
+ * - IMAGE: Matches all image MIME types except for SVG.
+ * - SVG: Specifically matches the SVG image MIME type.
+ * - AUDIO: Matches all audio MIME types.
+ * - VIDEO: Matches all video MIME types.
+ * - ARCHIVE: Matches common archive MIME types like zip, rar, tar, etc.
+ * - DOCUMENT: Matches common document MIME types like plain text, PDF, Word, Excel, etc.
+ *
+ * + * @author guqing + * @since 2.18.0 + */ +public enum FileCategoryMatcher { + ALL { + @Override + public boolean match(String mimeType) { + return true; + } + }, + IMAGE { + @Override + public boolean match(String mimeType) { + return mimeType.startsWith("image/") && !mimeType.equals("image/svg+xml"); + } + }, + SVG { + @Override + public boolean match(String mimeType) { + return mimeType.equals("image/svg+xml"); + } + }, + AUDIO { + @Override + public boolean match(String mimeType) { + return mimeType.startsWith("audio/"); + } + }, + VIDEO { + @Override + public boolean match(String mimeType) { + return mimeType.startsWith("video/"); + } + }, + ARCHIVE { + static final Set ARCHIVE_MIME_TYPES = Set.of( + "application/zip", + "application/x-rar-compressed", + "application/x-tar", + "application/gzip", + "application/x-bzip2", + "application/x-xz", + "application/x-7z-compressed" + ); + + @Override + public boolean match(String mimeType) { + return ARCHIVE_MIME_TYPES.contains(mimeType); + } + }, + DOCUMENT { + static final Set DOCUMENT_MIME_TYPES = Set.of( + "text/plain", + "application/rtf", + "text/csv", + "text/xml", + "application/pdf", + "application/msword", + "application/vnd.openxmlformats-officedocument.wordprocessingml.document", + "application/vnd.ms-excel", + "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", + "application/vnd.ms-powerpoint", + "application/vnd.openxmlformats-officedocument.presentationml.presentation", + "application/vnd.oasis.opendocument.text", + "application/vnd.oasis.opendocument.spreadsheet", + "application/vnd.oasis.opendocument.presentation" + ); + + @Override + public boolean match(String mimeType) { + return DOCUMENT_MIME_TYPES.contains(mimeType); + } + }; + + public abstract boolean match(String mimeType); + + /** + * Get the file category matcher by name. + */ + public static FileCategoryMatcher of(String name) { + for (var matcher : values()) { + if (matcher.name().equalsIgnoreCase(name)) { + return matcher; + } + } + throw new IllegalArgumentException("Unsupported file category matcher for name: " + name); + } +} diff --git a/api/src/main/java/run/halo/app/infra/SystemSetting.java b/api/src/main/java/run/halo/app/infra/SystemSetting.java new file mode 100644 index 0000000..c548486 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/SystemSetting.java @@ -0,0 +1,140 @@ +package run.halo.app.infra; + +import java.util.LinkedHashMap; +import java.util.LinkedHashSet; +import java.util.Set; +import lombok.Data; +import org.springframework.boot.convert.ApplicationConversionService; +import run.halo.app.extension.ConfigMap; +import run.halo.app.infra.utils.JsonUtils; + +/** + * TODO Optimization value acquisition. + * + * @author guqing + * @since 2.0.0 + */ +public class SystemSetting { + public static final String SYSTEM_CONFIG_DEFAULT = "system-default"; + public static final String SYSTEM_CONFIG = "system"; + + @Data + public static class Theme { + public static final String GROUP = "theme"; + + private String active; + } + + @Data + public static class ThemeRouteRules { + public static final String GROUP = "routeRules"; + + private String categories; + private String archives; + private String post; + private String tags; + + public static ThemeRouteRules empty() { + ThemeRouteRules rules = new ThemeRouteRules(); + rules.setPost("/archives/{slug}"); + rules.setArchives("/archives"); + rules.setTags("/tags"); + rules.setCategories("/categories"); + return rules; + } + } + + @Data + public static class CodeInjection { + public static final String GROUP = "codeInjection"; + + private String globalHead; + + private String contentHead; + + private String footer; + } + + @Data + public static class Basic { + public static final String GROUP = "basic"; + String title; + String subtitle; + String logo; + String favicon; + } + + @Data + public static class User { + public static final String GROUP = "user"; + Boolean allowRegistration; + Boolean mustVerifyEmailOnRegistration; + String defaultRole; + String avatarPolicy; + } + + @Data + public static class Post { + public static final String GROUP = "post"; + Integer postPageSize; + Integer archivePageSize; + Integer categoryPageSize; + Integer tagPageSize; + Boolean review; + String slugGenerationStrategy; + + String attachmentPolicyName; + String attachmentGroupName; + } + + @Data + public static class Seo { + public static final String GROUP = "seo"; + Boolean blockSpiders; + String keywords; + String description; + } + + @Data + public static class Comment { + public static final String GROUP = "comment"; + Boolean enable; + Boolean requireReviewForNew; + Boolean systemUserOnly; + } + + @Data + public static class Menu { + public static final String GROUP = "menu"; + public String primary; + } + + @Data + public static class AuthProvider { + public static final String GROUP = "authProvider"; + private Set enabled; + } + + /** + * ExtensionPointEnabled key is metadata name of extension point and value is a list of + * extension definition names. + */ + public static class ExtensionPointEnabled extends LinkedHashMap> { + + public static final String GROUP = "extensionPointEnabled"; + + } + + public static T get(ConfigMap configMap, String key, Class type) { + var data = configMap.getData(); + var valueString = data.get(key); + if (valueString == null) { + return null; + } + var conversionService = ApplicationConversionService.getSharedInstance(); + if (conversionService.canConvert(String.class, type)) { + return conversionService.convert(valueString, type); + } + return JsonUtils.jsonToObject(valueString, type); + } +} diff --git a/api/src/main/java/run/halo/app/infra/SystemVersionSupplier.java b/api/src/main/java/run/halo/app/infra/SystemVersionSupplier.java new file mode 100644 index 0000000..c00184a --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/SystemVersionSupplier.java @@ -0,0 +1,15 @@ +package run.halo.app.infra; + +import com.github.zafarkhaja.semver.Version; +import java.util.function.Supplier; + +/** + * The supplier to gets the project version. + * If it cannot be obtained, return 0.0.0. + * + * @author guqing + * @see Semantic Versioning 2.0.0 + * @since 2.0.0 + */ +public interface SystemVersionSupplier extends Supplier { +} diff --git a/api/src/main/java/run/halo/app/infra/model/License.java b/api/src/main/java/run/halo/app/infra/model/License.java new file mode 100644 index 0000000..2caa949 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/model/License.java @@ -0,0 +1,12 @@ +package run.halo.app.infra.model; + +import lombok.Data; + +/** + * Common data objects for license. + */ +@Data +public class License { + private String name; + private String url; +} diff --git a/api/src/main/java/run/halo/app/infra/utils/FileTypeDetectUtils.java b/api/src/main/java/run/halo/app/infra/utils/FileTypeDetectUtils.java new file mode 100644 index 0000000..f932686 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/utils/FileTypeDetectUtils.java @@ -0,0 +1,34 @@ +package run.halo.app.infra.utils; + +import java.io.IOException; +import java.io.InputStream; +import lombok.experimental.UtilityClass; +import org.apache.tika.Tika; +import org.apache.tika.mime.MimeTypeException; +import org.apache.tika.mime.MimeTypes; + +@UtilityClass +public class FileTypeDetectUtils { + + private static final Tika tika = new Tika(); + + /** + * Detect mime type. + * + * @param inputStream input stream will be closed after detection. + */ + public static String detectMimeType(InputStream inputStream) throws IOException { + try { + return tika.detect(inputStream); + } finally { + if (inputStream != null) { + inputStream.close(); + } + } + } + + public static String detectFileExtension(String mimeType) throws MimeTypeException { + MimeTypes mimeTypes = MimeTypes.getDefaultMimeTypes(); + return mimeTypes.forName(mimeType).getExtension(); + } +} diff --git a/api/src/main/java/run/halo/app/infra/utils/GenericClassUtils.java b/api/src/main/java/run/halo/app/infra/utils/GenericClassUtils.java new file mode 100644 index 0000000..3da0330 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/utils/GenericClassUtils.java @@ -0,0 +1,43 @@ +package run.halo.app.infra.utils; + +import java.util.function.Supplier; +import net.bytebuddy.ByteBuddy; +import net.bytebuddy.description.type.TypeDescription; + +public enum GenericClassUtils { + ; + + /** + * Generate concrete class of generic class. e.g.: {@code List} + * + * @param rawClass is generic class, like {@code List.class} + * @param parameterType is parameter type of generic class + * @param parameter type + * @return generated class + */ + public static Class generateConcreteClass(Class rawClass, Class parameterType) { + return generateConcreteClass(rawClass, parameterType, () -> + parameterType.getName() + rawClass.getSimpleName()); + } + + /** + * Generate concrete class of generic class. e.g.: {@code List} + * + * @param rawClass is generic class, like {@code List.class} + * @param parameterType is parameter type of generic class + * @param nameGenerator is generated class name + * @param parameter type + * @return generated class + */ + public static Class generateConcreteClass(Class rawClass, Class parameterType, + Supplier nameGenerator) { + var concreteType = + TypeDescription.Generic.Builder.parameterizedType(rawClass, parameterType).build(); + try (var unloaded = new ByteBuddy() + .subclass(concreteType) + .name(nameGenerator.get()) + .make()) { + return unloaded.load(parameterType.getClassLoader()).getLoaded(); + } + } +} diff --git a/api/src/main/java/run/halo/app/infra/utils/JsonParseException.java b/api/src/main/java/run/halo/app/infra/utils/JsonParseException.java new file mode 100644 index 0000000..7b0c005 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/utils/JsonParseException.java @@ -0,0 +1,30 @@ +package run.halo.app.infra.utils; + +/** + * {@link JsonParseException} thrown when source JSON is invalid. + * + * @author guqing + * @since 2.0.0 + */ +public class JsonParseException extends RuntimeException { + public JsonParseException() { + super(); + } + + public JsonParseException(String message) { + super(message); + } + + public JsonParseException(String message, Throwable cause) { + super(message, cause); + } + + public JsonParseException(Throwable cause) { + super(cause); + } + + protected JsonParseException(String message, Throwable cause, boolean enableSuppression, + boolean writableStackTrace) { + super(message, cause, enableSuppression, writableStackTrace); + } +} diff --git a/api/src/main/java/run/halo/app/infra/utils/JsonUtils.java b/api/src/main/java/run/halo/app/infra/utils/JsonUtils.java new file mode 100644 index 0000000..0b33a67 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/utils/JsonUtils.java @@ -0,0 +1,105 @@ +package run.halo.app.infra.utils; + +import com.fasterxml.jackson.core.JsonProcessingException; +import com.fasterxml.jackson.core.type.TypeReference; +import com.fasterxml.jackson.databind.ObjectMapper; +import com.fasterxml.jackson.datatype.jsr310.JavaTimeModule; +import io.swagger.v3.core.util.Json; +import java.util.Map; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; + +/** + * Json utilities. + * + * @author guqing + * @see JavaTimeModule + * @since 2.0.0 + */ +public class JsonUtils { + public static final ObjectMapper DEFAULT_JSON_MAPPER = Json.mapper(); + + private JsonUtils() { + } + + public static ObjectMapper mapper() { + return DEFAULT_JSON_MAPPER; + } + + /** + * Converts a map to the object specified type. + * + * @param sourceMap source map must not be empty + * @param type object type must not be null + * @param target object type + * @return the object specified type + */ + @NonNull + public static T mapToObject(@NonNull Map sourceMap, @NonNull Class type) { + return DEFAULT_JSON_MAPPER.convertValue(sourceMap, type); + } + + /** + * Converts object to json format. + * + * @param source source object must not be null + * @return json format of the source object + */ + @NonNull + public static String objectToJson(@NonNull Object source) { + Assert.notNull(source, "Source object must not be null"); + try { + return DEFAULT_JSON_MAPPER.writeValueAsString(source); + } catch (JsonProcessingException e) { + throw new JsonParseException(e); + } + } + + /** + * Method to deserialize JSON content from given JSON content String. + * + * @param json json content + * @param toValueType object type to convert + * @param real type to convert + * @return converted object + */ + public static T jsonToObject(String json, Class toValueType) { + try { + return DEFAULT_JSON_MAPPER.readValue(json, toValueType); + } catch (Exception e) { + throw new JsonParseException(e); + } + } + + /** + * Method to deserialize JSON content from given JSON content String. + * + * @param json json content + * @param typeReference type reference to convert + * @param real type to convert + * @return converted object + */ + public static T jsonToObject(String json, TypeReference typeReference) { + try { + return DEFAULT_JSON_MAPPER.readValue(json, typeReference); + } catch (Exception e) { + throw new JsonParseException(e); + } + } + + /** + * Method to deserialize JSON content and serialize back from given Object. + * + * @param source source object to copy + * @param real type to deep copy + * @return deep copy of the source object + */ + @SuppressWarnings("unchecked") + public static T deepCopy(T source) { + try { + return (T) DEFAULT_JSON_MAPPER.readValue(objectToJson(source), source.getClass()); + } catch (JsonProcessingException e) { + throw new JsonParseException(e); + } + } +} diff --git a/api/src/main/java/run/halo/app/infra/utils/PathUtils.java b/api/src/main/java/run/halo/app/infra/utils/PathUtils.java new file mode 100644 index 0000000..1c08e34 --- /dev/null +++ b/api/src/main/java/run/halo/app/infra/utils/PathUtils.java @@ -0,0 +1,121 @@ +package run.halo.app.infra.utils; + +import java.net.URI; +import java.net.URISyntaxException; +import lombok.experimental.UtilityClass; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; + +/** + * Http path manipulation tool class. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@UtilityClass +public class PathUtils { + + /** + * Every HTTP URL conforms to the syntax of a generic URI. The URI generic syntax consists of + * components organized hierarchically in order of decreasing significance from left to + * right: + * 
+     * URI = scheme ":" ["//" authority] path ["?" query] ["#" fragment]
+     *
+ * The authority component consists of subcomponents: + * 
+     * authority = [userinfo "@"] host [":" port]
+     *
+ * Examples of popular schemes include http, https, ftp, mailto, file, data and irc. URI + * schemes should be registered with the + * Internet Assigned Numbers Authority (IANA), although + * non-registered schemes are used in practice. + * + * @param uriString url or path + * @return true if the linkBase is absolute, otherwise false + * @see URL + */ + public static boolean isAbsoluteUri(final String uriString) { + if (StringUtils.isBlank(uriString)) { + return false; + } + try { + URI uri = new URI(uriString); + return uri.isAbsolute(); + } catch (URISyntaxException e) { + log.debug("Failed to parse uri: " + uriString, e); + // ignore this exception + return false; + } + } + + /** + * Combine paths based on the passed in path segments parameters. + *

+ * This method doesn't work for Windows system currently. + * + * @param pathSegments Path segments to be combined + * @return the combined path + */ + public static String combinePath(String... pathSegments) { + StringBuilder sb = new StringBuilder(); + for (String path : pathSegments) { + if (path == null) { + continue; + } + String s = path.startsWith("/") ? path : "/" + path; + String segment = s.endsWith("/") ? s.substring(0, s.length() - 1) : s; + sb.append(segment); + } + return sb.toString(); + } + + + /** + *

Append a {@code '/'} if the path does not end with a {@code '/'}.

+ * Examples are as follows: + * 
+     *     PathUtils.appendPathSeparatorIfMissing("hello") -> hello/
+     *     PathUtils.appendPathSeparatorIfMissing("some-path/") -> some-path/
+     *     PathUtils.appendPathSeparatorIfMissing(null) -> null
+     *
+ * + * @param path a path + * @return A new String if suffix was appended, the same string otherwise. + */ + public static String appendPathSeparatorIfMissing(String path) { + return StringUtils.appendIfMissing(path, "/", "/"); + } + + /** + *

Remove the regex in the path pattern placeholder.

+ *

For example:

+ *
    + *
  • '{@code /{year:\d{4}}/{month:\d{2}}}' → '{@code /{year}/{month}}'
    • + *
  • '{@code /archives/{year:\d{4}}/{month:\d{2}}}' → '{@code /archives/{year}/{month} + * }'
    • + *
  • '{@code /archives/{year:\d{4}}/{slug}}' → '{@code /archives/{year}/{slug}}'
    • + *
+ * + * @param pattern path pattern + * @return Simplified path pattern + */ + public static String simplifyPathPattern(String pattern) { + if (StringUtils.isBlank(pattern)) { + return StringUtils.EMPTY; + } + String[] parts = StringUtils.split(pattern, '/'); + for (int i = 0; i < parts.length; i++) { + String part = parts[i]; + if (part.startsWith("{") && part.endsWith("}")) { + int colonIdx = part.indexOf(':'); + if (colonIdx != -1) { + parts[i] = part.substring(0, colonIdx) + part.charAt(part.length() - 1); + } + + } + } + return combinePath(parts); + } +} diff --git a/api/src/main/java/run/halo/app/migration/Backup.java b/api/src/main/java/run/halo/app/migration/Backup.java new file mode 100644 index 0000000..8d96e6d --- /dev/null +++ b/api/src/main/java/run/halo/app/migration/Backup.java @@ -0,0 +1,65 @@ +package run.halo.app.migration; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "migration.halo.run", version = "v1alpha1", kind = "Backup", + plural = "backups", singular = "backup") +public class Backup extends AbstractExtension { + + private Spec spec = new Spec(); + + private Status status = new Status(); + + @Data + @Schema(name = "BackupSpec") + public static class Spec { + + @Schema(description = "Backup file format. Currently, only zip format is supported.") + private String format; + + private Instant expiresAt; + + } + + @Data + @Schema(name = "BackupStatus") + public static class Status { + + private Phase phase = Phase.PENDING; + + private Instant startTimestamp; + + private Instant completionTimestamp; + + private String failureReason; + + private String failureMessage; + + /** + * Size of backup file. Data unit: byte + */ + private Long size; + + /** + * Name of backup file. + */ + private String filename; + } + + public enum Phase { + PENDING, + RUNNING, + SUCCEEDED, + FAILED, + } + +} diff --git a/api/src/main/java/run/halo/app/migration/Constant.java b/api/src/main/java/run/halo/app/migration/Constant.java new file mode 100644 index 0000000..6b7b4c7 --- /dev/null +++ b/api/src/main/java/run/halo/app/migration/Constant.java @@ -0,0 +1,12 @@ +package run.halo.app.migration; + +public enum Constant { + ; + + public static final String GROUP = "migration.halo.run"; + + public static final String VERSION = "v1alpha1"; + + public static final String HOUSE_KEEPER_FINALIZER = "housekeeper"; + +} diff --git a/api/src/main/java/run/halo/app/notification/NotificationCenter.java b/api/src/main/java/run/halo/app/notification/NotificationCenter.java new file mode 100644 index 0000000..dbd8de7 --- /dev/null +++ b/api/src/main/java/run/halo/app/notification/NotificationCenter.java @@ -0,0 +1,46 @@ +package run.halo.app.notification; + +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.core.extension.notification.Subscription; + +/** + * Notification center to notify and manage notifications. + * + * @author guqing + * @since 2.10.0 + */ +public interface NotificationCenter { + + /** + * Notifies the subscriber with the given reason. + * + * @param reason reason to notify + */ + Mono notify(Reason reason); + + /** + * Subscribes to the given subject with the given reason. + * + * @param subscriber subscriber to subscribe to + * @param reason interest reason to subscribe + * @return a subscription + */ + Mono subscribe(Subscription.Subscriber subscriber, + Subscription.InterestReason reason); + + /** + * Unsubscribes by the given subject. + * + * @param subscriber subscriber to unsubscribe + */ + Mono unsubscribe(Subscription.Subscriber subscriber); + + /** + * Unsubscribes by the given subject and reason. + * + * @param subscriber subscriber to unsubscribe + * @param reason reason to unsubscribe + */ + Mono unsubscribe(Subscription.Subscriber subscriber, Subscription.InterestReason reason); +} diff --git a/api/src/main/java/run/halo/app/notification/NotificationContext.java b/api/src/main/java/run/halo/app/notification/NotificationContext.java new file mode 100644 index 0000000..5550dfd --- /dev/null +++ b/api/src/main/java/run/halo/app/notification/NotificationContext.java @@ -0,0 +1,48 @@ +package run.halo.app.notification; + +import com.fasterxml.jackson.databind.node.ObjectNode; +import java.time.Instant; +import lombok.Builder; +import lombok.Data; + +@Data +public class NotificationContext { + + private Message message; + + private ObjectNode receiverConfig; + + private ObjectNode senderConfig; + + @Data + public static class Message { + private MessagePayload payload; + + private Subject subject; + + private String recipient; + + private Instant timestamp; + } + + @Data + @Builder + public static class Subject { + private String apiVersion; + private String kind; + private String name; + private String title; + private String url; + } + + @Data + public static class MessagePayload { + private String title; + + private String rawBody; + + private String htmlBody; + + private ReasonAttributes attributes; + } +} diff --git a/api/src/main/java/run/halo/app/notification/NotificationReasonEmitter.java b/api/src/main/java/run/halo/app/notification/NotificationReasonEmitter.java new file mode 100644 index 0000000..5c3551f --- /dev/null +++ b/api/src/main/java/run/halo/app/notification/NotificationReasonEmitter.java @@ -0,0 +1,22 @@ +package run.halo.app.notification; + +import java.util.function.Consumer; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.Reason; + +/** + * {@link NotificationReasonEmitter} to emit notification reason. + * + * @author guqing + * @since 2.10.0 + */ +public interface NotificationReasonEmitter { + + /** + * Emit a {@link Reason} with {@link ReasonPayload}. + * + * @param reasonType reason type to emitter must not be blank + * @param reasonData reason data must not be null + */ + Mono emit(String reasonType, Consumer reasonData); +} diff --git a/api/src/main/java/run/halo/app/notification/ReactiveNotifier.java b/api/src/main/java/run/halo/app/notification/ReactiveNotifier.java new file mode 100644 index 0000000..9093bb3 --- /dev/null +++ b/api/src/main/java/run/halo/app/notification/ReactiveNotifier.java @@ -0,0 +1,20 @@ +package run.halo.app.notification; + +import org.pf4j.ExtensionPoint; +import reactor.core.publisher.Mono; + +/** + * Notifier to notify user. + * + * @author guqing + * @since 2.10.0 + */ +public interface ReactiveNotifier extends ExtensionPoint { + + /** + * Notify user. + * + * @param context notification context must not be null + */ + Mono notify(NotificationContext context); +} diff --git a/api/src/main/java/run/halo/app/notification/ReasonAttributes.java b/api/src/main/java/run/halo/app/notification/ReasonAttributes.java new file mode 100644 index 0000000..da42f93 --- /dev/null +++ b/api/src/main/java/run/halo/app/notification/ReasonAttributes.java @@ -0,0 +1,13 @@ +package run.halo.app.notification; + +import java.util.HashMap; + +/** + *

{@link ReasonAttributes} is a map that stores the attributes of the reason.

+ * + * @author guqing + * @since 2.10.0 + */ +public class ReasonAttributes extends HashMap { + +} diff --git a/api/src/main/java/run/halo/app/notification/ReasonPayload.java b/api/src/main/java/run/halo/app/notification/ReasonPayload.java new file mode 100644 index 0000000..fcc711b --- /dev/null +++ b/api/src/main/java/run/halo/app/notification/ReasonPayload.java @@ -0,0 +1,60 @@ +package run.halo.app.notification; + +import java.util.HashMap; +import java.util.Map; +import lombok.AllArgsConstructor; +import lombok.Data; +import run.halo.app.core.extension.notification.Reason; + +/** + * A value object to hold reason payload. + * + * @author guqing + * @see Reason + * @since 2.10.0 + */ +@Data +@AllArgsConstructor +public class ReasonPayload { + private Reason.Subject subject; + private final UserIdentity author; + private Map attributes; + + public static ReasonPayloadBuilder builder() { + return new ReasonPayloadBuilder(); + } + + public static class ReasonPayloadBuilder { + private Reason.Subject subject; + private UserIdentity author; + private final Map attributes; + + ReasonPayloadBuilder() { + this.attributes = new HashMap<>(); + } + + public ReasonPayloadBuilder subject(Reason.Subject subject) { + this.subject = subject; + return this; + } + + public ReasonPayloadBuilder attribute(String key, Object value) { + this.attributes.put(key, value); + return this; + } + + public ReasonPayloadBuilder attributes(Map attributes) { + this.attributes.putAll(attributes); + return this; + } + + public ReasonPayloadBuilder author(UserIdentity author) { + this.author = author; + return this; + } + + public ReasonPayload build() { + return new ReasonPayload(subject, author, attributes); + } + } +} \ No newline at end of file diff --git a/api/src/main/java/run/halo/app/notification/UserIdentity.java b/api/src/main/java/run/halo/app/notification/UserIdentity.java new file mode 100644 index 0000000..b9c1efb --- /dev/null +++ b/api/src/main/java/run/halo/app/notification/UserIdentity.java @@ -0,0 +1,57 @@ +package run.halo.app.notification; + +import java.util.Optional; +import org.apache.commons.lang3.StringUtils; +import org.springframework.util.Assert; +import run.halo.app.infra.AnonymousUserConst; + +/** + * Identity for user. + * + * @author guqing + * @since 2.10.0 + */ +public record UserIdentity(String name) { + public static final String SEPARATOR = "#"; + + /** + * Create identity with username to identify a user. + * + * @param username username + * @return identity + */ + public static UserIdentity of(String username) { + return new UserIdentity(username); + } + + /** + *

Create identity with email to identify a user, + * the name will be {@code anonymousUser#email}.

+ *

An anonymous user can not be identified by username so we use email to identify it.

+ * + * @param email email + * @return identity + */ + public static UserIdentity anonymousWithEmail(String email) { + Assert.notNull(email, "Email must not be null"); + String name = AnonymousUserConst.PRINCIPAL + SEPARATOR + email; + return of(name); + } + + public boolean isAnonymous() { + return name().startsWith(AnonymousUserConst.PRINCIPAL + SEPARATOR); + } + + /** + * Gets email if the identity is an anonymous user. + * + * @return email if the identity is an anonymous user, otherwise empty + */ + public Optional getEmail() { + if (isAnonymous()) { + return Optional.of(name().substring(name().indexOf(SEPARATOR) + 1)) + .filter(StringUtils::isNotBlank); + } + return Optional.empty(); + } +} diff --git a/api/src/main/java/run/halo/app/plugin/ApiVersion.java b/api/src/main/java/run/halo/app/plugin/ApiVersion.java new file mode 100644 index 0000000..3026cb9 --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/ApiVersion.java @@ -0,0 +1,26 @@ +package run.halo.app.plugin; + +import java.lang.annotation.Documented; +import java.lang.annotation.ElementType; +import java.lang.annotation.Retention; +import java.lang.annotation.RetentionPolicy; +import java.lang.annotation.Target; + +/** + * Api version. + * + * @author guqing + * @since 2.0.0 + */ +@Target({ElementType.TYPE}) +@Retention(RetentionPolicy.RUNTIME) +@Documented +public @interface ApiVersion { + + /** + * Api version value. + * + * @return api version string + */ + String value(); +} diff --git a/api/src/main/java/run/halo/app/plugin/BasePlugin.java b/api/src/main/java/run/halo/app/plugin/BasePlugin.java new file mode 100644 index 0000000..88cdc2c --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/BasePlugin.java @@ -0,0 +1,41 @@ +package run.halo.app.plugin; + +import lombok.Getter; +import lombok.extern.slf4j.Slf4j; +import org.pf4j.Plugin; +import org.pf4j.PluginWrapper; + +/** + * This class will be extended by all plugins and serve as the common class between a plugin and + * the application. + * + * @author guqing + * @since 2.0.0 + */ +@Getter +@Slf4j +public class BasePlugin extends Plugin { + + protected PluginContext context; + + /** + * Constructor a plugin with the given plugin context. + * + * @param pluginContext plugin context must not be null. + */ + public BasePlugin(PluginContext pluginContext) { + this.context = pluginContext; + } + + @Deprecated(since = "2.7.0", forRemoval = true) + public BasePlugin(PluginWrapper wrapper) { + super(wrapper); + log.warn("Deprecated constructor 'BasePlugin(PluginWrapper wrapper)' called, please use " + + "'BasePlugin(PluginContext pluginContext)' instead for plugin '{}',This " + + "constructor will be removed in 2.19.0", + wrapper.getPluginId()); + } + + public BasePlugin() { + } +} diff --git a/api/src/main/java/run/halo/app/plugin/PluginConfigUpdatedEvent.java b/api/src/main/java/run/halo/app/plugin/PluginConfigUpdatedEvent.java new file mode 100644 index 0000000..77877d0 --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/PluginConfigUpdatedEvent.java @@ -0,0 +1,32 @@ +package run.halo.app.plugin; + +import com.fasterxml.jackson.databind.JsonNode; +import java.util.Map; +import lombok.Builder; +import lombok.Getter; +import org.springframework.context.ApplicationEvent; +import run.halo.app.core.extension.Plugin; +import run.halo.app.extension.ConfigMap; + +/** + *

Event that is triggered when the {@link ConfigMap } represented by + * {@link Plugin.PluginSpec#getConfigMapName()} in the {@link Plugin} is updated.

+ *

has two properties, oldConfig and newConfig, which represent the {@link ConfigMap#getData()} + * property value of the {@link ConfigMap}.

+ * + * @author guqing + * @since 2.17.0 + */ +@Getter +public class PluginConfigUpdatedEvent extends ApplicationEvent { + private final Map oldConfig; + private final Map newConfig; + + @Builder + public PluginConfigUpdatedEvent(Object source, Map oldConfig, + Map newConfig) { + super(source); + this.oldConfig = oldConfig; + this.newConfig = newConfig; + } +} diff --git a/api/src/main/java/run/halo/app/plugin/PluginContext.java b/api/src/main/java/run/halo/app/plugin/PluginContext.java new file mode 100644 index 0000000..d5fa549 --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/PluginContext.java @@ -0,0 +1,31 @@ +package run.halo.app.plugin; + +import lombok.Builder; +import lombok.Getter; +import lombok.RequiredArgsConstructor; +import org.pf4j.RuntimeMode; + +/** + *

This class will provide a context for the plugin, which will be used to store some + * information about the plugin.

+ *

An instance of this class is provided to plugins in their constructor.

+ *

It's safe for plugins to keep a reference to the instance for later use.

+ *

This class facilitates communication with application and plugin manager.

+ *

Pf4j recommends that you use a custom PluginContext instead of PluginWrapper.

+ * Use application custom PluginContext instead of PluginWrapper + * + * @author guqing + * @since 2.10.0 + */ +@Getter +@Builder +@RequiredArgsConstructor +public class PluginContext { + private final String name; + + private final String configMapName; + + private final String version; + + private final RuntimeMode runtimeMode; +} diff --git a/api/src/main/java/run/halo/app/plugin/PluginsRootGetter.java b/api/src/main/java/run/halo/app/plugin/PluginsRootGetter.java new file mode 100644 index 0000000..214d286 --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/PluginsRootGetter.java @@ -0,0 +1,14 @@ +package run.halo.app.plugin; + +import java.nio.file.Path; +import java.util.function.Supplier; + +/** + * An interface to get the root path of plugins. + * + * @author johnniang + * @since 2.18.0 + */ +public interface PluginsRootGetter extends Supplier { + +} diff --git a/api/src/main/java/run/halo/app/plugin/ReactiveSettingFetcher.java b/api/src/main/java/run/halo/app/plugin/ReactiveSettingFetcher.java new file mode 100644 index 0000000..8272fd6 --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/ReactiveSettingFetcher.java @@ -0,0 +1,23 @@ +package run.halo.app.plugin; + +import com.fasterxml.jackson.databind.JsonNode; +import java.util.Map; +import org.springframework.lang.NonNull; +import reactor.core.publisher.Mono; + +/** + * The {@link ReactiveSettingFetcher} to help plugin fetch own setting configuration. + * + * @author guqing + * @since 2.4.0 + */ +public interface ReactiveSettingFetcher { + + Mono fetch(String group, Class clazz); + + @NonNull + Mono get(String group); + + @NonNull + Mono> getValues(); +} diff --git a/api/src/main/java/run/halo/app/plugin/SettingFetcher.java b/api/src/main/java/run/halo/app/plugin/SettingFetcher.java new file mode 100644 index 0000000..79374a4 --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/SettingFetcher.java @@ -0,0 +1,20 @@ +package run.halo.app.plugin; + +import com.fasterxml.jackson.databind.JsonNode; +import java.util.Map; +import java.util.Optional; + +/** + * SettingFetcher must be a class instead of an interface due to backward compatibility. + * + * @author johnniang + */ +public abstract class SettingFetcher { + + public abstract Optional fetch(String group, Class clazz); + + public abstract JsonNode get(String group); + + public abstract Map getValues(); + +} diff --git a/api/src/main/java/run/halo/app/plugin/SharedEvent.java b/api/src/main/java/run/halo/app/plugin/SharedEvent.java new file mode 100644 index 0000000..a62026c --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/SharedEvent.java @@ -0,0 +1,21 @@ +package run.halo.app.plugin; + +import java.lang.annotation.Documented; +import java.lang.annotation.ElementType; +import java.lang.annotation.Retention; +import java.lang.annotation.RetentionPolicy; +import java.lang.annotation.Target; + +/** + *

It is a symbolic annotation.

+ *

When the event marked with {@link SharedEvent} annotation is published, it will be + * broadcast to the application context of the plugin. + * + * @author guqing + * @since 2.0.0 + */ +@Target(ElementType.TYPE) +@Retention(RetentionPolicy.RUNTIME) +@Documented +public @interface SharedEvent { +} diff --git a/api/src/main/java/run/halo/app/plugin/event/PluginStartedEvent.java b/api/src/main/java/run/halo/app/plugin/event/PluginStartedEvent.java new file mode 100644 index 0000000..16c1308 --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/event/PluginStartedEvent.java @@ -0,0 +1,17 @@ +package run.halo.app.plugin.event; + +import org.springframework.context.ApplicationEvent; + +/** + * The event that is published when a plugin is really started, and is only for plugin internal use. + * + * @author johnniang + * @since 2.17.0 + */ +public class PluginStartedEvent extends ApplicationEvent { + + public PluginStartedEvent(Object source) { + super(source); + } + +} diff --git a/api/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionGetter.java b/api/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionGetter.java new file mode 100644 index 0000000..58615ec --- /dev/null +++ b/api/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionGetter.java @@ -0,0 +1,37 @@ +package run.halo.app.plugin.extensionpoint; + +import org.pf4j.ExtensionPoint; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +public interface ExtensionGetter { + + /** + * Get only one enabled extension from system configuration. + * + * @param extensionPoint is extension point class. + * @return implementation of the corresponding extension point. If no configuration is found, + * we will use the default implementation from application context instead. + */ + Mono getEnabledExtension(Class extensionPoint); + + /** + * Get the extension(s) according to the {@code ExtensionPointDefinition} queried + * by incoming extension point class. + * + * @param extensionPoint extension point class + * @return implementations of the corresponding extension point. + * @throws IllegalArgumentException if the incoming extension point class does not have + * the {@code ExtensionPointDefinition}. + */ + Flux getEnabledExtensions(Class extensionPoint); + + /** + * Get all extensions according to extension point class. + * + * @param extensionPointClass extension point class + * @param type of extension point + * @return a bunch of extension points. + */ + Flux getExtensions(Class extensionPointClass); +} diff --git a/api/src/main/java/run/halo/app/search/HaloDocument.java b/api/src/main/java/run/halo/app/search/HaloDocument.java new file mode 100644 index 0000000..eedd593 --- /dev/null +++ b/api/src/main/java/run/halo/app/search/HaloDocument.java @@ -0,0 +1,106 @@ +package run.halo.app.search; + +import jakarta.validation.constraints.NotBlank; +import jakarta.validation.constraints.PastOrPresent; +import java.time.Instant; +import java.util.List; +import java.util.Map; +import lombok.Data; + +/** + * Document for search. + */ +@Data +public final class HaloDocument { + + /** + * Document ID. It should be unique globally. + */ + @NotBlank + private String id; + + /** + * Metadata name of the corresponding extension. + */ + @NotBlank + private String metadataName; + + /** + * Custom metadata. Make sure the map is serializable. + */ + private Map annotations; + + /** + * Document title. + */ + @NotBlank + private String title; + + /** + * Document description. + */ + private String description; + + /** + * Document content. Safety content, without HTML tag. + */ + @NotBlank + private String content; + + /** + * Document categories. The item in the list is the category metadata name. + */ + private List categories; + + /** + * Document tags. The item in the list is the tag metadata name. + */ + private List tags; + + /** + * Whether the document is published. + */ + private boolean published; + + /** + * Whether the document is recycled. + */ + private boolean recycled; + + /** + * Whether the document is exposed to the public. + */ + private boolean exposed; + + /** + * Document owner metadata name. + */ + @NotBlank + private String ownerName; + + /** + * Document creation timestamp. + */ + @PastOrPresent + private Instant creationTimestamp; + + /** + * Document update timestamp. + */ + @PastOrPresent + private Instant updateTimestamp; + + /** + * Document permalink. + */ + @NotBlank + private String permalink; + + /** + * Document type. e.g.: post.content.halo.run, singlepage.content.halo.run, moment.moment + * .halo.run, doc.doc.halo.run. + */ + @NotBlank + private String type; + +} diff --git a/api/src/main/java/run/halo/app/search/HaloDocumentsProvider.java b/api/src/main/java/run/halo/app/search/HaloDocumentsProvider.java new file mode 100644 index 0000000..91b5c81 --- /dev/null +++ b/api/src/main/java/run/halo/app/search/HaloDocumentsProvider.java @@ -0,0 +1,27 @@ +package run.halo.app.search; + +import org.pf4j.ExtensionPoint; +import reactor.core.publisher.Flux; + +/** + * Halo documents provider. This interface is used to rebuild the search index. + * + * @author johnniang + */ +public interface HaloDocumentsProvider extends ExtensionPoint { + + /** + * Fetch all halo documents. + * + * @return all halo documents + */ + Flux fetchAll(); + + /** + * Get type of documents. + * + * @return type of documents + */ + String getType(); + +} diff --git a/api/src/main/java/run/halo/app/search/SearchEngine.java b/api/src/main/java/run/halo/app/search/SearchEngine.java new file mode 100644 index 0000000..8a48558 --- /dev/null +++ b/api/src/main/java/run/halo/app/search/SearchEngine.java @@ -0,0 +1,47 @@ +package run.halo.app.search; + +import org.pf4j.ExtensionPoint; + +/** + * Search engine is used to index and search halo documents. Meanwhile, it is also an extension + * point for adding different search engine implementations. + * + * @author johnniang + */ +public interface SearchEngine extends ExtensionPoint { + + /** + * Whether the search engine is available. + * + * @return true if available, false otherwise + */ + boolean available(); + + /** + * Add or update halo documents. + * + * @param haloDocuments halo documents + */ + void addOrUpdate(Iterable haloDocuments); + + /** + * Delete halo documents by ids. + * + * @param haloDocIds halo document ids + */ + void deleteDocument(Iterable haloDocIds); + + /** + * Delete all halo documents. + */ + void deleteAll(); + + /** + * Search halo documents. + * + * @param option search option + * @return search result of halo documents + */ + SearchResult search(SearchOption option); + +} diff --git a/api/src/main/java/run/halo/app/search/SearchOption.java b/api/src/main/java/run/halo/app/search/SearchOption.java new file mode 100644 index 0000000..1c84ce4 --- /dev/null +++ b/api/src/main/java/run/halo/app/search/SearchOption.java @@ -0,0 +1,79 @@ +package run.halo.app.search; + +import jakarta.validation.constraints.Max; +import jakarta.validation.constraints.Min; +import jakarta.validation.constraints.NotBlank; +import java.util.List; +import java.util.Map; +import lombok.Data; + +/** + * Search option. It is used to control search behavior. + * + * @author johnniang + */ +@Data +public class SearchOption { + /** + * Search keyword. + */ + @NotBlank + private String keyword; + + /** + * Limit of result. + */ + @Min(1) + @Max(1000) + private int limit = 10; + + /** + * Pre HTML tag of highlighted fragment. + */ + private String highlightPreTag = ""; + + /** + * Post HTML tag of highlighted fragment. + */ + private String highlightPostTag = ""; + + /** + * Whether to filter exposed content. If null, it will not filter. + */ + private Boolean filterExposed; + + /** + * Whether to filter recycled content. If null, it will not filter. + */ + private Boolean filterRecycled; + + /** + * Whether to filter published content. If null, it will not filter. + */ + private Boolean filterPublished; + + /** + * Types to include(or). If null, it will include all types. + */ + private List includeTypes; + + /** + * Owner names to include(or). If null, it will include all owners. + */ + private List includeOwnerNames; + + /** + * Category names to include(and). If null, it will include all categories. + */ + private List includeCategoryNames; + + /** + * Tag names to include(and). If null, it will include all tags. + */ + private List includeTagNames; + + /** + * Additional annotations for extending search option by other search engines. + */ + private Map annotations; +} diff --git a/api/src/main/java/run/halo/app/search/SearchParam.java b/api/src/main/java/run/halo/app/search/SearchParam.java new file mode 100644 index 0000000..e188517 --- /dev/null +++ b/api/src/main/java/run/halo/app/search/SearchParam.java @@ -0,0 +1,108 @@ +package run.halo.app.search; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springframework.util.MultiValueMap; +import org.springframework.util.StringUtils; +import org.springframework.web.server.ServerWebInputException; + +@Deprecated(forRemoval = true, since = "2.17") +public class SearchParam { + + private static final int DEFAULT_LIMIT = 10; + private static final String DEFAULT_HIGHLIGHT_PRE_TAG = ""; + private static final String DEFAULT_HIGHLIGHT_POST_TAG = ""; + + private final MultiValueMap query; + + public SearchParam(MultiValueMap query) { + this.query = query; + } + + @Schema(name = "keyword", requiredMode = REQUIRED) + public String getKeyword() { + var keyword = query.getFirst("keyword"); + if (!StringUtils.hasText(keyword)) { + throw new ServerWebInputException("keyword is required"); + } + return keyword; + } + + @Schema(name = "limit", defaultValue = "100", maximum = "1000") + public int getLimit() { + var limitString = query.getFirst("limit"); + int limit = 0; + if (StringUtils.hasText(limitString)) { + try { + limit = Integer.parseInt(limitString); + } catch (NumberFormatException nfe) { + throw new ServerWebInputException("Failed to get "); + } + } + if (limit <= 0) { + limit = DEFAULT_LIMIT; + } + return limit; + } + + @Schema(name = "highlightPreTag", defaultValue = DEFAULT_HIGHLIGHT_PRE_TAG) + public String getHighlightPreTag() { + var highlightPreTag = query.getFirst("highlightPreTag"); + if (!StringUtils.hasText(highlightPreTag)) { + highlightPreTag = DEFAULT_HIGHLIGHT_PRE_TAG; + } + return highlightPreTag; + } + + @Schema(name = "highlightPostTag", defaultValue = DEFAULT_HIGHLIGHT_POST_TAG) + public String getHighlightPostTag() { + var highlightPostTag = query.getFirst("highlightPostTag"); + if (!StringUtils.hasText(highlightPostTag)) { + highlightPostTag = DEFAULT_HIGHLIGHT_POST_TAG; + } + return highlightPostTag; + } + + public static void buildParameters(Builder builder) { + builder.parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("keyword") + .description("Keyword to search") + .implementation(String.class) + .required(true)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("limit") + .description("Limit of search results") + .required(false) + .schema(schemaBuilder() + .implementation(Integer.class) + .maximum("1000") + .defaultValue(String.valueOf(DEFAULT_LIMIT)))) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("highlightPreTag") + .description("Highlight pre tag") + .required(false) + .schema(schemaBuilder() + .implementation(String.class) + .defaultValue(DEFAULT_HIGHLIGHT_PRE_TAG) + )) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("highlightPostTag") + .description("Highlight post tag") + .required(false) + .schema(schemaBuilder() + .implementation(String.class) + .defaultValue(DEFAULT_HIGHLIGHT_POST_TAG) + ) + ); + + } +} diff --git a/api/src/main/java/run/halo/app/search/SearchResult.java b/api/src/main/java/run/halo/app/search/SearchResult.java new file mode 100644 index 0000000..83d209a --- /dev/null +++ b/api/src/main/java/run/halo/app/search/SearchResult.java @@ -0,0 +1,13 @@ +package run.halo.app.search; + +import java.util.List; +import lombok.Data; + +@Data +public class SearchResult { + private List hits; + private String keyword; + private Long total; + private int limit; + private long processingTimeMillis; +} diff --git a/api/src/main/java/run/halo/app/search/SearchService.java b/api/src/main/java/run/halo/app/search/SearchService.java new file mode 100644 index 0000000..8d17588 --- /dev/null +++ b/api/src/main/java/run/halo/app/search/SearchService.java @@ -0,0 +1,21 @@ +package run.halo.app.search; + +import reactor.core.publisher.Mono; + +/** + * Search service is used to search content. + * + * @author johnniang + * @since 2.17.0 + */ +public interface SearchService { + + /** + * Perform search. + * + * @param option search option must not be null + * @return search result + */ + Mono search(SearchOption option); + +} diff --git a/api/src/main/java/run/halo/app/search/event/HaloDocumentAddRequestEvent.java b/api/src/main/java/run/halo/app/search/event/HaloDocumentAddRequestEvent.java new file mode 100644 index 0000000..d0e29ce --- /dev/null +++ b/api/src/main/java/run/halo/app/search/event/HaloDocumentAddRequestEvent.java @@ -0,0 +1,21 @@ +package run.halo.app.search.event; + +import org.springframework.context.ApplicationEvent; +import run.halo.app.plugin.SharedEvent; +import run.halo.app.search.HaloDocument; + +@SharedEvent +public class HaloDocumentAddRequestEvent extends ApplicationEvent { + + private final Iterable documents; + + public HaloDocumentAddRequestEvent(Object source, Iterable documents) { + super(source); + this.documents = documents; + } + + public Iterable getDocuments() { + return documents; + } + +} diff --git a/api/src/main/java/run/halo/app/search/event/HaloDocumentDeleteRequestEvent.java b/api/src/main/java/run/halo/app/search/event/HaloDocumentDeleteRequestEvent.java new file mode 100644 index 0000000..1fd1ce5 --- /dev/null +++ b/api/src/main/java/run/halo/app/search/event/HaloDocumentDeleteRequestEvent.java @@ -0,0 +1,27 @@ +package run.halo.app.search.event; + +import org.springframework.context.ApplicationEvent; +import org.springframework.lang.Nullable; +import run.halo.app.plugin.SharedEvent; + +@SharedEvent +public class HaloDocumentDeleteRequestEvent extends ApplicationEvent { + + private final Iterable docIds; + + /** + * Construct a new {@code HaloDocumentDeleteRequestEvent} instance. + * + * @param source The source of the event. + * @param docIds If the document IDs are not provided, all documents will be deleted. + */ + public HaloDocumentDeleteRequestEvent(Object source, @Nullable Iterable docIds) { + super(source); + this.docIds = docIds; + } + + public Iterable getDocIds() { + return docIds; + } + +} diff --git a/api/src/main/java/run/halo/app/search/event/HaloDocumentRebuildRequestEvent.java b/api/src/main/java/run/halo/app/search/event/HaloDocumentRebuildRequestEvent.java new file mode 100644 index 0000000..7d32d14 --- /dev/null +++ b/api/src/main/java/run/halo/app/search/event/HaloDocumentRebuildRequestEvent.java @@ -0,0 +1,13 @@ +package run.halo.app.search.event; + +import org.springframework.context.ApplicationEvent; +import run.halo.app.plugin.SharedEvent; + +@SharedEvent +public class HaloDocumentRebuildRequestEvent extends ApplicationEvent { + + public HaloDocumentRebuildRequestEvent(Object source) { + super(source); + } + +} diff --git a/api/src/main/java/run/halo/app/search/post/PostDoc.java b/api/src/main/java/run/halo/app/search/post/PostDoc.java new file mode 100644 index 0000000..522ebae --- /dev/null +++ b/api/src/main/java/run/halo/app/search/post/PostDoc.java @@ -0,0 +1,23 @@ +package run.halo.app.search.post; + +import java.time.Instant; +import org.springframework.util.Assert; + +@Deprecated(forRemoval = true, since = "2.17") +public record PostDoc(String name, + String title, + String excerpt, + String content, + Instant publishTimestamp, + String permalink) { + + public static final String ID_FIELD = "name"; + + public PostDoc { + Assert.hasText(name, "Name must not be blank"); + Assert.hasText(title, "Title must not be blank"); + Assert.hasText(permalink, "Permalink must not be blank"); + Assert.notNull(publishTimestamp, "PublishTimestamp must not be null"); + } + +} diff --git a/api/src/main/java/run/halo/app/search/post/PostHit.java b/api/src/main/java/run/halo/app/search/post/PostHit.java new file mode 100644 index 0000000..a479f01 --- /dev/null +++ b/api/src/main/java/run/halo/app/search/post/PostHit.java @@ -0,0 +1,20 @@ +package run.halo.app.search.post; + +import java.time.Instant; +import lombok.Data; + +@Data +@Deprecated(forRemoval = true, since = "2.17") +public class PostHit { + + private String name; + + private String title; + + private String content; + + private Instant publishTimestamp; + + private String permalink; + +} diff --git a/api/src/main/java/run/halo/app/security/AdditionalWebFilter.java b/api/src/main/java/run/halo/app/security/AdditionalWebFilter.java new file mode 100644 index 0000000..f20a39b --- /dev/null +++ b/api/src/main/java/run/halo/app/security/AdditionalWebFilter.java @@ -0,0 +1,25 @@ +package run.halo.app.security; + +import org.pf4j.ExtensionPoint; +import org.springframework.core.Ordered; +import org.springframework.web.server.WebFilter; + +/** + * Contract for interception-style, chained processing of Web requests that may be used to + * implement cross-cutting, application-agnostic requirements such as security, timeouts, and + * others. + * + * @author guqing + * @since 2.4.0 + */ +public interface AdditionalWebFilter extends WebFilter, ExtensionPoint, Ordered { + + /** + * Gets the order value of the object. + * + * @return the order value + */ + default int getOrder() { + return Ordered.LOWEST_PRECEDENCE; + } +} diff --git a/api/src/main/java/run/halo/app/security/AfterSecurityWebFilter.java b/api/src/main/java/run/halo/app/security/AfterSecurityWebFilter.java new file mode 100644 index 0000000..c012110 --- /dev/null +++ b/api/src/main/java/run/halo/app/security/AfterSecurityWebFilter.java @@ -0,0 +1,14 @@ +package run.halo.app.security; + +import org.pf4j.ExtensionPoint; +import org.springframework.web.server.WebFilter; + +/** + * Security web filter for after security. + * + * @author johnniang + * @since 2.18 + */ +public interface AfterSecurityWebFilter extends WebFilter, ExtensionPoint { + +} diff --git a/api/src/main/java/run/halo/app/security/AnonymousAuthenticationSecurityWebFilter.java b/api/src/main/java/run/halo/app/security/AnonymousAuthenticationSecurityWebFilter.java new file mode 100644 index 0000000..ac79873 --- /dev/null +++ b/api/src/main/java/run/halo/app/security/AnonymousAuthenticationSecurityWebFilter.java @@ -0,0 +1,13 @@ +package run.halo.app.security; + +import org.pf4j.ExtensionPoint; +import org.springframework.web.server.WebFilter; + +/** + * Security web filter for anonymous authentication. + * + * @author johnniang + */ +public interface AnonymousAuthenticationSecurityWebFilter extends WebFilter, ExtensionPoint { + +} diff --git a/api/src/main/java/run/halo/app/security/AuthenticationSecurityWebFilter.java b/api/src/main/java/run/halo/app/security/AuthenticationSecurityWebFilter.java new file mode 100644 index 0000000..1c99747 --- /dev/null +++ b/api/src/main/java/run/halo/app/security/AuthenticationSecurityWebFilter.java @@ -0,0 +1,13 @@ +package run.halo.app.security; + +import org.pf4j.ExtensionPoint; +import org.springframework.web.server.WebFilter; + +/** + * Security web filter for normal authentication. + * + * @author johnniang + */ +public interface AuthenticationSecurityWebFilter extends WebFilter, ExtensionPoint { + +} diff --git a/api/src/main/java/run/halo/app/security/BeforeSecurityWebFilter.java b/api/src/main/java/run/halo/app/security/BeforeSecurityWebFilter.java new file mode 100644 index 0000000..0bedc3d --- /dev/null +++ b/api/src/main/java/run/halo/app/security/BeforeSecurityWebFilter.java @@ -0,0 +1,14 @@ +package run.halo.app.security; + +import org.pf4j.ExtensionPoint; +import org.springframework.web.server.WebFilter; + +/** + * Security web filter for before security. + * + * @author johnniang + * @since 2.18 + */ +public interface BeforeSecurityWebFilter extends WebFilter, ExtensionPoint { + +} diff --git a/api/src/main/java/run/halo/app/security/FormLoginSecurityWebFilter.java b/api/src/main/java/run/halo/app/security/FormLoginSecurityWebFilter.java new file mode 100644 index 0000000..267a6a4 --- /dev/null +++ b/api/src/main/java/run/halo/app/security/FormLoginSecurityWebFilter.java @@ -0,0 +1,13 @@ +package run.halo.app.security; + +import org.pf4j.ExtensionPoint; +import org.springframework.web.server.WebFilter; + +/** + * Security web filter for form login. + * + * @author johnniang + */ +public interface FormLoginSecurityWebFilter extends WebFilter, ExtensionPoint { + +} diff --git a/api/src/main/java/run/halo/app/security/LoginHandlerEnhancer.java b/api/src/main/java/run/halo/app/security/LoginHandlerEnhancer.java new file mode 100644 index 0000000..33c9a07 --- /dev/null +++ b/api/src/main/java/run/halo/app/security/LoginHandlerEnhancer.java @@ -0,0 +1,34 @@ +package run.halo.app.security; + +import org.springframework.security.core.Authentication; +import org.springframework.security.core.AuthenticationException; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +/** + *

Halo uses this interface to enhance the processing of login success, such as device management + * and remember me, etc. The login method of the plugin extension needs to call this interface in + * the processing method of login success to ensure the normal operation of some enhanced + * functions.

+ * + * @author guqing + * @since 2.17.0 + */ +public interface LoginHandlerEnhancer { + + /** + * Invoked when login success. + * + * @param exchange The exchange. + * @param successfulAuthentication The successful authentication. + */ + Mono onLoginSuccess(ServerWebExchange exchange, Authentication successfulAuthentication); + + /** + * Invoked when login fails. + * + * @param exchange The exchange. + * @param exception the reason authentication failed + */ + Mono onLoginFailure(ServerWebExchange exchange, AuthenticationException exception); +} diff --git a/api/src/main/java/run/halo/app/security/PersonalAccessToken.java b/api/src/main/java/run/halo/app/security/PersonalAccessToken.java new file mode 100644 index 0000000..333c225 --- /dev/null +++ b/api/src/main/java/run/halo/app/security/PersonalAccessToken.java @@ -0,0 +1,53 @@ +package run.halo.app.security; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "security.halo.run", version = "v1alpha1", kind = PersonalAccessToken.KIND, + plural = "personalaccesstokens", singular = "personalaccesstoken") +public class PersonalAccessToken extends AbstractExtension { + + public static final String KIND = "PersonalAccessToken"; + + private Spec spec = new Spec(); + + @Data + @Schema(name = "PatSpec") + public static class Spec { + + @Schema(requiredMode = REQUIRED) + private String name; + + private String description; + + private Instant expiresAt; + + private List roles; + + private List scopes; + + @Schema(requiredMode = REQUIRED) + private String username; + + private boolean revoked; + + private Instant revokesAt; + + private Instant lastUsed; + + @Schema(requiredMode = REQUIRED) + private String tokenId; + + } +} diff --git a/api/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordAuthenticationManager.java b/api/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordAuthenticationManager.java new file mode 100644 index 0000000..e76a9af --- /dev/null +++ b/api/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordAuthenticationManager.java @@ -0,0 +1,18 @@ +package run.halo.app.security.authentication.login; + +import org.pf4j.ExtensionPoint; +import org.springframework.security.authentication.ReactiveAuthenticationManager; + +/** + * An extension point for username password authentication. + * Any non-authentication exception occurs, the default authentication will be used. + * If you want to skip authentication, please return Mono.empty() directly, the default + * authentication will be used. + * + * @author johnniang + * @since 2.8 + */ +public interface UsernamePasswordAuthenticationManager + extends ReactiveAuthenticationManager, ExtensionPoint { + +} diff --git a/api/src/main/java/run/halo/app/security/device/DeviceService.java b/api/src/main/java/run/halo/app/security/device/DeviceService.java new file mode 100644 index 0000000..ba52cd2 --- /dev/null +++ b/api/src/main/java/run/halo/app/security/device/DeviceService.java @@ -0,0 +1,14 @@ +package run.halo.app.security.device; + +import org.springframework.security.core.Authentication; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +public interface DeviceService { + + Mono loginSuccess(ServerWebExchange exchange, Authentication successfullAuthentication); + + Mono changeSessionId(ServerWebExchange exchange); + + Mono revoke(String principalName, String deviceId); +} diff --git a/api/src/main/java/run/halo/app/theme/ReactivePostContentHandler.java b/api/src/main/java/run/halo/app/theme/ReactivePostContentHandler.java new file mode 100644 index 0000000..9dba0f2 --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/ReactivePostContentHandler.java @@ -0,0 +1,40 @@ +package run.halo.app.theme; + +import lombok.Builder; +import lombok.Data; +import org.pf4j.ExtensionPoint; +import org.springframework.lang.NonNull; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; + +/** + *

{@link ReactivePostContentHandler} provides a way to extend the content to be displayed in + * the theme.

+ * Plugins can implement this interface to extend the content to be displayed in the theme, + * including but not limited to adding specific styles, JS libraries, inserting specific content, + * and intercepting content. + * + * @author guqing + * @since 2.7.0 + */ +public interface ReactivePostContentHandler extends ExtensionPoint { + + /** + *

Methods for handling {@link run.halo.app.core.extension.content.Post} content.

+ *

For example, you can use this method to change the content for a better display in + * theme-side.

+ * + * @param postContent content to be handled + * @return handled content + */ + Mono handle(@NonNull PostContentContext postContent); + + @Data + @Builder + class PostContentContext { + private Post post; + private String content; + private String raw; + private String rawType; + } +} diff --git a/api/src/main/java/run/halo/app/theme/ReactiveSinglePageContentHandler.java b/api/src/main/java/run/halo/app/theme/ReactiveSinglePageContentHandler.java new file mode 100644 index 0000000..980ddce --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/ReactiveSinglePageContentHandler.java @@ -0,0 +1,38 @@ +package run.halo.app.theme; + +import lombok.Builder; +import lombok.Data; +import org.pf4j.ExtensionPoint; +import org.springframework.lang.NonNull; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.SinglePage; + +/** + *

{@link ReactiveSinglePageContentHandler} provides a way to extend the content to be + * displayed in the theme.

+ * + * @author guqing + * @see ReactivePostContentHandler + * @since 2.7.0 + */ +public interface ReactiveSinglePageContentHandler extends ExtensionPoint { + + /** + *

Methods for handling {@link run.halo.app.core.extension.content.SinglePage} content.

+ *

For example, you can use this method to change the content for a better display in + * theme-side.

+ * + * @param singlePageContent content to be handled + * @return handled content + */ + Mono handle(@NonNull SinglePageContentContext singlePageContent); + + @Data + @Builder + class SinglePageContentContext { + private SinglePage singlePage; + private String content; + private String raw; + private String rawType; + } +} diff --git a/api/src/main/java/run/halo/app/theme/TemplateNameResolver.java b/api/src/main/java/run/halo/app/theme/TemplateNameResolver.java new file mode 100644 index 0000000..96ebf67 --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/TemplateNameResolver.java @@ -0,0 +1,45 @@ +package run.halo.app.theme; + +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +/** + *

The {@link TemplateNameResolver} is used to resolve template name.

+ * Halo has a theme mechanism, template files are provided by different themes, so + * we need a method to determine whether the template file exists in the activated theme and if + * it does not exist, provide a default template name. + * + * @author guqing + * @since 2.11.0 + */ +public interface TemplateNameResolver { + + /** + * Resolve template name if exists or default template name in classpath. + * + * @param exchange exchange to resolve theme to use + * @param name template + * @return template name if exists or default template name in classpath + */ + Mono resolveTemplateNameOrDefault(ServerWebExchange exchange, String name); + + /** + * Resolve template name if exists or default template given. + * + * @param exchange exchange to resolve theme to use + * @param name template name + * @param defaultName default template name to use if given template name not exists + * @return template name if exists or default template name given + */ + Mono resolveTemplateNameOrDefault(ServerWebExchange exchange, String name, + String defaultName); + + /** + * Determine whether the template file exists in the current theme. + * + * @param exchange exchange to resolve theme to use + * @param name template name + * @return true if the template file exists in the current theme, false otherwise + */ + Mono isTemplateAvailableInTheme(ServerWebExchange exchange, String name); +} diff --git a/api/src/main/java/run/halo/app/theme/dialect/CommentWidget.java b/api/src/main/java/run/halo/app/theme/dialect/CommentWidget.java new file mode 100644 index 0000000..25c4ae3 --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/dialect/CommentWidget.java @@ -0,0 +1,20 @@ +package run.halo.app.theme.dialect; + +import org.pf4j.ExtensionPoint; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IProcessableElementTag; +import org.thymeleaf.processor.element.IElementTagStructureHandler; + +/** + * Comment widget extension point to extend the <halo:comment /> tag of the theme-side. + * + * @author guqing + * @since 2.0.0 + */ +public interface CommentWidget extends ExtensionPoint { + + String ENABLE_COMMENT_ATTRIBUTE = CommentWidget.class.getName() + ".ENABLE"; + + void render(ITemplateContext context, IProcessableElementTag tag, + IElementTagStructureHandler structureHandler); +} diff --git a/api/src/main/java/run/halo/app/theme/dialect/TemplateFooterProcessor.java b/api/src/main/java/run/halo/app/theme/dialect/TemplateFooterProcessor.java new file mode 100644 index 0000000..78f3215 --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/dialect/TemplateFooterProcessor.java @@ -0,0 +1,20 @@ +package run.halo.app.theme.dialect; + +import org.pf4j.ExtensionPoint; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.model.IProcessableElementTag; +import org.thymeleaf.processor.element.IElementTagStructureHandler; +import reactor.core.publisher.Mono; + +/** + * Theme template footer tag snippet injection processor. + * + * @author guqing + * @since 2.17.0 + */ +public interface TemplateFooterProcessor extends ExtensionPoint { + + Mono process(ITemplateContext context, IProcessableElementTag tag, + IElementTagStructureHandler structureHandler, IModel model); +} diff --git a/api/src/main/java/run/halo/app/theme/dialect/TemplateHeadProcessor.java b/api/src/main/java/run/halo/app/theme/dialect/TemplateHeadProcessor.java new file mode 100644 index 0000000..bb9798b --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/dialect/TemplateHeadProcessor.java @@ -0,0 +1,23 @@ +package run.halo.app.theme.dialect; + +import org.pf4j.ExtensionPoint; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.processor.element.IElementModelStructureHandler; +import reactor.core.publisher.Mono; + +/** + * Theme template head tag snippet injection processor. + *

Head processor is processed order by {@link org.springframework.core.annotation.Order} + * annotation, Higher order will be processed first and so that low-priority processor can be + * overwritten head tag written by high-priority processor.

+ * + * @author guqing + * @since 2.0.0 + */ +@FunctionalInterface +public interface TemplateHeadProcessor extends ExtensionPoint { + + Mono process(ITemplateContext context, IModel model, + IElementModelStructureHandler structureHandler); +} diff --git a/api/src/main/java/run/halo/app/theme/finders/Finder.java b/api/src/main/java/run/halo/app/theme/finders/Finder.java new file mode 100644 index 0000000..6a24311 --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/finders/Finder.java @@ -0,0 +1,26 @@ +package run.halo.app.theme.finders; + +import java.lang.annotation.ElementType; +import java.lang.annotation.Retention; +import java.lang.annotation.RetentionPolicy; +import java.lang.annotation.Target; +import org.springframework.stereotype.Service; + +/** + * Template model data finder for theme. + * + * @author guqing + * @since 2.0.0 + */ +@Service +@Retention(RetentionPolicy.RUNTIME) +@Target(ElementType.TYPE) +public @interface Finder { + + /** + * The name of the theme model variable. + * + * @return variable name, class simple name if not specified + */ + String value() default ""; +} \ No newline at end of file diff --git a/api/src/main/java/run/halo/app/theme/finders/vo/ExtensionVoOperator.java b/api/src/main/java/run/halo/app/theme/finders/vo/ExtensionVoOperator.java new file mode 100644 index 0000000..8992c99 --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/finders/vo/ExtensionVoOperator.java @@ -0,0 +1,16 @@ +package run.halo.app.theme.finders.vo; + +import org.springframework.lang.NonNull; +import run.halo.app.extension.MetadataOperator; + +/** + * An operator for extension value object. + * + * @author guqing + * @since 2.0.0 + */ +public interface ExtensionVoOperator { + + @NonNull + MetadataOperator getMetadata(); +} diff --git a/api/src/main/java/run/halo/app/theme/router/ModelConst.java b/api/src/main/java/run/halo/app/theme/router/ModelConst.java new file mode 100644 index 0000000..86af7e0 --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/router/ModelConst.java @@ -0,0 +1,14 @@ +package run.halo.app.theme.router; + +/** + * Static variable keys for view model. + * + * @author guqing + * @since 2.0.0 + */ +public enum ModelConst { + ; + public static final String TEMPLATE_ID = "_templateId"; + public static final String POWERED_BY_HALO_TEMPLATE_ENGINE = "poweredByHaloTemplateEngine"; + public static final Integer DEFAULT_PAGE_SIZE = 10; +} diff --git a/api/src/main/java/run/halo/app/theme/router/PageUrlUtils.java b/api/src/main/java/run/halo/app/theme/router/PageUrlUtils.java new file mode 100644 index 0000000..d4998d1 --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/router/PageUrlUtils.java @@ -0,0 +1,108 @@ +package run.halo.app.theme.router; + +import org.apache.commons.lang3.ArrayUtils; +import org.apache.commons.lang3.StringUtils; +import org.apache.commons.lang3.math.NumberUtils; +import org.springframework.web.reactive.function.server.ServerRequest; +import run.halo.app.extension.ListResult; +import run.halo.app.infra.utils.PathUtils; + +/** + * A utility class for template page url. + * + * @author guqing + * @since 2.0.0 + */ +public class PageUrlUtils { + public static final String PAGE_PART = "page"; + + public static int pageNum(ServerRequest request) { + if (isPageUrl(request.path())) { + String pageNum = StringUtils.substringAfterLast(request.path(), "/page/"); + return NumberUtils.toInt(pageNum, 1); + } + return 1; + } + + public static boolean isPageUrl(String path) { + String[] split = StringUtils.split(path, "/"); + if (split.length > 1) { + return PAGE_PART.equals(split[split.length - 2]) + && NumberUtils.isDigits(split[split.length - 1]); + } + return false; + } + + public static long totalPage(ListResult list) { + return (list.getTotal() - 1) / list.getSize() + 1; + } + + /** + * Gets next page url with path. + * + * @param path request path + * @return request path with next page part + */ + public static String nextPageUrl(String path, long total) { + String[] segments = StringUtils.split(path, "/"); + long defaultPage = Math.min(2, Math.max(total, 1)); + if (segments.length > 1) { + String pagePart = segments[segments.length - 2]; + if (PAGE_PART.equals(pagePart)) { + int pageNumIndex = segments.length - 1; + String pageNum = segments[pageNumIndex]; + segments[pageNumIndex] = toNextPage(pageNum, total); + return PathUtils.combinePath(segments); + } + return appendPagePart(PathUtils.combinePath(segments), defaultPage); + } + return appendPagePart(PathUtils.combinePath(segments), defaultPage); + } + + /** + * Gets previous page url with path. + * + * @param path request path + * @return request path with previous page part + */ + public static String prevPageUrl(String path) { + String[] segments = StringUtils.split(path, "/"); + if (segments.length > 1) { + String pagePart = segments[segments.length - 2]; + if (PAGE_PART.equals(pagePart)) { + int pageNumIndex = segments.length - 1; + String pageNum = segments[pageNumIndex]; + int prevPage = toPrevPage(pageNum); + segments[pageNumIndex] = String.valueOf(prevPage); + if (prevPage == 1) { + segments = ArrayUtils.subarray(segments, 0, pageNumIndex - 1); + } + if (segments.length == 0) { + return "/"; + } + return PathUtils.combinePath(segments); + } + } + return StringUtils.defaultString(path, "/"); + } + + private static String appendPagePart(String path, long page) { + return PathUtils.combinePath(path, PAGE_PART, String.valueOf(page)); + } + + private static String toNextPage(String pageStr, long total) { + long page = Math.min(parseInt(pageStr) + 1, Math.max(total, 1)); + return String.valueOf(page); + } + + private static int toPrevPage(String pageStr) { + return Math.max(parseInt(pageStr) - 1, 1); + } + + private static int parseInt(String pageStr) { + if (!NumberUtils.isParsable(pageStr)) { + throw new IllegalArgumentException("Page number must be a number"); + } + return NumberUtils.toInt(pageStr, 1); + } +} diff --git a/api/src/main/java/run/halo/app/theme/router/UrlContextListResult.java b/api/src/main/java/run/halo/app/theme/router/UrlContextListResult.java new file mode 100644 index 0000000..4b7efcc --- /dev/null +++ b/api/src/main/java/run/halo/app/theme/router/UrlContextListResult.java @@ -0,0 +1,84 @@ +package run.halo.app.theme.router; + +import java.util.List; +import lombok.Getter; +import lombok.ToString; +import run.halo.app.extension.ListResult; + +/** + * Page wrapper with next and previous url. + * + * @param the type of the list item. + * @author guqing + * @since 2.0.0 + */ +@Getter +@ToString(callSuper = true) +public class UrlContextListResult extends ListResult { + private final String nextUrl; + private final String prevUrl; + + public UrlContextListResult(int page, int size, long total, List items, String nextUrl, + String prevUrl) { + super(page, size, total, items); + this.nextUrl = nextUrl; + this.prevUrl = prevUrl; + } + + public static class Builder { + private int page; + private int size; + private long total; + private List items; + private String nextUrl; + private String prevUrl; + + public Builder page(int page) { + this.page = page; + return this; + } + + public Builder size(int size) { + this.size = size; + return this; + } + + public Builder total(long total) { + this.total = total; + return this; + } + + public Builder items(List items) { + this.items = items; + return this; + } + + public Builder nextUrl(String nextUrl) { + this.nextUrl = nextUrl; + return this; + } + + public Builder prevUrl(String prevUrl) { + this.prevUrl = prevUrl; + return this; + } + + /** + * Assign value with list result. + * + * @param listResult list result + * @return builder + */ + public Builder listResult(ListResult listResult) { + this.page = listResult.getPage(); + this.size = listResult.getSize(); + this.total = listResult.getTotal(); + this.items = listResult.getItems(); + return this; + } + + public UrlContextListResult build() { + return new UrlContextListResult<>(page, size, total, items, nextUrl, prevUrl); + } + } +} diff --git a/api/src/test/java/run/halo/app/core/extension/content/PostTest.java b/api/src/test/java/run/halo/app/core/extension/content/PostTest.java new file mode 100644 index 0000000..5928ef5 --- /dev/null +++ b/api/src/test/java/run/halo/app/core/extension/content/PostTest.java @@ -0,0 +1,45 @@ +package run.halo.app.core.extension.content; + +import static org.junit.jupiter.api.Assertions.assertEquals; + +import java.util.Map; +import java.util.function.Consumer; +import java.util.function.Function; +import java.util.stream.Stream; +import org.junit.jupiter.params.ParameterizedTest; +import org.junit.jupiter.params.provider.Arguments; +import org.junit.jupiter.params.provider.MethodSource; +import run.halo.app.extension.Metadata; + +class PostTest { + + @ParameterizedTest + @MethodSource("isRecycledProvider") + void isRecycledTest(Metadata metadata, boolean expected) { + assertEquals(expected, Post.isRecycled(metadata)); + } + + static Stream isRecycledProvider() { + Function, Metadata> metadataCreator = + metadataConsumer -> { + var metadata = new Metadata(); + metadataConsumer.accept(metadata); + return metadata; + }; + return Stream.of( + Arguments.of(metadataCreator.apply(metadata -> { + }), false), + Arguments.of(metadataCreator.apply(metadata -> + metadata.setLabels(Map.of(Post.DELETED_LABEL, "false"))), + false), + Arguments.of(metadataCreator.apply(metadata -> + metadata.setLabels(Map.of(Post.DELETED_LABEL, "invalid"))), + false), + Arguments.of(metadataCreator.apply(metadata -> { + metadata.setLabels(Map.of(Post.DELETED_LABEL, "true")); + }), true) + ); + + } + +} diff --git a/api/src/test/java/run/halo/app/core/extension/notification/SubscriptionTest.java b/api/src/test/java/run/halo/app/core/extension/notification/SubscriptionTest.java new file mode 100644 index 0000000..26a51ea --- /dev/null +++ b/api/src/test/java/run/halo/app/core/extension/notification/SubscriptionTest.java @@ -0,0 +1,28 @@ +package run.halo.app.core.extension.notification; + + +import static org.assertj.core.api.Assertions.assertThat; + +import org.junit.jupiter.api.Test; + +/** + * Tests for {@link Subscription}. + * + * @author guqing + * @since 2.13.0 + */ +class SubscriptionTest { + + @Test + void reasonSubjectToStringTest() { + Subscription.ReasonSubject subject = new Subscription.ReasonSubject(); + subject.setApiVersion("v1"); + subject.setKind("Kind"); + subject.setName("Name"); + + String expected = "Kind#v1/Name"; + String actual = subject.toString(); + + assertThat(actual).isEqualTo(expected); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/ExtensionUtilTest.java b/api/src/test/java/run/halo/app/extension/ExtensionUtilTest.java new file mode 100644 index 0000000..446cb33 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/ExtensionUtilTest.java @@ -0,0 +1,59 @@ +package run.halo.app.extension; + +import static org.junit.jupiter.api.Assertions.assertEquals; +import static org.junit.jupiter.api.Assertions.assertFalse; +import static org.junit.jupiter.api.Assertions.assertNull; +import static org.junit.jupiter.api.Assertions.assertTrue; +import static org.mockito.Mockito.mock; +import static org.mockito.Mockito.when; + +import java.time.Instant; +import java.util.HashSet; +import java.util.Set; +import org.junit.jupiter.api.Test; + +class ExtensionUtilTest { + + @Test + void testIsNotDeleted() { + var ext = mock(ExtensionOperator.class); + + when(ext.getMetadata()).thenReturn(null); + assertFalse(ExtensionUtil.isDeleted(ext)); + + var metadata = mock(Metadata.class); + when(ext.getMetadata()).thenReturn(metadata); + when(metadata.getDeletionTimestamp()).thenReturn(null); + assertFalse(ExtensionUtil.isDeleted(ext)); + + when(metadata.getDeletionTimestamp()).thenReturn(Instant.now()); + assertTrue(ExtensionUtil.isDeleted(ext)); + } + + @Test + void addFinalizers() { + var metadata = new Metadata(); + assertNull(metadata.getFinalizers()); + assertTrue(ExtensionUtil.addFinalizers(metadata, Set.of("fake"))); + + assertEquals(Set.of("fake"), metadata.getFinalizers()); + + assertFalse(ExtensionUtil.addFinalizers(metadata, Set.of("fake"))); + assertEquals(Set.of("fake"), metadata.getFinalizers()); + + assertTrue(ExtensionUtil.addFinalizers(metadata, Set.of("another-fake"))); + assertEquals(Set.of("fake", "another-fake"), metadata.getFinalizers()); + } + + @Test + void removeFinalizers() { + var metadata = new Metadata(); + assertFalse(ExtensionUtil.removeFinalizers(metadata, Set.of("fake"))); + assertNull(metadata.getFinalizers()); + + metadata.setFinalizers(new HashSet<>(Set.of("fake"))); + assertTrue(ExtensionUtil.removeFinalizers(metadata, Set.of("fake"))); + assertEquals(Set.of(), metadata.getFinalizers()); + } + +} diff --git a/api/src/test/java/run/halo/app/extension/FakeExtension.java b/api/src/test/java/run/halo/app/extension/FakeExtension.java new file mode 100644 index 0000000..d0e5cb0 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/FakeExtension.java @@ -0,0 +1,18 @@ +package run.halo.app.extension; + +@GVK(group = "fake.halo.run", + version = "v1alpha1", + kind = "Fake", + plural = "fakes", + singular = "fake") +public class FakeExtension extends AbstractExtension { + + public static FakeExtension createFake(String name) { + var metadata = new Metadata(); + metadata.setName(name); + var fake = new FakeExtension(); + fake.setMetadata(metadata); + return fake; + } + +} diff --git a/api/src/test/java/run/halo/app/extension/ListOptionsTest.java b/api/src/test/java/run/halo/app/extension/ListOptionsTest.java new file mode 100644 index 0000000..a5ed75a --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/ListOptionsTest.java @@ -0,0 +1,51 @@ +package run.halo.app.extension; + +import static org.assertj.core.api.Assertions.assertThat; +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import org.junit.jupiter.api.Nested; +import org.junit.jupiter.api.Test; + +/** + * Test for {@link ListOptions}. + * + * @author guqing + * @since 2.17.0 + */ +class ListOptionsTest { + + @Nested + class ListOptionsBuilderTest { + + @Test + void buildTest() { + var listOptions = ListOptions.builder() + .labelSelector() + .eq("key-1", "value-1") + .notEq("key-2", "value-1") + .exists("key-3") + .end() + .andQuery(equal("spec.slug", "fake-slug")) + .orQuery(equal("spec.slug", "test")) + .build(); + System.out.println(listOptions); + assertThat(listOptions.toString()).isEqualTo( + "fieldSelector: (spec.slug = 'fake-slug' OR spec.slug = 'test'), labelSelector: " + + "(key-1 equal value-1, key-2 not_equal value-1, key-3 EXISTS)"); + } + + @Test + void buildTest2() { + var listOptions = ListOptions.builder() + .labelSelector() + .notEq("key-2", "value-1") + .end() + .fieldQuery(equal("spec.slug", "fake-slug")) + .build(); + assertThat(listOptions.toString()) + .isEqualTo( + "fieldSelector: (spec.slug = 'fake-slug'), labelSelector: (key-2 not_equal " + + "value-1)"); + } + } +} diff --git a/api/src/test/java/run/halo/app/extension/PageRequestImplTest.java b/api/src/test/java/run/halo/app/extension/PageRequestImplTest.java new file mode 100644 index 0000000..4149ad1 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/PageRequestImplTest.java @@ -0,0 +1,27 @@ +package run.halo.app.extension; + +import static org.junit.jupiter.api.Assertions.assertEquals; + +import java.util.Random; +import org.junit.jupiter.api.RepeatedTest; +import org.springframework.data.domain.Sort; + +class PageRequestImplTest { + + @RepeatedTest(10) + void shouldBeCompatibleZeroAndNegativePageNumber() { + var randomPageNumber = -(new Random().nextInt(0, Integer.MAX_VALUE)); + var page = new PageRequestImpl(randomPageNumber, 10, Sort.unsorted()); + assertEquals(1, page.getPageNumber()); + assertEquals(10, page.getPageSize()); + } + + @RepeatedTest(10) + void shouldBeCompatibleNegativePageSize() { + var randomPageSize = -(new Random().nextInt(1, Integer.MAX_VALUE)); + var page = new PageRequestImpl(10, randomPageSize, Sort.unsorted()); + assertEquals(10, page.getPageNumber()); + assertEquals(0, page.getPageSize()); + } + +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/SecretTest.java b/api/src/test/java/run/halo/app/extension/SecretTest.java new file mode 100644 index 0000000..af18827 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/SecretTest.java @@ -0,0 +1,84 @@ +package run.halo.app.extension; + +import static org.assertj.core.api.Assertions.assertThat; + +import com.fasterxml.jackson.core.JsonProcessingException; +import com.fasterxml.jackson.dataformat.yaml.YAMLMapper; +import java.util.Map; +import org.json.JSONException; +import org.junit.jupiter.api.Test; +import org.skyscreamer.jsonassert.JSONAssert; +import run.halo.app.infra.utils.JsonUtils; + +/** + * Tests for {@link Secret}. + * + * @author guqing + * @since 2.4.0 + */ +class SecretTest { + + @Test + void serialize() throws JSONException { + Secret secret = new Secret(); + secret.setMetadata(new Metadata()); + secret.getMetadata().setName("test-secret"); + secret.setType(Secret.SECRET_TYPE_OPAQUE); + secret.setData(Map.of("password", "admin".getBytes())); + String s = JsonUtils.objectToJson(secret); + JSONAssert.assertEquals(testJsonString(), s, true); + } + + @Test + void deserialize() { + String s = testJsonString(); + Secret secret = JsonUtils.jsonToObject(s, Secret.class); + assertThat(secret).isNotNull(); + assertThat(secret.getMetadata().getName()).isEqualTo("test-secret"); + assertThat(secret.getType()).isEqualTo(Secret.SECRET_TYPE_OPAQUE); + assertThat(secret.getData()).containsEntry("password", "admin".getBytes()); + } + + @Test + void deserializeWithUnstructured() throws JsonProcessingException { + Secret secret = Unstructured.OBJECT_MAPPER.readValue(testJsonString(), Secret.class); + assertThat(secret.getMetadata().getName()).isEqualTo("test-secret"); + assertThat(secret.getType()).isEqualTo(Secret.SECRET_TYPE_OPAQUE); + assertThat(secret.getData()).containsEntry("password", "admin".getBytes()); + } + + @Test + void deserializeYamlWithStringData() throws JsonProcessingException { + String s = """ + apiVersion: v1alpha1 + kind: Secret + metadata: + name: secret-basic-auth + type: halo.run/basic-auth + stringData: + username: admin + password: t0p-Secret + """; + Secret secret = new YAMLMapper().readValue(s, Secret.class); + assertThat(secret.getMetadata().getName()).isEqualTo("secret-basic-auth"); + assertThat(secret.getType()).isEqualTo("halo.run/basic-auth"); + assertThat(secret.getStringData()).containsEntry("username", "admin"); + assertThat(secret.getStringData()).containsEntry("password", "t0p-Secret"); + } + + private String testJsonString() { + return """ + { + "apiVersion": "v1alpha1", + "kind": "Secret", + "metadata": { + "name": "test-secret" + }, + "type": "Opaque", + "data": { + "password": "YWRtaW4=" + } + } + """; + } +} diff --git a/api/src/test/java/run/halo/app/extension/controller/ControllerBuilderTest.java b/api/src/test/java/run/halo/app/extension/controller/ControllerBuilderTest.java new file mode 100644 index 0000000..63dc39d --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/controller/ControllerBuilderTest.java @@ -0,0 +1,117 @@ +package run.halo.app.extension.controller; + +import static org.junit.jupiter.api.Assertions.assertNotNull; +import static org.junit.jupiter.api.Assertions.assertThrows; +import static org.mockito.Mockito.lenient; + +import java.time.Duration; +import java.time.Instant; +import org.junit.jupiter.api.BeforeEach; +import org.junit.jupiter.api.Test; +import org.junit.jupiter.api.extension.ExtendWith; +import org.mockito.Mock; +import org.mockito.junit.jupiter.MockitoExtension; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.FakeExtension; +import run.halo.app.extension.index.IndexedQueryEngine; + +@ExtendWith(MockitoExtension.class) +class ControllerBuilderTest { + + @Mock + ExtensionClient client; + + @Mock + IndexedQueryEngine indexedQueryEngine; + + @BeforeEach + void setUp() { + lenient().when(client.indexedQueryEngine()).thenReturn(indexedQueryEngine); + } + + @Test + void buildWithNullReconciler() { + assertThrows(IllegalArgumentException.class, + () -> new ControllerBuilder(null, client).build(), "Reconciler must not be null"); + } + + @Test + void buildWithNullClient() { + assertThrows(IllegalArgumentException.class, + () -> new ControllerBuilder(new FakeReconciler(), null).build()); + } + + @Test + void buildTest() { + assertThrows(IllegalArgumentException.class, + () -> new ControllerBuilder(new FakeReconciler(), client) + .build(), + "Extension must not be null"); + + assertNotNull(fakeBuilder().build()); + + assertNotNull(fakeBuilder() + .syncAllOnStart(true) + .nowSupplier(Instant::now) + .minDelay(Duration.ofMillis(5)) + .maxDelay(Duration.ofSeconds(1000)) + .build()); + + assertNotNull(fakeBuilder() + .syncAllOnStart(true) + .minDelay(Duration.ofMillis(5)) + .maxDelay(Duration.ofSeconds(1000)) + .onAddMatcher(null) + .onUpdateMatcher(null) + .onDeleteMatcher(null) + .build() + ); + } + + @Test + void invalidMinDelayAndMaxDelay() { + assertThrows(IllegalArgumentException.class, + () -> fakeBuilder() + .minDelay(Duration.ofSeconds(2)) + .maxDelay(Duration.ofSeconds(1)) + .build(), + "Min delay must be less than or equal to max delay"); + + assertNotNull(fakeBuilder() + .minDelay(null) + .maxDelay(Duration.ofSeconds(1)) + .build()); + + assertNotNull(fakeBuilder() + .minDelay(Duration.ofSeconds(1)) + .maxDelay(null) + .build()); + + assertNotNull(fakeBuilder() + .minDelay(Duration.ofSeconds(-1)) + .build()); + + assertNotNull(fakeBuilder() + .maxDelay(Duration.ofSeconds(-1)) + .build()); + } + + ControllerBuilder fakeBuilder() { + return new ControllerBuilder(new FakeReconciler(), client) + .extension(new FakeExtension()); + } + + static class FakeReconciler implements Reconciler { + + @Override + public Result reconcile(Request request) { + return new Reconciler.Result(false, null); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return null; + } + } + +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/controller/DefaultControllerTest.java b/api/src/test/java/run/halo/app/extension/controller/DefaultControllerTest.java new file mode 100644 index 0000000..86f6d0d --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/controller/DefaultControllerTest.java @@ -0,0 +1,300 @@ +package run.halo.app.extension.controller; + +import static org.junit.jupiter.api.Assertions.assertEquals; +import static org.junit.jupiter.api.Assertions.assertFalse; +import static org.junit.jupiter.api.Assertions.assertThrows; +import static org.junit.jupiter.api.Assertions.assertTrue; +import static org.mockito.ArgumentMatchers.any; +import static org.mockito.ArgumentMatchers.anyLong; +import static org.mockito.ArgumentMatchers.argThat; +import static org.mockito.ArgumentMatchers.eq; +import static org.mockito.Mockito.doNothing; +import static org.mockito.Mockito.mock; +import static org.mockito.Mockito.never; +import static org.mockito.Mockito.times; +import static org.mockito.Mockito.verify; +import static org.mockito.Mockito.when; + +import java.time.Duration; +import java.time.Instant; +import java.util.concurrent.ExecutorService; +import java.util.concurrent.Future; +import org.junit.jupiter.api.BeforeEach; +import org.junit.jupiter.api.Nested; +import org.junit.jupiter.api.Test; +import org.junit.jupiter.api.extension.ExtendWith; +import org.mockito.Mock; +import org.mockito.junit.jupiter.MockitoExtension; +import run.halo.app.extension.controller.Reconciler.Request; +import run.halo.app.extension.controller.Reconciler.Result; +import run.halo.app.extension.controller.RequestQueue.DelayedEntry; + +@ExtendWith(MockitoExtension.class) +class DefaultControllerTest { + + @Mock + RequestQueue queue; + + @Mock + Reconciler reconciler; + + @Mock + RequestSynchronizer synchronizer; + + @Mock + ExecutorService executor; + + Instant now = Instant.now(); + + Duration minRetryAfter = Duration.ofMillis(100); + + Duration maxRetryAfter = Duration.ofSeconds(10); + + DefaultController controller; + + @BeforeEach + void setUp() { + controller = createController(1); + + assertFalse(controller.isDisposed()); + assertFalse(controller.isStarted()); + } + + DefaultController createController(int workerCount) { + return new DefaultController<>("fake-controller", reconciler, queue, synchronizer, + () -> now, minRetryAfter, maxRetryAfter, executor, workerCount); + } + + @Test + void shouldReturnRightName() { + assertEquals("fake-controller", controller.getName()); + } + + @Nested + class WorkerTest { + + @Test + void shouldCreateCorrectName() { + var worker = controller.new Worker(); + assertEquals("fake-controller-worker-1", worker.getName()); + worker = controller.new Worker(); + assertEquals("fake-controller-worker-2", worker.getName()); + worker = controller.new Worker(); + assertEquals("fake-controller-worker-3", worker.getName()); + } + + @Test + void shouldRunCorrectlyIfReconcilerReturnsNoReEnqueue() throws InterruptedException { + when(queue.take()).thenReturn(new DelayedEntry<>( + new Request("fake-request"), Duration.ofSeconds(1), () -> now + )) + .thenThrow(InterruptedException.class); + when(reconciler.reconcile(any(Request.class))).thenReturn(new Result(false, null)); + + controller.new Worker().run(); + + verify(synchronizer, times(1)).start(); + verify(queue, times(2)).take(); + verify(queue, times(0)).add(any()); + verify(queue, times(1)).done(any()); + verify(reconciler, times(1)).reconcile(eq(new Request("fake-request"))); + } + + @Test + void shouldRunCorrectlyIfReconcilerReturnsReEnqueue() throws InterruptedException { + when(queue.take()).thenReturn(new DelayedEntry<>( + new Request("fake-request"), Duration.ofSeconds(1), () -> now + )) + .thenThrow(InterruptedException.class); + when(queue.add(any())).thenReturn(true); + when(reconciler.reconcile(any(Request.class))).thenReturn(new Result(true, null)); + + controller.new Worker().run(); + + verify(synchronizer, times(1)).start(); + verify(queue, times(2)).take(); + verify(queue, times(1)).done(any()); + verify(queue, times(1)).add(argThat(de -> + de.getEntry().name().equals("fake-request") + && de.getRetryAfter().equals(Duration.ofSeconds(2)))); + verify(reconciler, times(1)).reconcile(any(Request.class)); + } + + @Test + void shouldReRunIfReconcilerThrowException() throws InterruptedException { + when(queue.take()).thenReturn(new DelayedEntry<>( + new Request("fake-request"), Duration.ofSeconds(1), () -> now + )) + .thenThrow(InterruptedException.class); + when(queue.add(any())).thenReturn(true); + when(reconciler.reconcile(any(Request.class))).thenThrow(RuntimeException.class); + + controller.new Worker().run(); + + verify(synchronizer, times(1)).start(); + verify(queue, times(2)).take(); + verify(queue, times(1)).done(any()); + verify(queue, times(1)).add(argThat(de -> + de.getEntry().name().equals("fake-request") + && de.getRetryAfter().equals(Duration.ofSeconds(2)))); + verify(reconciler, times(1)).reconcile(any(Request.class)); + } + + @Test + void canReRunIfReconcilerThrowRequeueException() throws InterruptedException { + when(queue.take()).thenReturn(new DelayedEntry<>( + new Request("fake-request"), Duration.ofSeconds(1), () -> now + )) + .thenThrow(InterruptedException.class); + when(queue.add(any())).thenReturn(true); + var expectException = new RequeueException(Result.requeue(Duration.ofSeconds(2))); + when(reconciler.reconcile(any(Request.class))).thenThrow(expectException); + + controller.new Worker().run(); + + verify(synchronizer).start(); + verify(queue, times(2)).take(); + verify(queue).done(any()); + verify(queue).add(argThat(de -> + de.getEntry().name().equals("fake-request") + && de.getRetryAfter().equals(Duration.ofSeconds(2)))); + verify(reconciler).reconcile(any(Request.class)); + } + + @Test + void doNotReRunIfReconcilerThrowsRequeueExceptionWithoutRequeue() + throws InterruptedException { + when(queue.take()).thenReturn(new DelayedEntry<>( + new Request("fake-request"), Duration.ofSeconds(1), () -> now + )) + .thenThrow(InterruptedException.class); + var expectException = new RequeueException(Result.doNotRetry()); + when(reconciler.reconcile(any(Request.class))).thenThrow(expectException); + + controller.new Worker().run(); + + verify(synchronizer).start(); + verify(queue, times(2)).take(); + verify(queue).done(any()); + + verify(queue, never()).add(any()); + verify(reconciler).reconcile(any(Request.class)); + } + + @Test + void shouldSetMinRetryAfterWhenTakeZeroDelayedEntry() throws InterruptedException { + when(queue.take()).thenReturn(new DelayedEntry<>( + new Request("fake-request"), minRetryAfter.minusMillis(1), () -> now + )) + .thenThrow(InterruptedException.class); + when(queue.add(any())).thenReturn(true); + when(reconciler.reconcile(any(Request.class))).thenReturn(new Result(true, null)); + + controller.new Worker().run(); + + verify(synchronizer, times(1)).start(); + verify(queue, times(2)).take(); + verify(queue, times(1)).done(any()); + verify(queue, times(1)).add(argThat(de -> + de.getEntry().name().equals("fake-request") + && de.getRetryAfter().equals(minRetryAfter))); + verify(reconciler, times(1)).reconcile(any(Request.class)); + } + + @Test + void shouldSetMaxRetryAfterWhenTakeGreaterThanMaxRetryAfterDelayedEntry() + throws InterruptedException { + when(queue.take()).thenReturn(new DelayedEntry<>( + new Request("fake-request"), maxRetryAfter.plusMillis(1), () -> now + )) + .thenThrow(InterruptedException.class); + when(queue.add(any())).thenReturn(true); + when(reconciler.reconcile(any(Request.class))).thenReturn(new Result(true, null)); + + controller.new Worker().run(); + + verify(synchronizer, times(1)).start(); + verify(queue, times(2)).take(); + verify(queue, times(1)).done(any()); + verify(queue, times(1)).add(argThat(de -> + de.getEntry().name().equals("fake-request") + && de.getRetryAfter().equals(maxRetryAfter))); + verify(reconciler, times(1)).reconcile(any(Request.class)); + } + + } + + @Test + void shouldDisposeCorrectly() throws InterruptedException { + when(executor.awaitTermination(anyLong(), any())).thenReturn(true); + + controller.dispose(); + + assertTrue(controller.isDisposed()); + assertFalse(controller.isStarted()); + + verify(synchronizer, times(1)).dispose(); + verify(queue, times(1)).dispose(); + verify(executor, times(1)).shutdownNow(); + verify(executor, times(1)).awaitTermination(anyLong(), any()); + } + + @Test + void shouldDisposeCorrectlyEvenIfTimeoutAwaitTermination() throws InterruptedException { + when(executor.awaitTermination(anyLong(), any())).thenThrow(InterruptedException.class); + + controller.dispose(); + + assertTrue(controller.isDisposed()); + assertFalse(controller.isStarted()); + + verify(synchronizer, times(1)).dispose(); + verify(queue, times(1)).dispose(); + verify(executor, times(1)).shutdownNow(); + verify(executor, times(1)).awaitTermination(anyLong(), any()); + } + + @Test + void shouldStartCorrectly() throws InterruptedException { + when(executor.submit(any(Runnable.class))).thenAnswer(invocation -> { + doNothing().when(synchronizer).start(); + when(queue.take()).thenThrow(InterruptedException.class); + + // invoke the task really + ((Runnable) invocation.getArgument(0)).run(); + return mock(Future.class); + }); + controller.start(); + + assertTrue(controller.isStarted()); + assertFalse(controller.isDisposed()); + + verify(executor, times(1)).submit(any(Runnable.class)); + verify(synchronizer, times(1)).start(); + verify(queue, times(1)).take(); + verify(reconciler, times(0)).reconcile(any()); + } + + @Test + void shouldNotStartWhenDisposed() { + controller.dispose(); + controller.start(); + assertFalse(controller.isStarted()); + assertTrue(controller.isDisposed()); + + verify(executor, times(0)).submit(any(Runnable.class)); + } + + @Test + void shouldCreateMultiWorkers() { + controller = createController(5); + controller.start(); + verify(executor, times(5)).submit(any(DefaultController.Worker.class)); + } + + @Test + void shouldFailToCreateControllerDueToInvalidWorkerCount() { + assertThrows(IllegalArgumentException.class, () -> createController(0)); + assertThrows(IllegalArgumentException.class, () -> createController(-1)); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/controller/DefaultDelayQueueTest.java b/api/src/test/java/run/halo/app/extension/controller/DefaultDelayQueueTest.java new file mode 100644 index 0000000..68f14c0 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/controller/DefaultDelayQueueTest.java @@ -0,0 +1,137 @@ +package run.halo.app.extension.controller; + +import static org.junit.jupiter.api.Assertions.assertEquals; +import static org.junit.jupiter.api.Assertions.assertFalse; +import static org.junit.jupiter.api.Assertions.assertNotNull; +import static org.junit.jupiter.api.Assertions.assertTrue; + +import java.time.Duration; +import java.time.Instant; +import java.util.concurrent.TimeUnit; +import org.junit.jupiter.api.BeforeEach; +import org.junit.jupiter.api.Test; +import run.halo.app.extension.controller.Reconciler.Request; +import run.halo.app.extension.controller.RequestQueue.DelayedEntry; + +class DefaultDelayQueueTest { + + Instant now = Instant.now(); + + DefaultQueue queue; + + final Duration minDelay = Duration.ofMillis(1); + + @BeforeEach + void setUp() { + queue = new DefaultQueue<>(() -> now, minDelay); + } + + @Test + void addImmediatelyTest() { + var request = newRequest("fake-name"); + var added = queue.addImmediately(request); + assertTrue(added); + assertEquals(1, queue.size()); + var delayedEntry = queue.peek(); + assertNotNull(delayedEntry); + assertEquals(newRequest("fake-name"), delayedEntry.getEntry()); + assertEquals(minDelay, delayedEntry.getRetryAfter()); + assertEquals(minDelay.toMillis(), delayedEntry.getDelay(TimeUnit.MILLISECONDS)); + } + + @Test + void addWithDelaySmallerThanMinDelay() { + var request = newRequest("fake-name"); + var added = queue.add(new DelayedEntry<>(request, Duration.ofNanos(1), () -> now)); + assertTrue(added); + assertEquals(1, queue.size()); + var delayedEntry = queue.peek(); + assertNotNull(delayedEntry); + assertEquals(newRequest("fake-name"), delayedEntry.getEntry()); + assertEquals(minDelay, delayedEntry.getRetryAfter()); + assertEquals(minDelay.toMillis(), delayedEntry.getDelay(TimeUnit.MILLISECONDS)); + } + + @Test + void addWithDelayGreaterThanMinDelay() { + var request = newRequest("fake-name"); + var added = queue.add(new DelayedEntry<>(request, minDelay.plusMillis(1), () -> now)); + assertTrue(added); + assertEquals(1, queue.size()); + var delayedEntry = queue.peek(); + assertNotNull(delayedEntry); + assertEquals(newRequest("fake-name"), delayedEntry.getEntry()); + assertEquals(minDelay.plusMillis(1), delayedEntry.getRetryAfter()); + assertEquals(minDelay.plusMillis(1).toMillis(), + delayedEntry.getDelay(TimeUnit.MILLISECONDS)); + } + + @Test + void shouldNotAddAfterDisposing() { + assertFalse(queue.isDisposed()); + queue.dispose(); + assertTrue(queue.isDisposed()); + var request = newRequest("fake-name"); + var added = queue.add(new DelayedEntry<>(request, minDelay, () -> now)); + assertFalse(added); + assertEquals(0, queue.size()); + } + + @Test + void shouldNotAddRepeatedlyIfNotDone() throws InterruptedException { + queue = new DefaultQueue<>(() -> now, Duration.ZERO); + var fakeEntry = new DelayedEntry<>(newRequest("fake-name"), Duration.ZERO, + () -> this.now); + + queue.add(fakeEntry); + assertEquals(1, queue.size()); + assertEquals(fakeEntry, queue.peek()); + queue.take(); + assertEquals(0, queue.size()); + + queue.add(fakeEntry); + assertEquals(0, queue.size()); + + queue.done(newRequest("fake-name")); + queue.add(fakeEntry); + assertEquals(1, queue.size()); + assertEquals(fakeEntry, queue.peek()); + } + + @Test + void shouldNotAddIfHavingEarlierEntryInQueue() { + queue = new DefaultQueue<>(() -> now, Duration.ZERO); + var fakeEntry = new DelayedEntry<>(newRequest("fake-name"), Duration.ZERO, + () -> this.now); + + assertTrue(queue.add(fakeEntry)); + assertEquals(1, queue.size()); + assertEquals(fakeEntry, queue.peek()); + + assertFalse(queue.add(fakeEntry)); + var laterEntry = new DelayedEntry<>(newRequest("fake-name"), Duration.ofMillis(100), + () -> this.now); + assertFalse(queue.add(laterEntry)); + } + + @Test + void shouldAddIfHavingLaterEntryInQueue() { + queue = new DefaultQueue<>(() -> now, Duration.ZERO); + var fakeEntry = new DelayedEntry<>(newRequest("fake-name"), Duration.ofMillis(100), + () -> this.now); + + assertTrue(queue.add(fakeEntry)); + assertEquals(1, queue.size()); + assertEquals(fakeEntry, queue.peek()); + + assertFalse(queue.add(fakeEntry)); + var laterEntry = new DelayedEntry<>(newRequest("fake-name"), Duration.ofMillis(99), + () -> this.now); + assertTrue(queue.add(laterEntry)); + } + + Request newRequest(String name) { + return new Request(name); + } + +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/controller/DelayedEntryTest.java b/api/src/test/java/run/halo/app/extension/controller/DelayedEntryTest.java new file mode 100644 index 0000000..b222546 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/controller/DelayedEntryTest.java @@ -0,0 +1,60 @@ +package run.halo.app.extension.controller; + +import static org.junit.jupiter.api.Assertions.assertEquals; +import static org.junit.jupiter.api.Assertions.assertTrue; + +import java.time.Duration; +import java.time.Instant; +import java.util.concurrent.TimeUnit; +import org.junit.jupiter.api.Test; +import run.halo.app.extension.controller.RequestQueue.DelayedEntry; + +class DelayedEntryTest { + + Instant now = Instant.now(); + + @Test + void createDelayedEntry() { + var delayedEntry = new DelayedEntry<>("fake", Duration.ofMillis(100), () -> now); + assertEquals(100, delayedEntry.getDelay(TimeUnit.MILLISECONDS)); + assertEquals(Duration.ofMillis(100), delayedEntry.getRetryAfter()); + assertEquals(now.plusMillis(100), delayedEntry.getReadyAt()); + assertEquals("fake", delayedEntry.getEntry()); + + delayedEntry = new DelayedEntry<>("fake", now.plus(Duration.ofSeconds(1)), () -> now); + assertEquals(1000, delayedEntry.getDelay(TimeUnit.MILLISECONDS)); + assertEquals(Duration.ofMillis(1000), delayedEntry.getRetryAfter()); + } + + @Test + void compareWithGreaterDelay() { + var firstDelayEntry = new DelayedEntry<>("fake", Duration.ofMillis(100), () -> now); + var secondDelayEntry = new DelayedEntry<>("fake", Duration.ofMillis(200), () -> now); + + assertTrue(firstDelayEntry.compareTo(secondDelayEntry) < 0); + } + + @Test + void compareWithSameDelay() { + var firstDelayEntry = new DelayedEntry<>("fake", Duration.ofMillis(100), () -> now); + var secondDelayEntry = new DelayedEntry<>("fake", Duration.ofMillis(100), () -> now); + + assertEquals(0, firstDelayEntry.compareTo(secondDelayEntry)); + } + + @Test + void compareWithLessDelay() { + var firstDelayEntry = new DelayedEntry<>("fake", Duration.ofMillis(200), () -> now); + var secondDelayEntry = new DelayedEntry<>("fake", Duration.ofMillis(100), () -> now); + + assertTrue(firstDelayEntry.compareTo(secondDelayEntry) > 0); + } + + @Test + void shouldBeEqualWithNameOnly() { + var firstDelayEntry = new DelayedEntry<>("fake", Duration.ofMillis(200), () -> now); + var secondDelayEntry = new DelayedEntry<>("fake", Duration.ofMillis(100), Instant::now); + + assertEquals(firstDelayEntry, secondDelayEntry); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/controller/ExtensionWatcherTest.java b/api/src/test/java/run/halo/app/extension/controller/ExtensionWatcherTest.java new file mode 100644 index 0000000..ec5cbec --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/controller/ExtensionWatcherTest.java @@ -0,0 +1,152 @@ +package run.halo.app.extension.controller; + +import static org.mockito.ArgumentMatchers.any; +import static org.mockito.ArgumentMatchers.argThat; +import static org.mockito.Mockito.mock; +import static org.mockito.Mockito.times; +import static org.mockito.Mockito.verify; +import static org.mockito.Mockito.when; +import static run.halo.app.extension.FakeExtension.createFake; + +import org.junit.jupiter.api.Test; +import org.junit.jupiter.api.extension.ExtendWith; +import org.mockito.InjectMocks; +import org.mockito.Mock; +import org.mockito.junit.jupiter.MockitoExtension; +import run.halo.app.extension.DefaultExtensionMatcher; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.FakeExtension; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.WatcherExtensionMatchers; +import run.halo.app.extension.controller.Reconciler.Request; + +@ExtendWith(MockitoExtension.class) +class ExtensionWatcherTest { + + @Mock + RequestQueue queue; + + @Mock + ExtensionClient client; + + @Mock + WatcherExtensionMatchers matchers; + + @InjectMocks + ExtensionWatcher watcher; + + private DefaultExtensionMatcher getEmptyMatcher() { + return DefaultExtensionMatcher.builder(client, + GroupVersionKind.fromExtension(FakeExtension.class)) + .build(); + } + + @Test + void shouldAddExtensionWhenAddPredicateAlwaysTrue() { + when(matchers.onAddMatcher()).thenReturn(getEmptyMatcher()); + watcher.onAdd(createFake("fake-name")); + + verify(matchers, times(1)).onAddMatcher(); + verify(queue, times(1)).addImmediately( + argThat(request -> request.name().equals("fake-name"))); + verify(queue, times(0)).add(any()); + } + + @Test + void shouldNotAddExtensionWhenAddPredicateAlwaysFalse() { + var type = GroupVersionKind.fromAPIVersionAndKind("v1alpha1", "User"); + when(matchers.onAddMatcher()).thenReturn( + DefaultExtensionMatcher.builder(client, type).build()); + watcher.onAdd(createFake("fake-name")); + + verify(matchers, times(1)).onAddMatcher(); + verify(queue, times(0)).add(any()); + verify(queue, times(0)).addImmediately(any()); + } + + @Test + void shouldNotAddExtensionWhenWatcherIsDisposed() { + watcher.dispose(); + watcher.onAdd(createFake("fake-name")); + + verify(matchers, times(0)).onAddMatcher(); + verify(queue, times(0)).addImmediately(any()); + verify(queue, times(0)).add(any()); + } + + @Test + void shouldUpdateExtensionWhenUpdatePredicateAlwaysTrue() { + when(matchers.onUpdateMatcher()).thenReturn(getEmptyMatcher()); + watcher.onUpdate(createFake("old-fake-name"), createFake("new-fake-name")); + + verify(matchers, times(1)).onUpdateMatcher(); + verify(queue, times(1)).addImmediately( + argThat(request -> request.name().equals("new-fake-name"))); + verify(queue, times(0)).add(any()); + } + + @Test + void shouldUpdateExtensionWhenUpdatePredicateAlwaysFalse() { + var type = GroupVersionKind.fromAPIVersionAndKind("v1alpha1", "User"); + when(matchers.onUpdateMatcher()).thenReturn( + DefaultExtensionMatcher.builder(client, type).build()); + watcher.onUpdate(createFake("old-fake-name"), createFake("new-fake-name")); + + verify(matchers, times(1)).onUpdateMatcher(); + verify(queue, times(0)).add(any()); + verify(queue, times(0)).addImmediately(any()); + } + + @Test + void shouldNotUpdateExtensionWhenWatcherIsDisposed() { + watcher.dispose(); + watcher.onUpdate(createFake("old-fake-name"), createFake("new-fake-name")); + + verify(matchers, times(0)).onUpdateMatcher(); + verify(queue, times(0)).add(any()); + verify(queue, times(0)).addImmediately(any()); + } + + @Test + void shouldDeleteExtensionWhenDeletePredicateAlwaysTrue() { + when(matchers.onDeleteMatcher()).thenReturn(getEmptyMatcher()); + watcher.onDelete(createFake("fake-name")); + + verify(matchers, times(1)).onDeleteMatcher(); + verify(queue, times(1)).addImmediately( + argThat(request -> request.name().equals("fake-name"))); + verify(queue, times(0)).add(any()); + } + + @Test + void shouldDeleteExtensionWhenDeletePredicateAlwaysFalse() { + var type = GroupVersionKind.fromAPIVersionAndKind("v1alpha1", "User"); + when(matchers.onDeleteMatcher()).thenReturn( + DefaultExtensionMatcher.builder(client, type).build()); + watcher.onDelete(createFake("fake-name")); + + verify(matchers, times(1)).onDeleteMatcher(); + verify(queue, times(0)).add(any()); + verify(queue, times(0)).addImmediately(any()); + } + + @Test + void shouldNotDeleteExtensionWhenWatcherIsDisposed() { + watcher.dispose(); + watcher.onDelete(createFake("fake-name")); + + verify(matchers, times(0)).onDeleteMatcher(); + verify(queue, times(0)).add(any()); + verify(queue, times(0)).addImmediately(any()); + } + + @Test + void shouldInvokeDisposeHookIfRegistered() { + var mockHook = mock(Runnable.class); + watcher.registerDisposeHook(mockHook); + verify(mockHook, times(0)).run(); + + watcher.dispose(); + verify(mockHook, times(1)).run(); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/controller/RequestSynchronizerTest.java b/api/src/test/java/run/halo/app/extension/controller/RequestSynchronizerTest.java new file mode 100644 index 0000000..787f9fe --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/controller/RequestSynchronizerTest.java @@ -0,0 +1,107 @@ +package run.halo.app.extension.controller; + +import static org.junit.jupiter.api.Assertions.assertFalse; +import static org.junit.jupiter.api.Assertions.assertTrue; +import static org.mockito.ArgumentMatchers.any; +import static org.mockito.ArgumentMatchers.eq; +import static org.mockito.ArgumentMatchers.isA; +import static org.mockito.ArgumentMatchers.same; +import static org.mockito.Mockito.times; +import static org.mockito.Mockito.verify; +import static org.mockito.Mockito.when; + +import java.util.List; +import org.junit.jupiter.api.BeforeEach; +import org.junit.jupiter.api.Test; +import org.junit.jupiter.api.extension.ExtendWith; +import org.mockito.Mock; +import org.mockito.junit.jupiter.MockitoExtension; +import org.springframework.data.domain.Sort; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.FakeExtension; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.Watcher; +import run.halo.app.extension.index.IndexedQueryEngine; + +@ExtendWith(MockitoExtension.class) +class RequestSynchronizerTest { + + @Mock + ExtensionClient client; + + @Mock + IndexedQueryEngine indexedQueryEngine; + + @Mock + Watcher watcher; + + RequestSynchronizer synchronizer; + + @BeforeEach + void setUp() { + when(client.indexedQueryEngine()).thenReturn(indexedQueryEngine); + synchronizer = + new RequestSynchronizer(true, client, new FakeExtension(), watcher, new ListOptions()); + assertFalse(synchronizer.isDisposed()); + assertFalse(synchronizer.isStarted()); + } + + @Test + void shouldStartCorrectlyWhenSyncingAllOnStart() { + var type = GroupVersionKind.fromExtension(FakeExtension.class); + when(indexedQueryEngine.retrieveAll(eq(type), isA(ListOptions.class), any(Sort.class))) + .thenReturn(List.of("fake-01", "fake-02")); + + synchronizer.start(); + + assertTrue(synchronizer.isStarted()); + assertFalse(synchronizer.isDisposed()); + + verify(indexedQueryEngine, times(1)).retrieveAll(eq(type), + isA(ListOptions.class), isA(Sort.class)); + verify(watcher, times(2)).onAdd(isA(Reconciler.Request.class)); + verify(client, times(1)).watch(same(watcher)); + } + + @Test + void shouldStartCorrectlyWhenNotSyncingAllOnStart() { + synchronizer = + new RequestSynchronizer(false, client, new FakeExtension(), watcher, new ListOptions()); + assertFalse(synchronizer.isDisposed()); + assertFalse(synchronizer.isStarted()); + + synchronizer.start(); + + assertTrue(synchronizer.isStarted()); + assertFalse(synchronizer.isDisposed()); + + verify(client, times(0)).list(any(), any(), any()); + verify(watcher, times(0)).onAdd(isA(Reconciler.Request.class)); + verify(client, times(1)).watch(any(Watcher.class)); + } + + @Test + void shouldDisposeCorrectly() { + synchronizer.start(); + assertFalse(synchronizer.isDisposed()); + assertTrue(synchronizer.isStarted()); + + synchronizer.dispose(); + + assertTrue(synchronizer.isDisposed()); + assertTrue(synchronizer.isStarted()); + verify(watcher, times(1)).dispose(); + } + + @Test + void shouldNotStartAfterDisposing() { + synchronizer.dispose(); + synchronizer.start(); + + verify(client, times(0)).list(any(), any(), any()); + verify(watcher, times(0)).onAdd(isA(Reconciler.Request.class)); + verify(client, times(0)).watch(any()); + } + +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/index/FunctionalMultiValueIndexAttributeTest.java b/api/src/test/java/run/halo/app/extension/index/FunctionalMultiValueIndexAttributeTest.java new file mode 100644 index 0000000..7fd91f6 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/index/FunctionalMultiValueIndexAttributeTest.java @@ -0,0 +1,58 @@ +package run.halo.app.extension.index; + +import static org.assertj.core.api.Assertions.assertThat; +import static org.assertj.core.api.Assertions.assertThatThrownBy; + +import java.util.Set; +import lombok.Data; +import lombok.EqualsAndHashCode; +import org.junit.jupiter.api.Test; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.Unstructured; + +/** + * Tests for {@link FunctionalMultiValueIndexAttribute}. + * + * @author guqing + * @since 2.12.0 + */ +class FunctionalMultiValueIndexAttributeTest { + + @Test + void create() { + var attribute = new FunctionalMultiValueIndexAttribute<>(FakeExtension.class, + FakeExtension::getCategories); + assertThat(attribute).isNotNull(); + } + + @Test + void getValues() { + var attribute = new FunctionalMultiValueIndexAttribute<>(FakeExtension.class, + FakeExtension::getCategories); + var fake = new FakeExtension(); + fake.setCategories(Set.of("test", "halo")); + assertThat(attribute.getValues(fake)).isEqualTo(fake.getCategories()); + + var unstructured = Unstructured.OBJECT_MAPPER.convertValue(fake, Unstructured.class); + assertThatThrownBy(() -> attribute.getValues(unstructured)) + .isInstanceOf(IllegalArgumentException.class) + .hasMessageContaining("Object type does not match"); + + var demoExt = new DemoExtension(); + assertThatThrownBy(() -> attribute.getValues(demoExt)) + .isInstanceOf(IllegalArgumentException.class) + .hasMessageContaining("Object type does not match"); + } + + @Data + @EqualsAndHashCode(callSuper = true) + @GVK(group = "test.halo.run", version = "v1", kind = "FakeExtension", plural = "fakes", + singular = "fake") + static class FakeExtension extends AbstractExtension { + Set categories; + } + + class DemoExtension extends AbstractExtension { + } +} diff --git a/api/src/test/java/run/halo/app/extension/index/IndexAttributeFactoryTest.java b/api/src/test/java/run/halo/app/extension/index/IndexAttributeFactoryTest.java new file mode 100644 index 0000000..04dab75 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/index/IndexAttributeFactoryTest.java @@ -0,0 +1,41 @@ +package run.halo.app.extension.index; + +import static org.assertj.core.api.Assertions.assertThat; + +import java.util.Set; +import lombok.Data; +import lombok.EqualsAndHashCode; +import org.junit.jupiter.api.Test; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.Metadata; + +/** + * Tests for {@link IndexAttributeFactory}. + * + * @author guqing + * @since 2.12.0 + */ +class IndexAttributeFactoryTest { + + @Test + void multiValueAttribute() { + var attribute = IndexAttributeFactory.multiValueAttribute(FakeExtension.class, + FakeExtension::getTags); + assertThat(attribute).isNotNull(); + assertThat(attribute.getObjectType()).isEqualTo(FakeExtension.class); + var extension = new FakeExtension(); + extension.setMetadata(new Metadata()); + extension.getMetadata().setName("fake-name-1"); + extension.setTags(Set.of("tag1", "tag2")); + assertThat(attribute.getValues(extension)).isEqualTo(Set.of("tag1", "tag2")); + } + + @Data + @EqualsAndHashCode(callSuper = true) + @GVK(group = "test", version = "v1", kind = "FakeExtension", plural = "fakes", + singular = "fake") + static class FakeExtension extends AbstractExtension { + Set tags; + } +} diff --git a/api/src/test/java/run/halo/app/extension/index/IndexSpecTest.java b/api/src/test/java/run/halo/app/extension/index/IndexSpecTest.java new file mode 100644 index 0000000..08f240f --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/index/IndexSpecTest.java @@ -0,0 +1,76 @@ +package run.halo.app.extension.index; + +import static org.assertj.core.api.Assertions.assertThat; + +import lombok.Data; +import lombok.EqualsAndHashCode; +import org.junit.jupiter.api.Test; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + * Tests for {@link IndexSpec}. + * + * @author guqing + * @since 2.12.0 + */ +class IndexSpecTest { + + @Test + void equalsVerifier() { + var spec1 = new IndexSpec() + .setName("metadata.name") + .setOrder(IndexSpec.OrderType.ASC) + .setIndexFunc(IndexAttributeFactory.simpleAttribute(FakeExtension.class, + e -> e.getMetadata().getName()) + ) + .setUnique(true); + + var spec2 = new IndexSpec() + .setName("metadata.name") + .setOrder(IndexSpec.OrderType.ASC) + .setIndexFunc(IndexAttributeFactory.simpleAttribute(FakeExtension.class, + e -> e.getMetadata().getName()) + ) + .setUnique(true); + + assertThat(spec1).isEqualTo(spec2); + assertThat(spec1.equals(spec2)).isTrue(); + assertThat(spec1.hashCode()).isEqualTo(spec2.hashCode()); + + var spec3 = new IndexSpec() + .setName("metadata.name") + .setOrder(IndexSpec.OrderType.DESC) + .setIndexFunc(IndexAttributeFactory.simpleAttribute(FakeExtension.class, + e -> e.getMetadata().getName()) + ) + .setUnique(false); + assertThat(spec1).isEqualTo(spec3); + assertThat(spec1.equals(spec3)).isTrue(); + assertThat(spec1.hashCode()).isEqualTo(spec3.hashCode()); + + var spec4 = new IndexSpec() + .setName("slug") + .setOrder(IndexSpec.OrderType.ASC) + .setIndexFunc(IndexAttributeFactory.simpleAttribute(FakeExtension.class, + e -> e.getMetadata().getName()) + ) + .setUnique(true); + assertThat(spec1.equals(spec4)).isFalse(); + assertThat(spec1).isNotEqualTo(spec4); + } + + @Test + void equalAnotherObject() { + var spec3 = new IndexSpec() + .setName("metadata.name"); + assertThat(spec3.equals(new Object())).isFalse(); + } + + @Data + @EqualsAndHashCode(callSuper = true) + @GVK(group = "test", version = "v1", kind = "Fake", plural = "fakes", singular = "fake") + static class FakeExtension extends AbstractExtension { + private String slug; + } +} diff --git a/api/src/test/java/run/halo/app/extension/index/KeyComparatorTest.java b/api/src/test/java/run/halo/app/extension/index/KeyComparatorTest.java new file mode 100644 index 0000000..9092520 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/index/KeyComparatorTest.java @@ -0,0 +1,79 @@ +package run.halo.app.extension.index; + +import static org.assertj.core.api.Assertions.assertThat; + +import java.util.Arrays; +import java.util.Comparator; +import org.junit.jupiter.api.Test; + +/** + * Tests for {@link KeyComparator}. + * + * @author guqing + * @since 2.12.0 + */ +class KeyComparatorTest { + + @Test + void keyComparator() { + var comparator = KeyComparator.INSTANCE; + String[] strings = {"103", "101", "102", "1011", "1013", "1021", "1022", "1012", "1023"}; + Arrays.sort(strings, comparator); + assertThat(strings).isEqualTo( + new String[] {"101", "102", "103", "1011", "1012", "1013", "1021", "1022", "1023"}); + + Arrays.sort(strings, comparator.reversed()); + assertThat(strings).isEqualTo( + new String[] {"1023", "1022", "1021", "1013", "1012", "1011", "103", "102", "101"}); + + // but if we use natural order, the result is: + Arrays.sort(strings, Comparator.naturalOrder()); + assertThat(strings).isEqualTo( + new String[] {"101", "1011", "1012", "1013", "102", "1021", "1022", "1023", "103"}); + } + + @Test + void keyComparator2() { + var comparator = KeyComparator.INSTANCE; + String[] strings = + {"moment-101", "moment-102", "moment-103", "moment-1011", "moment-1013", "moment-1021", + "moment-1022", "moment-1012", "moment-1023"}; + Arrays.sort(strings, comparator); + assertThat(strings).isEqualTo(new String[] {"moment-101", "moment-102", "moment-103", + "moment-1011", "moment-1012", "moment-1013", "moment-1021", "moment-1022", + "moment-1023"}); + + // date sort + strings = + new String[] {"2022-01-15", "2022-02-01", "2021-12-25", "2022-01-01", "2022-01-02"}; + Arrays.sort(strings, comparator); + assertThat(strings).isEqualTo( + new String[] {"2021-12-25", "2022-01-01", "2022-01-02", "2022-01-15", "2022-02-01"}); + + // alphabet and number sort + strings = new String[] {"abc123", "abc45", "abc9", "abc100", "abc20"}; + Arrays.sort(strings, comparator); + assertThat(strings).isEqualTo( + new String[] {"abc9", "abc20", "abc45", "abc100", "abc123"}); + + // test for pure alphabet sort + strings = new String[] {"xyz", "abc", "def", "abcde", "xyzabc"}; + Arrays.sort(strings, comparator); + assertThat(strings).isEqualTo(new String[] {"abc", "abcde", "def", "xyz", "xyzabc"}); + + // test for empty string + strings = new String[] {"", "abc", "123", "xyz"}; + Arrays.sort(strings, comparator); + assertThat(strings).isEqualTo(new String[] {"", "123", "abc", "xyz"}); + + // test for the same string + strings = new String[] {"abc", "abc", "abc", "abc"}; + Arrays.sort(strings, comparator); + assertThat(strings).isEqualTo(new String[] {"abc", "abc", "abc", "abc"}); + + // test for null element + strings = new String[] {null, "abc", "123", "xyz"}; + Arrays.sort(strings, comparator); + assertThat(strings).isEqualTo(new String[] {"123", "abc", "xyz", null}); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/index/query/InQueryTest.java b/api/src/test/java/run/halo/app/extension/index/query/InQueryTest.java new file mode 100644 index 0000000..c7e8d96 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/index/query/InQueryTest.java @@ -0,0 +1,24 @@ +package run.halo.app.extension.index.query; + +import static org.assertj.core.api.Assertions.assertThat; + +import java.util.LinkedHashSet; +import org.junit.jupiter.api.Test; + +/** + * Tests for {@link InQuery}. + * + * @author guqing + * @since 2.17.0 + */ +class InQueryTest { + + @Test + void testToString() { + var values = new LinkedHashSet(); + values.add("Alice"); + values.add("Bob"); + var inQuery = new InQuery("name", values); + assertThat(inQuery.toString()).isEqualTo("name IN ('Alice', 'Bob')"); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/index/query/IsNotNullTest.java b/api/src/test/java/run/halo/app/extension/index/query/IsNotNullTest.java new file mode 100644 index 0000000..be6b708 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/index/query/IsNotNullTest.java @@ -0,0 +1,20 @@ +package run.halo.app.extension.index.query; + +import static org.assertj.core.api.Assertions.assertThat; + +import org.junit.jupiter.api.Test; + +/** + * Tests for {@link IsNotNull}. + * + * @author guqing + * @since 2.17.0 + */ +class IsNotNullTest { + + @Test + void testToString() { + var isNotNull = new IsNotNull("name"); + assertThat(isNotNull.toString()).isEqualTo("name IS NOT NULL"); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/index/query/StringContainsTest.java b/api/src/test/java/run/halo/app/extension/index/query/StringContainsTest.java new file mode 100644 index 0000000..f55cdd6 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/index/query/StringContainsTest.java @@ -0,0 +1,20 @@ +package run.halo.app.extension.index.query; + +import static org.assertj.core.api.Assertions.assertThat; + +import org.junit.jupiter.api.Test; + +/** + * Tests for {@link StringContains}. + * + * @author guqing + * @since 2.17.0 + */ +class StringContainsTest { + + @Test + void testToString() { + var stringContains = new StringContains("name", "Alice"); + assertThat(stringContains.toString()).isEqualTo("contains(name, 'Alice')"); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/router/selector/FieldCriteriaPredicateConverterTest.java b/api/src/test/java/run/halo/app/extension/router/selector/FieldCriteriaPredicateConverterTest.java new file mode 100644 index 0000000..34eff15 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/router/selector/FieldCriteriaPredicateConverterTest.java @@ -0,0 +1,96 @@ +package run.halo.app.extension.router.selector; + +import static org.junit.jupiter.api.Assertions.assertFalse; +import static org.junit.jupiter.api.Assertions.assertNotNull; +import static org.junit.jupiter.api.Assertions.assertTrue; +import static org.mockito.Mockito.mock; + +import java.util.Set; +import org.junit.jupiter.api.BeforeEach; +import org.junit.jupiter.api.Test; +import run.halo.app.extension.Extension; +import run.halo.app.extension.FakeExtension; +import run.halo.app.extension.Metadata; + +class FieldCriteriaPredicateConverterTest { + + FieldCriteriaPredicateConverter converter; + + @BeforeEach + void setUp() { + converter = new FieldCriteriaPredicateConverter<>(); + } + + @Test + void shouldConvertNameEqualsCorrectly() { + var criteria = new SelectorCriteria("name", Operator.Equals, Set.of("value1", "value2")); + var predicate = converter.convert(criteria); + assertNotNull(predicate); + + var fakeExt = new FakeExtension(); + var metadata = new Metadata(); + fakeExt.setMetadata(metadata); + assertFalse(predicate.test(fakeExt)); + + metadata.setName("value1"); + assertTrue(predicate.test(fakeExt)); + + metadata.setName("value2"); + assertTrue(predicate.test(fakeExt)); + + metadata.setName("invalid-value"); + assertFalse(predicate.test(fakeExt)); + } + + @Test + void shouldConvertNameNotEqualsCorrectly() { + var criteria = new SelectorCriteria("name", Operator.NotEquals, Set.of("value1", "value2")); + var predicate = converter.convert(criteria); + assertNotNull(predicate); + + var fake = new FakeExtension(); + var metadata = new Metadata(); + fake.setMetadata(metadata); + assertFalse(predicate.test(fake)); + + metadata.setName("not-contain-value"); + assertTrue(predicate.test(fake)); + + metadata.setName("value1"); + assertFalse(predicate.test(fake)); + + metadata.setName("value2"); + assertFalse(predicate.test(fake)); + } + + @Test + void shouldConvertNameInCorrectly() { + var criteria = new SelectorCriteria("name", Operator.IN, Set.of("value1", "value2")); + var predicate = converter.convert(criteria); + assertNotNull(predicate); + + var fake = new FakeExtension(); + var metadata = new Metadata(); + fake.setMetadata(metadata); + assertFalse(predicate.test(fake)); + + metadata.setName("not-contain-value"); + assertFalse(predicate.test(fake)); + + metadata.setName("value1"); + assertTrue(predicate.test(fake)); + + metadata.setName("value2"); + assertTrue(predicate.test(fake)); + } + + @Test + void shouldReturnAlwaysFalseIfCriteriaKeyNotSupported() { + var criteria = + new SelectorCriteria("unsupported-field", Operator.Equals, Set.of("value1", "value2")); + var predicate = converter.convert(criteria); + assertNotNull(predicate); + + assertFalse(predicate.test(mock(Extension.class))); + } +} diff --git a/api/src/test/java/run/halo/app/extension/router/selector/LabelCriteriaPredicateConverterTest.java b/api/src/test/java/run/halo/app/extension/router/selector/LabelCriteriaPredicateConverterTest.java new file mode 100644 index 0000000..59795a6 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/router/selector/LabelCriteriaPredicateConverterTest.java @@ -0,0 +1,101 @@ +package run.halo.app.extension.router.selector; + +import static org.junit.jupiter.api.Assertions.assertFalse; +import static org.junit.jupiter.api.Assertions.assertNotNull; +import static org.junit.jupiter.api.Assertions.assertTrue; + +import java.util.Map; +import java.util.Set; +import org.junit.jupiter.api.BeforeEach; +import org.junit.jupiter.api.Test; +import run.halo.app.extension.Extension; +import run.halo.app.extension.FakeExtension; +import run.halo.app.extension.Metadata; + +class LabelCriteriaPredicateConverterTest { + + LabelCriteriaPredicateConverter convert; + + @BeforeEach + void setUp() { + convert = new LabelCriteriaPredicateConverter<>(); + } + + @Test + void shouldConvertEqualsCorrectly() { + var criteria = new SelectorCriteria("name", Operator.Equals, Set.of("value1", "value2")); + var predicate = convert.convert(criteria); + assertNotNull(predicate); + var fakeExt = new FakeExtension(); + var metadata = new Metadata(); + fakeExt.setMetadata(metadata); + assertFalse(predicate.test(fakeExt)); + + metadata.setLabels(Map.of("name", "value")); + assertFalse(predicate.test(fakeExt)); + + metadata.setLabels(Map.of("name", "value1")); + assertTrue(predicate.test(fakeExt)); + + metadata.setLabels(Map.of("name", "value2")); + assertTrue(predicate.test(fakeExt)); + } + + @Test + void shouldConvertNotEqualsCorrectly() { + var criteria = new SelectorCriteria("name", Operator.NotEquals, Set.of("value1", "value2")); + var predicate = convert.convert(criteria); + assertNotNull(predicate); + + var fakeExt = new FakeExtension(); + var metadata = new Metadata(); + fakeExt.setMetadata(metadata); + assertFalse(predicate.test(fakeExt)); + + metadata.setLabels(Map.of("name", "value")); + assertTrue(predicate.test(fakeExt)); + + metadata.setLabels(Map.of("name", "value1")); + assertFalse(predicate.test(fakeExt)); + + metadata.setLabels(Map.of("name", "value2")); + assertFalse(predicate.test(fakeExt)); + } + + @Test + void shouldConvertNotExistCorrectly() { + var criteria = new SelectorCriteria("name", Operator.NotExist, Set.of()); + var predicate = convert.convert(criteria); + assertNotNull(predicate); + + var fake = new FakeExtension(); + var metadata = new Metadata(); + fake.setMetadata(metadata); + assertTrue(predicate.test(fake)); + + metadata.setLabels(Map.of("not-a-name", "")); + assertTrue(predicate.test(fake)); + + metadata.setLabels(Map.of("name", "")); + assertFalse(predicate.test(fake)); + } + + @Test + void shouldConvertExistCorrectly() { + var criteria = new SelectorCriteria("name", Operator.Exist, Set.of()); + var predicate = convert.convert(criteria); + assertNotNull(predicate); + + var fake = new FakeExtension(); + var metadata = new Metadata(); + fake.setMetadata(metadata); + assertFalse(predicate.test(fake)); + + metadata.setLabels(Map.of("not-a-name", "")); + assertFalse(predicate.test(fake)); + + metadata.setLabels(Map.of("name", "")); + assertTrue(predicate.test(fake)); + } + +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/router/selector/LabelSelectorTest.java b/api/src/test/java/run/halo/app/extension/router/selector/LabelSelectorTest.java new file mode 100644 index 0000000..b91b59e --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/router/selector/LabelSelectorTest.java @@ -0,0 +1,24 @@ +package run.halo.app.extension.router.selector; + +import static org.assertj.core.api.Assertions.assertThat; + +import org.junit.jupiter.api.Test; + +/** + * Tests for {@link LabelSelector}. + * + * @author guqing + * @since 2.17.0 + */ +class LabelSelectorTest { + + @Test + void builderTest() { + var labelSelector = LabelSelector.builder() + .eq("a", "v1") + .in("b", "v2", "v3") + .build(); + assertThat(labelSelector.toString()) + .isEqualTo("a equal v1, b IN (v2, v3)"); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/router/selector/OperatorTest.java b/api/src/test/java/run/halo/app/extension/router/selector/OperatorTest.java new file mode 100644 index 0000000..ae42627 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/router/selector/OperatorTest.java @@ -0,0 +1,64 @@ +package run.halo.app.extension.router.selector; + +import static org.junit.jupiter.api.Assertions.assertEquals; +import static run.halo.app.extension.router.selector.Operator.Equals; +import static run.halo.app.extension.router.selector.Operator.Exist; +import static run.halo.app.extension.router.selector.Operator.IN; +import static run.halo.app.extension.router.selector.Operator.NotEquals; +import static run.halo.app.extension.router.selector.Operator.NotExist; + +import java.util.List; +import java.util.Set; +import lombok.extern.slf4j.Slf4j; +import org.junit.jupiter.api.Test; + +@Slf4j +class OperatorTest { + + @Test + void shouldConvertCorrectly() { + record TestCase(String source, Operator converter, SelectorCriteria expected) { + } + + List.of( + new TestCase("", Equals, null), + new TestCase("=", Equals, null), + new TestCase("=value", Equals, null), + new TestCase("name=", Equals, null), + new TestCase("name=value", Equals, + new SelectorCriteria("name", Equals, Set.of("value"))), + new TestCase("name=v", Equals, + new SelectorCriteria("name", Equals, Set.of("v"))), + + new TestCase("", NotEquals, null), + new TestCase("=", NotEquals, null), + new TestCase("!", NotEquals, null), + new TestCase("!=", NotEquals, null), + new TestCase("!=value", NotEquals, null), + new TestCase("name!=", NotEquals, null), + new TestCase("name!=value", NotEquals, + new SelectorCriteria("name", NotEquals, Set.of("value"))), + + new TestCase("", NotExist, null), + new TestCase("!", NotExist, null), + new TestCase("!name", NotExist, new SelectorCriteria("name", NotExist, Set.of())), + new TestCase("name", NotExist, null), + new TestCase("na!me", NotExist, null), + new TestCase("name!", NotExist, null), + + new TestCase("name", Exist, new SelectorCriteria("name", Exist, Set.of())), + new TestCase("", Exist, null), + new TestCase("!", Exist, new SelectorCriteria("!", Exist, Set.of())), + new TestCase("a", Exist, new SelectorCriteria("a", Exist, Set.of())), + + new TestCase("name", IN, null), + new TestCase("name=(fake-name)", IN, + new SelectorCriteria("name", IN, Set.of("fake-name"))), + new TestCase("name=(first-name,second-name)", IN, + new SelectorCriteria("name", IN, Set.of("first-name", "second-name"))) + ).forEach(testCase -> { + log.debug("Testing: {}", testCase); + assertEquals(testCase.expected(), testCase.converter().convert(testCase.source())); + }); + } +} diff --git a/api/src/test/java/run/halo/app/extension/router/selector/SelectorConverterTest.java b/api/src/test/java/run/halo/app/extension/router/selector/SelectorConverterTest.java new file mode 100644 index 0000000..3f73065 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/router/selector/SelectorConverterTest.java @@ -0,0 +1,42 @@ +package run.halo.app.extension.router.selector; + +import static org.junit.jupiter.api.Assertions.assertEquals; +import static run.halo.app.extension.router.selector.Operator.Equals; + +import java.util.List; +import java.util.Set; +import lombok.extern.slf4j.Slf4j; +import org.junit.jupiter.api.Test; + +@Slf4j +class SelectorConverterTest { + + SelectorConverter converter = new SelectorConverter(); + + @Test + void shouldConvertCorrectly() { + record TestCase(String selector, SelectorCriteria expected) { + } + + List.of( + new TestCase("", null), + new TestCase("name=value", + new SelectorCriteria("name", Equals, Set.of("value"))), + new TestCase("name!=value", + new SelectorCriteria("name", Operator.NotEquals, Set.of("value"))), + new TestCase("name", + new SelectorCriteria("name", Operator.Exist, Set.of())), + new TestCase("!name", + new SelectorCriteria("name", Operator.NotExist, Set.of())), + new TestCase("name", + new SelectorCriteria("name", Operator.Exist, Set.of())), + new TestCase("name!=", + new SelectorCriteria("name!=", Operator.Exist, Set.of())), + new TestCase("==", + new SelectorCriteria("==", Operator.Exist, Set.of())) + ).forEach(testCase -> { + log.debug("Testing: {}", testCase); + assertEquals(testCase.expected, converter.convert(testCase.selector)); + }); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/extension/router/selector/SelectorUtilTest.java b/api/src/test/java/run/halo/app/extension/router/selector/SelectorUtilTest.java new file mode 100644 index 0000000..8963e64 --- /dev/null +++ b/api/src/test/java/run/halo/app/extension/router/selector/SelectorUtilTest.java @@ -0,0 +1,44 @@ +package run.halo.app.extension.router.selector; + +import static org.junit.jupiter.api.Assertions.assertFalse; +import static org.junit.jupiter.api.Assertions.assertNotNull; +import static org.junit.jupiter.api.Assertions.assertTrue; +import static org.mockito.Mockito.mock; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToPredicate; + +import java.util.List; +import java.util.Map; +import org.junit.jupiter.api.Test; +import run.halo.app.extension.Extension; +import run.halo.app.extension.FakeExtension; +import run.halo.app.extension.Metadata; + +class SelectorUtilTest { + + @Test + void shouldConvertCorrectlyIfSelectorsAreNull() { + var predicate = labelAndFieldSelectorToPredicate(null, null); + assertTrue(predicate.test(mock(Extension.class))); + } + + @Test + void shouldConvertCorrectlyIfSelectorsAreNotNull() { + var predicate = labelAndFieldSelectorToPredicate(List.of("label-name=label-value"), + List.of("name=fake-name")); + assertNotNull(predicate); + + var fake = new FakeExtension(); + var metadata = new Metadata(); + fake.setMetadata(metadata); + assertFalse(predicate.test(fake)); + + metadata.setName("fake-name"); + assertFalse(predicate.test(fake)); + + metadata.setLabels(Map.of("label-name", "label-value")); + assertTrue(predicate.test(fake)); + + metadata.setName("invalid-name"); + assertFalse(predicate.test(fake)); + } +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/infra/utils/GenericClassUtilsTest.java b/api/src/test/java/run/halo/app/infra/utils/GenericClassUtilsTest.java new file mode 100644 index 0000000..4090d8a --- /dev/null +++ b/api/src/test/java/run/halo/app/infra/utils/GenericClassUtilsTest.java @@ -0,0 +1,19 @@ +package run.halo.app.infra.utils; + +import static org.junit.jupiter.api.Assertions.assertEquals; + +import org.junit.jupiter.api.Test; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListResult; + +class GenericClassUtilsTest { + + @Test + void generateConcreteClass() { + var clazz = GenericClassUtils.generateConcreteClass(ListResult.class, Post.class, + () -> Post.class.getName() + "List"); + assertEquals("run.halo.app.core.extension.content.PostList", clazz.getName()); + assertEquals("run.halo.app.core.extension.content", clazz.getPackageName()); + } + +} \ No newline at end of file diff --git a/api/src/test/java/run/halo/app/infra/utils/JsonUtilsTest.java b/api/src/test/java/run/halo/app/infra/utils/JsonUtilsTest.java new file mode 100644 index 0000000..605df69 --- /dev/null +++ b/api/src/test/java/run/halo/app/infra/utils/JsonUtilsTest.java @@ -0,0 +1,35 @@ +package run.halo.app.infra.utils; + +import static org.assertj.core.api.Assertions.assertThat; + +import java.time.Instant; +import java.time.LocalDateTime; +import java.util.List; +import org.junit.jupiter.api.Test; + +/** + * Tests for {@link JsonUtils}. + * + * @author guqing + * @since 2.0.0 + */ +public class JsonUtilsTest { + + @Test + public void serializerTime() { + Instant now = Instant.now(); + String instantStr = JsonUtils.objectToJson(now); + assertThat(instantStr).isNotNull(); + + String localDateTimeStr = JsonUtils.objectToJson(LocalDateTime.now()); + assertThat(localDateTimeStr).isNotNull(); + } + + @Test + @SuppressWarnings("rawtypes") + public void deserializerArrayString() { + String s = "[\"hello\", \"world\"]"; + List list = JsonUtils.jsonToObject(s, List.class); + assertThat(list).isEqualTo(List.of("hello", "world")); + } +} diff --git a/api/src/test/java/run/halo/app/infra/utils/PathUtilsTest.java b/api/src/test/java/run/halo/app/infra/utils/PathUtilsTest.java new file mode 100644 index 0000000..da63565 --- /dev/null +++ b/api/src/test/java/run/halo/app/infra/utils/PathUtilsTest.java @@ -0,0 +1,98 @@ +package run.halo.app.infra.utils; + +import static org.assertj.core.api.Assertions.assertThat; + +import java.util.HashMap; +import java.util.Map; +import org.junit.jupiter.api.Test; + +/** + * Tests for {@link PathUtils}. + * + * @author guqing + * @since 2.0.0 + */ +class PathUtilsTest { + + @Test + void combinePath() { + Map combinePathCases = getCombinePathCases(); + combinePathCases.forEach((segments, expected) -> { + String s = PathUtils.combinePath(segments.split(",")); + assertThat(s).isEqualTo(expected); + }); + + String s = PathUtils.combinePath("a", "", "c"); + assertThat(s).isEqualTo("/a/c"); + } + + private Map getCombinePathCases() { + Map combinePathCases = new HashMap<>(); + combinePathCases.put("a,b,c", "/a/b/c"); + combinePathCases.put("/a,b,c", "/a/b/c"); + combinePathCases.put("/a,b/,c", "/a/b/c"); + combinePathCases.put("/a,/b/,c", "/a/b/c"); + return combinePathCases; + } + + @Test + void appendPathSeparatorIfMissing() { + String s = PathUtils.appendPathSeparatorIfMissing("a"); + assertThat(s).isEqualTo("a/"); + + s = PathUtils.appendPathSeparatorIfMissing("a/"); + assertThat(s).isEqualTo("a/"); + + s = PathUtils.appendPathSeparatorIfMissing(null); + assertThat(s).isEqualTo(null); + } + + @Test + void simplifyPathPattern() { + assertThat(PathUtils.simplifyPathPattern("/a/b/c")).isEqualTo("/a/b/c"); + assertThat(PathUtils.simplifyPathPattern("/a/{b}/c")).isEqualTo("/a/{b}/c"); + assertThat(PathUtils.simplifyPathPattern("/a/{b}/*")).isEqualTo("/a/{b}/*"); + assertThat(PathUtils.simplifyPathPattern("/archives/{year:\\d{4}}/{month:\\d{2}}")) + .isEqualTo("/archives/{year}/{month}"); + assertThat(PathUtils.simplifyPathPattern("/archives/{year:\\d{4}}/{slug}")) + .isEqualTo("/archives/{year}/{slug}"); + assertThat(PathUtils.simplifyPathPattern("/archives/{year:\\d{4}}/page/{page:\\d+}")) + .isEqualTo("/archives/{year}/page/{page}"); + } + + @Test + void isAbsoluteUri() { + String[] absoluteUris = new String[] { + "ftp://ftp.is.co.za/rfc/rfc1808.txt", + "http://www.ietf.org/rfc/rfc2396.txt", + "ldap://[2001:db8::7]/c=GB?objectClass?one", + "mailto:John.Doe@example.com", + "news:comp.infosystems.www.servers.unix", + "tel:+1-816-555-1212", + "telnet://192.0.2.16:80/", + "urn:oasis:names:specification:docbook:dtd:xml:4.1.2", + "data:text/vnd-example+xyz;foo=bar;base64,R0lGODdh", + "irc://irc.example.com:6667/#some-channel", + "ircs://irc.example.com:6667/#some-channel", + "irc6://irc.example.com:6667/#some-channel" + }; + for (String uri : absoluteUris) { + assertThat(PathUtils.isAbsoluteUri(uri)).isTrue(); + } + + String[] paths = new String[] { + "//example.com/path/resource.txt", + "/path/resource.txt", + "path/resource.txt", + "../resource.txt", + "./resource.txt", + "resource.txt", + "#fragment", + "", + null + }; + for (String path : paths) { + assertThat(PathUtils.isAbsoluteUri(path)).isFalse(); + } + } +} \ No newline at end of file diff --git a/application/build.gradle b/application/build.gradle new file mode 100644 index 0000000..49f4040 --- /dev/null +++ b/application/build.gradle @@ -0,0 +1,166 @@ +import de.undercouch.gradle.tasks.download.Download +import org.gradle.crypto.checksum.Checksum + +plugins { + id 'org.springframework.boot' + id 'io.spring.dependency-management' + id "com.gorylenko.gradle-git-properties" + id "checkstyle" + id 'java' + id 'idea' + id 'jacoco' + id "de.undercouch.download" + id "io.freefair.lombok" + id 'org.gradle.crypto.checksum' + id 'org.springdoc.openapi-gradle-plugin' +} + +group = 'run.halo.app' +compileJava.options.encoding = 'UTF-8' +compileTestJava.options.encoding = 'UTF-8' + +java { + sourceCompatibility = JavaVersion.VERSION_17 + targetCompatibility = JavaVersion.VERSION_17 +} + +idea { + module { + resourceDirs += file("../ui/build/dist/") + } +} + +checkstyle { + toolVersion = "9.3" + showViolations = false + ignoreFailures = false +} + +repositories { + mavenCentral() + + maven { url 'https://repo.spring.io/milestone' } + maven { url 'https://s01.oss.sonatype.org/content/repositories/snapshots' } +} + + +configurations { + compileOnly { + extendsFrom annotationProcessor + } +} + +springBoot { + buildInfo { + properties { + artifact = 'halo' + name = 'halo' + } + } +} + +bootJar { + archiveBaseName = 'halo' + manifest { + attributes 'Implementation-Title': 'Halo Application', + 'Implementation-Vendor': 'Halo OSS Team' + } +} + +tasks.named('jar') { + enabled = false +} + +dependencies { + implementation project(':api') + + annotationProcessor "org.springframework.boot:spring-boot-configuration-processor" + annotationProcessor "org.springframework:spring-context-indexer" + + testImplementation 'org.springframework.boot:spring-boot-starter-test' + testImplementation 'org.springframework.security:spring-security-test' + testImplementation 'io.projectreactor:reactor-test' +} + +tasks.register('createChecksums', Checksum) { + dependsOn tasks.named('bootJar') + inputFiles.setFrom(layout.buildDirectory.files('libs')) + outputDirectory = layout.buildDirectory.dir("libs") + checksumAlgorithm = Checksum.Algorithm.SHA256 +} + +tasks.named('processResources', ProcessResources) { + from project(':ui').layout.buildDirectory.dir('dist') + into layout.buildDirectory.dir('resources/main') + configure { + mustRunAfter project(':ui').tasks.named('build') + } +} + +tasks.named('build') { + dependsOn tasks.named('createChecksums') +} + +tasks.named('test', Test) { + useJUnitPlatform() + finalizedBy jacocoTestReport +} + +tasks.named('jacocoTestReport', JacocoReport) { + reports { + xml.required = true + html.required = false + } +} + +ext.presetPluginUrls = [ + 'https://github.com/halo-dev/plugin-comment-widget/releases/download/v2.4.0/plugin-comment-widget-2.4.0.jar' : 'plugin-comment-widget.jar', + 'https://github.com/halo-dev/plugin-search-widget/releases/download/v1.5.0/plugin-search-widget-1.5.0.jar' : 'plugin-search-widget.jar', + 'https://github.com/halo-dev/plugin-sitemap/releases/download/v1.1.2/plugin-sitemap-1.1.2.jar' : 'plugin-sitemap.jar', + 'https://github.com/halo-dev/plugin-feed/releases/download/v1.3.0/plugin-feed-1.3.0.jar' : 'plugin-feed.jar', + + // Currently, plugin-app-store is not open source, so we need to download it from the official website. + // Please see https://github.com/halo-dev/plugin-app-store/issues/55 + // https://www.halo.run/store/apps/app-VYJbF + 'https://www.halo.run/store/apps/app-VYJbF/releases/download/app-release-SRWfv/assets/app-release-SRWfv-VLtMA': 'appstore.jar', +] + +tasks.register('downloadPluginPresets', Download) { + doFirst { + delete 'src/main/resources/presets/plugins' + } + + src presetPluginUrls.keySet() + + dest 'src/main/resources/presets/plugins' + + eachFile { f -> + f.name = presetPluginUrls[f.sourceURL.toString()] + } +} + +openApi { + outputDir = file("$rootDir/api-docs/openapi/v3_0") + groupedApiMappings = [ + 'http://localhost:8091/v3/api-docs/apis_aggregated.api_v1alpha1': 'aggregated.json', + 'http://localhost:8091/v3/api-docs/apis_public.api_v1alpha1' : 'apis_public.api_v1alpha1.json', + 'http://localhost:8091/v3/api-docs/apis_console.api_v1alpha1' : 'apis_console.api_v1alpha1.json', + 'http://localhost:8091/v3/api-docs/apis_uc.api_v1alpha1' : 'apis_uc.api_v1alpha1.json', + 'http://localhost:8091/v3/api-docs/apis_extension.api_v1alpha1' : 'apis_extension.api_v1alpha1.json', + ] + customBootRun { + args = ['--server.port=8091', + '--spring.profiles.active=doc', + "--halo.work-dir=${layout.buildDirectory.get()}/tmp/workdir-for-generating-apidocs"] + } +} + +tasks.named('forkedSpringBootRun') { + dependsOn ':api:jar' +} + +tasks.named('generateOpenApiDocs') { + outputs.upToDateWhen { + false + } +} diff --git a/application/src/main/java/run/halo/app/Application.java b/application/src/main/java/run/halo/app/Application.java new file mode 100644 index 0000000..6871d91 --- /dev/null +++ b/application/src/main/java/run/halo/app/Application.java @@ -0,0 +1,31 @@ +package run.halo.app; + +import org.springframework.boot.autoconfigure.SpringBootApplication; +import org.springframework.boot.autoconfigure.integration.IntegrationAutoConfiguration; +import org.springframework.boot.builder.SpringApplicationBuilder; +import org.springframework.boot.context.metrics.buffering.BufferingApplicationStartup; +import org.springframework.boot.context.properties.EnableConfigurationProperties; +import org.springframework.scheduling.annotation.EnableScheduling; +import run.halo.app.infra.properties.HaloProperties; + +/** + * Halo main class. + * + * @author ryanwang + * @author JohnNiang + * @author guqing + * @date 2017-11-14 + */ +@EnableScheduling +@SpringBootApplication(scanBasePackages = "run.halo.app", exclude = + IntegrationAutoConfiguration.class) +@EnableConfigurationProperties({HaloProperties.class}) +public class Application { + + public static void main(String[] args) { + new SpringApplicationBuilder(Application.class) + .applicationStartup(new BufferingApplicationStartup(1024)) + .run(args); + } + +} diff --git a/application/src/main/java/run/halo/app/actuator/DatabaseInfoContributor.java b/application/src/main/java/run/halo/app/actuator/DatabaseInfoContributor.java new file mode 100644 index 0000000..e0aa0b5 --- /dev/null +++ b/application/src/main/java/run/halo/app/actuator/DatabaseInfoContributor.java @@ -0,0 +1,48 @@ +package run.halo.app.actuator; + +import io.r2dbc.spi.Connection; +import io.r2dbc.spi.ConnectionFactory; +import io.r2dbc.spi.ConnectionMetadata; +import java.util.HashMap; +import java.util.Map; +import java.util.Objects; +import org.springframework.boot.actuate.info.Info; +import org.springframework.boot.actuate.info.InfoContributor; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; + +@Component +public class DatabaseInfoContributor implements InfoContributor { + private static final String DATABASE_INFO_KEY = "database"; + + private final ConnectionFactory connectionFactory; + + public DatabaseInfoContributor(ConnectionFactory connectionFactory) { + this.connectionFactory = connectionFactory; + } + + @Override + public void contribute(Info.Builder builder) { + builder.withDetail(DATABASE_INFO_KEY, contributorMap()); + } + + public Map contributorMap() { + var map = new HashMap(); + var connectionMetadata = getConnectionMetadata().block(); + if (Objects.isNull(connectionMetadata)) { + return map; + } + map.put("name", connectionMetadata.getDatabaseProductName()); + map.put("version", connectionMetadata.getDatabaseVersion()); + return map; + } + + private Mono getConnectionMetadata() { + return Mono.usingWhen(this.connectionFactory.create(), + conn -> Mono.just(conn.getMetadata()), + Connection::close, + (conn, t) -> conn.close(), + Connection::close + ); + } +} diff --git a/application/src/main/java/run/halo/app/actuator/GlobalInfoEndpoint.java b/application/src/main/java/run/halo/app/actuator/GlobalInfoEndpoint.java new file mode 100644 index 0000000..36ede07 --- /dev/null +++ b/application/src/main/java/run/halo/app/actuator/GlobalInfoEndpoint.java @@ -0,0 +1,171 @@ +package run.halo.app.actuator; + +import static org.apache.commons.lang3.BooleanUtils.isTrue; + +import java.net.URL; +import java.util.List; +import java.util.Locale; +import java.util.TimeZone; +import lombok.Data; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.beans.factory.ObjectProvider; +import org.springframework.boot.actuate.endpoint.annotation.ReadOperation; +import org.springframework.boot.actuate.endpoint.web.annotation.WebEndpoint; +import org.springframework.stereotype.Component; +import run.halo.app.extension.ConfigMap; +import run.halo.app.infra.InitializationStateGetter; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.SystemSetting.Basic; +import run.halo.app.infra.SystemSetting.Comment; +import run.halo.app.infra.SystemSetting.User; +import run.halo.app.infra.properties.HaloProperties; +import run.halo.app.security.AuthProviderService; + +@WebEndpoint(id = "globalinfo") +@Component +@RequiredArgsConstructor +public class GlobalInfoEndpoint { + + private final ObjectProvider systemConfigFetcher; + + private final HaloProperties haloProperties; + + private final AuthProviderService authProviderService; + + private final InitializationStateGetter initializationStateGetter; + + @ReadOperation + public GlobalInfo globalInfo() { + final var info = new GlobalInfo(); + info.setExternalUrl(haloProperties.getExternalUrl()); + info.setUseAbsolutePermalink(haloProperties.isUseAbsolutePermalink()); + info.setLocale(Locale.getDefault()); + info.setTimeZone(TimeZone.getDefault()); + info.setUserInitialized(initializationStateGetter.userInitialized() + .blockOptional().orElse(false)); + info.setDataInitialized(initializationStateGetter.dataInitialized() + .blockOptional().orElse(false)); + handleSocialAuthProvider(info); + systemConfigFetcher.ifAvailable(fetcher -> fetcher.getConfigMapBlocking() + .ifPresent(configMap -> { + handleCommentSetting(info, configMap); + handleUserSetting(info, configMap); + handleBasicSetting(info, configMap); + handlePostSlugGenerationStrategy(info, configMap); + })); + return info; + } + + @Data + public static class GlobalInfo { + private URL externalUrl; + + private boolean useAbsolutePermalink; + + private TimeZone timeZone; + + private Locale locale; + + private boolean allowComments; + + private boolean allowAnonymousComments; + + private boolean allowRegistration; + + private String favicon; + + private boolean userInitialized; + + private boolean dataInitialized; + + private String postSlugGenerationStrategy; + + private List socialAuthProviders; + + private Boolean mustVerifyEmailOnRegistration; + + private String siteTitle; + } + + @Data + public static class SocialAuthProvider { + private String name; + + private String displayName; + + private String description; + + private String logo; + + private String website; + + private String authenticationUrl; + + private String bindingUrl; + } + + private void handleCommentSetting(GlobalInfo info, ConfigMap configMap) { + var comment = SystemSetting.get(configMap, Comment.GROUP, Comment.class); + if (comment == null) { + info.setAllowComments(true); + info.setAllowAnonymousComments(true); + } else { + info.setAllowComments(comment.getEnable() != null && comment.getEnable()); + info.setAllowAnonymousComments( + comment.getSystemUserOnly() == null || !comment.getSystemUserOnly()); + } + } + + private void handleUserSetting(GlobalInfo info, ConfigMap configMap) { + var userSetting = SystemSetting.get(configMap, User.GROUP, User.class); + if (userSetting == null) { + info.setAllowRegistration(false); + info.setMustVerifyEmailOnRegistration(false); + } else { + info.setAllowRegistration( + userSetting.getAllowRegistration() != null && userSetting.getAllowRegistration()); + info.setMustVerifyEmailOnRegistration(userSetting.getMustVerifyEmailOnRegistration()); + } + } + + private void handlePostSlugGenerationStrategy(GlobalInfo info, ConfigMap configMap) { + var post = SystemSetting.get(configMap, SystemSetting.Post.GROUP, SystemSetting.Post.class); + if (post != null) { + info.setPostSlugGenerationStrategy(post.getSlugGenerationStrategy()); + } + } + + private void handleBasicSetting(GlobalInfo info, ConfigMap configMap) { + var basic = SystemSetting.get(configMap, Basic.GROUP, Basic.class); + if (basic != null) { + info.setFavicon(basic.getFavicon()); + info.setSiteTitle(basic.getTitle()); + } + } + + private void handleSocialAuthProvider(GlobalInfo info) { + List providers = authProviderService.listAll() + .map(listedAuthProviders -> listedAuthProviders.stream() + .filter(provider -> isTrue(provider.getEnabled())) + .filter(provider -> StringUtils.isNotBlank(provider.getBindingUrl())) + .map(provider -> { + SocialAuthProvider socialAuthProvider = new SocialAuthProvider(); + socialAuthProvider.setName(provider.getName()); + socialAuthProvider.setDisplayName(provider.getDisplayName()); + socialAuthProvider.setDescription(provider.getDescription()); + socialAuthProvider.setLogo(provider.getLogo()); + socialAuthProvider.setWebsite(provider.getWebsite()); + socialAuthProvider.setAuthenticationUrl(provider.getAuthenticationUrl()); + socialAuthProvider.setBindingUrl(provider.getBindingUrl()); + return socialAuthProvider; + }) + .toList() + ) + .block(); + + info.setSocialAuthProviders(providers); + } + +} diff --git a/application/src/main/java/run/halo/app/actuator/RestartEndpoint.java b/application/src/main/java/run/halo/app/actuator/RestartEndpoint.java new file mode 100644 index 0000000..02289ee --- /dev/null +++ b/application/src/main/java/run/halo/app/actuator/RestartEndpoint.java @@ -0,0 +1,77 @@ +package run.halo.app.actuator; + +import java.io.Closeable; +import java.io.IOException; +import java.util.Collections; +import lombok.extern.slf4j.Slf4j; +import org.springframework.boot.SpringApplication; +import org.springframework.boot.actuate.endpoint.annotation.WriteOperation; +import org.springframework.boot.actuate.endpoint.web.annotation.WebEndpoint; +import org.springframework.boot.context.event.ApplicationStartedEvent; +import org.springframework.context.ApplicationContext; +import org.springframework.context.ApplicationListener; +import org.springframework.context.ConfigurableApplicationContext; +import org.springframework.stereotype.Component; +import run.halo.app.Application; + +@WebEndpoint(id = "restart") +@Component +@Slf4j +public class RestartEndpoint implements ApplicationListener { + + private SpringApplication application; + + private String[] args; + + private ConfigurableApplicationContext context; + + @WriteOperation + public Object restart() { + var threadGroup = new ThreadGroup("RestartGroup"); + var thread = new Thread(threadGroup, this::doRestart, "restartMain"); + thread.setDaemon(false); + thread.setContextClassLoader(Application.class.getClassLoader()); + thread.start(); + return Collections.singletonMap("message", "Restarting"); + } + + private synchronized void doRestart() { + log.info("Restarting..."); + if (this.context != null) { + try { + closeRecursively(this.context); + var shutdownHandlers = SpringApplication.getShutdownHandlers(); + if (shutdownHandlers instanceof Runnable runnable) { + // clear closedContext in org.springframework.boot.SpringApplicationShutdownHook + runnable.run(); + } + this.context = this.application.run(args); + log.info("Restarted"); + } catch (Throwable t) { + log.error("Failed to restart.", t); + } + } + } + + private static void closeRecursively(ApplicationContext ctx) { + while (ctx != null) { + if (ctx instanceof Closeable closeable) { + try { + closeable.close(); + } catch (IOException e) { + log.error("Cannot close context: {}", ctx.getId(), e); + } + } + ctx = ctx.getParent(); + } + } + + @Override + public void onApplicationEvent(ApplicationStartedEvent event) { + if (this.context == null) { + this.application = event.getSpringApplication(); + this.args = event.getArgs(); + this.context = event.getApplicationContext(); + } + } +} diff --git a/application/src/main/java/run/halo/app/config/ExtensionConfiguration.java b/application/src/main/java/run/halo/app/config/ExtensionConfiguration.java new file mode 100644 index 0000000..b9133cd --- /dev/null +++ b/application/src/main/java/run/halo/app/config/ExtensionConfiguration.java @@ -0,0 +1,37 @@ +package run.halo.app.config; + +import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.SchemeManager; +import run.halo.app.extension.SchemeWatcherManager; +import run.halo.app.extension.controller.DefaultControllerManager; +import run.halo.app.extension.router.ExtensionCompositeRouterFunction; + +@Configuration(proxyBeanMethods = false) +public class ExtensionConfiguration { + + @Bean + RouterFunction extensionsRouterFunction(ReactiveExtensionClient client, + SchemeWatcherManager watcherManager, SchemeManager schemeManager) { + return new ExtensionCompositeRouterFunction(client, watcherManager, schemeManager); + } + + @Configuration(proxyBeanMethods = false) + @ConditionalOnProperty(name = "halo.extension.controller.disabled", + havingValue = "false", + matchIfMissing = true) + static class ExtensionControllerConfiguration { + + @Bean + DefaultControllerManager controllerManager(ExtensionClient client) { + return new DefaultControllerManager(client); + } + + } + +} diff --git a/application/src/main/java/run/halo/app/config/HaloConfiguration.java b/application/src/main/java/run/halo/app/config/HaloConfiguration.java new file mode 100644 index 0000000..b3fa4a0 --- /dev/null +++ b/application/src/main/java/run/halo/app/config/HaloConfiguration.java @@ -0,0 +1,37 @@ +package run.halo.app.config; + +import com.fasterxml.jackson.annotation.JsonInclude; +import com.fasterxml.jackson.databind.MapperFeature; +import java.io.IOException; +import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty; +import org.springframework.boot.autoconfigure.jackson.Jackson2ObjectMapperBuilderCustomizer; +import org.springframework.cache.annotation.EnableCaching; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.scheduling.annotation.EnableAsync; +import run.halo.app.infra.properties.HaloProperties; +import run.halo.app.search.lucene.LuceneSearchEngine; + +@EnableCaching +@Configuration(proxyBeanMethods = false) +@EnableAsync +public class HaloConfiguration { + + @Bean + Jackson2ObjectMapperBuilderCustomizer objectMapperCustomizer() { + return builder -> { + builder.serializationInclusion(JsonInclude.Include.NON_NULL); + builder.featuresToEnable(MapperFeature.ACCEPT_CASE_INSENSITIVE_ENUMS); + }; + } + + @Bean + @ConditionalOnProperty(prefix = "halo.search-engine.lucene", name = "enabled", + havingValue = "true", + matchIfMissing = true) + LuceneSearchEngine luceneSearchEngine(HaloProperties haloProperties) throws IOException { + return new LuceneSearchEngine(haloProperties.getWorkDir() + .resolve("indices") + .resolve("halo")); + } +} \ No newline at end of file diff --git a/application/src/main/java/run/halo/app/config/SwaggerConfig.java b/application/src/main/java/run/halo/app/config/SwaggerConfig.java new file mode 100644 index 0000000..5cd98b3 --- /dev/null +++ b/application/src/main/java/run/halo/app/config/SwaggerConfig.java @@ -0,0 +1,151 @@ +package run.halo.app.config; + +import static org.springdoc.core.utils.Constants.SPRINGDOC_ENABLED; + +import io.swagger.v3.core.converter.ModelConverter; +import io.swagger.v3.core.jackson.ModelResolver; +import io.swagger.v3.core.jackson.TypeNameResolver; +import io.swagger.v3.oas.models.Components; +import io.swagger.v3.oas.models.OpenAPI; +import io.swagger.v3.oas.models.info.Info; +import io.swagger.v3.oas.models.security.SecurityRequirement; +import io.swagger.v3.oas.models.security.SecurityScheme; +import java.util.Set; +import org.springdoc.core.customizers.GlobalOpenApiCustomizer; +import org.springdoc.core.models.GroupedOpenApi; +import org.springdoc.core.properties.SpringDocConfigProperties; +import org.springdoc.core.providers.ObjectMapperProvider; +import org.springframework.beans.factory.ObjectProvider; +import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty; +import org.springframework.boot.autoconfigure.condition.ConditionalOnWebApplication; +import org.springframework.boot.info.BuildProperties; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.core.Ordered; +import org.springframework.core.annotation.Order; +import run.halo.app.extension.router.JsonPatch; + +@Configuration +@ConditionalOnProperty(name = SPRINGDOC_ENABLED, matchIfMissing = true) +@ConditionalOnWebApplication +public class SwaggerConfig { + + @Bean + OpenAPI haloOpenApi(ObjectProvider buildPropertiesProvider, + SpringDocConfigProperties docConfigProperties) { + var buildProperties = buildPropertiesProvider.getIfAvailable(); + var version = "unknown"; + if (buildProperties != null) { + version = buildProperties.getVersion(); + } + return new OpenAPI() + .specVersion(docConfigProperties.getSpecVersion()) + // See https://swagger.io/docs/specification/authentication/ for more. + .components(new Components() + .addSecuritySchemes("basicAuth", new SecurityScheme() + .type(SecurityScheme.Type.HTTP) + .scheme("basic")) + .addSecuritySchemes("bearerAuth", new SecurityScheme() + .type(SecurityScheme.Type.HTTP) + .scheme("bearer") + .bearerFormat("JWT")) + ) + .addSecurityItem(new SecurityRequirement() + .addList("basicAuth") + .addList("bearerAuth")) + .info(new Info() + .title("Halo") + .version(version) + ); + } + + @Bean + GlobalOpenApiCustomizer openApiCustomizer() { + return openApi -> JsonPatch.addSchema(openApi.getComponents()); + } + + @Bean + GroupedOpenApi aggregatedV1alpha1Api() { + return GroupedOpenApi.builder() + .group("apis_aggregated.api_v1alpha1") + .displayName("Aggregated API V1alpha1") + .pathsToMatch( + "/apis/*/v1alpha1/**", + "/api/v1alpha1/**", + "/login/**" + ) + .build(); + } + + + @Bean + GroupedOpenApi publicV1alpha1Api() { + return GroupedOpenApi.builder() + .group("apis_public.api_v1alpha1") + .displayName("Public API V1alpha1") + .pathsToMatch( + "/apis/api.halo.run/**" + ) + .build(); + } + + @Bean + GroupedOpenApi consoleV1alpha1Api() { + return GroupedOpenApi.builder() + .group("apis_console.api_v1alpha1") + .displayName("Console API V1alpha1") + .pathsToMatch( + "/apis/console.api.*/v1alpha1/**", + "/apis/api.console.halo.run/v1alpha1/**" + ) + .build(); + } + + + @Bean + GroupedOpenApi ucV1alpha1Api() { + return GroupedOpenApi.builder() + .group("apis_uc.api_v1alpha1") + .displayName("User-center API V1alpha1") + .pathsToMatch( + "/apis/uc.api.*/v1alpha1/**" + ) + .build(); + } + + + @Bean + GroupedOpenApi extensionV1alpha1Api() { + return GroupedOpenApi.builder() + .group("apis_extension.api_v1alpha1") + .displayName("Extension API V1alpha1") + .pathsToMatch( + "/api/v1alpha1/**", + "/apis/content.halo.run/v1alpha1/**", + "/apis/theme.halo.run/v1alpha1/**", + "/apis/security.halo.run/v1alpha1/**", + "/apis/migration.halo.run/v1alpha1/**", + "/apis/auth.halo.run/v1alpha1/**", + "/apis/metrics.halo.run/v1alpha1/**", + "/apis/storage.halo.run/v1alpha1/**", + "/apis/plugin.halo.run/v1alpha1/**" + ) + .build(); + } + + @Bean + @Order(Ordered.HIGHEST_PRECEDENCE) + ModelConverter customModelConverter(ObjectMapperProvider objectMapperProvider) { + return new ModelResolver(objectMapperProvider.jsonMapper(), new CustomTypeNameResolver()); + } + + static class CustomTypeNameResolver extends TypeNameResolver { + @Override + protected String nameForClass(Class cls, Set options) { + // Obey the rule of keys that match the regular expression ^[a-zA-Z0-9\.\-_]+$. + // See https://spec.openapis.org/oas/v3.0.3#fixed-fields-5 for more. + return super.nameForClass(cls, options).replaceAll("\\$", "."); + } + } + +} diff --git a/application/src/main/java/run/halo/app/config/WebFluxConfig.java b/application/src/main/java/run/halo/app/config/WebFluxConfig.java new file mode 100644 index 0000000..1a864ca --- /dev/null +++ b/application/src/main/java/run/halo/app/config/WebFluxConfig.java @@ -0,0 +1,239 @@ +package run.halo.app.config; + +import static org.springframework.util.ResourceUtils.FILE_URL_PREFIX; +import static org.springframework.web.reactive.function.server.RequestPredicates.accept; +import static org.springframework.web.reactive.function.server.RequestPredicates.method; +import static org.springframework.web.reactive.function.server.RequestPredicates.path; +import static org.springframework.web.reactive.function.server.RouterFunctions.route; +import static run.halo.app.infra.utils.FileUtils.checkDirectoryTraversal; + +import com.fasterxml.jackson.databind.ObjectMapper; +import java.util.List; +import java.util.Objects; +import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty; +import org.springframework.boot.autoconfigure.web.WebProperties; +import org.springframework.context.ApplicationContext; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.core.annotation.Order; +import org.springframework.http.CacheControl; +import org.springframework.http.HttpMethod; +import org.springframework.http.MediaType; +import org.springframework.http.codec.CodecConfigurer; +import org.springframework.http.codec.HttpMessageWriter; +import org.springframework.http.codec.ServerCodecConfigurer; +import org.springframework.http.codec.json.Jackson2JsonDecoder; +import org.springframework.http.codec.json.Jackson2JsonEncoder; +import org.springframework.lang.NonNull; +import org.springframework.web.reactive.config.ResourceHandlerRegistration; +import org.springframework.web.reactive.config.ResourceHandlerRegistry; +import org.springframework.web.reactive.config.WebFluxConfigurer; +import org.springframework.web.reactive.function.BodyInserters; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.reactive.resource.EncodedResourceResolver; +import org.springframework.web.reactive.resource.PathResourceResolver; +import org.springframework.web.reactive.result.view.ViewResolutionResultHandler; +import org.springframework.web.reactive.result.view.ViewResolver; +import reactor.core.publisher.Mono; +import run.halo.app.console.ProxyFilter; +import run.halo.app.console.WebSocketRequestPredicate; +import run.halo.app.core.endpoint.WebSocketHandlerMapping; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.core.extension.endpoint.CustomEndpointsBuilder; +import run.halo.app.infra.properties.AttachmentProperties; +import run.halo.app.infra.properties.HaloProperties; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.webfilter.AdditionalWebFilterChainProxy; + +@Configuration +public class WebFluxConfig implements WebFluxConfigurer { + + private final ObjectMapper objectMapper; + + private final HaloProperties haloProp; + + private final WebProperties.Resources resourceProperties; + + private final ApplicationContext applicationContext; + + public WebFluxConfig(ObjectMapper objectMapper, + HaloProperties haloProp, + WebProperties webProperties, + ApplicationContext applicationContext) { + this.objectMapper = objectMapper; + this.haloProp = haloProp; + this.resourceProperties = webProperties.getResources(); + this.applicationContext = applicationContext; + } + + @Bean + ServerResponse.Context context(CodecConfigurer codec, + ViewResolutionResultHandler resultHandler) { + return new ServerResponse.Context() { + @Override + @NonNull + public List> messageWriters() { + return codec.getWriters(); + } + + @Override + @NonNull + public List viewResolvers() { + return resultHandler.getViewResolvers(); + } + }; + } + + @Override + public void configureHttpMessageCodecs(ServerCodecConfigurer configurer) { + // we need to customize the Jackson2Json[Decoder][Encoder] here to serialize and + // deserialize special types, e.g.: Instant, LocalDateTime. So we use ObjectMapper + // created by outside. + configurer.defaultCodecs().jackson2JsonDecoder(new Jackson2JsonDecoder(objectMapper)); + configurer.defaultCodecs().jackson2JsonEncoder(new Jackson2JsonEncoder(objectMapper)); + } + + @Bean + RouterFunction customEndpoints(ApplicationContext context) { + var builder = new CustomEndpointsBuilder(); + context.getBeansOfType(CustomEndpoint.class).values().forEach(builder::add); + return builder.build(); + } + + @Bean + public WebSocketHandlerMapping webSocketHandlerMapping() { + WebSocketHandlerMapping handlerMapping = new WebSocketHandlerMapping(); + handlerMapping.setOrder(-2); + return handlerMapping; + } + + @Bean + RouterFunction consoleIndexRedirection() { + var consolePredicate = method(HttpMethod.GET) + .and(path("/console/**").and(path("/console/assets/**").negate())) + .and(accept(MediaType.TEXT_HTML)) + .and(new WebSocketRequestPredicate().negate()); + return route(consolePredicate, + request -> this.serveIndex(haloProp.getConsole().getLocation() + "index.html")); + } + + @Bean + RouterFunction ucIndexRedirect() { + var consolePredicate = method(HttpMethod.GET) + .and(path("/uc/**").and(path("/uc/assets/**").negate())) + .and(accept(MediaType.TEXT_HTML)) + .and(new WebSocketRequestPredicate().negate()); + return route(consolePredicate, + request -> this.serveIndex(haloProp.getUc().getLocation() + "index.html")); + } + + private Mono serveIndex(String indexLocation) { + var indexResource = applicationContext.getResource(indexLocation); + try { + return ServerResponse.ok() + .cacheControl(CacheControl.noStore()) + .body(BodyInserters.fromResource(indexResource)); + } catch (Throwable e) { + return Mono.error(e); + } + } + + @Override + public void addResourceHandlers(ResourceHandlerRegistry registry) { + var attachmentsRoot = haloProp.getWorkDir().resolve("attachments"); + var cacheControl = resourceProperties.getCache() + .getCachecontrol() + .toHttpCacheControl(); + if (cacheControl == null) { + cacheControl = CacheControl.empty(); + } + final var useLastModified = resourceProperties.getCache().isUseLastModified(); + + // Mandatory resource mapping + var uploadRegistration = registry.addResourceHandler("/upload/**") + .addResourceLocations(FILE_URL_PREFIX + attachmentsRoot.resolve("upload") + "/") + .setUseLastModified(useLastModified) + .setCacheControl(cacheControl); + + // For console assets + registry.addResourceHandler("/console/assets/**") + .addResourceLocations(haloProp.getConsole().getLocation() + "assets/") + .setCacheControl(cacheControl) + .setUseLastModified(useLastModified) + .resourceChain(true) + .addResolver(new EncodedResourceResolver()) + .addResolver(new PathResourceResolver()); + + // For uc assets + registry.addResourceHandler("/uc/assets/**") + .addResourceLocations(haloProp.getUc().getLocation() + "assets/") + .setCacheControl(cacheControl) + .setUseLastModified(useLastModified) + .resourceChain(true) + .addResolver(new EncodedResourceResolver()) + .addResolver(new PathResourceResolver()); + + // Additional resource mappings + var staticResources = haloProp.getAttachment().getResourceMappings(); + for (AttachmentProperties.ResourceMapping staticResource : staticResources) { + ResourceHandlerRegistration registration; + if (Objects.equals(staticResource.getPathPattern(), "/upload/**")) { + registration = uploadRegistration; + } else { + registration = registry.addResourceHandler(staticResource.getPathPattern()) + .setCacheControl(cacheControl) + .setUseLastModified(useLastModified); + } + for (String location : staticResource.getLocations()) { + var path = attachmentsRoot.resolve(location); + checkDirectoryTraversal(attachmentsRoot, path); + registration.addResourceLocations(FILE_URL_PREFIX + path + "/"); + } + } + + var haloStaticPath = haloProp.getWorkDir().resolve("static"); + registry.addResourceHandler("/**") + .addResourceLocations(FILE_URL_PREFIX + haloStaticPath + "/") + .addResourceLocations(resourceProperties.getStaticLocations()) + .setCacheControl(cacheControl) + .setUseLastModified(useLastModified) + .resourceChain(true) + .addResolver(new EncodedResourceResolver()) + .addResolver(new PathResourceResolver()); + } + + + @ConditionalOnProperty(name = "halo.console.proxy.enabled", havingValue = "true") + @Bean + ProxyFilter consoleProxyFilter() { + return new ProxyFilter("/console/**", haloProp.getConsole().getProxy()); + } + + + @ConditionalOnProperty(name = "halo.uc.proxy.enabled", havingValue = "true") + @Bean + ProxyFilter ucProxyFilter() { + return new ProxyFilter("/uc/**", haloProp.getUc().getProxy()); + } + + /** + * Create a WebFilterChainProxy for all AdditionalWebFilters. + * + *

The reason why the order is -101 is that the current + * AdditionalWebFilterChainProxy should be executed before WebFilterChainProxy + * and the order of WebFilterChainProxy is -100. + * + *

See {@code org.springframework.security.config.annotation.web.reactive + * .WebFluxSecurityConfiguration#WEB_FILTER_CHAIN_FILTER_ORDER} for more + * + * @param extensionGetter extension getter. + * @return additional web filter chain proxy. + */ + @Bean + @Order(-101) + AdditionalWebFilterChainProxy additionalWebFilterChainProxy(ExtensionGetter extensionGetter) { + return new AdditionalWebFilterChainProxy(extensionGetter); + } + +} diff --git a/application/src/main/java/run/halo/app/config/WebServerSecurityConfig.java b/application/src/main/java/run/halo/app/config/WebServerSecurityConfig.java new file mode 100644 index 0000000..06c1917 --- /dev/null +++ b/application/src/main/java/run/halo/app/config/WebServerSecurityConfig.java @@ -0,0 +1,153 @@ +package run.halo.app.config; + +import static org.springframework.security.config.Customizer.withDefaults; +import static org.springframework.security.web.server.authentication.ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver.builder; +import static org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers.pathMatchers; + +import java.util.concurrent.ConcurrentHashMap; +import lombok.RequiredArgsConstructor; +import org.springframework.beans.factory.ObjectProvider; +import org.springframework.boot.autoconfigure.session.SessionProperties; +import org.springframework.boot.autoconfigure.web.ServerProperties; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity; +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.crypto.factory.PasswordEncoderFactories; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.web.server.SecurityWebFilterChain; +import org.springframework.security.web.server.context.ServerSecurityContextRepository; +import org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository; +import org.springframework.session.MapSession; +import org.springframework.session.config.annotation.web.server.EnableSpringWebSession; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.core.extension.service.RoleService; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.AnonymousUserConst; +import run.halo.app.infra.properties.HaloProperties; +import run.halo.app.security.DefaultUserDetailService; +import run.halo.app.security.authentication.CryptoService; +import run.halo.app.security.authentication.SecurityConfigurer; +import run.halo.app.security.authentication.impl.RsaKeyService; +import run.halo.app.security.authentication.login.PublicKeyRouteBuilder; +import run.halo.app.security.authentication.pat.PatAuthenticationManager; +import run.halo.app.security.authentication.pat.PatServerWebExchangeMatcher; +import run.halo.app.security.authentication.twofactor.TwoFactorAuthorizationManager; +import run.halo.app.security.authorization.RequestInfoAuthorizationManager; +import run.halo.app.security.session.InMemoryReactiveIndexedSessionRepository; +import run.halo.app.security.session.ReactiveIndexedSessionRepository; + +/** + * Security configuration for WebFlux. + * + * @author johnniang + */ +@Configuration +@EnableSpringWebSession +@EnableWebFluxSecurity +@RequiredArgsConstructor +public class WebServerSecurityConfig { + + @Bean + SecurityWebFilterChain filterChain(ServerHttpSecurity http, + RoleService roleService, + ObjectProvider securityConfigurers, + ServerSecurityContextRepository securityContextRepository, + ReactiveExtensionClient client, + CryptoService cryptoService, + HaloProperties haloProperties) { + + http.securityMatcher(pathMatchers("/**")) + .authorizeExchange(spec -> spec.pathMatchers( + "/api/**", + "/apis/**", + "/oauth2/**", + "/login/**", + "/logout", + "/actuator/**" + ) + .access( + new TwoFactorAuthorizationManager( + new RequestInfoAuthorizationManager(roleService) + ) + ) + .anyExchange().permitAll()) + .anonymous(spec -> { + spec.authorities(AnonymousUserConst.Role); + spec.principal(AnonymousUserConst.PRINCIPAL); + }) + .securityContextRepository(securityContextRepository) + .httpBasic(withDefaults()) + .oauth2ResourceServer(oauth2 -> { + var authManagerResolver = builder().add( + new PatServerWebExchangeMatcher(), + new PatAuthenticationManager(client, cryptoService) + ) + // TODO Add other authentication mangers here. e.g.: JwtAuthenticationManager. + .build(); + oauth2.authenticationManagerResolver(authManagerResolver); + }) + .headers(headerSpec -> headerSpec + .frameOptions(frameSpec -> { + var frameOptions = haloProperties.getSecurity().getFrameOptions(); + frameSpec.mode(frameOptions.getMode()); + if (frameOptions.isDisabled()) { + frameSpec.disable(); + } + }) + .referrerPolicy(referrerPolicySpec -> referrerPolicySpec.policy( + haloProperties.getSecurity().getReferrerOptions().getPolicy()) + ) + .hsts(hstsSpec -> hstsSpec.includeSubdomains(false)) + ); + + // Integrate with other configurers separately + securityConfigurers.orderedStream() + .forEach(securityConfigurer -> securityConfigurer.configure(http)); + return http.build(); + } + + @Bean + ServerSecurityContextRepository securityContextRepository() { + return new WebSessionServerSecurityContextRepository(); + } + + @Bean + public ReactiveIndexedSessionRepository reactiveSessionRepository( + SessionProperties sessionProperties, + ServerProperties serverProperties) { + var repository = new InMemoryReactiveIndexedSessionRepository(new ConcurrentHashMap<>()); + var timeout = sessionProperties.determineTimeout( + () -> serverProperties.getReactive().getSession().getTimeout()); + repository.setDefaultMaxInactiveInterval(timeout); + return repository; + } + + @Bean + DefaultUserDetailService userDetailsService(UserService userService, + RoleService roleService, + HaloProperties haloProperties) { + var userDetailService = new DefaultUserDetailService(userService, roleService); + var twoFactorAuthDisabled = haloProperties.getSecurity().getTwoFactorAuth().isDisabled(); + userDetailService.setTwoFactorAuthDisabled(twoFactorAuthDisabled); + return userDetailService; + } + + @Bean + PasswordEncoder passwordEncoder() { + return PasswordEncoderFactories.createDelegatingPasswordEncoder(); + } + + @Bean + RouterFunction publicKeyRoute(CryptoService cryptoService) { + return new PublicKeyRouteBuilder(cryptoService).build(); + } + + @Bean + CryptoService cryptoService(HaloProperties haloProperties) { + return new RsaKeyService(haloProperties.getWorkDir().resolve("keys")); + } + +} diff --git a/application/src/main/java/run/halo/app/console/ProxyFilter.java b/application/src/main/java/run/halo/app/console/ProxyFilter.java new file mode 100644 index 0000000..854d810 --- /dev/null +++ b/application/src/main/java/run/halo/app/console/ProxyFilter.java @@ -0,0 +1,71 @@ +package run.halo.app.console; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.http.HttpMethod; +import org.springframework.security.web.server.util.matcher.AndServerWebExchangeMatcher; +import org.springframework.security.web.server.util.matcher.NegatedServerWebExchangeMatcher; +import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher; +import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers; +import org.springframework.web.reactive.function.client.WebClient; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.WebFilter; +import org.springframework.web.server.WebFilterChain; +import org.springframework.web.util.UriComponentsBuilder; +import reactor.core.publisher.Mono; +import run.halo.app.infra.properties.ProxyProperties; + +@Slf4j +public class ProxyFilter implements WebFilter { + + private final ProxyProperties proxyProperties; + + private final ServerWebExchangeMatcher consoleMatcher; + + private final WebClient webClient; + + public ProxyFilter(String pattern, ProxyProperties proxyProperties) { + this.proxyProperties = proxyProperties; + var consoleMatcher = ServerWebExchangeMatchers.pathMatchers(HttpMethod.GET, pattern); + consoleMatcher = new AndServerWebExchangeMatcher(consoleMatcher, + new NegatedServerWebExchangeMatcher(new WebSocketServerWebExchangeMatcher())); + this.consoleMatcher = consoleMatcher; + this.webClient = WebClient.create(proxyProperties.getEndpoint().toString()); + log.debug("Initialized ProxyFilter to proxy {} to endpoint {}", pattern, + proxyProperties.getEndpoint()); + } + + @Override + public Mono filter(ServerWebExchange exchange, WebFilterChain chain) { + return consoleMatcher.matches(exchange) + .filter(ServerWebExchangeMatcher.MatchResult::isMatch) + .switchIfEmpty(chain.filter(exchange).then(Mono.empty())) + .map(matchResult -> { + var request = exchange.getRequest(); + return UriComponentsBuilder.fromUriString( + request.getPath().pathWithinApplication().value()) + .queryParams(request.getQueryParams()) + .build() + .toUriString(); + }) + .doOnNext(uri -> { + if (log.isTraceEnabled()) { + log.trace("Proxy {} to {}", uri, proxyProperties.getEndpoint()); + } + }) + .flatMap(uri -> webClient.get() + .uri(uri) + .headers(httpHeaders -> httpHeaders.addAll(exchange.getRequest().getHeaders())) + .exchangeToMono(clientResponse -> { + var response = exchange.getResponse(); + // set headers + response.getHeaders().putAll(clientResponse.headers().asHttpHeaders()); + // set cookies + response.getCookies().putAll(clientResponse.cookies()); + // set status code + response.setStatusCode(clientResponse.statusCode()); + var body = clientResponse.bodyToFlux(DataBuffer.class); + return exchange.getResponse().writeWith(body); + })); + } +} diff --git a/application/src/main/java/run/halo/app/console/WebSocketRequestPredicate.java b/application/src/main/java/run/halo/app/console/WebSocketRequestPredicate.java new file mode 100644 index 0000000..647f98e --- /dev/null +++ b/application/src/main/java/run/halo/app/console/WebSocketRequestPredicate.java @@ -0,0 +1,15 @@ +package run.halo.app.console; + +import static run.halo.app.console.WebSocketUtils.isWebSocketUpgrade; + +import org.springframework.web.reactive.function.server.RequestPredicate; +import org.springframework.web.reactive.function.server.ServerRequest; + +public class WebSocketRequestPredicate implements RequestPredicate { + + @Override + public boolean test(ServerRequest request) { + var httpHeaders = request.exchange().getRequest().getHeaders(); + return isWebSocketUpgrade(httpHeaders); + } +} diff --git a/application/src/main/java/run/halo/app/console/WebSocketServerWebExchangeMatcher.java b/application/src/main/java/run/halo/app/console/WebSocketServerWebExchangeMatcher.java new file mode 100644 index 0000000..17bdbde --- /dev/null +++ b/application/src/main/java/run/halo/app/console/WebSocketServerWebExchangeMatcher.java @@ -0,0 +1,16 @@ +package run.halo.app.console; + +import static org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher.MatchResult.match; +import static org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher.MatchResult.notMatch; +import static run.halo.app.console.WebSocketUtils.isWebSocketUpgrade; + +import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +public class WebSocketServerWebExchangeMatcher implements ServerWebExchangeMatcher { + @Override + public Mono matches(ServerWebExchange exchange) { + return isWebSocketUpgrade(exchange.getRequest().getHeaders()) ? match() : notMatch(); + } +} diff --git a/application/src/main/java/run/halo/app/console/WebSocketUtils.java b/application/src/main/java/run/halo/app/console/WebSocketUtils.java new file mode 100644 index 0000000..29ba096 --- /dev/null +++ b/application/src/main/java/run/halo/app/console/WebSocketUtils.java @@ -0,0 +1,20 @@ +package run.halo.app.console; + +import java.util.Objects; +import org.springframework.http.HttpHeaders; + +public enum WebSocketUtils { + ; + + public static boolean isWebSocketUpgrade(HttpHeaders headers) { + // See io.netty.handler.codec.http.websocketx.extensions.WebSocketExtensionUtil + // .isWebsocketUpgrade for more. + var upgradeConnection = headers.getConnection().stream().map(String::toLowerCase) + .anyMatch(conn -> Objects.equals(conn, "upgrade")); + + return headers.containsKey(HttpHeaders.UPGRADE) + && upgradeConnection + && "websocket".equalsIgnoreCase(headers.getUpgrade()); + } + +} diff --git a/application/src/main/java/run/halo/app/content/AbstractContentService.java b/application/src/main/java/run/halo/app/content/AbstractContentService.java new file mode 100644 index 0000000..f5c4746 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/AbstractContentService.java @@ -0,0 +1,194 @@ +package run.halo.app.content; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import java.security.Principal; +import java.time.Duration; +import java.time.Instant; +import java.util.UUID; +import lombok.AllArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.data.domain.Sort; +import org.springframework.lang.Nullable; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.util.Assert; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Ref; +import run.halo.app.extension.router.selector.FieldSelector; + +/** + * Abstract Service for {@link Snapshot}. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@AllArgsConstructor +public abstract class AbstractContentService { + + private final ReactiveExtensionClient client; + + public Mono getContent(String snapshotName, String baseSnapshotName) { + if (StringUtils.isBlank(snapshotName) || StringUtils.isBlank(baseSnapshotName)) { + return Mono.empty(); + } + // TODO: refactor this method to use client.get instead of fetch but please be careful + return client.fetch(Snapshot.class, baseSnapshotName) + .doOnNext(this::checkBaseSnapshot) + .flatMap(baseSnapshot -> { + if (StringUtils.equals(snapshotName, baseSnapshotName)) { + var contentWrapper = ContentWrapper.patchSnapshot(baseSnapshot, baseSnapshot); + return Mono.just(contentWrapper); + } + return client.fetch(Snapshot.class, snapshotName) + .map(snapshot -> ContentWrapper.patchSnapshot(snapshot, baseSnapshot)); + }) + .switchIfEmpty(Mono.defer(() -> { + log.error("The content snapshot [{}] or base snapshot [{}] not found.", + snapshotName, baseSnapshotName); + return Mono.empty(); + })); + } + + protected void checkBaseSnapshot(Snapshot snapshot) { + Assert.notNull(snapshot, "The snapshot must not be null."); + if (!Snapshot.isBaseSnapshot(snapshot)) { + throw new IllegalArgumentException( + String.format("The snapshot [%s] is not a base snapshot.", + snapshot.getMetadata().getName())); + } + } + + protected Mono draftContent(@Nullable String baseSnapshotName, + ContentRequest contentRequest, + @Nullable String parentSnapshotName) { + return create(baseSnapshotName, contentRequest, parentSnapshotName) + .flatMap(head -> { + String baseSnapshotNameToUse = + StringUtils.defaultIfBlank(baseSnapshotName, head.getMetadata().getName()); + return restoredContent(baseSnapshotNameToUse, head); + }); + } + + protected Mono draftContent(String baseSnapshotName, ContentRequest content) { + return this.draftContent(baseSnapshotName, content, content.headSnapshotName()); + } + + private Mono create(@Nullable String baseSnapshotName, + ContentRequest contentRequest, + @Nullable String parentSnapshotName) { + Snapshot snapshot = contentRequest.toSnapshot(); + snapshot.getMetadata().setName(UUID.randomUUID().toString()); + snapshot.getSpec().setParentSnapshotName(parentSnapshotName); + + return client.fetch(Snapshot.class, baseSnapshotName) + .doOnNext(this::checkBaseSnapshot) + .defaultIfEmpty(snapshot) + .map(baseSnapshot -> determineRawAndContentPatch(snapshot, baseSnapshot, + contentRequest) + ) + .flatMap(source -> getContextUsername() + .doOnNext(username -> { + Snapshot.addContributor(source, username); + source.getSpec().setOwner(username); + }) + .thenReturn(source) + ) + .flatMap(client::create); + } + + protected Mono updateContent(String baseSnapshotName, + ContentRequest contentRequest) { + Assert.notNull(contentRequest, "The contentRequest must not be null"); + Assert.notNull(baseSnapshotName, "The baseSnapshotName must not be null"); + Assert.notNull(contentRequest.headSnapshotName(), "The headSnapshotName must not be null"); + return Mono.defer(() -> client.fetch(Snapshot.class, contentRequest.headSnapshotName()) + .flatMap(headSnapshot -> { + var oldVersion = contentRequest.version(); + var version = headSnapshot.getMetadata().getVersion(); + if (hasConflict(oldVersion, version)) { + // draft a new snapshot as the head snapshot + return create(baseSnapshotName, contentRequest, + contentRequest.headSnapshotName()); + } + return Mono.just(headSnapshot); + }) + .flatMap(headSnapshot -> client.fetch(Snapshot.class, baseSnapshotName) + .map(baseSnapshot -> determineRawAndContentPatch(headSnapshot, + baseSnapshot, contentRequest)) + ) + .flatMap(headSnapshot -> getContextUsername() + .doOnNext(username -> Snapshot.addContributor(headSnapshot, username)) + .thenReturn(headSnapshot) + ) + .flatMap(client::update) + ) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(throwable -> throwable instanceof OptimisticLockingFailureException)) + .flatMap(head -> restoredContent(baseSnapshotName, head)); + } + + protected Flux listSnapshotsBy(Ref ref) { + var snapshotListOptions = new ListOptions(); + var query = and(isNull("metadata.deletionTimestamp"), + equal("spec.subjectRef", Snapshot.toSubjectRefKey(ref))); + snapshotListOptions.setFieldSelector(FieldSelector.of(query)); + var sort = Sort.by("metadata.creationTimestamp", "metadata.name").descending(); + return client.listAll(Snapshot.class, snapshotListOptions, sort); + } + + boolean hasConflict(Long oldVersion, Long newVersion) { + return oldVersion != null && !newVersion.equals(oldVersion); + } + + protected Mono restoredContent(String baseSnapshotName, Snapshot headSnapshot) { + return client.fetch(Snapshot.class, baseSnapshotName) + .doOnNext(this::checkBaseSnapshot) + .map(baseSnapshot -> ContentWrapper.patchSnapshot(headSnapshot, baseSnapshot)); + } + + protected Snapshot determineRawAndContentPatch(Snapshot snapshotToUse, + Snapshot baseSnapshot, + ContentRequest contentRequest) { + Assert.notNull(baseSnapshot, "The baseSnapshot must not be null."); + Assert.notNull(contentRequest, "The contentRequest must not be null."); + Assert.notNull(snapshotToUse, "The snapshotToUse not be null."); + String originalRaw = baseSnapshot.getSpec().getRawPatch(); + String originalContent = baseSnapshot.getSpec().getContentPatch(); + String baseSnapshotName = baseSnapshot.getMetadata().getName(); + + snapshotToUse.getSpec().setLastModifyTime(Instant.now()); + // it is the v1 snapshot, set the content directly + if (StringUtils.equals(baseSnapshotName, + snapshotToUse.getMetadata().getName())) { + snapshotToUse.getSpec().setRawPatch(contentRequest.raw()); + snapshotToUse.getSpec().setContentPatch(contentRequest.content()); + MetadataUtil.nullSafeAnnotations(snapshotToUse) + .put(Snapshot.KEEP_RAW_ANNO, Boolean.TRUE.toString()); + } else { + // otherwise diff a patch based on the v1 snapshot + String revisedRaw = contentRequest.rawPatchFrom(originalRaw); + String revisedContent = contentRequest.contentPatchFrom(originalContent); + snapshotToUse.getSpec().setRawPatch(revisedRaw); + snapshotToUse.getSpec().setContentPatch(revisedContent); + } + return snapshotToUse; + } + + protected Mono getContextUsername() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Principal::getName); + } +} diff --git a/application/src/main/java/run/halo/app/content/AbstractEventReconciler.java b/application/src/main/java/run/halo/app/content/AbstractEventReconciler.java new file mode 100644 index 0000000..1a34719 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/AbstractEventReconciler.java @@ -0,0 +1,62 @@ +package run.halo.app.content; + +import java.time.Duration; +import java.time.Instant; +import org.springframework.context.SmartLifecycle; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.DefaultController; +import run.halo.app.extension.controller.DefaultQueue; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.RequestQueue; + +/** + * An abstract class for reconciling events. + * + * @author guqing + * @since 2.15.0 + */ +public abstract class AbstractEventReconciler implements Reconciler, SmartLifecycle { + protected final RequestQueue queue; + + protected final Controller controller; + + protected volatile boolean running = false; + + private final String controllerName; + + protected AbstractEventReconciler(String controllerName) { + this.controllerName = controllerName; + this.queue = new DefaultQueue<>(Instant::now); + this.controller = this.setupWith(null); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return new DefaultController<>( + controllerName, + this, + queue, + null, + Duration.ofMillis(100), + Duration.ofMinutes(10) + ); + } + + @Override + public void start() { + controller.start(); + running = true; + } + + @Override + public void stop() { + running = false; + controller.dispose(); + } + + @Override + public boolean isRunning() { + return running; + } +} diff --git a/application/src/main/java/run/halo/app/content/CategoryPostCountUpdater.java b/application/src/main/java/run/halo/app/content/CategoryPostCountUpdater.java new file mode 100644 index 0000000..0c7c714 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/CategoryPostCountUpdater.java @@ -0,0 +1,163 @@ +package run.halo.app.content; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import com.google.common.collect.Sets; +import java.util.Collection; +import java.util.List; +import java.util.Optional; +import java.util.Set; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.event.EventListener; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Post; +import run.halo.app.event.post.PostDeletedEvent; +import run.halo.app.event.post.PostUpdatedEvent; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; +import run.halo.app.infra.utils.JsonUtils; + +/** + * A class used to update the post count of the category when the post changes. + * + * @author guqing + * @since 2.15.0 + */ +@Component +public class CategoryPostCountUpdater + extends AbstractEventReconciler { + + protected final ExtensionClient client; + private final CategoryPostCountService categoryPostCountService; + + public CategoryPostCountUpdater(ExtensionClient client) { + super(CategoryPostCountUpdater.class.getName()); + this.client = client; + this.categoryPostCountService = new CategoryPostCountService(client); + } + + @Override + public Result reconcile(PostRelatedCategories request) { + var categoryChanges = request.categoryChanges(); + + categoryPostCountService.recalculatePostCount(categoryChanges); + + client.fetch(Post.class, request.postName()).ifPresent(post -> { + var categories = defaultIfNull(post.getSpec().getCategories(), List.of()); + var annotations = MetadataUtil.nullSafeAnnotations(post); + var categoryAnno = JsonUtils.objectToJson(categories); + var oldCategoryAnno = annotations.get(Post.LAST_ASSOCIATED_CATEGORIES_ANNO); + + if (!categoryAnno.equals(oldCategoryAnno)) { + annotations.put(Post.LAST_ASSOCIATED_CATEGORIES_ANNO, categoryAnno); + client.update(post); + } + }); + return Result.doNotRetry(); + } + + static class CategoryPostCountService { + + private final ExtensionClient client; + + public CategoryPostCountService(ExtensionClient client) { + this.client = client; + } + + public void recalculatePostCount(Collection categoryNames) { + for (String categoryName : categoryNames) { + recalculatePostCount(categoryName); + } + } + + public void recalculatePostCount(String categoryName) { + var totalPostCount = countTotalPosts(categoryName); + var visiblePostCount = countVisiblePosts(categoryName); + client.fetch(Category.class, categoryName).ifPresent(category -> { + category.getStatusOrDefault().setPostCount(totalPostCount); + category.getStatusOrDefault().setVisiblePostCount(visiblePostCount); + + client.update(category); + }); + } + + private int countTotalPosts(String categoryName) { + var postListOptions = new ListOptions(); + postListOptions.setFieldSelector(FieldSelector.of( + basePostQuery(categoryName) + )); + return (int) client.listBy(Post.class, postListOptions, PageRequestImpl.ofSize(1)) + .getTotal(); + } + + private int countVisiblePosts(String categoryName) { + var postListOptions = new ListOptions(); + var fieldQuery = and(basePostQuery(categoryName), + equal("spec.visible", Post.VisibleEnum.PUBLIC.name()) + ); + var labelSelector = LabelSelector.builder() + .eq(Post.PUBLISHED_LABEL, BooleanUtils.TRUE) + .build(); + postListOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + postListOptions.setLabelSelector(labelSelector); + return (int) client.listBy(Post.class, postListOptions, PageRequestImpl.ofSize(1)) + .getTotal(); + } + + private static Query basePostQuery(String categoryName) { + return and(isNull("metadata.deletionTimestamp"), + equal("spec.deleted", BooleanUtils.FALSE), + equal("spec.categories", categoryName) + ); + } + } + + public record PostRelatedCategories(String postName, Collection categoryChanges) { + } + + @EventListener(PostUpdatedEvent.class) + public void onPostUpdated(PostUpdatedEvent event) { + var postName = event.getName(); + var changes = calcCategoriesToUpdate(event.getName()); + queue.addImmediately(new PostRelatedCategories(postName, changes)); + } + + @EventListener(PostDeletedEvent.class) + public void onPostDeleted(PostDeletedEvent event) { + var postName = event.getName(); + var categories = defaultIfNull(event.getPost().getSpec().getCategories(), + List.of()); + queue.addImmediately(new PostRelatedCategories(postName, categories)); + } + + private Set calcCategoriesToUpdate(String postName) { + return client.fetch(Post.class, postName) + .map(post -> { + var annotations = MetadataUtil.nullSafeAnnotations(post); + var oldCategories = + Optional.ofNullable(annotations.get(Post.LAST_ASSOCIATED_CATEGORIES_ANNO)) + .filter(StringUtils::isNotBlank) + .map(categoriesJson -> JsonUtils.jsonToObject(categoriesJson, + String[].class)) + .orElse(new String[0]); + + Set categoriesToUpdate = Sets.newHashSet(oldCategories); + var newCategories = post.getSpec().getCategories(); + if (newCategories != null) { + categoriesToUpdate.addAll(newCategories); + } + return categoriesToUpdate; + }) + .orElse(Set.of()); + } +} diff --git a/application/src/main/java/run/halo/app/content/CategoryService.java b/application/src/main/java/run/halo/app/content/CategoryService.java new file mode 100644 index 0000000..36f14e5 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/CategoryService.java @@ -0,0 +1,15 @@ +package run.halo.app.content; + +import org.springframework.lang.NonNull; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Category; + +public interface CategoryService { + + Flux listChildren(@NonNull String categoryName); + + Mono getParentByName(@NonNull String categoryName); + + Mono isCategoryHidden(@NonNull String categoryName); +} diff --git a/application/src/main/java/run/halo/app/content/Content.java b/application/src/main/java/run/halo/app/content/Content.java new file mode 100644 index 0000000..b9e3177 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/Content.java @@ -0,0 +1,4 @@ +package run.halo.app.content; + +public record Content(String raw, String content, String rawType) { +} diff --git a/application/src/main/java/run/halo/app/content/ContentRequest.java b/application/src/main/java/run/halo/app/content/ContentRequest.java new file mode 100644 index 0000000..95b7bc2 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/ContentRequest.java @@ -0,0 +1,53 @@ +package run.halo.app.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.HashMap; +import lombok.Builder; +import org.apache.commons.lang3.StringUtils; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.Ref; + +/** + * @author guqing + * @since 2.0.0 + */ +@Builder +public record ContentRequest(@Schema(requiredMode = REQUIRED) Ref subjectRef, + String headSnapshotName, + @Schema(requiredMode = NOT_REQUIRED) Long version, + @Schema(requiredMode = REQUIRED) String raw, + @Schema(requiredMode = REQUIRED) String content, + @Schema(requiredMode = REQUIRED) String rawType) { + + public Snapshot toSnapshot() { + final Snapshot snapshot = new Snapshot(); + + Metadata metadata = new Metadata(); + metadata.setAnnotations(new HashMap<>()); + snapshot.setMetadata(metadata); + + Snapshot.SnapShotSpec snapShotSpec = new Snapshot.SnapShotSpec(); + snapShotSpec.setSubjectRef(subjectRef); + + snapShotSpec.setRawType(rawType); + snapShotSpec.setRawPatch(StringUtils.defaultString(raw())); + snapShotSpec.setContentPatch(StringUtils.defaultString(content())); + + snapshot.setSpec(snapShotSpec); + return snapshot; + } + + public String rawPatchFrom(String originalRaw) { + // originalRaw content from v1 + return PatchUtils.diffToJsonPatch(originalRaw, this.raw); + } + + public String contentPatchFrom(String originalContent) { + // originalContent from v1 + return PatchUtils.diffToJsonPatch(originalContent, this.content); + } +} diff --git a/application/src/main/java/run/halo/app/content/ContentUpdateParam.java b/application/src/main/java/run/halo/app/content/ContentUpdateParam.java new file mode 100644 index 0000000..0eeb146 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/ContentUpdateParam.java @@ -0,0 +1,9 @@ +package run.halo.app.content; + +public record ContentUpdateParam(Long version, String raw, String content, String rawType) { + + public static ContentUpdateParam from(Content content) { + return new ContentUpdateParam(null, content.raw(), content.content(), + content.rawType()); + } +} diff --git a/application/src/main/java/run/halo/app/content/Contributor.java b/application/src/main/java/run/halo/app/content/Contributor.java new file mode 100644 index 0000000..fb86fb4 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/Contributor.java @@ -0,0 +1,16 @@ +package run.halo.app.content; + +import lombok.Data; + +/** + * Contributor from user. + * + * @author guqing + * @since 2.0.0 + */ +@Data +public class Contributor { + private String displayName; + private String avatar; + private String name; +} diff --git a/application/src/main/java/run/halo/app/content/ListedPost.java b/application/src/main/java/run/halo/app/content/ListedPost.java new file mode 100644 index 0000000..e873f33 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/ListedPost.java @@ -0,0 +1,41 @@ +package run.halo.app.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.List; +import lombok.Data; +import lombok.experimental.Accessors; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.Tag; + +/** + * An aggregate object of {@link Post} and {@link Category} + * and {@link Tag} and more for post list. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@Accessors(chain = true) +public class ListedPost { + + @Schema(requiredMode = REQUIRED) + private Post post; + + @Schema(requiredMode = REQUIRED) + private List categories; + + @Schema(requiredMode = REQUIRED) + private List tags; + + @Schema(requiredMode = REQUIRED) + private List contributors; + + @Schema(requiredMode = REQUIRED) + private Contributor owner; + + @Schema(requiredMode = REQUIRED) + private Stats stats; +} diff --git a/application/src/main/java/run/halo/app/content/ListedSinglePage.java b/application/src/main/java/run/halo/app/content/ListedSinglePage.java new file mode 100644 index 0000000..4537761 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/ListedSinglePage.java @@ -0,0 +1,33 @@ +package run.halo.app.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.List; +import lombok.Data; +import lombok.experimental.Accessors; +import run.halo.app.core.extension.content.SinglePage; + + +/** + * An aggregate object of {@link SinglePage} and {@link Contributor} single page list. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@Accessors(chain = true) +public class ListedSinglePage { + + @Schema(requiredMode = REQUIRED) + private SinglePage page; + + @Schema(requiredMode = REQUIRED) + private List contributors; + + @Schema(requiredMode = REQUIRED) + private Contributor owner; + + @Schema(requiredMode = REQUIRED) + private Stats stats; +} diff --git a/application/src/main/java/run/halo/app/content/ListedSnapshotDto.java b/application/src/main/java/run/halo/app/content/ListedSnapshotDto.java new file mode 100644 index 0000000..c0a2757 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/ListedSnapshotDto.java @@ -0,0 +1,42 @@ +package run.halo.app.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Instant; +import lombok.Data; +import lombok.experimental.Accessors; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.extension.MetadataOperator; + +@Data +@Accessors(chain = true) +public class ListedSnapshotDto { + @Schema(requiredMode = REQUIRED) + private MetadataOperator metadata; + + @Schema(requiredMode = REQUIRED) + private Spec spec; + + @Data + @Accessors(chain = true) + @Schema(name = "ListedSnapshotSpec") + public static class Spec { + @Schema(requiredMode = REQUIRED) + private String owner; + + private Instant modifyTime; + } + + /** + * Creates from snapshot. + */ + public static ListedSnapshotDto from(Snapshot snapshot) { + return new ListedSnapshotDto() + .setMetadata(snapshot.getMetadata()) + .setSpec(new Spec() + .setOwner(snapshot.getSpec().getOwner()) + .setModifyTime(snapshot.getSpec().getLastModifyTime()) + ); + } +} diff --git a/application/src/main/java/run/halo/app/content/NotificationReasonConst.java b/application/src/main/java/run/halo/app/content/NotificationReasonConst.java new file mode 100644 index 0000000..dbc1f3b --- /dev/null +++ b/application/src/main/java/run/halo/app/content/NotificationReasonConst.java @@ -0,0 +1,14 @@ +package run.halo.app.content; + +/** + * Notification reason constants for content module. + * + * @author guqing + * @since 2.9.0 + */ +public enum NotificationReasonConst { + ; + public static final String NEW_COMMENT_ON_POST = "new-comment-on-post"; + public static final String NEW_COMMENT_ON_PAGE = "new-comment-on-single-page"; + public static final String SOMEONE_REPLIED_TO_YOU = "someone-replied-to-you"; +} diff --git a/application/src/main/java/run/halo/app/content/PostContentServiceImpl.java b/application/src/main/java/run/halo/app/content/PostContentServiceImpl.java new file mode 100644 index 0000000..aad11d0 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/PostContentServiceImpl.java @@ -0,0 +1,58 @@ +package run.halo.app.content; + +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Ref; + +/** + * Provides ability to get post content for the specified post. + * + * @author guqing + * @since 2.16.0 + */ +@Component +public class PostContentServiceImpl extends AbstractContentService implements PostContentService { + private final ReactiveExtensionClient client; + + public PostContentServiceImpl(ReactiveExtensionClient client) { + super(client); + this.client = client; + } + + @Override + public Mono getHeadContent(String postName) { + return client.get(Post.class, postName) + .flatMap(post -> { + var headSnapshot = post.getSpec().getHeadSnapshot(); + return super.getContent(headSnapshot, post.getSpec().getBaseSnapshot()); + }); + } + + @Override + public Mono getReleaseContent(String postName) { + return client.get(Post.class, postName) + .flatMap(post -> { + var releaseSnapshot = post.getSpec().getReleaseSnapshot(); + return super.getContent(releaseSnapshot, post.getSpec().getBaseSnapshot()); + }); + } + + @Override + public Mono getSpecifiedContent(String postName, String snapshotName) { + return client.get(Post.class, postName) + .flatMap(post -> { + var baseSnapshot = post.getSpec().getBaseSnapshot(); + return super.getContent(snapshotName, baseSnapshot); + }); + } + + @Override + public Flux listSnapshots(String postName) { + return client.get(Post.class, postName) + .flatMapMany(page -> listSnapshotsBy(Ref.of(page))) + .map(snapshot -> snapshot.getMetadata().getName()); + } +} diff --git a/application/src/main/java/run/halo/app/content/PostHideFromListStateUpdater.java b/application/src/main/java/run/halo/app/content/PostHideFromListStateUpdater.java new file mode 100644 index 0000000..12bd88f --- /dev/null +++ b/application/src/main/java/run/halo/app/content/PostHideFromListStateUpdater.java @@ -0,0 +1,55 @@ +package run.halo.app.content; + +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import org.springframework.context.event.EventListener; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.content.Post; +import run.halo.app.event.post.CategoryHiddenStateChangeEvent; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.ReactiveExtensionPaginatedOperator; + +/** + * Synchronize the {@link Post.PostStatus#getHideFromList()} state of the post with the category. + * + * @author guqing + * @since 2.17.0 + */ +@Component +public class PostHideFromListStateUpdater + extends AbstractEventReconciler { + private final ReactiveExtensionPaginatedOperator reactiveExtensionPaginatedOperator; + private final ReactiveExtensionClient client; + + protected PostHideFromListStateUpdater(ReactiveExtensionClient client, + ReactiveExtensionPaginatedOperator reactiveExtensionPaginatedOperator) { + super(PostHideFromListStateUpdater.class.getName()); + this.reactiveExtensionPaginatedOperator = reactiveExtensionPaginatedOperator; + this.client = client; + } + + @Override + public Result reconcile(CategoryHiddenStateChangeEvent request) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + equal("spec.categories", request.getCategoryName()) + )); + + reactiveExtensionPaginatedOperator.list(Post.class, listOptions) + .flatMap(post -> { + post.getStatusOrDefault().setHideFromList(request.isHidden()); + return client.update(post); + }) + .then() + .block(); + return Result.doNotRetry(); + } + + @EventListener(CategoryHiddenStateChangeEvent.class) + public void onApplicationEvent(@NonNull CategoryHiddenStateChangeEvent event) { + this.queue.addImmediately(event); + } +} diff --git a/application/src/main/java/run/halo/app/content/PostQuery.java b/application/src/main/java/run/halo/app/content/PostQuery.java new file mode 100644 index 0000000..c6e73f2 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/PostQuery.java @@ -0,0 +1,157 @@ +package run.halo.app.content; + +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static run.halo.app.extension.router.QueryParamBuildUtil.sortParameter; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToListOptions; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springframework.data.domain.Sort; +import org.springframework.lang.Nullable; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.server.ServerWebExchange; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.endpoint.SortResolver; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.IListRequest; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; + +/** + * A query object for {@link Post} list. + * + * @author guqing + * @since 2.0.0 + */ +public class PostQuery extends IListRequest.QueryListRequest { + + private final ServerWebExchange exchange; + + private final String username; + + public PostQuery(ServerRequest request) { + this(request, null); + } + + public PostQuery(ServerRequest request, @Nullable String username) { + super(request.queryParams()); + this.exchange = request.exchange(); + this.username = username; + } + + @Schema(hidden = true) + @JsonIgnore + public String getUsername() { + return username; + } + + @Nullable + public Post.PostPhase getPublishPhase() { + String publishPhase = queryParams.getFirst("publishPhase"); + return Post.PostPhase.from(publishPhase); + } + + @Nullable + public String getCategoryWithChildren() { + var value = queryParams.getFirst("categoryWithChildren"); + return StringUtils.defaultIfBlank(value, null); + } + + @Nullable + @Schema(description = "Posts filtered by keyword.") + public String getKeyword() { + return StringUtils.defaultIfBlank(queryParams.getFirst("keyword"), null); + } + + @ArraySchema(uniqueItems = true, + arraySchema = @Schema(name = "sort", + description = "Sort property and direction of the list result. Supported fields: " + + "creationTimestamp,publishTime"), + schema = @Schema(description = "like field,asc or field,desc", + implementation = String.class, + example = "creationTimestamp,desc")) + public Sort getSort() { + var sort = SortResolver.defaultInstance.resolve(exchange); + sort = sort.and(Sort.by(Sort.Direction.DESC, "metadata.creationTimestamp")); + sort = sort.and(Sort.by(Sort.Direction.DESC, "metadata.name")); + return sort; + } + + /** + * Build a list options from the query object. + * + * @return a list options + */ + public ListOptions toListOptions() { + var listOptions = + labelAndFieldSelectorToListOptions(getLabelSelector(), getFieldSelector()); + if (listOptions.getFieldSelector() == null) { + listOptions.setFieldSelector(FieldSelector.all()); + } + var labelSelectorBuilder = LabelSelector.builder(); + var fieldQuery = QueryFactory.all(); + + String keyword = getKeyword(); + if (keyword != null) { + fieldQuery = QueryFactory.and(fieldQuery, QueryFactory.or( + QueryFactory.contains("status.excerpt", keyword), + QueryFactory.contains("spec.slug", keyword), + QueryFactory.contains("spec.title", keyword) + )); + } + + Post.PostPhase publishPhase = getPublishPhase(); + if (publishPhase != null) { + if (Post.PostPhase.PENDING_APPROVAL.equals(publishPhase)) { + fieldQuery = QueryFactory.and(fieldQuery, QueryFactory.equal( + "status.phase", Post.PostPhase.PENDING_APPROVAL.name()) + ); + labelSelectorBuilder.eq(Post.PUBLISHED_LABEL, BooleanUtils.FALSE); + } else if (Post.PostPhase.PUBLISHED.equals(publishPhase)) { + labelSelectorBuilder.eq(Post.PUBLISHED_LABEL, BooleanUtils.TRUE); + } else { + labelSelectorBuilder.eq(Post.PUBLISHED_LABEL, BooleanUtils.FALSE); + } + } + + if (StringUtils.isNotBlank(username)) { + fieldQuery = QueryFactory.and(fieldQuery, QueryFactory.equal( + "spec.owner", username) + ); + } + + listOptions.setFieldSelector(listOptions.getFieldSelector().andQuery(fieldQuery)); + listOptions.setLabelSelector( + listOptions.getLabelSelector().and(labelSelectorBuilder.build())); + return listOptions; + } + + public static void buildParameters(Builder builder) { + IListRequest.buildParameters(builder); + builder.parameter(sortParameter()) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("publishPhase") + .description("Posts filtered by publish phase.") + .implementation(Post.PostPhase.class) + .required(false)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("keyword") + .description("Posts filtered by keyword.") + .implementation(String.class) + .required(false)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("categoryWithChildren") + .description("Posts filtered by category including sub-categories.") + .implementation(String.class) + .required(false)); + } +} diff --git a/application/src/main/java/run/halo/app/content/PostRequest.java b/application/src/main/java/run/halo/app/content/PostRequest.java new file mode 100644 index 0000000..9da438c --- /dev/null +++ b/application/src/main/java/run/halo/app/content/PostRequest.java @@ -0,0 +1,25 @@ +package run.halo.app.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import org.springframework.lang.NonNull; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.Ref; + +/** + * Post and content data for creating and updating post. + * + * @author guqing + * @since 2.0.0 + */ +public record PostRequest(@Schema(requiredMode = REQUIRED) @NonNull Post post, + ContentUpdateParam content) { + + public ContentRequest contentRequest() { + Ref subjectRef = Ref.of(post); + return new ContentRequest(subjectRef, post.getSpec().getHeadSnapshot(), content.version(), + content.raw(), content.content(), content.rawType()); + } + +} diff --git a/application/src/main/java/run/halo/app/content/PostService.java b/application/src/main/java/run/halo/app/content/PostService.java new file mode 100644 index 0000000..cf4c0b4 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/PostService.java @@ -0,0 +1,53 @@ +package run.halo.app.content; + +import org.springframework.lang.NonNull; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListResult; + +/** + * Service for {@link Post}. + * + * @author guqing + * @since 2.0.0 + */ +public interface PostService { + + Mono> listPost(PostQuery query); + + Mono draftPost(PostRequest postRequest); + + Mono updatePost(PostRequest postRequest); + + Mono updateBy(@NonNull Post post); + + Mono getHeadContent(String postName); + + Mono getHeadContent(Post post); + + Mono getReleaseContent(String postName); + + Mono getReleaseContent(Post post); + + Mono getContent(String snapshotName, String baseSnapshotName); + + Flux listSnapshots(String name); + + Mono publish(Post post); + + Mono unpublish(Post post); + + /** + * Get post by username. + * + * @param postName is post name. + * @param username is username. + * @return full post data or empty. + */ + Mono getByUsername(String postName, String username); + + Mono revertToSpecifiedSnapshot(String postName, String snapshotName); + + Mono deleteContent(String postName, String snapshotName); +} diff --git a/application/src/main/java/run/halo/app/content/PostSorter.java b/application/src/main/java/run/halo/app/content/PostSorter.java new file mode 100644 index 0000000..a290b32 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/PostSorter.java @@ -0,0 +1,78 @@ +package run.halo.app.content; + +import java.time.Instant; +import java.util.Comparator; +import java.util.Objects; +import java.util.function.Function; +import org.springframework.util.comparator.Comparators; +import run.halo.app.core.extension.content.Post; + +/** + * A sorter for {@link Post}. + * + * @author guqing + * @since 2.0.0 + */ +public enum PostSorter { + PUBLISH_TIME, + CREATE_TIME; + + static final Function name = post -> post.getMetadata().getName(); + + /** + * Converts {@link Comparator} from {@link PostSorter} and ascending. + * + * @param sorter a {@link PostSorter} + * @param ascending ascending if true, otherwise descending + * @return a {@link Comparator} of {@link Post} + */ + public static Comparator from(PostSorter sorter, Boolean ascending) { + if (Objects.equals(true, ascending)) { + return from(sorter); + } + return from(sorter).reversed(); + } + + /** + * Converts {@link Comparator} from {@link PostSorter}. + * + * @param sorter a {@link PostSorter} + * @return a {@link Comparator} of {@link Post} + */ + public static Comparator from(PostSorter sorter) { + if (sorter == null) { + return defaultComparator(); + } + if (CREATE_TIME.equals(sorter)) { + Function comparatorFunc = + post -> post.getMetadata().getCreationTimestamp(); + return Comparator.comparing(comparatorFunc) + .thenComparing(name); + } + + if (PUBLISH_TIME.equals(sorter)) { + Function comparatorFunc = + post -> post.getSpec().getPublishTime(); + return Comparator.comparing(comparatorFunc, Comparators.nullsLow()) + .thenComparing(name); + } + + throw new IllegalArgumentException("Unsupported sort value: " + sorter); + } + + static PostSorter convertFrom(String sort) { + for (PostSorter sorter : values()) { + if (sorter.name().equalsIgnoreCase(sort)) { + return sorter; + } + } + return null; + } + + static Comparator defaultComparator() { + Function createTime = + post -> post.getMetadata().getCreationTimestamp(); + return Comparator.comparing(createTime) + .thenComparing(name); + } +} diff --git a/application/src/main/java/run/halo/app/content/SinglePageQuery.java b/application/src/main/java/run/halo/app/content/SinglePageQuery.java new file mode 100644 index 0000000..851333b --- /dev/null +++ b/application/src/main/java/run/halo/app/content/SinglePageQuery.java @@ -0,0 +1,208 @@ +package run.halo.app.content; + +import static java.util.Comparator.comparing; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static run.halo.app.extension.router.QueryParamBuildUtil.sortParameter; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToPredicate; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.ArrayList; +import java.util.Collection; +import java.util.Comparator; +import java.util.List; +import java.util.Set; +import java.util.function.Predicate; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springframework.data.domain.Sort; +import org.springframework.lang.Nullable; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.server.ServerWebExchange; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.core.extension.endpoint.SortResolver; +import run.halo.app.extension.Comparators; +import run.halo.app.extension.router.IListRequest; + +/** + * Query parameter for {@link SinglePage} list. + * + * @author guqing + * @since 2.0.0 + */ +public class SinglePageQuery extends IListRequest.QueryListRequest { + + private final ServerWebExchange exchange; + + public SinglePageQuery(ServerRequest request) { + super(request.queryParams()); + this.exchange = request.exchange(); + } + + @Nullable + @Schema(name = "contributor") + public Set getContributors() { + List contributorList = queryParams.get("contributor"); + return contributorList == null ? null : Set.copyOf(contributorList); + } + + @Nullable + public Post.PostPhase getPublishPhase() { + String publishPhase = queryParams.getFirst("publishPhase"); + return Post.PostPhase.from(publishPhase); + } + + @Nullable + public Post.VisibleEnum getVisible() { + String visible = queryParams.getFirst("visible"); + return Post.VisibleEnum.from(visible); + } + + @Nullable + @Schema(description = "SinglePages filtered by keyword.") + public String getKeyword() { + return StringUtils.defaultIfBlank(queryParams.getFirst("keyword"), null); + } + + @ArraySchema(uniqueItems = true, + arraySchema = @Schema(name = "sort", + description = "Sort property and direction of the list result. Supported fields: " + + "creationTimestamp,publishTime"), + schema = @Schema(description = "like field,asc or field,desc", + implementation = String.class, + example = "creationTimestamp,desc")) + public Sort getSort() { + return SortResolver.defaultInstance.resolve(exchange); + } + + /** + * Build a comparator for {@link SinglePageQuery}. + * + * @return comparator + */ + public Comparator toComparator() { + var sort = getSort(); + var creationTimestampOrder = sort.getOrderFor("creationTimestamp"); + List> comparators = new ArrayList<>(); + if (creationTimestampOrder != null) { + Comparator comparator = + comparing(page -> page.getMetadata().getCreationTimestamp()); + if (creationTimestampOrder.isDescending()) { + comparator = comparator.reversed(); + } + comparators.add(comparator); + } + + var publishTimeOrder = sort.getOrderFor("publishTime"); + if (publishTimeOrder != null) { + Comparator nullsComparator = publishTimeOrder.isAscending() + ? org.springframework.util.comparator.Comparators.nullsLow() + : org.springframework.util.comparator.Comparators.nullsHigh(); + Comparator comparator = + comparing(page -> page.getSpec().getPublishTime(), nullsComparator); + if (publishTimeOrder.isDescending()) { + comparator = comparator.reversed(); + } + comparators.add(comparator); + } + comparators.add(Comparators.compareCreationTimestamp(false)); + comparators.add(Comparators.compareName(true)); + return comparators.stream() + .reduce(Comparator::thenComparing) + .orElse(null); + } + + /** + * Build a predicate for {@link SinglePageQuery}. + * + * @return predicate + */ + public Predicate toPredicate() { + Predicate paramPredicate = singlePage -> contains(getContributors(), + singlePage.getStatusOrDefault().getContributors()); + + String keyword = getKeyword(); + if (keyword != null) { + paramPredicate = paramPredicate.and(page -> { + String excerpt = page.getStatusOrDefault().getExcerpt(); + return StringUtils.containsIgnoreCase(excerpt, keyword) + || StringUtils.containsIgnoreCase(page.getSpec().getSlug(), keyword) + || StringUtils.containsIgnoreCase(page.getSpec().getTitle(), keyword); + }); + } + + Post.PostPhase publishPhase = getPublishPhase(); + if (publishPhase != null) { + paramPredicate = paramPredicate.and(page -> { + if (Post.PostPhase.PENDING_APPROVAL.equals(publishPhase)) { + return !page.isPublished() + && Post.PostPhase.PENDING_APPROVAL.name() + .equalsIgnoreCase(page.getStatusOrDefault().getPhase()); + } + // published + if (Post.PostPhase.PUBLISHED.equals(publishPhase)) { + return page.isPublished(); + } + // draft + return !page.isPublished(); + }); + } + + Post.VisibleEnum visible = getVisible(); + if (visible != null) { + paramPredicate = + paramPredicate.and(post -> visible.equals(post.getSpec().getVisible())); + } + + Predicate predicate = labelAndFieldSelectorToPredicate(getLabelSelector(), + getFieldSelector()); + return predicate.and(paramPredicate); + } + + boolean contains(Collection left, List right) { + // parameter is null, it means that ignore this condition + if (left == null) { + return true; + } + // else, it means that right is empty + if (left.isEmpty()) { + return right.isEmpty(); + } + if (right == null) { + return false; + } + return right.stream().anyMatch(left::contains); + } + + public static void buildParameters(Builder builder) { + IListRequest.buildParameters(builder); + builder.parameter(sortParameter()) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("contributor") + .description("SinglePages filtered by contributor.") + .implementationArray(String.class) + .required(false)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("publishPhase") + .description("SinglePages filtered by publish phase.") + .implementation(Post.PostPhase.class) + .required(false)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("visible") + .description("SinglePages filtered by visibility.") + .implementation(Post.VisibleEnum.class) + .required(false)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("keyword") + .description("SinglePages filtered by keyword.") + .implementation(String.class) + .required(false)); + ; + } +} diff --git a/application/src/main/java/run/halo/app/content/SinglePageRequest.java b/application/src/main/java/run/halo/app/content/SinglePageRequest.java new file mode 100644 index 0000000..8e93adf --- /dev/null +++ b/application/src/main/java/run/halo/app/content/SinglePageRequest.java @@ -0,0 +1,24 @@ +package run.halo.app.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.Ref; + +/** + * A request parameter for {@link SinglePage}. + * + * @author guqing + * @since 2.0.0 + */ +public record SinglePageRequest(@Schema(requiredMode = REQUIRED) SinglePage page, + @Schema(requiredMode = REQUIRED) ContentUpdateParam content) { + + public ContentRequest contentRequest() { + Ref subjectRef = Ref.of(page); + return new ContentRequest(subjectRef, page.getSpec().getHeadSnapshot(), content.version(), + content.raw(), content.content(), content.rawType()); + } + +} diff --git a/application/src/main/java/run/halo/app/content/SinglePageService.java b/application/src/main/java/run/halo/app/content/SinglePageService.java new file mode 100644 index 0000000..fbaf0dc --- /dev/null +++ b/application/src/main/java/run/halo/app/content/SinglePageService.java @@ -0,0 +1,33 @@ +package run.halo.app.content; + +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.ListResult; + +/** + * Single page service. + * + * @author guqing + * @since 2.0.0 + */ +public interface SinglePageService { + + Mono getHeadContent(String singlePageName); + + Mono getReleaseContent(String singlePageName); + + Mono getContent(String snapshotName, String baseSnapshotName); + + Flux listSnapshots(String pageName); + + Mono> list(SinglePageQuery listRequest); + + Mono draft(SinglePageRequest pageRequest); + + Mono update(SinglePageRequest pageRequest); + + Mono revertToSpecifiedSnapshot(String pageName, String snapshotName); + + Mono deleteContent(String postName, String snapshotName); +} diff --git a/application/src/main/java/run/halo/app/content/SnapshotService.java b/application/src/main/java/run/halo/app/content/SnapshotService.java new file mode 100644 index 0000000..d97e422 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/SnapshotService.java @@ -0,0 +1,22 @@ +package run.halo.app.content; + +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Snapshot; + +public interface SnapshotService { + + Mono getBy(String snapshotName); + + Mono getPatchedBy(String snapshotName, String baseSnapshotName); + + Mono patchAndCreate(@NonNull Snapshot snapshot, + @Nullable Snapshot baseSnapshot, + @NonNull Content content); + + Mono patchAndUpdate(@NonNull Snapshot snapshot, + @NonNull Snapshot baseSnapshot, + @NonNull Content content); + +} diff --git a/application/src/main/java/run/halo/app/content/Stats.java b/application/src/main/java/run/halo/app/content/Stats.java new file mode 100644 index 0000000..151f926 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/Stats.java @@ -0,0 +1,42 @@ +package run.halo.app.content; + +import lombok.Builder; +import lombok.Data; + +/** + * Stats value object. + * + * @author guqing + * @since 2.0.0 + */ +@Data +public class Stats { + + private Integer visit; + + private Integer upvote; + + private Integer totalComment; + + private Integer approvedComment; + + public Stats() { + } + + @Builder + public Stats(Integer visit, Integer upvote, Integer totalComment, Integer approvedComment) { + this.visit = visit; + this.upvote = upvote; + this.totalComment = totalComment; + this.approvedComment = approvedComment; + } + + public static Stats empty() { + return Stats.builder() + .visit(0) + .upvote(0) + .totalComment(0) + .approvedComment(0) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/content/TagPostCountUpdater.java b/application/src/main/java/run/halo/app/content/TagPostCountUpdater.java new file mode 100644 index 0000000..481da45 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/TagPostCountUpdater.java @@ -0,0 +1,135 @@ +package run.halo.app.content; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import com.google.common.collect.Sets; +import java.util.List; +import java.util.Optional; +import java.util.Set; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.event.EventListener; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.core.extension.content.Tag.TagStatus; +import run.halo.app.event.post.PostDeletedEvent; +import run.halo.app.event.post.PostEvent; +import run.halo.app.event.post.PostUpdatedEvent; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; +import run.halo.app.infra.utils.JsonUtils; + +/** + * Update {@link TagStatus#postCount} when post related to tag is updated. + * + * @author guqing + * @since 2.13.0 + */ +@Component +public class TagPostCountUpdater + extends AbstractEventReconciler { + private final ExtensionClient client; + + public TagPostCountUpdater(ExtensionClient client) { + super(TagPostCountUpdater.class.getName()); + this.client = client; + } + + @Override + public Result reconcile(PostRelatedTags postRelatedTags) { + for (var tag : postRelatedTags.tags()) { + updateTagRelatedPostCount(tag); + } + + // Update last associated tags when handled + client.fetch(Post.class, postRelatedTags.postName()).ifPresent(post -> { + var tags = defaultIfNull(post.getSpec().getTags(), List.of()); + var annotations = MetadataUtil.nullSafeAnnotations(post); + var tagAnno = JsonUtils.objectToJson(tags); + var oldTagAnno = annotations.get(Post.LAST_ASSOCIATED_TAGS_ANNO); + + if (!tagAnno.equals(oldTagAnno)) { + annotations.put(Post.LAST_ASSOCIATED_TAGS_ANNO, tagAnno); + client.update(post); + } + }); + return Result.doNotRetry(); + } + + /** + * Listen to post event to calculate post related to tag for updating. + */ + @EventListener(PostEvent.class) + public void onPostUpdated(PostEvent postEvent) { + var postName = postEvent.getName(); + if (postEvent instanceof PostUpdatedEvent) { + var tagsToUpdate = calcTagsToUpdate(postEvent.getName()); + queue.addImmediately(new PostRelatedTags(postName, tagsToUpdate)); + return; + } + + if (postEvent instanceof PostDeletedEvent deletedEvent) { + var tags = defaultIfNull(deletedEvent.getPost().getSpec().getTags(), + List.of()); + queue.addImmediately(new PostRelatedTags(postName, Sets.newHashSet(tags))); + } + } + + private Set calcTagsToUpdate(String postName) { + var post = client.fetch(Post.class, postName).orElseThrow(); + var annotations = MetadataUtil.nullSafeAnnotations(post); + var oldTags = Optional.ofNullable(annotations.get(Post.LAST_ASSOCIATED_TAGS_ANNO)) + .filter(StringUtils::isNotBlank) + .map(tagsJson -> JsonUtils.jsonToObject(tagsJson, String[].class)) + .orElse(new String[0]); + + var tagsToUpdate = Sets.newHashSet(oldTags); + var newTags = post.getSpec().getTags(); + if (newTags != null) { + tagsToUpdate.addAll(newTags); + } + return tagsToUpdate; + } + + public record PostRelatedTags(String postName, Set tags) { + } + + private void updateTagRelatedPostCount(String tagName) { + client.fetch(Tag.class, tagName).ifPresent(tag -> { + var commonFieldQuery = and( + equal("spec.tags", tag.getMetadata().getName()), + isNull("metadata.deletionTimestamp") + ); + // Update post count + var allPostOptions = new ListOptions(); + allPostOptions.setFieldSelector(FieldSelector.of(commonFieldQuery)); + var result = client.listBy(Post.class, allPostOptions, PageRequestImpl.ofSize(1)); + tag.getStatusOrDefault().setPostCount((int) result.getTotal()); + + // Update visible post count + var publicPostOptions = new ListOptions(); + publicPostOptions.setLabelSelector(LabelSelector.builder() + .eq(Post.PUBLISHED_LABEL, "true") + .build()); + publicPostOptions.setFieldSelector(FieldSelector.of( + and( + commonFieldQuery, + equal("spec.deleted", "false"), + equal("spec.visible", Post.VisibleEnum.PUBLIC.name()) + ) + )); + var publicPosts = + client.listBy(Post.class, publicPostOptions, PageRequestImpl.ofSize(1)); + tag.getStatusOrDefault().setVisiblePostCount((int) publicPosts.getTotal()); + + client.update(tag); + }); + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/CommentEmailOwner.java b/application/src/main/java/run/halo/app/content/comment/CommentEmailOwner.java new file mode 100644 index 0000000..5c0e5f9 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/CommentEmailOwner.java @@ -0,0 +1,43 @@ +package run.halo.app.content.comment; + +import java.util.LinkedHashMap; +import java.util.Map; +import org.apache.commons.lang3.StringUtils; +import org.springframework.util.Assert; +import run.halo.app.core.extension.content.Comment; + +/** + *

The creator info of the comment.

+ * This {@link CommentEmailOwner} is only applicable to the user who is allowed to comment + * without logging in. + * + * @param email email for comment owner + * @param avatar avatar for comment owner + * @param displayName display name for comment owner + * @param website website for comment owner + */ +public record CommentEmailOwner(String email, String avatar, String displayName, String website) { + + public CommentEmailOwner { + Assert.hasText(displayName, "The 'displayName' must not be empty."); + } + + /** + * Converts {@link CommentEmailOwner} to {@link Comment.CommentOwner}. + * + * @return a comment owner + */ + public Comment.CommentOwner toCommentOwner() { + Comment.CommentOwner commentOwner = new Comment.CommentOwner(); + commentOwner.setKind(Comment.CommentOwner.KIND_EMAIL); + // email nullable + commentOwner.setName(StringUtils.defaultString(email, StringUtils.EMPTY)); + + commentOwner.setDisplayName(displayName); + Map annotations = new LinkedHashMap<>(); + commentOwner.setAnnotations(annotations); + annotations.put(Comment.CommentOwner.AVATAR_ANNO, avatar); + annotations.put(Comment.CommentOwner.WEBSITE_ANNO, website); + return commentOwner; + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/CommentNotificationReasonPublisher.java b/application/src/main/java/run/halo/app/content/comment/CommentNotificationReasonPublisher.java new file mode 100644 index 0000000..3868482 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/CommentNotificationReasonPublisher.java @@ -0,0 +1,343 @@ +package run.halo.app.content.comment; + +import static org.apache.commons.lang3.StringUtils.defaultIfBlank; +import static run.halo.app.content.comment.ReplyNotificationSubscriptionHelper.identityFrom; + +import com.fasterxml.jackson.core.type.TypeReference; +import java.util.Map; +import java.util.Optional; +import lombok.Builder; +import lombok.RequiredArgsConstructor; +import lombok.experimental.UtilityClass; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.event.EventListener; +import org.springframework.scheduling.annotation.Async; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import run.halo.app.content.NotificationReasonConst; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.event.post.CommentCreatedEvent; +import run.halo.app.event.post.ReplyCreatedEvent; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.Ref; +import run.halo.app.infra.ExternalLinkProcessor; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.notification.NotificationReasonEmitter; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; + +/** + * Notification reason publisher for {@link Comment} and {@link Reply}. + * + * @author guqing + * @since 2.9.0 + */ +@Component +@RequiredArgsConstructor +public class CommentNotificationReasonPublisher { + private static final GroupVersionKind POST_GVK = GroupVersionKind.fromExtension(Post.class); + private static final GroupVersionKind PAGE_GVK = + GroupVersionKind.fromExtension(SinglePage.class); + + private final ExtensionClient client; + private final NewCommentOnPostReasonPublisher newCommentOnPostReasonPublisher; + private final NewCommentOnPageReasonPublisher newCommentOnPageReasonPublisher; + private final NewReplyReasonPublisher newReplyReasonPublisher; + + /** + * On new comment. + */ + @Async + @EventListener(CommentCreatedEvent.class) + public void onNewComment(CommentCreatedEvent event) { + Comment comment = event.getComment(); + if (isPostComment(comment)) { + newCommentOnPostReasonPublisher.publishReasonBy(comment); + } else if (isPageComment(comment)) { + newCommentOnPageReasonPublisher.publishReasonBy(comment); + } + } + + /** + * On new reply. + */ + @Async + @EventListener(ReplyCreatedEvent.class) + public void onNewReply(ReplyCreatedEvent event) { + Reply reply = event.getReply(); + var commentName = reply.getSpec().getCommentName(); + client.fetch(Comment.class, commentName) + .ifPresent(comment -> newReplyReasonPublisher.publishReasonBy(reply, comment)); + } + + boolean isPostComment(Comment comment) { + return Ref.groupKindEquals(comment.getSpec().getSubjectRef(), POST_GVK); + } + + boolean isPageComment(Comment comment) { + return Ref.groupKindEquals(comment.getSpec().getSubjectRef(), PAGE_GVK); + } + + @Component + @RequiredArgsConstructor + static class NewCommentOnPostReasonPublisher { + + private final ExtensionClient client; + private final NotificationReasonEmitter notificationReasonEmitter; + private final ExternalLinkProcessor externalLinkProcessor; + + public void publishReasonBy(Comment comment) { + Ref subjectRef = comment.getSpec().getSubjectRef(); + Post post = client.fetch(Post.class, subjectRef.getName()).orElseThrow(); + if (doNotEmitReason(comment, post)) { + return; + } + + String postUrl = + externalLinkProcessor.processLink(post.getStatusOrDefault().getPermalink()); + var reasonSubject = Reason.Subject.builder() + .apiVersion(post.getApiVersion()) + .kind(post.getKind()) + .name(subjectRef.getName()) + .title(post.getSpec().getTitle()) + .url(postUrl) + .build(); + Comment.CommentOwner owner = comment.getSpec().getOwner(); + notificationReasonEmitter.emit(NotificationReasonConst.NEW_COMMENT_ON_POST, + builder -> { + var attributes = CommentOnPostReasonData.builder() + .postName(subjectRef.getName()) + .postOwner(post.getSpec().getOwner()) + .postTitle(post.getSpec().getTitle()) + .postUrl(postUrl) + .commenter(owner.getDisplayName()) + .content(comment.getSpec().getContent()) + .commentName(comment.getMetadata().getName()) + .build(); + builder.attributes(ReasonDataConverter.toAttributeMap(attributes)) + .author(identityFrom(owner)) + .subject(reasonSubject); + }).block(); + } + + boolean doNotEmitReason(Comment comment, Post post) { + Comment.CommentOwner commentOwner = comment.getSpec().getOwner(); + return isPostOwner(post, commentOwner); + } + + boolean isPostOwner(Post post, Comment.CommentOwner commentOwner) { + String kind = commentOwner.getKind(); + String name = commentOwner.getName(); + var postOwner = post.getSpec().getOwner(); + if (Comment.CommentOwner.KIND_EMAIL.equals(kind)) { + return client.fetch(User.class, postOwner) + .filter(user -> name.equals(user.getSpec().getEmail())) + .isPresent(); + } + return name.equals(postOwner); + } + + @Builder + record CommentOnPostReasonData(String postName, String postOwner, String postTitle, + String postUrl, String commenter, String content, + String commentName) { + } + } + + @Component + @RequiredArgsConstructor + static class NewCommentOnPageReasonPublisher { + private final ExtensionClient client; + private final NotificationReasonEmitter notificationReasonEmitter; + private final ExternalLinkProcessor externalLinkProcessor; + + public void publishReasonBy(Comment comment) { + Ref subjectRef = comment.getSpec().getSubjectRef(); + var singlePage = client.fetch(SinglePage.class, subjectRef.getName()).orElseThrow(); + + if (doNotEmitReason(comment, singlePage)) { + return; + } + + var pageUrl = externalLinkProcessor + .processLink(singlePage.getStatusOrDefault().getPermalink()); + + var reasonSubject = Reason.Subject.builder() + .apiVersion(singlePage.getApiVersion()) + .kind(singlePage.getKind()) + .name(subjectRef.getName()) + .title(singlePage.getSpec().getTitle()) + .url(pageUrl) + .build(); + + Comment.CommentOwner owner = comment.getSpec().getOwner(); + notificationReasonEmitter.emit(NotificationReasonConst.NEW_COMMENT_ON_PAGE, + builder -> { + var attributes = CommentOnPageReasonData.builder() + .pageName(subjectRef.getName()) + .pageOwner(singlePage.getSpec().getOwner()) + .pageTitle(singlePage.getSpec().getTitle()) + .pageUrl(pageUrl) + .commenter(defaultIfBlank(owner.getDisplayName(), owner.getName())) + .content(comment.getSpec().getContent()) + .commentName(comment.getMetadata().getName()) + .build(); + builder.attributes(ReasonDataConverter.toAttributeMap(attributes)) + .author(identityFrom(owner)) + .subject(reasonSubject); + }).block(); + } + + public boolean doNotEmitReason(Comment comment, SinglePage page) { + Comment.CommentOwner commentOwner = comment.getSpec().getOwner(); + return isPageOwner(page, commentOwner); + } + + boolean isPageOwner(SinglePage page, Comment.CommentOwner commentOwner) { + String kind = commentOwner.getKind(); + String name = commentOwner.getName(); + var pageOwner = page.getSpec().getOwner(); + if (Comment.CommentOwner.KIND_EMAIL.equals(kind)) { + return client.fetch(User.class, pageOwner) + .filter(user -> name.equals(user.getSpec().getEmail())) + .isPresent(); + } + return name.equals(pageOwner); + } + + @Builder + record CommentOnPageReasonData(String pageName, String pageOwner, String pageTitle, + String pageUrl, String commenter, String content, + String commentName) { + } + } + + @UtilityClass + static class ReasonDataConverter { + public static Map toAttributeMap(T data) { + Assert.notNull(data, "Reason attributes must not be null"); + return JsonUtils.mapper().convertValue(data, new TypeReference<>() { + }); + } + } + + @Component + @RequiredArgsConstructor + static class NewReplyReasonPublisher { + private final ExtensionClient client; + private final NotificationReasonEmitter notificationReasonEmitter; + private final ExtensionGetter extensionGetter; + + public void publishReasonBy(Reply reply, Comment comment) { + boolean isQuoteReply = StringUtils.isNotBlank(reply.getSpec().getQuoteReply()); + + Optional quoteReplyOptional = Optional.of(isQuoteReply) + .filter(Boolean::booleanValue) + .flatMap(isQuote -> client.fetch(Reply.class, reply.getSpec().getQuoteReply())); + + if (doNotEmitReason(reply, quoteReplyOptional.orElse(null), comment)) { + return; + } + + var reasonSubject = quoteReplyOptional + .map(quoteReply -> Subscription.ReasonSubject.builder() + .apiVersion(quoteReply.getApiVersion()) + .kind(quoteReply.getKind()) + .name(quoteReply.getMetadata().getName()) + .build() + ) + .orElseGet(() -> Subscription.ReasonSubject.builder() + .apiVersion(comment.getApiVersion()) + .kind(comment.getKind()) + .name(comment.getMetadata().getName()) + .build() + ); + + var reasonSubjectTitle = quoteReplyOptional + .map(quoteReply -> quoteReply.getSpec().getContent()) + .orElse(comment.getSpec().getContent()); + + var quoteReplyContent = quoteReplyOptional + .map(quoteReply -> quoteReply.getSpec().getContent()) + .orElse(null); + var replyOwner = reply.getSpec().getOwner(); + + var repliedOwner = quoteReplyOptional + .map(quoteReply -> quoteReply.getSpec().getOwner()) + .orElseGet(() -> comment.getSpec().getOwner()); + + var reasonAttributesBuilder = NewReplyReasonData.builder() + .commentContent(comment.getSpec().getContent()) + .isQuoteReply(isQuoteReply) + .quoteContent(quoteReplyContent) + .commentName(comment.getMetadata().getName()) + .replier(defaultIfBlank(replyOwner.getDisplayName(), replyOwner.getName())) + .content(reply.getSpec().getContent()) + .replyName(reply.getMetadata().getName()) + .replyOwner(identityFrom(replyOwner).name()) + .repliedOwner(identityFrom(repliedOwner).name()); + + getCommentSubjectDisplay(comment.getSpec().getSubjectRef()) + .ifPresent(subject -> { + reasonAttributesBuilder.commentSubjectTitle(subject.title()); + reasonAttributesBuilder.commentSubjectUrl(subject.url()); + }); + + notificationReasonEmitter.emit(NotificationReasonConst.SOMEONE_REPLIED_TO_YOU, + builder -> { + var data = ReasonDataConverter.toAttributeMap(reasonAttributesBuilder.build()); + builder.attributes(data) + .author(identityFrom(replyOwner)) + .subject(Reason.Subject.builder() + .apiVersion(reasonSubject.getApiVersion()) + .kind(reasonSubject.getKind()) + .name(reasonSubject.getName()) + .title(reasonSubjectTitle) + .build()); + }).block(); + } + + /** + * To be compatible with older versions, it may be empty, so use optional. + */ + @SuppressWarnings("unchecked") + Optional getCommentSubjectDisplay(Ref ref) { + return extensionGetter.getExtensions(CommentSubject.class) + .filter(commentSubject -> commentSubject.supports(ref)) + .next() + .flatMap(subject -> subject.getSubjectDisplay(ref.getName())) + .blockOptional(); + } + + boolean doNotEmitReason(Reply currentReply, Reply quoteReply, Comment comment) { + boolean isQuoteReply = StringUtils.isNotBlank(currentReply.getSpec().getQuoteReply()); + + if (isQuoteReply && quoteReply == null) { + throw new IllegalArgumentException( + "quoteReply can not be null when currentReply is reply to quote"); + } + + Comment.CommentOwner commentOwner = isQuoteReply ? quoteReply.getSpec().getOwner() + : comment.getSpec().getOwner(); + + var currentReplyOwner = currentReply.getSpec().getOwner(); + // reply to oneself do not emit reason + return currentReplyOwner.getKind().equals(commentOwner.getKind()) + && currentReplyOwner.getName().equals(commentOwner.getName()); + } + + @Builder + record NewReplyReasonData(String commentContent, String commentSubjectTitle, + String commentSubjectUrl, boolean isQuoteReply, + String quoteContent, + String commentName, String replier, String content, + String replyName, String replyOwner, String repliedOwner) { + } + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/CommentQuery.java b/application/src/main/java/run/halo/app/content/comment/CommentQuery.java new file mode 100644 index 0000000..4caef11 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/CommentQuery.java @@ -0,0 +1,110 @@ +package run.halo.app.content.comment; + +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.contains; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToListOptions; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springframework.data.domain.Sort; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.server.ServerWebExchange; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.endpoint.SortResolver; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.router.IListRequest; +import run.halo.app.extension.router.QueryParamBuildUtil; +import run.halo.app.extension.router.selector.FieldSelector; + +/** + * Query criteria for comment list. + * + * @author guqing + * @since 2.0.0 + */ +public class CommentQuery extends IListRequest.QueryListRequest { + + private final ServerWebExchange exchange; + + public CommentQuery(ServerRequest request) { + super(request.queryParams()); + this.exchange = request.exchange(); + } + + public String getKeyword() { + String keyword = queryParams.getFirst("keyword"); + return StringUtils.isBlank(keyword) ? null : keyword; + } + + public String getOwnerKind() { + String ownerKind = queryParams.getFirst("ownerKind"); + return StringUtils.isBlank(ownerKind) ? null : ownerKind; + } + + public String getOwnerName() { + String ownerName = queryParams.getFirst("ownerName"); + return StringUtils.isBlank(ownerName) ? null : ownerName; + } + + public Sort getSort() { + var sort = SortResolver.defaultInstance.resolve(exchange); + return sort.and(Sort.by("status.lastReplyTime", + "spec.creationTime", + "metadata.name" + ).descending()); + } + + public PageRequest toPageRequest() { + return PageRequestImpl.of(getPage(), getSize(), getSort()); + } + + /** + * Convert to list options. + */ + public ListOptions toListOptions() { + var listOptions = + labelAndFieldSelectorToListOptions(getLabelSelector(), getFieldSelector()); + var fieldQuery = listOptions.getFieldSelector().query(); + + String keyword = getKeyword(); + if (StringUtils.isNotBlank(keyword)) { + fieldQuery = and(fieldQuery, contains("spec.raw", keyword)); + } + + String ownerName = getOwnerName(); + if (StringUtils.isNotBlank(ownerName)) { + String ownerKind = StringUtils.defaultIfBlank(getOwnerKind(), User.KIND); + fieldQuery = and(fieldQuery, + equal("spec.owner", Comment.CommentOwner.ownerIdentity(ownerKind, ownerName))); + } + + listOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + return listOptions; + } + + public static void buildParameters(Builder builder) { + IListRequest.buildParameters(builder); + builder.parameter(QueryParamBuildUtil.sortParameter()) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("keyword") + .description("Comments filtered by keyword.") + .implementation(String.class)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("ownerKind") + .description("Commenter kind.") + .implementation(String.class)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("ownerName") + .description("Commenter name.") + .implementation(String.class)); + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/CommentRequest.java b/application/src/main/java/run/halo/app/content/comment/CommentRequest.java new file mode 100644 index 0000000..599cfca --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/CommentRequest.java @@ -0,0 +1,57 @@ +package run.halo.app.content.comment; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.UUID; +import lombok.Data; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.Ref; + +/** + * Request parameter object for {@link Comment}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +public class CommentRequest { + + @Schema(requiredMode = REQUIRED) + private Ref subjectRef; + + private CommentEmailOwner owner; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String raw; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String content; + + @Schema(defaultValue = "false") + private Boolean allowNotification; + + /** + * Converts {@link CommentRequest} to {@link Comment}. + * + * @return a comment + */ + public Comment toComment() { + Comment comment = new Comment(); + comment.setMetadata(new Metadata()); + comment.getMetadata().setName(UUID.randomUUID().toString()); + + Comment.CommentSpec spec = new Comment.CommentSpec(); + comment.setSpec(spec); + spec.setSubjectRef(subjectRef); + spec.setRaw(raw); + spec.setContent(content); + spec.setAllowNotification(allowNotification); + + if (owner != null) { + spec.setOwner(owner.toCommentOwner()); + } + return comment; + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/CommentService.java b/application/src/main/java/run/halo/app/content/comment/CommentService.java new file mode 100644 index 0000000..c3a9012 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/CommentService.java @@ -0,0 +1,22 @@ +package run.halo.app.content.comment; + +import org.springframework.lang.NonNull; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.Ref; + +/** + * An application service for {@link Comment}. + * + * @author guqing + * @since 2.0.0 + */ +public interface CommentService { + + Mono> listComment(CommentQuery query); + + Mono create(Comment comment); + + Mono removeBySubject(@NonNull Ref subjectRef); +} diff --git a/application/src/main/java/run/halo/app/content/comment/CommentServiceImpl.java b/application/src/main/java/run/halo/app/content/comment/CommentServiceImpl.java new file mode 100644 index 0000000..d32931c --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/CommentServiceImpl.java @@ -0,0 +1,256 @@ +package run.halo.app.content.comment; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import java.time.Duration; +import java.time.Instant; +import java.util.Set; +import java.util.function.Function; +import org.apache.commons.lang3.BooleanUtils; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.data.domain.Sort; +import org.springframework.lang.NonNull; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.service.RoleService; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Ref; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.exception.AccessDeniedException; +import run.halo.app.metrics.CounterService; +import run.halo.app.metrics.MeterUtils; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.security.authorization.AuthorityUtils; + +/** + * Comment service implementation. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class CommentServiceImpl implements CommentService { + + private final ReactiveExtensionClient client; + private final UserService userService; + private final RoleService roleService; + private final ExtensionGetter extensionGetter; + + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final CounterService counterService; + + public CommentServiceImpl(ReactiveExtensionClient client, + UserService userService, + SystemConfigurableEnvironmentFetcher environmentFetcher, + CounterService counterService, RoleService roleService, + ExtensionGetter extensionGetter + ) { + this.client = client; + this.userService = userService; + this.environmentFetcher = environmentFetcher; + this.counterService = counterService; + this.roleService = roleService; + this.extensionGetter = extensionGetter; + } + + @Override + public Mono> listComment(CommentQuery commentQuery) { + return this.client.listBy(Comment.class, commentQuery.toListOptions(), + commentQuery.toPageRequest()) + .flatMap(comments -> Flux.fromStream(comments.get() + .map(this::toListedComment)) + .concatMap(Function.identity()) + .collectList() + .map(list -> new ListResult<>(comments.getPage(), comments.getSize(), + comments.getTotal(), list) + ) + ); + } + + @Override + public Mono create(Comment comment) { + return environmentFetcher.fetchComment() + .flatMap(commentSetting -> { + if (Boolean.FALSE.equals(commentSetting.getEnable())) { + return Mono.error( + new AccessDeniedException("The comment function has been turned off.", + "problemDetail.comment.turnedOff", null)); + } + if (checkCommentOwner(comment, commentSetting.getSystemUserOnly())) { + return Mono.error( + new AccessDeniedException("Allow only system users to comment.", + "problemDetail.comment.systemUsersOnly", null)); + } + + if (comment.getSpec().getTop() == null) { + comment.getSpec().setTop(false); + } + if (comment.getSpec().getPriority() == null) { + comment.getSpec().setPriority(0); + } + comment.getSpec() + .setApproved(Boolean.FALSE.equals(commentSetting.getRequireReviewForNew())); + + if (BooleanUtils.isTrue(comment.getSpec().getApproved()) + && comment.getSpec().getApprovedTime() == null) { + comment.getSpec().setApprovedTime(Instant.now()); + } + + if (comment.getSpec().getCreationTime() == null) { + comment.getSpec().setCreationTime(Instant.now()); + } + + comment.getSpec().setHidden(false); + + // return if the comment owner is not null + if (comment.getSpec().getOwner() != null) { + return Mono.just(comment); + } + // populate owner from current user + return fetchCurrentUser() + .flatMap(currentUser -> ReactiveSecurityContextHolder.getContext() + .flatMap(securityContext -> { + var authentication = securityContext.getAuthentication(); + var roles = AuthorityUtils.authoritiesToRoles( + authentication.getAuthorities()); + return roleService.contains(roles, + Set.of(AuthorityUtils.COMMENT_MANAGEMENT_ROLE_NAME)) + .doOnNext(result -> { + if (result) { + comment.getSpec().setApproved(true); + comment.getSpec().setApprovedTime(Instant.now()); + } + }) + .thenReturn(toCommentOwner(currentUser)); + })) + .map(owner -> { + comment.getSpec().setOwner(owner); + return comment; + }) + .switchIfEmpty( + Mono.error(new IllegalStateException("The owner must not be null."))); + }) + .flatMap(client::create); + } + + @Override + public Mono removeBySubject(@NonNull Ref subjectRef) { + Assert.notNull(subjectRef, "The subjectRef must not be null."); + return cleanupComments(subjectRef, 200); + } + + private Mono cleanupComments(Ref subjectRef, int batchSize) { + // ascending order by creation time and name + final var pageRequest = PageRequestImpl.of(1, batchSize, + Sort.by("metadata.creationTimestamp", "metadata.name")); + // forever loop first page until no more to delete + return listCommentsByRef(subjectRef, pageRequest) + .flatMap(page -> Flux.fromIterable(page.getItems()) + .flatMap(this::deleteWithRetry) + .then(page.hasNext() ? cleanupComments(subjectRef, batchSize) : Mono.empty()) + ); + } + + private Mono deleteWithRetry(Comment item) { + return client.delete(item) + .onErrorResume(OptimisticLockingFailureException.class, + e -> attemptToDelete(item.getMetadata().getName())); + } + + private Mono attemptToDelete(String name) { + return Mono.defer(() -> client.fetch(Comment.class, name) + .flatMap(client::delete) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + Mono> listCommentsByRef(Ref subjectRef, PageRequest pageRequest) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + and(equal("spec.subjectRef", Comment.toSubjectRefKey(subjectRef)), + isNull("metadata.deletionTimestamp")) + )); + return client.listBy(Comment.class, listOptions, pageRequest); + } + + private boolean checkCommentOwner(Comment comment, Boolean onlySystemUser) { + Comment.CommentOwner owner = comment.getSpec().getOwner(); + if (Boolean.TRUE.equals(onlySystemUser)) { + return owner != null && Comment.CommentOwner.KIND_EMAIL.equals(owner.getKind()); + } + return false; + } + + private Comment.CommentOwner toCommentOwner(User user) { + Comment.CommentOwner owner = new Comment.CommentOwner(); + owner.setKind(User.KIND); + owner.setName(user.getMetadata().getName()); + owner.setDisplayName(user.getSpec().getDisplayName()); + return owner; + } + + private Mono fetchCurrentUser() { + return ReactiveSecurityContextHolder.getContext() + .map(securityContext -> securityContext.getAuthentication().getName()) + .flatMap(username -> client.fetch(User.class, username)); + } + + private Mono toListedComment(Comment comment) { + var builder = ListedComment.builder().comment(comment); + // not empty + var ownerInfoMono = getCommentOwnerInfo(comment.getSpec().getOwner()) + .doOnNext(builder::owner); + var subjectMono = getCommentSubject(comment.getSpec().getSubjectRef()) + .doOnNext(builder::subject); + var statsMono = fetchStats(comment.getMetadata().getName()) + .doOnNext(builder::stats); + return Mono.when(ownerInfoMono, subjectMono, statsMono) + .then(Mono.fromSupplier(builder::build)); + } + + Mono fetchStats(String commentName) { + Assert.notNull(commentName, "The commentName must not be null."); + return counterService.getByName(MeterUtils.nameOf(Comment.class, commentName)) + .map(counter -> CommentStats.builder() + .upvote(counter.getUpvote()) + .build() + ) + .defaultIfEmpty(CommentStats.empty()); + } + + private Mono getCommentOwnerInfo(Comment.CommentOwner owner) { + if (User.KIND.equals(owner.getKind())) { + return userService.getUserOrGhost(owner.getName()) + .map(OwnerInfo::from); + } + if (Comment.CommentOwner.KIND_EMAIL.equals(owner.getKind())) { + return Mono.just(OwnerInfo.from(owner)); + } + throw new IllegalStateException( + "Unsupported owner kind: " + owner.getKind()); + } + + @SuppressWarnings("unchecked") + Mono getCommentSubject(Ref ref) { + return extensionGetter.getExtensions(CommentSubject.class) + .filter(subject -> subject.supports(ref)) + .next() + .flatMap(subject -> subject.get(ref.getName())); + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/CommentStats.java b/application/src/main/java/run/halo/app/content/comment/CommentStats.java new file mode 100644 index 0000000..7de0642 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/CommentStats.java @@ -0,0 +1,23 @@ +package run.halo.app.content.comment; + +import lombok.Builder; +import lombok.Value; + +/** + * comment stats value object. + * + * @author LIlGG + * @since 2.0.0 + */ +@Value +@Builder +public class CommentStats { + + Integer upvote; + + public static CommentStats empty() { + return CommentStats.builder() + .upvote(0) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/ListedComment.java b/application/src/main/java/run/halo/app/content/comment/ListedComment.java new file mode 100644 index 0000000..eb5594d --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/ListedComment.java @@ -0,0 +1,31 @@ +package run.halo.app.content.comment; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Builder; +import lombok.Data; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.extension.Extension; + +/** + * Listed comment. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@Builder +public class ListedComment { + + @Schema(requiredMode = REQUIRED) + private Comment comment; + + @Schema(requiredMode = REQUIRED) + private OwnerInfo owner; + + private Extension subject; + + @Schema(requiredMode = REQUIRED) + private CommentStats stats; +} diff --git a/application/src/main/java/run/halo/app/content/comment/ListedReply.java b/application/src/main/java/run/halo/app/content/comment/ListedReply.java new file mode 100644 index 0000000..01050c3 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/ListedReply.java @@ -0,0 +1,28 @@ +package run.halo.app.content.comment; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Builder; +import lombok.Data; +import run.halo.app.core.extension.content.Reply; + +/** + * Listed reply for {@link Reply}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@Builder +public class ListedReply { + + @Schema(requiredMode = REQUIRED) + private Reply reply; + + @Schema(requiredMode = REQUIRED) + private OwnerInfo owner; + + @Schema(requiredMode = REQUIRED) + private CommentStats stats; +} diff --git a/application/src/main/java/run/halo/app/content/comment/OwnerInfo.java b/application/src/main/java/run/halo/app/content/comment/OwnerInfo.java new file mode 100644 index 0000000..69f98e3 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/OwnerInfo.java @@ -0,0 +1,62 @@ +package run.halo.app.content.comment; + +import lombok.Builder; +import lombok.Value; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.content.Comment; + +/** + * Comment owner info. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@Builder +public class OwnerInfo { + + String kind; + + String name; + + String displayName; + + String avatar; + + String email; + + /** + * Convert user to owner info by owner that has an email kind . + * + * @param owner comment owner reference. + * @return owner info. + */ + public static OwnerInfo from(Comment.CommentOwner owner) { + if (!Comment.CommentOwner.KIND_EMAIL.equals(owner.getKind())) { + throw new IllegalArgumentException("Only support 'email' owner kind."); + } + return OwnerInfo.builder() + .kind(owner.getKind()) + .name(owner.getName()) + .email(owner.getName()) + .displayName(owner.getDisplayName()) + .avatar(owner.getAnnotation(Comment.CommentOwner.AVATAR_ANNO)) + .build(); + } + + /** + * Convert user to owner info by {@link User}. + * + * @param user user extension. + * @return owner info. + */ + public static OwnerInfo from(User user) { + return OwnerInfo.builder() + .kind(user.getKind()) + .name(user.getMetadata().getName()) + .email(user.getSpec().getEmail()) + .avatar(user.getSpec().getAvatar()) + .displayName(user.getSpec().getDisplayName()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/PostCommentSubject.java b/application/src/main/java/run/halo/app/content/comment/PostCommentSubject.java new file mode 100644 index 0000000..1e96a53 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/PostCommentSubject.java @@ -0,0 +1,48 @@ +package run.halo.app.content.comment; + +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Ref; +import run.halo.app.infra.ExternalLinkProcessor; + +/** + * Comment subject for post. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class PostCommentSubject implements CommentSubject { + + private final ReactiveExtensionClient client; + private final ExternalLinkProcessor externalLinkProcessor; + + @Override + public Mono get(String name) { + return client.fetch(Post.class, name); + } + + @Override + public Mono getSubjectDisplay(String name) { + return get(name) + .map(post -> { + var url = externalLinkProcessor + .processLink(post.getStatusOrDefault().getPermalink()); + return new SubjectDisplay(post.getSpec().getTitle(), url, "文章"); + }); + } + + @Override + public boolean supports(Ref ref) { + Assert.notNull(ref, "Subject ref must not be null."); + GroupVersionKind groupVersionKind = + new GroupVersionKind(ref.getGroup(), ref.getVersion(), ref.getKind()); + return GroupVersionKind.fromExtension(Post.class).equals(groupVersionKind); + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java b/application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java new file mode 100644 index 0000000..eff83af --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java @@ -0,0 +1,73 @@ +package run.halo.app.content.comment; + +import io.micrometer.common.util.StringUtils; +import lombok.RequiredArgsConstructor; +import org.springframework.lang.Nullable; +import org.springframework.stereotype.Component; +import run.halo.app.content.NotificationReasonConst; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.notification.NotificationCenter; +import run.halo.app.notification.UserIdentity; + +/** + * Reply notification subscription helper. + * + * @author guqing + * @since 2.9.0 + */ +@Component +@RequiredArgsConstructor +public class ReplyNotificationSubscriptionHelper { + + private final NotificationCenter notificationCenter; + + /** + * Subscribe new reply reason for comment. + * + * @param comment comment + */ + public void subscribeNewReplyReasonForComment(Comment comment) { + subscribeReply(identityFrom(comment.getSpec().getOwner())); + } + + /** + * Subscribe new reply reason for reply. + * + * @param reply reply + */ + public void subscribeNewReplyReasonForReply(Reply reply) { + var subjectOwner = reply.getSpec().getOwner(); + subscribeReply(identityFrom(subjectOwner)); + } + + void subscribeReply(UserIdentity identity) { + var subscriber = createSubscriber(identity); + if (subscriber == null) { + return; + } + var interestReason = new Subscription.InterestReason(); + interestReason.setReasonType(NotificationReasonConst.SOMEONE_REPLIED_TO_YOU); + interestReason.setExpression("props.repliedOwner == '%s'".formatted(identity.name())); + notificationCenter.subscribe(subscriber, interestReason).block(); + } + + @Nullable + private Subscription.Subscriber createSubscriber(UserIdentity author) { + if (StringUtils.isBlank(author.name())) { + return null; + } + + Subscription.Subscriber subscriber = new Subscription.Subscriber(); + subscriber.setName(author.name()); + return subscriber; + } + + public static UserIdentity identityFrom(Comment.CommentOwner owner) { + if (Comment.CommentOwner.KIND_EMAIL.equals(owner.getKind())) { + return UserIdentity.anonymousWithEmail(owner.getName()); + } + return UserIdentity.of(owner.getName()); + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/ReplyQuery.java b/application/src/main/java/run/halo/app/content/comment/ReplyQuery.java new file mode 100644 index 0000000..2dff447 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/ReplyQuery.java @@ -0,0 +1,67 @@ +package run.halo.app.content.comment; + +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToListOptions; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springframework.data.domain.Sort; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.ServerWebInputException; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.router.SortableRequest; + +/** + * Query criteria for {@link Reply} list. + * + * @author guqing + * @since 2.0.0 + */ +public class ReplyQuery extends SortableRequest { + + public ReplyQuery(ServerWebExchange exchange) { + super(exchange); + } + + @Schema(description = "Replies filtered by commentName.") + public String getCommentName() { + String commentName = queryParams.getFirst("commentName"); + if (StringUtils.isBlank(commentName)) { + throw new ServerWebInputException("The required parameter 'commentName' is missing."); + } + return commentName; + } + + /** + * Build list options from query criteria. + */ + public ListOptions toListOptions() { + var listOptions = + labelAndFieldSelectorToListOptions(getLabelSelector(), getFieldSelector()); + var newFieldSelector = listOptions.getFieldSelector() + .andQuery(equal("spec.commentName", getCommentName())); + listOptions.setFieldSelector(newFieldSelector); + return listOptions; + } + + public PageRequest toPageRequest() { + var sort = getSort().and(Sort.by("spec.creationTime").ascending()); + return PageRequestImpl.of(getPage(), getSize(), sort); + } + + public static void buildParameters(Builder builder) { + SortableRequest.buildParameters(builder); + builder.parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("commentName") + .description("Replies filtered by commentName.") + .implementation(String.class) + .required(true)); + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/ReplyRequest.java b/application/src/main/java/run/halo/app/content/comment/ReplyRequest.java new file mode 100644 index 0000000..d7ad2c3 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/ReplyRequest.java @@ -0,0 +1,55 @@ +package run.halo.app.content.comment; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.UUID; +import lombok.Data; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.extension.Metadata; + +/** + * A request parameter object for {@link Reply}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +public class ReplyRequest { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String raw; + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String content; + + @Schema(defaultValue = "false") + private Boolean allowNotification; + + private CommentEmailOwner owner; + + private String quoteReply; + + /** + * Converts {@link ReplyRequest} to {@link Reply}. + * + * @return a reply + */ + public Reply toReply() { + Reply reply = new Reply(); + reply.setMetadata(new Metadata()); + reply.getMetadata().setName(UUID.randomUUID().toString()); + + Reply.ReplySpec spec = new Reply.ReplySpec(); + reply.setSpec(spec); + spec.setRaw(raw); + spec.setContent(content); + spec.setAllowNotification(allowNotification); + spec.setQuoteReply(quoteReply); + + if (owner != null) { + spec.setOwner(owner.toCommentOwner()); + } + return reply; + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/ReplyService.java b/application/src/main/java/run/halo/app/content/comment/ReplyService.java new file mode 100644 index 0000000..0c5f7c0 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/ReplyService.java @@ -0,0 +1,20 @@ +package run.halo.app.content.comment; + +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.extension.ListResult; + +/** + * An application service for {@link Reply}. + * + * @author guqing + * @since 2.0.0 + */ +public interface ReplyService { + + Mono create(String commentName, Reply reply); + + Mono> list(ReplyQuery query); + + Mono removeAllByComment(String commentName); +} diff --git a/application/src/main/java/run/halo/app/content/comment/ReplyServiceImpl.java b/application/src/main/java/run/halo/app/content/comment/ReplyServiceImpl.java new file mode 100644 index 0000000..5c32c96 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/ReplyServiceImpl.java @@ -0,0 +1,260 @@ +package run.halo.app.content.comment; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; +import static run.halo.app.security.authorization.AuthorityUtils.COMMENT_MANAGEMENT_ROLE_NAME; +import static run.halo.app.security.authorization.AuthorityUtils.authoritiesToRoles; + +import java.time.Duration; +import java.time.Instant; +import java.util.ArrayList; +import java.util.Set; +import java.util.function.Function; +import java.util.function.UnaryOperator; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.reactivestreams.Publisher; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.data.domain.Sort; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Service; +import org.springframework.util.Assert; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.core.extension.service.RoleService; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.metrics.CounterService; +import run.halo.app.metrics.MeterUtils; + +/** + * A default implementation of {@link ReplyService}. + * + * @author guqing + * @since 2.0.0 + */ +@Service +@RequiredArgsConstructor +public class ReplyServiceImpl implements ReplyService { + + private final ReactiveExtensionClient client; + private final UserService userService; + private final RoleService roleService; + private final CounterService counterService; + + @Override + public Mono create(String commentName, Reply reply) { + return client.get(Comment.class, commentName) + .flatMap(comment -> prepareReply(commentName, reply) + .flatMap(client::create) + .flatMap(createdReply -> { + var quotedReply = createdReply.getSpec().getQuoteReply(); + if (StringUtils.isBlank(quotedReply)) { + return Mono.just(createdReply); + } + return approveReply(quotedReply) + .thenReturn(createdReply); + }) + .flatMap(createdReply -> approveComment(comment) + .thenReturn(createdReply) + ) + ); + } + + private Mono approveComment(Comment comment) { + UnaryOperator updateFunc = commentToUpdate -> { + commentToUpdate.getSpec().setApproved(true); + commentToUpdate.getSpec().setApprovedTime(Instant.now()); + return commentToUpdate; + }; + return client.update(updateFunc.apply(comment)) + .onErrorResume(OptimisticLockingFailureException.class, + e -> updateCommentWithRetry(comment.getMetadata().getName(), updateFunc)); + } + + private Mono approveReply(String replyName) { + return Mono.defer(() -> client.fetch(Reply.class, replyName) + .flatMap(reply -> { + reply.getSpec().setApproved(true); + reply.getSpec().setApprovedTime(Instant.now()); + return client.update(reply); + }) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)) + .then(); + } + + private Mono updateCommentWithRetry(String name, UnaryOperator updateFunc) { + return Mono.defer(() -> client.get(Comment.class, name) + .map(updateFunc) + .flatMap(client::update) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + private Mono prepareReply(String commentName, Reply reply) { + reply.getSpec().setCommentName(commentName); + if (reply.getSpec().getTop() == null) { + reply.getSpec().setTop(false); + } + if (reply.getSpec().getPriority() == null) { + reply.getSpec().setPriority(0); + } + if (reply.getSpec().getCreationTime() == null) { + reply.getSpec().setCreationTime(Instant.now()); + } + if (reply.getSpec().getApproved() == null) { + reply.getSpec().setApproved(false); + } + if (BooleanUtils.isTrue(reply.getSpec().getApproved()) + && reply.getSpec().getApprovedTime() == null) { + reply.getSpec().setApprovedTime(Instant.now()); + } + + var steps = new ArrayList>(); + var approveItMono = hasCommentManagePermission() + .filter(Boolean::booleanValue) + .doOnNext(hasPermission -> { + reply.getSpec().setApproved(true); + reply.getSpec().setApprovedTime(Instant.now()); + }); + steps.add(approveItMono); + + var populateOwnerMono = fetchCurrentUser() + .switchIfEmpty( + Mono.error(new IllegalArgumentException("Reply owner must not be null."))) + .doOnNext(user -> reply.getSpec().setOwner(toCommentOwner(user))); + if (reply.getSpec().getOwner() == null) { + steps.add(populateOwnerMono); + } + return Mono.when(steps).thenReturn(reply); + } + + Mono hasCommentManagePermission() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .flatMap(authentication -> { + var roles = authoritiesToRoles(authentication.getAuthorities()); + return roleService.contains(roles, Set.of(COMMENT_MANAGEMENT_ROLE_NAME)); + }); + } + + @Override + public Mono> list(ReplyQuery query) { + return client.listBy(Reply.class, query.toListOptions(), query.toPageRequest()) + .flatMap(list -> Flux.fromStream(list.get() + .map(this::toListedReply)) + .concatMap(Function.identity()) + .collectList() + .map(listedReplies -> new ListResult<>(list.getPage(), list.getSize(), + list.getTotal(), listedReplies)) + ); + } + + @Override + public Mono removeAllByComment(String commentName) { + Assert.notNull(commentName, "The commentName must not be null."); + return cleanupComments(commentName, 200); + } + + private Mono cleanupComments(String commentName, int batchSize) { + // ascending order by creation time and name + final var pageRequest = PageRequestImpl.of(1, batchSize, + Sort.by("metadata.creationTimestamp", "metadata.name")); + // forever loop first page until no more to delete + return listRepliesByComment(commentName, pageRequest) + .flatMap(page -> Flux.fromIterable(page.getItems()) + .flatMap(this::deleteWithRetry) + .then(page.hasNext() ? cleanupComments(commentName, batchSize) : Mono.empty()) + ); + } + + private Mono deleteWithRetry(Reply item) { + return client.delete(item) + .onErrorResume(OptimisticLockingFailureException.class, + e -> attemptToDelete(item.getMetadata().getName())); + } + + private Mono attemptToDelete(String name) { + return Mono.defer(() -> client.fetch(Reply.class, name) + .flatMap(client::delete) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + Mono> listRepliesByComment(String commentName, PageRequest pageRequest) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + and(equal("spec.commentName", commentName), + isNull("metadata.deletionTimestamp")) + )); + return client.listBy(Reply.class, listOptions, pageRequest); + } + + private Mono toListedReply(Reply reply) { + ListedReply.ListedReplyBuilder builder = ListedReply.builder() + .reply(reply); + return getOwnerInfo(reply) + .map(ownerInfo -> { + builder.owner(ownerInfo); + return builder; + }) + .map(ListedReply.ListedReplyBuilder::build) + .flatMap(listedReply -> fetchStats(reply) + .doOnNext(listedReply::setStats) + .thenReturn(listedReply)); + } + + Mono fetchStats(Reply reply) { + Assert.notNull(reply, "The reply must not be null."); + String name = reply.getMetadata().getName(); + return counterService.getByName(MeterUtils.nameOf(Reply.class, name)) + .map(counter -> CommentStats.builder() + .upvote(counter.getUpvote()) + .build() + ) + .defaultIfEmpty(CommentStats.empty()); + } + + private Mono getOwnerInfo(Reply reply) { + Comment.CommentOwner owner = reply.getSpec().getOwner(); + if (User.KIND.equals(owner.getKind())) { + return userService.getUserOrGhost(owner.getName()) + .map(OwnerInfo::from); + } + if (Comment.CommentOwner.KIND_EMAIL.equals(owner.getKind())) { + return Mono.just(OwnerInfo.from(owner)); + } + throw new IllegalStateException( + "Unsupported owner kind: " + owner.getKind()); + } + + private Comment.CommentOwner toCommentOwner(User user) { + Comment.CommentOwner owner = new Comment.CommentOwner(); + owner.setKind(User.KIND); + owner.setName(user.getMetadata().getName()); + owner.setDisplayName(user.getSpec().getDisplayName()); + return owner; + } + + private Mono fetchCurrentUser() { + return ReactiveSecurityContextHolder.getContext() + .map(securityContext -> securityContext.getAuthentication().getName()) + .flatMap(username -> client.fetch(User.class, username)); + } +} diff --git a/application/src/main/java/run/halo/app/content/comment/SinglePageCommentSubject.java b/application/src/main/java/run/halo/app/content/comment/SinglePageCommentSubject.java new file mode 100644 index 0000000..4f7eeb6 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/comment/SinglePageCommentSubject.java @@ -0,0 +1,49 @@ +package run.halo.app.content.comment; + +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Ref; +import run.halo.app.infra.ExternalLinkProcessor; + +/** + * Comment subject for {@link SinglePage}. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class SinglePageCommentSubject implements CommentSubject { + + private final ReactiveExtensionClient client; + + private final ExternalLinkProcessor externalLinkProcessor; + + @Override + public Mono get(String name) { + return client.fetch(SinglePage.class, name); + } + + @Override + public Mono getSubjectDisplay(String name) { + return get(name) + .map(page -> { + var url = externalLinkProcessor + .processLink(page.getStatusOrDefault().getPermalink()); + return new SubjectDisplay(page.getSpec().getTitle(), url, "页面"); + }); + } + + @Override + public boolean supports(Ref ref) { + Assert.notNull(ref, "Subject ref must not be null."); + GroupVersionKind groupVersionKind = + new GroupVersionKind(ref.getGroup(), ref.getVersion(), ref.getKind()); + return GroupVersionKind.fromExtension(SinglePage.class).equals(groupVersionKind); + } +} diff --git a/application/src/main/java/run/halo/app/content/impl/CategoryServiceImpl.java b/application/src/main/java/run/halo/app/content/impl/CategoryServiceImpl.java new file mode 100644 index 0000000..b7328ab --- /dev/null +++ b/application/src/main/java/run/halo/app/content/impl/CategoryServiceImpl.java @@ -0,0 +1,71 @@ +package run.halo.app.content.impl; + +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.data.domain.Sort; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.content.CategoryService; +import run.halo.app.core.extension.content.Category; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; + +@Component +@RequiredArgsConstructor +public class CategoryServiceImpl implements CategoryService { + private final ReactiveExtensionClient client; + + @Override + public Flux listChildren(@NonNull String categoryName) { + return client.fetch(Category.class, categoryName) + .expand(category -> { + var children = category.getSpec().getChildren(); + if (children == null || children.isEmpty()) { + return Mono.empty(); + } + return Flux.fromIterable(children) + .flatMap(name -> client.fetch(Category.class, name)) + .filter(this::isNotIndependent); + }); + } + + @Override + public Mono getParentByName(@NonNull String name) { + if (StringUtils.isBlank(name)) { + return Mono.empty(); + } + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + equal("spec.children", name) + )); + return client.listBy(Category.class, listOptions, + PageRequestImpl.of(1, 1, defaultSort()) + ) + .flatMap(result -> Mono.justOrEmpty(ListResult.first(result))); + } + + @Override + public Mono isCategoryHidden(@NonNull String categoryName) { + return client.fetch(Category.class, categoryName) + .expand(category -> getParentByName(category.getMetadata().getName())) + .filter(category -> category.getSpec().isHideFromList()) + .hasElements(); + } + + static Sort defaultSort() { + return Sort.by(Sort.Order.desc("spec.priority"), + Sort.Order.desc("metadata.creationTimestamp"), + Sort.Order.desc("metadata.name")); + } + + private boolean isNotIndependent(Category category) { + return !category.getSpec().isPreventParentPostCascadeQuery(); + } +} diff --git a/application/src/main/java/run/halo/app/content/impl/PostServiceImpl.java b/application/src/main/java/run/halo/app/content/impl/PostServiceImpl.java new file mode 100644 index 0000000..1b2c974 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/impl/PostServiceImpl.java @@ -0,0 +1,404 @@ +package run.halo.app.content.impl; + +import static run.halo.app.extension.index.query.QueryFactory.in; + +import java.time.Duration; +import java.time.Instant; +import java.util.List; +import java.util.Objects; +import java.util.function.Function; +import java.util.function.UnaryOperator; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.data.domain.Sort; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.content.AbstractContentService; +import run.halo.app.content.CategoryService; +import run.halo.app.content.ContentRequest; +import run.halo.app.content.ContentWrapper; +import run.halo.app.content.Contributor; +import run.halo.app.content.ListedPost; +import run.halo.app.content.ListedSnapshotDto; +import run.halo.app.content.PostQuery; +import run.halo.app.content.PostRequest; +import run.halo.app.content.PostService; +import run.halo.app.content.Stats; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.MetadataOperator; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Ref; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.Condition; +import run.halo.app.infra.ConditionStatus; +import run.halo.app.metrics.CounterService; +import run.halo.app.metrics.MeterUtils; + +/** + * A default implementation of {@link PostService}. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class PostServiceImpl extends AbstractContentService implements PostService { + private final ReactiveExtensionClient client; + private final CounterService counterService; + private final UserService userService; + private final CategoryService categoryService; + + public PostServiceImpl(ReactiveExtensionClient client, CounterService counterService, + UserService userService, CategoryService categoryService) { + super(client); + this.client = client; + this.counterService = counterService; + this.userService = userService; + this.categoryService = categoryService; + } + + @Override + public Mono> listPost(PostQuery query) { + return buildListOptions(query) + .flatMap(listOptions -> client.listBy(Post.class, listOptions, + PageRequestImpl.of(query.getPage(), query.getSize(), query.getSort()) + )) + .flatMap(listResult -> Flux.fromStream(listResult.get()) + .map(this::getListedPost) + .concatMap(Function.identity()) + .collectList() + .map(listedPosts -> new ListResult<>(listResult.getPage(), listResult.getSize(), + listResult.getTotal(), listedPosts) + ) + .defaultIfEmpty(ListResult.emptyResult()) + ); + } + + Mono buildListOptions(PostQuery query) { + var categoryName = query.getCategoryWithChildren(); + if (categoryName == null) { + return Mono.just(query.toListOptions()); + } + return categoryService.listChildren(categoryName) + .collectList() + .map(categories -> { + var categoryNames = categories.stream() + .map(Category::getMetadata) + .map(MetadataOperator::getName) + .toList(); + var listOptions = query.toListOptions(); + var newFiledSelector = listOptions.getFieldSelector() + .andQuery(in("spec.categories", categoryNames)); + listOptions.setFieldSelector(newFiledSelector); + return listOptions; + }); + } + + Mono fetchStats(Post post) { + Assert.notNull(post, "The post must not be null."); + String name = post.getMetadata().getName(); + return counterService.getByName(MeterUtils.nameOf(Post.class, name)) + .map(counter -> Stats.builder() + .visit(counter.getVisit()) + .upvote(counter.getUpvote()) + .totalComment(counter.getTotalComment()) + .approvedComment(counter.getApprovedComment()) + .build() + ) + .defaultIfEmpty(Stats.empty()); + } + + private Mono getListedPost(Post post) { + Assert.notNull(post, "The post must not be null."); + var listedPost = new ListedPost().setPost(post); + + var statsMono = fetchStats(post) + .doOnNext(listedPost::setStats); + + var tagsMono = listTags(post.getSpec().getTags()) + .collectList() + .doOnNext(listedPost::setTags); + + var categoriesMono = listCategories(post.getSpec().getCategories()) + .collectList() + .doOnNext(listedPost::setCategories); + + var contributorsMono = listContributors(post.getStatusOrDefault().getContributors()) + .collectList() + .doOnNext(listedPost::setContributors); + + var ownerMono = userService.getUserOrGhost(post.getSpec().getOwner()) + .map(user -> { + Contributor contributor = new Contributor(); + contributor.setName(user.getMetadata().getName()); + contributor.setDisplayName(user.getSpec().getDisplayName()); + contributor.setAvatar(user.getSpec().getAvatar()); + return contributor; + }) + .doOnNext(listedPost::setOwner); + return Mono.when(statsMono, tagsMono, categoriesMono, contributorsMono, ownerMono) + .thenReturn(listedPost); + } + + private Flux listTags(List tagNames) { + if (tagNames == null) { + return Flux.empty(); + } + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of(in("metadata.name", tagNames))); + return client.listAll(Tag.class, listOptions, Sort.by("metadata.creationTimestamp")); + } + + private Flux listCategories(List categoryNames) { + if (categoryNames == null) { + return Flux.empty(); + } + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of(in("metadata.name", categoryNames))); + return client.listAll(Category.class, listOptions, Sort.by("metadata.creationTimestamp")); + } + + private Flux listContributors(List usernames) { + if (usernames == null) { + return Flux.empty(); + } + return Flux.fromIterable(usernames) + .concatMap(userService::getUserOrGhost) + .map(user -> { + Contributor contributor = new Contributor(); + contributor.setName(user.getMetadata().getName()); + contributor.setDisplayName(user.getSpec().getDisplayName()); + contributor.setAvatar(user.getSpec().getAvatar()); + return contributor; + }); + } + + @Override + public Mono draftPost(PostRequest postRequest) { + return Mono.defer( + () -> { + var post = postRequest.post(); + return getContextUsername() + .doOnNext(username -> post.getSpec().setOwner(username)) + .thenReturn(post); + }) + .flatMap(client::create) + .flatMap(post -> { + if (postRequest.content() == null) { + return Mono.just(post); + } + var contentRequest = + new ContentRequest(Ref.of(post), post.getSpec().getHeadSnapshot(), + null, + postRequest.content().raw(), postRequest.content().content(), + postRequest.content().rawType()); + return draftContent(post.getSpec().getBaseSnapshot(), contentRequest) + .flatMap(contentWrapper -> waitForPostToDraftConcludingWork( + post.getMetadata().getName(), + contentWrapper) + ); + }) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + private Mono waitForPostToDraftConcludingWork(String postName, + ContentWrapper contentWrapper) { + return Mono.defer(() -> client.fetch(Post.class, postName) + .flatMap(post -> { + post.getSpec().setBaseSnapshot(contentWrapper.getSnapshotName()); + post.getSpec().setHeadSnapshot(contentWrapper.getSnapshotName()); + if (Objects.equals(true, post.getSpec().getPublish())) { + post.getSpec().setReleaseSnapshot(post.getSpec().getHeadSnapshot()); + } + Condition condition = Condition.builder() + .type(Post.PostPhase.DRAFT.name()) + .reason("DraftedSuccessfully") + .message("Drafted post successfully.") + .status(ConditionStatus.TRUE) + .lastTransitionTime(Instant.now()) + .build(); + Post.PostStatus status = post.getStatusOrDefault(); + status.setPhase(Post.PostPhase.DRAFT.name()); + status.getConditionsOrDefault().addAndEvictFIFO(condition); + return client.update(post); + })) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + @Override + public Mono updatePost(PostRequest postRequest) { + Post post = postRequest.post(); + String headSnapshot = post.getSpec().getHeadSnapshot(); + String releaseSnapshot = post.getSpec().getReleaseSnapshot(); + String baseSnapshot = post.getSpec().getBaseSnapshot(); + + if (StringUtils.equals(releaseSnapshot, headSnapshot)) { + // create new snapshot to update first + return draftContent(baseSnapshot, postRequest.contentRequest(), headSnapshot) + .flatMap(contentWrapper -> { + post.getSpec().setHeadSnapshot(contentWrapper.getSnapshotName()); + return client.update(post); + }); + } + return updateContent(baseSnapshot, postRequest.contentRequest()) + .flatMap(contentWrapper -> { + post.getSpec().setHeadSnapshot(contentWrapper.getSnapshotName()); + return client.update(post); + }); + } + + @Override + public Mono updateBy(@NonNull Post post) { + return client.update(post); + } + + @Override + public Mono getHeadContent(String postName) { + return client.get(Post.class, postName) + .flatMap(this::getHeadContent); + } + + @Override + public Mono getHeadContent(Post post) { + var headSnapshot = post.getSpec().getHeadSnapshot(); + return getContent(headSnapshot, post.getSpec().getBaseSnapshot()); + } + + @Override + public Mono getReleaseContent(String postName) { + return client.get(Post.class, postName) + .flatMap(this::getReleaseContent); + } + + @Override + public Mono getReleaseContent(Post post) { + var releaseSnapshot = post.getSpec().getReleaseSnapshot(); + return getContent(releaseSnapshot, post.getSpec().getBaseSnapshot()); + } + + @Override + public Flux listSnapshots(String name) { + return client.fetch(Post.class, name) + .flatMapMany(page -> listSnapshotsBy(Ref.of(page))) + .map(ListedSnapshotDto::from); + } + + @Override + public Mono publish(Post post) { + var spec = post.getSpec(); + spec.setPublish(true); + if (spec.getHeadSnapshot() == null) { + spec.setHeadSnapshot(spec.getBaseSnapshot()); + } + spec.setReleaseSnapshot(spec.getHeadSnapshot()); + return client.update(post); + } + + @Override + public Mono unpublish(Post post) { + post.getSpec().setPublish(false); + return client.update(post); + } + + @Override + public Mono getByUsername(String postName, String username) { + return client.get(Post.class, postName) + .filter(post -> post.getSpec() != null) + .filter(post -> Objects.equals(username, post.getSpec().getOwner())); + } + + @Override + public Mono revertToSpecifiedSnapshot(String postName, String snapshotName) { + return client.get(Post.class, postName) + .filter(post -> { + var head = post.getSpec().getHeadSnapshot(); + return !StringUtils.equals(head, snapshotName); + }) + .flatMap(post -> { + var baseSnapshot = post.getSpec().getBaseSnapshot(); + return getContent(snapshotName, baseSnapshot) + .map(content -> ContentRequest.builder() + .subjectRef(Ref.of(post)) + .headSnapshotName(post.getSpec().getHeadSnapshot()) + .content(content.getContent()) + .raw(content.getRaw()) + .rawType(content.getRawType()) + .build() + ) + .flatMap(contentRequest -> draftContent(baseSnapshot, contentRequest)) + .flatMap(content -> { + post.getSpec().setHeadSnapshot(content.getSnapshotName()); + return publishPostWithRetry(post); + }); + }); + } + + @Override + public Mono deleteContent(String postName, String snapshotName) { + return client.get(Post.class, postName) + .flatMap(post -> { + var headSnapshotName = post.getSpec().getHeadSnapshot(); + if (StringUtils.equals(headSnapshotName, snapshotName)) { + return updatePostWithRetry(post, record -> { + // update head to release + record.getSpec().setHeadSnapshot(record.getSpec().getReleaseSnapshot()); + return record; + }); + } + return Mono.just(post); + }) + .flatMap(post -> { + var baseSnapshotName = post.getSpec().getBaseSnapshot(); + var releaseSnapshotName = post.getSpec().getReleaseSnapshot(); + if (StringUtils.equals(releaseSnapshotName, snapshotName)) { + return Mono.error(new ServerWebInputException( + "The snapshot to delete is the release snapshot, please" + + " revert to another snapshot first.")); + } + if (StringUtils.equals(baseSnapshotName, snapshotName)) { + return Mono.error( + new ServerWebInputException("The first snapshot cannot be deleted.")); + } + return client.fetch(Snapshot.class, snapshotName) + .flatMap(client::delete) + .flatMap(deleted -> restoredContent(baseSnapshotName, deleted)); + }); + } + + private Mono updatePostWithRetry(Post post, UnaryOperator func) { + return client.update(func.apply(post)) + .onErrorResume(OptimisticLockingFailureException.class, + e -> Mono.defer(() -> client.get(Post.class, post.getMetadata().getName()) + .map(func) + .flatMap(client::update) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)) + ); + } + + Mono publishPostWithRetry(Post post) { + return publish(post) + .onErrorResume(OptimisticLockingFailureException.class, + e -> Mono.defer(() -> client.get(Post.class, post.getMetadata().getName()) + .flatMap(this::publish)) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)) + ); + } +} diff --git a/application/src/main/java/run/halo/app/content/impl/SinglePageServiceImpl.java b/application/src/main/java/run/halo/app/content/impl/SinglePageServiceImpl.java new file mode 100644 index 0000000..8fc7609 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/impl/SinglePageServiceImpl.java @@ -0,0 +1,321 @@ +package run.halo.app.content.impl; + +import java.time.Duration; +import java.time.Instant; +import java.util.List; +import java.util.Objects; +import java.util.function.Function; +import java.util.function.UnaryOperator; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.stereotype.Service; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.content.AbstractContentService; +import run.halo.app.content.ContentRequest; +import run.halo.app.content.ContentWrapper; +import run.halo.app.content.Contributor; +import run.halo.app.content.ListedSinglePage; +import run.halo.app.content.ListedSnapshotDto; +import run.halo.app.content.SinglePageQuery; +import run.halo.app.content.SinglePageRequest; +import run.halo.app.content.SinglePageService; +import run.halo.app.content.Stats; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Ref; +import run.halo.app.infra.Condition; +import run.halo.app.infra.ConditionStatus; +import run.halo.app.metrics.CounterService; +import run.halo.app.metrics.MeterUtils; + +/** + * Single page service implementation. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Service +public class SinglePageServiceImpl extends AbstractContentService implements SinglePageService { + + private final ReactiveExtensionClient client; + private final CounterService counterService; + private final UserService userService; + + public SinglePageServiceImpl(ReactiveExtensionClient client, CounterService counterService, + UserService userService) { + super(client); + this.client = client; + this.counterService = counterService; + this.userService = userService; + } + + @Override + public Mono getHeadContent(String singlePageName) { + return client.get(SinglePage.class, singlePageName) + .flatMap(singlePage -> { + String headSnapshot = singlePage.getSpec().getHeadSnapshot(); + return getContent(headSnapshot, singlePage.getSpec().getBaseSnapshot()); + }); + } + + @Override + public Mono getReleaseContent(String singlePageName) { + return client.get(SinglePage.class, singlePageName) + .flatMap(singlePage -> { + String releaseSnapshot = singlePage.getSpec().getReleaseSnapshot(); + return getContent(releaseSnapshot, singlePage.getSpec().getBaseSnapshot()); + }); + } + + @Override + public Flux listSnapshots(String pageName) { + return client.fetch(SinglePage.class, pageName) + .flatMapMany(page -> listSnapshotsBy(Ref.of(page))) + .map(ListedSnapshotDto::from); + } + + @Override + public Mono> list(SinglePageQuery query) { + return client.list(SinglePage.class, query.toPredicate(), + query.toComparator(), query.getPage(), query.getSize()) + .flatMap(listResult -> Flux.fromStream( + listResult.get().map(this::getListedSinglePage) + ) + .concatMap(Function.identity()) + .collectList() + .map(listedSinglePages -> new ListResult<>(listResult.getPage(), + listResult.getSize(), + listResult.getTotal(), listedSinglePages) + ) + ); + } + + @Override + public Mono draft(SinglePageRequest pageRequest) { + return Mono.defer( + () -> { + SinglePage page = pageRequest.page(); + return getContextUsername() + .doOnNext(username -> page.getSpec().setOwner(username)) + .thenReturn(page); + } + ) + .flatMap(client::create) + .flatMap(page -> { + var contentRequest = + new ContentRequest(Ref.of(page), page.getSpec().getHeadSnapshot(), + null, + pageRequest.content().raw(), pageRequest.content().content(), + pageRequest.content().rawType()); + return draftContent(page.getSpec().getBaseSnapshot(), contentRequest) + .flatMap( + contentWrapper -> waitForPageToDraftConcludingWork( + page.getMetadata().getName(), + contentWrapper + ) + ); + }); + } + + private Mono waitForPageToDraftConcludingWork(String pageName, + ContentWrapper contentWrapper) { + return Mono.defer(() -> client.fetch(SinglePage.class, pageName) + .flatMap(page -> { + page.getSpec().setBaseSnapshot(contentWrapper.getSnapshotName()); + page.getSpec().setHeadSnapshot(contentWrapper.getSnapshotName()); + if (Objects.equals(true, page.getSpec().getPublish())) { + page.getSpec().setReleaseSnapshot(page.getSpec().getHeadSnapshot()); + } + Condition condition = Condition.builder() + .type(Post.PostPhase.DRAFT.name()) + .reason("DraftedSuccessfully") + .message("Drafted page successfully") + .status(ConditionStatus.TRUE) + .lastTransitionTime(Instant.now()) + .build(); + SinglePage.SinglePageStatus status = page.getStatusOrDefault(); + status.getConditionsOrDefault().addAndEvictFIFO(condition); + status.setPhase(Post.PostPhase.DRAFT.name()); + return client.update(page); + })) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance) + ); + } + + @Override + public Mono update(SinglePageRequest pageRequest) { + SinglePage page = pageRequest.page(); + String headSnapshot = page.getSpec().getHeadSnapshot(); + String releaseSnapshot = page.getSpec().getReleaseSnapshot(); + String baseSnapshot = page.getSpec().getBaseSnapshot(); + + // create new snapshot to update first + if (StringUtils.equals(headSnapshot, releaseSnapshot)) { + return draftContent(baseSnapshot, pageRequest.contentRequest(), headSnapshot) + .flatMap(contentWrapper -> { + page.getSpec().setHeadSnapshot(contentWrapper.getSnapshotName()); + return client.update(page); + }); + } + return updateContent(baseSnapshot, pageRequest.contentRequest()) + .flatMap(contentWrapper -> { + page.getSpec().setHeadSnapshot(contentWrapper.getSnapshotName()); + return client.update(page); + }); + } + + @Override + public Mono revertToSpecifiedSnapshot(String pageName, String snapshotName) { + return client.get(SinglePage.class, pageName) + .filter(page -> { + var head = page.getSpec().getHeadSnapshot(); + return !StringUtils.equals(head, snapshotName); + }) + .flatMap(page -> { + var baseSnapshot = page.getSpec().getBaseSnapshot(); + return getContent(snapshotName, baseSnapshot) + .map(content -> ContentRequest.builder() + .subjectRef(Ref.of(page)) + .headSnapshotName(page.getSpec().getHeadSnapshot()) + .content(content.getContent()) + .raw(content.getRaw()) + .rawType(content.getRawType()) + .build() + ) + .flatMap(contentRequest -> draftContent(baseSnapshot, contentRequest)) + .flatMap(content -> { + page.getSpec().setHeadSnapshot(content.getSnapshotName()); + return publishPageWithRetry(page); + }); + }); + } + + @Override + public Mono deleteContent(String pageName, String snapshotName) { + return client.get(SinglePage.class, pageName) + .flatMap(page -> { + var headSnapshotName = page.getSpec().getHeadSnapshot(); + if (StringUtils.equals(headSnapshotName, snapshotName)) { + return updatePageWithRetry(page, record -> { + // update head to release + page.getSpec().setHeadSnapshot(page.getSpec().getReleaseSnapshot()); + return record; + }); + } + return Mono.just(page); + }) + .flatMap(page -> { + var baseSnapshotName = page.getSpec().getBaseSnapshot(); + var releaseSnapshotName = page.getSpec().getReleaseSnapshot(); + if (StringUtils.equals(releaseSnapshotName, snapshotName)) { + return Mono.error(new ServerWebInputException( + "The snapshot to delete is the release snapshot, please" + + " revert to another snapshot first.")); + } + if (StringUtils.equals(baseSnapshotName, snapshotName)) { + return Mono.error( + new ServerWebInputException("The first snapshot cannot be deleted.")); + } + return client.fetch(Snapshot.class, snapshotName) + .flatMap(client::delete) + .flatMap(deleted -> restoredContent(baseSnapshotName, deleted)); + }); + } + + private Mono updatePageWithRetry(SinglePage page, UnaryOperator func) { + return client.update(func.apply(page)) + .onErrorResume(OptimisticLockingFailureException.class, + e -> Mono.defer(() -> client.get(SinglePage.class, page.getMetadata().getName()) + .map(func) + .flatMap(client::update) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)) + ); + } + + private Mono publish(SinglePage singlePage) { + var spec = singlePage.getSpec(); + spec.setPublish(true); + if (spec.getHeadSnapshot() == null) { + spec.setHeadSnapshot(spec.getBaseSnapshot()); + } + spec.setReleaseSnapshot(spec.getHeadSnapshot()); + return client.update(singlePage); + } + + Mono publishPageWithRetry(SinglePage page) { + return publish(page) + .onErrorResume(OptimisticLockingFailureException.class, + e -> Mono.defer(() -> client.get(SinglePage.class, page.getMetadata().getName()) + .flatMap(this::publish)) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)) + ); + } + + private Mono getListedSinglePage(SinglePage singlePage) { + Assert.notNull(singlePage, "The singlePage must not be null."); + var listedSinglePage = new ListedSinglePage() + .setPage(singlePage); + + var statsMono = fetchStats(singlePage) + .doOnNext(listedSinglePage::setStats); + + var contributorsMono = listContributors(singlePage.getStatusOrDefault().getContributors()) + .collectList() + .doOnNext(listedSinglePage::setContributors); + + var ownerMono = userService.getUserOrGhost(singlePage.getSpec().getOwner()) + .map(user -> { + Contributor contributor = new Contributor(); + contributor.setName(user.getMetadata().getName()); + contributor.setDisplayName(user.getSpec().getDisplayName()); + contributor.setAvatar(user.getSpec().getAvatar()); + return contributor; + }) + .doOnNext(listedSinglePage::setOwner); + return Mono.when(statsMono, contributorsMono, ownerMono) + .thenReturn(listedSinglePage); + } + + Mono fetchStats(SinglePage singlePage) { + Assert.notNull(singlePage, "The singlePage must not be null."); + String name = singlePage.getMetadata().getName(); + return counterService.getByName(MeterUtils.nameOf(SinglePage.class, name)) + .map(counter -> Stats.builder() + .visit(counter.getVisit()) + .upvote(counter.getUpvote()) + .totalComment(counter.getTotalComment()) + .approvedComment(counter.getApprovedComment()) + .build() + ) + .defaultIfEmpty(Stats.empty()); + } + + private Flux listContributors(List usernames) { + if (usernames == null) { + return Flux.empty(); + } + return Flux.fromIterable(usernames) + .flatMap(userService::getUserOrGhost) + .map(user -> { + Contributor contributor = new Contributor(); + contributor.setName(user.getMetadata().getName()); + contributor.setDisplayName(user.getSpec().getDisplayName()); + contributor.setAvatar(user.getSpec().getAvatar()); + return contributor; + }); + } +} diff --git a/application/src/main/java/run/halo/app/content/impl/SnapshotServiceImpl.java b/application/src/main/java/run/halo/app/content/impl/SnapshotServiceImpl.java new file mode 100644 index 0000000..d9ff3b3 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/impl/SnapshotServiceImpl.java @@ -0,0 +1,125 @@ +package run.halo.app.content.impl; + +import java.time.Clock; +import java.util.HashMap; +import java.util.Objects; +import org.apache.commons.lang3.StringUtils; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import org.springframework.stereotype.Service; +import reactor.core.publisher.Mono; +import run.halo.app.content.Content; +import run.halo.app.content.PatchUtils; +import run.halo.app.content.SnapshotService; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.extension.ReactiveExtensionClient; + +@Service +public class SnapshotServiceImpl implements SnapshotService { + + private final ReactiveExtensionClient client; + + private final Clock clock; + + public SnapshotServiceImpl(ReactiveExtensionClient client) { + this.client = client; + this.clock = Clock.systemDefaultZone(); + } + + @Override + public Mono getBy(String snapshotName) { + return client.get(Snapshot.class, snapshotName); + } + + @Override + public Mono getPatchedBy(String snapshotName, String baseSnapshotName) { + if (StringUtils.isBlank(snapshotName) || StringUtils.isBlank(baseSnapshotName)) { + return Mono.empty(); + } + + return client.fetch(Snapshot.class, baseSnapshotName) + .filter(Snapshot::isBaseSnapshot) + .switchIfEmpty(Mono.error(() -> new IllegalArgumentException( + "The snapshot " + baseSnapshotName + " is not a base snapshot."))) + .flatMap(baseSnapshot -> + Mono.defer(() -> { + if (Objects.equals(snapshotName, baseSnapshotName)) { + return Mono.just(baseSnapshot); + } + return client.fetch(Snapshot.class, snapshotName); + }).doOnNext(snapshot -> { + var baseRaw = baseSnapshot.getSpec().getRawPatch(); + var baseContent = baseSnapshot.getSpec().getContentPatch(); + + var rawPatch = snapshot.getSpec().getRawPatch(); + var contentPatch = snapshot.getSpec().getContentPatch(); + + var annotations = snapshot.getMetadata().getAnnotations(); + if (annotations == null) { + annotations = new HashMap<>(); + snapshot.getMetadata().setAnnotations(annotations); + } + + String patchedContent = baseContent; + String patchedRaw = baseRaw; + if (!Objects.equals(snapshot, baseSnapshot)) { + patchedContent = PatchUtils.applyPatch(baseContent, contentPatch); + patchedRaw = PatchUtils.applyPatch(baseRaw, rawPatch); + } + + annotations.put(Snapshot.PATCHED_CONTENT_ANNO, patchedContent); + annotations.put(Snapshot.PATCHED_RAW_ANNO, patchedRaw); + }) + ); + } + + @Override + public Mono patchAndCreate(@NonNull Snapshot snapshot, + @Nullable Snapshot baseSnapshot, + @NonNull Content content) { + return Mono.just(snapshot) + .doOnNext(s -> this.patch(s, baseSnapshot, content)) + .flatMap(client::create); + } + + @Override + public Mono patchAndUpdate(@NonNull Snapshot snapshot, + @NonNull Snapshot baseSnapshot, + @NonNull Content content) { + return Mono.just(snapshot) + .doOnNext(s -> this.patch(s, baseSnapshot, content)) + .flatMap(client::update); + } + + private void patch(@NonNull Snapshot snapshot, + @Nullable Snapshot baseSnapshot, + @NonNull Content content) { + var annotations = snapshot.getMetadata().getAnnotations(); + if (annotations != null) { + annotations.remove(Snapshot.PATCHED_CONTENT_ANNO); + annotations.remove(Snapshot.PATCHED_RAW_ANNO); + } + var spec = snapshot.getSpec(); + if (spec == null) { + spec = new Snapshot.SnapShotSpec(); + } + spec.setRawType(content.rawType()); + if (baseSnapshot == null || Objects.equals(snapshot, baseSnapshot)) { + // indicate the snapshot is a base snapshot + // update raw and content directly + spec.setRawPatch(content.raw()); + spec.setContentPatch(content.content()); + } else { + // apply the patch and set the raw and content + var baseSpec = baseSnapshot.getSpec(); + var baseContent = baseSpec.getContentPatch(); + var baseRaw = baseSpec.getRawPatch(); + + var rawPatch = PatchUtils.diffToJsonPatch(baseRaw, content.raw()); + var contentPatch = PatchUtils.diffToJsonPatch(baseContent, content.content()); + spec.setRawPatch(rawPatch); + spec.setContentPatch(contentPatch); + } + spec.setLastModifyTime(clock.instant()); + } +} diff --git a/application/src/main/java/run/halo/app/content/permalinks/CategoryPermalinkPolicy.java b/application/src/main/java/run/halo/app/content/permalinks/CategoryPermalinkPolicy.java new file mode 100644 index 0000000..d69ff60 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/permalinks/CategoryPermalinkPolicy.java @@ -0,0 +1,48 @@ +package run.halo.app.content.permalinks; + +import static org.springframework.web.util.UriUtils.encode; + +import java.nio.charset.StandardCharsets; +import java.util.Map; +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Constant; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.utils.PathUtils; + +/** + * @author guqing + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class CategoryPermalinkPolicy implements PermalinkPolicy { + public static final String DEFAULT_PERMALINK_PREFIX = + SystemSetting.ThemeRouteRules.empty().getCategories(); + + private final ExternalUrlSupplier externalUrlSupplier; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + @Override + public String permalink(Category category) { + Map annotations = MetadataUtil.nullSafeAnnotations(category); + String permalinkPrefix = + annotations.getOrDefault(Constant.PERMALINK_PATTERN_ANNO, DEFAULT_PERMALINK_PREFIX); + String slug = encode(category.getSpec().getSlug(), StandardCharsets.UTF_8); + String path = PathUtils.combinePath(permalinkPrefix, slug); + return externalUrlSupplier.get() + .resolve(path) + .normalize().toString(); + } + + public String pattern() { + return environmentFetcher.fetchRouteRules() + .map(SystemSetting.ThemeRouteRules::getCategories) + .blockOptional() + .orElse(DEFAULT_PERMALINK_PREFIX); + } +} diff --git a/application/src/main/java/run/halo/app/content/permalinks/ExtensionLocator.java b/application/src/main/java/run/halo/app/content/permalinks/ExtensionLocator.java new file mode 100644 index 0000000..a9c2567 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/permalinks/ExtensionLocator.java @@ -0,0 +1,44 @@ +package run.halo.app.content.permalinks; + +import java.util.Objects; +import run.halo.app.extension.GroupVersionKind; + +/** + * Slug can be modified, so it is not included in {@link #equals(Object)} and {@link #hashCode()}. + * + * @param gvk group version kind + * @param name extension name + * @param slug extension slug + */ +public record ExtensionLocator(GroupVersionKind gvk, String name, String slug) { + + /** + * Create a new {@link ExtensionLocator} instance. + * + * @param gvk group version kind + * @param name extension name + * @param slug extension slug + */ + public ExtensionLocator { + Objects.requireNonNull(gvk, "Group version kind must not be null"); + Objects.requireNonNull(name, "Extension name must not be null"); + Objects.requireNonNull(slug, "Extension slug must not be null"); + } + + @Override + public boolean equals(Object o) { + if (this == o) { + return true; + } + if (o == null || getClass() != o.getClass()) { + return false; + } + ExtensionLocator locator = (ExtensionLocator) o; + return gvk.equals(locator.gvk) && name.equals(locator.name); + } + + @Override + public int hashCode() { + return Objects.hash(gvk, name); + } +} diff --git a/application/src/main/java/run/halo/app/content/permalinks/PermalinkPolicy.java b/application/src/main/java/run/halo/app/content/permalinks/PermalinkPolicy.java new file mode 100644 index 0000000..03ec67a --- /dev/null +++ b/application/src/main/java/run/halo/app/content/permalinks/PermalinkPolicy.java @@ -0,0 +1,16 @@ +package run.halo.app.content.permalinks; + +import org.springframework.util.PropertyPlaceholderHelper; +import run.halo.app.extension.AbstractExtension; + +/** + * @author guqing + * @since 2.0.0 + */ +public interface PermalinkPolicy { + + PropertyPlaceholderHelper PROPERTY_PLACEHOLDER_HELPER = + new PropertyPlaceholderHelper("{", "}"); + + String permalink(T extension); +} diff --git a/application/src/main/java/run/halo/app/content/permalinks/PostPermalinkPolicy.java b/application/src/main/java/run/halo/app/content/permalinks/PostPermalinkPolicy.java new file mode 100644 index 0000000..f903ddd --- /dev/null +++ b/application/src/main/java/run/halo/app/content/permalinks/PostPermalinkPolicy.java @@ -0,0 +1,73 @@ +package run.halo.app.content.permalinks; + +import static org.springframework.web.util.UriUtils.encode; + +import java.nio.charset.StandardCharsets; +import java.text.DecimalFormat; +import java.text.NumberFormat; +import java.time.Instant; +import java.time.ZoneId; +import java.time.ZonedDateTime; +import java.util.Map; +import java.util.Properties; +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.content.Constant; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.utils.PathUtils; + +/** + * @author guqing + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class PostPermalinkPolicy implements PermalinkPolicy { + public static final String DEFAULT_PERMALINK_PATTERN = + SystemSetting.ThemeRouteRules.empty().getPost(); + private static final NumberFormat NUMBER_FORMAT = new DecimalFormat("00"); + + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final ExternalUrlSupplier externalUrlSupplier; + + @Override + public String permalink(Post post) { + Map annotations = MetadataUtil.nullSafeAnnotations(post); + String permalinkPattern = + annotations.getOrDefault(Constant.PERMALINK_PATTERN_ANNO, DEFAULT_PERMALINK_PATTERN); + return createPermalink(post, permalinkPattern); + } + + public String pattern() { + return environmentFetcher.fetchRouteRules() + .map(SystemSetting.ThemeRouteRules::getPost) + .blockOptional() + .orElse(DEFAULT_PERMALINK_PATTERN); + } + + private String createPermalink(Post post, String pattern) { + Instant archiveTime = post.getSpec().getPublishTime(); + if (archiveTime == null) { + archiveTime = post.getMetadata().getCreationTimestamp(); + } + ZonedDateTime zonedDateTime = archiveTime.atZone(ZoneId.systemDefault()); + Properties properties = new Properties(); + properties.put("name", post.getMetadata().getName()); + properties.put("slug", encode(post.getSpec().getSlug(), StandardCharsets.UTF_8)); + properties.put("year", String.valueOf(zonedDateTime.getYear())); + properties.put("month", NUMBER_FORMAT.format(zonedDateTime.getMonthValue())); + properties.put("day", NUMBER_FORMAT.format(zonedDateTime.getDayOfMonth())); + + String simplifiedPattern = PathUtils.simplifyPathPattern(pattern); + String permalink = + PROPERTY_PLACEHOLDER_HELPER.replacePlaceholders(simplifiedPattern, properties); + return externalUrlSupplier.get() + .resolve(permalink) + .normalize() + .toString(); + } +} diff --git a/application/src/main/java/run/halo/app/content/permalinks/TagPermalinkPolicy.java b/application/src/main/java/run/halo/app/content/permalinks/TagPermalinkPolicy.java new file mode 100644 index 0000000..a22ebf7 --- /dev/null +++ b/application/src/main/java/run/halo/app/content/permalinks/TagPermalinkPolicy.java @@ -0,0 +1,47 @@ +package run.halo.app.content.permalinks; + +import java.nio.charset.StandardCharsets; +import java.util.Map; +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import org.springframework.web.util.UriUtils; +import run.halo.app.core.extension.content.Constant; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.utils.PathUtils; + +/** + * @author guqing + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class TagPermalinkPolicy implements PermalinkPolicy { + public static final String DEFAULT_PERMALINK_PREFIX = + SystemSetting.ThemeRouteRules.empty().getTags(); + private final ExternalUrlSupplier externalUrlSupplier; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + @Override + public String permalink(Tag tag) { + Map annotations = MetadataUtil.nullSafeAnnotations(tag); + String permalinkPrefix = + annotations.getOrDefault(Constant.PERMALINK_PATTERN_ANNO, DEFAULT_PERMALINK_PREFIX); + + String slug = UriUtils.encode(tag.getSpec().getSlug(), StandardCharsets.UTF_8); + String path = PathUtils.combinePath(permalinkPrefix, slug); + return externalUrlSupplier.get() + .resolve(path) + .normalize().toString(); + } + + public String pattern() { + return environmentFetcher.fetchRouteRules() + .map(SystemSetting.ThemeRouteRules::getTags) + .blockOptional() + .orElse(DEFAULT_PERMALINK_PREFIX); + } +} diff --git a/application/src/main/java/run/halo/app/core/endpoint/WebSocketEndpointManager.java b/application/src/main/java/run/halo/app/core/endpoint/WebSocketEndpointManager.java new file mode 100644 index 0000000..bcdf99e --- /dev/null +++ b/application/src/main/java/run/halo/app/core/endpoint/WebSocketEndpointManager.java @@ -0,0 +1,16 @@ +package run.halo.app.core.endpoint; + +import java.util.Collection; + +/** + * Interface for managing WebSocket endpoints, including registering and unregistering. + * + * @author johnniang + */ +public interface WebSocketEndpointManager { + + void register(Collection endpoints); + + void unregister(Collection endpoints); + +} diff --git a/application/src/main/java/run/halo/app/core/endpoint/WebSocketHandlerMapping.java b/application/src/main/java/run/halo/app/core/endpoint/WebSocketHandlerMapping.java new file mode 100644 index 0000000..0105c03 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/endpoint/WebSocketHandlerMapping.java @@ -0,0 +1,140 @@ +package run.halo.app.core.endpoint; + +import com.google.common.collect.BiMap; +import com.google.common.collect.HashBiMap; +import java.util.ArrayList; +import java.util.Collection; +import java.util.List; +import java.util.concurrent.locks.ReadWriteLock; +import java.util.concurrent.locks.ReentrantReadWriteLock; +import org.apache.commons.lang3.StringUtils; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.http.HttpMethod; +import org.springframework.http.server.reactive.observation.ServerRequestObservationContext; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; +import org.springframework.util.CollectionUtils; +import org.springframework.web.reactive.handler.AbstractHandlerMapping; +import org.springframework.web.reactive.socket.WebSocketHandler; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.util.pattern.PathPattern; +import reactor.core.publisher.Mono; +import run.halo.app.console.WebSocketUtils; + +public class WebSocketHandlerMapping extends AbstractHandlerMapping + implements WebSocketEndpointManager, InitializingBean { + + private final BiMap endpointMap; + + private final ReadWriteLock rwLock; + + public WebSocketHandlerMapping() { + this.endpointMap = HashBiMap.create(); + this.rwLock = new ReentrantReadWriteLock(); + } + + @Override + @NonNull + public Mono getHandlerInternal(ServerWebExchange exchange) { + var request = exchange.getRequest(); + if (!HttpMethod.GET.equals(request.getMethod()) + || !WebSocketUtils.isWebSocketUpgrade(request.getHeaders())) { + // skip getting handler if the request is not a WebSocket. + return Mono.empty(); + } + + var lock = rwLock.readLock(); + lock.lock(); + try { + // Refer to org.springframework.web.reactive.handler.AbstractUrlHandlerMapping + // .lookupHandler + var pathContainer = request.getPath().pathWithinApplication(); + List matches = null; + for (var pattern : this.endpointMap.keySet()) { + if (pattern.matches(pathContainer)) { + if (matches == null) { + matches = new ArrayList<>(); + } + matches.add(pattern); + } + } + if (matches == null) { + return Mono.empty(); + } + + if (matches.size() > 1) { + matches.sort(PathPattern.SPECIFICITY_COMPARATOR); + } + + var pattern = matches.get(0); + exchange.getAttributes().put(BEST_MATCHING_PATTERN_ATTRIBUTE, pattern); + + var handler = endpointMap.get(pattern).handler(); + exchange.getAttributes().put(BEST_MATCHING_HANDLER_ATTRIBUTE, handler); + + ServerRequestObservationContext.findCurrent(exchange.getAttributes()) + .ifPresent(context -> context.setPathPattern(pattern.toString())); + + var pathWithinMapping = pattern.extractPathWithinPattern(pathContainer); + exchange.getAttributes().put(PATH_WITHIN_HANDLER_MAPPING_ATTRIBUTE, pathWithinMapping); + + var matchInfo = pattern.matchAndExtract(pathContainer); + Assert.notNull(matchInfo, "Expect a match"); + exchange.getAttributes() + .put(URI_TEMPLATE_VARIABLES_ATTRIBUTE, matchInfo.getUriVariables()); + return Mono.just(handler); + } catch (Exception e) { + return Mono.error(e); + } finally { + lock.unlock(); + } + } + + @Override + public void register(Collection endpoints) { + if (CollectionUtils.isEmpty(endpoints)) { + return; + } + var lock = rwLock.writeLock(); + lock.lock(); + try { + endpoints.forEach(endpoint -> { + var urlPath = endpoint.urlPath(); + urlPath = StringUtils.prependIfMissing(urlPath, "/"); + var groupVersion = endpoint.groupVersion(); + var parser = getPathPatternParser(); + var pattern = parser.parse("/apis/" + groupVersion + urlPath); + endpointMap.put(pattern, endpoint); + }); + } finally { + lock.unlock(); + } + } + + @Override + public void unregister(Collection endpoints) { + if (CollectionUtils.isEmpty(endpoints)) { + return; + } + var lock = rwLock.writeLock(); + lock.lock(); + try { + BiMap inverseMap = endpointMap.inverse(); + endpoints.forEach(inverseMap::remove); + } finally { + lock.unlock(); + } + } + + @Override + public void afterPropertiesSet() { + var endpoints = obtainApplicationContext().getBeanProvider(WebSocketEndpoint.class) + .orderedStream() + .toList(); + register(endpoints); + } + + BiMap getEndpointMap() { + return endpointMap; + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/attachment/endpoint/AttachmentEndpoint.java b/application/src/main/java/run/halo/app/core/extension/attachment/endpoint/AttachmentEndpoint.java new file mode 100644 index 0000000..599f546 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/attachment/endpoint/AttachmentEndpoint.java @@ -0,0 +1,316 @@ +package run.halo.app.core.extension.attachment.endpoint; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.arrayschema.Builder.arraySchemaBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; +import static org.springframework.boot.convert.ApplicationConversionService.getSharedInstance; +import static org.springframework.web.reactive.function.server.RequestPredicates.contentType; +import static run.halo.app.extension.ListResult.generateGenericClass; +import static run.halo.app.extension.index.query.QueryFactory.all; +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.contains; +import static run.halo.app.extension.index.query.QueryFactory.in; +import static run.halo.app.extension.index.query.QueryFactory.isNull; +import static run.halo.app.extension.index.query.QueryFactory.not; +import static run.halo.app.extension.index.query.QueryFactory.startsWith; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToListOptions; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.Collections; +import java.util.List; +import java.util.Optional; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.BooleanUtils; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.data.domain.Sort; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import org.springframework.http.codec.multipart.FormFieldPart; +import org.springframework.http.codec.multipart.Part; +import org.springframework.stereotype.Component; +import org.springframework.util.CollectionUtils; +import org.springframework.util.MultiValueMap; +import org.springframework.util.StringUtils; +import org.springframework.web.reactive.function.BodyExtractors; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.attachment.Group; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.core.extension.endpoint.SortResolver; +import run.halo.app.core.extension.service.AttachmentService; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.IListRequest; +import run.halo.app.extension.router.IListRequest.QueryListRequest; +import run.halo.app.extension.router.QueryParamBuildUtil; +import run.halo.app.extension.router.selector.LabelSelector; + +@Slf4j +@Component +public class AttachmentEndpoint implements CustomEndpoint { + + private final AttachmentService attachmentService; + + private final ReactiveExtensionClient client; + + public AttachmentEndpoint(AttachmentService attachmentService, + ReactiveExtensionClient client) { + this.attachmentService = attachmentService; + this.client = client; + } + + @Override + public RouterFunction endpoint() { + var tag = "AttachmentV1alpha1Console"; + return SpringdocRouteBuilder.route() + .POST("/attachments/upload", contentType(MediaType.MULTIPART_FORM_DATA), + request -> request.body(BodyExtractors.toMultipartData()) + .map(UploadRequest::new) + .flatMap(uploadReq -> { + var policyName = uploadReq.getPolicyName(); + var groupName = uploadReq.getGroupName(); + var filePart = uploadReq.getFile(); + return attachmentService.upload(policyName, + groupName, + filePart.filename(), + filePart.content(), + filePart.headers().getContentType()); + }) + .flatMap(attachment -> ServerResponse.ok().bodyValue(attachment)), + builder -> builder + .operationId("UploadAttachment") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.MULTIPART_FORM_DATA_VALUE) + .schema(schemaBuilder().implementation(IUploadRequest.class)) + )) + .response(responseBuilder().implementation(Attachment.class)) + .build()) + .GET("/attachments", this::search, + builder -> { + builder + .operationId("SearchAttachments") + .tag(tag) + .response( + responseBuilder().implementation(generateGenericClass(Attachment.class)) + ); + ISearchRequest.buildParameters(builder); + } + ) + .build(); + } + + Mono search(ServerRequest request) { + var searchRequest = new SearchRequest(request); + var groupListOptions = new ListOptions(); + groupListOptions.setLabelSelector(LabelSelector.builder() + .exists(Group.HIDDEN_LABEL) + .build()); + return client.listAll(Group.class, groupListOptions, Sort.unsorted()) + .map(group -> group.getMetadata().getName()) + .collectList() + .defaultIfEmpty(List.of()) + .flatMap(hiddenGroups -> client.listBy(Attachment.class, + searchRequest.toListOptions(hiddenGroups), + PageRequestImpl.of(searchRequest.getPage(), searchRequest.getSize(), + searchRequest.getSort()) + ) + .flatMap(listResult -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(listResult) + ) + ); + } + + public interface ISearchRequest extends IListRequest { + + @Schema(description = "Keyword for searching.") + Optional getKeyword(); + + @Schema(description = "Filter attachments without group. This parameter will ignore group" + + " parameter.") + Optional getUngrouped(); + + @ArraySchema(uniqueItems = true, + arraySchema = @Schema(name = "accepts", + description = "Acceptable media types."), + schema = @Schema(description = "like image/*, video/mp4, text/*", + implementation = String.class, + example = "image/*")) + List getAccepts(); + + @ArraySchema(uniqueItems = true, + arraySchema = @Schema(name = "sort", + description = "Sort property and direction of the list result. Supported fields: " + + "creationTimestamp, size"), + schema = @Schema(description = "like field,asc or field,desc", + implementation = String.class, + example = "creationTimestamp,desc")) + Sort getSort(); + + public static void buildParameters(Builder builder) { + IListRequest.buildParameters(builder); + builder.parameter(QueryParamBuildUtil.sortParameter()) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("ungrouped") + .required(false) + .description(""" + Filter attachments without group. This parameter will ignore group \ + parameter.\ + """) + .implementation(Boolean.class)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("keyword") + .required(false) + .description("Keyword for searching.") + .implementation(String.class)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("accepts") + .required(false) + .description("Acceptable media types.") + .array( + arraySchemaBuilder() + .uniqueItems(true) + .schema(schemaBuilder() + .implementation(String.class) + .example("image/*")) + ) + .implementationArray(String.class) + ); + } + } + + public static class SearchRequest extends QueryListRequest implements ISearchRequest { + + private final ServerWebExchange exchange; + + public SearchRequest(ServerRequest request) { + super(request.queryParams()); + this.exchange = request.exchange(); + } + + @Override + public Optional getKeyword() { + return Optional.ofNullable(queryParams.getFirst("keyword")) + .filter(StringUtils::hasText); + } + + @Override + public Optional getUngrouped() { + return Optional.ofNullable(queryParams.getFirst("ungrouped")) + .map(ungroupedStr -> getSharedInstance().convert(ungroupedStr, Boolean.class)); + } + + @Override + public List getAccepts() { + return queryParams.getOrDefault("accepts", Collections.emptyList()); + } + + @Override + public Sort getSort() { + var sort = SortResolver.defaultInstance.resolve(exchange); + sort = sort.and(Sort.by( + Sort.Order.desc("metadata.creationTimestamp"), + Sort.Order.asc("metadata.name") + )); + return sort; + } + + public ListOptions toListOptions(List hiddenGroups) { + final var listOptions = + labelAndFieldSelectorToListOptions(getLabelSelector(), getFieldSelector()); + + var fieldQuery = all(); + if (getKeyword().isPresent()) { + fieldQuery = and(fieldQuery, contains("spec.displayName", getKeyword().get())); + } + + if (getUngrouped().isPresent() && BooleanUtils.isTrue(getUngrouped().get())) { + fieldQuery = and(fieldQuery, isNull("spec.groupName")); + } + + if (!hiddenGroups.isEmpty()) { + fieldQuery = and(fieldQuery, not(in("spec.groupName", hiddenGroups))); + } + + if (hasAccepts()) { + var acceptFieldQueryOptional = getAccepts().stream() + .filter(StringUtils::hasText) + .map((accept -> accept.replace("/*", "/").toLowerCase())) + .distinct() + .map(accept -> startsWith("spec.mediaType", accept)) + .reduce(QueryFactory::or); + if (acceptFieldQueryOptional.isPresent()) { + fieldQuery = and(fieldQuery, acceptFieldQueryOptional.get()); + } + } + + listOptions.setFieldSelector(listOptions.getFieldSelector().andQuery(fieldQuery)); + return listOptions; + } + + private boolean hasAccepts() { + return !CollectionUtils.isEmpty(getAccepts()) + && !getAccepts().contains("*") + && !getAccepts().contains("*/*"); + } + } + + @Schema(types = "object") + public interface IUploadRequest { + + @Schema(requiredMode = REQUIRED, description = "Attachment file") + FilePart getFile(); + + @Schema(requiredMode = REQUIRED, description = "Storage policy name") + String getPolicyName(); + + @Schema(description = "The name of the group to which the attachment belongs") + String getGroupName(); + + } + + public record UploadRequest(MultiValueMap formData) implements IUploadRequest { + + public FilePart getFile() { + if (formData.getFirst("file") instanceof FilePart file) { + return file; + } + throw new ServerWebInputException("Invalid part of file"); + } + + public String getPolicyName() { + if (formData.getFirst("policyName") instanceof FormFieldPart form) { + return form.value(); + } + throw new ServerWebInputException("Invalid part of policyName"); + } + + @Override + public String getGroupName() { + if (formData.getFirst("groupName") instanceof FormFieldPart form) { + return form.value(); + } + return null; + } + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/attachment/endpoint/LocalAttachmentUploadHandler.java b/application/src/main/java/run/halo/app/core/extension/attachment/endpoint/LocalAttachmentUploadHandler.java new file mode 100644 index 0000000..60ef6c9 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/attachment/endpoint/LocalAttachmentUploadHandler.java @@ -0,0 +1,310 @@ +package run.halo.app.core.extension.attachment.endpoint; + +import static java.nio.file.StandardOpenOption.CREATE_NEW; +import static run.halo.app.infra.utils.FileNameUtils.randomFileName; +import static run.halo.app.infra.utils.FileUtils.checkDirectoryTraversal; +import static run.halo.app.infra.utils.FileUtils.deleteFileSilently; + +import java.io.IOException; +import java.net.URI; +import java.nio.charset.StandardCharsets; +import java.nio.file.FileAlreadyExistsException; +import java.nio.file.Files; +import java.nio.file.Path; +import java.time.Duration; +import java.util.ArrayList; +import java.util.Map; +import java.util.Optional; +import java.util.Set; +import java.util.UUID; +import java.util.concurrent.atomic.AtomicReference; +import lombok.Data; +import lombok.extern.slf4j.Slf4j; +import org.reactivestreams.Publisher; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.core.io.buffer.DataBufferUtils; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import org.springframework.stereotype.Component; +import org.springframework.util.CollectionUtils; +import org.springframework.util.StringUtils; +import org.springframework.util.unit.DataSize; +import org.springframework.web.util.UriComponentsBuilder; +import org.springframework.web.util.UriUtils; +import reactor.core.Exceptions; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Schedulers; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.attachment.Attachment.AttachmentSpec; +import run.halo.app.core.extension.attachment.Constant; +import run.halo.app.core.extension.attachment.Policy; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.Metadata; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.FileCategoryMatcher; +import run.halo.app.infra.exception.AttachmentAlreadyExistsException; +import run.halo.app.infra.exception.FileSizeExceededException; +import run.halo.app.infra.exception.FileTypeNotAllowedException; +import run.halo.app.infra.properties.HaloProperties; +import run.halo.app.infra.utils.FileTypeDetectUtils; +import run.halo.app.infra.utils.JsonUtils; + +@Slf4j +@Component +class LocalAttachmentUploadHandler implements AttachmentHandler { + + private final HaloProperties haloProp; + + private final ExternalUrlSupplier externalUrl; + + public LocalAttachmentUploadHandler(HaloProperties haloProp, + ExternalUrlSupplier externalUrl) { + this.haloProp = haloProp; + this.externalUrl = externalUrl; + } + + Path getAttachmentsRoot() { + return haloProp.getWorkDir().resolve("attachments"); + } + + @Override + public Mono upload(UploadContext uploadOption) { + return Mono.just(uploadOption) + .filter(option -> this.shouldHandle(option.policy())) + .flatMap(option -> { + var configMap = option.configMap(); + var settingJson = configMap.getData().getOrDefault("default", "{}"); + var setting = JsonUtils.jsonToObject(settingJson, PolicySetting.class); + + final var attachmentsRoot = getAttachmentsRoot(); + final var uploadRoot = attachmentsRoot.resolve("upload"); + final var file = option.file(); + final Path attachmentPath; + if (StringUtils.hasText(setting.getLocation())) { + attachmentPath = + uploadRoot.resolve(setting.getLocation()).resolve(file.filename()); + } else { + attachmentPath = uploadRoot.resolve(file.filename()); + } + checkDirectoryTraversal(uploadRoot, attachmentPath); + + return validateFile(file, setting).then(Mono.fromRunnable( + () -> { + try { + // init parent folders + Files.createDirectories(attachmentPath.getParent()); + } catch (IOException e) { + throw Exceptions.propagate(e); + } + }) + .subscribeOn(Schedulers.boundedElastic()) + .then(writeContent(file.content(), attachmentPath, true)) + .map(path -> { + log.info("Wrote attachment {} into {}", file.filename(), path); + // TODO check the file extension + var metadata = new Metadata(); + metadata.setName(UUID.randomUUID().toString()); + var relativePath = attachmentsRoot.relativize(path).toString(); + + var pathSegments = new ArrayList(); + pathSegments.add("upload"); + for (Path p : uploadRoot.relativize(path)) { + pathSegments.add(p.toString()); + } + + var uri = UriComponentsBuilder.newInstance() + .pathSegment(pathSegments.toArray(String[]::new)) + .encode(StandardCharsets.UTF_8) + .build() + .toString(); + metadata.setAnnotations(Map.of( + Constant.LOCAL_REL_PATH_ANNO_KEY, relativePath, + Constant.URI_ANNO_KEY, uri)); + var spec = new AttachmentSpec(); + spec.setSize(path.toFile().length()); + spec.setMediaType(Optional.ofNullable(file.headers().getContentType()) + .map(MediaType::toString) + .orElse(null)); + spec.setDisplayName(path.getFileName().toString()); + var attachment = new Attachment(); + attachment.setMetadata(metadata); + attachment.setSpec(spec); + return attachment; + }) + .onErrorMap(FileAlreadyExistsException.class, + e -> new AttachmentAlreadyExistsException(e.getFile())) + ); + }); + } + + private Mono validateFile(FilePart file, PolicySetting setting) { + var validations = new ArrayList>(2); + var maxSize = setting.getMaxFileSize(); + if (maxSize != null && maxSize.toBytes() > 0) { + validations.add( + file.content() + .map(DataBuffer::readableByteCount) + .reduce(0L, Long::sum) + .filter(size -> size <= setting.getMaxFileSize().toBytes()) + .switchIfEmpty(Mono.error(new FileSizeExceededException( + "File size exceeds the maximum limit", + "problemDetail.attachment.upload.fileSizeExceeded", + new Object[] {setting.getMaxFileSize().toKilobytes() + "KB"}) + )) + ); + } + if (!CollectionUtils.isEmpty(setting.getAllowedFileTypes())) { + var typeValidator = file.content() + .next() + .handle((dataBuffer, sink) -> { + var mimeType = "Unknown"; + try { + mimeType = FileTypeDetectUtils.detectMimeType(dataBuffer.asInputStream()); + var isAllow = setting.getAllowedFileTypes() + .stream() + .map(FileCategoryMatcher::of) + .anyMatch(matcher -> matcher.match(file.filename())); + if (isAllow) { + sink.next(dataBuffer); + return; + } + } catch (IOException e) { + log.warn("Failed to detect file type", e); + } + sink.error(new FileTypeNotAllowedException("File type is not allowed", + "problemDetail.attachment.upload.fileTypeNotSupported", + new Object[] {mimeType}) + ); + }); + validations.add(typeValidator); + } + return Mono.when(validations); + } + + @Override + public Mono delete(DeleteContext deleteContext) { + return Mono.just(deleteContext) + .filter(context -> this.shouldHandle(context.policy())) + .publishOn(Schedulers.boundedElastic()) + .doOnNext(context -> { + var attachment = context.attachment(); + log.info("Trying to delete {} from local", attachment.getMetadata().getName()); + var annotations = attachment.getMetadata().getAnnotations(); + if (annotations != null) { + var localRelativePath = annotations.get(Constant.LOCAL_REL_PATH_ANNO_KEY); + if (StringUtils.hasText(localRelativePath)) { + var attachmentsRoot = getAttachmentsRoot(); + var attachmentPath = attachmentsRoot.resolve(localRelativePath); + checkDirectoryTraversal(attachmentsRoot, attachmentPath); + + // delete it permanently + try { + log.info("{} is being deleted", attachmentPath); + boolean deleted = Files.deleteIfExists(attachmentPath); + if (deleted) { + log.info("{} was deleted successfully", attachment); + } else { + log.info("{} was not exist", attachment); + } + } catch (IOException e) { + throw Exceptions.propagate(e); + } + } + } + }) + .map(DeleteContext::attachment); + } + + @Override + public Mono getPermalink(Attachment attachment, Policy policy, ConfigMap configMap) { + if (!this.shouldHandle(policy)) { + return Mono.empty(); + } + var annotations = attachment.getMetadata().getAnnotations(); + if (annotations == null + || !annotations.containsKey(Constant.URI_ANNO_KEY)) { + return Mono.empty(); + } + var uriStr = annotations.get(Constant.URI_ANNO_KEY); + // the uriStr is encoded before. + uriStr = UriUtils.decode(uriStr, StandardCharsets.UTF_8); + var uri = UriComponentsBuilder.fromUri(externalUrl.get()) + // The URI has been encoded before, so there is no need to encode it again. + .path(uriStr) + .build() + .toUri(); + return Mono.just(uri); + } + + @Override + public Mono getSharedURL(Attachment attachment, + Policy policy, + ConfigMap configMap, + Duration ttl) { + return getPermalink(attachment, policy, configMap); + } + + private boolean shouldHandle(Policy policy) { + if (policy == null + || policy.getSpec() == null + || !StringUtils.hasText(policy.getSpec().getTemplateName())) { + return false; + } + return "local".equals(policy.getSpec().getTemplateName()); + } + + @Data + public static class PolicySetting { + + private String location; + + private DataSize maxFileSize; + + private Set allowedFileTypes; + + public void setMaxFileSize(String maxFileSize) { + if (!StringUtils.hasText(maxFileSize)) { + return; + } + this.maxFileSize = DataSize.parse(maxFileSize); + } + } + + /** + * Write content into file. We will detect duplicate filename and auto-rename it with 3 times + * retry. + * + * @param content is file content + * @param targetPath is target path + * @return file path + */ + private Mono writeContent(Flux content, + Path targetPath, + boolean renameIfExists) { + return Mono.defer(() -> { + final var pathRef = new AtomicReference<>(targetPath); + return Mono.defer( + // we have to use defer method to obtain a fresh path + () -> DataBufferUtils.write(content, pathRef.get(), CREATE_NEW)) + .retryWhen(Retry.max(3) + .filter(t -> { + if (renameIfExists) { + return t instanceof FileAlreadyExistsException; + } + return false; + }) + .doAfterRetry(signal -> { + // rename the path + var oldPath = pathRef.get(); + var fileName = randomFileName(oldPath.toString(), 4); + pathRef.set(oldPath.resolveSibling(fileName)); + })) + // Delete file already wrote partially into attachment folder + // in case of content is terminated with an error + .onErrorResume(t -> deleteFileSilently(pathRef.get()).then(Mono.error(t))) + .then(Mono.fromSupplier(pathRef::get)); + }); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/AuthProviderEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/AuthProviderEndpoint.java new file mode 100644 index 0000000..a58b922 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/AuthProviderEndpoint.java @@ -0,0 +1,86 @@ +package run.halo.app.core.extension.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import lombok.RequiredArgsConstructor; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.AuthProvider; +import run.halo.app.security.AuthProviderService; +import run.halo.app.security.ListedAuthProvider; + +/** + * Auth provider endpoint. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class AuthProviderEndpoint implements CustomEndpoint { + + private final AuthProviderService authProviderService; + + @Override + public RouterFunction endpoint() { + final var tag = "AuthProviderV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("auth-providers", this::listAuthProviders, + builder -> builder.operationId("listAuthProviders") + .description("Lists all auth providers") + .tag(tag) + .response(responseBuilder() + .implementationArray(ListedAuthProvider.class)) + ) + .PUT("auth-providers/{name}/enable", this::enableAuthProvider, + builder -> builder.operationId("enableAuthProvider") + .description("Enables an auth provider") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(AuthProvider.class)) + ) + .PUT("auth-providers/{name}/disable", this::disableAuthProvider, + builder -> builder.operationId("disableAuthProvider") + .description("Disables an auth provider") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(AuthProvider.class)) + ) + .build(); + } + + private Mono enableAuthProvider(ServerRequest request) { + String name = request.pathVariable("name"); + return authProviderService.enable(name) + .flatMap(authProvider -> ServerResponse.ok().bodyValue(authProvider)); + } + + private Mono disableAuthProvider(ServerRequest request) { + String name = request.pathVariable("name"); + return authProviderService.disable(name) + .flatMap(authProvider -> ServerResponse.ok().bodyValue(authProvider)); + } + + Mono listAuthProviders(ServerRequest request) { + return authProviderService.listAll() + .flatMap(providers -> ServerResponse.ok().bodyValue(providers)); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/CommentEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/CommentEndpoint.java new file mode 100644 index 0000000..18c904c --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/CommentEndpoint.java @@ -0,0 +1,133 @@ +package run.halo.app.core.extension.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import java.time.Instant; +import org.springdoc.core.fn.builders.schema.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.content.comment.CommentQuery; +import run.halo.app.content.comment.CommentRequest; +import run.halo.app.content.comment.CommentService; +import run.halo.app.content.comment.ListedComment; +import run.halo.app.content.comment.ReplyRequest; +import run.halo.app.content.comment.ReplyService; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.extension.ListResult; +import run.halo.app.infra.utils.HaloUtils; +import run.halo.app.infra.utils.IpAddressUtils; + + +/** + * Endpoint for managing comment. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class CommentEndpoint implements CustomEndpoint { + + private final CommentService commentService; + private final ReplyService replyService; + + public CommentEndpoint(CommentService commentService, ReplyService replyService) { + this.commentService = commentService; + this.replyService = replyService; + } + + @Override + public RouterFunction endpoint() { + final var tag = "CommentV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("comments", this::listComments, builder -> { + builder.operationId("ListComments") + .description("List comments.") + .tag(tag) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(ListedComment.class)) + ); + CommentQuery.buildParameters(builder); + } + ) + .POST("comments", this::createComment, + builder -> builder.operationId("CreateComment") + .description("Create a comment.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(CommentRequest.class)) + )) + .response(responseBuilder() + .implementation(Comment.class)) + ) + .POST("comments/{name}/reply", this::createReply, + builder -> builder.operationId("CreateReply") + .description("Create a reply.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(ReplyRequest.class)) + )) + .response(responseBuilder() + .implementation(Reply.class)) + ) + .build(); + } + + Mono listComments(ServerRequest request) { + CommentQuery commentQuery = new CommentQuery(request); + return commentService.listComment(commentQuery) + .flatMap(listedComments -> ServerResponse.ok().bodyValue(listedComments)); + } + + Mono createComment(ServerRequest request) { + return request.bodyToMono(CommentRequest.class) + .flatMap(commentRequest -> { + Comment comment = commentRequest.toComment(); + comment.getSpec().setIpAddress(IpAddressUtils.getIpAddress(request)); + comment.getSpec().setUserAgent(HaloUtils.userAgentFrom(request)); + return commentService.create(comment); + }) + .flatMap(comment -> ServerResponse.ok().bodyValue(comment)); + } + + Mono createReply(ServerRequest request) { + String commentName = request.pathVariable("name"); + return request.bodyToMono(ReplyRequest.class) + .flatMap(replyRequest -> { + Reply reply = replyRequest.toReply(); + // Create via console without audit + reply.getSpec().setApproved(true); + reply.getSpec().setApprovedTime(Instant.now()); + reply.getSpec().setIpAddress(IpAddressUtils.getIpAddress(request)); + reply.getSpec().setUserAgent(HaloUtils.userAgentFrom(request)); + // fix gh-2951 + if (reply.getSpec().getHidden() == null) { + reply.getSpec().setHidden(false); + } + return replyService.create(commentName, reply); + }) + .flatMap(comment -> ServerResponse.ok().bodyValue(comment)); + } + +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/CustomEndpointsBuilder.java b/application/src/main/java/run/halo/app/core/extension/endpoint/CustomEndpointsBuilder.java new file mode 100644 index 0000000..6b8d7cf --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/CustomEndpointsBuilder.java @@ -0,0 +1,46 @@ +package run.halo.app.core.extension.endpoint; + +import java.util.HashMap; +import java.util.LinkedList; +import java.util.List; +import java.util.Map; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.web.reactive.function.server.RequestPredicates; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.extension.GroupVersion; + +public class CustomEndpointsBuilder { + + private final Map>> routerFunctionsMap; + + public CustomEndpointsBuilder() { + routerFunctionsMap = new HashMap<>(); + } + + public CustomEndpointsBuilder add(CustomEndpoint customEndpoint) { + routerFunctionsMap + .computeIfAbsent(customEndpoint.groupVersion(), gv -> new LinkedList<>()) + .add(customEndpoint.endpoint()); + return this; + } + + public RouterFunction build() { + SpringdocRouteBuilder routeBuilder = SpringdocRouteBuilder.route(); + routerFunctionsMap.forEach((gv, routerFunctions) -> { + routeBuilder.nest(RequestPredicates.path("/apis/" + gv), + () -> routerFunctions.stream().reduce(RouterFunction::and).orElse(null), + builder -> builder.operationId("CustomEndpoints") + .description("Custom Endpoint") + .tag(gv + "/CustomEndpoint") + ); + }); + if (routerFunctionsMap.isEmpty()) { + // return empty route. + return request -> Mono.empty(); + } + routerFunctionsMap.clear(); + return routeBuilder.build(); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/PluginEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/PluginEndpoint.java new file mode 100644 index 0000000..5e3af3a --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/PluginEndpoint.java @@ -0,0 +1,742 @@ +package run.halo.app.core.extension.endpoint; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static java.util.Comparator.comparing; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; +import static org.springframework.boot.convert.ApplicationConversionService.getSharedInstance; +import static org.springframework.core.io.buffer.DataBufferUtils.write; +import static org.springframework.web.reactive.function.server.RequestPredicates.contentType; +import static run.halo.app.extension.ListResult.generateGenericClass; +import static run.halo.app.extension.router.QueryParamBuildUtil.sortParameter; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToPredicate; +import static run.halo.app.infra.utils.FileUtils.deleteFileSilently; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.io.FileNotFoundException; +import java.io.IOException; +import java.net.URI; +import java.nio.file.Files; +import java.nio.file.Path; +import java.nio.file.Paths; +import java.time.Duration; +import java.time.Instant; +import java.util.ArrayList; +import java.util.Comparator; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import java.util.function.Function; +import java.util.function.Predicate; +import lombok.Data; +import lombok.extern.slf4j.Slf4j; +import org.reactivestreams.Publisher; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.boot.autoconfigure.web.WebProperties; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.data.domain.Sort; +import org.springframework.http.CacheControl; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import org.springframework.http.codec.multipart.FormFieldPart; +import org.springframework.http.codec.multipart.Part; +import org.springframework.stereotype.Component; +import org.springframework.util.MultiValueMap; +import org.springframework.util.StringUtils; +import org.springframework.web.reactive.function.BodyInserters; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.reactive.resource.NoResourceFoundException; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Scheduler; +import reactor.core.scheduler.Schedulers; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.Plugin; +import run.halo.app.core.extension.Setting; +import run.halo.app.core.extension.service.PluginService; +import run.halo.app.core.extension.theme.SettingUtils; +import run.halo.app.extension.Comparators; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.IListRequest; +import run.halo.app.extension.router.IListRequest.QueryListRequest; +import run.halo.app.infra.ReactiveUrlDataBufferFetcher; +import run.halo.app.plugin.PluginNotFoundException; + +@Slf4j +@Component +public class PluginEndpoint implements CustomEndpoint, InitializingBean { + + private final ReactiveExtensionClient client; + + private final PluginService pluginService; + + private final ReactiveUrlDataBufferFetcher reactiveUrlDataBufferFetcher; + + private final WebProperties webProperties; + + private final Scheduler scheduler = Schedulers.boundedElastic(); + + private boolean useLastModified; + + private CacheControl bundleCacheControl = CacheControl.empty(); + + public PluginEndpoint(ReactiveExtensionClient client, + PluginService pluginService, + ReactiveUrlDataBufferFetcher reactiveUrlDataBufferFetcher, + WebProperties webProperties) { + this.client = client; + this.pluginService = pluginService; + this.reactiveUrlDataBufferFetcher = reactiveUrlDataBufferFetcher; + this.webProperties = webProperties; + } + + @Override + public RouterFunction endpoint() { + var tag = "PluginV1alpha1Console"; + return SpringdocRouteBuilder.route() + .POST("plugins/install", contentType(MediaType.MULTIPART_FORM_DATA), + this::install, builder -> builder.operationId("InstallPlugin") + .description("Install a plugin by uploading a Jar file.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.MULTIPART_FORM_DATA_VALUE) + .schema(schemaBuilder().implementation(InstallRequest.class)) + )) + .response(responseBuilder().implementation(Plugin.class)) + ) + .POST("plugins/-/install-from-uri", this::installFromUri, + builder -> builder.operationId("InstallPluginFromUri") + .description("Install a plugin from uri.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(schemaBuilder() + .implementation(InstallFromUriRequest.class)) + )) + .response(responseBuilder() + .implementation(Plugin.class)) + ) + .POST("plugins/{name}/upgrade-from-uri", this::upgradeFromUri, + builder -> builder.operationId("UpgradePluginFromUri") + .description("Upgrade a plugin from uri.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .required(true) + ) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(schemaBuilder() + .implementation(UpgradeFromUriRequest.class)) + )) + .response(responseBuilder() + .implementation(Plugin.class)) + ) + .POST("plugins/{name}/upgrade", contentType(MediaType.MULTIPART_FORM_DATA), + this::upgrade, builder -> builder.operationId("UpgradePlugin") + .description("Upgrade a plugin by uploading a Jar file") + .tag(tag) + .parameter(parameterBuilder().name("name").in(ParameterIn.PATH).required(true)) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder().mediaType(MediaType.MULTIPART_FORM_DATA_VALUE) + .schema(schemaBuilder().implementation(InstallRequest.class)))) + ) + .PUT("plugins/{name}/config", this::updatePluginConfig, + builder -> builder.operationId("updatePluginConfig") + .description("Update the configMap of plugin setting.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder().mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(schemaBuilder().implementation(ConfigMap.class)))) + .response(responseBuilder() + .implementation(ConfigMap.class)) + ) + .PUT("plugins/{name}/reset-config", this::resetSettingConfig, + builder -> builder.operationId("ResetPluginConfig") + .description("Reset the configMap of plugin setting.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(ConfigMap.class)) + ) + .PUT("plugins/{name}/reload", this::reload, + builder -> builder.operationId("reloadPlugin") + .description("Reload a plugin by name.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(Plugin.class)) + ) + .PUT("plugins/{name}/plugin-state", this::changePluginRunningState, + builder -> builder.operationId("ChangePluginRunningState") + .description("Change the running state of a plugin by name.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(schemaBuilder() + .implementation(RunningStateRequest.class)) + ) + ) + .response(responseBuilder() + .implementation(Plugin.class)) + ) + .GET("plugins", this::list, builder -> { + builder.operationId("ListPlugins") + .tag(tag) + .description("List plugins using query criteria and sort params") + .response(responseBuilder().implementation(generateGenericClass(Plugin.class))); + ListRequest.buildParameters(builder); + }) + .GET("plugins/{name}/setting", this::fetchPluginSetting, + builder -> builder.operationId("fetchPluginSetting") + .description("Fetch setting of plugin.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(Setting.class)) + ) + .GET("plugins/{name}/config", this::fetchPluginConfig, + builder -> builder.operationId("fetchPluginConfig") + .description("Fetch configMap of plugin by configured configMapName.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(ConfigMap.class)) + ) + .GET("plugin-presets", this::listPresets, + builder -> builder.operationId("ListPluginPresets") + .description("List all plugin presets in the system.") + .tag(tag) + .response(responseBuilder().implementationArray(Plugin.class)) + ) + .GET("plugins/-/bundle.js", this::fetchJsBundle, + builder -> builder.operationId("fetchJsBundle") + .description("Merge all JS bundles of enabled plugins into one.") + .tag(tag) + .response(responseBuilder().implementation(String.class)) + ) + .GET("plugins/-/bundle.css", this::fetchCssBundle, + builder -> builder.operationId("fetchCssBundle") + .description("Merge all CSS bundles of enabled plugins into one.") + .tag(tag) + .response(responseBuilder().implementation(String.class)) + ) + .build(); + } + + Mono changePluginRunningState(ServerRequest request) { + final var name = request.pathVariable("name"); + return request.bodyToMono(RunningStateRequest.class) + .flatMap(runningState -> { + var enable = runningState.isEnable(); + var async = runningState.isAsync(); + return pluginService.changeState(name, enable, !async); + }) + .flatMap(plugin -> ServerResponse.ok().bodyValue(plugin)); + } + + @Override + public void afterPropertiesSet() { + var cache = this.webProperties.getResources().getCache(); + this.useLastModified = cache.isUseLastModified(); + var cacheControl = cache.getCachecontrol().toHttpCacheControl(); + if (cacheControl != null) { + this.bundleCacheControl = cacheControl; + } + } + + @Data + @Schema(name = "PluginRunningStateRequest") + static class RunningStateRequest { + private boolean enable; + private boolean async; + } + + private Mono fetchJsBundle(ServerRequest request) { + var versionOption = request.queryParam("v"); + return versionOption.map(s -> pluginService.getJsBundle(s).flatMap( + jsRes -> { + var bodyBuilder = ServerResponse.ok() + .cacheControl(bundleCacheControl) + .contentType(MediaType.valueOf("text/javascript")); + if (useLastModified) { + try { + var lastModified = Instant.ofEpochMilli(jsRes.lastModified()); + bodyBuilder = bodyBuilder.lastModified(lastModified); + } catch (IOException e) { + if (e instanceof FileNotFoundException) { + return Mono.error(new NoResourceFoundException("bundle.js")); + } + return Mono.error(e); + } + } + return bodyBuilder.body(BodyInserters.fromResource(jsRes)); + })) + .orElseGet(() -> pluginService.generateBundleVersion() + .flatMap(version -> ServerResponse + .temporaryRedirect(buildJsBundleUri("js", version)) + .cacheControl(CacheControl.noStore()) + .build())); + } + + private Mono fetchCssBundle(ServerRequest request) { + return request.queryParam("v") + .map(s -> pluginService.getCssBundle(s).flatMap(cssRes -> { + var bodyBuilder = ServerResponse.ok() + .cacheControl(bundleCacheControl) + .contentType(MediaType.valueOf("text/css")); + if (useLastModified) { + try { + var lastModified = Instant.ofEpochMilli(cssRes.lastModified()); + bodyBuilder = bodyBuilder.lastModified(lastModified); + } catch (IOException e) { + if (e instanceof FileNotFoundException) { + return Mono.error(new NoResourceFoundException("bundle.css")); + } + return Mono.error(e); + } + } + return bodyBuilder.body(BodyInserters.fromResource(cssRes)); + })) + .orElseGet(() -> pluginService.generateBundleVersion() + .flatMap(version -> ServerResponse + .temporaryRedirect(buildJsBundleUri("css", version)) + .cacheControl(CacheControl.noStore()) + .build())); + + } + + URI buildJsBundleUri(String type, String version) { + return URI.create( + "/apis/api.console.halo.run/v1alpha1/plugins/-/bundle." + type + "?v=" + version); + } + + private Mono upgradeFromUri(ServerRequest request) { + var name = request.pathVariable("name"); + var content = request.bodyToMono(UpgradeFromUriRequest.class) + .map(UpgradeFromUriRequest::uri) + .flatMapMany(reactiveUrlDataBufferFetcher::fetch); + + return Mono.usingWhen( + writeToTempFile(content), + path -> pluginService.upgrade(name, path), + this::deleteFileIfExists) + .flatMap(upgradedPlugin -> ServerResponse.ok().bodyValue(upgradedPlugin)); + } + + private Mono installFromUri(ServerRequest request) { + var content = request.bodyToMono(InstallFromUriRequest.class) + .map(InstallFromUriRequest::uri) + .flatMapMany(reactiveUrlDataBufferFetcher::fetch); + + return Mono.usingWhen( + writeToTempFile(content), + pluginService::install, + this::deleteFileIfExists + ) + .flatMap(newPlugin -> ServerResponse.ok().bodyValue(newPlugin)); + } + + public record InstallFromUriRequest(@Schema(requiredMode = REQUIRED) URI uri) { + } + + public record UpgradeFromUriRequest(@Schema(requiredMode = REQUIRED) URI uri) { + } + + private Mono reload(ServerRequest serverRequest) { + var name = serverRequest.pathVariable("name"); + return ServerResponse.ok().body(pluginService.reload(name), Plugin.class); + } + + private Mono listPresets(ServerRequest request) { + return ServerResponse.ok().body(pluginService.getPresets(), Plugin.class); + } + + private Mono fetchPluginConfig(ServerRequest request) { + final var name = request.pathVariable("name"); + return client.fetch(Plugin.class, name) + .mapNotNull(plugin -> plugin.getSpec().getConfigMapName()) + .flatMap(configMapName -> client.fetch(ConfigMap.class, configMapName)) + .flatMap(configMap -> ServerResponse.ok().bodyValue(configMap)); + } + + private Mono fetchPluginSetting(ServerRequest request) { + final var name = request.pathVariable("name"); + return client.fetch(Plugin.class, name) + .mapNotNull(plugin -> plugin.getSpec().getSettingName()) + .flatMap(settingName -> client.fetch(Setting.class, settingName)) + .flatMap(setting -> ServerResponse.ok().bodyValue(setting)); + } + + private Mono updatePluginConfig(ServerRequest request) { + final var pluginName = request.pathVariable("name"); + return client.fetch(Plugin.class, pluginName) + .doOnNext(plugin -> { + String configMapName = plugin.getSpec().getConfigMapName(); + if (!StringUtils.hasText(configMapName)) { + throw new ServerWebInputException( + "Unable to complete the request because the plugin configMapName is blank"); + } + }) + .flatMap(plugin -> { + final String configMapName = plugin.getSpec().getConfigMapName(); + return request.bodyToMono(ConfigMap.class) + .doOnNext(configMapToUpdate -> { + var configMapNameToUpdate = configMapToUpdate.getMetadata().getName(); + if (!configMapName.equals(configMapNameToUpdate)) { + throw new ServerWebInputException( + "The name from the request body does not match the plugin " + + "configMapName name."); + } + }) + .flatMap(configMapToUpdate -> client.fetch(ConfigMap.class, configMapName) + .map(persisted -> { + configMapToUpdate.getMetadata() + .setVersion(persisted.getMetadata().getVersion()); + return configMapToUpdate; + }) + .switchIfEmpty(client.create(configMapToUpdate)) + ) + .flatMap(client::update) + .retryWhen(Retry.backoff(5, Duration.ofMillis(300)) + .filter(OptimisticLockingFailureException.class::isInstance) + ); + }) + .flatMap(configMap -> ServerResponse.ok().bodyValue(configMap)); + } + + private Mono resetSettingConfig(ServerRequest request) { + String name = request.pathVariable("name"); + return client.fetch(Plugin.class, name) + .filter(plugin -> StringUtils.hasText(plugin.getSpec().getSettingName())) + .flatMap(plugin -> { + String configMapName = plugin.getSpec().getConfigMapName(); + String settingName = plugin.getSpec().getSettingName(); + return client.fetch(Setting.class, settingName) + .map(SettingUtils::settingDefinedDefaultValueMap) + .flatMap(data -> updateConfigMapData(configMapName, data)); + }) + .flatMap(configMap -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(configMap)); + } + + private Mono updateConfigMapData(String configMapName, Map data) { + return client.fetch(ConfigMap.class, configMapName) + .flatMap(configMap -> { + configMap.setData(data); + return client.update(configMap); + }) + .retryWhen(Retry.fixedDelay(10, Duration.ofMillis(100)) + .filter(t -> t instanceof OptimisticLockingFailureException)); + } + + + private Mono install(ServerRequest request) { + return request.multipartData() + .map(InstallRequest::new) + .flatMap(installRequest -> installRequest.getSource() + .flatMap(source -> { + if (InstallSource.FILE.equals(source)) { + return installFromFile(installRequest.getFile(), pluginService::install); + } + if (InstallSource.PRESET.equals(source)) { + return installFromPreset(installRequest.getPresetName(), + pluginService::install); + } + return Mono.error( + new UnsupportedOperationException("Unsupported install source " + source)); + })) + .flatMap(plugin -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(plugin)); + } + + private Mono upgrade(ServerRequest request) { + var pluginName = request.pathVariable("name"); + return request.multipartData() + .map(InstallRequest::new) + .flatMap(installRequest -> installRequest.getSource() + .flatMap(source -> { + if (InstallSource.FILE.equals(source)) { + return installFromFile(installRequest.getFile(), + path -> pluginService.upgrade(pluginName, path)); + } + if (InstallSource.PRESET.equals(source)) { + return installFromPreset(installRequest.getPresetName(), + path -> pluginService.upgrade(pluginName, path)); + } + return Mono.error( + new UnsupportedOperationException("Unsupported install source " + source)); + })) + .flatMap(upgradedPlugin -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(upgradedPlugin)); + } + + private Mono installFromFile(FilePart filePart, + Function> resourceClosure) { + return Mono.usingWhen( + writeToTempFile(filePart.content()), + resourceClosure, + this::deleteFileIfExists); + } + + private Mono installFromPreset(Mono presetNameMono, + Function> resourceClosure) { + return presetNameMono.flatMap(pluginService::getPreset) + .switchIfEmpty( + Mono.error(() -> new PluginNotFoundException("Plugin preset was not found."))) + .map(pluginPreset -> pluginPreset.getStatus().getLoadLocation()) + .map(Path::of) + .flatMap(resourceClosure); + } + + public static class ListRequest extends QueryListRequest { + + private final ServerWebExchange exchange; + + public ListRequest(ServerRequest request) { + super(request.queryParams()); + this.exchange = request.exchange(); + } + + @Schema(name = "keyword", description = "Keyword of plugin name or description") + public String getKeyword() { + return queryParams.getFirst("keyword"); + } + + @Schema(name = "enabled", description = "Whether the plugin is enabled") + public Boolean getEnabled() { + var enabled = queryParams.getFirst("enabled"); + return enabled == null ? null : getSharedInstance().convert(enabled, Boolean.class); + } + + @ArraySchema(uniqueItems = true, + arraySchema = @Schema(name = "sort", + description = "Sort property and direction of the list result. Supported fields: " + + "creationTimestamp"), + schema = @Schema(description = "like field,asc or field,desc", + implementation = String.class, + example = "creationTimestamp,desc")) + public Sort getSort() { + return SortResolver.defaultInstance.resolve(exchange); + } + + public Predicate toPredicate() { + Predicate displayNamePredicate = plugin -> { + var keyword = getKeyword(); + if (!StringUtils.hasText(keyword)) { + return true; + } + var displayName = plugin.getSpec().getDisplayName(); + if (!StringUtils.hasText(displayName)) { + return false; + } + return displayName.toLowerCase().contains(keyword.trim().toLowerCase()); + }; + Predicate descriptionPredicate = plugin -> { + var keyword = getKeyword(); + if (!StringUtils.hasText(keyword)) { + return true; + } + var description = plugin.getSpec().getDescription(); + if (!StringUtils.hasText(description)) { + return false; + } + return description.toLowerCase().contains(keyword.trim().toLowerCase()); + }; + Predicate enablePredicate = plugin -> { + var enabled = getEnabled(); + if (enabled == null) { + return true; + } + return Objects.equals(enabled, plugin.getSpec().getEnabled()); + }; + return displayNamePredicate.or(descriptionPredicate) + .and(enablePredicate) + .and(labelAndFieldSelectorToPredicate(getLabelSelector(), getFieldSelector())); + } + + public Comparator toComparator() { + var sort = getSort(); + var ctOrder = sort.getOrderFor("creationTimestamp"); + List> comparators = new ArrayList<>(); + if (ctOrder != null) { + Comparator comparator = + comparing(plugin -> plugin.getMetadata().getCreationTimestamp()); + if (ctOrder.isDescending()) { + comparator = comparator.reversed(); + } + comparators.add(comparator); + } + comparators.add(Comparators.compareCreationTimestamp(false)); + comparators.add(Comparators.compareName(true)); + return comparators.stream() + .reduce(Comparator::thenComparing) + .orElse(null); + } + + public static void buildParameters(Builder builder) { + IListRequest.buildParameters(builder); + builder.parameter(sortParameter()); + builder.parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("keyword") + .description("Keyword of plugin name or description") + .implementation(String.class) + .required(false)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("enabled") + .description("Whether the plugin is enabled") + .implementation(Boolean.class) + .required(false)); + } + } + + Mono list(ServerRequest request) { + return Mono.just(request) + .map(ListRequest::new) + .flatMap(listRequest -> { + var predicate = listRequest.toPredicate(); + var comparator = listRequest.toComparator(); + return client.list(Plugin.class, + predicate, + comparator, + listRequest.getPage(), + listRequest.getSize()); + }) + .flatMap(listResult -> ServerResponse.ok().bodyValue(listResult)); + } + + @Schema(name = "PluginInstallRequest", types = "object") + public static class InstallRequest { + + private final MultiValueMap multipartData; + + public InstallRequest(MultiValueMap multipartData) { + this.multipartData = multipartData; + } + + @Schema(requiredMode = NOT_REQUIRED, description = "Plugin Jar file.") + public FilePart getFile() { + var part = multipartData.getFirst("file"); + if (part == null) { + throw new ServerWebInputException("Form field file is required"); + } + if (!(part instanceof FilePart file)) { + throw new ServerWebInputException("Invalid parameter of file"); + } + if (!Paths.get(file.filename()).toString().endsWith(".jar")) { + throw new ServerWebInputException("Invalid file type, only jar is supported"); + } + return file; + } + + @Schema(requiredMode = NOT_REQUIRED, + description = "Plugin preset name. We will find the plugin from plugin presets") + public Mono getPresetName() { + var part = multipartData.getFirst("presetName"); + if (part == null) { + return Mono.error(new ServerWebInputException( + "Form field presetName is required.")); + } + if (!(part instanceof FormFieldPart presetName)) { + return Mono.error(new ServerWebInputException( + "Invalid format of presetName field, string required")); + } + if (!StringUtils.hasText(presetName.value())) { + return Mono.error(new ServerWebInputException("presetName must not be blank")); + } + return Mono.just(presetName.value()); + } + + @Schema(requiredMode = NOT_REQUIRED, description = "Install source. Default is file.") + public Mono getSource() { + var part = multipartData.getFirst("source"); + if (part == null) { + return Mono.just(InstallSource.FILE); + } + if (!(part instanceof FormFieldPart sourcePart)) { + return Mono.error(new ServerWebInputException( + "Invalid format of source field, string required.")); + } + var installSource = InstallSource.valueOf(sourcePart.value().toUpperCase()); + return Mono.just(installSource); + } + } + + public enum InstallSource { + FILE, + PRESET, + URL + } + + Mono deleteFileIfExists(Path path) { + return deleteFileSilently(path, this.scheduler).then(); + } + + private Mono writeToTempFile(Publisher content) { + return Mono.fromCallable(() -> Files.createTempFile("halo-plugin-", ".jar")) + .flatMap(path -> write(content, path).thenReturn(path)) + .subscribeOn(this.scheduler); + } + +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/PostEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/PostEndpoint.java new file mode 100644 index 0000000..5720ff6 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/PostEndpoint.java @@ -0,0 +1,409 @@ +package run.halo.app.core.extension.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static run.halo.app.extension.MetadataUtil.nullSafeLabels; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Duration; +import java.util.Objects; +import java.util.function.Predicate; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.BooleanUtils; +import org.springdoc.core.fn.builders.schema.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.http.MediaType; +import org.springframework.retry.RetryException; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerErrorException; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.Exceptions; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.content.Content; +import run.halo.app.content.ContentUpdateParam; +import run.halo.app.content.ContentWrapper; +import run.halo.app.content.ListedPost; +import run.halo.app.content.ListedSnapshotDto; +import run.halo.app.content.PostQuery; +import run.halo.app.content.PostRequest; +import run.halo.app.content.PostService; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.ReactiveExtensionClient; + +/** + * Endpoint for managing posts. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class PostEndpoint implements CustomEndpoint { + + private int maxAttemptsWaitForPublish = 10; + private final PostService postService; + private final ReactiveExtensionClient client; + + @Override + public RouterFunction endpoint() { + final var tag = "PostV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("posts", this::listPost, builder -> { + builder.operationId("ListPosts") + .description("List posts.") + .tag(tag) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(ListedPost.class)) + ); + PostQuery.buildParameters(builder); + } + ) + .GET("posts/{name}/head-content", this::fetchHeadContent, + builder -> builder.operationId("fetchPostHeadContent") + .description("Fetch head content of post.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(ContentWrapper.class)) + ) + .GET("posts/{name}/content", this::fetchContent, + builder -> builder.operationId("fetchPostContent") + .description("Fetch content of post.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .parameter(parameterBuilder() + .name("snapshotName") + .in(ParameterIn.QUERY) + .required(true) + .implementation(String.class)) + .response(responseBuilder() + .implementation(ContentWrapper.class)) + ) + .GET("posts/{name}/release-content", this::fetchReleaseContent, + builder -> builder.operationId("fetchPostReleaseContent") + .description("Fetch release content of post.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(ContentWrapper.class)) + ) + .GET("posts/{name}/snapshot", this::listSnapshots, + builder -> builder.operationId("listPostSnapshots") + .description("List all snapshots for post content.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .response(responseBuilder() + .implementationArray(ListedSnapshotDto.class)) + ) + .POST("posts", this::draftPost, + builder -> builder.operationId("DraftPost") + .description("Draft a post.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(PostRequest.class)) + )) + .response(responseBuilder() + .implementation(Post.class)) + ) + .PUT("posts/{name}", this::updatePost, + builder -> builder.operationId("UpdateDraftPost") + .description("Update a post.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(PostRequest.class)) + )) + .response(responseBuilder() + .implementation(Post.class)) + ) + .PUT("posts/{name}/content", this::updateContent, + builder -> builder.operationId("UpdatePostContent") + .description("Update a post's content.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(Content.class)) + )) + .response(responseBuilder() + .implementation(Post.class)) + ) + .PUT("posts/{name}/revert-content", this::revertToSpecifiedSnapshot, + builder -> builder.operationId("revertToSpecifiedSnapshotForPost") + .description("Revert to specified snapshot for post content.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(RevertSnapshotParam.class)) + )) + .response(responseBuilder() + .implementation(Post.class)) + ) + .PUT("posts/{name}/publish", this::publishPost, + builder -> builder.operationId("PublishPost") + .description("Publish a post.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .parameter(parameterBuilder().name("headSnapshot") + .description("Head snapshot name of content.") + .in(ParameterIn.QUERY) + .required(false)) + .parameter(parameterBuilder() + .name("async") + .in(ParameterIn.QUERY) + .implementation(Boolean.class) + .required(false)) + .response(responseBuilder() + .implementation(Post.class)) + ) + .PUT("posts/{name}/unpublish", this::unpublishPost, + builder -> builder.operationId("UnpublishPost") + .description("Publish a post.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true)) + .response(responseBuilder() + .implementation(Post.class))) + .PUT("posts/{name}/recycle", this::recyclePost, + builder -> builder.operationId("RecyclePost") + .description("Recycle a post.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true))) + .DELETE("posts/{name}/content", this::deleteContent, + builder -> builder.operationId("deletePostContent") + .description("Delete a content for post.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .parameter(parameterBuilder() + .name("snapshotName") + .in(ParameterIn.QUERY) + .required(true) + .implementation(String.class)) + .response(responseBuilder() + .implementation(ContentWrapper.class)) + ) + .build(); + } + + private Mono deleteContent(ServerRequest request) { + final var postName = request.pathVariable("name"); + final var snapshotName = request.queryParam("snapshotName").orElseThrow(); + return postService.deleteContent(postName, snapshotName) + .flatMap(content -> ServerResponse.ok().bodyValue(content)); + } + + private Mono revertToSpecifiedSnapshot(ServerRequest request) { + final var postName = request.pathVariable("name"); + return request.bodyToMono(RevertSnapshotParam.class) + .switchIfEmpty( + Mono.error(new ServerWebInputException("Required request body is missing."))) + .flatMap(param -> postService.revertToSpecifiedSnapshot(postName, param.snapshotName)) + .flatMap(post -> ServerResponse.ok().bodyValue(post)); + } + + @Schema(name = "RevertSnapshotForPostParam") + record RevertSnapshotParam( + @Schema(requiredMode = Schema.RequiredMode.REQUIRED, minLength = 1) String snapshotName) { + } + + private Mono fetchContent(ServerRequest request) { + final var name = request.pathVariable("name"); + final var snapshotName = request.queryParam("snapshotName").orElseThrow(); + return client.fetch(Post.class, name) + .flatMap(post -> { + var baseSnapshot = post.getSpec().getBaseSnapshot(); + return postService.getContent(snapshotName, baseSnapshot); + }) + .flatMap(content -> ServerResponse.ok().bodyValue(content)); + } + + private Mono listSnapshots(ServerRequest request) { + String name = request.pathVariable("name"); + var resultFlux = postService.listSnapshots(name); + return ServerResponse.ok().body(resultFlux, ListedSnapshotDto.class); + } + + private Mono fetchReleaseContent(ServerRequest request) { + final var name = request.pathVariable("name"); + return postService.getReleaseContent(name) + .flatMap(content -> ServerResponse.ok().bodyValue(content)); + } + + private Mono fetchHeadContent(ServerRequest request) { + String name = request.pathVariable("name"); + return postService.getHeadContent(name) + .flatMap(content -> ServerResponse.ok().bodyValue(content)); + } + + Mono draftPost(ServerRequest request) { + return request.bodyToMono(PostRequest.class) + .flatMap(postService::draftPost) + .flatMap(post -> ServerResponse.ok().bodyValue(post)); + } + + Mono updateContent(ServerRequest request) { + String postName = request.pathVariable("name"); + return request.bodyToMono(ContentUpdateParam.class) + .flatMap(content -> Mono.defer(() -> client.fetch(Post.class, postName) + .flatMap(post -> { + PostRequest postRequest = new PostRequest(post, content); + return postService.updatePost(postRequest); + })) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(throwable -> throwable instanceof OptimisticLockingFailureException)) + ) + .flatMap(post -> ServerResponse.ok().bodyValue(post)); + } + + Mono updatePost(ServerRequest request) { + return request.bodyToMono(PostRequest.class) + .flatMap(postService::updatePost) + .flatMap(post -> ServerResponse.ok().bodyValue(post)); + } + + Mono publishPost(ServerRequest request) { + var name = request.pathVariable("name"); + boolean asyncPublish = request.queryParam("async") + .map(Boolean::parseBoolean) + .orElse(false); + + return Mono.defer(() -> client.get(Post.class, name) + .doOnNext(post -> { + var spec = post.getSpec(); + request.queryParam("headSnapshot").ifPresent(spec::setHeadSnapshot); + spec.setPublish(true); + if (spec.getHeadSnapshot() == null) { + spec.setHeadSnapshot(spec.getBaseSnapshot()); + } + spec.setReleaseSnapshot(spec.getHeadSnapshot()); + }) + .flatMap(client::update) + ) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(t -> t instanceof OptimisticLockingFailureException)) + .filter(post -> asyncPublish) + .switchIfEmpty(Mono.defer(() -> awaitPostPublished(name))) + .onErrorMap(Exceptions::isRetryExhausted, err -> new ServerErrorException( + "Post publishing failed, please try again later.", err)) + .flatMap(publishResult -> ServerResponse.ok().bodyValue(publishResult)); + } + + private Mono awaitPostPublished(String postName) { + Predicate schedulePublish = post -> { + var labels = nullSafeLabels(post); + return BooleanUtils.TRUE.equals(labels.get(Post.SCHEDULING_PUBLISH_LABEL)); + }; + return Mono.defer(() -> client.get(Post.class, postName) + .filter(post -> { + var releasedSnapshot = MetadataUtil.nullSafeAnnotations(post) + .get(Post.LAST_RELEASED_SNAPSHOT_ANNO); + var expectReleaseSnapshot = post.getSpec().getReleaseSnapshot(); + return Objects.equals(releasedSnapshot, expectReleaseSnapshot) + || schedulePublish.test(post); + }) + .switchIfEmpty(Mono.error( + () -> new RetryException("Retry to check post publish status")))) + .retryWhen(Retry.backoff(maxAttemptsWaitForPublish, Duration.ofMillis(100)) + .filter(t -> t instanceof RetryException)); + } + + private Mono unpublishPost(ServerRequest request) { + var name = request.pathVariable("name"); + return Mono.defer(() -> client.get(Post.class, name) + .doOnNext(post -> { + var spec = post.getSpec(); + spec.setPublish(false); + }) + .flatMap(client::update)) + .retryWhen(Retry.backoff(3, Duration.ofMillis(100)) + .filter(t -> t instanceof OptimisticLockingFailureException)) + .flatMap(post -> ServerResponse.ok().bodyValue(post)); + } + + private Mono recyclePost(ServerRequest request) { + var name = request.pathVariable("name"); + return Mono.defer(() -> client.get(Post.class, name) + .doOnNext(post -> { + var spec = post.getSpec(); + spec.setDeleted(true); + }) + .flatMap(client::update)) + .retryWhen(Retry.backoff(3, Duration.ofMillis(100)) + .filter(t -> t instanceof OptimisticLockingFailureException)) + .flatMap(post -> ServerResponse.ok().bodyValue(post)); + } + + Mono listPost(ServerRequest request) { + PostQuery postQuery = new PostQuery(request); + return postService.listPost(postQuery) + .flatMap(listedPosts -> ServerResponse.ok().bodyValue(listedPosts)); + } + + /** + * Convenient for testing, to avoid waiting too long for post published when testing. + */ + public void setMaxAttemptsWaitForPublish(int maxAttempts) { + this.maxAttemptsWaitForPublish = maxAttempts; + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/ReplyEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/ReplyEndpoint.java new file mode 100644 index 0000000..61e2fb5 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/ReplyEndpoint.java @@ -0,0 +1,54 @@ +package run.halo.app.core.extension.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; + +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.content.comment.ListedReply; +import run.halo.app.content.comment.ReplyQuery; +import run.halo.app.content.comment.ReplyService; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.extension.ListResult; + +/** + * Endpoint for managing {@link Reply}. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class ReplyEndpoint implements CustomEndpoint { + + private final ReplyService replyService; + + public ReplyEndpoint(ReplyService replyService) { + this.replyService = replyService; + } + + @Override + public RouterFunction endpoint() { + var tag = "ReplyV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("replies", this::listReplies, builder -> { + builder.operationId("ListReplies") + .description("List replies.") + .tag(tag) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(ListedReply.class)) + ); + ReplyQuery.buildParameters(builder); + } + ) + .build(); + } + + Mono listReplies(ServerRequest request) { + ReplyQuery replyQuery = new ReplyQuery(request.exchange()); + return replyService.list(replyQuery) + .flatMap(listedReplies -> ServerResponse.ok().bodyValue(listedReplies)); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/SinglePageEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/SinglePageEndpoint.java new file mode 100644 index 0000000..0c86c01 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/SinglePageEndpoint.java @@ -0,0 +1,342 @@ +package run.halo.app.core.extension.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import java.time.Duration; +import lombok.AllArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springdoc.core.fn.builders.schema.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.http.MediaType; +import org.springframework.retry.RetryException; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import org.thymeleaf.util.StringUtils; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.content.Content; +import run.halo.app.content.ContentUpdateParam; +import run.halo.app.content.ContentWrapper; +import run.halo.app.content.ListedSinglePage; +import run.halo.app.content.ListedSnapshotDto; +import run.halo.app.content.SinglePageQuery; +import run.halo.app.content.SinglePageRequest; +import run.halo.app.content.SinglePageService; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.ReactiveExtensionClient; + +/** + * Endpoint for managing {@link SinglePage}. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +@AllArgsConstructor +public class SinglePageEndpoint implements CustomEndpoint { + + private final SinglePageService singlePageService; + private final ReactiveExtensionClient client; + + @Override + public RouterFunction endpoint() { + var tag = "SinglePageV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("singlepages", this::listSinglePage, builder -> { + builder.operationId("ListSinglePages") + .description("List single pages.") + .tag(tag) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(ListedSinglePage.class)) + ); + SinglePageQuery.buildParameters(builder); + } + ) + .GET("singlepages/{name}/head-content", this::fetchHeadContent, + builder -> builder.operationId("fetchSinglePageHeadContent") + .description("Fetch head content of single page.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(ContentWrapper.class)) + ) + .GET("singlepages/{name}/release-content", this::fetchReleaseContent, + builder -> builder.operationId("fetchSinglePageReleaseContent") + .description("Fetch release content of single page.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(ContentWrapper.class)) + ) + .GET("singlepages/{name}/content", this::fetchContent, + builder -> builder.operationId("fetchSinglePageContent") + .description("Fetch content of single page.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .parameter(parameterBuilder().name("snapshotName") + .in(ParameterIn.QUERY) + .required(true) + .implementation(String.class)) + .response(responseBuilder() + .implementation(ContentWrapper.class)) + ) + .GET("singlepages/{name}/snapshot", this::listSnapshots, + builder -> builder.operationId("listSinglePageSnapshots") + .description("List all snapshots for single page content.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .response(responseBuilder() + .implementationArray(ListedSnapshotDto.class)) + ) + .POST("singlepages", this::draftSinglePage, + builder -> builder.operationId("DraftSinglePage") + .description("Draft a single page.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(SinglePageRequest.class)) + )) + .response(responseBuilder() + .implementation(SinglePage.class)) + ) + .PUT("singlepages/{name}", this::updateSinglePage, + builder -> builder.operationId("UpdateDraftSinglePage") + .description("Update a single page.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(SinglePageRequest.class)) + )) + .response(responseBuilder() + .implementation(SinglePage.class)) + ) + .PUT("singlepages/{name}/content", this::updateContent, + builder -> builder.operationId("UpdateSinglePageContent") + .description("Update a single page's content.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(Content.class)) + )) + .response(responseBuilder() + .implementation(Post.class)) + ) + .PUT("singlepages/{name}/revert-content", this::revertToSpecifiedSnapshot, + builder -> builder.operationId("revertToSpecifiedSnapshotForSinglePage") + .description("Revert to specified snapshot for single page content.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(RevertSnapshotParam.class)) + )) + .response(responseBuilder() + .implementation(Post.class)) + ) + .PUT("singlepages/{name}/publish", this::publishSinglePage, + builder -> builder.operationId("PublishSinglePage") + .description("Publish a single page.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .response(responseBuilder() + .implementation(SinglePage.class)) + ) + .DELETE("singlepages/{name}/content", this::deleteContent, + builder -> builder.operationId("deleteSinglePageContent") + .description("Delete a content for post.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .parameter(parameterBuilder() + .name("snapshotName") + .in(ParameterIn.QUERY) + .required(true) + .implementation(String.class)) + .response(responseBuilder() + .implementation(ContentWrapper.class)) + ) + .build(); + } + + private Mono deleteContent(ServerRequest request) { + final var postName = request.pathVariable("name"); + final var snapshotName = request.queryParam("snapshotName").orElseThrow(); + return singlePageService.deleteContent(postName, snapshotName) + .flatMap(content -> ServerResponse.ok().bodyValue(content)); + } + + private Mono revertToSpecifiedSnapshot(ServerRequest request) { + final var postName = request.pathVariable("name"); + return request.bodyToMono(RevertSnapshotParam.class) + .switchIfEmpty( + Mono.error(new ServerWebInputException("Required request body is missing."))) + .flatMap( + param -> singlePageService.revertToSpecifiedSnapshot(postName, param.snapshotName)) + .flatMap(page -> ServerResponse.ok().bodyValue(page)); + } + + @Schema(name = "RevertSnapshotForSingleParam") + record RevertSnapshotParam( + @Schema(requiredMode = Schema.RequiredMode.REQUIRED, minLength = 1) String snapshotName) { + } + + private Mono fetchContent(ServerRequest request) { + final var snapshotName = request.queryParam("snapshotName").orElseThrow(); + return client.fetch(SinglePage.class, request.pathVariable("name")) + .flatMap(page -> { + var baseSnapshot = page.getSpec().getBaseSnapshot(); + return singlePageService.getContent(snapshotName, baseSnapshot); + }) + .flatMap(content -> ServerResponse.ok().bodyValue(content)); + } + + private Mono listSnapshots(ServerRequest request) { + final var name = request.pathVariable("name"); + var resultFlux = singlePageService.listSnapshots(name); + return ServerResponse.ok().body(resultFlux, ListedSnapshotDto.class); + } + + private Mono fetchReleaseContent(ServerRequest request) { + final var name = request.pathVariable("name"); + return singlePageService.getReleaseContent(name) + .flatMap(content -> ServerResponse.ok().bodyValue(content)); + } + + private Mono fetchHeadContent(ServerRequest request) { + String name = request.pathVariable("name"); + return singlePageService.getHeadContent(name) + .flatMap(content -> ServerResponse.ok().bodyValue(content)); + } + + Mono draftSinglePage(ServerRequest request) { + return request.bodyToMono(SinglePageRequest.class) + .flatMap(singlePageService::draft) + .flatMap(singlePage -> ServerResponse.ok().bodyValue(singlePage)); + } + + Mono updateContent(ServerRequest request) { + String pageName = request.pathVariable("name"); + return request.bodyToMono(ContentUpdateParam.class) + .flatMap(content -> Mono.defer(() -> client.fetch(SinglePage.class, pageName) + .flatMap(page -> { + SinglePageRequest pageRequest = new SinglePageRequest(page, content); + return singlePageService.update(pageRequest); + })) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(throwable -> throwable instanceof OptimisticLockingFailureException)) + ) + .flatMap(post -> ServerResponse.ok().bodyValue(post)); + } + + Mono updateSinglePage(ServerRequest request) { + return request.bodyToMono(SinglePageRequest.class) + .flatMap(singlePageService::update) + .flatMap(page -> ServerResponse.ok().bodyValue(page)); + } + + Mono publishSinglePage(ServerRequest request) { + String name = request.pathVariable("name"); + boolean asyncPublish = request.queryParam("async") + .map(Boolean::parseBoolean) + .orElse(false); + return Mono.defer(() -> client.get(SinglePage.class, name) + .flatMap(singlePage -> { + SinglePage.SinglePageSpec spec = singlePage.getSpec(); + spec.setPublish(true); + if (spec.getHeadSnapshot() == null) { + spec.setHeadSnapshot(spec.getBaseSnapshot()); + } + spec.setReleaseSnapshot(spec.getHeadSnapshot()); + return client.update(singlePage); + }) + ) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(t -> t instanceof OptimisticLockingFailureException)) + .flatMap(post -> { + if (asyncPublish) { + return Mono.just(post); + } + return client.fetch(SinglePage.class, name) + .map(latest -> { + String latestReleasedSnapshotName = + MetadataUtil.nullSafeAnnotations(latest) + .get(Post.LAST_RELEASED_SNAPSHOT_ANNO); + if (StringUtils.equals(latestReleasedSnapshotName, + latest.getSpec().getReleaseSnapshot())) { + return latest; + } + throw new RetryException("SinglePage publishing status is not as expected"); + }) + .retryWhen(Retry.fixedDelay(10, Duration.ofMillis(100)) + .filter(t -> t instanceof RetryException)) + .doOnError(IllegalStateException.class, err -> { + log.error("Failed to publish single page [{}]", name, err); + throw new IllegalStateException("Publishing wait timeout."); + }); + }) + .flatMap(page -> ServerResponse.ok().bodyValue(page)); + } + + Mono listSinglePage(ServerRequest request) { + var listRequest = new SinglePageQuery(request); + return singlePageService.list(listRequest) + .flatMap(listedPages -> ServerResponse.ok().bodyValue(listedPages)); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/StatsEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/StatsEndpoint.java new file mode 100644 index 0000000..84881b7 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/StatsEndpoint.java @@ -0,0 +1,113 @@ +package run.halo.app.core.extension.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import lombok.Data; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Counter; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; + +/** + * Stats endpoint. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class StatsEndpoint implements CustomEndpoint { + + private final ReactiveExtensionClient client; + + public StatsEndpoint(ReactiveExtensionClient client) { + this.client = client; + } + + @Override + public RouterFunction endpoint() { + var tag = "SystemV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("stats", this::getStats, builder -> builder.operationId("getStats") + .description("Get stats.") + .tag(tag) + .response(responseBuilder() + .implementation(DashboardStats.class) + ) + ) + .build(); + } + + Mono getStats(ServerRequest request) { + return client.list(Counter.class, null, null) + .reduce(DashboardStats.emptyStats(), (stats, counter) -> { + stats.setVisits(stats.getVisits() + counter.getVisit()); + stats.setComments(stats.getComments() + counter.getTotalComment()); + stats.setApprovedComments( + stats.getApprovedComments() + counter.getApprovedComment()); + stats.setUpvotes(stats.getUpvotes() + counter.getUpvote()); + return stats; + }) + .flatMap(stats -> { + var listOptions = new ListOptions(); + listOptions.setLabelSelector(LabelSelector.builder() + .notEq(User.HIDDEN_USER_LABEL, "true") + .build() + ); + listOptions.setFieldSelector( + FieldSelector.of(isNull("metadata.deletionTimestamp"))); + return client.listBy(User.class, listOptions, PageRequestImpl.ofSize(1)) + .doOnNext(result -> stats.setUsers((int) result.getTotal())) + .thenReturn(stats); + }) + .flatMap(stats -> { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + and(isNull("metadata.deletionTimestamp"), + equal("spec.deleted", "false"))) + ); + return client.listBy(Post.class, listOptions, PageRequestImpl.ofSize(1)) + .doOnNext(list -> stats.setPosts((int) list.getTotal())) + .thenReturn(stats); + }) + .flatMap(stats -> ServerResponse.ok().bodyValue(stats)); + } + + @Data + public static class DashboardStats { + private Integer visits; + private Integer comments; + private Integer approvedComments; + private Integer upvotes; + private Integer users; + private Integer posts; + + /** + * Creates an empty stats that populated initialize value. + * + * @return stats with initialize value. + */ + public static DashboardStats emptyStats() { + DashboardStats stats = new DashboardStats(); + stats.setVisits(0); + stats.setComments(0); + stats.setApprovedComments(0); + stats.setUpvotes(0); + stats.setUsers(0); + stats.setPosts(0); + return stats; + } + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/SystemInitializationEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/SystemInitializationEndpoint.java new file mode 100644 index 0000000..37477cc --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/SystemInitializationEndpoint.java @@ -0,0 +1,146 @@ +package run.halo.app.core.extension.endpoint; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.header.Builder.headerBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.net.URI; +import java.time.Duration; +import java.util.LinkedHashMap; +import java.util.Map; +import lombok.Data; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.http.HttpHeaders; +import org.springframework.http.HttpStatus; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ResponseStatusException; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.InitializationStateGetter; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.ValidationUtils; +import run.halo.app.infra.exception.UnsatisfiedAttributeValueException; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.security.SuperAdminInitializer; + +/** + * System initialization endpoint. + * + * @author guqing + * @since 2.9.0 + */ +@Component +@RequiredArgsConstructor +public class SystemInitializationEndpoint implements CustomEndpoint { + + private final ReactiveExtensionClient client; + private final SuperAdminInitializer superAdminInitializer; + private final InitializationStateGetter initializationStateSupplier; + + @Override + public RouterFunction endpoint() { + var tag = "SystemV1alpha1Console"; + // define a non-resource api + return SpringdocRouteBuilder.route() + .POST("/system/initialize", this::initialize, + builder -> builder.operationId("initialize") + .description("Initialize system") + .tag(tag) + .requestBody(requestBodyBuilder() + .implementation(SystemInitializationRequest.class)) + .response(responseBuilder() + .responseCode(HttpStatus.CREATED.value() + "") + .description("System initialization successfully.") + .header(headerBuilder() + .name(HttpHeaders.LOCATION) + .description("Redirect URL.") + ) + ) + ) + .build(); + } + + private Mono initialize(ServerRequest request) { + return request.bodyToMono(SystemInitializationRequest.class) + .switchIfEmpty( + Mono.error(new ServerWebInputException("Request body must not be empty")) + ) + .doOnNext(requestBody -> { + if (!ValidationUtils.validateName(requestBody.getUsername())) { + throw new UnsatisfiedAttributeValueException( + "The username does not meet the specifications", + "problemDetail.user.username.unsatisfied", null); + } + if (StringUtils.isBlank(requestBody.getPassword())) { + throw new UnsatisfiedAttributeValueException( + "The password does not meet the specifications", + "problemDetail.user.password.unsatisfied", null); + } + }) + .flatMap(requestBody -> initializationStateSupplier.userInitialized() + .flatMap(result -> { + if (result) { + return Mono.error(new ResponseStatusException(HttpStatus.CONFLICT, + "System has been initialized")); + } + return initializeSystem(requestBody); + }) + ) + .then(ServerResponse.created(URI.create("/console")).build()); + } + + private Mono initializeSystem(SystemInitializationRequest requestBody) { + Mono initializeAdminUser = superAdminInitializer.initialize( + SuperAdminInitializer.InitializationParam.builder() + .username(requestBody.getUsername()) + .password(requestBody.getPassword()) + .email(requestBody.getEmail()) + .build()); + + Mono siteSetting = + Mono.defer(() -> client.get(ConfigMap.class, SystemSetting.SYSTEM_CONFIG) + .flatMap(config -> { + Map data = config.getData(); + if (data == null) { + data = new LinkedHashMap<>(); + config.setData(data); + } + String basic = data.getOrDefault(SystemSetting.Basic.GROUP, "{}"); + SystemSetting.Basic basicSetting = + JsonUtils.jsonToObject(basic, SystemSetting.Basic.class); + basicSetting.setTitle(requestBody.getSiteTitle()); + data.put(SystemSetting.Basic.GROUP, JsonUtils.objectToJson(basicSetting)); + return client.update(config); + })) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(t -> t instanceof OptimisticLockingFailureException) + ) + .then(); + return Mono.when(initializeAdminUser, siteSetting); + } + + @Data + public static class SystemInitializationRequest { + + @Schema(requiredMode = REQUIRED, minLength = 1) + private String username; + + @Schema(requiredMode = REQUIRED, minLength = 3) + private String password; + + private String email; + + private String siteTitle; + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/TagEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/TagEndpoint.java new file mode 100644 index 0000000..47a90b7 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/TagEndpoint.java @@ -0,0 +1,139 @@ +package run.halo.app.core.extension.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static run.halo.app.extension.index.query.QueryFactory.all; +import static run.halo.app.extension.router.QueryParamBuildUtil.sortParameter; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToListOptions; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.Optional; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.data.domain.Sort; +import org.springframework.stereotype.Component; +import org.springframework.util.StringUtils; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.IListRequest; + +/** + * post tag endpoint. + * + * @author LIlGG + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class TagEndpoint implements CustomEndpoint { + + private final ReactiveExtensionClient client; + + @Override + public RouterFunction endpoint() { + var tag = "TagV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("tags", this::listTag, builder -> { + builder.operationId("ListPostTags") + .description("List Post Tags.") + .tag(tag) + .response( + responseBuilder() + .implementation(ListResult.generateGenericClass(Tag.class)) + ); + TagQuery.buildParameters(builder); + } + ) + .build(); + } + + Mono listTag(ServerRequest request) { + var tagQuery = new TagQuery(request); + return client.listBy(Tag.class, tagQuery.toListOptions(), + PageRequestImpl.of(tagQuery.getPage(), tagQuery.getSize(), tagQuery.getSort()) + ) + .flatMap(tags -> ServerResponse.ok().bodyValue(tags)); + } + + public interface ITagQuery extends IListRequest { + + @Schema(description = "Keyword for searching.") + Optional getKeyword(); + + @ArraySchema(uniqueItems = true, + arraySchema = @Schema(name = "sort", + description = "Sort property and direction of the list result. Supported fields: " + + "creationTimestamp, name"), + schema = @Schema(description = "like field,asc or field,desc", + implementation = String.class, + example = "creationTimestamp,desc")) + Sort getSort(); + } + + public static class TagQuery extends IListRequest.QueryListRequest + implements ITagQuery { + + private final ServerWebExchange exchange; + + public TagQuery(ServerRequest request) { + super(request.queryParams()); + this.exchange = request.exchange(); + } + + @Override + public Optional getKeyword() { + return Optional.ofNullable(queryParams.getFirst("keyword")) + .filter(StringUtils::hasText); + } + + @Override + public Sort getSort() { + var sort = SortResolver.defaultInstance.resolve(exchange); + sort = sort.and(Sort.by( + Sort.Order.desc("metadata.creationTimestamp"), + Sort.Order.asc("metadata.name") + )); + return sort; + } + + public ListOptions toListOptions() { + final var listOptions = + labelAndFieldSelectorToListOptions(getLabelSelector(), getFieldSelector()); + + var fieldQuery = all(); + if (getKeyword().isPresent()) { + fieldQuery = QueryFactory.and(fieldQuery, QueryFactory.or( + QueryFactory.contains("spec.displayName", getKeyword().get()), + QueryFactory.contains("spec.slug", getKeyword().get()) + )); + } + + listOptions.setFieldSelector(listOptions.getFieldSelector().andQuery(fieldQuery)); + return listOptions; + } + + public static void buildParameters(Builder builder) { + IListRequest.buildParameters(builder); + builder.parameter(sortParameter()) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("keyword") + .description("Post tags filtered by keyword.") + .implementation(String.class) + .required(false)); + } + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/TrackerEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/TrackerEndpoint.java new file mode 100644 index 0000000..8ada772 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/TrackerEndpoint.java @@ -0,0 +1,138 @@ +package run.halo.app.core.extension.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.core.fn.builders.schema.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.event.post.DownvotedEvent; +import run.halo.app.event.post.UpvotedEvent; +import run.halo.app.event.post.VisitedEvent; +import run.halo.app.extension.GroupVersion; + +/** + * Metrics counter endpoint. + * + * @author guqing + * @since 2.0.0 + */ +@AllArgsConstructor +@Component +public class TrackerEndpoint implements CustomEndpoint { + + private final ApplicationEventPublisher eventPublisher; + + @Override + public RouterFunction endpoint() { + var tag = "MetricsV1alpha1Public"; + return SpringdocRouteBuilder.route() + .POST("trackers/counter", this::increaseVisit, + builder -> builder.operationId("count") + .description("Count an extension resource visits.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(CounterRequest.class)) + )) + .response(responseBuilder() + .implementation(Void.class)) + ) + .POST("trackers/upvote", this::upvote, + builder -> builder.operationId("upvote") + .description("Upvote an extension resource.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(VoteRequest.class)) + )) + .response(responseBuilder() + .implementation(Void.class)) + ) + .POST("trackers/downvote", this::downvote, + builder -> builder.operationId("downvote") + .description("Downvote an extension resource.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(VoteRequest.class)) + )) + .response(responseBuilder() + .implementation(Void.class)) + ) + .build(); + } + + private Mono increaseVisit(ServerRequest request) { + return request.bodyToMono(CounterRequest.class) + .switchIfEmpty( + Mono.error(new IllegalArgumentException("Counter request body must not be empty"))) + .doOnNext(counterRequest -> { + eventPublisher.publishEvent(new VisitedEvent(this, counterRequest.group(), + counterRequest.name(), counterRequest.plural())); + }) + .then(ServerResponse.ok().build()); + } + + private Mono upvote(ServerRequest request) { + return request.bodyToMono(VoteRequest.class) + .switchIfEmpty( + Mono.error(new IllegalArgumentException("Upvote request body must not be empty"))) + .doOnNext(voteRequest -> { + eventPublisher.publishEvent(new UpvotedEvent(this, voteRequest.group(), + voteRequest.name(), voteRequest.plural())); + }) + .then(ServerResponse.ok().build()); + } + + private Mono downvote(ServerRequest request) { + return request.bodyToMono(VoteRequest.class) + .switchIfEmpty( + Mono.error(new IllegalArgumentException("Downvote request body must not be empty"))) + .doOnNext(voteRequest -> { + eventPublisher.publishEvent(new DownvotedEvent(this, voteRequest.group(), + voteRequest.name(), voteRequest.plural())); + }) + .then(ServerResponse.ok().build()); + } + + public record VoteRequest(String group, String plural, String name) { + } + + public record CounterRequest(String group, String plural, String name, String hostname, + String screen, String language, String referrer) { + /** + * Construct counter request. + * group and session uid can be empty. + */ + public CounterRequest { + Assert.notNull(plural, "The plural must not be null."); + Assert.notNull(name, "The name must not be null."); + group = StringUtils.defaultString(group); + } + } + + @Override + public GroupVersion groupVersion() { + return new GroupVersion("api.halo.run", "v1alpha1"); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/endpoint/UserEndpoint.java b/application/src/main/java/run/halo/app/core/extension/endpoint/UserEndpoint.java new file mode 100644 index 0000000..932a392 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/endpoint/UserEndpoint.java @@ -0,0 +1,812 @@ +package run.halo.app.core.extension.endpoint; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static org.apache.commons.lang3.StringUtils.defaultIfBlank; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; +import static org.springframework.web.reactive.function.server.RequestPredicates.contentType; +import static run.halo.app.extension.ListResult.generateGenericClass; +import static run.halo.app.extension.index.query.QueryFactory.contains; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.in; +import static run.halo.app.extension.index.query.QueryFactory.or; +import static run.halo.app.extension.router.QueryParamBuildUtil.sortParameter; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToListOptions; +import static run.halo.app.security.authorization.AuthorityUtils.authoritiesToRoles; + +import com.fasterxml.jackson.core.type.TypeReference; +import com.google.common.io.Files; +import io.github.resilience4j.ratelimiter.RateLimiterRegistry; +import io.github.resilience4j.ratelimiter.RequestNotPermitted; +import io.github.resilience4j.reactor.ratelimiter.operator.RateLimiterOperator; +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.security.Principal; +import java.time.Duration; +import java.util.Collection; +import java.util.HashMap; +import java.util.HashSet; +import java.util.LinkedHashSet; +import java.util.LinkedList; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import java.util.Optional; +import java.util.Set; +import java.util.UUID; +import java.util.concurrent.atomic.AtomicInteger; +import java.util.stream.Collectors; +import lombok.Data; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.data.domain.Sort; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import org.springframework.http.codec.multipart.Part; +import org.springframework.lang.NonNull; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.util.CollectionUtils; +import org.springframework.util.MultiValueMap; +import org.springframework.util.unit.DataSize; +import org.springframework.web.reactive.function.BodyExtractors; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.function.Tuples; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.Role; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.service.AttachmentService; +import run.halo.app.core.extension.service.EmailVerificationService; +import run.halo.app.core.extension.service.RoleService; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.IListRequest; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.ValidationUtils; +import run.halo.app.infra.exception.RateLimitExceededException; +import run.halo.app.infra.exception.UnsatisfiedAttributeValueException; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.security.authentication.twofactor.TwoFactorAuthentication; + +@Component +@RequiredArgsConstructor +public class UserEndpoint implements CustomEndpoint { + + private static final String SELF_USER = "-"; + private static final String USER_AVATAR_GROUP_NAME = "user-avatar-group"; + private static final String DEFAULT_USER_AVATAR_ATTACHMENT_POLICY_NAME = "default-policy"; + private static final DataSize MAX_AVATAR_FILE_SIZE = DataSize.ofMegabytes(2L); + private final ReactiveExtensionClient client; + private final UserService userService; + private final RoleService roleService; + private final AttachmentService attachmentService; + private final EmailVerificationService emailVerificationService; + private final RateLimiterRegistry rateLimiterRegistry; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + @Override + public RouterFunction endpoint() { + var tag = "UserV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("/users/-", this::me, builder -> builder.operationId("GetCurrentUserDetail") + .description("Get current user detail") + .tag(tag) + .response(responseBuilder().implementation(DetailedUser.class))) + .GET("/users/{name}", this::getUserByName, + builder -> builder.operationId("GetUserDetail") + .description("Get user detail by name") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("User name") + .required(true) + ) + .response(responseBuilder().implementation(DetailedUser.class))) + .PUT("/users/-", this::updateProfile, + builder -> builder.operationId("UpdateCurrentUser") + .description("Update current user profile, but password.") + .tag(tag) + .requestBody(requestBodyBuilder().required(true).implementation(User.class)) + .response(responseBuilder().implementation(User.class))) + .POST("/users/{name}/permissions", this::grantPermission, + builder -> builder.operationId("GrantPermission") + .description("Grant permissions to user") + .tag(tag) + .parameter(parameterBuilder().in(ParameterIn.PATH).name("name") + .description("User name") + .required(true)) + .requestBody(requestBodyBuilder() + .required(true) + .implementation(GrantRequest.class)) + .response(responseBuilder().implementation(User.class))) + .POST("/users", this::createUser, + builder -> builder.operationId("CreateUser") + .description("Creates a new user.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .implementation(CreateUserRequest.class)) + .response(responseBuilder().implementation(User.class))) + .GET("/users/{name}/permissions", this::getUserPermission, + builder -> builder.operationId("GetPermissions") + .description("Get permissions of user") + .tag(tag) + .parameter(parameterBuilder().in(ParameterIn.PATH).name("name") + .description("User name") + .required(true)) + .response(responseBuilder().implementation(UserPermission.class))) + .PUT("/users/-/password", this::changeOwnPassword, + builder -> builder.operationId("ChangeOwnPassword") + .description("Change own password of user.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .implementation(ChangeOwnPasswordRequest.class)) + .response(responseBuilder() + .implementation(User.class)) + ) + .PUT("/users/{name}/password", this::changeAnyonePasswordForAdmin, + builder -> builder.operationId("ChangeAnyonePassword") + .description("Change anyone password of user for admin.") + .tag(tag) + .parameter(parameterBuilder().in(ParameterIn.PATH).name("name") + .description( + "Name of user. If the name is equal to '-', it will change the " + + "password of current user.") + .required(true)) + .requestBody(requestBodyBuilder() + .required(true) + .implementation(ChangePasswordRequest.class)) + .response(responseBuilder() + .implementation(User.class)) + ) + .GET("users", this::list, builder -> { + builder.operationId("ListUsers") + .tag(tag) + .description("List users") + .response(responseBuilder() + .implementation(generateGenericClass(ListedUser.class))); + ListRequest.buildParameters(builder); + }) + .POST("users/{name}/avatar", contentType(MediaType.MULTIPART_FORM_DATA), + this::uploadUserAvatar, + builder -> builder + .operationId("UploadUserAvatar") + .description("upload user avatar") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("User name") + .required(true) + ) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.MULTIPART_FORM_DATA_VALUE) + .schema(schemaBuilder().implementation(IAvatarUploadRequest.class)) + )) + .response(responseBuilder().implementation(User.class)) + ) + .DELETE("users/{name}/avatar", this::deleteUserAvatar, builder -> builder + .tag(tag) + .operationId("DeleteUserAvatar") + .description("delete user avatar") + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("User name") + .required(true) + ) + .response(responseBuilder().implementation(User.class)) + .build()) + .POST("users/-/send-email-verification-code", + this::sendEmailVerificationCode, + builder -> builder + .tag(tag) + .operationId("SendEmailVerificationCode") + .requestBody(requestBodyBuilder() + .implementation(EmailVerifyRequest.class) + .required(true) + ) + .description("Send email verification code for user") + .response(responseBuilder().implementation(Void.class)) + .build() + ) + .POST("users/-/verify-email", this::verifyEmail, + builder -> builder + .tag(tag) + .operationId("VerifyEmail") + .description("Verify email for user by code.") + .requestBody(requestBodyBuilder() + .required(true) + .implementation(VerifyCodeRequest.class)) + .response(responseBuilder().implementation(Void.class)) + .build() + ) + .build(); + } + + private Mono verifyEmail(ServerRequest request) { + return request.bodyToMono(VerifyCodeRequest.class) + .switchIfEmpty(Mono.error( + () -> new ServerWebInputException("Request body is required.")) + ) + .flatMap(this::doVerifyCode) + .then(ServerResponse.ok().build()); + } + + private Mono doVerifyCode(VerifyCodeRequest verifyCodeRequest) { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Principal::getName) + .flatMap(username -> verifyPasswordAndCode(username, verifyCodeRequest)); + } + + private Mono verifyPasswordAndCode(String username, VerifyCodeRequest verifyCodeRequest) { + return userService.confirmPassword(username, verifyCodeRequest.password()) + .filter(Boolean::booleanValue) + .switchIfEmpty(Mono.error(new UnsatisfiedAttributeValueException( + "Password is incorrect.", "problemDetail.user.password.notMatch", null))) + .flatMap(verified -> verifyEmailCode(username, verifyCodeRequest.code())); + } + + private Mono verifyEmailCode(String username, String code) { + return Mono.just(username) + .transformDeferred(verificationEmailRateLimiter(username)) + .flatMap(name -> emailVerificationService.verify(username, code)) + .onErrorMap(RequestNotPermitted.class, RateLimitExceededException::new); + } + + public record EmailVerifyRequest(@Schema(requiredMode = REQUIRED) String email) { + } + + public record VerifyCodeRequest( + @Schema(requiredMode = REQUIRED) String password, + @Schema(requiredMode = REQUIRED, minLength = 1) String code) { + } + + private Mono sendEmailVerificationCode(ServerRequest request) { + return request.bodyToMono(EmailVerifyRequest.class) + .switchIfEmpty(Mono.error( + () -> new ServerWebInputException("Request body is required.")) + ) + .doOnNext(emailRequest -> { + if (!ValidationUtils.isValidEmail(emailRequest.email())) { + throw new ServerWebInputException("Invalid email address."); + } + }) + .flatMap(emailRequest -> { + var email = emailRequest.email(); + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Principal::getName) + .map(username -> Tuples.of(username, email)); + }) + .flatMap(tuple -> { + var username = tuple.getT1(); + var email = tuple.getT2(); + return Mono.just(username) + .transformDeferred(sendEmailVerificationCodeRateLimiter(username, email)) + .flatMap(u -> emailVerificationService.sendVerificationCode(username, email)) + .onErrorMap(RequestNotPermitted.class, RateLimitExceededException::new); + }) + .then(ServerResponse.ok().build()); + } + + RateLimiterOperator verificationEmailRateLimiter(String username) { + String rateLimiterKey = "verify-email-" + username; + var rateLimiter = + rateLimiterRegistry.rateLimiter(rateLimiterKey, "verify-email"); + return RateLimiterOperator.of(rateLimiter); + } + + RateLimiterOperator sendEmailVerificationCodeRateLimiter(String username, String email) { + String rateLimiterKey = "send-email-verification-code-" + username + ":" + email; + var rateLimiter = + rateLimiterRegistry.rateLimiter(rateLimiterKey, "send-email-verification-code"); + return RateLimiterOperator.of(rateLimiter); + } + + private Mono deleteUserAvatar(ServerRequest request) { + final var nameInPath = request.pathVariable("name"); + return getUserOrSelf(nameInPath) + .flatMap(user -> { + MetadataUtil.nullSafeAnnotations(user) + .remove(User.AVATAR_ATTACHMENT_NAME_ANNO); + user.getSpec().setAvatar(null); + return client.update(user); + }) + .flatMap(user -> ServerResponse.ok().bodyValue(user)); + } + + private Mono getUserOrSelf(String name) { + if (!SELF_USER.equals(name)) { + return client.get(User.class, name); + } + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Authentication::getName) + .flatMap(currentUserName -> client.get(User.class, currentUserName)); + } + + private Mono uploadUserAvatar(ServerRequest request) { + final var username = request.pathVariable("name"); + return request.body(BodyExtractors.toMultipartData()) + .map(AvatarUploadRequest::new) + .flatMap(this::uploadAvatar) + .flatMap(attachment -> getUserOrSelf(username) + .flatMap(user -> { + MetadataUtil.nullSafeAnnotations(user) + .put(User.AVATAR_ATTACHMENT_NAME_ANNO, + attachment.getMetadata().getName()); + return client.update(user); + }) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)) + ) + .flatMap(user -> ServerResponse.ok().bodyValue(user)); + } + + @Schema(types = "object") + public interface IAvatarUploadRequest { + @Schema(requiredMode = REQUIRED, description = "Avatar file") + FilePart getFile(); + } + + public record AvatarUploadRequest(MultiValueMap formData) { + public FilePart getFile() { + Part file = formData.getFirst("file"); + if (file == null) { + throw new ServerWebInputException("No file part found in the request"); + } + + if (!(file instanceof FilePart filePart)) { + throw new ServerWebInputException("Invalid part of file"); + } + + if (!filePart.filename().endsWith(".png")) { + throw new ServerWebInputException("Only support avatar in PNG format"); + } + return filePart; + } + } + + private Mono uploadAvatar(AvatarUploadRequest uploadRequest) { + return environmentFetcher.fetch(SystemSetting.User.GROUP, SystemSetting.User.class) + .switchIfEmpty( + Mono.error(new IllegalStateException("User setting is not configured")) + ) + .flatMap(userSetting -> Mono.defer( + () -> { + String avatarPolicy = userSetting.getAvatarPolicy(); + if (StringUtils.isBlank(avatarPolicy)) { + avatarPolicy = DEFAULT_USER_AVATAR_ATTACHMENT_POLICY_NAME; + } + FilePart filePart = uploadRequest.getFile(); + var ext = Files.getFileExtension(filePart.filename()); + return attachmentService.upload(avatarPolicy, + USER_AVATAR_GROUP_NAME, + UUID.randomUUID() + "." + ext, + maxSizeCheck(filePart.content()), + filePart.headers().getContentType() + ); + }) + ); + } + + private Flux maxSizeCheck(Flux content) { + var lenRef = new AtomicInteger(0); + return content.doOnNext(dataBuffer -> { + int len = lenRef.accumulateAndGet(dataBuffer.readableByteCount(), Integer::sum); + if (len > MAX_AVATAR_FILE_SIZE.toBytes()) { + throw new ServerWebInputException("The avatar file needs to be smaller than " + + MAX_AVATAR_FILE_SIZE.toMegabytes() + " MB."); + } + }); + } + + private Mono createUser(ServerRequest request) { + return request.bodyToMono(CreateUserRequest.class) + .doOnNext(createUserRequest -> { + if (StringUtils.isBlank(createUserRequest.name())) { + throw new ServerWebInputException("Name is required"); + } + if (StringUtils.isBlank(createUserRequest.email())) { + throw new ServerWebInputException("Email is required"); + } + }) + .flatMap(userRequest -> { + User newUser = CreateUserRequest.from(userRequest); + var encryptedPwd = userService.encryptPassword(userRequest.password()); + newUser.getSpec().setPassword(encryptedPwd); + return userService.createUser(newUser, userRequest.roles()); + }) + .flatMap(user -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(user) + ); + } + + private Mono getUserByName(ServerRequest request) { + final var name = request.pathVariable("name"); + return userService.getUser(name) + .flatMap(user -> roleService.getRolesByUsername(name) + .collectList() + .flatMap(roleNames -> roleService.list(new HashSet<>(roleNames), true) + .collectList() + .map(roles -> new DetailedUser(user, roles)) + ) + ) + .flatMap(detailedUser -> ServerResponse.ok().bodyValue(detailedUser)); + } + + record CreateUserRequest(@Schema(requiredMode = REQUIRED) String name, + @Schema(requiredMode = REQUIRED) String email, + String displayName, + String avatar, + String phone, + String password, + String bio, + Map annotations, + Set roles) { + + /** + *

Creates a new user from {@link CreateUserRequest}.

+ * Note: this method will not set password. + * + * @param userRequest user request + * @return user from request + */ + public static User from(CreateUserRequest userRequest) { + var user = new User(); + user.setMetadata(new Metadata()); + user.getMetadata().setName(userRequest.name()); + user.getMetadata().setAnnotations(new HashMap<>()); + Map annotations = + defaultIfNull(userRequest.annotations(), Map.of()); + user.getMetadata().getAnnotations().putAll(annotations); + + var spec = new User.UserSpec(); + user.setSpec(spec); + spec.setEmail(userRequest.email()); + spec.setDisplayName(defaultIfBlank(userRequest.displayName(), userRequest.name())); + spec.setAvatar(userRequest.avatar()); + spec.setPhone(userRequest.phone()); + spec.setBio(userRequest.bio()); + return user; + } + } + + private Mono updateProfile(ServerRequest request) { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Authentication::getName) + .flatMap(currentUserName -> client.get(User.class, currentUserName)) + .flatMap(currentUser -> request.bodyToMono(User.class) + .filter(user -> user.getMetadata() != null + && Objects.equals(user.getMetadata().getName(), + currentUser.getMetadata().getName()) + ) + .switchIfEmpty( + Mono.error(() -> new ServerWebInputException("Username didn't match."))) + .map(user -> { + Map oldAnnotations = + MetadataUtil.nullSafeAnnotations(currentUser); + Map newAnnotations = user.getMetadata().getAnnotations(); + if (!CollectionUtils.isEmpty(newAnnotations)) { + newAnnotations.put(User.LAST_AVATAR_ATTACHMENT_NAME_ANNO, + oldAnnotations.get(User.LAST_AVATAR_ATTACHMENT_NAME_ANNO)); + newAnnotations.put(User.AVATAR_ATTACHMENT_NAME_ANNO, + oldAnnotations.get(User.AVATAR_ATTACHMENT_NAME_ANNO)); + newAnnotations.put(User.EMAIL_TO_VERIFY, + oldAnnotations.get(User.EMAIL_TO_VERIFY)); + currentUser.getMetadata().setAnnotations(newAnnotations); + } + var spec = currentUser.getSpec(); + var newSpec = user.getSpec(); + spec.setBio(newSpec.getBio()); + spec.setDisplayName(newSpec.getDisplayName()); + spec.setTwoFactorAuthEnabled(newSpec.getTwoFactorAuthEnabled()); + spec.setPhone(newSpec.getPhone()); + return currentUser; + }) + ) + .flatMap(client::update) + .flatMap(updatedUser -> ServerResponse.ok().bodyValue(updatedUser)); + } + + Mono changeAnyonePasswordForAdmin(ServerRequest request) { + final var nameInPath = request.pathVariable("name"); + return ReactiveSecurityContextHolder.getContext() + .map(ctx -> SELF_USER.equals(nameInPath) ? ctx.getAuthentication().getName() + : nameInPath) + .flatMap(username -> request.bodyToMono(ChangePasswordRequest.class) + .switchIfEmpty(Mono.defer(() -> + Mono.error(new ServerWebInputException("Request body is empty")))) + .flatMap(changePasswordRequest -> { + var password = changePasswordRequest.password(); + // encode password + return userService.updateWithRawPassword(username, password); + })) + .flatMap(updatedUser -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(updatedUser)); + } + + Mono changeOwnPassword(ServerRequest request) { + return ReactiveSecurityContextHolder.getContext() + .map(ctx -> ctx.getAuthentication().getName()) + .flatMap(username -> request.bodyToMono(ChangeOwnPasswordRequest.class) + .switchIfEmpty(Mono.defer(() -> + Mono.error(new ServerWebInputException("Request body is empty")))) + .flatMap(changePasswordRequest -> { + var rawOldPassword = changePasswordRequest.oldPassword(); + return userService.confirmPassword(username, rawOldPassword) + .filter(Boolean::booleanValue) + .switchIfEmpty(Mono.error(new UnsatisfiedAttributeValueException( + "Old password is incorrect.", + "problemDetail.user.oldPassword.notMatch", + null)) + ) + .thenReturn(changePasswordRequest); + }) + .flatMap(changePasswordRequest -> { + var password = changePasswordRequest.password(); + // encode password + return userService.updateWithRawPassword(username, password); + })) + .flatMap(updatedUser -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(updatedUser)); + } + + record ChangeOwnPasswordRequest( + @Schema(description = "Old password.", requiredMode = REQUIRED) + String oldPassword, + @Schema(description = "New password.", requiredMode = REQUIRED, minLength = 6) + String password) { + } + + record ChangePasswordRequest( + @Schema(description = "New password.", requiredMode = REQUIRED, minLength = 6) + String password) { + } + + @NonNull + Mono me(ServerRequest request) { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .filter(auth -> !(auth instanceof TwoFactorAuthentication)) + .flatMap(auth -> userService.getUser(auth.getName()) + .flatMap(user -> { + var roleNames = authoritiesToRoles(auth.getAuthorities()); + return roleService.list(roleNames, true) + .collectList() + .map(roles -> new DetailedUser(user, roles)); + }) + ) + .flatMap(detailedUser -> ServerResponse.ok().bodyValue(detailedUser)); + } + + record DetailedUser(@Schema(requiredMode = REQUIRED) User user, + @Schema(requiredMode = REQUIRED) List roles) { + + } + + @NonNull + Mono grantPermission(ServerRequest request) { + var username = request.pathVariable("name"); + return request.bodyToMono(GrantRequest.class) + .switchIfEmpty( + Mono.error(() -> new ServerWebInputException("Request body is empty"))) + .flatMap(grantRequest -> userService.grantRoles(username, grantRequest.roles()) + .then(ServerResponse.ok().build())); + } + + record GrantRequest(Set roles) { + } + + @NonNull + private Mono getUserPermission(ServerRequest request) { + var username = request.pathVariable("name"); + return Mono.defer(() -> { + if (SELF_USER.equals(username)) { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(auth -> authoritiesToRoles(auth.getAuthorities())); + } + return roleService.getRolesByUsername(username) + .collect(Collectors.toCollection(LinkedHashSet::new)); + }).flatMap(roleNames -> { + var up = new UserPermission(); + var setRoles = roleService.list(roleNames, true) + .distinct() + .collectSortedList() + .doOnNext(up::setRoles); + var setPerms = roleService.listPermissions(roleNames) + .distinct() + .collectSortedList() + .doOnNext(permissions -> { + up.setPermissions(permissions); + up.setUiPermissions(uiPermissions(permissions)); + }); + return Mono.when(setRoles, setPerms).thenReturn(up); + }).flatMap(userPermission -> ServerResponse.ok().bodyValue(userPermission)); + } + + private List uiPermissions(Collection roles) { + if (CollectionUtils.isEmpty(roles)) { + return List.of(); + } + var uiPerms = new LinkedList(); + roles.forEach(role -> Optional.ofNullable(role.getMetadata().getAnnotations()) + .map(annotations -> annotations.get(Role.UI_PERMISSIONS_ANNO)) + .filter(StringUtils::isNotBlank) + .map(json -> JsonUtils.jsonToObject(json, new TypeReference>() { + })) + .ifPresent(uiPerms::addAll) + ); + return uiPerms.stream().distinct().sorted().toList(); + } + + @Data + public static class UserPermission { + @Schema(requiredMode = REQUIRED) + private List roles; + @Schema(requiredMode = REQUIRED) + private List permissions; + @Schema(requiredMode = REQUIRED) + private List uiPermissions; + + } + + public static class ListRequest extends IListRequest.QueryListRequest { + + private final ServerWebExchange exchange; + + public ListRequest(ServerRequest request) { + super(request.queryParams()); + this.exchange = request.exchange(); + } + + @Schema(name = "keyword") + public String getKeyword() { + return queryParams.getFirst("keyword"); + } + + @Schema(name = "role") + public String getRole() { + return queryParams.getFirst("role"); + } + + @ArraySchema(uniqueItems = true, + arraySchema = @Schema(name = "sort", + description = "Sort property and direction of the list result. Supported fields: " + + "creationTimestamp"), + schema = @Schema(description = "like field,asc or field,desc", + implementation = String.class, + example = "creationTimestamp,desc")) + public Sort getSort() { + var sort = SortResolver.defaultInstance.resolve(exchange); + sort = sort.and(Sort.by("metadata.creationTimestamp", "metadata.name").descending()); + return sort; + } + + /** + * Converts query parameters to list options. + */ + public ListOptions toListOptions() { + var defaultListOptions = + labelAndFieldSelectorToListOptions(getLabelSelector(), getFieldSelector()); + + var builder = ListOptions.builder(defaultListOptions); + + Optional.ofNullable(getKeyword()) + .filter(StringUtils::isNotBlank) + .ifPresent(keyword -> builder.andQuery(or( + contains("spec.displayName", keyword), + equal("metadata.name", keyword) + ))); + + Optional.ofNullable(getRole()) + .filter(StringUtils::isNotBlank) + .ifPresent(role -> builder.andQuery(in(User.USER_RELATED_ROLES_INDEX, role))); + + return builder.build(); + } + + public static void buildParameters(Builder builder) { + IListRequest.buildParameters(builder); + builder.parameter(sortParameter()) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("keyword") + .description("Keyword to search") + .implementation(String.class) + .required(false)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("role") + .description("Role name") + .implementation(String.class) + .required(false)); + } + + } + + record ListedUser(@Schema(requiredMode = REQUIRED) User user, + @Schema(requiredMode = REQUIRED) List roles) { + } + + Mono list(ServerRequest request) { + return Mono.just(request) + .map(UserEndpoint.ListRequest::new) + .flatMap(listRequest -> client.listBy(User.class, listRequest.toListOptions(), + PageRequestImpl.of( + listRequest.getPage(), listRequest.getSize(), + listRequest.getSort() + ) + )) + .flatMap(this::toListedUser) + .flatMap(listResult -> ServerResponse.ok().bodyValue(listResult)); + } + + private Mono> toListedUser(ListResult listResult) { + var usernames = listResult.getItems().stream() + .map(user -> user.getMetadata().getName()) + .collect(Collectors.toList()); + return roleService.getRolesByUsernames(usernames) + .flatMap(usernameRolesMap -> { + var allRoleNames = new HashSet(); + usernameRolesMap.values().forEach(allRoleNames::addAll); + return roleService.list(allRoleNames) + .collectMap(role -> role.getMetadata().getName()) + .map(roleMap -> { + var listedUsers = listResult.getItems().stream() + .map(user -> { + var username = user.getMetadata().getName(); + var roles = Optional.ofNullable(usernameRolesMap.get(username)) + .map(roleNames -> roleNames.stream().map(roleMap::get).toList()) + .orElseGet(List::of); + return new ListedUser(user, roles); + }) + .toList(); + return convertFrom(listResult, listedUsers); + }); + }); + } + + ListResult convertFrom(ListResult listResult, List items) { + Assert.notNull(listResult, "listResult must not be null"); + Assert.notNull(items, "items must not be null"); + return new ListResult<>(listResult.getPage(), listResult.getSize(), + listResult.getTotal(), items); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/AnnotationSettingReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/AnnotationSettingReconciler.java new file mode 100644 index 0000000..8b6fce8 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/AnnotationSettingReconciler.java @@ -0,0 +1,54 @@ +package run.halo.app.core.extension.reconciler; + +import java.util.Map; +import lombok.AllArgsConstructor; +import org.springframework.stereotype.Component; +import org.thymeleaf.util.StringUtils; +import run.halo.app.core.extension.AnnotationSetting; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.GroupKind; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; + +/** + * Reconciler for {@link AnnotationSetting}. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class AnnotationSettingReconciler implements Reconciler { + + private final ExtensionClient client; + + @Override + public Result reconcile(Request request) { + populateDefaultLabels(request.name()); + return new Result(false, null); + } + + private void populateDefaultLabels(String name) { + client.fetch(AnnotationSetting.class, name).ifPresent(annotationSetting -> { + Map labels = MetadataUtil.nullSafeLabels(annotationSetting); + String oldTargetRef = labels.get(AnnotationSetting.TARGET_REF_LABEL); + + GroupKind targetRef = annotationSetting.getSpec().getTargetRef(); + String targetRefLabel = targetRef.group() + "/" + targetRef.kind(); + labels.put(AnnotationSetting.TARGET_REF_LABEL, targetRefLabel); + + if (!StringUtils.equals(oldTargetRef, targetRefLabel)) { + client.update(annotationSetting); + } + }); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new AnnotationSetting()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/AuthProviderReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/AuthProviderReconciler.java new file mode 100644 index 0000000..5176f8a --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/AuthProviderReconciler.java @@ -0,0 +1,50 @@ +package run.halo.app.core.extension.reconciler; + +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.AuthProvider; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.security.AuthProviderService; + +/** + * Reconciler for {@link AuthProvider}. + * + * @author guqing + * @since 2.4.0 + */ +@Component +@RequiredArgsConstructor +public class AuthProviderReconciler implements Reconciler { + private final ExtensionClient client; + private final AuthProviderService authProviderService; + + @Override + public Result reconcile(Request request) { + client.fetch(AuthProvider.class, request.name()) + .ifPresent(this::handlePrivileged); + return Result.doNotRetry(); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new AuthProvider()) + .build(); + } + + private void handlePrivileged(AuthProvider authProvider) { + if (privileged(authProvider)) { + authProviderService.enable(authProvider.getMetadata().getName()).block(); + } + } + + private boolean privileged(AuthProvider authProvider) { + return BooleanUtils.TRUE.equals(MetadataUtil.nullSafeLabels(authProvider) + .get(AuthProvider.PRIVILEGED_LABEL)); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/CategoryReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/CategoryReconciler.java new file mode 100644 index 0000000..d4abf48 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/CategoryReconciler.java @@ -0,0 +1,121 @@ +package run.halo.app.core.extension.reconciler; + +import static run.halo.app.extension.ExtensionUtil.addFinalizers; +import static run.halo.app.extension.ExtensionUtil.removeFinalizers; +import static run.halo.app.extension.MetadataUtil.nullSafeAnnotations; + +import java.util.Map; +import java.util.Set; +import lombok.AllArgsConstructor; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.stereotype.Component; +import org.springframework.util.CollectionUtils; +import run.halo.app.content.CategoryService; +import run.halo.app.content.permalinks.CategoryPermalinkPolicy; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Constant; +import run.halo.app.event.post.CategoryHiddenStateChangeEvent; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; + +/** + * Reconciler for {@link Category}. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class CategoryReconciler implements Reconciler { + static final String FINALIZER_NAME = "category-protection"; + private final ExtensionClient client; + private final CategoryPermalinkPolicy categoryPermalinkPolicy; + private final CategoryService categoryService; + private final ApplicationEventPublisher eventPublisher; + + @Override + public Result reconcile(Request request) { + client.fetch(Category.class, request.name()) + .ifPresent(category -> { + if (ExtensionUtil.isDeleted(category)) { + if (removeFinalizers(category.getMetadata(), Set.of(FINALIZER_NAME))) { + refreshHiddenState(category, false); + client.update(category); + } + return; + } + addFinalizers(category.getMetadata(), Set.of(FINALIZER_NAME)); + + populatePermalinkPattern(category); + populatePermalink(category); + checkHiddenState(category); + + client.update(category); + }); + return Result.doNotRetry(); + } + + private void checkHiddenState(Category category) { + final boolean hidden = categoryService.isCategoryHidden(category.getMetadata().getName()) + .blockOptional() + .orElse(false); + refreshHiddenState(category, hidden); + } + + /** + * TODO move this logic to before-create/update hook in the future see {@code gh-4343}. + */ + private void refreshHiddenState(Category category, boolean hidden) { + category.getSpec().setHideFromList(hidden); + if (isHiddenStateChanged(category)) { + publishHiddenStateChangeEvent(category); + } + var children = category.getSpec().getChildren(); + if (CollectionUtils.isEmpty(children)) { + return; + } + for (String childName : children) { + client.fetch(Category.class, childName) + .ifPresent(child -> { + child.getSpec().setHideFromList(hidden); + if (isHiddenStateChanged(child)) { + publishHiddenStateChangeEvent(child); + } + client.update(child); + }); + } + } + + private void publishHiddenStateChangeEvent(Category category) { + var hidden = category.getSpec().isHideFromList(); + nullSafeAnnotations(category).put(Category.LAST_HIDDEN_STATE_ANNO, String.valueOf(hidden)); + eventPublisher.publishEvent(new CategoryHiddenStateChangeEvent(this, + category.getMetadata().getName(), hidden)); + } + + boolean isHiddenStateChanged(Category category) { + var lastHiddenState = nullSafeAnnotations(category).get(Category.LAST_HIDDEN_STATE_ANNO); + return !String.valueOf(category.getSpec().isHideFromList()).equals(lastHiddenState); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Category()) + .build(); + } + + void populatePermalinkPattern(Category category) { + Map annotations = nullSafeAnnotations(category); + String newPattern = categoryPermalinkPolicy.pattern(); + annotations.put(Constant.PERMALINK_PATTERN_ANNO, newPattern); + } + + void populatePermalink(Category category) { + category.getStatusOrDefault() + .setPermalink(categoryPermalinkPolicy.permalink(category)); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/CommentReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/CommentReconciler.java new file mode 100644 index 0000000..4e9ce52 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/CommentReconciler.java @@ -0,0 +1,193 @@ +package run.halo.app.core.extension.reconciler; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static run.halo.app.extension.ExtensionUtil.addFinalizers; +import static run.halo.app.extension.ExtensionUtil.isDeleted; +import static run.halo.app.extension.ExtensionUtil.removeFinalizers; +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import java.time.Instant; +import java.util.Map; +import java.util.Set; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import run.halo.app.content.comment.ReplyNotificationSubscriptionHelper; +import run.halo.app.content.comment.ReplyService; +import run.halo.app.core.extension.Counter; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.content.Constant; +import run.halo.app.event.post.CommentCreatedEvent; +import run.halo.app.event.post.CommentUnreadReplyCountChangedEvent; +import run.halo.app.extension.DefaultExtensionMatcher; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.Ref; +import run.halo.app.extension.SchemeManager; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.metrics.MeterUtils; + +/** + * Reconciler for {@link Comment}. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class CommentReconciler implements Reconciler { + public static final String FINALIZER_NAME = "comment-protection"; + private final ExtensionClient client; + private final SchemeManager schemeManager; + private final ReplyService replyService; + private final ApplicationEventPublisher eventPublisher; + + private final ReplyNotificationSubscriptionHelper replyNotificationSubscriptionHelper; + + @Override + public Result reconcile(Request request) { + client.fetch(Comment.class, request.name()) + .ifPresent(comment -> { + if (isDeleted(comment)) { + if (removeFinalizers(comment.getMetadata(), Set.of(FINALIZER_NAME))) { + cleanUpResources(comment); + client.update(comment); + } + return; + } + if (addFinalizers(comment.getMetadata(), Set.of(FINALIZER_NAME))) { + replyNotificationSubscriptionHelper.subscribeNewReplyReasonForComment(comment); + client.update(comment); + eventPublisher.publishEvent(new CommentCreatedEvent(this, comment)); + } + + compatibleCreationTime(comment); + Comment.CommentStatus status = comment.getStatusOrDefault(); + status.setHasNewReply(defaultIfNull(status.getUnreadReplyCount(), 0) > 0); + + updateUnReplyCountIfNecessary(comment); + updateSameSubjectRefCommentCounter(comment); + + // version + 1 is required to truly equal version + // as a version will be incremented after the update + comment.getStatusOrDefault() + .setObservedVersion(comment.getMetadata().getVersion() + 1); + + client.update(comment); + }); + return new Result(false, null); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + var extension = new Comment(); + return builder + .extension(extension) + .onAddMatcher(DefaultExtensionMatcher.builder(client, extension.groupVersionKind()) + .fieldSelector(FieldSelector.of( + equal(Comment.REQUIRE_SYNC_ON_STARTUP_INDEX_NAME, BooleanUtils.TRUE)) + ) + .build() + ) + .build(); + } + + /** + * If the comment creation time is null, set it to the approved time or the current time. + * TODO remove this method in the future and fill in attributes in hook mode instead. + */ + void compatibleCreationTime(Comment comment) { + var creationTime = comment.getSpec().getCreationTime(); + if (creationTime == null) { + creationTime = defaultIfNull(comment.getSpec().getApprovedTime(), + comment.getMetadata().getCreationTimestamp()); + } + comment.getSpec().setCreationTime(creationTime); + } + + private void updateUnReplyCountIfNecessary(Comment comment) { + Instant lastReadTime = comment.getSpec().getLastReadTime(); + Map annotations = MetadataUtil.nullSafeAnnotations(comment); + String lastReadTimeAnno = annotations.get(Constant.LAST_READ_TIME_ANNO); + if (lastReadTime != null && lastReadTime.toString().equals(lastReadTimeAnno)) { + return; + } + // delegate to other handler though event + String commentName = comment.getMetadata().getName(); + eventPublisher.publishEvent(new CommentUnreadReplyCountChangedEvent(this, commentName)); + // handled flag + if (lastReadTime != null) { + annotations.put(Constant.LAST_READ_TIME_ANNO, lastReadTime.toString()); + } else { + annotations.remove(Constant.LAST_READ_TIME_ANNO); + } + } + + private void updateSameSubjectRefCommentCounter(Comment comment) { + var commentSubjectRef = comment.getSpec().getSubjectRef(); + GroupVersionKind groupVersionKind = groupVersionKind(commentSubjectRef); + + var totalCount = countTotalComments(commentSubjectRef); + var approvedTotalCount = countApprovedComments(commentSubjectRef); + schemeManager.fetch(groupVersionKind).ifPresent(scheme -> { + String counterName = MeterUtils.nameOf(commentSubjectRef.getGroup(), scheme.plural(), + commentSubjectRef.getName()); + client.fetch(Counter.class, counterName).ifPresentOrElse(counter -> { + counter.setTotalComment(totalCount); + counter.setApprovedComment(approvedTotalCount); + client.update(counter); + }, () -> { + Counter counter = Counter.emptyCounter(counterName); + counter.setTotalComment(totalCount); + counter.setApprovedComment(approvedTotalCount); + client.create(counter); + }); + }); + } + + int countTotalComments(Ref commentSubjectRef) { + var totalListOptions = new ListOptions(); + totalListOptions.setFieldSelector(FieldSelector.of(getBaseQuery(commentSubjectRef))); + return (int) client.listBy(Comment.class, totalListOptions, PageRequestImpl.ofSize(1)) + .getTotal(); + } + + int countApprovedComments(Ref commentSubjectRef) { + var approvedListOptions = new ListOptions(); + approvedListOptions.setFieldSelector(FieldSelector.of(and( + getBaseQuery(commentSubjectRef), + equal("spec.approved", BooleanUtils.TRUE) + ))); + return (int) client.listBy(Comment.class, approvedListOptions, PageRequestImpl.ofSize(1)) + .getTotal(); + } + + private static Query getBaseQuery(Ref commentSubjectRef) { + return and(equal("spec.subjectRef", Comment.toSubjectRefKey(commentSubjectRef)), + isNull("metadata.deletionTimestamp")); + } + + private void cleanUpResources(Comment comment) { + // delete all replies under current comment + replyService.removeAllByComment(comment.getMetadata().getName()).block(); + + // decrement total comment count + updateSameSubjectRefCommentCounter(comment); + } + + @NonNull + private GroupVersionKind groupVersionKind(@NonNull Ref ref) { + return new GroupVersionKind(ref.getGroup(), ref.getVersion(), ref.getKind()); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/MenuItemReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/MenuItemReconciler.java new file mode 100644 index 0000000..9d27680 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/MenuItemReconciler.java @@ -0,0 +1,135 @@ +package run.halo.app.core.extension.reconciler; + +import java.time.Duration; +import java.util.Objects; +import lombok.extern.slf4j.Slf4j; +import org.springframework.stereotype.Component; +import org.springframework.util.StringUtils; +import run.halo.app.core.extension.MenuItem; +import run.halo.app.core.extension.MenuItem.MenuItemSpec; +import run.halo.app.core.extension.MenuItem.MenuItemStatus; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.Ref; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.Reconciler.Request; + +@Slf4j +@Component +public class MenuItemReconciler implements Reconciler { + + private final ExtensionClient client; + + public MenuItemReconciler(ExtensionClient client) { + this.client = client; + } + + @Override + public Result reconcile(Request request) { + return client.fetch(MenuItem.class, request.name()) + .map(menuItem -> { + final var spec = menuItem.getSpec(); + + if (menuItem.getStatus() == null) { + menuItem.setStatus(new MenuItemStatus()); + } + var status = menuItem.getStatus(); + var targetRef = spec.getTargetRef(); + if (targetRef != null) { + if (Ref.groupKindEquals(targetRef, Category.GVK)) { + return handleCategoryRef(request.name(), status, targetRef); + } + if (Ref.groupKindEquals(targetRef, Tag.GVK)) { + return handleTagRef(request.name(), status, targetRef); + } + if (Ref.groupKindEquals(targetRef, SinglePage.GVK)) { + return handleSinglePageSpec(request.name(), status, targetRef); + } + if (Ref.groupKindEquals(targetRef, Post.GVK)) { + return handlePostRef(request.name(), status, targetRef); + } + // unsupported ref + log.error("Unsupported MenuItem targetRef " + targetRef); + return Result.doNotRetry(); + } else { + return handleMenuSpec(request.name(), status, spec); + } + }).orElseGet(() -> new Result(false, null)); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new MenuItem()) + .build(); + } + + private Result handleCategoryRef(String menuItemName, MenuItemStatus status, Ref categoryRef) { + client.fetch(Category.class, categoryRef.getName()) + .filter(category -> category.getStatus() != null) + .filter(category -> StringUtils.hasText(category.getStatus().getPermalink())) + .ifPresent(category -> { + status.setHref(category.getStatus().getPermalink()); + status.setDisplayName(category.getSpec().getDisplayName()); + updateStatus(menuItemName, status); + }); + return new Result(true, Duration.ofMinutes(1)); + } + + private Result handleTagRef(String menuItemName, MenuItemStatus status, Ref tagRef) { + client.fetch(Tag.class, tagRef.getName()).filter(tag -> tag.getStatus() != null) + .filter(tag -> StringUtils.hasText(tag.getStatus().getPermalink())).ifPresent(tag -> { + status.setHref(tag.getStatus().getPermalink()); + status.setDisplayName(tag.getSpec().getDisplayName()); + updateStatus(menuItemName, status); + }); + return new Result(true, Duration.ofMinutes(1)); + } + + private Result handlePostRef(String menuItemName, MenuItemStatus status, Ref postRef) { + client.fetch(Post.class, postRef.getName()).filter(post -> post.getStatus() != null) + .filter(post -> StringUtils.hasText(post.getStatus().getPermalink())) + .ifPresent(post -> { + status.setHref(post.getStatus().getPermalink()); + status.setDisplayName(post.getSpec().getTitle()); + updateStatus(menuItemName, status); + }); + return new Result(true, Duration.ofMinutes(1)); + } + + private Result handleSinglePageSpec(String menuItemName, MenuItemStatus status, Ref pageRef) { + client.fetch(SinglePage.class, pageRef.getName()) + .filter(page -> page.getStatus() != null) + .filter(page -> StringUtils.hasText(page.getStatus().getPermalink())) + .ifPresent(page -> { + status.setHref(page.getStatus().getPermalink()); + status.setDisplayName(page.getSpec().getTitle()); + updateStatus(menuItemName, status); + }); + return new Result(true, Duration.ofMinutes(1)); + } + + private Result handleMenuSpec(String menuItemName, MenuItemStatus status, MenuItemSpec spec) { + if (spec.getHref() != null && StringUtils.hasText(spec.getDisplayName())) { + status.setHref(spec.getHref()); + status.setDisplayName(spec.getDisplayName()); + updateStatus(menuItemName, status); + } + return new Result(false, null); + } + + private void updateStatus(String menuItemName, MenuItemStatus status) { + client.fetch(MenuItem.class, menuItemName) + .filter(menuItem -> !Objects.deepEquals(menuItem.getStatus(), status)) + .ifPresent(menuItem -> { + menuItem.setStatus(status); + client.update(menuItem); + }); + } + +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/PluginReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/PluginReconciler.java new file mode 100644 index 0000000..145c7df --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/PluginReconciler.java @@ -0,0 +1,846 @@ +package run.halo.app.core.extension.reconciler; + +import static run.halo.app.core.extension.Plugin.PluginStatus.nullSafeConditions; +import static run.halo.app.extension.ExtensionUtil.addFinalizers; +import static run.halo.app.extension.ExtensionUtil.removeFinalizers; +import static run.halo.app.extension.MetadataUtil.nullSafeAnnotations; +import static run.halo.app.plugin.PluginConst.PLUGIN_PATH; +import static run.halo.app.plugin.PluginConst.RELOAD_ANNO; +import static run.halo.app.plugin.PluginConst.REQUEST_TO_UNLOAD_LABEL; +import static run.halo.app.plugin.PluginExtensionLoaderUtils.isSetting; +import static run.halo.app.plugin.PluginExtensionLoaderUtils.lookupExtensions; +import static run.halo.app.plugin.PluginUtils.generateFileName; +import static run.halo.app.plugin.PluginUtils.isDevelopmentMode; + +import java.io.FileNotFoundException; +import java.io.IOException; +import java.net.MalformedURLException; +import java.net.URISyntaxException; +import java.net.URL; +import java.nio.file.Files; +import java.nio.file.Path; +import java.nio.file.Paths; +import java.time.Clock; +import java.time.Duration; +import java.util.ArrayList; +import java.util.HashMap; +import java.util.LinkedList; +import java.util.List; +import java.util.Objects; +import java.util.Set; +import java.util.function.Predicate; +import java.util.function.Supplier; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.pf4j.PluginDependency; +import org.pf4j.PluginState; +import org.pf4j.PluginWrapper; +import org.pf4j.RuntimeMode; +import org.springframework.core.io.DefaultResourceLoader; +import org.springframework.stereotype.Component; +import org.springframework.util.CollectionUtils; +import org.springframework.util.ResourceUtils; +import org.springframework.web.util.UriComponentsBuilder; +import run.halo.app.core.extension.Plugin; +import run.halo.app.core.extension.ReverseProxy; +import run.halo.app.core.extension.Setting; +import run.halo.app.core.extension.theme.SettingUtils; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.Unstructured; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.Reconciler.Request; +import run.halo.app.extension.controller.RequeueException; +import run.halo.app.infra.Condition; +import run.halo.app.infra.ConditionList; +import run.halo.app.infra.ConditionStatus; +import run.halo.app.infra.utils.PathUtils; +import run.halo.app.infra.utils.YamlUnstructuredLoader; +import run.halo.app.plugin.PluginConst; +import run.halo.app.plugin.PluginProperties; +import run.halo.app.plugin.SpringPluginManager; + +/** + * Plugin reconciler. + * + * @author guqing + * @author johnniang + * @since 2.0.0 + */ +@Slf4j +@Component +public class PluginReconciler implements Reconciler { + private static final String FINALIZER_NAME = "plugin-protection"; + + private static final Set UNUSED_ANNOTATIONS = + Set.of("plugin.halo.run/dependents-snapshot"); + + private final ExtensionClient client; + + private final SpringPluginManager pluginManager; + + private final PluginProperties pluginProperties; + + private Clock clock; + + public PluginReconciler(ExtensionClient client, SpringPluginManager pluginManager, + PluginProperties pluginProperties) { + this.client = client; + this.pluginManager = pluginManager; + this.pluginProperties = pluginProperties; + this.clock = Clock.systemUTC(); + } + + /** + * Only for testing. + * + * @param clock new clock. + */ + void setClock(Clock clock) { + this.clock = clock; + } + + @Override + public Result reconcile(Request request) { + return client.fetch(Plugin.class, request.name()) + .map(plugin -> { + if (ExtensionUtil.isDeleted(plugin)) { + if (!checkDependents(plugin)) { + client.update(plugin); + // Check dependents every 10 seconds + return Result.requeue(Duration.ofSeconds(10)); + } + // CleanUp resources and remove finalizer. + if (removeFinalizers(plugin.getMetadata(), Set.of(FINALIZER_NAME))) { + cleanupResources(plugin); + syncPluginState(plugin); + client.update(plugin); + } + return Result.doNotRetry(); + } + addFinalizers(plugin.getMetadata(), Set.of(FINALIZER_NAME)); + removeUnusedAnnotations(plugin); + + var status = plugin.getStatus(); + if (status == null) { + status = new Plugin.PluginStatus(); + plugin.setStatus(status); + } + // reset phase to pending + status.setPhase(Plugin.Phase.PENDING); + // init condition list if not exists + if (status.getConditions() == null) { + status.setConditions(new ConditionList()); + } + + var steps = new LinkedList>(); + steps.add(() -> resolveLoadLocation(plugin)); + steps.add(() -> loadOrReload(plugin)); + steps.add(() -> createOrUpdateSetting(plugin)); + steps.add(() -> createOrUpdateReverseProxy(plugin)); + steps.add(() -> resolveStaticResources(plugin)); + if (requestToEnable(plugin)) { + steps.add(() -> enablePlugin(plugin)); + } else { + steps.add(() -> disablePlugin(plugin)); + } + + Result result = null; + try { + for (var step : steps) { + result = step.get(); + if (result != null) { + break; + } + } + return result; + } catch (Throwable e) { + status.getConditions().addAndEvictFIFO(Condition.builder() + .type(ConditionType.READY) + .status(ConditionStatus.FALSE) + .reason(ConditionReason.SYSTEM_ERROR) + .message(e.getMessage()) + .lastTransitionTime(clock.instant()) + .build()); + status.setPhase(Plugin.Phase.UNKNOWN); + throw e; + } finally { + var pw = pluginManager.getPlugin(plugin.getMetadata().getName()); + if (pw != null) { + status.setLastProbeState(pw.getPluginState()); + } + client.update(plugin); + } + }) + .orElseGet(Result::doNotRetry); + } + + private void removeUnusedAnnotations(Plugin plugin) { + var annotations = plugin.getMetadata().getAnnotations(); + if (annotations != null) { + UNUSED_ANNOTATIONS.forEach(annotations::remove); + } + } + + private boolean checkDependents(Plugin plugin) { + var pluginId = plugin.getMetadata().getName(); + var dependents = pluginManager.getDependents(pluginId); + if (CollectionUtils.isEmpty(dependents)) { + return true; + } + var status = plugin.statusNonNull(); + var condition = Condition.builder() + .type(ConditionType.PROGRESSING) + .status(ConditionStatus.UNKNOWN) + .reason(ConditionReason.WAIT_FOR_DEPENDENTS_DELETED) + .message( + "The plugin has dependents %s, please delete them first." + .formatted(dependents.stream().map(PluginWrapper::getPluginId).toList()) + ) + .lastTransitionTime(clock.instant()) + .build(); + var conditions = nullSafeConditions(status); + removeConditionBy(conditions, ConditionType.INITIALIZED); + removeConditionBy(conditions, ConditionType.READY); + conditions.addAndEvictFIFO(condition); + status.setPhase(Plugin.Phase.UNKNOWN); + return false; + } + + private void syncPluginState(Plugin plugin) { + var pluginName = plugin.getMetadata().getName(); + var p = pluginManager.getPlugin(pluginName); + if (p != null) { + plugin.statusNonNull().setLastProbeState(p.getPluginState()); + } else { + plugin.statusNonNull().setLastProbeState(null); + } + } + + private static String requestToUnload(Plugin plugin) { + var labels = plugin.getMetadata().getLabels(); + if (labels == null) { + return null; + } + return labels.get(REQUEST_TO_UNLOAD_LABEL); + } + + private static boolean requestToReload(Plugin plugin) { + var annotations = plugin.getMetadata().getAnnotations(); + return annotations != null && annotations.get(RELOAD_ANNO) != null; + } + + private static void removeRequestToReload(Plugin plugin) { + var annotations = plugin.getMetadata().getAnnotations(); + if (annotations != null) { + annotations.remove(RELOAD_ANNO); + } + } + + private void cleanupResources(Plugin plugin) { + var pluginName = plugin.getMetadata().getName(); + var reverseProxyName = buildReverseProxyName(pluginName); + log.info("Deleting reverse proxy {} for plugin {}", reverseProxyName, pluginName); + client.fetch(ReverseProxy.class, reverseProxyName) + .ifPresent(reverseProxy -> { + client.delete(reverseProxy); + throw new RequeueException(Result.requeue(null), + String.format(""" + Waiting for reverse proxy %s to be deleted.""", reverseProxyName) + ); + }); + var settingName = plugin.getSpec().getSettingName(); + if (StringUtils.isNotBlank(settingName)) { + log.info("Deleting settings {} for plugin {}", settingName, pluginName); + client.fetch(Setting.class, settingName) + .ifPresent(setting -> { + client.delete(setting); + throw new RequeueException(Result.requeue(null), String.format(""" + Waiting for setting %s to be deleted.""", settingName)); + }); + } + if (pluginManager.getPlugin(pluginName) != null) { + log.info("Deleting plugin {} in plugin manager.", pluginName); + var deleted = pluginManager.deletePlugin(pluginName); + if (!deleted) { + log.warn("Failed to delete plugin {}", pluginName); + } + } + } + + private Result enablePlugin(Plugin plugin) { + // start the plugin + var pluginName = plugin.getMetadata().getName(); + log.info("Starting plugin {}", pluginName); + var status = plugin.getStatus(); + status.setPhase(Plugin.Phase.STARTING); + + // check if the parent plugin is started + var pw = pluginManager.getPlugin(pluginName); + var unstartedDependencies = pw.getDescriptor().getDependencies() + .stream() + .filter(pd -> { + if (pd.isOptional()) { + return false; + } + var parent = pluginManager.getPlugin(pd.getPluginId()); + return parent == null || !PluginState.STARTED.equals(parent.getPluginState()); + }) + .map(PluginDependency::getPluginId) + .toList(); + var conditions = status.getConditions(); + if (!CollectionUtils.isEmpty(unstartedDependencies)) { + removeConditionBy(conditions, ConditionType.READY); + conditions.addAndEvictFIFO(Condition.builder() + .type(ConditionType.PROGRESSING) + .status(ConditionStatus.UNKNOWN) + .reason(ConditionReason.WAIT_FOR_DEPENDENCIES_STARTED) + .message("Wait for parent plugins " + unstartedDependencies + " to be started") + .lastTransitionTime(clock.instant()) + .build()); + status.setPhase(Plugin.Phase.UNKNOWN); + return Result.requeue(Duration.ofSeconds(1)); + } + + try { + var pluginState = pluginManager.startPlugin(pluginName); + if (!PluginState.STARTED.equals(pluginState)) { + throw new IllegalStateException(""" + Failed to start plugin %s(%s).\ + """.formatted(pluginName, pluginState)); + } + } catch (Throwable e) { + conditions.addAndEvictFIFO(Condition.builder() + .type(ConditionType.READY) + .status(ConditionStatus.FALSE) + .reason(ConditionReason.START_ERROR) + .message(e.getMessage()) + .lastTransitionTime(clock.instant()) + .build()); + status.setPhase(Plugin.Phase.FAILED); + return Result.doNotRetry(); + } + + removeConditionBy(conditions, ConditionType.PROGRESSING); + status.setLastStartTime(clock.instant()); + conditions.addAndEvictFIFO(Condition.builder() + .type(ConditionType.READY) + .status(ConditionStatus.TRUE) + .reason(ConditionReason.STARTED) + .message("Started successfully") + .lastTransitionTime(clock.instant()) + .build()); + status.setPhase(Plugin.Phase.STARTED); + + log.info("Started plugin {}", pluginName); + return null; + } + + private Result disablePlugin(Plugin plugin) { + var pluginName = plugin.getMetadata().getName(); + var status = plugin.getStatus(); + if (pluginManager.getPlugin(pluginName) != null) { + // check if the plugin has children + var dependents = pluginManager.getDependents(pluginName) + .stream() + .filter(pw -> PluginState.STARTED.equals(pw.getPluginState())) + .map(PluginWrapper::getPluginId) + .toList(); + var conditions = status.getConditions(); + if (!CollectionUtils.isEmpty(dependents)) { + removeConditionBy(conditions, ConditionType.READY); + conditions.addAndEvictFIFO(Condition.builder() + .type(ConditionType.PROGRESSING) + .status(ConditionStatus.UNKNOWN) + .reason(ConditionReason.WAIT_FOR_DEPENDENTS_DISABLED) + .message("Wait for children plugins " + dependents + " to be disabled") + .lastTransitionTime(clock.instant()) + .build()); + status.setPhase(Plugin.Phase.DISABLING); + return Result.requeue(Duration.ofSeconds(1)); + } + try { + pluginManager.disablePlugin(pluginName); + } catch (Throwable e) { + conditions.addAndEvictFIFO(Condition.builder() + .type(ConditionType.READY) + .status(ConditionStatus.FALSE) + .reason(ConditionReason.DISABLE_ERROR) + .message(e.getMessage()) + .lastTransitionTime(clock.instant()) + .build()); + status.setPhase(Plugin.Phase.FAILED); + return Result.doNotRetry(); + } + } + var conditions = plugin.getStatus().getConditions(); + removeConditionBy(conditions, ConditionType.PROGRESSING); + conditions.addAndEvictFIFO(Condition.builder() + .type(ConditionType.READY) + .status(ConditionStatus.TRUE) + .reason(ConditionReason.DISABLED) + .lastTransitionTime(clock.instant()) + .build()); + plugin.statusNonNull().setPhase(Plugin.Phase.DISABLED); + return null; + } + + private static boolean requestToEnable(Plugin plugin) { + var enabled = plugin.getSpec().getEnabled(); + return enabled != null && enabled; + } + + private Result resolveStaticResources(Plugin plugin) { + var pluginName = plugin.getMetadata().getName(); + var pluginVersion = plugin.getSpec().getVersion(); + if (isDevelopmentMode(plugin)) { + // when we are in dev mode, the plugin version is not always changed. + pluginVersion = String.valueOf(clock.instant().toEpochMilli()); + } + var status = plugin.statusNonNull(); + var specLogo = plugin.getSpec().getLogo(); + if (StringUtils.isNotBlank(specLogo)) { + log.info("Resolving logo resource for plugin {}", pluginName); + // the logo might be: + // 1. URL + // 2. relative path to "resources" folder + // 3. base64 format data image + var logo = specLogo; + if (!specLogo.startsWith("data:image")) { + try { + logo = new URL(specLogo).toString(); + } catch (MalformedURLException ignored) { + // indicate the logo is a path + logo = UriComponentsBuilder.newInstance() + .pathSegment("plugins", pluginName, "assets") + .path(specLogo) + .queryParam("version", pluginVersion) + .build(true) + .toString(); + } + } + status.setLogo(logo); + } + + log.info("Resolving main.js and style.css for plugin {}", pluginName); + var p = pluginManager.getPlugin(pluginName); + var classLoader = p.getPluginClassLoader(); + var resLoader = new DefaultResourceLoader(classLoader); + var entryRes = resLoader.getResource("classpath:console/main.js"); + var cssRes = resLoader.getResource("classpath:console/style.css"); + if (entryRes.exists()) { + var entry = UriComponentsBuilder.newInstance() + .pathSegment("plugins", pluginName, "assets", "console", "main.js") + .queryParam("version", pluginVersion) + .build(true) + .toString(); + status.setEntry(entry); + } + if (cssRes.exists()) { + var stylesheet = UriComponentsBuilder.newInstance() + .pathSegment("plugins", pluginName, "assets", "console", "style.css") + .queryParam("version", pluginVersion) + .build(true) + .toString(); + status.setStylesheet(stylesheet); + } + return null; + } + + private Result loadOrReload(Plugin plugin) { + var pluginName = plugin.getMetadata().getName(); + var p = pluginManager.getPlugin(pluginName); + var conditions = plugin.getStatus().getConditions(); + + var requestToUnloadBy = requestToUnload(plugin); + var requestToUnload = requestToUnloadBy != null; + var notFullyLoaded = p != null && pluginManager.getUnresolvedPlugins().contains(p); + var alreadyLoaded = p != null && pluginManager.getResolvedPlugins().contains(p); + + var requestToReload = requestToReload(plugin); + // TODO Check load location + var shouldUnload = requestToUnload || requestToReload || notFullyLoaded; + if (shouldUnload) { + // check if the plugin is already loaded or not fully loaded. + if (alreadyLoaded || notFullyLoaded) { + // get all dependencies + var dependents = requestToUnloadChildren(pluginName); + if (!CollectionUtils.isEmpty(dependents)) { + removeConditionBy(conditions, ConditionType.READY); + conditions.addAndEvictFIFO(Condition.builder() + .type(ConditionType.PROGRESSING) + .status(ConditionStatus.UNKNOWN) + .reason(ConditionReason.WAIT_FOR_DEPENDENTS_UNLOADED) + .message("Wait for children plugins " + dependents + "to be unloaded") + .lastTransitionTime(clock.instant()) + .build()); + plugin.getStatus().setPhase(Plugin.Phase.UNKNOWN); + // wait for children plugins unloaded + // retry after 1 second + return Result.requeue(Duration.ofSeconds(1)); + } + + // unload the plugin exactly + pluginManager.unloadPlugin(pluginName); + + removeConditionBy(conditions, ConditionType.INITIALIZED); + removeConditionBy(conditions, ConditionType.PROGRESSING); + removeConditionBy(conditions, ConditionType.READY); + + cancelUnloadRequest(pluginName); + p = null; + } + + // ensure removing the reload annotation after the plugin is unloaded + if (requestToUnload) { + // skip loading and wait for removing the annotation by other plugins. + var status = plugin.getStatus(); + status.getConditions().addAndEvictFIFO(Condition.builder() + .type(ConditionType.INITIALIZED) + .status(ConditionStatus.FALSE) + .reason(ConditionReason.REQUEST_TO_UNLOAD) + .message("Request to unload by " + requestToUnloadBy) + .lastTransitionTime(clock.instant()) + .build()); + return Result.doNotRetry(); + } + + if (requestToReload) { + removeRequestToReload(plugin); + } + } + + // check dependencies before loading + var unresolvedParentPlugins = plugin.getSpec().getPluginDependencies().keySet() + .stream() + .filter(dependency -> { + var parentPlugin = pluginManager.getPlugin(dependency); + return parentPlugin == null + || pluginManager.getUnresolvedPlugins().contains(parentPlugin); + }) + .sorted() + .toList(); + if (!unresolvedParentPlugins.isEmpty()) { + // requeue if the parent plugin is not loaded yet. + removeConditionBy(conditions, ConditionType.INITIALIZED); + removeConditionBy(conditions, ConditionType.READY); + conditions.addAndEvictFIFO(Condition.builder() + .type(ConditionType.PROGRESSING) + .status(ConditionStatus.UNKNOWN) + .reason(ConditionReason.WAIT_FOR_DEPENDENCIES_LOADED) + .message("Wait for parent plugins " + unresolvedParentPlugins + " to be loaded") + .lastTransitionTime(clock.instant()) + .build()); + plugin.getStatus().setPhase(Plugin.Phase.UNKNOWN); + return Result.requeue(Duration.ofSeconds(1)); + } + + if (p == null) { + var loadLocation = plugin.getStatus().getLoadLocation(); + log.info("Loading plugin {} from {}", pluginName, loadLocation); + pluginManager.loadPlugin(Paths.get(loadLocation)); + log.info("Loaded plugin {} from {}", pluginName, loadLocation); + } + + conditions.addAndEvictFIFO(Condition.builder() + .type(ConditionType.INITIALIZED) + .status(ConditionStatus.TRUE) + .reason(ConditionReason.LOADED) + .lastTransitionTime(clock.instant()) + .build()); + plugin.getStatus().setPhase(Plugin.Phase.RESOLVED); + return null; + } + + private Result createOrUpdateSetting(Plugin plugin) { + log.info("Initializing setting and config map for plugin {}", + plugin.getMetadata().getName()); + var settingName = plugin.getSpec().getSettingName(); + if (StringUtils.isBlank(settingName)) { + // do nothing if no setting name provided. + return null; + } + + var pluginName = plugin.getMetadata().getName(); + var p = pluginManager.getPlugin(pluginName); + var resources = lookupExtensions(p.getPluginClassLoader()); + var loader = new YamlUnstructuredLoader(resources); + var setting = loader.load().stream() + .filter(isSetting(settingName)) + .findFirst() + .map(u -> Unstructured.OBJECT_MAPPER.convertValue(u, Setting.class)) + .orElseThrow(() -> new IllegalStateException(String.format(""" + Setting name %s was provided but setting extension \ + was not found in plugin %s.""", + settingName, pluginName))); + + client.fetch(Setting.class, settingName) + .ifPresentOrElse(oldSetting -> { + // overwrite the setting + var version = oldSetting.getMetadata().getVersion(); + setting.getMetadata().setVersion(version); + // TODO Remove this line in the future + removeFinalizers(setting.getMetadata(), Set.of("plugin-protector")); + client.update(setting); + }, () -> client.create(setting)); + + log.info("Initialized setting {} for plugin {}", settingName, pluginName); + + // create default config map + var configMapName = plugin.getSpec().getConfigMapName(); + if (StringUtils.isBlank(configMapName)) { + return null; + } + + var defaultConfigMap = SettingUtils.populateDefaultConfig(setting, configMapName); + + client.fetch(ConfigMap.class, configMapName) + .ifPresentOrElse(configMap -> { + // merge data + var oldData = configMap.getData(); + var defaultData = defaultConfigMap.getData(); + var mergedData = SettingUtils.mergePatch(oldData, defaultData); + configMap.setData(mergedData); + client.update(configMap); + }, () -> client.create(defaultConfigMap)); + log.info("Initialized config map {} for plugin {}", configMapName, pluginName); + return null; + } + + private Result resolveLoadLocation(Plugin plugin) { + log.debug("Resolving load location for plugin {}", plugin.getMetadata().getName()); + + // populate load location from annotations + var pluginName = plugin.getMetadata().getName(); + var annotations = nullSafeAnnotations(plugin); + var pluginPathAnno = annotations.get(PLUGIN_PATH); + var status = plugin.statusNonNull(); + if (isDevelopmentMode(plugin)) { + if (!isInDevEnvironment()) { + status.getConditions().addAndEvictFIFO(Condition.builder() + .type(ConditionType.INITIALIZED) + .status(ConditionStatus.FALSE) + .reason(ConditionReason.INVALID_RUNTIME_MODE) + .message(""" + Cannot run the plugin with development mode in non-development environment.\ + """) + .lastTransitionTime(clock.instant()) + .build()); + status.setPhase(Plugin.Phase.UNKNOWN); + return Result.doNotRetry(); + } + log.debug("Plugin {} is in development mode", pluginName); + if (StringUtils.isBlank(pluginPathAnno)) { + status.getConditions().addAndEvictFIFO(Condition.builder() + .type(ConditionType.INITIALIZED) + .status(ConditionStatus.FALSE) + .reason(ConditionReason.PLUGIN_PATH_NOT_SET) + .message(""" + Plugin path annotation is not set. \ + Please set plugin path annotation "%s" in development mode.\ + """.formatted(PLUGIN_PATH)) + .build()); + return Result.doNotRetry(); + } + try { + var loadLocation = ResourceUtils.getURL(pluginPathAnno).toURI(); + status.setLoadLocation(loadLocation); + } catch (URISyntaxException | FileNotFoundException e) { + // TODO Refactor this using event in the future. + var condition = Condition.builder() + .type(ConditionType.INITIALIZED) + .status(ConditionStatus.FALSE) + .reason(ConditionReason.INVALID_PLUGIN_PATH) + .message("Invalid plugin path " + pluginPathAnno + " configured.") + .lastTransitionTime(clock.instant()) + .build(); + status.getConditions().addAndEvictFIFO(condition); + status.setPhase(Plugin.Phase.UNKNOWN); + return Result.doNotRetry(); + } + } else { + // reset annotation PLUGIN_PATH in non-dev mode + pluginPathAnno = generateFileName(plugin); + annotations.put(PLUGIN_PATH, pluginPathAnno); + var pluginPath = Paths.get(pluginPathAnno); + var pluginsRoot = getPluginsRoot(); + if (pluginPath.isAbsolute()) { + if (pluginPath.startsWith(pluginsRoot)) { + // ensure the plugin path is a relative path. + annotations.put(PLUGIN_PATH, pluginsRoot.relativize(pluginPath).toString()); + } + } else { + pluginPath = pluginsRoot.resolve(pluginPath); + } + + // delete old load location if changed. + var oldLoadLocation = status.getLoadLocation(); + var newLoadLocation = pluginPath.toUri(); + if (oldLoadLocation != null && !Objects.equals(oldLoadLocation, newLoadLocation)) { + // delete the old load location + log.info("Deleting old plugin file {} for plugin {}, and new load location is {}.", + oldLoadLocation, pluginName, newLoadLocation); + try { + var deleted = Files.deleteIfExists(Path.of(oldLoadLocation)); + if (deleted) { + log.info("Deleted old plugin file {} for plugin {}.", + oldLoadLocation, pluginName); + } + } catch (IOException e) { + log.warn("Failed to delete old plugin file {} for plugin {}", + oldLoadLocation, pluginName, e); + } + } + status.setLoadLocation(newLoadLocation); + } + + status.getConditions().addAndEvictFIFO(Condition.builder() + .type(ConditionType.INITIALIZED) + .status(ConditionStatus.TRUE) + .reason(ConditionReason.LOAD_LOCATION_RESOLVED) + .lastTransitionTime(clock.instant()) + .build()); + status.setPhase(Plugin.Phase.RESOLVED); + log.debug("Populated load location {} for plugin {}", status.getLoadLocation(), pluginName); + return null; + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Plugin()) + .build(); + } + + private Result createOrUpdateReverseProxy(Plugin plugin) { + String pluginName = plugin.getMetadata().getName(); + String reverseProxyName = buildReverseProxyName(pluginName); + ReverseProxy reverseProxy = new ReverseProxy(); + reverseProxy.setMetadata(new Metadata()); + reverseProxy.getMetadata().setName(reverseProxyName); + // put label to identify this reverse + reverseProxy.getMetadata().setLabels(new HashMap<>()); + reverseProxy.getMetadata().getLabels().put(PluginConst.PLUGIN_NAME_LABEL_NAME, pluginName); + + reverseProxy.setRules(new ArrayList<>()); + + String logo = plugin.getSpec().getLogo(); + if (StringUtils.isNotBlank(logo) && !PathUtils.isAbsoluteUri(logo)) { + ReverseProxy.ReverseProxyRule logoRule = new ReverseProxy.ReverseProxyRule(logo, + new ReverseProxy.FileReverseProxyProvider(null, logo)); + reverseProxy.getRules().add(logoRule); + } + + client.fetch(ReverseProxy.class, reverseProxyName) + .ifPresentOrElse(persisted -> { + reverseProxy.getMetadata() + .setVersion(persisted.getMetadata().getVersion()); + client.update(reverseProxy); + }, () -> client.create(reverseProxy)); + return null; + } + + private Path getPluginsRoot() { + return pluginManager.getPluginsRoots().stream() + .findFirst() + .orElseThrow( + () -> new IllegalStateException("pluginsRoots have not been initialized, yet.")); + } + + private boolean isInDevEnvironment() { + return RuntimeMode.DEVELOPMENT.equals(pluginProperties.getRuntimeMode()); + } + + static String buildReverseProxyName(String pluginName) { + return pluginName + "-system-generated-reverse-proxy"; + } + + private List requestToUnloadChildren(String pluginName) { + // get all dependencies + var dependents = pluginManager.getDependents(pluginName) + .stream() + .map(PluginWrapper::getPluginId) + .toList(); + // request all dependents to reload. + dependents.forEach(dependent -> client.fetch(Plugin.class, dependent) + .ifPresent(childPlugin -> { + var labels = childPlugin.getMetadata().getLabels(); + if (labels == null) { + labels = new HashMap<>(); + childPlugin.getMetadata().setLabels(labels); + } + var label = labels.get(REQUEST_TO_UNLOAD_LABEL); + if (!pluginName.equals(label)) { + labels.put(REQUEST_TO_UNLOAD_LABEL, pluginName); + client.update(childPlugin); + } + })); + return dependents; + } + + private void cancelUnloadRequest(String pluginName) { + // remove label REQUEST_TO_UNLOAD_LABEL + // TODO Use index mechanism + Predicate filter = aplugin -> { + var labels = aplugin.getMetadata().getLabels(); + return labels != null && pluginName.equals(labels.get(REQUEST_TO_UNLOAD_LABEL)); + }; + + client.list(Plugin.class, filter, null) + .forEach(aplugin -> { + var labels = aplugin.getMetadata().getLabels(); + if (labels != null && labels.remove(REQUEST_TO_UNLOAD_LABEL) != null) { + client.update(aplugin); + } + }); + + } + + private static void removeConditionBy(ConditionList conditions, String type) { + conditions.removeIf(condition -> Objects.equals(type, condition.getType())); + } + + public static class ConditionType { + /** + * Indicates whether the plugin is initialized. + */ + public static final String INITIALIZED = "Initialized"; + + /** + * Indicates whether the plugin is starting, disabling or deleting. + */ + public static final String PROGRESSING = "Progressing"; + + /** + * Indicates whether the plugin is ready. + */ + public static final String READY = "Ready"; + } + + public static class ConditionReason { + public static final String LOAD_LOCATION_RESOLVED = "LoadLocationResolved"; + public static final String INVALID_PLUGIN_PATH = "InvalidPluginPath"; + + public static final String WAIT_FOR_DEPENDENCIES_STARTED = "WaitForDependenciesStarted"; + public static final String WAIT_FOR_DEPENDENCIES_LOADED = "WaitForDependenciesLoaded"; + + public static final String WAIT_FOR_DEPENDENTS_DELETED = "WaitForDependentsDeleted"; + public static final String WAIT_FOR_DEPENDENTS_DISABLED = "WaitForDependentsDisabled"; + public static final String WAIT_FOR_DEPENDENTS_UNLOADED = "WaitForDependentsUnloaded"; + + public static final String STARTED = "Started"; + public static final String DISABLED = "Disabled"; + public static final String SYSTEM_ERROR = "SystemError"; + public static final String REQUEST_TO_UNLOAD = "RequestToUnload"; + public static final String LOADED = "Loaded"; + public static final String START_ERROR = "StartError"; + public static final String DISABLE_ERROR = "DisableError"; + public static final String INVALID_RUNTIME_MODE = "InvalidRuntimeMode"; + public static final String PLUGIN_PATH_NOT_SET = "PluginPathNotSet"; + } + +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/PostCounterReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/PostCounterReconciler.java new file mode 100644 index 0000000..a6986a5 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/PostCounterReconciler.java @@ -0,0 +1,53 @@ +package run.halo.app.core.extension.reconciler; + +import static run.halo.app.extension.index.query.QueryFactory.startsWith; + +import lombok.RequiredArgsConstructor; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.Counter; +import run.halo.app.core.extension.content.Post; +import run.halo.app.event.post.PostStatsChangedEvent; +import run.halo.app.extension.DefaultExtensionMatcher; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.metrics.MeterUtils; + +@Component +@RequiredArgsConstructor +public class PostCounterReconciler implements Reconciler { + + private final ApplicationEventPublisher eventPublisher; + private final ExtensionClient client; + + @Override + public Result reconcile(Request request) { + if (!isSameAsPost(request.name())) { + return Result.doNotRetry(); + } + client.fetch(Counter.class, request.name()).ifPresent(counter -> { + eventPublisher.publishEvent(new PostStatsChangedEvent(this, counter)); + }); + return Result.doNotRetry(); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + var extension = new Counter(); + return builder + .extension(extension) + .onAddMatcher(DefaultExtensionMatcher.builder(client, extension.groupVersionKind()) + .fieldSelector(FieldSelector.of( + startsWith("metadata.name", MeterUtils.nameOf(Post.class, ""))) + ) + .build()) + .build(); + } + + static boolean isSameAsPost(String name) { + return name.startsWith(MeterUtils.nameOf(Post.class, "")); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/PostReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/PostReconciler.java new file mode 100644 index 0000000..29d5469 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/PostReconciler.java @@ -0,0 +1,439 @@ +package run.halo.app.core.extension.reconciler; + +import static java.nio.charset.StandardCharsets.UTF_8; +import static org.apache.commons.lang3.BooleanUtils.TRUE; +import static org.apache.commons.lang3.BooleanUtils.isFalse; +import static org.apache.commons.lang3.BooleanUtils.isTrue; +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static run.halo.app.extension.ExtensionUtil.addFinalizers; +import static run.halo.app.extension.ExtensionUtil.removeFinalizers; +import static run.halo.app.extension.MetadataUtil.nullSafeAnnotations; +import static run.halo.app.extension.MetadataUtil.nullSafeLabels; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.in; + +import com.google.common.hash.Hashing; +import java.time.Duration; +import java.time.Instant; +import java.util.HashSet; +import java.util.LinkedHashSet; +import java.util.List; +import java.util.Objects; +import java.util.Optional; +import java.util.Set; +import java.util.stream.Collectors; +import lombok.AllArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.jsoup.Jsoup; +import org.springframework.context.ApplicationEvent; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.data.domain.Sort; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.content.CategoryService; +import run.halo.app.content.ContentWrapper; +import run.halo.app.content.ExcerptGenerator; +import run.halo.app.content.NotificationReasonConst; +import run.halo.app.content.PostService; +import run.halo.app.content.comment.CommentService; +import run.halo.app.content.permalinks.PostPermalinkPolicy; +import run.halo.app.core.extension.content.Constant; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.Post.PostPhase; +import run.halo.app.core.extension.content.Post.VisibleEnum; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.event.post.PostDeletedEvent; +import run.halo.app.event.post.PostPublishedEvent; +import run.halo.app.event.post.PostUnpublishedEvent; +import run.halo.app.event.post.PostUpdatedEvent; +import run.halo.app.event.post.PostVisibleChangedEvent; +import run.halo.app.extension.DefaultExtensionMatcher; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionOperator; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.Ref; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.RequeueException; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.Condition; +import run.halo.app.infra.ConditionStatus; +import run.halo.app.infra.utils.HaloUtils; +import run.halo.app.metrics.CounterService; +import run.halo.app.metrics.MeterUtils; +import run.halo.app.notification.NotificationCenter; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; + +/** + *

Reconciler for {@link Post}.

+ * + *

things to do:

+ *
    + * 1. generate permalink + * 2. generate excerpt if auto generate is enabled + *
+ * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@AllArgsConstructor +@Component +public class PostReconciler implements Reconciler { + private static final String FINALIZER_NAME = "post-protection"; + private final ExtensionClient client; + private final PostService postService; + private final PostPermalinkPolicy postPermalinkPolicy; + private final CounterService counterService; + private final CommentService commentService; + private final CategoryService categoryService; + private final ExtensionGetter extensionGetter; + + private final ApplicationEventPublisher eventPublisher; + private final NotificationCenter notificationCenter; + + @Override + public Result reconcile(Request request) { + var events = new LinkedHashSet(); + client.fetch(Post.class, request.name()) + .ifPresent(post -> { + if (ExtensionOperator.isDeleted(post)) { + removeFinalizers(post.getMetadata(), Set.of(FINALIZER_NAME)); + unPublishPost(post, events); + events.add(new PostDeletedEvent(this, post)); + cleanUpResources(post); + // update post to be able to be collected by gc collector. + client.update(post); + // fire event after updating post + events.forEach(eventPublisher::publishEvent); + return; + } + addFinalizers(post.getMetadata(), Set.of(FINALIZER_NAME)); + + populateLabels(post, events); + + schedulePublishIfNecessary(post); + + subscribeNewCommentNotification(post); + + var status = post.getStatus(); + if (status == null) { + status = new Post.PostStatus(); + post.setStatus(status); + } + + if (post.isPublished() && post.getSpec().getPublishTime() == null) { + post.getSpec().setPublishTime(Instant.now()); + } + + // calculate the sha256sum + var configSha256sum = Hashing.sha256().hashString(post.getSpec().toString(), UTF_8) + .toString(); + + var annotations = nullSafeAnnotations(post); + var oldConfigChecksum = annotations.get(Constant.CHECKSUM_CONFIG_ANNO); + if (!Objects.equals(oldConfigChecksum, configSha256sum)) { + // if the checksum doesn't match + events.add(new PostUpdatedEvent(this, post.getMetadata().getName())); + annotations.put(Constant.CHECKSUM_CONFIG_ANNO, configSha256sum); + } + + if (shouldUnPublish(post)) { + unPublishPost(post, events); + } else { + publishPost(post, events); + } + + var permalinkPattern = postPermalinkPolicy.pattern(); + annotations.put(Constant.PERMALINK_PATTERN_ANNO, permalinkPattern); + + status.setPermalink(postPermalinkPolicy.permalink(post)); + if (status.getPhase() == null) { + status.setPhase(PostPhase.DRAFT.toString()); + } + + var excerpt = post.getSpec().getExcerpt(); + if (excerpt == null) { + excerpt = new Post.Excerpt(); + } + var isAutoGenerate = defaultIfNull(excerpt.getAutoGenerate(), true); + if (isAutoGenerate) { + status.setExcerpt(getExcerpt(post)); + } else { + status.setExcerpt(excerpt.getRaw()); + } + + var ref = Ref.of(post); + // handle contributors + var headSnapshot = post.getSpec().getHeadSnapshot(); + var contributors = listSnapshots(ref) + .stream() + .map(snapshot -> { + Set usernames = snapshot.getSpec().getContributors(); + return Objects.requireNonNullElseGet(usernames, + () -> new HashSet()); + }) + .flatMap(Set::stream) + .distinct() + .sorted() + .toList(); + status.setContributors(contributors); + + // update in progress status + status.setInProgress( + !StringUtils.equals(headSnapshot, post.getSpec().getReleaseSnapshot())); + + computeHiddenState(post); + + // version + 1 is required to truly equal version + // as a version will be incremented after the update + status.setObservedVersion(post.getMetadata().getVersion() + 1); + client.update(post); + + // fire event after updating post + events.forEach(eventPublisher::publishEvent); + }); + return Result.doNotRetry(); + } + + private void computeHiddenState(Post post) { + var categories = post.getSpec().getCategories(); + if (categories == null) { + post.getStatusOrDefault().setHideFromList(false); + return; + } + var hidden = categories.stream() + .anyMatch(categoryName -> categoryService.isCategoryHidden(categoryName) + .blockOptional().orElse(false) + ); + post.getStatusOrDefault().setHideFromList(hidden); + } + + private void populateLabels(Post post, Set events) { + var labels = nullSafeLabels(post); + labels.put(Post.DELETED_LABEL, String.valueOf(isTrue(post.getSpec().getDeleted()))); + + var expectVisible = defaultIfNull(post.getSpec().getVisible(), VisibleEnum.PUBLIC); + var oldVisible = VisibleEnum.from(labels.get(Post.VISIBLE_LABEL)); + if (!Objects.equals(oldVisible, expectVisible)) { + var postName = post.getMetadata().getName(); + events.add(new PostVisibleChangedEvent(this, postName, oldVisible, expectVisible)); + } + labels.put(Post.VISIBLE_LABEL, expectVisible.toString()); + + var ownerName = post.getSpec().getOwner(); + if (StringUtils.isNotBlank(ownerName)) { + labels.put(Post.OWNER_LABEL, ownerName); + } + + var publishTime = post.getSpec().getPublishTime(); + if (publishTime != null) { + labels.put(Post.ARCHIVE_YEAR_LABEL, HaloUtils.getYearText(publishTime)); + labels.put(Post.ARCHIVE_MONTH_LABEL, HaloUtils.getMonthText(publishTime)); + labels.put(Post.ARCHIVE_DAY_LABEL, HaloUtils.getDayText(publishTime)); + } + + if (!labels.containsKey(Post.PUBLISHED_LABEL)) { + labels.put(Post.PUBLISHED_LABEL, BooleanUtils.FALSE); + } + } + + private static boolean shouldUnPublish(Post post) { + return isTrue(post.getSpec().getDeleted()) || isFalse(post.getSpec().getPublish()); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Post()) + .onAddMatcher(DefaultExtensionMatcher.builder(client, Post.GVK) + .fieldSelector(FieldSelector.of( + equal(Post.REQUIRE_SYNC_ON_STARTUP_INDEX_NAME, TRUE)) + ) + .build() + ) + .build(); + } + + void schedulePublishIfNecessary(Post post) { + var labels = nullSafeLabels(post); + // ensure the label is removed + labels.remove(Post.SCHEDULING_PUBLISH_LABEL); + + final var now = Instant.now(); + var publishTime = post.getSpec().getPublishTime(); + if (post.isPublished() || publishTime == null) { + return; + } + + // expect to publish in the future + if (isTrue(post.getSpec().getPublish()) && publishTime.isAfter(now)) { + labels.put(Post.SCHEDULING_PUBLISH_LABEL, TRUE); + // update post changes before requeue + client.update(post); + + throw new RequeueException(Result.requeue(Duration.between(now, publishTime)), + "Requeue for scheduled publish."); + } + } + + void subscribeNewCommentNotification(Post post) { + var subscriber = new Subscription.Subscriber(); + subscriber.setName(post.getSpec().getOwner()); + + var interestReason = new Subscription.InterestReason(); + interestReason.setReasonType(NotificationReasonConst.NEW_COMMENT_ON_POST); + interestReason.setExpression( + "props.postOwner == '%s'".formatted(post.getSpec().getOwner())); + notificationCenter.subscribe(subscriber, interestReason).block(); + } + + private void publishPost(Post post, Set events) { + var expectReleaseSnapshot = post.getSpec().getReleaseSnapshot(); + if (StringUtils.isBlank(expectReleaseSnapshot)) { + // Do nothing if release snapshot is not set + return; + } + var annotations = post.getMetadata().getAnnotations(); + var lastReleaseSnapshot = annotations.get(Post.LAST_RELEASED_SNAPSHOT_ANNO); + if (post.isPublished() + && Objects.equals(expectReleaseSnapshot, lastReleaseSnapshot)) { + // If the release snapshot is not change + return; + } + var status = post.getStatus(); + // validate the release snapshot + var snapshot = client.fetch(Snapshot.class, expectReleaseSnapshot); + if (snapshot.isEmpty()) { + Condition condition = Condition.builder() + .type(PostPhase.FAILED.name()) + .reason("SnapshotNotFound") + .message( + String.format("Snapshot [%s] not found for publish", expectReleaseSnapshot)) + .status(ConditionStatus.FALSE) + .lastTransitionTime(Instant.now()) + .build(); + status.getConditionsOrDefault().addAndEvictFIFO(condition); + status.setPhase(PostPhase.FAILED.name()); + return; + } + annotations.put(Post.LAST_RELEASED_SNAPSHOT_ANNO, expectReleaseSnapshot); + status.setPhase(PostPhase.PUBLISHED.toString()); + var condition = Condition.builder() + .type(PostPhase.PUBLISHED.name()) + .reason("Published") + .message("Post published successfully.") + .lastTransitionTime(Instant.now()) + .status(ConditionStatus.TRUE) + .build(); + status.getConditionsOrDefault().addAndEvictFIFO(condition); + var labels = post.getMetadata().getLabels(); + labels.put(Post.PUBLISHED_LABEL, Boolean.TRUE.toString()); + if (post.getSpec().getPublishTime() == null) { + // TODO Set the field in creation hook in the future. + post.getSpec().setPublishTime(Instant.now()); + } + status.setLastModifyTime(snapshot.get().getSpec().getLastModifyTime()); + events.add(new PostPublishedEvent(this, post.getMetadata().getName())); + } + + void unPublishPost(Post post, Set events) { + if (!post.isPublished()) { + return; + } + var labels = post.getMetadata().getLabels(); + labels.put(Post.PUBLISHED_LABEL, Boolean.FALSE.toString()); + final var status = post.getStatus(); + + var condition = new Condition(); + condition.setType("CancelledPublish"); + condition.setStatus(ConditionStatus.TRUE); + condition.setReason(condition.getType()); + condition.setMessage("CancelledPublish"); + condition.setLastTransitionTime(Instant.now()); + status.getConditionsOrDefault().addAndEvictFIFO(condition); + + status.setPhase(PostPhase.DRAFT.toString()); + + events.add(new PostUnpublishedEvent(this, post.getMetadata().getName())); + } + + private void cleanUpResources(Post post) { + // clean up snapshots + final Ref ref = Ref.of(post); + listSnapshots(ref).forEach(client::delete); + + // clean up comments + commentService.removeBySubject(ref).block(); + + // delete counter + counterService.deleteByName(MeterUtils.nameOf(Post.class, post.getMetadata().getName())) + .block(); + } + + private String getExcerpt(Post post) { + Optional contentWrapper = + postService.getContent(post.getSpec().getReleaseSnapshot(), + post.getSpec().getBaseSnapshot()) + .blockOptional(); + if (contentWrapper.isEmpty()) { + return StringUtils.EMPTY; + } + var content = contentWrapper.get(); + var tags = listTagDisplayNames(post); + + var keywords = new HashSet<>(tags); + keywords.add(post.getSpec().getTitle()); + + var context = new ExcerptGenerator.Context() + .setRaw(content.getRaw()) + .setContent(content.getContent()) + .setRawType(content.getRawType()) + .setKeywords(keywords) + .setMaxLength(160); + return extensionGetter.getEnabledExtension(ExcerptGenerator.class) + .defaultIfEmpty(new DefaultExcerptGenerator()) + .flatMap(generator -> generator.generate(context)) + .onErrorResume(Throwable.class, e -> { + log.error("Failed to generate excerpt for post [{}]", + post.getMetadata().getName(), e); + return Mono.empty(); + }) + .blockOptional() + .orElse(StringUtils.EMPTY); + } + + private Set listTagDisplayNames(Post post) { + return Optional.ofNullable(post.getSpec().getTags()) + .map(tags -> client.listAll(Tag.class, ListOptions.builder() + .fieldQuery(in("metadata.name", tags)) + .build(), Sort.unsorted()) + ) + .stream() + .flatMap(List::stream) + .map(tag -> tag.getSpec().getDisplayName()) + .collect(Collectors.toSet()); + } + + static class DefaultExcerptGenerator implements ExcerptGenerator { + @Override + public Mono generate(Context context) { + String shortHtmlContent = StringUtils.substring(context.getContent(), 0, 500); + String text = Jsoup.parse(shortHtmlContent).text(); + return Mono.just(StringUtils.substring(text, 0, 150)); + } + } + + List listSnapshots(Ref ref) { + var snapshotListOptions = new ListOptions(); + snapshotListOptions.setFieldSelector(FieldSelector.of( + QueryFactory.equal("spec.subjectRef", Snapshot.toSubjectRefKey(ref)))); + return client.listAll(Snapshot.class, snapshotListOptions, Sort.unsorted()); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/ReplyReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/ReplyReconciler.java new file mode 100644 index 0000000..3dc0b89 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/ReplyReconciler.java @@ -0,0 +1,98 @@ +package run.halo.app.core.extension.reconciler; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static run.halo.app.extension.ExtensionUtil.addFinalizers; +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import java.util.Set; +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.stereotype.Component; +import run.halo.app.content.comment.ReplyNotificationSubscriptionHelper; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.event.post.ReplyChangedEvent; +import run.halo.app.event.post.ReplyCreatedEvent; +import run.halo.app.event.post.ReplyDeletedEvent; +import run.halo.app.extension.DefaultExtensionMatcher; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.router.selector.FieldSelector; + +/** + * Reconciler for {@link Reply}. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class ReplyReconciler implements Reconciler { + protected static final String FINALIZER_NAME = "reply-protection"; + + private final ExtensionClient client; + private final ApplicationEventPublisher eventPublisher; + + private final ReplyNotificationSubscriptionHelper replyNotificationSubscriptionHelper; + + @Override + public Result reconcile(Request request) { + client.fetch(Reply.class, request.name()) + .ifPresent(reply -> { + if (reply.getMetadata().getDeletionTimestamp() != null) { + cleanUpResourcesAndRemoveFinalizer(request.name()); + return; + } + if (addFinalizers(reply.getMetadata(), Set.of(FINALIZER_NAME))) { + replyNotificationSubscriptionHelper.subscribeNewReplyReasonForReply(reply); + client.update(reply); + eventPublisher.publishEvent(new ReplyCreatedEvent(this, reply)); + } + + if (reply.getSpec().getCreationTime() == null) { + reply.getSpec().setCreationTime( + defaultIfNull(reply.getSpec().getApprovedTime(), + reply.getMetadata().getCreationTimestamp() + ) + ); + } + + // version + 1 is required to truly equal version + // as a version will be incremented after the update + reply.getStatus().setObservedVersion(reply.getMetadata().getVersion() + 1); + + client.update(reply); + + eventPublisher.publishEvent(new ReplyChangedEvent(this, reply)); + }); + return new Result(false, null); + } + + private void cleanUpResourcesAndRemoveFinalizer(String replyName) { + client.fetch(Reply.class, replyName).ifPresent(reply -> { + if (reply.getMetadata().getFinalizers() != null) { + reply.getMetadata().getFinalizers().remove(FINALIZER_NAME); + } + client.update(reply); + + // on reply removing + eventPublisher.publishEvent(new ReplyDeletedEvent(this, reply)); + }); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + var extension = new Reply(); + return builder + .extension(extension) + .onAddMatcher(DefaultExtensionMatcher.builder(client, extension.groupVersionKind()) + .fieldSelector(FieldSelector.of( + equal(Reply.REQUIRE_SYNC_ON_STARTUP_INDEX_NAME, BooleanUtils.TRUE)) + ) + .build() + ) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/ReverseProxyReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/ReverseProxyReconciler.java new file mode 100644 index 0000000..e0a34ca --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/ReverseProxyReconciler.java @@ -0,0 +1,105 @@ +package run.halo.app.core.extension.reconciler; + +import java.util.HashSet; +import java.util.Map; +import java.util.Set; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.ReverseProxy; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.plugin.PluginConst; +import run.halo.app.plugin.resources.ReverseProxyRouterFunctionRegistry; + +/** + * Reconciler for {@link ReverseProxy}. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class ReverseProxyReconciler implements Reconciler { + private static final String FINALIZER_NAME = "reverse-proxy-protection"; + private final ExtensionClient client; + private final ReverseProxyRouterFunctionRegistry routerFunctionRegistry; + + public ReverseProxyReconciler(ExtensionClient client, + ReverseProxyRouterFunctionRegistry routerFunctionRegistry) { + this.client = client; + this.routerFunctionRegistry = routerFunctionRegistry; + } + + @Override + public Result reconcile(Request request) { + return client.fetch(ReverseProxy.class, request.name()) + .map(reverseProxy -> { + if (isDeleted(reverseProxy)) { + cleanUpResourcesAndRemoveFinalizer(request.name()); + return new Result(false, null); + } + addFinalizerIfNecessary(reverseProxy); + registerReverseProxy(reverseProxy); + return new Result(false, null); + }) + .orElse(new Result(false, null)); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new ReverseProxy()) + .build(); + } + + private void registerReverseProxy(ReverseProxy reverseProxy) { + String pluginId = getPluginId(reverseProxy); + routerFunctionRegistry.register(pluginId, reverseProxy); + } + + private void cleanUpResources(ReverseProxy reverseProxy) { + String pluginId = getPluginId(reverseProxy); + routerFunctionRegistry.remove(pluginId, reverseProxy.getMetadata().getName()); + } + + private void addFinalizerIfNecessary(ReverseProxy oldReverseProxy) { + Set finalizers = oldReverseProxy.getMetadata().getFinalizers(); + if (finalizers != null && finalizers.contains(FINALIZER_NAME)) { + return; + } + client.fetch(ReverseProxy.class, oldReverseProxy.getMetadata().getName()) + .ifPresent(reverseProxy -> { + Set newFinalizers = reverseProxy.getMetadata().getFinalizers(); + if (newFinalizers == null) { + newFinalizers = new HashSet<>(); + reverseProxy.getMetadata().setFinalizers(newFinalizers); + } + newFinalizers.add(FINALIZER_NAME); + client.update(reverseProxy); + }); + } + + private void cleanUpResourcesAndRemoveFinalizer(String name) { + client.fetch(ReverseProxy.class, name).ifPresent(reverseProxy -> { + cleanUpResources(reverseProxy); + if (reverseProxy.getMetadata().getFinalizers() != null) { + reverseProxy.getMetadata().getFinalizers().remove(FINALIZER_NAME); + } + client.update(reverseProxy); + }); + } + + private boolean isDeleted(ReverseProxy reverseProxy) { + return reverseProxy.getMetadata().getDeletionTimestamp() != null; + } + + private String getPluginId(ReverseProxy reverseProxy) { + Map labels = reverseProxy.getMetadata().getLabels(); + if (labels == null) { + return PluginConst.SYSTEM_PLUGIN_NAME; + } + return StringUtils.defaultString(labels.get(PluginConst.PLUGIN_NAME_LABEL_NAME), + PluginConst.SYSTEM_PLUGIN_NAME); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/RoleReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/RoleReconciler.java new file mode 100644 index 0000000..e3d6311 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/RoleReconciler.java @@ -0,0 +1,65 @@ +package run.halo.app.core.extension.reconciler; + +import static java.util.Objects.deepEquals; + +import java.util.Map; +import lombok.extern.slf4j.Slf4j; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.Role; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.Reconciler.Request; + +/** + * Role reconcile. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class RoleReconciler implements Reconciler { + + private final ExtensionClient client; + + public RoleReconciler(ExtensionClient client) { + this.client = client; + } + + @Override + public Result reconcile(Request request) { + client.fetch(Role.class, request.name()) + .ifPresent(role -> { + Map annotations = MetadataUtil.nullSafeAnnotations(role); + // override dependency rules to annotations + annotations.put(Role.ROLE_DEPENDENCY_RULES, "[]"); + annotations.put(Role.UI_PERMISSIONS_AGGREGATED_ANNO, "[]"); + + updateLabelsAndAnnotations(role); + }); + return new Result(false, null); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Role()) + .build(); + } + + private void updateLabelsAndAnnotations(Role role) { + var annotations = role.getMetadata().getAnnotations(); + var labels = role.getMetadata().getLabels(); + client.fetch(Role.class, role.getMetadata().getName()) + .filter(freshRole -> !deepEquals(annotations, freshRole.getMetadata().getAnnotations()) + || deepEquals(labels, freshRole.getMetadata().getLabels())) + .ifPresent(freshRole -> { + freshRole.getMetadata().setAnnotations(annotations); + freshRole.getMetadata().setLabels(labels); + client.update(freshRole); + }); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/SinglePageReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/SinglePageReconciler.java new file mode 100644 index 0000000..b803b6d --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/SinglePageReconciler.java @@ -0,0 +1,413 @@ +package run.halo.app.core.extension.reconciler; + +import static java.nio.charset.StandardCharsets.UTF_8; +import static org.springframework.web.util.UriUtils.encodePath; + +import java.time.Instant; +import java.util.HashSet; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import java.util.Optional; +import java.util.Set; +import lombok.AllArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.jsoup.Jsoup; +import org.springframework.data.domain.Sort; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import reactor.core.publisher.Mono; +import run.halo.app.content.ContentWrapper; +import run.halo.app.content.ExcerptGenerator; +import run.halo.app.content.NotificationReasonConst; +import run.halo.app.content.SinglePageService; +import run.halo.app.content.comment.CommentService; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionOperator; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.Ref; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.Condition; +import run.halo.app.infra.ConditionList; +import run.halo.app.infra.ConditionStatus; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.metrics.CounterService; +import run.halo.app.metrics.MeterUtils; +import run.halo.app.notification.NotificationCenter; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; + +/** + *

Reconciler for {@link SinglePage}.

+ * + *

things to do:

+ *
    + * 1. generate permalink + * 2. generate excerpt if auto generate is enabled + *
+ * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@AllArgsConstructor +@Component +public class SinglePageReconciler implements Reconciler { + private static final String FINALIZER_NAME = "single-page-protection"; + private final ExtensionClient client; + private final SinglePageService singlePageService; + private final CounterService counterService; + private final CommentService commentService; + private final ExtensionGetter extensionGetter; + + private final ExternalUrlSupplier externalUrlSupplier; + + private final NotificationCenter notificationCenter; + + @Override + public Result reconcile(Request request) { + client.fetch(SinglePage.class, request.name()) + .ifPresent(singlePage -> { + if (ExtensionOperator.isDeleted(singlePage)) { + cleanUpResourcesAndRemoveFinalizer(request.name()); + return; + } + + if (ExtensionUtil.addFinalizers(singlePage.getMetadata(), Set.of(FINALIZER_NAME))) { + client.update(singlePage); + } + + subscribeNewCommentNotification(singlePage); + + // reconcile spec first + reconcileSpec(request.name()); + // then + reconcileMetadata(request.name()); + reconcileStatus(request.name()); + }); + return new Result(false, null); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new SinglePage()) + .build(); + } + + void subscribeNewCommentNotification(SinglePage page) { + var subscriber = new Subscription.Subscriber(); + subscriber.setName(page.getSpec().getOwner()); + + var interestReason = new Subscription.InterestReason(); + interestReason.setReasonType(NotificationReasonConst.NEW_COMMENT_ON_PAGE); + interestReason.setExpression( + "props.pageOwner == '%s'".formatted(page.getSpec().getOwner())); + notificationCenter.subscribe(subscriber, interestReason).block(); + } + + private void reconcileSpec(String name) { + client.fetch(SinglePage.class, name).ifPresent(page -> { + if (page.isPublished() && page.getSpec().getPublishTime() == null) { + page.getSpec().setPublishTime(Instant.now()); + } + + // un-publish if necessary + if (page.isPublished() && Objects.equals(false, page.getSpec().getPublish())) { + unPublish(name); + return; + } + + try { + publishPage(name); + } catch (Throwable e) { + publishFailed(name, e); + throw e; + } + }); + } + + private void publishPage(String name) { + client.fetch(SinglePage.class, name) + .filter(page -> Objects.equals(true, page.getSpec().getPublish())) + .ifPresent(page -> { + Map annotations = MetadataUtil.nullSafeAnnotations(page); + String lastReleasedSnapshot = annotations.get(Post.LAST_RELEASED_SNAPSHOT_ANNO); + String releaseSnapshot = page.getSpec().getReleaseSnapshot(); + if (StringUtils.isBlank(releaseSnapshot)) { + return; + } + // do nothing if release snapshot is not changed and page is published + if (page.isPublished() + && StringUtils.equals(lastReleasedSnapshot, releaseSnapshot)) { + return; + } + SinglePage.SinglePageStatus status = page.getStatusOrDefault(); + + // validate release snapshot + Optional releasedSnapshotOpt = + client.fetch(Snapshot.class, releaseSnapshot); + if (releasedSnapshotOpt.isEmpty()) { + Condition condition = Condition.builder() + .type(Post.PostPhase.FAILED.name()) + .reason("SnapshotNotFound") + .message( + String.format("Snapshot [%s] not found for publish", releaseSnapshot)) + .status(ConditionStatus.FALSE) + .lastTransitionTime(Instant.now()) + .build(); + status.getConditionsOrDefault().addAndEvictFIFO(condition); + status.setPhase(Post.PostPhase.FAILED.name()); + client.update(page); + return; + } + + // do publish + annotations.put(SinglePage.LAST_RELEASED_SNAPSHOT_ANNO, releaseSnapshot); + status.setPhase(Post.PostPhase.PUBLISHED.name()); + Condition condition = Condition.builder() + .type(Post.PostPhase.PUBLISHED.name()) + .reason("Published") + .message("SinglePage published successfully.") + .lastTransitionTime(Instant.now()) + .status(ConditionStatus.TRUE) + .build(); + status.getConditionsOrDefault().addAndEvictFIFO(condition); + + SinglePage.changePublishedState(page, true); + if (page.getSpec().getPublishTime() == null) { + page.getSpec().setPublishTime(Instant.now()); + } + + // populate lastModifyTime + status.setLastModifyTime(releasedSnapshotOpt.get().getSpec().getLastModifyTime()); + + client.update(page); + }); + } + + private void unPublish(String name) { + client.fetch(SinglePage.class, name).ifPresent(page -> { + final SinglePage oldPage = JsonUtils.deepCopy(page); + + SinglePage.changePublishedState(page, false); + final SinglePage.SinglePageStatus status = page.getStatusOrDefault(); + + Condition condition = new Condition(); + condition.setType("CancelledPublish"); + condition.setStatus(ConditionStatus.TRUE); + condition.setReason(condition.getType()); + condition.setMessage("CancelledPublish"); + condition.setLastTransitionTime(Instant.now()); + status.getConditionsOrDefault().addAndEvictFIFO(condition); + + status.setPhase(Post.PostPhase.DRAFT.name()); + if (!oldPage.equals(page)) { + client.update(page); + } + }); + } + + private void publishFailed(String name, Throwable error) { + Assert.notNull(name, "Name must not be null"); + Assert.notNull(error, "Error must not be null"); + client.fetch(SinglePage.class, name).ifPresent(page -> { + final SinglePage oldPage = JsonUtils.deepCopy(page); + + SinglePage.SinglePageStatus status = page.getStatusOrDefault(); + Post.PostPhase phase = Post.PostPhase.FAILED; + status.setPhase(phase.name()); + + final ConditionList conditions = status.getConditionsOrDefault(); + + Condition condition = Condition.builder() + .type(phase.name()) + .reason("PublishFailed") + .message(error.getMessage()) + .lastTransitionTime(Instant.now()) + .status(ConditionStatus.FALSE) + .build(); + conditions.addAndEvictFIFO(condition); + page.setStatus(status); + + if (!oldPage.equals(page)) { + client.update(page); + } + }); + } + + private void cleanUpResources(SinglePage singlePage) { + // clean up snapshot + Ref ref = Ref.of(singlePage); + listSnapshots(ref).forEach(client::delete); + + // clean up comments + commentService.removeBySubject(ref).block(); + + // delete counter for single page + counterService.deleteByName( + MeterUtils.nameOf(SinglePage.class, singlePage.getMetadata().getName())) + .block(); + } + + private void cleanUpResourcesAndRemoveFinalizer(String pageName) { + client.fetch(SinglePage.class, pageName).ifPresent(singlePage -> { + cleanUpResources(singlePage); + if (singlePage.getMetadata().getFinalizers() != null) { + singlePage.getMetadata().getFinalizers().remove(FINALIZER_NAME); + } + client.update(singlePage); + }); + } + + private void reconcileMetadata(String name) { + client.fetch(SinglePage.class, name).ifPresent(singlePage -> { + final SinglePage oldPage = JsonUtils.deepCopy(singlePage); + + SinglePage.SinglePageSpec spec = singlePage.getSpec(); + // handle logic delete + Map labels = MetadataUtil.nullSafeLabels(singlePage); + if (isDeleted(singlePage)) { + labels.put(SinglePage.DELETED_LABEL, Boolean.TRUE.toString()); + } else { + labels.put(SinglePage.DELETED_LABEL, Boolean.FALSE.toString()); + } + labels.put(SinglePage.VISIBLE_LABEL, + Objects.requireNonNullElse(spec.getVisible(), Post.VisibleEnum.PUBLIC).name()); + labels.put(SinglePage.OWNER_LABEL, spec.getOwner()); + if (!labels.containsKey(SinglePage.PUBLISHED_LABEL)) { + labels.put(Post.PUBLISHED_LABEL, Boolean.FALSE.toString()); + } + if (!oldPage.equals(singlePage)) { + client.update(singlePage); + } + }); + } + + String createPermalink(SinglePage page) { + var permalink = encodePath(page.getSpec().getSlug(), UTF_8); + permalink = StringUtils.prependIfMissing(permalink, "/"); + return externalUrlSupplier.get().resolve(permalink).normalize().toString(); + } + + private void reconcileStatus(String name) { + client.fetch(SinglePage.class, name).ifPresent(singlePage -> { + final SinglePage oldPage = JsonUtils.deepCopy(singlePage); + + singlePage.getStatusOrDefault() + .setPermalink(createPermalink(singlePage)); + + SinglePage.SinglePageSpec spec = singlePage.getSpec(); + SinglePage.SinglePageStatus status = singlePage.getStatusOrDefault(); + if (status.getPhase() == null) { + status.setPhase(Post.PostPhase.DRAFT.name()); + } + + // handle excerpt + Post.Excerpt excerpt = spec.getExcerpt(); + if (excerpt == null) { + excerpt = new Post.Excerpt(); + excerpt.setAutoGenerate(true); + spec.setExcerpt(excerpt); + } + + if (excerpt.getAutoGenerate()) { + status.setExcerpt(getExcerpt(singlePage)); + } else { + status.setExcerpt(excerpt.getRaw()); + } + + // handle contributors + String headSnapshot = singlePage.getSpec().getHeadSnapshot(); + List contributors = listSnapshots(Ref.of(singlePage)) + .stream() + .peek(snapshot -> { + snapshot.getSpec().setContentPatch(StringUtils.EMPTY); + snapshot.getSpec().setRawPatch(StringUtils.EMPTY); + }) + .map(snapshot -> { + Set usernames = snapshot.getSpec().getContributors(); + return Objects.requireNonNullElseGet(usernames, + () -> new HashSet()); + }) + .flatMap(Set::stream) + .distinct() + .sorted() + .toList(); + status.setContributors(contributors); + + // update in progress status + String releaseSnapshot = singlePage.getSpec().getReleaseSnapshot(); + status.setInProgress(!StringUtils.equals(releaseSnapshot, headSnapshot)); + + if (singlePage.isPublished() && status.getLastModifyTime() == null) { + client.fetch(Snapshot.class, singlePage.getSpec().getReleaseSnapshot()) + .ifPresent(releasedSnapshot -> + status.setLastModifyTime(releasedSnapshot.getSpec().getLastModifyTime())); + } + + if (!oldPage.equals(singlePage)) { + client.update(singlePage); + } + }); + } + + private String getExcerpt(SinglePage singlePage) { + Optional contentWrapper = + singlePageService.getContent(singlePage.getSpec().getReleaseSnapshot(), + singlePage.getSpec().getBaseSnapshot()) + .blockOptional(); + if (contentWrapper.isEmpty()) { + return StringUtils.EMPTY; + } + var content = contentWrapper.get(); + var context = new ExcerptGenerator.Context() + .setRaw(content.getRaw()) + .setContent(content.getContent()) + .setRaw(content.getRawType()) + .setKeywords(Set.of()) + .setMaxLength(160); + return extensionGetter.getEnabledExtension(ExcerptGenerator.class) + .defaultIfEmpty(new DefaultExcerptGenerator()) + .flatMap(generator -> generator.generate(context)) + .onErrorResume(Throwable.class, e -> { + log.error("Failed to generate excerpt for single page [{}]", + singlePage.getMetadata().getName(), e); + return Mono.empty(); + }) + .blockOptional() + .orElse(StringUtils.EMPTY); + } + + static class DefaultExcerptGenerator implements ExcerptGenerator { + @Override + public Mono generate(Context context) { + String shortHtmlContent = StringUtils.substring(context.getContent(), 0, 500); + String text = Jsoup.parse(shortHtmlContent).text(); + return Mono.just(StringUtils.substring(text, 0, 150)); + } + } + + private boolean isDeleted(SinglePage singlePage) { + return Objects.equals(true, singlePage.getSpec().getDeleted()) + || singlePage.getMetadata().getDeletionTimestamp() != null; + } + + List listSnapshots(Ref ref) { + var snapshotListOptions = new ListOptions(); + snapshotListOptions.setFieldSelector(FieldSelector.of( + QueryFactory.equal("spec.subjectRef", Snapshot.toSubjectRefKey(ref)))); + return client.listAll(Snapshot.class, snapshotListOptions, Sort.unsorted()); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/SystemSettingReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/SystemSettingReconciler.java new file mode 100644 index 0000000..f3f7638 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/SystemSettingReconciler.java @@ -0,0 +1,300 @@ +package run.halo.app.core.extension.reconciler; + +import java.util.HashMap; +import java.util.HashSet; +import java.util.Map; +import java.util.Optional; +import java.util.Set; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.ApplicationContext; +import org.springframework.stereotype.Component; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.infra.utils.PathUtils; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.router.PermalinkRuleChangedEvent; + +/** + * Reconciler for system settings. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class SystemSettingReconciler implements Reconciler { + public static final String OLD_THEME_ROUTE_RULES = "halo.run/old-theme-route-rules"; + public static final String FINALIZER_NAME = "system-setting-protection"; + + private final ExtensionClient client; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final ApplicationContext applicationContext; + + private final RouteRuleReconciler routeRuleReconciler = new RouteRuleReconciler(); + + public SystemSettingReconciler(ExtensionClient client, + SystemConfigurableEnvironmentFetcher environmentFetcher, + ApplicationContext applicationContext) { + this.client = client; + this.environmentFetcher = environmentFetcher; + this.applicationContext = applicationContext; + } + + @Override + public Result reconcile(Request request) { + String name = request.name(); + if (!isSystemSetting(name)) { + return new Result(false, null); + } + client.fetch(ConfigMap.class, name) + .ifPresent(configMap -> { + addFinalizerIfNecessary(configMap); + routeRuleReconciler.reconcile(name); + customizeSystem(name); + }); + return new Result(false, null); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new ConfigMap()) + .build(); + } + + private void customizeSystem(String name) { + if (!SystemSetting.SYSTEM_CONFIG_DEFAULT.equals(name)) { + return; + } + // configMap named system not found then create it by system-default + Optional systemOpt = client.fetch(ConfigMap.class, SystemSetting.SYSTEM_CONFIG); + if (systemOpt.isPresent()) { + return; + } + ConfigMap system = client.fetch(ConfigMap.class, SystemSetting.SYSTEM_CONFIG_DEFAULT) + .map(configMap -> { + // create a new configMap named system by system-default + ConfigMap systemConfigMap = new ConfigMap(); + systemConfigMap.setMetadata(new Metadata()); + systemConfigMap.getMetadata().setName(SystemSetting.SYSTEM_CONFIG); + systemConfigMap.setData(configMap.getData()); + return systemConfigMap; + }) + .orElseGet(() -> { + // empty configMap named system + ConfigMap configMap = new ConfigMap(); + configMap.setMetadata(new Metadata()); + configMap.getMetadata().setName(SystemSetting.SYSTEM_CONFIG); + configMap.setData(new HashMap<>()); + return configMap; + }); + client.create(system); + } + + private void addFinalizerIfNecessary(ConfigMap oldConfigMap) { + if (SystemSetting.SYSTEM_CONFIG.equals(oldConfigMap.getMetadata().getName())) { + return; + } + Set finalizers = oldConfigMap.getMetadata().getFinalizers(); + if (finalizers != null && finalizers.contains(FINALIZER_NAME)) { + return; + } + client.fetch(ConfigMap.class, oldConfigMap.getMetadata().getName()) + .ifPresent(configMap -> { + Set newFinalizers = configMap.getMetadata().getFinalizers(); + if (newFinalizers == null) { + newFinalizers = new HashSet<>(); + configMap.getMetadata().setFinalizers(newFinalizers); + } + newFinalizers.add(FINALIZER_NAME); + client.update(configMap); + }); + } + + class RouteRuleReconciler { + + public void reconcile(String name) { + reconcileArchivesRule(name); + reconcileTagsRule(name); + reconcileCategoriesRule(name); + reconcilePostRule(name); + } + + private void reconcileArchivesRule(String name) { + getConfigMap(name).ifPresent(configMap -> { + SystemSetting.ThemeRouteRules oldRules = getOldRouteRulesFromAnno(configMap); + SystemSetting.ThemeRouteRules newRules = getRouteRules(configMap); + + final String oldArchivesPrefix = oldRules.getArchives(); + final String oldPostPattern = oldRules.getPost(); + + // dispatch event + final boolean archivesPrefixChanged = + !StringUtils.equals(oldRules.getArchives(), newRules.getArchives()); + + final boolean postPatternChanged = + changePostPatternPrefixIfNecessary(oldArchivesPrefix, newRules); + + if (archivesPrefixChanged || postPatternChanged) { + oldRules.setPost(newRules.getPost()); + oldRules.setArchives(newRules.getArchives()); + updateNewRuleToConfigMap(configMap, oldRules, newRules); + } + + // archives rule changed + if (archivesPrefixChanged) { + log.debug("Archives prefix changed from [{}] to [{}].", oldArchivesPrefix, + newRules.getArchives()); + applicationContext.publishEvent(new PermalinkRuleChangedEvent(this, + DefaultTemplateEnum.ARCHIVES, + oldArchivesPrefix, newRules.getArchives())); + } + + if (postPatternChanged) { + log.debug("Post pattern changed from [{}] to [{}].", oldPostPattern, + newRules.getPost()); + // post rule changed + applicationContext.publishEvent(new PermalinkRuleChangedEvent(this, + DefaultTemplateEnum.POST, oldPostPattern, newRules.getPost())); + } + }); + } + + private void updateNewRuleToConfigMap(ConfigMap configMap, + SystemSetting.ThemeRouteRules oldRules, + SystemSetting.ThemeRouteRules newRules) { + Map annotations = getAnnotationsSafe(configMap); + annotations.put(OLD_THEME_ROUTE_RULES, JsonUtils.objectToJson(oldRules)); + configMap.getData().put(SystemSetting.ThemeRouteRules.GROUP, + JsonUtils.objectToJson(newRules)); + client.update(configMap); + } + + private void reconcileTagsRule(String name) { + getConfigMap(name).ifPresent(configMap -> { + SystemSetting.ThemeRouteRules oldRules = getOldRouteRulesFromAnno(configMap); + SystemSetting.ThemeRouteRules newRules = getRouteRules(configMap); + final String oldTagsPrefix = oldRules.getTags(); + if (!StringUtils.equals(oldTagsPrefix, newRules.getTags())) { + oldRules.setTags(newRules.getTags()); + updateNewRuleToConfigMap(configMap, oldRules, newRules); + + log.debug("Tags prefix changed from [{}] to [{}].", oldTagsPrefix, + newRules.getTags()); + // then publish event + applicationContext.publishEvent(new PermalinkRuleChangedEvent(this, + DefaultTemplateEnum.TAGS, + oldTagsPrefix, newRules.getTags())); + } + }); + } + + private void reconcileCategoriesRule(String name) { + getConfigMap(name).ifPresent(configMap -> { + SystemSetting.ThemeRouteRules oldRules = getOldRouteRulesFromAnno(configMap); + SystemSetting.ThemeRouteRules newRules = getRouteRules(configMap); + final String oldCategoriesPrefix = oldRules.getCategories(); + if (!StringUtils.equals(oldCategoriesPrefix, newRules.getCategories())) { + oldRules.setCategories(newRules.getCategories()); + updateNewRuleToConfigMap(configMap, oldRules, newRules); + + log.debug("Categories prefix changed from [{}] to [{}].", oldCategoriesPrefix, + newRules.getCategories()); + // categories rule changed + applicationContext.publishEvent(new PermalinkRuleChangedEvent(this, + DefaultTemplateEnum.CATEGORIES, + oldCategoriesPrefix, newRules.getCategories())); + } + }); + } + + private void reconcilePostRule(String name) { + getConfigMap(name).ifPresent(configMap -> { + SystemSetting.ThemeRouteRules oldRules = getOldRouteRulesFromAnno(configMap); + SystemSetting.ThemeRouteRules newRules = getRouteRules(configMap); + + final String oldPostPattern = oldRules.getPost(); + if (!StringUtils.equals(oldPostPattern, newRules.getPost())) { + oldRules.setPost(newRules.getPost()); + updateNewRuleToConfigMap(configMap, oldRules, newRules); + + log.debug("Post pattern changed from [{}] to [{}].", oldPostPattern, + newRules.getPost()); + // post rule changed + applicationContext.publishEvent(new PermalinkRuleChangedEvent(this, + DefaultTemplateEnum.POST, + oldPostPattern, newRules.getPost())); + } + }); + } + + static boolean changePostPatternPrefixIfNecessary(String oldArchivePrefix, + SystemSetting.ThemeRouteRules newRules) { + if (StringUtils.isBlank(oldArchivePrefix) + || StringUtils.isBlank(newRules.getPost())) { + return false; + } + String newArchivesPrefix = newRules.getArchives(); + if (StringUtils.equals(oldArchivePrefix, newArchivesPrefix)) { + return false; + } + + String oldPrefix = StringUtils.removeStart(oldArchivePrefix, "/"); + String postPattern = StringUtils.removeStart(newRules.getPost(), "/"); + + if (postPattern.startsWith(oldPrefix)) { + String postPatternToUpdate = PathUtils.combinePath(newArchivesPrefix, + StringUtils.removeStart(postPattern, oldPrefix)); + newRules.setPost(postPatternToUpdate); + return true; + } + return false; + } + + private SystemSetting.ThemeRouteRules getOldRouteRulesFromAnno(ConfigMap configMap) { + Map annotations = getAnnotationsSafe(configMap); + String oldRulesJson = annotations.get(OLD_THEME_ROUTE_RULES); + + // old rules is empty, means this is the first time to update theme route rules + if (oldRulesJson == null) { + oldRulesJson = "{}"; + } + + // diff old rules and new rules + return JsonUtils.jsonToObject(oldRulesJson, SystemSetting.ThemeRouteRules.class); + } + + private SystemSetting.ThemeRouteRules getRouteRules(ConfigMap configMap) { + Map data = configMap.getData(); + // get new rules and replace old rules to new rules + return JsonUtils.jsonToObject(data.get(SystemSetting.ThemeRouteRules.GROUP), + SystemSetting.ThemeRouteRules.class); + } + + private Map getAnnotationsSafe(ConfigMap configMap) { + Map annotations = configMap.getMetadata().getAnnotations(); + if (annotations == null) { + annotations = new HashMap<>(); + configMap.getMetadata().setAnnotations(annotations); + } + return annotations; + } + } + + public boolean isSystemSetting(String name) { + return SystemSetting.SYSTEM_CONFIG.equals(name) + || SystemSetting.SYSTEM_CONFIG_DEFAULT.equals(name); + } + + private Optional getConfigMap(String name) { + return environmentFetcher.getConfigMapBlocking(); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/TagReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/TagReconciler.java new file mode 100644 index 0000000..1318e6c --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/TagReconciler.java @@ -0,0 +1,79 @@ +package run.halo.app.core.extension.reconciler; + +import static run.halo.app.extension.ExtensionUtil.addFinalizers; +import static run.halo.app.extension.ExtensionUtil.removeFinalizers; +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import java.util.Map; +import java.util.Set; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.springframework.stereotype.Component; +import run.halo.app.content.permalinks.TagPermalinkPolicy; +import run.halo.app.core.extension.content.Constant; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.extension.DefaultExtensionMatcher; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.router.selector.FieldSelector; + +/** + * Reconciler for {@link Tag}. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class TagReconciler implements Reconciler { + static final String FINALIZER_NAME = "tag-protection"; + private final ExtensionClient client; + private final TagPermalinkPolicy tagPermalinkPolicy; + + @Override + public Result reconcile(Request request) { + client.fetch(Tag.class, request.name()) + .ifPresent(tag -> { + if (ExtensionUtil.isDeleted(tag)) { + if (removeFinalizers(tag.getMetadata(), Set.of(FINALIZER_NAME))) { + client.update(tag); + } + return; + } + + addFinalizers(tag.getMetadata(), Set.of(FINALIZER_NAME)); + + Map annotations = MetadataUtil.nullSafeAnnotations(tag); + + String newPattern = tagPermalinkPolicy.pattern(); + annotations.put(Constant.PERMALINK_PATTERN_ANNO, newPattern); + + String permalink = tagPermalinkPolicy.permalink(tag); + var status = tag.getStatusOrDefault(); + status.setPermalink(permalink); + + // Update the observed version. + status.setObservedVersion(tag.getMetadata().getVersion() + 1); + + client.update(tag); + }); + return Result.doNotRetry(); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Tag()) + .onAddMatcher(DefaultExtensionMatcher.builder(client, Tag.GVK) + .fieldSelector(FieldSelector.of( + equal(Tag.REQUIRE_SYNC_ON_STARTUP_INDEX_NAME, BooleanUtils.TRUE)) + ) + .build() + ) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/ThemeReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/ThemeReconciler.java new file mode 100644 index 0000000..0899e0a --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/ThemeReconciler.java @@ -0,0 +1,229 @@ +package run.halo.app.core.extension.reconciler; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import java.io.IOException; +import java.time.Instant; +import java.util.HashSet; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import java.util.Set; +import java.util.UUID; +import org.apache.commons.lang3.StringUtils; +import org.springframework.retry.support.RetryTemplate; +import org.springframework.stereotype.Component; +import org.springframework.util.FileSystemUtils; +import run.halo.app.core.extension.AnnotationSetting; +import run.halo.app.core.extension.Setting; +import run.halo.app.core.extension.Theme; +import run.halo.app.core.extension.theme.SettingUtils; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.Reconciler.Request; +import run.halo.app.infra.Condition; +import run.halo.app.infra.ConditionStatus; +import run.halo.app.infra.SystemVersionSupplier; +import run.halo.app.infra.ThemeRootGetter; +import run.halo.app.infra.exception.ThemeUninstallException; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.infra.utils.VersionUtils; + +/** + * Reconciler for theme. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class ThemeReconciler implements Reconciler { + private static final String FINALIZER_NAME = "theme-protection"; + + private final ExtensionClient client; + + private final ThemeRootGetter themeRoot; + private final SystemVersionSupplier systemVersionSupplier; + + private final RetryTemplate retryTemplate = RetryTemplate.builder() + .maxAttempts(20) + .fixedBackoff(300) + .retryOn(IllegalStateException.class) + .build(); + + public ThemeReconciler(ExtensionClient client, ThemeRootGetter themeRoot, + SystemVersionSupplier systemVersionSupplier) { + this.client = client; + this.themeRoot = themeRoot; + this.systemVersionSupplier = systemVersionSupplier; + } + + @Override + public Result reconcile(Request request) { + client.fetch(Theme.class, request.name()) + .ifPresent(theme -> { + if (isDeleted(theme)) { + cleanUpResourcesAndRemoveFinalizer(request.name()); + return; + } + addFinalizerIfNecessary(theme); + themeSettingDefaultConfig(theme); + reconcileStatus(request.name()); + }); + return new Result(false, null); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Theme()) + .build(); + } + + void reconcileStatus(String name) { + client.fetch(Theme.class, name).ifPresent(theme -> { + final Theme.ThemeStatus status = + defaultIfNull(theme.getStatus(), new Theme.ThemeStatus()); + final Theme.ThemeStatus oldStatus = JsonUtils.deepCopy(status); + theme.setStatus(status); + + var themePath = themeRoot.get().resolve(name); + status.setLocation(themePath.toAbsolutePath().toString()); + + status.setPhase(Theme.ThemePhase.READY); + Condition.ConditionBuilder conditionBuilder = Condition.builder() + .type(Theme.ThemePhase.READY.name()) + .status(ConditionStatus.TRUE) + .reason(Theme.ThemePhase.READY.name()) + .message(StringUtils.EMPTY) + .lastTransitionTime(Instant.now()); + + // Check if this theme version is match requires param. + String normalVersion = systemVersionSupplier.get().getNormalVersion(); + String requires = theme.getSpec().getRequires(); + if (!VersionUtils.satisfiesRequires(normalVersion, requires)) { + status.setPhase(Theme.ThemePhase.FAILED); + conditionBuilder + .type(Theme.ThemePhase.FAILED.name()) + .status(ConditionStatus.FALSE) + .reason("UnsatisfiedRequiresVersion") + .message(String.format( + "Theme requires a minimum system version of [%s], and you have [%s].", + requires, normalVersion)); + } + Theme.nullSafeConditionList(theme).addAndEvictFIFO(conditionBuilder.build()); + + if (!Objects.equals(oldStatus, status)) { + client.update(theme); + } + }); + } + + private void themeSettingDefaultConfig(Theme theme) { + if (StringUtils.isBlank(theme.getSpec().getSettingName())) { + return; + } + final String userDefinedConfigMapName = theme.getSpec().getConfigMapName(); + + final String newConfigMapName = UUID.randomUUID().toString(); + if (StringUtils.isBlank(userDefinedConfigMapName)) { + client.fetch(Theme.class, theme.getMetadata().getName()) + .ifPresent(themeToUse -> { + Theme oldTheme = JsonUtils.deepCopy(themeToUse); + themeToUse.getSpec().setConfigMapName(newConfigMapName); + if (!oldTheme.equals(themeToUse)) { + client.update(themeToUse); + } + }); + } + + final String configMapNameToUse = + StringUtils.defaultIfBlank(userDefinedConfigMapName, newConfigMapName); + SettingUtils.createOrUpdateConfigMap(client, theme.getSpec().getSettingName(), + configMapNameToUse); + } + + private void addFinalizerIfNecessary(Theme oldTheme) { + Set finalizers = oldTheme.getMetadata().getFinalizers(); + if (finalizers != null && finalizers.contains(FINALIZER_NAME)) { + return; + } + client.fetch(Theme.class, oldTheme.getMetadata().getName()) + .ifPresent(theme -> { + Set newFinalizers = theme.getMetadata().getFinalizers(); + if (newFinalizers == null) { + newFinalizers = new HashSet<>(); + theme.getMetadata().setFinalizers(newFinalizers); + } + newFinalizers.add(FINALIZER_NAME); + client.update(theme); + }); + } + + private void cleanUpResourcesAndRemoveFinalizer(String themeName) { + client.fetch(Theme.class, themeName).ifPresent(theme -> { + reconcileThemeDeletion(theme); + if (theme.getMetadata().getFinalizers() != null) { + theme.getMetadata().getFinalizers().remove(FINALIZER_NAME); + } + client.update(theme); + }); + } + + private void reconcileThemeDeletion(Theme theme) { + deleteThemeFiles(theme); + // delete theme setting form + String settingName = theme.getSpec().getSettingName(); + if (StringUtils.isNotBlank(settingName)) { + client.fetch(Setting.class, settingName) + .ifPresent(client::delete); + retryTemplate.execute(callback -> { + client.fetch(Setting.class, settingName).ifPresent(setting -> { + throw new IllegalStateException("Waiting for setting to be deleted."); + }); + return null; + }); + } + // delete annotation setting + deleteAnnotationSettings(theme.getMetadata().getName()); + } + + private void deleteAnnotationSettings(String themeName) { + List result = listAnnotationSettingsByThemeName(themeName); + + for (AnnotationSetting annotationSetting : result) { + client.delete(annotationSetting); + } + + retryTemplate.execute(callback -> { + List annotationSettings = + listAnnotationSettingsByThemeName(themeName); + if (annotationSettings.isEmpty()) { + return null; + } + throw new IllegalStateException("Waiting for annotation settings to be deleted."); + }); + } + + private List listAnnotationSettingsByThemeName(String themeName) { + return client.list(AnnotationSetting.class, annotationSetting -> { + Map labels = MetadataUtil.nullSafeLabels(annotationSetting); + return themeName.equals(labels.get(Theme.THEME_NAME_LABEL)); + }, null); + } + + private void deleteThemeFiles(Theme theme) { + var themeDir = themeRoot.get().resolve(theme.getMetadata().getName()); + try { + FileSystemUtils.deleteRecursively(themeDir); + } catch (IOException e) { + throw new ThemeUninstallException("Failed to delete theme files.", e); + } + } + + private boolean isDeleted(Theme theme) { + return theme.getMetadata().getDeletionTimestamp() != null; + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/UserReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/UserReconciler.java new file mode 100644 index 0000000..c74d087 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/UserReconciler.java @@ -0,0 +1,197 @@ +package run.halo.app.core.extension.reconciler; + +import static run.halo.app.extension.ExtensionUtil.addFinalizers; +import static run.halo.app.extension.ExtensionUtil.defaultSort; +import static run.halo.app.extension.ExtensionUtil.isDeleted; +import static run.halo.app.extension.ExtensionUtil.removeFinalizers; +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import java.net.URI; +import java.time.Duration; +import java.util.HashMap; +import java.util.List; +import java.util.Objects; +import java.util.Optional; +import java.util.Set; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import org.springframework.util.CollectionUtils; +import org.springframework.web.util.UriComponentsBuilder; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.UserConnection; +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.service.AttachmentService; +import run.halo.app.core.extension.service.RoleService; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.Reconciler.Request; +import run.halo.app.extension.controller.RequeueException; +import run.halo.app.infra.AnonymousUserConst; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.utils.JsonUtils; + +@Slf4j +@Component +@RequiredArgsConstructor +public class UserReconciler implements Reconciler { + private static final String FINALIZER_NAME = "user-protection"; + private final ExtensionClient client; + private final ExternalUrlSupplier externalUrlSupplier; + private final RoleService roleService; + private final AttachmentService attachmentService; + private final UserService userService; + + @Override + public Result reconcile(Request request) { + client.fetch(User.class, request.name()).ifPresent(user -> { + if (isDeleted(user)) { + deleteUserConnections(request.name()); + removeFinalizers(user.getMetadata(), Set.of(FINALIZER_NAME)); + client.update(user); + return; + } + addFinalizers(user.getMetadata(), Set.of(FINALIZER_NAME)); + ensureRoleNamesAnno(user); + updatePermalink(user); + handleAvatar(user); + checkVerifiedEmail(user); + client.update(user); + }); + return new Result(false, null); + } + + private void checkVerifiedEmail(User user) { + var username = user.getMetadata().getName(); + if (!user.getSpec().isEmailVerified()) { + return; + } + var email = user.getSpec().getEmail(); + if (StringUtils.isBlank(email)) { + return; + } + if (checkEmailInUse(username, email)) { + user.getSpec().setEmailVerified(false); + } + } + + private Boolean checkEmailInUse(String username, String email) { + return userService.listByEmail(email) + .filter(existUser -> existUser.getSpec().isEmailVerified()) + .filter(existUser -> !existUser.getMetadata().getName().equals(username)) + .hasElements() + .blockOptional() + .orElse(false); + } + + private void handleAvatar(User user) { + var annotations = Optional.ofNullable(user.getMetadata().getAnnotations()) + .orElseGet(HashMap::new); + user.getMetadata().setAnnotations(annotations); + + var avatarAttachmentName = annotations.get(User.AVATAR_ATTACHMENT_NAME_ANNO); + var oldAvatarAttachmentName = + annotations.get(User.LAST_AVATAR_ATTACHMENT_NAME_ANNO); + // remove old avatar if needed + if (StringUtils.isNotBlank(oldAvatarAttachmentName) + && !StringUtils.equals(avatarAttachmentName, oldAvatarAttachmentName)) { + client.fetch(Attachment.class, oldAvatarAttachmentName) + .ifPresent(client::delete); + annotations.remove(User.LAST_AVATAR_ATTACHMENT_NAME_ANNO); + } + + var spec = user.getSpec(); + if (StringUtils.isBlank(avatarAttachmentName)) { + if (StringUtils.isNotBlank(spec.getAvatar())) { + log.info("Remove avatar for user({})", user.getMetadata().getName()); + } + spec.setAvatar(null); + return; + } + client.fetch(Attachment.class, avatarAttachmentName) + .flatMap(attachment -> attachmentService.getPermalink(attachment) + .blockOptional(Duration.ofMinutes(1)) + ) + .map(URI::toString) + .ifPresentOrElse(avatar -> { + if (!Objects.equals(avatar, spec.getAvatar())) { + log.info( + "Update avatar for user({}) to {}", + user.getMetadata().getName(), avatar + ); + } + spec.setAvatar(avatar); + // reset last avatar + annotations.put( + User.LAST_AVATAR_ATTACHMENT_NAME_ANNO, + avatarAttachmentName + ); + }, () -> { + throw new RequeueException( + new Result(true, null), + "Avatar permalink(%s) is not available yet." + .formatted(avatarAttachmentName) + ); + }); + } + + private void ensureRoleNamesAnno(User user) { + roleService.getRolesByUsername(user.getMetadata().getName()) + .collectList() + .map(JsonUtils::objectToJson) + .doOnNext(roleNamesJson -> { + var annotations = Optional.ofNullable(user.getMetadata().getAnnotations()) + .orElseGet(HashMap::new); + user.getMetadata().setAnnotations(annotations); + annotations.put(User.ROLE_NAMES_ANNO, roleNamesJson); + }) + .block(Duration.ofMinutes(1)); + } + + private void updatePermalink(User user) { + var name = user.getMetadata().getName(); + if (AnonymousUserConst.isAnonymousUser(name)) { + // anonymous user is not allowed to have permalink + return; + } + var status = Optional.ofNullable(user.getStatus()) + .orElseGet(User.UserStatus::new); + user.setStatus(status); + status.setPermalink(getUserPermalink(user)); + } + + private String getUserPermalink(User user) { + return UriComponentsBuilder.fromUri(externalUrlSupplier.get()) + .pathSegment("authors", user.getMetadata().getName()) + .toUriString(); + } + + void deleteUserConnections(String username) { + var userConnections = listConnectionsByUsername(username); + if (CollectionUtils.isEmpty(userConnections)) { + return; + } + userConnections.forEach(client::delete); + throw new RequeueException(new Result(true, null), "User connections are not deleted yet"); + } + + List listConnectionsByUsername(String username) { + var listOptions = ListOptions.builder() + .andQuery(equal("spec.username", username)) + .build(); + return client.listAll(UserConnection.class, listOptions, defaultSort()); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new User()) + .build(); + } + +} diff --git a/application/src/main/java/run/halo/app/core/extension/reconciler/attachment/AttachmentReconciler.java b/application/src/main/java/run/halo/app/core/extension/reconciler/attachment/AttachmentReconciler.java new file mode 100644 index 0000000..d525e2f --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/reconciler/attachment/AttachmentReconciler.java @@ -0,0 +1,125 @@ +package run.halo.app.core.extension.reconciler.attachment; + +import java.net.URI; +import java.util.HashSet; +import java.util.Objects; +import java.util.Set; +import lombok.extern.slf4j.Slf4j; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.attachment.Attachment.AttachmentStatus; +import run.halo.app.core.extension.attachment.Constant; +import run.halo.app.core.extension.service.AttachmentService; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.Reconciler.Request; +import run.halo.app.infra.ExternalUrlSupplier; + +@Slf4j +@Component +public class AttachmentReconciler implements Reconciler { + + private final ExtensionClient client; + + private final ExternalUrlSupplier externalUrl; + + private final AttachmentService attachmentService; + + public AttachmentReconciler(ExtensionClient client, + ExternalUrlSupplier externalUrl, AttachmentService attachmentService) { + this.client = client; + this.externalUrl = externalUrl; + this.attachmentService = attachmentService; + } + + @Override + public Result reconcile(Request request) { + client.fetch(Attachment.class, request.name()).ifPresent(attachment -> { + // TODO Handle the finalizer + if (attachment.getMetadata().getDeletionTimestamp() != null) { + removeFinalizer(attachment); + return; + } + // add finalizer + addFinalizerIfNotSet(request.name(), attachment.getMetadata().getFinalizers()); + var annotations = attachment.getMetadata().getAnnotations(); + if (annotations != null) { + attachmentService.getPermalink(attachment) + .map(URI::toString) + .switchIfEmpty(Mono.fromSupplier(() -> { + // Only for back-compatibility + return annotations.get(Constant.EXTERNAL_LINK_ANNO_KEY); + })) + .doOnNext(permalink -> { + log.debug("Set permalink {} for attachment {}", permalink, request.name()); + var status = attachment.getStatus(); + if (status == null) { + status = new AttachmentStatus(); + attachment.setStatus(status); + } + status.setPermalink(permalink); + }) + .blockOptional(); + } + updateStatus(request.name(), attachment.getStatus()); + }); + return null; + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Attachment()) + .build(); + } + + void updateStatus(String attachmentName, AttachmentStatus status) { + client.fetch(Attachment.class, attachmentName) + .filter(attachment -> !Objects.deepEquals(attachment.getStatus(), status)) + .ifPresent(attachment -> { + attachment.setStatus(status); + client.update(attachment); + }); + } + + void removeFinalizer(Attachment oldAttachment) { + if (!hasFinalizer(oldAttachment, Constant.FINALIZER_NAME)) { + return; + } + attachmentService.delete(oldAttachment).block(); + client.fetch(Attachment.class, oldAttachment.getMetadata().getName()) + .ifPresent(attachment -> { + var finalizers = attachment.getMetadata().getFinalizers(); + if (hasFinalizer(attachment, Constant.FINALIZER_NAME) + && finalizers.remove(Constant.FINALIZER_NAME)) { + // update it + client.update(attachment); + } + }); + } + + boolean hasFinalizer(Attachment attachment, String finalizer) { + var finalizers = attachment.getMetadata().getFinalizers(); + return finalizers != null && finalizers.contains(finalizer); + } + + void addFinalizerIfNotSet(String attachmentName, Set existingFinalizers) { + if (existingFinalizers != null && existingFinalizers.contains(Constant.FINALIZER_NAME)) { + return; + } + + client.fetch(Attachment.class, attachmentName).ifPresent(attachment -> { + var finalizers = attachment.getMetadata().getFinalizers(); + if (finalizers == null) { + finalizers = new HashSet<>(); + attachment.getMetadata().setFinalizers(finalizers); + } + finalizers.add(Constant.FINALIZER_NAME); + client.update(attachment); + }); + } + +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/DefaultRoleService.java b/application/src/main/java/run/halo/app/core/extension/service/DefaultRoleService.java new file mode 100644 index 0000000..6351643 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/DefaultRoleService.java @@ -0,0 +1,252 @@ +package run.halo.app.core.extension.service; + +import static run.halo.app.extension.ExtensionUtil.defaultSort; +import static run.halo.app.extension.ExtensionUtil.notDeleting; +import static run.halo.app.security.authorization.AuthorityUtils.containsSuperRole; + +import com.fasterxml.jackson.core.type.TypeReference; +import java.util.Collection; +import java.util.Collections; +import java.util.HashMap; +import java.util.HashSet; +import java.util.List; +import java.util.Map; +import java.util.Optional; +import java.util.Set; +import java.util.function.Predicate; +import java.util.stream.Collectors; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Service; +import org.springframework.util.CollectionUtils; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Role; +import run.halo.app.core.extension.RoleBinding; +import run.halo.app.core.extension.RoleBinding.RoleRef; +import run.halo.app.core.extension.RoleBinding.Subject; +import run.halo.app.core.extension.User; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.security.SuperAdminInitializer; + +/** + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Service +public class DefaultRoleService implements RoleService { + + private final ReactiveExtensionClient client; + + public DefaultRoleService(ReactiveExtensionClient client) { + this.client = client; + } + + private Flux listRoleRefs(Subject subject) { + return listRoleBindings(subject).map(RoleBinding::getRoleRef); + } + + @Override + public Flux listRoleBindings(Subject subject) { + var listOptions = ListOptions.builder() + .andQuery(notDeleting()) + .andQuery(QueryFactory.in("subjects", subject.toString())) + .build(); + return client.listAll(RoleBinding.class, listOptions, defaultSort()); + } + + @Override + public Flux getRolesByUsername(String username) { + return listRoleRefs(toUserSubject(username)) + .filter(DefaultRoleService::isRoleKind) + .map(RoleRef::getName); + } + + @Override + public Mono>> getRolesByUsernames(Collection usernames) { + if (CollectionUtils.isEmpty(usernames)) { + return Mono.empty(); + } + var subjects = usernames.stream().map(DefaultRoleService::toUserSubject) + .map(Object::toString) + .collect(Collectors.toSet()); + var listOptions = ListOptions.builder() + .andQuery(notDeleting()) + .andQuery(QueryFactory.in("subjects", subjects)) + .build(); + + return client.listAll(RoleBinding.class, listOptions, defaultSort()) + .collect(HashMap::new, (map, roleBinding) -> { + for (Subject subject : roleBinding.getSubjects()) { + if (subjects.contains(subject.toString())) { + var username = subject.getName(); + var roleRef = roleBinding.getRoleRef(); + if (isRoleKind(roleRef)) { + var roleName = roleRef.getName(); + map.computeIfAbsent(username, k -> new HashSet<>()).add(roleName); + } + } + } + }); + } + + @Override + public Mono contains(Collection source, Collection candidates) { + if (source.contains(SuperAdminInitializer.SUPER_ROLE_NAME)) { + return Mono.just(true); + } + return listWithDependencies(new HashSet<>(source), shouldExcludeHidden(false)) + .map(role -> role.getMetadata().getName()) + .collect(Collectors.toSet()) + .map(roleNames -> roleNames.containsAll(candidates)); + } + + @Override + public Flux listPermissions(Set names) { + if (containsSuperRole(names)) { + // search all permissions + return client.listAll(Role.class, + shouldExcludeHidden(true), + ExtensionUtil.defaultSort()); + } + return listWithDependencies(names, shouldExcludeHidden(true)); + } + + @Override + public Flux listDependenciesFlux(Set names) { + return listWithDependencies(names, shouldExcludeHidden(false)); + } + + private static boolean isRoleKind(RoleRef roleRef) { + return Role.GROUP.equals(roleRef.getApiGroup()) && Role.KIND.equals(roleRef.getKind()); + } + + private static Subject toUserSubject(String username) { + var subject = new Subject(); + subject.setApiGroup(User.GROUP); + subject.setKind(User.KIND); + subject.setName(username); + return subject; + } + + private Flux listRoles(Set names, ListOptions additionalListOptions) { + if (CollectionUtils.isEmpty(names)) { + return Flux.empty(); + } + + var listOptions = Optional.ofNullable(additionalListOptions) + .map(ListOptions::builder) + .orElseGet(ListOptions::builder) + .andQuery(notDeleting()) + .andQuery(QueryFactory.in("metadata.name", names)) + .build(); + + return client.listAll(Role.class, listOptions, ExtensionUtil.defaultSort()); + } + + private static ListOptions shouldExcludeHidden(boolean excludeHidden) { + if (!excludeHidden) { + return null; + } + return ListOptions.builder().labelSelector() + .notEq(Role.HIDDEN_LABEL_NAME, Boolean.TRUE.toString()) + .end() + .build(); + } + + private Flux listWithDependencies(Set names, ListOptions additionalListOptions) { + var visited = new HashSet(); + return listRoles(names, additionalListOptions) + .expand(role -> { + var name = role.getMetadata().getName(); + if (visited.contains(name)) { + return Flux.empty(); + } + if (log.isTraceEnabled()) { + log.trace("Expand role: {}", role.getMetadata().getName()); + } + visited.add(name); + var annotations = MetadataUtil.nullSafeAnnotations(role); + var dependenciesJson = annotations.get(Role.ROLE_DEPENDENCIES_ANNO); + var dependencies = stringToList(dependenciesJson); + + return Flux.fromIterable(dependencies) + .filter(dep -> !visited.contains(dep)) + .collect(Collectors.toSet()) + .flatMapMany(deps -> listRoles(deps, additionalListOptions)); + }) + .concatWith(Flux.defer(() -> listAggregatedRoles(visited, additionalListOptions))); + } + + private Flux listAggregatedRoles(Set roleNames, + ListOptions additionalListOptions) { + if (CollectionUtils.isEmpty(roleNames)) { + return Flux.empty(); + } + var listOptionsBuilder = Optional.ofNullable(additionalListOptions) + .map(ListOptions::builder) + .orElseGet(ListOptions::builder); + roleNames.stream() + .map(roleName -> Role.ROLE_AGGREGATE_LABEL_PREFIX + roleName) + .forEach( + label -> listOptionsBuilder.labelSelector().eq(label, Boolean.TRUE.toString()) + ); + return client.listAll(Role.class, listOptionsBuilder.build(), ExtensionUtil.defaultSort()); + } + + Predicate getRoleBindingPredicate(Subject targetSubject) { + return roleBinding -> { + List subjects = roleBinding.getSubjects(); + for (Subject subject : subjects) { + return matchSubject(targetSubject, subject); + } + return false; + }; + } + + private static boolean matchSubject(Subject targetSubject, Subject subject) { + if (targetSubject == null || subject == null) { + return false; + } + return StringUtils.equals(targetSubject.getKind(), subject.getKind()) + && StringUtils.equals(targetSubject.getName(), subject.getName()) + && StringUtils.defaultString(targetSubject.getApiGroup()) + .equals(StringUtils.defaultString(subject.getApiGroup())); + } + + @Override + public Flux list(Set roleNames) { + return list(roleNames, false); + } + + @Override + public Flux list(Set roleNames, boolean excludeHidden) { + if (CollectionUtils.isEmpty(roleNames)) { + return Flux.empty(); + } + var builder = ListOptions.builder() + .andQuery(notDeleting()) + .andQuery(QueryFactory.in("metadata.name", roleNames)); + if (excludeHidden) { + builder.labelSelector().notEq(Role.HIDDEN_LABEL_NAME, Boolean.TRUE.toString()); + } + return client.listAll(Role.class, builder.build(), defaultSort()); + } + + @NonNull + private List stringToList(String str) { + if (StringUtils.isBlank(str)) { + return Collections.emptyList(); + } + return JsonUtils.jsonToObject(str, + new TypeReference<>() { + }); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/EmailPasswordRecoveryService.java b/application/src/main/java/run/halo/app/core/extension/service/EmailPasswordRecoveryService.java new file mode 100644 index 0000000..3e1a977 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/EmailPasswordRecoveryService.java @@ -0,0 +1,38 @@ +package run.halo.app.core.extension.service; + +import reactor.core.publisher.Mono; +import run.halo.app.infra.exception.AccessDeniedException; + +/** + * An interface for email password recovery. + * + * @author guqing + * @since 2.11.0 + */ +public interface EmailPasswordRecoveryService { + + /** + *

Send password reset email.

+ * if the user does not exist, it will return {@link Mono#empty()} + * if the user exists, but the email is not the same, it will return {@link Mono#empty()} + * + * @param username username to request password reset + * @param email email to match the user with the username + * @return {@link Mono#empty()} if the user does not exist, or the email is not the same. + */ + Mono sendPasswordResetEmail(String username, String email); + + /** + *

Reset password by token.

+ * if the token is invalid, it will return {@link Mono#error(Throwable)}} + * if the token is valid, but the username is not the same, it will return + * {@link Mono#error(Throwable)} + * + * @param username username to reset password + * @param newPassword new password + * @param token token to validate the user + * @return {@link Mono#empty()} if the token is invalid or the username is not the same. + * @throws AccessDeniedException if the token is invalid + */ + Mono changePassword(String username, String newPassword, String token); +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/EmailVerificationService.java b/application/src/main/java/run/halo/app/core/extension/service/EmailVerificationService.java new file mode 100644 index 0000000..762f92a --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/EmailVerificationService.java @@ -0,0 +1,47 @@ +package run.halo.app.core.extension.service; + +import reactor.core.publisher.Mono; +import run.halo.app.infra.exception.EmailVerificationFailed; + +/** + * Email verification service to handle email verification. + * + * @author guqing + * @since 2.11.0 + */ +public interface EmailVerificationService { + + /** + * Send verification code by given username. + * + * @param username username to verify email must not be blank + * @param email email to send must not be blank + */ + Mono sendVerificationCode(String username, String email); + + /** + * Verify email by given username and code. + * + * @param username username to verify email must not be blank + * @param code code to verify email must not be blank + * @throws EmailVerificationFailed if send failed + */ + Mono verify(String username, String code); + + /** + * Send verification code. + * The only difference is use email as username. + * + * @param email email to send must not be blank + */ + Mono sendRegisterVerificationCode(String email); + + /** + * Verify email by given code. + * + * @param email email as username to verify email must not be blank + * @param code code to verify email must not be blank + * @throws EmailVerificationFailed if send failed + */ + Mono verifyRegisterVerificationCode(String email, String code); +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/PluginService.java b/application/src/main/java/run/halo/app/core/extension/service/PluginService.java new file mode 100644 index 0000000..7c86444 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/PluginService.java @@ -0,0 +1,113 @@ +package run.halo.app.core.extension.service; + +import java.nio.file.Path; +import org.springframework.core.io.Resource; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Plugin; + +public interface PluginService { + + Flux getPresets(); + + /** + * Gets a plugin information by preset name from plugin presets. + * + * @param presetName is preset name of plugin. + * @return plugin preset information. + */ + Mono getPreset(String presetName); + + /** + * Installs a plugin from a temporary Jar path. + * + * @param path is temporary jar path. Do not set the plugin home at here. + * @return created plugin. + */ + Mono install(Path path); + + Mono upgrade(String name, Path path); + + /** + *

Reload a plugin by name.

+ * Note that this method will set spec.enabled to true it means that the plugin + * will be started. + * + * @param name plugin name + * @return an updated plugin reloaded from plugin path + * @throws ServerWebInputException if plugin not found by the given name + * @see Plugin.PluginSpec#setEnabled(Boolean) + */ + Mono reload(String name); + + /** + * Uglify js bundle from all enabled plugins to a single js bundle string. + * + * @return uglified js bundle + */ + Flux uglifyJsBundle(); + + /** + * Uglify css bundle from all enabled plugins to a single css bundle string. + * + * @return uglified css bundle + */ + Flux uglifyCssBundle(); + + /** + *

Generate js/css bundle version for cache control.

+ * This method will list all enabled plugins version and sign it to a string. + * + * @return signed js/css bundle version by all enabled plugins version. + */ + Mono generateBundleVersion(); + + /** + * Retrieves the JavaScript bundle for all enabled plugins. + * + *

This method combines the JavaScript bundles of all enabled plugins into a single bundle + * and returns a representation of this bundle as a resource. + * If the JavaScript bundle already exists and is up-to-date, the existing resource is + * returned; otherwise, a new JavaScript bundle is generated. + * + *

Note: This method may perform IO operations and could potentially block, so it should be + * used in a non-blocking environment. + * + * @param version The version of the CSS bundle to retrieve. + * @return A {@code Mono} object representing the JavaScript bundle. When this + * {@code Mono} is subscribed to, it emits the JavaScript bundle resource if successful, or + * an error signal if an error occurs. + */ + Mono getJsBundle(String version); + + /** + * Retrieves the CSS bundle for all enabled plugins. + * + *

This method combines the CSS bundles of all enabled plugins into a single bundle and + * returns a representation of this bundle as a resource. + * If the CSS bundle already exists and is up-to-date, the existing resource is returned; + * otherwise, a new CSS bundle is generated. + * + *

Note: This method may perform IO operations and could potentially block, so it should be + * used in a non-blocking environment. + * + * @param version The version of the CSS bundle to retrieve. + * @return A {@code Mono} object representing the CSS bundle. When this {@code Mono + * } is subscribed to, it emits the CSS bundle resource if successful, or an error signal if + * an error occurs. + */ + Mono getCssBundle(String version); + + /** + * Enables or disables a plugin by name. + * + * @param pluginName plugin name + * @param requestToEnable request to enable or disable + * @param wait wait for plugin to be enabled or disabled + * @return updated plugin + */ + Mono changeState(String pluginName, boolean requestToEnable, boolean wait); + +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/RoleService.java b/application/src/main/java/run/halo/app/core/extension/service/RoleService.java new file mode 100644 index 0000000..d22beff --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/RoleService.java @@ -0,0 +1,53 @@ +package run.halo.app.core.extension.service; + +import java.util.Collection; +import java.util.Map; +import java.util.Set; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Role; +import run.halo.app.core.extension.RoleBinding; +import run.halo.app.core.extension.RoleBinding.Subject; + +/** + * @author guqing + * @since 2.0.0 + */ +public interface RoleService { + + Flux listRoleBindings(Subject subject); + + Flux getRolesByUsername(String username); + + Mono>> getRolesByUsernames(Collection usernames); + + Mono contains(Collection source, Collection candidates); + + /** + * This method lists all role templates as permissions recursively according to given role + * name set. + * + * @param names is role name set. + * @return an array of permissions. + */ + Flux listPermissions(Set names); + + Flux listDependenciesFlux(Set names); + + /** + * List roles by role names. + * + * @param roleNames role names + * @return roles + */ + Flux list(Set roleNames); + + /** + * List roles by role names. + * + * @param roleNames role names + * @param excludeHidden should exclude hidden roles + * @return roles + */ + Flux list(Set roleNames, boolean excludeHidden); +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/UserService.java b/application/src/main/java/run/halo/app/core/extension/service/UserService.java new file mode 100644 index 0000000..f252d15 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/UserService.java @@ -0,0 +1,29 @@ +package run.halo.app.core.extension.service; + +import java.util.Set; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.User; + +public interface UserService { + + Mono getUser(String username); + + Mono getUserOrGhost(String username); + + Mono updatePassword(String username, String newPassword); + + Mono updateWithRawPassword(String username, String rawPassword); + + Mono grantRoles(String username, Set roles); + + Mono signUp(User user, String password); + + Mono createUser(User user, Set roles); + + Mono confirmPassword(String username, String rawPassword); + + Flux listByEmail(String email); + + String encryptPassword(String rawPassword); +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/UserServiceImpl.java b/application/src/main/java/run/halo/app/core/extension/service/UserServiceImpl.java new file mode 100644 index 0000000..eb55946 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/UserServiceImpl.java @@ -0,0 +1,240 @@ +package run.halo.app.core.extension.service; + +import static org.springframework.data.domain.Sort.Order.asc; +import static org.springframework.data.domain.Sort.Order.desc; +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import java.time.Clock; +import java.time.Duration; +import java.util.HashMap; +import java.util.HashSet; +import java.util.Objects; +import java.util.Optional; +import java.util.Set; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.data.domain.Sort; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Service; +import org.springframework.util.Assert; +import org.springframework.util.CollectionUtils; +import org.springframework.util.StringUtils; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.Role; +import run.halo.app.core.extension.RoleBinding; +import run.halo.app.core.extension.User; +import run.halo.app.event.user.PasswordChangedEvent; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.exception.ExtensionNotFoundException; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.exception.AccessDeniedException; +import run.halo.app.infra.exception.DuplicateNameException; +import run.halo.app.infra.exception.UserNotFoundException; + +@Service +@RequiredArgsConstructor +public class UserServiceImpl implements UserService { + public static final String GHOST_USER_NAME = "ghost"; + + private final ReactiveExtensionClient client; + + private final PasswordEncoder passwordEncoder; + + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + private final ApplicationEventPublisher eventPublisher; + + private final RoleService roleService; + + private Clock clock = Clock.systemUTC(); + + void setClock(Clock clock) { + this.clock = clock; + } + + @Override + public Mono getUser(String username) { + return client.get(User.class, username) + .onErrorMap(ExtensionNotFoundException.class, e -> new UserNotFoundException(username)); + } + + @Override + public Mono getUserOrGhost(String username) { + return client.fetch(User.class, username) + .switchIfEmpty(Mono.defer(() -> client.get(User.class, GHOST_USER_NAME))); + } + + @Override + public Mono updatePassword(String username, String newPassword) { + return getUser(username) + .filter(user -> !Objects.equals(user.getSpec().getPassword(), newPassword)) + .flatMap(user -> { + user.getSpec().setPassword(newPassword); + return client.update(user); + }) + .doOnNext(user -> publishPasswordChangedEvent(username)); + } + + @Override + public Mono updateWithRawPassword(String username, String rawPassword) { + return getUser(username) + .filter(user -> { + if (!StringUtils.hasText(user.getSpec().getPassword())) { + // Check if the old password is set before, or the passwordEncoder#matches + // will complain an error due to null password. + return true; + } + return !passwordEncoder.matches(rawPassword, user.getSpec().getPassword()); + }) + .flatMap(user -> { + user.getSpec().setPassword(passwordEncoder.encode(rawPassword)); + return client.update(user); + }) + .doOnNext(user -> publishPasswordChangedEvent(username)); + } + + @Override + public Mono grantRoles(String username, Set roles) { + return client.get(User.class, username) + .flatMap(user -> { + var bindingsToUpdate = new HashSet(); + var bindingsToDelete = new HashSet(); + var existingRoles = new HashSet(); + var subject = new RoleBinding.Subject(); + subject.setKind(User.KIND); + subject.setApiGroup(User.GROUP); + subject.setName(username); + return roleService.listRoleBindings(subject) + .doOnNext(binding -> { + var roleName = binding.getRoleRef().getName(); + if (roles.contains(roleName)) { + existingRoles.add(roleName); + return; + } + binding.getSubjects().removeIf(RoleBinding.Subject.isUser(username)); + if (CollectionUtils.isEmpty(binding.getSubjects())) { + // remove it if subjects is empty + bindingsToDelete.add(binding); + } else { + bindingsToUpdate.add(binding); + } + }) + .thenMany(Flux.fromIterable(bindingsToUpdate).flatMap(client::update)) + .thenMany(Flux.fromIterable(bindingsToDelete).flatMap(client::delete)) + .thenMany(Flux.fromStream(() -> { + var mutableRoles = new HashSet<>(roles); + mutableRoles.removeAll(existingRoles); + return mutableRoles.stream() + .map(roleName -> RoleBinding.create(username, roleName)); + }).flatMap(client::create)) + .then(Mono.defer(() -> { + var annotations = Optional.ofNullable(user.getMetadata().getAnnotations()) + .orElseGet(HashMap::new); + user.getMetadata().setAnnotations(annotations); + annotations.put(User.REQUEST_TO_UPDATE, clock.instant().toString()); + return client.update(user); + })); + }); + } + + @Override + public Mono signUp(User user, String password) { + if (!StringUtils.hasText(password)) { + throw new IllegalArgumentException("Password must not be blank"); + } + return environmentFetcher.fetch(SystemSetting.User.GROUP, SystemSetting.User.class) + .switchIfEmpty(Mono.error(new IllegalStateException("User setting is not configured"))) + .flatMap(userSetting -> { + Boolean allowRegistration = userSetting.getAllowRegistration(); + if (BooleanUtils.isFalse(allowRegistration)) { + return Mono.error(new AccessDeniedException("Registration is not allowed", + "problemDetail.user.signUpFailed.disallowed", + null)); + } + String defaultRole = userSetting.getDefaultRole(); + if (!StringUtils.hasText(defaultRole)) { + return Mono.error(new AccessDeniedException( + "Default registration role is not configured by admin", + "problemDetail.user.signUpFailed.disallowed", + null)); + } + String encodedPassword = passwordEncoder.encode(password); + user.getSpec().setPassword(encodedPassword); + return createUser(user, Set.of(defaultRole)); + }); + } + + @Override + public Mono createUser(User user, Set roleNames) { + Assert.notNull(user, "User must not be null"); + Assert.notNull(roleNames, "Roles must not be null"); + return client.fetch(User.class, user.getMetadata().getName()) + .hasElement() + .flatMap(hasUser -> { + if (hasUser) { + return Mono.error( + new DuplicateNameException("User name is already in use", null, + "problemDetail.user.duplicateName", + new Object[] {user.getMetadata().getName()})); + } + // Check if all roles exist + return Flux.fromIterable(roleNames) + .flatMap(roleName -> client.fetch(Role.class, roleName) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException( + "Role [" + roleName + "] is not found.")) + ) + ) + .then(); + }) + .then(Mono.defer(() -> client.create(user) + .flatMap(newUser -> grantRoles(user.getMetadata().getName(), roleNames) + .retryWhen( + Retry.backoff(5, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance) + ) + )) + ); + } + + @Override + public Mono confirmPassword(String username, String rawPassword) { + return getUser(username) + .filter(user -> { + if (!StringUtils.hasText(user.getSpec().getPassword())) { + // If the password is not set, return true directly. + return true; + } + if (!StringUtils.hasText(rawPassword)) { + return false; + } + return passwordEncoder.matches(rawPassword, user.getSpec().getPassword()); + }) + .hasElement(); + } + + @Override + public Flux listByEmail(String email) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of(equal("spec.email", email))); + return client.listAll(User.class, listOptions, Sort.by(desc("metadata.creationTimestamp"), + asc("metadata.name")) + ); + } + + @Override + public String encryptPassword(String rawPassword) { + return passwordEncoder.encode(rawPassword); + } + + void publishPasswordChangedEvent(String username) { + eventPublisher.publishEvent(new PasswordChangedEvent(this, username)); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/impl/DefaultAttachmentService.java b/application/src/main/java/run/halo/app/core/extension/service/impl/DefaultAttachmentService.java new file mode 100644 index 0000000..27c885e --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/impl/DefaultAttachmentService.java @@ -0,0 +1,140 @@ +package run.halo.app.core.extension.service.impl; + +import java.net.URI; +import java.time.Duration; +import java.util.function.Consumer; +import java.util.function.Function; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.http.HttpStatus; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Component; +import org.springframework.util.StringUtils; +import org.springframework.web.server.ResponseStatusException; +import org.springframework.web.server.ServerErrorException; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.attachment.Policy; +import run.halo.app.core.extension.attachment.endpoint.AttachmentHandler; +import run.halo.app.core.extension.attachment.endpoint.DeleteOption; +import run.halo.app.core.extension.attachment.endpoint.SimpleFilePart; +import run.halo.app.core.extension.attachment.endpoint.UploadOption; +import run.halo.app.core.extension.service.AttachmentService; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; + +@Component +public class DefaultAttachmentService implements AttachmentService { + + private final ReactiveExtensionClient client; + + private final ExtensionGetter extensionGetter; + + public DefaultAttachmentService(ReactiveExtensionClient client, + ExtensionGetter extensionGetter) { + this.client = client; + this.extensionGetter = extensionGetter; + } + + @Override + public Mono upload( + @NonNull String username, + @NonNull String policyName, + @Nullable String groupName, + @NonNull FilePart filePart, + @Nullable Consumer beforeCreating) { + return client.get(Policy.class, policyName) + .flatMap(policy -> { + var configMapName = policy.getSpec().getConfigMapName(); + if (!StringUtils.hasText(configMapName)) { + return Mono.error(new ServerWebInputException( + "ConfigMap name not found in Policy " + policyName)); + } + return client.get(ConfigMap.class, configMapName) + .map(configMap -> new UploadOption(filePart, policy, configMap)); + }) + .flatMap(uploadContext -> extensionGetter.getExtensions(AttachmentHandler.class) + .concatMap(handler -> handler.upload(uploadContext)) + .next()) + .switchIfEmpty(Mono.error(() -> new ServerErrorException( + "No suitable handler found for uploading the attachment.", null))) + .doOnNext(attachment -> { + var spec = attachment.getSpec(); + if (spec == null) { + spec = new Attachment.AttachmentSpec(); + attachment.setSpec(spec); + } + spec.setOwnerName(username); + if (StringUtils.hasText(groupName)) { + spec.setGroupName(groupName); + } + spec.setPolicyName(policyName); + }) + .doOnNext(attachment -> { + if (beforeCreating != null) { + beforeCreating.accept(attachment); + } + }) + .flatMap(client::create); + } + + @Override + public Mono upload(@NonNull String policyName, + @Nullable String groupName, + @NonNull String filename, + @NonNull Flux content, + @Nullable MediaType mediaType) { + var file = new SimpleFilePart(filename, content, mediaType); + return authenticationConsumer( + authentication -> upload(authentication.getName(), policyName, groupName, file, null)); + } + + @Override + public Mono delete(Attachment attachment) { + var spec = attachment.getSpec(); + return client.get(Policy.class, spec.getPolicyName()) + .flatMap(policy -> client.get(ConfigMap.class, policy.getSpec().getConfigMapName()) + .map(configMap -> new DeleteOption(attachment, policy, configMap))) + .flatMap(deleteOption -> extensionGetter.getExtensions(AttachmentHandler.class) + .concatMap(handler -> handler.delete(deleteOption)) + .next()); + } + + @Override + public Mono getPermalink(Attachment attachment) { + return client.get(Policy.class, attachment.getSpec().getPolicyName()) + .flatMap(policy -> client.get(ConfigMap.class, policy.getSpec().getConfigMapName()) + .flatMap(configMap -> extensionGetter.getExtensions(AttachmentHandler.class) + .concatMap(handler -> handler.getPermalink(attachment, policy, configMap)) + .next() + ) + ); + } + + @Override + public Mono getSharedURL(Attachment attachment, Duration ttl) { + return client.get(Policy.class, attachment.getSpec().getPolicyName()) + .flatMap(policy -> client.get(ConfigMap.class, policy.getSpec().getConfigMapName()) + .flatMap(configMap -> extensionGetter.getExtensions(AttachmentHandler.class) + .concatMap(handler -> handler.getSharedURL(attachment, policy, configMap, ttl)) + .next() + ) + ); + } + + private Mono authenticationConsumer(Function> func) { + return ReactiveSecurityContextHolder.getContext() + .switchIfEmpty(Mono.error(() -> new ResponseStatusException(HttpStatus.UNAUTHORIZED, + "Authentication required."))) + .map(SecurityContext::getAuthentication) + .flatMap(func); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/impl/EmailPasswordRecoveryServiceImpl.java b/application/src/main/java/run/halo/app/core/extension/service/impl/EmailPasswordRecoveryServiceImpl.java new file mode 100644 index 0000000..4fbe8c8 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/impl/EmailPasswordRecoveryServiceImpl.java @@ -0,0 +1,208 @@ +package run.halo.app.core.extension.service.impl; + +import com.google.common.cache.Cache; +import com.google.common.cache.CacheBuilder; +import java.time.Duration; +import java.util.concurrent.TimeUnit; +import java.util.concurrent.atomic.AtomicInteger; +import lombok.Data; +import lombok.RequiredArgsConstructor; +import lombok.experimental.Accessors; +import org.apache.commons.lang3.RandomStringUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.core.extension.service.EmailPasswordRecoveryService; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.ExternalLinkProcessor; +import run.halo.app.infra.exception.AccessDeniedException; +import run.halo.app.infra.exception.RateLimitExceededException; +import run.halo.app.notification.NotificationCenter; +import run.halo.app.notification.NotificationReasonEmitter; +import run.halo.app.notification.UserIdentity; + +/** + * A default implementation for {@link EmailPasswordRecoveryService}. + * + * @author guqing + * @since 2.11.0 + */ +@Component +@RequiredArgsConstructor +public class EmailPasswordRecoveryServiceImpl implements EmailPasswordRecoveryService { + public static final int MAX_ATTEMPTS = 5; + public static final long LINK_EXPIRATION_MINUTES = 30; + static final String RESET_PASSWORD_BY_EMAIL_REASON_TYPE = "reset-password-by-email"; + + private final ResetPasswordVerificationManager resetPasswordVerificationManager = + new ResetPasswordVerificationManager(); + private final ExternalLinkProcessor externalLinkProcessor; + private final ReactiveExtensionClient client; + private final NotificationReasonEmitter reasonEmitter; + private final NotificationCenter notificationCenter; + private final UserService userService; + + @Override + public Mono sendPasswordResetEmail(String username, String email) { + return client.fetch(User.class, username) + .flatMap(user -> { + var userEmail = user.getSpec().getEmail(); + if (!StringUtils.equals(userEmail, email)) { + return Mono.empty(); + } + if (!user.getSpec().isEmailVerified()) { + return Mono.empty(); + } + return sendResetPasswordNotification(username, email); + }); + } + + @Override + public Mono changePassword(String username, String newPassword, String token) { + Assert.state(StringUtils.isNotBlank(username), "Username must not be blank"); + Assert.state(StringUtils.isNotBlank(newPassword), "NewPassword must not be blank"); + Assert.state(StringUtils.isNotBlank(token), "Token for reset password must not be blank"); + var verified = resetPasswordVerificationManager.verifyToken(username, token); + if (!verified) { + return Mono.error(AccessDeniedException::new); + } + return userService.updateWithRawPassword(username, newPassword) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)) + .flatMap(user -> { + resetPasswordVerificationManager.removeToken(username); + return unSubscribeResetPasswordEmailNotification(user.getSpec().getEmail()); + }) + .then(); + } + + Mono unSubscribeResetPasswordEmailNotification(String email) { + if (StringUtils.isBlank(email)) { + return Mono.empty(); + } + var subscriber = new Subscription.Subscriber(); + subscriber.setName(UserIdentity.anonymousWithEmail(email).name()); + return notificationCenter.unsubscribe(subscriber, createInterestReason(email)) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + Mono sendResetPasswordNotification(String username, String email) { + var token = resetPasswordVerificationManager.generateToken(username); + var link = getResetPasswordLink(username, token); + + var subscribeNotification = autoSubscribeResetPasswordEmailNotification(email); + var interestReasonSubject = createInterestReason(email).getSubject(); + var emitReasonMono = reasonEmitter.emit(RESET_PASSWORD_BY_EMAIL_REASON_TYPE, + builder -> builder.attribute("expirationAtMinutes", LINK_EXPIRATION_MINUTES) + .attribute("username", username) + .attribute("link", link) + .author(UserIdentity.of(username)) + .subject(Reason.Subject.builder() + .apiVersion(interestReasonSubject.getApiVersion()) + .kind(interestReasonSubject.getKind()) + .name(interestReasonSubject.getName()) + .title("使用邮箱地址重置密码：" + email) + .build() + ) + ); + return Mono.when(subscribeNotification).then(emitReasonMono); + } + + Mono autoSubscribeResetPasswordEmailNotification(String email) { + var subscriber = new Subscription.Subscriber(); + subscriber.setName(UserIdentity.anonymousWithEmail(email).name()); + var interestReason = createInterestReason(email); + return notificationCenter.subscribe(subscriber, interestReason) + .then(); + } + + Subscription.InterestReason createInterestReason(String email) { + var interestReason = new Subscription.InterestReason(); + interestReason.setReasonType(RESET_PASSWORD_BY_EMAIL_REASON_TYPE); + interestReason.setSubject(Subscription.ReasonSubject.builder() + .apiVersion(new GroupVersion(User.GROUP, User.KIND).toString()) + .kind(User.KIND) + .name(UserIdentity.anonymousWithEmail(email).name()) + .build()); + return interestReason; + } + + private String getResetPasswordLink(String username, String token) { + return externalLinkProcessor.processLink( + "/uc/reset-password/" + username + "?reset_password_token=" + token); + } + + static class ResetPasswordVerificationManager { + private final Cache userTokenCache = + CacheBuilder.newBuilder() + .expireAfterWrite(LINK_EXPIRATION_MINUTES, TimeUnit.MINUTES) + .maximumSize(10000) + .build(); + + private final Cache + blackListCache = CacheBuilder.newBuilder() + .expireAfterWrite(Duration.ofHours(2)) + .maximumSize(1000) + .build(); + + public boolean verifyToken(String username, String token) { + var verification = userTokenCache.getIfPresent(username); + if (verification == null) { + // expired or not generated + return false; + } + if (blackListCache.getIfPresent(username) != null) { + // in blacklist + throw new RateLimitExceededException(null); + } + synchronized (verification) { + if (verification.getAttempts().get() >= MAX_ATTEMPTS) { + // add to blacklist to prevent brute force attack + blackListCache.put(username, true); + return false; + } + if (!verification.getToken().equals(token)) { + verification.getAttempts().incrementAndGet(); + return false; + } + } + return true; + } + + public void removeToken(String username) { + userTokenCache.invalidate(username); + } + + public String generateToken(String username) { + Assert.state(StringUtils.isNotBlank(username), "Username must not be blank"); + var verification = new Verification(); + verification.setToken(RandomStringUtils.randomAlphanumeric(20)); + verification.setAttempts(new AtomicInteger(0)); + userTokenCache.put(username, verification); + return verification.getToken(); + } + + /** + * Only for test. + */ + boolean contains(String username) { + return userTokenCache.getIfPresent(username) != null; + } + + @Data + @Accessors(chain = true) + static class Verification { + private String token; + private AtomicInteger attempts; + } + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/impl/EmailVerificationServiceImpl.java b/application/src/main/java/run/halo/app/core/extension/service/impl/EmailVerificationServiceImpl.java new file mode 100644 index 0000000..857b464 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/impl/EmailVerificationServiceImpl.java @@ -0,0 +1,273 @@ +package run.halo.app.core.extension.service.impl; + +import com.google.common.cache.Cache; +import com.google.common.cache.CacheBuilder; +import java.time.Duration; +import java.util.concurrent.TimeUnit; +import java.util.concurrent.atomic.AtomicInteger; +import lombok.Data; +import lombok.RequiredArgsConstructor; +import lombok.experimental.Accessors; +import org.apache.commons.lang3.RandomStringUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.core.extension.service.EmailVerificationService; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.exception.EmailVerificationFailed; +import run.halo.app.notification.NotificationCenter; +import run.halo.app.notification.NotificationReasonEmitter; +import run.halo.app.notification.UserIdentity; + +/** + * A default implementation of {@link EmailVerificationService}. + * + * @author guqing + * @since 2.11.0 + */ +@Component +@RequiredArgsConstructor +public class EmailVerificationServiceImpl implements EmailVerificationService { + public static final int MAX_ATTEMPTS = 5; + public static final long CODE_EXPIRATION_MINUTES = 10; + static final String EMAIL_VERIFICATION_REASON_TYPE = "email-verification"; + + private final EmailVerificationManager emailVerificationManager = + new EmailVerificationManager(); + private final ReactiveExtensionClient client; + private final NotificationReasonEmitter reasonEmitter; + private final NotificationCenter notificationCenter; + private final UserService userService; + + @Override + public Mono sendVerificationCode(String username, String email) { + Assert.state(StringUtils.isNotBlank(username), "Username must not be blank"); + Assert.state(StringUtils.isNotBlank(email), "Email must not be blank"); + return Mono.defer(() -> client.get(User.class, username) + .flatMap(user -> { + var userEmail = user.getSpec().getEmail(); + var isVerified = user.getSpec().isEmailVerified(); + if (StringUtils.equals(userEmail, email) && isVerified) { + return Mono.error( + () -> new ServerWebInputException("Email already verified.")); + } + var annotations = MetadataUtil.nullSafeAnnotations(user); + var oldEmailToVerify = annotations.get(User.EMAIL_TO_VERIFY); + var unsubMono = unSubscribeVerificationEmailNotification(oldEmailToVerify); + var updateUserAnnoMono = Mono.defer(() -> { + annotations.put(User.EMAIL_TO_VERIFY, email); + return client.update(user); + }); + emailVerificationManager.removeCode(username, oldEmailToVerify); + return Mono.when(unsubMono, updateUserAnnoMono).thenReturn(user); + }) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)) + .flatMap(user -> sendVerificationNotification(username, email)); + } + + @Override + public Mono verify(String username, String code) { + Assert.state(StringUtils.isNotBlank(username), "Username must not be blank"); + Assert.state(StringUtils.isNotBlank(code), "Code must not be blank"); + return Mono.defer(() -> client.get(User.class, username) + .flatMap(user -> verifyUserEmail(user, code)) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + private Mono verifyUserEmail(User user, String code) { + var username = user.getMetadata().getName(); + var annotations = MetadataUtil.nullSafeAnnotations(user); + var emailToVerify = annotations.get(User.EMAIL_TO_VERIFY); + + if (StringUtils.isBlank(emailToVerify)) { + return Mono.error(EmailVerificationFailed::new); + } + + var verified = emailVerificationManager.verifyCode(username, emailToVerify, code); + if (!verified) { + return Mono.error(EmailVerificationFailed::new); + } + + return isEmailInUse(username, emailToVerify) + .flatMap(inUse -> { + if (inUse) { + return Mono.error(new EmailVerificationFailed("Email already in use.", + null, + "problemDetail.user.email.verify.emailInUse", + null) + ); + } + // remove code when verified + emailVerificationManager.removeCode(username, emailToVerify); + user.getSpec().setEmailVerified(true); + user.getSpec().setEmail(emailToVerify); + return client.update(user); + }) + .then(); + } + + Mono isEmailInUse(String username, String emailToVerify) { + return userService.listByEmail(emailToVerify) + .filter(user -> user.getSpec().isEmailVerified()) + .filter(user -> !user.getMetadata().getName().equals(username)) + .hasElements(); + } + + @Override + public Mono sendRegisterVerificationCode(String email) { + Assert.state(StringUtils.isNotBlank(email), "Email must not be blank"); + return sendVerificationNotification(email, email); + } + + @Override + public Mono verifyRegisterVerificationCode(String email, String code) { + Assert.state(StringUtils.isNotBlank(email), "Username must not be blank"); + Assert.state(StringUtils.isNotBlank(code), "Code must not be blank"); + return Mono.just(emailVerificationManager.verifyCode(email, email, code)); + } + + Mono sendVerificationNotification(String username, String email) { + var code = emailVerificationManager.generateCode(username, email); + var subscribeNotification = autoSubscribeVerificationEmailNotification(email); + var interestReasonSubject = createInterestReason(email).getSubject(); + var emitReasonMono = reasonEmitter.emit(EMAIL_VERIFICATION_REASON_TYPE, + builder -> builder.attribute("code", code) + .attribute("expirationAtMinutes", CODE_EXPIRATION_MINUTES) + .attribute("username", username) + .author(UserIdentity.of(username)) + .subject(Reason.Subject.builder() + .apiVersion(interestReasonSubject.getApiVersion()) + .kind(interestReasonSubject.getKind()) + .name(interestReasonSubject.getName()) + .title("验证邮箱：" + email) + .build() + ) + ); + return Mono.when(subscribeNotification).then(emitReasonMono); + } + + Mono autoSubscribeVerificationEmailNotification(String email) { + var subscriber = new Subscription.Subscriber(); + subscriber.setName(UserIdentity.anonymousWithEmail(email).name()); + var interestReason = createInterestReason(email); + return notificationCenter.subscribe(subscriber, interestReason) + .then(); + } + + Mono unSubscribeVerificationEmailNotification(String oldEmail) { + if (StringUtils.isBlank(oldEmail)) { + return Mono.empty(); + } + var subscriber = new Subscription.Subscriber(); + subscriber.setName(UserIdentity.anonymousWithEmail(oldEmail).name()); + return notificationCenter.unsubscribe(subscriber, + createInterestReason(oldEmail)); + } + + Subscription.InterestReason createInterestReason(String email) { + var interestReason = new Subscription.InterestReason(); + interestReason.setReasonType(EMAIL_VERIFICATION_REASON_TYPE); + interestReason.setSubject(Subscription.ReasonSubject.builder() + .apiVersion(new GroupVersion(User.GROUP, User.KIND).toString()) + .kind(User.KIND) + .name(UserIdentity.anonymousWithEmail(email).name()) + .build()); + return interestReason; + } + + /** + * A simple email verification manager that stores the verification code in memory. + * It is a thread-safe class. + * + * @author guqing + * @since 2.11.0 + */ + static class EmailVerificationManager { + private final Cache emailVerificationCodeCache = + CacheBuilder.newBuilder() + .expireAfterWrite(CODE_EXPIRATION_MINUTES, TimeUnit.MINUTES) + .maximumSize(10000) + .build(); + + private final Cache blackListCache = CacheBuilder.newBuilder() + .expireAfterWrite(Duration.ofHours(1)) + .maximumSize(1000) + .build(); + + public boolean verifyCode(String username, String email, String code) { + var key = new UsernameEmail(username, email); + var verification = emailVerificationCodeCache.getIfPresent(key); + if (verification == null) { + // expired or not generated + return false; + } + if (blackListCache.getIfPresent(key) != null) { + // in blacklist + throw new EmailVerificationFailed("Too many attempts. Please try again later.", + null, + "problemDetail.user.email.verify.maxAttempts", + null); + } + synchronized (verification) { + if (verification.getAttempts().get() >= MAX_ATTEMPTS) { + // add to blacklist to prevent brute force attack + blackListCache.put(key, true); + return false; + } + if (!verification.getCode().equals(code)) { + verification.getAttempts().incrementAndGet(); + return false; + } + } + return true; + } + + public void removeCode(String username, String email) { + var key = new UsernameEmail(username, email); + emailVerificationCodeCache.invalidate(key); + } + + public String generateCode(String username, String email) { + Assert.state(StringUtils.isNotBlank(username), "Username must not be blank"); + Assert.state(StringUtils.isNotBlank(email), "Email must not be blank"); + var key = new UsernameEmail(username, email); + var verification = new Verification(); + verification.setCode(RandomStringUtils.randomNumeric(6)); + verification.setAttempts(new AtomicInteger(0)); + emailVerificationCodeCache.put(key, verification); + return verification.getCode(); + } + + /** + * Only for test. + */ + boolean contains(String username, String email) { + return emailVerificationCodeCache + .getIfPresent(new UsernameEmail(username, email)) != null; + } + + record UsernameEmail(String username, String email) { + } + + @Data + @Accessors(chain = true) + static class Verification { + private String code; + private AtomicInteger attempts; + } + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/service/impl/PluginServiceImpl.java b/application/src/main/java/run/halo/app/core/extension/service/impl/PluginServiceImpl.java new file mode 100644 index 0000000..817ea1d --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/service/impl/PluginServiceImpl.java @@ -0,0 +1,638 @@ +package run.halo.app.core.extension.service.impl; + +import static java.nio.file.StandardCopyOption.REPLACE_EXISTING; +import static java.nio.file.StandardOpenOption.CREATE; +import static java.nio.file.StandardOpenOption.TRUNCATE_EXISTING; +import static org.pf4j.PluginState.STARTED; +import static run.halo.app.plugin.PluginConst.RELOAD_ANNO; + +import com.github.zafarkhaja.semver.Version; +import com.google.common.hash.HashCode; +import com.google.common.hash.Hashing; +import java.io.IOException; +import java.nio.charset.StandardCharsets; +import java.nio.file.Files; +import java.nio.file.Path; +import java.time.Clock; +import java.time.Duration; +import java.util.ArrayList; +import java.util.Comparator; +import java.util.HashMap; +import java.util.List; +import java.util.Objects; +import java.util.concurrent.atomic.AtomicBoolean; +import java.util.stream.Collectors; +import lombok.extern.slf4j.Slf4j; +import org.pf4j.DependencyResolver; +import org.pf4j.PluginDescriptor; +import org.pf4j.PluginWrapper; +import org.reactivestreams.Publisher; +import org.springframework.beans.factory.DisposableBean; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.core.io.FileSystemResource; +import org.springframework.core.io.Resource; +import org.springframework.core.io.WritableResource; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.core.io.buffer.DataBufferUtils; +import org.springframework.core.io.buffer.DefaultDataBufferFactory; +import org.springframework.core.io.support.PathMatchingResourcePatternResolver; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.util.CollectionUtils; +import org.springframework.util.FileSystemUtils; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.Exceptions; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Scheduler; +import reactor.core.scheduler.Schedulers; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.Plugin; +import run.halo.app.core.extension.service.PluginService; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.SystemVersionSupplier; +import run.halo.app.infra.exception.PluginAlreadyExistsException; +import run.halo.app.infra.exception.PluginDependenciesNotEnabledException; +import run.halo.app.infra.exception.PluginDependencyException; +import run.halo.app.infra.exception.PluginDependentsNotDisabledException; +import run.halo.app.infra.exception.PluginInstallationException; +import run.halo.app.infra.exception.UnsatisfiedAttributeValueException; +import run.halo.app.infra.utils.FileUtils; +import run.halo.app.infra.utils.VersionUtils; +import run.halo.app.plugin.PluginConst; +import run.halo.app.plugin.PluginUtils; +import run.halo.app.plugin.PluginsRootGetter; +import run.halo.app.plugin.SpringPluginManager; +import run.halo.app.plugin.YamlPluginDescriptorFinder; +import run.halo.app.plugin.YamlPluginFinder; +import run.halo.app.plugin.resources.BundleResourceUtils; + +@Slf4j +@Component +public class PluginServiceImpl implements PluginService, InitializingBean, DisposableBean { + + private static final String PRESET_LOCATION_PREFIX = "classpath:/presets/plugins/"; + private static final String PRESETS_LOCATION_PATTERN = PRESET_LOCATION_PREFIX + "*.jar"; + + private final ReactiveExtensionClient client; + + private final SystemVersionSupplier systemVersion; + + private final PluginsRootGetter pluginsRootGetter; + + private final SpringPluginManager pluginManager; + + private final BundleCache jsBundleCache; + + private final BundleCache cssBundleCache; + + private Path tempDir; + + private final Scheduler scheduler = Schedulers.boundedElastic(); + + private Clock clock = Clock.systemUTC(); + + public PluginServiceImpl(ReactiveExtensionClient client, + SystemVersionSupplier systemVersion, + PluginsRootGetter pluginsRootGetter, + SpringPluginManager pluginManager) { + this.client = client; + this.systemVersion = systemVersion; + this.pluginsRootGetter = pluginsRootGetter; + this.pluginManager = pluginManager; + + this.jsBundleCache = new BundleCache(".js"); + this.cssBundleCache = new BundleCache(".css"); + } + + /** + * The method is only for testing. + * + * @param clock new clock + */ + void setClock(Clock clock) { + Assert.notNull(clock, "Clock must not be null"); + this.clock = clock; + } + + @Override + public Flux getPresets() { + // list presets from classpath + return Flux.defer(() -> getPresetJars() + .map(this::toPath) + .map(path -> new YamlPluginFinder().find(path))); + } + + @Override + public Mono getPreset(String presetName) { + return getPresets() + .filter(plugin -> Objects.equals(plugin.getMetadata().getName(), presetName)) + .next(); + } + + @Override + public Mono install(Path path) { + return findPluginManifest(path) + .doOnNext(plugin -> { + // validate the plugin version + satisfiesRequiresVersion(plugin); + checkDependencies(plugin); + }) + .flatMap(pluginInPath -> + client.fetch(Plugin.class, pluginInPath.getMetadata().getName()) + .flatMap(oldPlugin -> Mono.error( + new PluginAlreadyExistsException(oldPlugin.getMetadata().getName()))) + .switchIfEmpty(Mono.defer( + () -> copyToPluginHome(pluginInPath) + .flatMap(this::findPluginManifest) + .doOnNext(p -> { + // Disable auto enable after installation + p.getSpec().setEnabled(false); + }) + .flatMap(client::create)) + )); + } + + private void checkDependencies(Plugin plugin) { + var resolvedPlugins = new ArrayList<>(pluginManager.getResolvedPlugins()); + var pluginDescriptors = new ArrayList(resolvedPlugins.size() + 1); + + resolvedPlugins.stream() + .map(PluginWrapper::getDescriptor) + .forEach(pluginDescriptors::add); + + var pluginDescriptor = YamlPluginDescriptorFinder.convert(plugin); + pluginDescriptors.add(pluginDescriptor); + + var deptResolver = new DependencyResolver(pluginManager.getVersionManager()); + var result = deptResolver.resolve(pluginDescriptors); + if (result.hasCyclicDependency()) { + throw new PluginDependencyException.CyclicException(); + } + var notFoundDependencies = result.getNotFoundDependencies(); + if (!CollectionUtils.isEmpty(notFoundDependencies)) { + throw new PluginDependencyException.NotFoundException(notFoundDependencies); + } + + var wrongVersionDependencies = result.getWrongVersionDependencies(); + if (!CollectionUtils.isEmpty(wrongVersionDependencies)) { + throw new PluginDependencyException.WrongVersionsException(wrongVersionDependencies); + } + } + + @Override + public Mono upgrade(String name, Path path) { + return findPluginManifest(path) + .doOnNext(plugin -> { + satisfiesRequiresVersion(plugin); + checkDependencies(plugin); + }) + .flatMap(pluginInPath -> { + // pre-check the plugin in the path + Assert.notNull(pluginInPath.statusNonNull().getLoadLocation(), + "plugin.status.load-location must not be null"); + if (!Objects.equals(name, pluginInPath.getMetadata().getName())) { + return Mono.error(new ServerWebInputException( + "The provided plugin " + pluginInPath.getMetadata().getName() + + " didn't match the given plugin " + name)); + } + + // check if the plugin exists + return client.fetch(Plugin.class, name) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException( + "The given plugin with name " + name + " was not found."))) + // copy plugin into plugin home + .flatMap(oldPlugin -> copyToPluginHome(pluginInPath).thenReturn(oldPlugin)) + .doOnNext(oldPlugin -> updatePlugin(oldPlugin, pluginInPath)) + .flatMap(client::update); + }); + } + + @Override + public Mono reload(String name) { + return client.get(Plugin.class, name) + .flatMap(oldPlugin -> { + if (oldPlugin.getStatus() == null + || oldPlugin.getStatus().getLoadLocation() == null) { + return Mono.error(new IllegalStateException( + "Load location of plugin has not been populated.")); + } + var loadLocation = oldPlugin.getStatus().getLoadLocation(); + var loadPath = Path.of(loadLocation); + return findPluginManifest(loadPath) + .doOnNext(newPlugin -> updatePlugin(oldPlugin, newPlugin)) + .thenReturn(oldPlugin); + }) + .flatMap(client::update); + } + + @Override + public Flux uglifyJsBundle() { + var startedPlugins = List.copyOf(pluginManager.getStartedPlugins()); + String plugins = """ + this.enabledPlugins = [%s] + """.formatted(startedPlugins.stream() + .map(plugin -> """ + { + "name": "%s", + "version": "%s" + } + """.formatted(plugin.getPluginId(), plugin.getDescriptor().getVersion()) + ) + .collect(Collectors.joining(", "))); + return Flux.fromIterable(startedPlugins) + .mapNotNull(pluginWrapper -> { + var pluginName = pluginWrapper.getPluginId(); + return BundleResourceUtils.getJsBundleResource(pluginManager, pluginName, + BundleResourceUtils.JS_BUNDLE); + }) + .flatMap(resource -> { + try { + // Specifying bufferSize as resource content length is + // to append line breaks at the end of each plugin + return DataBufferUtils.read(resource, DefaultDataBufferFactory.sharedInstance, + (int) resource.contentLength()) + .doOnNext(dataBuffer -> { + // add a new line after each plugin bundle to avoid syntax error + dataBuffer.write("\n".getBytes(StandardCharsets.UTF_8)); + }); + } catch (IOException e) { + log.error("Failed to read plugin bundle resource", e); + return Flux.empty(); + } + }) + .concatWith(Flux.defer(() -> { + var dataBuffer = DefaultDataBufferFactory.sharedInstance + .wrap(plugins.getBytes(StandardCharsets.UTF_8)); + return Flux.just(dataBuffer); + })); + } + + @Override + public Flux uglifyCssBundle() { + return Flux.fromIterable(pluginManager.getStartedPlugins()) + .mapNotNull(pluginWrapper -> { + String pluginName = pluginWrapper.getPluginId(); + return BundleResourceUtils.getJsBundleResource(pluginManager, pluginName, + BundleResourceUtils.CSS_BUNDLE); + }) + .flatMap(resource -> { + try { + return DataBufferUtils.read(resource, DefaultDataBufferFactory.sharedInstance, + (int) resource.contentLength()); + } catch (IOException e) { + log.error("Failed to read plugin css bundle resource", e); + return Flux.empty(); + } + }); + } + + @Override + public Mono generateBundleVersion() { + if (pluginManager.isDevelopment()) { + return Mono.just(String.valueOf(clock.instant().toEpochMilli())); + } + return Flux.fromIterable(new ArrayList<>(pluginManager.getStartedPlugins())) + .sort(Comparator.comparing(PluginWrapper::getPluginId)) + .map(pw -> pw.getPluginId() + ':' + pw.getDescriptor().getVersion()) + .collect(Collectors.joining()) + .map(Hashing.sha256()::hashUnencodedChars) + .map(HashCode::toString); + } + + @Override + public Mono getJsBundle(String version) { + return jsBundleCache.computeIfAbsent(version, this.uglifyJsBundle()); + } + + @Override + public Mono getCssBundle(String version) { + return cssBundleCache.computeIfAbsent(version, this.uglifyCssBundle()); + } + + @Override + public Mono changeState(String pluginName, boolean requestToEnable, boolean wait) { + var updatedPlugin = Mono.defer(() -> client.get(Plugin.class, pluginName)) + .flatMap(plugin -> { + if (!Objects.equals(requestToEnable, plugin.getSpec().getEnabled())) { + // preflight check + if (requestToEnable) { + // make sure the dependencies are enabled + var dependencies = plugin.getSpec().getPluginDependencies().keySet(); + var notStartedDependencies = dependencies.stream() + .filter(dependency -> { + var pluginWrapper = pluginManager.getPlugin(dependency); + return pluginWrapper == null + || !Objects.equals(STARTED, pluginWrapper.getPluginState()); + }) + .toList(); + if (!CollectionUtils.isEmpty(notStartedDependencies)) { + return Mono.error( + new PluginDependenciesNotEnabledException(notStartedDependencies) + ); + } + } else { + // make sure the dependents are disabled + var dependents = pluginManager.getDependents(pluginName); + var notDisabledDependents = dependents.stream() + .filter( + dependent -> Objects.equals(STARTED, dependent.getPluginState()) + ) + .map(PluginWrapper::getPluginId) + .toList(); + if (!CollectionUtils.isEmpty(notDisabledDependents)) { + return Mono.error( + new PluginDependentsNotDisabledException(notDisabledDependents) + ); + } + } + + plugin.getSpec().setEnabled(requestToEnable); + log.debug("Updating plugin {} state to {}", pluginName, requestToEnable); + return client.update(plugin); + } + log.debug("Checking plugin {} state, no need to update", pluginName); + return Mono.just(plugin); + }); + + if (wait) { + // if we want to wait the state of plugin to be updated + updatedPlugin = updatedPlugin + .flatMap(plugin -> { + var phase = plugin.statusNonNull().getPhase(); + if (requestToEnable) { + // if we request to enable the plugin + if (!(Plugin.Phase.STARTED.equals(phase) + || Plugin.Phase.FAILED.equals(phase))) { + return Mono.error(UnexpectedPluginStateException::new); + } + } else { + // if we request to disable the plugin + if (Plugin.Phase.STARTED.equals(phase)) { + return Mono.error(UnexpectedPluginStateException::new); + } + } + return Mono.just(plugin); + }) + .retryWhen( + Retry.backoff(10, Duration.ofMillis(100)) + .filter(UnexpectedPluginStateException.class::isInstance) + .doBeforeRetry(signal -> + log.debug("Waiting for plugin {} to meet expected state", pluginName) + ) + ) + .doOnSuccess(plugin -> { + log.info("Plugin {} met expected state {}", + pluginName, plugin.statusNonNull().getPhase()); + }); + } + + return updatedPlugin; + } + + Mono findPluginManifest(Path path) { + return Mono.fromSupplier( + () -> { + final var pluginFinder = new YamlPluginFinder(); + return pluginFinder.find(path); + }) + .onErrorMap(e -> new PluginInstallationException("Failed to parse the plugin manifest", + "problemDetail.plugin.missingManifest", null) + ); + } + + + @Override + public void afterPropertiesSet() throws Exception { + this.tempDir = Files.createTempDirectory("halo-plugin-bundle"); + } + + @Override + public void destroy() throws Exception { + FileSystemUtils.deleteRecursively(this.tempDir); + } + + /** + * Set temporary directory for plugin bundle. + * + * @param tempDir temporary directory. + */ + void setTempDir(Path tempDir) { + this.tempDir = tempDir; + } + + /** + * Copy plugin into plugin home. + * + * @param plugin is a staging plugin. + * @return new path in plugin home. + */ + private Mono copyToPluginHome(Plugin plugin) { + return Mono.fromCallable( + () -> { + var fileName = PluginUtils.generateFileName(plugin); + var pluginRoot = pluginsRootGetter.get(); + try { + Files.createDirectories(pluginRoot); + } catch (IOException e) { + throw Exceptions.propagate(e); + } + var pluginFilePath = pluginRoot.resolve(fileName); + FileUtils.checkDirectoryTraversal(pluginRoot, pluginFilePath); + // move the plugin jar file to the plugin root + // replace the old plugin jar file if exists + var path = Path.of(plugin.getStatus().getLoadLocation()); + FileUtils.copy(path, pluginFilePath, REPLACE_EXISTING); + return pluginFilePath; + }) + .subscribeOn(Schedulers.boundedElastic()) + .doOnNext(loadLocation -> { + // reset load location and annotation PLUGIN_PATH + plugin.getStatus().setLoadLocation(loadLocation.toUri()); + var annotations = plugin.getMetadata().getAnnotations(); + if (annotations == null) { + annotations = new HashMap<>(); + plugin.getMetadata().setAnnotations(annotations); + } + annotations.put(PluginConst.PLUGIN_PATH, loadLocation.toString()); + }); + } + + private void satisfiesRequiresVersion(Plugin newPlugin) { + Assert.notNull(newPlugin, "The plugin must not be null."); + Version version = systemVersion.get(); + // validate the plugin version + // only use the nominal system version to compare, the format is like MAJOR.MINOR.PATCH + String systemVersion = version.getNormalVersion(); + String requires = newPlugin.getSpec().getRequires(); + if (!VersionUtils.satisfiesRequires(systemVersion, requires)) { + throw new UnsatisfiedAttributeValueException(String.format( + "Plugin requires a minimum system version of [%s], but the current version is " + + "[%s].", + requires, systemVersion), + "problemDetail.plugin.version.unsatisfied.requires", + new String[] {requires, systemVersion}); + } + } + + private Flux getPresetJars() { + var resolver = new PathMatchingResourcePatternResolver(); + try { + var resources = resolver.getResources(PRESETS_LOCATION_PATTERN); + return Flux.fromArray(resources); + } catch (IOException e) { + return Flux.error(e); + } + } + + private Path toPath(Resource resource) { + try { + return Path.of(resource.getURI()); + } catch (IOException e) { + throw Exceptions.propagate(e); + } + } + + private static void updatePlugin(Plugin oldPlugin, Plugin newPlugin) { + var oldMetadata = oldPlugin.getMetadata(); + var newMetadata = newPlugin.getMetadata(); + // merge labels + if (!CollectionUtils.isEmpty(newMetadata.getLabels())) { + var labels = oldMetadata.getLabels(); + if (labels == null) { + labels = new HashMap<>(); + oldMetadata.setLabels(labels); + } + labels.putAll(newMetadata.getLabels()); + } + + var annotations = oldMetadata.getAnnotations(); + if (annotations == null) { + annotations = new HashMap<>(); + oldMetadata.setAnnotations(annotations); + } + + // merge annotations + if (!CollectionUtils.isEmpty(newMetadata.getAnnotations())) { + annotations.putAll(newMetadata.getAnnotations()); + } + + // request to reload + annotations.put(RELOAD_ANNO, + newPlugin.getStatus().getLoadLocation().toString()); + + // apply spec and keep enabled request + var enabled = oldPlugin.getSpec().getEnabled(); + oldPlugin.setSpec(newPlugin.getSpec()); + oldPlugin.getSpec().setEnabled(enabled); + } + + class BundleCache { + + private final String suffix; + + private final AtomicBoolean writing = new AtomicBoolean(); + + private volatile Resource resource; + + BundleCache(String suffix) { + this.suffix = suffix; + } + + Mono computeIfAbsent(String version, Publisher content) { + var filename = buildBundleFilename(version, suffix); + if (isResourceMatch(resource, filename)) { + return Mono.just(resource); + } + return generateBundleVersion() + .flatMap(newVersion -> { + var newFilename = buildBundleFilename(newVersion, suffix); + if (isResourceMatch(this.resource, newFilename)) { + // if the resource was not changed, just return it + return Mono.just(resource); + } + if (writing.compareAndSet(false, true)) { + return Mono.justOrEmpty(this.resource) + // double check of the resource + .filter(res -> isResourceMatch(res, newFilename)) + .switchIfEmpty(Mono.using( + () -> { + if (!Files.exists(tempDir)) { + Files.createDirectories(tempDir); + } + return tempDir.resolve(newFilename); + }, + path -> DataBufferUtils.write(content, path, + CREATE, TRUNCATE_EXISTING) + .then(Mono.fromSupplier( + () -> new FileSystemResource(path) + )), + path -> { + if (shouldCleanUp(path)) { + // clean up old resource + cleanUp(this.resource); + } + }) + .subscribeOn(scheduler) + .doOnNext(newResource -> this.resource = newResource) + ) + .doFinally(signalType -> writing.set(false)); + } else { + return Mono.defer(() -> { + if (this.writing.get()) { + log.debug("Waiting for the bundle file {} to be written", filename); + return Mono.empty(); + } + log.debug("Waited the bundle file {} to be written", filename); + return Mono.just(this.resource); + }).repeatWhenEmpty(100, count -> { + // retry after 100ms + return count.delayElements(Duration.ofMillis(100)); + }); + } + }); + } + + private boolean shouldCleanUp(Path newPath) { + if (this.resource == null || !this.resource.exists()) { + return false; + } + try { + var oldPath = this.resource.getFile().toPath(); + return !oldPath.equals(newPath); + } catch (IOException e) { + return false; + } + } + + private static void cleanUp(Resource resource) { + if (resource instanceof WritableResource wr + && wr.isWritable() + && wr.isFile()) { + try { + Files.deleteIfExists(wr.getFile().toPath()); + } catch (IOException e) { + log.warn("Failed to delete old bundle file {}", + wr.getFilename(), e); + } + } + } + + private static boolean isResourceMatch(Resource resource, String filename) { + return resource != null + && resource.exists() + && resource.isFile() + && Objects.equals(filename, resource.getFilename()); + } + } + + private static String buildBundleFilename(String v, String suffix) { + Assert.notNull(v, "Version must not be null"); + Assert.notNull(suffix, "Suffix must not be null"); + return v + suffix; + } + + private static class UnexpectedPluginStateException extends RuntimeException { + } + +} diff --git a/application/src/main/java/run/halo/app/core/extension/theme/SettingUtils.java b/application/src/main/java/run/halo/app/core/extension/theme/SettingUtils.java new file mode 100644 index 0000000..0a3b33b --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/theme/SettingUtils.java @@ -0,0 +1,175 @@ +package run.halo.app.core.extension.theme; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import com.fasterxml.jackson.core.JacksonException; +import com.fasterxml.jackson.databind.JsonNode; +import com.fasterxml.jackson.databind.node.JsonNodeFactory; +import com.fasterxml.jackson.databind.node.ObjectNode; +import com.github.fge.jsonpatch.JsonPatchException; +import com.github.fge.jsonpatch.mergepatch.JsonMergePatch; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import java.util.stream.Collectors; +import lombok.experimental.UtilityClass; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; +import org.springframework.util.CollectionUtils; +import run.halo.app.core.extension.Setting; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.Metadata; +import run.halo.app.infra.utils.JsonParseException; +import run.halo.app.infra.utils.JsonUtils; + +@UtilityClass +public class SettingUtils { + private static final String VALUE_FIELD = "value"; + private static final String NAME_FIELD = "name"; + + /** + * Read setting default value from {@link Setting} forms. + * + * @param setting {@link Setting} extension + * @return a map of setting default value + */ + @NonNull + public static Map settingDefinedDefaultValueMap(Setting setting) { + List forms = setting.getSpec().getForms(); + if (CollectionUtils.isEmpty(forms)) { + return Map.of(); + } + Map data = new LinkedHashMap<>(); + for (Setting.SettingForm form : forms) { + String group = form.getGroup(); + Map groupValue = form.getFormSchema().stream() + .map(o -> JsonUtils.DEFAULT_JSON_MAPPER.convertValue(o, JsonNode.class)) + .filter(jsonNode -> jsonNode.isObject() && jsonNode.has(NAME_FIELD) + && jsonNode.has(VALUE_FIELD)) + .map(jsonNode -> { + String name = jsonNode.get(NAME_FIELD).asText(); + JsonNode value = jsonNode.get(VALUE_FIELD); + return Map.entry(name, value); + }) + .collect(Collectors.toMap(Map.Entry::getKey, Map.Entry::getValue)); + data.put(group, JsonUtils.objectToJson(groupValue)); + } + return data; + } + + /** + * Create or update config map by provided setting name and configMapName. + * + * @param client extension client + * @param settingName a name for {@link Setting} + * @param configMapName a name for {@link ConfigMap} + */ + public static void createOrUpdateConfigMap(ExtensionClient client, String settingName, + String configMapName) { + Assert.notNull(client, "Extension client must not be null"); + Assert.hasText(settingName, "Setting name must not be blank"); + Assert.hasText(configMapName, "Config map name must not be blank"); + + client.fetch(Setting.class, settingName) + .ifPresent(setting -> { + final var source = SettingUtils.settingDefinedDefaultValueMap(setting); + client.fetch(ConfigMap.class, configMapName) + .ifPresentOrElse(configMap -> { + Map modified = defaultIfNull(configMap.getData(), Map.of()); + final var oldData = JsonUtils.deepCopy(modified); + + Map merged = SettingUtils.mergePatch(modified, source); + configMap.setData(merged); + + if (!Objects.equals(oldData, configMap.getData())) { + client.update(configMap); + } + }, () -> { + ConfigMap configMap = new ConfigMap(); + configMap.setMetadata(new Metadata()); + configMap.getMetadata().setName(configMapName); + configMap.setData(source); + client.create(configMap); + }); + }); + } + + public static ConfigMap populateDefaultConfig(Setting setting, String configMapName) { + var data = settingDefinedDefaultValueMap(setting); + ConfigMap configMap = new ConfigMap(); + configMap.setMetadata(new Metadata()); + configMap.getMetadata().setName(configMapName); + configMap.setData(data); + return configMap; + } + + /** + * Construct a JsonMergePatch from a difference between two Maps and apply patch to + * {@code source}. + * + * @param modified the modified object + * @param source the source object + * @return patched map object + */ + public static Map mergePatch(Map modified, + Map source) { + JsonNode modifiedJson = mapToJsonNode(modified); + // original + JsonNode sourceJson = mapToJsonNode(source); + try { + // patch + JsonMergePatch jsonMergePatch = JsonMergePatch.fromJson(modifiedJson); + // apply patch to original + JsonNode patchedNode = jsonMergePatch.apply(sourceJson); + return jsonNodeToStringMap(patchedNode); + } catch (JsonPatchException e) { + throw new JsonParseException(e); + } + } + + JsonNode mapToJsonNode(Map map) { + ObjectNode objectNode = JsonNodeFactory.instance.objectNode(); + map.forEach((k, v) -> { + if (isJson(v)) { + JsonNode value = JsonUtils.jsonToObject(v, JsonNode.class); + objectNode.set(k, value); + return; + } + objectNode.put(k, v); + }); + return objectNode; + } + + Map jsonNodeToStringMap(JsonNode node) { + Map stringMap = new LinkedHashMap<>(); + node.fields().forEachRemaining(entry -> { + String k = entry.getKey(); + JsonNode v = entry.getValue(); + if (v == null || v.isNull() || v.isMissingNode()) { + stringMap.put(k, null); + return; + } + if (v.isTextual()) { + stringMap.put(k, v.asText()); + return; + } + if (v.isContainerNode()) { + stringMap.put(k, JsonUtils.objectToJson(v)); + return; + } + stringMap.put(k, v.asText()); + }); + return stringMap; + } + + boolean isJson(String jsonString) { + try { + JsonUtils.DEFAULT_JSON_MAPPER.readTree(jsonString); + return true; + } catch (JacksonException e) { + return false; + } + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/theme/ThemeEndpoint.java b/application/src/main/java/run/halo/app/core/extension/theme/ThemeEndpoint.java new file mode 100644 index 0000000..9cc4210 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/theme/ThemeEndpoint.java @@ -0,0 +1,537 @@ +package run.halo.app.core.extension.theme; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; +import static org.springframework.http.HttpStatus.NO_CONTENT; +import static org.springframework.web.reactive.function.server.RequestPredicates.contentType; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import java.net.URI; +import java.nio.file.Path; +import java.nio.file.Paths; +import java.time.Duration; +import java.util.List; +import lombok.AllArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import org.springframework.http.codec.multipart.Part; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.util.MultiValueMap; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.Setting; +import run.halo.app.core.extension.Theme; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.IListRequest; +import run.halo.app.infra.ReactiveUrlDataBufferFetcher; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.ThemeRootGetter; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.theme.TemplateEngineManager; + +/** + * Endpoint for managing themes. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +@AllArgsConstructor +public class ThemeEndpoint implements CustomEndpoint { + + private final ReactiveExtensionClient client; + + private final ThemeRootGetter themeRoot; + + private final ThemeService themeService; + + private final TemplateEngineManager templateEngineManager; + + private final SystemConfigurableEnvironmentFetcher systemEnvironmentFetcher; + + private final ReactiveUrlDataBufferFetcher urlDataBufferFetcher; + + @Override + public RouterFunction endpoint() { + var tag = "ThemeV1alpha1Console"; + return SpringdocRouteBuilder.route() + .POST("themes/install", contentType(MediaType.MULTIPART_FORM_DATA), + this::install, builder -> builder.operationId("InstallTheme") + .description("Install a theme by uploading a zip file.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.MULTIPART_FORM_DATA_VALUE) + .schema(schemaBuilder() + .implementation(InstallRequest.class)) + )) + .response(responseBuilder() + .implementation(Theme.class)) + ) + .POST("themes/-/install-from-uri", this::installFromUri, + builder -> builder.operationId("InstallThemeFromUri") + .description("Install a theme from uri.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(schemaBuilder() + .implementation(InstallFromUriRequest.class)) + )) + .response(responseBuilder() + .implementation(Theme.class)) + ) + .POST("themes/{name}/upgrade-from-uri", this::upgradeFromUri, + builder -> builder.operationId("UpgradeThemeFromUri") + .description("Upgrade a theme from uri.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .required(true) + ) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(schemaBuilder() + .implementation(UpgradeFromUriRequest.class)) + )) + .response(responseBuilder() + .implementation(Theme.class)) + ) + .POST("themes/{name}/upgrade", this::upgrade, + builder -> builder.operationId("UpgradeTheme") + .description("Upgrade theme") + .tag(tag) + .parameter(parameterBuilder().in(ParameterIn.PATH).name("name").required(true)) + .requestBody(requestBodyBuilder().required(true) + .content(contentBuilder().mediaType(MediaType.MULTIPART_FORM_DATA_VALUE) + .schema(schemaBuilder().implementation(UpgradeRequest.class)))) + .build()) + .PUT("themes/{name}/reload", this::reloadTheme, + builder -> builder.operationId("Reload") + .description("Reload theme setting.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(Theme.class)) + ) + .PUT("themes/{name}/reset-config", this::resetSettingConfig, + builder -> builder.operationId("ResetThemeConfig") + .description("Reset the configMap of theme setting.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(ConfigMap.class)) + ) + .PUT("themes/{name}/config", this::updateThemeConfig, + builder -> builder.operationId("updateThemeConfig") + .description("Update the configMap of theme setting.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder().mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(schemaBuilder().implementation(ConfigMap.class)))) + .response(responseBuilder() + .implementation(ConfigMap.class)) + ) + .PUT("themes/{name}/activation", this::activateTheme, + builder -> builder.operationId("activateTheme") + .description("Activate a theme by name.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(Theme.class)) + ) + .PUT("/themes/{name}/invalidate-cache", this::invalidateCache, + builder -> builder.operationId("InvalidateCache") + .description("Invalidate theme template cache.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .responseCode(String.valueOf(NO_CONTENT.value())) + ) + ) + .GET("themes", this::listThemes, + builder -> { + builder.operationId("ListThemes") + .description("List themes.") + .tag(tag) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(Theme.class))); + ThemeQuery.buildParameters(builder); + } + ) + .GET("themes/-/activation", this::fetchActivatedTheme, + builder -> builder.operationId("fetchActivatedTheme") + .description("Fetch the activated theme.") + .tag(tag) + .response(responseBuilder() + .implementation(Theme.class)) + ) + .GET("themes/{name}/setting", this::fetchThemeSetting, + builder -> builder.operationId("fetchThemeSetting") + .description("Fetch setting of theme.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(Setting.class)) + ) + .GET("themes/{name}/config", this::fetchThemeConfig, + builder -> builder.operationId("fetchThemeConfig") + .description("Fetch configMap of theme by configured configMapName.") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class) + ) + .response(responseBuilder() + .implementation(ConfigMap.class)) + ) + .build(); + } + + private Mono invalidateCache(ServerRequest request) { + final var name = request.pathVariable("name"); + return client.get(Theme.class, name) + .flatMap(theme -> templateEngineManager.clearCache(name)) + .then(ServerResponse.noContent().build()); + } + + private Mono upgradeFromUri(ServerRequest request) { + final var name = request.pathVariable("name"); + var content = request.bodyToMono(UpgradeFromUriRequest.class) + .map(UpgradeFromUriRequest::uri) + .flatMapMany(urlDataBufferFetcher::fetch); + + return themeService.upgrade(name, content) + .flatMap((updatedTheme) -> + templateEngineManager.clearCache(updatedTheme.getMetadata().getName()) + .thenReturn(updatedTheme) + ) + .flatMap(theme -> ServerResponse.ok().bodyValue(theme)); + } + + private Mono installFromUri(ServerRequest request) { + var content = request.bodyToMono(InstallFromUriRequest.class) + .map(InstallFromUriRequest::uri) + .flatMapMany(urlDataBufferFetcher::fetch); + + return themeService.install(content) + .flatMap(theme -> ServerResponse.ok().bodyValue(theme)); + } + + private Mono activateTheme(ServerRequest request) { + final var activatedThemeName = request.pathVariable("name"); + return client.fetch(Theme.class, activatedThemeName) + .switchIfEmpty(Mono.error(new NotFoundException("Theme not found."))) + .flatMap(theme -> systemEnvironmentFetcher.fetch(SystemSetting.Theme.GROUP, + SystemSetting.Theme.class) + .flatMap(themeSetting -> { + // update active theme config + themeSetting.setActive(activatedThemeName); + return systemEnvironmentFetcher.getConfigMap() + .filter(configMap -> configMap.getData() != null) + .map(configMap -> { + var themeConfigJson = JsonUtils.objectToJson(themeSetting); + configMap.getData() + .put(SystemSetting.Theme.GROUP, themeConfigJson); + return configMap; + }); + }) + .flatMap(client::update) + .retryWhen(Retry.backoff(5, Duration.ofMillis(300)) + .filter(OptimisticLockingFailureException.class::isInstance) + ) + .thenReturn(theme) + ) + .flatMap(activatedTheme -> ServerResponse.ok().bodyValue(activatedTheme)); + } + + private Mono updateThemeConfig(ServerRequest request) { + final var themeName = request.pathVariable("name"); + return client.fetch(Theme.class, themeName) + .doOnNext(theme -> { + String configMapName = theme.getSpec().getConfigMapName(); + if (StringUtils.isBlank(configMapName)) { + throw new ServerWebInputException( + "Unable to complete the request because the theme configMapName is blank."); + } + }) + .flatMap(theme -> { + final var configMapName = theme.getSpec().getConfigMapName(); + return request.bodyToMono(ConfigMap.class) + .doOnNext(configMapToUpdate -> { + var configMapNameToUpdate = configMapToUpdate.getMetadata().getName(); + if (!configMapName.equals(configMapNameToUpdate)) { + throw new ServerWebInputException( + "The name from the request body does not match the theme " + + "configMapName name."); + } + }) + .flatMap(configMapToUpdate -> client.fetch(ConfigMap.class, configMapName) + .map(persisted -> { + configMapToUpdate.getMetadata() + .setVersion(persisted.getMetadata().getVersion()); + return configMapToUpdate; + }) + .switchIfEmpty(client.create(configMapToUpdate)) + ) + .flatMap(client::update) + .retryWhen(Retry.backoff(5, Duration.ofMillis(300)) + .filter(OptimisticLockingFailureException.class::isInstance) + ); + }) + .flatMap(configMap -> ServerResponse.ok().bodyValue(configMap)); + } + + private Mono fetchThemeConfig(ServerRequest request) { + return themeNameInPathVariableOrActivated(request) + .flatMap(themeName -> client.fetch(Theme.class, themeName)) + .mapNotNull(theme -> theme.getSpec().getConfigMapName()) + .flatMap(configMapName -> client.fetch(ConfigMap.class, configMapName)) + .flatMap(configMap -> ServerResponse.ok().bodyValue(configMap)); + } + + private Mono fetchActivatedTheme(ServerRequest request) { + return systemEnvironmentFetcher.fetch(SystemSetting.Theme.GROUP, SystemSetting.Theme.class) + .map(SystemSetting.Theme::getActive) + .flatMap(activatedName -> client.fetch(Theme.class, activatedName)) + .flatMap(theme -> ServerResponse.ok().bodyValue(theme)); + } + + private Mono fetchThemeSetting(ServerRequest request) { + return themeNameInPathVariableOrActivated(request) + .flatMap(name -> client.fetch(Theme.class, name)) + .mapNotNull(theme -> theme.getSpec().getSettingName()) + .flatMap(settingName -> client.fetch(Setting.class, settingName)) + .flatMap(setting -> ServerResponse.ok().bodyValue(setting)); + } + + private Mono themeNameInPathVariableOrActivated(ServerRequest request) { + Assert.notNull(request, "request must not be null."); + return Mono.fromSupplier(() -> request.pathVariable("name")) + .flatMap(name -> { + if ("-".equals(name)) { + return systemEnvironmentFetcher.fetch(SystemSetting.Theme.GROUP, + SystemSetting.Theme.class) + .mapNotNull(SystemSetting.Theme::getActive) + .defaultIfEmpty(name); + } + return Mono.just(name); + }); + } + + public static class ThemeQuery extends IListRequest.QueryListRequest { + + public ThemeQuery(MultiValueMap queryParams) { + super(queryParams); + } + + @NonNull + public Boolean getUninstalled() { + return Boolean.parseBoolean(queryParams.getFirst("uninstalled")); + } + + public static void buildParameters(Builder builder) { + IListRequest.buildParameters(builder); + builder.parameter(parameterBuilder() + .name("uninstalled") + .description("Whether to list uninstalled themes.") + .in(ParameterIn.QUERY) + .implementation(Boolean.class) + .required(false)); + } + } + + // TODO Extract the method into ThemeService + Mono listThemes(ServerRequest request) { + MultiValueMap queryParams = request.queryParams(); + ThemeQuery query = new ThemeQuery(queryParams); + return Mono.defer(() -> { + if (query.getUninstalled()) { + return listUninstalled(query); + } + return client.list(Theme.class, null, null, query.getPage(), query.getSize()); + }).flatMap(extensions -> ServerResponse.ok().bodyValue(extensions)); + } + + public interface IUpgradeRequest { + + @Schema(requiredMode = REQUIRED, description = "Theme zip file.") + FilePart getFile(); + + } + + public record UpgradeFromUriRequest(@Schema(requiredMode = REQUIRED) URI uri) { + } + + public static class UpgradeRequest implements IUpgradeRequest { + + private final MultiValueMap multipartData; + + public UpgradeRequest(MultiValueMap multipartData) { + this.multipartData = multipartData; + } + + @Override + public FilePart getFile() { + var part = multipartData.getFirst("file"); + if (!(part instanceof FilePart filePart)) { + throw new ServerWebInputException("Invalid multipart type of file"); + } + if (!filePart.filename().endsWith(".zip")) { + throw new ServerWebInputException("Only zip extension supported"); + } + return filePart; + } + + } + + private Mono upgrade(ServerRequest request) { + // validate the theme first + var name = request.pathVariable("name"); + return request.multipartData() + .map(UpgradeRequest::new) + .map(UpgradeRequest::getFile) + .flatMap(filePart -> themeService.upgrade(name, filePart.content())) + .flatMap((updatedTheme) -> + templateEngineManager.clearCache(updatedTheme.getMetadata().getName()) + .thenReturn(updatedTheme)) + .flatMap(updatedTheme -> ServerResponse.ok().bodyValue(updatedTheme)); + } + + Mono> listUninstalled(ThemeQuery query) { + Path path = themeRoot.get(); + return ThemeUtils.listAllThemesFromThemeDir(path) + .collectList() + .flatMap(this::filterUnInstalledThemes) + .map(themes -> { + Integer page = query.getPage(); + Integer size = query.getSize(); + List subList = ListResult.subList(themes, page, size); + return new ListResult<>(page, size, themes.size(), subList); + }); + } + + private Mono> filterUnInstalledThemes(@NonNull List allThemes) { + return client.list(Theme.class, null, null) + .map(theme -> theme.getMetadata().getName()) + .collectList() + .map(installed -> allThemes.stream() + .filter(theme -> !installed.contains(theme.getMetadata().getName())) + .toList() + ); + } + + Mono reloadTheme(ServerRequest request) { + String name = request.pathVariable("name"); + return themeService.reloadTheme(name) + .flatMap(theme -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(theme)); + } + + Mono resetSettingConfig(ServerRequest request) { + String name = request.pathVariable("name"); + return themeService.resetSettingConfig(name) + .flatMap(theme -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(theme)); + } + + @Schema(name = "ThemeInstallRequest", types = "object") + public static class InstallRequest { + + @Schema(hidden = true) + private final MultiValueMap multipartData; + + public InstallRequest(MultiValueMap multipartData) { + this.multipartData = multipartData; + } + + @Schema(requiredMode = REQUIRED, description = "Theme zip file.") + FilePart getFile() { + Part part = multipartData.getFirst("file"); + if (!(part instanceof FilePart file)) { + throw new ServerWebInputException( + "Invalid parameter of file, binary data is required"); + } + if (!Paths.get(file.filename()).toString().endsWith(".zip")) { + throw new ServerWebInputException( + "Invalid file type, only zip format is supported"); + } + return file; + } + } + + public record InstallFromUriRequest(@Schema(requiredMode = REQUIRED) URI uri) { + } + + Mono install(ServerRequest request) { + return request.multipartData() + .map(InstallRequest::new) + .map(InstallRequest::getFile) + .flatMap(filePart -> themeService.install(filePart.content())) + .flatMap(theme -> ServerResponse.ok().bodyValue(theme)); + } + +} diff --git a/application/src/main/java/run/halo/app/core/extension/theme/ThemeService.java b/application/src/main/java/run/halo/app/core/extension/theme/ThemeService.java new file mode 100644 index 0000000..a3954a3 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/theme/ThemeService.java @@ -0,0 +1,20 @@ +package run.halo.app.core.extension.theme; + +import org.reactivestreams.Publisher; +import org.springframework.core.io.buffer.DataBuffer; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Theme; +import run.halo.app.extension.ConfigMap; + +public interface ThemeService { + + Mono install(Publisher content); + + Mono upgrade(String themeName, Publisher content); + + Mono reloadTheme(String name); + + Mono resetSettingConfig(String name); + // TODO Migrate other useful methods in ThemeEndpoint in the future. + +} diff --git a/application/src/main/java/run/halo/app/core/extension/theme/ThemeServiceImpl.java b/application/src/main/java/run/halo/app/core/extension/theme/ThemeServiceImpl.java new file mode 100644 index 0000000..a3abfed --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/theme/ThemeServiceImpl.java @@ -0,0 +1,322 @@ +package run.halo.app.core.extension.theme; + +import static org.springframework.util.FileSystemUtils.copyRecursively; +import static run.halo.app.core.extension.theme.ThemeUtils.loadThemeManifest; +import static run.halo.app.core.extension.theme.ThemeUtils.locateThemeManifest; +import static run.halo.app.core.extension.theme.ThemeUtils.unzipThemeTo; +import static run.halo.app.infra.utils.FileUtils.createTempDir; +import static run.halo.app.infra.utils.FileUtils.deleteRecursivelyAndSilently; +import static run.halo.app.infra.utils.FileUtils.unzip; + +import java.nio.file.Path; +import java.time.Duration; +import java.util.HashMap; +import java.util.Map; +import java.util.Objects; +import java.util.function.Predicate; +import lombok.AllArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.reactivestreams.Publisher; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.retry.RetryException; +import org.springframework.stereotype.Service; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerErrorException; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Scheduler; +import reactor.core.scheduler.Schedulers; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.AnnotationSetting; +import run.halo.app.core.extension.Setting; +import run.halo.app.core.extension.Theme; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Unstructured; +import run.halo.app.infra.SystemVersionSupplier; +import run.halo.app.infra.ThemeRootGetter; +import run.halo.app.infra.exception.ThemeUpgradeException; +import run.halo.app.infra.exception.UnsatisfiedAttributeValueException; +import run.halo.app.infra.utils.VersionUtils; + +@Slf4j +@Service +@AllArgsConstructor +public class ThemeServiceImpl implements ThemeService { + + private final ReactiveExtensionClient client; + + private final ThemeRootGetter themeRoot; + + private final SystemVersionSupplier systemVersionSupplier; + + private final Scheduler scheduler = Schedulers.boundedElastic(); + + @Override + public Mono install(Publisher content) { + var themeRoot = this.themeRoot.get(); + return unzipThemeTo(content, themeRoot, scheduler) + .flatMap(this::persistent); + } + + @Override + public Mono upgrade(String themeName, Publisher content) { + var checkTheme = client.fetch(Theme.class, themeName) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException( + "The given theme with name " + themeName + " did not exist"))); + var upgradeTheme = Mono.usingWhen( + createTempDir("halo-theme-", scheduler), + tempDir -> { + var locateThemeManifest = Mono.fromCallable(() -> locateThemeManifest(tempDir) + .orElseThrow(() -> new ThemeUpgradeException( + "Missing theme manifest file: theme.yaml or theme.yml", + "problemDetail.theme.upgrade.missingManifest", null))); + return unzip(content, tempDir, scheduler) + .then(locateThemeManifest) + .flatMap(themeManifest -> { + if (log.isDebugEnabled()) { + log.debug("Found theme manifest file: {}", themeManifest); + } + var newTheme = loadThemeManifest(themeManifest); + if (!Objects.equals(themeName, newTheme.getMetadata().getName())) { + if (log.isDebugEnabled()) { + log.error("Want theme name: {}, but provided: {}", themeName, + newTheme.getMetadata().getName()); + } + return Mono.error(new ThemeUpgradeException( + "Please make sure the theme name is correct", + "problemDetail.theme.upgrade.nameMismatch", + new Object[] {newTheme.getMetadata().getName(), themeName})); + } + + var copyTheme = Mono.fromCallable(() -> { + var themePath = themeRoot.get().resolve(themeName); + copyRecursively(themeManifest.getParent(), themePath); + return themePath; + }); + + return deleteThemeAndWaitForComplete(themeName) + .then(copyTheme) + .then(this.persistent(newTheme)); + }); + }, + tempDir -> deleteRecursivelyAndSilently(tempDir, scheduler) + ); + + return checkTheme.then(upgradeTheme); + } + + /** + * Creates theme manifest and related unstructured resources. + * TODO: In case of failure in saving midway, the problem of data consistency needs to be + * solved. + * + * @param themeManifest the theme custom model + * @return a theme custom model + * @see Theme + */ + public Mono persistent(Unstructured themeManifest) { + Assert.state(StringUtils.equals(Theme.KIND, themeManifest.getKind()), + "Theme manifest kind must be Theme."); + return client.create(themeManifest) + .map(theme -> Unstructured.OBJECT_MAPPER.convertValue(theme, Theme.class)) + .doOnNext(theme -> { + String systemVersion = systemVersionSupplier.get().getNormalVersion(); + String requires = theme.getSpec().getRequires(); + if (!VersionUtils.satisfiesRequires(systemVersion, requires)) { + throw new UnsatisfiedAttributeValueException( + String.format("The theme requires a minimum system version of %s, " + + "but the current version is %s.", + requires, systemVersion), + "problemDetail.theme.version.unsatisfied.requires", + new String[] {requires, systemVersion}); + } + }) + .flatMap(theme -> { + var unstructureds = ThemeUtils.loadThemeResources(getThemePath(theme)); + if (unstructureds.stream() + .filter(hasSettingsYaml(theme)) + .count() > 1) { + return Mono.error(new IllegalStateException( + "Theme must only have one settings.yaml or settings.yml.")); + } + if (unstructureds.stream() + .filter(hasConfigYaml(theme)) + .count() > 1) { + return Mono.error(new IllegalStateException( + "Theme must only have one config.yaml or config.yml.")); + } + var spec = theme.getSpec(); + return Flux.fromIterable(unstructureds) + .filter(unstructured -> { + String name = unstructured.getMetadata().getName(); + boolean isThemeSetting = unstructured.getKind().equals(Setting.KIND) + && StringUtils.equals(spec.getSettingName(), name); + + boolean isThemeConfig = unstructured.getKind().equals(ConfigMap.KIND) + && StringUtils.equals(spec.getConfigMapName(), name); + + boolean isAnnotationSetting = unstructured.getKind() + .equals(AnnotationSetting.KIND); + return isThemeSetting || isThemeConfig || isAnnotationSetting; + }) + .doOnNext(unstructured -> + populateThemeNameLabel(unstructured, theme.getMetadata().getName())) + .flatMap(this::createOrUpdate) + .then(Mono.just(theme)); + }); + } + + Mono createOrUpdate(Unstructured unstructured) { + return Mono.defer(() -> client.fetch(unstructured.groupVersionKind(), + unstructured.getMetadata().getName()) + .flatMap(existUnstructured -> { + existUnstructured.getMetadata() + .setVersion(unstructured.getMetadata().getVersion()); + return client.update(existUnstructured); + }) + .switchIfEmpty(Mono.defer(() -> client.create(unstructured))) + ) + .retryWhen(Retry.backoff(5, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + @Override + public Mono reloadTheme(String name) { + return client.fetch(Theme.class, name) + .flatMap(oldTheme -> { + String settingName = oldTheme.getSpec().getSettingName(); + return waitForSettingDeleted(settingName) + .then(waitForAnnotationSettingsDeleted(name)); + }) + .then(Mono.defer(() -> { + Path themePath = themeRoot.get().resolve(name); + Path themeManifestPath = ThemeUtils.resolveThemeManifest(themePath); + if (themeManifestPath == null) { + throw new IllegalArgumentException( + "The manifest file [theme.yaml] is required."); + } + Unstructured unstructured = loadThemeManifest(themeManifestPath); + Theme newTheme = Unstructured.OBJECT_MAPPER.convertValue(unstructured, + Theme.class); + return client.fetch(Theme.class, name) + .map(oldTheme -> { + newTheme.getMetadata().setVersion(oldTheme.getMetadata().getVersion()); + return newTheme; + }) + .flatMap(client::update); + })) + .flatMap(theme -> { + String settingName = theme.getSpec().getSettingName(); + return Flux.fromIterable(ThemeUtils.loadThemeResources(getThemePath(theme))) + .filter(unstructured -> (Setting.KIND.equals(unstructured.getKind()) + && unstructured.getMetadata().getName().equals(settingName)) + || AnnotationSetting.KIND.equals(unstructured.getKind()) + ) + .doOnNext(unstructured -> populateThemeNameLabel(unstructured, name)) + .flatMap(client::create) + .then(Mono.just(theme)); + }); + } + + private static void populateThemeNameLabel(Unstructured unstructured, String themeName) { + Map labels = unstructured.getMetadata().getLabels(); + if (labels == null) { + labels = new HashMap<>(); + unstructured.getMetadata().setLabels(labels); + } + labels.put(Theme.THEME_NAME_LABEL, themeName); + } + + @Override + public Mono resetSettingConfig(String name) { + return client.fetch(Theme.class, name) + .filter(theme -> StringUtils.isNotBlank(theme.getSpec().getSettingName())) + .flatMap(theme -> { + String configMapName = theme.getSpec().getConfigMapName(); + String settingName = theme.getSpec().getSettingName(); + return client.fetch(Setting.class, settingName) + .map(SettingUtils::settingDefinedDefaultValueMap) + .flatMap(data -> updateConfigMapData(configMapName, data)); + }); + } + + private Mono updateConfigMapData(String configMapName, Map data) { + return client.fetch(ConfigMap.class, configMapName) + .flatMap(configMap -> { + configMap.setData(data); + return client.update(configMap); + }) + .retryWhen(Retry.fixedDelay(10, Duration.ofMillis(100)) + .filter(t -> t instanceof OptimisticLockingFailureException)); + } + + private Mono waitForSettingDeleted(String settingName) { + return client.fetch(Setting.class, settingName) + .flatMap(setting -> client.delete(setting) + .flatMap(deleted -> client.fetch(Setting.class, settingName) + .flatMap(s -> Mono.error( + () -> new RetryException("Re-check if the setting is deleted."))) + .retryWhen(Retry.fixedDelay(10, Duration.ofMillis(100)) + .filter(t -> t instanceof RetryException)) + ) + ) + .then(); + } + + private Mono waitForAnnotationSettingsDeleted(String themeName) { + return client.list(AnnotationSetting.class, + annotationSetting -> { + Map labels = MetadataUtil.nullSafeLabels(annotationSetting); + return StringUtils.equals(themeName, labels.get(Theme.THEME_NAME_LABEL)); + }, null) + .flatMap(annotationSetting -> client.delete(annotationSetting) + .flatMap(deleted -> client.fetch(AnnotationSetting.class, + annotationSetting.getMetadata().getName()) + .doOnNext(latest -> { + throw new RetryException("AnnotationSetting is not deleted yet."); + }) + .retryWhen(Retry.fixedDelay(10, Duration.ofMillis(100)) + .filter(t -> t instanceof RetryException)) + ) + ) + .then(); + } + + private Path getThemePath(Theme theme) { + return themeRoot.get().resolve(theme.getMetadata().getName()); + } + + private Predicate hasSettingsYaml(Theme theme) { + return unstructured -> Setting.KIND.equals(unstructured.getKind()) + && theme.getSpec().getSettingName().equals(unstructured.getMetadata().getName()); + } + + private Predicate hasConfigYaml(Theme theme) { + return unstructured -> ConfigMap.KIND.equals(unstructured.getKind()) + && theme.getSpec().getConfigMapName().equals(unstructured.getMetadata().getName()); + } + + Mono deleteThemeAndWaitForComplete(String themeName) { + return client.fetch(Theme.class, themeName) + .flatMap(client::delete) + .flatMap(deletingTheme -> waitForThemeDeleted(themeName) + .thenReturn(deletingTheme)); + } + + Mono waitForThemeDeleted(String themeName) { + return client.fetch(Theme.class, themeName) + .doOnNext(theme -> { + throw new RetryException("Re-check if the theme is deleted successfully"); + }) + .retryWhen(Retry.fixedDelay(20, Duration.ofMillis(100)) + .filter(t -> t instanceof RetryException) + .onRetryExhaustedThrow((spec, signal) -> + new ServerErrorException("Wait timeout for theme deleted", null))) + .then(); + } +} diff --git a/application/src/main/java/run/halo/app/core/extension/theme/ThemeUtils.java b/application/src/main/java/run/halo/app/core/extension/theme/ThemeUtils.java new file mode 100644 index 0000000..a0276a3 --- /dev/null +++ b/application/src/main/java/run/halo/app/core/extension/theme/ThemeUtils.java @@ -0,0 +1,205 @@ +package run.halo.app.core.extension.theme; + +import static org.springframework.util.FileSystemUtils.copyRecursively; +import static run.halo.app.infra.utils.FileUtils.createTempDir; +import static run.halo.app.infra.utils.FileUtils.deleteRecursivelyAndSilently; +import static run.halo.app.infra.utils.FileUtils.unzip; + +import java.io.IOException; +import java.nio.file.Files; +import java.nio.file.Path; +import java.util.ArrayList; +import java.util.Comparator; +import java.util.LinkedList; +import java.util.List; +import java.util.Optional; +import java.util.Set; +import java.util.stream.BaseStream; +import java.util.stream.Stream; +import lombok.extern.slf4j.Slf4j; +import org.reactivestreams.Publisher; +import org.springframework.core.io.FileSystemResource; +import org.springframework.core.io.Resource; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.lang.Nullable; +import org.springframework.util.CollectionUtils; +import org.springframework.web.server.ResponseStatusException; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.Exceptions; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Scheduler; +import reactor.core.scheduler.Schedulers; +import run.halo.app.core.extension.Theme; +import run.halo.app.extension.Unstructured; +import run.halo.app.infra.exception.ThemeAlreadyExistsException; +import run.halo.app.infra.exception.ThemeInstallationException; +import run.halo.app.infra.utils.FileUtils; +import run.halo.app.infra.utils.YamlUnstructuredLoader; + +@Slf4j +class ThemeUtils { + private static final String THEME_TMP_PREFIX = "halo-theme-"; + private static final String[] THEME_MANIFESTS = {"theme.yaml", "theme.yml"}; + + static Flux listAllThemesFromThemeDir(Path themesDir) { + return walkThemesFromPath(themesDir) + .filter(Files::isDirectory) + .map(ThemeUtils::findThemeManifest) + .flatMap(Flux::fromIterable) + .filter(unstructured -> unstructured.getKind().equals(Theme.KIND)) + .map(unstructured -> Unstructured.OBJECT_MAPPER.convertValue(unstructured, + Theme.class)) + .sort(Comparator.comparing(theme -> theme.getMetadata().getName())); + } + + private static Flux walkThemesFromPath(Path path) { + return Flux.using(() -> Files.walk(path, 2), + Flux::fromStream, + BaseStream::close + ) + .subscribeOn(Schedulers.boundedElastic()); + } + + private static List findThemeManifest(Path themePath) { + List resources = new ArrayList<>(4); + for (String themeResource : THEME_MANIFESTS) { + Path resourcePath = themePath.resolve(themeResource); + if (Files.exists(resourcePath)) { + resources.add(new FileSystemResource(resourcePath)); + } + } + if (CollectionUtils.isEmpty(resources)) { + return List.of(); + } + return new YamlUnstructuredLoader(resources.toArray(new Resource[0])) + .load(); + } + + static List loadThemeResources(Path themePath) { + try (Stream paths = Files.list(themePath)) { + List resources = paths + .filter(path -> { + String pathString = path.toString(); + return pathString.endsWith(".yaml") || pathString.endsWith(".yml"); + }) + .filter(path -> { + String pathString = path.toString(); + for (String themeManifest : THEME_MANIFESTS) { + if (pathString.endsWith(themeManifest)) { + return false; + } + } + return true; + }) + .map(FileSystemResource::new) + .toList(); + return new YamlUnstructuredLoader(resources.toArray(new Resource[0])) + .load(); + } catch (IOException e) { + throw new RuntimeException(e); + } + } + + static Mono unzipThemeTo(Publisher content, Path themeWorkDir, + Scheduler scheduler) { + return unzipThemeTo(content, themeWorkDir, false, scheduler) + .onErrorMap(e -> !(e instanceof ResponseStatusException), e -> { + log.error("Failed to unzip theme", e); + throw new ServerWebInputException("Failed to unzip theme"); + }); + } + + static Mono unzipThemeTo(Publisher content, Path themeWorkDir, + boolean override, Scheduler scheduler) { + return Mono.usingWhen( + createTempDir(THEME_TMP_PREFIX, scheduler), + tempDir -> { + var locateThemeManifest = Mono.fromCallable(() -> locateThemeManifest(tempDir) + .orElseThrow(() -> new ThemeInstallationException("Missing theme manifest", + "problemDetail.theme.install.missingManifest", null))); + return unzip(content, tempDir, scheduler) + .then(locateThemeManifest) + .handle((themeManifestPath, sink) -> { + var theme = loadThemeManifest(themeManifestPath); + var themeName = theme.getMetadata().getName(); + var themeTargetPath = themeWorkDir.resolve(themeName); + try { + if (!override && !FileUtils.isEmpty(themeTargetPath)) { + sink.error(new ThemeAlreadyExistsException(themeName)); + return; + } + // install theme to theme work dir + copyRecursively(themeManifestPath.getParent(), themeTargetPath); + sink.next(theme); + } catch (IOException e) { + deleteRecursivelyAndSilently(themeTargetPath); + sink.error(e); + } + }) + .subscribeOn(scheduler); + }, + tempDir -> FileUtils.deleteRecursivelyAndSilently(tempDir, scheduler) + ); + } + + static Unstructured loadThemeManifest(Path themeManifestPath) { + var unstructureds = new YamlUnstructuredLoader(new FileSystemResource(themeManifestPath)) + .load(); + if (CollectionUtils.isEmpty(unstructureds)) { + throw new ThemeInstallationException("Missing theme manifest", + "problemDetail.theme.install.missingManifest", null); + } + return unstructureds.get(0); + } + + @Nullable + static Path resolveThemeManifest(Path tempDirectory) { + for (String themeManifest : THEME_MANIFESTS) { + Path path = tempDirectory.resolve(themeManifest); + if (Files.exists(path)) { + return path; + } + } + return null; + } + + static Optional locateThemeManifest(Path path) { + if (!Files.isDirectory(path)) { + return Optional.empty(); + } + var queue = new LinkedList(); + queue.add(path); + var manifest = Optional.empty(); + while (!queue.isEmpty()) { + var current = queue.pop(); + try (Stream subPaths = Files.list(current)) { + manifest = subPaths.filter(Files::isReadable) + .filter(subPath -> { + if (Files.isDirectory(subPath)) { + queue.add(subPath); + return false; + } + return true; + }) + .filter(Files::isRegularFile) + .filter(ThemeUtils::isManifest) + .findFirst(); + } catch (IOException e) { + throw Exceptions.propagate(e); + } + if (manifest.isPresent()) { + break; + } + } + return manifest; + } + + static boolean isManifest(Path file) { + if (!Files.isRegularFile(file)) { + return false; + } + return Set.of(THEME_MANIFESTS).contains(file.getFileName().toString()); + } + +} diff --git a/application/src/main/java/run/halo/app/endpoint/uc/content/UcPostAttachmentEndpoint.java b/application/src/main/java/run/halo/app/endpoint/uc/content/UcPostAttachmentEndpoint.java new file mode 100644 index 0000000..cc32f20 --- /dev/null +++ b/application/src/main/java/run/halo/app/endpoint/uc/content/UcPostAttachmentEndpoint.java @@ -0,0 +1,208 @@ +package run.halo.app.endpoint.uc.content; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; +import static org.springdoc.webflux.core.fn.SpringdocRouteBuilder.route; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.HashMap; +import java.util.function.Consumer; +import org.apache.commons.lang3.StringUtils; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import org.springframework.http.codec.multipart.FormFieldPart; +import org.springframework.http.codec.multipart.Part; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Component; +import org.springframework.util.MultiValueMap; +import org.springframework.web.reactive.function.BodyExtractors; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.content.PostService; +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.core.extension.service.AttachmentService; +import run.halo.app.extension.GroupVersion; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.exception.NotFoundException; + +@Component +public class UcPostAttachmentEndpoint implements CustomEndpoint { + + public static final String POST_NAME_LABEL = "content.halo.run/post-name"; + public static final String SINGLE_PAGE_NAME_LABEL = "content.halo.run/single-page-name"; + + private final AttachmentService attachmentService; + + private final PostService postService; + + private final SystemConfigurableEnvironmentFetcher systemSettingFetcher; + + public UcPostAttachmentEndpoint(AttachmentService attachmentService, PostService postService, + SystemConfigurableEnvironmentFetcher systemSettingFetcher) { + this.attachmentService = attachmentService; + this.postService = postService; + this.systemSettingFetcher = systemSettingFetcher; + } + + @Override + public RouterFunction endpoint() { + var tag = "AttachmentV1alpha1Uc"; + return route() + .POST("/attachments", + this::createAttachmentForPost, + builder -> builder.operationId("CreateAttachmentForPost").tag(tag) + .description("Create attachment for the given post.") + .parameter(parameterBuilder() + .name("waitForPermalink") + .description("Wait for permalink.") + .in(ParameterIn.QUERY) + .required(false) + .implementation(boolean.class)) + .requestBody(requestBodyBuilder() + .content(contentBuilder() + .mediaType(MediaType.MULTIPART_FORM_DATA_VALUE) + .schema(schemaBuilder().implementation(PostAttachmentRequest.class))) + ) + .response(responseBuilder().implementation(Attachment.class)) + ) + .build(); + } + + private Mono createAttachmentForPost(ServerRequest request) { + var postAttachmentRequestMono = request.body(BodyExtractors.toMultipartData()) + .map(PostAttachmentRequest::from) + .cache(); + + var postSettingMono = systemSettingFetcher.fetchPost() + .handle((postSetting, sink) -> { + var attachmentPolicyName = postSetting.getAttachmentPolicyName(); + if (StringUtils.isBlank(attachmentPolicyName)) { + sink.error(new ServerWebInputException( + "Please configure storage policy for post attachment first.")); + return; + } + sink.next(postSetting); + }); + + // get settings + var createdAttachment = postSettingMono.flatMap(postSetting -> postAttachmentRequestMono + .flatMap(postAttachmentRequest -> getCurrentUser().flatMap( + username -> attachmentService.upload(username, + postSetting.getAttachmentPolicyName(), + postSetting.getAttachmentGroupName(), + postAttachmentRequest.file(), + linkWith(postAttachmentRequest))))); + + var waitForPermalink = request.queryParam("waitForPermalink") + .map(Boolean::valueOf) + .orElse(false); + if (waitForPermalink) { + createdAttachment = createdAttachment.flatMap(attachment -> + attachmentService.getPermalink(attachment) + .doOnNext(permalink -> { + var status = attachment.getStatus(); + if (status == null) { + status = new Attachment.AttachmentStatus(); + attachment.setStatus(status); + } + status.setPermalink(permalink.toString()); + }) + .thenReturn(attachment)); + } + return ServerResponse.ok().body(createdAttachment, Attachment.class); + } + + private Consumer linkWith(PostAttachmentRequest request) { + return attachment -> { + var labels = attachment.getMetadata().getLabels(); + if (labels == null) { + labels = new HashMap<>(); + attachment.getMetadata().setLabels(labels); + } + if (StringUtils.isNotBlank(request.postName())) { + labels.put(POST_NAME_LABEL, request.postName()); + } + if (StringUtils.isNotBlank(request.singlePageName())) { + labels.put(SINGLE_PAGE_NAME_LABEL, request.singlePageName()); + } + }; + } + + private Mono checkPostOwnership(Mono postAttachmentRequest) { + // check the post + var postNotFoundError = Mono.error( + () -> new NotFoundException("The post was not found or deleted.") + ); + return postAttachmentRequest.map(PostAttachmentRequest::postName) + .flatMap(postName -> getCurrentUser() + .flatMap(username -> postService.getByUsername(postName, username) + .switchIfEmpty(postNotFoundError))) + .then(); + } + + private Mono getCurrentUser() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Authentication::getName); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("uc.api.content.halo.run/v1alpha1"); + } + + @Schema(types = "object") + public record PostAttachmentRequest( + @Schema(requiredMode = REQUIRED, description = "Attachment data.") + FilePart file, + + @Schema(requiredMode = NOT_REQUIRED, description = "Post name.") + String postName, + + @Schema(requiredMode = NOT_REQUIRED, description = "Single page name.") + String singlePageName + ) { + + /** + * Convert multipart data into PostAttachmentRequest. + * + * @param multipartData is multipart data from request. + * @return post attachment request data. + */ + public static PostAttachmentRequest from(MultiValueMap multipartData) { + var part = multipartData.getFirst("postName"); + String postName = null; + if (part instanceof FormFieldPart formFieldPart) { + postName = formFieldPart.value(); + } + + part = multipartData.getFirst("singlePageName"); + String singlePageName = null; + if (part instanceof FormFieldPart formFieldPart) { + singlePageName = formFieldPart.value(); + } + + part = multipartData.getFirst("file"); + if (!(part instanceof FilePart file)) { + throw new ServerWebInputException("Invalid type of parameter 'file'."); + } + + return new PostAttachmentRequest(file, postName, singlePageName); + } + + } +} diff --git a/application/src/main/java/run/halo/app/endpoint/uc/content/UcPostEndpoint.java b/application/src/main/java/run/halo/app/endpoint/uc/content/UcPostEndpoint.java new file mode 100644 index 0000000..0b30aec --- /dev/null +++ b/application/src/main/java/run/halo/app/endpoint/uc/content/UcPostEndpoint.java @@ -0,0 +1,332 @@ +package run.halo.app.endpoint.uc.content; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.webflux.core.fn.SpringdocRouteBuilder.route; +import static org.springframework.web.reactive.function.server.RequestPredicates.path; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import java.util.Objects; +import org.apache.commons.lang3.StringUtils; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.content.Content; +import run.halo.app.content.ContentUpdateParam; +import run.halo.app.content.ListedPost; +import run.halo.app.content.PostQuery; +import run.halo.app.content.PostRequest; +import run.halo.app.content.PostService; +import run.halo.app.content.SnapshotService; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.Ref; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.infra.utils.JsonUtils; + +@Component +public class UcPostEndpoint implements CustomEndpoint { + + private static final String CONTENT_JSON_ANNO = "content.halo.run/content-json"; + + private final PostService postService; + + private final SnapshotService snapshotService; + + public UcPostEndpoint(PostService postService, SnapshotService snapshotService) { + this.postService = postService; + this.snapshotService = snapshotService; + } + + @Override + public RouterFunction endpoint() { + var tag = "PostV1alpha1Uc"; + var namePathParam = parameterBuilder().name("name") + .description("Post name") + .in(ParameterIn.PATH) + .required(true); + return route().nest( + path("/posts"), + () -> route() + .GET(this::listMyPost, builder -> { + builder.operationId("ListMyPosts") + .description("List posts owned by the current user.") + .tag(tag) + .response(responseBuilder().implementation( + ListResult.generateGenericClass(ListedPost.class))); + PostQuery.buildParameters(builder); + } + ) + .POST(this::createMyPost, builder -> builder.operationId("CreateMyPost") + .tag(tag) + .description(""" + Create my post. If you want to create a post with content, please set + annotation: "content.halo.run/content-json" into annotations and refer + to Content for corresponding data type. + """) + .requestBody(requestBodyBuilder().implementation(Post.class)) + .response(responseBuilder().implementation(Post.class)) + ) + .GET("/{name}", this::getMyPost, builder -> builder.operationId("GetMyPost") + .tag(tag) + .parameter(namePathParam) + .description("Get post that belongs to the current user.") + .response(responseBuilder().implementation(Post.class)) + ) + .PUT("/{name}", this::updateMyPost, builder -> + builder.operationId("UpdateMyPost") + .tag(tag) + .parameter(namePathParam) + .description("Update my post.") + .requestBody(requestBodyBuilder().implementation(Post.class)) + .response(responseBuilder().implementation(Post.class)) + ) + .GET("/{name}/draft", this::getMyPostDraft, builder -> builder.tag(tag) + .operationId("GetMyPostDraft") + .description("Get my post draft.") + .parameter(namePathParam) + .parameter(parameterBuilder() + .name("patched") + .in(ParameterIn.QUERY) + .required(false) + .implementation(Boolean.class) + .description("Should include patched content and raw or not.") + ) + .response(responseBuilder().implementation(Snapshot.class)) + ) + .PUT("/{name}/draft", this::updateMyPostDraft, builder -> builder.tag(tag) + .operationId("UpdateMyPostDraft") + .description(""" + Update draft of my post. Please make sure set annotation: + "content.halo.run/content-json" into annotations and refer to + Content for corresponding data type. + """) + .parameter(namePathParam) + .requestBody(requestBodyBuilder().implementation(Snapshot.class)) + .response(responseBuilder().implementation(Snapshot.class))) + .PUT("/{name}/publish", this::publishMyPost, builder -> builder.tag(tag) + .operationId("PublishMyPost") + .description("Publish my post.") + .parameter(namePathParam) + .response(responseBuilder().implementation(Post.class))) + .PUT("/{name}/unpublish", this::unpublishMyPost, builder -> builder.tag(tag) + .operationId("UnpublishMyPost") + .description("Unpublish my post.") + .parameter(namePathParam) + .response(responseBuilder().implementation(Post.class))) + .build(), + builder -> { + }) + .build(); + } + + private Mono getMyPostDraft(ServerRequest request) { + var name = request.pathVariable("name"); + var patched = request.queryParam("patched").map(Boolean::valueOf).orElse(false); + var draft = getMyPost(name) + .flatMap(post -> { + var headSnapshotName = post.getSpec().getHeadSnapshot(); + var baseSnapshotName = post.getSpec().getBaseSnapshot(); + if (StringUtils.isBlank(headSnapshotName)) { + headSnapshotName = baseSnapshotName; + } + if (patched) { + return snapshotService.getPatchedBy(headSnapshotName, baseSnapshotName); + } + return snapshotService.getBy(headSnapshotName); + }); + return ServerResponse.ok().body(draft, Snapshot.class); + } + + private Mono unpublishMyPost(ServerRequest request) { + var name = request.pathVariable("name"); + var postMono = getCurrentUser() + .flatMap(username -> postService.getByUsername(name, username)); + var unpublishedPost = postMono.flatMap(postService::unpublish); + return ServerResponse.ok().body(unpublishedPost, Post.class); + } + + private Mono publishMyPost(ServerRequest request) { + var name = request.pathVariable("name"); + var postMono = getCurrentUser() + .flatMap(username -> postService.getByUsername(name, username)); + + var publishedPost = postMono.flatMap(postService::publish); + return ServerResponse.ok().body(publishedPost, Post.class); + } + + private Mono updateMyPostDraft(ServerRequest request) { + var name = request.pathVariable("name"); + var postMono = getMyPost(name).cache(); + var snapshotMono = request.bodyToMono(Snapshot.class).cache(); + + var contentMono = snapshotMono + .map(Snapshot::getMetadata) + .filter(metadata -> { + var annotations = metadata.getAnnotations(); + return annotations != null && annotations.containsKey(CONTENT_JSON_ANNO); + }) + .map(metadata -> { + var contentJson = metadata.getAnnotations().remove(CONTENT_JSON_ANNO); + return JsonUtils.jsonToObject(contentJson, Content.class); + }) + .cache(); + + // check the snapshot belongs to the post. + var checkSnapshot = postMono.flatMap(post -> snapshotMono.filter( + snapshot -> Ref.equals(snapshot.getSpec().getSubjectRef(), post) + ).switchIfEmpty(Mono.error(() -> + new ServerWebInputException("The snapshot does not belong to the given post.")) + ).filter(snapshot -> { + var snapshotName = snapshot.getMetadata().getName(); + var headSnapshotName = post.getSpec().getHeadSnapshot(); + return Objects.equals(snapshotName, headSnapshotName); + }).switchIfEmpty(Mono.error(() -> + new ServerWebInputException("The snapshot was not the head snapshot of the post."))) + ).then(); + + var setContributor = getCurrentUser().flatMap(username -> + snapshotMono.doOnNext(snapshot -> Snapshot.addContributor(snapshot, username))); + + var getBaseSnapshot = postMono.map(post -> post.getSpec().getBaseSnapshot()) + .flatMap(snapshotService::getBy); + + var updatedSnapshot = getBaseSnapshot.flatMap( + baseSnapshot -> contentMono.flatMap(content -> postMono.flatMap(post -> { + var postName = post.getMetadata().getName(); + var headSnapshotName = post.getSpec().getHeadSnapshot(); + var releaseSnapshotName = post.getSpec().getReleaseSnapshot(); + if (!Objects.equals(headSnapshotName, releaseSnapshotName)) { + // patch and update + return snapshotMono.flatMap( + s -> snapshotService.patchAndUpdate(s, baseSnapshot, content)); + } + // patch and create + return getCurrentUser().map( + username -> { + var metadata = new Metadata(); + metadata.setGenerateName(postName + "-snapshot-"); + var spec = new Snapshot.SnapShotSpec(); + spec.setParentSnapshotName(headSnapshotName); + spec.setOwner(username); + spec.setSubjectRef(Ref.of(post)); + + var snapshot = new Snapshot(); + snapshot.setMetadata(metadata); + snapshot.setSpec(spec); + Snapshot.addContributor(snapshot, username); + return snapshot; + }) + .flatMap(s -> snapshotService.patchAndCreate(s, baseSnapshot, content)) + .flatMap(createdSnapshot -> { + post.getSpec().setHeadSnapshot(createdSnapshot.getMetadata().getName()); + return postService.updateBy(post).thenReturn(createdSnapshot); + }); + }))); + + return ServerResponse.ok() + .body(checkSnapshot.and(setContributor).then(updatedSnapshot), Snapshot.class); + } + + private Mono updateMyPost(ServerRequest request) { + var name = request.pathVariable("name"); + + var postBody = request.bodyToMono(Post.class) + .doOnNext(post -> { + var annotations = post.getMetadata().getAnnotations(); + if (annotations != null) { + // we don't support updating content while updating post. + annotations.remove(CONTENT_JSON_ANNO); + } + }) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException("Request body required."))); + + var updatedPost = getMyPost(name).flatMap(oldPost -> + postBody.doOnNext(post -> { + var oldSpec = oldPost.getSpec(); + // restrict fields of post.spec. + var spec = post.getSpec(); + spec.setOwner(oldSpec.getOwner()); + spec.setPublish(oldSpec.getPublish()); + spec.setHeadSnapshot(oldSpec.getHeadSnapshot()); + spec.setBaseSnapshot(oldSpec.getBaseSnapshot()); + spec.setReleaseSnapshot(oldSpec.getReleaseSnapshot()); + spec.setDeleted(oldSpec.getDeleted()); + post.getMetadata().setName(oldPost.getMetadata().getName()); + })) + .flatMap(postService::updateBy); + return ServerResponse.ok().body(updatedPost, Post.class); + } + + private Mono createMyPost(ServerRequest request) { + var postFromRequest = request.bodyToMono(Post.class) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException("Request body required."))); + + var createdPost = getCurrentUser() + .flatMap(username -> postFromRequest + .doOnNext(post -> { + if (post.getSpec() == null) { + post.setSpec(new Post.PostSpec()); + } + post.getSpec().setOwner(username); + })) + .map(post -> new PostRequest(post, ContentUpdateParam.from(getContent(post)))) + .flatMap(postService::draftPost); + return ServerResponse.ok().body(createdPost, Post.class); + } + + private Content getContent(Post post) { + Content content = null; + var annotations = post.getMetadata().getAnnotations(); + if (annotations != null && annotations.containsKey(CONTENT_JSON_ANNO)) { + var contentJson = annotations.remove(CONTENT_JSON_ANNO); + content = JsonUtils.jsonToObject(contentJson, Content.class); + } + return content; + } + + private Mono listMyPost(ServerRequest request) { + var posts = getCurrentUser() + .map(username -> new PostQuery(request, username)) + .flatMap(postService::listPost); + return ServerResponse.ok().body(posts, ListedPost.class); + } + + private Mono getMyPost(ServerRequest request) { + var postName = request.pathVariable("name"); + var post = getMyPost(postName); + return ServerResponse.ok().body(post, Post.class); + } + + private Mono getMyPost(String postName) { + return getCurrentUser() + .flatMap(username -> postService.getByUsername(postName, username) + .switchIfEmpty( + Mono.error(() -> new NotFoundException("The post was not found or deleted")) + ) + ); + } + + private Mono getCurrentUser() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Authentication::getName); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("uc.api.content.halo.run/v1alpha1"); + } + +} diff --git a/application/src/main/java/run/halo/app/endpoint/uc/content/UcSnapshotEndpoint.java b/application/src/main/java/run/halo/app/endpoint/uc/content/UcSnapshotEndpoint.java new file mode 100644 index 0000000..1f196bc --- /dev/null +++ b/application/src/main/java/run/halo/app/endpoint/uc/content/UcSnapshotEndpoint.java @@ -0,0 +1,123 @@ +package run.halo.app.endpoint.uc.content; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.webflux.core.fn.SpringdocRouteBuilder.route; +import static org.springframework.web.reactive.function.server.RequestPredicates.path; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.content.PostService; +import run.halo.app.content.SnapshotService; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.Ref; +import run.halo.app.infra.exception.NotFoundException; + +@Component +public class UcSnapshotEndpoint implements CustomEndpoint { + + private final PostService postService; + + private final SnapshotService snapshotService; + + public UcSnapshotEndpoint(PostService postService, SnapshotService snapshotService) { + this.postService = postService; + this.snapshotService = snapshotService; + } + + @Override + public RouterFunction endpoint() { + var tag = "SnapshotV1alpha1Uc"; + return route().nest(path("/snapshots"), + () -> route() + .GET("/{name}", + this::getSnapshot, + builder -> builder.operationId("GetSnapshotForPost") + .description("Get snapshot for one post.") + .parameter(parameterBuilder() + .name("name") + .in(ParameterIn.PATH) + .required(true) + .description("Snapshot name.") + ) + .parameter(parameterBuilder() + .name("postName") + .in(ParameterIn.QUERY) + .required(true) + .description("Post name.") + ) + .parameter(parameterBuilder() + .name("patched") + .in(ParameterIn.QUERY) + .required(false) + .implementation(Boolean.class) + .description("Should include patched content and raw or not.") + ) + .response(responseBuilder().implementation(Snapshot.class)) + .tag(tag)) + .build(), + builder -> { + }) + .build(); + } + + private Mono getSnapshot(ServerRequest request) { + var snapshotName = request.pathVariable("name"); + var postName = request.queryParam("postName") + .orElseThrow(() -> new ServerWebInputException("Query parameter postName is required")); + var patched = request.queryParam("patched").map(Boolean::valueOf).orElse(false); + + var postNotFoundError = Mono.error( + () -> new NotFoundException("The post was not found or deleted.") + ); + var snapshotNotFoundError = Mono.error( + () -> new NotFoundException("The snapshot was not found or deleted.") + ); + + var postMono = getCurrentUser().flatMap(username -> + postService.getByUsername(postName, username).switchIfEmpty(postNotFoundError) + ); + + // check the post belongs to the current user. + var snapshotMono = postMono.flatMap(post -> Mono.defer( + () -> { + if (patched) { + var baseSnapshotName = post.getSpec().getBaseSnapshot(); + return snapshotService.getPatchedBy(snapshotName, baseSnapshotName); + } + return snapshotService.getBy(snapshotName); + }) + .filter(snapshot -> { + var subjectRef = snapshot.getSpec().getSubjectRef(); + return Ref.equals(subjectRef, post); + }) + .switchIfEmpty(snapshotNotFoundError) + ); + + return ServerResponse.ok().body(snapshotMono, Snapshot.class); + } + + private Mono getCurrentUser() { + return ReactiveSecurityContextHolder + .getContext() + .map(SecurityContext::getAuthentication) + .map(Authentication::getName); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("uc.api.content.halo.run/v1alpha1"); + } + +} diff --git a/application/src/main/java/run/halo/app/event/post/CategoryHiddenStateChangeEvent.java b/application/src/main/java/run/halo/app/event/post/CategoryHiddenStateChangeEvent.java new file mode 100644 index 0000000..92a2d23 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/CategoryHiddenStateChangeEvent.java @@ -0,0 +1,24 @@ +package run.halo.app.event.post; + +import lombok.Getter; +import org.springframework.context.ApplicationEvent; +import run.halo.app.core.extension.content.Category; + +/** + * When the category {@link Category.CategorySpec#isHideFromList()} state changes, this event is + * triggered. + * + * @author guqing + * @since 2.17.0 + */ +@Getter +public class CategoryHiddenStateChangeEvent extends ApplicationEvent { + private final String categoryName; + private final boolean hidden; + + public CategoryHiddenStateChangeEvent(Object source, String categoryName, boolean hidden) { + super(source); + this.categoryName = categoryName; + this.hidden = hidden; + } +} diff --git a/application/src/main/java/run/halo/app/event/post/CommentCreatedEvent.java b/application/src/main/java/run/halo/app/event/post/CommentCreatedEvent.java new file mode 100644 index 0000000..8483aa4 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/CommentCreatedEvent.java @@ -0,0 +1,22 @@ +package run.halo.app.event.post; + +import lombok.Getter; +import org.springframework.context.ApplicationEvent; +import run.halo.app.core.extension.content.Comment; + +/** + * Comment created event. + * + * @author guqing + * @since 2.9.0 + */ +@Getter +public class CommentCreatedEvent extends ApplicationEvent { + + private final Comment comment; + + public CommentCreatedEvent(Object source, Comment comment) { + super(source); + this.comment = comment; + } +} diff --git a/application/src/main/java/run/halo/app/event/post/CommentUnreadReplyCountChangedEvent.java b/application/src/main/java/run/halo/app/event/post/CommentUnreadReplyCountChangedEvent.java new file mode 100644 index 0000000..2e32514 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/CommentUnreadReplyCountChangedEvent.java @@ -0,0 +1,22 @@ +package run.halo.app.event.post; + +import lombok.Getter; +import org.springframework.context.ApplicationEvent; + +/** + *

This event will be triggered when the unread reply count of the comment is changed.

+ *

It is used to update the unread reply count of the comment,such as when the user reads the + * reply(lastReadTime changed in comment), the unread reply count will be updated.

+ * + * @author guqing + * @since 2.14.0 + */ +@Getter +public class CommentUnreadReplyCountChangedEvent extends ApplicationEvent { + private final String commentName; + + public CommentUnreadReplyCountChangedEvent(Object source, String commentName) { + super(source); + this.commentName = commentName; + } +} diff --git a/application/src/main/java/run/halo/app/event/post/DownvotedEvent.java b/application/src/main/java/run/halo/app/event/post/DownvotedEvent.java new file mode 100644 index 0000000..3b3d6cb --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/DownvotedEvent.java @@ -0,0 +1,14 @@ +package run.halo.app.event.post; + +/** + * Downvote event. + * + * @author guqing + * @since 2.0.0 + */ +public class DownvotedEvent extends VotedEvent { + + public DownvotedEvent(Object source, String group, String name, String plural) { + super(source, group, name, plural); + } +} diff --git a/application/src/main/java/run/halo/app/event/post/PostStatsChangedEvent.java b/application/src/main/java/run/halo/app/event/post/PostStatsChangedEvent.java new file mode 100644 index 0000000..aa936b8 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/PostStatsChangedEvent.java @@ -0,0 +1,23 @@ +package run.halo.app.event.post; + +import lombok.Getter; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.ApplicationEvent; +import run.halo.app.core.extension.Counter; +import run.halo.app.core.extension.content.Post; +import run.halo.app.metrics.MeterUtils; + +@Getter +public class PostStatsChangedEvent extends ApplicationEvent { + private final Counter counter; + + public PostStatsChangedEvent(Object source, Counter counter) { + super(source); + this.counter = counter; + } + + public String getPostName() { + var counterName = counter.getMetadata().getName(); + return StringUtils.removeStart(counterName, MeterUtils.nameOf(Post.class, "")); + } +} diff --git a/application/src/main/java/run/halo/app/event/post/ReplyChangedEvent.java b/application/src/main/java/run/halo/app/event/post/ReplyChangedEvent.java new file mode 100644 index 0000000..c615686 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/ReplyChangedEvent.java @@ -0,0 +1,14 @@ +package run.halo.app.event.post; + +import run.halo.app.core.extension.content.Reply; + +/** + * @author guqing + * @since 2.0.0 + */ +public class ReplyChangedEvent extends ReplyEvent { + + public ReplyChangedEvent(Object source, Reply reply) { + super(source, reply); + } +} diff --git a/application/src/main/java/run/halo/app/event/post/ReplyCreatedEvent.java b/application/src/main/java/run/halo/app/event/post/ReplyCreatedEvent.java new file mode 100644 index 0000000..e0ebab8 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/ReplyCreatedEvent.java @@ -0,0 +1,16 @@ +package run.halo.app.event.post; + +import run.halo.app.core.extension.content.Reply; + +/** + * Reply created event. + * + * @author guqing + * @since 2.9.0 + */ +public class ReplyCreatedEvent extends ReplyEvent { + + public ReplyCreatedEvent(Object source, Reply reply) { + super(source, reply); + } +} diff --git a/application/src/main/java/run/halo/app/event/post/ReplyDeletedEvent.java b/application/src/main/java/run/halo/app/event/post/ReplyDeletedEvent.java new file mode 100644 index 0000000..8382563 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/ReplyDeletedEvent.java @@ -0,0 +1,10 @@ +package run.halo.app.event.post; + +import run.halo.app.core.extension.content.Reply; + +public class ReplyDeletedEvent extends ReplyEvent { + + public ReplyDeletedEvent(Object source, Reply reply) { + super(source, reply); + } +} diff --git a/application/src/main/java/run/halo/app/event/post/ReplyEvent.java b/application/src/main/java/run/halo/app/event/post/ReplyEvent.java new file mode 100644 index 0000000..adf53c0 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/ReplyEvent.java @@ -0,0 +1,21 @@ +package run.halo.app.event.post; + +import org.springframework.context.ApplicationEvent; +import run.halo.app.core.extension.content.Reply; + +/** + * @author guqing + * @since 2.0.0 + */ +public abstract class ReplyEvent extends ApplicationEvent { + private final Reply reply; + + public ReplyEvent(Object source, Reply reply) { + super(source); + this.reply = reply; + } + + public Reply getReply() { + return reply; + } +} diff --git a/application/src/main/java/run/halo/app/event/post/UpvotedEvent.java b/application/src/main/java/run/halo/app/event/post/UpvotedEvent.java new file mode 100644 index 0000000..111319d --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/UpvotedEvent.java @@ -0,0 +1,14 @@ +package run.halo.app.event.post; + +/** + * Upvote event. + * + * @author guqing + * @since 2.0.0 + */ +public class UpvotedEvent extends VotedEvent { + + public UpvotedEvent(Object source, String group, String name, String plural) { + super(source, group, name, plural); + } +} diff --git a/application/src/main/java/run/halo/app/event/post/VisitedEvent.java b/application/src/main/java/run/halo/app/event/post/VisitedEvent.java new file mode 100644 index 0000000..9bb70cc --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/VisitedEvent.java @@ -0,0 +1,22 @@ +package run.halo.app.event.post; + +import lombok.Getter; +import org.springframework.context.ApplicationEvent; + +/** + * @author guqing + * @since 2.0.0 + */ +@Getter +public class VisitedEvent extends ApplicationEvent { + private final String group; + private final String name; + private final String plural; + + public VisitedEvent(Object source, String group, String name, String plural) { + super(source); + this.group = group; + this.name = name; + this.plural = plural; + } +} diff --git a/application/src/main/java/run/halo/app/event/post/VotedEvent.java b/application/src/main/java/run/halo/app/event/post/VotedEvent.java new file mode 100644 index 0000000..75a0553 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/post/VotedEvent.java @@ -0,0 +1,22 @@ +package run.halo.app.event.post; + +import lombok.Getter; +import org.springframework.context.ApplicationEvent; + +/** + * @author guqing + * @since 2.0.0 + */ +@Getter +public abstract class VotedEvent extends ApplicationEvent { + private final String group; + private final String name; + private final String plural; + + public VotedEvent(Object source, String group, String name, String plural) { + super(source); + this.group = group; + this.name = name; + this.plural = plural; + } +} diff --git a/application/src/main/java/run/halo/app/event/user/PasswordChangedEvent.java b/application/src/main/java/run/halo/app/event/user/PasswordChangedEvent.java new file mode 100644 index 0000000..532fea8 --- /dev/null +++ b/application/src/main/java/run/halo/app/event/user/PasswordChangedEvent.java @@ -0,0 +1,14 @@ +package run.halo.app.event.user; + +import lombok.Getter; +import org.springframework.context.ApplicationEvent; + +@Getter +public class PasswordChangedEvent extends ApplicationEvent { + private final String username; + + public PasswordChangedEvent(Object source, String username) { + super(source); + this.username = username; + } +} diff --git a/application/src/main/java/run/halo/app/extension/DefaultSchemeManager.java b/application/src/main/java/run/halo/app/extension/DefaultSchemeManager.java new file mode 100644 index 0000000..488f76b --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/DefaultSchemeManager.java @@ -0,0 +1,75 @@ +package run.halo.app.extension; + +import java.util.Collections; +import java.util.List; +import java.util.Optional; +import java.util.concurrent.CopyOnWriteArrayList; +import java.util.function.Consumer; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import run.halo.app.extension.SchemeWatcherManager.SchemeRegistered; +import run.halo.app.extension.SchemeWatcherManager.SchemeUnregistered; +import run.halo.app.extension.index.IndexSpecRegistry; +import run.halo.app.extension.index.IndexSpecs; + +public class DefaultSchemeManager implements SchemeManager { + + private final List schemes; + + private final IndexSpecRegistry indexSpecRegistry; + + @Nullable + private final SchemeWatcherManager watcherManager; + + public DefaultSchemeManager(IndexSpecRegistry indexSpecRegistry, + @Nullable SchemeWatcherManager watcherManager) { + this.indexSpecRegistry = indexSpecRegistry; + this.watcherManager = watcherManager; + // we have to use CopyOnWriteArrayList at here to prevent concurrent modification between + // registering and listing. + schemes = new CopyOnWriteArrayList<>(); + } + + @Override + public void register(@NonNull Scheme scheme) { + if (!schemes.contains(scheme)) { + indexSpecRegistry.indexFor(scheme); + schemes.add(scheme); + getWatchers().forEach(watcher -> watcher.onChange(new SchemeRegistered(scheme))); + } + } + + @Override + public void register(@NonNull Scheme scheme, Consumer specsConsumer) { + if (schemes.contains(scheme)) { + return; + } + var indexSpecs = indexSpecRegistry.indexFor(scheme); + specsConsumer.accept(indexSpecs); + schemes.add(scheme); + getWatchers().forEach(watcher -> watcher.onChange(new SchemeRegistered(scheme))); + } + + @Override + public void unregister(@NonNull Scheme scheme) { + if (schemes.contains(scheme)) { + indexSpecRegistry.removeIndexSpecs(scheme); + schemes.remove(scheme); + getWatchers().forEach(watcher -> watcher.onChange(new SchemeUnregistered(scheme))); + } + } + + @Override + @NonNull + public List schemes() { + return Collections.unmodifiableList(schemes); + } + + @NonNull + private List getWatchers() { + if (this.watcherManager == null) { + return Collections.emptyList(); + } + return Optional.ofNullable(this.watcherManager.watchers()).orElse(Collections.emptyList()); + } +} diff --git a/application/src/main/java/run/halo/app/extension/DefaultSchemeWatcherManager.java b/application/src/main/java/run/halo/app/extension/DefaultSchemeWatcherManager.java new file mode 100644 index 0000000..4852170 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/DefaultSchemeWatcherManager.java @@ -0,0 +1,34 @@ +package run.halo.app.extension; + +import java.util.Collections; +import java.util.List; +import java.util.concurrent.CopyOnWriteArrayList; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; + +public class DefaultSchemeWatcherManager implements SchemeWatcherManager { + + private final List watchers; + + public DefaultSchemeWatcherManager() { + watchers = new CopyOnWriteArrayList<>(); + } + + @Override + public void register(@NonNull SchemeWatcher watcher) { + Assert.notNull(watcher, "Scheme watcher must not be null"); + watchers.add(watcher); + } + + @Override + public void unregister(@NonNull SchemeWatcher watcher) { + Assert.notNull(watcher, "Scheme watcher must not be null"); + watchers.remove(watcher); + } + + @Override + public List watchers() { + // we have to copy the watchers entirely to prevent concurrent modification. + return Collections.unmodifiableList(watchers); + } +} diff --git a/application/src/main/java/run/halo/app/extension/DelegateExtensionClient.java b/application/src/main/java/run/halo/app/extension/DelegateExtensionClient.java new file mode 100644 index 0000000..a9a0bf5 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/DelegateExtensionClient.java @@ -0,0 +1,82 @@ +package run.halo.app.extension; + +import java.util.Comparator; +import java.util.List; +import java.util.Optional; +import java.util.function.Predicate; +import org.springframework.data.domain.Sort; +import org.springframework.stereotype.Component; +import run.halo.app.extension.index.IndexedQueryEngine; + +/** + * DelegateExtensionClient fully delegates ReactiveExtensionClient. + * + * @author johnniang + */ +@Component +public class DelegateExtensionClient implements ExtensionClient { + + private final ReactiveExtensionClient client; + + public DelegateExtensionClient(ReactiveExtensionClient client) { + this.client = client; + } + + @Override + public List list(Class type, Predicate predicate, + Comparator comparator) { + return client.list(type, predicate, comparator).collectList().block(); + } + + @Override + public ListResult list(Class type, Predicate predicate, + Comparator comparator, int page, int size) { + return client.list(type, predicate, comparator, page, size).block(); + } + + @Override + public List listAll(Class type, ListOptions options, Sort sort) { + return client.listAll(type, options, sort).collectList().block(); + } + + @Override + public ListResult listBy(Class type, ListOptions options, + PageRequest page) { + return client.listBy(type, options, page).block(); + } + + @Override + public Optional fetch(Class type, String name) { + return client.fetch(type, name).blockOptional(); + } + + @Override + public Optional fetch(GroupVersionKind gvk, String name) { + return client.fetch(gvk, name).blockOptional(); + } + + @Override + public void create(E extension) { + client.create(extension).block(); + } + + @Override + public void update(E extension) { + client.update(extension).block(); + } + + @Override + public void delete(E extension) { + client.delete(extension).block(); + } + + @Override + public IndexedQueryEngine indexedQueryEngine() { + return client.indexedQueryEngine(); + } + + @Override + public void watch(Watcher watcher) { + client.watch(watcher); + } +} diff --git a/application/src/main/java/run/halo/app/extension/ExtensionConverter.java b/application/src/main/java/run/halo/app/extension/ExtensionConverter.java new file mode 100644 index 0000000..cf91933 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/ExtensionConverter.java @@ -0,0 +1,31 @@ +package run.halo.app.extension; + +import run.halo.app.extension.store.ExtensionStore; + +/** + * ExtensionConverter contains bidirectional conversions between Extension and ExtensionStore. + * + * @author johnniang + */ +public interface ExtensionConverter { + + /** + * Converts Extension to ExtensionStore. + * + * @param extension is an Extension to be converted. + * @param is Extension type. + * @return an ExtensionStore. + */ + ExtensionStore convertTo(E extension); + + /** + * Converts Extension from ExtensionStore. + * + * @param type is Extension type. + * @param extensionStore is an ExtensionStore + * @param is Extension type. + * @return an Extension + */ + E convertFrom(Class type, ExtensionStore extensionStore); + +} diff --git a/application/src/main/java/run/halo/app/extension/ExtensionStoreUtil.java b/application/src/main/java/run/halo/app/extension/ExtensionStoreUtil.java new file mode 100644 index 0000000..0f73a63 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/ExtensionStoreUtil.java @@ -0,0 +1,42 @@ +package run.halo.app.extension; + +import org.springframework.util.StringUtils; + +/** + * Extension utilities. + * + * @author johnniang + */ +public final class ExtensionStoreUtil { + + private ExtensionStoreUtil() { + } + + /** + * Builds the name prefix of ExtensionStore. + * + * @param scheme is scheme of an Extension. + * @return name prefix of ExtensionStore. + */ + public static String buildStoreNamePrefix(Scheme scheme) { + // rule of key: /registry/[group]/plural-name/extension-name + StringBuilder builder = new StringBuilder("/registry/"); + if (StringUtils.hasText(scheme.groupVersionKind().group())) { + builder.append(scheme.groupVersionKind().group()).append('/'); + } + builder.append(scheme.plural()); + return builder.toString(); + } + + /** + * Builds full name of ExtensionStore. + * + * @param scheme is scheme of an Extension. + * @param name the exact name of Extension. + * @return full name of ExtensionStore. + */ + public static String buildStoreName(Scheme scheme, String name) { + return buildStoreNamePrefix(scheme) + "/" + name; + } + +} diff --git a/application/src/main/java/run/halo/app/extension/JSONExtensionConverter.java b/application/src/main/java/run/halo/app/extension/JSONExtensionConverter.java new file mode 100644 index 0000000..8aa2304 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/JSONExtensionConverter.java @@ -0,0 +1,145 @@ +package run.halo.app.extension; + +import static org.openapi4j.core.validation.ValidationSeverity.ERROR; +import static org.springframework.util.StringUtils.arrayToCommaDelimitedString; +import static run.halo.app.extension.ExtensionStoreUtil.buildStoreName; + +import com.fasterxml.jackson.databind.JsonNode; +import com.fasterxml.jackson.databind.ObjectMapper; +import io.swagger.v3.core.util.Json; +import java.io.IOException; +import java.net.MalformedURLException; +import java.net.URL; +import java.util.Optional; +import lombok.extern.slf4j.Slf4j; +import org.openapi4j.core.exception.ResolutionException; +import org.openapi4j.core.model.v3.OAI3; +import org.openapi4j.core.model.v3.OAI3Context; +import org.openapi4j.core.validation.ValidationResult; +import org.openapi4j.core.validation.ValidationResults; +import org.openapi4j.schema.validator.BaseJsonValidator; +import org.openapi4j.schema.validator.ValidationContext; +import org.openapi4j.schema.validator.ValidationData; +import org.openapi4j.schema.validator.v3.SchemaValidator; +import org.springframework.stereotype.Component; +import org.springframework.util.StringUtils; +import run.halo.app.extension.exception.ExtensionConvertException; +import run.halo.app.extension.exception.SchemaViolationException; +import run.halo.app.extension.store.ExtensionStore; + +/** + * JSON implementation of ExtensionConverter. + * + * @author johnniang + */ +@Slf4j +@Component +public class JSONExtensionConverter implements ExtensionConverter { + + public final ObjectMapper objectMapper; + + private final SchemeManager schemeManager; + + public JSONExtensionConverter(SchemeManager schemeManager) { + this.schemeManager = schemeManager; + this.objectMapper = Json.mapper(); + } + + public ObjectMapper getObjectMapper() { + return objectMapper; + } + + @Override + public ExtensionStore convertTo(E extension) { + var gvk = extension.groupVersionKind(); + var scheme = schemeManager.get(gvk); + + try { + var convertedExtension = Optional.of(extension) + .map(item -> scheme.type().isAssignableFrom(item.getClass()) ? item + : objectMapper.convertValue(item, scheme.type()) + ) + .orElseThrow(); + var validation = new ValidationData<>(extension); + + var extensionJsonNode = objectMapper.valueToTree(convertedExtension); + var validator = getValidator(scheme); + validator.validate(extensionJsonNode, validation); + if (!validation.isValid()) { + log.debug("Failed to validate Extension: {}, and errors were: {}", + extension.getClass(), validation.results()); + throw new SchemaViolationException(extension.groupVersionKind(), + validation.results()); + } + + var version = extension.getMetadata().getVersion(); + var storeName = buildStoreName(scheme, extension.getMetadata().getName()); + var data = objectMapper.writeValueAsBytes(extensionJsonNode); + return new ExtensionStore(storeName, data, version); + } catch (IOException e) { + throw new ExtensionConvertException("Failed write Extension as bytes", e); + } catch (ResolutionException e) { + throw new RuntimeException("Failed to create schema validator", e); + } + } + + @Override + public E convertFrom(Class type, ExtensionStore extensionStore) { + try { + var extension = objectMapper.readValue(extensionStore.getData(), type); + extension.getMetadata().setVersion(extensionStore.getVersion()); + return extension; + } catch (IOException e) { + throw new ExtensionConvertException("Failed to read Extension " + type + " from bytes", + e); + } + } + + private SchemaValidator getValidator(Scheme scheme) + throws MalformedURLException, ResolutionException { + var context = new ValidationContext( + new OAI3Context(new URL("file:/"), scheme.openApiSchema())); + context.setFastFail(false); + return new SchemaValidator(context, null, scheme.openApiSchema()); + } + + public static class ExtraValidationValidator extends BaseJsonValidator { + + private String[] fieldNames; + + private static final ValidationResult ERR = + new ValidationResult(ERROR, 1100, "Fields '%s' should not be blank at the same time"); + + private static final ValidationResults.CrumbInfo CRUMB_INFO = + new ValidationResults.CrumbInfo("not-blank-at-least-one", true); + + protected ExtraValidationValidator(ValidationContext context, + JsonNode schemaNode, JsonNode schemaParentNode, + SchemaValidator parentSchema) { + super(context, schemaNode, schemaParentNode, parentSchema); + + var withNode = schemaNode.get("not-blank-at-least-one"); + if (withNode != null && withNode.isTextual()) { + fieldNames = StringUtils.commaDelimitedListToStringArray(withNode.asText()); + withNode.asText(); + } + } + + @Override + public boolean validate(JsonNode valueNode, ValidationData validation) { + if (fieldNames == null) { + return false; + } + for (var fieldName : fieldNames) { + JsonNode value = valueNode.get(fieldName); + if (value != null && value.isTextual() && StringUtils.hasText(value.asText())) { + return false; + } + } + // or all of them are blank string + validation.add(CRUMB_INFO, ERR, arrayToCommaDelimitedString(fieldNames)); + return false; + } + } + +} diff --git a/application/src/main/java/run/halo/app/extension/ReactiveExtensionClientImpl.java b/application/src/main/java/run/halo/app/extension/ReactiveExtensionClientImpl.java new file mode 100644 index 0000000..7187a96 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/ReactiveExtensionClientImpl.java @@ -0,0 +1,487 @@ +package run.halo.app.extension; + +import static org.apache.commons.lang3.RandomStringUtils.randomAlphabetic; +import static org.springframework.util.StringUtils.hasText; + +import com.fasterxml.jackson.databind.ObjectMapper; +import com.fasterxml.jackson.databind.node.ObjectNode; +import java.time.Duration; +import java.time.Instant; +import java.util.Comparator; +import java.util.HashSet; +import java.util.List; +import java.util.Objects; +import java.util.Optional; +import java.util.concurrent.ConcurrentHashMap; +import java.util.concurrent.ConcurrentMap; +import java.util.concurrent.atomic.AtomicBoolean; +import java.util.function.Predicate; +import lombok.NonNull; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.context.event.ContextRefreshedEvent; +import org.springframework.context.event.EventListener; +import org.springframework.dao.DataIntegrityViolationException; +import org.springframework.data.domain.Sort; +import org.springframework.data.util.Predicates; +import org.springframework.stereotype.Component; +import org.springframework.transaction.ReactiveTransactionManager; +import org.springframework.transaction.reactive.TransactionalOperator; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.extension.exception.ExtensionNotFoundException; +import run.halo.app.extension.index.DefaultExtensionIterator; +import run.halo.app.extension.index.ExtensionIterator; +import run.halo.app.extension.index.IndexedQueryEngine; +import run.halo.app.extension.index.IndexerFactory; +import run.halo.app.extension.store.ReactiveExtensionStoreClient; + +@Slf4j +@Component +public class ReactiveExtensionClientImpl implements ReactiveExtensionClient { + + private final ReactiveExtensionStoreClient client; + + private final ExtensionConverter converter; + + private final SchemeManager schemeManager; + + private final Watcher.WatcherComposite watchers = new Watcher.WatcherComposite(); + + private final ObjectMapper objectMapper; + + private final IndexerFactory indexerFactory; + + private final IndexedQueryEngine indexedQueryEngine; + + private final ConcurrentMap indexBuildingState = + new ConcurrentHashMap<>(); + + private TransactionalOperator transactionalOperator; + + public ReactiveExtensionClientImpl(ReactiveExtensionStoreClient client, + ExtensionConverter converter, SchemeManager schemeManager, ObjectMapper objectMapper, + IndexerFactory indexerFactory, IndexedQueryEngine indexedQueryEngine, + ReactiveTransactionManager reactiveTransactionManager) { + this.client = client; + this.converter = converter; + this.schemeManager = schemeManager; + this.objectMapper = objectMapper; + this.indexerFactory = indexerFactory; + this.indexedQueryEngine = indexedQueryEngine; + this.transactionalOperator = TransactionalOperator.create(reactiveTransactionManager); + } + + /** + * Only for test. + */ + void setTransactionalOperator(TransactionalOperator transactionalOperator) { + this.transactionalOperator = transactionalOperator; + } + + @Override + public Flux list(Class type, Predicate predicate, + Comparator comparator) { + var scheme = schemeManager.get(type); + var prefix = ExtensionStoreUtil.buildStoreNamePrefix(scheme); + + return client.listByNamePrefix(prefix) + .map(extensionStore -> converter.convertFrom(type, extensionStore)) + .filter(predicate == null ? Predicates.isTrue() : predicate) + .sort(comparator == null ? Comparator.naturalOrder() : comparator); + } + + @Override + public Mono> list(Class type, Predicate predicate, + Comparator comparator, int page, int size) { + var extensions = list(type, predicate, comparator); + var totalMono = extensions.count(); + if (page > 0) { + extensions = extensions.skip(((long) (page - 1)) * (long) size); + } + if (size > 0) { + extensions = extensions.take(size); + } + return extensions.collectList().zipWith(totalMono) + .map(tuple -> { + List content = tuple.getT1(); + Long total = tuple.getT2(); + return new ListResult<>(page, size, total, content); + }); + } + + @Override + public Flux listAll(Class type, ListOptions options, Sort sort) { + var nullSafeSort = Optional.ofNullable(sort) + .orElseGet(() -> { + log.warn("The sort parameter is null, it is recommended to use Sort.unsorted() " + + "instead and the compatibility support for null will be removed in the " + + "subsequent version."); + return Sort.unsorted(); + }); + var scheme = schemeManager.get(type); + return Mono.fromSupplier( + () -> indexedQueryEngine.retrieveAll(scheme.groupVersionKind(), options, + nullSafeSort)) + .doOnSuccess(objectKeys -> { + if (log.isDebugEnabled()) { + if (objectKeys.size() > 500) { + log.warn("The number of objects retrieved by listAll is too large ({}) " + + "and it is recommended to use paging query.", + objectKeys.size()); + } + } + }) + .flatMapMany(objectKeys -> { + var storeNames = objectKeys.stream() + .map(objectKey -> ExtensionStoreUtil.buildStoreName(scheme, objectKey)) + .toList(); + final long startTimeMs = System.currentTimeMillis(); + return client.listByNames(storeNames) + .map(extensionStore -> converter.convertFrom(type, extensionStore)) + .doOnComplete(() -> log.debug( + "Successfully retrieved all by names from db for {} in {}ms", + scheme.groupVersionKind(), System.currentTimeMillis() - startTimeMs) + ); + }); + } + + @Override + public Mono> listBy(Class type, ListOptions options, + PageRequest page) { + var scheme = schemeManager.get(type); + return Mono.fromSupplier( + () -> indexedQueryEngine.retrieve(scheme.groupVersionKind(), options, page) + ) + .flatMap(objectKeys -> { + var storeNames = objectKeys.get() + .map(objectKey -> ExtensionStoreUtil.buildStoreName(scheme, objectKey)) + .toList(); + final long startTimeMs = System.currentTimeMillis(); + return client.listByNames(storeNames) + .map(extensionStore -> converter.convertFrom(type, extensionStore)) + .doOnComplete(() -> log.debug( + "Successfully retrieved by names from db for {} in {}ms", + scheme.groupVersionKind(), System.currentTimeMillis() - startTimeMs) + ) + .collectList() + .map(result -> new ListResult<>(page.getPageNumber(), page.getPageSize(), + objectKeys.getTotal(), result)); + }) + .defaultIfEmpty(ListResult.emptyResult()); + } + + @Override + public Mono fetch(Class type, String name) { + var storeName = ExtensionStoreUtil.buildStoreName(schemeManager.get(type), name); + return client.fetchByName(storeName) + .map(extensionStore -> converter.convertFrom(type, extensionStore)); + } + + @Override + public Mono fetch(GroupVersionKind gvk, String name) { + var storeName = ExtensionStoreUtil.buildStoreName(schemeManager.get(gvk), name); + return client.fetchByName(storeName) + .map(extensionStore -> converter.convertFrom(Unstructured.class, extensionStore)); + } + + private Mono fetchJsonExtension(GroupVersionKind gvk, String name) { + var storeName = ExtensionStoreUtil.buildStoreName(schemeManager.get(gvk), name); + return client.fetchByName(storeName) + .map(extensionStore -> converter.convertFrom(JsonExtension.class, extensionStore)); + } + + @Override + public Mono get(Class type, String name) { + return fetch(type, name) + .switchIfEmpty(Mono.error(() -> { + var gvk = GroupVersionKind.fromExtension(type); + return new ExtensionNotFoundException(gvk, name); + })); + } + + private Mono get(GroupVersionKind gvk, String name) { + return fetch(gvk, name) + .switchIfEmpty(Mono.error(() -> new ExtensionNotFoundException(gvk, name))); + } + + @Override + public Mono getJsonExtension(GroupVersionKind gvk, String name) { + return fetchJsonExtension(gvk, name) + .switchIfEmpty(Mono.error(() -> new ExtensionNotFoundException(gvk, name))); + } + + + @Override + public Mono create(E extension) { + checkClientWritable(extension); + return Mono.just(extension) + .doOnNext(ext -> { + var metadata = extension.getMetadata(); + // those fields should be managed by halo. + metadata.setCreationTimestamp(Instant.now()); + metadata.setDeletionTimestamp(null); + metadata.setVersion(null); + + if (!hasText(metadata.getName())) { + if (!hasText(metadata.getGenerateName())) { + throw new IllegalArgumentException( + "The metadata.generateName must not be blank when metadata.name is " + + "blank"); + } + // generate name with random text + metadata.setName(metadata.getGenerateName() + randomAlphabetic(5)); + } + extension.setMetadata(metadata); + }) + .map(converter::convertTo) + .flatMap(extStore -> doCreate(extension, extStore.getName(), extStore.getData()) + .doOnNext(created -> watchers.onAdd(convertToRealExtension(created))) + ) + .retryWhen(Retry.backoff(3, Duration.ofMillis(100)) + // retry when generateName is set + .filter(t -> t instanceof DataIntegrityViolationException + && hasText(extension.getMetadata().getGenerateName())) + ); + } + + @Override + public Mono update(E extension) { + checkClientWritable(extension); + // Refactor the atomic reference if we have a better solution. + return getLatest(extension).flatMap(old -> { + var oldJsonExt = new JsonExtension(objectMapper, old); + var newJsonExt = new JsonExtension(objectMapper, extension); + // reset some mandatory fields + var oldMetadata = oldJsonExt.getMetadata(); + var newMetadata = newJsonExt.getMetadata(); + newMetadata.setCreationTimestamp(oldMetadata.getCreationTimestamp()); + newMetadata.setGenerateName(oldMetadata.getGenerateName()); + + // If the extension is an unstructured, the version type may be integer instead of long. + // reset metadata.version for long type. + oldMetadata.setVersion(oldMetadata.getVersion()); + newMetadata.setVersion(newMetadata.getVersion()); + + if (Objects.equals(oldJsonExt, newJsonExt)) { + // skip updating if not data changed. + return Mono.just(extension); + } + + var onlyStatusChanged = + isOnlyStatusChanged(oldJsonExt.getInternal(), newJsonExt.getInternal()); + + var store = this.converter.convertTo(newJsonExt); + var updated = doUpdate(extension, store.getName(), store.getVersion(), store.getData()); + if (!onlyStatusChanged) { + updated = updated.doOnNext(ext -> watchers.onUpdate(convertToRealExtension(old), + convertToRealExtension(ext)) + ); + } + return updated; + }); + } + + private Mono getLatest(Extension extension) { + if (extension instanceof Unstructured) { + return get(extension.groupVersionKind(), extension.getMetadata().getName()); + } + if (extension instanceof JsonExtension) { + return getJsonExtension( + extension.groupVersionKind(), + extension.getMetadata().getName() + ); + } + return get(extension.getClass(), extension.getMetadata().getName()); + } + + @Override + public Mono delete(E extension) { + checkClientWritable(extension); + // set deletionTimestamp + extension.getMetadata().setDeletionTimestamp(Instant.now()); + var extensionStore = converter.convertTo(extension); + return doUpdate(extension, extensionStore.getName(), + extensionStore.getVersion(), extensionStore.getData() + ).doOnNext(updated -> watchers.onDelete(convertToRealExtension(extension))); + } + + @Override + public IndexedQueryEngine indexedQueryEngine() { + return this.indexedQueryEngine; + } + + /** + *

Note of transactional:

+ *

doSomething does not have a transaction, but methodOne and methodTwo have their own + * transactions.

+ *

If methodTwo fails and throws an exception, the transaction in methodTwo will be rolled + * back, but the transaction in methodOne will not.

+ * 
+     * public void doSomething() {
+     *     // with manual transaction
+     *     methodOne();
+     *     // with manual transaction
+     *     methodTwo();
+     * }
+     *
+ *

If doSomething is annotated with @Transactional, both methodOne and methodTwo will be + * executed within the same transaction context.

+ *

If methodTwo fails and throws an exception, the entire transaction will be rolled back, + * including any changes made by methodOne.

+ *

This ensures that all operations within the doSomething method either succeed or fail + * together.

+ *

This example advises against adding transaction annotations to the outer method that + * invokes {@link #update(Extension)} or {@link #create(Extension)}, as doing so could + * undermine the intended transactional integrity of this method.

+ * + *

Note another point:

+ * After executing the {@code client.create(name, data)} method, an attempt is made to + * indexRecord. However, indexRecord might fail due to duplicate keys in the unique index, + * causing the index creation to fail. In such cases, the data created by {@code client + * .create(name, data)} should be rolled back to maintain consistency between the index and + * the data. + *

Until a better solution is found for this consistency problem, do not remove the + * manual transaction here.

+ * 
+     * client.create(name, data)
+     *  .doOnNext(extension -> indexer.indexRecord(convertToRealExtension(extension)))
+     *  .as(transactionalOperator::transactional);
+     *
+ */ + @SuppressWarnings("unchecked") + Mono doCreate(E oldExtension, String name, byte[] data) { + return Mono.defer(() -> { + var gvk = oldExtension.groupVersionKind(); + var type = (Class) oldExtension.getClass(); + var indexer = indexerFactory.getIndexer(gvk); + return client.create(name, data) + .map(created -> converter.convertFrom(type, created)) + .doOnNext(extension -> indexer.indexRecord(convertToRealExtension(extension))) + .as(transactionalOperator::transactional); + }); + } + + /** + * see also {@link #doCreate(Extension, String, byte[])}. + */ + @SuppressWarnings("unchecked") + Mono doUpdate(E oldExtension, String name, Long version, byte[] data) { + return Mono.defer(() -> { + var type = (Class) oldExtension.getClass(); + var indexer = indexerFactory.getIndexer(oldExtension.groupVersionKind()); + return client.update(name, version, data) + .map(updated -> converter.convertFrom(type, updated)) + .doOnNext(extension -> indexer.updateRecord(convertToRealExtension(extension))) + .as(transactionalOperator::transactional); + }); + } + + private Extension convertToRealExtension(Extension extension) { + var gvk = extension.groupVersionKind(); + var realType = schemeManager.get(gvk).type(); + Extension realExtension = extension; + if (extension instanceof Unstructured) { + realExtension = Unstructured.OBJECT_MAPPER.convertValue(extension, realType); + } else if (extension instanceof JsonExtension jsonExtension) { + realExtension = jsonExtension.getObjectMapper().convertValue(jsonExtension, realType); + } + return realExtension; + } + + /** + * If the extension is being updated, we should the index is not building index for the + * extension, otherwise the {@link IllegalStateException} will be thrown. + */ + private void checkClientWritable(E extension) { + var buildingState = indexBuildingState.get(extension.groupVersionKind().groupKind()); + if (buildingState != null && buildingState.get()) { + throw new IllegalStateException("Index is building for " + extension.groupVersionKind() + + ", please wait for a moment and try again."); + } + } + + void setIndexBuildingStateFor(GroupKind groupKind, boolean building) { + indexBuildingState.computeIfAbsent(groupKind, k -> new AtomicBoolean(building)) + .set(building); + } + + @Override + public void watch(Watcher watcher) { + this.watchers.addWatcher(watcher); + } + + private static boolean isOnlyStatusChanged(ObjectNode oldNode, ObjectNode newNode) { + if (Objects.equals(oldNode, newNode)) { + return false; + } + // WARNING!!! + // Do not edit the ObjectNode + var oldFields = new HashSet(); + var newFields = new HashSet(); + oldNode.fieldNames().forEachRemaining(oldFields::add); + newNode.fieldNames().forEachRemaining(newFields::add); + oldFields.remove("status"); + newFields.remove("status"); + if (!Objects.equals(oldFields, newFields)) { + return false; + } + for (var field : oldFields) { + if (!Objects.equals(oldNode.get(field), newNode.get(field))) { + return false; + } + } + return true; + } + + @Component + @RequiredArgsConstructor + class IndexBuildsManager { + private final SchemeManager schemeManager; + private final IndexerFactory indexerFactory; + private final ExtensionConverter converter; + private final ReactiveExtensionStoreClient client; + private final SchemeWatcherManager schemeWatcherManager; + + @NonNull + private ExtensionIterator createExtensionIterator(Scheme scheme) { + var type = scheme.type(); + var prefix = ExtensionStoreUtil.buildStoreNamePrefix(scheme); + return new DefaultExtensionIterator<>(pageable -> + client.listByNamePrefix(prefix, pageable) + .map(page -> + page.map(store -> (Extension) converter.convertFrom(type, store)) + ) + .block() + ); + } + + @EventListener(ContextRefreshedEvent.class) + public void startBuildingIndex() { + final long startTimeMs = System.currentTimeMillis(); + log.info("Start building index for all extensions, please wait..."); + schemeManager.schemes() + .forEach(this::createIndexerFor); + + schemeWatcherManager.register(event -> { + if (event instanceof SchemeWatcherManager.SchemeRegistered schemeRegistered) { + createIndexerFor(schemeRegistered.getNewScheme()); + return; + } + if (event instanceof SchemeWatcherManager.SchemeUnregistered schemeUnregistered) { + var scheme = schemeUnregistered.getDeletedScheme(); + indexerFactory.removeIndexer(scheme); + } + }); + log.info("Successfully built index in {}ms, Preparing to lunch application...", + System.currentTimeMillis() - startTimeMs); + } + + private void createIndexerFor(Scheme scheme) { + setIndexBuildingStateFor(scheme.groupVersionKind().groupKind(), true); + indexerFactory.createIndexerFor(scheme.type(), createExtensionIterator(scheme)); + setIndexBuildingStateFor(scheme.groupVersionKind().groupKind(), false); + } + } +} diff --git a/application/src/main/java/run/halo/app/extension/SchemeWatcherManager.java b/application/src/main/java/run/halo/app/extension/SchemeWatcherManager.java new file mode 100644 index 0000000..5c69a47 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/SchemeWatcherManager.java @@ -0,0 +1,49 @@ +package run.halo.app.extension; + +import java.util.List; +import org.springframework.lang.NonNull; + +public interface SchemeWatcherManager { + + void register(@NonNull SchemeWatcher watcher); + + void unregister(@NonNull SchemeWatcher watcher); + + List watchers(); + + interface SchemeWatcher { + + void onChange(ChangeEvent event); + + } + + interface ChangeEvent { + + } + + class SchemeRegistered implements ChangeEvent { + private final Scheme newScheme; + + public SchemeRegistered(Scheme newScheme) { + this.newScheme = newScheme; + } + + public Scheme getNewScheme() { + return newScheme; + } + } + + class SchemeUnregistered implements ChangeEvent { + + private final Scheme deletedScheme; + + public SchemeUnregistered(Scheme deletedScheme) { + this.deletedScheme = deletedScheme; + } + + public Scheme getDeletedScheme() { + return deletedScheme; + } + + } +} diff --git a/application/src/main/java/run/halo/app/extension/controller/ControllerManager.java b/application/src/main/java/run/halo/app/extension/controller/ControllerManager.java new file mode 100644 index 0000000..2be487c --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/controller/ControllerManager.java @@ -0,0 +1,19 @@ +package run.halo.app.extension.controller; + +public interface ControllerManager { + + /** + * Register and start a reconciler. + * + * @param reconciler reconciler must not be null. + */ + void start(Reconciler reconciler); + + /** + * Unregister and stop a reconciler. + * + * @param reconciler reconciler must not be null. + */ + void stop(Reconciler reconciler); + +} diff --git a/application/src/main/java/run/halo/app/extension/controller/DefaultControllerManager.java b/application/src/main/java/run/halo/app/extension/controller/DefaultControllerManager.java new file mode 100644 index 0000000..f6313d9 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/controller/DefaultControllerManager.java @@ -0,0 +1,83 @@ +package run.halo.app.extension.controller; + +import static org.springframework.core.ResolvableType.forClassWithGenerics; + +import java.util.concurrent.ConcurrentHashMap; +import lombok.extern.slf4j.Slf4j; +import org.springframework.beans.BeansException; +import org.springframework.beans.factory.DisposableBean; +import org.springframework.context.ApplicationContext; +import org.springframework.context.ApplicationContextAware; +import org.springframework.context.ApplicationListener; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.controller.Reconciler.Request; +import run.halo.app.infra.ExtensionInitializedEvent; + +@Slf4j +public class DefaultControllerManager + implements ApplicationListener, + ApplicationContextAware, DisposableBean, ControllerManager { + + private final ExtensionClient client; + + private ApplicationContext applicationContext; + + /** + * Map with key: reconciler class name, value: controller self. + */ + private final ConcurrentHashMap controllers; + + public DefaultControllerManager(ExtensionClient client) { + this.client = client; + controllers = new ConcurrentHashMap<>(); + } + + @Override + public void start(Reconciler reconciler) { + var builder = new ControllerBuilder(reconciler, client); + var controller = reconciler.setupWith(builder); + controllers.put(reconciler.getClass().getName(), controller); + controller.start(); + } + + @Override + public void stop(Reconciler reconciler) { + var controller = controllers.remove(reconciler.getClass().getName()); + // destroy it + disposeSilently(controller); + } + + private static void disposeSilently(Controller controller) { + if (controller == null) { + return; + } + try { + log.info("Shutting down controller {}...", controller.getName()); + controller.dispose(); + log.info("Shutdown controller {} successfully", controller.getName()); + } catch (Throwable t) { + log.error("Failed to dispose controller {}", controller.getName(), t); + } + } + + @Override + public void destroy() { + log.info("Shutting down {} controllers...", controllers.size()); + controllers.forEach((name, controller) -> disposeSilently(controller)); + log.info("Shutdown {} controllers.", controllers.size()); + } + + @Override + public void onApplicationEvent(ExtensionInitializedEvent event) { + // register reconcilers in system after scheme initialized + applicationContext.>getBeanProvider( + forClassWithGenerics(Reconciler.class, Request.class)) + .orderedStream() + .forEach(this::start); + } + + @Override + public void setApplicationContext(ApplicationContext applicationContext) throws BeansException { + this.applicationContext = applicationContext; + } +} diff --git a/application/src/main/java/run/halo/app/extension/exception/ExtensionConvertException.java b/application/src/main/java/run/halo/app/extension/exception/ExtensionConvertException.java new file mode 100644 index 0000000..109d153 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/exception/ExtensionConvertException.java @@ -0,0 +1,17 @@ +package run.halo.app.extension.exception; + +/** + * ExtensionConvertException is thrown when an Extension conversion error occurs. + * + * @author johnniang + */ +public class ExtensionConvertException extends ExtensionException { + + public ExtensionConvertException(String reason) { + super(reason); + } + + public ExtensionConvertException(String reason, Throwable cause) { + super(reason, cause); + } +} diff --git a/application/src/main/java/run/halo/app/extension/exception/ExtensionNotFoundException.java b/application/src/main/java/run/halo/app/extension/exception/ExtensionNotFoundException.java new file mode 100644 index 0000000..a298704 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/exception/ExtensionNotFoundException.java @@ -0,0 +1,13 @@ +package run.halo.app.extension.exception; + +import org.springframework.http.HttpStatus; +import run.halo.app.extension.GroupVersionKind; + +public class ExtensionNotFoundException extends ExtensionException { + + public ExtensionNotFoundException(GroupVersionKind gvk, String name) { + super(HttpStatus.NOT_FOUND, "Extension " + gvk + "/" + name + " was not found.", + null, null, new Object[] {gvk, name}); + } + +} diff --git a/application/src/main/java/run/halo/app/extension/exception/SchemaViolationException.java b/application/src/main/java/run/halo/app/extension/exception/SchemaViolationException.java new file mode 100644 index 0000000..b1697a0 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/exception/SchemaViolationException.java @@ -0,0 +1,28 @@ +package run.halo.app.extension.exception; + +import org.openapi4j.core.validation.ValidationResults; +import org.springframework.http.HttpStatus; +import run.halo.app.extension.GroupVersionKind; + +/** + * This exception is thrown when Schema is violation. + * + * @author johnniang + */ +public class SchemaViolationException extends ExtensionException { + + /** + * Validation errors. + */ + private final ValidationResults errors; + + public SchemaViolationException(GroupVersionKind gvk, ValidationResults errors) { + super(HttpStatus.BAD_REQUEST, "Failed to validate " + gvk, null, null, + new Object[] {gvk, errors}); + this.errors = errors; + } + + public ValidationResults getErrors() { + return errors; + } +} diff --git a/application/src/main/java/run/halo/app/extension/gc/GcControllerInitializer.java b/application/src/main/java/run/halo/app/extension/gc/GcControllerInitializer.java new file mode 100644 index 0000000..6b32f5a --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/gc/GcControllerInitializer.java @@ -0,0 +1,28 @@ +package run.halo.app.extension.gc; + +import org.springframework.beans.factory.DisposableBean; +import org.springframework.context.ApplicationListener; +import org.springframework.stereotype.Component; +import run.halo.app.extension.controller.Controller; +import run.halo.app.infra.ExtensionInitializedEvent; + +@Component +public class GcControllerInitializer + implements ApplicationListener, DisposableBean { + + private final Controller gcController; + + public GcControllerInitializer(GcReconciler gcReconciler) { + this.gcController = gcReconciler.setupWith(null); + } + + @Override + public void onApplicationEvent(ExtensionInitializedEvent event) { + gcController.start(); + } + + @Override + public void destroy() throws Exception { + gcController.dispose(); + } +} diff --git a/application/src/main/java/run/halo/app/extension/gc/GcReconciler.java b/application/src/main/java/run/halo/app/extension/gc/GcReconciler.java new file mode 100644 index 0000000..f805fde --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/gc/GcReconciler.java @@ -0,0 +1,88 @@ +package run.halo.app.extension.gc; + +import java.time.Duration; +import java.time.Instant; +import java.util.function.Predicate; +import lombok.extern.slf4j.Slf4j; +import org.springframework.stereotype.Component; +import org.springframework.util.CollectionUtils; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionConverter; +import run.halo.app.extension.SchemeManager; +import run.halo.app.extension.SchemeWatcherManager; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.DefaultController; +import run.halo.app.extension.controller.DefaultQueue; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.index.IndexerFactory; +import run.halo.app.extension.store.ExtensionStoreClient; + +@Slf4j +@Component +class GcReconciler implements Reconciler { + + private final ExtensionClient client; + + private final ExtensionStoreClient storeClient; + + private final ExtensionConverter converter; + + private final SchemeManager schemeManager; + + private final IndexerFactory indexerFactory; + + private final SchemeWatcherManager schemeWatcherManager; + + GcReconciler(ExtensionClient client, + ExtensionStoreClient storeClient, + ExtensionConverter converter, + SchemeManager schemeManager, IndexerFactory indexerFactory, + SchemeWatcherManager schemeWatcherManager) { + this.client = client; + this.storeClient = storeClient; + this.converter = converter; + this.schemeManager = schemeManager; + this.indexerFactory = indexerFactory; + this.schemeWatcherManager = schemeWatcherManager; + } + + @Override + public Result reconcile(GcRequest request) { + log.debug("Extension {} is being deleted", request); + + client.fetch(request.gvk(), request.name()) + .filter(deletable()) + .ifPresent(extension -> { + var extensionStore = converter.convertTo(extension); + storeClient.delete(extensionStore.getName(), extensionStore.getVersion()); + // drop index for this extension + var indexer = indexerFactory.getIndexer(extension.groupVersionKind()); + indexer.unIndexRecord(request.name()); + log.debug("Extension {} was deleted", request); + }); + + return null; + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + var queue = new DefaultQueue(Instant::now, Duration.ofMillis(500)); + var synchronizer = new GcSynchronizer(client, queue, schemeManager, schemeWatcherManager); + return new DefaultController<>( + "garbage-collector-controller", + this, + queue, + synchronizer, + Duration.ofMillis(500), + Duration.ofSeconds(1000), + // TODO Make it configurable + 10); + } + + private Predicate deletable() { + return extension -> CollectionUtils.isEmpty(extension.getMetadata().getFinalizers()) + && extension.getMetadata().getDeletionTimestamp() != null; + } +} diff --git a/application/src/main/java/run/halo/app/extension/gc/GcRequest.java b/application/src/main/java/run/halo/app/extension/gc/GcRequest.java new file mode 100644 index 0000000..27dfca8 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/gc/GcRequest.java @@ -0,0 +1,12 @@ +package run.halo.app.extension.gc; + +import org.springframework.util.Assert; +import run.halo.app.extension.GroupVersionKind; + +record GcRequest(GroupVersionKind gvk, String name) { + + public GcRequest { + Assert.notNull(gvk, "Group, version and kind must not be null"); + Assert.hasText(name, "Extension name must not be blank"); + } +} diff --git a/application/src/main/java/run/halo/app/extension/gc/GcSynchronizer.java b/application/src/main/java/run/halo/app/extension/gc/GcSynchronizer.java new file mode 100644 index 0000000..7fdeab6 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/gc/GcSynchronizer.java @@ -0,0 +1,79 @@ +package run.halo.app.extension.gc; + +import java.util.List; +import org.springframework.data.domain.Sort; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.SchemeManager; +import run.halo.app.extension.SchemeWatcherManager; +import run.halo.app.extension.SchemeWatcherManager.SchemeRegistered; +import run.halo.app.extension.Watcher; +import run.halo.app.extension.controller.RequestQueue; +import run.halo.app.extension.controller.Synchronizer; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.selector.FieldSelector; + +class GcSynchronizer implements Synchronizer { + + private final ExtensionClient client; + + private final SchemeManager schemeManager; + + private final SchemeWatcherManager schemeWatcherManager; + + private boolean disposed = false; + + private boolean started = false; + + private final Watcher watcher; + + GcSynchronizer(ExtensionClient client, RequestQueue queue, + SchemeManager schemeManager, SchemeWatcherManager schemeWatcherManager) { + this.client = client; + this.schemeManager = schemeManager; + this.watcher = new GcWatcher(queue); + this.schemeWatcherManager = schemeWatcherManager; + } + + @Override + public void dispose() { + if (isDisposed()) { + return; + } + this.disposed = true; + this.watcher.dispose(); + } + + @Override + public boolean isDisposed() { + return disposed; + } + + @Override + public void start() { + if (isDisposed() || started) { + return; + } + this.started = true; + this.schemeWatcherManager.register(event -> { + if (event instanceof SchemeRegistered registeredEvent) { + var newScheme = registeredEvent.getNewScheme(); + listDeleted(newScheme.type()).forEach(watcher::onDelete); + } + }); + client.watch(watcher); + schemeManager.schemes().stream() + .map(Scheme::type) + .forEach(type -> listDeleted(type).forEach(watcher::onDelete)); + } + + List listDeleted(Class type) { + var options = new ListOptions() + .setFieldSelector( + FieldSelector.of(QueryFactory.isNotNull("metadata.deletionTimestamp")) + ); + return client.listAll(type, options, Sort.by(Sort.Order.asc("metadata.creationTimestamp"))); + } +} diff --git a/application/src/main/java/run/halo/app/extension/gc/GcWatcher.java b/application/src/main/java/run/halo/app/extension/gc/GcWatcher.java new file mode 100644 index 0000000..1cfc058 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/gc/GcWatcher.java @@ -0,0 +1,64 @@ +package run.halo.app.extension.gc; + +import run.halo.app.extension.Extension; +import run.halo.app.extension.Watcher; +import run.halo.app.extension.controller.RequestQueue; + +class GcWatcher implements Watcher { + + private final RequestQueue queue; + + private Runnable disposeHook; + + private boolean disposed = false; + + GcWatcher(RequestQueue queue) { + this.queue = queue; + } + + @Override + public void onAdd(Extension extension) { + // TODO Should we ignore finalizers here? + if (!isDisposed() && extension.getMetadata().getDeletionTimestamp() != null) { + queue.addImmediately( + new GcRequest(extension.groupVersionKind(), extension.getMetadata().getName())); + } + } + + @Override + public void onUpdate(Extension oldExt, Extension newExt) { + if (!isDisposed() && newExt.getMetadata().getDeletionTimestamp() != null) { + queue.addImmediately( + new GcRequest(newExt.groupVersionKind(), newExt.getMetadata().getName())); + } + } + + @Override + public void onDelete(Extension extension) { + if (!isDisposed() && extension.getMetadata().getDeletionTimestamp() != null) { + queue.addImmediately( + new GcRequest(extension.groupVersionKind(), extension.getMetadata().getName())); + } + } + + @Override + public void registerDisposeHook(Runnable dispose) { + this.disposeHook = dispose; + } + + @Override + public void dispose() { + if (isDisposed()) { + return; + } + this.disposed = true; + if (this.disposeHook != null) { + this.disposeHook.run(); + } + } + + @Override + public boolean isDisposed() { + return disposed; + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/DefaultExtensionIterator.java b/application/src/main/java/run/halo/app/extension/index/DefaultExtensionIterator.java new file mode 100644 index 0000000..a96b227 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/DefaultExtensionIterator.java @@ -0,0 +1,66 @@ +package run.halo.app.extension.index; + +import java.util.List; +import java.util.NoSuchElementException; +import org.springframework.data.domain.Page; +import org.springframework.data.domain.PageRequest; +import org.springframework.data.domain.Pageable; +import org.springframework.data.domain.Sort; +import run.halo.app.extension.Extension; + +/** + * Default implementation of {@link ExtensionIterator}. + * + * @param the type of the extension. + * @author guqing + * @since 2.12.0 + */ +public class DefaultExtensionIterator implements ExtensionIterator { + static final int DEFAULT_PAGE_SIZE = 500; + private final ExtensionPaginatedLister lister; + private Pageable currentPageable; + private List currentData; + private int currentIndex; + + public DefaultExtensionIterator(ExtensionPaginatedLister lister) { + this(PageRequest.of(0, DEFAULT_PAGE_SIZE, Sort.by("name")), lister); + } + + /** + * Constructs a new DefaultExtensionIterator with the given lister. + * + * @param lister the lister to use to load data. + */ + public DefaultExtensionIterator(Pageable initPageable, ExtensionPaginatedLister lister) { + this.lister = lister; + this.currentPageable = initPageable; + this.currentData = loadData(); + } + + private List loadData() { + Page page = lister.list(currentPageable); + currentPageable = page.hasNext() ? page.nextPageable() : null; + return page.getContent(); + } + + @Override + public boolean hasNext() { + if (currentIndex < currentData.size()) { + return true; + } + if (currentPageable == null) { + return false; + } + currentData = loadData(); + currentIndex = 0; + return !currentData.isEmpty(); + } + + @Override + public E next() { + if (!hasNext()) { + throw new NoSuchElementException(); + } + return currentData.get(currentIndex++); + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/DefaultIndexSpecs.java b/application/src/main/java/run/halo/app/extension/index/DefaultIndexSpecs.java new file mode 100644 index 0000000..831eaae --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/DefaultIndexSpecs.java @@ -0,0 +1,64 @@ +package run.halo.app.extension.index; + +import java.util.List; +import java.util.concurrent.ConcurrentHashMap; +import java.util.concurrent.ConcurrentMap; +import org.apache.commons.lang3.StringUtils; + +/** + * Default implementation of {@link IndexSpecs}. + * + * @author guqing + * @since 2.12.0 + */ +public class DefaultIndexSpecs implements IndexSpecs { + private final ConcurrentMap indexSpecs; + + public DefaultIndexSpecs() { + this.indexSpecs = new ConcurrentHashMap<>(); + } + + @Override + public void add(IndexSpec indexSpec) { + checkIndexSpec(indexSpec); + var indexName = indexSpec.getName(); + var existingSpec = indexSpecs.putIfAbsent(indexName, indexSpec); + if (existingSpec != null) { + throw new IllegalArgumentException( + "IndexSpec with name " + indexName + " already exists"); + } + } + + @Override + public List getIndexSpecs() { + return List.copyOf(this.indexSpecs.values()); + } + + @Override + public IndexSpec getIndexSpec(String indexName) { + return this.indexSpecs.get(indexName); + } + + @Override + public boolean contains(String indexName) { + return this.indexSpecs.containsKey(indexName); + } + + @Override + public void remove(String name) { + this.indexSpecs.remove(name); + } + + private void checkIndexSpec(IndexSpec indexSpec) { + var order = indexSpec.getOrder(); + if (order == null) { + indexSpec.setOrder(IndexSpec.OrderType.ASC); + } + if (StringUtils.isBlank(indexSpec.getName())) { + throw new IllegalArgumentException("IndexSpec name must not be blank"); + } + if (indexSpec.getIndexFunc() == null) { + throw new IllegalArgumentException("IndexSpec indexFunc must not be null"); + } + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/DefaultIndexer.java b/application/src/main/java/run/halo/app/extension/index/DefaultIndexer.java new file mode 100644 index 0000000..10c5709 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/DefaultIndexer.java @@ -0,0 +1,233 @@ +package run.halo.app.extension.index; + +import static run.halo.app.extension.index.IndexerTransaction.ChangeRecord; + +import java.util.ArrayList; +import java.util.Iterator; +import java.util.List; +import java.util.Set; +import java.util.concurrent.locks.Lock; +import java.util.concurrent.locks.ReadWriteLock; +import java.util.concurrent.locks.ReentrantReadWriteLock; +import java.util.function.Function; +import org.apache.commons.lang3.BooleanUtils; +import org.springframework.lang.NonNull; +import run.halo.app.extension.Extension; + +/** + *

A default implementation of {@link Indexer}.

+ *

It uses the {@link IndexEntryContainer} to store the index entries for the specified + * {@link IndexDescriptor}s.

+ * + * @author guqing + * @since 2.12.0 + */ +public class DefaultIndexer implements Indexer { + private final ReadWriteLock rwl = new ReentrantReadWriteLock(); + private final Lock readLock = rwl.readLock(); + private final Lock writeLock = rwl.writeLock(); + + private final List indexDescriptors; + private final IndexEntryContainer indexEntries; + + /** + * Constructs a new {@link DefaultIndexer} with the given {@link IndexDescriptor}s and + * {@link IndexEntryContainer}. + * + * @param indexDescriptors the index descriptors. + * @param oldIndexEntries must have the same size with the given descriptors + */ + public DefaultIndexer(List indexDescriptors, + IndexEntryContainer oldIndexEntries) { + this.indexDescriptors = new ArrayList<>(indexDescriptors); + this.indexEntries = new IndexEntryContainer(); + for (IndexEntry entry : oldIndexEntries) { + this.indexEntries.add(entry); + } + for (IndexDescriptor indexDescriptor : indexDescriptors) { + if (!indexDescriptor.isReady()) { + throw new IllegalArgumentException( + "Index descriptor is not ready for: " + indexDescriptor.getSpec().getName()); + } + if (!this.indexEntries.contains(indexDescriptor)) { + throw new IllegalArgumentException( + "Index entry not found for: " + indexDescriptor.getSpec().getName()); + } + } + } + + static String getObjectKey(Extension extension) { + return PrimaryKeySpecUtils.getObjectPrimaryKey(extension); + } + + @Override + public void indexRecord(E extension) { + writeLock.lock(); + var transaction = new IndexerTransactionImpl(); + try { + transaction.begin(); + doIndexRecord(extension).forEach(transaction::add); + transaction.commit(); + } catch (Throwable e) { + transaction.rollback(); + throw e; + } finally { + writeLock.unlock(); + } + } + + @Override + public void updateRecord(E extension) { + writeLock.lock(); + var transaction = new IndexerTransactionImpl(); + try { + transaction.begin(); + unIndexRecord(getObjectKey(extension)); + indexRecord(extension); + transaction.commit(); + } catch (Throwable e) { + transaction.rollback(); + throw e; + } finally { + writeLock.unlock(); + } + } + + @Override + public void unIndexRecord(String extensionName) { + writeLock.lock(); + var transaction = new IndexerTransactionImpl(); + try { + transaction.begin(); + doUnIndexRecord(extensionName).forEach(transaction::add); + transaction.commit(); + } catch (Throwable e) { + transaction.rollback(); + throw e; + } finally { + writeLock.unlock(); + } + } + + private List doUnIndexRecord(String extensionName) { + List changeRecords = new ArrayList<>(); + for (IndexEntry indexEntry : indexEntries) { + indexEntry.entries().forEach(records -> { + var indexKey = records.getKey(); + var objectKey = records.getValue(); + if (objectKey.equals(extensionName)) { + changeRecords.add(ChangeRecord.onRemove(indexEntry, indexKey, objectKey)); + } + }); + } + return changeRecords; + } + + private List doIndexRecord(E extension) { + List changeRecords = new ArrayList<>(); + for (IndexDescriptor indexDescriptor : indexDescriptors) { + var indexEntry = indexEntries.get(indexDescriptor); + var indexFunc = indexDescriptor.getSpec().getIndexFunc(); + Set indexKeys = indexFunc.getValues(extension); + var objectKey = PrimaryKeySpecUtils.getObjectPrimaryKey(extension); + for (String indexKey : indexKeys) { + changeRecords.add(ChangeRecord.onAdd(indexEntry, indexKey, objectKey)); + } + } + return changeRecords; + } + + @Override + public IndexDescriptor findIndexByName(String name) { + readLock.lock(); + try { + return indexDescriptors.stream() + .filter(descriptor -> descriptor.getSpec().getName().equals(name)) + .findFirst() + .orElse(null); + } finally { + readLock.unlock(); + } + } + + @Override + public IndexEntry createIndexEntry(IndexDescriptor descriptor) { + return new IndexEntryImpl(descriptor); + } + + @Override + public void removeIndexRecords(Function matchFn) { + writeLock.lock(); + try { + var iterator = indexEntries.iterator(); + while (iterator.hasNext()) { + var entry = iterator.next(); + if (BooleanUtils.isTrue(matchFn.apply(entry.getIndexDescriptor()))) { + iterator.remove(); + entry.clear(); + indexEntries.add(createIndexEntry(entry.getIndexDescriptor())); + } + } + } finally { + writeLock.unlock(); + } + } + + @Override + @NonNull + public IndexEntry getIndexEntry(String name) { + readLock.lock(); + try { + var indexDescriptor = findIndexByName(name); + if (indexDescriptor == null) { + throw new IllegalArgumentException( + "No index found for fieldPath [" + name + "], " + + "make sure you have created an index for this field."); + } + if (!indexDescriptor.isReady()) { + throw new IllegalStateException( + "Index [" + name + "] is not ready, " + + "Please wait for more time or check the index status."); + } + return indexEntries.get(indexDescriptor); + } finally { + readLock.unlock(); + } + } + + @Override + public Iterator readyIndexesIterator() { + readLock.lock(); + try { + var readyIndexes = new ArrayList(); + for (IndexEntry entry : indexEntries) { + if (entry.getIndexDescriptor().isReady()) { + readyIndexes.add(entry); + } + } + return readyIndexes.iterator(); + } finally { + readLock.unlock(); + } + } + + @Override + public Iterator allIndexesIterator() { + readLock.lock(); + try { + return indexEntries.iterator(); + } finally { + readLock.unlock(); + } + } + + @Override + public void acquireReadLock() { + readLock.lock(); + } + + @Override + public void releaseReadLock() { + readLock.unlock(); + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/ExtensionIterator.java b/application/src/main/java/run/halo/app/extension/index/ExtensionIterator.java new file mode 100644 index 0000000..faf693c --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/ExtensionIterator.java @@ -0,0 +1,17 @@ +package run.halo.app.extension.index; + +import java.util.Iterator; +import run.halo.app.extension.Extension; + +/** + * An iterator over a collection of extensions, it is used to iterate extensions in a paginated + * way to avoid loading all extensions into memory at once. + * + * @param the type of the extension. + * @author guqing + * @see DefaultExtensionIterator + * @since 2.12.0 + */ +public interface ExtensionIterator extends Iterator { + +} diff --git a/application/src/main/java/run/halo/app/extension/index/ExtensionPaginatedLister.java b/application/src/main/java/run/halo/app/extension/index/ExtensionPaginatedLister.java new file mode 100644 index 0000000..155f954 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/ExtensionPaginatedLister.java @@ -0,0 +1,23 @@ +package run.halo.app.extension.index; + +import org.springframework.data.domain.Page; +import org.springframework.data.domain.Pageable; +import run.halo.app.extension.Extension; + +/** + * List extensions with pagination, used for {@link ExtensionIterator}. + * + * @author guqing + * @since 2.12.0 + */ +@FunctionalInterface +public interface ExtensionPaginatedLister { + + /** + * List extensions with pagination. + * + * @param pageable pageable + * @return page of extensions + */ + Page list(Pageable pageable); +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexBuilder.java b/application/src/main/java/run/halo/app/extension/index/IndexBuilder.java new file mode 100644 index 0000000..4d0f98f --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexBuilder.java @@ -0,0 +1,26 @@ +package run.halo.app.extension.index; + +import org.springframework.lang.NonNull; + +/** + * {@link IndexBuilder} is used to build index for a specific + * {@link run.halo.app.extension.Extension} type on startup. + * + * @author guqing + * @since 2.12.0 + */ +public interface IndexBuilder { + /** + * Start building index for a specific {@link run.halo.app.extension.Extension} type. + */ + void startBuildingIndex(); + + /** + * Gets final index entries after building index. + * + * @return index entries must not be null. + * @throws IllegalStateException if any index entries are not ready yet. + */ + @NonNull + IndexEntryContainer getIndexEntries(); +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexBuilderImpl.java b/application/src/main/java/run/halo/app/extension/index/IndexBuilderImpl.java new file mode 100644 index 0000000..a165e71 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexBuilderImpl.java @@ -0,0 +1,65 @@ +package run.halo.app.extension.index; + +import java.util.LinkedList; +import java.util.List; +import java.util.Set; +import org.springframework.lang.NonNull; +import run.halo.app.extension.Extension; + +public class IndexBuilderImpl implements IndexBuilder { + private final List indexDescriptors; + private final ExtensionIterator extensionIterator; + + private final IndexEntryContainer indexEntries = new IndexEntryContainer(); + + public static IndexBuilder of(List indexDescriptors, + ExtensionIterator extensionIterator) { + return new IndexBuilderImpl(indexDescriptors, extensionIterator); + } + + IndexBuilderImpl(List indexDescriptors, + ExtensionIterator extensionIterator) { + this.indexDescriptors = indexDescriptors; + this.extensionIterator = extensionIterator; + indexDescriptors.forEach(indexDescriptor -> { + var indexEntry = new IndexEntryImpl(indexDescriptor); + indexEntries.add(indexEntry); + }); + } + + @Override + public void startBuildingIndex() { + while (extensionIterator.hasNext()) { + var extensionRecord = extensionIterator.next(); + + indexRecords(extensionRecord); + } + + for (IndexDescriptor indexDescriptor : indexDescriptors) { + indexDescriptor.setReady(true); + } + } + + @Override + @NonNull + public IndexEntryContainer getIndexEntries() { + for (IndexEntry indexEntry : indexEntries) { + if (!indexEntry.getIndexDescriptor().isReady()) { + throw new IllegalStateException( + "IndexEntry are not ready yet for index named " + + indexEntry.getIndexDescriptor().getSpec().getName()); + } + } + return indexEntries; + } + + private void indexRecords(E extension) { + for (IndexDescriptor indexDescriptor : indexDescriptors) { + var indexEntry = indexEntries.get(indexDescriptor); + var indexFunc = indexDescriptor.getSpec().getIndexFunc(); + Set indexKeys = indexFunc.getValues(extension); + indexEntry.addEntry(new LinkedList<>(indexKeys), + PrimaryKeySpecUtils.getObjectPrimaryKey(extension)); + } + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexEntryContainer.java b/application/src/main/java/run/halo/app/extension/index/IndexEntryContainer.java new file mode 100644 index 0000000..dac484a --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexEntryContainer.java @@ -0,0 +1,71 @@ +package run.halo.app.extension.index; + +import java.util.Iterator; +import java.util.concurrent.ConcurrentHashMap; +import java.util.concurrent.ConcurrentMap; +import java.util.function.Consumer; +import org.springframework.lang.NonNull; + +/** + *

A container for {@link IndexEntry}s, it is used to store all {@link IndexEntry}s according + * to the {@link IndexDescriptor}.

+ *

This class is thread-safe.

+ * + * @author guqing + * @see DefaultIndexer + * @since 2.12.0 + */ +public class IndexEntryContainer implements Iterable { + private final ConcurrentMap indexEntryMap; + + public IndexEntryContainer() { + this.indexEntryMap = new ConcurrentHashMap<>(); + } + + /** + * Add an {@link IndexEntry} to this container. + * + * @param entry the entry to add + * @throws IllegalArgumentException if the entry already exists + */ + public void add(IndexEntry entry) { + IndexEntry existing = indexEntryMap.putIfAbsent(entry.getIndexDescriptor(), entry); + if (existing != null) { + throw new IllegalArgumentException( + "Index entry already exists for " + entry.getIndexDescriptor()); + } + } + + /** + * Get the {@link IndexEntry} for the given {@link IndexDescriptor}. + * + * @param indexDescriptor the index descriptor + * @return the index entry + */ + public IndexEntry get(IndexDescriptor indexDescriptor) { + return indexEntryMap.get(indexDescriptor); + } + + public boolean contains(IndexDescriptor indexDescriptor) { + return indexEntryMap.containsKey(indexDescriptor); + } + + public void remove(IndexDescriptor indexDescriptor) { + indexEntryMap.remove(indexDescriptor); + } + + public int size() { + return indexEntryMap.size(); + } + + @Override + @NonNull + public Iterator iterator() { + return indexEntryMap.values().iterator(); + } + + @Override + public void forEach(Consumer action) { + indexEntryMap.values().forEach(action); + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexEntryImpl.java b/application/src/main/java/run/halo/app/extension/index/IndexEntryImpl.java new file mode 100644 index 0000000..b677d6e --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexEntryImpl.java @@ -0,0 +1,165 @@ +package run.halo.app.extension.index; + +import com.google.common.collect.ListMultimap; +import com.google.common.collect.MultimapBuilder; +import java.util.Collection; +import java.util.Comparator; +import java.util.HashMap; +import java.util.List; +import java.util.Map; +import java.util.NavigableSet; +import java.util.TreeSet; +import java.util.concurrent.locks.Lock; +import java.util.concurrent.locks.ReadWriteLock; +import java.util.concurrent.locks.ReentrantReadWriteLock; +import lombok.Data; +import run.halo.app.infra.exception.DuplicateNameException; + +@Data +public class IndexEntryImpl implements IndexEntry { + private final ReadWriteLock rwl = new ReentrantReadWriteLock(); + private final Lock readLock = rwl.readLock(); + private final Lock writeLock = rwl.writeLock(); + + private final IndexDescriptor indexDescriptor; + private final ListMultimap indexKeyObjectNamesMap; + + /** + * Creates a new {@link IndexEntryImpl} for the given {@link IndexDescriptor}. + * + * @param indexDescriptor for which the {@link IndexEntryImpl} is created. + */ + public IndexEntryImpl(IndexDescriptor indexDescriptor) { + this.indexDescriptor = indexDescriptor; + this.indexKeyObjectNamesMap = MultimapBuilder.treeKeys(keyComparator()) + .linkedListValues().build(); + } + + Comparator keyComparator() { + var order = indexDescriptor.getSpec().getOrder(); + if (IndexSpec.OrderType.ASC.equals(order)) { + return KeyComparator.INSTANCE; + } + return KeyComparator.INSTANCE.reversed(); + } + + @Override + public void acquireReadLock() { + this.rwl.readLock().lock(); + } + + @Override + public void releaseReadLock() { + this.rwl.readLock().unlock(); + } + + @Override + public void addEntry(List keys, String objectName) { + var isUnique = indexDescriptor.getSpec().isUnique(); + for (String key : keys) { + writeLock.lock(); + try { + if (isUnique && indexKeyObjectNamesMap.containsKey(key)) { + throw new DuplicateNameException( + "The value [%s] is already exists for unique index [%s].".formatted( + key, + indexDescriptor.getSpec().getName()), + null, + "problemDetail.index.duplicateKey", + new Object[] {key, indexDescriptor.getSpec().getName()}); + } + this.indexKeyObjectNamesMap.put(key, objectName); + } finally { + writeLock.unlock(); + } + } + } + + @Override + public void removeEntry(String indexedKey, String objectKey) { + writeLock.lock(); + try { + indexKeyObjectNamesMap.remove(indexedKey, objectKey); + } finally { + writeLock.unlock(); + } + } + + @Override + public void remove(String objectName) { + writeLock.lock(); + try { + indexKeyObjectNamesMap.values().removeIf(objectName::equals); + } finally { + writeLock.unlock(); + } + } + + @Override + public NavigableSet indexedKeys() { + readLock.lock(); + try { + var keys = indexKeyObjectNamesMap.keySet(); + var resultSet = new TreeSet<>(keyComparator()); + resultSet.addAll(keys); + return resultSet; + } finally { + readLock.unlock(); + } + } + + @Override + public Collection> entries() { + readLock.lock(); + try { + return indexKeyObjectNamesMap.entries(); + } finally { + readLock.unlock(); + } + } + + @Override + public Map getIdPositionMap() { + readLock.lock(); + try { + // asMap is sorted by key + var keyObjectMap = getKeyObjectMap(); + int i = 0; + var idPositionMap = new HashMap(); + for (var valueIdsEntry : keyObjectMap.entrySet()) { + var ids = valueIdsEntry.getValue(); + for (String id : ids) { + idPositionMap.put(id, i); + } + i++; + } + return idPositionMap; + } finally { + readLock.unlock(); + } + } + + protected Map> getKeyObjectMap() { + return indexKeyObjectNamesMap.asMap(); + } + + @Override + public List getObjectNamesBy(String indexKey) { + readLock.lock(); + try { + return indexKeyObjectNamesMap.get(indexKey); + } finally { + readLock.unlock(); + } + } + + @Override + public void clear() { + writeLock.lock(); + try { + indexKeyObjectNamesMap.clear(); + } finally { + writeLock.unlock(); + } + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexSpecRegistryImpl.java b/application/src/main/java/run/halo/app/extension/index/IndexSpecRegistryImpl.java new file mode 100644 index 0000000..1831ff8 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexSpecRegistryImpl.java @@ -0,0 +1,85 @@ +package run.halo.app.extension.index; + +import java.util.Objects; +import java.util.concurrent.ConcurrentHashMap; +import java.util.concurrent.ConcurrentMap; +import org.springframework.lang.NonNull; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ExtensionStoreUtil; +import run.halo.app.extension.Scheme; + +/** + *

A default implementation of {@link IndexSpecRegistry}.

+ * + * @author guqing + * @since 2.12.0 + */ +public class IndexSpecRegistryImpl implements IndexSpecRegistry { + private final ConcurrentMap extensionIndexSpecs = new ConcurrentHashMap<>(); + + @Override + public IndexSpecs indexFor(Scheme scheme) { + var keySpace = getKeySpace(scheme); + var indexSpecs = new DefaultIndexSpecs(); + useDefaultIndexSpec(scheme.type(), indexSpecs); + extensionIndexSpecs.put(keySpace, indexSpecs); + return indexSpecs; + } + + @Override + public IndexSpecs getIndexSpecs(Scheme scheme) { + var keySpace = getKeySpace(scheme); + var result = extensionIndexSpecs.get(keySpace); + if (result == null) { + throw new IllegalArgumentException( + "No index specs found for extension type: " + scheme.groupVersionKind() + + ", make sure you have called indexFor() before calling getIndexSpecs()"); + + } + return result; + } + + @Override + public boolean contains(Scheme scheme) { + var keySpace = getKeySpace(scheme); + return extensionIndexSpecs.containsKey(keySpace); + } + + @Override + public void removeIndexSpecs(Scheme scheme) { + var keySpace = getKeySpace(scheme); + extensionIndexSpecs.remove(keySpace); + } + + @Override + @NonNull + public String getKeySpace(Scheme scheme) { + return ExtensionStoreUtil.buildStoreNamePrefix(scheme); + } + + void useDefaultIndexSpec(Class extensionType, + IndexSpecs indexSpecs) { + var nameIndexSpec = PrimaryKeySpecUtils.primaryKeyIndexSpec(extensionType); + indexSpecs.add(nameIndexSpec); + + var creationTimestampIndexSpec = new IndexSpec() + .setName("metadata.creationTimestamp") + .setOrder(IndexSpec.OrderType.ASC) + .setUnique(false) + .setIndexFunc(IndexAttributeFactory.simpleAttribute(extensionType, + e -> e.getMetadata().getCreationTimestamp().toString()) + ); + indexSpecs.add(creationTimestampIndexSpec); + + var deletionTimestampIndexSpec = new IndexSpec() + .setName("metadata.deletionTimestamp") + .setOrder(IndexSpec.OrderType.ASC) + .setUnique(false) + .setIndexFunc(IndexAttributeFactory.simpleAttribute(extensionType, + e -> Objects.toString(e.getMetadata().getDeletionTimestamp(), null)) + ); + indexSpecs.add(deletionTimestampIndexSpec); + + indexSpecs.add(LabelIndexSpecUtils.labelIndexSpec(extensionType)); + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexedQueryEngineImpl.java b/application/src/main/java/run/halo/app/extension/index/IndexedQueryEngineImpl.java new file mode 100644 index 0000000..809cea4 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexedQueryEngineImpl.java @@ -0,0 +1,211 @@ +package run.halo.app.extension.index; + +import java.util.Comparator; +import java.util.HashMap; +import java.util.HashSet; +import java.util.List; +import java.util.Map; +import java.util.NavigableSet; +import java.util.Set; +import java.util.TreeSet; +import java.util.concurrent.TimeUnit; +import java.util.stream.Collectors; +import lombok.NonNull; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.data.domain.Sort; +import org.springframework.stereotype.Component; +import org.springframework.util.CollectionUtils; +import org.springframework.util.StopWatch; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.index.query.QueryIndexView; +import run.halo.app.extension.index.query.QueryIndexViewImpl; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; +import run.halo.app.extension.router.selector.SelectorMatcher; + +/** + * A default implementation of {@link IndexedQueryEngine}. + * + * @author guqing + * @since 2.12.0 + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class IndexedQueryEngineImpl implements IndexedQueryEngine { + + private final IndexerFactory indexerFactory; + + @Override + public ListResult retrieve(GroupVersionKind type, ListOptions options, + PageRequest page) { + var allMatchedResult = doRetrieve(type, options, page.getSort()); + var list = ListResult.subList(allMatchedResult, page.getPageNumber(), page.getPageSize()); + return new ListResult<>(page.getPageNumber(), page.getPageSize(), + allMatchedResult.size(), list); + } + + @Override + public List retrieveAll(GroupVersionKind type, ListOptions options, Sort sort) { + return doRetrieve(type, options, sort); + } + + NavigableSet retrieveForLabelMatchers(Indexer indexer, + List labelMatchers) { + var objectLabelMap = ObjectLabelMap.buildFrom(indexer, labelMatchers); + // O(k×m) time complexity, k is the number of keys, m is the number of labelMatchers + return objectLabelMap.objectIdLabelsMap() + .entrySet() + .stream() + .filter(entry -> { + var labels = entry.getValue(); + // object match all labels will be returned + return labelMatchers.stream() + .allMatch(matcher -> matcher.test(labels.get(matcher.getKey()))); + }) + .map(Map.Entry::getKey) + .collect(Collectors.toCollection(TreeSet::new)); + } + + NavigableSet evaluateSelectorsForIndex(Indexer indexer, QueryIndexView indexView, + ListOptions options) { + final var hasLabelSelector = hasLabelSelector(options.getLabelSelector()); + final var hasFieldSelector = hasFieldSelector(options.getFieldSelector()); + + if (!hasLabelSelector && !hasFieldSelector) { + return QueryFactory.all().matches(indexView); + } + + // only label selector + if (hasLabelSelector && !hasFieldSelector) { + return retrieveForLabelMatchers(indexer, options.getLabelSelector().getMatchers()); + } + + // only field selector + if (!hasLabelSelector) { + var fieldSelector = options.getFieldSelector(); + return fieldSelector.query().matches(indexView); + } + + // both label and field selector + var fieldSelector = options.getFieldSelector(); + var forField = fieldSelector.query().matches(indexView); + var forLabel = + retrieveForLabelMatchers(indexer, options.getLabelSelector().getMatchers()); + + // determine the optimal retainAll direction based on the size of the collection + var resultSet = (forField.size() <= forLabel.size()) ? forField : forLabel; + resultSet.retainAll((resultSet == forField) ? forLabel : forField); + return resultSet; + } + + List doRetrieve(GroupVersionKind type, ListOptions options, Sort sort) { + var indexer = indexerFactory.getIndexer(type); + + StopWatch stopWatch = new StopWatch(type.toString()); + + stopWatch.start("Check index status to ensure all indexes are ready"); + var fieldNamesUsedInQuery = getFieldNamesUsedInListOptions(options, sort); + checkIndexForNames(indexer, fieldNamesUsedInQuery); + stopWatch.stop(); + + var indexView = new QueryIndexViewImpl(indexer); + + stopWatch.start("Evaluate selectors for index"); + var resultSet = evaluateSelectorsForIndex(indexer, indexView, options); + stopWatch.stop(); + + stopWatch.start("Sort result set by sort order"); + var result = indexView.sortBy(resultSet, sort); + stopWatch.stop(); + + if (log.isTraceEnabled()) { + log.trace("Retrieve result from indexer by query [{}],\n {}", options, + stopWatch.prettyPrint(TimeUnit.MILLISECONDS)); + } + return result; + } + + void checkIndexForNames(Indexer indexer, Set indexNames) { + indexer.acquireReadLock(); + try { + for (String indexName : indexNames) { + // get index entry will throw exception if index not found + indexer.getIndexEntry(indexName); + } + } finally { + indexer.releaseReadLock(); + } + } + + @NonNull + private Set getFieldNamesUsedInListOptions(ListOptions options, Sort sort) { + var fieldNamesUsedInQuery = new HashSet(); + fieldNamesUsedInQuery.add(PrimaryKeySpecUtils.PRIMARY_INDEX_NAME); + for (Sort.Order order : sort) { + fieldNamesUsedInQuery.add(order.getProperty()); + } + var hasFieldSelector = hasFieldSelector(options.getFieldSelector()); + if (hasFieldSelector) { + var fieldQuery = options.getFieldSelector().query(); + var fieldNames = QueryFactory.getFieldNamesUsedInQuery(fieldQuery); + fieldNamesUsedInQuery.addAll(fieldNames); + } + return fieldNamesUsedInQuery; + } + + boolean hasLabelSelector(LabelSelector labelSelector) { + return labelSelector != null && !CollectionUtils.isEmpty(labelSelector.getMatchers()); + } + + boolean hasFieldSelector(FieldSelector fieldSelector) { + return fieldSelector != null; + } + + record ObjectLabelMap(Map> objectIdLabelsMap) { + + public static ObjectLabelMap buildFrom(Indexer indexer, + List labelMatchers) { + indexer.acquireReadLock(); + try { + final var objectNameLabelsMap = new HashMap>(); + final var labelIndexEntry = indexer.getIndexEntry(LabelIndexSpecUtils.LABEL_PATH); + // O(m) time complexity, m is the number of labelMatchers + final var labelKeysToQuery = labelMatchers.stream() + .sorted(Comparator.comparing(SelectorMatcher::getKey)) + .map(SelectorMatcher::getKey) + .collect(Collectors.toSet()); + + labelIndexEntry.entries().forEach(entry -> { + // key is labelKey=labelValue, value is objectName + var labelPair = LabelIndexSpecUtils.labelKeyValuePair(entry.getKey()); + if (!labelKeysToQuery.contains(labelPair.getFirst())) { + return; + } + objectNameLabelsMap.computeIfAbsent(entry.getValue(), k -> new HashMap<>()) + .put(labelPair.getFirst(), labelPair.getSecond()); + }); + + var nameIndexOperator = new IndexEntryOperatorImpl( + indexer.getIndexEntry(PrimaryKeySpecUtils.PRIMARY_INDEX_NAME) + ); + var allIndexedObjectNames = nameIndexOperator.getValues(); + + // remove all object names that exist labels,O(n) time complexity + allIndexedObjectNames.removeAll(objectNameLabelsMap.keySet()); + // add absent object names to object labels map + for (String name : allIndexedObjectNames) { + objectNameLabelsMap.put(name, new HashMap<>()); + } + return new ObjectLabelMap(objectNameLabelsMap); + } finally { + indexer.releaseReadLock(); + } + } + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexerFactory.java b/application/src/main/java/run/halo/app/extension/index/IndexerFactory.java new file mode 100644 index 0000000..1128928 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexerFactory.java @@ -0,0 +1,56 @@ +package run.halo.app.extension.index; + +import org.springframework.lang.NonNull; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ExtensionStoreUtil; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.SchemeManager; + +/** + *

{@link IndexerFactory} is used to create {@link Indexer} for {@link Extension} type.

+ *

It's stored {@link Indexer} by key space, the key space is generated by {@link Scheme} like + * {@link ExtensionStoreUtil#buildStoreNamePrefix(Scheme)}.

+ *

E.g. create {@link Indexer} for Post extension, the mapping relationship is:

+ * 
+ *    /registry/content.halo.run/posts -> Indexer
+ *
+ * + * @author guqing + * @since 2.12.0 + */ +public interface IndexerFactory { + + /** + * Create {@link Indexer} for {@link Extension} type. + * + * @param extensionType the extension type must exist in {@link SchemeManager}. + * @param extensionIterator the extension iterator to iterate all records for the extension type + * @return created {@link Indexer} + */ + @NonNull + Indexer createIndexerFor(Class extensionType, + ExtensionIterator extensionIterator); + + /** + * Get {@link Indexer} for {@link GroupVersionKind}. + * + * @param gvk the group version kind must exist in {@link SchemeManager} + * @return the indexer + * @throws IllegalArgumentException if the {@link GroupVersionKind} represents a special + * {@link Extension} not exists in {@link SchemeManager} + */ + @NonNull + Indexer getIndexer(GroupVersionKind gvk); + + boolean contains(GroupVersionKind gvk); + + /** + *

Remove a specific {@link Indexer} by {@link Scheme} that represents a {@link Extension} + * .

+ *

Usually, the specified {@link Scheme} is not in {@link SchemeManager} at this time.

+ * + * @param scheme the scheme represents a {@link Extension} + */ + void removeIndexer(Scheme scheme); +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexerFactoryImpl.java b/application/src/main/java/run/halo/app/extension/index/IndexerFactoryImpl.java new file mode 100644 index 0000000..f0932ab --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexerFactoryImpl.java @@ -0,0 +1,84 @@ +package run.halo.app.extension.index; + +import java.util.concurrent.ConcurrentHashMap; +import java.util.concurrent.ConcurrentMap; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ExtensionStoreUtil; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.SchemeManager; + +/** + *

A default implementation of {@link IndexerFactory}.

+ * + * @author guqing + * @since 2.12.0 + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class IndexerFactoryImpl implements IndexerFactory { + private final ConcurrentMap keySpaceIndexer = new ConcurrentHashMap<>(); + + private final IndexSpecRegistry indexSpecRegistry; + private final SchemeManager schemeManager; + + @Override + @NonNull + public Indexer createIndexerFor(Class extensionType, + ExtensionIterator extensionIterator) { + var scheme = schemeManager.get(extensionType); + var keySpace = indexSpecRegistry.getKeySpace(scheme); + if (keySpaceIndexer.containsKey(keySpace)) { + throw new IllegalArgumentException("Indexer already exists for type: " + keySpace); + } + if (!indexSpecRegistry.contains(scheme)) { + indexSpecRegistry.indexFor(scheme); + } + var specs = indexSpecRegistry.getIndexSpecs(scheme); + var indexDescriptors = specs.getIndexSpecs() + .stream() + .map(IndexDescriptor::new) + .toList(); + + final long startTimeMs = System.currentTimeMillis(); + log.info("Start building index for type: {}, please wait...", keySpace); + var indexBuilder = IndexBuilderImpl.of(indexDescriptors, extensionIterator); + indexBuilder.startBuildingIndex(); + var indexer = + new DefaultIndexer(indexDescriptors, indexBuilder.getIndexEntries()); + keySpaceIndexer.put(keySpace, indexer); + log.info("Index for type: {} built successfully, cost {} ms", keySpace, + System.currentTimeMillis() - startTimeMs); + return indexer; + } + + @Override + @NonNull + public Indexer getIndexer(GroupVersionKind gvk) { + var scheme = schemeManager.get(gvk); + var indexer = keySpaceIndexer.get(indexSpecRegistry.getKeySpace(scheme)); + if (indexer == null) { + throw new IllegalArgumentException("No indexer found for type: " + gvk); + } + return indexer; + } + + @Override + public boolean contains(GroupVersionKind gvk) { + var schemeOpt = schemeManager.fetch(gvk); + return schemeOpt.isPresent() + && keySpaceIndexer.containsKey(indexSpecRegistry.getKeySpace(schemeOpt.get())); + } + + @Override + public void removeIndexer(Scheme scheme) { + var keySpace = ExtensionStoreUtil.buildStoreNamePrefix(scheme); + keySpaceIndexer.remove(keySpace); + indexSpecRegistry.removeIndexSpecs(scheme); + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexerTransaction.java b/application/src/main/java/run/halo/app/extension/index/IndexerTransaction.java new file mode 100644 index 0000000..cbb090d --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexerTransaction.java @@ -0,0 +1,40 @@ +package run.halo.app.extension.index; + +import org.springframework.util.Assert; + +/** + *

{@link IndexerTransaction} is a transactional interface for {@link Indexer} to ensure + * consistency when {@link Indexer} indexes objects.

+ *

It is not supported to call {@link #begin()} twice without calling {@link #commit()} or + * {@link #rollback()} in between and it is not supported to call one of {@link #commit()} or + * {@link #rollback()} in different thread than {@link #begin()} was called.

+ * + * @author guqing + * @since 2.12.0 + */ +public interface IndexerTransaction { + void begin(); + + void commit(); + + void rollback(); + + void add(ChangeRecord changeRecord); + + record ChangeRecord(IndexEntry indexEntry, String key, String value, boolean isAdd) { + + public ChangeRecord { + Assert.notNull(indexEntry, "IndexEntry must not be null"); + Assert.notNull(key, "Key must not be null"); + Assert.notNull(value, "Value must not be null"); + } + + public static ChangeRecord onAdd(IndexEntry indexEntry, String key, String value) { + return new ChangeRecord(indexEntry, key, value, true); + } + + public static ChangeRecord onRemove(IndexEntry indexEntry, String key, String value) { + return new ChangeRecord(indexEntry, key, value, false); + } + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/IndexerTransactionImpl.java b/application/src/main/java/run/halo/app/extension/index/IndexerTransactionImpl.java new file mode 100644 index 0000000..d90bf92 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/IndexerTransactionImpl.java @@ -0,0 +1,105 @@ +package run.halo.app.extension.index; + +import java.util.ArrayDeque; +import java.util.Deque; +import java.util.List; + +/** + * Implementation of {@link IndexerTransaction}. + * + * @author guqing + * @since 2.12.0 + */ +public class IndexerTransactionImpl implements IndexerTransaction { + private Deque changeRecords; + private boolean inTransaction = false; + private Long threadId; + + @Override + public synchronized void begin() { + if (inTransaction) { + throw new IllegalStateException("Transaction already active"); + } + threadId = Thread.currentThread().getId(); + this.changeRecords = new ArrayDeque<>(); + inTransaction = true; + } + + @Override + public synchronized void commit() { + checkThread(); + if (!inTransaction) { + throw new IllegalStateException("Transaction not started"); + } + Deque committedRecords = new ArrayDeque<>(); + try { + while (!changeRecords.isEmpty()) { + var changeRecord = changeRecords.pop(); + applyChange(changeRecord); + committedRecords.push(changeRecord); + } + // Reset threadId after transaction ends + inTransaction = false; + // Reset threadId after transaction ends + threadId = null; + } catch (Exception e) { + // Rollback the changes that were committed before the error occurred + while (!committedRecords.isEmpty()) { + var changeRecord = committedRecords.pop(); + revertChange(changeRecord); + } + throw e; + } + } + + @Override + public synchronized void rollback() { + checkThread(); + if (!inTransaction) { + throw new IllegalStateException("Transaction not started"); + } + changeRecords.clear(); + inTransaction = false; + // Reset threadId after transaction ends + threadId = null; + } + + @Override + public synchronized void add(ChangeRecord changeRecord) { + if (inTransaction) { + changeRecords.push(changeRecord); + } else { + throw new IllegalStateException("No active transaction to add changes"); + } + } + + private void applyChange(ChangeRecord changeRecord) { + var indexEntry = changeRecord.indexEntry(); + var key = changeRecord.key(); + var value = changeRecord.value(); + var isAdd = changeRecord.isAdd(); + if (isAdd) { + indexEntry.addEntry(List.of(key), value); + } else { + indexEntry.removeEntry(key, value); + } + } + + private void revertChange(ChangeRecord changeRecord) { + var indexEntry = changeRecord.indexEntry(); + var key = changeRecord.key(); + var value = changeRecord.value(); + var isAdd = changeRecord.isAdd(); + if (isAdd) { + indexEntry.removeEntry(key, value); + } else { + indexEntry.addEntry(List.of(key), value); + } + } + + private void checkThread() { + if (threadId != null && !threadId.equals(Thread.currentThread().getId())) { + throw new IllegalStateException("Transaction cannot span multiple threads!"); + } + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/LabelIndexSpecUtils.java b/application/src/main/java/run/halo/app/extension/index/LabelIndexSpecUtils.java new file mode 100644 index 0000000..4117245 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/LabelIndexSpecUtils.java @@ -0,0 +1,55 @@ +package run.halo.app.extension.index; + +import java.util.Set; +import java.util.stream.Collectors; +import lombok.experimental.UtilityClass; +import org.springframework.data.util.Pair; +import run.halo.app.extension.Extension; + +@UtilityClass +public class LabelIndexSpecUtils { + + public static final String LABEL_PATH = "metadata.labels"; + + /** + * Creates a label index spec. + * + * @param extensionType extension type + * @param extension type + * @return label index spec + */ + public static IndexSpec labelIndexSpec(Class extensionType) { + return new IndexSpec() + .setName(LABEL_PATH) + .setOrder(IndexSpec.OrderType.ASC) + .setUnique(false) + .setIndexFunc(IndexAttributeFactory.multiValueAttribute(extensionType, + LabelIndexSpecUtils::labelIndexValueFunc) + ); + } + + /** + * Label key-value pair from indexed label key string, e.g. "key=value". + * + * @param indexedLabelKey indexed label key + * @return label key-value pair + */ + public static Pair labelKeyValuePair(String indexedLabelKey) { + var idx = indexedLabelKey.indexOf('='); + if (idx != -1) { + return Pair.of(indexedLabelKey.substring(0, idx), indexedLabelKey.substring(idx + 1)); + } + throw new IllegalArgumentException("Invalid label key-value pair: " + indexedLabelKey); + } + + static Set labelIndexValueFunc(E obj) { + var labels = obj.getMetadata().getLabels(); + if (labels == null) { + return Set.of(); + } + return labels.entrySet() + .stream() + .map(entry -> entry.getKey() + "=" + entry.getValue()) + .collect(Collectors.toSet()); + } +} diff --git a/application/src/main/java/run/halo/app/extension/index/PrimaryKeySpecUtils.java b/application/src/main/java/run/halo/app/extension/index/PrimaryKeySpecUtils.java new file mode 100644 index 0000000..6fb11bf --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/index/PrimaryKeySpecUtils.java @@ -0,0 +1,30 @@ +package run.halo.app.extension.index; + +import lombok.experimental.UtilityClass; +import run.halo.app.extension.Extension; + +@UtilityClass +public class PrimaryKeySpecUtils { + public static final String PRIMARY_INDEX_NAME = "metadata.name"; + + /** + * Primary key index spec. + * + * @param type the type + * @param the type parameter of {@link Extension} + * @return the index spec + */ + public static IndexSpec primaryKeyIndexSpec(Class type) { + return new IndexSpec() + .setName(PRIMARY_INDEX_NAME) + .setOrder(IndexSpec.OrderType.ASC) + .setUnique(true) + .setIndexFunc(IndexAttributeFactory.simpleAttribute(type, + e -> e.getMetadata().getName()) + ); + } + + public static String getObjectPrimaryKey(Extension obj) { + return obj.getMetadata().getName(); + } +} diff --git a/application/src/main/java/run/halo/app/extension/router/ExtensionCompositeRouterFunction.java b/application/src/main/java/run/halo/app/extension/router/ExtensionCompositeRouterFunction.java new file mode 100644 index 0000000..bf5e981 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/router/ExtensionCompositeRouterFunction.java @@ -0,0 +1,87 @@ +package run.halo.app.extension.router; + +import java.util.Collections; +import java.util.Map; +import java.util.concurrent.ConcurrentHashMap; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.boot.context.event.ApplicationStartedEvent; +import org.springframework.context.ApplicationListener; +import org.springframework.lang.NonNull; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.SchemeManager; +import run.halo.app.extension.SchemeWatcherManager; +import run.halo.app.extension.SchemeWatcherManager.SchemeWatcher; + +public class ExtensionCompositeRouterFunction implements + RouterFunction, + SchemeWatcher, + InitializingBean, + ApplicationListener { + + private final Map> schemeRouterFuncMapper; + + private final ReactiveExtensionClient client; + + private final SchemeManager schemeManager; + + private final SchemeWatcherManager watcherManager; + + public ExtensionCompositeRouterFunction(ReactiveExtensionClient client, + SchemeWatcherManager watcherManager, + SchemeManager schemeManager) { + this.client = client; + this.schemeManager = schemeManager; + this.watcherManager = watcherManager; + schemeRouterFuncMapper = new ConcurrentHashMap<>(); + } + + @Override + @NonNull + public Mono> route(@NonNull ServerRequest request) { + return Flux.fromIterable(getRouterFunctions()) + .concatMap(routerFunction -> routerFunction.route(request)) + .next(); + } + + @Override + public void accept(@NonNull RouterFunctions.Visitor visitor) { + getRouterFunctions().forEach(routerFunction -> routerFunction.accept(visitor)); + } + + private Iterable> getRouterFunctions() { + // TODO Copy router functions here + return Collections.unmodifiableCollection(schemeRouterFuncMapper.values()); + } + + @Override + public void onChange(SchemeWatcherManager.ChangeEvent event) { + if (event instanceof SchemeWatcherManager.SchemeRegistered registeredEvent) { + var scheme = registeredEvent.getNewScheme(); + var factory = new ExtensionRouterFunctionFactory(scheme, client); + this.schemeRouterFuncMapper.put(scheme, factory.create()); + } else if (event instanceof SchemeWatcherManager.SchemeUnregistered unregisteredEvent) { + this.schemeRouterFuncMapper.remove(unregisteredEvent.getDeletedScheme()); + } + } + + @Override + public void onApplicationEvent(ApplicationStartedEvent event) { + schemeManager.schemes().forEach(scheme -> { + var factory = new ExtensionRouterFunctionFactory(scheme, client); + this.schemeRouterFuncMapper.put(scheme, factory.create()); + }); + } + + @Override + public void afterPropertiesSet() { + watcherManager.register(this); + } +} diff --git a/application/src/main/java/run/halo/app/extension/router/ExtensionCreateHandler.java b/application/src/main/java/run/halo/app/extension/router/ExtensionCreateHandler.java new file mode 100644 index 0000000..e90c9bd --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/router/ExtensionCreateHandler.java @@ -0,0 +1,45 @@ +package run.halo.app.extension.router; + +import static run.halo.app.extension.router.ExtensionRouterFunctionFactory.PathPatternGenerator.buildExtensionPathPattern; + +import java.net.URI; +import org.springframework.http.MediaType; +import org.springframework.lang.NonNull; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.Unstructured; +import run.halo.app.extension.exception.ExtensionConvertException; +import run.halo.app.extension.router.ExtensionRouterFunctionFactory.CreateHandler; + +class ExtensionCreateHandler implements CreateHandler { + + private final Scheme scheme; + + private final ReactiveExtensionClient client; + + public ExtensionCreateHandler(Scheme scheme, ReactiveExtensionClient client) { + this.scheme = scheme; + this.client = client; + } + + @Override + @NonNull + public Mono handle(@NonNull ServerRequest request) { + return request.bodyToMono(Unstructured.class) + .switchIfEmpty(Mono.error(() -> new ExtensionConvertException( + "Cannot read body to " + scheme.groupVersionKind()))) + .flatMap(client::create) + .flatMap(createdExt -> ServerResponse + .created(URI.create(pathPattern() + "/" + createdExt.getMetadata().getName())) + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(createdExt)); + } + + @Override + public String pathPattern() { + return buildExtensionPathPattern(scheme); + } +} diff --git a/application/src/main/java/run/halo/app/extension/router/ExtensionDeleteHandler.java b/application/src/main/java/run/halo/app/extension/router/ExtensionDeleteHandler.java new file mode 100644 index 0000000..ca31560 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/router/ExtensionDeleteHandler.java @@ -0,0 +1,40 @@ +package run.halo.app.extension.router; + +import static run.halo.app.extension.router.ExtensionRouterFunctionFactory.PathPatternGenerator.buildExtensionPathPattern; + +import org.springframework.http.MediaType; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.router.ExtensionRouterFunctionFactory.DeleteHandler; + +class ExtensionDeleteHandler implements DeleteHandler { + + private final Scheme scheme; + + private final ReactiveExtensionClient client; + + ExtensionDeleteHandler(Scheme scheme, ReactiveExtensionClient client) { + this.scheme = scheme; + this.client = client; + } + + @Override + public Mono handle(ServerRequest request) { + var name = request.pathVariable("name"); + return client.get(scheme.type(), name) + .flatMap(client::delete) + .flatMap(deleted -> ServerResponse + .ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(deleted)); + } + + @Override + public String pathPattern() { + return buildExtensionPathPattern(scheme) + "/{name}"; + } + +} diff --git a/application/src/main/java/run/halo/app/extension/router/ExtensionGetHandler.java b/application/src/main/java/run/halo/app/extension/router/ExtensionGetHandler.java new file mode 100644 index 0000000..ebd0064 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/router/ExtensionGetHandler.java @@ -0,0 +1,39 @@ +package run.halo.app.extension.router; + +import static run.halo.app.extension.router.ExtensionRouterFunctionFactory.PathPatternGenerator.buildExtensionPathPattern; + +import org.springframework.http.MediaType; +import org.springframework.lang.NonNull; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.router.ExtensionRouterFunctionFactory.GetHandler; + +class ExtensionGetHandler implements GetHandler { + private final Scheme scheme; + + private final ReactiveExtensionClient client; + + public ExtensionGetHandler(Scheme scheme, ReactiveExtensionClient client) { + this.scheme = scheme; + this.client = client; + } + + @Override + public String pathPattern() { + return buildExtensionPathPattern(scheme) + "/{name}"; + } + + @Override + @NonNull + public Mono handle(@NonNull ServerRequest request) { + var extensionName = request.pathVariable("name"); + + return client.get(scheme.type(), extensionName) + .flatMap(extension -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(extension)); + } +} diff --git a/application/src/main/java/run/halo/app/extension/router/ExtensionListHandler.java b/application/src/main/java/run/halo/app/extension/router/ExtensionListHandler.java new file mode 100644 index 0000000..f11e979 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/router/ExtensionListHandler.java @@ -0,0 +1,42 @@ +package run.halo.app.extension.router; + +import static run.halo.app.extension.router.ExtensionRouterFunctionFactory.PathPatternGenerator.buildExtensionPathPattern; + +import org.springframework.http.MediaType; +import org.springframework.lang.NonNull; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.router.ExtensionRouterFunctionFactory.ListHandler; + +class ExtensionListHandler implements ListHandler { + private final Scheme scheme; + + private final ReactiveExtensionClient client; + + public ExtensionListHandler(Scheme scheme, ReactiveExtensionClient client) { + this.scheme = scheme; + this.client = client; + } + + @Override + @NonNull + public Mono handle(@NonNull ServerRequest request) { + var queryParams = new SortableRequest(request.exchange()); + return client.listBy(scheme.type(), + queryParams.toListOptions(), + queryParams.toPageRequest() + ) + .flatMap(listResult -> ServerResponse + .ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(listResult)); + } + + @Override + public String pathPattern() { + return buildExtensionPathPattern(scheme); + } +} diff --git a/application/src/main/java/run/halo/app/extension/router/ExtensionPatchHandler.java b/application/src/main/java/run/halo/app/extension/router/ExtensionPatchHandler.java new file mode 100644 index 0000000..6f5f1fd --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/router/ExtensionPatchHandler.java @@ -0,0 +1,80 @@ +package run.halo.app.extension.router; + +import static run.halo.app.extension.router.ExtensionRouterFunctionFactory.PathPatternGenerator.buildExtensionPathPattern; + +import com.fasterxml.jackson.databind.node.ObjectNode; +import com.github.fge.jsonpatch.JsonPatch; +import com.github.fge.jsonpatch.JsonPatchException; +import java.util.List; +import org.springframework.http.MediaType; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import org.springframework.web.server.UnsupportedMediaTypeStatusException; +import reactor.core.publisher.Mono; +import run.halo.app.extension.JsonExtension; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.router.ExtensionRouterFunctionFactory.PatchHandler; + +/** + * Handler for patching extension. + * + * @author johnniang + */ +public class ExtensionPatchHandler implements PatchHandler { + + private static final MediaType JSON_PATCH_MEDIA_TYPE = + MediaType.valueOf("application/json-patch+json"); + + private final Scheme scheme; + + private final ReactiveExtensionClient client; + + public ExtensionPatchHandler(Scheme scheme, ReactiveExtensionClient client) { + this.scheme = scheme; + this.client = client; + } + + @Override + public Mono handle(ServerRequest request) { + var name = request.pathVariable("name"); + var contentTypeOpt = request.headers().contentType(); + if (contentTypeOpt.isEmpty()) { + return Mono.error( + new UnsupportedMediaTypeStatusException((MediaType) null, + List.of(JSON_PATCH_MEDIA_TYPE)) + ); + } + var contentType = contentTypeOpt.get(); + if (!contentType.isCompatibleWith(JSON_PATCH_MEDIA_TYPE)) { + return Mono.error( + new UnsupportedMediaTypeStatusException(contentType, List.of(JSON_PATCH_MEDIA_TYPE)) + ); + } + + return request.bodyToMono(JsonPatch.class) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException("Request body required."))) + .flatMap(jsonPatch -> client.getJsonExtension(scheme.groupVersionKind(), name) + .flatMap(jsonExtension -> { + try { + // apply the patch + var appliedJsonNode = + (ObjectNode) jsonPatch.apply(jsonExtension.getInternal()); + var patchedExtension = + new JsonExtension(jsonExtension.getObjectMapper(), appliedJsonNode); + // update the patched extension + return client.update(patchedExtension); + } catch (JsonPatchException e) { + return Mono.error(e); + } + })) + .flatMap(updated -> ServerResponse.ok().bodyValue(updated)); + } + + @Override + public String pathPattern() { + return buildExtensionPathPattern(scheme) + "/{name}"; + } + +} diff --git a/application/src/main/java/run/halo/app/extension/router/ExtensionRouterFunctionFactory.java b/application/src/main/java/run/halo/app/extension/router/ExtensionRouterFunctionFactory.java new file mode 100644 index 0000000..976e1ad --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/router/ExtensionRouterFunctionFactory.java @@ -0,0 +1,161 @@ +package run.halo.app.extension.router; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; + +import io.swagger.v3.core.util.RefUtils; +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.lang.NonNull; +import org.springframework.util.StringUtils; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Scheme; + +public class ExtensionRouterFunctionFactory { + + private final Scheme scheme; + + private final ReactiveExtensionClient client; + + public ExtensionRouterFunctionFactory(Scheme scheme, ReactiveExtensionClient client) { + this.scheme = scheme; + this.client = client; + } + + @NonNull + public RouterFunction create() { + var getHandler = new ExtensionGetHandler(scheme, client); + var listHandler = new ExtensionListHandler(scheme, client); + var createHandler = new ExtensionCreateHandler(scheme, client); + var updateHandler = new ExtensionUpdateHandler(scheme, client); + var deleteHandler = new ExtensionDeleteHandler(scheme, client); + var patchHandler = new ExtensionPatchHandler(scheme, client); + // TODO More handlers here + var gvk = scheme.groupVersionKind(); + var kind = gvk.kind(); + var tagName = gvk.kind() + StringUtils.capitalize(gvk.version()); + return SpringdocRouteBuilder.route() + .GET(getHandler.pathPattern(), getHandler, + builder -> builder.operationId("get" + kind) + .description("Get " + kind) + .tag(tagName) + .parameter(parameterBuilder().in(ParameterIn.PATH) + .name("name") + .description("Name of " + scheme.singular())) + .response(responseBuilder().responseCode("200") + .description("Response single " + scheme.singular()) + .implementation(scheme.type()))) + .GET(listHandler.pathPattern(), listHandler, + builder -> { + builder.operationId("list" + kind) + .description("List " + kind) + .tag(tagName) + .response(responseBuilder().responseCode("200") + .description("Response " + scheme.plural()) + .implementation(ListResult.generateGenericClass(scheme))); + SortableRequest.buildParameters(builder); + }) + .POST(createHandler.pathPattern(), createHandler, + builder -> builder.operationId("create" + kind) + .description("Create " + kind) + .tag(tagName) + .requestBody(requestBodyBuilder() + .description("Fresh " + scheme.singular()) + .implementation(scheme.type())) + .response(responseBuilder().responseCode("200") + .description("Response " + scheme.plural() + " created just now") + .implementation(scheme.type()))) + .PUT(updateHandler.pathPattern(), updateHandler, + builder -> builder.operationId("update" + kind) + .description("Update " + kind) + .tag(tagName) + .parameter(parameterBuilder().in(ParameterIn.PATH) + .name("name") + .description("Name of " + scheme.singular())) + .requestBody(requestBodyBuilder() + .description("Updated " + scheme.singular()) + .implementation(scheme.type())) + .response(responseBuilder().responseCode("200") + .description("Response " + scheme.plural() + " updated just now") + .implementation(scheme.type()))) + .PATCH(patchHandler.pathPattern(), patchHandler, + builder -> builder.operationId("patch" + kind) + .description("Patch " + kind) + .tag(tagName) + .parameter(parameterBuilder().in(ParameterIn.PATH) + .name("name") + .description("Name of " + scheme.singular())) + .requestBody(requestBodyBuilder() + .content(contentBuilder() + .mediaType("application/json-patch+json") + .schema( + schemaBuilder().ref(RefUtils.constructRef(JsonPatch.SCHEMA_NAME)) + ) + ) + ) + .response(responseBuilder().responseCode("200") + .description("Response " + scheme.singular() + " patched just now") + .implementation(scheme.type()) + ) + ) + .DELETE(deleteHandler.pathPattern(), deleteHandler, + builder -> builder.operationId("delete" + kind) + .description("Delete " + kind) + .tag(tagName) + .parameter(parameterBuilder().in(ParameterIn.PATH) + .name("name") + .description("Name of " + scheme.singular())) + .response(responseBuilder().responseCode("200") + .description("Response " + scheme.singular() + " deleted just now"))) + .build(); + } + + interface PathPatternGenerator { + + String pathPattern(); + + static String buildExtensionPathPattern(Scheme scheme) { + var gvk = scheme.groupVersionKind(); + StringBuilder pattern = new StringBuilder(); + if (gvk.hasGroup()) { + pattern.append("/apis/").append(gvk.group()); + } else { + pattern.append("/api"); + } + return pattern.append('/').append(gvk.version()).append('/').append(scheme.plural()) + .toString(); + } + } + + interface GetHandler extends HandlerFunction, PathPatternGenerator { + + } + + interface ListHandler extends HandlerFunction, PathPatternGenerator { + + } + + interface CreateHandler extends HandlerFunction, PathPatternGenerator { + + } + + interface UpdateHandler extends HandlerFunction, PathPatternGenerator { + + } + + interface DeleteHandler extends HandlerFunction, PathPatternGenerator { + + } + + interface PatchHandler extends HandlerFunction, PathPatternGenerator { + + } + +} diff --git a/application/src/main/java/run/halo/app/extension/router/ExtensionUpdateHandler.java b/application/src/main/java/run/halo/app/extension/router/ExtensionUpdateHandler.java new file mode 100644 index 0000000..c13b1b8 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/router/ExtensionUpdateHandler.java @@ -0,0 +1,48 @@ +package run.halo.app.extension.router; + +import static run.halo.app.extension.router.ExtensionRouterFunctionFactory.PathPatternGenerator.buildExtensionPathPattern; + +import java.util.Objects; +import org.springframework.http.MediaType; +import org.springframework.util.StringUtils; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.Unstructured; +import run.halo.app.extension.router.ExtensionRouterFunctionFactory.UpdateHandler; + +class ExtensionUpdateHandler implements UpdateHandler { + + private final Scheme scheme; + + private final ReactiveExtensionClient client; + + ExtensionUpdateHandler(Scheme scheme, ReactiveExtensionClient client) { + this.scheme = scheme; + this.client = client; + } + + @Override + public Mono handle(ServerRequest request) { + String name = request.pathVariable("name"); + return request.bodyToMono(Unstructured.class) + .filter(unstructured -> unstructured.getMetadata() != null + && StringUtils.hasText(unstructured.getMetadata().getName()) + && Objects.equals(unstructured.getMetadata().getName(), name)) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException( + "Cannot read body to " + scheme.groupVersionKind()))) + .flatMap(client::update) + .flatMap(updated -> ServerResponse + .ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(updated)); + } + + @Override + public String pathPattern() { + return buildExtensionPathPattern(scheme) + "/{name}"; + } +} diff --git a/application/src/main/java/run/halo/app/extension/router/JsonPatch.java b/application/src/main/java/run/halo/app/extension/router/JsonPatch.java new file mode 100644 index 0000000..55b3bf5 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/router/JsonPatch.java @@ -0,0 +1,104 @@ +package run.halo.app.extension.router; + +import static io.swagger.v3.oas.models.Components.COMPONENTS_SCHEMAS_REF; + +import io.swagger.v3.oas.models.Components; +import io.swagger.v3.oas.models.media.Schema; +import io.swagger.v3.oas.models.media.StringSchema; +import java.util.List; +import java.util.Map; +import java.util.function.Function; + +/** + * JSON schema for JSONPatch operations. + * + * @author johnniang + */ +public final class JsonPatch { + + private JsonPatch() {} + + public static final String SCHEMA_NAME = "JsonPatch"; + + public static void addSchema(Components components) { + Function> opSchemaFunc = + op -> new StringSchema()._enum(List.of(op)).type("string"); + var pathSchema = new StringSchema() + .description("A JSON Pointer path") + .pattern("^(/[^/~]*(~[01][^/~]*)*)*$") + .example("/a/b/c"); + var valueSchema = new Schema<>().description("Value can be any JSON value"); + var operationSchema = new io.swagger.v3.oas.models.media.Schema<>() + .oneOf(List.of( + new io.swagger.v3.oas.models.media.Schema<>() + .$ref(COMPONENTS_SCHEMAS_REF + "AddOperation"), + new io.swagger.v3.oas.models.media.Schema<>() + .$ref(COMPONENTS_SCHEMAS_REF + "ReplaceOperation"), + new io.swagger.v3.oas.models.media.Schema<>() + .$ref(COMPONENTS_SCHEMAS_REF + "TestOperation"), + new io.swagger.v3.oas.models.media.Schema<>() + .$ref(COMPONENTS_SCHEMAS_REF + "RemoveOperation"), + new io.swagger.v3.oas.models.media.Schema<>() + .$ref(COMPONENTS_SCHEMAS_REF + "MoveOperation"), + new io.swagger.v3.oas.models.media.Schema<>() + .$ref(COMPONENTS_SCHEMAS_REF + "CopyOperation") + )); + + components.addSchemas("AddOperation", new io.swagger.v3.oas.models.media.ObjectSchema() + .required(List.of("op", "path", "value")) + .properties(Map.of( + "op", opSchemaFunc.apply("add"), + "path", pathSchema, + "value", valueSchema + ))) + ; + components.addSchemas("ReplaceOperation", new io.swagger.v3.oas.models.media.ObjectSchema() + .required(List.of("op", "path", "value")) + .properties(Map.of( + "op", opSchemaFunc.apply("replace"), + "path", pathSchema, + "value", valueSchema + ))) + ; + components.addSchemas("TestOperation", new io.swagger.v3.oas.models.media.ObjectSchema() + .required(List.of("op", "path", "value")) + .properties(Map.of( + "op", opSchemaFunc.apply("test"), + "path", pathSchema, + "value", valueSchema + ))) + ; + components.addSchemas("RemoveOperation", new io.swagger.v3.oas.models.media.ObjectSchema() + .required(List.of("op", "path")) + .properties(Map.of( + "op", opSchemaFunc.apply("remove"), + "path", pathSchema + ))) + ; + components.addSchemas("MoveOperation", new io.swagger.v3.oas.models.media.ObjectSchema() + .required(List.of("op", "from", "path")) + .properties(Map.of( + "op", opSchemaFunc.apply("move"), + "from", pathSchema + .description("A JSON Pointer path pointing to the location to move/copy from."), + "path", pathSchema + ))) + ; + components.addSchemas("CopyOperation", new io.swagger.v3.oas.models.media.ObjectSchema() + .required(List.of("op", "from", "path")) + .properties(Map.of( + "op", opSchemaFunc.apply("copy"), + "from", pathSchema + .description("A JSON Pointer path pointing to the location to move/copy from."), + "path", pathSchema + ))) + ; + components.addSchemas(SCHEMA_NAME, new io.swagger.v3.oas.models.media.ArraySchema() + .description("JSON schema for JSONPatch operations") + .uniqueItems(true) + .minItems(1) + .items(operationSchema) + ); + } + +} diff --git a/application/src/main/java/run/halo/app/extension/store/ExtensionStore.java b/application/src/main/java/run/halo/app/extension/store/ExtensionStore.java new file mode 100644 index 0000000..ad21ed7 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/store/ExtensionStore.java @@ -0,0 +1,55 @@ +package run.halo.app.extension.store; + +import jakarta.persistence.Lob; +import lombok.Data; +import org.springframework.data.annotation.Id; +import org.springframework.data.annotation.Version; +import org.springframework.data.relational.core.mapping.Table; + +/** + * ExtensionStore is an entity for storing Extension data into database. + * + * @author johnniang + */ +@Data +@Table(name = "extensions") +public class ExtensionStore { + + /** + * Extension store name, which is globally unique. + * We will use it to query Extensions by using left-like query clause. + */ + @Id + private String name; + + /** + * Exactly Extension body, which might be base64 format. + */ + @Lob + private byte[] data; + + /** + * This field only for serving optimistic lock value. + */ + @Version + private Long version; + + public ExtensionStore() { + } + + public ExtensionStore(String name, byte[] data) { + this.name = name; + this.data = data; + } + + public ExtensionStore(String name, Long version) { + this.name = name; + this.version = version; + } + + public ExtensionStore(String name, byte[] data, Long version) { + this.name = name; + this.data = data; + this.version = version; + } +} diff --git a/application/src/main/java/run/halo/app/extension/store/ExtensionStoreClient.java b/application/src/main/java/run/halo/app/extension/store/ExtensionStoreClient.java new file mode 100644 index 0000000..45e3adf --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/store/ExtensionStoreClient.java @@ -0,0 +1,64 @@ +package run.halo.app.extension.store; + +import java.util.List; +import java.util.Optional; +import org.springframework.data.domain.Page; +import org.springframework.data.domain.Pageable; + +/** + * An interface to query and operate ExtensionStore. + * + * @author johnniang + */ +public interface ExtensionStoreClient { + + /** + * Lists all ExtensionStores by name prefix. + * + * @param prefix is the prefix of ExtensionStore name. + * @return all ExtensionStores which names start with the prefix. + */ + List listByNamePrefix(String prefix); + + Page listByNamePrefix(String prefix, Pageable pageable); + + List listByNames(List names); + + /** + * Fetches an ExtensionStore by unique name. + * + * @param name is the full name of an ExtensionStore. + * @return an optional ExtensionStore. + */ + Optional fetchByName(String name); + + /** + * Creates an ExtensionStore. + * + * @param name is the full name of an ExtensionStore. + * @param data is Extension body to be persisted. + * @return a fresh ExtensionStore created just now. + */ + ExtensionStore create(String name, byte[] data); + + /** + * Updates an ExtensionStore with version to prevent concurrent update. + * + * @param name is the full name of an ExtensionStore. + * @param version is the expected version of ExtensionStore. + * @param data is Extension body to be updated. + * @return updated ExtensionStore with a fresh version. + */ + ExtensionStore update(String name, Long version, byte[] data); + + /** + * Deletes an ExtensionStore by name and current version. + * + * @param name is the full name of an ExtensionStore. + * @param version is the expected version of ExtensionStore. + * @return previous ExtensionStore. + */ + ExtensionStore delete(String name, Long version); + + //TODO add watch method here. +} diff --git a/application/src/main/java/run/halo/app/extension/store/ExtensionStoreClientJPAImpl.java b/application/src/main/java/run/halo/app/extension/store/ExtensionStoreClientJPAImpl.java new file mode 100644 index 0000000..e503070 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/store/ExtensionStoreClientJPAImpl.java @@ -0,0 +1,57 @@ +package run.halo.app.extension.store; + +import java.util.List; +import java.util.Optional; +import org.springframework.data.domain.Page; +import org.springframework.data.domain.Pageable; +import org.springframework.stereotype.Service; + +/** + * An implementation of ExtensionStoreClient using JPA. + * + * @author johnniang + */ +@Service +public class ExtensionStoreClientJPAImpl implements ExtensionStoreClient { + + private final ReactiveExtensionStoreClient storeClient; + + public ExtensionStoreClientJPAImpl(ReactiveExtensionStoreClient storeClient) { + this.storeClient = storeClient; + } + + @Override + public List listByNamePrefix(String prefix) { + return storeClient.listByNamePrefix(prefix).collectList().block(); + } + + @Override + public Page listByNamePrefix(String prefix, Pageable pageable) { + return storeClient.listByNamePrefix(prefix, pageable).block(); + } + + @Override + public List listByNames(List names) { + return storeClient.listByNames(names).collectList().block(); + } + + @Override + public Optional fetchByName(String name) { + return storeClient.fetchByName(name).blockOptional(); + } + + @Override + public ExtensionStore create(String name, byte[] data) { + return storeClient.create(name, data).block(); + } + + @Override + public ExtensionStore update(String name, Long version, byte[] data) { + return storeClient.update(name, version, data).block(); + } + + @Override + public ExtensionStore delete(String name, Long version) { + return storeClient.delete(name, version).block(); + } +} diff --git a/application/src/main/java/run/halo/app/extension/store/ExtensionStoreRepository.java b/application/src/main/java/run/halo/app/extension/store/ExtensionStoreRepository.java new file mode 100644 index 0000000..ddf4203 --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/store/ExtensionStoreRepository.java @@ -0,0 +1,38 @@ +package run.halo.app.extension.store; + +import java.util.List; +import org.springframework.data.domain.Pageable; +import org.springframework.data.r2dbc.repository.R2dbcRepository; +import org.springframework.stereotype.Repository; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +/** + * This repository contains some basic operations on ExtensionStore entity. + * + * @author johnniang + */ +@Repository +public interface ExtensionStoreRepository extends R2dbcRepository { + + /** + * Finds all ExtensionStore by name prefix. + * + * @param prefix is the prefix of name. + * @return all ExtensionStores which names starts with the given prefix. + */ + Flux findAllByNameStartingWith(String prefix); + + Flux findAllByNameStartingWith(String prefix, Pageable pageable); + + Mono countByNameStartingWith(String prefix); + + /** + *

Finds all ExtensionStore by name in, the result no guarantee the same order as the given + * names, so if you want this, please order the result by yourself.

+ * + * @param names names to find + * @return a flux of extension stores + */ + Flux findByNameIn(List names); +} diff --git a/application/src/main/java/run/halo/app/extension/store/ReactiveExtensionStoreClient.java b/application/src/main/java/run/halo/app/extension/store/ReactiveExtensionStoreClient.java new file mode 100644 index 0000000..ab7ba7b --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/store/ReactiveExtensionStoreClient.java @@ -0,0 +1,31 @@ +package run.halo.app.extension.store; + +import java.util.List; +import org.springframework.data.domain.Page; +import org.springframework.data.domain.Pageable; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +public interface ReactiveExtensionStoreClient { + + Flux listByNamePrefix(String prefix); + + Mono> listByNamePrefix(String prefix, Pageable pageable); + + /** + * List stores by names and return data according to given names order. + * + * @param names store names to list + * @return a flux of extension stores + */ + Flux listByNames(List names); + + Mono fetchByName(String name); + + Mono create(String name, byte[] data); + + Mono update(String name, Long version, byte[] data); + + Mono delete(String name, Long version); + +} diff --git a/application/src/main/java/run/halo/app/extension/store/ReactiveExtensionStoreClientImpl.java b/application/src/main/java/run/halo/app/extension/store/ReactiveExtensionStoreClientImpl.java new file mode 100644 index 0000000..465245e --- /dev/null +++ b/application/src/main/java/run/halo/app/extension/store/ReactiveExtensionStoreClientImpl.java @@ -0,0 +1,71 @@ +package run.halo.app.extension.store; + +import java.util.Comparator; +import java.util.List; +import java.util.function.ToIntFunction; +import org.springframework.dao.DuplicateKeyException; +import org.springframework.data.domain.Page; +import org.springframework.data.domain.PageImpl; +import org.springframework.data.domain.Pageable; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.infra.exception.DuplicateNameException; + +@Component +public class ReactiveExtensionStoreClientImpl implements ReactiveExtensionStoreClient { + + private final ExtensionStoreRepository repository; + + public ReactiveExtensionStoreClientImpl(ExtensionStoreRepository repository) { + this.repository = repository; + } + + @Override + public Flux listByNamePrefix(String prefix) { + return repository.findAllByNameStartingWith(prefix); + } + + @Override + public Mono> listByNamePrefix(String prefix, Pageable pageable) { + return this.repository.findAllByNameStartingWith(prefix, pageable) + .collectList() + .zipWith(this.repository.countByNameStartingWith(prefix)) + .map(p -> new PageImpl<>(p.getT1(), pageable, p.getT2())); + } + + @Override + public Flux listByNames(List names) { + ToIntFunction comparator = + store -> names.indexOf(store.getName()); + return repository.findByNameIn(names) + .sort(Comparator.comparingInt(comparator)); + } + + @Override + public Mono fetchByName(String name) { + return repository.findById(name); + } + + @Override + public Mono create(String name, byte[] data) { + return repository.save(new ExtensionStore(name, data)) + .onErrorMap(DuplicateKeyException.class, + t -> new DuplicateNameException("Duplicate name detected.", t)); + } + + @Override + public Mono update(String name, Long version, byte[] data) { + return repository.save(new ExtensionStore(name, data, version)); + } + + @Override + public Mono delete(String name, Long version) { + return repository.findById(name) + .flatMap(extensionStore -> { + // reset the version + extensionStore.setVersion(version); + return repository.delete(extensionStore).thenReturn(extensionStore); + }); + } +} diff --git a/application/src/main/java/run/halo/app/infra/DefaultBackupRootGetter.java b/application/src/main/java/run/halo/app/infra/DefaultBackupRootGetter.java new file mode 100644 index 0000000..976467a --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/DefaultBackupRootGetter.java @@ -0,0 +1,20 @@ +package run.halo.app.infra; + +import java.nio.file.Path; +import org.springframework.stereotype.Component; +import run.halo.app.infra.properties.HaloProperties; + +@Component +public class DefaultBackupRootGetter implements BackupRootGetter { + + private final HaloProperties haloProperties; + + public DefaultBackupRootGetter(HaloProperties haloProperties) { + this.haloProperties = haloProperties; + } + + @Override + public Path get() { + return haloProperties.getWorkDir().resolve("backups"); + } +} diff --git a/application/src/main/java/run/halo/app/infra/DefaultExternalLinkProcessor.java b/application/src/main/java/run/halo/app/infra/DefaultExternalLinkProcessor.java new file mode 100644 index 0000000..f3b9091 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/DefaultExternalLinkProcessor.java @@ -0,0 +1,54 @@ +package run.halo.app.infra; + +import java.net.URI; +import java.net.URISyntaxException; +import java.net.URL; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import run.halo.app.infra.utils.PathUtils; + +/** + * Default implementation of {@link ExternalLinkProcessor}. + * + * @author guqing + * @since 2.9.0 + */ +@Component +@RequiredArgsConstructor +public class DefaultExternalLinkProcessor implements ExternalLinkProcessor { + private final ExternalUrlSupplier externalUrlSupplier; + + @Override + public String processLink(String link) { + var externalLink = externalUrlSupplier.getRaw(); + if (StringUtils.isBlank(link)) { + return link; + } + if (externalLink == null || !linkInSite(externalLink, link)) { + return link; + } + + return append(externalLink.toString(), link); + } + + String append(String externalLink, String link) { + return StringUtils.removeEnd(externalLink, "/") + + StringUtils.prependIfMissing(link, "/"); + } + + boolean linkInSite(@NonNull URL externalUrl, @NonNull String link) { + if (!PathUtils.isAbsoluteUri(link)) { + // relative uri is always in site + return true; + } + try { + URI requestUri = new URI(link); + return StringUtils.equals(externalUrl.getAuthority(), requestUri.getAuthority()); + } catch (URISyntaxException e) { + // ignore this link + } + return false; + } +} diff --git a/application/src/main/java/run/halo/app/infra/DefaultInitializationStateGetter.java b/application/src/main/java/run/halo/app/infra/DefaultInitializationStateGetter.java new file mode 100644 index 0000000..fafed52 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/DefaultInitializationStateGetter.java @@ -0,0 +1,68 @@ +package run.halo.app.infra; + +import static org.apache.commons.lang3.BooleanUtils.isTrue; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import java.util.concurrent.atomic.AtomicBoolean; +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.User; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; + +/** + *

A cache that caches system setup state.

+ * when setUp state changed, the cache will be updated. + * + * @author guqing + * @since 2.5.2 + */ +@Component +@RequiredArgsConstructor +public class DefaultInitializationStateGetter implements InitializationStateGetter { + private final ReactiveExtensionClient client; + private final AtomicBoolean userInitialized = new AtomicBoolean(false); + private final AtomicBoolean dataInitialized = new AtomicBoolean(false); + + @Override + public Mono userInitialized() { + // If user is initialized, return true directly. + if (userInitialized.get()) { + return Mono.just(true); + } + return hasUser() + .doOnNext(userInitialized::set); + } + + @Override + public Mono dataInitialized() { + if (dataInitialized.get()) { + return Mono.just(true); + } + return client.fetch(ConfigMap.class, SystemState.SYSTEM_STATES_CONFIGMAP) + .map(config -> { + SystemState systemState = SystemState.deserialize(config); + return isTrue(systemState.getIsSetup()); + }) + .defaultIfEmpty(false) + .doOnNext(dataInitialized::set); + } + + private Mono hasUser() { + var listOptions = new ListOptions(); + listOptions.setLabelSelector(LabelSelector.builder() + .notEq(User.HIDDEN_USER_LABEL, "true") + .build() + ); + listOptions.setFieldSelector( + FieldSelector.of(isNull("metadata.deletionTimestamp"))); + return client.listBy(User.class, listOptions, PageRequestImpl.ofSize(1)) + .map(result -> result.getTotal() > 0) + .defaultIfEmpty(false); + } +} diff --git a/application/src/main/java/run/halo/app/infra/DefaultReactiveUrlDataBufferFetcher.java b/application/src/main/java/run/halo/app/infra/DefaultReactiveUrlDataBufferFetcher.java new file mode 100644 index 0000000..822c3c6 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/DefaultReactiveUrlDataBufferFetcher.java @@ -0,0 +1,34 @@ +package run.halo.app.infra; + +import java.net.URI; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.http.MediaType; +import org.springframework.http.client.reactive.ReactorClientHttpConnector; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.client.WebClient; +import reactor.core.publisher.Flux; +import reactor.netty.http.client.HttpClient; + +/** + *

A default implementation of {@link ReactiveUrlDataBufferFetcher}.

+ * + * @author guqing + * @since 2.6.0 + */ +@Component +public class DefaultReactiveUrlDataBufferFetcher implements ReactiveUrlDataBufferFetcher { + private final HttpClient httpClient = HttpClient.create() + .followRedirect(true); + private final WebClient webClient = WebClient.builder() + .clientConnector(new ReactorClientHttpConnector(httpClient)) + .build(); + + @Override + public Flux fetch(URI uri) { + return webClient.get() + .uri(uri) + .accept(MediaType.APPLICATION_OCTET_STREAM) + .retrieve() + .bodyToFlux(DataBuffer.class); + } +} diff --git a/application/src/main/java/run/halo/app/infra/DefaultSystemVersionSupplier.java b/application/src/main/java/run/halo/app/infra/DefaultSystemVersionSupplier.java new file mode 100644 index 0000000..f91b48e --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/DefaultSystemVersionSupplier.java @@ -0,0 +1,34 @@ +package run.halo.app.infra; + +import com.github.zafarkhaja.semver.Version; +import java.util.Objects; +import org.springframework.beans.factory.ObjectProvider; +import org.springframework.boot.info.BuildProperties; +import org.springframework.stereotype.Component; + +/** + * Default implementation of system version supplier. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class DefaultSystemVersionSupplier implements SystemVersionSupplier { + private static final String DEFAULT_VERSION = "0.0.0"; + + private final ObjectProvider buildProperties; + + public DefaultSystemVersionSupplier(ObjectProvider buildProperties) { + this.buildProperties = buildProperties; + } + + @Override + public Version get() { + var properties = buildProperties.getIfUnique(); + if (properties == null) { + return Version.valueOf(DEFAULT_VERSION); + } + var projectVersion = Objects.toString(properties.getVersion(), DEFAULT_VERSION); + return Version.valueOf(projectVersion); + } +} diff --git a/application/src/main/java/run/halo/app/infra/DefaultThemeInitializer.java b/application/src/main/java/run/halo/app/infra/DefaultThemeInitializer.java new file mode 100644 index 0000000..b186923 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/DefaultThemeInitializer.java @@ -0,0 +1,65 @@ +package run.halo.app.infra; + +import java.io.IOException; +import lombok.extern.slf4j.Slf4j; +import org.springframework.boot.context.event.ApplicationStartedEvent; +import org.springframework.context.ApplicationListener; +import org.springframework.core.io.UrlResource; +import org.springframework.core.io.buffer.DataBufferUtils; +import org.springframework.core.io.buffer.DefaultDataBufferFactory; +import org.springframework.stereotype.Component; +import org.springframework.util.ResourceUtils; +import org.springframework.util.StreamUtils; +import run.halo.app.core.extension.theme.ThemeService; +import run.halo.app.infra.properties.HaloProperties; +import run.halo.app.infra.properties.ThemeProperties; +import run.halo.app.infra.utils.FileUtils; + +@Slf4j +@Component +public class DefaultThemeInitializer implements ApplicationListener { + + private final ThemeService themeService; + + private final ThemeRootGetter themeRoot; + + private final ThemeProperties themeProps; + + public DefaultThemeInitializer(ThemeService themeService, ThemeRootGetter themeRoot, + HaloProperties haloProps) { + this.themeService = themeService; + this.themeRoot = themeRoot; + this.themeProps = haloProps.getTheme(); + } + + @Override + public void onApplicationEvent(ApplicationStartedEvent event) { + if (themeProps.getInitializer().isDisabled()) { + log.debug("Skipped initializing default theme due to disabled"); + return; + } + var themeRoot = this.themeRoot.get(); + var location = themeProps.getInitializer().getLocation(); + try { + // TODO Checking if any themes are installed here in the future might be better? + if (!FileUtils.isEmpty(themeRoot)) { + log.debug("Skipped initializing default theme because there are themes " + + "inside theme root"); + return; + } + log.info("Initializing default theme from {}", location); + var themeUrl = ResourceUtils.getURL(location); + var content = DataBufferUtils.read(new UrlResource(themeUrl), + DefaultDataBufferFactory.sharedInstance, + StreamUtils.BUFFER_SIZE); + var theme = themeService.install(content).block(); + log.info("Initialized default theme: {}", theme); + // Because default active theme is default, we don't need to enabled it manually. + } catch (IOException e) { + // we should skip the initialization error at here + log.warn("Failed to initialize theme from " + location, e); + } + } + + +} diff --git a/application/src/main/java/run/halo/app/infra/DefaultThemeRootGetter.java b/application/src/main/java/run/halo/app/infra/DefaultThemeRootGetter.java new file mode 100644 index 0000000..2df9380 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/DefaultThemeRootGetter.java @@ -0,0 +1,21 @@ +package run.halo.app.infra; + +import java.nio.file.Path; +import org.springframework.stereotype.Component; +import run.halo.app.infra.properties.HaloProperties; + +@Component +public class DefaultThemeRootGetter implements ThemeRootGetter { + + private final HaloProperties haloProps; + + public DefaultThemeRootGetter(HaloProperties haloProps) { + this.haloProps = haloProps; + } + + @Override + public Path get() { + return haloProps.getWorkDir().resolve("themes"); + } + +} diff --git a/application/src/main/java/run/halo/app/infra/ExtensionInitializedEvent.java b/application/src/main/java/run/halo/app/infra/ExtensionInitializedEvent.java new file mode 100644 index 0000000..428b1a8 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/ExtensionInitializedEvent.java @@ -0,0 +1,16 @@ +package run.halo.app.infra; + +import org.springframework.context.ApplicationEvent; + +/** + * ExtensionInitializedEvent is fired after extensions have been initialized completely. + * + * @author johnniang + */ +public class ExtensionInitializedEvent extends ApplicationEvent { + + public ExtensionInitializedEvent(Object source) { + super(source); + } + +} diff --git a/application/src/main/java/run/halo/app/infra/ExtensionResourceInitializer.java b/application/src/main/java/run/halo/app/infra/ExtensionResourceInitializer.java new file mode 100644 index 0000000..74fb91c --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/ExtensionResourceInitializer.java @@ -0,0 +1,118 @@ +package run.halo.app.infra; + +import java.io.IOException; +import java.time.Duration; +import java.util.HashSet; +import java.util.List; +import java.util.Set; +import lombok.extern.slf4j.Slf4j; +import org.springframework.boot.context.event.ApplicationStartedEvent; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.context.ApplicationListener; +import org.springframework.core.io.Resource; +import org.springframework.core.io.support.PathMatchingResourcePatternResolver; +import org.springframework.stereotype.Component; +import org.springframework.util.CollectionUtils; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Unstructured; +import run.halo.app.infra.properties.HaloProperties; +import run.halo.app.infra.utils.YamlUnstructuredLoader; + +/** + *

Extension resources initializer.

+ *

Check whether {@link HaloProperties#getInitialExtensionLocations()} is configured + * When the system ready, and load resources according to it to creates {@link Unstructured}

+ * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class ExtensionResourceInitializer implements ApplicationListener { + + public static final Set REQUIRED_EXTENSION_LOCATIONS = + Set.of("classpath:/extensions/*.yaml", "classpath:/extensions/*.yml"); + private final HaloProperties haloProperties; + private final ReactiveExtensionClient extensionClient; + + private final ApplicationEventPublisher eventPublisher; + + public ExtensionResourceInitializer(HaloProperties haloProperties, + ReactiveExtensionClient extensionClient, + ApplicationEventPublisher eventPublisher) { + this.haloProperties = haloProperties; + this.extensionClient = extensionClient; + this.eventPublisher = eventPublisher; + } + + public void onApplicationEvent(ApplicationStartedEvent initializedEvent) { + var locations = new HashSet(); + if (!haloProperties.isRequiredExtensionDisabled()) { + locations.addAll(REQUIRED_EXTENSION_LOCATIONS); + } + if (haloProperties.getInitialExtensionLocations() != null) { + locations.addAll(haloProperties.getInitialExtensionLocations()); + } + if (CollectionUtils.isEmpty(locations)) { + return; + } + + Flux.fromIterable(locations) + .doOnNext(location -> + log.debug("Trying to initialize extension resources from location: {}", location)) + .map(this::listResources) + .distinct() + .flatMapIterable(resources -> resources) + .doOnNext(resource -> log.debug("Initializing extension resource from location: {}", + resource)) + .map(resource -> new YamlUnstructuredLoader(resource).load()) + .flatMapIterable(extensions -> extensions) + .doOnNext(extension -> { + if (log.isDebugEnabled()) { + log.debug("Initializing extension resource: {}/{}", + extension.groupVersionKind(), extension.getMetadata().getName()); + } + }) + .flatMap(this::createOrUpdate) + .doOnNext(extension -> { + if (log.isDebugEnabled()) { + log.debug("Initialized extension resource: {}/{}", extension.groupVersionKind(), + extension.getMetadata().getName()); + } + }) + .then(Mono.fromRunnable( + () -> eventPublisher.publishEvent(new ExtensionInitializedEvent(this)))) + .block(Duration.ofMinutes(1)); + } + + private Mono createOrUpdate(Unstructured extension) { + return Mono.just(extension) + .flatMap(ext -> extensionClient.fetch(extension.groupVersionKind(), + extension.getMetadata().getName())) + .flatMap(existingExt -> { + // force update + extension.getMetadata().setVersion(existingExt.getMetadata().getVersion()); + return extensionClient.update(extension); + }) + .switchIfEmpty(Mono.defer(() -> { + if (ExtensionUtil.isDeleted(extension)) { + // skip deleted extension + return Mono.empty(); + } + return extensionClient.create(extension); + })); + } + + private List listResources(String location) { + var resolver = new PathMatchingResourcePatternResolver(); + try { + return List.of(resolver.getResources(location)); + } catch (IOException ie) { + throw new IllegalArgumentException("Invalid extension location: " + location, ie); + } + } + +} diff --git a/application/src/main/java/run/halo/app/infra/HaloPropertiesExternalUrlSupplier.java b/application/src/main/java/run/halo/app/infra/HaloPropertiesExternalUrlSupplier.java new file mode 100644 index 0000000..d17c9e6 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/HaloPropertiesExternalUrlSupplier.java @@ -0,0 +1,71 @@ +package run.halo.app.infra; + +import java.net.MalformedURLException; +import java.net.URI; +import java.net.URISyntaxException; +import java.net.URL; +import org.springframework.boot.autoconfigure.web.reactive.WebFluxProperties; +import org.springframework.http.HttpRequest; +import org.springframework.lang.Nullable; +import org.springframework.stereotype.Component; +import org.springframework.util.StringUtils; +import run.halo.app.infra.properties.HaloProperties; + +/** + * Default implementation for getting external url from halo properties. + * + * @author johnniang + */ +@Component +public class HaloPropertiesExternalUrlSupplier implements ExternalUrlSupplier { + + private final HaloProperties haloProperties; + + private final WebFluxProperties webFluxProperties; + + public HaloPropertiesExternalUrlSupplier(HaloProperties haloProperties, + WebFluxProperties webFluxProperties) { + this.haloProperties = haloProperties; + this.webFluxProperties = webFluxProperties; + } + + @Override + public URI get() { + if (!haloProperties.isUseAbsolutePermalink()) { + return URI.create(getBasePath()); + } + + try { + return haloProperties.getExternalUrl().toURI(); + } catch (URISyntaxException e) { + throw new RuntimeException(e); + } + } + + @Override + public URL getURL(HttpRequest request) { + var externalUrl = haloProperties.getExternalUrl(); + if (externalUrl == null) { + try { + externalUrl = request.getURI().resolve(getBasePath()).toURL(); + } catch (MalformedURLException e) { + throw new RuntimeException("Cannot parse request URI to URL.", e); + } + } + return externalUrl; + } + + @Nullable + @Override + public URL getRaw() { + return haloProperties.getExternalUrl(); + } + + private String getBasePath() { + var basePath = webFluxProperties.getBasePath(); + if (!StringUtils.hasText(basePath)) { + basePath = "/"; + } + return basePath; + } +} diff --git a/application/src/main/java/run/halo/app/infra/InitializationStateGetter.java b/application/src/main/java/run/halo/app/infra/InitializationStateGetter.java new file mode 100644 index 0000000..87a65fd --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/InitializationStateGetter.java @@ -0,0 +1,26 @@ +package run.halo.app.infra; + +import reactor.core.publisher.Mono; + +/** + *

A interface that get system initialization state.

+ * + * @author guqing + * @since 2.9.0 + */ +public interface InitializationStateGetter { + + /** + * Check if system user is initialized. + * + * @return true if system user is initialized, false otherwise. + */ + Mono userInitialized(); + + /** + * Check if system basic data is initialized. + * + * @return true if system basic data is initialized, false otherwise. + */ + Mono dataInitialized(); +} diff --git a/application/src/main/java/run/halo/app/infra/ReactiveExtensionPaginatedOperator.java b/application/src/main/java/run/halo/app/infra/ReactiveExtensionPaginatedOperator.java new file mode 100644 index 0000000..0feec59 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/ReactiveExtensionPaginatedOperator.java @@ -0,0 +1,37 @@ +package run.halo.app.infra; + +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ListOptions; + +/** + * Reactive extension paginated operator to handle extensions by pagination. + * + * @author guqing + * @since 2.15.0 + */ +public interface ReactiveExtensionPaginatedOperator { + + /** + *

Deletes all data, including any new entries added during the execution of this method.

+ *

This method continuously monitors and removes data that appears throughout its runtime, + * ensuring that even data created during the deletion process is also removed.

+ */ + Mono deleteContinuously(Class type, + ListOptions listOptions); + + /** + *

Deletes only the data that existed at the start of the operation.

+ *

This method takes a snapshot of the data at the beginning and deletes only that dataset; + * any data added after the method starts will not be affected or removed.

+ */ + Flux deleteInitialBatch(Class type, + ListOptions listOptions); + + /** + *

Note that: This method can not be used for deletion operation, because + * deletion operation will change the total records.

+ */ + Flux list(Class type, ListOptions listOptions); +} diff --git a/application/src/main/java/run/halo/app/infra/ReactiveExtensionPaginatedOperatorImpl.java b/application/src/main/java/run/halo/app/infra/ReactiveExtensionPaginatedOperatorImpl.java new file mode 100644 index 0000000..f6760af --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/ReactiveExtensionPaginatedOperatorImpl.java @@ -0,0 +1,132 @@ +package run.halo.app.infra; + +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import java.time.Duration; +import java.time.Instant; +import lombok.RequiredArgsConstructor; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.data.domain.Sort; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; + +@Component +@RequiredArgsConstructor +public class ReactiveExtensionPaginatedOperatorImpl implements ReactiveExtensionPaginatedOperator { + private static final int DEFAULT_PAGE_SIZE = 200; + private final ReactiveExtensionClient client; + + @Override + public Mono deleteContinuously(Class type, + ListOptions listOptions) { + var pageRequest = createPageRequest(); + return cleanupContinuously(type, listOptions, pageRequest); + } + + private Mono cleanupContinuously(Class type, + ListOptions listOptions, + PageRequest pageRequest) { + // forever loop first page until no more to delete + return pageBy(type, listOptions, pageRequest) + .flatMap(page -> Flux.fromIterable(page.getItems()) + .flatMap(client::delete) + .then(page.hasNext() ? cleanupContinuously(type, listOptions, pageRequest) + : Mono.empty()) + ); + } + + @Override + public Flux deleteInitialBatch(Class type, + ListOptions listOptions) { + var pageRequest = createPageRequest(); + var newFieldQuery = listOptions.getFieldSelector() + .andQuery(isNull("metadata.deletionTimestamp")); + listOptions.setFieldSelector(newFieldQuery); + final Instant now = Instant.now(); + + return pageBy(type, listOptions, pageRequest) + // forever loop first page until no more to delete + .expand(result -> result.hasNext() + ? pageBy(type, listOptions, pageRequest) : Mono.empty()) + .flatMap(result -> Flux.fromIterable(result.getItems())) + .takeWhile(item -> shouldTakeNext(item, now)) + .flatMap(this::deleteWithRetry); + } + + static boolean shouldTakeNext(E item, Instant now) { + var creationTimestamp = item.getMetadata().getCreationTimestamp(); + return creationTimestamp.isBefore(now) + || creationTimestamp.equals(now); + } + + @SuppressWarnings("unchecked") + Mono deleteWithRetry(E item) { + return client.delete(item) + .onErrorResume(OptimisticLockingFailureException.class, + e -> attemptToDelete((Class) item.getClass(), item.getMetadata().getName())); + } + + private Mono attemptToDelete(Class type, String name) { + return Mono.defer(() -> client.fetch(type, name) + .flatMap(client::delete) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + @Override + public Flux list(Class type, ListOptions listOptions) { + var pageRequest = createPageRequest(); + return list(type, listOptions, pageRequest); + } + + /** + * Paginated list all items to avoid memory overflow. + * 
+     * 1. Retrieve data multiple times until all data is consumed.
+     * 2. Fetch next page if current page has more data and consumed records is less than total
+     * records.
+     * 3. Take while consumed records is less than total records.
+     * 4. totalRecords from first page to ensure new inserted data will not be counted in during
+     * querying to avoid infinite loop.
+     *
+ */ + private Flux list(Class type, ListOptions listOptions, + PageRequest pageRequest) { + final var now = Instant.now(); + return pageBy(type, listOptions, pageRequest) + .expand(result -> { + if (result.hasNext()) { + // fetch next page + var nextPage = nextPage(result, pageRequest.getSort()); + return pageBy(type, listOptions, nextPage); + } else { + return Mono.empty(); + } + }) + .flatMap(page -> Flux.fromIterable(page.getItems())) + .takeWhile(item -> shouldTakeNext(item, now)); + } + + static PageRequest nextPage(ListResult result, Sort sort) { + return PageRequestImpl.of(result.getPage() + 1, result.getSize(), sort); + } + + private PageRequest createPageRequest() { + return PageRequestImpl.of(1, DEFAULT_PAGE_SIZE, + Sort.by("metadata.creationTimestamp", "metadata.name")); + } + + private Mono> pageBy(Class type, ListOptions listOptions, + PageRequest pageRequest) { + return client.listBy(type, listOptions, pageRequest); + } +} diff --git a/application/src/main/java/run/halo/app/infra/ReactiveUrlDataBufferFetcher.java b/application/src/main/java/run/halo/app/infra/ReactiveUrlDataBufferFetcher.java new file mode 100644 index 0000000..df37f04 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/ReactiveUrlDataBufferFetcher.java @@ -0,0 +1,23 @@ +package run.halo.app.infra; + +import java.net.URI; +import org.springframework.core.io.buffer.DataBuffer; +import reactor.core.publisher.Flux; + +/** + *

{@link DataBuffer} stream fetcher from uri.

+ * + * @author guqing + * @since 2.6.0 + */ +@FunctionalInterface +public interface ReactiveUrlDataBufferFetcher { + + /** + *

Fetch data buffer flux from uri.

+ * + * @param uri uri to fetch + * @return data buffer flux + */ + Flux fetch(URI uri); +} diff --git a/application/src/main/java/run/halo/app/infra/SchemeInitializer.java b/application/src/main/java/run/halo/app/infra/SchemeInitializer.java new file mode 100644 index 0000000..898627b --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/SchemeInitializer.java @@ -0,0 +1,578 @@ +package run.halo.app.infra; + +import static org.apache.commons.lang3.BooleanUtils.isTrue; +import static org.apache.commons.lang3.BooleanUtils.toStringTrueFalse; +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static run.halo.app.extension.index.IndexAttributeFactory.multiValueAttribute; +import static run.halo.app.extension.index.IndexAttributeFactory.simpleAttribute; + +import com.fasterxml.jackson.core.type.TypeReference; +import java.util.Optional; +import java.util.Set; +import java.util.stream.Collectors; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.ObjectUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.boot.context.event.ApplicationContextInitializedEvent; +import org.springframework.context.ApplicationListener; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import run.halo.app.content.Stats; +import run.halo.app.core.extension.AnnotationSetting; +import run.halo.app.core.extension.AuthProvider; +import run.halo.app.core.extension.Counter; +import run.halo.app.core.extension.Device; +import run.halo.app.core.extension.Menu; +import run.halo.app.core.extension.MenuItem; +import run.halo.app.core.extension.Plugin; +import run.halo.app.core.extension.RememberMeToken; +import run.halo.app.core.extension.ReverseProxy; +import run.halo.app.core.extension.Role; +import run.halo.app.core.extension.RoleBinding; +import run.halo.app.core.extension.Setting; +import run.halo.app.core.extension.Theme; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.UserConnection; +import run.halo.app.core.extension.UserConnection.UserConnectionSpec; +import run.halo.app.core.extension.attachment.Attachment; +import run.halo.app.core.extension.attachment.Group; +import run.halo.app.core.extension.attachment.Policy; +import run.halo.app.core.extension.attachment.PolicyTemplate; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.core.extension.content.Snapshot; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.core.extension.notification.Notification; +import run.halo.app.core.extension.notification.NotificationTemplate; +import run.halo.app.core.extension.notification.NotifierDescriptor; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.core.extension.notification.ReasonType; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.DefaultSchemeManager; +import run.halo.app.extension.DefaultSchemeWatcherManager; +import run.halo.app.extension.MetadataOperator; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.Secret; +import run.halo.app.extension.index.IndexSpec; +import run.halo.app.extension.index.IndexSpecRegistryImpl; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.migration.Backup; +import run.halo.app.plugin.extensionpoint.ExtensionDefinition; +import run.halo.app.plugin.extensionpoint.ExtensionPointDefinition; +import run.halo.app.search.extension.SearchEngine; +import run.halo.app.security.PersonalAccessToken; + +@Component +public class SchemeInitializer implements ApplicationListener { + + @Override + public void onApplicationEvent(@NonNull ApplicationContextInitializedEvent event) { + var schemeManager = createSchemeManager(event); + + schemeManager.register(Role.class); + + // plugin.halo.run + schemeManager.register(Plugin.class); + schemeManager.register(SearchEngine.class); + schemeManager.register(ExtensionPointDefinition.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.className") + .setIndexFunc(simpleAttribute(ExtensionPointDefinition.class, + definition -> definition.getSpec().getClassName()) + )); + }); + schemeManager.register(ExtensionDefinition.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.extensionPointName") + .setIndexFunc(simpleAttribute(ExtensionDefinition.class, + definition -> definition.getSpec().getExtensionPointName()) + )); + }); + + schemeManager.register(RoleBinding.class, is -> { + is.add(new IndexSpec() + .setName("roleRef.name") + .setIndexFunc(simpleAttribute(RoleBinding.class, + roleBinding -> roleBinding.getRoleRef().getName()) + ) + ); + is.add(new IndexSpec() + .setName("subjects") + .setIndexFunc(multiValueAttribute(RoleBinding.class, + roleBinding -> roleBinding.getSubjects().stream() + .map(RoleBinding.Subject::toString) + .collect(Collectors.toSet())) + ) + ); + }); + schemeManager.register(User.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.displayName") + .setIndexFunc( + simpleAttribute(User.class, user -> user.getSpec().getDisplayName()))); + indexSpecs.add(new IndexSpec() + .setName("spec.email") + .setIndexFunc(simpleAttribute(User.class, user -> { + var email = user.getSpec().getEmail(); + return StringUtils.isBlank(email) ? null : email; + }))); + indexSpecs.add(new IndexSpec() + .setName(User.USER_RELATED_ROLES_INDEX) + .setIndexFunc(multiValueAttribute(User.class, user -> + Optional.ofNullable(user.getMetadata()) + .map(MetadataOperator::getAnnotations) + .map(annotations -> annotations.get(User.ROLE_NAMES_ANNO)) + .filter(StringUtils::isNotBlank) + .map(rolesJson -> JsonUtils.jsonToObject(rolesJson, + new TypeReference>() { + }) + ) + .orElseGet(Set::of)))); + }); + schemeManager.register(ReverseProxy.class); + schemeManager.register(Setting.class); + schemeManager.register(AnnotationSetting.class); + schemeManager.register(ConfigMap.class); + schemeManager.register(Secret.class); + schemeManager.register(Theme.class); + schemeManager.register(Menu.class); + schemeManager.register(MenuItem.class); + schemeManager.register(Post.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.title") + .setIndexFunc(simpleAttribute(Post.class, post -> post.getSpec().getTitle()))); + indexSpecs.add(new IndexSpec() + .setName("spec.slug") + // Compatible with old data, hoping to set it to true in the future + .setUnique(false) + .setIndexFunc(simpleAttribute(Post.class, post -> post.getSpec().getSlug()))); + indexSpecs.add(new IndexSpec() + .setName("spec.publishTime") + .setIndexFunc(simpleAttribute(Post.class, post -> { + var publishTime = post.getSpec().getPublishTime(); + return publishTime == null ? null : publishTime.toString(); + }))); + indexSpecs.add(new IndexSpec() + .setName("spec.owner") + .setIndexFunc(simpleAttribute(Post.class, post -> post.getSpec().getOwner()))); + indexSpecs.add(new IndexSpec() + .setName("spec.deleted") + .setIndexFunc(simpleAttribute(Post.class, post -> { + var deleted = post.getSpec().getDeleted(); + return deleted == null ? "false" : deleted.toString(); + }))); + indexSpecs.add(new IndexSpec() + .setName("spec.pinned") + .setIndexFunc(simpleAttribute(Post.class, post -> { + var pinned = post.getSpec().getPinned(); + return pinned == null ? "false" : pinned.toString(); + }))); + indexSpecs.add(new IndexSpec() + .setName("spec.priority") + .setIndexFunc(simpleAttribute(Post.class, post -> { + var priority = post.getSpec().getPriority(); + return priority == null ? "0" : priority.toString(); + }))); + indexSpecs.add(new IndexSpec() + .setName("spec.visible") + .setIndexFunc( + simpleAttribute(Post.class, post -> post.getSpec().getVisible().name()))); + indexSpecs.add(new IndexSpec() + .setName("spec.tags") + .setIndexFunc(multiValueAttribute(Post.class, post -> { + var tags = post.getSpec().getTags(); + return tags == null ? Set.of() : Set.copyOf(tags); + }))); + indexSpecs.add(new IndexSpec() + .setName("spec.categories") + .setIndexFunc(multiValueAttribute(Post.class, post -> { + var categories = post.getSpec().getCategories(); + return categories == null ? Set.of() : Set.copyOf(categories); + }))); + indexSpecs.add(new IndexSpec() + .setName("status.contributors") + .setIndexFunc(multiValueAttribute(Post.class, post -> { + var contributors = post.getStatusOrDefault().getContributors(); + return contributors == null ? Set.of() : Set.copyOf(contributors); + }))); + indexSpecs.add(new IndexSpec() + .setName("status.phase") + .setIndexFunc( + simpleAttribute(Post.class, post -> post.getStatusOrDefault().getPhase()))); + indexSpecs.add(new IndexSpec() + .setName("status.excerpt") + .setIndexFunc( + simpleAttribute(Post.class, post -> post.getStatusOrDefault().getExcerpt()))); + indexSpecs.add(new IndexSpec() + .setName("status.lastModifyTime") + .setIndexFunc(simpleAttribute(Post.class, post -> { + var lastModifyTime = post.getStatus().getLastModifyTime(); + return lastModifyTime == null ? null : lastModifyTime.toString(); + }))); + indexSpecs.add(new IndexSpec() + .setName("status.hideFromList") + .setIndexFunc(simpleAttribute(Post.class, post -> { + var hidden = post.getStatus().getHideFromList(); + // only index when hidden is true + return (hidden == null || !hidden) ? null : BooleanUtils.TRUE; + })) + ); + indexSpecs.add(new IndexSpec() + .setName(Post.REQUIRE_SYNC_ON_STARTUP_INDEX_NAME) + .setIndexFunc(simpleAttribute(Post.class, post -> { + var version = post.getMetadata().getVersion(); + var observedVersion = post.getStatusOrDefault().getObservedVersion(); + if (observedVersion == null || observedVersion < version) { + return BooleanUtils.TRUE; + } + // do not care about the false case so return null to avoid indexing + return null; + }))); + + indexSpecs.add(new IndexSpec() + .setName("stats.visit") + .setIndexFunc(simpleAttribute(Post.class, post -> { + var annotations = MetadataUtil.nullSafeAnnotations(post); + var statsStr = annotations.get(Post.STATS_ANNO); + if (StringUtils.isBlank(statsStr)) { + return "0"; + } + var stats = JsonUtils.jsonToObject(statsStr, Stats.class); + return ObjectUtils.defaultIfNull(stats.getVisit(), 0).toString(); + }))); + + indexSpecs.add(new IndexSpec() + .setName("stats.totalComment") + .setIndexFunc(simpleAttribute(Post.class, post -> { + var annotations = MetadataUtil.nullSafeAnnotations(post); + var statsStr = annotations.get(Post.STATS_ANNO); + if (StringUtils.isBlank(statsStr)) { + return "0"; + } + var stats = JsonUtils.jsonToObject(statsStr, Stats.class); + return ObjectUtils.defaultIfNull(stats.getTotalComment(), 0).toString(); + }))); + }); + schemeManager.register(Category.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.slug") + .setIndexFunc( + simpleAttribute(Category.class, category -> category.getSpec().getSlug())) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.priority") + .setIndexFunc(simpleAttribute(Category.class, + category -> defaultIfNull(category.getSpec().getPriority(), 0).toString()))); + indexSpecs.add(new IndexSpec() + .setName("spec.children") + .setIndexFunc(multiValueAttribute(Category.class, category -> { + var children = category.getSpec().getChildren(); + return children == null ? Set.of() : Set.copyOf(children); + })) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.hideFromList") + .setIndexFunc(simpleAttribute(Category.class, + category -> toStringTrueFalse(isTrue(category.getSpec().isHideFromList())) + )) + ); + }); + schemeManager.register(Tag.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.displayName") + .setIndexFunc(simpleAttribute(Tag.class, tag -> tag.getSpec().getDisplayName()))); + indexSpecs.add(new IndexSpec() + .setName("spec.slug") + .setIndexFunc(simpleAttribute(Tag.class, tag -> tag.getSpec().getSlug())) + ); + indexSpecs.add(new IndexSpec() + .setName(Tag.REQUIRE_SYNC_ON_STARTUP_INDEX_NAME) + .setIndexFunc(simpleAttribute(Tag.class, tag -> { + var version = tag.getMetadata().getVersion(); + var observedVersion = tag.getStatusOrDefault().getObservedVersion(); + if (observedVersion == null || observedVersion < version) { + return BooleanUtils.TRUE; + } + // do not care about the false case so return null to avoid indexing + return null; + }))); + }); + schemeManager.register(Snapshot.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.subjectRef") + .setIndexFunc(simpleAttribute(Snapshot.class, + snapshot -> Snapshot.toSubjectRefKey(snapshot.getSpec().getSubjectRef())) + ) + ); + }); + schemeManager.register(Comment.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.creationTime") + .setIndexFunc(simpleAttribute(Comment.class, + comment -> defaultIfNull(comment.getSpec().getCreationTime(), + comment.getMetadata().getCreationTimestamp()).toString()) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.approved") + .setIndexFunc(simpleAttribute(Comment.class, + comment -> toStringTrueFalse(isTrue(comment.getSpec().getApproved()))) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.owner") + .setIndexFunc(simpleAttribute(Comment.class, comment -> { + var owner = comment.getSpec().getOwner(); + return Comment.CommentOwner.ownerIdentity(owner.getKind(), owner.getName()); + }))); + indexSpecs.add(new IndexSpec() + .setName("spec.subjectRef") + .setIndexFunc(simpleAttribute(Comment.class, + comment -> Comment.toSubjectRefKey(comment.getSpec().getSubjectRef())) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.top") + .setIndexFunc(simpleAttribute(Comment.class, + comment -> toStringTrueFalse(isTrue(comment.getSpec().getTop()))) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.hidden") + .setIndexFunc(simpleAttribute(Comment.class, + comment -> toStringTrueFalse(isTrue(comment.getSpec().getHidden()))) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.priority") + .setIndexFunc(simpleAttribute(Comment.class, + comment -> { + var isTop = comment.getSpec().getTop(); + // only top comments have priority + if (!isTop) { + return "0"; + } + return defaultIfNull(comment.getSpec().getPriority(), 0).toString(); + }) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.raw") + .setIndexFunc(simpleAttribute(Comment.class, + comment -> comment.getSpec().getRaw()) + )); + indexSpecs.add(new IndexSpec() + .setName("status.lastReplyTime") + .setIndexFunc(simpleAttribute(Comment.class, comment -> { + var lastReplyTime = comment.getStatusOrDefault().getLastReplyTime(); + return defaultIfNull(lastReplyTime, + comment.getSpec().getCreationTime()).toString(); + }))); + indexSpecs.add(new IndexSpec() + .setName("status.replyCount") + .setIndexFunc(simpleAttribute(Comment.class, comment -> { + var replyCount = comment.getStatusOrDefault().getReplyCount(); + return defaultIfNull(replyCount, 0).toString(); + }))); + indexSpecs.add(new IndexSpec() + .setName(Comment.REQUIRE_SYNC_ON_STARTUP_INDEX_NAME) + .setIndexFunc(simpleAttribute(Comment.class, comment -> { + var version = comment.getMetadata().getVersion(); + var observedVersion = comment.getStatusOrDefault().getObservedVersion(); + if (observedVersion == null || observedVersion < version) { + return BooleanUtils.TRUE; + } + // do not care about the false case so return null to avoid indexing + return null; + }))); + }); + schemeManager.register(Reply.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.creationTime") + .setIndexFunc(simpleAttribute(Reply.class, + reply -> defaultIfNull(reply.getSpec().getCreationTime(), + reply.getMetadata().getCreationTimestamp()).toString()) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.commentName") + .setIndexFunc(simpleAttribute(Reply.class, + reply -> reply.getSpec().getCommentName()) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.hidden") + .setIndexFunc(simpleAttribute(Reply.class, + reply -> toStringTrueFalse(isTrue(reply.getSpec().getHidden()))) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.approved") + .setIndexFunc(simpleAttribute(Reply.class, + reply -> toStringTrueFalse(isTrue(reply.getSpec().getApproved()))) + )); + indexSpecs.add(new IndexSpec() + .setName("spec.owner") + .setIndexFunc(simpleAttribute(Reply.class, reply -> { + var owner = reply.getSpec().getOwner(); + return Comment.CommentOwner.ownerIdentity(owner.getKind(), owner.getName()); + }))); + indexSpecs.add(new IndexSpec() + .setName(Reply.REQUIRE_SYNC_ON_STARTUP_INDEX_NAME) + .setIndexFunc(simpleAttribute(Reply.class, reply -> { + var version = reply.getMetadata().getVersion(); + var observedVersion = reply.getStatus().getObservedVersion(); + if (observedVersion == null || observedVersion < version) { + return BooleanUtils.TRUE; + } + // do not care about the false case so return null to avoid indexing + return null; + }))); + }); + schemeManager.register(SinglePage.class); + // storage.halo.run + schemeManager.register(Group.class); + schemeManager.register(Policy.class); + schemeManager.register(Attachment.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.displayName") + .setIndexFunc(simpleAttribute(Attachment.class, + attachment -> attachment.getSpec().getDisplayName())) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.policyName") + .setIndexFunc(simpleAttribute(Attachment.class, + attachment -> attachment.getSpec().getPolicyName())) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.groupName") + .setIndexFunc(simpleAttribute(Attachment.class, attachment -> { + var group = attachment.getSpec().getGroupName(); + return StringUtils.isBlank(group) ? null : group; + })) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.mediaType") + .setIndexFunc(simpleAttribute(Attachment.class, attachment -> { + var mediaType = attachment.getSpec().getMediaType(); + return StringUtils.isBlank(mediaType) ? null : mediaType; + })) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.ownerName") + .setIndexFunc(simpleAttribute(Attachment.class, + attachment -> attachment.getSpec().getOwnerName())) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.size") + .setIndexFunc(simpleAttribute(Attachment.class, + attachment -> { + var size = attachment.getSpec().getSize(); + return size != null ? size.toString() : null; + })) + ); + }); + schemeManager.register(PolicyTemplate.class); + // metrics.halo.run + schemeManager.register(Counter.class); + // auth.halo.run + schemeManager.register(AuthProvider.class); + schemeManager.register(UserConnection.class, is -> { + is.add(new IndexSpec() + .setName("spec.username") + .setIndexFunc(simpleAttribute(UserConnection.class, + connection -> Optional.ofNullable(connection.getSpec()) + .map(UserConnectionSpec::getUsername) + .orElse(null) + ))); + }); + + // security.halo.run + schemeManager.register(PersonalAccessToken.class); + schemeManager.register(RememberMeToken.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.series") + .setUnique(true) + .setIndexFunc(simpleAttribute(RememberMeToken.class, + token -> token.getSpec().getSeries()) + ) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.username") + .setIndexFunc(simpleAttribute(RememberMeToken.class, + token -> token.getSpec().getUsername()) + ) + ); + }); + schemeManager.register(Device.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.principalName") + .setIndexFunc(simpleAttribute(Device.class, + device -> device.getSpec().getPrincipalName()) + ) + ); + }); + + // migration.halo.run + schemeManager.register(Backup.class); + + // notification.halo.run + schemeManager.register(ReasonType.class); + schemeManager.register(Reason.class); + schemeManager.register(NotificationTemplate.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.reasonSelector.reasonType") + .setIndexFunc(simpleAttribute(NotificationTemplate.class, + template -> template.getSpec().getReasonSelector().getReasonType())) + ); + }); + schemeManager.register(Subscription.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.reason.reasonType") + .setIndexFunc(simpleAttribute(Subscription.class, + subscription -> subscription.getSpec().getReason().getReasonType())) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.reason.subject") + .setIndexFunc(simpleAttribute(Subscription.class, + subscription -> subscription.getSpec().getReason().getSubject().toString())) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.reason.expression") + .setIndexFunc(simpleAttribute(Subscription.class, + subscription -> subscription.getSpec().getReason().getExpression())) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.subscriber") + .setIndexFunc(simpleAttribute(Subscription.class, + subscription -> subscription.getSpec().getSubscriber().toString())) + ); + }); + schemeManager.register(NotifierDescriptor.class); + schemeManager.register(Notification.class, indexSpecs -> { + indexSpecs.add(new IndexSpec() + .setName("spec.unread") + .setIndexFunc(simpleAttribute(Notification.class, + notification -> String.valueOf(notification.getSpec().isUnread()))) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.reason") + .setIndexFunc(simpleAttribute(Notification.class, + notification -> notification.getSpec().getReason())) + ); + indexSpecs.add(new IndexSpec() + .setName("spec.recipient") + .setIndexFunc(simpleAttribute(Notification.class, + notification -> notification.getSpec().getRecipient())) + ); + }); + } + + private static DefaultSchemeManager createSchemeManager( + ApplicationContextInitializedEvent event) { + var indexSpecRegistry = new IndexSpecRegistryImpl(); + var watcherManager = new DefaultSchemeWatcherManager(); + var schemeManager = new DefaultSchemeManager(indexSpecRegistry, watcherManager); + + var beanFactory = event.getApplicationContext().getBeanFactory(); + beanFactory.registerSingleton("indexSpecRegistry", indexSpecRegistry); + beanFactory.registerSingleton("schemeWatcherManager", watcherManager); + beanFactory.registerSingleton("schemeManager", schemeManager); + return schemeManager; + } +} diff --git a/application/src/main/java/run/halo/app/infra/SystemConfigurableEnvironmentFetcher.java b/application/src/main/java/run/halo/app/infra/SystemConfigurableEnvironmentFetcher.java new file mode 100644 index 0000000..2f3f87e --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/SystemConfigurableEnvironmentFetcher.java @@ -0,0 +1,154 @@ +package run.halo.app.infra; + +import com.fasterxml.jackson.databind.JsonNode; +import com.fasterxml.jackson.databind.node.JsonNodeFactory; +import com.github.fge.jsonpatch.JsonPatchException; +import com.github.fge.jsonpatch.mergepatch.JsonMergePatch; +import java.util.LinkedHashMap; +import java.util.Map; +import java.util.Optional; +import org.apache.commons.lang3.StringUtils; +import org.springframework.core.convert.ConversionService; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.utils.JsonParseException; +import run.halo.app.infra.utils.JsonUtils; + +/** + * A fetcher that fetches the system configuration from the extension client. + * If there are {@link ConfigMap}s named system-default and system at + * the same time, the {@link ConfigMap} named system will be json merge patch to + * {@link ConfigMap} named system-default + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class SystemConfigurableEnvironmentFetcher { + private final ReactiveExtensionClient extensionClient; + private final ConversionService conversionService; + + public SystemConfigurableEnvironmentFetcher(ReactiveExtensionClient extensionClient, + ConversionService conversionService) { + this.extensionClient = extensionClient; + this.conversionService = conversionService; + } + + public Mono fetch(String key, Class type) { + return getValuesInternal() + .filter(map -> map.containsKey(key)) + .map(map -> map.get(key)) + .mapNotNull(stringValue -> { + if (conversionService.canConvert(String.class, type)) { + return conversionService.convert(stringValue, type); + } + return JsonUtils.jsonToObject(stringValue, type); + }); + } + + public Mono fetchComment() { + return fetch(SystemSetting.Comment.GROUP, SystemSetting.Comment.class) + .switchIfEmpty(Mono.just(new SystemSetting.Comment())); + } + + public Mono fetchPost() { + return fetch(SystemSetting.Post.GROUP, SystemSetting.Post.class) + .switchIfEmpty(Mono.just(new SystemSetting.Post())); + } + + public Mono fetchRouteRules() { + return fetch(SystemSetting.ThemeRouteRules.GROUP, SystemSetting.ThemeRouteRules.class); + } + + @NonNull + private Mono> getValuesInternal() { + return getConfigMap() + .filter(configMap -> configMap.getData() != null) + .map(ConfigMap::getData) + .defaultIfEmpty(Map.of()); + } + + /** + * Gets config map. + * + * @return a new {@link ConfigMap} named system by json merge patch. + */ + public Mono getConfigMap() { + Mono mapMono = + extensionClient.fetch(ConfigMap.class, SystemSetting.SYSTEM_CONFIG_DEFAULT); + if (mapMono == null) { + return Mono.empty(); + } + return mapMono.flatMap(systemDefault -> + extensionClient.fetch(ConfigMap.class, SystemSetting.SYSTEM_CONFIG) + .map(system -> { + Map defaultData = systemDefault.getData(); + Map data = system.getData(); + Map mergedData = mergeData(defaultData, data); + system.setData(mergedData); + return system; + }) + .switchIfEmpty(Mono.just(systemDefault))); + } + + public Optional getConfigMapBlocking() { + return getConfigMap().blockOptional(); + } + + private Map mergeData(Map defaultData, + Map data) { + if (defaultData == null) { + return data; + } + if (data == null) { + return defaultData; + } + + Map copiedDefault = new LinkedHashMap<>(defaultData); + // // merge the data map entries into the default map + data.forEach((group, dataValue) -> { + // https://www.rfc-editor.org/rfc/rfc7386 + String defaultV = copiedDefault.get(group); + String newValue; + if (dataValue == null) { + if (copiedDefault.containsKey(group)) { + newValue = null; + } else { + newValue = defaultV; + } + } else { + newValue = mergeRemappingFunction(dataValue, defaultV); + } + + if (newValue == null) { + copiedDefault.remove(group); + } else { + copiedDefault.put(group, newValue); + } + }); + return copiedDefault; + } + + String mergeRemappingFunction(String dataV, String defaultV) { + JsonNode dataJsonValue = nullSafeToJsonNode(dataV); + // original + JsonNode defaultJsonValue = nullSafeToJsonNode(defaultV); + try { + // patch + JsonMergePatch jsonMergePatch = JsonMergePatch.fromJson(dataJsonValue); + // apply patch to original + JsonNode patchedNode = jsonMergePatch.apply(defaultJsonValue); + return JsonUtils.objectToJson(patchedNode); + } catch (JsonPatchException e) { + throw new JsonParseException(e); + } + } + + JsonNode nullSafeToJsonNode(String json) { + return StringUtils.isBlank(json) ? JsonNodeFactory.instance.nullNode() + : JsonUtils.jsonToObject(json, JsonNode.class); + } +} diff --git a/application/src/main/java/run/halo/app/infra/SystemState.java b/application/src/main/java/run/halo/app/infra/SystemState.java new file mode 100644 index 0000000..1403a15 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/SystemState.java @@ -0,0 +1,74 @@ +package run.halo.app.infra; + +import com.fasterxml.jackson.databind.JsonNode; +import com.github.fge.jsonpatch.JsonPatchException; +import com.github.fge.jsonpatch.mergepatch.JsonMergePatch; +import java.util.LinkedHashMap; +import java.util.Map; +import lombok.Data; +import org.springframework.lang.NonNull; +import run.halo.app.extension.ConfigMap; +import run.halo.app.infra.utils.JsonParseException; +import run.halo.app.infra.utils.JsonUtils; + +/** + * A model for system state deserialize from {@link run.halo.app.extension.ConfigMap} + * named {@code system-states}. + * + * @author guqing + * @since 2.8.0 + */ +@Data +public class SystemState { + public static final String SYSTEM_STATES_CONFIGMAP = "system-states"; + + static final String GROUP = "states"; + + private Boolean isSetup; + + /** + * Deserialize from {@link ConfigMap}. + * + * @return config map + */ + public static SystemState deserialize(@NonNull ConfigMap configMap) { + Map data = configMap.getData(); + if (data == null) { + return new SystemState(); + } + return JsonUtils.jsonToObject(data.getOrDefault(GROUP, emptyJsonObject()), + SystemState.class); + } + + /** + * Update modified system state to config map. + * + * @param systemState modified system state + * @param configMap config map + */ + public static void update(@NonNull SystemState systemState, @NonNull ConfigMap configMap) { + Map data = configMap.getData(); + if (data == null) { + data = new LinkedHashMap<>(); + configMap.setData(data); + } + JsonNode modifiedJson = JsonUtils.mapper() + .convertValue(systemState, JsonNode.class); + // original + JsonNode sourceJson = + JsonUtils.jsonToObject(data.getOrDefault(GROUP, emptyJsonObject()), JsonNode.class); + try { + // patch + JsonMergePatch jsonMergePatch = JsonMergePatch.fromJson(modifiedJson); + // apply patch to original + JsonNode patchedNode = jsonMergePatch.apply(sourceJson); + data.put(GROUP, JsonUtils.objectToJson(patchedNode)); + } catch (JsonPatchException e) { + throw new JsonParseException(e); + } + } + + private static String emptyJsonObject() { + return "{}"; + } +} diff --git a/application/src/main/java/run/halo/app/infra/ThemeRootGetter.java b/application/src/main/java/run/halo/app/infra/ThemeRootGetter.java new file mode 100644 index 0000000..2f2a72a --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/ThemeRootGetter.java @@ -0,0 +1,13 @@ +package run.halo.app.infra; + +import java.nio.file.Path; +import java.util.function.Supplier; + +/** + * ThemeRootGetter allows us to get root path of themes. + * + * @author johnniang + */ +public interface ThemeRootGetter extends Supplier { + +} diff --git a/application/src/main/java/run/halo/app/infra/ValidationUtils.java b/application/src/main/java/run/halo/app/infra/ValidationUtils.java new file mode 100644 index 0000000..bb52132 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/ValidationUtils.java @@ -0,0 +1,40 @@ +package run.halo.app.infra; + +import java.util.regex.Pattern; +import lombok.experimental.UtilityClass; +import org.apache.commons.lang3.StringUtils; + +@UtilityClass +public class ValidationUtils { + public static final Pattern NAME_PATTERN = + Pattern.compile("^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$"); + + public static final String EMAIL_REGEX = + "^[a-zA-Z0-9_+&*-]+(?:\\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\\.)+[a-zA-Z]{2,7}$"; + + public static final String NAME_VALIDATION_MESSAGE = """ + Super administrator username must be a valid subdomain name, the name must: + 1. contain no more than 63 characters + 2. contain only lowercase alphanumeric characters, '-' or '.' + 3. start with an alphanumeric character + 4. end with an alphanumeric character + """; + + /** + * Validates the name. + * + * @param name name for validation + * @return true if the name is valid + */ + public static boolean validateName(String name) { + if (StringUtils.isBlank(name)) { + return false; + } + boolean matches = NAME_PATTERN.matcher(name).matches(); + return matches && name.length() <= 63; + } + + public static boolean isValidEmail(String email) { + return StringUtils.isNotBlank(email) && email.matches(EMAIL_REGEX); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/AccessDeniedException.java b/application/src/main/java/run/halo/app/infra/exception/AccessDeniedException.java new file mode 100644 index 0000000..2b1911d --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/AccessDeniedException.java @@ -0,0 +1,24 @@ +package run.halo.app.infra.exception; + +import org.springframework.http.HttpStatus; +import org.springframework.web.server.ResponseStatusException; + +/** + * AccessDeniedException will resolve i18n message and response 403 status. + * + * @author johnniang + */ +public class AccessDeniedException extends ResponseStatusException { + + public AccessDeniedException() { + this("Access to the resource is forbidden"); + } + + public AccessDeniedException(String reason) { + this(reason, null, null); + } + + public AccessDeniedException(String reason, String detailCode, Object[] detailArgs) { + super(HttpStatus.FORBIDDEN, reason, null, detailCode, detailArgs); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/AttachmentAlreadyExistsException.java b/application/src/main/java/run/halo/app/infra/exception/AttachmentAlreadyExistsException.java new file mode 100644 index 0000000..2bcda1c --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/AttachmentAlreadyExistsException.java @@ -0,0 +1,16 @@ +package run.halo.app.infra.exception; + +import org.springframework.web.server.ServerWebInputException; + +/** + * AttachmentAlreadyExistsException accepts filename parameter as detail message arguments. + * + * @author johnniang + */ +public class AttachmentAlreadyExistsException extends ServerWebInputException { + + public AttachmentAlreadyExistsException(String filename) { + super("File " + filename + " already exists.", null, null, null, new Object[] {filename}); + } + +} diff --git a/application/src/main/java/run/halo/app/infra/exception/DuplicateNameException.java b/application/src/main/java/run/halo/app/infra/exception/DuplicateNameException.java new file mode 100644 index 0000000..a68889c --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/DuplicateNameException.java @@ -0,0 +1,24 @@ +package run.halo.app.infra.exception; + +import org.springframework.http.HttpStatus; +import org.springframework.web.server.ResponseStatusException; + +public class DuplicateNameException extends ResponseStatusException { + + public DuplicateNameException() { + this("Duplicate name detected"); + } + + public DuplicateNameException(String reason) { + this(reason, null); + } + + public DuplicateNameException(String reason, Throwable cause) { + this(reason, cause, null, null); + } + + public DuplicateNameException(String reason, Throwable cause, String messageDetailCode, + Object[] messageDetailArguments) { + super(HttpStatus.BAD_REQUEST, reason, cause, messageDetailCode, messageDetailArguments); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/EmailVerificationFailed.java b/application/src/main/java/run/halo/app/infra/exception/EmailVerificationFailed.java new file mode 100644 index 0000000..40074ba --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/EmailVerificationFailed.java @@ -0,0 +1,26 @@ +package run.halo.app.infra.exception; + +import org.springframework.lang.Nullable; +import org.springframework.web.server.ServerWebInputException; + +/** + * Exception thrown when email verification failed. + * + * @author guqing + * @since 2.11.0 + */ +public class EmailVerificationFailed extends ServerWebInputException { + + public EmailVerificationFailed() { + super("Invalid verification code"); + } + + public EmailVerificationFailed(String reason, @Nullable Throwable cause) { + super(reason, null, cause); + } + + public EmailVerificationFailed(String reason, @Nullable Throwable cause, + @Nullable String messageDetailCode, @Nullable Object[] messageDetailArguments) { + super(reason, null, cause, messageDetailCode, messageDetailArguments); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/Exceptions.java b/application/src/main/java/run/halo/app/infra/exception/Exceptions.java new file mode 100644 index 0000000..93f4c3f --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/Exceptions.java @@ -0,0 +1,106 @@ +package run.halo.app.infra.exception; + +import static org.springframework.core.annotation.MergedAnnotations.SearchStrategy.TYPE_HIERARCHY; + +import io.github.resilience4j.ratelimiter.RequestNotPermitted; +import java.net.URI; +import java.time.Instant; +import java.util.Locale; +import java.util.Map; +import lombok.extern.slf4j.Slf4j; +import org.springframework.context.MessageSource; +import org.springframework.core.annotation.MergedAnnotations; +import org.springframework.dao.ConcurrencyFailureException; +import org.springframework.http.HttpStatus; +import org.springframework.http.HttpStatusCode; +import org.springframework.http.ProblemDetail; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import org.springframework.security.authentication.BadCredentialsException; +import org.springframework.web.ErrorResponse; +import org.springframework.web.bind.annotation.ResponseStatus; +import org.springframework.web.server.ServerWebExchange; + +@Slf4j +public enum Exceptions { + ; + + public static final String DEFAULT_TYPE = "about:blank"; + + public static final String THEME_ALREADY_EXISTS_TYPE = + "https://halo.run/probs/theme-alreay-exists"; + + public static final String INVALID_CREDENTIAL_TYPE = + "https://halo.run/probs/invalid-credential"; + + public static final String REQUEST_NOT_PERMITTED_TYPE = + "https://halo.run/probs/request-not-permitted"; + + public static final String CONFLICT_TYPE = + "https://halo.run/probs/conflict"; + + /** + * Non-ErrorResponse exception to type map. + */ + public static final Map, String> EXCEPTION_TYPE_MAP = Map.of( + RequestNotPermitted.class, REQUEST_NOT_PERMITTED_TYPE, + BadCredentialsException.class, INVALID_CREDENTIAL_TYPE + ); + + public static ErrorResponse createErrorResponse(Throwable t, @Nullable HttpStatusCode status, + ServerWebExchange exchange, MessageSource messageSource) { + final ErrorResponse errorResponse; + if (t instanceof ErrorResponse er) { + errorResponse = er; + } else { + var er = handleConflictException(t); + if (er == null) { + er = handleException(t, status); + } + errorResponse = er; + } + var problemDetail = errorResponse.updateAndGetBody(messageSource, getLocale(exchange)); + problemDetail.setInstance(exchange.getRequest().getURI()); + problemDetail.setProperty("requestId", exchange.getRequest().getId()); + problemDetail.setProperty("timestamp", Instant.now()); + return errorResponse; + } + + @NonNull + private static ErrorResponse handleException(Throwable t, @Nullable HttpStatusCode status) { + var responseStatusAnno = MergedAnnotations.from(t.getClass(), TYPE_HIERARCHY) + .get(ResponseStatus.class); + if (status == null) { + status = responseStatusAnno.getValue("code", HttpStatus.class) + .orElse(HttpStatus.INTERNAL_SERVER_ERROR); + } + var type = EXCEPTION_TYPE_MAP.getOrDefault(t.getClass(), DEFAULT_TYPE); + var detail = responseStatusAnno.getValue("reason", String.class) + .orElseGet(t::getMessage); + var builder = ErrorResponse.builder(t, status, detail) + .type(URI.create(type)); + if (status.is5xxServerError()) { + builder.detailMessageCode("problemDetail.internalServerError") + .titleMessageCode("problemDetail.title.internalServerError"); + } + return builder.build(); + } + + @Nullable + private static ErrorResponse handleConflictException(Throwable t) { + if (t instanceof ConcurrencyFailureException) { + return ErrorResponse.builder(t, ProblemDetail.forStatus(HttpStatus.CONFLICT)) + .type(URI.create(CONFLICT_TYPE)) + .titleMessageCode("problemDetail.title.conflict") + .detailMessageCode("problemDetail.conflict") + .build(); + } + return null; + } + + + public static Locale getLocale(ServerWebExchange exchange) { + var locale = exchange.getLocaleContext().getLocale(); + return locale == null ? Locale.getDefault() : locale; + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/FileSizeExceededException.java b/application/src/main/java/run/halo/app/infra/exception/FileSizeExceededException.java new file mode 100644 index 0000000..bc26cb0 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/FileSizeExceededException.java @@ -0,0 +1,18 @@ +package run.halo.app.infra.exception; + +import org.springframework.http.HttpStatus; +import org.springframework.web.server.ResponseStatusException; + +public class FileSizeExceededException extends ResponseStatusException { + + public FileSizeExceededException(String reason, String messageDetailCode, + Object[] messageDetailArguments) { + this(reason, null, messageDetailCode, messageDetailArguments); + } + + public FileSizeExceededException(String reason, Throwable cause, + String messageDetailCode, Object[] messageDetailArguments) { + super(HttpStatus.PAYLOAD_TOO_LARGE, reason, cause, messageDetailCode, + messageDetailArguments); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/FileTypeNotAllowedException.java b/application/src/main/java/run/halo/app/infra/exception/FileTypeNotAllowedException.java new file mode 100644 index 0000000..6e7abe5 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/FileTypeNotAllowedException.java @@ -0,0 +1,18 @@ +package run.halo.app.infra.exception; + +import org.springframework.http.HttpStatus; +import org.springframework.web.server.ResponseStatusException; + +public class FileTypeNotAllowedException extends ResponseStatusException { + + public FileTypeNotAllowedException(String reason, String messageDetailCode, + Object[] messageDetailArguments) { + this(reason, null, messageDetailCode, messageDetailArguments); + } + + public FileTypeNotAllowedException(String reason, Throwable cause, + String messageDetailCode, Object[] messageDetailArguments) { + super(HttpStatus.UNSUPPORTED_MEDIA_TYPE, reason, cause, messageDetailCode, + messageDetailArguments); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/NotFoundException.java b/application/src/main/java/run/halo/app/infra/exception/NotFoundException.java new file mode 100644 index 0000000..978122b --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/NotFoundException.java @@ -0,0 +1,31 @@ +package run.halo.app.infra.exception; + +import org.springframework.http.HttpStatus; +import org.springframework.lang.Nullable; +import org.springframework.web.server.ResponseStatusException; + +/** + * Not found exception. + * + * @author guqing + * @since 2.0.0 + */ +public class NotFoundException extends ResponseStatusException { + + public NotFoundException(@Nullable String reason) { + this(reason, null); + } + + public NotFoundException(@Nullable String reason, + @Nullable Throwable cause) { + super(HttpStatus.NOT_FOUND, reason, cause); + } + + public NotFoundException(@Nullable Throwable cause) { + this(cause == null ? "" : cause.getMessage(), cause); + } + + public NotFoundException(String messageDetailCode, Object[] messageDetailArgs, String reason) { + super(HttpStatus.NOT_FOUND, reason, null, messageDetailCode, messageDetailArgs); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/PluginAlreadyExistsException.java b/application/src/main/java/run/halo/app/infra/exception/PluginAlreadyExistsException.java new file mode 100644 index 0000000..2a37d1c --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/PluginAlreadyExistsException.java @@ -0,0 +1,21 @@ +package run.halo.app.infra.exception; + +import java.net.URI; +import org.springframework.web.server.ServerWebInputException; + +/** + * PluginAlreadyExistsException indicates the provided plugin has already installed before. + * + * @author johnniang + */ +public class PluginAlreadyExistsException extends ServerWebInputException { + + public static final String PLUGIN_ALREADY_EXISTS_TYPE = + "https://halo.run/probs/plugin-alreay-exists"; + + public PluginAlreadyExistsException(String pluginName) { + super("Plugin already exists.", null, null, null, new Object[] {pluginName}); + setType(URI.create(PLUGIN_ALREADY_EXISTS_TYPE)); + getBody().setProperty("pluginName", pluginName); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/PluginDependenciesNotEnabledException.java b/application/src/main/java/run/halo/app/infra/exception/PluginDependenciesNotEnabledException.java new file mode 100644 index 0000000..3275ac0 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/PluginDependenciesNotEnabledException.java @@ -0,0 +1,32 @@ +package run.halo.app.infra.exception; + +import java.net.URI; +import java.util.List; +import org.springframework.web.server.ServerWebInputException; + +/** + * Plugin dependencies not enabled exception. + * + * @author johnniang + */ +public class PluginDependenciesNotEnabledException extends ServerWebInputException { + + public static final URI TYPE = + URI.create("https://www.halo.run/probs/plugin-dependencies-not-enabled"); + + /** + * Instantiates a new Plugin dependencies not enabled exception. + * + * @param dependencies dependencies that are not enabled + */ + public PluginDependenciesNotEnabledException(List dependencies) { + super("Plugin dependencies are not fully enabled, please enable them first.", + null, + null, + null, + new Object[] {dependencies}); + setType(TYPE); + getBody().setProperty("dependencies", dependencies); + } + +} diff --git a/application/src/main/java/run/halo/app/infra/exception/PluginDependencyException.java b/application/src/main/java/run/halo/app/infra/exception/PluginDependencyException.java new file mode 100644 index 0000000..04cc2f3 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/PluginDependencyException.java @@ -0,0 +1,56 @@ +package run.halo.app.infra.exception; + +import java.net.URI; +import java.util.List; +import org.pf4j.DependencyResolver.WrongDependencyVersion; +import org.springframework.web.server.ServerWebInputException; + +public abstract class PluginDependencyException extends ServerWebInputException { + + public PluginDependencyException(String reason) { + super(reason); + } + + public PluginDependencyException(String reason, Throwable cause) { + super(reason, null, cause); + } + + protected PluginDependencyException(String reason, Throwable cause, + String messageDetailCode, Object[] messageDetailArguments) { + super(reason, null, cause, messageDetailCode, messageDetailArguments); + } + + public static class CyclicException extends PluginDependencyException { + + public static final String TYPE = "https://halo.run/probs/plugin-cyclic-dependency"; + + public CyclicException() { + super("A cyclic dependency was detected."); + setType(URI.create(TYPE)); + } + } + + public static class NotFoundException extends PluginDependencyException { + + public static final String TYPE = "https://halo.run/probs/plugin-dependencies-not-found"; + + public NotFoundException(List dependencies) { + super("Dependencies were not found.", null, null, new Object[] {dependencies}); + setType(URI.create(TYPE)); + getBody().setProperty("dependencies", dependencies); + } + + } + + public static class WrongVersionsException extends PluginDependencyException { + + public static final String TYPE = + "https://halo.run/probs/plugin-dependencies-with-wrong-versions"; + + public WrongVersionsException(List versions) { + super("Dependencies have wrong version.", null, null, new Object[] {versions}); + setType(URI.create(TYPE)); + getBody().setProperty("versions", versions); + } + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/PluginDependentsNotDisabledException.java b/application/src/main/java/run/halo/app/infra/exception/PluginDependentsNotDisabledException.java new file mode 100644 index 0000000..7cddbb8 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/PluginDependentsNotDisabledException.java @@ -0,0 +1,32 @@ +package run.halo.app.infra.exception; + +import java.net.URI; +import java.util.List; +import org.springframework.web.server.ServerWebInputException; + +/** + * Plugin dependents not disabled exception. + * + * @author johnniang + */ +public class PluginDependentsNotDisabledException extends ServerWebInputException { + + public static final URI TYPE = + URI.create("https://www.halo.run/probs/plugin-dependents-not-disabled"); + + /** + * Instantiates a new Plugin dependents not disabled exception. + * + * @param dependents dependents that are not disabled + */ + public PluginDependentsNotDisabledException(List dependents) { + super("Plugin dependents are not fully disabled, please disable them first.", + null, + null, + null, + new Object[] {dependents}); + setType(TYPE); + getBody().setProperty("dependents", dependents); + } + +} diff --git a/application/src/main/java/run/halo/app/infra/exception/PluginInstallationException.java b/application/src/main/java/run/halo/app/infra/exception/PluginInstallationException.java new file mode 100644 index 0000000..e6100f5 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/PluginInstallationException.java @@ -0,0 +1,19 @@ +package run.halo.app.infra.exception; + +import jakarta.validation.constraints.Null; +import org.springframework.lang.Nullable; +import org.springframework.web.server.ServerWebInputException; + +/** + * {@link ServerWebInputException} subclass that indicates plugin installation failure. + * + * @author guqing + * @since 2.0.0 + */ +public class PluginInstallationException extends ServerWebInputException { + + public PluginInstallationException(String reason, @Nullable String messageDetailCode, + @Null Object[] messageDetailArguments) { + super(reason, null, null, messageDetailCode, messageDetailArguments); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/RateLimitExceededException.java b/application/src/main/java/run/halo/app/infra/exception/RateLimitExceededException.java new file mode 100644 index 0000000..4ac4eb6 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/RateLimitExceededException.java @@ -0,0 +1,15 @@ +package run.halo.app.infra.exception; + +import java.net.URI; +import org.springframework.http.HttpStatus; +import org.springframework.lang.Nullable; +import org.springframework.web.server.ResponseStatusException; + +public class RateLimitExceededException extends ResponseStatusException { + + public RateLimitExceededException(@Nullable Throwable cause) { + super(HttpStatus.TOO_MANY_REQUESTS, "You have exceeded your quota", cause); + setType(URI.create(Exceptions.REQUEST_NOT_PERMITTED_TYPE)); + } + +} diff --git a/application/src/main/java/run/halo/app/infra/exception/RequestBodyValidationException.java b/application/src/main/java/run/halo/app/infra/exception/RequestBodyValidationException.java new file mode 100644 index 0000000..353f2fb --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/RequestBodyValidationException.java @@ -0,0 +1,63 @@ +package run.halo.app.infra.exception; + +import java.util.ArrayList; +import java.util.List; +import java.util.Locale; +import org.springframework.context.MessageSource; +import org.springframework.context.MessageSourceResolvable; +import org.springframework.http.ProblemDetail; +import org.springframework.lang.Nullable; +import org.springframework.validation.Errors; +import org.springframework.web.server.ServerWebInputException; +import org.springframework.web.util.BindErrorUtils; + +public class RequestBodyValidationException extends ServerWebInputException { + + private final Errors errors; + + public RequestBodyValidationException(Errors errors) { + super("Validation failure", null, null, null, null); + this.errors = errors; + } + + @Override + public ProblemDetail updateAndGetBody(MessageSource messageSource, Locale locale) { + var detail = super.updateAndGetBody(messageSource, locale); + detail.setProperty("errors", collectAllErrors(messageSource, locale)); + return detail; + } + + private List collectAllErrors(MessageSource messageSource, Locale locale) { + var globalErrors = resolveErrors(errors.getGlobalErrors(), messageSource, locale); + var fieldErrors = resolveErrors(errors.getFieldErrors(), messageSource, locale); + var errors = new ArrayList(globalErrors.size() + fieldErrors.size()); + errors.addAll(globalErrors); + errors.addAll(fieldErrors); + return errors; + } + + @Override + public Object[] getDetailMessageArguments(MessageSource messageSource, Locale locale) { + return new Object[] { + resolveErrors(errors.getGlobalErrors(), messageSource, locale), + resolveErrors(errors.getFieldErrors(), messageSource, locale) + }; + } + + @Override + public Object[] getDetailMessageArguments() { + return new Object[] { + resolveErrors(errors.getGlobalErrors(), null, Locale.getDefault()), + resolveErrors(errors.getFieldErrors(), null, Locale.getDefault()) + }; + } + + private static List resolveErrors( + List errors, + @Nullable MessageSource messageSource, + Locale locale) { + return messageSource == null + ? BindErrorUtils.resolve(errors).values().stream().toList() + : BindErrorUtils.resolve(errors, messageSource, locale).values().stream().toList(); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/ThemeAlreadyExistsException.java b/application/src/main/java/run/halo/app/infra/exception/ThemeAlreadyExistsException.java new file mode 100644 index 0000000..e3bcd9a --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/ThemeAlreadyExistsException.java @@ -0,0 +1,26 @@ +package run.halo.app.infra.exception; + +import java.net.URI; +import org.springframework.lang.NonNull; +import org.springframework.web.server.ServerWebInputException; + +/** + * {@link ThemeAlreadyExistsException} indicates the provided theme has already installed before. + * + * @author guqing + * @since 2.6.0 + */ +public class ThemeAlreadyExistsException extends ServerWebInputException { + + /** + * Constructs a {@code ThemeAlreadyExistsException} with the given theme name. + * + * @param themeName theme name must not be blank + */ + public ThemeAlreadyExistsException(@NonNull String themeName) { + super("Theme already exists.", null, null, "problemDetail.theme.install.alreadyExists", + new Object[] {themeName}); + setType(URI.create(Exceptions.THEME_ALREADY_EXISTS_TYPE)); + getBody().setProperty("themeName", themeName); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/ThemeInstallationException.java b/application/src/main/java/run/halo/app/infra/exception/ThemeInstallationException.java new file mode 100644 index 0000000..2be1145 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/ThemeInstallationException.java @@ -0,0 +1,17 @@ +package run.halo.app.infra.exception; + +import org.springframework.http.HttpStatus; +import org.springframework.web.server.ResponseStatusException; + +/** + * @author guqing + * @author johnniang + * @since 2.0.0 + */ +public class ThemeInstallationException extends ResponseStatusException { + + public ThemeInstallationException(String reason, String detailCode, Object[] detailArgs) { + super(HttpStatus.BAD_REQUEST, reason, null, detailCode, detailArgs); + } + +} diff --git a/application/src/main/java/run/halo/app/infra/exception/ThemeUninstallException.java b/application/src/main/java/run/halo/app/infra/exception/ThemeUninstallException.java new file mode 100644 index 0000000..fd337ba --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/ThemeUninstallException.java @@ -0,0 +1,16 @@ +package run.halo.app.infra.exception; + +/** + * @author guqing + * @since 2.0.0 + */ +public class ThemeUninstallException extends RuntimeException { + + public ThemeUninstallException(String message) { + super(message); + } + + public ThemeUninstallException(String message, Throwable cause) { + super(message, cause); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/ThemeUpgradeException.java b/application/src/main/java/run/halo/app/infra/exception/ThemeUpgradeException.java new file mode 100644 index 0000000..c040eb1 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/ThemeUpgradeException.java @@ -0,0 +1,17 @@ +package run.halo.app.infra.exception; + +import org.springframework.http.HttpStatus; +import org.springframework.web.server.ResponseStatusException; + +/** + * ThemeUpgradeException will response bad request status if failed to upgrade theme. + * + * @author johnniang + */ +public class ThemeUpgradeException extends ResponseStatusException { + + public ThemeUpgradeException(String reason, String detailCode, Object[] detailArgs) { + super(HttpStatus.BAD_REQUEST, reason, null, detailCode, detailArgs); + } + +} diff --git a/application/src/main/java/run/halo/app/infra/exception/UnsatisfiedAttributeValueException.java b/application/src/main/java/run/halo/app/infra/exception/UnsatisfiedAttributeValueException.java new file mode 100644 index 0000000..4b74dd9 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/UnsatisfiedAttributeValueException.java @@ -0,0 +1,20 @@ +package run.halo.app.infra.exception; + +import jakarta.validation.constraints.Null; +import org.springframework.lang.Nullable; +import org.springframework.web.server.ServerWebInputException; + +/** + * {@link ServerWebInputException} subclass that indicates an unsatisfied + * attribute value in request parameters. + * + * @author guqing + * @since 2.2.0 + */ +public class UnsatisfiedAttributeValueException extends ServerWebInputException { + + public UnsatisfiedAttributeValueException(String reason, @Nullable String messageDetailCode, + @Null Object[] messageDetailArguments) { + super(reason, null, null, messageDetailCode, messageDetailArguments); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/UserNotFoundException.java b/application/src/main/java/run/halo/app/infra/exception/UserNotFoundException.java new file mode 100644 index 0000000..2142bef --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/UserNotFoundException.java @@ -0,0 +1,13 @@ +package run.halo.app.infra.exception; + +import org.springframework.http.HttpStatus; +import org.springframework.web.server.ResponseStatusException; + +public class UserNotFoundException extends ResponseStatusException { + + public UserNotFoundException(String username) { + super(HttpStatus.NOT_FOUND, "User " + username + " was not found", null, null, + new Object[] {username}); + } + +} diff --git a/application/src/main/java/run/halo/app/infra/exception/handlers/HaloErrorConfiguration.java b/application/src/main/java/run/halo/app/infra/exception/handlers/HaloErrorConfiguration.java new file mode 100644 index 0000000..a59c298 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/handlers/HaloErrorConfiguration.java @@ -0,0 +1,64 @@ +package run.halo.app.infra.exception.handlers; + +import org.springframework.beans.factory.ObjectProvider; +import org.springframework.boot.autoconfigure.web.ServerProperties; +import org.springframework.boot.autoconfigure.web.WebProperties; +import org.springframework.boot.autoconfigure.web.reactive.error.ErrorWebFluxAutoConfiguration; +import org.springframework.boot.web.reactive.error.ErrorAttributes; +import org.springframework.boot.web.reactive.error.ErrorWebExceptionHandler; +import org.springframework.context.ApplicationContext; +import org.springframework.context.MessageSource; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.core.annotation.Order; +import org.springframework.http.codec.ServerCodecConfigurer; +import org.springframework.web.reactive.result.view.ViewResolver; + +/** + * Configuration to render errors via a WebFlux + * {@link org.springframework.web.server.WebExceptionHandler}. + *
+ *
+ * See + * {@link org.springframework.boot.autoconfigure.web.reactive.error.ErrorWebFluxAutoConfiguration} + * for more. + * + * @author guqing + * @author johnniang + * @since 2.1.0 + */ +@Configuration +public class HaloErrorConfiguration { + + /** + * This bean will replace ErrorWebExceptionHandler defined at + * {@link ErrorWebFluxAutoConfiguration#errorWebExceptionHandler}. + */ + @Bean + @Order(-1) + ErrorWebExceptionHandler errorWebExceptionHandler(ErrorAttributes errorAttributes, + WebProperties webProperties, + ObjectProvider viewResolvers, + ServerCodecConfigurer serverCodecConfigurer, + ApplicationContext applicationContext, + ServerProperties serverProperties) { + var exceptionHandler = new HaloErrorWebExceptionHandler( + errorAttributes, + webProperties.getResources(), + serverProperties.getError(), + applicationContext); + exceptionHandler.setViewResolvers(viewResolvers.orderedStream().toList()); + exceptionHandler.setMessageWriters(serverCodecConfigurer.getWriters()); + exceptionHandler.setMessageReaders(serverCodecConfigurer.getReaders()); + return exceptionHandler; + } + + /** + * This bean will replace ErrorAttributes defined at + * {@link ErrorWebFluxAutoConfiguration#errorAttributes}. + */ + @Bean + ErrorAttributes errorAttributes(MessageSource messageSource) { + return new ProblemDetailErrorAttributes(messageSource); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/handlers/HaloErrorWebExceptionHandler.java b/application/src/main/java/run/halo/app/infra/exception/handlers/HaloErrorWebExceptionHandler.java new file mode 100644 index 0000000..4331c1c --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/handlers/HaloErrorWebExceptionHandler.java @@ -0,0 +1,80 @@ +package run.halo.app.infra.exception.handlers; + +import java.util.Map; +import java.util.Optional; +import org.springframework.boot.autoconfigure.web.ErrorProperties; +import org.springframework.boot.autoconfigure.web.WebProperties; +import org.springframework.boot.autoconfigure.web.reactive.error.DefaultErrorWebExceptionHandler; +import org.springframework.boot.web.reactive.error.ErrorAttributes; +import org.springframework.context.ApplicationContext; +import org.springframework.http.MediaType; +import org.springframework.http.ProblemDetail; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import reactor.util.context.Context; +import run.halo.app.theme.ThemeContext; +import run.halo.app.theme.ThemeResolver; +import run.halo.app.theme.engine.ThemeTemplateAvailabilityProvider; + +public class HaloErrorWebExceptionHandler extends DefaultErrorWebExceptionHandler { + + private final ThemeTemplateAvailabilityProvider templateAvailabilityProvider; + + private final ThemeResolver themeResolver; + + /** + * Create a new {@code DefaultErrorWebExceptionHandler} instance. + * + * @param errorAttributes the error attributes + * @param resources the resources configuration properties + * @param errorProperties the error configuration properties + * @param applicationContext the current application context + * @since 2.4.0 + */ + public HaloErrorWebExceptionHandler( + ErrorAttributes errorAttributes, + WebProperties.Resources resources, + ErrorProperties errorProperties, + ApplicationContext applicationContext) { + super(errorAttributes, resources, errorProperties, applicationContext); + this.templateAvailabilityProvider = + applicationContext.getBean(ThemeTemplateAvailabilityProvider.class); + this.themeResolver = applicationContext.getBean(ThemeResolver.class); + } + + @Override + protected int getHttpStatus(Map errorAttributes) { + var problemDetail = (ProblemDetail) errorAttributes.get("error"); + return problemDetail.getStatus(); + } + + @Override + protected Mono renderErrorResponse(ServerRequest request) { + var errorAttributes = + getErrorAttributes(request, getErrorAttributeOptions(request, MediaType.ALL)); + return ServerResponse.status(getHttpStatus(errorAttributes)) + .contentType(MediaType.APPLICATION_PROBLEM_JSON) + .bodyValue(errorAttributes.get("error")); + } + + @Override + protected Mono renderErrorView(ServerRequest request) { + return themeResolver.getTheme(request.exchange()) + .flatMap(themeContext -> super.renderErrorView(request) + .contextWrite(Context.of(ThemeContext.class, themeContext))); + } + + @Override + protected Mono renderErrorView(String viewName, + ServerResponse.BodyBuilder responseBody, Map error) { + return Mono.deferContextual(contextView -> { + Optional themeContext = contextView.getOrEmpty(ThemeContext.class); + if (themeContext.isPresent() + && templateAvailabilityProvider.isTemplateAvailable(themeContext.get(), viewName)) { + return responseBody.render(viewName, error); + } + return super.renderErrorView(viewName, responseBody, error); + }); + } +} diff --git a/application/src/main/java/run/halo/app/infra/exception/handlers/ProblemDetailErrorAttributes.java b/application/src/main/java/run/halo/app/infra/exception/handlers/ProblemDetailErrorAttributes.java new file mode 100644 index 0000000..e65c36d --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/exception/handlers/ProblemDetailErrorAttributes.java @@ -0,0 +1,54 @@ +package run.halo.app.infra.exception.handlers; + +import static run.halo.app.infra.exception.Exceptions.createErrorResponse; + +import java.util.LinkedHashMap; +import java.util.Map; +import org.springframework.boot.web.error.ErrorAttributeOptions; +import org.springframework.boot.web.reactive.error.DefaultErrorAttributes; +import org.springframework.boot.web.reactive.error.ErrorAttributes; +import org.springframework.context.MessageSource; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.server.ServerWebExchange; + +/** + * See {@link DefaultErrorAttributes} for more. + * + * @author johnn + */ +public class ProblemDetailErrorAttributes implements ErrorAttributes { + + private static final String ERROR_INTERNAL_ATTRIBUTE = + ProblemDetailErrorAttributes.class.getName() + ".ERROR"; + + private final MessageSource messageSource; + + public ProblemDetailErrorAttributes(MessageSource messageSource) { + this.messageSource = messageSource; + } + + @Override + public Map getErrorAttributes(ServerRequest request, + ErrorAttributeOptions options) { + final var errAttributes = new LinkedHashMap(); + var error = getError(request); + var errorResponse = createErrorResponse(error, null, request.exchange(), messageSource); + errAttributes.put("error", errorResponse.getBody()); + return errAttributes; + } + + @Override + public Throwable getError(ServerRequest request) { + return (Throwable) request.attribute(ERROR_INTERNAL_ATTRIBUTE).stream() + .findFirst() + .orElseThrow(() -> new IllegalStateException( + "Missing exception attribute in ServerWebExchange")); + } + + @Override + public void storeErrorInformation(Throwable error, ServerWebExchange exchange) { + exchange.getAttributes().putIfAbsent(ERROR_INTERNAL_ATTRIBUTE, error); + } + + +} diff --git a/application/src/main/java/run/halo/app/infra/properties/AttachmentProperties.java b/application/src/main/java/run/halo/app/infra/properties/AttachmentProperties.java new file mode 100644 index 0000000..2315c69 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/AttachmentProperties.java @@ -0,0 +1,26 @@ +package run.halo.app.infra.properties; + +import java.util.LinkedList; +import java.util.List; +import lombok.Data; + +@Data +public class AttachmentProperties { + + private List resourceMappings = new LinkedList<>(); + + @Data + public static class ResourceMapping { + + /** + * Like: {@code /upload/**}. + */ + private String pathPattern; + + /** + * The location is a relative path to attachments folder in working directory. + */ + private List locations; + + } +} diff --git a/application/src/main/java/run/halo/app/infra/properties/CacheProperties.java b/application/src/main/java/run/halo/app/infra/properties/CacheProperties.java new file mode 100644 index 0000000..9d7daa3 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/CacheProperties.java @@ -0,0 +1,10 @@ +package run.halo.app.infra.properties; + +import lombok.Data; + +@Data +public class CacheProperties { + + private boolean disabled; + +} diff --git a/application/src/main/java/run/halo/app/infra/properties/ConsoleProperties.java b/application/src/main/java/run/halo/app/infra/properties/ConsoleProperties.java new file mode 100644 index 0000000..8bf245a --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/ConsoleProperties.java @@ -0,0 +1,14 @@ +package run.halo.app.infra.properties; + +import jakarta.validation.Valid; +import lombok.Data; + +@Data +public class ConsoleProperties { + + private String location = "classpath:/console/"; + + @Valid + private ProxyProperties proxy = new ProxyProperties(); + +} diff --git a/application/src/main/java/run/halo/app/infra/properties/ExtensionProperties.java b/application/src/main/java/run/halo/app/infra/properties/ExtensionProperties.java new file mode 100644 index 0000000..101f0a4 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/ExtensionProperties.java @@ -0,0 +1,17 @@ +package run.halo.app.infra.properties; + +import lombok.Data; + +@Data +public class ExtensionProperties { + + private Controller controller = new Controller(); + + @Data + public static class Controller { + + private boolean disabled; + + } + +} diff --git a/application/src/main/java/run/halo/app/infra/properties/HaloProperties.java b/application/src/main/java/run/halo/app/infra/properties/HaloProperties.java new file mode 100644 index 0000000..2a296df --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/HaloProperties.java @@ -0,0 +1,77 @@ +package run.halo.app.infra.properties; + +import jakarta.validation.Valid; +import jakarta.validation.constraints.NotNull; +import java.net.URL; +import java.nio.file.Path; +import java.util.HashSet; +import java.util.Set; +import lombok.Data; +import org.springframework.boot.context.properties.ConfigurationProperties; +import org.springframework.validation.Errors; +import org.springframework.validation.Validator; +import org.springframework.validation.annotation.Validated; + +/** + * @author guqing + * @since 2022-04-12 + */ +@Data +@ConfigurationProperties(prefix = "halo") +@Validated +public class HaloProperties implements Validator { + + @NotNull + private Path workDir; + + /** + * External URL must be a URL and it can be null. + */ + private URL externalUrl; + + /** + * Indicates if we use absolute permalink to post, page, category, tag and so on. + */ + private boolean useAbsolutePermalink; + + private Set initialExtensionLocations = new HashSet<>(); + + /** + * This property could stop initializing required Extensions defined in classpath. + * See {@link run.halo.app.infra.ExtensionResourceInitializer#REQUIRED_EXTENSION_LOCATIONS} + * for more. + */ + private boolean requiredExtensionDisabled; + + @Valid + private final ExtensionProperties extension = new ExtensionProperties(); + + @Valid + private final SecurityProperties security = new SecurityProperties(); + + @Valid + private final ConsoleProperties console = new ConsoleProperties(); + + @Valid + private final UcProperties uc = new UcProperties(); + + @Valid + private final ThemeProperties theme = new ThemeProperties(); + + @Valid + private final AttachmentProperties attachment = new AttachmentProperties(); + + @Override + public boolean supports(Class clazz) { + return HaloProperties.class.isAssignableFrom(clazz); + } + + @Override + public void validate(Object target, Errors errors) { + var props = (HaloProperties) target; + if (props.isUseAbsolutePermalink() && props.getExternalUrl() == null) { + errors.rejectValue("externalUrl", "external-url.required.when-using-absolute-permalink", + "External URL is required when property `use-absolute-permalink` is set to true."); + } + } +} diff --git a/application/src/main/java/run/halo/app/infra/properties/JwtProperties.java b/application/src/main/java/run/halo/app/infra/properties/JwtProperties.java new file mode 100644 index 0000000..7a6c8f3 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/JwtProperties.java @@ -0,0 +1,133 @@ +package run.halo.app.infra.properties; + +import jakarta.validation.constraints.NotNull; +import java.io.ByteArrayInputStream; +import java.io.IOException; +import java.io.InputStream; +import java.nio.charset.StandardCharsets; +import java.security.interfaces.RSAPrivateKey; +import java.security.interfaces.RSAPublicKey; +import org.springframework.boot.context.properties.source.InvalidConfigurationPropertyValueException; +import org.springframework.core.io.Resource; +import org.springframework.security.converter.RsaKeyConverters; +import org.springframework.security.oauth2.jose.jws.SignatureAlgorithm; +import org.springframework.util.Assert; +import org.springframework.util.StreamUtils; +import org.springframework.validation.annotation.Validated; + +/** + * @author guqing + * @author johnniang + * @date 2022-04-12 + */ +@Validated +public class JwtProperties { + + /** + * URI that can either be an OpenID Connect discovery endpoint or an OAuth 2.0 + * Authorization Server Metadata endpoint defined by RFC 8414. + */ + private String issuerUri; + + /** + * JSON Web Algorithm used for verifying the digital signatures. + */ + private SignatureAlgorithm jwsAlgorithm; + + /** + * Location of the file containing the public key used to verify a JWT. + */ + @NotNull + private Resource publicKeyLocation; + + @NotNull + private Resource privateKeyLocation; + + private final RSAPrivateKey privateKey; + + private final RSAPublicKey publicKey; + + public JwtProperties(String issuerUri, SignatureAlgorithm jwsAlgorithm, + Resource publicKeyLocation, + Resource privateKeyLocation) throws IOException { + this.issuerUri = issuerUri; + this.jwsAlgorithm = jwsAlgorithm; + if (jwsAlgorithm == null) { + this.jwsAlgorithm = SignatureAlgorithm.RS256; + } + this.publicKeyLocation = publicKeyLocation; + this.privateKeyLocation = privateKeyLocation; + + //TODO initialize private and public keys at first startup. + this.privateKey = this.readPrivateKey(); + this.publicKey = this.readPublicKey(); + } + + public String getIssuerUri() { + return issuerUri; + } + + public void setIssuerUri(String issuerUri) { + this.issuerUri = issuerUri; + } + + public SignatureAlgorithm getJwsAlgorithm() { + return this.jwsAlgorithm; + } + + public void setJwsAlgorithm(SignatureAlgorithm jwsAlgorithm) { + this.jwsAlgorithm = jwsAlgorithm; + } + + public Resource getPublicKeyLocation() { + return this.publicKeyLocation; + } + + public void setPublicKeyLocation(Resource publicKeyLocation) { + this.publicKeyLocation = publicKeyLocation; + } + + public Resource getPrivateKeyLocation() { + return privateKeyLocation; + } + + public void setPrivateKeyLocation(Resource privateKeyLocation) { + this.privateKeyLocation = privateKeyLocation; + } + + public RSAPrivateKey getPrivateKey() { + return privateKey; + } + + public RSAPublicKey getPublicKey() { + return publicKey; + } + + private RSAPublicKey readPublicKey() throws IOException { + String key = "halo.security.oauth2.jwt.public-key-location"; + Assert.notNull(this.publicKeyLocation, "PublicKeyLocation must not be null"); + if (!this.publicKeyLocation.exists()) { + throw new InvalidConfigurationPropertyValueException(key, this.publicKeyLocation, + "Public key location does not exist"); + } + try (InputStream inputStream = this.publicKeyLocation.getInputStream()) { + String source = StreamUtils.copyToString(inputStream, StandardCharsets.UTF_8); + return RsaKeyConverters.x509() + .convert(new ByteArrayInputStream(source.getBytes())); + } + } + + private RSAPrivateKey readPrivateKey() throws IOException { + String key = "halo.security.oauth2.jwt.private-key-location"; + Assert.notNull(this.privateKeyLocation, "PrivateKeyLocation must not be null"); + if (!this.privateKeyLocation.exists()) { + throw new InvalidConfigurationPropertyValueException(key, this.privateKeyLocation, + "Private key location does not exist"); + } + try (InputStream inputStream = this.privateKeyLocation.getInputStream()) { + String source = StreamUtils.copyToString(inputStream, StandardCharsets.UTF_8); + return RsaKeyConverters.pkcs8() + .convert(new ByteArrayInputStream(source.getBytes())); + } + } +} diff --git a/application/src/main/java/run/halo/app/infra/properties/ProxyProperties.java b/application/src/main/java/run/halo/app/infra/properties/ProxyProperties.java new file mode 100644 index 0000000..275180d --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/ProxyProperties.java @@ -0,0 +1,18 @@ +package run.halo.app.infra.properties; + +import java.net.URI; +import lombok.Data; + +@Data +public class ProxyProperties { + + /** + * Console endpoint in development environment to be proxied. e.g.: http://localhost:8090/ + */ + private URI endpoint; + + /** + * Indicates if the proxy behaviour is enabled. Default is false + */ + private boolean enabled = false; +} diff --git a/application/src/main/java/run/halo/app/infra/properties/SecurityProperties.java b/application/src/main/java/run/halo/app/infra/properties/SecurityProperties.java new file mode 100644 index 0000000..d67b495 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/SecurityProperties.java @@ -0,0 +1,50 @@ +package run.halo.app.infra.properties; + +import static org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy.STRICT_ORIGIN_WHEN_CROSS_ORIGIN; + +import java.time.Duration; +import lombok.Data; +import org.springframework.security.web.server.header.ReferrerPolicyServerHttpHeadersWriter.ReferrerPolicy; +import org.springframework.security.web.server.header.XFrameOptionsServerHttpHeadersWriter.Mode; + +@Data +public class SecurityProperties { + + private final FrameOptions frameOptions = new FrameOptions(); + + private final ReferrerOptions referrerOptions = new ReferrerOptions(); + + private final RememberMeOptions rememberMe = new RememberMeOptions(); + + private final TwoFactorAuthOptions twoFactorAuth = new TwoFactorAuthOptions(); + + @Data + public static class TwoFactorAuthOptions { + + /** + * Whether two-factor authentication is disabled. + */ + private boolean disabled; + + } + + @Data + public static class FrameOptions { + + private boolean disabled; + + private Mode mode = Mode.SAMEORIGIN; + } + + @Data + public static class ReferrerOptions { + + private ReferrerPolicy policy = STRICT_ORIGIN_WHEN_CROSS_ORIGIN; + + } + + @Data + public static class RememberMeOptions { + private Duration tokenValidity = Duration.ofDays(14); + } +} diff --git a/application/src/main/java/run/halo/app/infra/properties/ThemeProperties.java b/application/src/main/java/run/halo/app/infra/properties/ThemeProperties.java new file mode 100644 index 0000000..7f5f11c --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/ThemeProperties.java @@ -0,0 +1,26 @@ +package run.halo.app.infra.properties; + +import jakarta.validation.Valid; +import lombok.Data; + +@Data +public class ThemeProperties { + + @Valid + private final Initializer initializer = new Initializer(); + + /** + * Indicates whether the generator meta needs to be disabled. + */ + private boolean generatorMetaDisabled; + + @Data + public static class Initializer { + + private boolean disabled = false; + + private String location = "classpath:themes/theme-earth.zip"; + + } + +} diff --git a/application/src/main/java/run/halo/app/infra/properties/UcProperties.java b/application/src/main/java/run/halo/app/infra/properties/UcProperties.java new file mode 100644 index 0000000..46fd7c2 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/properties/UcProperties.java @@ -0,0 +1,14 @@ +package run.halo.app.infra.properties; + +import jakarta.validation.Valid; +import lombok.Data; + +@Data +public class UcProperties { + + private String location = "classpath:/uc/"; + + @Valid + private ProxyProperties proxy = new ProxyProperties(); + +} diff --git a/application/src/main/java/run/halo/app/infra/utils/Base62Utils.java b/application/src/main/java/run/halo/app/infra/utils/Base62Utils.java new file mode 100644 index 0000000..9eb1309 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/utils/Base62Utils.java @@ -0,0 +1,58 @@ +package run.halo.app.infra.utils; + +import io.seruco.encoding.base62.Base62; +import java.nio.charset.Charset; +import java.nio.charset.StandardCharsets; +import org.apache.commons.lang3.StringUtils; + +/** + *

Base62 tool class, which provides the encoding and decoding scheme of base62.

+ * + * @author guqing + * @since 2.0.0 + */ +public class Base62Utils { + private static final Charset DEFAULT_CHARSET = StandardCharsets.UTF_8; + private static final Base62 INSTANCE = Base62.createInstance(); + + public static String encode(String source) { + return encode(source, DEFAULT_CHARSET); + } + + /** + * Base62 encode. + * + * @param source the encoded base62 string + * @param charset the charset default is utf_8 + * @return encoded string by base62 + */ + public static String encode(String source, Charset charset) { + return encode(StringUtils.getBytes(source, charset)); + } + + public static String encode(byte[] source) { + return new String(INSTANCE.encode(source)); + } + + /** + * Base62 decode. + * + * @param base62Str the Base62 decoded string + * @return decoded bytes + */ + public static byte[] decode(String base62Str) { + return decode(StringUtils.getBytes(base62Str, DEFAULT_CHARSET)); + } + + public static byte[] decode(byte[] base62bytes) { + return INSTANCE.decode(base62bytes); + } + + public static String decodeToString(String source) { + return decodeToString(source, DEFAULT_CHARSET); + } + + public static String decodeToString(String source, Charset charset) { + return StringUtils.toEncodedString(decode(source), charset); + } +} diff --git a/application/src/main/java/run/halo/app/infra/utils/DataBufferUtils.java b/application/src/main/java/run/halo/app/infra/utils/DataBufferUtils.java new file mode 100644 index 0000000..dc27178 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/utils/DataBufferUtils.java @@ -0,0 +1,43 @@ +package run.halo.app.infra.utils; + +import static org.springframework.core.io.buffer.DataBufferUtils.releaseConsumer; +import static org.springframework.core.io.buffer.DataBufferUtils.write; + +import java.io.IOException; +import java.io.InputStream; +import java.io.PipedInputStream; +import java.io.PipedOutputStream; +import lombok.extern.slf4j.Slf4j; +import org.reactivestreams.Publisher; +import org.springframework.core.io.buffer.DataBuffer; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Scheduler; +import reactor.core.scheduler.Schedulers; +import reactor.util.context.Context; + +@Slf4j +public enum DataBufferUtils { + ; + + public static Mono toInputStream(Publisher content) { + return toInputStream(content, Schedulers.boundedElastic()); + } + + public static Mono toInputStream(Publisher content, + Scheduler scheduler) { + return Mono.create(sink -> { + try { + var pos = new PipedOutputStream(); + var pis = new PipedInputStream(pos); + var disposable = write(content, pos) + .subscribeOn(scheduler) + .subscribe(releaseConsumer(), sink::error, () -> FileUtils.closeQuietly(pos), + Context.of(sink.contextView())); + sink.onDispose(disposable); + sink.success(pis); + } catch (IOException e) { + sink.error(e); + } + }); + } +} diff --git a/application/src/main/java/run/halo/app/infra/utils/FileNameUtils.java b/application/src/main/java/run/halo/app/infra/utils/FileNameUtils.java new file mode 100644 index 0000000..36ef71e --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/utils/FileNameUtils.java @@ -0,0 +1,44 @@ +package run.halo.app.infra.utils; + +import com.google.common.io.Files; +import org.apache.commons.lang3.RandomStringUtils; +import org.apache.commons.lang3.StringUtils; + +public final class FileNameUtils { + + private FileNameUtils() { + } + + public static String removeFileExtension(String filename, boolean removeAllExtensions) { + if (filename == null || filename.isEmpty()) { + return filename; + } + var extPattern = "(? + * Case 1: halo.run -> halo-xyz.run + * Case 2: .run -> xyz.run + * Case 3: halo -> halo-xyz + * + * + * @param filename is name of file. + * @param length is for generating random string with specific length. + * @return File name with random string. + */ + public static String randomFileName(String filename, int length) { + var nameWithoutExt = Files.getNameWithoutExtension(filename); + var ext = Files.getFileExtension(filename); + var random = RandomStringUtils.randomAlphabetic(length).toLowerCase(); + if (StringUtils.isBlank(nameWithoutExt)) { + return random + "." + ext; + } + if (StringUtils.isBlank(ext)) { + return nameWithoutExt + "-" + random; + } + return nameWithoutExt + "-" + random + "." + ext; + } +} diff --git a/application/src/main/java/run/halo/app/infra/utils/FileUtils.java b/application/src/main/java/run/halo/app/infra/utils/FileUtils.java new file mode 100644 index 0000000..ca790bf --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/utils/FileUtils.java @@ -0,0 +1,337 @@ +package run.halo.app.infra.utils; + +import static java.nio.file.StandardCopyOption.REPLACE_EXISTING; +import static org.springframework.util.FileSystemUtils.deleteRecursively; +import static run.halo.app.infra.utils.DataBufferUtils.toInputStream; + +import java.io.Closeable; +import java.io.IOException; +import java.nio.file.CopyOption; +import java.nio.file.DirectoryNotEmptyException; +import java.nio.file.FileVisitResult; +import java.nio.file.Files; +import java.nio.file.Path; +import java.nio.file.Paths; +import java.nio.file.SimpleFileVisitor; +import java.nio.file.attribute.BasicFileAttributes; +import java.util.Set; +import java.util.function.Consumer; +import java.util.function.Predicate; +import java.util.jar.JarEntry; +import java.util.jar.JarOutputStream; +import java.util.stream.Stream; +import java.util.zip.ZipEntry; +import java.util.zip.ZipInputStream; +import java.util.zip.ZipOutputStream; +import lombok.extern.slf4j.Slf4j; +import org.reactivestreams.Publisher; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.lang.NonNull; +import org.springframework.util.AntPathMatcher; +import org.springframework.util.Assert; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Scheduler; +import reactor.core.scheduler.Schedulers; +import run.halo.app.infra.exception.AccessDeniedException; + +/** + * @author guqing + * @since 2.0.0 + */ +@Slf4j +public abstract class FileUtils { + + private FileUtils() { + } + + public static Mono unzip(Publisher content, @NonNull Path targetPath) { + return unzip(content, targetPath, Schedulers.boundedElastic()); + } + + public static Mono unzip(Publisher content, @NonNull Path targetPath, + Scheduler scheduler) { + return Mono.usingWhen( + toInputStream(content, scheduler), + is -> { + try (var zis = new ZipInputStream(is)) { + unzip(zis, targetPath); + return Mono.empty(); + } catch (IOException e) { + return Mono.error(e); + } + }, + is -> Mono.fromRunnable(() -> closeQuietly(is)) + ); + } + + public static void unzip(@NonNull ZipInputStream zis, @NonNull Path targetPath) + throws IOException { + // 1. unzip file to folder + // 2. return the folder path + Assert.notNull(zis, "Zip input stream must not be null"); + Assert.notNull(targetPath, "Target path must not be null"); + + // Create path if absent + createIfAbsent(targetPath); + + // Folder must be empty + ensureEmpty(targetPath); + + ZipEntry zipEntry = zis.getNextEntry(); + + while (zipEntry != null) { + // Resolve the entry path + Path entryPath = targetPath.resolve(zipEntry.getName()); + + checkDirectoryTraversal(targetPath, entryPath); + + if (Files.notExists(entryPath.getParent())) { + Files.createDirectories(entryPath.getParent()); + } + + if (zipEntry.isDirectory()) { + // Create directory + Files.createDirectory(entryPath); + } else { + // Copy file + Files.copy(zis, entryPath); + } + + zipEntry = zis.getNextEntry(); + } + } + + public static void zip(Path sourcePath, Path targetPath) throws IOException { + try (var zos = new ZipOutputStream(Files.newOutputStream(targetPath))) { + Files.walkFileTree(sourcePath, new SimpleFileVisitor<>() { + @Override + public FileVisitResult visitFile(Path file, BasicFileAttributes attrs) + throws IOException { + checkDirectoryTraversal(sourcePath, file); + var relativePath = sourcePath.relativize(file); + var entry = new ZipEntry(relativePath.toString()); + zos.putNextEntry(entry); + Files.copy(file, zos); + zos.closeEntry(); + return super.visitFile(file, attrs); + } + }); + } + } + + public static void jar(Path sourcePath, Path targetPath) throws IOException { + try (var jos = new JarOutputStream(Files.newOutputStream(targetPath))) { + Files.walkFileTree(sourcePath, new SimpleFileVisitor<>() { + @Override + public FileVisitResult visitFile(Path file, BasicFileAttributes attrs) + throws IOException { + checkDirectoryTraversal(sourcePath, file); + var relativePath = sourcePath.relativize(file); + var entry = new JarEntry(relativePath.toString()); + jos.putNextEntry(entry); + Files.copy(file, jos); + jos.closeEntry(); + return super.visitFile(file, attrs); + } + }); + } + } + + /** + * Creates directories if absent. + * + * @param path path must not be null + * @throws IOException io exception + */ + public static void createIfAbsent(@NonNull Path path) throws IOException { + Assert.notNull(path, "Path must not be null"); + + if (Files.notExists(path)) { + // Create directories + Files.createDirectories(path); + + log.debug("Created directory: [{}]", path); + } + } + + /** + * The given path must be empty. + * + * @param path path must not be null + * @throws IOException io exception + */ + public static void ensureEmpty(@NonNull Path path) throws IOException { + if (!isEmpty(path)) { + throw new DirectoryNotEmptyException("Target directory: " + path + " was not empty"); + } + } + + /** + * Checks if the given path is empty. + * + * @param path path must not be null + * @return true if the given path is empty; false otherwise + * @throws IOException io exception + */ + public static boolean isEmpty(@NonNull Path path) throws IOException { + Assert.notNull(path, "Path must not be null"); + + if (!Files.isDirectory(path) || Files.notExists(path)) { + return true; + } + + try (Stream pathStream = Files.list(path)) { + return pathStream.findAny().isEmpty(); + } + } + + public static void closeQuietly(final Closeable closeable) { + closeQuietly(closeable, null); + } + + /** + * Closes the given {@link Closeable} as a null-safe operation while consuming IOException by + * the given {@code consumer}. + * + * @param closeable The resource to close, may be null. + * @param consumer Consumes the IOException thrown by {@link Closeable#close()}. + */ + public static void closeQuietly(final Closeable closeable, + final Consumer consumer) { + if (closeable != null) { + try { + closeable.close(); + } catch (IOException e) { + if (consumer != null) { + consumer.accept(e); + } + } + } + } + + /** + * Checks directory traversal vulnerability. + * + * @param parentPath parent path must not be null. + * @param pathToCheck path to check must not be null + */ + public static void checkDirectoryTraversal(@NonNull Path parentPath, + @NonNull Path pathToCheck) { + Assert.notNull(parentPath, "Parent path must not be null"); + Assert.notNull(pathToCheck, "Path to check must not be null"); + + if (pathToCheck.normalize().startsWith(parentPath)) { + return; + } + + throw new AccessDeniedException("Directory traversal detected: " + pathToCheck, + "problemDetail.directoryTraversal", new Object[] {parentPath, pathToCheck}); + } + + /** + * Checks directory traversal vulnerability. + * + * @param parentPath parent path must not be null. + * @param pathToCheck path to check must not be null + */ + public static void checkDirectoryTraversal(@NonNull String parentPath, + @NonNull String pathToCheck) { + checkDirectoryTraversal(Paths.get(parentPath), Paths.get(pathToCheck)); + } + + /** + * Checks directory traversal vulnerability. + * + * @param parentPath parent path must not be null. + * @param pathToCheck path to check must not be null + */ + public static void checkDirectoryTraversal(@NonNull Path parentPath, + @NonNull String pathToCheck) { + checkDirectoryTraversal(parentPath, Paths.get(pathToCheck)); + } + + /** + * Delete folder recursively without exception throwing. + * + * @param root the root File to delete + */ + public static void deleteRecursivelyAndSilently(Path root) { + try { + var deleted = deleteRecursively(root); + if (log.isDebugEnabled()) { + log.debug("Delete {} result: {}", root, deleted); + } + } catch (IOException ignored) { + // Ignore this error + } + } + + public static Mono deleteRecursivelyAndSilently(Path root, Scheduler scheduler) { + return Mono.fromSupplier(() -> { + try { + return deleteRecursively(root); + } catch (IOException ignored) { + return false; + } + }).subscribeOn(scheduler); + } + + + public static Mono deleteFileSilently(Path file) { + return deleteFileSilently(file, Schedulers.boundedElastic()); + } + + public static Mono deleteFileSilently(Path file, Scheduler scheduler) { + return Mono.fromSupplier( + () -> { + if (file == null || !Files.isRegularFile(file)) { + return false; + } + try { + return Files.deleteIfExists(file); + } catch (IOException ignored) { + return false; + } + }) + .subscribeOn(scheduler); + } + + public static void copy(Path source, Path dest, CopyOption... options) { + try { + Files.copy(source, dest, options); + } catch (IOException e) { + throw new RuntimeException(e); + } + } + + public static void copyRecursively(Path src, Path target, Set excludes) + throws IOException { + var pathMatcher = new AntPathMatcher(); + Predicate shouldExclude = path -> excludes.stream() + .anyMatch(pattern -> pathMatcher.match(pattern, path.toString())); + Files.walkFileTree(src, new SimpleFileVisitor<>() { + @Override + public FileVisitResult visitFile(Path file, BasicFileAttributes attrs) + throws IOException { + if (!shouldExclude.test(src.relativize(file))) { + Files.copy(file, target.resolve(src.relativize(file)), REPLACE_EXISTING); + } + return super.visitFile(file, attrs); + } + + @Override + public FileVisitResult preVisitDirectory(Path dir, BasicFileAttributes attrs) + throws IOException { + if (shouldExclude.test(src.relativize(dir))) { + return FileVisitResult.SKIP_SUBTREE; + } + Files.createDirectories(target.resolve(src.relativize(dir))); + return super.preVisitDirectory(dir, attrs); + } + }); + } + + public static Mono createTempDir(String prefix, Scheduler scheduler) { + return Mono.fromCallable(() -> Files.createTempDirectory(prefix)).subscribeOn(scheduler); + } +} diff --git a/application/src/main/java/run/halo/app/infra/utils/HaloUtils.java b/application/src/main/java/run/halo/app/infra/utils/HaloUtils.java new file mode 100644 index 0000000..08d9e2c --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/utils/HaloUtils.java @@ -0,0 +1,73 @@ +package run.halo.app.infra.utils; + +import java.io.IOException; +import java.io.InputStream; +import java.nio.charset.StandardCharsets; +import java.time.Instant; +import java.time.ZoneId; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.core.io.ClassPathResource; +import org.springframework.http.HttpHeaders; +import org.springframework.util.Assert; +import org.springframework.util.StreamUtils; +import org.springframework.web.reactive.function.server.ServerRequest; + +/** + * @author guqing + * @date 2022-04-12 + */ +@Slf4j +public class HaloUtils { + + /** + *

Read the file under the classpath as a string.

+ * + * @param location the file location relative to classpath + * @return file content + */ + public static String readClassPathResourceAsString(String location) { + ClassPathResource classPathResource = new ClassPathResource(location); + try (InputStream inputStream = classPathResource.getInputStream()) { + return StreamUtils.copyToString(inputStream, StandardCharsets.UTF_8); + } catch (IOException e) { + throw new IllegalArgumentException( + String.format("Failed to read class path file as string from location [%s]", + location), e); + } + } + + /** + * Gets user-agent from server request. + * + * @param request server request + * @return user-agent string if found, otherwise "unknown" + */ + public static String userAgentFrom(ServerRequest request) { + HttpHeaders httpHeaders = request.headers().asHttpHeaders(); + // https://en.wikipedia.org/wiki/User_agent + String userAgent = httpHeaders.getFirst(HttpHeaders.USER_AGENT); + if (StringUtils.isBlank(userAgent)) { + // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Sec-CH-UA + userAgent = httpHeaders.getFirst("Sec-CH-UA"); + } + return StringUtils.defaultString(userAgent, "unknown"); + } + + public static String getDayText(Instant instant) { + Assert.notNull(instant, "Instant must not be null"); + int dayValue = instant.atZone(ZoneId.systemDefault()).getDayOfMonth(); + return StringUtils.leftPad(String.valueOf(dayValue), 2, '0'); + } + + public static String getMonthText(Instant instant) { + Assert.notNull(instant, "Instant must not be null"); + int monthValue = instant.atZone(ZoneId.systemDefault()).getMonthValue(); + return StringUtils.leftPad(String.valueOf(monthValue), 2, '0'); + } + + public static String getYearText(Instant instant) { + Assert.notNull(instant, "Instant must not be null"); + return String.valueOf(instant.atZone(ZoneId.systemDefault()).getYear()); + } +} diff --git a/application/src/main/java/run/halo/app/infra/utils/IpAddressUtils.java b/application/src/main/java/run/halo/app/infra/utils/IpAddressUtils.java new file mode 100644 index 0000000..5a9ec87 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/utils/IpAddressUtils.java @@ -0,0 +1,71 @@ +package run.halo.app.infra.utils; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.http.server.reactive.ServerHttpRequest; +import org.springframework.util.StringUtils; +import org.springframework.web.reactive.function.server.ServerRequest; + +/** + * Ip address utils. + * Code from internet. + */ +@Slf4j +public class IpAddressUtils { + public static final String UNKNOWN = "unknown"; + + private static final String[] IP_HEADER_NAMES = { + "X-Forwarded-For", + "X-Real-IP", + "Proxy-Client-IP", + "WL-Proxy-Client-IP", + "CF-Connecting-IP", + "HTTP_X_FORWARDED_FOR", + "HTTP_X_FORWARDED", + "HTTP_X_CLUSTER_CLIENT_IP", + "HTTP_CLIENT_IP", + "HTTP_FORWARDED_FOR", + "HTTP_FORWARDED", + "HTTP_VIA", + "REMOTE_ADDR", + }; + + /** + * Gets the IP address from request. + * + * @param request is server http request + * @return IP address if found, otherwise {@link #UNKNOWN}. + */ + public static String getClientIp(ServerHttpRequest request) { + for (String header : IP_HEADER_NAMES) { + String ipList = request.getHeaders().getFirst(header); + if (StringUtils.hasText(ipList) && !UNKNOWN.equalsIgnoreCase(ipList)) { + String[] ips = ipList.trim().split("[,;]"); + for (String ip : ips) { + if (StringUtils.hasText(ip) && !UNKNOWN.equalsIgnoreCase(ip)) { + return ip; + } + } + } + } + var remoteAddress = request.getRemoteAddress(); + return remoteAddress == null || remoteAddress.isUnresolved() + ? UNKNOWN : remoteAddress.getAddress().getHostAddress(); + } + + + /** + * Gets the ip address from request. + * + * @param request http request + * @return ip address if found, otherwise {@link #UNKNOWN}. + */ + public static String getIpAddress(ServerRequest request) { + try { + return getClientIp(request.exchange().getRequest()); + } catch (Exception e) { + log.warn("Failed to obtain client IP, and fallback to unknown.", e); + return UNKNOWN; + } + } + +} diff --git a/application/src/main/java/run/halo/app/infra/utils/VersionUtils.java b/application/src/main/java/run/halo/app/infra/utils/VersionUtils.java new file mode 100644 index 0000000..09441ac --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/utils/VersionUtils.java @@ -0,0 +1,49 @@ +package run.halo.app.infra.utils; + +import com.github.zafarkhaja.semver.Version; +import com.github.zafarkhaja.semver.expr.Expression; +import lombok.experimental.UtilityClass; +import org.apache.commons.lang3.StringUtils; +import org.springframework.web.server.ServerWebInputException; + +@UtilityClass +public class VersionUtils { + + /** + * Check if this "requires" param satisfies for a given (system) version. + * + * @param version the version to check + * @return true if version satisfies the "requires" or if requires was left blank + */ + public static boolean satisfiesRequires(String version, String requires) { + String requiresVersion = StringUtils.trim(requires); + + // an exact version x.y.z will implicitly mean the same as >=x.y.z + if (requiresVersion.matches("^\\d+\\.\\d+\\.\\d+$")) { + // If exact versions are not allowed in requires, rewrite to >= expression + requiresVersion = ">=" + requiresVersion; + } + return version.equals("0.0.0") || checkVersionConstraint(version, requiresVersion); + } + + /** + * Checks if a version satisfies the specified SemVer {@link Expression} string. + * If the constraint is empty or null then the method returns true. + * Constraint examples: {@code >2.0.0} (simple), {@code ">=1.4.0 & <1.6.0"} (range). + * See + * semver-expressions-api-ranges for more info. + * + * @param version the version to check + * @param constraint the SemVer Expression string + * @return true if version satisfies the constraint or if constraint was left blank + */ + public static boolean checkVersionConstraint(String version, String constraint) { + try { + return StringUtils.isBlank(constraint) + || "*".equals(constraint) + || Version.valueOf(version).satisfies(constraint); + } catch (Exception e) { + throw new ServerWebInputException("Illegal requires version expression.", null, e); + } + } +} diff --git a/application/src/main/java/run/halo/app/infra/utils/YamlUnstructuredLoader.java b/application/src/main/java/run/halo/app/infra/utils/YamlUnstructuredLoader.java new file mode 100644 index 0000000..ce57ba9 --- /dev/null +++ b/application/src/main/java/run/halo/app/infra/utils/YamlUnstructuredLoader.java @@ -0,0 +1,50 @@ +package run.halo.app.infra.utils; + +import java.util.ArrayList; +import java.util.List; +import org.springframework.beans.factory.config.YamlProcessor; +import org.springframework.core.io.Resource; +import run.halo.app.extension.Unstructured; + +/** + *

Process the content in yaml that matches the {@link DocumentMatcher} and convert it to an + * unstructured list.

+ *

Multiple resources can be processed at one time.

+ *

The following specified key must be included before the resource can be processed: + * 

+ *     apiVersion
+ *     kind
+ *     metadata.name
+ *
+ * Otherwise, skip it and continue to read the next resource. + *

+ * + * @author guqing + * @since 2.0.0 + */ +public class YamlUnstructuredLoader extends YamlProcessor { + + private static final DocumentMatcher DEFAULT_UNSTRUCTURED_MATCHER = properties -> { + if (properties.containsKey("apiVersion") + && properties.containsKey("kind") + && (properties.containsKey("metadata.name") + || properties.containsKey("metadata.generateName"))) { + return YamlProcessor.MatchStatus.FOUND; + } + return MatchStatus.NOT_FOUND; + }; + + public YamlUnstructuredLoader(Resource... resources) { + setResources(resources); + setDocumentMatchers(DEFAULT_UNSTRUCTURED_MATCHER); + } + + public List load() { + List unstructuredList = new ArrayList<>(); + process((properties, map) -> { + Unstructured unstructured = JsonUtils.mapToObject(map, Unstructured.class); + unstructuredList.add(unstructured); + }); + return unstructuredList; + } +} diff --git a/application/src/main/java/run/halo/app/metrics/CounterService.java b/application/src/main/java/run/halo/app/metrics/CounterService.java new file mode 100644 index 0000000..8dcf3b9 --- /dev/null +++ b/application/src/main/java/run/halo/app/metrics/CounterService.java @@ -0,0 +1,15 @@ +package run.halo.app.metrics; + +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Counter; + +/** + * @author guqing + * @since 2.0.0 + */ +public interface CounterService { + + Mono getByName(String counterName); + + Mono deleteByName(String counterName); +} diff --git a/application/src/main/java/run/halo/app/metrics/CounterServiceImpl.java b/application/src/main/java/run/halo/app/metrics/CounterServiceImpl.java new file mode 100644 index 0000000..64727b5 --- /dev/null +++ b/application/src/main/java/run/halo/app/metrics/CounterServiceImpl.java @@ -0,0 +1,33 @@ +package run.halo.app.metrics; + +import org.springframework.stereotype.Service; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Counter; +import run.halo.app.extension.ReactiveExtensionClient; + +/** + * Counter service implementation. + * + * @author guqing + * @since 2.0.0 + */ +@Service +public class CounterServiceImpl implements CounterService { + + private final ReactiveExtensionClient client; + + public CounterServiceImpl(ReactiveExtensionClient client) { + this.client = client; + } + + @Override + public Mono getByName(String counterName) { + return client.fetch(Counter.class, counterName); + } + + @Override + public Mono deleteByName(String counterName) { + return client.fetch(Counter.class, counterName) + .flatMap(client::delete); + } +} diff --git a/application/src/main/java/run/halo/app/metrics/MeterUtils.java b/application/src/main/java/run/halo/app/metrics/MeterUtils.java new file mode 100644 index 0000000..c61c773 --- /dev/null +++ b/application/src/main/java/run/halo/app/metrics/MeterUtils.java @@ -0,0 +1,124 @@ +package run.halo.app.metrics; + +import io.micrometer.core.instrument.Counter; +import io.micrometer.core.instrument.MeterRegistry; +import io.micrometer.core.instrument.Tag; +import io.micrometer.core.instrument.Tags; +import org.apache.commons.lang3.StringUtils; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + * Meter utils. + * + * @author guqing + * @since 2.0.0 + */ +public class MeterUtils { + + public static final Tag METRICS_COMMON_TAG = Tag.of("metrics.halo.run", "true"); + public static final String SCENE = "scene"; + public static final String VISIT_SCENE = "visit"; + public static final String UPVOTE_SCENE = "upvote"; + public static final String DOWNVOTE_SCENE = "downvote"; + public static final String TOTAL_COMMENT_SCENE = "total_comment"; + public static final String APPROVED_COMMENT_SCENE = "approved_comment"; + + /** + * Build a counter name. + * + * @param group extension group + * @param plural extension plural + * @param name extension name + * @return counter name + */ + public static String nameOf(String group, String plural, String name) { + if (StringUtils.isBlank(group)) { + return String.join("/", plural, name); + } + return String.join(".", plural, group) + "/" + name; + } + + public static String nameOf(Class clazz, String name) { + GVK annotation = clazz.getAnnotation(GVK.class); + return nameOf(annotation.group(), annotation.plural(), name); + } + + public static Counter visitCounter(MeterRegistry registry, String name) { + return counter(registry, name, Tag.of(SCENE, VISIT_SCENE)); + } + + public static Counter upvoteCounter(MeterRegistry registry, String name) { + return counter(registry, name, Tag.of(SCENE, UPVOTE_SCENE)); + } + + public static Counter downvoteCounter(MeterRegistry registry, String name) { + return counter(registry, name, Tag.of(SCENE, DOWNVOTE_SCENE)); + } + + public static Counter totalCommentCounter(MeterRegistry registry, String name) { + return counter(registry, name, Tag.of(SCENE, TOTAL_COMMENT_SCENE)); + } + + public static Counter approvedCommentCounter(MeterRegistry registry, String name) { + return counter(registry, name, Tag.of(SCENE, APPROVED_COMMENT_SCENE)); + } + + public static boolean isVisitCounter(Counter counter) { + String sceneValue = counter.getId().getTag(SCENE); + if (StringUtils.isBlank(sceneValue)) { + return false; + } + return VISIT_SCENE.equals(sceneValue); + } + + public static boolean isUpvoteCounter(Counter counter) { + String sceneValue = counter.getId().getTag(SCENE); + if (StringUtils.isBlank(sceneValue)) { + return false; + } + return UPVOTE_SCENE.equals(sceneValue); + } + + public static boolean isDownvoteCounter(Counter counter) { + String sceneValue = counter.getId().getTag(SCENE); + if (StringUtils.isBlank(sceneValue)) { + return false; + } + return DOWNVOTE_SCENE.equals(sceneValue); + } + + public static boolean isTotalCommentCounter(Counter counter) { + String sceneValue = counter.getId().getTag(SCENE); + if (StringUtils.isBlank(sceneValue)) { + return false; + } + return TOTAL_COMMENT_SCENE.equals(sceneValue); + } + + public static boolean isApprovedCommentCounter(Counter counter) { + String sceneValue = counter.getId().getTag(SCENE); + if (StringUtils.isBlank(sceneValue)) { + return false; + } + return APPROVED_COMMENT_SCENE.equals(sceneValue); + } + + /** + * Build a {@link Counter} for halo extension. + * + * @param registry meter registry + * @param name counter name,build by {@link #nameOf(String, String, String)} + * @return counter find by name from registry if exists, otherwise create a new one. + */ + private static Counter counter(MeterRegistry registry, String name, Tag... tags) { + Tags withTags = Tags.of(METRICS_COMMON_TAG).and(tags); + Counter counter = registry.find(name) + .tags(withTags) + .counter(); + if (counter == null) { + return registry.counter(name, withTags); + } + return counter; + } +} diff --git a/application/src/main/java/run/halo/app/metrics/PostStatsUpdater.java b/application/src/main/java/run/halo/app/metrics/PostStatsUpdater.java new file mode 100644 index 0000000..f417c6e --- /dev/null +++ b/application/src/main/java/run/halo/app/metrics/PostStatsUpdater.java @@ -0,0 +1,90 @@ +package run.halo.app.metrics; + +import java.time.Duration; +import java.time.Instant; +import org.springframework.context.SmartLifecycle; +import org.springframework.context.event.EventListener; +import org.springframework.stereotype.Component; +import run.halo.app.content.Stats; +import run.halo.app.core.extension.content.Post; +import run.halo.app.event.post.PostStatsChangedEvent; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.DefaultController; +import run.halo.app.extension.controller.DefaultQueue; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.RequestQueue; +import run.halo.app.infra.utils.JsonUtils; + +@Component +public class PostStatsUpdater implements Reconciler, + SmartLifecycle { + + private volatile boolean running = false; + + private final ExtensionClient client; + private final RequestQueue queue; + private final Controller controller; + + public PostStatsUpdater(ExtensionClient client) { + this.client = client; + queue = new DefaultQueue<>(Instant::now); + controller = this.setupWith(null); + } + + @Override + public Result reconcile(StatsRequest request) { + client.fetch(Post.class, request.postName()).ifPresent(post -> { + var annotations = MetadataUtil.nullSafeAnnotations(post); + annotations.put(Post.STATS_ANNO, JsonUtils.objectToJson(request.stats())); + client.update(post); + }); + return Result.doNotRetry(); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return new DefaultController<>( + this.getClass().getName(), + this, + queue, + null, + Duration.ofMillis(100), + Duration.ofMinutes(10)); + } + + @Override + public void start() { + this.controller.start(); + this.running = true; + } + + @Override + public void stop() { + this.running = false; + this.controller.dispose(); + } + + @Override + public boolean isRunning() { + return this.running; + } + + @EventListener(PostStatsChangedEvent.class) + public void onReplyEvent(PostStatsChangedEvent event) { + var counter = event.getCounter(); + var stats = Stats.builder() + .visit(counter.getVisit()) + .upvote(counter.getUpvote()) + .totalComment(counter.getTotalComment()) + .approvedComment(counter.getApprovedComment()) + .build(); + var request = new StatsRequest(event.getPostName(), stats); + queue.addImmediately(request); + } + + public record StatsRequest(String postName, Stats stats) { + } +} diff --git a/application/src/main/java/run/halo/app/metrics/ReplyEventReconciler.java b/application/src/main/java/run/halo/app/metrics/ReplyEventReconciler.java new file mode 100644 index 0000000..9f0c5f4 --- /dev/null +++ b/application/src/main/java/run/halo/app/metrics/ReplyEventReconciler.java @@ -0,0 +1,163 @@ +package run.halo.app.metrics; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.greaterThan; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import java.time.Duration; +import java.time.Instant; +import java.util.Optional; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.BooleanUtils; +import org.springframework.context.SmartLifecycle; +import org.springframework.context.event.EventListener; +import org.springframework.data.domain.Sort; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.event.post.CommentUnreadReplyCountChangedEvent; +import run.halo.app.event.post.ReplyEvent; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.DefaultController; +import run.halo.app.extension.controller.DefaultQueue; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.RequestQueue; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.router.selector.FieldSelector; + +/** + * Update the comment status after receiving the reply event. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class ReplyEventReconciler + implements Reconciler, SmartLifecycle { + private volatile boolean running = false; + + private final ExtensionClient client; + private final RequestQueue replyEventQueue; + private final Controller replyEventController; + + public ReplyEventReconciler(ExtensionClient client) { + this.client = client; + replyEventQueue = new DefaultQueue<>(Instant::now); + replyEventController = this.setupWith(null); + } + + @Override + public Result reconcile(CommentName request) { + String commentName = request.name(); + + client.fetch(Comment.class, commentName) + // if the comment has been deleted, then do nothing. + .filter(comment -> comment.getMetadata().getDeletionTimestamp() == null) + .ifPresent(comment -> { + // order by reply creation time desc to get first as last reply time + var baseQuery = and( + equal("spec.commentName", commentName), + isNull("metadata.deletionTimestamp") + ); + var pageRequest = PageRequestImpl.ofSize(1).withSort( + Sort.by("spec.creationTime", "metadata.name").descending() + ); + final Comment.CommentStatus status = comment.getStatusOrDefault(); + + var replyPageResult = + client.listBy(Reply.class, listOptionsWithFieldQuery(baseQuery), pageRequest); + // total reply count + status.setReplyCount((int) replyPageResult.getTotal()); + + // calculate last reply time from total replies(top 1) + Instant lastReplyTime = replyPageResult.get() + .map(reply -> reply.getSpec().getCreationTime()) + .findFirst() + .orElse(null); + status.setLastReplyTime(lastReplyTime); + + // calculate visible reply count(only approved and not hidden) + var visibleReplyPageResult = + client.listBy(Reply.class, listOptionsWithFieldQuery(and( + baseQuery, + equal("spec.approved", BooleanUtils.TRUE), + equal("spec.hidden", BooleanUtils.FALSE) + )), pageRequest); + status.setVisibleReplyCount((int) visibleReplyPageResult.getTotal()); + + // calculate unread reply count(after last read time) + var unReadQuery = Optional.ofNullable(comment.getSpec().getLastReadTime()) + .map(lastReadTime -> and( + baseQuery, + greaterThan("spec.creationTime", lastReadTime.toString()) + )) + .orElse(baseQuery); + var unReadPageResult = + client.listBy(Reply.class, listOptionsWithFieldQuery(unReadQuery), pageRequest); + status.setUnreadReplyCount((int) unReadPageResult.getTotal()); + + status.setHasNewReply(defaultIfNull(status.getUnreadReplyCount(), 0) > 0); + + client.update(comment); + }); + return new Result(false, null); + } + + public record CommentName(String name) { + public static CommentName of(String name) { + return new CommentName(name); + } + } + + static ListOptions listOptionsWithFieldQuery(Query query) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of(query)); + return listOptions; + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return new DefaultController<>( + this.getClass().getName(), + this, + replyEventQueue, + null, + Duration.ofMillis(300), + Duration.ofMinutes(5)); + } + + @Override + public void start() { + this.replyEventController.start(); + this.running = true; + } + + @Override + public void stop() { + this.running = false; + this.replyEventController.dispose(); + } + + @Override + public boolean isRunning() { + return this.running; + } + + @EventListener(ReplyEvent.class) + public void onReplyEvent(ReplyEvent replyEvent) { + var commentName = replyEvent.getReply().getSpec().getCommentName(); + replyEventQueue.addImmediately(CommentName.of(commentName)); + } + + @EventListener(CommentUnreadReplyCountChangedEvent.class) + public void onUnreadReplyCountChangedEvent(CommentUnreadReplyCountChangedEvent event) { + replyEventQueue.addImmediately(CommentName.of(event.getCommentName())); + } +} diff --git a/application/src/main/java/run/halo/app/metrics/VisitedEventReconciler.java b/application/src/main/java/run/halo/app/metrics/VisitedEventReconciler.java new file mode 100644 index 0000000..968777a --- /dev/null +++ b/application/src/main/java/run/halo/app/metrics/VisitedEventReconciler.java @@ -0,0 +1,174 @@ +package run.halo.app.metrics; + +import java.time.Duration; +import java.time.Instant; +import java.util.Iterator; +import java.util.Map; +import java.util.Optional; +import java.util.concurrent.ConcurrentHashMap; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.ObjectUtils; +import org.springframework.context.SmartLifecycle; +import org.springframework.context.event.EventListener; +import org.springframework.scheduling.annotation.Async; +import org.springframework.scheduling.annotation.Scheduled; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.Counter; +import run.halo.app.event.post.VisitedEvent; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.SchemeManager; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.DefaultController; +import run.halo.app.extension.controller.DefaultQueue; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.RequestQueue; + +/** + * Update counters after receiving visit event. + * It will cache the count in memory for one minute and then batch update to the database. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class VisitedEventReconciler + implements Reconciler, SmartLifecycle { + private volatile boolean running = false; + + private final ExtensionClient client; + private final RequestQueue visitedEventQueue; + private final Map pooledVisitsMap = new ConcurrentHashMap<>(); + private final Controller visitedEventController; + + public VisitedEventReconciler(ExtensionClient client) { + this.client = client; + visitedEventQueue = new DefaultQueue<>(Instant::now); + visitedEventController = this.setupWith(null); + } + + @Override + public Result reconcile(VisitCountBucket visitCountBucket) { + createOrUpdateVisits(visitCountBucket.name(), visitCountBucket.visits()); + return new Result(false, null); + } + + private void createOrUpdateVisits(String name, Integer visits) { + client.fetch(Counter.class, name) + .ifPresentOrElse(counter -> { + Integer existingVisit = ObjectUtils.defaultIfNull(counter.getVisit(), 0); + counter.setVisit(existingVisit + visits); + client.update(counter); + }, () -> { + Counter counter = Counter.emptyCounter(name); + counter.setVisit(visits); + client.create(counter); + }); + } + + /** + * Put the merged data into the queue every minute for updating to the database. + */ + @Scheduled(cron = "0 0/1 * * * ?") + public void queuedVisitBucketTask() { + Iterator> iterator = pooledVisitsMap.entrySet().iterator(); + while (iterator.hasNext()) { + Map.Entry item = iterator.next(); + visitedEventQueue.addImmediately(new VisitCountBucket(item.getKey(), item.getValue())); + iterator.remove(); + } + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return new DefaultController<>( + this.getClass().getName(), + this, + visitedEventQueue, + null, + Duration.ofMillis(300), + Duration.ofMinutes(5)); + } + + @Override + public void start() { + this.visitedEventController.start(); + this.running = true; + } + + @Override + public void stop() { + log.debug("Persist visits to database before destroy..."); + try { + Iterator> iterator = pooledVisitsMap.entrySet().iterator(); + while (iterator.hasNext()) { + Map.Entry item = iterator.next(); + createOrUpdateVisits(item.getKey(), item.getValue()); + iterator.remove(); + } + } catch (Exception e) { + log.error("Failed to persist visits to database.", e); + } + this.running = false; + this.visitedEventController.dispose(); + } + + @Override + public boolean isRunning() { + return this.running; + } + + public record VisitCountBucket(String name, int visits) { + } + + @Component + @RequiredArgsConstructor + public class VisitedEventListener { + private final SchemeManager schemeManager; + + @Async + @EventListener(VisitedEvent.class) + public void onVisited(VisitedEvent visitedEvent) { + mergeVisits(visitedEvent); + } + + private void mergeVisits(VisitedEvent event) { + var gpn = new GroupPluralName(event.getGroup(), event.getPlural(), event.getName()); + if (!checkVisitSubject(gpn)) { + log.debug("Skip visit event for: {}", gpn); + return; + } + String counterName = + MeterUtils.nameOf(event.getGroup(), event.getPlural(), event.getName()); + pooledVisitsMap.compute(counterName, (name, visits) -> { + if (visits == null) { + return 1; + } else { + return visits + 1; + } + }); + } + + private boolean checkVisitSubject(GroupPluralName groupPluralName) { + Optional schemeOptional = schemeManager.schemes().stream() + .filter(scheme -> { + GroupVersionKind gvk = scheme.groupVersionKind(); + return scheme.plural().equals(groupPluralName.plural()) + && gvk.group().equals(groupPluralName.group()); + }) + .findFirst(); + return schemeOptional.map( + scheme -> client.fetch(scheme.groupVersionKind(), groupPluralName.name()) + .isPresent() + ) + .orElse(false); + } + + record GroupPluralName(String group, String plural, String name) { + } + } +} diff --git a/application/src/main/java/run/halo/app/metrics/VotedEventReconciler.java b/application/src/main/java/run/halo/app/metrics/VotedEventReconciler.java new file mode 100644 index 0000000..915d498 --- /dev/null +++ b/application/src/main/java/run/halo/app/metrics/VotedEventReconciler.java @@ -0,0 +1,141 @@ +package run.halo.app.metrics; + +import java.time.Duration; +import java.time.Instant; +import java.util.Optional; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.ObjectUtils; +import org.springframework.context.SmartLifecycle; +import org.springframework.context.event.EventListener; +import org.springframework.scheduling.annotation.Async; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.Counter; +import run.halo.app.event.post.DownvotedEvent; +import run.halo.app.event.post.UpvotedEvent; +import run.halo.app.event.post.VotedEvent; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.Scheme; +import run.halo.app.extension.SchemeManager; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.DefaultController; +import run.halo.app.extension.controller.DefaultQueue; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.RequestQueue; + +/** + * Update counters after receiving upvote or downvote event. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class VotedEventReconciler implements Reconciler, SmartLifecycle { + private volatile boolean running = false; + + private final ExtensionClient client; + private final RequestQueue votedEventQueue; + private final Controller votedEventController; + + public VotedEventReconciler(ExtensionClient client) { + this.client = client; + votedEventQueue = new DefaultQueue<>(Instant::now); + votedEventController = this.setupWith(null); + } + + @Override + public Result reconcile(VotedEvent votedEvent) { + String counterName = + MeterUtils.nameOf(votedEvent.getGroup(), votedEvent.getPlural(), votedEvent.getName()); + client.fetch(Counter.class, counterName) + .ifPresentOrElse(counter -> { + if (votedEvent instanceof UpvotedEvent) { + Integer existingVote = ObjectUtils.defaultIfNull(counter.getUpvote(), 0); + counter.setUpvote(existingVote + 1); + } else if (votedEvent instanceof DownvotedEvent) { + Integer existingVote = ObjectUtils.defaultIfNull(counter.getDownvote(), 0); + counter.setDownvote(existingVote + 1); + } + client.update(counter); + }, () -> { + Counter counter = Counter.emptyCounter(counterName); + if (votedEvent instanceof UpvotedEvent) { + counter.setUpvote(1); + } else if (votedEvent instanceof DownvotedEvent) { + counter.setDownvote(1); + } + client.create(counter); + }); + return new Result(false, null); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return new DefaultController<>( + this.getClass().getName(), + this, + votedEventQueue, + null, + Duration.ofMillis(300), + Duration.ofMinutes(5)); + } + + @Override + public void start() { + this.votedEventController.start(); + this.running = true; + } + + @Override + public void stop() { + this.running = false; + this.votedEventController.dispose(); + } + + @Override + public boolean isRunning() { + return this.running; + } + + @Component + @RequiredArgsConstructor + public class VotedEventListener { + private final SchemeManager schemeManager; + + /** + * Add up/down vote event to queue. + */ + @Async + @EventListener(VotedEvent.class) + public void onVoted(VotedEvent event) { + var gpn = new GroupPluralName(event.getGroup(), event.getPlural(), event.getName()); + if (!checkSubject(gpn)) { + log.debug("Skip voted event for: {}", gpn); + return; + } + votedEventQueue.addImmediately(event); + } + + private boolean checkSubject( + GroupPluralName groupPluralName) { + Optional schemeOptional = schemeManager.schemes().stream() + .filter(scheme -> { + GroupVersionKind gvk = scheme.groupVersionKind(); + return scheme.plural().equals(groupPluralName.plural()) + && gvk.group().equals(groupPluralName.group()); + }) + .findFirst(); + return schemeOptional.map( + scheme -> client.fetch(scheme.groupVersionKind(), groupPluralName.name()) + .isPresent() + ) + .orElse(false); + } + + record GroupPluralName(String group, String plural, String name) { + } + } +} diff --git a/application/src/main/java/run/halo/app/migration/BackupFile.java b/application/src/main/java/run/halo/app/migration/BackupFile.java new file mode 100644 index 0000000..83fdda7 --- /dev/null +++ b/application/src/main/java/run/halo/app/migration/BackupFile.java @@ -0,0 +1,34 @@ +package run.halo.app.migration; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import java.nio.file.Path; +import java.time.Instant; +import lombok.Data; + +/** + * Backup file. + * + * @author johnniang + */ +@Data +public class BackupFile { + + @JsonIgnore + private Path path; + + /** + * Filename of backup file. + */ + private String filename; + + /** + * Size of backup file. + */ + private long size; + + /** + * Last modified time of backup file. + */ + private Instant lastModifiedTime; + +} diff --git a/application/src/main/java/run/halo/app/migration/BackupReconciler.java b/application/src/main/java/run/halo/app/migration/BackupReconciler.java new file mode 100644 index 0000000..a97d32b --- /dev/null +++ b/application/src/main/java/run/halo/app/migration/BackupReconciler.java @@ -0,0 +1,133 @@ +package run.halo.app.migration; + +import static run.halo.app.extension.ExtensionUtil.addFinalizers; +import static run.halo.app.extension.ExtensionUtil.isDeleted; +import static run.halo.app.extension.ExtensionUtil.removeFinalizers; +import static run.halo.app.extension.controller.Reconciler.Result.doNotRetry; +import static run.halo.app.migration.Constant.HOUSE_KEEPER_FINALIZER; + +import java.time.Clock; +import java.time.Duration; +import java.time.Instant; +import java.util.Set; +import lombok.extern.slf4j.Slf4j; +import org.springframework.stereotype.Component; +import reactor.core.Exceptions; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.Reconciler.Request; +import run.halo.app.migration.Backup.Phase; + +@Slf4j +@Component +public class BackupReconciler implements Reconciler { + + private final ExtensionClient client; + + private final MigrationService migrationService; + + private Clock clock; + + public BackupReconciler(ExtensionClient client, MigrationService migrationService) { + this.client = client; + this.migrationService = migrationService; + clock = Clock.systemDefaultZone(); + } + + /** + * Set clock. The method is only for unit test. + * + * @param clock is new clock + */ + void setClock(Clock clock) { + this.clock = clock; + } + + @Override + public Result reconcile(Request request) { + return client.fetch(Backup.class, request.name()) + .map(backup -> { + var metadata = backup.getMetadata(); + var status = backup.getStatus(); + var spec = backup.getSpec(); + if (isDeleted(backup)) { + if (removeFinalizers(metadata, Set.of(HOUSE_KEEPER_FINALIZER))) { + migrationService.cleanup(backup).block(); + client.update(backup); + } + return doNotRetry(); + } + if (addFinalizers(metadata, Set.of(HOUSE_KEEPER_FINALIZER))) { + client.update(backup); + } + + if (Phase.PENDING.equals(status.getPhase())) { + // Do backup + try { + status.setPhase(Phase.RUNNING); + status.setStartTimestamp(Instant.now(clock)); + updateStatus(request.name(), status); + // Long period execution when backing up + migrationService.backup(backup).block(); + status.setPhase(Phase.SUCCEEDED); + status.setCompletionTimestamp(Instant.now(clock)); + updateStatus(request.name(), status); + } catch (Throwable t) { + var unwrapped = Exceptions.unwrap(t); + log.error("Failed to backup", unwrapped); + // Only happen when shutting down + status.setPhase(Phase.FAILED); + if (unwrapped instanceof InterruptedException) { + status.setFailureReason("Interrupted"); + status.setFailureMessage("The backup process was interrupted."); + } else { + status.setFailureReason("SystemError"); + status.setFailureMessage( + "Something went wrong! Error message: " + unwrapped.getMessage()); + } + updateStatus(request.name(), status); + } + } + // Only happen when failing to update status when interrupted + if (Phase.RUNNING.equals(status.getPhase())) { + status.setPhase(Phase.FAILED); + status.setFailureReason("UnexpectedExit"); + status.setFailureMessage("The backup process may exit abnormally."); + updateStatus(request.name(), status); + } + // Check the expires at and requeue if necessary + if (isTerminal(status.getPhase())) { + var expiresAt = spec.getExpiresAt(); + if (expiresAt != null) { + var now = Instant.now(clock); + if (now.isBefore(expiresAt)) { + return new Result(true, Duration.between(now, expiresAt)); + } + client.delete(backup); + } + } + return doNotRetry(); + }).orElseGet(Result::doNotRetry); + } + + private void updateStatus(String name, Backup.Status status) { + client.fetch(Backup.class, name) + .ifPresent(backup -> { + backup.setStatus(status); + client.update(backup); + }); + } + + private static boolean isTerminal(Phase phase) { + return Phase.FAILED.equals(phase) || Phase.SUCCEEDED.equals(phase); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Backup()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/migration/MigrationEndpoint.java b/application/src/main/java/run/halo/app/migration/MigrationEndpoint.java new file mode 100644 index 0000000..10abf98 --- /dev/null +++ b/application/src/main/java/run/halo/app/migration/MigrationEndpoint.java @@ -0,0 +1,234 @@ +package run.halo.app.migration; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import java.net.MalformedURLException; +import java.net.URISyntaxException; +import java.net.URL; +import java.util.Optional; +import java.util.function.Supplier; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.core.io.buffer.DataBufferUtils; +import org.springframework.core.io.buffer.DefaultDataBufferFactory; +import org.springframework.data.util.Optionals; +import org.springframework.http.HttpHeaders; +import org.springframework.http.MediaType; +import org.springframework.http.codec.multipart.FilePart; +import org.springframework.http.codec.multipart.FormFieldPart; +import org.springframework.http.codec.multipart.Part; +import org.springframework.stereotype.Component; +import org.springframework.util.MultiValueMap; +import org.springframework.util.StreamUtils; +import org.springframework.util.StringUtils; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.ReactiveUrlDataBufferFetcher; + +@Component +public class MigrationEndpoint implements CustomEndpoint { + + private final MigrationService migrationService; + + private final ReactiveExtensionClient client; + + private final ReactiveUrlDataBufferFetcher dataBufferFetcher; + + public MigrationEndpoint(MigrationService migrationService, + ReactiveExtensionClient client, + ReactiveUrlDataBufferFetcher dataBufferFetcher) { + this.migrationService = migrationService; + this.client = client; + this.dataBufferFetcher = dataBufferFetcher; + } + + @Override + public RouterFunction endpoint() { + var tag = "MigrationV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("/backup-files", + this::getBackups, + builder -> builder.operationId("getBackupFiles") + .tag(tag) + .description("Get backup files from backup root.") + .response(responseBuilder() + .implementationArray(BackupFile.class) + ) + ) + .GET("/backups/{name}/files/{filename}", + request -> { + var name = request.pathVariable("name"); + return client.get(Backup.class, name) + .flatMap(migrationService::download) + .flatMap(backupResource -> ServerResponse.ok() + .header(HttpHeaders.CONTENT_DISPOSITION, + "attachment; filename=\"" + backupResource.getFilename() + "\"") + .contentType(MediaType.APPLICATION_OCTET_STREAM) + .bodyValue(backupResource)); + }, + builder -> builder + .tag(tag) + .operationId("DownloadBackups") + .parameter(parameterBuilder() + .name("name") + .description("Backup name.") + .required(true) + .in(ParameterIn.PATH)) + .parameter(parameterBuilder() + .name("filename") + .description("Backup filename.") + .required(true) + .in(ParameterIn.PATH)) + .build()) + .POST("/restorations", request -> request.multipartData() + .map(RestoreRequest::new) + .flatMap(restoreRequest -> { + var content = getContent(restoreRequest) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException( + "Please upload a file " + + "or provide a download link or backup name."))); + return migrationService.restore(content); + }) + .then(Mono.defer( + () -> ServerResponse.ok().bodyValue("Restored successfully!") + )), + builder -> builder + .tag(tag) + .description("Restore backup by uploading file " + + "or providing download link or backup name.") + .operationId("RestoreBackup") + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.MULTIPART_FORM_DATA_VALUE) + .schema(schemaBuilder().implementation(RestoreRequest.class)) + ) + ) + .build()) + .build(); + } + + private Mono getBackups(ServerRequest request) { + var backupFiles = migrationService.getBackupFiles(); + return ServerResponse.ok().body(backupFiles, BackupFile.class); + } + + private Flux getContent(RestoreRequest request) { + Supplier>> contentFromFilename = () -> + request.getFilename().map(filename -> migrationService.getBackupFile(filename) + .map(BackupFile::getPath) + .flatMapMany( + path -> DataBufferUtils.read( + path, + DefaultDataBufferFactory.sharedInstance, + StreamUtils.BUFFER_SIZE))); + + Supplier>> contentFromDownloadUrl = () -> request.getDownloadUrl() + .map(downloadURL -> { + try { + var url = new URL(downloadURL); + return dataBufferFetcher.fetch(url.toURI()); + } catch (MalformedURLException e) { + return Flux.error(new ServerWebInputException( + "Invalid download URL: " + downloadURL)); + } catch (URISyntaxException e) { + // Should never happen + return Flux.error(e); + } + }); + + Supplier>> contentFromUpload = () -> request.getFile() + .map(Part::content); + + Supplier>> contentFromBackupName = () -> request.getBackupName() + .map(backupName -> client.get(Backup.class, backupName) + .flatMap(migrationService::download) + .flatMapMany(resource -> DataBufferUtils.read(resource, + DefaultDataBufferFactory.sharedInstance, + StreamUtils.BUFFER_SIZE))); + + return Optionals.firstNonEmpty( + contentFromUpload, + contentFromDownloadUrl, + contentFromBackupName, + contentFromFilename + ) + .orElseGet(() -> Flux.error(new ServerWebInputException(""" + Please upload a file or provide a download link or backup name or backup filename.\ + """))); + } + + @Schema(types = "object") + public static class RestoreRequest { + private final MultiValueMap multipart; + + public RestoreRequest(MultiValueMap multipart) { + this.multipart = multipart; + } + + @Schema(requiredMode = NOT_REQUIRED, name = "file", description = "Backup file.") + public Optional getFile() { + var part = multipart.getFirst("file"); + if (part instanceof FilePart filePart) { + return Optional.of(filePart); + } + return Optional.empty(); + } + + @Schema(requiredMode = NOT_REQUIRED, name = "filename", description = """ + Filename of backup file in backups root.\ + """) + public Optional getFilename() { + var part = multipart.getFirst("filename"); + if (part instanceof FormFieldPart filenamePart) { + return Optional.of(filenamePart.value()) + .filter(StringUtils::hasText); + } + return Optional.empty(); + } + + @Schema(requiredMode = NOT_REQUIRED, + name = "downloadUrl", + description = "Remote backup HTTP URL.") + public Optional getDownloadUrl() { + var part = multipart.getFirst("downloadUrl"); + if (part instanceof FormFieldPart downloadUrlPart) { + return Optional.of(downloadUrlPart.value()) + .filter(StringUtils::hasText); + } + return Optional.empty(); + } + + @Schema(requiredMode = NOT_REQUIRED, + name = "backupName", + description = "Backup metadata name.") + public Optional getBackupName() { + var part = multipart.getFirst("backupName"); + if (part instanceof FormFieldPart backupNamePart) { + return Optional.of(backupNamePart.value()) + .filter(StringUtils::hasText); + } + return Optional.empty(); + } + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion( + "console.api." + Constant.GROUP + "/" + Constant.VERSION); + } +} diff --git a/application/src/main/java/run/halo/app/migration/MigrationService.java b/application/src/main/java/run/halo/app/migration/MigrationService.java new file mode 100644 index 0000000..4639e31 --- /dev/null +++ b/application/src/main/java/run/halo/app/migration/MigrationService.java @@ -0,0 +1,40 @@ +package run.halo.app.migration; + +import org.reactivestreams.Publisher; +import org.springframework.core.io.Resource; +import org.springframework.core.io.buffer.DataBuffer; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +public interface MigrationService { + + Mono backup(Backup backup); + + Mono download(Backup backup); + + Mono restore(Publisher content); + + /** + * Clean up backup file. + * + * @param backup backup detail. + * @return void publisher. + */ + Mono cleanup(Backup backup); + + /** + * Gets backup files. + * + * @return backup files, sorted by last modified time. + */ + Flux getBackupFiles(); + + /** + * Get backup file by filename. + * + * @param filename filename of backup file + * @return backup file or empty if file is not found + */ + Mono getBackupFile(String filename); + +} diff --git a/application/src/main/java/run/halo/app/migration/impl/MigrationServiceImpl.java b/application/src/main/java/run/halo/app/migration/impl/MigrationServiceImpl.java new file mode 100644 index 0000000..700bbd0 --- /dev/null +++ b/application/src/main/java/run/halo/app/migration/impl/MigrationServiceImpl.java @@ -0,0 +1,318 @@ +package run.halo.app.migration.impl; + +import static java.nio.file.Files.deleteIfExists; +import static java.util.Comparator.comparing; +import static org.apache.commons.io.FilenameUtils.isExtension; +import static org.springframework.util.FileSystemUtils.copyRecursively; +import static run.halo.app.infra.utils.FileUtils.checkDirectoryTraversal; +import static run.halo.app.infra.utils.FileUtils.copyRecursively; +import static run.halo.app.infra.utils.FileUtils.createTempDir; +import static run.halo.app.infra.utils.FileUtils.deleteRecursivelyAndSilently; +import static run.halo.app.infra.utils.FileUtils.unzip; + +import com.fasterxml.jackson.core.util.MinimalPrettyPrinter; +import com.fasterxml.jackson.databind.MappingIterator; +import com.fasterxml.jackson.databind.ObjectMapper; +import com.fasterxml.jackson.databind.json.JsonMapper; +import java.io.IOException; +import java.nio.file.Files; +import java.nio.file.Path; +import java.time.ZoneId; +import java.time.format.DateTimeFormatter; +import java.util.Locale; +import java.util.Set; +import java.util.stream.BaseStream; +import lombok.extern.slf4j.Slf4j; +import org.reactivestreams.Publisher; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.core.io.FileSystemResource; +import org.springframework.core.io.Resource; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.stereotype.Service; +import org.springframework.util.StringUtils; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.Exceptions; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Scheduler; +import reactor.core.scheduler.Schedulers; +import run.halo.app.extension.store.ExtensionStore; +import run.halo.app.extension.store.ExtensionStoreRepository; +import run.halo.app.infra.BackupRootGetter; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.infra.properties.HaloProperties; +import run.halo.app.infra.utils.FileUtils; +import run.halo.app.migration.Backup; +import run.halo.app.migration.BackupFile; +import run.halo.app.migration.MigrationService; + +@Slf4j +@Service +public class MigrationServiceImpl implements MigrationService, InitializingBean { + + private final ExtensionStoreRepository repository; + + private final HaloProperties haloProperties; + + private final BackupRootGetter backupRoot; + + private final ObjectMapper objectMapper; + + private final Set excludes = Set.of( + "**/.git/**", + "**/node_modules/**", + "backups/**", + "db/**", + "logs/**", + "docker-compose.yaml", + "docker-compose.yml", + "mysql/**", + "mysqlBackup/**", + "**/.idea/**", + "**/.vscode/**" + ); + + private final DateTimeFormatter dateTimeFormatter; + + private final Scheduler scheduler = Schedulers.boundedElastic(); + + public MigrationServiceImpl(ExtensionStoreRepository repository, + HaloProperties haloProperties, BackupRootGetter backupRoot) { + this.repository = repository; + this.haloProperties = haloProperties; + this.backupRoot = backupRoot; + this.objectMapper = JsonMapper.builder() + .defaultPrettyPrinter(new MinimalPrettyPrinter()) + .build(); + this.dateTimeFormatter = DateTimeFormatter + .ofPattern("yyyyMMddHHmmss") + .withLocale(Locale.getDefault()) + .withZone(ZoneId.systemDefault()); + } + + DateTimeFormatter getDateTimeFormatter() { + return dateTimeFormatter; + } + + ObjectMapper getObjectMapper() { + return objectMapper; + } + + Path getBackupsRoot() { + return backupRoot.get(); + } + + @Override + public Mono backup(Backup backup) { + return Mono.usingWhen( + createTempDir("halo-full-backup-", scheduler), + tempDir -> backupExtensions(tempDir) + .then(Mono.defer(() -> backupWorkDir(tempDir))) + .then(Mono.defer(() -> packageBackup(tempDir, backup))), + tempDir -> deleteRecursivelyAndSilently(tempDir, scheduler) + ); + } + + @Override + public Mono download(Backup backup) { + return Mono.create(sink -> { + var status = backup.getStatus(); + if (!Backup.Phase.SUCCEEDED.equals(status.getPhase()) || status.getFilename() == null) { + sink.error(new ServerWebInputException("Current backup is not downloadable.")); + return; + } + var backupFile = getBackupsRoot().resolve(status.getFilename()); + var resource = new FileSystemResource(backupFile); + if (!resource.exists()) { + sink.error( + new NotFoundException("problemDetail.migration.backup.notFound", + new Object[] {}, + "Backup file doesn't exist or deleted.")); + return; + } + sink.success(resource); + }); + } + + @Override + public Mono restore(Publisher content) { + return Mono.usingWhen( + createTempDir("halo-restore-", scheduler), + tempDir -> unpackBackup(content, tempDir) + .then(Mono.defer(() -> restoreExtensions(tempDir))) + .then(Mono.defer(() -> restoreWorkdir(tempDir))), + tempDir -> deleteRecursivelyAndSilently(tempDir, scheduler) + ); + } + + @Override + public Mono cleanup(Backup backup) { + return Mono.create(sink -> { + var status = backup.getStatus(); + if (status == null || !StringUtils.hasText(status.getFilename())) { + sink.success(); + return; + } + var filename = status.getFilename(); + var backupsRoot = getBackupsRoot(); + var backupFile = backupsRoot.resolve(filename); + try { + checkDirectoryTraversal(backupsRoot, backupFile); + deleteIfExists(backupFile); + sink.success(); + } catch (IOException e) { + sink.error(e); + } + }).subscribeOn(scheduler); + } + + @Override + public Flux getBackupFiles() { + return Flux.using( + () -> Files.list(getBackupsRoot()), + Flux::fromStream, + BaseStream::close + ) + .filter(Files::isRegularFile) + .filter(Files::isReadable) + .filter(path -> isExtension(path.getFileName().toString(), "zip")) + .map(this::toBackupFile) + .sort(comparing(BackupFile::getLastModifiedTime).reversed() + .thenComparing(BackupFile::getFilename) + ) + .subscribeOn(this.scheduler); + } + + @Override + public Mono getBackupFile(String filename) { + return Mono.fromCallable(() -> { + var backupsRoot = getBackupsRoot(); + var backupFilePath = backupsRoot.resolve(filename); + checkDirectoryTraversal(backupsRoot, backupFilePath); + if (Files.notExists(backupFilePath)) { + return null; + } + return toBackupFile(backupFilePath); + }).subscribeOn(this.scheduler); + } + + private BackupFile toBackupFile(Path path) { + var backupFile = new BackupFile(); + backupFile.setPath(path); + backupFile.setFilename(path.getFileName().toString()); + try { + backupFile.setSize(Files.size(path)); + backupFile.setLastModifiedTime(Files.getLastModifiedTime(path).toInstant()); + return backupFile; + } catch (IOException e) { + throw Exceptions.propagate(e); + } + } + + private Mono restoreWorkdir(Path backupRoot) { + return Mono.create(sink -> { + try { + var workdir = backupRoot.resolve("workdir"); + if (Files.exists(workdir)) { + copyRecursively(workdir, haloProperties.getWorkDir()); + } + sink.success(); + } catch (IOException e) { + sink.error(e); + } + }).subscribeOn(scheduler); + } + + private Mono restoreExtensions(Path backupRoot) { + var extensionsPath = backupRoot.resolve("extensions.data"); + if (Files.notExists(extensionsPath)) { + return Mono.empty(); + } + var reader = objectMapper.readerFor(ExtensionStore.class); + return Mono.>using( + () -> reader.readValues(extensionsPath.toFile()), + itr -> Flux.create( + sink -> { + while (itr.hasNext()) { + sink.next(itr.next()); + } + sink.complete(); + }) + // reset version + .doOnNext(extensionStore -> extensionStore.setVersion(null)).buffer(100) + // We might encounter OptimisticLockingFailureException when saving extension + // store, + // So we have to delete all extension stores before saving. + .flatMap(extensionStores -> repository.deleteAll(extensionStores) + .thenMany(repository.saveAll(extensionStores)) + ) + .doOnNext(extensionStore -> log.info("Restored extension store: {}", + extensionStore.getName())) + .then(), + FileUtils::closeQuietly) + .subscribeOn(scheduler); + } + + private Mono unpackBackup(Publisher content, Path target) { + return unzip(content, target, scheduler); + } + + private Mono packageBackup(Path baseDir, Backup backup) { + return Mono.fromCallable( + () -> { + var backupsFolder = getBackupsRoot(); + Files.createDirectories(backupsFolder); + return backupsFolder; + }) + .handle((backupsFolder, sink) -> { + var backupName = backup.getMetadata().getName(); + var startTimestamp = backup.getStatus().getStartTimestamp(); + var timePart = this.dateTimeFormatter.format(startTimestamp); + var backupFile = backupsFolder.resolve(timePart + '-' + backupName + ".zip"); + try { + FileUtils.zip(baseDir, backupFile); + backup.getStatus().setFilename(backupFile.getFileName().toString()); + backup.getStatus().setSize(Files.size(backupFile)); + sink.complete(); + } catch (IOException e) { + sink.error(e); + } + }) + .subscribeOn(scheduler); + } + + private Mono backupWorkDir(Path baseDir) { + return Mono.fromCallable(() -> Files.createDirectory(baseDir.resolve("workdir"))) + .handle((workdirPath, sink) -> { + try { + copyRecursively(haloProperties.getWorkDir(), workdirPath, excludes); + sink.complete(); + } catch (IOException e) { + sink.error(e); + } + }) + .subscribeOn(scheduler); + } + + private Mono backupExtensions(Path baseDir) { + return Mono.fromCallable(() -> Files.createFile(baseDir.resolve("extensions.data"))) + .flatMap(extensionsPath -> Mono.using( + () -> objectMapper.writerFor(ExtensionStore.class) + .writeValuesAsArray(extensionsPath.toFile()), + seqWriter -> repository.findAll() + .doOnNext(extensionStore -> { + try { + seqWriter.write(extensionStore); + } catch (IOException e) { + throw Exceptions.propagate(e); + } + }).then(), + FileUtils::closeQuietly)) + .subscribeOn(scheduler); + } + + @Override + public void afterPropertiesSet() throws Exception { + Files.createDirectories(getBackupsRoot()); + } +} diff --git a/application/src/main/java/run/halo/app/notification/DefaultNotificationCenter.java b/application/src/main/java/run/halo/app/notification/DefaultNotificationCenter.java new file mode 100644 index 0000000..79ab9ca --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/DefaultNotificationCenter.java @@ -0,0 +1,292 @@ +package run.halo.app.notification; + +import static org.apache.commons.lang3.StringUtils.defaultString; + +import java.util.HashMap; +import java.util.Locale; +import java.util.Optional; +import lombok.Builder; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Schedulers; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.notification.Notification; +import run.halo.app.core.extension.notification.NotifierDescriptor; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.core.extension.notification.ReasonType; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.notification.endpoint.SubscriptionRouter; + +/** + * A default implementation of {@link NotificationCenter}. + * + * @author guqing + * @since 2.10.0 + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class DefaultNotificationCenter implements NotificationCenter { + private final ReactiveExtensionClient client; + private final NotificationSender notificationSender; + private final NotifierConfigStore notifierConfigStore; + private final ReasonNotificationTemplateSelector notificationTemplateSelector; + private final UserNotificationPreferenceService userNotificationPreferenceService; + private final NotificationTemplateRender notificationTemplateRender; + private final SubscriptionRouter subscriptionRouter; + private final RecipientResolver recipientResolver; + private final SubscriptionService subscriptionService; + + @Override + public Mono notify(Reason reason) { + return recipientResolver.resolve(reason) + .doOnNext(subscriber -> { + log.debug("Dispatching notification to subscriber [{}] for reason [{}]", + subscriber, reason.getMetadata().getName()); + }) + .publishOn(Schedulers.boundedElastic()) + .flatMap(subscriber -> dispatchNotification(reason, subscriber)) + .then(); + } + + @Override + public Mono subscribe(Subscription.Subscriber subscriber, + Subscription.InterestReason reason) { + return unsubscribe(subscriber, reason) + .then(Mono.defer(() -> { + var subscription = new Subscription(); + subscription.setMetadata(new Metadata()); + subscription.getMetadata().setGenerateName("subscription-"); + subscription.setSpec(new Subscription.Spec()); + subscription.getSpec().setUnsubscribeToken(Subscription.generateUnsubscribeToken()); + subscription.getSpec().setSubscriber(subscriber); + Subscription.InterestReason.ensureSubjectHasValue(reason); + subscription.getSpec().setReason(reason); + return client.create(subscription); + })); + } + + @Override + public Mono unsubscribe(Subscription.Subscriber subscriber) { + return subscriptionService.remove(subscriber).then(); + } + + @Override + public Mono unsubscribe(Subscription.Subscriber subscriber, + Subscription.InterestReason reason) { + return subscriptionService.remove(subscriber, reason).then(); + } + + Flux getNotifiersBySubscriber(Subscriber subscriber, Reason reason) { + var reasonType = reason.getSpec().getReasonType(); + return userNotificationPreferenceService.getByUser(subscriber.name()) + .map(UserNotificationPreference::getReasonTypeNotifier) + .map(reasonTypeNotification -> reasonTypeNotification.getNotifiers(reasonType)) + .flatMapMany(Flux::fromIterable); + } + + Mono dispatchNotification(Reason reason, Subscriber subscriber) { + return getNotifiersBySubscriber(subscriber, reason) + .flatMap(notifierName -> client.fetch(NotifierDescriptor.class, notifierName)) + .flatMap(descriptor -> prepareNotificationElement(subscriber, reason, descriptor)) + .flatMap(element -> { + var dispatchMono = sendNotification(element); + if (subscriber.isAnonymous()) { + return dispatchMono; + } + // create notification for user + var innerNofificationMono = createNotification(element); + return Mono.when(dispatchMono, innerNofificationMono); + }) + .then(); + } + + Mono prepareNotificationElement(Subscriber subscriber, Reason reason, + NotifierDescriptor descriptor) { + return getLocaleFromSubscriber(subscriber) + .flatMap(locale -> inferenceTemplate(reason, subscriber, locale)) + .map(notificationContent -> NotificationElement.builder() + .descriptor(descriptor) + .reason(reason) + .subscriber(subscriber) + .reasonType(notificationContent.reasonType()) + .notificationTitle(notificationContent.title()) + .reasonAttributes(notificationContent.reasonAttributes()) + .notificationRawBody(defaultString(notificationContent.rawBody())) + .notificationHtmlBody(defaultString(notificationContent.htmlBody())) + .build() + ); + } + + Mono sendNotification(NotificationElement notificationElement) { + var descriptor = notificationElement.descriptor(); + var subscriber = notificationElement.subscriber(); + final var notifierExtName = descriptor.getSpec().getNotifierExtName(); + return notificationContextFrom(notificationElement) + .flatMap(notificationContext -> notificationSender.sendNotification(notifierExtName, + notificationContext) + .onErrorResume(throwable -> { + log.error( + "Failed to send notification to subscriber [{}] through notifier [{}]", + subscriber, + descriptor.getSpec().getDisplayName(), + throwable); + return Mono.empty(); + }) + ) + .then(); + } + + Mono createNotification(NotificationElement notificationElement) { + var reason = notificationElement.reason(); + var subscriber = notificationElement.subscriber(); + return client.fetch(User.class, subscriber.name()) + .flatMap(user -> { + Notification notification = new Notification(); + notification.setMetadata(new Metadata()); + notification.getMetadata().setGenerateName("notification-"); + notification.setSpec(new Notification.NotificationSpec()); + notification.getSpec().setTitle(notificationElement.notificationTitle()); + notification.getSpec().setRawContent(notificationElement.notificationRawBody()); + notification.getSpec().setHtmlContent(notificationElement.notificationHtmlBody); + notification.getSpec().setRecipient(subscriber.name()); + notification.getSpec().setReason(reason.getMetadata().getName()); + notification.getSpec().setUnread(true); + return client.create(notification); + }); + } + + private ReasonAttributes toReasonAttributes(Reason reason) { + var model = new ReasonAttributes(); + var attributes = reason.getSpec().getAttributes(); + if (attributes != null) { + model.putAll(attributes); + } + return model; + } + + Mono notificationContextFrom(NotificationElement element) { + final var descriptorName = element.descriptor().getMetadata().getName(); + final var reason = element.reason(); + final var descriptor = element.descriptor(); + final var subscriber = element.subscriber(); + + var messagePayload = new NotificationContext.MessagePayload(); + messagePayload.setTitle(element.notificationTitle()); + messagePayload.setRawBody(element.notificationRawBody()); + messagePayload.setHtmlBody(element.notificationHtmlBody()); + messagePayload.setAttributes(element.reasonAttributes()); + + var message = new NotificationContext.Message(); + message.setRecipient(subscriber.name()); + message.setPayload(messagePayload); + message.setTimestamp(reason.getMetadata().getCreationTimestamp()); + var reasonSubject = reason.getSpec().getSubject(); + var subject = NotificationContext.Subject.builder() + .apiVersion(reasonSubject.getApiVersion()) + .kind(reasonSubject.getKind()) + .title(reasonSubject.getTitle()) + .url(reasonSubject.getUrl()) + .build(); + message.setSubject(subject); + + var notificationContext = new NotificationContext(); + notificationContext.setMessage(message); + + return Mono.just(notificationContext) + .flatMap(context -> { + Mono receiverConfigMono = + Optional.ofNullable(descriptor.getSpec().getReceiverSettingRef()) + .map(ref -> notifierConfigStore.fetchReceiverConfig(descriptorName) + .doOnNext(context::setReceiverConfig) + .then() + ) + .orElse(Mono.empty()); + + Mono senderConfigMono = + Optional.ofNullable(descriptor.getSpec().getSenderSettingRef()) + .map(ref -> notifierConfigStore.fetchSenderConfig(descriptorName) + .doOnNext(context::setSenderConfig) + .then() + ) + .orElse(Mono.empty()); + + return Mono.when(receiverConfigMono, senderConfigMono) + .thenReturn(context); + }); + } + + Mono inferenceTemplate(Reason reason, Subscriber subscriber, + Locale locale) { + var reasonTypeName = reason.getSpec().getReasonType(); + return getReasonType(reasonTypeName) + .flatMap(reasonType -> notificationTemplateSelector.select(reasonTypeName, locale) + .flatMap(template -> { + final var templateContent = template.getSpec().getTemplate(); + var model = toReasonAttributes(reason); + var subscriberInfo = new HashMap<>(); + if (subscriber.isAnonymous()) { + subscriberInfo.put("displayName", subscriber.getEmail().orElseThrow()); + } else { + subscriberInfo.put("displayName", "@" + subscriber.username()); + } + subscriberInfo.put("id", subscriber.name()); + model.put("subscriber", subscriberInfo); + + var unsubscriptionMono = getUnsubscribeUrl(subscriber.subscriptionName()) + .doOnNext(url -> model.put("unsubscribeUrl", url)); + + var builder = NotificationContent.builder() + .reasonType(reasonType) + .reasonAttributes(model); + + var titleMono = notificationTemplateRender + .render(templateContent.getTitle(), model) + .doOnNext(builder::title); + + var rawBodyMono = notificationTemplateRender + .render(templateContent.getRawBody(), model) + .doOnNext(builder::rawBody); + + var htmlBodyMono = notificationTemplateRender + .render(templateContent.getHtmlBody(), model) + .doOnNext(builder::htmlBody); + return Mono.when(unsubscriptionMono, titleMono, rawBodyMono, htmlBodyMono) + .then(Mono.fromSupplier(builder::build)); + }) + ); + } + + @Builder + record NotificationContent(String title, String rawBody, String htmlBody, ReasonType reasonType, + ReasonAttributes reasonAttributes) { + } + + Mono getUnsubscribeUrl(String subscriptionName) { + return client.get(Subscription.class, subscriptionName) + .map(subscriptionRouter::getUnsubscribeUrl); + } + + @Builder + record NotificationElement(ReasonType reasonType, Reason reason, + Subscriber subscriber, NotifierDescriptor descriptor, + String notificationTitle, + String notificationRawBody, + String notificationHtmlBody, + ReasonAttributes reasonAttributes) { + } + + Mono getReasonType(String reasonTypeName) { + return client.get(ReasonType.class, reasonTypeName); + } + + Mono getLocaleFromSubscriber(Subscriber subscriber) { + // TODO get locale from subscriber + return Mono.just(Locale.getDefault()); + } +} diff --git a/application/src/main/java/run/halo/app/notification/DefaultNotificationReasonEmitter.java b/application/src/main/java/run/halo/app/notification/DefaultNotificationReasonEmitter.java new file mode 100644 index 0000000..2a62cc9 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/DefaultNotificationReasonEmitter.java @@ -0,0 +1,89 @@ +package run.halo.app.notification; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import java.util.List; +import java.util.function.Consumer; +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.core.extension.notification.ReasonType; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.exception.NotFoundException; + +/** + * A default {@link NotificationReasonEmitter} implementation. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class DefaultNotificationReasonEmitter implements NotificationReasonEmitter { + + private final ReactiveExtensionClient client; + + @Override + public Mono emit(String reasonType, + Consumer builder) { + Assert.notNull(reasonType, "Reason type must not be empty."); + var reason = createReason(reasonType, buildReasonPayload(builder)); + return validateReason(reason) + .then(Mono.defer(() -> client.create(reason))) + .then(); + } + + Mono validateReason(Reason reason) { + String reasonTypeName = reason.getSpec().getReasonType(); + return client.fetch(ReasonType.class, reasonTypeName) + .switchIfEmpty(Mono.error(new NotFoundException( + "ReasonType [" + reasonTypeName + "] not found, do you forget to register it?")) + ) + .doOnNext(reasonType -> { + var valueMap = reason.getSpec().getAttributes(); + nullSafeList(reasonType.getSpec().getProperties()) + .forEach(property -> { + if (property.isOptional()) { + return; + } + if (valueMap.get(property.getName()) == null) { + throw new IllegalArgumentException( + "Reason property [" + property.getName() + "] is required."); + } + }); + }) + .then(); + } + + List nullSafeList(List t) { + return defaultIfNull(t, List.of()); + } + + Reason createReason(String reasonType, ReasonPayload reasonData) { + Reason reason = new Reason(); + reason.setMetadata(new Metadata()); + reason.getMetadata().setGenerateName("reason-"); + reason.setSpec(new Reason.Spec()); + if (reasonData.getAuthor() != null) { + reason.getSpec().setAuthor(reasonData.getAuthor().name()); + } + reason.getSpec().setReasonType(reasonType); + reason.getSpec().setSubject(reasonData.getSubject()); + + var reasonAttributes = new ReasonAttributes(); + if (reasonData.getAttributes() != null) { + reasonAttributes.putAll(reasonData.getAttributes()); + } + reason.getSpec().setAttributes(reasonAttributes); + return reason; + } + + ReasonPayload buildReasonPayload(Consumer reasonData) { + var builder = ReasonPayload.builder(); + reasonData.accept(builder); + return builder.build(); + } +} diff --git a/application/src/main/java/run/halo/app/notification/DefaultNotificationSender.java b/application/src/main/java/run/halo/app/notification/DefaultNotificationSender.java new file mode 100644 index 0000000..b00f032 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/DefaultNotificationSender.java @@ -0,0 +1,150 @@ +package run.halo.app.notification; + +import java.time.Duration; +import java.time.Instant; +import java.util.UUID; +import lombok.AllArgsConstructor; +import lombok.EqualsAndHashCode; +import lombok.Getter; +import lombok.Setter; +import lombok.extern.slf4j.Slf4j; +import org.springframework.context.SmartLifecycle; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.DefaultController; +import run.halo.app.extension.controller.DefaultQueue; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.controller.RequestQueue; +import run.halo.app.plugin.extensionpoint.ExtensionDefinition; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; + +/** + * A default {@link NotificationSender} implementation. + * + * @author guqing + * @since 2.10.0 + */ +@Slf4j +@Component +public class DefaultNotificationSender + implements NotificationSender, Reconciler, + SmartLifecycle { + private final ReactiveExtensionClient client; + private final ExtensionGetter extensionGetter; + + private final RequestQueue requestQueue; + + private final Controller controller; + + private boolean running = false; + + /** + * Constructs a new notification sender with the given {@link ReactiveExtensionClient} and + * {@link ExtensionGetter}. + */ + public DefaultNotificationSender(ReactiveExtensionClient client, + ExtensionGetter extensionGetter) { + this.client = client; + this.extensionGetter = extensionGetter; + requestQueue = new DefaultQueue<>(Instant::now); + controller = this.setupWith(null); + } + + @Override + public Mono sendNotification(String notifierExtensionName, NotificationContext context) { + return selectNotifier(notifierExtensionName) + .doOnNext(notifier -> { + var item = new QueueItem(UUID.randomUUID().toString(), + () -> notifier.notify(context).block(), 0); + requestQueue.addImmediately(item); + }) + .then(); + } + + Mono selectNotifier(String notifierExtensionName) { + return client.fetch(ExtensionDefinition.class, notifierExtensionName) + .flatMap(extDefinition -> extensionGetter.getEnabledExtensions( + ReactiveNotifier.class) + .filter(notifier -> notifier.getClass().getName() + .equals(extDefinition.getSpec().getClassName()) + ) + .next() + ); + } + + @Override + public Result reconcile(QueueItem request) { + if (request.getTimes() > 3) { + log.error("Failed to send notification after retrying 3 times, discard it."); + return Result.doNotRetry(); + } + log.debug("Executing send notification task, [{}] remaining to-do tasks", + requestQueue.size()); + request.setTimes(request.getTimes() + 1); + request.getTask().execute(); + return Result.doNotRetry(); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return new DefaultController<>( + this.getClass().getName(), + this, + requestQueue, + null, + Duration.ofMillis(100), + Duration.ofSeconds(1000), + 5 + ); + } + + @Override + public void start() { + controller.start(); + running = true; + } + + @Override + public void stop() { + running = false; + controller.dispose(); + } + + @Override + public boolean isRunning() { + return running; + } + + /** + *

Queue item for {@link #requestQueue}.

+ *

It holds a {@link SendNotificationTask} and a {@link #times} field.

+ *

{@link SendNotificationTask} used to send email when consuming.

+ *

{@link #times} will be used to record the number of + * times the task has been executed, if retry three times on failure, it will be discarded.

+ *

It also holds a {@link #id} field, which is used to identify the item. queue item with + * the same id is considered to be the same item to ensure that controller can + * discard the existing item in the queue when item re-queued on failure.

+ */ + @Getter + @AllArgsConstructor + @EqualsAndHashCode(onlyExplicitlyIncluded = true) + public static class QueueItem { + + @EqualsAndHashCode.Include + private final String id; + + private final SendNotificationTask task; + + @Setter + private int times; + } + + @FunctionalInterface + interface SendNotificationTask { + void execute(); + } +} + diff --git a/application/src/main/java/run/halo/app/notification/DefaultNotificationService.java b/application/src/main/java/run/halo/app/notification/DefaultNotificationService.java new file mode 100644 index 0000000..d5c2e74 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/DefaultNotificationService.java @@ -0,0 +1,68 @@ +package run.halo.app.notification; + +import java.time.Instant; +import java.util.List; +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.Notification; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.exception.AccessDeniedException; + +/** + * A default implementation of {@link UserNotificationService}. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class DefaultNotificationService implements UserNotificationService { + + private final ReactiveExtensionClient client; + + @Override + public Mono> listByUser(String username, UserNotificationQuery query) { + return client.listBy(Notification.class, query.toListOptions(), query.toPageRequest()); + } + + @Override + public Mono markAsRead(String username, String name) { + return client.fetch(Notification.class, name) + .filter(notification -> isRecipient(notification, username)) + .flatMap(notification -> { + notification.getSpec().setUnread(false); + notification.getSpec().setLastReadAt(Instant.now()); + return client.update(notification); + }); + } + + @Override + public Flux markSpecifiedAsRead(String username, List names) { + return Flux.fromIterable(names) + .flatMap(name -> markAsRead(username, name)) + .map(notification -> notification.getMetadata().getName()); + } + + @Override + public Mono deleteByName(String username, String name) { + return client.get(Notification.class, name) + .doOnNext(notification -> { + var recipient = notification.getSpec().getRecipient(); + if (!username.equals(recipient)) { + throw new AccessDeniedException( + "You have no permission to delete this notification."); + } + }) + .flatMap(client::delete); + } + + static boolean isRecipient(Notification notification, String username) { + Assert.notNull(notification, "Notification must not be null"); + Assert.notNull(username, "Username must not be null"); + return username.equals(notification.getSpec().getRecipient()); + } +} diff --git a/application/src/main/java/run/halo/app/notification/DefaultNotificationTemplateRender.java b/application/src/main/java/run/halo/app/notification/DefaultNotificationTemplateRender.java new file mode 100644 index 0000000..b15ff73 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/DefaultNotificationTemplateRender.java @@ -0,0 +1,66 @@ +package run.halo.app.notification; + +import static org.apache.commons.lang3.StringUtils.defaultString; + +import java.util.HashMap; +import java.util.Locale; +import java.util.Map; +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import org.thymeleaf.TemplateEngine; +import org.thymeleaf.context.Context; +import org.thymeleaf.spring6.SpringTemplateEngine; +import org.thymeleaf.templateresolver.StringTemplateResolver; +import reactor.core.publisher.Mono; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; + +/** + *

Default implementation of {@link NotificationTemplateRender}.

+ *

This implementation use {@link TemplateEngine} to render template, and the template engine + * use {@link StringTemplateResolver} to resolve template, so the template + * in {@link #render(String template, Map)} is template content.

+ *

Template syntax: + * usingthymeleaf.html#textual-syntax + *

+ * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class DefaultNotificationTemplateRender implements NotificationTemplateRender { + + private static final TemplateEngine TEMPLATE_ENGINE = createTemplateEngine(); + + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final ExternalUrlSupplier externalUrlSupplier; + + @Override + public Mono render(String template, Map model) { + var context = new Context(Locale.getDefault(), model); + var globalAttributeMono = getBasicSetting() + .doOnNext(basic -> { + var site = new HashMap<>(); + site.put("title", basic.getTitle()); + site.put("logo", basic.getLogo()); + site.put("subtitle", basic.getSubtitle()); + site.put("url", externalUrlSupplier.getRaw()); + context.setVariable("site", site); + }); + return Mono.when(globalAttributeMono) + .then(Mono.fromSupplier(() -> + TEMPLATE_ENGINE.process(defaultString(template), context))); + } + + static TemplateEngine createTemplateEngine() { + var template = new SpringTemplateEngine(); + template.setTemplateResolver(new StringTemplateResolver()); + return template; + } + + Mono getBasicSetting() { + return environmentFetcher.fetch(SystemSetting.Basic.GROUP, SystemSetting.Basic.class); + } +} diff --git a/application/src/main/java/run/halo/app/notification/DefaultNotifierConfigStore.java b/application/src/main/java/run/halo/app/notification/DefaultNotifierConfigStore.java new file mode 100644 index 0000000..467fa9d --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/DefaultNotifierConfigStore.java @@ -0,0 +1,93 @@ +package run.halo.app.notification; + +import static run.halo.app.extension.MetadataUtil.SYSTEM_FINALIZER; + +import com.fasterxml.jackson.databind.node.JsonNodeFactory; +import com.fasterxml.jackson.databind.node.ObjectNode; +import java.util.HashMap; +import java.util.Map; +import java.util.Set; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Secret; +import run.halo.app.infra.utils.JsonUtils; + +/** + * A default implementation of {@link NotifierConfigStore}. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class DefaultNotifierConfigStore implements NotifierConfigStore { + public static final String SECRET_NAME = "notifier-setting-secret"; + public static final String RECEIVER_KEY = "receiver"; + public static final String SENDER_KEY = "sender"; + + private final ReactiveExtensionClient client; + + @Override + public Mono fetchReceiverConfig(String notifierDescriptorName) { + return fetchConfig(notifierDescriptorName) + .mapNotNull(setting -> (ObjectNode) setting.get(RECEIVER_KEY)) + .defaultIfEmpty(JsonNodeFactory.instance.objectNode()); + } + + @Override + public Mono fetchSenderConfig(String notifierDescriptorName) { + return fetchConfig(notifierDescriptorName) + .mapNotNull(setting -> (ObjectNode) setting.get(SENDER_KEY)) + .defaultIfEmpty(JsonNodeFactory.instance.objectNode()); + } + + @Override + public Mono saveReceiverConfig(String notifierDescriptorName, ObjectNode config) { + return saveConfig(notifierDescriptorName, RECEIVER_KEY, config); + } + + @Override + public Mono saveSenderConfig(String notifierDescriptorName, ObjectNode config) { + return saveConfig(notifierDescriptorName, SENDER_KEY, config); + } + + Mono saveConfig(String notifierDescriptorName, String key, ObjectNode config) { + return client.fetch(Secret.class, SECRET_NAME) + .switchIfEmpty(Mono.defer(() -> { + Secret secret = new Secret(); + secret.setMetadata(new Metadata()); + secret.getMetadata().setName(SECRET_NAME); + secret.getMetadata().setFinalizers(Set.of(SYSTEM_FINALIZER)); + secret.setStringData(new HashMap<>()); + return client.create(secret); + })) + .flatMap(secret -> { + if (secret.getStringData() == null) { + secret.setStringData(new HashMap<>()); + } + Map map = secret.getStringData(); + ObjectNode wrapperNode = JsonNodeFactory.instance.objectNode(); + wrapperNode.set(key, config); + map.put(resolveKey(notifierDescriptorName), JsonUtils.objectToJson(wrapperNode)); + return client.update(secret); + }) + .then(); + } + + Mono fetchConfig(String notifierDescriptorName) { + return client.fetch(Secret.class, SECRET_NAME) + .mapNotNull(Secret::getStringData) + .mapNotNull(map -> map.get(resolveKey(notifierDescriptorName))) + .filter(StringUtils::isNotBlank) + .map(value -> JsonUtils.jsonToObject(value, ObjectNode.class)) + .defaultIfEmpty(JsonNodeFactory.instance.objectNode()); + } + + String resolveKey(String notifierDescriptorName) { + return notifierDescriptorName + ".json"; + } +} diff --git a/application/src/main/java/run/halo/app/notification/DefaultSubscriberEmailResolver.java b/application/src/main/java/run/halo/app/notification/DefaultSubscriberEmailResolver.java new file mode 100644 index 0000000..473e0e7 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/DefaultSubscriberEmailResolver.java @@ -0,0 +1,57 @@ +package run.halo.app.notification; + +import lombok.NonNull; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.extension.ReactiveExtensionClient; + +/** + *

Default implementation of {@link SubscriberEmailResolver}.

+ *

If the subscriber is an anonymous subscriber, the email will be extracted from the + * subscriber name.

+ *

An anonymous subscriber's name is in the format of {@code anonymous#email}.

+ * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class DefaultSubscriberEmailResolver implements SubscriberEmailResolver { + private final ReactiveExtensionClient client; + + @Override + public Mono resolve(Subscription.Subscriber subscriber) { + var identity = UserIdentity.of(subscriber.getName()); + if (identity.isAnonymous()) { + return Mono.fromSupplier(() -> getEmail(subscriber)); + } + return client.fetch(User.class, subscriber.getName()) + .filter(user -> user.getSpec().isEmailVerified()) + .mapNotNull(user -> user.getSpec().getEmail()); + } + + @Override + public Subscription.Subscriber ofEmail(String email) { + if (StringUtils.isBlank(email)) { + throw new IllegalArgumentException("Email must not be blank"); + } + var subscriber = new Subscription.Subscriber(); + subscriber.setName(UserIdentity.anonymousWithEmail(email).name()); + return subscriber; + } + + @NonNull + String getEmail(Subscription.Subscriber subscriber) { + var identity = UserIdentity.of(subscriber.getName()); + if (!identity.isAnonymous()) { + throw new IllegalStateException("The subscriber is not an anonymous subscriber"); + } + return identity.getEmail() + .filter(StringUtils::isNotBlank) + .orElseThrow(() -> new IllegalStateException("The subscriber does not have an email")); + } +} diff --git a/application/src/main/java/run/halo/app/notification/EmailNotifier.java b/application/src/main/java/run/halo/app/notification/EmailNotifier.java new file mode 100644 index 0000000..be6320a --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/EmailNotifier.java @@ -0,0 +1,123 @@ +package run.halo.app.notification; + +import com.fasterxml.jackson.databind.JsonNode; +import java.util.concurrent.atomic.AtomicReference; +import lombok.NonNull; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.data.util.Pair; +import org.springframework.mail.javamail.JavaMailSender; +import org.springframework.mail.javamail.JavaMailSenderImpl; +import org.springframework.mail.javamail.MimeMessagePreparator; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Schedulers; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.notification.EmailSenderHelper.EmailSenderConfig; + +/** + *

A notifier that can send email.

+ * + * @author guqing + * @see ReactiveNotifier + * @see JavaMailSenderImpl + * @since 2.10.0 + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class EmailNotifier implements ReactiveNotifier { + + private final SubscriberEmailResolver subscriberEmailResolver; + private final NotificationTemplateRender notificationTemplateRender; + private final EmailSenderHelper emailSenderHelper; + private final AtomicReference> + emailSenderConfigPairRef = new AtomicReference<>(); + + @Override + public Mono notify(NotificationContext context) { + JsonNode senderConfig = context.getSenderConfig(); + var emailSenderConfig = + JsonUtils.DEFAULT_JSON_MAPPER.convertValue(senderConfig, EmailSenderConfig.class); + + if (!emailSenderConfig.isEnable()) { + log.debug("Email notifier is disabled, skip sending email."); + return Mono.empty(); + } + + JavaMailSender javaMailSender = getJavaMailSender(emailSenderConfig); + + String recipient = context.getMessage().getRecipient(); + var subscriber = new Subscription.Subscriber(); + subscriber.setName(recipient); + var payload = context.getMessage().getPayload(); + return subscriberEmailResolver.resolve(subscriber) + .flatMap(toEmail -> { + if (StringUtils.isBlank(toEmail)) { + log.debug("Cannot resolve email for subscriber: [{}], skip sending email.", + subscriber); + return Mono.empty(); + } + var htmlMono = appendHtmlBodyFooter(payload.getAttributes()) + .doOnNext(footer -> { + if (StringUtils.isNotBlank(payload.getHtmlBody())) { + payload.setHtmlBody(payload.getHtmlBody() + "\n" + footer); + } + }); + var rawMono = appendRawBodyFooter(payload.getAttributes()) + .doOnNext(footer -> { + if (StringUtils.isNotBlank(payload.getRawBody())) { + payload.setRawBody(payload.getRawBody() + "\n" + footer); + } + }); + return Mono.when(htmlMono, rawMono) + .thenReturn(toEmail); + }) + .map(toEmail -> getMimeMessagePreparator(toEmail, emailSenderConfig, payload)) + .publishOn(Schedulers.boundedElastic()) + .doOnNext(javaMailSender::send) + .then(); + } + + @NonNull + private MimeMessagePreparator getMimeMessagePreparator(String toEmail, + EmailSenderConfig emailSenderConfig, NotificationContext.MessagePayload payload) { + return emailSenderHelper.createMimeMessagePreparator(emailSenderConfig, toEmail, + payload.getTitle(), + payload.getRawBody(), payload.getHtmlBody()); + } + + JavaMailSender getJavaMailSender(EmailSenderConfig emailSenderConfig) { + return emailSenderConfigPairRef.updateAndGet(pair -> { + if (pair != null && pair.getFirst().equals(emailSenderConfig)) { + return pair; + } + return Pair.of(emailSenderConfig, + emailSenderHelper.createJavaMailSender(emailSenderConfig)); + }).getSecond(); + } + + Mono appendRawBodyFooter(ReasonAttributes attributes) { + return notificationTemplateRender.render(""" + --- + 如果您不想再收到此类通知，点击链接退订: [(${unsubscribeUrl})] + [(${site.title})] + """, attributes); + } + + Mono appendHtmlBodyFooter(ReasonAttributes attributes) { + return notificationTemplateRender.render(""" +
+ +

+ —
请勿直接回复此邮件， + 查看通知 + 或 + 取消订阅。 +

+
+ """, attributes); + } +} diff --git a/application/src/main/java/run/halo/app/notification/EmailSenderHelper.java b/application/src/main/java/run/halo/app/notification/EmailSenderHelper.java new file mode 100644 index 0000000..48d0bd3 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/EmailSenderHelper.java @@ -0,0 +1,47 @@ +package run.halo.app.notification; + +import lombok.Data; +import lombok.NonNull; +import org.apache.commons.lang3.StringUtils; +import org.springframework.mail.javamail.JavaMailSender; +import org.springframework.mail.javamail.MimeMessagePreparator; + +public interface EmailSenderHelper { + + @NonNull + JavaMailSender createJavaMailSender(EmailSenderConfig senderConfig); + + @NonNull + MimeMessagePreparator createMimeMessagePreparator(EmailSenderConfig senderConfig, + String toEmail, String subject, String raw, String html); + + @Data + class EmailSenderConfig { + private boolean enable; + private String displayName; + private String username; + private String sender; + private String password; + private String host; + private Integer port; + private String encryption; + + /** + * Gets email display name. + * + * @return display name if not blank, otherwise username. + */ + public String getDisplayName() { + return StringUtils.defaultIfBlank(displayName, username); + } + + /** + * Gets email sender address. + * + * @return sender if not blank, otherwise username + */ + public String getSender() { + return StringUtils.defaultIfBlank(sender, username); + } + } +} diff --git a/application/src/main/java/run/halo/app/notification/EmailSenderHelperImpl.java b/application/src/main/java/run/halo/app/notification/EmailSenderHelperImpl.java new file mode 100644 index 0000000..d018649 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/EmailSenderHelperImpl.java @@ -0,0 +1,68 @@ +package run.halo.app.notification; + +import java.nio.charset.StandardCharsets; +import java.util.Properties; +import lombok.NonNull; +import lombok.extern.slf4j.Slf4j; +import org.springframework.mail.javamail.JavaMailSender; +import org.springframework.mail.javamail.JavaMailSenderImpl; +import org.springframework.mail.javamail.MimeMessageHelper; +import org.springframework.mail.javamail.MimeMessagePreparator; +import org.springframework.stereotype.Component; + +/** + *

A default implementation of {@link EmailSenderHelper}.

+ * + * @author guqing + * @since 2.14.0 + */ +@Slf4j +@Component +public class EmailSenderHelperImpl implements EmailSenderHelper { + + @Override + @NonNull + public JavaMailSender createJavaMailSender(EmailSenderConfig senderConfig) { + JavaMailSenderImpl javaMailSender = new JavaMailSenderImpl(); + javaMailSender.setHost(senderConfig.getHost()); + javaMailSender.setPort(senderConfig.getPort()); + javaMailSender.setUsername(senderConfig.getUsername()); + javaMailSender.setPassword(senderConfig.getPassword()); + + Properties props = javaMailSender.getJavaMailProperties(); + props.put("mail.transport.protocol", "smtp"); + props.put("mail.smtp.auth", "true"); + if ("SSL".equals(senderConfig.getEncryption())) { + props.put("mail.smtp.ssl.enable", "true"); + } + + if ("TLS".equals(senderConfig.getEncryption())) { + props.put("mail.smtp.starttls.enable", "true"); + } + + if ("NONE".equals(senderConfig.getEncryption())) { + props.put("mail.smtp.ssl.enable", "false"); + props.put("mail.smtp.starttls.enable", "false"); + } + + if (log.isDebugEnabled()) { + props.put("mail.debug", "true"); + } + return javaMailSender; + } + + @Override + @NonNull + public MimeMessagePreparator createMimeMessagePreparator(EmailSenderConfig senderConfig, + String toEmail, String subject, String raw, String html) { + return mimeMessage -> { + MimeMessageHelper helper = + new MimeMessageHelper(mimeMessage, true, StandardCharsets.UTF_8.name()); + helper.setFrom(senderConfig.getSender(), senderConfig.getDisplayName()); + + helper.setSubject(subject); + helper.setText(raw, html); + helper.setTo(toEmail); + }; + } +} diff --git a/application/src/main/java/run/halo/app/notification/LanguageUtils.java b/application/src/main/java/run/halo/app/notification/LanguageUtils.java new file mode 100644 index 0000000..2a0e281 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/LanguageUtils.java @@ -0,0 +1,48 @@ +package run.halo.app.notification; + +import java.util.ArrayList; +import java.util.List; +import java.util.Locale; +import lombok.experimental.UtilityClass; +import org.apache.commons.lang3.StringUtils; + +/** + * Language utils to help us to compute the language. + * + * @author guqing + * @since 2.10.0 + */ +@UtilityClass +public class LanguageUtils { + + /** + * Compute all the possible languages we should use: *_gl_ES-gheada, *_gl_ES, _gl... from a + * given locale. + * The first element of the list is "default" if it can not find the language, use default. + * + * @param locale locale + * @return list of possible languages, from less specific to more specific. + */ + public static List computeLangFromLocale(Locale locale) { + final List resourceNames = new ArrayList<>(5); + + if (StringUtils.isBlank(locale.getLanguage())) { + throw new IllegalArgumentException( + "Locale \"" + locale + "\" " + + "cannot be used as it does not specify a language."); + } + + resourceNames.add("default"); + resourceNames.add(locale.getLanguage()); + + if (StringUtils.isNotBlank(locale.getCountry())) { + resourceNames.add(locale.getLanguage() + "_" + locale.getCountry()); + } + + if (StringUtils.isNotBlank(locale.getVariant())) { + resourceNames.add( + locale.getLanguage() + "_" + locale.getCountry() + "-" + locale.getVariant()); + } + return resourceNames; + } +} diff --git a/application/src/main/java/run/halo/app/notification/NotificationSender.java b/application/src/main/java/run/halo/app/notification/NotificationSender.java new file mode 100644 index 0000000..1946794 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/NotificationSender.java @@ -0,0 +1,21 @@ +package run.halo.app.notification; + +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.Reason; + +/** + *

{@link NotificationSender} used to send notification.

+ *

Send notification is a time-consuming task, so we use a queue to send notification + * asynchronously.

+ *

The caller may not be reactive, and in many cases it is blocking called + * {@link NotificationCenter#notify(Reason)}, so here use the queue to ensure asynchronous + * sending of notification without blocking the calling thread.

+ * + * @author guqing + * @since 2.10.0 + */ +@FunctionalInterface +public interface NotificationSender { + + Mono sendNotification(String notifierExtensionName, NotificationContext context); +} diff --git a/application/src/main/java/run/halo/app/notification/NotificationTemplateRender.java b/application/src/main/java/run/halo/app/notification/NotificationTemplateRender.java new file mode 100644 index 0000000..6d843ae --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/NotificationTemplateRender.java @@ -0,0 +1,15 @@ +package run.halo.app.notification; + +import java.util.Map; +import reactor.core.publisher.Mono; + +/** + * {@link NotificationTemplateRender} is used to render the notification template. + * + * @author guqing + * @since 2.10.0 + */ +public interface NotificationTemplateRender { + + Mono render(String template, Map context); +} diff --git a/application/src/main/java/run/halo/app/notification/NotificationTrigger.java b/application/src/main/java/run/halo/app/notification/NotificationTrigger.java new file mode 100644 index 0000000..34f2de0 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/NotificationTrigger.java @@ -0,0 +1,57 @@ +package run.halo.app.notification; + +import java.util.Set; +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; + +/** + *

Notification trigger for {@link Reason}.

+ *

Triggered when a new {@link Reason} is received, and then notify through + * {@link NotificationCenter}.

+ *

It will add a finalizer to the {@link Reason} to avoid duplicate notification, In other + * words, it will only notify once.

+ * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class NotificationTrigger implements Reconciler { + + public static final String TRIGGERED_FINALIZER = "triggered"; + + private final ExtensionClient client; + private final NotificationCenter notificationCenter; + + @Override + public Result reconcile(Request request) { + client.fetch(Reason.class, request.name()).ifPresent(reason -> { + if (ExtensionUtil.isDeleted(reason)) { + return; + } + if (ExtensionUtil.addFinalizers(reason.getMetadata(), Set.of(TRIGGERED_FINALIZER))) { + // notifier + onNewReasonReceived(reason); + client.update(reason); + } + }); + return Result.doNotRetry(); + } + + public void onNewReasonReceived(Reason reason) { + notificationCenter.notify(reason).block(); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Reason()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/notification/NotifierConfigStore.java b/application/src/main/java/run/halo/app/notification/NotifierConfigStore.java new file mode 100644 index 0000000..6382567 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/NotifierConfigStore.java @@ -0,0 +1,22 @@ +package run.halo.app.notification; + +import com.fasterxml.jackson.databind.node.ObjectNode; +import reactor.core.publisher.Mono; + +/** + *

{@link NotifierConfigStore} to store notifier config.

+ *

It provides methods to fetch and save config for receiver and sender.

+ * + * @author guqing + * @since 2.10.0 + */ +public interface NotifierConfigStore { + + Mono fetchReceiverConfig(String notifierDescriptorName); + + Mono fetchSenderConfig(String notifierDescriptorName); + + Mono saveReceiverConfig(String notifierDescriptorName, ObjectNode config); + + Mono saveSenderConfig(String notifierDescriptorName, ObjectNode config); +} diff --git a/application/src/main/java/run/halo/app/notification/ReasonNotificationTemplateSelector.java b/application/src/main/java/run/halo/app/notification/ReasonNotificationTemplateSelector.java new file mode 100644 index 0000000..e233fe4 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/ReasonNotificationTemplateSelector.java @@ -0,0 +1,31 @@ +package run.halo.app.notification; + +import java.util.Locale; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.NotificationTemplate; +import run.halo.app.core.extension.notification.ReasonType; +import run.halo.app.extension.Metadata; + +/** + * Reason notification template selector to select notification template by reason type and locale. + * + * @author guqing + * @see NotificationTemplate + * @see ReasonType + * @since 2.10.0 + */ +public interface ReasonNotificationTemplateSelector { + + /** + * Select notification template by reason type and locale. + *

Locale order is important: as we will let values from more specific to less specific (e.g. + * a value for gl_ES will have more precedence than a value for gl).

+ *

If specific locale found and has multiple templates, we will order them by + * {@link Metadata#getCreationTimestamp()} and return the latest one.

+ * + * @param reasonType reason type + * @param locale locale + * @return notification template if found, or empty + */ + Mono select(String reasonType, Locale locale); +} diff --git a/application/src/main/java/run/halo/app/notification/ReasonNotificationTemplateSelectorImpl.java b/application/src/main/java/run/halo/app/notification/ReasonNotificationTemplateSelectorImpl.java new file mode 100644 index 0000000..2df7505 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/ReasonNotificationTemplateSelectorImpl.java @@ -0,0 +1,75 @@ +package run.halo.app.notification; + +import static org.apache.commons.lang3.StringUtils.defaultIfBlank; +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import java.util.Collections; +import java.util.Comparator; +import java.util.Locale; +import java.util.Map; +import java.util.Optional; +import java.util.function.Function; +import java.util.function.Predicate; +import java.util.stream.Collectors; +import lombok.NonNull; +import lombok.RequiredArgsConstructor; +import org.springframework.data.domain.Sort; +import org.springframework.lang.Nullable; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.NotificationTemplate; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; + +/** + * A default implementation of {@link ReasonNotificationTemplateSelector}. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class ReasonNotificationTemplateSelectorImpl implements ReasonNotificationTemplateSelector { + + private final ReactiveExtensionClient client; + + @Override + public Mono select(String reasonType, Locale locale) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + equal("spec.reasonSelector.reasonType", reasonType)) + ); + return client.listAll(NotificationTemplate.class, listOptions, Sort.unsorted()) + .collect(Collectors.groupingBy( + getLanguageKey(), + Collectors.maxBy(Comparator.comparing(t -> t.getMetadata().getCreationTimestamp())) + )) + .mapNotNull(map -> lookupTemplateByLocale(locale, map)); + } + + @Nullable + static NotificationTemplate lookupTemplateByLocale(Locale locale, + Map> map) { + return LanguageUtils.computeLangFromLocale(locale).stream() + // reverse order to ensure that the variant is the first element and the default + // is the last element + .sorted(Collections.reverseOrder()) + .map(key -> map.getOrDefault(key, Optional.empty())) + .filter(Optional::isPresent) + .map(Optional::get) + .findFirst() + .orElse(null); + } + + @NonNull + static Predicate matchReasonType(String reasonType) { + return template -> template.getSpec().getReasonSelector().getReasonType() + .equals(reasonType); + } + + static Function getLanguageKey() { + return template -> defaultIfBlank(template.getSpec().getReasonSelector().getLanguage(), + "default"); + } +} diff --git a/application/src/main/java/run/halo/app/notification/RecipientResolver.java b/application/src/main/java/run/halo/app/notification/RecipientResolver.java new file mode 100644 index 0000000..7b059e6 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/RecipientResolver.java @@ -0,0 +1,9 @@ +package run.halo.app.notification; + +import reactor.core.publisher.Flux; +import run.halo.app.core.extension.notification.Reason; + +public interface RecipientResolver { + + Flux resolve(Reason reason); +} diff --git a/application/src/main/java/run/halo/app/notification/RecipientResolverImpl.java b/application/src/main/java/run/halo/app/notification/RecipientResolverImpl.java new file mode 100644 index 0000000..e828da0 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/RecipientResolverImpl.java @@ -0,0 +1,116 @@ +package run.halo.app.notification; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import com.google.common.base.Throwables; +import java.util.Collections; +import java.util.HashMap; +import java.util.Map; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.expression.MapAccessor; +import org.springframework.core.convert.support.DefaultConversionService; +import org.springframework.expression.EvaluationContext; +import org.springframework.expression.EvaluationException; +import org.springframework.expression.Expression; +import org.springframework.expression.ExpressionParser; +import org.springframework.expression.ParseException; +import org.springframework.expression.spel.standard.SpelExpressionParser; +import org.springframework.expression.spel.support.DataBindingPropertyAccessor; +import org.springframework.expression.spel.support.SimpleEvaluationContext; +import org.springframework.integration.json.JsonPropertyAccessor; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import reactor.core.publisher.Flux; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.core.extension.notification.Subscription; + +@Slf4j +@Component +@RequiredArgsConstructor +public class RecipientResolverImpl implements RecipientResolver { + private final ExpressionParser expressionParser = new SpelExpressionParser(); + private final EvaluationContext evaluationContext = createEvaluationContext(); + private final SubscriptionService subscriptionService; + + @Override + public Flux resolve(Reason reason) { + var reasonType = reason.getSpec().getReasonType(); + return subscriptionService.listByPerPage(reasonType) + .filter(this::isNotDisabled) + .filter(subscription -> { + var interestReason = subscription.getSpec().getReason(); + if (hasSubject(interestReason)) { + return subjectMatch(subscription, reason.getSpec().getSubject()); + } else if (StringUtils.isNotBlank(interestReason.getExpression())) { + return expressionMatch(subscription.getMetadata().getName(), + interestReason.getExpression(), reason); + } + return false; + }) + .map(subscription -> { + var id = UserIdentity.of(subscription.getSpec().getSubscriber().getName()); + return new Subscriber(id, subscription.getMetadata().getName()); + }) + .distinct(Subscriber::name); + } + + boolean hasSubject(Subscription.InterestReason interestReason) { + return !Subscription.InterestReason.isFallbackSubject(interestReason.getSubject()); + } + + boolean expressionMatch(String subscriptionName, String expressionStr, Reason reason) { + try { + Expression expression = + expressionParser.parseExpression(expressionStr); + var result = expression.getValue(evaluationContext, + exprRootObject(reason), + Boolean.class); + return BooleanUtils.isTrue(result); + } catch (ParseException | EvaluationException e) { + log.debug("Failed to parse or evaluate expression for subscription [{}], skip it.", + subscriptionName, Throwables.getRootCause(e)); + return false; + } + } + + Map exprRootObject(Reason reason) { + var map = new HashMap(3, 1); + map.put("props", defaultIfNull(reason.getSpec().getAttributes(), new ReasonAttributes())); + map.put("subject", reason.getSpec().getSubject()); + map.put("author", reason.getSpec().getAuthor()); + return Collections.unmodifiableMap(map); + } + + static boolean subjectMatch(Subscription subscription, Reason.Subject reasonSubject) { + Assert.notNull(subscription, "The subscription must not be null"); + Assert.notNull(reasonSubject, "The reasonSubject must not be null"); + final var sourceSubject = subscription.getSpec().getReason().getSubject(); + + var matchSubject = new Subscription.ReasonSubject(); + matchSubject.setKind(reasonSubject.getKind()); + matchSubject.setApiVersion(reasonSubject.getApiVersion()); + + if (StringUtils.isBlank(sourceSubject.getName())) { + return sourceSubject.equals(matchSubject); + } + matchSubject.setName(reasonSubject.getName()); + return sourceSubject.equals(matchSubject); + } + + boolean isNotDisabled(Subscription subscription) { + return !subscription.getSpec().isDisabled(); + } + + EvaluationContext createEvaluationContext() { + return SimpleEvaluationContext.forPropertyAccessors( + DataBindingPropertyAccessor.forReadOnlyAccess(), + new MapAccessor(), + new JsonPropertyAccessor() + ) + .withConversionService(DefaultConversionService.getSharedInstance()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/notification/Subscriber.java b/application/src/main/java/run/halo/app/notification/Subscriber.java new file mode 100644 index 0000000..d388c06 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/Subscriber.java @@ -0,0 +1,28 @@ +package run.halo.app.notification; + +import java.util.Optional; +import org.springframework.util.Assert; +import run.halo.app.infra.AnonymousUserConst; + +public record Subscriber(UserIdentity identity, String subscriptionName) { + public Subscriber { + Assert.notNull(identity, "The subscriber must not be null"); + Assert.hasText(subscriptionName, "The subscription name must not be blank"); + } + + public String name() { + return identity.name(); + } + + public String username() { + return identity.isAnonymous() ? AnonymousUserConst.PRINCIPAL : identity.name(); + } + + public boolean isAnonymous() { + return identity.isAnonymous(); + } + + public Optional getEmail() { + return identity.getEmail(); + } +} diff --git a/application/src/main/java/run/halo/app/notification/SubscriberEmailResolver.java b/application/src/main/java/run/halo/app/notification/SubscriberEmailResolver.java new file mode 100644 index 0000000..0a02d10 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/SubscriberEmailResolver.java @@ -0,0 +1,24 @@ +package run.halo.app.notification; + +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.Subscription; + +/** + *

{@link SubscriberEmailResolver} used to resolve email from {@link Subscription.Subscriber} + * .

+ * + * @author guqing + * @since 2.10.0 + */ +public interface SubscriberEmailResolver { + + Mono resolve(Subscription.Subscriber subscriber); + + /** + * Creates an email subscriber from email. + * + * @param email email + * @return email subscriber + */ + Subscription.Subscriber ofEmail(String email); +} diff --git a/application/src/main/java/run/halo/app/notification/SubscriptionMigration.java b/application/src/main/java/run/halo/app/notification/SubscriptionMigration.java new file mode 100644 index 0000000..c9851c5 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/SubscriptionMigration.java @@ -0,0 +1,155 @@ +package run.halo.app.notification; + +import static run.halo.app.content.NotificationReasonConst.NEW_COMMENT_ON_PAGE; +import static run.halo.app.content.NotificationReasonConst.NEW_COMMENT_ON_POST; +import static run.halo.app.content.NotificationReasonConst.SOMEONE_REPLIED_TO_YOU; +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.in; +import static run.halo.app.extension.index.query.QueryFactory.isNull; +import static run.halo.app.extension.index.query.QueryFactory.startsWith; + +import java.util.HashSet; +import java.util.Set; +import java.util.function.Consumer; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.boot.context.event.ApplicationStartedEvent; +import org.springframework.context.ApplicationListener; +import org.springframework.lang.NonNull; +import org.springframework.scheduling.annotation.Async; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.AnonymousUserConst; +import run.halo.app.infra.ReactiveExtensionPaginatedOperator; +import run.halo.app.infra.ReactiveExtensionPaginatedOperatorImpl; + +/** + * Subscription migration to adapt to the new expression subscribe mechanism. + * + * @author guqing + * @since 2.15.0 + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class SubscriptionMigration implements ApplicationListener { + private final NotificationCenter notificationCenter; + private final ReactiveExtensionClient client; + private final SubscriptionService subscriptionService; + private final ReactiveExtensionPaginatedOperator paginatedOperator; + + @Override + @Async + public void onApplicationEvent(@NonNull ApplicationStartedEvent event) { + handleAnonymousSubscription(); + cleanupUserSubscription(); + } + + private void cleanupUserSubscription() { + var listOptions = new ListOptions(); + var query = isNull("metadata.deletionTimestamp"); + listOptions.setFieldSelector(FieldSelector.of(query)); + var iterator = + new ReactiveExtensionPaginatedOperatorImpl(client); + iterator.list(User.class, listOptions) + .map(user -> user.getMetadata().getName()) + .flatMap(this::removeInternalSubscriptionForUser) + .then() + .doOnSuccess(unused -> log.info("Cleanup user subscription completed")) + .block(); + } + + private void handleAnonymousSubscription() { + log.debug("Start to collating anonymous subscription..."); + Set anonymousSubscribers = new HashSet<>(); + deleteAnonymousSubscription(subscription -> { + var name = subscription.getSpec().getSubscriber().getName(); + anonymousSubscribers.add(name); + }).block(); + if (anonymousSubscribers.isEmpty()) { + return; + } + + // anonymous only subscribe some-one-replied-to-you reason + for (String anonymousSubscriber : anonymousSubscribers) { + createSubscription(anonymousSubscriber, + SOMEONE_REPLIED_TO_YOU, + "props.repliedOwner == '%s'".formatted(anonymousSubscriber)).block(); + } + log.info("Collating anonymous subscription completed."); + } + + private Mono deleteAnonymousSubscription(Consumer consumer) { + var listOptions = new ListOptions(); + var query = and(startsWith("spec.subscriber", AnonymousUserConst.PRINCIPAL), + isNull("spec.reason.expression"), + isNull("metadata.deletionTimestamp"), + in("spec.reason.reasonType", Set.of(NEW_COMMENT_ON_POST, + NEW_COMMENT_ON_PAGE, + SOMEONE_REPLIED_TO_YOU)) + ); + listOptions.setFieldSelector(FieldSelector.of(query)); + return paginatedOperator.deleteInitialBatch(Subscription.class, listOptions) + .doOnNext(consumer) + .doOnNext(subscription -> log.debug("Deleted anonymous subscription: {}", + subscription.getMetadata().getName()) + ) + .then(); + } + + private Mono removeInternalSubscriptionForUser(String username) { + log.debug("Start to collating internal subscription for user: {}", username); + var subscriber = new Subscription.Subscriber(); + subscriber.setName(username); + + var listOptions = new ListOptions(); + var fieldQuery = and(isNull("metadata.deletionTimestamp"), + equal("spec.subscriber", subscriber.toString()), + in("spec.reason.reasonType", Set.of( + NEW_COMMENT_ON_POST, + NEW_COMMENT_ON_PAGE, + SOMEONE_REPLIED_TO_YOU + )) + ); + listOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + + return subscriptionService.removeBy(listOptions) + .map(subscription -> { + var name = subscription.getSpec().getSubscriber().getName(); + var reason = subscription.getSpec().getReason(); + String expression = switch (reason.getReasonType()) { + case NEW_COMMENT_ON_POST -> "props.postOwner == '%s'".formatted(name); + case NEW_COMMENT_ON_PAGE -> "props.pageOwner == '%s'".formatted(name); + case SOMEONE_REPLIED_TO_YOU -> "props.repliedOwner == '%s'".formatted(name); + // never happen + default -> null; + }; + return new SubscriptionSummary(name, reason.getReasonType(), expression); + }) + .distinct() + .flatMap(summary -> createSubscription(summary.subscriber(), summary.reasonType(), + summary.expression())) + .then() + .doOnSuccess(unused -> + log.debug("Collating internal subscription for user: {} completed", username)); + } + + Mono createSubscription(String name, String reasonType, String expression) { + var interestReason = new Subscription.InterestReason(); + interestReason.setReasonType(reasonType); + interestReason.setExpression(expression); + var subscriber = new Subscription.Subscriber(); + subscriber.setName(name); + log.debug("Create subscription for user: {} with reasonType: {}", name, reasonType); + return notificationCenter.subscribe(subscriber, interestReason).then(); + } + + record SubscriptionSummary(String subscriber, String reasonType, String expression) { + } +} diff --git a/application/src/main/java/run/halo/app/notification/SubscriptionService.java b/application/src/main/java/run/halo/app/notification/SubscriptionService.java new file mode 100644 index 0000000..a2f5407 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/SubscriptionService.java @@ -0,0 +1,26 @@ +package run.halo.app.notification; + +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.extension.ListOptions; + +public interface SubscriptionService { + + /** + *

List subscriptions by page one by one.only consume one page then next page will be + * loaded.

+ *

Note that: result can not be used to delete the subscription, it is only used to query the + * subscription.

+ */ + Flux listByPerPage(String reasonType); + + Mono remove(Subscription.Subscriber subscriber, + Subscription.InterestReason interestReasons); + + Mono remove(Subscription.Subscriber subscriber); + + Mono remove(Subscription subscription); + + Flux removeBy(ListOptions listOptions); +} diff --git a/application/src/main/java/run/halo/app/notification/SubscriptionServiceImpl.java b/application/src/main/java/run/halo/app/notification/SubscriptionServiceImpl.java new file mode 100644 index 0000000..3430bd0 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/SubscriptionServiceImpl.java @@ -0,0 +1,103 @@ +package run.halo.app.notification; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; +import static run.halo.app.extension.index.query.QueryFactory.startsWith; + +import java.time.Duration; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.ReactiveExtensionPaginatedOperator; + +@Component +@RequiredArgsConstructor +public class SubscriptionServiceImpl implements SubscriptionService { + private final ReactiveExtensionClient client; + private final ReactiveExtensionPaginatedOperator paginatedOperator; + + @Override + public Mono remove(Subscription.Subscriber subscriber, + Subscription.InterestReason interestReason) { + Assert.notNull(subscriber, "The subscriber must not be null"); + Assert.notNull(interestReason, "The interest reason must not be null"); + var reasonType = interestReason.getReasonType(); + var expression = interestReason.getExpression(); + var subject = interestReason.getSubject(); + + var listOptions = new ListOptions(); + var fieldQuery = and(isNull("metadata.deletionTimestamp"), + equal("spec.subscriber", subscriber.toString()), + equal("spec.reason.reasonType", reasonType)); + + if (subject != null) { + fieldQuery = and(fieldQuery, reasonSubjectMatch(subject)); + } + if (StringUtils.isNotBlank(expression)) { + fieldQuery = and(fieldQuery, equal("spec.reason.expression", expression)); + } + listOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + return paginatedOperator.deleteInitialBatch(Subscription.class, listOptions).then(); + } + + @Override + public Mono remove(Subscription.Subscriber subscriber) { + var listOptions = new ListOptions(); + var fieldQuery = and(isNull("metadata.deletionTimestamp"), + equal("spec.subscriber", subscriber.toString())); + listOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + return paginatedOperator.deleteInitialBatch(Subscription.class, listOptions) + .then(); + } + + @Override + public Mono remove(Subscription subscription) { + return client.delete(subscription) + .onErrorResume(OptimisticLockingFailureException.class, + e -> attemptToDelete(subscription.getMetadata().getName())); + } + + @Override + public Flux removeBy(ListOptions listOptions) { + return paginatedOperator.deleteInitialBatch(Subscription.class, listOptions); + } + + @Override + public Flux listByPerPage(String reasonType) { + final var listOptions = new ListOptions(); + var fieldQuery = and(isNull("metadata.deletionTimestamp"), + equal("spec.reason.reasonType", reasonType)); + listOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + return paginatedOperator.list(Subscription.class, listOptions); + } + + private Mono attemptToDelete(String subscriptionName) { + return Mono.defer(() -> client.fetch(Subscription.class, subscriptionName) + .flatMap(client::delete) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + Query reasonSubjectMatch(Subscription.ReasonSubject reasonSubject) { + Assert.notNull(reasonSubject, "The reasonSubject must not be null"); + if (StringUtils.isNotBlank(reasonSubject.getName())) { + return equal("spec.reason.subject", reasonSubject.toString()); + } + var matchAllSubject = new Subscription.ReasonSubject(); + matchAllSubject.setKind(reasonSubject.getKind()); + matchAllSubject.setApiVersion(reasonSubject.getApiVersion()); + return startsWith("spec.reason.subject", matchAllSubject.toString()); + } +} diff --git a/application/src/main/java/run/halo/app/notification/UserNotificationPreference.java b/application/src/main/java/run/halo/app/notification/UserNotificationPreference.java new file mode 100644 index 0000000..54e259e --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/UserNotificationPreference.java @@ -0,0 +1,44 @@ +package run.halo.app.notification; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import java.util.HashMap; +import java.util.Set; +import lombok.Data; +import lombok.Getter; +import org.springframework.lang.NonNull; + +/** + * Notification preference of user. + * + * @author guqing + * @since 2.10.0 + */ +@Getter +public class UserNotificationPreference { + private static final String DEFAULT_NOTIFIER = "default-email-notifier"; + + private final ReasonTypeNotifier reasonTypeNotifier = new ReasonTypeNotifier(); + + public static class ReasonTypeNotifier extends HashMap { + + /** + * Gets notifiers by reason type. + * + * @param reasonType reason type + * @return if key of reasonType not exists, return default notifier, otherwise return the + * notifiers + */ + @NonNull + public Set getNotifiers(String reasonType) { + var result = this.get(reasonType); + return result == null ? Set.of(DEFAULT_NOTIFIER) + : defaultIfNull(result.getNotifiers(), Set.of()); + } + } + + @Data + public static class NotifierSetting { + private Set notifiers; + } +} diff --git a/application/src/main/java/run/halo/app/notification/UserNotificationPreferenceService.java b/application/src/main/java/run/halo/app/notification/UserNotificationPreferenceService.java new file mode 100644 index 0000000..69ede65 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/UserNotificationPreferenceService.java @@ -0,0 +1,17 @@ +package run.halo.app.notification; + +import reactor.core.publisher.Mono; + +/** + * User notification preference service. + * + * @author guqing + * @since 2.10.0 + */ +public interface UserNotificationPreferenceService { + + Mono getByUser(String username); + + Mono saveByUser(String username, + UserNotificationPreference userNotificationPreference); +} diff --git a/application/src/main/java/run/halo/app/notification/UserNotificationPreferenceServiceImpl.java b/application/src/main/java/run/halo/app/notification/UserNotificationPreferenceServiceImpl.java new file mode 100644 index 0000000..88c88bd --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/UserNotificationPreferenceServiceImpl.java @@ -0,0 +1,69 @@ +package run.halo.app.notification; + +import java.util.HashMap; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.utils.JsonUtils; + +/** + * User notification preference service implementation. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class UserNotificationPreferenceServiceImpl implements UserNotificationPreferenceService { + + public static final String NOTIFICATION_PREFERENCE = "notification"; + + private final ReactiveExtensionClient client; + + @Override + public Mono getByUser(String username) { + var configName = buildUserPreferenceConfigMapName(username); + return client.fetch(ConfigMap.class, configName) + .map(config -> { + if (config.getData() == null) { + return new UserNotificationPreference(); + } + String s = config.getData().get(NOTIFICATION_PREFERENCE); + if (StringUtils.isNotBlank(s)) { + return JsonUtils.jsonToObject(s, UserNotificationPreference.class); + } + return new UserNotificationPreference(); + }) + .defaultIfEmpty(new UserNotificationPreference()); + } + + @Override + public Mono saveByUser(String username, + UserNotificationPreference userNotificationPreference) { + var configName = buildUserPreferenceConfigMapName(username); + return client.fetch(ConfigMap.class, configName) + .switchIfEmpty(Mono.defer(() -> { + var configMap = new ConfigMap(); + configMap.setMetadata(new Metadata()); + configMap.getMetadata().setName(configName); + return client.create(configMap); + })) + .flatMap(config -> { + if (config.getData() == null) { + config.setData(new HashMap<>()); + } + config.getData().put(NOTIFICATION_PREFERENCE, + JsonUtils.objectToJson(userNotificationPreference)); + return client.update(config); + }) + .then(); + } + + static String buildUserPreferenceConfigMapName(String username) { + return "user-preferences-" + username; + } +} diff --git a/application/src/main/java/run/halo/app/notification/UserNotificationQuery.java b/application/src/main/java/run/halo/app/notification/UserNotificationQuery.java new file mode 100644 index 0000000..fe331f5 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/UserNotificationQuery.java @@ -0,0 +1,42 @@ +package run.halo.app.notification; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.router.selector.SelectorUtil.labelAndFieldSelectorToListOptions; + +import org.apache.commons.lang3.StringUtils; +import org.springframework.web.server.ServerWebExchange; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.router.SortableRequest; +import run.halo.app.extension.router.selector.FieldSelector; + +/** + * Notification query object for authenticated user. + * + * @author guqing + * @since 2.10.0 + */ +public class UserNotificationQuery extends SortableRequest { + + private final String username; + + public UserNotificationQuery(ServerWebExchange exchange, String username) { + super(exchange); + this.username = username; + } + + /** + * Build a list options from the query object. + */ + @Override + public ListOptions toListOptions() { + var listOptions = + labelAndFieldSelectorToListOptions(getLabelSelector(), getFieldSelector()); + var filedQuery = listOptions.getFieldSelector().query(); + if (StringUtils.isNotBlank(username)) { + filedQuery = and(filedQuery, equal("spec.recipient", username)); + } + listOptions.setFieldSelector(FieldSelector.of(filedQuery)); + return listOptions; + } +} diff --git a/application/src/main/java/run/halo/app/notification/UserNotificationService.java b/application/src/main/java/run/halo/app/notification/UserNotificationService.java new file mode 100644 index 0000000..4ff448e --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/UserNotificationService.java @@ -0,0 +1,42 @@ +package run.halo.app.notification; + +import java.util.List; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.Notification; +import run.halo.app.extension.ListResult; + +/** + * Notification service. + * + * @author guqing + * @since 2.10.0 + */ +public interface UserNotificationService { + + /** + * List notifications for the authenticated user. + * + * @param query query object + * @return a page result of notifications + */ + Mono> listByUser(String username, UserNotificationQuery query); + + /** + * Mark the specified notification as read. + * + * @param name notification name + * @return read notification + */ + Mono markAsRead(String username, String name); + + /** + * Mark the specified notifications as read. + * + * @param names the names of notifications + * @return the names of read notification that has been marked as read + */ + Flux markSpecifiedAsRead(String username, List names); + + Mono deleteByName(String username, String name); +} diff --git a/application/src/main/java/run/halo/app/notification/endpoint/ConsoleNotifierEndpoint.java b/application/src/main/java/run/halo/app/notification/endpoint/ConsoleNotifierEndpoint.java new file mode 100644 index 0000000..389ba3b --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/endpoint/ConsoleNotifierEndpoint.java @@ -0,0 +1,89 @@ +package run.halo.app.notification.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import com.fasterxml.jackson.databind.node.ObjectNode; +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import lombok.RequiredArgsConstructor; +import org.springdoc.core.fn.builders.schema.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.notification.NotifierConfigStore; + +/** + * Custom notifier endpoint. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class ConsoleNotifierEndpoint implements CustomEndpoint { + + private final NotifierConfigStore notifierConfigStore; + + @Override + public RouterFunction endpoint() { + var tag = "NotifierV1alpha1Console"; + return SpringdocRouteBuilder.route() + .GET("/notifiers/{name}/sender-config", this::fetchSenderConfig, + builder -> builder.operationId("FetchSenderConfig") + .description("Fetch sender config of notifier") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Notifier name") + .required(true) + ) + .response(responseBuilder().implementation(ObjectNode.class)) + ) + .POST("/notifiers/{name}/sender-config", this::saveSenderConfig, + builder -> builder.operationId("SaveSenderConfig") + .description("Save sender config of notifier") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Notifier name") + .required(true) + ) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(ObjectNode.class)) + ) + ) + .response(responseBuilder().implementation(Void.class)) + ) + .build(); + } + + private Mono fetchSenderConfig(ServerRequest request) { + var name = request.pathVariable("name"); + return notifierConfigStore.fetchSenderConfig(name) + .flatMap(config -> ServerResponse.ok().bodyValue(config)); + } + + private Mono saveSenderConfig(ServerRequest request) { + var name = request.pathVariable("name"); + return request.bodyToMono(ObjectNode.class) + .switchIfEmpty(Mono.error( + () -> new ServerWebInputException("Request body must not be empty.")) + ) + .flatMap(jsonNode -> notifierConfigStore.saveSenderConfig(name, jsonNode)) + .then(ServerResponse.ok().build()); + } +} diff --git a/application/src/main/java/run/halo/app/notification/endpoint/EmailConfigValidationEndpoint.java b/application/src/main/java/run/halo/app/notification/endpoint/EmailConfigValidationEndpoint.java new file mode 100644 index 0000000..fbcd2c4 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/endpoint/EmailConfigValidationEndpoint.java @@ -0,0 +1,116 @@ +package run.halo.app.notification.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import io.swagger.v3.oas.annotations.media.Schema; +import java.security.Principal; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.mail.MailException; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.notification.EmailSenderHelper; + +/** + * Validation endpoint for email config. + * + * @author guqing + * @since 2.14.0 + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class EmailConfigValidationEndpoint implements CustomEndpoint { + private static final String EMAIL_SUBJECT = "测试邮件 - 验证邮箱连通性"; + private static final String EMAIL_BODY = """ + 你好！
+ 这是一封测试邮件，旨在验证您的邮箱发件配置是否正确。
+ 此邮件由系统自动发送，请勿回复。
+ 祝好 + """; + + private final EmailSenderHelper emailSenderHelper; + private final ReactiveExtensionClient client; + + @Override + public RouterFunction endpoint() { + var tag = "NotifierV1alpha1Console"; + return SpringdocRouteBuilder.route() + .POST("/notifiers/default-email-notifier/verify-connection", + this::verifyEmailSenderConfig, + builder -> builder.operationId("VerifyEmailSenderConfig") + .description("Verify email sender config.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .implementation(ValidationRequest.class) + ) + .response(responseBuilder().implementation(Void.class)) + ) + .build(); + } + + private Mono verifyEmailSenderConfig(ServerRequest request) { + return request.bodyToMono(ValidationRequest.class) + .switchIfEmpty( + Mono.error(new ServerWebInputException("Required request body is missing.")) + ) + .flatMap(validationRequest -> getCurrentUserEmail() + .flatMap(recipient -> { + var mailSender = emailSenderHelper.createJavaMailSender(validationRequest); + var message = emailSenderHelper.createMimeMessagePreparator(validationRequest, + recipient, EMAIL_SUBJECT, EMAIL_BODY, EMAIL_BODY); + try { + mailSender.send(message); + } catch (MailException e) { + String errorMsg = + "Failed to send email, please check your email configuration."; + log.error(errorMsg, e); + throw new ServerWebInputException(errorMsg, null, e); + } + return ServerResponse.ok().build(); + }) + ); + } + + Mono getCurrentUserEmail() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Principal::getName) + .flatMap(username -> client.fetch(User.class, username)) + .flatMap(user -> { + var email = user.getSpec().getEmail(); + if (StringUtils.isBlank(email)) { + return Mono.error(new ServerWebInputException( + "Your email is missing, please set it in your profile.")); + } + return Mono.just(email); + }); + } + + @Data + @EqualsAndHashCode(callSuper = true) + @Schema(name = "EmailConfigValidationRequest") + static class ValidationRequest extends EmailSenderHelper.EmailSenderConfig { + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("console.api.notification.halo.run/v1alpha1"); + } +} diff --git a/application/src/main/java/run/halo/app/notification/endpoint/SubscriptionRouter.java b/application/src/main/java/run/halo/app/notification/endpoint/SubscriptionRouter.java new file mode 100644 index 0000000..7344613 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/endpoint/SubscriptionRouter.java @@ -0,0 +1,95 @@ +package run.halo.app.notification.endpoint; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import java.net.URI; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.context.annotation.Bean; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.util.UriComponentsBuilder; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.ExternalUrlSupplier; + +/** + * A router for {@link Subscription}. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class SubscriptionRouter { + + public static final String UNSUBSCRIBE_PATTERN = + "/apis/api.notification.halo.run/v1alpha1/subscriptions/{name}/unsubscribe"; + + private final ExternalUrlSupplier externalUrlSupplier; + private final ReactiveExtensionClient client; + + @Bean + RouterFunction notificationSubscriptionRouter() { + return SpringdocRouteBuilder.route() + .GET(UNSUBSCRIBE_PATTERN, this::unsubscribe, builder -> { + builder.operationId("Unsubscribe") + .tag("api.notification.halo.run/v1alpha1/Subscription") + .description("Unsubscribe a subscription") + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Subscription name") + .required(true) + ).parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("token") + .description("Unsubscribe token") + .required(true) + ) + .response(responseBuilder().implementation(String.class)) + .build(); + }) + .build(); + } + + Mono unsubscribe(ServerRequest request) { + var name = request.pathVariable("name"); + var token = request.queryParam("token").orElse(""); + return client.fetch(Subscription.class, name) + .filter(subscription -> { + var unsubscribeToken = subscription.getSpec().getUnsubscribeToken(); + return StringUtils.equals(token, unsubscribeToken); + }) + .flatMap(client::delete) + .then(Mono.defer(() -> ServerResponse.ok() + .contentType(MediaType.TEXT_PLAIN) + .bodyValue("Unsubscribe successfully.")) + ); + } + + /** + * Gets unsubscribe url from the given subscription. + * + * @param subscription subscription must not be null + * @return unsubscribe url + */ + public String getUnsubscribeUrl(Subscription subscription) { + var name = subscription.getMetadata().getName(); + var token = subscription.getSpec().getUnsubscribeToken(); + var externalUrl = defaultIfNull(externalUrlSupplier.getRaw(), URI.create("/")); + return UriComponentsBuilder.fromUriString(externalUrl.toString()) + .path(UNSUBSCRIBE_PATTERN) + .queryParam("token", token) + .build(name) + .toString(); + } +} diff --git a/application/src/main/java/run/halo/app/notification/endpoint/UserNotificationEndpoint.java b/application/src/main/java/run/halo/app/notification/endpoint/UserNotificationEndpoint.java new file mode 100644 index 0000000..fe3dc77 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/endpoint/UserNotificationEndpoint.java @@ -0,0 +1,165 @@ +package run.halo.app.notification.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import java.util.List; +import java.util.function.Supplier; +import lombok.RequiredArgsConstructor; +import org.springdoc.core.fn.builders.schema.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RequestPredicates; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.core.extension.notification.Notification; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ListResult; +import run.halo.app.notification.UserNotificationQuery; +import run.halo.app.notification.UserNotificationService; + +/** + * Custom notification endpoint to managing notification for authenticated user. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class UserNotificationEndpoint implements CustomEndpoint { + + private final UserNotificationService notificationService; + + @Override + public RouterFunction endpoint() { + return SpringdocRouteBuilder.route() + .nest(RequestPredicates.path("/userspaces/{username}"), userspaceScopedApis(), + builder -> { + }) + .build(); + } + + Supplier> userspaceScopedApis() { + var tag = "NotificationV1alpha1Uc"; + return () -> SpringdocRouteBuilder.route() + .GET("/notifications", this::listNotification, + builder -> { + builder.operationId("ListUserNotifications") + .description("List notifications for the authenticated user.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("username") + .description("Username") + .required(true) + ) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(Notification.class)) + ); + UserNotificationQuery.buildParameters(builder); + } + ) + .PUT("/notifications/{name}/mark-as-read", this::markNotificationAsRead, + builder -> builder.operationId("MarkNotificationAsRead") + .description("Mark the specified notification as read.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("username") + .description("Username") + .required(true) + ) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Notification name") + .required(true) + ) + .response(responseBuilder().implementation(Notification.class)) + ) + .PUT("/notifications/-/mark-specified-as-read", this::markNotificationsAsRead, + builder -> builder.operationId("MarkNotificationsAsRead") + .description("Mark the specified notifications as read.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("username") + .description("Username") + .required(true) + ) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(MarkSpecifiedRequest.class)) + ) + ) + .response(responseBuilder().implementationArray(String.class)) + ) + .DELETE("/notifications/{name}", this::deleteNotification, + builder -> builder.operationId("DeleteSpecifiedNotification") + .description("Delete the specified notification.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("username") + .description("Username") + .required(true) + ) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Notification name") + .required(true) + ) + .response(responseBuilder().implementation(Notification.class)) + ) + .build(); + } + + private Mono deleteNotification(ServerRequest request) { + var name = request.pathVariable("name"); + var username = request.pathVariable("username"); + return notificationService.deleteByName(username, name) + .flatMap(notification -> ServerResponse.ok().bodyValue(notification)); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("api.notification.halo.run/v1alpha1"); + } + + record MarkSpecifiedRequest(List names) { + } + + private Mono listNotification(ServerRequest request) { + var username = request.pathVariable("username"); + var query = new UserNotificationQuery(request.exchange(), username); + return notificationService.listByUser(username, query) + .flatMap(notifications -> ServerResponse.ok().bodyValue(notifications)); + } + + private Mono markNotificationAsRead(ServerRequest request) { + var username = request.pathVariable("username"); + var name = request.pathVariable("name"); + return notificationService.markAsRead(username, name) + .flatMap(notification -> ServerResponse.ok().bodyValue(notification)); + } + + Mono markNotificationsAsRead(ServerRequest request) { + var username = request.pathVariable("username"); + return request.bodyToMono(MarkSpecifiedRequest.class) + .flatMapMany( + requestBody -> notificationService.markSpecifiedAsRead(username, requestBody.names)) + .collectList() + .flatMap(names -> ServerResponse.ok().bodyValue(names)); + } +} diff --git a/application/src/main/java/run/halo/app/notification/endpoint/UserNotificationPreferencesEndpoint.java b/application/src/main/java/run/halo/app/notification/endpoint/UserNotificationPreferencesEndpoint.java new file mode 100644 index 0000000..d3d7be0 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/endpoint/UserNotificationPreferencesEndpoint.java @@ -0,0 +1,230 @@ +package run.halo.app.notification.endpoint; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import com.fasterxml.jackson.core.type.TypeReference; +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.HashMap; +import java.util.List; +import java.util.Map; +import java.util.Optional; +import java.util.Set; +import java.util.function.Function; +import java.util.function.Supplier; +import lombok.Data; +import lombok.RequiredArgsConstructor; +import lombok.experimental.Accessors; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RequestPredicates; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import reactor.util.function.Tuples; +import run.halo.app.core.extension.Role; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.core.extension.notification.NotifierDescriptor; +import run.halo.app.core.extension.notification.ReasonType; +import run.halo.app.extension.Comparators; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.notification.UserNotificationPreference; +import run.halo.app.notification.UserNotificationPreferenceService; + +/** + * Endpoint for user notification preferences. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class UserNotificationPreferencesEndpoint implements CustomEndpoint { + + private final ReactiveExtensionClient client; + private final UserNotificationPreferenceService userNotificationPreferenceService; + + @Override + public RouterFunction endpoint() { + return SpringdocRouteBuilder.route() + .nest(RequestPredicates.path("/userspaces/{username}"), userspaceScopedApis(), + builder -> { + }) + .build(); + } + + Supplier> userspaceScopedApis() { + var tag = "NotificationV1alpha1Uc"; + return () -> SpringdocRouteBuilder.route() + .GET("/notification-preferences", this::listNotificationPreferences, + builder -> builder.operationId("ListUserNotificationPreferences") + .description("List notification preferences for the authenticated user.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("username") + .description("Username") + .required(true) + ) + .response(responseBuilder() + .implementation(ReasonTypeNotifierMatrix.class) + ) + ) + .POST("/notification-preferences", this::saveNotificationPreferences, + builder -> builder.operationId("SaveUserNotificationPreferences") + .description("Save notification preferences for the authenticated user.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("username") + .description("Username") + .required(true) + ) + .requestBody(requestBodyBuilder() + .implementation(ReasonTypeNotifierCollectionRequest.class) + ) + .response(responseBuilder().implementation(ReasonTypeNotifierMatrix.class)) + ) + .build(); + } + + private Mono saveNotificationPreferences(ServerRequest request) { + var username = request.pathVariable("username"); + return request.bodyToMono(ReasonTypeNotifierCollectionRequest.class) + .flatMap(requestBody -> { + var reasonTypNotifiers = requestBody.reasonTypeNotifiers(); + return userNotificationPreferenceService.getByUser(username) + .flatMap(preference -> { + var reasonTypeNotifierMap = preference.getReasonTypeNotifier(); + reasonTypeNotifierMap.clear(); + reasonTypNotifiers.forEach(reasonTypeNotifierRequest -> { + var reasonType = reasonTypeNotifierRequest.getReasonType(); + var notifiers = reasonTypeNotifierRequest.getNotifiers(); + var notifierSetting = new UserNotificationPreference.NotifierSetting(); + notifierSetting.setNotifiers( + notifiers == null ? Set.of() : Set.copyOf(notifiers)); + reasonTypeNotifierMap.put(reasonType, notifierSetting); + }); + return userNotificationPreferenceService.saveByUser(username, preference); + }); + }) + .then(Mono.defer(() -> listReasonTypeNotifierMatrix(username) + .flatMap(result -> ServerResponse.ok().bodyValue(result))) + ); + } + + private Mono listNotificationPreferences(ServerRequest request) { + var username = request.pathVariable("username"); + return listReasonTypeNotifierMatrix(username) + .flatMap(matrix -> ServerResponse.ok().bodyValue(matrix)); + } + + @NonNull + private static Map toNameIndexMap(List collection, + Function nameGetter) { + Map indexMap = new HashMap<>(); + for (int i = 0; i < collection.size(); i++) { + var item = collection.get(i); + indexMap.put(nameGetter.apply(item), i); + } + return indexMap; + } + + Mono listReasonTypeNotifierMatrix(String username) { + return client.list(ReasonType.class, null, Comparators.defaultComparator()) + .map(ReasonTypeInfo::from) + .collectList() + .flatMap(reasonTypes -> client.list(NotifierDescriptor.class, null, + Comparators.defaultComparator()) + .map(notifier -> new NotifierInfo(notifier.getMetadata().getName(), + notifier.getSpec().getDisplayName(), + notifier.getSpec().getDescription()) + ) + .collectList() + .map(notifiers -> { + var matrix = new ReasonTypeNotifierMatrix() + .setReasonTypes(reasonTypes) + .setNotifiers(notifiers) + .setStateMatrix(new boolean[reasonTypes.size()][notifiers.size()]); + return Tuples.of(reasonTypes, matrix); + }) + ) + .flatMap(tuple2 -> { + var reasonTypes = tuple2.getT1(); + var matrix = tuple2.getT2(); + + var reasonTypeIndexMap = toNameIndexMap(reasonTypes, ReasonTypeInfo::name); + var notifierIndexMap = toNameIndexMap(matrix.getNotifiers(), NotifierInfo::name); + var stateMatrix = matrix.getStateMatrix(); + + return userNotificationPreferenceService.getByUser(username) + .doOnNext(preference -> { + var reasonTypeNotifierMap = preference.getReasonTypeNotifier(); + for (ReasonTypeInfo reasonType : reasonTypes) { + var reasonTypeIndex = reasonTypeIndexMap.get(reasonType.name()); + var notifierNames = + reasonTypeNotifierMap.getNotifiers(reasonType.name()); + for (String notifierName : notifierNames) { + var notifierIndex = notifierIndexMap.get(notifierName); + stateMatrix[reasonTypeIndex][notifierIndex] = true; + } + } + }) + .thenReturn(matrix); + }); + } + + @Data + @Accessors(chain = true) + static class ReasonTypeNotifierMatrix { + private List reasonTypes; + private List notifiers; + private boolean[][] stateMatrix; + } + + record ReasonTypeInfo(String name, String displayName, String description, + Set uiPermissions) { + + public static ReasonTypeInfo from(ReasonType reasonType) { + var uiPermissions = Optional.of(MetadataUtil.nullSafeAnnotations(reasonType)) + .map(annotations -> annotations.get(Role.UI_PERMISSIONS_ANNO)) + .filter(StringUtils::isNotBlank) + .map(uiPermissionStr -> JsonUtils.jsonToObject(uiPermissionStr, + new TypeReference>() { + }) + ) + .orElse(Set.of()); + return new ReasonTypeInfo(reasonType.getMetadata().getName(), + reasonType.getSpec().getDisplayName(), + reasonType.getSpec().getDescription(), + uiPermissions); + } + } + + record NotifierInfo(String name, String displayName, String description) { + } + + record ReasonTypeNotifierCollectionRequest( + @Schema(requiredMode = REQUIRED) List reasonTypeNotifiers) { + } + + @Data + static class ReasonTypeNotifierRequest { + private String reasonType; + private List notifiers; + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("api.notification.halo.run/v1alpha1"); + } +} diff --git a/application/src/main/java/run/halo/app/notification/endpoint/UserNotifierEndpoint.java b/application/src/main/java/run/halo/app/notification/endpoint/UserNotifierEndpoint.java new file mode 100644 index 0000000..946b1d6 --- /dev/null +++ b/application/src/main/java/run/halo/app/notification/endpoint/UserNotifierEndpoint.java @@ -0,0 +1,95 @@ +package run.halo.app.notification.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import com.fasterxml.jackson.databind.node.ObjectNode; +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import lombok.RequiredArgsConstructor; +import org.springdoc.core.fn.builders.schema.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.notification.NotifierConfigStore; + +/** + * Notifier endpoint for user center. + * + * @author guqing + * @since 2.10.0 + */ +@Component +@RequiredArgsConstructor +public class UserNotifierEndpoint implements CustomEndpoint { + + private final NotifierConfigStore notifierConfigStore; + + @Override + public RouterFunction endpoint() { + var tag = "NotifierV1alpha1Uc"; + return SpringdocRouteBuilder.route() + .GET("/notifiers/{name}/receiver-config", this::fetchReceiverConfig, + builder -> builder.operationId("FetchReceiverConfig") + .description("Fetch receiver config of notifier") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Notifier name") + .required(true) + ) + .response(responseBuilder().implementation(ObjectNode.class)) + ) + .POST("/notifiers/{name}/receiver-config", this::saveReceiverConfig, + builder -> builder.operationId("SaveReceiverConfig") + .description("Save receiver config of notifier") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Notifier name") + .required(true) + ) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(Builder.schemaBuilder() + .implementation(ObjectNode.class)) + ) + ) + .response(responseBuilder().implementation(Void.class)) + ) + .build(); + } + + private Mono fetchReceiverConfig(ServerRequest request) { + var name = request.pathVariable("name"); + return notifierConfigStore.fetchReceiverConfig(name) + .flatMap(config -> ServerResponse.ok().bodyValue(config)); + } + + private Mono saveReceiverConfig(ServerRequest request) { + var name = request.pathVariable("name"); + return request.bodyToMono(ObjectNode.class) + .switchIfEmpty(Mono.error( + () -> new ServerWebInputException("Request body must not be empty.")) + ) + .flatMap(jsonNode -> notifierConfigStore.saveReceiverConfig(name, jsonNode)) + .then(ServerResponse.ok().build()); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("api.notification.halo.run/v1alpha1"); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/AggregatedRouterFunction.java b/application/src/main/java/run/halo/app/plugin/AggregatedRouterFunction.java new file mode 100644 index 0000000..396c2d4 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/AggregatedRouterFunction.java @@ -0,0 +1,38 @@ +package run.halo.app.plugin; + +import org.springframework.beans.factory.ObjectProvider; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.core.extension.endpoint.CustomEndpointsBuilder; + +/** + * Aggregated router function built from all custom endpoints. + * + * @author johnniang + */ +public class AggregatedRouterFunction implements RouterFunction { + + private final RouterFunction aggregated; + + public AggregatedRouterFunction(ObjectProvider customEndpoints) { + var builder = new CustomEndpointsBuilder(); + customEndpoints.orderedStream() + .forEach(builder::add); + this.aggregated = builder.build(); + } + + @Override + public Mono> route(ServerRequest request) { + return aggregated.route(request); + } + + @Override + public void accept(RouterFunctions.Visitor visitor) { + this.aggregated.accept(visitor); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/DefaultDevelopmentPluginRepository.java b/application/src/main/java/run/halo/app/plugin/DefaultDevelopmentPluginRepository.java new file mode 100644 index 0000000..e3b8858 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/DefaultDevelopmentPluginRepository.java @@ -0,0 +1,52 @@ +package run.halo.app.plugin; + +import java.nio.file.Path; +import java.util.ArrayList; +import java.util.List; +import org.pf4j.DevelopmentPluginRepository; +import org.springframework.util.CollectionUtils; + +/** + *

A {@link org.pf4j.PluginRepository} implementation that can add fixed plugin paths for + * development {@link org.pf4j.RuntimeMode#DEVELOPMENT}.

+ *

change {@link #deletePluginPath(Path)} to a no-op method.

+ * Note: This class is not thread-safe. + * + * @author guqing + * @since 2.0.0 + */ +public class DefaultDevelopmentPluginRepository extends DevelopmentPluginRepository { + private final List fixedPaths = new ArrayList<>(); + + public DefaultDevelopmentPluginRepository(Path... pluginsRoots) { + super(pluginsRoots); + } + + public DefaultDevelopmentPluginRepository(List pluginsRoots) { + super(pluginsRoots); + } + + public void setFixedPaths(List paths) { + if (CollectionUtils.isEmpty(paths)) { + return; + } + fixedPaths.clear(); + fixedPaths.addAll(paths); + } + + @Override + public List getPluginPaths() { + List paths = new ArrayList<>(fixedPaths); + paths.addAll(super.getPluginPaths()); + return paths; + } + + @Override + public boolean deletePluginPath(Path pluginPath) { + // If the plugin path is not included in the fixed paths, + // return false and give another repository a chance. + // + // Meanwhile, there is no need to physically delete the plugin here. + return fixedPaths.remove(pluginPath); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/DefaultPluginApplicationContextFactory.java b/application/src/main/java/run/halo/app/plugin/DefaultPluginApplicationContextFactory.java new file mode 100644 index 0000000..8a6ba01 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/DefaultPluginApplicationContextFactory.java @@ -0,0 +1,380 @@ +package run.halo.app.plugin; + +import static org.springframework.util.ResourceUtils.CLASSPATH_URL_PREFIX; + +import java.io.IOException; +import java.util.ArrayList; +import java.util.Collection; +import java.util.List; +import java.util.concurrent.TimeUnit; +import java.util.stream.Stream; +import lombok.extern.slf4j.Slf4j; +import org.pf4j.PluginRuntimeException; +import org.springframework.beans.factory.support.DefaultBeanNameGenerator; +import org.springframework.boot.env.PropertySourceLoader; +import org.springframework.boot.env.YamlPropertySourceLoader; +import org.springframework.context.ApplicationContext; +import org.springframework.context.ApplicationListener; +import org.springframework.context.event.ContextClosedEvent; +import org.springframework.context.event.ContextRefreshedEvent; +import org.springframework.context.event.EventListener; +import org.springframework.core.ResolvableType; +import org.springframework.core.env.PropertySource; +import org.springframework.core.io.DefaultResourceLoader; +import org.springframework.core.io.Resource; +import org.springframework.core.io.ResourceLoader; +import org.springframework.stereotype.Controller; +import org.springframework.util.StopWatch; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.Exceptions; +import run.halo.app.core.endpoint.WebSocketEndpoint; +import run.halo.app.core.endpoint.WebSocketEndpointManager; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.properties.HaloProperties; +import run.halo.app.plugin.event.HaloPluginBeforeStopEvent; +import run.halo.app.plugin.event.HaloPluginStartedEvent; +import run.halo.app.plugin.event.HaloPluginStoppedEvent; +import run.halo.app.plugin.event.SpringPluginStartedEvent; +import run.halo.app.plugin.event.SpringPluginStoppedEvent; +import run.halo.app.plugin.event.SpringPluginStoppingEvent; +import run.halo.app.search.SearchService; +import run.halo.app.theme.DefaultTemplateNameResolver; +import run.halo.app.theme.ViewNameResolver; +import run.halo.app.theme.finders.FinderRegistry; + +@Slf4j +public class DefaultPluginApplicationContextFactory implements PluginApplicationContextFactory { + + private final SpringPluginManager pluginManager; + + public DefaultPluginApplicationContextFactory(SpringPluginManager pluginManager) { + this.pluginManager = pluginManager; + } + + /** + * Create and refresh application context. Make sure the plugin has already loaded + * before. + * + * @param pluginId plugin id + * @return refresh application context for the plugin. + */ + @Override + public ApplicationContext create(String pluginId) { + log.debug("Preparing to create application context for plugin {}", pluginId); + + var sw = new StopWatch("CreateApplicationContextFor" + pluginId); + sw.start("Create"); + var context = new PluginApplicationContext(pluginId, pluginManager); + context.setBeanNameGenerator(DefaultBeanNameGenerator.INSTANCE); + context.registerShutdownHook(); + context.setParent(pluginManager.getSharedContext()); + + var pluginWrapper = pluginManager.getPlugin(pluginId); + var classLoader = pluginWrapper.getPluginClassLoader(); + var resourceLoader = new DefaultResourceLoader(classLoader); + context.setResourceLoader(resourceLoader); + sw.stop(); + + sw.start("LoadPropertySources"); + var mutablePropertySources = context.getEnvironment().getPropertySources(); + + resolvePropertySources(pluginId, resourceLoader) + .forEach(mutablePropertySources::addLast); + sw.stop(); + + sw.start("RegisterBeans"); + var beanFactory = context.getBeanFactory(); + beanFactory.registerSingleton("pluginWrapper", pluginWrapper); + context.registerBean(AggregatedRouterFunction.class); + + if (pluginWrapper.getPlugin() instanceof SpringPlugin springPlugin) { + beanFactory.registerSingleton("pluginContext", springPlugin.getPluginContext()); + } + + var rootContext = pluginManager.getRootContext(); + rootContext.getBeanProvider(ViewNameResolver.class) + .ifAvailable(viewNameResolver -> { + var templateNameResolver = + new DefaultTemplateNameResolver(viewNameResolver, context); + beanFactory.registerSingleton("templateNameResolver", templateNameResolver); + }); + + rootContext.getBeanProvider(ReactiveExtensionClient.class) + .ifUnique(client -> { + context.registerBean("reactiveSettingFetcher", DefaultReactiveSettingFetcher.class); + context.registerBean("settingFetcher", DefaultSettingFetcher.class); + }); + + rootContext.getBeanProvider(PluginRequestMappingHandlerMapping.class) + .ifAvailable(handlerMapping -> { + var handlerMappingManager = + new PluginHandlerMappingManager(pluginId, handlerMapping); + beanFactory.registerSingleton("pluginHandlerMappingManager", handlerMappingManager); + }); + + context.registerBean(PluginControllerManager.class); + beanFactory.registerSingleton("springPluginStoppedEventAdapter", + new SpringPluginStoppedEventAdapter(pluginId)); + beanFactory.registerSingleton("haloPluginEventBridge", new HaloPluginEventBridge()); + + rootContext.getBeanProvider(FinderRegistry.class) + .ifAvailable(finderRegistry -> { + var finderManager = new FinderManager(pluginId, finderRegistry); + beanFactory.registerSingleton("finderManager", finderManager); + }); + + rootContext.getBeanProvider(WebSocketEndpointManager.class) + .ifUnique(manager -> beanFactory.registerSingleton("pluginWebSocketEndpointManager", + new PluginWebSocketEndpointManager(manager))); + + rootContext.getBeanProvider(PluginRouterFunctionRegistry.class) + .ifUnique(registry -> { + var pluginRouterFunctionManager = new PluginRouterFunctionManager(registry); + beanFactory.registerSingleton( + "pluginRouterFunctionManager", + pluginRouterFunctionManager + ); + }); + + rootContext.getBeanProvider(SearchService.class) + .ifUnique(searchService -> + beanFactory.registerSingleton("searchService", searchService) + ); + + sw.stop(); + + sw.start("LoadComponents"); + var classNames = pluginManager.getExtensionClassNames(pluginId); + classNames.stream() + .map(className -> { + try { + return classLoader.loadClass(className); + } catch (ClassNotFoundException e) { + throw new PluginRuntimeException(String.format(""" + Failed to load class %s for plugin %s.\ + """, className, pluginId), e); + } + }) + .forEach(clazzName -> context.registerBean(clazzName)); + sw.stop(); + log.debug("Created application context for plugin {}", pluginId); + + log.debug("Refreshing application context for plugin {}", pluginId); + sw.start("Refresh"); + context.refresh(); + sw.stop(); + log.debug("Refreshed application context for plugin {}", pluginId); + if (log.isDebugEnabled()) { + log.debug("\n{}", sw.prettyPrint(TimeUnit.MILLISECONDS)); + } + return context; + } + + private static class FinderManager { + + private final String pluginId; + + private final FinderRegistry finderRegistry; + + private FinderManager(String pluginId, FinderRegistry finderRegistry) { + this.pluginId = pluginId; + this.finderRegistry = finderRegistry; + } + + @EventListener + public void onApplicationEvent(ContextClosedEvent ignored) { + this.finderRegistry.unregister(this.pluginId); + } + + @EventListener + public void onApplicationEvent(ContextRefreshedEvent event) { + this.finderRegistry.register(this.pluginId, event.getApplicationContext()); + } + + } + + private static class PluginWebSocketEndpointManager { + + private final WebSocketEndpointManager manager; + + private List endpoints; + + private PluginWebSocketEndpointManager(WebSocketEndpointManager manager) { + this.manager = manager; + } + + @EventListener + public void onApplicationEvent(ContextRefreshedEvent event) { + var context = event.getApplicationContext(); + this.endpoints = context.getBeanProvider(WebSocketEndpoint.class) + .orderedStream() + .toList(); + manager.register(this.endpoints); + } + + @EventListener + public void onApplicationEvent(ContextClosedEvent ignored) { + manager.unregister(this.endpoints); + } + } + + private static class PluginRouterFunctionManager { + + private final PluginRouterFunctionRegistry routerFunctionRegistry; + + private Collection> routerFunctions; + + private PluginRouterFunctionManager(PluginRouterFunctionRegistry routerFunctionRegistry) { + this.routerFunctionRegistry = routerFunctionRegistry; + } + + @EventListener + public void onApplicationEvent(ContextClosedEvent ignored) { + if (routerFunctions != null) { + routerFunctionRegistry.unregister(routerFunctions); + } + } + + @EventListener + public void onApplicationEvent(ContextRefreshedEvent event) { + var routerFunctions = event.getApplicationContext() + .>getBeanProvider( + ResolvableType.forClassWithGenerics(RouterFunction.class, ServerResponse.class) + ) + .orderedStream() + .toList(); + routerFunctionRegistry.register(routerFunctions); + this.routerFunctions = routerFunctions; + } + } + + + private static class PluginHandlerMappingManager { + private final String pluginId; + + private final PluginRequestMappingHandlerMapping handlerMapping; + + private PluginHandlerMappingManager(String pluginId, + PluginRequestMappingHandlerMapping handlerMapping) { + this.pluginId = pluginId; + this.handlerMapping = handlerMapping; + } + + @EventListener + public void onApplicationEvent(ContextRefreshedEvent event) { + var context = event.getApplicationContext(); + context.getBeansWithAnnotation(Controller.class) + .values() + .forEach(controller -> + handlerMapping.registerHandlerMethods(this.pluginId, controller) + ); + } + + @EventListener + public void onApplicationEvent(ContextClosedEvent ignored) { + handlerMapping.unregister(this.pluginId); + } + } + + private class SpringPluginStoppedEventAdapter + implements ApplicationListener { + + private final String pluginId; + + private SpringPluginStoppedEventAdapter(String pluginId) { + this.pluginId = pluginId; + } + + @Override + public void onApplicationEvent(ContextClosedEvent event) { + var plugin = pluginManager.getPlugin(pluginId).getPlugin(); + if (plugin instanceof SpringPlugin springPlugin) { + event.getApplicationContext() + .publishEvent(new SpringPluginStoppedEvent(this, springPlugin)); + } + } + } + + private class HaloPluginEventBridge { + + @EventListener + public void onApplicationEvent(SpringPluginStartedEvent event) { + var pluginContext = event.getSpringPlugin().getPluginContext(); + var pluginWrapper = pluginManager.getPlugin(pluginContext.getName()); + + pluginManager.getRootContext() + .publishEvent(new HaloPluginStartedEvent(this, pluginWrapper)); + } + + @EventListener + public void onApplicationEvent(SpringPluginStoppingEvent event) { + var pluginContext = event.getSpringPlugin().getPluginContext(); + var pluginWrapper = pluginManager.getPlugin(pluginContext.getName()); + pluginManager.getRootContext() + .publishEvent(new HaloPluginBeforeStopEvent(this, pluginWrapper)); + } + + @EventListener + public void onApplicationEvent(SpringPluginStoppedEvent event) { + var pluginContext = event.getSpringPlugin().getPluginContext(); + var pluginWrapper = pluginManager.getPlugin(pluginContext.getName()); + pluginManager.getRootContext() + .publishEvent(new HaloPluginStoppedEvent(this, pluginWrapper)); + } + + } + + private List> resolvePropertySources(String pluginId, + ResourceLoader resourceLoader) { + var haloProperties = pluginManager.getRootContext() + .getBeanProvider(HaloProperties.class) + .getIfAvailable(); + if (haloProperties == null) { + return List.of(); + } + + var propertySourceLoader = new YamlPropertySourceLoader(); + var propertySources = new ArrayList>(); + var configsPath = haloProperties.getWorkDir().resolve("plugins").resolve("configs"); + // resolve user defined config + Stream.of( + configsPath.resolve(pluginId + ".yaml"), + configsPath.resolve(pluginId + ".yml") + ) + .map(path -> resourceLoader.getResource(path.toUri().toString())) + .forEach(resource -> { + var sources = + loadPropertySources("user-defined-config", resource, propertySourceLoader); + propertySources.addAll(sources); + }); + + // resolve default config + Stream.of( + CLASSPATH_URL_PREFIX + "/config.yaml", + CLASSPATH_URL_PREFIX + "/config.yml" + ) + .map(resourceLoader::getResource) + .forEach(resource -> { + var sources = loadPropertySources("default-config", resource, propertySourceLoader); + propertySources.addAll(sources); + }); + return propertySources; + } + + private List> loadPropertySources(String propertySourceName, + Resource resource, + PropertySourceLoader propertySourceLoader) { + if (log.isDebugEnabled()) { + log.debug("Loading property sources from {}", resource); + } + if (!resource.exists()) { + return List.of(); + } + try { + return propertySourceLoader.load(propertySourceName, resource); + } catch (IOException e) { + throw Exceptions.propagate(e); + } + } +} diff --git a/application/src/main/java/run/halo/app/plugin/DefaultPluginGetter.java b/application/src/main/java/run/halo/app/plugin/DefaultPluginGetter.java new file mode 100644 index 0000000..02d9018 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/DefaultPluginGetter.java @@ -0,0 +1,29 @@ +package run.halo.app.plugin; + +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.Plugin; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.infra.exception.NotFoundException; + +/** + * Default implementation of {@link PluginGetter}. + * + * @author guqing + * @since 2.17.0 + */ +@Component +@RequiredArgsConstructor +public class DefaultPluginGetter implements PluginGetter { + private final ExtensionClient client; + + @Override + public Plugin getPlugin(String name) { + if (StringUtils.isBlank(name)) { + throw new IllegalArgumentException("Plugin name must not be blank"); + } + return client.fetch(Plugin.class, name) + .orElseThrow(() -> new NotFoundException("Plugin not found")); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/DefaultPluginRouterFunctionRegistry.java b/application/src/main/java/run/halo/app/plugin/DefaultPluginRouterFunctionRegistry.java new file mode 100644 index 0000000..602fd56 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/DefaultPluginRouterFunctionRegistry.java @@ -0,0 +1,62 @@ +package run.halo.app.plugin; + +import java.util.Collection; +import java.util.concurrent.CopyOnWriteArraySet; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +/** + * A composite {@link RouterFunction} implementation for plugin. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class DefaultPluginRouterFunctionRegistry + implements RouterFunction, PluginRouterFunctionRegistry { + + private final Collection> routerFunctions; + + public DefaultPluginRouterFunctionRegistry() { + this.routerFunctions = new CopyOnWriteArraySet<>(); + } + + @Override + @NonNull + public Mono> route(@NonNull ServerRequest request) { + return Flux.fromIterable(this.routerFunctions) + .concatMap(routerFunction -> routerFunction.route(request)) + .next(); + } + + @Override + public void accept(@NonNull RouterFunctions.Visitor visitor) { + this.routerFunctions.forEach(routerFunction -> routerFunction.accept(visitor)); + } + + @Override + public void register(Collection> routerFunctions) { + this.routerFunctions.addAll(routerFunctions); + } + + @Override + public void unregister(Collection> routerFunctions) { + this.routerFunctions.removeAll(routerFunctions); + } + + /** + * Only for testing. + * + * @return maintained router functions. + */ + Collection> getRouterFunctions() { + return routerFunctions; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/DefaultReactiveSettingFetcher.java b/application/src/main/java/run/halo/app/plugin/DefaultReactiveSettingFetcher.java new file mode 100644 index 0000000..397e3ff --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/DefaultReactiveSettingFetcher.java @@ -0,0 +1,213 @@ +package run.halo.app.plugin; + +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import com.fasterxml.jackson.core.JsonProcessingException; +import com.fasterxml.jackson.databind.JsonNode; +import com.fasterxml.jackson.databind.node.JsonNodeFactory; +import java.util.LinkedHashMap; +import java.util.Map; +import java.util.Objects; +import org.apache.commons.lang3.StringUtils; +import org.springframework.beans.BeansException; +import org.springframework.beans.factory.DisposableBean; +import org.springframework.cache.Cache; +import org.springframework.cache.CacheManager; +import org.springframework.context.ApplicationContext; +import org.springframework.context.ApplicationContextAware; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionMatcher; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.infra.utils.JsonParseException; +import run.halo.app.infra.utils.JsonUtils; + +/** + * A default implementation of {@link ReactiveSettingFetcher}. + * + * @author guqing + * @since 2.0.0 + */ +public class DefaultReactiveSettingFetcher + implements ReactiveSettingFetcher, Reconciler, DisposableBean, + ApplicationContextAware { + + private final ReactiveExtensionClient client; + + private final ExtensionClient blockingClient; + + private final CacheManager cacheManager; + + /** + * The application context of the plugin. + */ + private ApplicationContext applicationContext; + + private final String pluginName; + + private final String configMapName; + + private final String cacheName; + + public DefaultReactiveSettingFetcher(PluginContext pluginContext, + ReactiveExtensionClient client, ExtensionClient blockingClient, + CacheManager cacheManager) { + this.client = client; + this.pluginName = pluginContext.getName(); + this.configMapName = pluginContext.getConfigMapName(); + this.blockingClient = blockingClient; + this.cacheManager = cacheManager; + this.cacheName = buildCacheKey(pluginName); + } + + @Override + public Mono fetch(String group, Class clazz) { + return getInternal(group) + .mapNotNull(jsonNode -> convertValue(jsonNode, clazz)); + } + + @Override + @NonNull + public Mono get(String group) { + return getInternal(group) + .switchIfEmpty( + Mono.error(new IllegalArgumentException("Group [" + group + "] does not exist.")) + ); + } + + @Override + @NonNull + public Mono> getValues() { + return getValuesInternal() + .map(Map::copyOf) + .defaultIfEmpty(Map.of()); + } + + private Mono getInternal(String group) { + return getValuesInternal() + .mapNotNull(values -> values.get(group)) + .defaultIfEmpty(JsonNodeFactory.instance.missingNode()); + } + + Mono> getValuesInternal() { + var cache = getCache(); + var cachedValue = getCachedConfigData(cache); + if (cachedValue != null) { + return Mono.justOrEmpty(cachedValue); + } + return Mono.defer(() -> { + // double check + var newCachedValue = getCachedConfigData(cache); + if (newCachedValue != null) { + return Mono.justOrEmpty(newCachedValue); + } + if (StringUtils.isBlank(configMapName)) { + return Mono.empty(); + } + return client.fetch(ConfigMap.class, configMapName) + .mapNotNull(ConfigMap::getData) + .map(data -> { + Map result = new LinkedHashMap<>(); + data.forEach((key, value) -> result.put(key, readTree(value))); + return result; + }) + .defaultIfEmpty(Map.of()) + .doOnNext(values -> cache.put(pluginName, values)); + }); + } + + private JsonNode readTree(String json) { + if (StringUtils.isBlank(json)) { + return JsonNodeFactory.instance.missingNode(); + } + try { + return JsonUtils.DEFAULT_JSON_MAPPER.readTree(json); + } catch (JsonProcessingException e) { + throw new JsonParseException(e); + } + } + + private T convertValue(JsonNode jsonNode, Class clazz) { + return JsonUtils.DEFAULT_JSON_MAPPER.convertValue(jsonNode, clazz); + } + + @NonNull + private Cache getCache() { + var cache = cacheManager.getCache(cacheName); + if (cache == null) { + // should never happen + throw new IllegalStateException("Cache [" + cacheName + "] not found."); + } + return cache; + } + + static String buildCacheKey(String pluginName) { + return "plugin-" + pluginName + "-configmap"; + } + + @Override + public Result reconcile(Request request) { + blockingClient.fetch(ConfigMap.class, configMapName) + .ifPresent(configMap -> { + var cache = getCache(); + var existData = getCachedConfigData(cache); + var configMapData = configMap.getData(); + Map result = new LinkedHashMap<>(); + if (configMapData != null) { + configMapData.forEach((key, value) -> result.put(key, readTree(value))); + } + // update cache + cache.put(pluginName, result); + applicationContext.publishEvent(PluginConfigUpdatedEvent.builder() + .source(this) + .oldConfig(existData) + .newConfig(result) + .build()); + }); + return Result.doNotRetry(); + } + + @Nullable + @SuppressWarnings("unchecked") + private Map getCachedConfigData(@NonNull Cache cache) { + var existData = cache.get(pluginName); + if (existData == null) { + return null; + } + return (Map) existData.get(); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + ExtensionMatcher matcher = + extension -> Objects.equals(extension.getMetadata().getName(), configMapName); + return builder + .extension(new ConfigMap()) + .syncAllOnStart(true) + .syncAllListOptions(ListOptions.builder() + .fieldQuery(equal("metadata.name", configMapName)) + .build()) + .onAddMatcher(matcher) + .onUpdateMatcher(matcher) + .onDeleteMatcher(matcher) + .build(); + } + + @Override + public void destroy() { + getCache().invalidate(); + } + + @Override + public void setApplicationContext(@NonNull ApplicationContext applicationContext) + throws BeansException { + this.applicationContext = applicationContext; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/DefaultSettingFetcher.java b/application/src/main/java/run/halo/app/plugin/DefaultSettingFetcher.java new file mode 100644 index 0000000..4a18763 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/DefaultSettingFetcher.java @@ -0,0 +1,46 @@ +package run.halo.app.plugin; + +import com.fasterxml.jackson.databind.JsonNode; +import java.util.Map; +import java.util.Objects; +import java.util.Optional; +import org.springframework.lang.NonNull; +import run.halo.app.extension.ConfigMap; + +/** + *

A value fetcher for plugin form configuration.

+ * + * @author guqing + * @since 2.0.0 + */ +public class DefaultSettingFetcher extends SettingFetcher { + private final ReactiveSettingFetcher delegateFetcher; + + public DefaultSettingFetcher(ReactiveSettingFetcher reactiveSettingFetcher) { + this.delegateFetcher = reactiveSettingFetcher; + } + + @NonNull + @Override + public Optional fetch(String group, Class clazz) { + return delegateFetcher.fetch(group, clazz) + .blockOptional(); + } + + @NonNull + @Override + public JsonNode get(String group) { + return Objects.requireNonNull(delegateFetcher.get(group).block()); + } + + /** + * Get values from {@link ConfigMap}. + * + * @return a unmodifiable map of values(non-null). + */ + @NonNull + @Override + public Map getValues() { + return Objects.requireNonNull(delegateFetcher.getValues().block()); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/DevPluginLoader.java b/application/src/main/java/run/halo/app/plugin/DevPluginLoader.java new file mode 100644 index 0000000..9698b71 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/DevPluginLoader.java @@ -0,0 +1,43 @@ +package run.halo.app.plugin; + +import java.nio.file.Files; +import java.nio.file.Path; +import org.pf4j.DevelopmentPluginLoader; +import org.pf4j.PluginDescriptor; +import org.pf4j.PluginManager; + +public class DevPluginLoader extends DevelopmentPluginLoader { + + private final PluginProperties pluginProperties; + + public DevPluginLoader( + PluginManager pluginManager, + PluginProperties pluginProperties + ) { + super(pluginManager); + this.pluginProperties = pluginProperties; + } + + @Override + public ClassLoader loadPlugin(Path pluginPath, PluginDescriptor pluginDescriptor) { + var classesDirectories = pluginProperties.getClassesDirectories(); + if (classesDirectories != null) { + classesDirectories.forEach( + classesDirectory -> pluginClasspath.addClassesDirectories(classesDirectory) + ); + } + var libDirectories = pluginProperties.getLibDirectories(); + if (libDirectories != null) { + libDirectories.forEach( + libDirectory -> pluginClasspath.addJarsDirectories(libDirectory) + ); + } + return super.loadPlugin(pluginPath, pluginDescriptor); + } + + @Override + public boolean isApplicable(Path pluginPath) { + // Currently we only support a plugin loading from directory in dev mode. + return Files.isDirectory(pluginPath); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/HaloPluginManager.java b/application/src/main/java/run/halo/app/plugin/HaloPluginManager.java new file mode 100644 index 0000000..4d131d4 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/HaloPluginManager.java @@ -0,0 +1,207 @@ +package run.halo.app.plugin; + +import java.nio.file.Path; +import java.util.ArrayList; +import java.util.List; +import java.util.Stack; +import lombok.extern.slf4j.Slf4j; +import org.pf4j.CompoundPluginLoader; +import org.pf4j.CompoundPluginRepository; +import org.pf4j.DefaultPluginManager; +import org.pf4j.DefaultPluginRepository; +import org.pf4j.ExtensionFactory; +import org.pf4j.ExtensionFinder; +import org.pf4j.JarPluginLoader; +import org.pf4j.JarPluginRepository; +import org.pf4j.PluginDescriptorFinder; +import org.pf4j.PluginFactory; +import org.pf4j.PluginLoader; +import org.pf4j.PluginRepository; +import org.pf4j.PluginState; +import org.pf4j.PluginStateEvent; +import org.pf4j.PluginStateListener; +import org.pf4j.PluginStatusProvider; +import org.pf4j.PluginWrapper; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.context.ApplicationContext; +import org.springframework.data.util.Lazy; +import run.halo.app.infra.SystemVersionSupplier; +import run.halo.app.plugin.event.PluginStartedEvent; + +/** + * PluginManager to hold the main ApplicationContext. + * It provides methods for managing the plugin lifecycle. + * + * @author guqing + * @author johnniang + * @since 2.0.0 + */ +@Slf4j +public class HaloPluginManager extends DefaultPluginManager + implements SpringPluginManager, InitializingBean { + + private final ApplicationContext rootContext; + + private Lazy sharedContext; + + private final PluginProperties pluginProperties; + + private final PluginsRootGetter pluginsRootGetter; + + private final SystemVersionSupplier systemVersionSupplier; + + public HaloPluginManager(ApplicationContext rootContext, + PluginProperties pluginProperties, + SystemVersionSupplier systemVersionSupplier, + PluginsRootGetter pluginsRootGetter) { + this.pluginProperties = pluginProperties; + this.rootContext = rootContext; + this.pluginsRootGetter = pluginsRootGetter; + this.systemVersionSupplier = systemVersionSupplier; + } + + @Override + protected void initialize() { + // Leave the implementation empty because the super#initialize eagerly initializes + // components before properties set. + } + + @Override + public void afterPropertiesSet() throws Exception { + super.runtimeMode = pluginProperties.getRuntimeMode(); + this.sharedContext = Lazy.of(() -> SharedApplicationContextFactory.create(rootContext)); + setExactVersionAllowed(pluginProperties.isExactVersionAllowed()); + setSystemVersion(systemVersionSupplier.get().toStableVersion().toString()); + + super.initialize(); + // the listener must be after the super#initialize + addPluginStateListener(new PluginStartedListener()); + } + + @Override + protected ExtensionFactory createExtensionFactory() { + return new SpringExtensionFactory(this); + } + + @Override + protected ExtensionFinder createExtensionFinder() { + var finder = new SpringComponentsFinder(this); + addPluginStateListener(finder); + return finder; + } + + @Override + protected PluginFactory createPluginFactory() { + var contextFactory = new DefaultPluginApplicationContextFactory(this); + var pluginGetter = rootContext.getBean(PluginGetter.class); + return new SpringPluginFactory(contextFactory, pluginGetter); + } + + @Override + protected PluginDescriptorFinder createPluginDescriptorFinder() { + return new YamlPluginDescriptorFinder(); + } + + @Override + protected PluginLoader createPluginLoader() { + var compoundLoader = new CompoundPluginLoader(); + compoundLoader.add(new DevPluginLoader(this, this.pluginProperties), this::isDevelopment); + compoundLoader.add(new JarPluginLoader(this)); + return compoundLoader; + } + + @Override + protected PluginStatusProvider createPluginStatusProvider() { + if (PropertyPluginStatusProvider.isPropertySet(pluginProperties)) { + return new PropertyPluginStatusProvider(pluginProperties); + } + return super.createPluginStatusProvider(); + } + + @Override + protected PluginRepository createPluginRepository() { + var developmentPluginRepository = + new DefaultDevelopmentPluginRepository(getPluginsRoots()); + developmentPluginRepository + .setFixedPaths(pluginProperties.getFixedPluginPath()); + return new CompoundPluginRepository() + .add(developmentPluginRepository, this::isDevelopment) + .add(new JarPluginRepository(getPluginsRoots())) + .add(new DefaultPluginRepository(getPluginsRoots())); + } + + @Override + protected List createPluginsRoot() { + return List.of(pluginsRootGetter.get()); + } + + @Override + public void startPlugins() { + throw new UnsupportedOperationException( + "The operation of starting all plugins is not supported." + ); + } + + @Override + public void stopPlugins() { + throw new UnsupportedOperationException( + "The operation of stopping all plugins is not supported." + ); + } + + @Override + public ApplicationContext getRootContext() { + return rootContext; + } + + @Override + public ApplicationContext getSharedContext() { + return sharedContext.get(); + } + + @Override + public List getDependents(String pluginId) { + if (getPlugin(pluginId) == null) { + return List.of(); + } + + var dependents = new ArrayList(); + var stack = new Stack(); + dependencyResolver.getDependents(pluginId).forEach(stack::push); + while (!stack.isEmpty()) { + var dependent = stack.pop(); + var pluginWrapper = getPlugin(dependent); + if (pluginWrapper != null) { + dependents.add(pluginWrapper); + dependencyResolver.getDependents(dependent).forEach(stack::push); + } + } + return dependents; + } + + /** + * Listener for plugin started event. + * + * @author johnniang + * @since 2.17.0 + */ + private static class PluginStartedListener implements PluginStateListener { + + @Override + public void pluginStateChanged(PluginStateEvent event) { + if (PluginState.STARTED.equals(event.getPluginState())) { + var plugin = event.getPlugin().getPlugin(); + if (plugin instanceof SpringPlugin springPlugin) { + try { + springPlugin.getApplicationContext() + .publishEvent(new PluginStartedEvent(this)); + } catch (Throwable t) { + var pluginId = event.getPlugin().getPluginId(); + log.warn("Error while publishing plugin started event for plugin {}", + pluginId, t); + } + } + } + } + } +} diff --git a/application/src/main/java/run/halo/app/plugin/HaloSharedEventDelegator.java b/application/src/main/java/run/halo/app/plugin/HaloSharedEventDelegator.java new file mode 100644 index 0000000..189d7eb --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/HaloSharedEventDelegator.java @@ -0,0 +1,40 @@ +package run.halo.app.plugin; + +import java.util.Objects; +import lombok.Getter; +import org.springframework.context.ApplicationEvent; + +/** + * The event that delegates a shared event in core into all started plugins. + * + * @author johnniang + * @since 2.17 + */ +@Getter +class HaloSharedEventDelegator extends ApplicationEvent { + + private final ApplicationEvent delegate; + + public HaloSharedEventDelegator(Object source, ApplicationEvent delegate) { + super(source); + this.delegate = delegate; + } + + @Override + public boolean equals(Object o) { + if (this == o) { + return true; + } + if (o == null || getClass() != o.getClass()) { + return false; + } + + HaloSharedEventDelegator that = (HaloSharedEventDelegator) o; + return Objects.equals(delegate, that.delegate); + } + + @Override + public int hashCode() { + return Objects.hashCode(delegate); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginApplicationContext.java b/application/src/main/java/run/halo/app/plugin/PluginApplicationContext.java new file mode 100644 index 0000000..19b01ec --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginApplicationContext.java @@ -0,0 +1,137 @@ +package run.halo.app.plugin; + +import java.util.List; +import java.util.concurrent.locks.StampedLock; +import org.springframework.context.ApplicationEvent; +import org.springframework.context.annotation.AnnotationConfigApplicationContext; +import org.springframework.core.ResolvableType; +import org.springframework.core.annotation.AnnotationUtils; +import org.springframework.util.Assert; +import org.springframework.util.LinkedMultiValueMap; +import org.springframework.util.MultiValueMap; +import run.halo.app.extension.GroupVersionKind; + +/** + * The generic IOC container for plugins. + * The plugin-classes loaded through the same plugin-classloader will be put into the same + * {@link PluginApplicationContext} for bean creation. + * + * @author guqing + * @since 2.0.0 + */ +public class PluginApplicationContext extends AnnotationConfigApplicationContext { + + private final GvkExtensionMapping gvkExtensionMapping = new GvkExtensionMapping(); + + private final String pluginId; + + private final SpringPluginManager pluginManager; + + public PluginApplicationContext(String pluginId, SpringPluginManager pluginManager) { + this.pluginId = pluginId; + this.pluginManager = pluginManager; + } + + public String getPluginId() { + return pluginId; + } + + /** + * Gets the gvk-extension mapping. + * It is thread safe + * + * @param gvk the group-kind-version + * @param extensionName extension resources name + */ + public void addExtensionMapping(GroupVersionKind gvk, String extensionName) { + gvkExtensionMapping.addExtensionMapping(gvk, extensionName); + } + + /** + * Gets the extension names by gvk. + * It is thread safe + * + * @param gvk the group-kind-version + * @return a immutable list of extension names + */ + public List getExtensionNames(GroupVersionKind gvk) { + return List.copyOf(gvkExtensionMapping.getExtensionNames(gvk)); + } + + public MultiValueMap extensionNamesMapping() { + return gvkExtensionMapping.extensionNamesMapping(); + } + + static class GvkExtensionMapping { + private final StampedLock sl = new StampedLock(); + private final MultiValueMap extensionNamesMapping = + new LinkedMultiValueMap<>(); + + public void addAllExtensionMapping(GroupVersionKind gvk, List extensionNames) { + long stamp = sl.writeLock(); + try { + extensionNamesMapping.addAll(gvk, extensionNames); + } finally { + sl.unlockWrite(stamp); + } + } + + public void addExtensionMapping(GroupVersionKind gvk, String extensionName) { + long stamp = sl.writeLock(); + try { + extensionNamesMapping.add(gvk, extensionName); + } finally { + sl.unlockWrite(stamp); + } + } + + public List getExtensionNames(GroupVersionKind gvk) { + Assert.notNull(gvk, "The gvk must not be null"); + long stamp = sl.tryOptimisticRead(); + List values = extensionNamesMapping.get(gvk); + if (!sl.validate(stamp)) { + // Check if another write lock occurs after the optimistic read lock + // If so, escalate lock to a pessimistic lock + stamp = sl.readLock(); + try { + return extensionNamesMapping.get(gvk); + } finally { + sl.unlockRead(stamp); + } + } + return values; + } + + public MultiValueMap extensionNamesMapping() { + return new LinkedMultiValueMap<>(extensionNamesMapping); + } + + public void clear() { + extensionNamesMapping.clear(); + } + } + + @Override + protected void publishEvent(Object event, ResolvableType typeHint) { + if (event instanceof ApplicationEvent applicationEvent + && AnnotationUtils.findAnnotation(event.getClass(), SharedEvent.class) != null) { + // publish event via root context + var delegateEvent = new PluginSharedEventDelegator(this, applicationEvent); + pluginManager.getRootContext().publishEvent(delegateEvent); + return; + } + // unwrap event if needed + var originalEvent = event; + if (event instanceof HaloSharedEventDelegator delegator) { + originalEvent = delegator.getDelegate(); + } + super.publishEvent(originalEvent, typeHint); + } + + @Override + protected void onClose() { + // For subclasses: do nothing by default. + super.onClose(); + gvkExtensionMapping.clear(); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginApplicationContextFactory.java b/application/src/main/java/run/halo/app/plugin/PluginApplicationContextFactory.java new file mode 100644 index 0000000..e8f3ef0 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginApplicationContextFactory.java @@ -0,0 +1,15 @@ +package run.halo.app.plugin; + +import org.springframework.context.ApplicationContext; + +public interface PluginApplicationContextFactory { + + /** + * Create and refresh application context. + * + * @param pluginId plugin id + * @return refresh application context for the plugin. + */ + ApplicationContext create(String pluginId); + +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginAutoConfiguration.java b/application/src/main/java/run/halo/app/plugin/PluginAutoConfiguration.java new file mode 100644 index 0000000..d9a9871 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginAutoConfiguration.java @@ -0,0 +1,85 @@ +package run.halo.app.plugin; + +import static run.halo.app.plugin.resources.BundleResourceUtils.getJsBundleResource; + +import java.io.IOException; +import java.time.Instant; +import lombok.extern.slf4j.Slf4j; +import org.pf4j.PluginManager; +import org.springframework.beans.factory.annotation.Qualifier; +import org.springframework.boot.autoconfigure.web.WebProperties; +import org.springframework.boot.context.properties.EnableConfigurationProperties; +import org.springframework.context.ApplicationContext; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.web.reactive.accept.RequestedContentTypeResolver; +import org.springframework.web.reactive.function.BodyInserters; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.infra.SystemVersionSupplier; + +/** + * Plugin autoconfiguration for Spring Boot. + * + * @author guqing + * @see PluginProperties + */ +@Slf4j +@Configuration +@EnableConfigurationProperties(PluginProperties.class) +public class PluginAutoConfiguration { + + @Bean + public PluginRequestMappingHandlerMapping pluginRequestMappingHandlerMapping( + @Qualifier("webFluxContentTypeResolver") + RequestedContentTypeResolver requestedContentTypeResolver + ) { + PluginRequestMappingHandlerMapping mapping = new PluginRequestMappingHandlerMapping(); + mapping.setContentTypeResolver(requestedContentTypeResolver); + mapping.setOrder(-1); + return mapping; + } + + @Bean + public SpringPluginManager pluginManager(ApplicationContext context, + SystemVersionSupplier systemVersionSupplier, + PluginProperties pluginProperties, + PluginsRootGetter pluginsRootGetter) { + return new HaloPluginManager( + context, pluginProperties, systemVersionSupplier, pluginsRootGetter + ); + } + + @Bean + public RouterFunction pluginJsBundleRoute(PluginManager pluginManager, + WebProperties webProperties) { + var cacheProperties = webProperties.getResources().getCache(); + return RouterFunctions.route() + .GET("/plugins/{name}/assets/console/{*resource}", request -> { + String pluginName = request.pathVariable("name"); + String fileName = request.pathVariable("resource"); + + var jsBundle = getJsBundleResource(pluginManager, pluginName, fileName); + if (jsBundle == null || !jsBundle.exists()) { + return ServerResponse.notFound().build(); + } + var useLastModified = cacheProperties.isUseLastModified(); + var bodyBuilder = ServerResponse.ok() + .cacheControl(cacheProperties.getCachecontrol().toHttpCacheControl()); + try { + if (useLastModified) { + var lastModified = Instant.ofEpochMilli(jsBundle.lastModified()); + return request.checkNotModified(lastModified) + .switchIfEmpty(Mono.defer(() -> bodyBuilder.lastModified(lastModified) + .body(BodyInserters.fromResource(jsBundle)))); + } + return bodyBuilder.body(BodyInserters.fromResource(jsBundle)); + } catch (IOException e) { + throw new RuntimeException(e); + } + }) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginBeforeStopSyncListener.java b/application/src/main/java/run/halo/app/plugin/PluginBeforeStopSyncListener.java new file mode 100644 index 0000000..92a5d4c --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginBeforeStopSyncListener.java @@ -0,0 +1,73 @@ +package run.halo.app.plugin; + +import java.time.Duration; +import lombok.extern.slf4j.Slf4j; +import org.springframework.context.event.EventListener; +import org.springframework.lang.NonNull; +import org.springframework.retry.RetryException; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.plugin.event.HaloPluginBeforeStopEvent; + +/** + * Synchronization listener executed by the plugin before it is stopped. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class PluginBeforeStopSyncListener { + + private final ReactiveExtensionClient client; + + public PluginBeforeStopSyncListener(ReactiveExtensionClient client) { + this.client = client; + } + + @EventListener + public void onApplicationEvent(@NonNull HaloPluginBeforeStopEvent event) { + var pluginWrapper = event.getPlugin(); + var p = pluginWrapper.getPlugin(); + if (!(p instanceof SpringPlugin springPlugin)) { + return; + } + var applicationContext = springPlugin.getApplicationContext(); + if (!(applicationContext instanceof PluginApplicationContext pluginApplicationContext)) { + return; + } + cleanUpPluginExtensionResources(pluginApplicationContext).block(Duration.ofMinutes(1)); + } + + private Mono cleanUpPluginExtensionResources(PluginApplicationContext context) { + var gvkExtensionNames = context.extensionNamesMapping(); + return Flux.fromIterable(gvkExtensionNames.entrySet()) + .flatMap(entry -> Flux.fromIterable(entry.getValue()) + .flatMap(extensionName -> client.fetch(entry.getKey(), extensionName)) + .flatMap(client::delete) + .flatMap(e -> waitForDeleted(e.groupVersionKind(), e.getMetadata().getName()))) + .then(); + } + + private Mono waitForDeleted(GroupVersionKind gvk, String name) { + return client.fetch(gvk, name) + .flatMap(e -> { + if (log.isDebugEnabled()) { + log.debug("Wait for {}/{} deleted", gvk, name); + } + return Mono.error(new RetryException("Wait for extension deleted")); + }) + .retryWhen(Retry.backoff(10, Duration.ofMillis(100)) + .filter(RetryException.class::isInstance)) + .then() + .doOnSuccess(v -> { + if (log.isDebugEnabled()) { + log.debug("{}/{} was deleted successfully.", gvk, name); + } + }); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginConst.java b/application/src/main/java/run/halo/app/plugin/PluginConst.java new file mode 100644 index 0000000..a4dfa6a --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginConst.java @@ -0,0 +1,29 @@ +package run.halo.app.plugin; + +/** + * Plugin constants. + * + * @author guqing + * @since 2.0.0 + */ +public interface PluginConst { + /** + * Plugin metadata labels key. + */ + String PLUGIN_NAME_LABEL_NAME = "plugin.halo.run/plugin-name"; + + String SYSTEM_PLUGIN_NAME = "system"; + + String RELOAD_ANNO = "plugin.halo.run/reload"; + + String REQUEST_TO_UNLOAD_LABEL = "plugin.halo.run/request-to-unload"; + + String PLUGIN_PATH = "plugin.halo.run/plugin-path"; + + String RUNTIME_MODE_ANNO = "plugin.halo.run/runtime-mode"; + + static String assetsRoutePrefix(String pluginName) { + return "/plugins/" + pluginName + "/assets/"; + } + +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginControllerManager.java b/application/src/main/java/run/halo/app/plugin/PluginControllerManager.java new file mode 100644 index 0000000..cc3a2cb --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginControllerManager.java @@ -0,0 +1,49 @@ +package run.halo.app.plugin; + +import static org.springframework.core.ResolvableType.forClassWithGenerics; + +import java.util.concurrent.ConcurrentHashMap; +import org.springframework.context.event.EventListener; +import reactor.core.Disposable; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.plugin.event.SpringPluginStartedEvent; +import run.halo.app.plugin.event.SpringPluginStoppingEvent; + +public class PluginControllerManager { + + private final ConcurrentHashMap controllers; + + private final ExtensionClient client; + + public PluginControllerManager(ExtensionClient client) { + this.client = client; + controllers = new ConcurrentHashMap<>(); + } + + @EventListener + public void onApplicationEvent(SpringPluginStartedEvent event) { + event.getSpringPlugin().getApplicationContext() + .>getBeanProvider( + forClassWithGenerics(Reconciler.class, Reconciler.Request.class)) + .orderedStream() + .forEach(this::start); + } + + @EventListener + public void onApplicationEvent(SpringPluginStoppingEvent event) throws Exception { + controllers.values() + .forEach(Disposable::dispose); + controllers.clear(); + } + + private void start(Reconciler reconciler) { + var builder = new ControllerBuilder(reconciler, client); + var controller = reconciler.setupWith(builder); + controllers.put(reconciler.getClass().getName(), controller); + controller.start(); + } + +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginDevelopmentInitializer.java b/application/src/main/java/run/halo/app/plugin/PluginDevelopmentInitializer.java new file mode 100644 index 0000000..20aa4da --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginDevelopmentInitializer.java @@ -0,0 +1,66 @@ +package run.halo.app.plugin; + +import static run.halo.app.extension.MetadataUtil.nullSafeAnnotations; + +import java.nio.file.Path; +import java.time.Duration; +import lombok.extern.slf4j.Slf4j; +import org.pf4j.PluginManager; +import org.springframework.boot.context.event.ApplicationReadyEvent; +import org.springframework.context.ApplicationListener; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.Plugin; +import run.halo.app.extension.ReactiveExtensionClient; + +/** + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class PluginDevelopmentInitializer implements ApplicationListener { + + private final PluginManager pluginManager; + + private final PluginProperties pluginProperties; + + private final ReactiveExtensionClient extensionClient; + + public PluginDevelopmentInitializer(PluginManager pluginManager, + PluginProperties pluginProperties, ReactiveExtensionClient extensionClient) { + this.pluginManager = pluginManager; + this.pluginProperties = pluginProperties; + this.extensionClient = extensionClient; + } + + @Override + public void onApplicationEvent(@NonNull ApplicationReadyEvent ignored) { + if (!pluginManager.isDevelopment()) { + return; + } + createFixedPluginIfNecessary(); + } + + private void createFixedPluginIfNecessary() { + for (Path path : pluginProperties.getFixedPluginPath()) { + Plugin plugin = new YamlPluginFinder().find(path); + extensionClient.fetch(Plugin.class, plugin.getMetadata().getName()) + .flatMap(persistent -> { + plugin.getMetadata().setVersion(persistent.getMetadata().getVersion()); + nullSafeAnnotations(plugin).put(PluginConst.RUNTIME_MODE_ANNO, "dev"); + return extensionClient.update(plugin); + }) + .switchIfEmpty(Mono.defer(() -> { + nullSafeAnnotations(plugin).put(PluginConst.RUNTIME_MODE_ANNO, "dev"); + return extensionClient.create(plugin); + })) + .retryWhen(Retry.backoff(10, Duration.ofMillis(100)) + .filter(t -> t instanceof OptimisticLockingFailureException)) + .block(); + } + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginExtensionLoaderUtils.java b/application/src/main/java/run/halo/app/plugin/PluginExtensionLoaderUtils.java new file mode 100644 index 0000000..362237c --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginExtensionLoaderUtils.java @@ -0,0 +1,60 @@ +package run.halo.app.plugin; + +import java.io.FileNotFoundException; +import java.io.IOException; +import java.net.URLClassLoader; +import java.util.Objects; +import java.util.function.Predicate; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.core.io.Resource; +import org.springframework.core.io.support.PathMatchingResourcePatternResolver; +import org.springframework.data.util.Predicates; +import run.halo.app.core.extension.Setting; +import run.halo.app.extension.Unstructured; + +@Slf4j +public class PluginExtensionLoaderUtils { + static final String EXTENSION_LOCATION_PATTERN = "classpath:extensions/*.{ext:yaml|yml}"; + + public static Predicate isSetting(String settingName) { + if (StringUtils.isBlank(settingName)) { + return Predicates.isFalse(); + } + var settingGk = Setting.GVK.groupKind(); + return unstructured -> { + var gk = unstructured.groupVersionKind().groupKind(); + var name = unstructured.getMetadata().getName(); + return Objects.equals(settingName, name) && Objects.equals(settingGk, gk); + }; + } + + public static Resource[] lookupExtensions(ClassLoader classLoader) { + if (log.isDebugEnabled()) { + log.debug("Trying to lookup extensions from {}", classLoader); + } + if (classLoader instanceof URLClassLoader urlClassLoader) { + var urls = urlClassLoader.getURLs(); + // The parent class loader must be null here because we don't want to + // get any resources from parent class loader. + classLoader = new URLClassLoader(urls, null); + } + var resolver = new PathMatchingResourcePatternResolver(classLoader); + try { + var resources = resolver.getResources(EXTENSION_LOCATION_PATTERN); + if (log.isDebugEnabled()) { + log.debug("Looked up {} resources(s) from {}", resources.length, classLoader); + } + return resources; + } catch (FileNotFoundException ignored) { + // Ignore the exception only if extensions folder was not found. + } catch (IOException e) { + throw new RuntimeException(String.format(""" + Failed to get extension resources while resolving plugin setting \ + in class loader %s.\ + """, classLoader), e); + } + return new Resource[] {}; + } + +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginGetter.java b/application/src/main/java/run/halo/app/plugin/PluginGetter.java new file mode 100644 index 0000000..3f5b660 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginGetter.java @@ -0,0 +1,24 @@ +package run.halo.app.plugin; + +import run.halo.app.core.extension.Plugin; +import run.halo.app.infra.exception.NotFoundException; + +/** + * An interface to get {@link Plugin} by name. + * + * @author guqing + * @since 2.17.0 + */ +@FunctionalInterface +public interface PluginGetter { + + /** + * Get plugin by name. + * + * @param name plugin name must not be null + * @return plugin + * @throws IllegalArgumentException if plugin name is null + * @throws NotFoundException if plugin not found + */ + Plugin getPlugin(String name); +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginNotFoundException.java b/application/src/main/java/run/halo/app/plugin/PluginNotFoundException.java new file mode 100644 index 0000000..da7b262 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginNotFoundException.java @@ -0,0 +1,19 @@ +package run.halo.app.plugin; + +import run.halo.app.infra.exception.NotFoundException; + +/** + * Exception for plugin not found. + * + * @author guqing + * @since 2.0.0 + */ +public class PluginNotFoundException extends NotFoundException { + public PluginNotFoundException(String message) { + super(message); + } + + public PluginNotFoundException(Throwable cause) { + super(cause); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginProperties.java b/application/src/main/java/run/halo/app/plugin/PluginProperties.java new file mode 100644 index 0000000..9f88115 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginProperties.java @@ -0,0 +1,63 @@ +package run.halo.app.plugin; + +import java.nio.file.Path; +import java.util.ArrayList; +import java.util.List; +import lombok.Data; +import org.pf4j.RuntimeMode; +import org.springframework.boot.context.properties.ConfigurationProperties; + +/** + * Properties for plugin. + * + * @author guqing + * @see PluginAutoConfiguration + */ +@Data +@ConfigurationProperties(prefix = "halo.plugin") +public class PluginProperties { + public static final String GRADLE_LIBS_DIR = "build/libs"; + + /** + * Auto start plugin when main app is ready. + */ + private boolean autoStartPlugin = true; + + /** + * The default plugin path is obtained through file scanning. + * In the development mode, you can specify the plugin path as the project directory. + */ + private List fixedPluginPath = new ArrayList<>(); + + /** + * Plugins disabled by default. + */ + private String[] disabledPlugins = new String[0]; + + /** + * Plugins enabled by default, prior to `disabledPlugins`. + */ + private String[] enabledPlugins = new String[0]; + + /** + * Set to true to allow requires expression to be exactly x.y.z. The default is false, meaning + * that using an exact version x.y.z will implicitly mean the same as >=x.y.z. + */ + private boolean exactVersionAllowed = false; + + /** + * Extended Plugin Class Directory. + */ + private List classesDirectories = new ArrayList<>(); + + /** + * Extended Plugin Jar Directory. + */ + private List libDirectories = new ArrayList<>(List.of(GRADLE_LIBS_DIR)); + + /** + * Runtime Mode：development/deployment. + */ + private RuntimeMode runtimeMode = RuntimeMode.DEPLOYMENT; + +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginRequestMappingHandlerMapping.java b/application/src/main/java/run/halo/app/plugin/PluginRequestMappingHandlerMapping.java new file mode 100644 index 0000000..b8a273c --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginRequestMappingHandlerMapping.java @@ -0,0 +1,137 @@ +package run.halo.app.plugin; + +import java.lang.reflect.Method; +import java.util.Arrays; +import java.util.Collections; +import java.util.List; +import java.util.Map; +import java.util.function.Function; +import java.util.stream.Collectors; +import org.springframework.aop.support.AopUtils; +import org.springframework.core.MethodIntrospector; +import org.springframework.stereotype.Controller; +import org.springframework.util.Assert; +import org.springframework.util.ClassUtils; +import org.springframework.util.LinkedMultiValueMap; +import org.springframework.util.MultiValueMap; +import org.springframework.util.StringUtils; +import org.springframework.web.bind.annotation.RequestMapping; +import org.springframework.web.reactive.result.method.RequestMappingInfo; +import org.springframework.web.reactive.result.method.RequestMappingInfoHandlerMapping; +import org.springframework.web.reactive.result.method.annotation.RequestMappingHandlerMapping; +import run.halo.app.extension.GroupVersion; + +/** + * An extension of {@link RequestMappingInfoHandlerMapping} that creates + * {@link RequestMappingInfo} instances from class-level and method-level + * {@link RequestMapping} annotations used by plugin. + * + * @author guqing + * @since 2.0.0 + */ +public class PluginRequestMappingHandlerMapping extends RequestMappingHandlerMapping { + + private final MultiValueMap pluginMappingInfo = + new LinkedMultiValueMap<>(); + + @Override + protected void initHandlerMethods() { + // Parent method will scan beans in the ApplicationContext + // detect and register handler methods. + // but this is superfluous for this class. + } + + /** + * Register handler methods according to the plugin id and the controller(annotated + * {@link Controller}) bean. + * + * @param pluginId plugin id to be registered + * @param handler controller bean + */ + public void registerHandlerMethods(String pluginId, Object handler) { + Class handlerType = (handler instanceof String beanName + ? obtainApplicationContext().getType(beanName) : handler.getClass()); + + if (handlerType != null) { + final Class userType = ClassUtils.getUserClass(handlerType); + Map methods = MethodIntrospector.selectMethods(userType, + (MethodIntrospector.MetadataLookup) + method -> getPluginMappingForMethod(pluginId, method, userType)); + if (logger.isTraceEnabled()) { + logger.trace(formatMappings(userType, methods)); + } else if (mappingsLogger.isDebugEnabled()) { + mappingsLogger.debug(formatMappings(userType, methods)); + } + methods.forEach((method, mapping) -> { + Method invocableMethod = AopUtils.selectInvocableMethod(method, userType); + registerHandlerMethod(handler, invocableMethod, mapping); + pluginMappingInfo.add(pluginId, mapping); + }); + } + } + + private String formatMappings(Class userType, Map methods) { + String packageName = ClassUtils.getPackageName(userType); + String formattedType = (StringUtils.hasText(packageName) + ? Arrays.stream(packageName.split("\\.")) + .map(packageSegment -> packageSegment.substring(0, 1)) + .collect(Collectors.joining(".", "", "." + userType.getSimpleName())) : + userType.getSimpleName()); + Function methodFormatter = + method -> Arrays.stream(method.getParameterTypes()) + .map(Class::getSimpleName) + .collect(Collectors.joining(",", "(", ")")); + return methods.entrySet().stream() + .map(e -> { + Method method = e.getKey(); + return e.getValue() + ": " + method.getName() + methodFormatter.apply(method); + }) + .collect(Collectors.joining("\n\t", "\n\t" + formattedType + ":" + "\n\t", "")); + } + + /** + * Remove handler methods and mapping based on plugin id. + * + * @param pluginId plugin id + */ + public void unregister(String pluginId) { + Assert.notNull(pluginId, "The pluginId must not be null."); + if (!pluginMappingInfo.containsKey(pluginId)) { + return; + } + pluginMappingInfo.remove(pluginId).forEach(this::unregisterMapping); + } + + protected List getMappings(String pluginId) { + List requestMappingInfos = pluginMappingInfo.get(pluginId); + if (requestMappingInfos == null) { + return Collections.emptyList(); + } + return List.copyOf(requestMappingInfos); + } + + protected RequestMappingInfo getPluginMappingForMethod(String pluginId, + Method method, Class handlerType) { + RequestMappingInfo info = super.getMappingForMethod(method, handlerType); + if (info != null) { + ApiVersion apiVersion = handlerType.getAnnotation(ApiVersion.class); + if (apiVersion == null) { + return info; + } + info = RequestMappingInfo.paths(buildPrefix(pluginId, apiVersion.value())).build() + .combine(info); + } + return info; + } + + protected String buildPrefix(String pluginName, String apiVersion) { + GroupVersion groupVersion = GroupVersion.parseAPIVersion(apiVersion); + if (StringUtils.hasText(groupVersion.group())) { + // apis/{group}/{version} + return String.format("/apis/%s/%s", groupVersion.group(), groupVersion.version()); + } + // apis/api.plugin.halo.run/{version}/plugins/{pluginName} + return String.format("/apis/api.plugin.halo.run/%s/plugins/%s", groupVersion.version(), + pluginName); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginRouterFunctionRegistry.java b/application/src/main/java/run/halo/app/plugin/PluginRouterFunctionRegistry.java new file mode 100644 index 0000000..070a738 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginRouterFunctionRegistry.java @@ -0,0 +1,12 @@ +package run.halo.app.plugin; + +import java.util.Collection; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; + +public interface PluginRouterFunctionRegistry { + void register(Collection> routerFunctions); + + void unregister(Collection> routerFunctions); + +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginSharedEventDelegator.java b/application/src/main/java/run/halo/app/plugin/PluginSharedEventDelegator.java new file mode 100644 index 0000000..6ed66f2 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginSharedEventDelegator.java @@ -0,0 +1,44 @@ +package run.halo.app.plugin; + +import java.util.Objects; +import lombok.Getter; +import org.springframework.context.ApplicationEvent; +import org.springframework.lang.NonNull; + +/** + * The event that delegates to another shared event published by a plugin. + * + * @author johnniang + * @since 2.17 + */ +@Getter +class PluginSharedEventDelegator extends ApplicationEvent { + + /** + * The delegate event. + */ + private final ApplicationEvent delegate; + + public PluginSharedEventDelegator(@NonNull Object source, @NonNull ApplicationEvent delegate) { + super(source); + this.delegate = delegate; + } + + @Override + public boolean equals(Object o) { + if (this == o) { + return true; + } + if (o == null || getClass() != o.getClass()) { + return false; + } + + PluginSharedEventDelegator that = (PluginSharedEventDelegator) o; + return Objects.equals(delegate, that.delegate); + } + + @Override + public int hashCode() { + return Objects.hashCode(delegate); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginStartedListener.java b/application/src/main/java/run/halo/app/plugin/PluginStartedListener.java new file mode 100644 index 0000000..9917847 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginStartedListener.java @@ -0,0 +1,85 @@ +package run.halo.app.plugin; + +import static run.halo.app.plugin.PluginConst.PLUGIN_NAME_LABEL_NAME; +import static run.halo.app.plugin.PluginExtensionLoaderUtils.isSetting; +import static run.halo.app.plugin.PluginExtensionLoaderUtils.lookupExtensions; + +import java.util.HashMap; +import lombok.extern.slf4j.Slf4j; +import org.springframework.context.event.EventListener; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Plugin; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Unstructured; +import run.halo.app.infra.utils.YamlUnstructuredLoader; +import run.halo.app.plugin.event.HaloPluginStartedEvent; + +/** + * TODO Optimized Unstructured loading. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +public class PluginStartedListener { + + private final ReactiveExtensionClient client; + + public PluginStartedListener(ReactiveExtensionClient extensionClient) { + this.client = extensionClient; + } + + private Mono createOrUpdate(Unstructured unstructured) { + var name = unstructured.getMetadata().getName(); + return client.fetch(unstructured.groupVersionKind(), name) + .doOnNext(old -> { + unstructured.getMetadata().setVersion(old.getMetadata().getVersion()); + }) + .map(ignored -> unstructured) + .flatMap(client::update) + .switchIfEmpty(Mono.defer(() -> client.create(unstructured))); + } + + @EventListener + public Mono onApplicationEvent(HaloPluginStartedEvent event) { + var pluginWrapper = event.getPlugin(); + var p = pluginWrapper.getPlugin(); + if (!(p instanceof SpringPlugin springPlugin)) { + return Mono.empty(); + } + var applicationContext = springPlugin.getApplicationContext(); + if (!(applicationContext instanceof PluginApplicationContext pluginApplicationContext)) { + return Mono.empty(); + } + var pluginName = pluginWrapper.getPluginId(); + + return client.get(Plugin.class, pluginName) + .flatMap(plugin -> Flux.fromStream( + () -> { + log.debug("Collecting extensions for plugin {}", pluginName); + var resources = lookupExtensions(pluginWrapper.getPluginClassLoader()); + var loader = new YamlUnstructuredLoader(resources); + var settingName = plugin.getSpec().getSettingName(); + // TODO The load method may be over memory consumption. + return loader.load() + .stream() + .filter(isSetting(settingName).negate()); + }) + .doOnNext(unstructured -> { + var name = unstructured.getMetadata().getName(); + pluginApplicationContext + .addExtensionMapping(unstructured.groupVersionKind(), name); + var labels = unstructured.getMetadata().getLabels(); + if (labels == null) { + labels = new HashMap<>(); + unstructured.getMetadata().setLabels(labels); + } + labels.put(PLUGIN_NAME_LABEL_NAME, plugin.getMetadata().getName()); + }) + .flatMap(this::createOrUpdate) + .then()); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginStartingError.java b/application/src/main/java/run/halo/app/plugin/PluginStartingError.java new file mode 100644 index 0000000..873b0e8 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginStartingError.java @@ -0,0 +1,22 @@ +package run.halo.app.plugin; + +import java.io.Serializable; +import lombok.AllArgsConstructor; +import lombok.Data; + +/** + *

Use this class to collect error information when the plugin enables an error.

+ * + * @author guqing + * @since 2.0.0 + */ +@Data +@AllArgsConstructor(staticName = "of") +public class PluginStartingError implements Serializable { + + private String pluginId; + + private String message; + + private String devMessage; +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginUtils.java b/application/src/main/java/run/halo/app/plugin/PluginUtils.java new file mode 100644 index 0000000..f9fcb66 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginUtils.java @@ -0,0 +1,35 @@ +package run.halo.app.plugin; + +import java.util.Objects; +import lombok.experimental.UtilityClass; +import org.apache.commons.lang3.StringUtils; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerWebInputException; +import run.halo.app.core.extension.Plugin; + +@UtilityClass +public class PluginUtils { + + public static String generateFileName(Plugin plugin) { + Assert.notNull(plugin, "The plugin must not be null."); + Assert.notNull(plugin.getMetadata(), "The plugin metadata must not be null."); + Assert.notNull(plugin.getSpec(), "The plugin spec must not be null."); + String version = plugin.getSpec().getVersion(); + if (StringUtils.isBlank(version)) { + throw new ServerWebInputException("The plugin version must not be blank."); + } + return String.format("%s-%s.jar", plugin.getMetadata().getName(), version); + } + + /** + * Determine if the plugin is in development mode. Currently, we detect it from annotations. + * + * @param plugin is a manifest about plugin. + * @return true if the plugin is in development mode; false otherwise. + */ + public static boolean isDevelopmentMode(Plugin plugin) { + var annotations = plugin.getMetadata().getAnnotations(); + return annotations != null + && Objects.equals("dev", annotations.get(PluginConst.RUNTIME_MODE_ANNO)); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/PluginsRootGetterImpl.java b/application/src/main/java/run/halo/app/plugin/PluginsRootGetterImpl.java new file mode 100644 index 0000000..7c37a32 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PluginsRootGetterImpl.java @@ -0,0 +1,28 @@ +package run.halo.app.plugin; + +import java.nio.file.Path; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import run.halo.app.infra.properties.HaloProperties; + +/** + * Default implementation of {@link PluginsRootGetter}. + * + * @author johnniang + */ +@Component +public class PluginsRootGetterImpl implements PluginsRootGetter { + + private final HaloProperties haloProperties; + + public PluginsRootGetterImpl(HaloProperties haloProperties) { + this.haloProperties = haloProperties; + } + + @Override + @NonNull + public Path get() { + return haloProperties.getWorkDir().resolve("plugins"); + } + +} diff --git a/application/src/main/java/run/halo/app/plugin/PropertyPluginStatusProvider.java b/application/src/main/java/run/halo/app/plugin/PropertyPluginStatusProvider.java new file mode 100644 index 0000000..635f009 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/PropertyPluginStatusProvider.java @@ -0,0 +1,60 @@ +package run.halo.app.plugin; + +import java.util.ArrayList; +import java.util.Arrays; +import java.util.List; +import org.pf4j.PluginStatusProvider; +import org.thymeleaf.util.ArrayUtils; + +/** + * An implementation for PluginStatusProvider. The enabled plugins are read + * from {@code halo.plugin.enabled-plugins} properties in application.yaml + * and the disabled plugins are read from {@code halo.plugin.disabled-plugins} + * in application.yaml. + * + * @author guqing + * @since 2.0.0 + */ +public class PropertyPluginStatusProvider implements PluginStatusProvider { + + private final List enabledPlugins; + private final List disabledPlugins; + + public PropertyPluginStatusProvider(PluginProperties pluginProperties) { + this.enabledPlugins = pluginProperties.getEnabledPlugins() != null + ? Arrays.asList(pluginProperties.getEnabledPlugins()) : new ArrayList<>(); + this.disabledPlugins = pluginProperties.getDisabledPlugins() != null + ? Arrays.asList(pluginProperties.getDisabledPlugins()) : new ArrayList<>(); + } + + public static boolean isPropertySet(PluginProperties pluginProperties) { + return !ArrayUtils.isEmpty(pluginProperties.getEnabledPlugins()) + && !ArrayUtils.isEmpty(pluginProperties.getDisabledPlugins()); + } + + @Override + public boolean isPluginDisabled(String pluginId) { + if (disabledPlugins.contains(pluginId)) { + return true; + } + return !enabledPlugins.isEmpty() && !enabledPlugins.contains(pluginId); + } + + @Override + public void disablePlugin(String pluginId) { + if (isPluginDisabled(pluginId)) { + return; + } + disabledPlugins.add(pluginId); + enabledPlugins.remove(pluginId); + } + + @Override + public void enablePlugin(String pluginId) { + if (!isPluginDisabled(pluginId)) { + return; + } + enabledPlugins.add(pluginId); + disabledPlugins.remove(pluginId); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/SharedApplicationContextFactory.java b/application/src/main/java/run/halo/app/plugin/SharedApplicationContextFactory.java new file mode 100644 index 0000000..90b1461 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/SharedApplicationContextFactory.java @@ -0,0 +1,77 @@ +package run.halo.app.plugin; + +import org.springframework.cache.CacheManager; +import org.springframework.context.ApplicationContext; +import org.springframework.context.support.GenericApplicationContext; +import org.springframework.security.web.server.context.ServerSecurityContextRepository; +import run.halo.app.content.PostContentService; +import run.halo.app.core.extension.service.AttachmentService; +import run.halo.app.extension.DefaultSchemeManager; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.BackupRootGetter; +import run.halo.app.infra.ExternalLinkProcessor; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.notification.NotificationCenter; +import run.halo.app.notification.NotificationReasonEmitter; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.security.LoginHandlerEnhancer; + +/** + * Utility for creating shared application context. + * + * @author guqing + * @author johnniang + * @since 2.12.0 + */ +public enum SharedApplicationContextFactory { + ; + + public static ApplicationContext create(ApplicationContext rootContext) { + // TODO Optimize creation timing + var sharedContext = new GenericApplicationContext(); + sharedContext.registerShutdownHook(); + + var beanFactory = sharedContext.getBeanFactory(); + + // register shared object here + var extensionClient = rootContext.getBean(ExtensionClient.class); + var reactiveExtensionClient = rootContext.getBean(ReactiveExtensionClient.class); + beanFactory.registerSingleton("extensionClient", extensionClient); + beanFactory.registerSingleton("reactiveExtensionClient", reactiveExtensionClient); + + DefaultSchemeManager defaultSchemeManager = + rootContext.getBean(DefaultSchemeManager.class); + beanFactory.registerSingleton("schemeManager", defaultSchemeManager); + beanFactory.registerSingleton("externalUrlSupplier", + rootContext.getBean(ExternalUrlSupplier.class)); + beanFactory.registerSingleton("serverSecurityContextRepository", + rootContext.getBean(ServerSecurityContextRepository.class)); + beanFactory.registerSingleton("attachmentService", + rootContext.getBean(AttachmentService.class)); + beanFactory.registerSingleton("backupRootGetter", + rootContext.getBean(BackupRootGetter.class)); + beanFactory.registerSingleton("notificationReasonEmitter", + rootContext.getBean(NotificationReasonEmitter.class)); + beanFactory.registerSingleton("notificationCenter", + rootContext.getBean(NotificationCenter.class)); + beanFactory.registerSingleton("externalLinkProcessor", + rootContext.getBean(ExternalLinkProcessor.class)); + beanFactory.registerSingleton("postContentService", + rootContext.getBean(PostContentService.class)); + beanFactory.registerSingleton("cacheManager", + rootContext.getBean(CacheManager.class)); + beanFactory.registerSingleton("loginHandlerEnhancer", + rootContext.getBean(LoginHandlerEnhancer.class)); + rootContext.getBeanProvider(PluginsRootGetter.class) + .ifUnique(pluginsRootGetter -> + beanFactory.registerSingleton("pluginsRootGetter", pluginsRootGetter) + ); + beanFactory.registerSingleton("extensionGetter", + rootContext.getBean(ExtensionGetter.class)); + // TODO add more shared instance here + + sharedContext.refresh(); + return sharedContext; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/SharedEventDispatcher.java b/application/src/main/java/run/halo/app/plugin/SharedEventDispatcher.java new file mode 100644 index 0000000..5c342f3 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/SharedEventDispatcher.java @@ -0,0 +1,50 @@ +package run.halo.app.plugin; + +import java.util.ArrayList; +import org.pf4j.PluginManager; +import org.springframework.context.ApplicationEvent; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.context.Lifecycle; +import org.springframework.context.event.EventListener; +import org.springframework.core.annotation.AnnotationUtils; +import org.springframework.stereotype.Component; + +@Component +public class SharedEventDispatcher { + + private final PluginManager pluginManager; + + private final ApplicationEventPublisher publisher; + + public SharedEventDispatcher(PluginManager pluginManager, ApplicationEventPublisher publisher) { + this.pluginManager = pluginManager; + this.publisher = publisher; + } + + @EventListener(ApplicationEvent.class) + void onApplicationEvent(ApplicationEvent event) { + if (AnnotationUtils.findAnnotation(event.getClass(), SharedEvent.class) == null) { + return; + } + // we should copy the plugins list to avoid ConcurrentModificationException + var startedPlugins = new ArrayList<>(pluginManager.getStartedPlugins()); + // broadcast event to all started plugins except the publisher + for (var startedPlugin : startedPlugins) { + var plugin = startedPlugin.getPlugin(); + if (!(plugin instanceof SpringPlugin springPlugin)) { + continue; + } + var context = springPlugin.getApplicationContext(); + // make sure the context is running before publishing the event + if (context instanceof Lifecycle lifecycle && lifecycle.isRunning()) { + context.publishEvent(new HaloSharedEventDelegator(this, event)); + } + } + } + + @EventListener(PluginSharedEventDelegator.class) + void onApplicationEvent(PluginSharedEventDelegator event) { + publisher.publishEvent(event.getDelegate()); + } + +} diff --git a/application/src/main/java/run/halo/app/plugin/SpringComponentsFinder.java b/application/src/main/java/run/halo/app/plugin/SpringComponentsFinder.java new file mode 100644 index 0000000..ff9f449 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/SpringComponentsFinder.java @@ -0,0 +1,86 @@ +package run.halo.app.plugin; + +import java.io.IOException; +import java.io.InputStream; +import java.io.InputStreamReader; +import java.io.Reader; +import java.nio.charset.StandardCharsets; +import java.util.HashSet; +import java.util.Map; +import java.util.Set; +import java.util.concurrent.ConcurrentHashMap; +import lombok.extern.slf4j.Slf4j; +import org.pf4j.AbstractExtensionFinder; +import org.pf4j.PluginManager; +import org.pf4j.PluginState; +import org.pf4j.PluginStateEvent; +import org.pf4j.PluginWrapper; +import org.pf4j.processor.ExtensionStorage; + +/** + *

The spring component finder. it will read {@code META-INF/plugin-components.idx} file in + * plugin to obtain the class name that needs to be registered in the plugin IOC.

+ *

Reading index files directly is much faster than dynamically scanning class components when + * the plugin is enabled.

+ * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +public class SpringComponentsFinder extends AbstractExtensionFinder { + public static final String EXTENSIONS_RESOURCE = "META-INF/plugin-components.idx"; + + public SpringComponentsFinder(PluginManager pluginManager) { + super(pluginManager); + entries = new ConcurrentHashMap<>(); + } + + @Override + public Map> readClasspathStorages() { + throw new UnsupportedOperationException(); + } + + @Override + public Map> readPluginsStorages() { + throw new UnsupportedOperationException(); + } + + private Set readPluginStorage(PluginWrapper pluginWrapper) { + var pluginId = pluginWrapper.getPluginId(); + log.debug("Reading extensions storage from plugin '{}'", pluginId); + var bucket = new HashSet(); + try { + log.debug("Read '{}'", EXTENSIONS_RESOURCE); + var classLoader = pluginWrapper.getPluginClassLoader(); + try (var resourceStream = classLoader.getResourceAsStream(EXTENSIONS_RESOURCE)) { + if (resourceStream == null) { + log.debug("Cannot find '{}'", EXTENSIONS_RESOURCE); + } else { + collectExtensions(resourceStream, bucket); + } + } + debugExtensions(bucket); + } catch (IOException e) { + log.error("Failed to read components from " + EXTENSIONS_RESOURCE, e); + } + return bucket; + } + + private void collectExtensions(InputStream inputStream, Set bucket) throws IOException { + try (Reader reader = new InputStreamReader(inputStream, StandardCharsets.UTF_8)) { + ExtensionStorage.read(reader, bucket); + } + } + + @Override + public void pluginStateChanged(PluginStateEvent event) { + var pluginState = event.getPluginState(); + String pluginId = event.getPlugin().getPluginId(); + if (pluginState == PluginState.UNLOADED) { + entries.remove(pluginId); + } else if (pluginState == PluginState.CREATED || pluginState == PluginState.RESOLVED) { + entries.computeIfAbsent(pluginId, id -> readPluginStorage(event.getPlugin())); + } + } + +} diff --git a/application/src/main/java/run/halo/app/plugin/SpringExtensionFactory.java b/application/src/main/java/run/halo/app/plugin/SpringExtensionFactory.java new file mode 100644 index 0000000..dc769d8 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/SpringExtensionFactory.java @@ -0,0 +1,133 @@ +package run.halo.app.plugin; + +import java.lang.reflect.Constructor; +import java.lang.reflect.InvocationTargetException; +import java.util.Comparator; +import java.util.Optional; +import java.util.stream.Stream; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.pf4j.Extension; +import org.pf4j.ExtensionFactory; +import org.pf4j.PluginManager; +import org.pf4j.PluginWrapper; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.beans.factory.config.AutowireCapableBeanFactory; +import org.springframework.context.ApplicationContext; +import org.springframework.lang.Nullable; + +/** + *

Basic implementation of an extension factory.

+ *

Uses Springs {@link AutowireCapableBeanFactory} to instantiate a given extension class.

+ *

All kinds of {@link Autowired} are supported (see example below). If no + * {@link ApplicationContext} is + * available (this is the case if either the related plugin is not a {@link BasePlugin} or the + * given plugin manager is not a {@link HaloPluginManager}), standard Java reflection will be used + * to instantiate an extension.

+ *

Creates a new extension instance every time a request is done.

+ * Example of supported autowire modes: + * 
{@code
+ *     @Extension
+ *     public class Foo implements ExtensionPoint {
+ *
+ *         private final Bar bar;       // Constructor injection
+ *         private Baz baz;             // Setter injection
+ *         @Autowired
+ *         private Qux qux;             // Field injection
+ *
+ *         @Autowired
+ *         public Foo(final Bar bar) {
+ *             this.bar = bar;
+ *         }
+ *
+ *         @Autowired
+ *         public void setBaz(final Baz baz) {
+ *             this.baz = baz;
+ *         }
+ *     }
+ * }
+ * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@RequiredArgsConstructor +public class SpringExtensionFactory implements ExtensionFactory { + + /** + * The plugin manager is used for retrieving a plugin from a given extension class and as a + * fallback supplier of an application context. + */ + protected final PluginManager pluginManager; + + @Override + @Nullable + public T create(Class extensionClass) { + return getPluginApplicationContextBy(extensionClass) + .map(context -> context.getBean(extensionClass)) + .orElseGet(() -> createWithoutSpring(extensionClass)); + } + + /** + * Creates an instance of the given class object by using standard Java reflection. + * + * @param extensionClass The class annotated with {@code @}{@link Extension}. + * @param The type for that an instance should be created. + * @return an instantiated extension. + * @throws IllegalArgumentException if the given class object has no public constructor. + * @throws RuntimeException if the called constructor cannot be instantiated with {@code + * null}-parameters. + */ + @SuppressWarnings("unchecked") + protected T createWithoutSpring(final Class extensionClass) + throws IllegalArgumentException { + final Constructor constructor = + getPublicConstructorWithShortestParameterList(extensionClass) + // An extension class is required to have at least one public constructor. + .orElseThrow( + () -> new IllegalArgumentException("Extension class '" + nameOf(extensionClass) + + "' must have at least one public constructor.")); + try { + if (log.isTraceEnabled()) { + log.trace("Instantiate '" + nameOf(extensionClass) + "' by calling '" + constructor + + "'with standard Java reflection."); + } + // Creating the instance by calling the constructor with null-parameters (if there + // are any). + return (T) constructor.newInstance(nullParameters(constructor)); + } catch (InstantiationException | IllegalAccessException | InvocationTargetException ex) { + // If one of these exceptions is thrown it it most likely because of NPE inside the + // called constructor and + // not the reflective call itself as we precisely searched for a fitting constructor. + log.error(ex.getMessage(), ex); + throw new RuntimeException( + "Most likely this exception is thrown because the called constructor (" + + constructor + ")" + + " cannot handle 'null' parameters. Original message was: " + + ex.getMessage(), ex); + } + } + + private Optional> getPublicConstructorWithShortestParameterList( + final Class extensionClass) { + return Stream.of(extensionClass.getConstructors()) + .min(Comparator.comparing(Constructor::getParameterCount)); + } + + private Object[] nullParameters(final Constructor constructor) { + return new Object[constructor.getParameterCount()]; + } + + protected Optional getPluginApplicationContextBy( + final Class extensionClass) { + return Optional.ofNullable(this.pluginManager.whichPlugin(extensionClass)) + .map(PluginWrapper::getPlugin) + .filter(SpringPlugin.class::isInstance) + .map(plugin -> (SpringPlugin) plugin) + .map(SpringPlugin::getApplicationContext); + } + + private String nameOf(final Class clazz) { + return clazz.getName(); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/SpringPlugin.java b/application/src/main/java/run/halo/app/plugin/SpringPlugin.java new file mode 100644 index 0000000..0acc144 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/SpringPlugin.java @@ -0,0 +1,103 @@ +package run.halo.app.plugin; + +import org.pf4j.Plugin; +import org.springframework.context.ApplicationContext; +import org.springframework.context.ConfigurableApplicationContext; +import run.halo.app.plugin.event.SpringPluginStartedEvent; +import run.halo.app.plugin.event.SpringPluginStartingEvent; +import run.halo.app.plugin.event.SpringPluginStoppingEvent; + +public class SpringPlugin extends Plugin { + + private ApplicationContext context; + + private Plugin delegate; + + private final PluginApplicationContextFactory contextFactory; + + private final PluginContext pluginContext; + + public SpringPlugin(PluginApplicationContextFactory contextFactory, + PluginContext pluginContext) { + this.contextFactory = contextFactory; + this.pluginContext = pluginContext; + } + + @Override + public void start() { + log.info("Preparing starting plugin {}", pluginContext.getName()); + var pluginId = pluginContext.getName(); + try { + // initialize context + this.context = contextFactory.create(pluginId); + log.info("Application context {} for plugin {} is created", this.context, pluginId); + + var pluginOpt = context.getBeanProvider(Plugin.class) + .stream() + .findFirst(); + log.info("Before publishing plugin starting event for plugin {}", pluginId); + context.publishEvent(new SpringPluginStartingEvent(this, this)); + log.info("After publishing plugin starting event for plugin {}", pluginId); + if (pluginOpt.isPresent()) { + this.delegate = pluginOpt.get(); + log.info("Starting {} for plugin {}", this.delegate, pluginId); + this.delegate.start(); + log.info("Started {} for plugin {}", this.delegate, pluginId); + } + log.info("Before publishing plugin started event for plugin {}", pluginId); + context.publishEvent(new SpringPluginStartedEvent(this, this)); + log.info("After publishing plugin started event for plugin {}", pluginId); + } catch (Throwable t) { + // try to stop plugin for cleaning resources if something went wrong + log.error( + "Cleaning up plugin resources for plugin {} due to not being able to start plugin.", + pluginId); + this.stop(); + // propagate exception to invoker. + throw t; + } + } + + @Override + public void stop() { + try { + if (context != null) { + log.info("Before publishing plugin stopping event for plugin {}", + pluginContext.getName()); + context.publishEvent(new SpringPluginStoppingEvent(this, this)); + log.info("After publishing plugin stopping event for plugin {}", + pluginContext.getName()); + } + if (this.delegate != null) { + log.info("Stopping {} for plugin {}", this.delegate, pluginContext.getName()); + this.delegate.stop(); + log.info("Stopped {} for plugin {}", this.delegate, pluginContext.getName()); + } + } finally { + if (context instanceof ConfigurableApplicationContext configurableContext) { + log.info("Closing plugin context for plugin {}", pluginContext.getName()); + configurableContext.close(); + log.info("Closed plugin context for plugin {}", pluginContext.getName()); + } + // reset application context + log.info("Reset plugin context for plugin {}", pluginContext.getName()); + context = null; + } + } + + @Override + public void delete() { + if (delegate != null) { + delegate.delete(); + } + this.delegate = null; + } + + public ApplicationContext getApplicationContext() { + return context; + } + + public PluginContext getPluginContext() { + return pluginContext; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/SpringPluginFactory.java b/application/src/main/java/run/halo/app/plugin/SpringPluginFactory.java new file mode 100644 index 0000000..8560ad6 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/SpringPluginFactory.java @@ -0,0 +1,42 @@ +package run.halo.app.plugin; + +import lombok.extern.slf4j.Slf4j; +import org.pf4j.Plugin; +import org.pf4j.PluginFactory; +import org.pf4j.PluginWrapper; + +/** + * The default implementation for PluginFactory. + *

Get a {@link BasePlugin} instance from the {@link PluginApplicationContext}.

+ * + * @author guqing + * @author johnniang + * @since 2.0.0 + */ +@Slf4j +public class SpringPluginFactory implements PluginFactory { + + private final PluginApplicationContextFactory contextFactory; + private final PluginGetter pluginGetter; + + public SpringPluginFactory(PluginApplicationContextFactory contextFactory, + PluginGetter pluginGetter) { + this.contextFactory = contextFactory; + this.pluginGetter = pluginGetter; + } + + @Override + public Plugin create(PluginWrapper pluginWrapper) { + var plugin = pluginGetter.getPlugin(pluginWrapper.getPluginId()); + var pluginContext = PluginContext.builder() + .name(pluginWrapper.getPluginId()) + .configMapName(plugin.getSpec().getConfigMapName()) + .version(pluginWrapper.getDescriptor().getVersion()) + .runtimeMode(pluginWrapper.getRuntimeMode()) + .build(); + return new SpringPlugin( + contextFactory, + pluginContext + ); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/SpringPluginManager.java b/application/src/main/java/run/halo/app/plugin/SpringPluginManager.java new file mode 100644 index 0000000..9070cb8 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/SpringPluginManager.java @@ -0,0 +1,22 @@ +package run.halo.app.plugin; + +import java.util.List; +import org.pf4j.PluginManager; +import org.pf4j.PluginWrapper; +import org.springframework.context.ApplicationContext; + +public interface SpringPluginManager extends PluginManager { + + ApplicationContext getRootContext(); + + ApplicationContext getSharedContext(); + + /** + * Get all dependents recursively. + * + * @param pluginId plugin id + * @return a list of plugin wrapper. The order of the list is from the farthest dependent to + * the nearest dependent. + */ + List getDependents(String pluginId); +} diff --git a/application/src/main/java/run/halo/app/plugin/YamlPluginDescriptorFinder.java b/application/src/main/java/run/halo/app/plugin/YamlPluginDescriptorFinder.java new file mode 100644 index 0000000..19c76d5 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/YamlPluginDescriptorFinder.java @@ -0,0 +1,77 @@ +package run.halo.app.plugin; + +import java.nio.file.Files; +import java.nio.file.Path; +import java.util.List; +import java.util.stream.Collectors; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.pf4j.DefaultPluginDescriptor; +import org.pf4j.PluginDependency; +import org.pf4j.PluginDescriptor; +import org.pf4j.PluginDescriptorFinder; +import org.pf4j.util.FileUtils; +import org.springframework.util.CollectionUtils; +import run.halo.app.core.extension.Plugin; + +/** + * Find a plugin descriptor for a plugin path. + * + * @author guqing + * @see DefaultPluginDescriptor + * @since 2.0.0 + */ +@Slf4j +public class YamlPluginDescriptorFinder implements PluginDescriptorFinder { + + private final YamlPluginFinder yamlPluginFinder; + + public YamlPluginDescriptorFinder() { + yamlPluginFinder = new YamlPluginFinder(); + } + + @Override + public boolean isApplicable(Path pluginPath) { + return Files.exists(pluginPath) + && (Files.isDirectory(pluginPath) + || FileUtils.isJarFile(pluginPath)); + } + + @Override + public PluginDescriptor find(Path pluginPath) { + Plugin plugin = yamlPluginFinder.find(pluginPath); + return convert(plugin); + } + + public static PluginDescriptor convert(Plugin plugin) { + String pluginId = plugin.getMetadata().getName(); + Plugin.PluginSpec spec = plugin.getSpec(); + Plugin.PluginAuthor author = spec.getAuthor(); + String provider = (author == null ? StringUtils.EMPTY : author.getName()); + + DefaultPluginDescriptor defaultPluginDescriptor = + new DefaultPluginDescriptor(pluginId, + spec.getDescription(), + BasePlugin.class.getName(), + spec.getVersion(), + spec.getRequires(), + provider, + joinLicense(spec.getLicense())); + // add dependencies + spec.getPluginDependencies().forEach((pluginDepName, versionRequire) -> { + PluginDependency dependency = + new PluginDependency(String.format("%s@%s", pluginDepName, versionRequire)); + defaultPluginDescriptor.addDependency(dependency); + }); + return defaultPluginDescriptor; + } + + private static String joinLicense(List licenses) { + if (CollectionUtils.isEmpty(licenses)) { + return StringUtils.EMPTY; + } + return licenses.stream() + .map(Plugin.License::getName) + .collect(Collectors.joining(",")); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/YamlPluginFinder.java b/application/src/main/java/run/halo/app/plugin/YamlPluginFinder.java new file mode 100644 index 0000000..5cdc8f6 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/YamlPluginFinder.java @@ -0,0 +1,128 @@ +package run.halo.app.plugin; + +import java.io.IOException; +import java.nio.file.Files; +import java.nio.file.Path; +import java.util.List; +import lombok.extern.slf4j.Slf4j; +import org.pf4j.DevelopmentPluginClasspath; +import org.pf4j.PluginRuntimeException; +import org.pf4j.util.FileUtils; +import org.springframework.core.io.FileSystemResource; +import org.springframework.core.io.Resource; +import run.halo.app.core.extension.Plugin; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.Unstructured; +import run.halo.app.infra.utils.YamlUnstructuredLoader; + +/** + *

Reading plugin descriptor data from plugin.yaml.

+ * Example: + * 
+ * apiVersion: v1alpha1
+ * kind: Plugin
+ * metadata:
+ *   name: plugin-1
+ *   labels:
+ *     extensions.guqing.xyz/category: attachment
+ * spec:
+ *   # 'version' is a valid semantic version string (see semver.org).
+ *   version: 0.0.1
+ *   requires: ">=2.0.0"
+ *   author: guqing
+ *   logo: example.com/logo.png
+ *   pluginClass: xyz.guqing.plugin.potatoes.PotatoesApp
+ *   pluginDependencies:
+ *    "plugin-2": 1.0.0
+ *   # 'homepage' usually links to the GitHub repository of the plugin
+ *   homepage: example.com
+ *   # 'displayName' explains what the plugin does in only a few words
+ *   displayName: "a name to show"
+ *   description: "Tell me more about this plugin."
+ *   license:
+ *     - name: MIT
+ *
+ * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +public class YamlPluginFinder { + static final DevelopmentPluginClasspath PLUGIN_CLASSPATH = new DevelopmentPluginClasspath(); + public static final String DEFAULT_PROPERTIES_FILE_NAME = "plugin.yaml"; + private final String propertiesFileName; + + public YamlPluginFinder() { + this(DEFAULT_PROPERTIES_FILE_NAME); + } + + public YamlPluginFinder(String propertiesFileName) { + this.propertiesFileName = propertiesFileName; + } + + public Plugin find(Path pluginPath) { + Plugin plugin = readPluginDescriptor(pluginPath); + if (plugin.getStatus() == null) { + Plugin.PluginStatus pluginStatus = new Plugin.PluginStatus(); + pluginStatus.setPhase(Plugin.Phase.PENDING); + pluginStatus.setLoadLocation(pluginPath.toUri()); + plugin.setStatus(pluginStatus); + } + MetadataUtil.nullSafeAnnotations(plugin) + .put(PluginConst.PLUGIN_PATH, pluginPath.toString()); + return plugin; + } + + protected Plugin readPluginDescriptor(Path pluginPath) { + Path propertiesPath = null; + try { + propertiesPath = getManifestPath(pluginPath, propertiesFileName); + if (propertiesPath == null) { + throw new PluginRuntimeException("Cannot find the plugin manifest path"); + } + + log.debug("Lookup plugin descriptor in '{}'", propertiesPath); + if (Files.notExists(propertiesPath)) { + throw new PluginRuntimeException("Cannot find '{}' path", propertiesPath); + } + Resource propertyResource = new FileSystemResource(propertiesPath); + return unstructuredToPlugin(propertyResource); + } finally { + FileUtils.closePath(propertiesPath); + } + } + + protected Plugin unstructuredToPlugin(Resource propertyResource) { + YamlUnstructuredLoader yamlUnstructuredLoader = + new YamlUnstructuredLoader(propertyResource); + List unstructuredList = yamlUnstructuredLoader.load(); + if (unstructuredList.size() != 1) { + throw new PluginRuntimeException("Unable to find plugin descriptor file '{}'", + propertiesFileName); + } + Unstructured unstructured = unstructuredList.get(0); + return Unstructured.OBJECT_MAPPER.convertValue(unstructured, + Plugin.class); + } + + protected Path getManifestPath(Path pluginPath, String propertiesFileName) { + if (Files.isDirectory(pluginPath)) { + for (String location : PLUGIN_CLASSPATH.getClassesDirectories()) { + var path = pluginPath.resolve(location).resolve(propertiesFileName); + Resource propertyResource = new FileSystemResource(path); + if (propertyResource.exists()) { + return path; + } + } + throw new PluginRuntimeException( + "Unable to find plugin descriptor file: " + DEFAULT_PROPERTIES_FILE_NAME); + } else { + // it's a jar file + try { + return FileUtils.getPath(pluginPath, propertiesFileName); + } catch (IOException e) { + throw new PluginRuntimeException(e); + } + } + } +} diff --git a/application/src/main/java/run/halo/app/plugin/event/HaloPluginBeforeStopEvent.java b/application/src/main/java/run/halo/app/plugin/event/HaloPluginBeforeStopEvent.java new file mode 100644 index 0000000..71904d0 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/event/HaloPluginBeforeStopEvent.java @@ -0,0 +1,21 @@ +package run.halo.app.plugin.event; + +import org.pf4j.PluginWrapper; +import org.springframework.context.ApplicationEvent; + +/** + * @author guqing + * @since 2.0.0 + */ +public class HaloPluginBeforeStopEvent extends ApplicationEvent { + private final PluginWrapper plugin; + + public HaloPluginBeforeStopEvent(Object source, PluginWrapper plugin) { + super(source); + this.plugin = plugin; + } + + public PluginWrapper getPlugin() { + return plugin; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/event/HaloPluginStartedEvent.java b/application/src/main/java/run/halo/app/plugin/event/HaloPluginStartedEvent.java new file mode 100644 index 0000000..b2768ab --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/event/HaloPluginStartedEvent.java @@ -0,0 +1,23 @@ +package run.halo.app.plugin.event; + +import lombok.Getter; +import org.pf4j.PluginWrapper; +import org.springframework.context.ApplicationEvent; +import org.springframework.util.Assert; + +/** + * This event will be published to application context once plugin is started. + * + * @author guqing + */ +@Getter +public class HaloPluginStartedEvent extends ApplicationEvent { + + private final PluginWrapper plugin; + + public HaloPluginStartedEvent(Object source, PluginWrapper plugin) { + super(source); + Assert.notNull(plugin, "Plugin must not be null."); + this.plugin = plugin; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/event/HaloPluginStoppedEvent.java b/application/src/main/java/run/halo/app/plugin/event/HaloPluginStoppedEvent.java new file mode 100644 index 0000000..54a3ed4 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/event/HaloPluginStoppedEvent.java @@ -0,0 +1,29 @@ +package run.halo.app.plugin.event; + +import org.pf4j.PluginState; +import org.pf4j.PluginWrapper; +import org.springframework.context.ApplicationEvent; + +/** + * This event will be published to plugin application context once plugin is stopped. + * + * @author guqing + * @date 2021-11-02 + */ +public class HaloPluginStoppedEvent extends ApplicationEvent { + + private final PluginWrapper plugin; + + public HaloPluginStoppedEvent(Object source, PluginWrapper plugin) { + super(source); + this.plugin = plugin; + } + + public PluginWrapper getPlugin() { + return plugin; + } + + public PluginState getPluginState() { + return plugin.getPluginState(); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/event/SpringPluginStartedEvent.java b/application/src/main/java/run/halo/app/plugin/event/SpringPluginStartedEvent.java new file mode 100644 index 0000000..9906034 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/event/SpringPluginStartedEvent.java @@ -0,0 +1,18 @@ +package run.halo.app.plugin.event; + +import org.springframework.context.ApplicationEvent; +import run.halo.app.plugin.SpringPlugin; + +public class SpringPluginStartedEvent extends ApplicationEvent { + + private final SpringPlugin springPlugin; + + public SpringPluginStartedEvent(Object source, SpringPlugin springPlugin) { + super(source); + this.springPlugin = springPlugin; + } + + public SpringPlugin getSpringPlugin() { + return springPlugin; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/event/SpringPluginStartingEvent.java b/application/src/main/java/run/halo/app/plugin/event/SpringPluginStartingEvent.java new file mode 100644 index 0000000..49f4b73 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/event/SpringPluginStartingEvent.java @@ -0,0 +1,18 @@ +package run.halo.app.plugin.event; + +import org.springframework.context.ApplicationEvent; +import run.halo.app.plugin.SpringPlugin; + +public class SpringPluginStartingEvent extends ApplicationEvent { + + private final SpringPlugin springPlugin; + + public SpringPluginStartingEvent(Object source, SpringPlugin springPlugin) { + super(source); + this.springPlugin = springPlugin; + } + + public SpringPlugin getSpringPlugin() { + return springPlugin; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/event/SpringPluginStoppedEvent.java b/application/src/main/java/run/halo/app/plugin/event/SpringPluginStoppedEvent.java new file mode 100644 index 0000000..4de3d53 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/event/SpringPluginStoppedEvent.java @@ -0,0 +1,18 @@ +package run.halo.app.plugin.event; + +import org.springframework.context.ApplicationEvent; +import run.halo.app.plugin.SpringPlugin; + +public class SpringPluginStoppedEvent extends ApplicationEvent { + + private final SpringPlugin springPlugin; + + public SpringPluginStoppedEvent(Object source, SpringPlugin springPlugin) { + super(source); + this.springPlugin = springPlugin; + } + + public SpringPlugin getSpringPlugin() { + return springPlugin; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/event/SpringPluginStoppingEvent.java b/application/src/main/java/run/halo/app/plugin/event/SpringPluginStoppingEvent.java new file mode 100644 index 0000000..fd43131 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/event/SpringPluginStoppingEvent.java @@ -0,0 +1,18 @@ +package run.halo.app.plugin.event; + +import org.springframework.context.ApplicationEvent; +import run.halo.app.plugin.SpringPlugin; + +public class SpringPluginStoppingEvent extends ApplicationEvent { + + private final SpringPlugin springPlugin; + + public SpringPluginStoppingEvent(Object source, SpringPlugin springPlugin) { + super(source); + this.springPlugin = springPlugin; + } + + public SpringPlugin getSpringPlugin() { + return springPlugin; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/extensionpoint/DefaultExtensionGetter.java b/application/src/main/java/run/halo/app/plugin/extensionpoint/DefaultExtensionGetter.java new file mode 100644 index 0000000..9f5404a --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/extensionpoint/DefaultExtensionGetter.java @@ -0,0 +1,102 @@ +package run.halo.app.plugin.extensionpoint; + +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import java.util.Objects; +import lombok.RequiredArgsConstructor; +import org.pf4j.ExtensionPoint; +import org.pf4j.PluginManager; +import org.springframework.beans.factory.BeanFactory; +import org.springframework.core.annotation.AnnotationAwareOrderComparator; +import org.springframework.data.domain.Sort; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting.ExtensionPointEnabled; + +@Component +@RequiredArgsConstructor +public class DefaultExtensionGetter implements ExtensionGetter { + + private final SystemConfigurableEnvironmentFetcher systemConfigFetcher; + + private final PluginManager pluginManager; + + private final BeanFactory beanFactory; + + private final ReactiveExtensionClient client; + + @Override + public Flux getExtensions(Class extensionPoint) { + return Flux.fromIterable(pluginManager.getExtensions(extensionPoint)) + .concatWith( + Flux.fromStream(() -> beanFactory.getBeanProvider(extensionPoint).orderedStream()) + ) + .sort(new AnnotationAwareOrderComparator()); + } + + @Override + public Mono getEnabledExtension(Class extensionPoint) { + return getEnabledExtensions(extensionPoint).next(); + } + + @Override + public Flux getEnabledExtensions( + Class extensionPoint) { + return fetchExtensionPointDefinition(extensionPoint) + .flatMapMany(epd -> { + var epdName = epd.getMetadata().getName(); + var type = epd.getSpec().getType(); + if (type == ExtensionPointDefinition.ExtensionPointType.SINGLETON) { + return getEnabledExtensions(epdName, extensionPoint).take(1); + } + // TODO If the type is sortable, may need to process the returned order. + return getEnabledExtensions(epdName, extensionPoint); + }); + } + + private Flux getEnabledExtensions(String epdName, + Class extensionPoint) { + return systemConfigFetcher.fetch(ExtensionPointEnabled.GROUP, ExtensionPointEnabled.class) + .switchIfEmpty(Mono.fromSupplier(ExtensionPointEnabled::new)) + .flatMapMany(enabled -> { + var extensionDefNames = enabled.getOrDefault(epdName, null); + if (extensionDefNames == null) { + // get all extensions if not specified + return Flux.defer(() -> getExtensions(extensionPoint)); + } + var extensions = getExtensions(extensionPoint).cache(); + return Flux.fromIterable(extensionDefNames) + .concatMap(extensionDefName -> + client.fetch(ExtensionDefinition.class, extensionDefName) + ) + .concatMap(extensionDef -> { + var className = extensionDef.getSpec().getClassName(); + return extensions.filter( + extension -> Objects.equals(extension.getClass().getName(), + className) + ); + }); + }); + } + + private Mono fetchExtensionPointDefinition( + Class extensionPoint) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + equal("spec.className", extensionPoint.getName()) + )); + var sort = Sort.by("metadata.creationTimestamp", "metadata.name").ascending(); + return client.listBy(ExtensionPointDefinition.class, listOptions, + PageRequestImpl.ofSize(1).withSort(sort) + ) + .flatMap(list -> Mono.justOrEmpty(ListResult.first(list))); + } + +} diff --git a/application/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionDefinition.java b/application/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionDefinition.java new file mode 100644 index 0000000..7aecd18 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionDefinition.java @@ -0,0 +1,47 @@ +package run.halo.app.plugin.extensionpoint; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + * Extension definition. + * An {@link ExtensionDefinition} is a type of metadata that provides additional information about + * an extension. An extension is a way to add new functionality to an existing class, structure, + * enumeration, or protocol type without needing to subclass it. + * + * @author guqing + * @since 2.4.0 + */ +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "plugin.halo.run", version = "v1alpha1", + kind = "ExtensionDefinition", singular = "extensiondefinition", + plural = "extensiondefinitions") +public class ExtensionDefinition extends AbstractExtension { + + @Schema(requiredMode = REQUIRED) + private ExtensionSpec spec; + + @Data + public static class ExtensionSpec { + @Schema(requiredMode = REQUIRED) + private String className; + + @Schema(requiredMode = REQUIRED) + private String extensionPointName; + + @Schema(requiredMode = REQUIRED) + private String displayName; + + private String description; + + private String icon; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionPointDefinition.java b/application/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionPointDefinition.java new file mode 100644 index 0000000..5b65032 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/extensionpoint/ExtensionPointDefinition.java @@ -0,0 +1,81 @@ +package run.halo.app.plugin.extensionpoint; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; + +/** + * Extension point definition. + * An {@link ExtensionPointDefinition} is a concept used in Halo to allow for the + * dynamic extension of system. It defines a location within Halo where + * additional functionality can be added through the use of plugins or extensions. + * + * @author guqing + * @since 2.4.0 + */ +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "plugin.halo.run", version = "v1alpha1", + kind = "ExtensionPointDefinition", singular = "extensionpointdefinition", + plural = "extensionpointdefinitions") +public class ExtensionPointDefinition extends AbstractExtension { + + @Schema(requiredMode = REQUIRED) + private ExtensionPointSpec spec; + + @Data + public static class ExtensionPointSpec { + @Schema(requiredMode = REQUIRED) + private String className; + + @Schema(requiredMode = REQUIRED) + private String displayName; + + @Schema(requiredMode = REQUIRED) + private ExtensionPointType type; + + private String description; + + private String icon; + } + + /** + *

Types of extension points include.

+ * There are several types: + *
    + *
  • Singleton extension point: means that only one implementation class of the extension + * point can be enabled. It is generally used for global core extension points, such as global + * logging components. When using a singleton extension point, it is necessary to ensure that + * only one implementation class is enabled, otherwise unexpected issues may occur.
    • + *
  • Multi-instance extension point: means that there can be multiple implementation + * classes of the extension point enabled, and the execution order of each implementation + * class may be different. It is generally used for specific business logic extension points, + * such as the selection of data sources or the use of caches. When using a multi-instance + * extension point, it is necessary to consider the dependency relationship and execution + * order between each implementation class to ensure the correctness of the business logic.
    • + *
  • Ordered extension point: means that multiple implementation classes of the extension + * point can be enabled, but they need to be executed in a specified order. It is generally + * used in scenarios that require strict control of execution order, such as the execution + * order of message listeners. When using an ordered extension point, it is necessary to + * assign a priority for each implementation class to ensure that they can be executed in the + * correct order.
    • + *
  • Conditional extension point: means that multiple implementation classes of the extension + * point can be enabled, but they need to meet specific conditions to be executed. For + * example, some implementation classes can only be executed under specific operating systems + * or specific runtime environments. When using a conditional extension point, it is + * necessary to define appropriate conditions according to the actual scenario to ensure the + * correctness and availability of the extension point.
    • + *
+ * There are two kinds of definitions for the time being: SINGLETON and MULTI_INSTANCE. + */ + public enum ExtensionPointType { + SINGLETON, + MULTI_INSTANCE; + } +} diff --git a/application/src/main/java/run/halo/app/plugin/resources/BundleResourceUtils.java b/application/src/main/java/run/halo/app/plugin/resources/BundleResourceUtils.java new file mode 100644 index 0000000..536386e --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/resources/BundleResourceUtils.java @@ -0,0 +1,56 @@ +package run.halo.app.plugin.resources; + +import org.pf4j.PluginManager; +import org.pf4j.PluginWrapper; +import org.springframework.core.io.DefaultResourceLoader; +import org.springframework.core.io.Resource; +import org.springframework.lang.Nullable; +import org.springframework.util.Assert; +import org.springframework.util.StringUtils; +import run.halo.app.infra.utils.FileUtils; +import run.halo.app.infra.utils.PathUtils; + +/** + * Plugin bundle resources utils. + * + * @author guqing + * @since 2.0.0 + */ +public abstract class BundleResourceUtils { + private static final String CONSOLE_BUNDLE_LOCATION = "console"; + public static final String JS_BUNDLE = "main.js"; + public static final String CSS_BUNDLE = "style.css"; + + /** + * Gets js bundle resource by plugin name in console location. + * + * @return js bundle resource if exists, otherwise null + */ + @Nullable + public static Resource getJsBundleResource(PluginManager pluginManager, String pluginName, + String bundleName) { + Assert.hasText(pluginName, "The pluginName must not be blank"); + Assert.hasText(bundleName, "Bundle name must not be blank"); + + DefaultResourceLoader resourceLoader = getResourceLoader(pluginManager, pluginName); + if (resourceLoader == null) { + return null; + } + String path = PathUtils.combinePath(CONSOLE_BUNDLE_LOCATION, bundleName); + String simplifyPath = StringUtils.cleanPath(path); + FileUtils.checkDirectoryTraversal("/" + CONSOLE_BUNDLE_LOCATION, simplifyPath); + Resource resource = resourceLoader.getResource(simplifyPath); + return resource.exists() ? resource : null; + } + + @Nullable + public static DefaultResourceLoader getResourceLoader(PluginManager pluginManager, + String pluginName) { + Assert.notNull(pluginManager, "Plugin manager must not be null"); + PluginWrapper plugin = pluginManager.getPlugin(pluginName); + if (plugin == null) { + return null; + } + return new DefaultResourceLoader(plugin.getPluginClassLoader()); + } +} diff --git a/application/src/main/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionFactory.java b/application/src/main/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionFactory.java new file mode 100644 index 0000000..6dc0807 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionFactory.java @@ -0,0 +1,183 @@ +package run.halo.app.plugin.resources; + +import static org.springframework.http.MediaType.ALL; +import static org.springframework.web.reactive.function.server.RequestPredicates.GET; +import static org.springframework.web.reactive.function.server.RequestPredicates.accept; + +import java.io.FileNotFoundException; +import java.io.IOException; +import java.time.Instant; +import java.util.List; +import lombok.AllArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.pf4j.PluginManager; +import org.springframework.boot.autoconfigure.web.WebProperties; +import org.springframework.context.ApplicationContext; +import org.springframework.core.io.DefaultResourceLoader; +import org.springframework.core.io.Resource; +import org.springframework.core.io.ResourceLoader; +import org.springframework.http.CacheControl; +import org.springframework.http.server.PathContainer; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.reactive.function.BodyInserters; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.reactive.resource.NoResourceFoundException; +import org.springframework.web.util.pattern.PathPatternParser; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.ReverseProxy; +import run.halo.app.core.extension.ReverseProxy.FileReverseProxyProvider; +import run.halo.app.core.extension.ReverseProxy.ReverseProxyRule; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.infra.utils.PathUtils; +import run.halo.app.plugin.PluginConst; + +/** + *

Plugin's reverse proxy router factory.

+ *

It creates a {@link RouterFunction} based on the ReverseProxy rule configured by + * the plugin.

+ * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component +@AllArgsConstructor +public class ReverseProxyRouterFunctionFactory { + + private final PluginManager pluginManager; + private final ApplicationContext applicationContext; + private final WebProperties webProperties; + + /** + *

Create {@link RouterFunction} according to the {@link ReverseProxy} custom resource + * configuration of the plugin.

+ *

Note that: returns {@code Null} if the plugin does not have a {@link ReverseProxy} custom + * resource.

+ * + * @param pluginName plugin name(nullable if system) + * @return A reverse proxy RouterFunction handle(nullable) + */ + @Nullable + public RouterFunction create(ReverseProxy reverseProxy, String pluginName) { + return createReverseProxyRouterFunction(reverseProxy, nullSafePluginName(pluginName)); + } + + @Nullable + private RouterFunction createReverseProxyRouterFunction( + ReverseProxy reverseProxy, @NonNull String pluginName) { + Assert.notNull(reverseProxy, "The reverseProxy must not be null."); + var rules = getReverseProxyRules(reverseProxy); + var cacheProperties = webProperties.getResources().getCache(); + var useLastModified = cacheProperties.isUseLastModified(); + var cacheControl = cacheProperties.getCachecontrol().toHttpCacheControl(); + if (cacheControl == null) { + cacheControl = CacheControl.empty(); + } + var finalCacheControl = cacheControl; + return rules.stream().map(rule -> { + String routePath = buildRoutePath(pluginName, rule); + log.debug("Plugin [{}] registered reverse proxy route path [{}]", pluginName, + routePath); + return RouterFunctions.route(GET(routePath).and(accept(ALL)), + request -> { + var resource = loadResourceByFileRule(pluginName, rule, request); + if (!resource.exists()) { + return Mono.error(new NoResourceFoundException(routePath)); + } + if (!useLastModified) { + return ServerResponse.ok() + .cacheControl(finalCacheControl) + .body(BodyInserters.fromResource(resource)); + } + Instant lastModified; + try { + lastModified = Instant.ofEpochMilli(resource.lastModified()); + } catch (IOException e) { + if (e instanceof FileNotFoundException) { + return Mono.error(new NoResourceFoundException(routePath)); + } + return Mono.error(e); + } + return request.checkNotModified(lastModified) + .switchIfEmpty(Mono.defer( + () -> ServerResponse.ok() + .cacheControl(finalCacheControl) + .lastModified(lastModified) + .body(BodyInserters.fromResource(resource))) + ); + }); + }).reduce(RouterFunction::and).orElse(null); + } + + private String nullSafePluginName(String pluginName) { + return pluginName == null ? PluginConst.SYSTEM_PLUGIN_NAME : pluginName; + } + + private List getReverseProxyRules(ReverseProxy reverseProxy) { + return reverseProxy.getRules(); + } + + public static String buildRoutePath(String pluginId, ReverseProxyRule reverseProxyRule) { + return PathUtils.combinePath(PluginConst.assetsRoutePrefix(pluginId), + reverseProxyRule.path()); + } + + /** + *

File load rule: if the directory is configured but the file name is not configured, it + * means access through wildcards. Otherwise, if only the file name is configured, this + * method only returns the file pointed to by the rule.

+ *

You should only use {@link Resource#getInputStream()} to get resource content instead of + * {@link Resource#getFile()},the resource is loaded from the plugin jar file using a + * specific plugin class loader; if you use {@link Resource#getFile()}, you cannot get the + * file.

+ *

Note that a returned Resource handle does not imply an existing resource; you need to + * invoke {@link Resource#exists()} to check for existence

+ * + * @param pluginName plugin to load file by name + * @param rule reverse proxy rule + * @param request client request + * @return a Resource handle for the specified resource location by the plugin(never null); + */ + @NonNull + private Resource loadResourceByFileRule(String pluginName, ReverseProxyRule rule, + ServerRequest request) { + Assert.notNull(rule.file(), "File rule must not be null."); + FileReverseProxyProvider file = rule.file(); + String directory = file.directory(); + + // Decision file name + String filename; + String configuredFilename = file.filename(); + if (StringUtils.isNotBlank(configuredFilename)) { + filename = configuredFilename; + } else { + String routePath = buildRoutePath(pluginName, rule); + PathContainer pathContainer = PathPatternParser.defaultInstance.parse(routePath) + .extractPathWithinPattern(PathContainer.parsePath(request.path())); + filename = pathContainer.value(); + } + + String filePath = PathUtils.combinePath(directory, filename); + return getResourceLoader(pluginName).getResource(filePath); + } + + private ResourceLoader getResourceLoader(String pluginName) { + if (PluginConst.SYSTEM_PLUGIN_NAME.equals(pluginName)) { + return applicationContext; + } + DefaultResourceLoader resourceLoader = + BundleResourceUtils.getResourceLoader(pluginManager, pluginName); + if (resourceLoader == null) { + throw new NotFoundException("Plugin [" + pluginName + "] not found."); + } + return resourceLoader; + } +} + diff --git a/application/src/main/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionRegistry.java b/application/src/main/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionRegistry.java new file mode 100644 index 0000000..41d87c7 --- /dev/null +++ b/application/src/main/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionRegistry.java @@ -0,0 +1,86 @@ +package run.halo.app.plugin.resources; + +import com.google.common.collect.LinkedHashMultimap; +import java.util.HashMap; +import java.util.Map; +import java.util.Set; +import java.util.concurrent.locks.StampedLock; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.core.extension.ReverseProxy; +import run.halo.app.plugin.PluginRouterFunctionRegistry; + +/** + * A registry for {@link RouterFunction} of plugin. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class ReverseProxyRouterFunctionRegistry { + + private final PluginRouterFunctionRegistry pluginRouterFunctionRegistry; + + private final ReverseProxyRouterFunctionFactory reverseProxyRouterFunctionFactory; + private final StampedLock lock = new StampedLock(); + private final Map> proxyNameRouterFunctionRegistry = + new HashMap<>(); + private final LinkedHashMultimap pluginIdReverseProxyMap = + LinkedHashMultimap.create(); + + public ReverseProxyRouterFunctionRegistry( + PluginRouterFunctionRegistry pluginRouterFunctionRegistry, + ReverseProxyRouterFunctionFactory reverseProxyRouterFunctionFactory) { + this.pluginRouterFunctionRegistry = pluginRouterFunctionRegistry; + this.reverseProxyRouterFunctionFactory = reverseProxyRouterFunctionFactory; + } + + /** + * Register reverse proxy router function. + * + * @param pluginId plugin id + * @param reverseProxy reverse proxy + */ + public void register(String pluginId, ReverseProxy reverseProxy) { + Assert.notNull(pluginId, "The plugin id must not be null."); + final String proxyName = reverseProxy.getMetadata().getName(); + long stamp = lock.writeLock(); + try { + pluginIdReverseProxyMap.put(pluginId, proxyName); + var routerFunction = reverseProxyRouterFunctionFactory.create(reverseProxy, pluginId); + if (routerFunction != null) { + proxyNameRouterFunctionRegistry.put(proxyName, routerFunction); + pluginRouterFunctionRegistry.register(Set.of(routerFunction)); + } + } finally { + lock.unlockWrite(stamp); + } + } + + /** + * Only for test. + */ + int reverseProxySize(String pluginId) { + Set names = pluginIdReverseProxyMap.get(pluginId); + return names.size(); + } + + /** + * Remove reverse proxy router function by pluginId and reverse proxy name. + */ + public void remove(String pluginId, String reverseProxyName) { + long stamp = lock.writeLock(); + try { + pluginIdReverseProxyMap.remove(pluginId, reverseProxyName); + var removedRouterFunction = proxyNameRouterFunctionRegistry.remove(reverseProxyName); + if (removedRouterFunction != null) { + pluginRouterFunctionRegistry.unregister(Set.of(removedRouterFunction)); + } + } finally { + lock.unlockWrite(stamp); + } + } + +} diff --git a/application/src/main/java/run/halo/app/search/HaloDocumentEventsListener.java b/application/src/main/java/run/halo/app/search/HaloDocumentEventsListener.java new file mode 100644 index 0000000..864595d --- /dev/null +++ b/application/src/main/java/run/halo/app/search/HaloDocumentEventsListener.java @@ -0,0 +1,70 @@ +package run.halo.app.search; + +import java.time.Duration; +import org.springframework.context.event.EventListener; +import org.springframework.scheduling.annotation.Async; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.search.event.HaloDocumentAddRequestEvent; +import run.halo.app.search.event.HaloDocumentDeleteRequestEvent; +import run.halo.app.search.event.HaloDocumentRebuildRequestEvent; + +@Component +public class HaloDocumentEventsListener { + + private final ExtensionGetter extensionGetter; + + private int bufferSize; + + public HaloDocumentEventsListener(ExtensionGetter extensionGetter) { + this.extensionGetter = extensionGetter; + this.bufferSize = 200; + } + + /** + * Only for testing. + * + * @param bufferSize new buffer size for rebuilding indices + */ + void setBufferSize(int bufferSize) { + this.bufferSize = bufferSize; + } + + @EventListener + @Async + void onApplicationEvent(HaloDocumentRebuildRequestEvent event) { + getSearchEngine() + .doOnNext(SearchEngine::deleteAll) + .flatMap(searchEngine -> extensionGetter.getExtensions(HaloDocumentsProvider.class) + .flatMap(HaloDocumentsProvider::fetchAll) + .buffer(this.bufferSize) + .doOnNext(searchEngine::addOrUpdate) + .then()) + .blockOptional(Duration.ofMinutes(1)); + } + + @EventListener + @Async + void onApplicationEvent(HaloDocumentAddRequestEvent event) { + getSearchEngine() + .doOnNext(searchEngine -> searchEngine.addOrUpdate(event.getDocuments())) + .then() + .blockOptional(Duration.ofMinutes(1)); + } + + @EventListener + @Async + void onApplicationEvent(HaloDocumentDeleteRequestEvent event) { + getSearchEngine() + .doOnNext(searchEngine -> searchEngine.deleteDocument(event.getDocIds())) + .then() + .blockOptional(Duration.ofMinutes(1)); + } + + private Mono getSearchEngine() { + return extensionGetter.getEnabledExtension(SearchEngine.class) + .filter(SearchEngine::available) + .switchIfEmpty(Mono.error(SearchEngineUnavailableException::new)); + } +} diff --git a/application/src/main/java/run/halo/app/search/IndexEndpoint.java b/application/src/main/java/run/halo/app/search/IndexEndpoint.java new file mode 100644 index 0000000..69dc510 --- /dev/null +++ b/application/src/main/java/run/halo/app/search/IndexEndpoint.java @@ -0,0 +1,95 @@ +package run.halo.app.search; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import java.util.List; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.search.post.PostHaloDocumentsProvider; + +@Component +public class IndexEndpoint implements CustomEndpoint { + + private static final String API_VERSION = "api.halo.run/v1alpha1"; + + private final SearchService searchService; + + public IndexEndpoint(SearchService searchService) { + this.searchService = searchService; + } + + @Override + public RouterFunction endpoint() { + final var tag = "IndexV1alpha1Public"; + return SpringdocRouteBuilder.route() + .GET("/indices/post", this::search, + builder -> { + builder.operationId("SearchPost") + .tag(tag) + .description( + "Search posts with fuzzy query. This method is deprecated, please use" + + " POST /indices/-/search instead.") + .deprecated(true) + .response(responseBuilder().implementation(SearchResult.class)); + SearchParam.buildParameters(builder); + } + ) + .POST("/indices/-/search", this::indicesSearch, + builder -> builder.operationId("IndicesSearch") + .tag(tag) + .description("Search indices.") + .requestBody(requestBodyBuilder().implementation(SearchOption.class) + .description(""" + Please note that the "filterPublished", "filterExposed" and \ + "filterRecycled" fields are ignored in this endpoint.\ + """) + ) + .response(responseBuilder().implementation(SearchResult.class)) + ) + .build(); + } + + private Mono indicesSearch(ServerRequest serverRequest) { + return serverRequest.bodyToMono(SearchOption.class) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException("Request body required."))) + .flatMap(this::performSearch) + .flatMap(result -> ServerResponse.ok().bodyValue(result)); + } + + private Mono search(ServerRequest request) { + return Mono.fromSupplier( + () -> new SearchParam(request.queryParams())) + .map(param -> { + var option = new SearchOption(); + option.setIncludeTypes(List.of(PostHaloDocumentsProvider.POST_DOCUMENT_TYPE)); + + option.setKeyword(param.getKeyword()); + option.setLimit(param.getLimit()); + option.setHighlightPreTag(param.getHighlightPreTag()); + option.setHighlightPostTag(param.getHighlightPostTag()); + return option; + }) + .flatMap(this::performSearch) + .flatMap(result -> ServerResponse.ok().bodyValue(result)); + } + + private Mono performSearch(SearchOption option) { + option.setFilterExposed(true); + option.setFilterPublished(true); + option.setFilterRecycled(false); + return searchService.search(option); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion(API_VERSION); + } +} diff --git a/application/src/main/java/run/halo/app/search/IndicesEndpoint.java b/application/src/main/java/run/halo/app/search/IndicesEndpoint.java new file mode 100644 index 0000000..e9eb8c0 --- /dev/null +++ b/application/src/main/java/run/halo/app/search/IndicesEndpoint.java @@ -0,0 +1,59 @@ +package run.halo.app.search; + +import lombok.extern.slf4j.Slf4j; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.search.event.HaloDocumentRebuildRequestEvent; + +@Component +@Slf4j +public class IndicesEndpoint implements CustomEndpoint { + + private static final String API_VERSION = "api.console.halo.run/v1alpha1"; + + private final ApplicationEventPublisher eventPublisher; + + public IndicesEndpoint(ApplicationEventPublisher eventPublisher) { + this.eventPublisher = eventPublisher; + } + + @Override + public RouterFunction endpoint() { + final var tag = "IndicesV1alpha1Console"; + return SpringdocRouteBuilder.route() + .POST("indices/post", this::rebuildIndices, + builder -> builder.operationId("BuildPostIndices") + .tag(tag) + .deprecated(true) + .description(""" + Build or rebuild post indices for full text search. \ + This method is deprecated, please use POST /indices/-/rebuild instead.\ + """) + ) + .POST("/indices/-/rebuild", this::rebuildIndices, + builder -> builder.operationId("RebuildAllIndices") + .tag(tag) + .description("Rebuild all indices") + ) + .build(); + } + + private Mono rebuildIndices(ServerRequest serverRequest) { + return Mono.fromRunnable( + () -> eventPublisher.publishEvent(new HaloDocumentRebuildRequestEvent(this)) + ).then(ServerResponse.accepted().build()); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion(API_VERSION); + } + +} diff --git a/application/src/main/java/run/halo/app/search/SearchEngineUnavailableException.java b/application/src/main/java/run/halo/app/search/SearchEngineUnavailableException.java new file mode 100644 index 0000000..824654f --- /dev/null +++ b/application/src/main/java/run/halo/app/search/SearchEngineUnavailableException.java @@ -0,0 +1,16 @@ +package run.halo.app.search; + +import org.springframework.web.server.ServerWebInputException; + +/** + * Search engine unavailable exception. + * + * @author johnniang + */ +public class SearchEngineUnavailableException extends ServerWebInputException { + + public SearchEngineUnavailableException() { + super("Search Engine is unavailable."); + } + +} diff --git a/application/src/main/java/run/halo/app/search/SearchServiceImpl.java b/application/src/main/java/run/halo/app/search/SearchServiceImpl.java new file mode 100644 index 0000000..0e229bf --- /dev/null +++ b/application/src/main/java/run/halo/app/search/SearchServiceImpl.java @@ -0,0 +1,36 @@ +package run.halo.app.search; + +import org.springframework.stereotype.Service; +import org.springframework.validation.Validator; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Schedulers; +import run.halo.app.infra.exception.RequestBodyValidationException; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; + +@Service +public class SearchServiceImpl implements SearchService { + + private final Validator validator; + + private final ExtensionGetter extensionGetter; + + public SearchServiceImpl(Validator validator, ExtensionGetter extensionGetter) { + this.validator = validator; + this.extensionGetter = extensionGetter; + } + + @Override + public Mono search(SearchOption option) { + // validate the option + var errors = validator.validateObject(option); + if (errors.hasErrors()) { + return Mono.error(new RequestBodyValidationException(errors)); + } + return extensionGetter.getEnabledExtension(SearchEngine.class) + .filter(SearchEngine::available) + .switchIfEmpty(Mono.error(SearchEngineUnavailableException::new)) + .flatMap(searchEngine -> Mono.fromSupplier(() -> + searchEngine.search(option) + ).subscribeOn(Schedulers.boundedElastic())); + } +} diff --git a/application/src/main/java/run/halo/app/search/extension/SearchEngine.java b/application/src/main/java/run/halo/app/search/extension/SearchEngine.java new file mode 100644 index 0000000..5a64b78 --- /dev/null +++ b/application/src/main/java/run/halo/app/search/extension/SearchEngine.java @@ -0,0 +1,47 @@ +package run.halo.app.search.extension; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.GVK; +import run.halo.app.extension.Ref; + +/** + * Search engine extension. + * + * @deprecated This class is deprecated and will be removed in Halo 2.18. + */ +@Data +@ToString(callSuper = true) +@EqualsAndHashCode(callSuper = true) +@GVK(group = "plugin.halo.run", version = "v1alpha1", kind = "SearchEngine", + plural = "searchengines", singular = "searchengine") +@Deprecated(forRemoval = true) +public class SearchEngine extends AbstractExtension { + + @Schema(requiredMode = REQUIRED) + private SearchEngineSpec spec; + + @Data + public static class SearchEngineSpec { + + private String logo; + + private String website; + + @Schema(requiredMode = REQUIRED) + private String displayName; + + private String description; + + private Ref settingRef; + + private String postSearchImpl; + + } + +} diff --git a/application/src/main/java/run/halo/app/search/lucene/LuceneSearchEngine.java b/application/src/main/java/run/halo/app/search/lucene/LuceneSearchEngine.java new file mode 100644 index 0000000..b8e54fd --- /dev/null +++ b/application/src/main/java/run/halo/app/search/lucene/LuceneSearchEngine.java @@ -0,0 +1,440 @@ +package run.halo.app.search.lucene; + +import static org.apache.lucene.document.Field.Store.YES; +import static org.apache.lucene.index.IndexWriterConfig.OpenMode.CREATE_OR_APPEND; +import static org.apache.lucene.search.BooleanClause.Occur.FILTER; +import static org.apache.lucene.search.BooleanClause.Occur.MUST; + +import java.io.ByteArrayInputStream; +import java.io.ByteArrayOutputStream; +import java.io.Closeable; +import java.io.IOException; +import java.io.ObjectInputStream; +import java.io.ObjectOutputStream; +import java.nio.file.Path; +import java.time.Instant; +import java.util.ArrayList; +import java.util.LinkedList; +import java.util.List; +import java.util.Map; +import java.util.Optional; +import lombok.extern.slf4j.Slf4j; +import org.apache.lucene.analysis.Analyzer; +import org.apache.lucene.analysis.charfilter.HTMLStripCharFilterFactory; +import org.apache.lucene.analysis.cjk.CJKBigramFilterFactory; +import org.apache.lucene.analysis.cjk.CJKWidthCharFilterFactory; +import org.apache.lucene.analysis.cjk.CJKWidthFilterFactory; +import org.apache.lucene.analysis.core.LowerCaseFilterFactory; +import org.apache.lucene.analysis.custom.CustomAnalyzer; +import org.apache.lucene.analysis.standard.StandardTokenizerFactory; +import org.apache.lucene.document.Document; +import org.apache.lucene.document.FieldType; +import org.apache.lucene.document.LongField; +import org.apache.lucene.document.StoredField; +import org.apache.lucene.document.StringField; +import org.apache.lucene.document.TextField; +import org.apache.lucene.index.DocValuesType; +import org.apache.lucene.index.IndexWriter; +import org.apache.lucene.index.IndexWriterConfig; +import org.apache.lucene.index.Term; +import org.apache.lucene.queryparser.flexible.core.QueryNodeException; +import org.apache.lucene.queryparser.flexible.standard.StandardQueryParser; +import org.apache.lucene.search.BooleanQuery; +import org.apache.lucene.search.FuzzyQuery; +import org.apache.lucene.search.IndexSearcher; +import org.apache.lucene.search.SearcherManager; +import org.apache.lucene.search.Sort; +import org.apache.lucene.search.TermInSetQuery; +import org.apache.lucene.search.TermQuery; +import org.apache.lucene.search.highlight.Highlighter; +import org.apache.lucene.search.highlight.InvalidTokenOffsetsException; +import org.apache.lucene.search.highlight.QueryTermScorer; +import org.apache.lucene.search.highlight.SimpleHTMLFormatter; +import org.apache.lucene.store.Directory; +import org.apache.lucene.store.FSDirectory; +import org.apache.lucene.util.BytesRef; +import org.apache.lucene.util.IOUtils; +import org.springframework.beans.factory.DisposableBean; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.core.convert.converter.Converter; +import org.springframework.lang.NonNull; +import org.springframework.util.StopWatch; +import org.springframework.util.StringUtils; +import run.halo.app.search.HaloDocument; +import run.halo.app.search.SearchEngine; +import run.halo.app.search.SearchOption; +import run.halo.app.search.SearchResult; + +@Slf4j +public class LuceneSearchEngine implements SearchEngine, InitializingBean, DisposableBean { + + private final Path indexRootDir; + + private final Converter haloDocumentConverter = + new HaloDocumentConverter(); + + private final Converter documentConverter = + new DocumentConverter(); + + private Analyzer analyzer; + + private IndexWriter indexWriter; + + private SearcherManager searcherManager; + + private Directory directory; + + public LuceneSearchEngine(Path indexRootDir) throws IOException { + this.indexRootDir = indexRootDir; + } + + @Override + public boolean available() { + return true; + } + + @Override + public void addOrUpdate(Iterable haloDocs) { + var docs = new LinkedList(); + var terms = new LinkedList(); + haloDocs.forEach(haloDoc -> { + var doc = this.haloDocumentConverter.convert(haloDoc); + terms.add(new BytesRef(haloDoc.getId())); + docs.add(doc); + }); + var deleteQuery = new TermInSetQuery("id", terms); + try { + this.indexWriter.updateDocuments(deleteQuery, docs); + this.searcherManager.maybeRefreshBlocking(); + this.indexWriter.commit(); + } catch (IOException e) { + throw new RuntimeException(e); + } + } + + @Override + public void deleteDocument(Iterable haloDocIds) { + var terms = new LinkedList(); + haloDocIds.forEach(haloDocId -> terms.add(new BytesRef(haloDocId))); + var deleteQuery = new TermInSetQuery("id", terms); + try { + this.indexWriter.deleteDocuments(deleteQuery); + this.searcherManager.maybeRefreshBlocking(); + this.indexWriter.commit(); + } catch (IOException e) { + throw new RuntimeException(e); + } + } + + @Override + public void deleteAll() { + try { + this.indexWriter.deleteAll(); + this.searcherManager.maybeRefreshBlocking(); + this.indexWriter.commit(); + } catch (IOException e) { + throw new RuntimeException(e); + } + } + + @Override + public SearchResult search(SearchOption option) { + IndexSearcher searcher = null; + try { + searcher = searcherManager.acquire(); + var queryParser = new StandardQueryParser(analyzer); + queryParser.setMultiFields(new String[] {"title", "description", "content"}); + queryParser.setFieldsBoost(Map.of("title", 1.0f, "description", 0.5f, "content", 0.2f)); + queryParser.setFuzzyMinSim(FuzzyQuery.defaultMaxEdits); + queryParser.setFuzzyPrefixLength(FuzzyQuery.defaultPrefixLength); + + var keyword = option.getKeyword(); + var query = queryParser.parse(keyword, null); + var queryBuilder = new BooleanQuery.Builder() + .add(query, MUST); + + var filterExposed = option.getFilterExposed(); + if (filterExposed != null) { + queryBuilder.add( + new TermQuery(new Term("exposed", filterExposed.toString())), FILTER + ); + } + var filterRecycled = option.getFilterRecycled(); + if (filterRecycled != null) { + queryBuilder.add( + new TermQuery(new Term("recycled", filterRecycled.toString())), FILTER + ); + } + var filterPublished = option.getFilterPublished(); + if (filterPublished != null) { + queryBuilder.add( + new TermQuery(new Term("published", filterPublished.toString())), FILTER + ); + } + + Optional.ofNullable(option.getIncludeTypes()) + .filter(types -> !types.isEmpty()) + .ifPresent(types -> { + var typeTerms = types.stream() + .distinct() + .map(BytesRef::new) + .toList(); + queryBuilder.add(new TermInSetQuery("type", typeTerms), FILTER); + }); + + Optional.ofNullable(option.getIncludeOwnerNames()) + .filter(ownerNames -> !ownerNames.isEmpty()) + .ifPresent(ownerNames -> { + var ownerTerms = ownerNames.stream() + .distinct() + .map(BytesRef::new) + .toList(); + queryBuilder.add(new TermInSetQuery("ownerName", ownerTerms), FILTER); + }); + + Optional.ofNullable(option.getIncludeTagNames()) + .filter(tagNames -> !tagNames.isEmpty()) + .ifPresent(tagNames -> tagNames + .stream() + .distinct() + .forEach(tagName -> + queryBuilder.add(new TermQuery(new Term("tag", tagName)), FILTER) + )); + + Optional.ofNullable(option.getIncludeCategoryNames()) + .filter(categoryNames -> !categoryNames.isEmpty()) + .ifPresent(categoryNames -> categoryNames + .stream() + .distinct() + .forEach(categoryName -> + queryBuilder.add(new TermQuery(new Term("category", categoryName)), FILTER) + )); + + var finalQuery = queryBuilder.build(); + var limit = option.getLimit(); + + var stopWatch = new StopWatch("SearchWatch"); + stopWatch.start("search " + keyword); + var hits = searcher.search(finalQuery, limit, Sort.RELEVANCE); + stopWatch.stop(); + var formatter = + new SimpleHTMLFormatter(option.getHighlightPreTag(), option.getHighlightPostTag()); + var queryScorer = new QueryTermScorer(query); + var highlighter = new Highlighter(formatter, queryScorer); + + var haloDocs = new ArrayList(hits.scoreDocs.length); + for (var hit : hits.scoreDocs) { + var doc = searcher.storedFields().document(hit.doc); + var haloDoc = documentConverter.convert(doc); + + var title = doc.get("title"); + var hlTitle = highlighter.getBestFragment(this.analyzer, "title", title); + if (!StringUtils.hasText(hlTitle)) { + hlTitle = title; + } + + var description = doc.get("description"); + String hlDescription = null; + if (description != null) { + hlDescription = + highlighter.getBestFragment(this.analyzer, "description", description); + } + + var content = doc.get("content"); + var hlContent = highlighter.getBestFragment(this.analyzer, "content", content); + + haloDoc.setTitle(hlTitle); + haloDoc.setDescription(hlDescription); + haloDoc.setContent(hlContent); + haloDocs.add(haloDoc); + } + var result = new SearchResult(); + result.setHits(haloDocs); + result.setTotal(hits.totalHits.value); + result.setKeyword(keyword); + result.setLimit(limit); + result.setProcessingTimeMillis(stopWatch.getTotalTimeMillis()); + return result; + } catch (IOException | QueryNodeException | InvalidTokenOffsetsException e) { + throw new RuntimeException(e); + } finally { + if (searcher != null) { + try { + searcherManager.release(searcher); + } catch (IOException e) { + log.error("Failed to release searcher", e); + } + } + } + } + + @Override + public void afterPropertiesSet() throws Exception { + try { + this.analyzer = CustomAnalyzer.builder() + .withTokenizer(StandardTokenizerFactory.class) + .addCharFilter(HTMLStripCharFilterFactory.NAME) + .addCharFilter(CJKWidthCharFilterFactory.NAME) + .addTokenFilter(LowerCaseFilterFactory.NAME) + .addTokenFilter(CJKWidthFilterFactory.NAME) + .addTokenFilter(CJKBigramFilterFactory.NAME) + .build(); + this.directory = FSDirectory.open(this.indexRootDir); + var writerConfig = new IndexWriterConfig(this.analyzer) + .setOpenMode(CREATE_OR_APPEND); + this.indexWriter = new IndexWriter(this.directory, writerConfig); + this.searcherManager = new SearcherManager(this.indexWriter, null); + log.info("Initialized lucene search engine"); + } catch (IOException e) { + throw new RuntimeException(e); + } + } + + void setIndexWriter(IndexWriter indexWriter) { + this.indexWriter = indexWriter; + } + + void setDirectory(Directory directory) { + this.directory = directory; + } + + void setSearcherManager(SearcherManager searcherManager) { + this.searcherManager = searcherManager; + } + + void setAnalyzer(Analyzer analyzer) { + this.analyzer = analyzer; + } + + Converter getHaloDocumentConverter() { + return haloDocumentConverter; + } + + Converter getDocumentConverter() { + return documentConverter; + } + + @Override + public void destroy() throws Exception { + var closers = new ArrayList(4); + if (this.analyzer != null) { + closers.add(this.analyzer); + } + if (this.searcherManager != null) { + closers.add(this.searcherManager); + } + if (this.indexWriter != null) { + closers.add(this.indexWriter); + } + if (this.directory != null) { + closers.add(this.directory); + } + IOUtils.close(closers); + log.info("Destroyed lucene search engine"); + } + + private static class HaloDocumentConverter implements Converter { + + @Override + @NonNull + public Document convert(HaloDocument haloDoc) { + var doc = new Document(); + doc.add(new StringField("id", haloDoc.getId(), YES)); + doc.add(new StringField("name", haloDoc.getMetadataName(), YES)); + doc.add(new StringField("type", haloDoc.getType(), YES)); + doc.add(new StringField("ownerName", haloDoc.getOwnerName(), YES)); + var categories = haloDoc.getCategories(); + if (categories != null) { + categories.forEach(category -> doc.add(new StringField("category", category, YES))); + } + var tags = haloDoc.getTags(); + if (tags != null) { + tags.forEach(tag -> doc.add(new StringField("tag", tag, YES))); + } + + doc.add(new TextField("title", haloDoc.getTitle(), YES)); + if (haloDoc.getDescription() != null) { + doc.add(new TextField("description", haloDoc.getDescription(), YES)); + } + doc.add(new TextField("content", haloDoc.getContent(), YES)); + doc.add(new StringField("recycled", Boolean.toString(haloDoc.isRecycled()), YES)); + doc.add(new StringField("exposed", Boolean.toString(haloDoc.isExposed()), YES)); + doc.add(new StringField("published", Boolean.toString(haloDoc.isPublished()), YES)); + + var annotations = haloDoc.getAnnotations(); + if (annotations != null) { + try (var baos = new ByteArrayOutputStream(); + var oos = new ObjectOutputStream(baos)) { + oos.writeObject(annotations); + var type = new FieldType(); + type.setStored(true); + type.setTokenized(false); + type.setDocValuesType(DocValuesType.BINARY); + type.freeze(); + doc.add(new StoredField("annotations", new BytesRef(baos.toByteArray()), type)); + } catch (IOException e) { + throw new RuntimeException(e); + } + } + + var creationTimestamp = haloDoc.getCreationTimestamp(); + doc.add(new LongField("creationTimestamp", creationTimestamp.toEpochMilli(), YES)); + var updateTimestamp = haloDoc.getUpdateTimestamp(); + if (updateTimestamp != null) { + doc.add(new LongField("updateTimestamp", updateTimestamp.toEpochMilli(), YES)); + } + doc.add(new StringField("permalink", haloDoc.getPermalink(), YES)); + return doc; + } + } + + private static class DocumentConverter implements Converter { + + @Override + @NonNull + public HaloDocument convert(Document doc) { + var haloDoc = new HaloDocument(); + haloDoc.setId(doc.get("id")); + haloDoc.setType(doc.get("type")); + haloDoc.setMetadataName(doc.get("name")); + haloDoc.setTitle(doc.get("title")); + haloDoc.setDescription(doc.get("description")); + haloDoc.setPermalink(doc.get("permalink")); + haloDoc.setOwnerName(doc.get("ownerName")); + haloDoc.setCategories(List.of(doc.getValues("category"))); + haloDoc.setTags(List.of(doc.getValues("tag"))); + + haloDoc.setRecycled(getBooleanValue(doc, "recycled", false)); + haloDoc.setPublished(getBooleanValue(doc, "published", false)); + haloDoc.setExposed(getBooleanValue(doc, "exposed", false)); + + var annotationsBytesRef = doc.getBinaryValue("annotations"); + if (annotationsBytesRef != null) { + try (var bais = new ByteArrayInputStream(annotationsBytesRef.bytes); + var ois = new ObjectInputStream(bais)) { + @SuppressWarnings("unchecked") + var annotations = (Map) ois.readObject(); + haloDoc.setAnnotations(annotations); + } catch (IOException | ClassNotFoundException e) { + throw new RuntimeException(e); + } + } + + var creationTimestamp = doc.getField("creationTimestamp").numericValue().longValue(); + haloDoc.setCreationTimestamp(Instant.ofEpochMilli(creationTimestamp)); + var updateTimestampField = doc.getField("updateTimestamp"); + if (updateTimestampField != null) { + var updateTimestamp = updateTimestampField.numericValue().longValue(); + haloDoc.setUpdateTimestamp(Instant.ofEpochMilli(updateTimestamp)); + } + // handle content later + return haloDoc; + } + + private static boolean getBooleanValue(Document doc, String fieldName, + boolean defaultValue) { + var boolStr = doc.get(fieldName); + return boolStr == null ? defaultValue : Boolean.parseBoolean(boolStr); + } + } +} diff --git a/application/src/main/java/run/halo/app/search/post/PostEventsListener.java b/application/src/main/java/run/halo/app/search/post/PostEventsListener.java new file mode 100644 index 0000000..c6cb08f --- /dev/null +++ b/application/src/main/java/run/halo/app/search/post/PostEventsListener.java @@ -0,0 +1,71 @@ +package run.halo.app.search.post; + +import static run.halo.app.search.post.PostHaloDocumentsProvider.POST_DOCUMENT_TYPE; +import static run.halo.app.search.post.PostHaloDocumentsProvider.convert; + +import java.util.List; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.context.event.EventListener; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.content.PostService; +import run.halo.app.core.extension.content.Post; +import run.halo.app.event.post.PostDeletedEvent; +import run.halo.app.event.post.PostUpdatedEvent; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.search.event.HaloDocumentAddRequestEvent; +import run.halo.app.search.event.HaloDocumentDeleteRequestEvent; + +@Component +public class PostEventsListener { + + private final ApplicationEventPublisher publisher; + + private final PostService postService; + + private final ReactiveExtensionClient client; + + public PostEventsListener( + ApplicationEventPublisher publisher, + PostService postService, + ReactiveExtensionClient client) { + this.publisher = publisher; + this.postService = postService; + this.client = client; + } + + @EventListener + Mono onApplicationEvent(PostUpdatedEvent event) { + return addOrUpdateOrDelete(event.getName()); + } + + @EventListener + void onApplicationEvent(PostDeletedEvent event) { + delete(event.getName()); + } + + private Mono addOrUpdateOrDelete(String postName) { + return client.fetch(Post.class, postName) + .flatMap(post -> { + if (ExtensionUtil.isDeleted(post)) { + // if the post is deleted permanently, delete it. + return Mono.fromRunnable(() -> delete(postName)); + } + // convert the post into halo document and add it to the search engine. + return postService.getReleaseContent(post) + .map(content -> convert(post, content)) + .doOnNext(haloDoc -> publisher.publishEvent( + new HaloDocumentAddRequestEvent(this, List.of(haloDoc)) + )); + }) + .then(); + } + + private void delete(String postName) { + publisher.publishEvent( + new HaloDocumentDeleteRequestEvent(this, List.of(POST_DOCUMENT_TYPE + '-' + postName)) + ); + } + +} diff --git a/application/src/main/java/run/halo/app/search/post/PostHaloDocumentsProvider.java b/application/src/main/java/run/halo/app/search/post/PostHaloDocumentsProvider.java new file mode 100644 index 0000000..d0100c1 --- /dev/null +++ b/application/src/main/java/run/halo/app/search/post/PostHaloDocumentsProvider.java @@ -0,0 +1,81 @@ +package run.halo.app.search.post; + +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.content.ContentWrapper; +import run.halo.app.content.PostService; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.ReactiveExtensionPaginatedOperator; +import run.halo.app.search.HaloDocument; +import run.halo.app.search.HaloDocumentsProvider; + +@Component +public class PostHaloDocumentsProvider implements HaloDocumentsProvider { + + public static final String POST_DOCUMENT_TYPE = "post.content.halo.run"; + + private final ReactiveExtensionPaginatedOperator paginatedOperator; + + private final PostService postService; + + public PostHaloDocumentsProvider(ReactiveExtensionPaginatedOperator paginatedOperator, + PostService postService) { + this.paginatedOperator = paginatedOperator; + this.postService = postService; + } + + @Override + public Flux fetchAll() { + // make sure the posts are published, public visible and not deleted. + var options = new ListOptions(); + var noteDeleted = QueryFactory.isNull("metadata.deletionTimestamp"); + options.setFieldSelector(FieldSelector.of(noteDeleted)); + // get content + return paginatedOperator.list(Post.class, options) + .flatMap(post -> postService.getReleaseContent(post) + .switchIfEmpty(Mono.fromSupplier(() -> ContentWrapper.builder() + .content("") + .raw("") + .rawType("") + .build())) + .map(contentWrapper -> convert(post, contentWrapper)) + ); + } + + @Override + public String getType() { + return POST_DOCUMENT_TYPE; + } + + /** + * Converts post to HaloDocument. + * + * @param post post detail + * @param content post content + * @return halo document + */ + public static HaloDocument convert(Post post, ContentWrapper content) { + var haloDoc = new HaloDocument(); + var spec = post.getSpec(); + haloDoc.setMetadataName(post.getMetadata().getName()); + haloDoc.setType(POST_DOCUMENT_TYPE); + haloDoc.setId(POST_DOCUMENT_TYPE + '-' + post.getMetadata().getName()); + haloDoc.setTitle(spec.getTitle()); + haloDoc.setDescription(post.getStatus().getExcerpt()); + haloDoc.setPublished(Post.isPublished(post.getMetadata())); + haloDoc.setRecycled(Post.isRecycled(post.getMetadata())); + haloDoc.setExposed(Post.isPublic(spec)); + haloDoc.setContent(content.getContent()); + haloDoc.setTags(spec.getTags()); + haloDoc.setCategories(spec.getCategories()); + haloDoc.setOwnerName(spec.getOwner()); + haloDoc.setUpdateTimestamp(spec.getPublishTime()); + haloDoc.setCreationTimestamp(post.getMetadata().getCreationTimestamp()); + haloDoc.setPermalink(post.getStatus().getPermalink()); + return haloDoc; + } +} diff --git a/application/src/main/java/run/halo/app/security/AuthProviderService.java b/application/src/main/java/run/halo/app/security/AuthProviderService.java new file mode 100644 index 0000000..c996db4 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/AuthProviderService.java @@ -0,0 +1,20 @@ +package run.halo.app.security; + +import java.util.List; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.AuthProvider; + +/** + * A service for {@link AuthProvider}. + * + * @author guqing + * @since 2.4.0 + */ +public interface AuthProviderService { + + Mono enable(String name); + + Mono disable(String name); + + Mono> listAll(); +} diff --git a/application/src/main/java/run/halo/app/security/AuthProviderServiceImpl.java b/application/src/main/java/run/halo/app/security/AuthProviderServiceImpl.java new file mode 100644 index 0000000..4b318ed --- /dev/null +++ b/application/src/main/java/run/halo/app/security/AuthProviderServiceImpl.java @@ -0,0 +1,183 @@ +package run.halo.app.security; + +import java.util.Comparator; +import java.util.HashMap; +import java.util.HashSet; +import java.util.List; +import java.util.Map; +import java.util.Set; +import java.util.function.Consumer; +import java.util.stream.Collectors; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.lang.NonNull; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.AuthProvider; +import run.halo.app.core.extension.UserConnection; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.utils.JsonUtils; + +/** + * A default implementation of {@link AuthProviderService}. + * + * @author guqing + * @since 2.4.0 + */ +@Component +@RequiredArgsConstructor +public class AuthProviderServiceImpl implements AuthProviderService { + private final ReactiveExtensionClient client; + + @Override + public Mono enable(String name) { + return client.get(AuthProvider.class, name) + .flatMap(authProvider -> updateAuthProviderEnabled(enabled -> enabled.add(name)) + .thenReturn(authProvider) + ); + } + + @Override + public Mono disable(String name) { + // privileged auth provider cannot be disabled + return client.get(AuthProvider.class, name) + .filter(authProvider -> !privileged(authProvider)) + .flatMap(authProvider -> updateAuthProviderEnabled(enabled -> enabled.remove(name)) + .thenReturn(authProvider) + ); + } + + @Override + public Mono> listAll() { + return client.list(AuthProvider.class, provider -> + provider.getMetadata().getDeletionTimestamp() == null, + defaultComparator() + ) + .map(this::convertTo) + .collectList() + .flatMap(providers -> listMyConnections() + .map(connection -> connection.getSpec().getRegistrationId()) + .collectList() + .map(connectedNames -> providers.stream() + .peek(provider -> { + boolean isBound = connectedNames.contains(provider.getName()); + provider.setIsBound(isBound); + }) + .collect(Collectors.toList()) + ) + .defaultIfEmpty(providers) + ) + .flatMap(providers -> fetchEnabledAuthProviders() + .map(names -> providers.stream() + .peek(provider -> { + boolean enabled = names.contains(provider.getName()); + provider.setEnabled(enabled); + }) + .collect(Collectors.toList()) + ) + .defaultIfEmpty(providers) + ); + } + + private Mono> fetchEnabledAuthProviders() { + return client.fetch(ConfigMap.class, SystemSetting.SYSTEM_CONFIG) + .map(configMap -> { + SystemSetting.AuthProvider authProvider = getAuthProvider(configMap); + return authProvider.getEnabled(); + }); + } + + Flux listMyConnections() { + return ReactiveSecurityContextHolder.getContext() + .map(securityContext -> securityContext.getAuthentication().getName()) + .flatMapMany(username -> client.list(UserConnection.class, + persisted -> persisted.getSpec().getUsername().equals(username), + Comparator.comparing(item -> item.getMetadata() + .getCreationTimestamp()) + ) + ); + } + + private static Comparator defaultComparator() { + return Comparator.comparing((AuthProvider item) -> item.getSpec().getPriority()) + .thenComparing(item -> item.getMetadata().getName()) + .thenComparing(item -> item.getMetadata().getCreationTimestamp()); + } + + private Mono updateAuthProviderEnabled(Consumer> consumer) { + return client.fetch(ConfigMap.class, SystemSetting.SYSTEM_CONFIG) + .switchIfEmpty(Mono.defer(() -> { + ConfigMap configMap = new ConfigMap(); + configMap.setMetadata(new Metadata()); + configMap.getMetadata().setName(SystemSetting.SYSTEM_CONFIG); + configMap.setData(new HashMap<>()); + return client.create(configMap); + })) + .flatMap(configMap -> { + SystemSetting.AuthProvider authProvider = getAuthProvider(configMap); + consumer.accept(authProvider.getEnabled()); + + final Map data = configMap.getData(); + data.put(SystemSetting.AuthProvider.GROUP, + JsonUtils.objectToJson(authProvider)); + return client.update(configMap); + }); + } + + private ListedAuthProvider convertTo(AuthProvider authProvider) { + return ListedAuthProvider.builder() + .name(authProvider.getMetadata().getName()) + .displayName(authProvider.getSpec().getDisplayName()) + .logo(authProvider.getSpec().getLogo()) + .website(authProvider.getSpec().getWebsite()) + .description(authProvider.getSpec().getDescription()) + .authenticationUrl(authProvider.getSpec().getAuthenticationUrl()) + .helpPage(authProvider.getSpec().getHelpPage()) + .bindingUrl(authProvider.getSpec().getBindingUrl()) + .unbindingUrl(authProvider.getSpec().getUnbindUrl()) + .supportsBinding(supportsBinding(authProvider)) + .isBound(false) + .enabled(false) + .privileged(privileged(authProvider)) + .build(); + } + + private static boolean supportsBinding(AuthProvider authProvider) { + return BooleanUtils.TRUE.equals(MetadataUtil.nullSafeLabels(authProvider) + .get(AuthProvider.AUTH_BINDING_LABEL)); + } + + private boolean privileged(AuthProvider authProvider) { + return BooleanUtils.TRUE.equals(MetadataUtil.nullSafeLabels(authProvider) + .get(AuthProvider.PRIVILEGED_LABEL)); + } + + @NonNull + private static SystemSetting.AuthProvider getAuthProvider(ConfigMap configMap) { + if (configMap.getData() == null) { + configMap.setData(new HashMap<>()); + } + final Map data = configMap.getData(); + String providerGroup = data.get(SystemSetting.AuthProvider.GROUP); + + SystemSetting.AuthProvider authProvider; + if (StringUtils.isBlank(providerGroup)) { + authProvider = new SystemSetting.AuthProvider(); + } else { + authProvider = + JsonUtils.jsonToObject(providerGroup, SystemSetting.AuthProvider.class); + } + + if (authProvider.getEnabled() == null) { + authProvider.setEnabled(new HashSet<>()); + } + return authProvider; + } +} diff --git a/application/src/main/java/run/halo/app/security/CorsConfigurer.java b/application/src/main/java/run/halo/app/security/CorsConfigurer.java new file mode 100644 index 0000000..8584fb2 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/CorsConfigurer.java @@ -0,0 +1,33 @@ +package run.halo.app.security; + +import com.google.common.net.HttpHeaders; +import java.util.List; +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.stereotype.Component; +import org.springframework.web.cors.CorsConfiguration; +import org.springframework.web.cors.reactive.CorsConfigurationSource; +import org.springframework.web.cors.reactive.UrlBasedCorsConfigurationSource; +import run.halo.app.security.authentication.SecurityConfigurer; + +@Component +public class CorsConfigurer implements SecurityConfigurer { + @Override + public void configure(ServerHttpSecurity http) { + http.cors(spec -> spec.configurationSource(apiCorsConfigSource())); + } + + CorsConfigurationSource apiCorsConfigSource() { + var configuration = new CorsConfiguration(); + configuration.setAllowedOriginPatterns(List.of("*")); + configuration.setAllowedHeaders( + List.of(HttpHeaders.AUTHORIZATION, HttpHeaders.CONTENT_TYPE, HttpHeaders.ACCEPT, + "X-XSRF-TOKEN", HttpHeaders.COOKIE)); + configuration.setAllowCredentials(true); + configuration.setAllowedMethods(List.of("GET", "POST", "PUT", "DELETE", "PATCH")); + + var source = new UrlBasedCorsConfigurationSource(); + source.registerCorsConfiguration("/api/**", configuration); + source.registerCorsConfiguration("/apis/**", configuration); + return source; + } +} diff --git a/application/src/main/java/run/halo/app/security/CsrfConfigurer.java b/application/src/main/java/run/halo/app/security/CsrfConfigurer.java new file mode 100644 index 0000000..0dc3b25 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/CsrfConfigurer.java @@ -0,0 +1,31 @@ +package run.halo.app.security; + +import static org.springframework.security.web.server.csrf.CookieServerCsrfTokenRepository.withHttpOnlyFalse; +import static org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers.pathMatchers; + +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.web.server.csrf.CsrfWebFilter; +import org.springframework.security.web.server.csrf.ServerCsrfTokenRequestAttributeHandler; +import org.springframework.security.web.server.util.matcher.AndServerWebExchangeMatcher; +import org.springframework.security.web.server.util.matcher.NegatedServerWebExchangeMatcher; +import org.springframework.stereotype.Component; +import run.halo.app.security.authentication.SecurityConfigurer; + +@Component +public class CsrfConfigurer implements SecurityConfigurer { + + @Override + public void configure(ServerHttpSecurity http) { + var csrfMatcher = new AndServerWebExchangeMatcher( + CsrfWebFilter.DEFAULT_CSRF_MATCHER, + new NegatedServerWebExchangeMatcher(pathMatchers("/api/**", "/apis/**") + )); + http.csrf(csrfSpec -> csrfSpec + .csrfTokenRepository(withHttpOnlyFalse()) + // TODO Use XorServerCsrfTokenRequestAttributeHandler instead when console implements + // the algorithm + .csrfTokenRequestHandler(new ServerCsrfTokenRequestAttributeHandler()) + .requireCsrfProtectionMatcher(csrfMatcher)); + } + +} diff --git a/application/src/main/java/run/halo/app/security/DefaultServerAuthenticationEntryPoint.java b/application/src/main/java/run/halo/app/security/DefaultServerAuthenticationEntryPoint.java new file mode 100644 index 0000000..9e0af48 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/DefaultServerAuthenticationEntryPoint.java @@ -0,0 +1,31 @@ +package run.halo.app.security; + +import org.springframework.http.HttpHeaders; +import org.springframework.http.HttpStatus; +import org.springframework.security.core.AuthenticationException; +import org.springframework.security.web.server.ServerAuthenticationEntryPoint; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +/** + * Default authentication entry point. + * See + * https://datatracker.ietf.org/doc/html/rfc7235#section-4.1 + * for more. + * + * @author johnniang + */ +public class DefaultServerAuthenticationEntryPoint implements ServerAuthenticationEntryPoint { + + @Override + public Mono commence(ServerWebExchange exchange, AuthenticationException ex) { + return Mono.defer(() -> { + var response = exchange.getResponse(); + var wwwAuthenticate = "FormLogin realm=\"console\""; + response.getHeaders().set(HttpHeaders.WWW_AUTHENTICATE, wwwAuthenticate); + response.setStatusCode(HttpStatus.UNAUTHORIZED); + return response.setComplete(); + }); + } + +} diff --git a/application/src/main/java/run/halo/app/security/DefaultSuperAdminInitializer.java b/application/src/main/java/run/halo/app/security/DefaultSuperAdminInitializer.java new file mode 100644 index 0000000..01ed1ca --- /dev/null +++ b/application/src/main/java/run/halo/app/security/DefaultSuperAdminInitializer.java @@ -0,0 +1,81 @@ +package run.halo.app.security; + +import java.time.Instant; +import java.util.List; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Role; +import run.halo.app.core.extension.RoleBinding; +import run.halo.app.core.extension.RoleBinding.RoleRef; +import run.halo.app.core.extension.RoleBinding.Subject; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.User.UserSpec; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.ReactiveExtensionClient; + +@Slf4j +@Component +@RequiredArgsConstructor +public class DefaultSuperAdminInitializer implements SuperAdminInitializer { + + private final ReactiveExtensionClient client; + private final PasswordEncoder passwordEncoder; + + @Override + public Mono initialize(InitializationParam param) { + return client.fetch(User.class, param.getUsername()) + .switchIfEmpty(Mono.defer(() -> client.create( + createAdmin(param.getUsername(), param.getPassword(), param.getEmail()))) + .flatMap(admin -> { + var binding = bindAdminAndSuperRole(admin); + return client.create(binding).thenReturn(admin); + }) + ) + .then(); + } + + RoleBinding bindAdminAndSuperRole(User admin) { + String adminUserName = admin.getMetadata().getName(); + var metadata = new Metadata(); + String name = + String.join("-", adminUserName, SUPER_ROLE_NAME, "binding"); + metadata.setName(name); + var roleRef = new RoleRef(); + roleRef.setName(SUPER_ROLE_NAME); + roleRef.setApiGroup(Role.GROUP); + roleRef.setKind(Role.KIND); + + var subject = new Subject(); + subject.setName(adminUserName); + subject.setApiGroup(admin.groupVersionKind().group()); + subject.setKind(admin.groupVersionKind().kind()); + + var roleBinding = new RoleBinding(); + roleBinding.setMetadata(metadata); + roleBinding.setRoleRef(roleRef); + roleBinding.setSubjects(List.of(subject)); + + return roleBinding; + } + + User createAdmin(String username, String password, String email) { + var metadata = new Metadata(); + metadata.setName(username); + + var spec = new UserSpec(); + spec.setDisplayName("Administrator"); + spec.setDisabled(false); + spec.setRegisteredAt(Instant.now()); + spec.setTwoFactorAuthEnabled(false); + spec.setEmail(email); + spec.setPassword(passwordEncoder.encode(password)); + + var user = new User(); + user.setMetadata(metadata); + user.setSpec(spec); + return user; + } +} diff --git a/application/src/main/java/run/halo/app/security/DefaultUserDetailService.java b/application/src/main/java/run/halo/app/security/DefaultUserDetailService.java new file mode 100644 index 0000000..b1bf1e5 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/DefaultUserDetailService.java @@ -0,0 +1,82 @@ +package run.halo.app.security; + +import static java.util.Objects.requireNonNullElse; +import static run.halo.app.security.authorization.AuthorityUtils.ANONYMOUS_ROLE_NAME; +import static run.halo.app.security.authorization.AuthorityUtils.AUTHENTICATED_ROLE_NAME; +import static run.halo.app.security.authorization.AuthorityUtils.ROLE_PREFIX; + +import lombok.Setter; +import org.springframework.security.authentication.BadCredentialsException; +import org.springframework.security.core.authority.SimpleGrantedAuthority; +import org.springframework.security.core.userdetails.ReactiveUserDetailsPasswordService; +import org.springframework.security.core.userdetails.ReactiveUserDetailsService; +import org.springframework.security.core.userdetails.User; +import org.springframework.security.core.userdetails.UserDetails; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.service.RoleService; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.infra.exception.UserNotFoundException; +import run.halo.app.security.authentication.login.HaloUser; +import run.halo.app.security.authentication.twofactor.TwoFactorUtils; + +public class DefaultUserDetailService + implements ReactiveUserDetailsService, ReactiveUserDetailsPasswordService { + + private final UserService userService; + + private final RoleService roleService; + + /** + * Indicates whether two-factor authentication is disabled. + */ + @Setter + private boolean twoFactorAuthDisabled; + + public DefaultUserDetailService(UserService userService, RoleService roleService) { + this.userService = userService; + this.roleService = roleService; + } + + @Override + public Mono updatePassword(UserDetails user, String newPassword) { + return userService.updatePassword(user.getUsername(), newPassword) + .map(u -> withNewPassword(user, newPassword)); + } + + @Override + public Mono findByUsername(String username) { + return userService.getUser(username) + .onErrorMap(UserNotFoundException.class, + e -> new BadCredentialsException("Invalid Credentials")) + .flatMap(user -> { + var name = user.getMetadata().getName(); + var userBuilder = User.withUsername(name) + .password(user.getSpec().getPassword()) + .disabled(requireNonNullElse(user.getSpec().getDisabled(), false)); + var setAuthorities = roleService.getRolesByUsername(name) + // every authenticated user should have authenticated and anonymous roles. + .concatWithValues(AUTHENTICATED_ROLE_NAME, ANONYMOUS_ROLE_NAME) + .map(roleName -> new SimpleGrantedAuthority(ROLE_PREFIX + roleName)) + .distinct() + .collectList() + .doOnNext(userBuilder::authorities); + + return setAuthorities.then(Mono.fromSupplier(() -> { + var twoFactorAuthSettings = TwoFactorUtils.getTwoFactorAuthSettings(user); + return new HaloUser.Builder(userBuilder.build()) + .twoFactorAuthEnabled( + (!twoFactorAuthDisabled) && twoFactorAuthSettings.isAvailable() + ) + .totpEncryptedSecret(user.getSpec().getTotpEncryptedSecret()) + .build(); + })); + }); + } + + private UserDetails withNewPassword(UserDetails userDetails, String newPassword) { + return User.withUserDetails(userDetails) + .password(newPassword) + .build(); + } + +} diff --git a/application/src/main/java/run/halo/app/security/ExceptionSecurityConfigurer.java b/application/src/main/java/run/halo/app/security/ExceptionSecurityConfigurer.java new file mode 100644 index 0000000..bdb5979 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/ExceptionSecurityConfigurer.java @@ -0,0 +1,22 @@ +package run.halo.app.security; + +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.oauth2.server.resource.web.access.server.BearerTokenServerAccessDeniedHandler; +import org.springframework.stereotype.Component; +import run.halo.app.security.authentication.SecurityConfigurer; + +@Component +public class ExceptionSecurityConfigurer implements SecurityConfigurer { + + @Override + public void configure(ServerHttpSecurity http) { + http.exceptionHandling(exception -> { + var accessDeniedHandler = new BearerTokenServerAccessDeniedHandler(); + var entryPoint = new DefaultServerAuthenticationEntryPoint(); + exception + .authenticationEntryPoint(entryPoint) + .accessDeniedHandler(accessDeniedHandler); + }); + } + +} diff --git a/application/src/main/java/run/halo/app/security/HaloUserDetails.java b/application/src/main/java/run/halo/app/security/HaloUserDetails.java new file mode 100644 index 0000000..927ce8e --- /dev/null +++ b/application/src/main/java/run/halo/app/security/HaloUserDetails.java @@ -0,0 +1,21 @@ +package run.halo.app.security; + +import org.springframework.security.core.userdetails.UserDetails; + +public interface HaloUserDetails extends UserDetails { + + /** + * Checks if two-factor authentication is enabled. + * + * @return true if two-factor authentication is enabled, false otherwise. + */ + boolean isTwoFactorAuthEnabled(); + + /** + * Gets the encrypted secret of TOTP. + * + * @return encrypted secret of TOTP. + */ + String getTotpEncryptedSecret(); + +} diff --git a/application/src/main/java/run/halo/app/security/InitializeRedirectionWebFilter.java b/application/src/main/java/run/halo/app/security/InitializeRedirectionWebFilter.java new file mode 100644 index 0000000..08f2e37 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/InitializeRedirectionWebFilter.java @@ -0,0 +1,62 @@ +package run.halo.app.security; + +import java.net.URI; +import lombok.Getter; +import lombok.RequiredArgsConstructor; +import org.springframework.http.HttpMethod; +import org.springframework.lang.NonNull; +import org.springframework.security.web.server.DefaultServerRedirectStrategy; +import org.springframework.security.web.server.ServerRedirectStrategy; +import org.springframework.security.web.server.util.matcher.PathPatternParserServerWebExchangeMatcher; +import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.WebFilter; +import org.springframework.web.server.WebFilterChain; +import reactor.core.publisher.Mono; +import run.halo.app.infra.InitializationStateGetter; + +/** + * A web filter that will redirect user to set up page if system is not initialized. + * + * @author guqing + * @since 2.5.2 + */ +@Component +@RequiredArgsConstructor +public class InitializeRedirectionWebFilter implements WebFilter { + private final URI location = URI.create("/console"); + private final ServerWebExchangeMatcher redirectMatcher = + new PathPatternParserServerWebExchangeMatcher("/", HttpMethod.GET); + + private final InitializationStateGetter initializationStateGetter; + + @Getter + private ServerRedirectStrategy redirectStrategy = new DefaultServerRedirectStrategy(); + + @Override + @NonNull + public Mono filter(@NonNull ServerWebExchange exchange, @NonNull WebFilterChain chain) { + return redirectMatcher.matches(exchange) + .flatMap(matched -> { + if (!matched.isMatch()) { + return chain.filter(exchange); + } + return initializationStateGetter.userInitialized() + .defaultIfEmpty(false) + .flatMap(initialized -> { + if (initialized) { + return chain.filter(exchange); + } + // Redirect to set up page if system is not initialized. + return redirectStrategy.sendRedirect(exchange, location); + }); + }); + } + + public void setRedirectStrategy(ServerRedirectStrategy redirectStrategy) { + Assert.notNull(redirectStrategy, "redirectStrategy cannot be null"); + this.redirectStrategy = redirectStrategy; + } +} diff --git a/application/src/main/java/run/halo/app/security/ListedAuthProvider.java b/application/src/main/java/run/halo/app/security/ListedAuthProvider.java new file mode 100644 index 0000000..e0484ff --- /dev/null +++ b/application/src/main/java/run/halo/app/security/ListedAuthProvider.java @@ -0,0 +1,45 @@ +package run.halo.app.security; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Builder; +import lombok.Data; + +/** + * A listed value object for {@link run.halo.app.core.extension.AuthProvider}. + * + * @author guqing + * @since 2.4.0 + */ +@Data +@Builder +public class ListedAuthProvider { + @Schema(requiredMode = REQUIRED) + String name; + + @Schema(requiredMode = REQUIRED) + String displayName; + + String description; + + String logo; + + String website; + + String authenticationUrl; + + String helpPage; + + String bindingUrl; + + String unbindingUrl; + + Boolean isBound; + + Boolean enabled; + + Boolean supportsBinding; + + Boolean privileged; +} diff --git a/application/src/main/java/run/halo/app/security/LoginHandlerEnhancerImpl.java b/application/src/main/java/run/halo/app/security/LoginHandlerEnhancerImpl.java new file mode 100644 index 0000000..bb72c7c --- /dev/null +++ b/application/src/main/java/run/halo/app/security/LoginHandlerEnhancerImpl.java @@ -0,0 +1,39 @@ +package run.halo.app.security; + +import lombok.RequiredArgsConstructor; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.AuthenticationException; +import org.springframework.stereotype.Component; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.security.authentication.rememberme.RememberMeServices; +import run.halo.app.security.device.DeviceService; + +/** + * A default implementation for {@link LoginHandlerEnhancer} to handle device management and + * remember me. + * + * @author guqing + * @since 2.17.0 + */ +@Component +@RequiredArgsConstructor +public class LoginHandlerEnhancerImpl implements LoginHandlerEnhancer { + + private final RememberMeServices rememberMeServices; + + private final DeviceService deviceService; + + @Override + public Mono onLoginSuccess(ServerWebExchange exchange, + Authentication successfulAuthentication) { + return rememberMeServices.loginSuccess(exchange, successfulAuthentication) + .then(deviceService.loginSuccess(exchange, successfulAuthentication)); + } + + @Override + public Mono onLoginFailure(ServerWebExchange exchange, + AuthenticationException exception) { + return rememberMeServices.loginFail(exchange); + } +} diff --git a/application/src/main/java/run/halo/app/security/LogoutSecurityConfigurer.java b/application/src/main/java/run/halo/app/security/LogoutSecurityConfigurer.java new file mode 100644 index 0000000..79c3974 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/LogoutSecurityConfigurer.java @@ -0,0 +1,77 @@ +package run.halo.app.security; + +import static org.springframework.security.config.web.server.SecurityWebFiltersOrder.LOGOUT_PAGE_GENERATING; +import static run.halo.app.security.authentication.WebExchangeMatchers.ignoringMediaTypeAll; + +import java.net.URI; +import lombok.RequiredArgsConstructor; +import org.springframework.context.ApplicationContext; +import org.springframework.http.HttpStatus; +import org.springframework.http.MediaType; +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.core.Authentication; +import org.springframework.security.web.server.WebFilterExchange; +import org.springframework.security.web.server.authentication.logout.DelegatingServerLogoutHandler; +import org.springframework.security.web.server.authentication.logout.RedirectServerLogoutSuccessHandler; +import org.springframework.security.web.server.authentication.logout.ServerLogoutHandler; +import org.springframework.security.web.server.authentication.logout.ServerLogoutSuccessHandler; +import org.springframework.security.web.server.ui.LogoutPageGeneratingWebFilter; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.security.authentication.SecurityConfigurer; +import run.halo.app.security.authentication.rememberme.RememberMeServices; + +@Component +@RequiredArgsConstructor +public class LogoutSecurityConfigurer implements SecurityConfigurer { + private final RememberMeServices rememberMeServices; + private final ApplicationContext applicationContext; + + @Override + public void configure(ServerHttpSecurity http) { + var serverLogoutHandlers = getLogoutHandlers(); + http.logout( + logout -> logout.logoutSuccessHandler(new LogoutSuccessHandler(serverLogoutHandlers))); + http.addFilterAt(new LogoutPageGeneratingWebFilter(), LOGOUT_PAGE_GENERATING); + } + + private class LogoutSuccessHandler implements ServerLogoutSuccessHandler { + + private final ServerLogoutSuccessHandler defaultHandler; + private final ServerLogoutHandler logoutHandler; + + public LogoutSuccessHandler(ServerLogoutHandler... logoutHandler) { + var defaultHandler = new RedirectServerLogoutSuccessHandler(); + defaultHandler.setLogoutSuccessUrl(URI.create("/console/?logout")); + this.defaultHandler = defaultHandler; + if (logoutHandler.length == 1) { + this.logoutHandler = logoutHandler[0]; + } else { + this.logoutHandler = new DelegatingServerLogoutHandler(logoutHandler); + } + } + + @Override + public Mono onLogoutSuccess(WebFilterExchange exchange, + Authentication authentication) { + return logoutHandler.logout(exchange, authentication) + .then(rememberMeServices.loginFail(exchange.getExchange())) + .then(ignoringMediaTypeAll(MediaType.APPLICATION_JSON) + .matches(exchange.getExchange()) + .flatMap(matchResult -> { + if (matchResult.isMatch()) { + var response = exchange.getExchange().getResponse(); + response.setStatusCode(HttpStatus.NO_CONTENT); + return response.setComplete(); + } + return defaultHandler.onLogoutSuccess(exchange, authentication); + }) + ); + } + } + + private ServerLogoutHandler[] getLogoutHandlers() { + return applicationContext.getBeansOfType(ServerLogoutHandler.class).values() + .toArray(new ServerLogoutHandler[0]); + } +} diff --git a/application/src/main/java/run/halo/app/security/SecurityWebFiltersConfigurer.java b/application/src/main/java/run/halo/app/security/SecurityWebFiltersConfigurer.java new file mode 100644 index 0000000..daef125 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/SecurityWebFiltersConfigurer.java @@ -0,0 +1,80 @@ +package run.halo.app.security; + +import static org.springframework.security.config.web.server.SecurityWebFiltersOrder.ANONYMOUS_AUTHENTICATION; +import static org.springframework.security.config.web.server.SecurityWebFiltersOrder.AUTHENTICATION; +import static org.springframework.security.config.web.server.SecurityWebFiltersOrder.FIRST; +import static org.springframework.security.config.web.server.SecurityWebFiltersOrder.FORM_LOGIN; +import static org.springframework.security.config.web.server.SecurityWebFiltersOrder.LAST; + +import lombok.Setter; +import org.pf4j.ExtensionPoint; +import org.springframework.core.annotation.AnnotationAwareOrderComparator; +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.web.server.WebFilterChainProxy; +import org.springframework.stereotype.Component; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.WebFilter; +import org.springframework.web.server.WebFilterChain; +import reactor.core.publisher.Mono; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.security.authentication.SecurityConfigurer; + +@Component +public class SecurityWebFiltersConfigurer implements SecurityConfigurer { + + private final ExtensionGetter extensionGetter; + + public SecurityWebFiltersConfigurer(ExtensionGetter extensionGetter) { + this.extensionGetter = extensionGetter; + } + + @Override + public void configure(ServerHttpSecurity http) { + http + .addFilterAt( + new SecurityWebFilterChainProxy(BeforeSecurityWebFilter.class), + FIRST + ) + .addFilterAt( + new SecurityWebFilterChainProxy(FormLoginSecurityWebFilter.class), + FORM_LOGIN + ) + .addFilterAt( + new SecurityWebFilterChainProxy(AuthenticationSecurityWebFilter.class), + AUTHENTICATION + ) + .addFilterAt( + new SecurityWebFilterChainProxy(AnonymousAuthenticationSecurityWebFilter.class), + ANONYMOUS_AUTHENTICATION + ) + .addFilterAt( + new SecurityWebFilterChainProxy(AfterSecurityWebFilter.class), + LAST + ) + ; + } + + public class SecurityWebFilterChainProxy implements WebFilter { + + @Setter + private WebFilterChainProxy.WebFilterChainDecorator filterChainDecorator; + + private final Class extensionPointClass; + + public SecurityWebFilterChainProxy(Class extensionPointClass) { + this.extensionPointClass = extensionPointClass; + this.filterChainDecorator = new WebFilterChainProxy.DefaultWebFilterChainDecorator(); + } + + @Override + public Mono filter(ServerWebExchange exchange, WebFilterChain chain) { + return extensionGetter.getExtensions(this.extensionPointClass) + .sort(AnnotationAwareOrderComparator.INSTANCE) + .cast(WebFilter.class) + .collectList() + .map(filters -> filterChainDecorator.decorate(chain, filters)) + .flatMap(decoratedChain -> decoratedChain.filter(exchange)); + } + } + +} diff --git a/application/src/main/java/run/halo/app/security/SuperAdminInitializer.java b/application/src/main/java/run/halo/app/security/SuperAdminInitializer.java new file mode 100644 index 0000000..802d87f --- /dev/null +++ b/application/src/main/java/run/halo/app/security/SuperAdminInitializer.java @@ -0,0 +1,32 @@ +package run.halo.app.security; + +import lombok.Builder; +import lombok.Data; +import reactor.core.publisher.Mono; +import run.halo.app.security.authorization.AuthorityUtils; + +/** + * Super admin initializer. + * + * @author guqing + * @since 2.9.0 + */ +public interface SuperAdminInitializer { + + String SUPER_ROLE_NAME = AuthorityUtils.SUPER_ROLE_NAME; + + /** + * Initialize super admin. + * + * @param param super admin initialization param + */ + Mono initialize(InitializationParam param); + + @Data + @Builder + class InitializationParam { + private String username; + private String password; + private String email; + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/CryptoService.java b/application/src/main/java/run/halo/app/security/authentication/CryptoService.java new file mode 100644 index 0000000..0084fda --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/CryptoService.java @@ -0,0 +1,37 @@ +package run.halo.app.security.authentication; + +import com.nimbusds.jose.jwk.JWK; +import reactor.core.publisher.Mono; + +public interface CryptoService { + + /** + * Decrypts message with Base64 format. + * + * @param encryptedMessage is a byte array containing encrypted message. + * @return decrypted message. + */ + Mono decrypt(byte[] encryptedMessage); + + /** + * Reads public key. + * + * @return byte array of public key + */ + Mono readPublicKey(); + + /** + * Gets key ID of private key. + * + * @return key ID of private key. + */ + String getKeyId(); + + /** + * Gets JSON Web Keys. + * + * @return JSON Web Keys + */ + JWK getJwk(); + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/SecurityConfigurer.java b/application/src/main/java/run/halo/app/security/authentication/SecurityConfigurer.java new file mode 100644 index 0000000..71afce7 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/SecurityConfigurer.java @@ -0,0 +1,9 @@ +package run.halo.app.security.authentication; + +import org.springframework.security.config.web.server.ServerHttpSecurity; + +public interface SecurityConfigurer { + + void configure(ServerHttpSecurity http); + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/WebExchangeMatchers.java b/application/src/main/java/run/halo/app/security/authentication/WebExchangeMatchers.java new file mode 100644 index 0000000..a947ee9 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/WebExchangeMatchers.java @@ -0,0 +1,16 @@ +package run.halo.app.security.authentication; + +import java.util.Set; +import org.springframework.http.MediaType; +import org.springframework.security.web.server.util.matcher.MediaTypeServerWebExchangeMatcher; +import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher; + +public enum WebExchangeMatchers { + ; + + public static ServerWebExchangeMatcher ignoringMediaTypeAll(MediaType... matchingMediaTypes) { + var matcher = new MediaTypeServerWebExchangeMatcher(matchingMediaTypes); + matcher.setIgnoredMediaTypes(Set.of(MediaType.ALL)); + return matcher; + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/impl/RsaKeyService.java b/application/src/main/java/run/halo/app/security/authentication/impl/RsaKeyService.java new file mode 100644 index 0000000..2b76235 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/impl/RsaKeyService.java @@ -0,0 +1,162 @@ +package run.halo.app.security.authentication.impl; + +import static com.nimbusds.jose.jwk.KeyOperation.SIGN; +import static com.nimbusds.jose.jwk.KeyOperation.VERIFY; +import static java.nio.file.StandardOpenOption.TRUNCATE_EXISTING; + +import com.nimbusds.jose.JOSEException; +import com.nimbusds.jose.JWSAlgorithm; +import com.nimbusds.jose.jwk.JWK; +import com.nimbusds.jose.jwk.KeyUse; +import com.nimbusds.jose.jwk.RSAKey; +import com.nimbusds.jose.jwk.gen.RSAKeyGenerator; +import java.io.IOException; +import java.nio.file.Files; +import java.nio.file.Path; +import java.security.InvalidKeyException; +import java.security.KeyFactory; +import java.security.KeyPair; +import java.security.MessageDigest; +import java.security.NoSuchAlgorithmException; +import java.security.PublicKey; +import java.security.interfaces.RSAPublicKey; +import java.security.spec.InvalidKeySpecException; +import java.security.spec.PKCS8EncodedKeySpec; +import java.security.spec.X509EncodedKeySpec; +import java.util.Set; +import javax.crypto.BadPaddingException; +import javax.crypto.Cipher; +import javax.crypto.IllegalBlockSizeException; +import javax.crypto.NoSuchPaddingException; +import lombok.extern.slf4j.Slf4j; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.security.crypto.codec.Hex; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Schedulers; +import run.halo.app.security.authentication.CryptoService; +import run.halo.app.security.authentication.login.InvalidEncryptedMessageException; + +@Slf4j +public class RsaKeyService implements CryptoService, InitializingBean { + + public static final String TRANSFORMATION = "RSA/ECB/PKCS1Padding"; + + public static final String ALGORITHM = "RSA"; + + private final Path keysRoot; + + private KeyPair keyPair; + + private String keyId; + + private JWK jwk; + + public RsaKeyService(Path dir) { + this.keysRoot = dir; + } + + @Override + public void afterPropertiesSet() throws JOSEException { + this.keyPair = this.getRsaKeyPairOrCreate(); + this.keyId = sha256(keyPair.getPrivate().getEncoded()); + this.jwk = new RSAKey.Builder((RSAPublicKey) keyPair.getPublic()) + .privateKey(keyPair.getPrivate()) + .keyUse(KeyUse.SIGNATURE) + .keyOperations(Set.of(SIGN, VERIFY)) + .keyIDFromThumbprint() + .algorithm(JWSAlgorithm.RS256) + .build(); + } + + private KeyPair getRsaKeyPairOrCreate() { + var privKeyPath = keysRoot.resolve("pat_id_rsa"); + var pubKeyPath = keysRoot.resolve("pat_id_rsa.pub"); + try { + if (Files.exists(privKeyPath) && Files.exists(pubKeyPath)) { + log.debug("Skip initializing RSA Keys for PAT due to existence."); + + var keyFactory = KeyFactory.getInstance(ALGORITHM); + + var privKeyBytes = Files.readAllBytes(privKeyPath); + var privKeySpec = new PKCS8EncodedKeySpec(privKeyBytes); + var privKey = keyFactory.generatePrivate(privKeySpec); + + var pubKeyBytes = Files.readAllBytes(pubKeyPath); + var pubKeySpec = new X509EncodedKeySpec(pubKeyBytes); + var pubKey = keyFactory.generatePublic(pubKeySpec); + + return new KeyPair(pubKey, privKey); + } + + if (Files.notExists(keysRoot)) { + Files.createDirectories(keysRoot); + } + Files.createFile(privKeyPath); + Files.createFile(pubKeyPath); + + log.info("Generating RSA keys for PAT."); + var rsaKey = new RSAKeyGenerator(4096).generate(); + var pubKey = rsaKey.toRSAPublicKey(); + var privKey = rsaKey.toRSAPrivateKey(); + Files.write(privKeyPath, privKey.getEncoded(), TRUNCATE_EXISTING); + Files.write(pubKeyPath, pubKey.getEncoded(), TRUNCATE_EXISTING); + log.info("Wrote RSA keys for PAT into {} and {}", privKeyPath, pubKeyPath); + return new KeyPair(pubKey, privKey); + } catch (JOSEException | IOException + | InvalidKeySpecException | NoSuchAlgorithmException e) { + throw new RuntimeException("Failed to generate or read RSA key pair", e); + } + } + + @Override + public Mono decrypt(byte[] encryptedMessage) { + return Mono.just(this.keyPair) + .map(KeyPair::getPrivate) + .flatMap(privateKey -> { + try { + var cipher = Cipher.getInstance(TRANSFORMATION); + cipher.init(Cipher.DECRYPT_MODE, privateKey); + return Mono.just(cipher.doFinal(encryptedMessage)); + } catch (NoSuchAlgorithmException + | NoSuchPaddingException + | InvalidKeyException e) { + return Mono.error(new RuntimeException( + "Failed to read private key or the key was invalid.", e + )); + } catch (IllegalBlockSizeException | BadPaddingException e) { + return Mono.error(new InvalidEncryptedMessageException( + "Invalid encrypted message." + )); + } + }) + .subscribeOn(Schedulers.boundedElastic()); + } + + @Override + public Mono readPublicKey() { + return Mono.just(keyPair) + .map(KeyPair::getPublic) + .map(PublicKey::getEncoded); + } + + @Override + public String getKeyId() { + return this.keyId; + } + + @Override + public JWK getJwk() { + return this.jwk; + } + + private static String sha256(byte[] data) { + try { + var md = MessageDigest.getInstance("SHA-256"); + return new String(Hex.encode(md.digest(data))); + } catch (NoSuchAlgorithmException e) { + // should never happen + throw new RuntimeException("Cannot obtain SHA-256 algorithm for message digest.", e); + } + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/jwt/JwtAuthenticationConfigurer.java b/application/src/main/java/run/halo/app/security/authentication/jwt/JwtAuthenticationConfigurer.java new file mode 100644 index 0000000..26c18b5 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/jwt/JwtAuthenticationConfigurer.java @@ -0,0 +1,70 @@ +package run.halo.app.security.authentication.jwt; + +import static org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers.pathMatchers; + +import org.springframework.http.HttpMethod; +import org.springframework.http.MediaType; +import org.springframework.http.codec.ServerCodecConfigurer; +import org.springframework.security.config.web.server.SecurityWebFiltersOrder; +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.core.userdetails.ReactiveUserDetailsService; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.oauth2.jwt.JwtEncoder; +import org.springframework.security.web.server.authentication.AuthenticationWebFilter; +import org.springframework.security.web.server.util.matcher.AndServerWebExchangeMatcher; +import org.springframework.security.web.server.util.matcher.MediaTypeServerWebExchangeMatcher; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.infra.properties.JwtProperties; +import run.halo.app.security.authentication.SecurityConfigurer; + +/** + * TODO: Use It after 2.0.0. + */ +public class JwtAuthenticationConfigurer implements SecurityConfigurer { + + private final ReactiveUserDetailsService userDetailsService; + + private final PasswordEncoder passwordEncoder; + + private final ServerCodecConfigurer codec; + + private final JwtEncoder jwtEncoder; + + private final ServerResponse.Context context; + + private final JwtProperties jwtProp; + + public JwtAuthenticationConfigurer(ReactiveUserDetailsService userDetailsService, + PasswordEncoder passwordEncoder, + ServerCodecConfigurer codec, + JwtEncoder jwtEncoder, + ServerResponse.Context context, + JwtProperties jwtProp) { + this.userDetailsService = userDetailsService; + this.passwordEncoder = passwordEncoder; + this.codec = codec; + this.jwtEncoder = jwtEncoder; + this.context = context; + this.jwtProp = jwtProp; + } + + @Override + public void configure(ServerHttpSecurity http) { + var loginManager = new LoginAuthenticationManager(userDetailsService, passwordEncoder); + + var filter = new AuthenticationWebFilter(loginManager); + var loginMatcher = new AndServerWebExchangeMatcher( + pathMatchers(HttpMethod.POST, "/api/auth/token"), + new MediaTypeServerWebExchangeMatcher(MediaType.APPLICATION_JSON) + ); + + filter.setRequiresAuthenticationMatcher(loginMatcher); + filter.setServerAuthenticationConverter( + new LoginAuthenticationConverter(codec.getReaders())); + filter.setAuthenticationSuccessHandler( + new LoginAuthenticationSuccessHandler(jwtEncoder, jwtProp, context)); + filter.setAuthenticationFailureHandler(new LoginAuthenticationFailureHandler(context)); + + http.addFilterAt(filter, SecurityWebFiltersOrder.FORM_LOGIN); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationConverter.java b/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationConverter.java new file mode 100644 index 0000000..05d1d00 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationConverter.java @@ -0,0 +1,37 @@ +package run.halo.app.security.authentication.jwt; + +import static org.springframework.security.authentication.UsernamePasswordAuthenticationToken.unauthenticated; + +import java.util.List; +import lombok.Data; +import org.springframework.http.codec.HttpMessageReader; +import org.springframework.security.core.Authentication; +import org.springframework.security.web.server.authentication.ServerAuthenticationConverter; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +public class LoginAuthenticationConverter implements ServerAuthenticationConverter { + + private final List> reader; + + public LoginAuthenticationConverter(List> reader) { + this.reader = reader; + } + + @Override + public Mono convert(ServerWebExchange exchange) { + return ServerRequest.create(exchange, this.reader) + .bodyToMono(UsernamePasswordRequest.class) + .map(request -> unauthenticated(request.getUsername(), request.getPassword())); + } + + @Data + public static class UsernamePasswordRequest { + + private String username; + + private String password; + + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationFailureHandler.java b/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationFailureHandler.java new file mode 100644 index 0000000..8078a2e --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationFailureHandler.java @@ -0,0 +1,31 @@ +package run.halo.app.security.authentication.jwt; + +import java.util.Map; +import org.springframework.http.MediaType; +import org.springframework.security.core.AuthenticationException; +import org.springframework.security.web.server.WebFilterExchange; +import org.springframework.security.web.server.authentication.ServerAuthenticationFailureHandler; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; + +public class LoginAuthenticationFailureHandler implements ServerAuthenticationFailureHandler { + + private final ServerResponse.Context context; + + public LoginAuthenticationFailureHandler(ServerResponse.Context context) { + this.context = context; + } + + @Override + public Mono onAuthenticationFailure(WebFilterExchange webFilterExchange, + AuthenticationException exception) { + return ServerResponse.badRequest() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue( + Map.of("error", exception.getLocalizedMessage()) + ) + .flatMap(serverResponse -> + serverResponse.writeTo(webFilterExchange.getExchange(), context)); + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationManager.java b/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationManager.java new file mode 100644 index 0000000..a5b3ce3 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationManager.java @@ -0,0 +1,19 @@ +package run.halo.app.security.authentication.jwt; + +import org.springframework.security.authentication.UserDetailsRepositoryReactiveAuthenticationManager; +import org.springframework.security.core.userdetails.ReactiveUserDetailsPasswordService; +import org.springframework.security.core.userdetails.ReactiveUserDetailsService; +import org.springframework.security.crypto.password.PasswordEncoder; + +public final class LoginAuthenticationManager + extends UserDetailsRepositoryReactiveAuthenticationManager { + + public LoginAuthenticationManager(ReactiveUserDetailsService userDetailsService, + PasswordEncoder passwordEncoder) { + super(userDetailsService); + super.setPasswordEncoder(passwordEncoder); + if (userDetailsService instanceof ReactiveUserDetailsPasswordService passwordService) { + super.setUserDetailsPasswordService(passwordService); + } + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationSuccessHandler.java b/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationSuccessHandler.java new file mode 100644 index 0000000..6ec9161 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/jwt/LoginAuthenticationSuccessHandler.java @@ -0,0 +1,62 @@ +package run.halo.app.security.authentication.jwt; + +import java.time.Instant; +import java.time.temporal.ChronoUnit; +import java.util.Map; +import java.util.stream.Collectors; +import org.springframework.http.MediaType; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.GrantedAuthority; +import org.springframework.security.oauth2.jwt.JwsHeader; +import org.springframework.security.oauth2.jwt.JwtClaimsSet; +import org.springframework.security.oauth2.jwt.JwtEncoder; +import org.springframework.security.oauth2.jwt.JwtEncoderParameters; +import org.springframework.security.web.server.WebFilterExchange; +import org.springframework.security.web.server.authentication.ServerAuthenticationSuccessHandler; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.infra.properties.JwtProperties; + +public class LoginAuthenticationSuccessHandler implements ServerAuthenticationSuccessHandler { + + private final JwtEncoder jwtEncoder; + + private final JwtProperties jwtProp; + + private final ServerResponse.Context context; + + public LoginAuthenticationSuccessHandler(JwtEncoder jwtEncoder, JwtProperties jwtProp, + ServerResponse.Context context) { + this.jwtEncoder = jwtEncoder; + this.jwtProp = jwtProp; + this.context = context; + } + + @Override + public Mono onAuthenticationSuccess(WebFilterExchange webFilterExchange, + Authentication authentication) { + var issuedAt = Instant.now(); + // TODO Make the expiresAt configurable + var expiresAt = issuedAt.plus(24, ChronoUnit.HOURS); + var headers = JwsHeader.with(jwtProp.getJwsAlgorithm()).build(); + var claims = JwtClaimsSet.builder() + .issuer("Halo Owner") + .issuedAt(issuedAt) + .expiresAt(expiresAt) + // the principal is the username + .subject(authentication.getName()) + .claim("scope", authentication.getAuthorities().stream() + .map(GrantedAuthority::getAuthority) + .collect(Collectors.toList())) + .build(); + + var jwt = jwtEncoder.encode(JwtEncoderParameters.from(headers, claims)); + + return ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(Map.of("token", jwt.getTokenValue())) + .flatMap(serverResponse -> serverResponse.writeTo(webFilterExchange.getExchange(), + this.context)); + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/login/HaloUser.java b/application/src/main/java/run/halo/app/security/authentication/login/HaloUser.java new file mode 100644 index 0000000..508dc84 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/login/HaloUser.java @@ -0,0 +1,120 @@ +package run.halo.app.security.authentication.login; + +import java.util.Collection; +import java.util.Objects; +import org.springframework.security.core.CredentialsContainer; +import org.springframework.security.core.GrantedAuthority; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.util.Assert; +import run.halo.app.security.HaloUserDetails; + +public class HaloUser implements HaloUserDetails, CredentialsContainer { + + private final UserDetails delegate; + + private final boolean twoFactorAuthEnabled; + + private String totpEncryptedSecret; + + public HaloUser(UserDetails delegate, + boolean twoFactorAuthEnabled, + String totpEncryptedSecret) { + Assert.notNull(delegate, "Delegate user must not be null"); + this.delegate = delegate; + this.twoFactorAuthEnabled = twoFactorAuthEnabled; + this.totpEncryptedSecret = totpEncryptedSecret; + } + + @Override + public Collection getAuthorities() { + return delegate.getAuthorities(); + } + + @Override + public String getPassword() { + return delegate.getPassword(); + } + + @Override + public String getUsername() { + return delegate.getUsername(); + } + + @Override + public boolean isAccountNonExpired() { + return delegate.isAccountNonExpired(); + } + + @Override + public boolean isAccountNonLocked() { + return delegate.isAccountNonLocked(); + } + + @Override + public boolean isCredentialsNonExpired() { + return delegate.isCredentialsNonExpired(); + } + + @Override + public boolean isEnabled() { + return delegate.isEnabled(); + } + + @Override + public void eraseCredentials() { + if (delegate instanceof CredentialsContainer container) { + container.eraseCredentials(); + } + this.totpEncryptedSecret = null; + } + + @Override + public boolean equals(Object obj) { + if (obj instanceof HaloUser user) { + return Objects.equals(this.delegate, user.delegate); + } + return false; + } + + @Override + public int hashCode() { + return this.delegate.hashCode(); + } + + @Override + public boolean isTwoFactorAuthEnabled() { + return this.twoFactorAuthEnabled; + } + + @Override + public String getTotpEncryptedSecret() { + return this.totpEncryptedSecret; + } + + public static class Builder { + + private final UserDetails user; + + private boolean twoFactorAuthEnabled; + + private String totpEncryptedSecret; + + public Builder(UserDetails user) { + this.user = user; + } + + public Builder twoFactorAuthEnabled(boolean twoFactorAuthEnabled) { + this.twoFactorAuthEnabled = twoFactorAuthEnabled; + return this; + } + + public Builder totpEncryptedSecret(String totpEncryptedSecret) { + this.totpEncryptedSecret = totpEncryptedSecret; + return this; + } + + public HaloUserDetails build() { + return new HaloUser(user, twoFactorAuthEnabled, totpEncryptedSecret); + } + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/login/InvalidEncryptedMessageException.java b/application/src/main/java/run/halo/app/security/authentication/login/InvalidEncryptedMessageException.java new file mode 100644 index 0000000..3e7cb4d --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/login/InvalidEncryptedMessageException.java @@ -0,0 +1,17 @@ +package run.halo.app.security.authentication.login; + +/** + * InvalidEncryptedMessageException indicates the encrypted message is invalid. + * + * @author johnniang + */ +public class InvalidEncryptedMessageException extends RuntimeException { + + public InvalidEncryptedMessageException(String message) { + super(message); + } + + public InvalidEncryptedMessageException(String message, Throwable cause) { + super(message, cause); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/login/LoginAuthenticationConverter.java b/application/src/main/java/run/halo/app/security/authentication/login/LoginAuthenticationConverter.java new file mode 100644 index 0000000..9a3bfb7 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/login/LoginAuthenticationConverter.java @@ -0,0 +1,71 @@ +package run.halo.app.security.authentication.login; + +import static java.nio.charset.StandardCharsets.UTF_8; + +import io.github.resilience4j.ratelimiter.RateLimiterRegistry; +import io.github.resilience4j.ratelimiter.RequestNotPermitted; +import io.github.resilience4j.reactor.ratelimiter.operator.RateLimiterOperator; +import java.util.Base64; +import lombok.extern.slf4j.Slf4j; +import org.springframework.security.authentication.BadCredentialsException; +import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; +import org.springframework.security.core.Authentication; +import org.springframework.security.web.server.authentication.ServerFormLoginAuthenticationConverter; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.infra.exception.RateLimitExceededException; +import run.halo.app.infra.utils.IpAddressUtils; +import run.halo.app.security.authentication.CryptoService; + +@Slf4j +public class LoginAuthenticationConverter extends ServerFormLoginAuthenticationConverter { + + private final CryptoService cryptoService; + + private final RateLimiterRegistry rateLimiterRegistry; + + public LoginAuthenticationConverter(CryptoService cryptoService, + RateLimiterRegistry rateLimiterRegistry) { + this.cryptoService = cryptoService; + this.rateLimiterRegistry = rateLimiterRegistry; + } + + @Override + public Mono convert(ServerWebExchange exchange) { + return super.convert(exchange) + // validate the password + .flatMap(token -> { + var credentials = (String) token.getCredentials(); + byte[] credentialsBytes; + try { + credentialsBytes = Base64.getDecoder().decode(credentials); + } catch (IllegalArgumentException e) { + // the credentials are not in valid Base64 scheme + return Mono.error(new BadCredentialsException("Invalid Base64 scheme.")); + } + return cryptoService.decrypt(credentialsBytes) + .onErrorMap(InvalidEncryptedMessageException.class, + error -> new BadCredentialsException("Invalid credential.", error)) + .map(decryptedCredentials -> new UsernamePasswordAuthenticationToken( + token.getPrincipal(), + new String(decryptedCredentials, UTF_8))); + }) + .transformDeferred(createIpBasedRateLimiter(exchange)) + .onErrorMap(RequestNotPermitted.class, RateLimitExceededException::new); + } + + private RateLimiterOperator createIpBasedRateLimiter(ServerWebExchange exchange) { + var clientIp = IpAddressUtils.getClientIp(exchange.getRequest()); + var rateLimiter = rateLimiterRegistry.rateLimiter("authentication-from-ip-" + clientIp, + "authentication"); + if (log.isDebugEnabled()) { + var metrics = rateLimiter.getMetrics(); + log.debug( + "Authentication with Rate Limiter: {}, available permissions: {}, number of " + + "waiting threads: {}", + rateLimiter, metrics.getAvailablePermissions(), + metrics.getNumberOfWaitingThreads()); + } + return RateLimiterOperator.of(rateLimiter); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/login/LoginSecurityConfigurer.java b/application/src/main/java/run/halo/app/security/authentication/login/LoginSecurityConfigurer.java new file mode 100644 index 0000000..8fff496 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/login/LoginSecurityConfigurer.java @@ -0,0 +1,95 @@ +package run.halo.app.security.authentication.login; + +import io.github.resilience4j.ratelimiter.RateLimiterRegistry; +import io.micrometer.observation.ObservationRegistry; +import org.springframework.context.MessageSource; +import org.springframework.http.HttpMethod; +import org.springframework.security.authentication.ObservationReactiveAuthenticationManager; +import org.springframework.security.authentication.ReactiveAuthenticationManager; +import org.springframework.security.authentication.UserDetailsRepositoryReactiveAuthenticationManager; +import org.springframework.security.config.web.server.SecurityWebFiltersOrder; +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.core.userdetails.ReactiveUserDetailsPasswordService; +import org.springframework.security.core.userdetails.ReactiveUserDetailsService; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.web.server.authentication.AuthenticationWebFilter; +import org.springframework.security.web.server.context.ServerSecurityContextRepository; +import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.security.LoginHandlerEnhancer; +import run.halo.app.security.authentication.CryptoService; +import run.halo.app.security.authentication.SecurityConfigurer; + +@Component +public class LoginSecurityConfigurer implements SecurityConfigurer { + + private final ObservationRegistry observationRegistry; + + private final ReactiveUserDetailsService userDetailsService; + + private final ReactiveUserDetailsPasswordService passwordService; + + private final PasswordEncoder passwordEncoder; + + private final ServerSecurityContextRepository securityContextRepository; + + private final CryptoService cryptoService; + + private final ExtensionGetter extensionGetter; + private final ServerResponse.Context context; + private final MessageSource messageSource; + private final RateLimiterRegistry rateLimiterRegistry; + + private final LoginHandlerEnhancer loginHandlerEnhancer; + + public LoginSecurityConfigurer(ObservationRegistry observationRegistry, + ReactiveUserDetailsService userDetailsService, + ReactiveUserDetailsPasswordService passwordService, PasswordEncoder passwordEncoder, + ServerSecurityContextRepository securityContextRepository, CryptoService cryptoService, + ExtensionGetter extensionGetter, ServerResponse.Context context, + MessageSource messageSource, RateLimiterRegistry rateLimiterRegistry, + LoginHandlerEnhancer loginHandlerEnhancer) { + this.observationRegistry = observationRegistry; + this.userDetailsService = userDetailsService; + this.passwordService = passwordService; + this.passwordEncoder = passwordEncoder; + this.securityContextRepository = securityContextRepository; + this.cryptoService = cryptoService; + this.extensionGetter = extensionGetter; + this.context = context; + this.messageSource = messageSource; + this.rateLimiterRegistry = rateLimiterRegistry; + this.loginHandlerEnhancer = loginHandlerEnhancer; + } + + @Override + public void configure(ServerHttpSecurity http) { + var filter = new AuthenticationWebFilter(authenticationManager()); + var requiresMatcher = ServerWebExchangeMatchers.pathMatchers(HttpMethod.POST, "/login"); + var handler = + new UsernamePasswordHandler(context, messageSource, loginHandlerEnhancer); + var authConverter = new LoginAuthenticationConverter(cryptoService, rateLimiterRegistry); + filter.setRequiresAuthenticationMatcher(requiresMatcher); + filter.setAuthenticationFailureHandler(handler); + filter.setAuthenticationSuccessHandler(handler); + filter.setServerAuthenticationConverter(authConverter); + filter.setSecurityContextRepository(securityContextRepository); + + http.addFilterAt(filter, SecurityWebFiltersOrder.FORM_LOGIN); + } + + ReactiveAuthenticationManager authenticationManager() { + var manager = new UsernamePasswordDelegatingAuthenticationManager(extensionGetter, + defaultAuthenticationManager()); + return new ObservationReactiveAuthenticationManager(observationRegistry, manager); + } + + ReactiveAuthenticationManager defaultAuthenticationManager() { + var manager = new UserDetailsRepositoryReactiveAuthenticationManager(userDetailsService); + manager.setPasswordEncoder(passwordEncoder); + manager.setUserDetailsPasswordService(passwordService); + return manager; + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/login/PublicKeyRouteBuilder.java b/application/src/main/java/run/halo/app/security/authentication/login/PublicKeyRouteBuilder.java new file mode 100644 index 0000000..14f2250 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/login/PublicKeyRouteBuilder.java @@ -0,0 +1,47 @@ +package run.halo.app.security.authentication.login; + +import java.util.Base64; +import lombok.Data; +import org.springdoc.core.fn.builders.apiresponse.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.security.authentication.CryptoService; + +public class PublicKeyRouteBuilder { + + private final CryptoService cryptoService; + + public PublicKeyRouteBuilder(CryptoService cryptoService) { + this.cryptoService = cryptoService; + } + + /** + * Builds public key router function. + * + * @return public key router function. + */ + public RouterFunction build() { + return SpringdocRouteBuilder.route() + .GET("/login/public-key", request -> cryptoService.readPublicKey() + .flatMap(publicKey -> { + var base64Format = Base64.getEncoder().encodeToString(publicKey); + var response = new PublicKeyResponse(); + response.setBase64Format(base64Format); + return ServerResponse.ok() + .bodyValue(response); + }), + builder -> builder.operationId("GetPublicKey") + .description("Read public key for encrypting password.") + .tag("Login") + .response(Builder.responseBuilder() + .implementation(PublicKeyResponse.class))).build(); + } + + @Data + public static class PublicKeyResponse { + + private String base64Format; + + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordDelegatingAuthenticationManager.java b/application/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordDelegatingAuthenticationManager.java new file mode 100644 index 0000000..912d9a5 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordDelegatingAuthenticationManager.java @@ -0,0 +1,53 @@ +package run.halo.app.security.authentication.login; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.security.authentication.ReactiveAuthenticationManager; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.AuthenticationException; +import reactor.core.publisher.Mono; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.security.HaloUserDetails; +import run.halo.app.security.authentication.twofactor.TwoFactorAuthentication; + +@Slf4j +public class UsernamePasswordDelegatingAuthenticationManager + implements ReactiveAuthenticationManager { + + private final ExtensionGetter extensionGetter; + + private final ReactiveAuthenticationManager defaultAuthenticationManager; + + public UsernamePasswordDelegatingAuthenticationManager(ExtensionGetter extensionGetter, + ReactiveAuthenticationManager defaultAuthenticationManager) { + this.extensionGetter = extensionGetter; + this.defaultAuthenticationManager = defaultAuthenticationManager; + } + + @Override + public Mono authenticate(Authentication authentication) { + return extensionGetter + .getEnabledExtensions(UsernamePasswordAuthenticationManager.class) + .next() + .flatMap(authenticationManager -> authenticationManager.authenticate(authentication) + .doOnError(t -> log.error( + "failed to authenticate with {}, fallback to default username password " + + "authentication.", authenticationManager.getClass(), t) + ) + .onErrorResume( + t -> !(t instanceof AuthenticationException), + t -> Mono.empty() + ) + ) + .switchIfEmpty( + Mono.defer(() -> defaultAuthenticationManager.authenticate(authentication)) + ) + // check if MFA is enabled after authenticated + .map(a -> { + if (a.getPrincipal() instanceof HaloUserDetails user + && user.isTwoFactorAuthEnabled()) { + a = new TwoFactorAuthentication(a); + } + return a; + }); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordHandler.java b/application/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordHandler.java new file mode 100644 index 0000000..33ce5b0 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/login/UsernamePasswordHandler.java @@ -0,0 +1,114 @@ +package run.halo.app.security.authentication.login; + +import static org.springframework.http.HttpStatus.UNAUTHORIZED; +import static org.springframework.http.MediaType.APPLICATION_JSON; +import static run.halo.app.infra.exception.Exceptions.createErrorResponse; +import static run.halo.app.security.authentication.WebExchangeMatchers.ignoringMediaTypeAll; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.context.MessageSource; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.AuthenticationException; +import org.springframework.security.core.CredentialsContainer; +import org.springframework.security.web.server.WebFilterExchange; +import org.springframework.security.web.server.authentication.RedirectServerAuthenticationFailureHandler; +import org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler; +import org.springframework.security.web.server.authentication.ServerAuthenticationFailureHandler; +import org.springframework.security.web.server.authentication.ServerAuthenticationSuccessHandler; +import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher; +import org.springframework.web.ErrorResponse; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.security.LoginHandlerEnhancer; +import run.halo.app.security.authentication.twofactor.TwoFactorAuthentication; + +@Slf4j +public class UsernamePasswordHandler implements ServerAuthenticationSuccessHandler, + ServerAuthenticationFailureHandler { + + private final ServerResponse.Context context; + + private final MessageSource messageSource; + + private final LoginHandlerEnhancer loginHandlerEnhancer; + + private final ServerAuthenticationFailureHandler defaultFailureHandler = + new RedirectServerAuthenticationFailureHandler("/console?error#/login"); + + private final ServerAuthenticationSuccessHandler defaultSuccessHandler = + new RedirectServerAuthenticationSuccessHandler("/console/"); + + public UsernamePasswordHandler(ServerResponse.Context context, MessageSource messageSource, + LoginHandlerEnhancer loginHandlerEnhancer) { + this.context = context; + this.messageSource = messageSource; + this.loginHandlerEnhancer = loginHandlerEnhancer; + } + + @Override + public Mono onAuthenticationFailure(WebFilterExchange webFilterExchange, + AuthenticationException exception) { + var exchange = webFilterExchange.getExchange(); + return loginHandlerEnhancer.onLoginFailure(exchange, exception) + .then(ignoringMediaTypeAll(APPLICATION_JSON) + .matches(exchange) + .filter(ServerWebExchangeMatcher.MatchResult::isMatch) + .switchIfEmpty( + defaultFailureHandler.onAuthenticationFailure(webFilterExchange, exception) + // Skip the handleAuthenticationException. + .then(Mono.empty()) + ) + .flatMap(matchResult -> handleAuthenticationException(exception, exchange))); + } + + @Override + public Mono onAuthenticationSuccess(WebFilterExchange webFilterExchange, + Authentication authentication) { + if (authentication instanceof TwoFactorAuthentication) { + // continue filtering for authorization + return loginHandlerEnhancer.onLoginSuccess(webFilterExchange.getExchange(), + authentication) + .then(webFilterExchange.getChain().filter(webFilterExchange.getExchange())); + } + + if (authentication instanceof CredentialsContainer container) { + container.eraseCredentials(); + } + + ServerWebExchangeMatcher xhrMatcher = exchange -> { + if (exchange.getRequest().getHeaders().getOrEmpty("X-Requested-With") + .contains("XMLHttpRequest")) { + return ServerWebExchangeMatcher.MatchResult.match(); + } + return ServerWebExchangeMatcher.MatchResult.notMatch(); + }; + + var exchange = webFilterExchange.getExchange(); + return loginHandlerEnhancer.onLoginSuccess(webFilterExchange.getExchange(), authentication) + .then(xhrMatcher.matches(exchange) + .filter(ServerWebExchangeMatcher.MatchResult::isMatch) + .switchIfEmpty(Mono.defer( + () -> defaultSuccessHandler.onAuthenticationSuccess(webFilterExchange, + authentication) + .then(Mono.empty()))) + .flatMap(isXhr -> ServerResponse.ok() + .bodyValue(authentication.getPrincipal()) + .flatMap(response -> response.writeTo(exchange, context)))); + } + + private Mono handleAuthenticationException(Throwable exception, + ServerWebExchange exchange) { + var errorResponse = createErrorResponse(exception, UNAUTHORIZED, exchange, messageSource); + return writeErrorResponse(errorResponse, exchange); + } + + private Mono writeErrorResponse(ErrorResponse errorResponse, + ServerWebExchange exchange) { + return ServerResponse.status(errorResponse.getStatusCode()) + .contentType(APPLICATION_JSON) + .bodyValue(errorResponse.getBody()) + .flatMap(response -> response.writeTo(exchange, context)); + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/pat/PatAuthenticationManager.java b/application/src/main/java/run/halo/app/security/authentication/pat/PatAuthenticationManager.java new file mode 100644 index 0000000..9cd8860 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/pat/PatAuthenticationManager.java @@ -0,0 +1,152 @@ +package run.halo.app.security.authentication.pat; + +import static org.apache.commons.lang3.StringUtils.removeStart; +import static org.springframework.security.oauth2.jwt.NimbusReactiveJwtDecoder.withJwkSource; +import static run.halo.app.security.authentication.pat.PatServerWebExchangeMatcher.PAT_TOKEN_PREFIX; +import static run.halo.app.security.authorization.AuthorityUtils.ANONYMOUS_ROLE_NAME; +import static run.halo.app.security.authorization.AuthorityUtils.AUTHENTICATED_ROLE_NAME; +import static run.halo.app.security.authorization.AuthorityUtils.ROLE_PREFIX; + +import com.nimbusds.jwt.JWTClaimNames; +import java.time.Clock; +import java.time.Duration; +import java.util.ArrayList; +import java.util.Objects; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.security.authentication.DisabledException; +import org.springframework.security.authentication.ReactiveAuthenticationManager; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.authority.SimpleGrantedAuthority; +import org.springframework.security.oauth2.server.resource.InvalidBearerTokenException; +import org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken; +import org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken; +import org.springframework.security.oauth2.server.resource.authentication.JwtReactiveAuthenticationManager; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.security.PersonalAccessToken; +import run.halo.app.security.authentication.CryptoService; +import run.halo.app.security.authorization.AuthorityUtils; + +public class PatAuthenticationManager implements ReactiveAuthenticationManager { + + /** + * Minimal duration gap of personal access token update. + */ + private static final Duration MIN_UPDATE_GAP = Duration.ofMinutes(1); + + private final ReactiveAuthenticationManager delegate; + + private final ReactiveExtensionClient client; + + private final CryptoService cryptoService; + + private Clock clock; + + public PatAuthenticationManager(ReactiveExtensionClient client, CryptoService cryptoService) { + this.client = client; + this.cryptoService = cryptoService; + this.delegate = getDelegate(); + this.clock = Clock.systemDefaultZone(); + } + + private ReactiveAuthenticationManager getDelegate() { + var jwtDecoder = withJwkSource(signedJWT -> Flux.just(cryptoService.getJwk())) + .build(); + return new JwtReactiveAuthenticationManager(jwtDecoder); + } + + public void setClock(Clock clock) { + this.clock = clock; + } + + @Override + public Mono authenticate(Authentication authentication) { + return Mono.just(authentication) + .map(this::clearPrefix) + .flatMap(delegate::authenticate) + .cast(JwtAuthenticationToken.class) + .flatMap(this::checkAndRebuild); + } + + private Authentication clearPrefix(Authentication authentication) { + if (authentication instanceof BearerTokenAuthenticationToken bearerToken) { + var newToken = removeStart(bearerToken.getToken(), PAT_TOKEN_PREFIX); + return new BearerTokenAuthenticationToken(newToken); + } + return authentication; + } + + private Mono checkAndRebuild(JwtAuthenticationToken jat) { + var jwt = jat.getToken(); + var patName = jwt.getClaimAsString("pat_name"); + var jwtId = jwt.getClaimAsString(JWTClaimNames.JWT_ID); + if (patName == null || jwtId == null) { + // Not a valid PAT + return Mono.error(new InvalidBearerTokenException("Missing claim pat_name or jti")); + } + return client.fetch(PersonalAccessToken.class, patName) + .switchIfEmpty( + Mono.error(() -> new DisabledException("Personal access token has been deleted.")) + ) + .flatMap(pat -> patChecks(pat, jwtId).and(updateLastUsed(patName)).thenReturn(pat)) + .map(pat -> { + // Make sure the authorities modifiable + var authorities = new ArrayList<>(jat.getAuthorities()); + authorities.add(new SimpleGrantedAuthority(ROLE_PREFIX + ANONYMOUS_ROLE_NAME)); + authorities.add(new SimpleGrantedAuthority(ROLE_PREFIX + AUTHENTICATED_ROLE_NAME)); + var roles = pat.getSpec().getRoles(); + if (roles != null) { + roles.stream() + .map(role -> AuthorityUtils.ROLE_PREFIX + role) + .map(SimpleGrantedAuthority::new) + .forEach(authorities::add); + } + return new JwtAuthenticationToken(jat.getToken(), authorities, jat.getName()); + }); + } + + private Mono updateLastUsed(String patName) { + // we try our best to update the last used timestamp. + + // the now should be outside the retry cycle because we don't want a fresh timestamp at + // every retry. + var now = clock.instant(); + return Mono.defer( + // we have to obtain a fresh PAT and retry the update. + () -> client.fetch(PersonalAccessToken.class, patName) + .filter(pat -> { + var lastUsed = pat.getSpec().getLastUsed(); + if (lastUsed == null) { + return true; + } + var diff = Duration.between(lastUsed, now); + return !diff.minus(MIN_UPDATE_GAP).isNegative(); + }) + .doOnNext(pat -> pat.getSpec().setLastUsed(now)) + .flatMap(client::update) + ) + .retryWhen(Retry.backoff(3, Duration.ofMillis(50)) + .filter(OptimisticLockingFailureException.class::isInstance)) + .onErrorComplete() + .then(); + } + + private Mono patChecks(PersonalAccessToken pat, String tokenId) { + if (ExtensionUtil.isDeleted(pat)) { + return Mono.error( + new InvalidBearerTokenException("Personal access token is being deleted.")); + } + var spec = pat.getSpec(); + if (!Objects.equals(spec.getTokenId(), tokenId)) { + return Mono.error(new InvalidBearerTokenException( + "Token ID does not match the token ID of personal access token.")); + } + if (spec.isRevoked()) { + return Mono.error(new InvalidBearerTokenException("Token has been revoked.")); + } + return Mono.empty(); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/pat/PatEndpoint.java b/application/src/main/java/run/halo/app/security/authentication/pat/PatEndpoint.java new file mode 100644 index 0000000..62d1c0a --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/pat/PatEndpoint.java @@ -0,0 +1,100 @@ +package run.halo.app.security.authentication.pat; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.webflux.core.fn.SpringdocRouteBuilder.route; +import static org.springframework.web.reactive.function.server.RequestPredicates.path; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.security.PersonalAccessToken; + +@Component +public class PatEndpoint implements CustomEndpoint { + + private final UserScopedPatHandler patHandler; + + public PatEndpoint(UserScopedPatHandler patHandler) { + this.patHandler = patHandler; + } + + @Override + public RouterFunction endpoint() { + var tag = PersonalAccessToken.KIND + "V1alpha1Uc"; + return route().nest(path("/personalaccesstokens"), + () -> route() + .POST(patHandler::create, + builder -> builder + .tag(tag) + .operationId("GeneratePat") + .description("Generate a PAT.") + .requestBody(requestBodyBuilder() + .required(true) + .implementation(PersonalAccessToken.class)) + .response(responseBuilder().implementation(PersonalAccessToken.class)) + ) + .GET(patHandler::list, + builder -> builder + .tag(tag) + .operationId("ObtainPats") + .description("Obtain PAT list.") + .response(responseBuilder() + .implementationArray(PersonalAccessToken.class) + ) + ) + .GET("/{name}", patHandler::get, + builder -> builder + .tag(tag) + .operationId("ObtainPat") + .description("Obtain a PAT.") + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .required(true) + .name("name"))) + .PUT("/{name}/actions/revocation", + patHandler::revoke, + builder -> builder.tag(tag) + .operationId("RevokePat") + .description("Revoke a PAT") + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .required(true) + .name("name")) + ) + .PUT("/{name}/actions/restoration", + patHandler::restore, + builder -> builder.tag(tag) + .operationId("RestorePat") + .description("Restore a PAT.") + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .required(true) + .name("name") + ) + ) + .DELETE("/{name}", + patHandler::delete, + builder -> builder.tag(tag) + .operationId("DeletePat") + .description("Delete a PAT") + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .required(true) + .name("name") + )) + .build(), + builder -> builder.description("User-scoped PersonalAccessToken endpoint")) + .build(); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("uc.api.security.halo.run/v1alpha1"); + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/pat/PatServerWebExchangeMatcher.java b/application/src/main/java/run/halo/app/security/authentication/pat/PatServerWebExchangeMatcher.java new file mode 100644 index 0000000..4d8a7e1 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/pat/PatServerWebExchangeMatcher.java @@ -0,0 +1,30 @@ +package run.halo.app.security.authentication.pat; + +import org.apache.commons.lang3.StringUtils; +import org.springframework.security.core.AuthenticationException; +import org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthenticationToken; +import org.springframework.security.oauth2.server.resource.web.server.authentication.ServerBearerTokenAuthenticationConverter; +import org.springframework.security.web.server.authentication.ServerAuthenticationConverter; +import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +public class PatServerWebExchangeMatcher implements ServerWebExchangeMatcher { + + public static final String PAT_TOKEN_PREFIX = "pat_"; + + private final ServerAuthenticationConverter authConverter = + new ServerBearerTokenAuthenticationConverter(); + + @Override + public Mono matches(ServerWebExchange exchange) { + return authConverter.convert(exchange) + .filter(a -> a instanceof BearerTokenAuthenticationToken) + .cast(BearerTokenAuthenticationToken.class) + .map(BearerTokenAuthenticationToken::getToken) + .filter(tokenString -> StringUtils.startsWith(tokenString, PAT_TOKEN_PREFIX)) + .flatMap(t -> MatchResult.match()) + .onErrorResume(AuthenticationException.class, t -> MatchResult.notMatch()) + .switchIfEmpty(Mono.defer(MatchResult::notMatch)); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/pat/UserScopedPatHandler.java b/application/src/main/java/run/halo/app/security/authentication/pat/UserScopedPatHandler.java new file mode 100644 index 0000000..f552a52 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/pat/UserScopedPatHandler.java @@ -0,0 +1,20 @@ +package run.halo.app.security.authentication.pat; + +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; + +public interface UserScopedPatHandler { + + Mono create(ServerRequest request); + + Mono list(ServerRequest request); + + Mono get(ServerRequest request); + + Mono revoke(ServerRequest request); + + Mono delete(ServerRequest request); + + Mono restore(ServerRequest request); +} diff --git a/application/src/main/java/run/halo/app/security/authentication/pat/impl/UserScopedPatHandlerImpl.java b/application/src/main/java/run/halo/app/security/authentication/pat/impl/UserScopedPatHandlerImpl.java new file mode 100644 index 0000000..a7dfd8b --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/pat/impl/UserScopedPatHandlerImpl.java @@ -0,0 +1,259 @@ +package run.halo.app.security.authentication.pat.impl; + +import static run.halo.app.extension.Comparators.compareCreationTimestamp; +import static run.halo.app.security.authentication.pat.PatServerWebExchangeMatcher.PAT_TOKEN_PREFIX; + +import com.nimbusds.jose.jwk.JWKSet; +import com.nimbusds.jose.jwk.source.ImmutableJWKSet; +import java.time.Clock; +import java.util.Collection; +import java.util.HashMap; +import java.util.List; +import java.util.Objects; +import java.util.function.Predicate; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.GrantedAuthority; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.security.oauth2.jose.jws.SignatureAlgorithm; +import org.springframework.security.oauth2.jwt.JwsHeader; +import org.springframework.security.oauth2.jwt.JwtClaimsSet; +import org.springframework.security.oauth2.jwt.JwtEncoder; +import org.springframework.security.oauth2.jwt.JwtEncoderParameters; +import org.springframework.security.oauth2.jwt.NimbusJwtEncoder; +import org.springframework.stereotype.Service; +import org.springframework.util.AlternativeJdkIdGenerator; +import org.springframework.util.CollectionUtils; +import org.springframework.util.IdGenerator; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.service.RoleService; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.exception.ExtensionNotFoundException; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.exception.AccessDeniedException; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.security.PersonalAccessToken; +import run.halo.app.security.authentication.CryptoService; +import run.halo.app.security.authentication.pat.UserScopedPatHandler; +import run.halo.app.security.authorization.AuthorityUtils; + +@Service +public class UserScopedPatHandlerImpl implements UserScopedPatHandler { + + private static final String ACCESS_TOKEN_ANNO_NAME = "security.halo.run/access-token"; + + private static final NotFoundException PAT_NOT_FOUND_EX = + new NotFoundException("The personal access token was not found or deleted."); + + private final ReactiveExtensionClient client; + + private final JwtEncoder patEncoder; + + private final ExternalUrlSupplier externalUrl; + + private final RoleService roleService; + + private final IdGenerator idGenerator; + + private final String keyId; + + private Clock clock; + + public UserScopedPatHandlerImpl(ReactiveExtensionClient client, + CryptoService cryptoService, + ExternalUrlSupplier externalUrl, + RoleService roleService) { + this.client = client; + this.externalUrl = externalUrl; + this.roleService = roleService; + + var patJwk = cryptoService.getJwk(); + var jwkSet = new ImmutableJWKSet<>(new JWKSet(patJwk)); + this.patEncoder = new NimbusJwtEncoder(jwkSet); + this.keyId = patJwk.getKeyID(); + this.idGenerator = new AlternativeJdkIdGenerator(); + this.clock = Clock.systemDefaultZone(); + } + + public void setClock(Clock clock) { + this.clock = clock; + } + + private static Mono mustBeRealUser(Mono authentication) { + return authentication.filter(AuthorityUtils::isRealUser) + // Non-username-password authentication could not access the API at any time. + .switchIfEmpty(Mono.error(AccessDeniedException::new)); + } + + @Override + public Mono create(ServerRequest request) { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .transform(UserScopedPatHandlerImpl::mustBeRealUser) + .flatMap(auth -> request.bodyToMono(PersonalAccessToken.class) + .switchIfEmpty( + Mono.error(() -> new ServerWebInputException("Missing request body."))) + .flatMap(patRequest -> { + var patSpec = patRequest.getSpec(); + var roles = patSpec.getRoles(); + var rolesCheck = hasSufficientRoles(auth.getAuthorities(), roles) + .filter(has -> has) + .switchIfEmpty( + Mono.error(() -> new ServerWebInputException("Insufficient roles."))) + .then(); + + var expiresCheck = Mono.fromRunnable(() -> { + var expiresAt = patSpec.getExpiresAt(); + var now = clock.instant(); + if (expiresAt != null && (now.isAfter(expiresAt))) { + throw new ServerWebInputException("Invalid expiresAt."); + } + }).then(); + + var createPat = Mono.defer(() -> { + var pat = new PersonalAccessToken(); + var spec = pat.getSpec(); + spec.setUsername(auth.getName()); + spec.setName(patSpec.getName()); + spec.setDescription(patSpec.getDescription()); + spec.setRoles(patSpec.getRoles()); + spec.setScopes(patSpec.getScopes()); + spec.setExpiresAt(patSpec.getExpiresAt()); + var tokenId = idGenerator.generateId().toString(); + spec.setTokenId(tokenId); + var metadata = new Metadata(); + metadata.setGenerateName("pat-" + auth.getName() + "-"); + pat.setMetadata(metadata); + return client.create(pat) + .doOnNext(createdPat -> { + var claimsBuilder = JwtClaimsSet.builder() + .issuer(externalUrl.getURL(request.exchange().getRequest()) + .toString()) + .id(tokenId) + .subject(auth.getName()) + .issuedAt(clock.instant()) + .claim("pat_name", createdPat.getMetadata().getName()); + var expiresAt = createdPat.getSpec().getExpiresAt(); + if (expiresAt != null) { + claimsBuilder.expiresAt(expiresAt); + } + var headerBuilder = JwsHeader.with(SignatureAlgorithm.RS256) + .keyId(this.keyId); + var jwt = patEncoder.encode(JwtEncoderParameters.from( + headerBuilder.build(), + claimsBuilder.build())); + var annotations = + createdPat.getMetadata().getAnnotations(); + if (annotations == null) { + annotations = new HashMap<>(); + createdPat.getMetadata().setAnnotations(annotations); + } + annotations.put(ACCESS_TOKEN_ANNO_NAME, + PAT_TOKEN_PREFIX + jwt.getTokenValue()); + }); + }); + return rolesCheck.and(expiresCheck).then(createPat) + .flatMap(createdPat -> ServerResponse.ok().bodyValue(createdPat)); + })); + } + + @Override + public Mono list(ServerRequest request) { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .flatMap(auth -> { + Predicate predicate = + pat -> Objects.equals(auth.getName(), pat.getSpec().getUsername()); + var pats = client.list(PersonalAccessToken.class, predicate, + compareCreationTimestamp(false)); + return ServerResponse.ok().body(pats, PersonalAccessToken.class); + }); + } + + @Override + public Mono get(ServerRequest request) { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .flatMap(auth -> { + var name = request.pathVariable("name"); + var pat = getPat(name, auth.getName()); + return ServerResponse.ok().body(pat, PersonalAccessToken.class); + }); + } + + @Override + public Mono revoke(ServerRequest request) { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .flatMap(auth -> { + var name = request.pathVariable("name"); + var revokedPat = getPat(name, auth.getName()) + .filter(pat -> !pat.getSpec().isRevoked()) + .switchIfEmpty(Mono.error( + () -> new ServerWebInputException("The token has been revoked before."))) + .doOnNext(pat -> { + var spec = pat.getSpec(); + spec.setRevoked(true); + spec.setRevokesAt(clock.instant()); + }) + .flatMap(client::update); + return ServerResponse.ok().body(revokedPat, PersonalAccessToken.class); + }); + } + + @Override + public Mono delete(ServerRequest request) { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .flatMap(auth -> { + var name = request.pathVariable("name"); + var deletedPat = getPat(name, auth.getName()) + .flatMap(client::delete); + return ServerResponse.ok().body(deletedPat, PersonalAccessToken.class); + }); + } + + @Override + public Mono restore(ServerRequest request) { + var restoredPat = ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .transform(UserScopedPatHandlerImpl::mustBeRealUser) + .flatMap(auth -> { + var name = request.pathVariable("name"); + return getPat(name, auth.getName()); + }) + .filter(pat -> pat.getSpec().isRevoked()) + .switchIfEmpty(Mono.error( + () -> new ServerWebInputException( + "The token has not been revoked before."))) + .doOnNext(pat -> { + var spec = pat.getSpec(); + spec.setRevoked(false); + spec.setRevokesAt(null); + }) + .flatMap(client::update); + return ServerResponse.ok().body(restoredPat, PersonalAccessToken.class); + } + + private Mono hasSufficientRoles( + Collection grantedAuthorities, List requestRoles) { + if (CollectionUtils.isEmpty(requestRoles)) { + return Mono.just(true); + } + var grantedRoles = AuthorityUtils.authoritiesToRoles(grantedAuthorities); + return roleService.contains(grantedRoles, requestRoles); + } + + private Mono getPat(String name, String username) { + return client.get(PersonalAccessToken.class, name) + .filter(pat -> Objects.equals(pat.getSpec().getUsername(), username) + && !ExtensionUtil.isDeleted(pat)) + .onErrorMap(ExtensionNotFoundException.class, t -> PAT_NOT_FOUND_EX) + .switchIfEmpty(Mono.error(() -> PAT_NOT_FOUND_EX)); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/CookieSignatureKeyResolver.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/CookieSignatureKeyResolver.java new file mode 100644 index 0000000..1de525a --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/CookieSignatureKeyResolver.java @@ -0,0 +1,8 @@ +package run.halo.app.security.authentication.rememberme; + +import reactor.core.publisher.Mono; + +@FunctionalInterface +public interface CookieSignatureKeyResolver { + Mono resolveSigningKey(); +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/DefaultCookieSignatureKeyResolver.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/DefaultCookieSignatureKeyResolver.java new file mode 100644 index 0000000..5b0bfa7 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/DefaultCookieSignatureKeyResolver.java @@ -0,0 +1,17 @@ +package run.halo.app.security.authentication.rememberme; + +import lombok.RequiredArgsConstructor; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.security.authentication.CryptoService; + +@Component +@RequiredArgsConstructor +public class DefaultCookieSignatureKeyResolver implements CookieSignatureKeyResolver { + private final CryptoService cryptoService; + + @Override + public Mono resolveSigningKey() { + return Mono.fromSupplier(cryptoService::getKeyId); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentRememberMeTokenRepository.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentRememberMeTokenRepository.java new file mode 100644 index 0000000..e99bcef --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentRememberMeTokenRepository.java @@ -0,0 +1,18 @@ +package run.halo.app.security.authentication.rememberme; + +import java.time.Instant; +import org.springframework.lang.NonNull; +import org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken; +import reactor.core.publisher.Mono; + +public interface PersistentRememberMeTokenRepository { + Mono createNewToken(PersistentRememberMeToken token); + + Mono updateToken(String series, String tokenValue, Instant lastUsed); + + Mono getTokenForSeries(String seriesId); + + Mono removeUserTokens(String username); + + Mono removeToken(@NonNull String series); +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentRememberMeTokenRepositoryImpl.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentRememberMeTokenRepositoryImpl.java new file mode 100644 index 0000000..4b13b2f --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentRememberMeTokenRepositoryImpl.java @@ -0,0 +1,103 @@ +package run.halo.app.security.authentication.rememberme; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import java.time.Duration; +import java.time.Instant; +import java.util.Date; +import lombok.RequiredArgsConstructor; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.lang.NonNull; +import org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.RememberMeToken; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.ReactiveExtensionPaginatedOperatorImpl; + +/** + * Extension based persistent remember me token repository implementation. + * + * @see RememberMeToken + */ +@Component +@RequiredArgsConstructor +public class PersistentRememberMeTokenRepositoryImpl + implements PersistentRememberMeTokenRepository { + private final ReactiveExtensionClient client; + private final ReactiveExtensionPaginatedOperatorImpl paginatedOperator; + + @Override + public Mono createNewToken(PersistentRememberMeToken token) { + var rememberMeToken = new RememberMeToken(); + var metadata = new Metadata(); + rememberMeToken.setMetadata(metadata); + metadata.setGenerateName("token-"); + var creationTime = Instant.ofEpochMilli(token.getDate().getTime()); + metadata.setCreationTimestamp(creationTime); + + rememberMeToken.setSpec(new RememberMeToken.Spec()); + rememberMeToken.getSpec() + .setUsername(token.getUsername()) + .setSeries(token.getSeries()) + .setTokenValue(token.getTokenValue()); + return client.create(rememberMeToken).then(); + } + + @Override + public Mono updateToken(String series, String tokenValue, Instant lastUsed) { + return Mono.defer(() -> getTokenExtensionForSeries(series) + .flatMap(token -> { + token.getSpec().setTokenValue(tokenValue) + .setLastUsed(lastUsed); + return client.update(token); + }) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)) + .then(); + } + + @Override + public Mono getTokenForSeries(String seriesId) { + return getTokenExtensionForSeries(seriesId) + .map(token -> new PersistentRememberMeToken( + token.getSpec().getUsername(), + token.getSpec().getSeries(), + token.getSpec().getTokenValue(), + new Date(token.getMetadata().getCreationTimestamp().toEpochMilli()) + )); + } + + @Override + public Mono removeUserTokens(String username) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of(equal("spec.username", username))); + return paginatedOperator.deleteInitialBatch(RememberMeToken.class, listOptions).then(); + } + + @Override + public Mono removeToken(@NonNull String series) { + return getTokenExtensionForSeries(series) + .flatMap(client::delete) + .then(); + } + + private Mono getTokenExtensionForSeries(String seriesId) { + var listOptions = ListOptions.builder() + .fieldQuery(and(equal("spec.series", seriesId), + isNull("metadata.deletionTimestamp") + )) + .build(); + return client.listBy(RememberMeToken.class, listOptions, PageRequestImpl.ofSize(1)) + .flatMap(result -> Mono.justOrEmpty(ListResult.first(result))); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentTokenBasedRememberMeServices.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentTokenBasedRememberMeServices.java new file mode 100644 index 0000000..0f8adfc --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/PersistentTokenBasedRememberMeServices.java @@ -0,0 +1,190 @@ +package run.halo.app.security.authentication.rememberme; + +import java.security.SecureRandom; +import java.time.Instant; +import java.util.Arrays; +import java.util.Base64; +import java.util.Date; +import lombok.Setter; +import lombok.extern.slf4j.Slf4j; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.userdetails.ReactiveUserDetailsService; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.web.authentication.rememberme.CookieTheftException; +import org.springframework.security.web.authentication.rememberme.InvalidCookieException; +import org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken; +import org.springframework.security.web.authentication.rememberme.PersistentTokenRepository; +import org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException; +import org.springframework.security.web.server.WebFilterExchange; +import org.springframework.stereotype.Component; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +/** + *

{@link RememberMeServices} implementation based on Barry Jaspan's Improved + * Persistent Login Cookie Best Practice.

+ *

There is a slight modification to the described approach, in that the username is not + * stored as part of the cookie but obtained from the persistent store via an + * implementation of {@link PersistentTokenRepository}. The latter should place a unique + * constraint on the series identifier, so that it is impossible for the same identifier + * to be allocated to two different users.

+ *

User management such as changing passwords, removing users and setting user status + * should be combined with maintenance of the user's persistent tokens.

+ *

+ * Note that while this class will use the date a token was created to check whether a + * presented cookie is older than the configured tokenValiditySeconds property + * and deny authentication in this case, it will not delete these tokens from storage. A + * suitable batch process should be run periodically to remove expired tokens from the + * database. + *

+ * + * @author guqing + * @see + * PersistentTokenBasedRememberMeServices + * @since 2.17.0 + */ +@Slf4j +@Setter +@Component +public class PersistentTokenBasedRememberMeServices extends TokenBasedRememberMeServices + implements RememberMeServices { + + public static final String REMEMBER_ME_SERIES_REQUEST_NAME = "remember-me-series"; + + public static final int DEFAULT_SERIES_LENGTH = 16; + + public static final int DEFAULT_TOKEN_LENGTH = 16; + + private final SecureRandom random; + + private final int seriesLength = DEFAULT_SERIES_LENGTH; + + private final int tokenLength = DEFAULT_TOKEN_LENGTH; + + private final PersistentRememberMeTokenRepository tokenRepository; + + public PersistentTokenBasedRememberMeServices( + CookieSignatureKeyResolver cookieSignatureKeyResolver, + ReactiveUserDetailsService userDetailsService, + RememberMeCookieResolver rememberMeCookieResolver, + PersistentRememberMeTokenRepository tokenRepository) { + super(cookieSignatureKeyResolver, userDetailsService, rememberMeCookieResolver); + this.random = new SecureRandom(); + this.tokenRepository = tokenRepository; + } + + @Override + protected Mono processAutoLoginCookie(String[] cookieTokens, + ServerWebExchange exchange) { + if (cookieTokens.length != 2) { + throw new InvalidCookieException( + "Cookie token did not contain " + 2 + " tokens, but contained '" + + Arrays.asList(cookieTokens) + "'"); + } + String presentedSeries = cookieTokens[0]; + String presentedToken = cookieTokens[1]; + return this.tokenRepository.getTokenForSeries(presentedSeries) + // No series match, so we can't authenticate using this cookie + .switchIfEmpty(Mono.error(new RememberMeAuthenticationException( + "No persistent token found for series id: " + presentedSeries)) + ) + .flatMap(token -> { + // We have a match for this user/series combination + if (!presentedToken.equals(token.getTokenValue())) { + // Token doesn't match series value. Delete all logins for this user and throw + // an exception to warn them. + return this.tokenRepository.removeUserTokens(token.getUsername()) + .then(Mono.error(new CookieTheftException( + "Invalid remember-me token (Series/token) mismatch. Implies previous " + + "cookie theft" + + " attack."))); + } + + if (isTokenExpired(token)) { + return Mono.error( + new RememberMeAuthenticationException("Remember-me login has expired")); + } + + // Token also matches, so login is valid. Update the token value, keeping the + // *same* series number. + log.debug("Refreshing persistent login token for user '{}', series '{}'", + token.getUsername(), token.getSeries()); + var newToken = new PersistentRememberMeToken(token.getUsername(), token.getSeries(), + token.getTokenValue(), new Date()); + return Mono.just(newToken); + }) + .flatMap(newToken -> updateToken(newToken) + .doOnSuccess(unused -> addCookie(newToken, exchange)) + .onErrorMap(ex -> { + log.error("Failed to update token: ", ex); + return new RememberMeAuthenticationException( + "Autologin failed due to data access problem"); + }) + .then(getUserDetailsService().findByUsername(newToken.getUsername())) + ); + } + + private boolean isTokenExpired(PersistentRememberMeToken token) { + return isTokenExpired(token.getDate().getTime() + getTokenValidityMillis()); + } + + private Mono updateToken(PersistentRememberMeToken newToken) { + return this.tokenRepository.updateToken(newToken.getSeries(), + newToken.getTokenValue(), dateToInstant(newToken.getDate())); + } + + Instant dateToInstant(Date date) { + return Instant.ofEpochMilli(date.getTime()); + } + + /** + * Creates a new persistent login token with a new series number, stores the data in + * the persistent token repository and adds the corresponding cookie to the response. + */ + @Override + protected Mono onLoginSuccess(ServerWebExchange exchange, + Authentication successfulAuthentication) { + String username = successfulAuthentication.getName(); + log.debug("Creating new persistent login for user {}", username); + PersistentRememberMeToken persistentToken = + new PersistentRememberMeToken(username, generateSeriesData(), + generateTokenData(), new Date()); + return this.tokenRepository.createNewToken(persistentToken) + .doOnSuccess(unused -> addCookie(persistentToken, exchange)) + .onErrorResume(Throwable.class, ex -> { + log.error("Failed to save persistent token ", ex); + return Mono.empty(); + }); + } + + @Override + protected Mono onLogout(WebFilterExchange exchange, Authentication authentication) { + if (authentication != null) { + return this.tokenRepository.removeUserTokens(authentication.getName()); + } + return Mono.empty(); + } + + private void addCookie(PersistentRememberMeToken token, ServerWebExchange exchange) { + setCookie(new String[] {token.getSeries(), token.getTokenValue()}, exchange); + exchange.getAttributes().put(REMEMBER_ME_SERIES_REQUEST_NAME, token.getSeries()); + } + + protected String generateSeriesData() { + byte[] newSeries = new byte[this.seriesLength]; + this.random.nextBytes(newSeries); + return new String(Base64.getEncoder().encode(newSeries)); + } + + protected String generateTokenData() { + byte[] newToken = new byte[this.tokenLength]; + this.random.nextBytes(newToken); + return new String(Base64.getEncoder().encode(newToken)); + } + + private long getTokenValidityMillis() { + return rememberMeCookieResolver.getCookieMaxAge().toMillis(); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeAuthenticationManager.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeAuthenticationManager.java new file mode 100644 index 0000000..d1df38b --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeAuthenticationManager.java @@ -0,0 +1,56 @@ +package run.halo.app.security.authentication.rememberme; + +import lombok.NonNull; +import lombok.RequiredArgsConstructor; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.context.MessageSource; +import org.springframework.context.MessageSourceAware; +import org.springframework.context.support.MessageSourceAccessor; +import org.springframework.security.authentication.BadCredentialsException; +import org.springframework.security.authentication.ReactiveAuthenticationManager; +import org.springframework.security.authentication.RememberMeAuthenticationToken; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.SpringSecurityMessageSource; +import org.springframework.util.Assert; +import reactor.core.publisher.Mono; + +@RequiredArgsConstructor +public class RememberMeAuthenticationManager implements ReactiveAuthenticationManager, + InitializingBean, MessageSourceAware { + + private final CookieSignatureKeyResolver cookieSignatureKeyResolver; + protected MessageSourceAccessor messages = SpringSecurityMessageSource.getAccessor(); + + @Override + public Mono authenticate(Authentication authentication) { + if (authentication instanceof RememberMeAuthenticationToken rememberMeAuthenticationToken) { + return doAuthenticate(rememberMeAuthenticationToken); + } + return Mono.empty(); + } + + @Override + public void afterPropertiesSet() { + Assert.notNull(this.messages, "A message source must be set"); + } + + @Override + public void setMessageSource(@NonNull MessageSource messageSource) { + this.messages = new MessageSourceAccessor(messageSource); + } + + private Mono doAuthenticate(RememberMeAuthenticationToken token) { + return cookieSignatureKeyResolver.resolveSigningKey() + .flatMap(key -> { + if (key.hashCode() != token.getKeyHash()) { + return Mono.error(new BadCredentialsException(badCredentialMessage())); + } + return Mono.just(token); + }); + } + + private String badCredentialMessage() { + return this.messages.getMessage("RememberMeAuthenticationProvider.incorrectKey", + "The presented RememberMeAuthenticationToken does not contain the expected key"); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeConfigurer.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeConfigurer.java new file mode 100644 index 0000000..97cbc68 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeConfigurer.java @@ -0,0 +1,41 @@ +package run.halo.app.security.authentication.rememberme; + +import static org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher.MatchResult; + +import lombok.RequiredArgsConstructor; +import org.springframework.security.config.web.server.SecurityWebFiltersOrder; +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.web.server.authentication.AuthenticationWebFilter; +import org.springframework.security.web.server.context.ServerSecurityContextRepository; +import org.springframework.stereotype.Component; +import run.halo.app.security.authentication.SecurityConfigurer; + +@Component +@RequiredArgsConstructor +public class RememberMeConfigurer implements SecurityConfigurer { + + private final RememberMeServices rememberMeServices; + + private final ServerSecurityContextRepository securityContextRepository; + + private final CookieSignatureKeyResolver cookieSignatureKeyResolver; + + @Override + public void configure(ServerHttpSecurity http) { + var authManager = new RememberMeAuthenticationManager(cookieSignatureKeyResolver); + var filter = new AuthenticationWebFilter(authManager); + filter.setSecurityContextRepository(securityContextRepository); + filter.setAuthenticationFailureHandler( + (exchange, exception) -> rememberMeServices.loginFail(exchange.getExchange()) + ); + filter.setServerAuthenticationConverter(rememberMeServices::autoLogin); + filter.setRequiresAuthenticationMatcher( + exchange -> ReactiveSecurityContextHolder.getContext() + .flatMap(securityContext -> MatchResult.notMatch()) + .switchIfEmpty(MatchResult.match()) + ); + http.addFilterAt(filter, SecurityWebFiltersOrder.AUTHENTICATION); + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeCookieResolver.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeCookieResolver.java new file mode 100644 index 0000000..4161513 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeCookieResolver.java @@ -0,0 +1,20 @@ +package run.halo.app.security.authentication.rememberme; + +import java.time.Duration; +import org.springframework.http.HttpCookie; +import org.springframework.lang.Nullable; +import org.springframework.web.server.ServerWebExchange; + +public interface RememberMeCookieResolver { + + @Nullable + HttpCookie resolveRememberMeCookie(ServerWebExchange exchange); + + void setRememberMeCookie(ServerWebExchange exchange, String value); + + void expireCookie(ServerWebExchange exchange); + + String getCookieName(); + + Duration getCookieMaxAge(); +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeCookieResolverImpl.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeCookieResolverImpl.java new file mode 100644 index 0000000..eeb3c99 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeCookieResolverImpl.java @@ -0,0 +1,54 @@ +package run.halo.app.security.authentication.rememberme; + +import java.time.Duration; +import lombok.Getter; +import org.springframework.http.HttpCookie; +import org.springframework.http.ResponseCookie; +import org.springframework.lang.Nullable; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerWebExchange; +import run.halo.app.infra.properties.HaloProperties; + +@Getter +@Component +public class RememberMeCookieResolverImpl implements RememberMeCookieResolver { + public static final String SPRING_SECURITY_REMEMBER_ME_COOKIE_KEY = "remember-me"; + + private final String cookieName = SPRING_SECURITY_REMEMBER_ME_COOKIE_KEY; + + private final Duration cookieMaxAge; + + public RememberMeCookieResolverImpl(HaloProperties haloProperties) { + this.cookieMaxAge = haloProperties.getSecurity().getRememberMe().getTokenValidity(); + } + + @Override + @Nullable + public HttpCookie resolveRememberMeCookie(ServerWebExchange exchange) { + return exchange.getRequest().getCookies().getFirst(getCookieName()); + } + + @Override + public void setRememberMeCookie(ServerWebExchange exchange, String value) { + Assert.notNull(value, "'value' is required"); + exchange.getResponse().getCookies() + .set(getCookieName(), initCookie(exchange, value).build()); + } + + @Override + public void expireCookie(ServerWebExchange exchange) { + ResponseCookie cookie = initCookie(exchange, "").maxAge(0).build(); + exchange.getResponse().getCookies().set(this.cookieName, cookie); + } + + private ResponseCookie.ResponseCookieBuilder initCookie(ServerWebExchange exchange, + String value) { + return ResponseCookie.from(this.cookieName, value) + .path(exchange.getRequest().getPath().contextPath().value() + "/") + .maxAge(getCookieMaxAge()) + .httpOnly(true) + .secure("https".equalsIgnoreCase(exchange.getRequest().getURI().getScheme())) + .sameSite("Lax"); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeServices.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeServices.java new file mode 100644 index 0000000..5b2fb89 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeServices.java @@ -0,0 +1,14 @@ +package run.halo.app.security.authentication.rememberme; + +import org.springframework.security.core.Authentication; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +public interface RememberMeServices { + + Mono autoLogin(ServerWebExchange exchange); + + Mono loginFail(ServerWebExchange exchange); + + Mono loginSuccess(ServerWebExchange exchange, Authentication successfulAuthentication); +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeTokenRevoker.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeTokenRevoker.java new file mode 100644 index 0000000..7bbf971 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberMeTokenRevoker.java @@ -0,0 +1,30 @@ +package run.halo.app.security.authentication.rememberme; + +import lombok.RequiredArgsConstructor; +import org.springframework.context.event.EventListener; +import org.springframework.scheduling.annotation.Async; +import org.springframework.stereotype.Component; +import run.halo.app.event.user.PasswordChangedEvent; + +/** + * Remember me token revoker. + *

+ * Listen to password changed event and revoke remember me token. + *

+ * Maybe you should consider revoke remember me token when user logout or username changed. + * + * @author guqing + * @since 2.17.0 + */ +@Component +@RequiredArgsConstructor +public class RememberMeTokenRevoker { + private final PersistentRememberMeTokenRepository tokenRepository; + + @Async + @EventListener(PasswordChangedEvent.class) + public void onPasswordChanged(PasswordChangedEvent event) { + tokenRepository.removeUserTokens(event.getUsername()) + .block(); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberTokenCleaner.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberTokenCleaner.java new file mode 100644 index 0000000..39a3057 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/RememberTokenCleaner.java @@ -0,0 +1,58 @@ +package run.halo.app.security.authentication.rememberme; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.isNull; +import static run.halo.app.extension.index.query.QueryFactory.lessThan; + +import java.time.Duration; +import java.time.Instant; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.springframework.scheduling.annotation.Scheduled; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.RememberMeToken; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.ReactiveExtensionPaginatedOperator; + +/** + * A cleaner for remember me tokens that cleans up expired tokens periodically. + * + * @author guqing + * @since 2.17.0 + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class RememberTokenCleaner { + private final ReactiveExtensionPaginatedOperator paginatedOperator; + private final RememberMeCookieResolver rememberMeCookieResolver; + + /** + * Clean up expired tokens every day at 3:00 AM. + */ + @Scheduled(cron = "0 0 3 * * ?") + public void cleanUpExpiredTokens() { + paginatedOperator.deleteInitialBatch(RememberMeToken.class, getExpiredTokensListOptions()) + .then().block(); + log.info("Expired remember me tokens have been cleaned up."); + } + + ListOptions getExpiredTokensListOptions() { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + and(isNull("metadata.deletionTimestamp"), + lessThan("metadata.creationTimestamp", getExpirationThreshold().toString()) + ) + )); + return listOptions; + } + + protected Instant getExpirationThreshold() { + return Instant.now().minus(getTokenValidity()); + } + + protected Duration getTokenValidity() { + return rememberMeCookieResolver.getCookieMaxAge(); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/rememberme/TokenBasedRememberMeServices.java b/application/src/main/java/run/halo/app/security/authentication/rememberme/TokenBasedRememberMeServices.java new file mode 100644 index 0000000..17e6730 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/rememberme/TokenBasedRememberMeServices.java @@ -0,0 +1,395 @@ +package run.halo.app.security.authentication.rememberme; + +import static org.apache.commons.lang3.BooleanUtils.isTrue; +import static org.apache.commons.lang3.BooleanUtils.toBoolean; + +import java.net.URLDecoder; +import java.net.URLEncoder; +import java.nio.charset.StandardCharsets; +import java.security.MessageDigest; +import java.security.NoSuchAlgorithmException; +import java.time.Instant; +import java.util.Arrays; +import java.util.Base64; +import java.util.Date; +import lombok.Getter; +import lombok.RequiredArgsConstructor; +import lombok.Setter; +import lombok.extern.slf4j.Slf4j; +import org.springframework.security.authentication.AccountStatusException; +import org.springframework.security.authentication.AccountStatusUserDetailsChecker; +import org.springframework.security.authentication.RememberMeAuthenticationToken; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.authority.mapping.GrantedAuthoritiesMapper; +import org.springframework.security.core.authority.mapping.NullAuthoritiesMapper; +import org.springframework.security.core.userdetails.ReactiveUserDetailsService; +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.core.userdetails.UserDetailsChecker; +import org.springframework.security.core.userdetails.UsernameNotFoundException; +import org.springframework.security.crypto.codec.Hex; +import org.springframework.security.crypto.codec.Utf8; +import org.springframework.security.web.authentication.rememberme.CookieTheftException; +import org.springframework.security.web.authentication.rememberme.InvalidCookieException; +import org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException; +import org.springframework.security.web.server.WebFilterExchange; +import org.springframework.security.web.server.authentication.logout.ServerLogoutHandler; +import org.springframework.util.StringUtils; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +/** + *

An {@link org.springframework.security.core.userdetails.UserDetailsService} is required + * by this implementation, so that it can construct a valid Authentication + * from the returned {@link org.springframework.security.core.userdetails.UserDetails}.

+ *

This is also necessary so that the user's password is available and can be checked as + * part of the encoded cookie.

+ *

The cookie encoded by this implementation adopts the following form: + * 

+ * username + ":" + expiryTime + ":" + algorithmName + ":"
+ *   + algorithmHex(username + ":" + expiryTime + ":" + password + ":" + key)
+ *
+ *

+ * + * @see org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices + */ +@Slf4j +@Setter +@Getter +@RequiredArgsConstructor +public class TokenBasedRememberMeServices implements ServerLogoutHandler, RememberMeServices { + + public static final int TWO_WEEKS_S = 1209600; + + public static final String DEFAULT_PARAMETER = "remember-me"; + + public static final String DEFAULT_ALGORITHM = "SHA-256"; + + private static final String DELIMITER = ":"; + + protected final CookieSignatureKeyResolver cookieSignatureKeyResolver; + + protected final ReactiveUserDetailsService userDetailsService; + + protected final RememberMeCookieResolver rememberMeCookieResolver; + + private UserDetailsChecker userDetailsChecker = new AccountStatusUserDetailsChecker(); + + private GrantedAuthoritiesMapper authoritiesMapper = new NullAuthoritiesMapper(); + + private static boolean equals(String expected, String actual) { + byte[] expectedBytes = bytesUtf8(expected); + byte[] actualBytes = bytesUtf8(actual); + return MessageDigest.isEqual(expectedBytes, actualBytes); + } + + private static byte[] bytesUtf8(String s) { + return (s != null) ? Utf8.encode(s) : null; + } + + @Override + public Mono autoLogin(ServerWebExchange exchange) { + var rememberMeCookie = rememberMeCookieResolver.resolveRememberMeCookie(exchange); + if (rememberMeCookie == null) { + return Mono.empty(); + } + log.debug("Remember-me cookie detected"); + return Mono.defer( + () -> { + String[] cookieTokens = decodeCookie(rememberMeCookie.getValue()); + return processAutoLoginCookie(cookieTokens, exchange); + }) + .flatMap(user -> { + this.userDetailsChecker.check(user); + log.debug("Remember-me cookie accepted"); + return createSuccessfulAuthentication(exchange, user); + }) + .onErrorResume(ex -> handleError(exchange, ex)); + } + + private Mono handleError(ServerWebExchange exchange, Throwable ex) { + cancelCookie(exchange); + if (ex instanceof CookieTheftException) { + log.error("Cookie theft detected", ex); + return Mono.error(ex); + } else if (ex instanceof UsernameNotFoundException) { + log.debug("Remember-me login was valid but corresponding user not found.", ex); + } else if (ex instanceof InvalidCookieException) { + log.debug("Invalid remember-me cookie: {}", ex.getMessage()); + } else if (ex instanceof AccountStatusException) { + log.debug("Invalid UserDetails: {}", ex.getMessage()); + } else if (ex instanceof RememberMeAuthenticationException) { + log.debug(ex.getMessage()); + } + return Mono.empty(); + } + + protected void cancelCookie(ServerWebExchange exchange) { + rememberMeCookieResolver.expireCookie(exchange); + } + + protected Mono processAutoLoginCookie(String[] cookieTokens, + ServerWebExchange exchange) { + if (!isValidCookieTokensLength(cookieTokens)) { + throw new InvalidCookieException( + "Cookie token did not contain 3 or 4 tokens, but contained '" + Arrays.asList( + cookieTokens) + "'"); + } + + long tokenExpiryTime = getTokenExpiryTime(cookieTokens); + if (isTokenExpired(tokenExpiryTime)) { + throw new InvalidCookieException( + "Cookie token[1] has expired (expired on '" + new Date(tokenExpiryTime) + + "'; current time is '" + new Date() + "')"); + } + + // Check the user exists. Defer lookup until after expiry time checked, to + // possibly avoid expensive database call. + return getUserDetailsService().findByUsername(cookieTokens[0]) + .switchIfEmpty(Mono.error(new UsernameNotFoundException("User '" + cookieTokens[0] + + "' not found"))) + .flatMap(userDetails -> { + // Check signature of token matches remaining details. Must do this after user + // lookup, as we need the DAO-derived password. If efficiency was a major issue, + // just add in a UserCache implementation, but recall that this method is usually + // only called once per HttpSession - if the token is valid, it will cause + // SecurityContextHolder population, whilst if invalid, will cause the cookie to + // be cancelled. + String actualTokenSignature; + String actualAlgorithm = DEFAULT_ALGORITHM; + // If the cookie value contains the algorithm, we use that algorithm to check the + // signature + if (cookieTokens.length == 4) { + actualTokenSignature = cookieTokens[3]; + actualAlgorithm = cookieTokens[2]; + } else { + actualTokenSignature = cookieTokens[2]; + } + return makeTokenSignature(tokenExpiryTime, userDetails.getUsername(), + userDetails.getPassword(), actualAlgorithm) + .doOnNext(expectedTokenSignature -> { + if (!equals(expectedTokenSignature, actualTokenSignature)) { + throw new InvalidCookieException( + "Cookie contained signature '" + actualTokenSignature + + "' but expected '" + + expectedTokenSignature + "'"); + } + }) + .thenReturn(userDetails); + }); + } + + protected boolean isTokenExpired(long tokenExpiryTime) { + return tokenExpiryTime < System.currentTimeMillis(); + } + + private long getTokenExpiryTime(String[] cookieTokens) { + try { + return Long.parseLong(cookieTokens[1]); + } catch (NumberFormatException nfe) { + throw new InvalidCookieException( + "Cookie token[1] did not contain a valid number (contained '" + cookieTokens[1] + + "')"); + } + } + + protected Mono createSuccessfulAuthentication(ServerWebExchange exchange, + UserDetails user) { + return getKey() + .map(key -> new RememberMeAuthenticationToken(key, user, + this.authoritiesMapper.mapAuthorities(user.getAuthorities())) + ); + } + + private boolean isValidCookieTokensLength(String[] cookieTokens) { + return cookieTokens.length == 3 || cookieTokens.length == 4; + } + + @Override + public Mono loginFail(ServerWebExchange exchange) { + log.debug("Interactive login attempt was unsuccessful."); + cancelCookie(exchange); + return Mono.empty(); + } + + @Override + public Mono loginSuccess(ServerWebExchange exchange, + Authentication successfulAuthentication) { + if (!rememberMeRequested(exchange)) { + log.debug("Remember-me login not requested."); + return Mono.empty(); + } + return onLoginSuccess(exchange, successfulAuthentication); + } + + protected Mono onLoginSuccess(ServerWebExchange exchange, + Authentication successfulAuthentication) { + return Mono.defer(() -> retrieveUsernamePassword(successfulAuthentication)) + .flatMap(pair -> { + var username = pair.username(); + var password = pair.password(); + var expiryTimeMs = calculateExpireTime(exchange, successfulAuthentication); + return makeTokenSignature(expiryTimeMs, username, password, DEFAULT_ALGORITHM) + .doOnNext(signatureValue -> { + setCookie( + new String[] {username, Long.toString(expiryTimeMs), DEFAULT_ALGORITHM, + signatureValue}, + exchange); + if (log.isDebugEnabled()) { + log.debug("Added remember-me cookie for user '{}', expiry: '{}'", + username, + new Date(expiryTimeMs)); + } + }); + }) + .then(); + } + + private Mono retrieveUsernamePassword( + Authentication successfulAuthentication) { + return Mono.defer(() -> { + String username = retrieveUserName(successfulAuthentication); + String password = retrievePassword(successfulAuthentication); + // If unable to find a username and password, just abort as + // TokenBasedRememberMeServices is + // unable to construct a valid token in this case. + if (!StringUtils.hasLength(username)) { + log.debug("Unable to retrieve username"); + return Mono.empty(); + } + if (!StringUtils.hasLength(password)) { + return getUserDetailsService().findByUsername(username) + .flatMap(user -> { + String existingPassword = user.getPassword(); + if (!StringUtils.hasLength(existingPassword)) { + log.debug("Unable to obtain password for user: {}", username); + return Mono.empty(); + } + return Mono.just(new UsernamePassword(username, existingPassword)); + }); + } + return Mono.just(new UsernamePassword(username, password)); + }); + } + + void setCookie(String[] cookieTokens, ServerWebExchange exchange) { + String cookieValue = encodeCookie(cookieTokens); + rememberMeCookieResolver.setRememberMeCookie(exchange, cookieValue); + } + + protected long calculateExpireTime(ServerWebExchange exchange, + Authentication authentication) { + var tokenLifetime = rememberMeCookieResolver.getCookieMaxAge().toSeconds(); + return Instant.now().plusSeconds(tokenLifetime).toEpochMilli(); + } + + protected boolean rememberMeRequested(ServerWebExchange exchange) { + String rememberMe = exchange.getRequest().getQueryParams().getFirst(DEFAULT_PARAMETER); + if (isTrue(toBoolean(rememberMe))) { + return true; + } + if (log.isDebugEnabled()) { + log.debug("Did not send remember-me cookie (principal did not set parameter '{}')", + DEFAULT_PARAMETER); + } + return false; + } + + protected String[] decodeCookie(String cookieValue) throws InvalidCookieException { + int paddingCount = 4 - (cookieValue.length() % 4); + if (paddingCount < 4) { + char[] padding = new char[paddingCount]; + Arrays.fill(padding, '='); + cookieValue += new String(padding); + } + String cookieAsPlainText; + try { + cookieAsPlainText = new String(Base64.getDecoder().decode(cookieValue.getBytes())); + } catch (IllegalArgumentException ex) { + throw new InvalidCookieException( + "Cookie token was not Base64 encoded; value was '" + cookieValue + "'"); + } + String[] tokens = StringUtils.delimitedListToStringArray(cookieAsPlainText, DELIMITER); + for (int i = 0; i < tokens.length; i++) { + tokens[i] = URLDecoder.decode(tokens[i], StandardCharsets.UTF_8); + } + return tokens; + } + + /** + * Inverse operation of decodeCookie. + * + * @param cookieTokens the tokens to be encoded. + * @return base64 encoding of the tokens concatenated with the ":" delimiter. + */ + protected String encodeCookie(String[] cookieTokens) { + StringBuilder sb = new StringBuilder(); + for (int i = 0; i < cookieTokens.length; i++) { + sb.append(URLEncoder.encode(cookieTokens[i], StandardCharsets.UTF_8)); + if (i < cookieTokens.length - 1) { + sb.append(DELIMITER); + } + } + String value = sb.toString(); + sb = new StringBuilder(new String(Base64.getEncoder().encode(value.getBytes()))); + while (sb.charAt(sb.length() - 1) == '=') { + sb.deleteCharAt(sb.length() - 1); + } + return sb.toString(); + } + + protected Mono makeTokenSignature(long tokenExpiryTime, String username, + String password, String algorithm) { + return getKey() + .handle((key, sink) -> { + String data = username + ":" + tokenExpiryTime + ":" + password + ":" + key; + try { + MessageDigest digest = MessageDigest.getInstance(algorithm); + sink.next(new String(Hex.encode(digest.digest(data.getBytes())))); + } catch (NoSuchAlgorithmException ex) { + sink.error( + new IllegalStateException("No " + algorithm + " algorithm available!")); + } + }); + } + + protected String retrieveUserName(Authentication authentication) { + if (isInstanceOfUserDetails(authentication)) { + return ((UserDetails) authentication.getPrincipal()).getUsername(); + } + return authentication.getPrincipal().toString(); + } + + protected String retrievePassword(Authentication authentication) { + if (isInstanceOfUserDetails(authentication)) { + return ((UserDetails) authentication.getPrincipal()).getPassword(); + } + if (authentication.getCredentials() != null) { + return authentication.getCredentials().toString(); + } + return null; + } + + private boolean isInstanceOfUserDetails(Authentication authentication) { + return authentication.getPrincipal() instanceof UserDetails; + } + + protected Mono getKey() { + return cookieSignatureKeyResolver.resolveSigningKey(); + } + + @Override + public Mono logout(WebFilterExchange exchange, Authentication authentication) { + if (log.isDebugEnabled()) { + log.debug("Logout of user {}", (authentication != null) ? authentication.getName() + : "Unknown"); + } + return onLogout(exchange, authentication); + } + + protected Mono onLogout(WebFilterExchange exchange, Authentication authentication) { + return Mono.empty(); + } + + record UsernamePassword(String username, String password) { + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/DefaultTwoFactorAuthResponseHandler.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/DefaultTwoFactorAuthResponseHandler.java new file mode 100644 index 0000000..9de2be0 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/DefaultTwoFactorAuthResponseHandler.java @@ -0,0 +1,56 @@ +package run.halo.app.security.authentication.twofactor; + +import java.net.URI; +import org.springframework.context.MessageSource; +import org.springframework.security.web.server.DefaultServerRedirectStrategy; +import org.springframework.security.web.server.ServerRedirectStrategy; +import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.infra.exception.Exceptions; + +@Component +public class DefaultTwoFactorAuthResponseHandler implements TwoFactorAuthResponseHandler { + + private final ServerRedirectStrategy redirectStrategy = new DefaultServerRedirectStrategy(); + + private static final String REDIRECT_LOCATION = "/console/login/mfa"; + + private final MessageSource messageSource; + + private final ServerResponse.Context context; + + private static final ServerWebExchangeMatcher XHR_MATCHER = exchange -> { + if (exchange.getRequest().getHeaders().getOrEmpty("X-Requested-With") + .contains("XMLHttpRequest")) { + return ServerWebExchangeMatcher.MatchResult.match(); + } + return ServerWebExchangeMatcher.MatchResult.notMatch(); + }; + + public DefaultTwoFactorAuthResponseHandler(MessageSource messageSource, + ServerResponse.Context context) { + this.messageSource = messageSource; + this.context = context; + } + + @Override + public Mono handle(ServerWebExchange exchange) { + return XHR_MATCHER.matches(exchange) + .filter(ServerWebExchangeMatcher.MatchResult::isMatch) + .switchIfEmpty(Mono.defer( + () -> redirectStrategy.sendRedirect(exchange, URI.create(REDIRECT_LOCATION)) + .then(Mono.empty()))) + .flatMap(isXhr -> { + var errorResponse = Exceptions.createErrorResponse( + new TwoFactorAuthRequiredException(URI.create(REDIRECT_LOCATION)), + null, exchange, messageSource); + return ServerResponse.status(errorResponse.getStatusCode()) + .bodyValue(errorResponse.getBody()) + .flatMap(response -> response.writeTo(exchange, context)); + }); + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthEndpoint.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthEndpoint.java new file mode 100644 index 0000000..991faad --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthEndpoint.java @@ -0,0 +1,283 @@ +package run.halo.app.security.authentication.twofactor; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.webflux.core.fn.SpringdocRouteBuilder.route; +import static org.springframework.web.reactive.function.server.RequestPredicates.path; + +import jakarta.validation.constraints.NotBlank; +import jakarta.validation.constraints.NotNull; +import java.net.URI; +import lombok.Data; +import org.springframework.security.authentication.AnonymousAuthenticationToken; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.stereotype.Component; +import org.springframework.validation.BeanPropertyBindingResult; +import org.springframework.validation.Validator; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import org.springframework.web.util.UriComponentsBuilder; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.exception.AccessDeniedException; +import run.halo.app.infra.exception.RequestBodyValidationException; +import run.halo.app.security.authentication.twofactor.totp.TotpAuthService; + +@Component +public class TwoFactorAuthEndpoint implements CustomEndpoint { + + private final ReactiveExtensionClient client; + + private final UserService userService; + + private final TotpAuthService totpAuthService; + + private final Validator validator; + + private final PasswordEncoder passwordEncoder; + + private final ExternalUrlSupplier externalUrl; + + public TwoFactorAuthEndpoint(ReactiveExtensionClient client, + UserService userService, + TotpAuthService totpAuthService, + Validator validator, + PasswordEncoder passwordEncoder, + ExternalUrlSupplier externalUrl) { + this.client = client; + this.userService = userService; + this.totpAuthService = totpAuthService; + this.validator = validator; + this.passwordEncoder = passwordEncoder; + this.externalUrl = externalUrl; + } + + @Override + public RouterFunction endpoint() { + var tag = "TwoFactorAuthV1alpha1Uc"; + return route().nest(path("/authentications/two-factor"), + () -> route() + .GET("/settings", this::getTwoFactorSettings, + builder -> builder.operationId("GetTwoFactorAuthenticationSettings") + .tag(tag) + .description("Get Two-factor authentication settings.") + .response(responseBuilder().implementation(TwoFactorAuthSettings.class))) + .PUT("/settings/enabled", this::enableTwoFactor, + builder -> builder.operationId("EnableTwoFactor") + .tag(tag) + .description("Enable Two-factor authentication") + .requestBody(requestBodyBuilder().implementation(PasswordRequest.class)) + .response(responseBuilder().implementation(TwoFactorAuthSettings.class))) + .PUT("/settings/disabled", this::disableTwoFactor, + builder -> builder.operationId("DisableTwoFactor") + .tag(tag) + .description("Disable Two-factor authentication") + .requestBody(requestBodyBuilder().implementation(PasswordRequest.class)) + .response(responseBuilder().implementation(TwoFactorAuthSettings.class))) + .POST("/totp", this::configureTotp, + builder -> builder.operationId("ConfigurerTotp") + .tag(tag) + .description("Configure a TOTP") + .requestBody(requestBodyBuilder().implementation(TotpRequest.class)) + .response(responseBuilder().implementation(TwoFactorAuthSettings.class))) + .DELETE("/totp/-", this::deleteTotp, + builder -> builder.operationId("DeleteTotp") + .tag(tag) + .requestBody(requestBodyBuilder().implementation(PasswordRequest.class)) + .response(responseBuilder().implementation(TwoFactorAuthSettings.class))) + .GET("/totp/auth-link", this::getTotpAuthLink, + builder -> builder.operationId("GetTotpAuthLink") + .tag(tag) + .description("Get TOTP auth link, including secret") + .response(responseBuilder().implementation(TotpAuthLinkResponse.class))) + .build(), + builder -> builder.description("Two-factor authentication endpoint(User-scoped)") + ).build(); + } + + private Mono deleteTotp(ServerRequest request) { + var totpDeleteRequestMono = request.bodyToMono(PasswordRequest.class) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException("Request body required"))) + .doOnNext( + passwordRequest -> this.validateRequest(passwordRequest, "passwordRequest")); + + var twoFactorAuthSettings = + totpDeleteRequestMono.flatMap(passwordRequest -> getCurrentUser() + .filter(user -> { + var rawPassword = passwordRequest.getPassword(); + var encodedPassword = user.getSpec().getPassword(); + return this.passwordEncoder.matches(rawPassword, encodedPassword); + }) + .switchIfEmpty( + Mono.error(() -> new ServerWebInputException("Invalid password"))) + .doOnNext(user -> { + var spec = user.getSpec(); + spec.setTotpEncryptedSecret(null); + }) + .flatMap(client::update) + .map(TwoFactorUtils::getTwoFactorAuthSettings)); + return ServerResponse.ok().body(twoFactorAuthSettings, TwoFactorAuthSettings.class); + } + + @Data + public static class PasswordRequest { + + @NotBlank + private String password; + + } + + private Mono disableTwoFactor(ServerRequest request) { + return toggleTwoFactor(request, false); + } + + private Mono enableTwoFactor(ServerRequest request) { + return toggleTwoFactor(request, true); + } + + private Mono toggleTwoFactor(ServerRequest request, boolean enabled) { + return request.bodyToMono(PasswordRequest.class) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException("Request body required"))) + .doOnNext(passwordRequest -> this.validateRequest(passwordRequest, "passwordRequest")) + .flatMap(passwordRequest -> getCurrentUser() + .filter(user -> { + var encodedPassword = user.getSpec().getPassword(); + var rawPassword = passwordRequest.getPassword(); + return passwordEncoder.matches(rawPassword, encodedPassword); + }) + .switchIfEmpty( + Mono.error(() -> new ServerWebInputException("Invalid password"))) + .doOnNext(user -> user.getSpec().setTwoFactorAuthEnabled(enabled)) + .flatMap(client::update) + .map(TwoFactorUtils::getTwoFactorAuthSettings)) + .flatMap(twoFactorAuthSettings -> ServerResponse.ok().bodyValue(twoFactorAuthSettings)); + } + + private Mono getTotpAuthLink(ServerRequest request) { + var authLinkResponse = getCurrentUser() + .map(user -> { + var username = user.getMetadata().getName(); + var url = externalUrl.getURL(request.exchange().getRequest()); + var authority = url.getAuthority(); + var authKeyId = username + ":" + authority; + var rawSecret = totpAuthService.generateTotpSecret(); + var authLink = UriComponentsBuilder.fromUriString("otpauth://totp") + .path(authKeyId) + .queryParam("secret", rawSecret) + .queryParam("digits", 6) + .build().toUri(); + var authLinkResp = new TotpAuthLinkResponse(); + authLinkResp.setAuthLink(authLink); + authLinkResp.setRawSecret(rawSecret); + return authLinkResp; + }); + + return ServerResponse.ok().body(authLinkResponse, TotpAuthLinkResponse.class); + } + + @Data + public static class TotpAuthLinkResponse { + + /** + * QR Code with base64 encoded. + */ + private URI authLink; + + private String rawSecret; + } + + private Mono configureTotp(ServerRequest request) { + var totpRequestMono = request.bodyToMono(TotpRequest.class) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException("Request body required."))) + .doOnNext(totpRequest -> this.validateRequest(totpRequest, "totp")); + + var configuredUser = totpRequestMono.flatMap(totpRequest -> { + // validate password + return getCurrentUser() + .filter(user -> { + var encodedPassword = user.getSpec().getPassword(); + var rawPassword = totpRequest.getPassword(); + return passwordEncoder.matches(rawPassword, encodedPassword); + }) + .switchIfEmpty(Mono.error(() -> new ServerWebInputException("Invalid password"))) + .doOnNext(user -> { + // TimeBasedOneTimePasswordUtil. + var rawSecret = totpRequest.getSecret(); + int code; + try { + code = Integer.parseInt(totpRequest.getCode()); + } catch (NumberFormatException e) { + throw new ServerWebInputException("Invalid code"); + } + var validated = totpAuthService.validateTotp(rawSecret, code); + if (!validated) { + throw new ServerWebInputException("Invalid secret or code"); + } + var encryptedSecret = totpAuthService.encryptSecret(rawSecret); + user.getSpec().setTotpEncryptedSecret(encryptedSecret); + }) + .flatMap(client::update); + }); + + var twoFactorAuthSettings = + configuredUser.map(TwoFactorUtils::getTwoFactorAuthSettings); + + return ServerResponse.ok().body(twoFactorAuthSettings, TwoFactorAuthSettings.class); + } + + private void validateRequest(Object target, String name) { + var errors = new BeanPropertyBindingResult(target, name); + validator.validate(target, errors); + if (errors.hasErrors()) { + throw new RequestBodyValidationException(errors); + } + } + + @Data + public static class TotpRequest { + + @NotBlank + private String secret; + + @NotNull + private String code; + + @NotBlank + private String password; + + } + + private Mono getTwoFactorSettings(ServerRequest request) { + return getCurrentUser() + .map(TwoFactorUtils::getTwoFactorAuthSettings) + .flatMap(settings -> ServerResponse.ok().bodyValue(settings)); + } + + private Mono getCurrentUser() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .filter(TwoFactorAuthEndpoint::isAuthenticatedUser) + .switchIfEmpty(Mono.error(AccessDeniedException::new)) + .map(Authentication::getName) + .flatMap(userService::getUser); + } + + private static boolean isAuthenticatedUser(Authentication authentication) { + return authentication != null && !(authentication instanceof AnonymousAuthenticationToken); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("uc.api.security.halo.run/v1alpha1"); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthRequiredException.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthRequiredException.java new file mode 100644 index 0000000..bc686b7 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthRequiredException.java @@ -0,0 +1,17 @@ +package run.halo.app.security.authentication.twofactor; + +import java.net.URI; +import org.springframework.http.HttpStatus; +import org.springframework.web.server.ResponseStatusException; + +public class TwoFactorAuthRequiredException extends ResponseStatusException { + + private static final URI type = URI.create("https://halo.run/probs/2fa-required"); + + public TwoFactorAuthRequiredException(URI redirectURI) { + super(HttpStatus.UNAUTHORIZED, "Two-factor authentication required"); + setType(type); + getBody().setProperty("redirectURI", redirectURI); + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthResponseHandler.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthResponseHandler.java new file mode 100644 index 0000000..a4216a4 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthResponseHandler.java @@ -0,0 +1,10 @@ +package run.halo.app.security.authentication.twofactor; + +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +public interface TwoFactorAuthResponseHandler { + + Mono handle(ServerWebExchange exchange); + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSecurityConfigurer.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSecurityConfigurer.java new file mode 100644 index 0000000..d8dd6a7 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSecurityConfigurer.java @@ -0,0 +1,47 @@ +package run.halo.app.security.authentication.twofactor; + +import org.springframework.context.MessageSource; +import org.springframework.security.config.web.server.SecurityWebFiltersOrder; +import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.web.server.context.ServerSecurityContextRepository; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.security.LoginHandlerEnhancer; +import run.halo.app.security.authentication.SecurityConfigurer; +import run.halo.app.security.authentication.twofactor.totp.TotpAuthService; +import run.halo.app.security.authentication.twofactor.totp.TotpAuthenticationFilter; + +@Component +public class TwoFactorAuthSecurityConfigurer implements SecurityConfigurer { + + private final ServerSecurityContextRepository securityContextRepository; + + private final TotpAuthService totpAuthService; + + private final ServerResponse.Context context; + + private final MessageSource messageSource; + + private final LoginHandlerEnhancer loginHandlerEnhancer; + + public TwoFactorAuthSecurityConfigurer( + ServerSecurityContextRepository securityContextRepository, + TotpAuthService totpAuthService, + ServerResponse.Context context, + MessageSource messageSource, + LoginHandlerEnhancer loginHandlerEnhancer + ) { + this.securityContextRepository = securityContextRepository; + this.totpAuthService = totpAuthService; + this.context = context; + this.messageSource = messageSource; + this.loginHandlerEnhancer = loginHandlerEnhancer; + } + + @Override + public void configure(ServerHttpSecurity http) { + var filter = new TotpAuthenticationFilter(securityContextRepository, totpAuthService, + context, messageSource, loginHandlerEnhancer); + http.addFilterAfter(filter, SecurityWebFiltersOrder.AUTHENTICATION); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSettings.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSettings.java new file mode 100644 index 0000000..010d8be --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSettings.java @@ -0,0 +1,22 @@ +package run.halo.app.security.authentication.twofactor; + +import lombok.Data; + +@Data +public class TwoFactorAuthSettings { + + private boolean enabled; + + private boolean emailVerified; + + private boolean totpConfigured; + + /** + * Check if 2FA is available. + * + * @return true if 2FA is enabled and configured, false otherwise. + */ + public boolean isAvailable() { + return enabled && totpConfigured; + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthentication.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthentication.java new file mode 100644 index 0000000..45a27e6 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthentication.java @@ -0,0 +1,49 @@ +package run.halo.app.security.authentication.twofactor; + +import static run.halo.app.security.authorization.AuthorityUtils.ANONYMOUS_ROLE_NAME; + +import java.util.List; +import org.springframework.security.authentication.AbstractAuthenticationToken; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.authority.SimpleGrantedAuthority; + +/** + * Authentication token for two-factor authentication. + * + * @author johnniang + */ +public class TwoFactorAuthentication extends AbstractAuthenticationToken { + + private final Authentication previous; + + /** + * Creates a token with the supplied array of authorities. + * + * @param previous the previous authentication + */ + public TwoFactorAuthentication(Authentication previous) { + super(List.of(new SimpleGrantedAuthority(ANONYMOUS_ROLE_NAME))); + this.previous = previous; + } + + @Override + public Object getCredentials() { + return previous.getCredentials(); + } + + @Override + public Object getPrincipal() { + return previous.getPrincipal(); + } + + @Override + public boolean isAuthenticated() { + // return true for accessing anonymous resources + return true; + } + + public Authentication getPrevious() { + return previous; + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthorizationManager.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthorizationManager.java new file mode 100644 index 0000000..f716717 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthorizationManager.java @@ -0,0 +1,36 @@ +package run.halo.app.security.authentication.twofactor; + +import java.net.URI; +import org.springframework.security.authorization.AuthorizationDecision; +import org.springframework.security.authorization.ReactiveAuthorizationManager; +import org.springframework.security.core.Authentication; +import org.springframework.security.web.server.authorization.AuthorizationContext; +import reactor.core.publisher.Mono; + +public class TwoFactorAuthorizationManager + implements ReactiveAuthorizationManager { + + private final ReactiveAuthorizationManager delegate; + + private static final URI REDIRECT_LOCATION = URI.create("/console/login?2fa=totp"); + + public TwoFactorAuthorizationManager( + ReactiveAuthorizationManager delegate) { + this.delegate = delegate; + } + + @Override + public Mono check(Mono authentication, + AuthorizationContext context) { + return authentication.flatMap(a -> { + Mono checked = delegate.check(Mono.just(a), context); + if (a instanceof TwoFactorAuthentication) { + checked = checked.filter(AuthorizationDecision::isGranted) + .switchIfEmpty( + Mono.error(() -> new TwoFactorAuthRequiredException(REDIRECT_LOCATION))); + } + return checked; + }); + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorUtils.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorUtils.java new file mode 100644 index 0000000..8c5c7bc --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/TwoFactorUtils.java @@ -0,0 +1,23 @@ +package run.halo.app.security.authentication.twofactor; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import org.apache.commons.lang3.StringUtils; +import run.halo.app.core.extension.User; + +public enum TwoFactorUtils { + ; + + public static TwoFactorAuthSettings getTwoFactorAuthSettings(User user) { + var spec = user.getSpec(); + var tfaEnabled = defaultIfNull(spec.getTwoFactorAuthEnabled(), false); + var emailVerified = spec.isEmailVerified(); + var totpEncryptedSecret = spec.getTotpEncryptedSecret(); + var settings = new TwoFactorAuthSettings(); + settings.setEnabled(tfaEnabled); + settings.setEmailVerified(emailVerified); + settings.setTotpConfigured(StringUtils.isNotBlank(totpEncryptedSecret)); + return settings; + } + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/DefaultTotpAuthService.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/DefaultTotpAuthService.java new file mode 100644 index 0000000..b722cf7 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/DefaultTotpAuthService.java @@ -0,0 +1,107 @@ +package run.halo.app.security.authentication.twofactor.totp; + +import static com.j256.twofactorauth.TimeBasedOneTimePasswordUtil.generateBase32Secret; +import static com.j256.twofactorauth.TimeBasedOneTimePasswordUtil.validateCurrentNumber; +import static java.nio.file.StandardOpenOption.APPEND; +import static java.nio.file.StandardOpenOption.CREATE; +import static java.nio.file.StandardOpenOption.READ; + +import java.io.IOException; +import java.nio.file.Files; +import java.nio.file.Path; +import java.security.GeneralSecurityException; +import java.security.KeyStore; +import java.security.KeyStoreException; +import java.security.NoSuchAlgorithmException; +import java.security.UnrecoverableEntryException; +import java.security.cert.CertificateException; +import javax.crypto.KeyGenerator; +import javax.crypto.SecretKey; +import lombok.extern.slf4j.Slf4j; +import org.springframework.security.crypto.codec.Hex; +import org.springframework.security.crypto.encrypt.AesBytesEncryptor; +import org.springframework.security.crypto.encrypt.BytesEncryptor; +import org.springframework.security.crypto.keygen.KeyGenerators; +import org.springframework.stereotype.Component; +import run.halo.app.infra.properties.HaloProperties; + +@Slf4j +@Component +public class DefaultTotpAuthService implements TotpAuthService { + + private final BytesEncryptor encryptor; + + public DefaultTotpAuthService(HaloProperties haloProperties) { + // init secret key + var keysRoot = haloProperties.getWorkDir().resolve("keys"); + this.encryptor = loadOrCreateEncryptor(keysRoot); + } + + private BytesEncryptor loadOrCreateEncryptor(Path keysRoot) { + try { + if (Files.notExists(keysRoot)) { + Files.createDirectories(keysRoot); + } + var keyStorePath = keysRoot.resolve("halo.keystore"); + var password = "changeit".toCharArray(); + var keyStore = KeyStore.getInstance(KeyStore.getDefaultType()); + if (Files.notExists(keyStorePath)) { + keyStore.load(null, password); + } else { + try (var is = Files.newInputStream(keyStorePath, READ)) { + keyStore.load(is, password); + } + } + + var alias = "totp-secret-key"; + var entry = keyStore.getEntry(alias, new KeyStore.PasswordProtection(password)); + SecretKey secretKey = null; + if (entry instanceof KeyStore.SecretKeyEntry secretKeyEntry) { + if ("AES".equalsIgnoreCase(secretKeyEntry.getSecretKey().getAlgorithm())) { + secretKey = secretKeyEntry.getSecretKey(); + } + } + if (secretKey == null) { + var generator = KeyGenerator.getInstance("AES"); + generator.init(128); + secretKey = generator.generateKey(); + var secretKeyEntry = new KeyStore.SecretKeyEntry(secretKey); + keyStore.setEntry(alias, secretKeyEntry, new KeyStore.PasswordProtection(password)); + try (var os = Files.newOutputStream(keyStorePath, CREATE, APPEND)) { + keyStore.store(os, password); + } + } + return new AesBytesEncryptor(secretKey, + KeyGenerators.secureRandom(32), + AesBytesEncryptor.CipherAlgorithm.GCM); + } catch (IOException | KeyStoreException | CertificateException | NoSuchAlgorithmException + | UnrecoverableEntryException e) { + throw new RuntimeException("Failed to initialize AesBytesEncryptor", e); + } + } + + @Override + public boolean validateTotp(String rawSecret, int code) { + try { + return validateCurrentNumber(rawSecret, code, 10 * 1000); + } catch (GeneralSecurityException e) { + log.warn("Error occurred when validate TOTP code", e); + return false; + } + } + + @Override + public String generateTotpSecret() { + return generateBase32Secret(32); + } + + @Override + public String encryptSecret(String rawSecret) { + return new String(Hex.encode(encryptor.encrypt(rawSecret.getBytes()))); + } + + @Override + public String decryptSecret(String encryptedSecret) { + return new String(encryptor.decrypt(Hex.decode(encryptedSecret))); + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthService.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthService.java new file mode 100644 index 0000000..3805243 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthService.java @@ -0,0 +1,13 @@ +package run.halo.app.security.authentication.twofactor.totp; + +public interface TotpAuthService { + + boolean validateTotp(String rawSecret, int code); + + String generateTotpSecret(); + + String encryptSecret(String rawSecret); + + String decryptSecret(String encryptedSecret); + +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthenticationFilter.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthenticationFilter.java new file mode 100644 index 0000000..b214000 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthenticationFilter.java @@ -0,0 +1,137 @@ +package run.halo.app.security.authentication.twofactor.totp; + +import static org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers.pathMatchers; + +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.MessageSource; +import org.springframework.http.HttpMethod; +import org.springframework.security.authentication.ReactiveAuthenticationManager; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.AuthenticationException; +import org.springframework.security.core.CredentialsContainer; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.security.web.server.authentication.AuthenticationWebFilter; +import org.springframework.security.web.server.authentication.ServerAuthenticationConverter; +import org.springframework.security.web.server.context.ServerSecurityContextRepository; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.security.HaloUserDetails; +import run.halo.app.security.LoginHandlerEnhancer; +import run.halo.app.security.authentication.login.UsernamePasswordHandler; +import run.halo.app.security.authentication.twofactor.TwoFactorAuthentication; + +@Slf4j +public class TotpAuthenticationFilter extends AuthenticationWebFilter { + + public TotpAuthenticationFilter( + ServerSecurityContextRepository securityContextRepository, + TotpAuthService totpAuthService, + ServerResponse.Context context, + MessageSource messageSource, + LoginHandlerEnhancer loginHandlerEnhancer + ) { + super(new TwoFactorAuthManager(totpAuthService)); + + setSecurityContextRepository(securityContextRepository); + setRequiresAuthenticationMatcher(pathMatchers(HttpMethod.POST, "/login/2fa/totp")); + setServerAuthenticationConverter(new TotpCodeAuthenticationConverter()); + + var handler = new UsernamePasswordHandler(context, messageSource, loginHandlerEnhancer); + setAuthenticationSuccessHandler(handler); + setAuthenticationFailureHandler(handler); + } + + private static class TotpCodeAuthenticationConverter implements ServerAuthenticationConverter { + + private final String codeParameter = "code"; + + @Override + public Mono convert(ServerWebExchange exchange) { + // Check the request is authenticated before. + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .filter(TwoFactorAuthentication.class::isInstance) + .switchIfEmpty(Mono.error( + () -> new TwoFactorAuthException("MFA Authentication required."))) + .flatMap(authentication -> exchange.getFormData()) + .handle((formData, sink) -> { + var codeStr = formData.getFirst(codeParameter); + if (StringUtils.isBlank(codeStr)) { + sink.error(new TwoFactorAuthException("Empty code parameter.")); + return; + } + try { + var code = Integer.parseInt(codeStr); + sink.next(new TotpAuthenticationToken(code)); + } catch (NumberFormatException e) { + sink.error( + new TwoFactorAuthException("Invalid code parameter " + codeStr + '.')); + } + }); + } + } + + private static class TwoFactorAuthException extends AuthenticationException { + + public TwoFactorAuthException(String msg, Throwable cause) { + super(msg, cause); + } + + public TwoFactorAuthException(String msg) { + super(msg); + } + + } + + private static class TwoFactorAuthManager implements ReactiveAuthenticationManager { + + private final TotpAuthService totpAuthService; + + private TwoFactorAuthManager(TotpAuthService totpAuthService) { + this.totpAuthService = totpAuthService; + } + + @Override + public Mono authenticate(Authentication authentication) { + // it should be TotpAuthenticationToken + var code = (Integer) authentication.getCredentials(); + log.debug("Got TOTP code {}", code); + + // get user details + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .cast(TwoFactorAuthentication.class) + .map(TwoFactorAuthentication::getPrevious) + .flatMap(previousAuth -> { + var principal = previousAuth.getPrincipal(); + if (!(principal instanceof HaloUserDetails user)) { + return Mono.error( + new TwoFactorAuthException("Invalid authentication principal.") + ); + } + var totpEncryptedSecret = user.getTotpEncryptedSecret(); + if (StringUtils.isBlank(totpEncryptedSecret)) { + return Mono.error( + new TwoFactorAuthException("TOTP secret not configured.") + ); + } + var rawSecret = totpAuthService.decryptSecret(totpEncryptedSecret); + var validated = totpAuthService.validateTotp(rawSecret, code); + if (!validated) { + return Mono.error(new TwoFactorAuthException("Invalid TOTP code " + code)); + } + if (log.isDebugEnabled()) { + log.debug("TOTP authentication for {} with code {} successfully.", + previousAuth.getName(), code); + } + if (previousAuth instanceof CredentialsContainer container) { + container.eraseCredentials(); + } + return Mono.just(previousAuth); + }); + } + } +} diff --git a/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthenticationToken.java b/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthenticationToken.java new file mode 100644 index 0000000..af8df5a --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authentication/twofactor/totp/TotpAuthenticationToken.java @@ -0,0 +1,33 @@ +package run.halo.app.security.authentication.twofactor.totp; + +import java.util.List; +import org.springframework.security.authentication.AbstractAuthenticationToken; + +public class TotpAuthenticationToken extends AbstractAuthenticationToken { + + private final int code; + + public TotpAuthenticationToken(int code) { + super(List.of()); + this.code = code; + } + + public int getCode() { + return code; + } + + @Override + public Object getCredentials() { + return getCode(); + } + + @Override + public Object getPrincipal() { + return getCode(); + } + + @Override + public boolean isAuthenticated() { + return false; + } +} diff --git a/application/src/main/java/run/halo/app/security/authorization/Attributes.java b/application/src/main/java/run/halo/app/security/authorization/Attributes.java new file mode 100644 index 0000000..a68317b --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/Attributes.java @@ -0,0 +1,72 @@ +package run.halo.app.security.authorization; + +import java.security.Principal; + +/** + * Attributes is used by an Authorizer to get information about a request + * that is used to make an authorization decision. + * + * @author guqing + * @since 2.0.0 + */ +public interface Attributes { + /** + * @return the UserDetails object to authorize + */ + Principal getPrincipal(); + + /** + * @return the verb associated with API requests(this includes get, list, + * watch, create, update, patch, delete, deletecollection, and proxy) + * or the lower-cased HTTP verb associated with non-API requests(this + * includes get, put, post, patch, and delete) + */ + String getVerb(); + + /** + * @return when isReadOnly() == true, the request has no side effects, other than + * caching, logging, and other incidentals. + */ + boolean isReadOnly(); + + /** + * @return The kind of object, if a request is for a REST object. + */ + String getResource(); + + /** + * @return the subresource being requested, if present. + */ + String getSubresource(); + + /** + * @return the name of the object as parsed off the request. This will not be + * present for all request types, but will be present for: get, update, delete + */ + String getName(); + + /** + * @return The group of the resource, if a request is for a REST object. + */ + String getApiGroup(); + + /** + * @return the version of the group requested, if a request is for a REST object. + */ + String getApiVersion(); + + /** + * @return true for requests to API resources, like /api/v1/nodes, + * and false for non-resource endpoints like /api, /healthz + */ + boolean isResourceRequest(); + + /** + * @return returns the path of the request + */ + String getPath(); + + String getSubName(); + + String getUserSpace(); +} diff --git a/application/src/main/java/run/halo/app/security/authorization/AttributesRecord.java b/application/src/main/java/run/halo/app/security/authorization/AttributesRecord.java new file mode 100644 index 0000000..3fb6833 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/AttributesRecord.java @@ -0,0 +1,80 @@ +package run.halo.app.security.authorization; + +import java.security.Principal; + +/** + * @author guqing + * @since 2.0.0 + */ +public class AttributesRecord implements Attributes { + private final RequestInfo requestInfo; + private final Principal principal; + + public AttributesRecord(Principal principal, RequestInfo requestInfo) { + this.requestInfo = requestInfo; + this.principal = principal; + } + + @Override + public Principal getPrincipal() { + return this.principal; + } + + @Override + public String getVerb() { + return requestInfo.getVerb(); + } + + @Override + public boolean isReadOnly() { + String verb = requestInfo.getVerb(); + return "get".equals(verb) + || "list".equals(verb) + || "watch".equals(verb); + } + + @Override + public String getResource() { + return requestInfo.getResource(); + } + + @Override + public String getSubresource() { + return requestInfo.getSubresource(); + } + + @Override + public String getName() { + return requestInfo.getName(); + } + + @Override + public String getApiGroup() { + return requestInfo.getApiGroup(); + } + + @Override + public String getApiVersion() { + return requestInfo.getApiVersion(); + } + + @Override + public boolean isResourceRequest() { + return requestInfo.isResourceRequest(); + } + + @Override + public String getPath() { + return requestInfo.getPath(); + } + + @Override + public String getSubName() { + return requestInfo.getSubName(); + } + + @Override + public String getUserSpace() { + return requestInfo.getUserspace(); + } +} diff --git a/application/src/main/java/run/halo/app/security/authorization/AuthorityUtils.java b/application/src/main/java/run/halo/app/security/authorization/AuthorityUtils.java new file mode 100644 index 0000000..64460ea --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/AuthorityUtils.java @@ -0,0 +1,64 @@ +package run.halo.app.security.authorization; + +import java.util.Collection; +import java.util.Set; +import java.util.stream.Collectors; +import org.apache.commons.lang3.StringUtils; +import org.springframework.security.authentication.RememberMeAuthenticationToken; +import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.GrantedAuthority; + +/** + * Utility methods for manipulating GrantedAuthority collection. + * + * @author johnniang + */ +public enum AuthorityUtils { + ; + + public static final String SCOPE_PREFIX = "SCOPE_"; + + public static final String ROLE_PREFIX = "ROLE_"; + + public static final String SUPER_ROLE_NAME = "super-role"; + + public static final String AUTHENTICATED_ROLE_NAME = "authenticated"; + + public static final String ANONYMOUS_ROLE_NAME = "anonymous"; + + public static final String COMMENT_MANAGEMENT_ROLE_NAME = "role-template-manage-comments"; + + /** + * Converts an array of GrantedAuthority objects to a role set. + * + * @return a Set of the Strings obtained from each call to + * GrantedAuthority.getAuthority() and filtered by prefix "ROLE_". + */ + public static Set authoritiesToRoles( + Collection authorities) { + return authorities.stream() + .map(GrantedAuthority::getAuthority) + .map(authority -> { + authority = StringUtils.removeStart(authority, SCOPE_PREFIX); + authority = StringUtils.removeStart(authority, ROLE_PREFIX); + return authority; + }) + .collect(Collectors.toSet()); + } + + public static boolean containsSuperRole(Collection roles) { + return roles.contains(SUPER_ROLE_NAME); + } + + /** + * Check if the authentication is a real user. + * + * @param authentication current authentication + * @return true if the authentication is a real user; false otherwise + */ + public static boolean isRealUser(Authentication authentication) { + return authentication instanceof UsernamePasswordAuthenticationToken + || authentication instanceof RememberMeAuthenticationToken; + } +} diff --git a/application/src/main/java/run/halo/app/security/authorization/AuthorizationRuleResolver.java b/application/src/main/java/run/halo/app/security/authorization/AuthorizationRuleResolver.java new file mode 100644 index 0000000..cec9a5e --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/AuthorizationRuleResolver.java @@ -0,0 +1,13 @@ +package run.halo.app.security.authorization; + +import org.springframework.security.core.Authentication; +import reactor.core.publisher.Mono; + +/** + * @author guqing + * @since 2.0.0 + */ +public interface AuthorizationRuleResolver { + + Mono visitRules(Authentication authentication, RequestInfo requestInfo); +} diff --git a/application/src/main/java/run/halo/app/security/authorization/AuthorizingVisitor.java b/application/src/main/java/run/halo/app/security/authorization/AuthorizingVisitor.java new file mode 100644 index 0000000..5ff786a --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/AuthorizingVisitor.java @@ -0,0 +1,52 @@ +package run.halo.app.security.authorization; + +import java.util.ArrayList; +import java.util.List; +import run.halo.app.core.extension.Role; + +/** + * authorizing visitor short-circuits once allowed, and collects any resolution errors encountered. + * + * @author guqing + * @since 2.0.0 + */ +public class AuthorizingVisitor implements RuleAccumulator { + private final RbacRequestEvaluation requestEvaluation = new RbacRequestEvaluation(); + + private final Attributes requestAttributes; + + private boolean allowed; + + private String reason; + + private final List errors = new ArrayList<>(4); + + public AuthorizingVisitor(Attributes requestAttributes) { + this.requestAttributes = requestAttributes; + } + + @Override + public boolean visit(String source, Role.PolicyRule rule, Throwable error) { + if (rule != null && requestEvaluation.ruleAllows(requestAttributes, rule)) { + this.allowed = true; + this.reason = String.format("RBAC: allowed by %s", source); + return false; + } + if (error != null) { + this.errors.add(error); + } + return true; + } + + public boolean isAllowed() { + return allowed; + } + + public String getReason() { + return reason; + } + + public List getErrors() { + return errors; + } +} diff --git a/application/src/main/java/run/halo/app/security/authorization/DefaultRuleResolver.java b/application/src/main/java/run/halo/app/security/authorization/DefaultRuleResolver.java new file mode 100644 index 0000000..00cfdc1 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/DefaultRuleResolver.java @@ -0,0 +1,74 @@ +package run.halo.app.security.authorization; + +import java.util.concurrent.atomic.AtomicBoolean; +import lombok.Data; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.security.core.Authentication; +import org.springframework.util.CollectionUtils; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.service.RoleService; + +/** + * @author guqing + * @since 2.0.0 + */ +@Data +@Slf4j +public class DefaultRuleResolver implements AuthorizationRuleResolver { + + private RoleService roleService; + + public DefaultRuleResolver(RoleService roleService) { + this.roleService = roleService; + } + + @Override + public Mono visitRules(Authentication authentication, + RequestInfo requestInfo) { + var roleNames = AuthorityUtils.authoritiesToRoles(authentication.getAuthorities()); + var record = new AttributesRecord(authentication, requestInfo); + var visitor = new AuthorizingVisitor(record); + + // If the request is an userspace scoped request, + // then we should check whether the user is the owner of the userspace. + if (StringUtils.isNotBlank(requestInfo.getUserspace())) { + if (!authentication.getName().equals(requestInfo.getUserspace())) { + return Mono.fromSupplier(() -> { + visitor.visit(null, null, null); + return visitor; + }); + } + } + + var stopVisiting = new AtomicBoolean(false); + return roleService.listDependenciesFlux(roleNames) + .filter(role -> !CollectionUtils.isEmpty(role.getRules())) + .doOnNext(role -> { + if (stopVisiting.get()) { + return; + } + String roleName = role.getMetadata().getName(); + var rules = role.getRules(); + var source = roleBindingDescriber(roleName, authentication.getName()); + for (var rule : rules) { + if (!visitor.visit(source, rule, null)) { + stopVisiting.set(true); + return; + } + } + }) + .takeUntil(item -> stopVisiting.get()) + .onErrorResume(t -> visitor.visit(null, null, t), t -> { + log.error("Error occurred when visiting rules", t); + //Do nothing here + return Mono.empty(); + }) + .then(Mono.just(visitor)); + } + + String roleBindingDescriber(String roleName, String subject) { + return String.format("Binding role [%s] to [%s]", roleName, subject); + } + +} diff --git a/application/src/main/java/run/halo/app/security/authorization/PolicyRuleList.java b/application/src/main/java/run/halo/app/security/authorization/PolicyRuleList.java new file mode 100644 index 0000000..6ce0b40 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/PolicyRuleList.java @@ -0,0 +1,35 @@ +package run.halo.app.security.authorization; + +import java.util.ArrayList; +import java.util.LinkedList; +import java.util.List; +import run.halo.app.core.extension.Role; + +/** + * @author guqing + * @since 2.0.0 + */ +public class PolicyRuleList extends LinkedList { + private final List errors = new ArrayList<>(4); + + /** + * @return true if an error occurred when parsing PolicyRules + */ + public boolean hasErrors() { + return !errors.isEmpty(); + } + + public List getErrors() { + return errors; + } + + public PolicyRuleList addError(Throwable error) { + errors.add(error); + return this; + } + + public PolicyRuleList addErrors(List errors) { + this.errors.addAll(errors); + return this; + } +} diff --git a/application/src/main/java/run/halo/app/security/authorization/RbacRequestEvaluation.java b/application/src/main/java/run/halo/app/security/authorization/RbacRequestEvaluation.java new file mode 100644 index 0000000..3cf832c --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/RbacRequestEvaluation.java @@ -0,0 +1,161 @@ +package run.halo.app.security.authorization; + +import java.util.List; +import java.util.Objects; +import org.apache.commons.lang3.ArrayUtils; +import org.apache.commons.lang3.StringUtils; +import run.halo.app.core.extension.Role; + +/** + * @author guqing + * @since 2.0.0 + */ +public class RbacRequestEvaluation { + interface WildCard { + String APIGroupAll = "*"; + String ResourceAll = "*"; + String VerbAll = "*"; + String NonResourceAll = "*"; + } + + public boolean rulesAllow(Attributes requestAttributes, List rules) { + for (Role.PolicyRule rule : rules) { + if (ruleAllows(requestAttributes, rule)) { + return true; + } + } + return false; + } + + protected boolean ruleAllows(Attributes requestAttributes, Role.PolicyRule rule) { + if (requestAttributes.isResourceRequest()) { + String combinedResource = requestAttributes.getResource(); + if (StringUtils.isNotBlank(requestAttributes.getSubresource())) { + combinedResource = + requestAttributes.getResource() + "/" + requestAttributes.getSubresource(); + } + return verbMatches(rule, requestAttributes.getVerb()) + && apiGroupMatches(rule, requestAttributes.getApiGroup()) + && resourceMatches(rule, combinedResource, requestAttributes.getSubresource()) + && resourceNameMatches(rule, + combineResourceName(requestAttributes.getName(), requestAttributes.getSubName())); + } + return verbMatches(rule, requestAttributes.getVerb()) + && nonResourceURLMatches(rule, requestAttributes.getPath()); + } + + private String combineResourceName(String name, String subName) { + if (StringUtils.isBlank(name)) { + return subName; + } + if (StringUtils.isBlank(subName)) { + return name; + } + return name + "/" + subName; + } + + protected boolean verbMatches(Role.PolicyRule rule, String requestedVerb) { + for (String ruleVerb : rule.getVerbs()) { + if (Objects.equals(ruleVerb, WildCard.VerbAll)) { + return true; + } + if (Objects.equals(ruleVerb, requestedVerb)) { + return true; + } + } + return false; + } + + protected boolean apiGroupMatches(Role.PolicyRule rule, String requestedGroup) { + for (String ruleGroup : rule.getApiGroups()) { + if (Objects.equals(ruleGroup, WildCard.APIGroupAll)) { + return true; + } + if (Objects.equals(ruleGroup, requestedGroup)) { + return true; + } + } + return false; + } + + protected boolean resourceMatches(Role.PolicyRule rule, String combinedRequestedResource, + String requestedSubresource) { + for (String ruleResource : rule.getResources()) { + // if everything is allowed, we match + if (Objects.equals(ruleResource, WildCard.ResourceAll)) { + return true; + } + // if we have an exact match, we match + if (Objects.equals(ruleResource, combinedRequestedResource)) { + return true; + } + + // We can also match a */subresource. + // if there isn't a subresource, then continue + if (StringUtils.isBlank(requestedSubresource)) { + continue; + } + // if the rule isn't in the format */subresource, then we don't match, continue + if (StringUtils.length(ruleResource) == StringUtils.length(requestedSubresource) + 2 + && StringUtils.startsWith(ruleResource, "*/") + && StringUtils.startsWith(ruleResource, requestedSubresource)) { + return true; + } + } + return false; + } + + protected boolean resourceNameMatches(Role.PolicyRule rule, String requestedName) { + if (ArrayUtils.isEmpty(rule.getResourceNames())) { + return true; + } + String[] requestedNameParts = ArrayUtils.nullToEmpty(StringUtils.split(requestedName, "/")); + for (String ruleName : rule.getResourceNames()) { + String[] patternParts = StringUtils.split(ruleName, "/"); + + for (int i = 0; i < patternParts.length; i++) { + String patternPart = patternParts[i]; + String textPart = StringUtils.EMPTY; + if (requestedNameParts.length > i) { + textPart = requestedNameParts[i]; + } + + if (!matchPart(patternPart, textPart)) { + return false; + } + } + + return true; + } + return false; + } + + private static boolean matchPart(String patternPart, String textPart) { + if (patternPart.equals("*")) { + return true; + } else if (patternPart.startsWith("*")) { + return textPart.endsWith(patternPart.substring(1)); + } else if (patternPart.endsWith("*")) { + return textPart.startsWith(patternPart.substring(0, patternPart.length() - 1)); + } else { + return patternPart.equals(textPart); + } + } + + protected boolean nonResourceURLMatches(Role.PolicyRule rule, String requestedURL) { + for (String ruleURL : rule.getNonResourceURLs()) { + if (Objects.equals(ruleURL, WildCard.NonResourceAll)) { + return true; + } + if (Objects.equals(ruleURL, requestedURL)) { + return true; + } + if (StringUtils.endsWith(ruleURL, WildCard.NonResourceAll) + && StringUtils.startsWith(requestedURL, + StringUtils.stripEnd(ruleURL, WildCard.NonResourceAll))) { + return true; + } + } + return false; + } +} diff --git a/application/src/main/java/run/halo/app/security/authorization/RequestInfo.java b/application/src/main/java/run/halo/app/security/authorization/RequestInfo.java new file mode 100644 index 0000000..8295f3a --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/RequestInfo.java @@ -0,0 +1,61 @@ +package run.halo.app.security.authorization; + +import java.util.Objects; +import lombok.Getter; +import lombok.ToString; +import org.apache.commons.lang3.StringUtils; +import org.springframework.http.server.reactive.ServerHttpRequest; + +/** + * RequestInfo holds information parsed from the {@link ServerHttpRequest}. + * + * @author guqing + * @since 2.0.0 + */ +@Getter +@ToString +public class RequestInfo { + boolean isResourceRequest; + final String path; + String namespace; + String userspace; + String verb; + String apiPrefix; + String apiGroup; + String apiVersion; + String resource; + + String name; + + String subresource; + + String subName; + + String[] parts; + + public RequestInfo(boolean isResourceRequest, String path, String verb) { + this(isResourceRequest, path, null, null, verb, null, null, null, null, null, null, null, + null); + } + + public RequestInfo(boolean isResourceRequest, String path, String namespace, String userspace, + String verb, + String apiPrefix, + String apiGroup, + String apiVersion, String resource, String name, String subresource, String subName, + String[] parts) { + this.isResourceRequest = isResourceRequest; + this.path = StringUtils.defaultString(path, ""); + this.namespace = StringUtils.defaultString(namespace, ""); + this.userspace = StringUtils.defaultString(userspace, ""); + this.verb = StringUtils.defaultString(verb, ""); + this.apiPrefix = StringUtils.defaultString(apiPrefix, ""); + this.apiGroup = StringUtils.defaultString(apiGroup, ""); + this.apiVersion = StringUtils.defaultString(apiVersion, ""); + this.resource = StringUtils.defaultString(resource, ""); + this.subresource = StringUtils.defaultString(subresource, ""); + this.subName = StringUtils.defaultString(subName, ""); + this.name = StringUtils.defaultString(name, ""); + this.parts = Objects.requireNonNullElseGet(parts, () -> new String[] {}); + } +} diff --git a/application/src/main/java/run/halo/app/security/authorization/RequestInfoAuthorizationManager.java b/application/src/main/java/run/halo/app/security/authorization/RequestInfoAuthorizationManager.java new file mode 100644 index 0000000..f450af7 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/RequestInfoAuthorizationManager.java @@ -0,0 +1,46 @@ +package run.halo.app.security.authorization; + +import java.util.List; +import lombok.extern.slf4j.Slf4j; +import org.springframework.http.server.reactive.ServerHttpRequest; +import org.springframework.security.authorization.AuthorizationDecision; +import org.springframework.security.authorization.ReactiveAuthorizationManager; +import org.springframework.security.core.Authentication; +import org.springframework.security.web.server.authorization.AuthorizationContext; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.service.RoleService; + +@Slf4j +public class RequestInfoAuthorizationManager + implements ReactiveAuthorizationManager { + + private final AuthorizationRuleResolver ruleResolver; + + public RequestInfoAuthorizationManager(RoleService roleService) { + this.ruleResolver = new DefaultRuleResolver(roleService); + } + + @Override + public Mono check(Mono authentication, + AuthorizationContext context) { + ServerHttpRequest request = context.getExchange().getRequest(); + RequestInfo requestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request); + + return authentication.flatMap(auth -> this.ruleResolver.visitRules(auth, requestInfo) + .doOnNext(visitor -> showErrorMessage(visitor.getErrors())) + .filter(AuthorizingVisitor::isAllowed) + .map(visitor -> new AuthorizationDecision(isGranted(auth))) + .switchIfEmpty(Mono.fromSupplier(() -> new AuthorizationDecision(false)))); + } + + private boolean isGranted(Authentication authentication) { + return authentication != null && authentication.isAuthenticated(); + } + + private void showErrorMessage(List errors) { + if (errors != null) { + errors.forEach(error -> log.error("Access decision error", error)); + } + } + +} diff --git a/application/src/main/java/run/halo/app/security/authorization/RequestInfoFactory.java b/application/src/main/java/run/halo/app/security/authorization/RequestInfoFactory.java new file mode 100644 index 0000000..4f629f6 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/RequestInfoFactory.java @@ -0,0 +1,233 @@ +package run.halo.app.security.authorization; + +import java.util.Arrays; +import java.util.Objects; +import java.util.Set; +import org.apache.commons.lang3.StringUtils; +import org.springframework.http.server.PathContainer; +import org.springframework.http.server.reactive.ServerHttpRequest; +import run.halo.app.console.WebSocketUtils; + +/** + * Creates {@link RequestInfo} from {@link ServerHttpRequest}. + * + * @author guqing + * @since 2.0.0 + */ +public class RequestInfoFactory { + public static final RequestInfoFactory INSTANCE = + new RequestInfoFactory(Set.of("api", "apis"), Set.of("api")); + + /** + * without leading and trailing slashes. + */ + final Set apiPrefixes; + + /** + * without leading and trailing slashes. + */ + final Set grouplessApiPrefixes; + + /** + * special verbs no subresources. + */ + final Set specialVerbs; + + public RequestInfoFactory(Set apiPrefixes, Set grouplessApiPrefixes) { + this(apiPrefixes, grouplessApiPrefixes, Set.of("proxy", "watch")); + } + + public RequestInfoFactory(Set apiPrefixes, Set grouplessApiPrefixes, + Set specialVerbs) { + this.apiPrefixes = apiPrefixes; + this.grouplessApiPrefixes = grouplessApiPrefixes; + this.specialVerbs = specialVerbs; + } + + /** + *

newRequestInfo returns the information from the http request. If error is not occurred, + * RequestInfo holds the information as best it is known before the failure + * It handles both resource and non-resource requests and fills in all the pertinent + * information.

+ *

for each.

+ * Valid Inputs: + *

Resource paths

+ * 
+     * /apis/{api-group}/{version}/namespaces
+     * /api/{version}/namespaces
+     * /api/{version}/namespaces/{namespace}
+     * /api/{version}/namespaces/{namespace}/{resource}
+     * /api/{version}/namespaces/{namespace}/{resource}/{resourceName}
+     * /api/{version}/userspaces/{userspace}/{resource}
+     * /api/{version}/userspaces/{userspace}/{resource}/{resourceName}
+     * /api/{version}/{resource}
+     * /api/{version}/{resource}/{resourceName}
+     *
+ *

Special verbs without subresources:

+ * 
+     * /api/{version}/proxy/{resource}/{resourceName}
+     * /api/{version}/proxy/namespaces/{namespace}/{resource}/{resourceName}
+     *
+ * + *

Special verbs with subresources:

+ * 
+     * /api/{version}/watch/{resource}
+     * /api/{version}/watch/namespaces/{namespace}/{resource}
+     *
+ * + *

NonResource paths:

+ * 
+     * /apis/{api-group}/{version}
+     * /apis/{api-group}
+     * /apis
+     * /api/{version}
+     * /api
+     * /healthz
+     *
+ * + * @param request http request + * @return request holds the information of both resource and non-resource requests + */ + public RequestInfo newRequestInfo(ServerHttpRequest request) { + // non-resource request default + PathContainer path = request.getPath().pathWithinApplication(); + RequestInfo requestInfo = + new RequestInfo(false, path.value(), request.getMethod().name().toLowerCase()); + + String[] currentParts = splitPath(request.getPath().value()); + + if (currentParts.length < 3) { + // return a non-resource request + return requestInfo; + } + + if (!apiPrefixes.contains(currentParts[0])) { + // return a non-resource request + return requestInfo; + } + requestInfo.apiPrefix = currentParts[0]; + currentParts = Arrays.copyOfRange(currentParts, 1, currentParts.length); + + if (!grouplessApiPrefixes.contains(requestInfo.apiPrefix)) { + // one part (APIPrefix) has already been consumed, so this is actually "do we have + // four parts?" + if (currentParts.length < 3) { + // return a non-resource request + return requestInfo; + } + + requestInfo.apiGroup = StringUtils.defaultString(currentParts[0], ""); + currentParts = Arrays.copyOfRange(currentParts, 1, currentParts.length); + } + requestInfo.isResourceRequest = true; + requestInfo.apiVersion = currentParts[0]; + currentParts = Arrays.copyOfRange(currentParts, 1, currentParts.length); + // handle input of form /{specialVerb}/* + Set specialVerbs = Set.of("proxy", "watch"); + if (specialVerbs.contains(currentParts[0])) { + if (currentParts.length < 2) { + throw new IllegalArgumentException( + String.format("unable to determine kind and namespace from url, %s", + request.getPath())); + } + requestInfo.verb = currentParts[0]; + currentParts = Arrays.copyOfRange(currentParts, 1, currentParts.length); + } else { + requestInfo.verb = switch (request.getMethod().name().toUpperCase()) { + case "POST" -> "create"; + case "GET", "HEAD" -> "get"; + case "PUT" -> "update"; + case "PATCH" -> "patch"; + case "DELETE" -> "delete"; + default -> ""; + }; + } + // URL forms: /namespaces/{namespace}/{kind}/*, where parts are adjusted to be relative + // to kind + Set namespaceSubresources = Set.of("status", "finalize"); + if (Objects.equals(currentParts[0], "namespaces")) { + if (currentParts.length > 1) { + requestInfo.namespace = currentParts[1]; + + // if there is another step after the namespace name and it is not a known + // namespace subresource + // move currentParts to include it as a resource in its own right + if (currentParts.length > 2 && !namespaceSubresources.contains(currentParts[2])) { + currentParts = Arrays.copyOfRange(currentParts, 2, currentParts.length); + } + } + } else if ("userspaces".equals(currentParts[0])) { + if (currentParts.length > 1) { + requestInfo.userspace = currentParts[1]; + + // if there is another step after the userspace name + // move currentParts to include it as a resource in its own right + if (currentParts.length > 2) { + currentParts = Arrays.copyOfRange(currentParts, 2, currentParts.length); + } + } + } else { + requestInfo.userspace = ""; + requestInfo.namespace = ""; + } + + // parsing successful, so we now know the proper value for .Parts + requestInfo.parts = currentParts; + // special verbs no subresources + // parts look like: resource/resourceName/subresource/other/stuff/we/don't/interpret + if (requestInfo.parts.length >= 3 && !specialVerbs.contains( + requestInfo.verb)) { + requestInfo.subresource = requestInfo.parts[2]; + // if there is another step after the subresource name and it is not a known + if (requestInfo.parts.length >= 4) { + requestInfo.subName = requestInfo.parts[3]; + } + } + + if (requestInfo.parts.length >= 2) { + requestInfo.name = requestInfo.parts[1]; + } + + if (requestInfo.parts.length >= 1) { + requestInfo.resource = requestInfo.parts[0]; + } + + // has name and no subresource but verb=create, then this is a non-resource request + if (StringUtils.isNotBlank(requestInfo.name) && StringUtils.isBlank(requestInfo.subresource) + && "create".equals(requestInfo.verb)) { + requestInfo.isResourceRequest = false; + } + + // if there's no name on the request and we thought it was a get before, then the actual + // verb is a list or a watch + if (requestInfo.name.isEmpty() && "get".equals(requestInfo.verb)) { + var watch = request.getQueryParams().getFirst("watch"); + if (Boolean.parseBoolean(watch)) { + requestInfo.verb = "watch"; + } else { + requestInfo.verb = "list"; + } + } + // if there's no name on the request and we thought it was a deleted before, then the + // actual verb is deletecollection + if (Objects.equals(requestInfo.verb, "delete")) { + var deleteAll = request.getQueryParams().getFirst("all"); + if (Boolean.parseBoolean(deleteAll)) { + requestInfo.verb = "deletecollection"; + } + } + if ("list".equals(requestInfo.verb) + && WebSocketUtils.isWebSocketUpgrade(request.getHeaders())) { + requestInfo.verb = "watch"; + } + return requestInfo; + } + + private String[] splitPath(String path) { + path = StringUtils.strip(path, "/"); + if (StringUtils.isEmpty(path)) { + return new String[] {}; + } + return StringUtils.split(path, "/"); + } +} diff --git a/application/src/main/java/run/halo/app/security/authorization/RuleAccumulator.java b/application/src/main/java/run/halo/app/security/authorization/RuleAccumulator.java new file mode 100644 index 0000000..1e7efc3 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/authorization/RuleAccumulator.java @@ -0,0 +1,11 @@ +package run.halo.app.security.authorization; + +import run.halo.app.core.extension.Role; + +/** + * @author guqing + * @since 2.0.0 + */ +public interface RuleAccumulator { + boolean visit(String source, Role.PolicyRule rule, Throwable err); +} diff --git a/application/src/main/java/run/halo/app/security/device/DeviceCookieResolver.java b/application/src/main/java/run/halo/app/security/device/DeviceCookieResolver.java new file mode 100644 index 0000000..c4a6ac8 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/device/DeviceCookieResolver.java @@ -0,0 +1,19 @@ +package run.halo.app.security.device; + +import java.time.Duration; +import org.springframework.http.HttpCookie; +import org.springframework.lang.Nullable; +import org.springframework.web.server.ServerWebExchange; + +public interface DeviceCookieResolver { + @Nullable + HttpCookie resolveCookie(ServerWebExchange exchange); + + void setCookie(ServerWebExchange exchange, String value); + + void expireCookie(ServerWebExchange exchange); + + String getCookieName(); + + Duration getCookieMaxAge(); +} diff --git a/application/src/main/java/run/halo/app/security/device/DeviceCookieResolverImpl.java b/application/src/main/java/run/halo/app/security/device/DeviceCookieResolverImpl.java new file mode 100644 index 0000000..bd8590a --- /dev/null +++ b/application/src/main/java/run/halo/app/security/device/DeviceCookieResolverImpl.java @@ -0,0 +1,47 @@ +package run.halo.app.security.device; + +import java.time.Duration; +import lombok.Getter; +import org.springframework.http.HttpCookie; +import org.springframework.http.ResponseCookie; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerWebExchange; + +@Getter +@Component +public class DeviceCookieResolverImpl implements DeviceCookieResolver { + public static final String DEVICE_COOKIE_KEY = "device_id"; + + private final String cookieName = DEVICE_COOKIE_KEY; + + private final Duration cookieMaxAge = Duration.ofDays(100); + + @Override + public HttpCookie resolveCookie(ServerWebExchange exchange) { + return exchange.getRequest().getCookies().getFirst(getCookieName()); + } + + @Override + public void setCookie(ServerWebExchange exchange, String value) { + Assert.notNull(value, "'value' is required"); + exchange.getResponse().getCookies() + .set(getCookieName(), initCookie(exchange, value).build()); + } + + @Override + public void expireCookie(ServerWebExchange exchange) { + ResponseCookie cookie = initCookie(exchange, "").maxAge(0).build(); + exchange.getResponse().getCookies().set(this.cookieName, cookie); + } + + private ResponseCookie.ResponseCookieBuilder initCookie(ServerWebExchange exchange, + String value) { + return ResponseCookie.from(this.cookieName, value) + .path(exchange.getRequest().getPath().contextPath().value() + "/") + .maxAge(getCookieMaxAge()) + .httpOnly(true) + .secure("https".equalsIgnoreCase(exchange.getRequest().getURI().getScheme())) + .sameSite("Lax"); + } +} diff --git a/application/src/main/java/run/halo/app/security/device/DeviceEndpoint.java b/application/src/main/java/run/halo/app/security/device/DeviceEndpoint.java new file mode 100644 index 0000000..c4373a2 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/device/DeviceEndpoint.java @@ -0,0 +1,163 @@ +package run.halo.app.security.device; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import java.security.Principal; +import java.util.Comparator; +import java.util.Map; +import lombok.Builder; +import lombok.Data; +import lombok.RequiredArgsConstructor; +import lombok.experimental.Accessors; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.data.domain.Sort; +import org.springframework.http.HttpStatus; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.session.ReactiveFindByIndexNameSessionRepository; +import org.springframework.session.Session; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Device; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; + +/** + * Device endpoint for user profile,every user can only manage their own devices. + * + * @author guqing + * @since 2.17.0 + */ +@Component +@RequiredArgsConstructor +public class DeviceEndpoint implements CustomEndpoint { + private final ReactiveExtensionClient client; + private final ReactiveFindByIndexNameSessionRepository sessionRepository; + private final DeviceService deviceService; + + @Override + public RouterFunction endpoint() { + final var tag = "DeviceV1alpha1Uc"; + return SpringdocRouteBuilder.route() + .GET("devices", this::listDevices, + builder -> builder.operationId("ListDevices") + .description("List all user devices") + .tag(tag) + .response(responseBuilder().implementationArray(DeviceDto.class)) + ) + .DELETE("devices/{deviceId}", this::revokeDevice, builder -> builder + .operationId("RevokeDevice") + .description("Revoke a own device") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("deviceId") + .description("Device ID") + .required(true) + ) + .response(responseBuilder() + .responseCode(String.valueOf(HttpStatus.NO_CONTENT)) + ) + ) + .build(); + } + + private Mono revokeDevice(ServerRequest request) { + final var deviceId = request.pathVariable("deviceId"); + return principalName() + .flatMap(principalName -> deviceService.revoke(principalName, deviceId)) + .then(ServerResponse.noContent().build()); + } + + private Mono listDevices(ServerRequest request) { + return getRequestContext(request) + .flatMapMany(context -> { + var listOptions = new ListOptions(); + var query = equal("spec.principalName", context.username()); + listOptions.setFieldSelector(FieldSelector.of(query)); + return client.listAll(Device.class, listOptions, + Sort.by("metadata.creationTimestamp")) + .map(device -> { + var sessionId = device.getSpec().getSessionId(); + var session = context.sessionMap().get(sessionId); + if (session != null) { + device.getSpec().setLastAccessedTime(session.getLastAccessedTime()); + } + return new DeviceDto() + .setDevice(device) + .setCurrentDevice(context.sessionId().equals(sessionId)) + .setActive(session != null && !session.isExpired()); + }) + .sort(deviceDtoComparator()); + }) + .collectList() + .flatMap(deviceDto -> ServerResponse.ok().bodyValue(deviceDto)); + } + + Comparator deviceDtoComparator() { + return Comparator.comparing(DeviceDto::isCurrentDevice) + .thenComparing(DeviceDto::isActive) + .thenComparing(DeviceDto::getDevice, Comparator.comparing(device -> { + var accessedTime = device.getSpec().getLastAccessedTime(); + return accessedTime == null ? device.getMetadata().getCreationTimestamp() + : accessedTime; + })) + .reversed(); + } + + private Mono getRequestContext(ServerRequest request) { + return principalName() + .flatMap(principalName -> { + var builder = RequestContext.builder() + .sessionMap(Map.of()) + .username(principalName); + var sessionMapMono = sessionRepository.findByPrincipalName(principalName) + .doOnNext(builder::sessionMap); + var sessionMono = request.exchange().getSession() + .doOnNext(session -> builder.sessionId(session.getId())); + return Mono.when(sessionMapMono, sessionMono) + .then(Mono.fromSupplier(builder::build)); + }); + } + + @Builder + record RequestContext(String username, String sessionId, + Map sessionMap) { + } + + Mono principalName() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Principal::getName); + } + + @Data + @Accessors(chain = true) + @Schema(name = "UserDevice") + static class DeviceDto { + @Schema(requiredMode = REQUIRED) + private Device device; + + @Schema(requiredMode = REQUIRED) + boolean currentDevice; + + @Schema(requiredMode = REQUIRED) + boolean active; + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("uc.api.security.halo.run/v1alpha1"); + } +} diff --git a/application/src/main/java/run/halo/app/security/device/DeviceReconciler.java b/application/src/main/java/run/halo/app/security/device/DeviceReconciler.java new file mode 100644 index 0000000..a8aefde --- /dev/null +++ b/application/src/main/java/run/halo/app/security/device/DeviceReconciler.java @@ -0,0 +1,72 @@ +package run.halo.app.security.device; + +import static run.halo.app.extension.ExtensionUtil.addFinalizers; +import static run.halo.app.extension.ExtensionUtil.isDeleted; +import static run.halo.app.extension.ExtensionUtil.removeFinalizers; +import static run.halo.app.extension.index.query.QueryFactory.equal; + +import java.util.Set; +import lombok.RequiredArgsConstructor; +import org.springframework.data.domain.Sort; +import org.springframework.session.ReactiveSessionRepository; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.Device; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.extension.router.selector.FieldSelector; + +@Component +@RequiredArgsConstructor +public class DeviceReconciler implements Reconciler { + private static final int MAX_DEVICES = 10; + static final String FINALIZER_NAME = "device-protection"; + private final ReactiveSessionRepository sessionRepository; + private final ExtensionClient client; + + @Override + public Result reconcile(Request request) { + client.fetch(Device.class, request.name()) + .ifPresent(device -> { + if (isDeleted(device)) { + if (removeFinalizers(device.getMetadata(), Set.of(FINALIZER_NAME))) { + sessionRepository.deleteById(device.getSpec().getSessionId()) + .block(); + client.update(device); + } + return; + } + if (addFinalizers(device.getMetadata(), Set.of(FINALIZER_NAME))) { + client.update(device); + } + revokeInactiveDevices(device.getSpec().getPrincipalName()); + }); + return Result.doNotRetry(); + } + + private void revokeInactiveDevices(String principalName) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + equal("spec.principalName", principalName)) + ); + client.listAll(Device.class, listOptions, + Sort.by("metadata.creationTimestamp").descending()) + .stream() + .skip(MAX_DEVICES) + .filter(device -> sessionRepository.findById(device.getSpec().getSessionId()) + .blockOptional() + .isEmpty() + ) + .forEach(client::delete); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new Device()) + .syncAllOnStart(false) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/security/device/DeviceServiceImpl.java b/application/src/main/java/run/halo/app/security/device/DeviceServiceImpl.java new file mode 100644 index 0000000..001265a --- /dev/null +++ b/application/src/main/java/run/halo/app/security/device/DeviceServiceImpl.java @@ -0,0 +1,255 @@ +package run.halo.app.security.device; + +import static run.halo.app.infra.utils.IpAddressUtils.getClientIp; +import static run.halo.app.security.authentication.rememberme.PersistentTokenBasedRememberMeServices.REMEMBER_ME_SERIES_REQUEST_NAME; + +import java.time.Duration; +import java.time.Instant; +import java.util.UUID; +import java.util.function.Function; +import java.util.regex.Matcher; +import java.util.regex.Pattern; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.ApplicationEventPublisher; +import org.springframework.dao.OptimisticLockingFailureException; +import org.springframework.http.HttpHeaders; +import org.springframework.security.core.Authentication; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.session.ReactiveSessionRepository; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import reactor.util.retry.Retry; +import run.halo.app.core.extension.Device; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.security.authentication.rememberme.PersistentRememberMeTokenRepository; + +@Slf4j +@Component +@RequiredArgsConstructor +public class DeviceServiceImpl implements DeviceService { + private final ReactiveExtensionClient client; + private final DeviceCookieResolver deviceCookieResolver; + private final ReactiveSessionRepository sessionRepository; + private final ApplicationEventPublisher eventPublisher; + private final PersistentRememberMeTokenRepository rememberMeTokenRepository; + + @Override + public Mono loginSuccess(ServerWebExchange exchange, Authentication authentication) { + return updateExistingDevice(exchange, authentication) + .switchIfEmpty(createDevice(exchange, authentication) + .flatMap(client::create) + .doOnNext(device -> { + deviceCookieResolver.setCookie(exchange, device.getMetadata().getName()); + eventPublisher.publishEvent(new NewDeviceLoginEvent(this, device)); + }) + ) + .then(); + } + + @Override + public Mono changeSessionId(ServerWebExchange exchange) { + var deviceIdCookie = deviceCookieResolver.resolveCookie(exchange); + if (deviceIdCookie == null) { + return Mono.empty(); + } + return ReactiveSecurityContextHolder.getContext() + .map(context -> context.getAuthentication().getName()) + .flatMap(username -> { + var deviceId = deviceIdCookie.getValue(); + return updateWithRetry(deviceId, username, device -> { + var oldSessionId = device.getSpec().getSessionId(); + return exchange.getSession() + .filter(session -> !session.getId().equals(oldSessionId)) + .flatMap(session -> { + device.getSpec().setSessionId(session.getId()); + device.getSpec().setLastAccessedTime(session.getLastAccessTime()); + return sessionRepository.deleteById(oldSessionId); + }) + .thenReturn(device); + }).then(); + }); + } + + private Mono updateWithRetry(String deviceId, String username, + Function> updateFunction) { + return Mono.defer(() -> client.fetch(Device.class, deviceId) + .filter(device -> device.getSpec().getPrincipalName().equals(username)) + .flatMap(updateFunction) + .flatMap(client::update) + ) + .retryWhen(Retry.backoff(8, Duration.ofMillis(100)) + .filter(OptimisticLockingFailureException.class::isInstance)); + } + + private Mono updateExistingDevice(ServerWebExchange exchange, + Authentication authentication) { + var deviceIdCookie = deviceCookieResolver.resolveCookie(exchange); + if (deviceIdCookie == null) { + return Mono.empty(); + } + var principalName = authentication.getName(); + return updateWithRetry(deviceIdCookie.getValue(), principalName, + (Device existingDevice) -> { + var sessionId = existingDevice.getSpec().getSessionId(); + return exchange.getSession() + .flatMap(session -> { + var userAgent = + exchange.getRequest().getHeaders().getFirst(HttpHeaders.USER_AGENT); + var deviceUa = existingDevice.getSpec().getUserAgent(); + if (!StringUtils.equals(deviceUa, userAgent)) { + // User agent changed, create a new device + return Mono.empty(); + } + return Mono.just(session); + }) + .flatMap(session -> { + if (session.getId().equals(sessionId)) { + return Mono.just(session); + } + return sessionRepository.deleteById(sessionId).thenReturn(session); + }) + .map(session -> { + existingDevice.getSpec().setSessionId(session.getId()); + existingDevice.getSpec().setLastAccessedTime(session.getLastAccessTime()); + existingDevice.getSpec().setLastAuthenticatedTime(Instant.now()); + return existingDevice; + }) + .flatMap(this::removeRememberMeToken); + }); + } + + @Override + public Mono revoke(String principalName, String deviceId) { + return client.fetch(Device.class, deviceId) + .filter(device -> device.getSpec().getPrincipalName().equals(principalName)) + .flatMap(this::removeRememberMeToken) + .flatMap(client::delete) + .flatMap(revoked -> sessionRepository.deleteById(revoked.getSpec().getSessionId())); + } + + private Mono removeRememberMeToken(Device device) { + var seriesId = device.getSpec().getRememberMeSeriesId(); + if (StringUtils.isBlank(seriesId)) { + return Mono.just(device); + } + log.debug("Removing remember-me token for seriesId: {}", seriesId); + return rememberMeTokenRepository.removeToken(seriesId) + .thenReturn(device); + } + + Mono createDevice(ServerWebExchange exchange, Authentication authentication) { + Assert.notNull(authentication, "Authentication must not be null."); + return Mono.fromSupplier( + () -> { + var device = new Device(); + device.setMetadata(new Metadata()); + device.getMetadata().setName(generateDeviceId()); + + var userAgent = + exchange.getRequest().getHeaders().getFirst(HttpHeaders.USER_AGENT); + var deviceInfo = DeviceInfo.parse(userAgent); + device.setSpec(new Device.Spec() + .setUserAgent(userAgent) + .setPrincipalName(authentication.getName()) + .setLastAuthenticatedTime(Instant.now()) + .setIpAddress(getClientIp(exchange.getRequest())) + .setRememberMeSeriesId( + exchange.getAttribute(REMEMBER_ME_SERIES_REQUEST_NAME)) + ); + device.getStatus() + .setOs(deviceInfo.os()) + .setBrowser(deviceInfo.browser()); + return device; + }) + .flatMap(device -> exchange.getSession() + .doOnNext(session -> { + device.getSpec().setSessionId(session.getId()); + device.getSpec().setLastAccessedTime(session.getLastAccessTime()); + }) + .thenReturn(device) + ); + } + + String generateDeviceId() { + return UUID.randomUUID().toString() + .replace("-", "").toLowerCase(); + } + + record DeviceInfo(String browser, String os) { + static final String UNKNOWN = "Unknown"; + static final Pattern BROWSER_REGEX = + Pattern.compile("(MSIE|Trident|Edge|Edg|OPR|Opera|Chrome|Safari|Firefox" + + "|FxiOS|SamsungBrowser|UCBrowser|UCWEB|CriOS|Silk|Raven\\|Raven\\|)", + Pattern.CASE_INSENSITIVE); + static final Pattern BROWSER_VERSION_REGEX = + Pattern.compile("(?:version/|chrome/|firefox/|safari/|msie " + + "|rv:|opr/|edg/|ucbrowser/|samsungbrowser/|crios/|silk/)(\\d+\\.\\d+)", + Pattern.CASE_INSENSITIVE); + + static final Pattern OS_REGEX = + Pattern.compile("(Windows NT|Mac OS X|Android|Linux|iPhone|iPad|Windows Phone)"); + static final Pattern[] osRegexes = { + Pattern.compile("Windows NT (\\d+\\.\\d+)"), + Pattern.compile("Mac OS X (\\d+[\\._]\\d+([\\._]\\d+)?)"), + Pattern.compile("iPhone OS (\\d+_\\d+(_\\d+)?)"), + Pattern.compile("Android (\\d+\\.\\d+(\\.\\d+)?)") + }; + + public static DeviceInfo parse(String userAgent) { + return new DeviceInfo(concat(parseBrowser(userAgent).name(), + parseBrowser(userAgent).version()), + concat(parseOperatingSystem(userAgent).name(), + parseOperatingSystem(userAgent).version()) + ); + } + + private static Pair parseBrowser(String userAgent) { + Matcher matcher = BROWSER_REGEX.matcher(userAgent); + if (matcher.find()) { + String browserName = matcher.group(1); + matcher = BROWSER_VERSION_REGEX.matcher(userAgent); + + if (matcher.find()) { + String browserVersion = matcher.group(1); + return new Pair(browserName, browserVersion); + } else { + return new Pair(browserName, null); + } + } else { + return new Pair(UNKNOWN, null); + } + } + + record Pair(String name, String version) { + } + + private static Pair parseOperatingSystem(String userAgent) { + Matcher matcher = OS_REGEX.matcher(userAgent); + var osName = UNKNOWN; + if (matcher.find()) { + osName = matcher.group(1); + } + var osVersion = parseOsVersion(userAgent); + return new Pair(osName, osVersion); + } + + private static String parseOsVersion(String userAgent) { + for (Pattern pattern : osRegexes) { + Matcher matcher = pattern.matcher(userAgent); + if (matcher.find()) { + return matcher.group(1).replace("_", "."); + } + } + return ""; + } + + private static String concat(String name, String version) { + return StringUtils.isBlank(version) ? name : name + " " + version; + } + } +} diff --git a/application/src/main/java/run/halo/app/security/device/DeviceSessionFilter.java b/application/src/main/java/run/halo/app/security/device/DeviceSessionFilter.java new file mode 100644 index 0000000..ff1975d --- /dev/null +++ b/application/src/main/java/run/halo/app/security/device/DeviceSessionFilter.java @@ -0,0 +1,23 @@ +package run.halo.app.security.device; + +import lombok.RequiredArgsConstructor; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.WebFilter; +import org.springframework.web.server.WebFilterChain; +import reactor.core.publisher.Mono; + +@Component +@RequiredArgsConstructor +public class DeviceSessionFilter implements WebFilter { + private final DeviceService deviceService; + + @Override + @NonNull + public Mono filter(@NonNull ServerWebExchange exchange, @NonNull WebFilterChain chain) { + return exchange.getSession() + .flatMap(session -> deviceService.changeSessionId(exchange)) + .then(chain.filter(exchange)); + } +} diff --git a/application/src/main/java/run/halo/app/security/device/NewDeviceLoginEvent.java b/application/src/main/java/run/halo/app/security/device/NewDeviceLoginEvent.java new file mode 100644 index 0000000..e87b3a9 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/device/NewDeviceLoginEvent.java @@ -0,0 +1,15 @@ +package run.halo.app.security.device; + +import lombok.Getter; +import org.springframework.context.ApplicationEvent; +import run.halo.app.core.extension.Device; + +@Getter +public class NewDeviceLoginEvent extends ApplicationEvent { + private final Device device; + + public NewDeviceLoginEvent(Object source, Device device) { + super(source); + this.device = device; + } +} diff --git a/application/src/main/java/run/halo/app/security/device/NewDeviceLoginListener.java b/application/src/main/java/run/halo/app/security/device/NewDeviceLoginListener.java new file mode 100644 index 0000000..1a9c23f --- /dev/null +++ b/application/src/main/java/run/halo/app/security/device/NewDeviceLoginListener.java @@ -0,0 +1,74 @@ +package run.halo.app.security.device; + +import java.time.ZoneOffset; +import java.time.format.DateTimeFormatter; +import lombok.RequiredArgsConstructor; +import org.springframework.context.ApplicationListener; +import org.springframework.lang.NonNull; +import org.springframework.scheduling.annotation.Async; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Device; +import run.halo.app.core.extension.notification.Reason; +import run.halo.app.core.extension.notification.Subscription; +import run.halo.app.notification.NotificationCenter; +import run.halo.app.notification.NotificationReasonEmitter; +import run.halo.app.notification.ReasonAttributes; +import run.halo.app.notification.UserIdentity; + +/** + *

Sends a notification when a new device login,It listens for {@link NewDeviceLoginEvent} + * asynchronously.

+ * + * @author guqing + * @since 2.17.0 + */ +@Component +@RequiredArgsConstructor +public class NewDeviceLoginListener implements ApplicationListener { + static final String REASON_TYPE = "new-device-login"; + private static final DateTimeFormatter DATE_TIME_FORMATTER = + DateTimeFormatter.ofPattern("yyyy-MM-dd HH:mm:ss O").withZone(ZoneOffset.systemDefault()); + private final NotificationCenter notificationCenter; + private final NotificationReasonEmitter notificationReasonEmitter; + + @Async + @Override + public void onApplicationEvent(@NonNull NewDeviceLoginEvent event) { + subscribeForNewDeviceLoginReason(event.getDevice()) + .then(sendNewDeviceNotification(event.getDevice())) + .block(); + } + + Mono sendNewDeviceNotification(Device device) { + return notificationReasonEmitter.emit(REASON_TYPE, builder -> { + var attributes = new ReasonAttributes(); + attributes.put("principalName", device.getSpec().getPrincipalName()); + attributes.put("os", device.getStatus().getOs()); + attributes.put("browser", device.getStatus().getBrowser()); + attributes.put("ipAddress", device.getSpec().getIpAddress()); + attributes.put("loginTime", + DATE_TIME_FORMATTER.format(device.getSpec().getLastAuthenticatedTime())); + builder.attributes(attributes) + .author(UserIdentity.of(device.getSpec().getPrincipalName())) + .subject(Reason.Subject.builder() + .apiVersion(Device.GROUP + "/" + Device.VERSION) + .kind(Device.KIND) + .name(device.getMetadata().getName()) + .title("在新设备上登录") + .build()); + }); + } + + Mono subscribeForNewDeviceLoginReason(Device device) { + var principalName = device.getSpec().getPrincipalName(); + var subscriber = new Subscription.Subscriber(); + subscriber.setName(principalName); + + var reason = new Subscription.InterestReason(); + reason.setReasonType(REASON_TYPE); + reason.setExpression("props.principalName == '%s'".formatted(principalName)); + return notificationCenter.subscribe(subscriber, reason) + .then(); + } +} diff --git a/application/src/main/java/run/halo/app/security/jackson2/HaloSecurityJackson2Module.java b/application/src/main/java/run/halo/app/security/jackson2/HaloSecurityJackson2Module.java new file mode 100644 index 0000000..ff3687f --- /dev/null +++ b/application/src/main/java/run/halo/app/security/jackson2/HaloSecurityJackson2Module.java @@ -0,0 +1,28 @@ +package run.halo.app.security.jackson2; + +import com.fasterxml.jackson.core.Version; +import com.fasterxml.jackson.databind.module.SimpleModule; +import org.springframework.security.jackson2.SecurityJackson2Modules; +import run.halo.app.security.authentication.login.HaloUser; +import run.halo.app.security.authentication.twofactor.TwoFactorAuthentication; + +/** + * Halo security Jackson2 module. + * + * @author johnniang + */ +public class HaloSecurityJackson2Module extends SimpleModule { + + public HaloSecurityJackson2Module() { + super(HaloSecurityJackson2Module.class.getName(), new Version(1, 0, 0, null, null, null)); + } + + @Override + public void setupModule(SetupContext context) { + SecurityJackson2Modules.enableDefaultTyping(context.getOwner()); + context.setMixInAnnotations(HaloUser.class, HaloUserMixin.class); + context.setMixInAnnotations(TwoFactorAuthentication.class, + TwoFactorAuthenticationMixin.class); + } + +} diff --git a/application/src/main/java/run/halo/app/security/jackson2/HaloUserMixin.java b/application/src/main/java/run/halo/app/security/jackson2/HaloUserMixin.java new file mode 100644 index 0000000..8f84ed2 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/jackson2/HaloUserMixin.java @@ -0,0 +1,20 @@ +package run.halo.app.security.jackson2; + +import com.fasterxml.jackson.annotation.JsonAutoDetect; +import com.fasterxml.jackson.annotation.JsonIgnoreProperties; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonTypeInfo; +import org.springframework.security.core.userdetails.UserDetails; + +@JsonTypeInfo(use = JsonTypeInfo.Id.CLASS) +@JsonAutoDetect(fieldVisibility = JsonAutoDetect.Visibility.ANY, getterVisibility = + JsonAutoDetect.Visibility.NONE, isGetterVisibility = JsonAutoDetect.Visibility.NONE) +@JsonIgnoreProperties(ignoreUnknown = true) +abstract class HaloUserMixin { + + HaloUserMixin(@JsonProperty("delegate") UserDetails delegate, + @JsonProperty("twoFactorAuthEnabled") boolean twoFactorAuthEnabled, + @JsonProperty("totpEncryptedSecret") String totpEncryptedSecret) { + } + +} diff --git a/application/src/main/java/run/halo/app/security/jackson2/TwoFactorAuthenticationMixin.java b/application/src/main/java/run/halo/app/security/jackson2/TwoFactorAuthenticationMixin.java new file mode 100644 index 0000000..71c1f73 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/jackson2/TwoFactorAuthenticationMixin.java @@ -0,0 +1,25 @@ +package run.halo.app.security.jackson2; + +import com.fasterxml.jackson.annotation.JsonAutoDetect; +import com.fasterxml.jackson.annotation.JsonCreator; +import com.fasterxml.jackson.annotation.JsonIgnoreProperties; +import com.fasterxml.jackson.annotation.JsonProperty; +import com.fasterxml.jackson.annotation.JsonTypeInfo; +import org.springframework.security.core.Authentication; + +/** + * This mixin class is used to serialize/deserialize TwoFactorAuthentication. + * + * @author johnniang + */ +@JsonTypeInfo(use = JsonTypeInfo.Id.CLASS) +@JsonAutoDetect(fieldVisibility = JsonAutoDetect.Visibility.ANY, + getterVisibility = JsonAutoDetect.Visibility.NONE, + isGetterVisibility = JsonAutoDetect.Visibility.NONE) +@JsonIgnoreProperties(ignoreUnknown = true) +abstract class TwoFactorAuthenticationMixin { + + @JsonCreator + TwoFactorAuthenticationMixin(@JsonProperty("previous") Authentication previous) { + } +} diff --git a/application/src/main/java/run/halo/app/security/session/InMemoryReactiveIndexedSessionRepository.java b/application/src/main/java/run/halo/app/security/session/InMemoryReactiveIndexedSessionRepository.java new file mode 100644 index 0000000..8939d5e --- /dev/null +++ b/application/src/main/java/run/halo/app/security/session/InMemoryReactiveIndexedSessionRepository.java @@ -0,0 +1,144 @@ +package run.halo.app.security.session; + +import com.google.common.cache.Cache; +import com.google.common.cache.CacheBuilder; +import java.time.Duration; +import java.util.Map; +import java.util.Set; +import java.util.concurrent.ConcurrentHashMap; +import java.util.concurrent.ConcurrentMap; +import org.springframework.beans.factory.DisposableBean; +import org.springframework.session.DelegatingIndexResolver; +import org.springframework.session.IndexResolver; +import org.springframework.session.MapSession; +import org.springframework.session.PrincipalNameIndexResolver; +import org.springframework.session.ReactiveMapSessionRepository; +import org.springframework.session.Session; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +public class InMemoryReactiveIndexedSessionRepository extends ReactiveMapSessionRepository + implements ReactiveIndexedSessionRepository, DisposableBean { + + final IndexResolver indexResolver = + new DelegatingIndexResolver<>(new PrincipalNameIndexResolver<>(PRINCIPAL_NAME_INDEX_NAME)); + + private final ConcurrentMap> sessionIdIndexMap = + new ConcurrentHashMap<>(); + private final ConcurrentMap> indexSessionIdMap = + new ConcurrentHashMap<>(); + + /** + * Prevent other requests from being parsed and acquiring the session during its deletion, + * which could result in an unintended renewal. Currently, it acts as a buffer, and having a + * slightly prolonged expiration period is sufficient. + */ + private final Cache invalidateSessionIds = CacheBuilder.newBuilder() + .expireAfterWrite(Duration.ofMinutes(10)) + .maximumSize(10_000) + .build(); + + public InMemoryReactiveIndexedSessionRepository(Map sessions) { + super(sessions); + } + + @Override + public Mono save(MapSession session) { + if (invalidateSessionIds.getIfPresent(session.getId()) != null) { + return this.deleteById(session.getId()); + } + return super.save(session) + .then(updateIndex(session)); + } + + @Override + public Mono deleteById(String id) { + return removeIndex(id) + .then(Mono.defer(() -> { + invalidateSessionIds.put(id, true); + return super.deleteById(id); + })); + } + + @Override + public Mono> findByIndexNameAndIndexValue(String indexName, + String indexValue) { + var indexKey = new IndexKey(indexName, indexValue); + return Flux.fromStream((() -> indexSessionIdMap.getOrDefault(indexKey, Set.of()).stream())) + .flatMap(this::findById) + .collectMap(Session::getId); + } + + @Override + public Mono> findByPrincipalName(String principalName) { + return this.findByIndexNameAndIndexValue(PRINCIPAL_NAME_INDEX_NAME, principalName); + } + + @Override + public void destroy() { + sessionIdIndexMap.clear(); + indexSessionIdMap.clear(); + invalidateSessionIds.invalidateAll(); + } + + Mono removeIndex(String sessionId) { + return getIndexes(sessionId) + .doOnNext(indexKey -> indexSessionIdMap.computeIfPresent(indexKey, + (key, sessionIdSet) -> { + sessionIdSet.remove(sessionId); + return sessionIdSet.isEmpty() ? null : sessionIdSet; + }) + ) + .then(Mono.defer(() -> { + sessionIdIndexMap.remove(sessionId); + return Mono.empty(); + })) + .then(); + } + + Mono updateIndex(MapSession session) { + return removeIndex(session.getId()) + .then(Mono.defer(() -> { + if (!session.getId().equals(session.getOriginalId())) { + return removeIndex(session.getOriginalId()); + } + return Mono.empty(); + })) + .then(Mono.defer(() -> { + indexResolver.resolveIndexesFor(session) + .forEach((name, value) -> { + IndexKey indexKey = new IndexKey(name, value); + indexSessionIdMap.computeIfAbsent(indexKey, + unusedSet -> ConcurrentHashMap.newKeySet()) + .add(session.getId()); + // Update sessionIdIndexMap + sessionIdIndexMap.computeIfAbsent(session.getId(), + unusedSet -> ConcurrentHashMap.newKeySet()) + .add(indexKey); + }); + return Mono.empty(); + })) + .then(); + } + + Flux getIndexes(String sessionId) { + return Flux.fromIterable(sessionIdIndexMap.getOrDefault(sessionId, Set.of())); + } + + /** + * For testing purpose. + */ + ConcurrentMap> getSessionIdIndexMap() { + return sessionIdIndexMap; + } + + /** + * For testing purpose. + */ + ConcurrentMap> getIndexSessionIdMap() { + return indexSessionIdMap; + } + + record IndexKey(String attributeName, String attributeValue) { + } +} diff --git a/application/src/main/java/run/halo/app/security/session/ReactiveIndexedSessionRepository.java b/application/src/main/java/run/halo/app/security/session/ReactiveIndexedSessionRepository.java new file mode 100644 index 0000000..cc41a45 --- /dev/null +++ b/application/src/main/java/run/halo/app/security/session/ReactiveIndexedSessionRepository.java @@ -0,0 +1,9 @@ +package run.halo.app.security.session; + +import org.springframework.session.ReactiveFindByIndexNameSessionRepository; +import org.springframework.session.ReactiveSessionRepository; +import org.springframework.session.Session; + +public interface ReactiveIndexedSessionRepository + extends ReactiveSessionRepository, ReactiveFindByIndexNameSessionRepository { +} diff --git a/application/src/main/java/run/halo/app/security/session/SessionInvalidationListener.java b/application/src/main/java/run/halo/app/security/session/SessionInvalidationListener.java new file mode 100644 index 0000000..225feff --- /dev/null +++ b/application/src/main/java/run/halo/app/security/session/SessionInvalidationListener.java @@ -0,0 +1,38 @@ +package run.halo.app.security.session; + +import java.util.Map; +import lombok.RequiredArgsConstructor; +import org.springframework.context.event.EventListener; +import org.springframework.scheduling.annotation.Async; +import org.springframework.session.ReactiveFindByIndexNameSessionRepository; +import org.springframework.session.ReactiveSessionRepository; +import org.springframework.session.Session; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Flux; +import run.halo.app.event.user.PasswordChangedEvent; + +@Component +@RequiredArgsConstructor +public class SessionInvalidationListener { + + private final ReactiveFindByIndexNameSessionRepository + indexedSessionRepository; + private final ReactiveSessionRepository sessionRepository; + + @Async + @EventListener + public void onPasswordChanged(PasswordChangedEvent event) { + String username = event.getUsername(); + // Invalidate session + invalidateUserSessions(username); + } + + private void invalidateUserSessions(String username) { + indexedSessionRepository.findByPrincipalName(username) + .map(Map::keySet) + .flatMapMany(Flux::fromIterable) + .flatMap(sessionRepository::deleteById) + .then() + .block(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/DefaultTemplateEnum.java b/application/src/main/java/run/halo/app/theme/DefaultTemplateEnum.java new file mode 100644 index 0000000..9738d94 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/DefaultTemplateEnum.java @@ -0,0 +1,44 @@ +package run.halo.app.theme; + +/** + * @author guqing + * @since 2.0.0 + */ +public enum DefaultTemplateEnum { + INDEX("index"), + + CATEGORIES("categories"), + + CATEGORY("category"), + + ARCHIVES("archives"), + + POST("post"), + + TAG("tag"), + + TAGS("tags"), + + SINGLE_PAGE("page"), + + AUTHOR("author"); + + private final String value; + + DefaultTemplateEnum(String value) { + this.value = value; + } + + public String getValue() { + return value; + } + + public static DefaultTemplateEnum convertFrom(String template) { + for (DefaultTemplateEnum e : values()) { + if (e.getValue().equals(template)) { + return e; + } + } + return null; + } +} diff --git a/application/src/main/java/run/halo/app/theme/DefaultTemplateNameResolver.java b/application/src/main/java/run/halo/app/theme/DefaultTemplateNameResolver.java new file mode 100644 index 0000000..5ecd1a4 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/DefaultTemplateNameResolver.java @@ -0,0 +1,56 @@ +package run.halo.app.theme; + +import static run.halo.app.plugin.PluginConst.SYSTEM_PLUGIN_NAME; + +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.ApplicationContext; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.plugin.PluginApplicationContext; + +/** + * A default implementation of {@link TemplateNameResolver}, It will be provided for plugins to + * resolve template name. + * + * @author guqing + * @since 2.11.0 + */ +public class DefaultTemplateNameResolver implements TemplateNameResolver { + + private final ApplicationContext applicationContext; + private final ViewNameResolver viewNameResolver; + + public DefaultTemplateNameResolver(ViewNameResolver viewNameResolver, + ApplicationContext applicationContext) { + this.applicationContext = applicationContext; + this.viewNameResolver = viewNameResolver; + } + + @Override + public Mono resolveTemplateNameOrDefault(ServerWebExchange exchange, String name) { + if (applicationContext instanceof PluginApplicationContext pluginApplicationContext) { + var pluginName = pluginApplicationContext.getPluginId(); + return this.resolveTemplateNameOrDefault(exchange, name, + pluginClassPathTemplate(pluginName, name)); + } + return resolveTemplateNameOrDefault(exchange, name, + pluginClassPathTemplate(SYSTEM_PLUGIN_NAME, name)); + } + + @Override + public Mono resolveTemplateNameOrDefault(ServerWebExchange exchange, String name, + String defaultName) { + return viewNameResolver.resolveViewNameOrDefault(exchange, name, defaultName); + } + + @Override + public Mono isTemplateAvailableInTheme(ServerWebExchange exchange, String name) { + return this.resolveTemplateNameOrDefault(exchange, name, "") + .filter(StringUtils::isNotBlank) + .hasElement(); + } + + String pluginClassPathTemplate(String pluginName, String templateName) { + return "plugin:" + pluginName + ":" + templateName; + } +} diff --git a/application/src/main/java/run/halo/app/theme/DefaultViewNameResolver.java b/application/src/main/java/run/halo/app/theme/DefaultViewNameResolver.java new file mode 100644 index 0000000..9c6e56a --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/DefaultViewNameResolver.java @@ -0,0 +1,58 @@ +package run.halo.app.theme; + +import java.nio.file.Files; +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.boot.autoconfigure.thymeleaf.ThymeleafProperties; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +/** + * The {@link DefaultViewNameResolver} is used to resolve view name. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class DefaultViewNameResolver implements ViewNameResolver { + private static final String TEMPLATES = "templates"; + private final ThemeResolver themeResolver; + private final ThymeleafProperties thymeleafProperties; + + /** + * Resolves view name. + * If the {@param #name} cannot be resolved to the view, the {@param #defaultName} is returned. + */ + @Override + public Mono resolveViewNameOrDefault(ServerWebExchange exchange, String name, + String defaultName) { + if (StringUtils.isBlank(name)) { + return Mono.justOrEmpty(defaultName); + } + return themeResolver.getTheme(exchange) + .mapNotNull(themeContext -> { + String templateResourceName = computeResourceName(name); + var resourcePath = themeContext.getPath() + .resolve(TEMPLATES) + .resolve(templateResourceName); + return Files.exists(resourcePath) ? name : defaultName; + }) + .switchIfEmpty(Mono.justOrEmpty(defaultName)); + } + + @Override + public Mono resolveViewNameOrDefault(ServerRequest request, String name, + String defaultName) { + return resolveViewNameOrDefault(request.exchange(), name, defaultName); + } + + String computeResourceName(String name) { + Assert.notNull(name, "Name must not be null"); + return StringUtils.endsWith(name, thymeleafProperties.getSuffix()) + ? name : name + thymeleafProperties.getSuffix(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/HaloViewResolver.java b/application/src/main/java/run/halo/app/theme/HaloViewResolver.java new file mode 100644 index 0000000..4c0ce90 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/HaloViewResolver.java @@ -0,0 +1,104 @@ +package run.halo.app.theme; + +import java.util.HashMap; +import java.util.List; +import java.util.Locale; +import java.util.Map; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.context.ApplicationContext; +import org.springframework.http.MediaType; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.result.view.View; +import org.springframework.web.server.ServerWebExchange; +import org.thymeleaf.spring6.view.reactive.ThymeleafReactiveView; +import org.thymeleaf.spring6.view.reactive.ThymeleafReactiveViewResolver; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.theme.finders.FinderRegistry; +import run.halo.app.theme.router.ModelConst; + +@Component("thymeleafReactiveViewResolver") +public class HaloViewResolver extends ThymeleafReactiveViewResolver { + + private final FinderRegistry finderRegistry; + + public HaloViewResolver(FinderRegistry finderRegistry) { + setViewClass(HaloView.class); + this.finderRegistry = finderRegistry; + } + + @Override + protected Mono loadView(String viewName, Locale locale) { + return super.loadView(viewName, locale) + .cast(HaloView.class) + .map(view -> { + // populate finders to view static variables + finderRegistry.getFinders().forEach(view::addStaticVariable); + return view; + }); + } + + public static class HaloView extends ThymeleafReactiveView { + + @Autowired + private TemplateEngineManager engineManager; + + @Autowired + private ThemeResolver themeResolver; + + @Override + public Mono render(Map model, MediaType contentType, + ServerWebExchange exchange) { + return themeResolver.getTheme(exchange).flatMap(theme -> { + // calculate the engine before rendering + setTemplateEngine(engineManager.getTemplateEngine(theme)); + exchange.getAttributes().put(ModelConst.POWERED_BY_HALO_TEMPLATE_ENGINE, true); + return super.render(model, contentType, exchange); + }); + } + + @Override + @NonNull + protected Mono> getModelAttributes(Map model, + @NonNull ServerWebExchange exchange) { + Mono> contextBasedStaticVariables = + getContextBasedStaticVariables(exchange); + Mono> modelAttributes = super.getModelAttributes(model, exchange); + return Flux.merge(modelAttributes, contextBasedStaticVariables) + .collectList() + .map(modelMapList -> { + Map result = new HashMap<>(); + modelMapList.forEach(result::putAll); + return result; + }); + } + + @NonNull + private Mono> getContextBasedStaticVariables( + ServerWebExchange exchange) { + ApplicationContext applicationContext = obtainApplicationContext(); + + return Mono.just(new HashMap()) + .flatMap(staticVariables -> { + List>> monoList = applicationContext.getBeansOfType( + ViewContextBasedVariablesAcquirer.class) + .values() + .stream() + .map(acquirer -> acquirer.acquire(exchange)) + .toList(); + return Flux.merge(monoList) + .collectList() + .map(modelList -> { + Map mergedModel = new HashMap<>(); + modelList.forEach(mergedModel::putAll); + return mergedModel; + }) + .map(mergedModel -> { + staticVariables.putAll(mergedModel); + return staticVariables; + }); + }); + } + } +} diff --git a/application/src/main/java/run/halo/app/theme/ReactivePropertyAccessor.java b/application/src/main/java/run/halo/app/theme/ReactivePropertyAccessor.java new file mode 100644 index 0000000..db847d2 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/ReactivePropertyAccessor.java @@ -0,0 +1,118 @@ +package run.halo.app.theme; + +import java.util.List; +import org.springframework.expression.AccessException; +import org.springframework.expression.EvaluationContext; +import org.springframework.expression.PropertyAccessor; +import org.springframework.expression.TypedValue; +import org.springframework.expression.spel.ast.AstUtils; +import org.springframework.integration.json.JsonPropertyAccessor; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +/** + * A SpEL PropertyAccessor that knows how to read properties from {@link Mono} or {@link Flux} + * object. It first converts the target to the actual value and then calls other + * {@link PropertyAccessor}s to parse the result, If it still cannot be resolved, + * {@link JsonPropertyAccessor} will be used to resolve finally. + * + * @author guqing + * @since 2.0.0 + */ +public class ReactivePropertyAccessor implements PropertyAccessor { + + @Override + public Class[] getSpecificTargetClasses() { + return null; + } + + @Override + public boolean canRead(@NonNull EvaluationContext context, Object target, @NonNull String name) + throws AccessException { + if (isReactiveType(target)) { + return true; + } + var propertyAccessors = + getPropertyAccessorsToTry(target.getClass(), context.getPropertyAccessors()); + for (PropertyAccessor propertyAccessor : propertyAccessors) { + if (propertyAccessor.canRead(context, target, name)) { + return true; + } + } + return false; + } + + @Override + @NonNull + public TypedValue read(@NonNull EvaluationContext context, Object target, @NonNull String name) + throws AccessException { + if (target == null) { + return TypedValue.NULL; + } + Object value = blockingGetForReactive(target); + + List propertyAccessorsToTry = + getPropertyAccessorsToTry(value, context.getPropertyAccessors()); + for (PropertyAccessor propertyAccessor : propertyAccessorsToTry) { + try { + TypedValue result = propertyAccessor.read(context, value, name); + return new TypedValue(blockingGetForReactive(result.getValue())); + } catch (AccessException e) { + // ignore this + } + } + + throw new AccessException("Cannot read property '" + name + "' from [" + value + "]"); + } + + @Nullable + private static Object blockingGetForReactive(@Nullable Object target) { + if (target == null) { + return null; + } + Class clazz = target.getClass(); + Object value = target; + if (Mono.class.isAssignableFrom(clazz)) { + value = ((Mono) target).block(); + } else if (Flux.class.isAssignableFrom(clazz)) { + value = ((Flux) target).collectList().block(); + } + return value; + } + + private boolean isReactiveType(Object target) { + if (target == null) { + return true; + } + Class clazz = target.getClass(); + return Mono.class.isAssignableFrom(clazz) + || Flux.class.isAssignableFrom(clazz); + } + + private List getPropertyAccessorsToTry( + @Nullable Object contextObject, List propertyAccessors) { + + Class targetType = (contextObject != null ? contextObject.getClass() : null); + + List resolvers = + AstUtils.getPropertyAccessorsToTry(targetType, propertyAccessors); + // remove this resolver to avoid infinite loop + resolvers.remove(this); + return resolvers; + } + + @Override + public boolean canWrite(@NonNull EvaluationContext context, Object target, @NonNull String name) + throws AccessException { + return false; + } + + @Override + public void write(@NonNull EvaluationContext context, Object target, @NonNull String name, + Object newValue) + throws AccessException { + throw new UnsupportedOperationException("Write is not supported"); + } +} diff --git a/application/src/main/java/run/halo/app/theme/ReactiveSpelVariableExpressionEvaluator.java b/application/src/main/java/run/halo/app/theme/ReactiveSpelVariableExpressionEvaluator.java new file mode 100644 index 0000000..1794497 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/ReactiveSpelVariableExpressionEvaluator.java @@ -0,0 +1,44 @@ +package run.halo.app.theme; + +import org.thymeleaf.context.IExpressionContext; +import org.thymeleaf.spring6.expression.SPELVariableExpressionEvaluator; +import org.thymeleaf.standard.expression.IStandardVariableExpression; +import org.thymeleaf.standard.expression.IStandardVariableExpressionEvaluator; +import org.thymeleaf.standard.expression.StandardExpressionExecutionContext; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; + +/** + * Reactive SPEL variable expression evaluator. + * + * @author guqing + * @since 2.0.0 + */ +public class ReactiveSpelVariableExpressionEvaluator + implements IStandardVariableExpressionEvaluator { + + private final SPELVariableExpressionEvaluator delegate = + SPELVariableExpressionEvaluator.INSTANCE; + + public static final ReactiveSpelVariableExpressionEvaluator INSTANCE = + new ReactiveSpelVariableExpressionEvaluator(); + + @Override + public Object evaluate(IExpressionContext context, IStandardVariableExpression expression, + StandardExpressionExecutionContext expContext) { + Object returnValue = delegate.evaluate(context, expression, expContext); + if (returnValue == null) { + return null; + } + + Class clazz = returnValue.getClass(); + // Note that: 3 instanceof Foo -> syntax error + if (Mono.class.isAssignableFrom(clazz)) { + return ((Mono) returnValue).block(); + } + if (Flux.class.isAssignableFrom(clazz)) { + return ((Flux) returnValue).collectList().block(); + } + return returnValue; + } +} diff --git a/application/src/main/java/run/halo/app/theme/SiteSettingVariablesAcquirer.java b/application/src/main/java/run/halo/app/theme/SiteSettingVariablesAcquirer.java new file mode 100644 index 0000000..d5145ae --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/SiteSettingVariablesAcquirer.java @@ -0,0 +1,35 @@ +package run.halo.app.theme; + +import java.util.Map; +import lombok.AllArgsConstructor; +import org.springframework.stereotype.Component; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.theme.finders.vo.SiteSettingVo; + +/** + * Site setting variables acquirer. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class SiteSettingVariablesAcquirer implements ViewContextBasedVariablesAcquirer { + + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final ExternalUrlSupplier externalUrlSupplier; + + @Override + public Mono> acquire(ServerWebExchange exchange) { + return environmentFetcher.getConfigMap() + .filter(configMap -> configMap.getData() != null) + .map(configMap -> { + SiteSettingVo siteSettingVo = SiteSettingVo.from(configMap) + .withUrl(externalUrlSupplier.getURL(exchange.getRequest())); + return Map.of("site", siteSettingVo); + }); + } +} diff --git a/application/src/main/java/run/halo/app/theme/TemplateEngineManager.java b/application/src/main/java/run/halo/app/theme/TemplateEngineManager.java new file mode 100644 index 0000000..c8d4922 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/TemplateEngineManager.java @@ -0,0 +1,170 @@ +package run.halo.app.theme; + +import java.io.FileNotFoundException; +import java.nio.file.Path; +import lombok.NonNull; +import org.springframework.beans.factory.ObjectProvider; +import org.springframework.boot.autoconfigure.thymeleaf.ThymeleafProperties; +import org.springframework.stereotype.Component; +import org.springframework.util.ConcurrentLruCache; +import org.springframework.util.ResourceUtils; +import org.thymeleaf.TemplateEngine; +import org.thymeleaf.dialect.IDialect; +import org.thymeleaf.spring6.ISpringWebFluxTemplateEngine; +import org.thymeleaf.spring6.dialect.SpringStandardDialect; +import org.thymeleaf.standard.expression.IStandardVariableExpressionEvaluator; +import org.thymeleaf.templateresolver.FileTemplateResolver; +import org.thymeleaf.templateresolver.ITemplateResolver; +import reactor.core.publisher.Mono; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.plugin.HaloPluginManager; +import run.halo.app.theme.dialect.HaloProcessorDialect; +import run.halo.app.theme.engine.HaloTemplateEngine; +import run.halo.app.theme.engine.PluginClassloaderTemplateResolver; +import run.halo.app.theme.message.ThemeMessageResolver; + +/** + *

The {@link TemplateEngineManager} uses an {@link ConcurrentLruCache LRU cache} to manage + * theme's {@link ISpringWebFluxTemplateEngine}.

+ *

The default limit size of the {@link ConcurrentLruCache LRU cache} is + * {@link TemplateEngineManager#CACHE_SIZE_LIMIT} to prevent unnecessary memory occupation.

+ *

If theme's {@link ISpringWebFluxTemplateEngine} already exists, it returns.

+ *

Otherwise, it checks whether the theme exists and creates the + * {@link ISpringWebFluxTemplateEngine} into the LRU cache according to the {@link ThemeContext} + * .

+ *

It is thread safe.

+ * + * @author johnniang + * @author guqing + * @since 2.0.0 + */ +@Component +public class TemplateEngineManager { + private static final int CACHE_SIZE_LIMIT = 5; + private final ConcurrentLruCache engineCache; + + private final ThymeleafProperties thymeleafProperties; + + private final ExternalUrlSupplier externalUrlSupplier; + + private final HaloPluginManager haloPluginManager; + + private final ObjectProvider templateResolvers; + + private final ObjectProvider dialects; + + private final ThemeResolver themeResolver; + + public TemplateEngineManager(ThymeleafProperties thymeleafProperties, + ExternalUrlSupplier externalUrlSupplier, + HaloPluginManager haloPluginManager, ObjectProvider templateResolvers, + ObjectProvider dialects, ThemeResolver themeResolver) { + this.thymeleafProperties = thymeleafProperties; + this.externalUrlSupplier = externalUrlSupplier; + this.haloPluginManager = haloPluginManager; + this.templateResolvers = templateResolvers; + this.dialects = dialects; + this.themeResolver = themeResolver; + engineCache = new ConcurrentLruCache<>(CACHE_SIZE_LIMIT, this::templateEngineGenerator); + } + + public ISpringWebFluxTemplateEngine getTemplateEngine(ThemeContext theme) { + CacheKey cacheKey = buildCacheKey(theme); + // cache not exists, will create new engine + if (!engineCache.contains(cacheKey)) { + // before this, check if theme exists + if (!fileExists(theme.getPath())) { + throw new NotFoundException("Theme not found."); + } + } + return engineCache.get(cacheKey); + } + + private boolean fileExists(Path path) { + try { + return ResourceUtils.getFile(path.toUri()).exists(); + } catch (FileNotFoundException e) { + return false; + } + } + + public Mono clearCache(String themeName) { + return themeResolver.getThemeContext(themeName) + .doOnNext(themeContext -> { + CacheKey cacheKey = buildCacheKey(themeContext); + TemplateEngine templateEngine = + (TemplateEngine) engineCache.get(cacheKey); + templateEngine.clearTemplateCache(); + }) + .then(); + } + + /** + * TemplateEngine LRU cache key. + * + * @param name from {@link #context} + * @param active from {@link #context} + * @param context must not be null + */ + private record CacheKey(String name, boolean active, ThemeContext context) { + } + + CacheKey buildCacheKey(ThemeContext context) { + return new CacheKey(context.getName(), context.isActive(), context); + } + + private ISpringWebFluxTemplateEngine templateEngineGenerator(CacheKey cacheKey) { + + var engine = new HaloTemplateEngine(new ThemeMessageResolver(cacheKey.context())); + engine.setEnableSpringELCompiler(thymeleafProperties.isEnableSpringElCompiler()); + engine.setLinkBuilder(new ThemeLinkBuilder(cacheKey.context(), externalUrlSupplier)); + engine.setRenderHiddenMarkersBeforeCheckboxes( + thymeleafProperties.isRenderHiddenMarkersBeforeCheckboxes()); + + var mainResolver = haloTemplateResolver(); + mainResolver.setPrefix(cacheKey.context().getPath().resolve("templates") + "/"); + engine.addTemplateResolver(mainResolver); + var pluginTemplateResolver = createPluginClassloaderTemplateResolver(); + engine.addTemplateResolver(pluginTemplateResolver); + // replace StandardDialect with SpringStandardDialect + engine.setDialect(new SpringStandardDialect() { + @Override + public IStandardVariableExpressionEvaluator getVariableExpressionEvaluator() { + return ReactiveSpelVariableExpressionEvaluator.INSTANCE; + } + }); + engine.addDialect(new HaloProcessorDialect()); + + templateResolvers.orderedStream().forEach(engine::addTemplateResolver); + dialects.orderedStream().forEach(engine::addDialect); + + return engine; + } + + @NonNull + private PluginClassloaderTemplateResolver createPluginClassloaderTemplateResolver() { + var pluginTemplateResolver = new PluginClassloaderTemplateResolver(haloPluginManager); + pluginTemplateResolver.setPrefix(thymeleafProperties.getPrefix()); + pluginTemplateResolver.setSuffix(thymeleafProperties.getSuffix()); + pluginTemplateResolver.setTemplateMode(thymeleafProperties.getMode()); + pluginTemplateResolver.setOrder(1); + if (thymeleafProperties.getEncoding() != null) { + pluginTemplateResolver.setCharacterEncoding(thymeleafProperties.getEncoding().name()); + } + return pluginTemplateResolver; + } + + FileTemplateResolver haloTemplateResolver() { + final var resolver = new FileTemplateResolver(); + resolver.setTemplateMode(thymeleafProperties.getMode()); + resolver.setPrefix(thymeleafProperties.getPrefix()); + resolver.setSuffix(thymeleafProperties.getSuffix()); + resolver.setCacheable(thymeleafProperties.isCache()); + resolver.setCheckExistence(thymeleafProperties.isCheckTemplate()); + if (thymeleafProperties.getEncoding() != null) { + resolver.setCharacterEncoding(thymeleafProperties.getEncoding().name()); + } + return resolver; + } +} diff --git a/application/src/main/java/run/halo/app/theme/ThemeContext.java b/application/src/main/java/run/halo/app/theme/ThemeContext.java new file mode 100644 index 0000000..f931208 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/ThemeContext.java @@ -0,0 +1,24 @@ +package run.halo.app.theme; + +import java.nio.file.Path; +import lombok.Builder; +import lombok.Data; +import lombok.EqualsAndHashCode; + +/** + * @author guqing + * @since 2.0.0 + */ +@Data +@Builder +@EqualsAndHashCode(of = "name") +public class ThemeContext { + + public static final String THEME_PREVIEW_PARAM_NAME = "preview-theme"; + + private String name; + + private Path path; + + private boolean active; +} diff --git a/application/src/main/java/run/halo/app/theme/ThemeContextBasedVariablesAcquirer.java b/application/src/main/java/run/halo/app/theme/ThemeContextBasedVariablesAcquirer.java new file mode 100644 index 0000000..346f410 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/ThemeContextBasedVariablesAcquirer.java @@ -0,0 +1,36 @@ +package run.halo.app.theme; + +import java.util.Map; +import org.springframework.stereotype.Component; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.theme.finders.ThemeFinder; + +/** + * Theme context based variables acquirer. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class ThemeContextBasedVariablesAcquirer implements ViewContextBasedVariablesAcquirer { + private final ThemeFinder themeFinder; + private final ThemeResolver themeResolver; + + public ThemeContextBasedVariablesAcquirer(ThemeFinder themeFinder, + ThemeResolver themeResolver) { + this.themeFinder = themeFinder; + this.themeResolver = themeResolver; + } + + @Override + public Mono> acquire(ServerWebExchange exchange) { + return themeResolver.getTheme(exchange) + .flatMap(themeContext -> { + String name = themeContext.getName(); + return themeFinder.getByName(name); + }) + .map(themeVo -> Map.of("theme", themeVo)) + .defaultIfEmpty(Map.of()); + } +} diff --git a/application/src/main/java/run/halo/app/theme/ThemeLinkBuilder.java b/application/src/main/java/run/halo/app/theme/ThemeLinkBuilder.java new file mode 100644 index 0000000..29407dc --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/ThemeLinkBuilder.java @@ -0,0 +1,71 @@ +package run.halo.app.theme; + +import java.net.URI; +import java.net.URISyntaxException; +import org.apache.commons.lang3.StringUtils; +import org.springframework.lang.NonNull; +import org.springframework.web.util.UriComponentsBuilder; +import org.thymeleaf.context.IExpressionContext; +import org.thymeleaf.linkbuilder.StandardLinkBuilder; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.utils.PathUtils; + +/** + * @author guqing + * @since 2.0.0 + */ +public class ThemeLinkBuilder extends StandardLinkBuilder { + public static final String THEME_ASSETS_PREFIX = "/assets"; + public static final String THEME_PREVIEW_PREFIX = "/themes"; + + private final ThemeContext theme; + private final ExternalUrlSupplier externalUrlSupplier; + + public ThemeLinkBuilder(ThemeContext theme, ExternalUrlSupplier externalUrlSupplier) { + this.theme = theme; + this.externalUrlSupplier = externalUrlSupplier; + } + + @Override + protected String processLink(IExpressionContext context, String link) { + if (link == null || !linkInSite(externalUrlSupplier.get(), link)) { + return link; + } + + if (StringUtils.isBlank(link)) { + link = "/"; + } + + if (isAssetsRequest(link)) { + return PathUtils.combinePath(THEME_PREVIEW_PREFIX, theme.getName(), link); + } + + // not assets link + if (theme.isActive()) { + return link; + } + + return UriComponentsBuilder.fromUriString(link) + .queryParam(ThemeContext.THEME_PREVIEW_PARAM_NAME, theme.getName()) + .build().toString(); + } + + static boolean linkInSite(@NonNull URI externalUri, @NonNull String link) { + if (!PathUtils.isAbsoluteUri(link)) { + // relative uri is always in site + return true; + } + try { + URI requestUri = new URI(link); + return StringUtils.equals(externalUri.getAuthority(), requestUri.getAuthority()); + } catch (URISyntaxException e) { + // ignore this link + } + return false; + } + + private boolean isAssetsRequest(String link) { + String assetsPrefix = externalUrlSupplier.get().resolve(THEME_ASSETS_PREFIX).toString(); + return link.startsWith(assetsPrefix) || link.startsWith(THEME_ASSETS_PREFIX); + } +} diff --git a/application/src/main/java/run/halo/app/theme/ThemeLocaleContextResolver.java b/application/src/main/java/run/halo/app/theme/ThemeLocaleContextResolver.java new file mode 100644 index 0000000..cf82601 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/ThemeLocaleContextResolver.java @@ -0,0 +1,92 @@ +package run.halo.app.theme; + +import java.util.Locale; +import java.util.TimeZone; +import java.util.function.Function; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.i18n.LocaleContext; +import org.springframework.context.i18n.SimpleTimeZoneAwareLocaleContext; +import org.springframework.http.HttpCookie; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import org.springframework.stereotype.Component; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.adapter.WebHttpHandlerBuilder; +import org.springframework.web.server.i18n.AcceptHeaderLocaleContextResolver; + +/** + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Component(WebHttpHandlerBuilder.LOCALE_CONTEXT_RESOLVER_BEAN_NAME) +public class ThemeLocaleContextResolver extends AcceptHeaderLocaleContextResolver { + public static final String TIME_ZONE_REQUEST_ATTRIBUTE_NAME = + ThemeLocaleContextResolver.class.getName() + ".TIME_ZONE"; + public static final String LOCALE_REQUEST_ATTRIBUTE_NAME = + ThemeLocaleContextResolver.class.getName() + ".LOCALE"; + + public static final String DEFAULT_PARAMETER_NAME = "language"; + public static final String TIME_ZONE_COOKIE_NAME = "time_zone"; + + private final Function defaultTimeZoneFunction = + exchange -> getDefaultTimeZone(); + + @Override + @NonNull + public LocaleContext resolveLocaleContext(@NonNull ServerWebExchange exchange) { + parseLocaleCookieIfNecessary(exchange); + + Locale locale = getLocale(exchange); + + return new SimpleTimeZoneAwareLocaleContext(locale, + exchange.getAttribute(TIME_ZONE_REQUEST_ATTRIBUTE_NAME)); + } + + @Nullable + private Locale getLocale(ServerWebExchange exchange) { + String language = exchange.getRequest().getQueryParams() + .getFirst(DEFAULT_PARAMETER_NAME); + + Locale locale; + if (StringUtils.isNotBlank(language)) { + locale = new Locale(language); + } else if (exchange.getAttribute(LOCALE_REQUEST_ATTRIBUTE_NAME) != null) { + locale = exchange.getAttribute(LOCALE_REQUEST_ATTRIBUTE_NAME); + } else { + locale = super.resolveLocaleContext(exchange).getLocale(); + } + return locale; + } + + private TimeZone getDefaultTimeZone() { + return TimeZone.getDefault(); + } + + private void parseLocaleCookieIfNecessary(ServerWebExchange exchange) { + if (exchange.getAttribute(TIME_ZONE_REQUEST_ATTRIBUTE_NAME) == null) { + TimeZone timeZone = null; + HttpCookie cookie = exchange.getRequest() + .getCookies() + .getFirst(TIME_ZONE_COOKIE_NAME); + if (cookie != null) { + String value = cookie.getValue(); + timeZone = TimeZone.getTimeZone(value); + } + exchange.getAttributes().put(TIME_ZONE_REQUEST_ATTRIBUTE_NAME, + (timeZone != null ? timeZone : this.defaultTimeZoneFunction.apply(exchange))); + } + + if (exchange.getAttribute(LOCALE_REQUEST_ATTRIBUTE_NAME) == null) { + HttpCookie cookie = exchange.getRequest() + .getCookies() + .getFirst(DEFAULT_PARAMETER_NAME); + if (cookie != null) { + String value = cookie.getValue(); + exchange.getAttributes() + .put(LOCALE_REQUEST_ATTRIBUTE_NAME, new Locale(value)); + } + } + } +} diff --git a/application/src/main/java/run/halo/app/theme/ThemeResolver.java b/application/src/main/java/run/halo/app/theme/ThemeResolver.java new file mode 100644 index 0000000..dd9b6c4 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/ThemeResolver.java @@ -0,0 +1,73 @@ +package run.halo.app.theme; + +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting.Theme; +import run.halo.app.infra.ThemeRootGetter; + +/** + * @author johnniang + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class ThemeResolver { + + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + private final ThemeRootGetter themeRoot; + + public Mono getThemeContext(String themeName) { + Assert.hasText(themeName, "Theme name cannot be empty"); + var path = themeRoot.get().resolve(themeName); + return Mono.just(ThemeContext.builder().name(themeName).path(path)) + .flatMap(builder -> environmentFetcher.fetch(Theme.GROUP, Theme.class) + .mapNotNull(Theme::getActive) + .map(activatedTheme -> { + boolean active = StringUtils.equals(activatedTheme, themeName); + return builder.active(active); + }) + .defaultIfEmpty(builder.active(false)) + ) + .map(ThemeContext.ThemeContextBuilder::build); + } + + public Mono getTheme(ServerWebExchange exchange) { + return fetchThemeFromExchange(exchange) + .switchIfEmpty(Mono.defer(() -> environmentFetcher.fetch(Theme.GROUP, Theme.class) + .map(Theme::getActive) + .switchIfEmpty( + Mono.error(() -> new IllegalArgumentException("No theme activated"))) + .map(activatedTheme -> { + var builder = ThemeContext.builder(); + var themeName = exchange.getRequest().getQueryParams() + .getFirst(ThemeContext.THEME_PREVIEW_PARAM_NAME); + if (StringUtils.isBlank(themeName)) { + themeName = activatedTheme; + } + boolean active = StringUtils.equals(activatedTheme, themeName); + var path = themeRoot.get().resolve(themeName); + return builder.name(themeName) + .path(path) + .active(active) + .build(); + }) + .doOnNext(themeContext -> + exchange.getAttributes().put(ThemeContext.class.getName(), themeContext)) + )); + } + + public Mono fetchThemeFromExchange(ServerWebExchange exchange) { + return Mono.justOrEmpty(exchange) + .map(ServerWebExchange::getAttributes) + .filter(attrs -> attrs.containsKey(ThemeContext.class.getName())) + .map(attrs -> attrs.get(ThemeContext.class.getName())) + .cast(ThemeContext.class); + } + +} diff --git a/application/src/main/java/run/halo/app/theme/ViewContextBasedVariablesAcquirer.java b/application/src/main/java/run/halo/app/theme/ViewContextBasedVariablesAcquirer.java new file mode 100644 index 0000000..003c307 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/ViewContextBasedVariablesAcquirer.java @@ -0,0 +1,11 @@ +package run.halo.app.theme; + +import java.util.Map; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +@FunctionalInterface +public interface ViewContextBasedVariablesAcquirer { + + Mono> acquire(ServerWebExchange exchange); +} diff --git a/application/src/main/java/run/halo/app/theme/ViewNameResolver.java b/application/src/main/java/run/halo/app/theme/ViewNameResolver.java new file mode 100644 index 0000000..873b4a4 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/ViewNameResolver.java @@ -0,0 +1,20 @@ +package run.halo.app.theme; + +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; + +/** + * The {@link ViewNameResolver} is used to resolve view name if the view name cannot be resolved + * to the view, the default view name is returned. + * + * @author guqing + * @since 2.10.2 + */ +public interface ViewNameResolver { + Mono resolveViewNameOrDefault(ServerWebExchange exchange, String name, + String defaultName); + + Mono resolveViewNameOrDefault(ServerRequest request, String name, + String defaultName); +} diff --git a/application/src/main/java/run/halo/app/theme/config/ThemeConfiguration.java b/application/src/main/java/run/halo/app/theme/config/ThemeConfiguration.java new file mode 100644 index 0000000..d7a7c78 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/config/ThemeConfiguration.java @@ -0,0 +1,40 @@ +package run.halo.app.theme.config; + +import org.springframework.beans.factory.ObjectProvider; +import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty; +import org.springframework.boot.info.BuildProperties; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.web.server.context.ServerSecurityContextRepository; +import org.thymeleaf.extras.springsecurity6.dialect.SpringSecurityDialect; +import run.halo.app.theme.dialect.GeneratorMetaProcessor; +import run.halo.app.theme.dialect.HaloSpringSecurityDialect; +import run.halo.app.theme.dialect.LinkExpressionObjectDialect; +import run.halo.app.theme.dialect.TemplateHeadProcessor; + +/** + * @author guqing + * @since 2.0.0 + */ +@Configuration +public class ThemeConfiguration { + + @Bean + LinkExpressionObjectDialect linkExpressionObjectDialect() { + return new LinkExpressionObjectDialect(); + } + + @Bean + SpringSecurityDialect springSecurityDialect( + ServerSecurityContextRepository securityContextRepository) { + return new HaloSpringSecurityDialect(securityContextRepository); + } + + @Bean + @ConditionalOnProperty(name = "halo.theme.generator-meta-disabled", + havingValue = "false", + matchIfMissing = true) + TemplateHeadProcessor generatorMetaProcessor(ObjectProvider buildProperties) { + return new GeneratorMetaProcessor(buildProperties); + } +} diff --git a/application/src/main/java/run/halo/app/theme/config/ThemeWebFluxConfigurer.java b/application/src/main/java/run/halo/app/theme/config/ThemeWebFluxConfigurer.java new file mode 100644 index 0000000..bcdb9ea --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/config/ThemeWebFluxConfigurer.java @@ -0,0 +1,96 @@ +package run.halo.app.theme.config; + +import java.nio.file.Path; +import java.util.List; +import java.util.Map; +import org.apache.commons.lang3.StringUtils; +import org.springframework.boot.autoconfigure.web.WebProperties; +import org.springframework.core.io.FileSystemResource; +import org.springframework.core.io.Resource; +import org.springframework.http.CacheControl; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.HandlerMapping; +import org.springframework.web.reactive.config.ResourceHandlerRegistry; +import org.springframework.web.reactive.config.WebFluxConfigurer; +import org.springframework.web.reactive.resource.AbstractResourceResolver; +import org.springframework.web.reactive.resource.EncodedResourceResolver; +import org.springframework.web.reactive.resource.ResourceResolverChain; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.infra.ThemeRootGetter; +import run.halo.app.infra.utils.FileUtils; + +@Component +public class ThemeWebFluxConfigurer implements WebFluxConfigurer { + + private final ThemeRootGetter themeRootGetter; + + private final WebProperties.Resources resourcesProperties; + + public ThemeWebFluxConfigurer(ThemeRootGetter themeRootGetter, + WebProperties webProperties) { + this.themeRootGetter = themeRootGetter; + this.resourcesProperties = webProperties.getResources(); + } + + @Override + public void addResourceHandlers(ResourceHandlerRegistry registry) { + var cacheControl = resourcesProperties.getCache().getCachecontrol().toHttpCacheControl(); + if (cacheControl == null) { + cacheControl = CacheControl.empty(); + } + var useLastModified = resourcesProperties.getCache().isUseLastModified(); + registry.addResourceHandler("/themes/{themeName}/assets/{*resourcePaths}") + .setCacheControl(cacheControl) + .setUseLastModified(useLastModified) + .resourceChain(true) + .addResolver(new EncodedResourceResolver()) + .addResolver(new ThemePathResourceResolver(themeRootGetter.get())); + } + + /** + * Theme path resource resolver. The resolver is used to resolve theme assets from the request + * path. + * + * @author johnniang + */ + private static class ThemePathResourceResolver extends AbstractResourceResolver { + + private final Path themeRoot; + + private ThemePathResourceResolver(Path themeRoot) { + this.themeRoot = themeRoot; + } + + @Override + protected Mono resolveResourceInternal(ServerWebExchange exchange, + String requestPath, List locations, ResourceResolverChain chain) { + if (exchange == null) { + return Mono.empty(); + } + Map requiredAttribute = + exchange.getRequiredAttribute(HandlerMapping.URI_TEMPLATE_VARIABLES_ATTRIBUTE); + var themeName = requiredAttribute.get("themeName"); + var resourcePaths = requiredAttribute.get("resourcePaths"); + + if (StringUtils.isAnyBlank(themeName, resourcePaths)) { + return Mono.empty(); + } + + var assetsPath = themeRoot.resolve(themeName + "/templates/assets/" + resourcePaths); + FileUtils.checkDirectoryTraversal(themeRoot, assetsPath); + var location = new FileSystemResource(assetsPath); + if (!location.isReadable()) { + return Mono.empty(); + } + return Mono.just(location); + } + + @Override + protected Mono resolveUrlPathInternal(String resourceUrlPath, + List locations, ResourceResolverChain chain) { + throw new UnsupportedOperationException(); + } + + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/CommentElementTagProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/CommentElementTagProcessor.java new file mode 100644 index 0000000..96b9935 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/CommentElementTagProcessor.java @@ -0,0 +1,50 @@ +package run.halo.app.theme.dialect; + +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IProcessableElementTag; +import org.thymeleaf.processor.element.AbstractElementTagProcessor; +import org.thymeleaf.processor.element.IElementTagStructureHandler; +import org.thymeleaf.templatemode.TemplateMode; + +/** + *

Comment element tag processor.

+ *

Replace the comment tag <halo:comment /> with the given content.

+ * + * @author guqing + * @see CommentEnabledVariableProcessor + * @since 2.0.0 + */ +public class CommentElementTagProcessor extends AbstractElementTagProcessor { + + private static final String TAG_NAME = "comment"; + + private static final int PRECEDENCE = 1000; + + /** + * Constructor footer element tag processor with HTML mode, dialect prefix, comment tag name. + * + * @param dialectPrefix dialect prefix + */ + public CommentElementTagProcessor(final String dialectPrefix) { + super( + TemplateMode.HTML, // This processor will apply only to HTML mode + dialectPrefix, // Prefix to be applied to name for matching + TAG_NAME, // Tag name: match specifically this tag + true, // Apply dialect prefix to tag name + null, // No attribute name: will match by tag name + false, // No prefix to be applied to attribute name + PRECEDENCE); // Precedence (inside dialect's own precedence) + } + + @Override + protected void doProcess(ITemplateContext context, IProcessableElementTag tag, + IElementTagStructureHandler structureHandler) { + var commentWidget = (CommentWidget) context.getVariable( + CommentEnabledVariableProcessor.COMMENT_WIDGET_OBJECT_VARIABLE); + if (commentWidget == null) { + structureHandler.replaceWith("", false); + return; + } + commentWidget.render(context, tag, structureHandler); + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/CommentEnabledVariableProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/CommentEnabledVariableProcessor.java new file mode 100644 index 0000000..43bd9be --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/CommentEnabledVariableProcessor.java @@ -0,0 +1,91 @@ +package run.halo.app.theme.dialect; + +import static org.apache.commons.lang3.BooleanUtils.isFalse; +import static org.apache.commons.lang3.BooleanUtils.isTrue; + +import java.util.Optional; +import org.springframework.context.ApplicationContext; +import org.springframework.core.convert.support.DefaultConversionService; +import org.thymeleaf.context.Contexts; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.context.IWebContext; +import org.thymeleaf.model.ITemplateEnd; +import org.thymeleaf.model.ITemplateStart; +import org.thymeleaf.processor.templateboundaries.AbstractTemplateBoundariesProcessor; +import org.thymeleaf.processor.templateboundaries.ITemplateBoundariesStructureHandler; +import org.thymeleaf.spring6.context.SpringContextUtils; +import org.thymeleaf.standard.StandardDialect; +import org.thymeleaf.templatemode.TemplateMode; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; + +/** + * Comment enabled variable processor. + *

Compute comment enabled state and set it to the model when the template is start rendering

+ *

It is not suitable for scenarios where there are multiple comment components on the same page + * and some of them need to be controlled to be closed.

+ * + * @author guqing + * @since 2.9.0 + */ +public class CommentEnabledVariableProcessor extends AbstractTemplateBoundariesProcessor { + + public static final String COMMENT_WIDGET_OBJECT_VARIABLE = CommentWidget.class.getName(); + public static final String COMMENT_ENABLED_MODEL_ATTRIBUTE = "haloCommentEnabled"; + + public CommentEnabledVariableProcessor() { + super(TemplateMode.HTML, StandardDialect.PROCESSOR_PRECEDENCE); + } + + @Override + public void doProcessTemplateStart(ITemplateContext context, ITemplateStart templateStart, + ITemplateBoundariesStructureHandler structureHandler) { + getCommentWidget(context).ifPresentOrElse(commentWidget -> { + populateAllowCommentAttribute(context, true); + structureHandler.setLocalVariable(COMMENT_WIDGET_OBJECT_VARIABLE, commentWidget); + }, () -> populateAllowCommentAttribute(context, false)); + } + + @Override + public void doProcessTemplateEnd(ITemplateContext context, ITemplateEnd templateEnd, + ITemplateBoundariesStructureHandler structureHandler) { + structureHandler.removeLocalVariable(COMMENT_WIDGET_OBJECT_VARIABLE); + } + + static void populateAllowCommentAttribute(ITemplateContext context, boolean allowComment) { + if (Contexts.isWebContext(context)) { + IWebContext webContext = Contexts.asWebContext(context); + webContext.getExchange() + .setAttributeValue(COMMENT_ENABLED_MODEL_ATTRIBUTE, allowComment); + } + } + + static Optional getCommentWidget(ITemplateContext context) { + final ApplicationContext appCtx = SpringContextUtils.getApplicationContext(context); + SystemConfigurableEnvironmentFetcher environmentFetcher = + appCtx.getBean(SystemConfigurableEnvironmentFetcher.class); + var commentSetting = environmentFetcher.fetchComment() + .blockOptional() + .orElseThrow(); + var globalEnabled = isTrue(commentSetting.getEnable()); + if (!globalEnabled) { + return Optional.empty(); + } + + if (Contexts.isWebContext(context)) { + IWebContext webContext = Contexts.asWebContext(context); + Object attributeValue = webContext.getExchange() + .getAttributeValue(CommentWidget.ENABLE_COMMENT_ATTRIBUTE); + Boolean enabled = DefaultConversionService.getSharedInstance() + .convert(attributeValue, Boolean.class); + if (isFalse(enabled)) { + return Optional.empty(); + } + } + + ExtensionGetter extensionGetter = appCtx.getBean(ExtensionGetter.class); + return extensionGetter.getEnabledExtensions(CommentWidget.class) + .next() + .blockOptional(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessor.java new file mode 100644 index 0000000..801270d --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessor.java @@ -0,0 +1,118 @@ +package run.halo.app.theme.dialect; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static org.apache.commons.lang3.StringUtils.defaultIfBlank; +import static org.thymeleaf.model.AttributeValueQuotes.DOUBLE; + +import java.util.ArrayList; +import java.util.HashMap; +import java.util.List; +import java.util.Map; +import java.util.stream.Collectors; +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.core.annotation.Order; +import org.springframework.stereotype.Component; +import org.springframework.web.util.HtmlUtils; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.model.IModelFactory; +import org.thymeleaf.model.ITemplateEvent; +import org.thymeleaf.processor.element.IElementModelStructureHandler; +import reactor.core.publisher.Mono; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.finders.PostFinder; +import run.halo.app.theme.finders.SinglePageFinder; +import run.halo.app.theme.router.ModelConst; + +/** + *

The head html snippet injection processor for content template such as post + * and page.

+ * + * @author guqing + * @since 2.0.0 + */ +@Component +@Order(1) +@AllArgsConstructor +public class ContentTemplateHeadProcessor implements TemplateHeadProcessor { + private static final String POST_NAME_VARIABLE = "name"; + private final PostFinder postFinder; + private final SinglePageFinder singlePageFinder; + + @Override + public Mono process(ITemplateContext context, IModel model, + IElementModelStructureHandler structureHandler) { + Mono nameMono = Mono.justOrEmpty((String) context.getVariable(POST_NAME_VARIABLE)); + + Mono>> htmlMetasMono = Mono.empty(); + if (isPostTemplate(context)) { + htmlMetasMono = nameMono.flatMap(postFinder::getByName) + .map(post -> { + List> htmlMetas = post.getSpec().getHtmlMetas(); + String excerpt = + post.getStatus() == null ? null : post.getStatus().getExcerpt(); + return excerptToMetaDescriptionIfAbsent(htmlMetas, excerpt); + }); + } else if (isPageTemplate(context)) { + htmlMetasMono = nameMono.flatMap(singlePageFinder::getByName) + .map(page -> { + List> htmlMetas = page.getSpec().getHtmlMetas(); + String excerpt = + page.getStatus() == null ? null : page.getStatus().getExcerpt(); + return excerptToMetaDescriptionIfAbsent(htmlMetas, excerpt); + }); + } + + return htmlMetasMono + .doOnNext( + htmlMetas -> buildMetas(context.getModelFactory(), htmlMetas).forEach(model::add) + ) + .then(); + } + + static List> excerptToMetaDescriptionIfAbsent( + List> htmlMetas, + String excerpt) { + String excerptNullSafe = StringUtils.defaultString(excerpt); + final String excerptSafe = HtmlUtils.htmlEscape(excerptNullSafe); + List> metas = new ArrayList<>(defaultIfNull(htmlMetas, List.of())); + metas.stream() + .filter(map -> Meta.DESCRIPTION.equals(map.get(Meta.NAME))) + .distinct() + .findFirst() + .ifPresentOrElse(map -> + map.put(Meta.CONTENT, defaultIfBlank(map.get(Meta.CONTENT), excerptSafe)), + () -> { + Map map = new HashMap<>(); + map.put(Meta.NAME, Meta.DESCRIPTION); + map.put(Meta.CONTENT, excerptSafe); + metas.add(map); + }); + return metas; + } + + interface Meta { + String DESCRIPTION = "description"; + String NAME = "name"; + String CONTENT = "content"; + } + + private List buildMetas(IModelFactory modelFactory, + List> metas) { + return metas.stream() + .map(metaMap -> + modelFactory.createStandaloneElementTag("meta", metaMap, DOUBLE, false, true) + ).collect(Collectors.toList()); + } + + private boolean isPostTemplate(ITemplateContext context) { + return DefaultTemplateEnum.POST.getValue() + .equals(context.getVariable(ModelConst.TEMPLATE_ID)); + } + + private boolean isPageTemplate(ITemplateContext context) { + return DefaultTemplateEnum.SINGLE_PAGE.getValue() + .equals(context.getVariable(ModelConst.TEMPLATE_ID)); + } +} \ No newline at end of file diff --git a/application/src/main/java/run/halo/app/theme/dialect/DefaultFaviconHeadProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/DefaultFaviconHeadProcessor.java new file mode 100644 index 0000000..d8986ea --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/DefaultFaviconHeadProcessor.java @@ -0,0 +1,46 @@ +package run.halo.app.theme.dialect; + +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.model.IModelFactory; +import org.thymeleaf.processor.element.IElementModelStructureHandler; +import reactor.core.publisher.Mono; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; + +/** + * Theme template head tag snippet injection processor for favicon. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class DefaultFaviconHeadProcessor implements TemplateHeadProcessor { + + private final SystemConfigurableEnvironmentFetcher fetcher; + + @Override + public Mono process(ITemplateContext context, IModel model, + IElementModelStructureHandler structureHandler) { + return fetchBasicSetting() + .filter(basic -> StringUtils.isNotBlank(basic.getFavicon())) + .map(basic -> { + IModelFactory modelFactory = context.getModelFactory(); + model.add(modelFactory.createText(faviconSnippet(basic.getFavicon()))); + return model; + }) + .then(); + } + + private String faviconSnippet(String favicon) { + return String.format("\n", favicon); + } + + private Mono fetchBasicSetting() { + return fetcher.fetch(SystemSetting.Basic.GROUP, SystemSetting.Basic.class); + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/DefaultLinkExpressionFactory.java b/application/src/main/java/run/halo/app/theme/dialect/DefaultLinkExpressionFactory.java new file mode 100644 index 0000000..23b8480 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/DefaultLinkExpressionFactory.java @@ -0,0 +1,66 @@ +package run.halo.app.theme.dialect; + +import java.util.Set; +import org.thymeleaf.context.IExpressionContext; +import org.thymeleaf.exceptions.TemplateProcessingException; +import org.thymeleaf.expression.IExpressionObjectFactory; +import org.thymeleaf.linkbuilder.ILinkBuilder; +import org.thymeleaf.util.Validate; +import run.halo.app.theme.ThemeLinkBuilder; + +/** + * A default implementation of {@link IExpressionObjectFactory}. + * + * @author guqing + * @since 2.0.0 + */ +public class DefaultLinkExpressionFactory implements IExpressionObjectFactory { + private static final String THEME_EVALUATION_VARIABLE_NAME = "theme"; + + @Override + public Set getAllExpressionObjectNames() { + return Set.of(THEME_EVALUATION_VARIABLE_NAME); + } + + @Override + public Object buildObject(IExpressionContext context, String expressionObjectName) { + if (THEME_EVALUATION_VARIABLE_NAME.equals(expressionObjectName)) { + return new ThemeLinkExpressObject(context); + } + return null; + } + + @Override + public boolean isCacheable(String expressionObjectName) { + return THEME_EVALUATION_VARIABLE_NAME.equals(expressionObjectName); + } + + public static class ThemeLinkExpressObject { + private final ILinkBuilder linkBuilder; + private final IExpressionContext context; + + /** + * Construct an expression object that provides a set of methods to handle link in + * Javascript or HTML through {@link IExpressionContext}. + * + * @param context expression context + */ + public ThemeLinkExpressObject(IExpressionContext context) { + Validate.notNull(context, "Context cannot be null"); + this.context = context; + Set linkBuilders = context.getConfiguration().getLinkBuilders(); + linkBuilder = linkBuilders.stream() + .findFirst() + .orElseThrow(() -> new TemplateProcessingException("Link builder not found")); + } + + public String assets(String path) { + String assetsPath = ThemeLinkBuilder.THEME_ASSETS_PREFIX + path; + return linkBuilder.buildLink(context, assetsPath, null); + } + + public String route(String path) { + return linkBuilder.buildLink(context, path, null); + } + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/DuplicateMetaTagProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/DuplicateMetaTagProcessor.java new file mode 100644 index 0000000..4554f66 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/DuplicateMetaTagProcessor.java @@ -0,0 +1,90 @@ +package run.halo.app.theme.dialect; + +import java.util.ArrayList; +import java.util.Comparator; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import java.util.regex.Matcher; +import java.util.regex.Pattern; +import lombok.AllArgsConstructor; +import org.springframework.core.annotation.Order; +import org.springframework.stereotype.Component; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.model.IProcessableElementTag; +import org.thymeleaf.model.ITemplateEvent; +import org.thymeleaf.model.IText; +import org.thymeleaf.processor.element.IElementModelStructureHandler; +import reactor.core.publisher.Mono; + +/** + *

This processor will remove the duplicate meta tag with the same name in head tag and only + * keep the last one.

+ *

This processor will be executed last.

+ * + * @author guqing + * @since 2.0.0 + */ +@Order +@Component +@AllArgsConstructor +public class DuplicateMetaTagProcessor implements TemplateHeadProcessor { + static final Pattern META_PATTERN = Pattern.compile("]+?name=\"([^\"]+)\"[^>]*>\\n*"); + + @Override + public Mono process(ITemplateContext context, IModel model, + IElementModelStructureHandler structureHandler) { + IModel newModel = context.getModelFactory().createModel(); + + Map uniqueMetaTags = new LinkedHashMap<>(); + List otherModel = new ArrayList<>(); + for (int i = 0; i < model.size(); i++) { + ITemplateEvent templateEvent = model.get(i); + // If the current node is a text node, it is processed separately. + // Because the text node may contain multiple meta tags. + if (templateEvent instanceof IText textNode) { + String text = textNode.getText(); + Matcher matcher = META_PATTERN.matcher(text); + while (matcher.find()) { + String tagLine = matcher.group(0); + String nameAttribute = matcher.group(1); + // create a new text node to replace the original text node + // replace multiple line breaks with one line break + IText metaTagNode = context.getModelFactory() + .createText(tagLine.replaceAll("\\n+", "\n")); + uniqueMetaTags.put(nameAttribute, new IndexedModel(i, metaTagNode)); + text = text.replace(tagLine, ""); + } + // put the rest of the text into the other model + IText otherText = context.getModelFactory() + .createText(text); + otherModel.add(new IndexedModel(i, otherText)); + continue; + } + if (templateEvent instanceof IProcessableElementTag tag) { + var indexedModel = new IndexedModel(i, tag); + if ("meta".equals(tag.getElementCompleteName())) { + var attribute = tag.getAttribute("name"); + if (attribute != null) { + uniqueMetaTags.put(attribute.getValue(), indexedModel); + continue; + } + } + } + otherModel.add(new IndexedModel(i, templateEvent)); + } + + otherModel.addAll(uniqueMetaTags.values()); + otherModel.stream().sorted(Comparator.comparing(IndexedModel::index)) + .map(IndexedModel::templateEvent) + .forEach(newModel::add); + + model.reset(); + model.addModel(newModel); + return Mono.empty(); + } + + record IndexedModel(int index, ITemplateEvent templateEvent) { + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/GeneratorMetaProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/GeneratorMetaProcessor.java new file mode 100644 index 0000000..ca2ee56 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/GeneratorMetaProcessor.java @@ -0,0 +1,43 @@ +package run.halo.app.theme.dialect; + +import static org.thymeleaf.model.AttributeValueQuotes.DOUBLE; + +import java.util.Map; +import org.springframework.beans.factory.ObjectProvider; +import org.springframework.boot.info.BuildProperties; +import org.springframework.core.annotation.Order; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.processor.element.IElementModelStructureHandler; +import reactor.core.publisher.Mono; + +/** + * Processor for generating generator meta. + * Set the order to 0 for removing the meta in later TemplateHeadProcessor. + * + * @author johnniang + */ +@Order(0) +public class GeneratorMetaProcessor implements TemplateHeadProcessor { + + private final String generatorValue; + + public GeneratorMetaProcessor(ObjectProvider buildProperties) { + this.generatorValue = "Halo " + buildProperties.stream().findFirst() + .map(BuildProperties::getVersion) + .orElse("Unknown"); + } + + @Override + public Mono process(ITemplateContext context, IModel model, + IElementModelStructureHandler structureHandler) { + return Mono.fromRunnable(() -> { + var modelFactory = context.getModelFactory(); + var generatorMeta = modelFactory.createStandaloneElementTag("meta", + Map.of("name", "generator", "content", generatorValue), + DOUBLE, false, true); + model.add(generatorMeta); + }); + } + +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/GlobalHeadInjectionProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/GlobalHeadInjectionProcessor.java new file mode 100644 index 0000000..6be5c52 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/GlobalHeadInjectionProcessor.java @@ -0,0 +1,93 @@ +package run.halo.app.theme.dialect; + +import static org.thymeleaf.spring6.context.SpringContextUtils.getApplicationContext; + +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.model.ITemplateEvent; +import org.thymeleaf.processor.element.AbstractElementModelProcessor; +import org.thymeleaf.processor.element.IElementModelStructureHandler; +import org.thymeleaf.templatemode.TemplateMode; +import reactor.core.publisher.Flux; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; + +/** + * Global head injection processor. + * + * @author guqing + * @since 2.0.0 + */ +public class GlobalHeadInjectionProcessor extends AbstractElementModelProcessor { + /** + * Inserting tag will re-trigger this processor, in order to avoid the loop out trigger, + * this flag is required to prevent the loop problem. + */ + private static final String PROCESS_FLAG = + GlobalHeadInjectionProcessor.class.getName() + ".PROCESSED"; + + private static final String TAG_NAME = "head"; + private static final int PRECEDENCE = 1000; + + public GlobalHeadInjectionProcessor(final String dialectPrefix) { + super( + TemplateMode.HTML, // This processor will apply only to HTML mode + dialectPrefix, // Prefix to be applied to name for matching + TAG_NAME, // Tag name: match specifically this tag + false, // Apply dialect prefix to tag name + null, // No attribute name: will match by tag name + false, // No prefix to be applied to attribute name + PRECEDENCE); // Precedence (inside dialect's own precedence) + } + + @Override + protected void doProcess(ITemplateContext context, IModel model, + IElementModelStructureHandler structureHandler) { + + // note that this is important!! + Object processedAlready = context.getVariable(PROCESS_FLAG); + if (processedAlready != null) { + return; + } + structureHandler.setLocalVariable(PROCESS_FLAG, true); + + // handle tag + if (model.size() < 2) { + return; + } + + /* + * Create the DOM structure that will be substituting our custom tag. + * The headline will be shown inside a '
' tag, and so this must + * be created first and then a Text node must be added to it. + */ + IModel modelToInsert = model.cloneModel(); + // close tag + final ITemplateEvent closeHeadTag = modelToInsert.get(modelToInsert.size() - 1); + modelToInsert.remove(modelToInsert.size() - 1); + + // open tag + final ITemplateEvent openHeadTag = modelToInsert.get(0); + modelToInsert.remove(0); + + // apply processors to modelToInsert + getTemplateHeadProcessors(context) + .concatMap(processor -> processor.process(context, modelToInsert, structureHandler)) + .then() + .block(); + + // reset model to insert + model.reset(); + model.add(openHeadTag); + model.addModel(modelToInsert); + model.add(closeHeadTag); + } + + private Flux getTemplateHeadProcessors(ITemplateContext context) { + var extensionGetter = getApplicationContext(context).getBeanProvider(ExtensionGetter.class) + .getIfUnique(); + if (extensionGetter == null) { + return Flux.empty(); + } + return extensionGetter.getExtensions(TemplateHeadProcessor.class); + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/GlobalSeoProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/GlobalSeoProcessor.java new file mode 100644 index 0000000..1ca3c66 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/GlobalSeoProcessor.java @@ -0,0 +1,60 @@ +package run.halo.app.theme.dialect; + +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.core.Ordered; +import org.springframework.core.annotation.Order; +import org.springframework.stereotype.Component; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.model.IModelFactory; +import org.thymeleaf.processor.element.IElementModelStructureHandler; +import reactor.core.publisher.Mono; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; + +/** + * Inject code to the template head tag according to the global seo settings. + * + * @author guqing + * @see SystemSetting.Seo + * @since 2.0.0 + */ +@Order(Ordered.HIGHEST_PRECEDENCE + 1) +@Component +@AllArgsConstructor +public class GlobalSeoProcessor implements TemplateHeadProcessor { + + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + @Override + public Mono process(ITemplateContext context, IModel model, + IElementModelStructureHandler structureHandler) { + return environmentFetcher.fetch(SystemSetting.Seo.GROUP, SystemSetting.Seo.class) + .map(seo -> { + boolean blockSpiders = BooleanUtils.isTrue(seo.getBlockSpiders()); + IModelFactory modelFactory = context.getModelFactory(); + if (blockSpiders) { + String noIndexMeta = "\n"; + model.add(modelFactory.createText(noIndexMeta)); + return model; + } + + String keywords = seo.getKeywords(); + if (StringUtils.isNotBlank(keywords)) { + String keywordsMeta = + "\n"; + model.add(modelFactory.createText(keywordsMeta)); + } + + if (StringUtils.isNotBlank(seo.getDescription())) { + String descriptionMeta = + "\n"; + model.add(modelFactory.createText(descriptionMeta)); + } + return model; + }) + .then(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/HaloExpressionObjectFactory.java b/application/src/main/java/run/halo/app/theme/dialect/HaloExpressionObjectFactory.java new file mode 100644 index 0000000..ba4f2f4 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/HaloExpressionObjectFactory.java @@ -0,0 +1,40 @@ +package run.halo.app.theme.dialect; + +import java.util.Set; +import org.thymeleaf.context.IExpressionContext; +import org.thymeleaf.expression.IExpressionObjectFactory; +import run.halo.app.theme.dialect.expression.Annotations; + +/** + * Builds the expression objects to be used by Halo dialects. + * + * @author guqing + * @since 2.0.0 + */ +public class HaloExpressionObjectFactory implements IExpressionObjectFactory { + + public static final String ANNOTATIONS_EXPRESSION_OBJECT_NAME = "annotations"; + + protected static final Set ALL_EXPRESSION_OBJECT_NAMES = Set.of( + ANNOTATIONS_EXPRESSION_OBJECT_NAME); + + private static final Annotations ANNOTATIONS = new Annotations(); + + @Override + public Set getAllExpressionObjectNames() { + return ALL_EXPRESSION_OBJECT_NAMES; + } + + @Override + public Object buildObject(IExpressionContext context, String expressionObjectName) { + if (ANNOTATIONS_EXPRESSION_OBJECT_NAME.equals(expressionObjectName)) { + return ANNOTATIONS; + } + return null; + } + + @Override + public boolean isCacheable(String expressionObjectName) { + return true; + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/HaloProcessorDialect.java b/application/src/main/java/run/halo/app/theme/dialect/HaloProcessorDialect.java new file mode 100644 index 0000000..6d61b3c --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/HaloProcessorDialect.java @@ -0,0 +1,46 @@ +package run.halo.app.theme.dialect; + +import java.util.HashSet; +import java.util.Set; +import org.thymeleaf.dialect.AbstractProcessorDialect; +import org.thymeleaf.dialect.IExpressionObjectDialect; +import org.thymeleaf.expression.IExpressionObjectFactory; +import org.thymeleaf.processor.IProcessor; +import org.thymeleaf.standard.StandardDialect; + +/** + * Thymeleaf processor dialect for Halo. + * + * @author guqing + * @since 2.0.0 + */ +public class HaloProcessorDialect extends AbstractProcessorDialect implements + IExpressionObjectDialect { + private static final String DIALECT_NAME = "haloThemeProcessorDialect"; + + private static final IExpressionObjectFactory HALO_EXPRESSION_OBJECTS_FACTORY = + new HaloExpressionObjectFactory(); + + public HaloProcessorDialect() { + // We will set this dialect the same "dialect processor" precedence as + // the Standard Dialect, so that processor executions can interleave. + super(DIALECT_NAME, "halo", StandardDialect.PROCESSOR_PRECEDENCE); + } + + @Override + public Set getProcessors(String dialectPrefix) { + final Set processors = new HashSet(); + // add more processors + processors.add(new GlobalHeadInjectionProcessor(dialectPrefix)); + processors.add(new TemplateFooterElementTagProcessor(dialectPrefix)); + processors.add(new JsonNodePropertyAccessorBoundariesProcessor()); + processors.add(new CommentElementTagProcessor(dialectPrefix)); + processors.add(new CommentEnabledVariableProcessor()); + return processors; + } + + @Override + public IExpressionObjectFactory getExpressionObjectFactory() { + return HALO_EXPRESSION_OBJECTS_FACTORY; + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/HaloSpringSecurityDialect.java b/application/src/main/java/run/halo/app/theme/dialect/HaloSpringSecurityDialect.java new file mode 100644 index 0000000..31f2b62 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/HaloSpringSecurityDialect.java @@ -0,0 +1,53 @@ +package run.halo.app.theme.dialect; + +import static org.springframework.security.core.authority.AuthorityUtils.createAuthorityList; +import static run.halo.app.infra.AnonymousUserConst.PRINCIPAL; +import static run.halo.app.infra.AnonymousUserConst.Role; + +import java.util.function.Function; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.security.authentication.AnonymousAuthenticationToken; +import org.springframework.security.core.context.SecurityContextImpl; +import org.springframework.security.web.server.context.ServerSecurityContextRepository; +import org.springframework.web.server.ServerWebExchange; +import org.thymeleaf.extras.springsecurity6.dialect.SpringSecurityDialect; +import org.thymeleaf.extras.springsecurity6.util.SpringSecurityContextUtils; +import org.thymeleaf.extras.springsecurity6.util.SpringVersionUtils; + +/** + * HaloSpringSecurityDialect overwrites value of thymeleafSpringSecurityContext. + * + * @author johnniang + */ +public class HaloSpringSecurityDialect extends SpringSecurityDialect implements InitializingBean { + + private static final String SECURITY_CONTEXT_EXECUTION_ATTRIBUTE_NAME = + "ThymeleafReactiveModelAdditions:" + + SpringSecurityContextUtils.SECURITY_CONTEXT_MODEL_ATTRIBUTE_NAME; + + private final ServerSecurityContextRepository securityContextRepository; + + public HaloSpringSecurityDialect(ServerSecurityContextRepository securityContextRepository) { + this.securityContextRepository = securityContextRepository; + } + + @Override + public void afterPropertiesSet() { + if (!SpringVersionUtils.isSpringWebFluxPresent()) { + return; + } + + // We have to build an anonymous authentication token here because the token won't be saved + // into repository during anonymous authentication. + var anonymousAuthentication = + new AnonymousAuthenticationToken("fallback", PRINCIPAL, createAuthorityList(Role)); + var anonymousSecurityContext = new SecurityContextImpl(anonymousAuthentication); + + final Function secCtxInitializer = + exchange -> securityContextRepository.load(exchange) + .defaultIfEmpty(anonymousSecurityContext); + + // Just overwrite the value of the attribute + getExecutionAttributes().put(SECURITY_CONTEXT_EXECUTION_ATTRIBUTE_NAME, secCtxInitializer); + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/HaloTrackerProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/HaloTrackerProcessor.java new file mode 100644 index 0000000..beb7d62 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/HaloTrackerProcessor.java @@ -0,0 +1,63 @@ +package run.halo.app.theme.dialect; + +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.model.IModelFactory; +import org.thymeleaf.processor.element.IElementModelStructureHandler; +import reactor.core.publisher.Mono; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.infra.ExternalUrlSupplier; +import run.halo.app.infra.utils.PathUtils; + +/** + * Get {@link GroupVersionKind} and {@code plural} from the view model to construct tracker + * script tag and insert it into the head tag. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class HaloTrackerProcessor implements TemplateHeadProcessor { + + private final ExternalUrlSupplier externalUrlGetter; + + public HaloTrackerProcessor(ExternalUrlSupplier externalUrlGetter) { + this.externalUrlGetter = externalUrlGetter; + } + + @Override + public Mono process(ITemplateContext context, IModel model, + IElementModelStructureHandler structureHandler) { + final IModelFactory modelFactory = context.getModelFactory(); + return Mono.just(getTrackerScript(context)) + .filter(StringUtils::isNotBlank) + .map(trackerScript -> { + model.add(modelFactory.createText(trackerScript)); + return trackerScript; + }) + .then(); + } + + private String getTrackerScript(ITemplateContext context) { + String resourceName = (String) context.getVariable("name"); + String externalUrl = externalUrlGetter.get().getPath(); + Object groupVersionKind = context.getVariable("groupVersionKind"); + Object plural = context.getVariable("plural"); + if (groupVersionKind == null || plural == null) { + return StringUtils.EMPTY; + } + if (!(groupVersionKind instanceof GroupVersionKind gvk)) { + return StringUtils.EMPTY; + } + return trackerScript(externalUrl, gvk.group(), (String) plural, resourceName); + } + + private String trackerScript(String externalUrl, String group, String plural, String name) { + String jsSrc = PathUtils.combinePath(externalUrl, "/halo-tracker.js"); + return """ + + """.formatted(jsSrc, group, plural, name); + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/JsonNodePropertyAccessorBoundariesProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/JsonNodePropertyAccessorBoundariesProcessor.java new file mode 100644 index 0000000..0ab86ff --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/JsonNodePropertyAccessorBoundariesProcessor.java @@ -0,0 +1,49 @@ +package run.halo.app.theme.dialect; + +import org.springframework.integration.json.JsonPropertyAccessor; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.ITemplateEnd; +import org.thymeleaf.model.ITemplateStart; +import org.thymeleaf.processor.templateboundaries.AbstractTemplateBoundariesProcessor; +import org.thymeleaf.processor.templateboundaries.ITemplateBoundariesStructureHandler; +import org.thymeleaf.spring6.expression.ThymeleafEvaluationContext; +import org.thymeleaf.standard.StandardDialect; +import org.thymeleaf.templatemode.TemplateMode; +import run.halo.app.theme.ReactivePropertyAccessor; + +/** + * A template boundaries processor for add {@link JsonPropertyAccessor} to + * {@link ThymeleafEvaluationContext}. + * + * @author guqing + * @since 2.0.0 + */ +public class JsonNodePropertyAccessorBoundariesProcessor + extends AbstractTemplateBoundariesProcessor { + private static final int PRECEDENCE = StandardDialect.PROCESSOR_PRECEDENCE; + private static final JsonPropertyAccessor JSON_PROPERTY_ACCESSOR = new JsonPropertyAccessor(); + private static final ReactivePropertyAccessor REACTIVE_PROPERTY_ACCESSOR = + new ReactivePropertyAccessor(); + + public JsonNodePropertyAccessorBoundariesProcessor() { + super(TemplateMode.HTML, PRECEDENCE); + } + + @Override + public void doProcessTemplateStart(ITemplateContext context, ITemplateStart templateStart, + ITemplateBoundariesStructureHandler structureHandler) { + ThymeleafEvaluationContext evaluationContext = + (ThymeleafEvaluationContext) context.getVariable( + ThymeleafEvaluationContext.THYMELEAF_EVALUATION_CONTEXT_CONTEXT_VARIABLE_NAME); + if (evaluationContext != null) { + evaluationContext.addPropertyAccessor(JSON_PROPERTY_ACCESSOR); + evaluationContext.addPropertyAccessor(REACTIVE_PROPERTY_ACCESSOR); + } + } + + @Override + public void doProcessTemplateEnd(ITemplateContext context, ITemplateEnd templateEnd, + ITemplateBoundariesStructureHandler structureHandler) { + // nothing to do + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/LinkExpressionObjectDialect.java b/application/src/main/java/run/halo/app/theme/dialect/LinkExpressionObjectDialect.java new file mode 100644 index 0000000..839c382 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/LinkExpressionObjectDialect.java @@ -0,0 +1,27 @@ +package run.halo.app.theme.dialect; + +import org.thymeleaf.dialect.AbstractDialect; +import org.thymeleaf.dialect.IExpressionObjectDialect; +import org.thymeleaf.expression.IExpressionObjectFactory; + +/** + * An expression object dialect for theme link. + * + * @author guqing + * @since 2.0.0 + */ +public class LinkExpressionObjectDialect extends AbstractDialect implements + IExpressionObjectDialect { + + private static final IExpressionObjectFactory LINK_EXPRESSION_OBJECTS_FACTORY = + new DefaultLinkExpressionFactory(); + + public LinkExpressionObjectDialect() { + super("themeLink"); + } + + @Override + public IExpressionObjectFactory getExpressionObjectFactory() { + return LINK_EXPRESSION_OBJECTS_FACTORY; + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/TemplateFooterElementTagProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/TemplateFooterElementTagProcessor.java new file mode 100644 index 0000000..74239b1 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/TemplateFooterElementTagProcessor.java @@ -0,0 +1,85 @@ +package run.halo.app.theme.dialect; + +import static org.thymeleaf.spring6.context.SpringContextUtils.getApplicationContext; + +import org.springframework.context.ApplicationContext; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.model.IProcessableElementTag; +import org.thymeleaf.processor.element.AbstractElementTagProcessor; +import org.thymeleaf.processor.element.IElementTagStructureHandler; +import org.thymeleaf.spring6.context.SpringContextUtils; +import org.thymeleaf.templatemode.TemplateMode; +import reactor.core.publisher.Flux; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; + +/** + *

Footer element tag processor.

+ *

Replace the footer tag <halo:footer /> with the contents of the footer + * field of the global configuration item.

+ * + * @author guqing + * @since 2.0.0 + */ +public class TemplateFooterElementTagProcessor extends AbstractElementTagProcessor { + + private static final String TAG_NAME = "footer"; + private static final int PRECEDENCE = 1000; + + /** + * Constructor footer element tag processor with HTML mode, dialect prefix, footer tag name. + * + * @param dialectPrefix dialect prefix + */ + public TemplateFooterElementTagProcessor(final String dialectPrefix) { + super( + TemplateMode.HTML, // This processor will apply only to HTML mode + dialectPrefix, // Prefix to be applied to name for matching + TAG_NAME, // Tag name: match specifically this tag + true, // Apply dialect prefix to tag name + null, // No attribute name: will match by tag name + false, // No prefix to be applied to attribute name + PRECEDENCE); // Precedence (inside dialect's own precedence) + } + + @Override + protected void doProcess(ITemplateContext context, IProcessableElementTag tag, + IElementTagStructureHandler structureHandler) { + + IModel modelToInsert = context.getModelFactory().createModel(); + /* + * Obtain the Spring application context. + */ + final ApplicationContext appCtx = SpringContextUtils.getApplicationContext(context); + + String globalFooterText = getGlobalFooterText(appCtx); + modelToInsert.add(context.getModelFactory().createText(globalFooterText)); + + getTemplateFooterProcessors(context) + .concatMap(processor -> processor.process(context, tag, + structureHandler, modelToInsert) + ) + .then() + .block(); + structureHandler.replaceWith(modelToInsert, false); + } + + private String getGlobalFooterText(ApplicationContext appCtx) { + SystemConfigurableEnvironmentFetcher fetcher = + appCtx.getBean(SystemConfigurableEnvironmentFetcher.class); + return fetcher.fetch(SystemSetting.CodeInjection.GROUP, SystemSetting.CodeInjection.class) + .map(SystemSetting.CodeInjection::getFooter) + .block(); + } + + private Flux getTemplateFooterProcessors(ITemplateContext context) { + var extensionGetter = getApplicationContext(context).getBeanProvider(ExtensionGetter.class) + .getIfUnique(); + if (extensionGetter == null) { + return Flux.empty(); + } + return extensionGetter.getExtensions(TemplateFooterProcessor.class); + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/TemplateGlobalHeadProcessor.java b/application/src/main/java/run/halo/app/theme/dialect/TemplateGlobalHeadProcessor.java new file mode 100644 index 0000000..030ac63 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/TemplateGlobalHeadProcessor.java @@ -0,0 +1,63 @@ +package run.halo.app.theme.dialect; + +import org.apache.commons.lang3.StringUtils; +import org.springframework.core.Ordered; +import org.springframework.core.annotation.Order; +import org.springframework.stereotype.Component; +import org.thymeleaf.context.ITemplateContext; +import org.thymeleaf.model.IModel; +import org.thymeleaf.model.IModelFactory; +import org.thymeleaf.processor.element.IElementModelStructureHandler; +import reactor.core.publisher.Mono; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.router.ModelConst; + +/** + *

Global custom head snippet injection for theme global setting.

+ *

Globally injected head snippet can be overridden by content template.

+ * + * @author guqing + * @since 2.0.0 + */ +@Order(Ordered.HIGHEST_PRECEDENCE + 2) +@Component +public class TemplateGlobalHeadProcessor implements TemplateHeadProcessor { + + private final SystemConfigurableEnvironmentFetcher fetcher; + + public TemplateGlobalHeadProcessor(SystemConfigurableEnvironmentFetcher fetcher) { + this.fetcher = fetcher; + } + + @Override + public Mono process(ITemplateContext context, IModel model, + IElementModelStructureHandler structureHandler) { + final IModelFactory modelFactory = context.getModelFactory(); + return fetchCodeInjection() + .doOnNext(codeInjection -> { + String globalHeader = codeInjection.getGlobalHead(); + if (StringUtils.isNotBlank(globalHeader)) { + model.add(modelFactory.createText(globalHeader + "\n")); + } + + // add content head to model + String contentHeader = codeInjection.getContentHead(); + if (StringUtils.isNotBlank(contentHeader) && isContentTemplate(context)) { + model.add(modelFactory.createText(contentHeader + "\n")); + } + }) + .then(); + } + + private Mono fetchCodeInjection() { + return fetcher.fetch(SystemSetting.CodeInjection.GROUP, SystemSetting.CodeInjection.class); + } + + private boolean isContentTemplate(ITemplateContext context) { + String templateId = (String) context.getVariable(ModelConst.TEMPLATE_ID); + return DefaultTemplateEnum.POST.getValue().equals(templateId) + || DefaultTemplateEnum.SINGLE_PAGE.getValue().equals(templateId); + } +} diff --git a/application/src/main/java/run/halo/app/theme/dialect/expression/Annotations.java b/application/src/main/java/run/halo/app/theme/dialect/expression/Annotations.java new file mode 100644 index 0000000..f78b36b --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/dialect/expression/Annotations.java @@ -0,0 +1,65 @@ +package run.halo.app.theme.dialect.expression; + +import java.util.Map; +import org.springframework.lang.NonNull; +import org.springframework.lang.Nullable; +import run.halo.app.theme.finders.vo.ExtensionVoOperator; + +/** + *

Expression Object for performing annotations operations inside Halo Extra Expressions.

+ * An object of this class is usually available in variable evaluation expressions with the name + * #annotations. + * + * @author guqing + * @since 2.0.2 + */ +public class Annotations { + + /** + * Get annotation value from extension vo. + * + * @param extension extension vo + * @param key the key of annotation + * @return annotation value if exists, otherwise null + */ + @Nullable + public String get(ExtensionVoOperator extension, String key) { + Map annotations = extension.getMetadata().getAnnotations(); + if (annotations == null) { + return null; + } + return annotations.get(key); + } + + /** + * Returns the value to which the specified key is mapped, or defaultValue if + * extension contains no mapping for the key. + * + * @param extension extension vo + * @param key the key of annotation + * @return annotation value if exists, otherwise defaultValue + */ + @NonNull + public String getOrDefault(ExtensionVoOperator extension, String key, String defaultValue) { + Map annotations = extension.getMetadata().getAnnotations(); + if (annotations == null) { + return defaultValue; + } + return annotations.getOrDefault(key, defaultValue); + } + + /** + * Check if the extension has the specified annotation. + * + * @param extension extension vo + * @param key the key of annotation + * @return true if the extension has the specified annotation, otherwise false + */ + public boolean contains(ExtensionVoOperator extension, String key) { + Map annotations = extension.getMetadata().getAnnotations(); + if (annotations == null) { + return false; + } + return annotations.containsKey(key); + } +} diff --git a/application/src/main/java/run/halo/app/theme/endpoint/CategoryQueryEndpoint.java b/application/src/main/java/run/halo/app/theme/endpoint/CategoryQueryEndpoint.java new file mode 100644 index 0000000..1183211 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/CategoryQueryEndpoint.java @@ -0,0 +1,139 @@ +package run.halo.app.theme.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static run.halo.app.theme.endpoint.PublicApiUtils.toAnotherListResult; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import lombok.RequiredArgsConstructor; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.SortableRequest; +import run.halo.app.theme.finders.PostPublicQueryService; +import run.halo.app.theme.finders.vo.CategoryVo; +import run.halo.app.theme.finders.vo.ListedPostVo; + +/** + * Endpoint for category query APIs. + * + * @author guqing + * @since 2.5.0 + */ +@Component +@RequiredArgsConstructor +public class CategoryQueryEndpoint implements CustomEndpoint { + + private final ReactiveExtensionClient client; + private final PostPublicQueryService postPublicQueryService; + + @Override + public RouterFunction endpoint() { + final var tag = "CategoryV1alpha1Public"; + return SpringdocRouteBuilder.route() + .GET("categories", this::listCategories, + builder -> { + builder.operationId("queryCategories") + .description("Lists categories.") + .tag(tag) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(CategoryVo.class)) + ); + CategoryPublicQuery.buildParameters(builder); + } + ) + .GET("categories/{name}", this::getByName, + builder -> builder.operationId("queryCategoryByName") + .description("Gets category by name.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Category name") + .required(true) + ) + .response(responseBuilder() + .implementation(CategoryVo.class) + ) + ) + .GET("categories/{name}/posts", this::listPostsByCategoryName, + builder -> { + builder.operationId("queryPostsByCategoryName") + .description("Lists posts by category name.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Category name") + .required(true) + ) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(ListedPostVo.class)) + ); + PostPublicQuery.buildParameters(builder); + } + ) + .build(); + } + + private Mono listPostsByCategoryName(ServerRequest request) { + final var name = request.pathVariable("name"); + final var query = new PostPublicQuery(request.exchange()); + var listOptions = query.toListOptions(); + var newFieldSelector = listOptions.getFieldSelector() + .andQuery(QueryFactory.equal("spec.categories", name)); + listOptions.setFieldSelector(newFieldSelector); + return postPublicQueryService.list(listOptions, query.toPageRequest()) + .flatMap(result -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(result) + ); + } + + private Mono getByName(ServerRequest request) { + String name = request.pathVariable("name"); + return client.get(Category.class, name) + .map(CategoryVo::from) + .flatMap(categoryVo -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(categoryVo) + ); + } + + private Mono listCategories(ServerRequest request) { + CategoryPublicQuery query = new CategoryPublicQuery(request.exchange()); + return client.listBy(Category.class, query.toListOptions(), query.toPageRequest()) + .map(listResult -> toAnotherListResult(listResult, CategoryVo::from)) + .flatMap(result -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(result) + ); + } + + public static class CategoryPublicQuery extends SortableRequest { + public CategoryPublicQuery(ServerWebExchange exchange) { + super(exchange); + } + + public static void buildParameters(Builder builder) { + SortableRequest.buildParameters(builder); + } + } + + @Override + public GroupVersion groupVersion() { + return PublicApiUtils.groupVersion(new Category()); + } +} diff --git a/application/src/main/java/run/halo/app/theme/endpoint/CommentFinderEndpoint.java b/application/src/main/java/run/halo/app/theme/endpoint/CommentFinderEndpoint.java new file mode 100644 index 0000000..edfd4c4 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/CommentFinderEndpoint.java @@ -0,0 +1,408 @@ +package run.halo.app.theme.endpoint; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.apache.commons.lang3.BooleanUtils.isFalse; +import static org.apache.commons.lang3.BooleanUtils.isTrue; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.content.Builder.contentBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; +import static org.springdoc.core.fn.builders.schema.Builder.schemaBuilder; +import static run.halo.app.extension.router.QueryParamBuildUtil.sortParameter; + +import com.fasterxml.jackson.annotation.JsonIgnore; +import io.github.resilience4j.ratelimiter.RateLimiterRegistry; +import io.github.resilience4j.ratelimiter.RequestNotPermitted; +import io.github.resilience4j.reactor.ratelimiter.operator.RateLimiterOperator; +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.ArraySchema; +import io.swagger.v3.oas.annotations.media.Schema; +import java.util.List; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.data.domain.Sort; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.util.MultiValueMap; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Schedulers; +import run.halo.app.content.comment.CommentRequest; +import run.halo.app.content.comment.CommentService; +import run.halo.app.content.comment.ReplyRequest; +import run.halo.app.content.comment.ReplyService; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.core.extension.endpoint.SortResolver; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.Ref; +import run.halo.app.extension.router.IListRequest; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.exception.AccessDeniedException; +import run.halo.app.infra.exception.RateLimitExceededException; +import run.halo.app.infra.utils.HaloUtils; +import run.halo.app.infra.utils.IpAddressUtils; +import run.halo.app.theme.finders.CommentFinder; +import run.halo.app.theme.finders.CommentPublicQueryService; +import run.halo.app.theme.finders.vo.CommentVo; +import run.halo.app.theme.finders.vo.CommentWithReplyVo; +import run.halo.app.theme.finders.vo.ReplyVo; + +/** + * Endpoint for {@link CommentFinder}. + */ +@Component +@RequiredArgsConstructor +public class CommentFinderEndpoint implements CustomEndpoint { + + private final CommentPublicQueryService commentPublicQueryService; + private final CommentService commentService; + private final ReplyService replyService; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final RateLimiterRegistry rateLimiterRegistry; + + @Override + public RouterFunction endpoint() { + final var tag = "CommentV1alpha1Public"; + return SpringdocRouteBuilder.route() + .POST("comments", this::createComment, + builder -> builder.operationId("CreateComment") + .description("Create a comment.") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(schemaBuilder() + .implementation(CommentRequest.class)) + )) + .response(responseBuilder() + .implementation(Comment.class)) + ) + .POST("comments/{name}/reply", this::createReply, + builder -> builder.operationId("CreateReply") + .description("Create a reply.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .requestBody(requestBodyBuilder() + .required(true) + .content(contentBuilder() + .mediaType(MediaType.APPLICATION_JSON_VALUE) + .schema(schemaBuilder() + .implementation(ReplyRequest.class)) + )) + .response(responseBuilder() + .implementation(Reply.class)) + ) + .GET("comments", this::listComments, builder -> { + builder.operationId("ListComments") + .description("List comments.") + .tag(tag) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(CommentWithReplyVo.class)) + ); + CommentQuery.buildParameters(builder); + }) + .GET("comments/{name}", this::getComment, builder -> { + builder.operationId("GetComment") + .description("Get a comment.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(CommentVo.class)) + ); + }) + .GET("comments/{name}/reply", this::listCommentReplies, builder -> { + builder.operationId("ListCommentReplies") + .description("List comment replies.") + .tag(tag) + .parameter(parameterBuilder().name("name") + .in(ParameterIn.PATH) + .required(true) + .implementation(String.class)) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(ReplyVo.class)) + ); + PageableRequest.buildParameters(builder); + }) + .build(); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("api.halo.run/v1alpha1"); + } + + Mono createComment(ServerRequest request) { + return request.bodyToMono(CommentRequest.class) + .flatMap(commentRequest -> { + Comment comment = commentRequest.toComment(); + comment.getSpec().setIpAddress(IpAddressUtils.getIpAddress(request)); + comment.getSpec().setUserAgent(HaloUtils.userAgentFrom(request)); + return commentService.create(comment); + }) + .flatMap(comment -> ServerResponse.ok().bodyValue(comment)) + .transformDeferred(createIpBasedRateLimiter(request)) + .onErrorMap(RequestNotPermitted.class, RateLimitExceededException::new); + } + + private RateLimiterOperator createIpBasedRateLimiter(ServerRequest request) { + var clientIp = IpAddressUtils.getIpAddress(request); + var rateLimiter = rateLimiterRegistry.rateLimiter("comment-creation-from-ip-" + clientIp, + "comment-creation"); + return RateLimiterOperator.of(rateLimiter); + } + + Mono createReply(ServerRequest request) { + String commentName = request.pathVariable("name"); + return request.bodyToMono(ReplyRequest.class) + .flatMap(replyRequest -> { + Reply reply = replyRequest.toReply(); + reply.getSpec().setIpAddress(IpAddressUtils.getIpAddress(request)); + reply.getSpec().setUserAgent(HaloUtils.userAgentFrom(request)); + // fix gh-2951 + reply.getSpec().setHidden(false); + return environmentFetcher.fetchComment() + .map(commentSetting -> { + if (isFalse(commentSetting.getEnable())) { + throw new AccessDeniedException( + "The comment function has been turned off.", + "problemDetail.comment.turnedOff", null); + } + if (checkReplyOwner(reply, commentSetting.getSystemUserOnly())) { + throw new AccessDeniedException("Allow only system users to comment.", + "problemDetail.comment.systemUsersOnly", null); + } + reply.getSpec() + .setApproved(isFalse(commentSetting.getRequireReviewForNew())); + return reply; + }) + .defaultIfEmpty(reply); + }) + .flatMap(reply -> replyService.create(commentName, reply)) + .flatMap(comment -> ServerResponse.ok().bodyValue(comment)) + .transformDeferred(createIpBasedRateLimiter(request)) + .onErrorMap(RequestNotPermitted.class, RateLimitExceededException::new); + } + + private boolean checkReplyOwner(Reply reply, Boolean onlySystemUser) { + Comment.CommentOwner owner = reply.getSpec().getOwner(); + if (isTrue(onlySystemUser)) { + return owner != null && Comment.CommentOwner.KIND_EMAIL.equals(owner.getKind()); + } + return false; + } + + Mono listComments(ServerRequest request) { + CommentQuery commentQuery = new CommentQuery(request); + return commentPublicQueryService.list(commentQuery.toRef(), commentQuery.toPageRequest()) + .flatMap(result -> { + if (commentQuery.getWithReplies()) { + return commentPublicQueryService.convertToWithReplyVo(result, + commentQuery.getReplySize()); + } + return Mono.just(result); + }) + .flatMap(list -> ServerResponse.ok().bodyValue(list)); + } + + Mono getComment(ServerRequest request) { + String name = request.pathVariable("name"); + return Mono.defer(() -> Mono.justOrEmpty(commentPublicQueryService.getByName(name))) + .subscribeOn(Schedulers.boundedElastic()) + .flatMap(comment -> ServerResponse.ok().bodyValue(comment)); + } + + Mono listCommentReplies(ServerRequest request) { + String commentName = request.pathVariable("name"); + IListRequest.QueryListRequest queryParams = + new IListRequest.QueryListRequest(request.queryParams()); + return commentPublicQueryService.listReply(commentName, queryParams.getPage(), + queryParams.getSize()) + .flatMap(list -> ServerResponse.ok().bodyValue(list)); + } + + public static class CommentQuery extends PageableRequest { + + private final ServerWebExchange exchange; + + public CommentQuery(ServerRequest request) { + super(request.queryParams()); + this.exchange = request.exchange(); + } + + @Schema(description = "The comment subject group.") + public String getGroup() { + return queryParams.getFirst("group"); + } + + @Schema(requiredMode = REQUIRED, description = "The comment subject version.") + public String getVersion() { + return emptyToNull(queryParams.getFirst("version")); + } + + /** + * Gets the {@link Ref}s kind. + * + * @return comment subject ref kind + */ + @Schema(requiredMode = REQUIRED, description = "The comment subject kind.") + public String getKind() { + String kind = emptyToNull(queryParams.getFirst("kind")); + if (kind == null) { + throw new ServerWebInputException("The kind must not be null."); + } + return kind; + } + + /** + * Gets the {@link Ref}s name. + * + * @return comment subject ref name + */ + @Schema(requiredMode = REQUIRED, description = "The comment subject name.") + public String getName() { + String name = emptyToNull(queryParams.getFirst("name")); + if (name == null) { + throw new ServerWebInputException("The name must not be null."); + } + return name; + } + + @Schema(description = "Whether to include replies. Default is false.", + defaultValue = "false") + public Boolean getWithReplies() { + var withReplies = queryParams.getFirst("withReplies"); + return StringUtils.isNotBlank(withReplies) && Boolean.parseBoolean(withReplies); + } + + @Schema(description = "Reply size of the comment, default is 10, only works when " + + "withReplies is true.", defaultValue = "10") + public int getReplySize() { + var replySize = queryParams.getFirst("replySize"); + return StringUtils.isNotBlank(replySize) ? Integer.parseInt(replySize) : 10; + } + + @ArraySchema(uniqueItems = true, + arraySchema = @Schema(name = "sort", + description = "Sort property and direction of the list result. Supported fields: " + + "creationTimestamp"), + schema = @Schema(description = "like field,asc or field,desc", + implementation = String.class, + example = "creationTimestamp,desc")) + public Sort getSort() { + return SortResolver.defaultInstance.resolve(exchange); + } + + Ref toRef() { + Ref ref = new Ref(); + ref.setGroup(getGroup()); + ref.setKind(getKind()); + ref.setVersion(getVersion()); + ref.setName(getName()); + return ref; + } + + public PageRequest toPageRequest() { + return PageRequestImpl.of(getPage(), getSize(), getSort()); + } + + String emptyToNull(String str) { + return StringUtils.isBlank(str) ? null : str; + } + + public static void buildParameters(Builder builder) { + PageableRequest.buildParameters(builder); + builder.parameter(sortParameter()) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("group") + .description("The comment subject group.") + .required(false) + .implementation(String.class)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("version") + .description("The comment subject version.") + .required(true) + .implementation(String.class)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("kind") + .description("The comment subject kind.") + .required(true)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("name") + .description("The comment subject name.") + .required(true) + .implementation(String.class)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("withReplies") + .description("Whether to include replies. Default is false.") + .required(false) + .implementation(Boolean.class)) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("replySize") + .description("Reply size of the comment, default is 10, only works when " + + "withReplies is true.") + .required(false) + .schema(schemaBuilder() + .implementation(Integer.class) + .defaultValue("10"))); + } + } + + public static class PageableRequest extends IListRequest.QueryListRequest { + + public PageableRequest(MultiValueMap queryParams) { + super(queryParams); + } + + @Override + @JsonIgnore + public List getLabelSelector() { + throw new UnsupportedOperationException("Unsupported this parameter"); + } + + @Override + @JsonIgnore + public List getFieldSelector() { + throw new UnsupportedOperationException("Unsupported this parameter"); + } + + public static void buildParameters(Builder builder) { + builder.parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("page") + .implementation(Integer.class) + .required(false) + .description("Page number. Default is 0.")) + .parameter(parameterBuilder() + .in(ParameterIn.QUERY) + .name("size") + .implementation(Integer.class) + .required(false) + .description("Size number. Default is 0.")); + } + + } +} diff --git a/application/src/main/java/run/halo/app/theme/endpoint/MenuQueryEndpoint.java b/application/src/main/java/run/halo/app/theme/endpoint/MenuQueryEndpoint.java new file mode 100644 index 0000000..b43eff0 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/MenuQueryEndpoint.java @@ -0,0 +1,92 @@ +package run.halo.app.theme.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import lombok.RequiredArgsConstructor; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Menu; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.theme.finders.MenuFinder; +import run.halo.app.theme.finders.vo.MenuVo; + +/** + * Endpoint for menu query APIs. + * + * @author guqing + * @since 2.5.0 + */ +@Component +@RequiredArgsConstructor +public class MenuQueryEndpoint implements CustomEndpoint { + + private final MenuFinder menuFinder; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + @Override + public RouterFunction endpoint() { + final var tag = "MenuV1alpha1Public"; + return SpringdocRouteBuilder.route() + .GET("menus/-", this::getByName, + builder -> builder.operationId("queryPrimaryMenu") + .description("Gets primary menu.") + .tag(tag) + .response(responseBuilder() + .implementation(MenuVo.class) + ) + ) + .GET("menus/{name}", this::getByName, + builder -> builder.operationId("queryMenuByName") + .description("Gets menu by name.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Menu name") + .required(true) + ) + .response(responseBuilder() + .implementation(MenuVo.class) + ) + ) + .build(); + } + + private Mono getByName(ServerRequest request) { + return determineMenuName(request) + .flatMap(menuFinder::getByName) + .flatMap(menuVo -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(menuVo) + ); + } + + private Mono determineMenuName(ServerRequest request) { + String name = request.pathVariables().getOrDefault("name", "-"); + if (!"-".equals(name)) { + return Mono.just(name); + } + // If name is "-", then get primary menu. + return environmentFetcher.fetch(SystemSetting.Menu.GROUP, SystemSetting.Menu.class) + .mapNotNull(SystemSetting.Menu::getPrimary) + .switchIfEmpty( + Mono.error(() -> new ServerWebInputException("Primary menu is not configured.")) + ); + } + + @Override + public GroupVersion groupVersion() { + return PublicApiUtils.groupVersion(new Menu()); + } +} diff --git a/application/src/main/java/run/halo/app/theme/endpoint/PluginQueryEndpoint.java b/application/src/main/java/run/halo/app/theme/endpoint/PluginQueryEndpoint.java new file mode 100644 index 0000000..2de3024 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/PluginQueryEndpoint.java @@ -0,0 +1,62 @@ +package run.halo.app.theme.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import lombok.RequiredArgsConstructor; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Plugin; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.theme.finders.PluginFinder; + +/** + * Endpoint for plugin query APIs. + * + * @author guqing + * @since 2.5.0 + */ +@Component +@RequiredArgsConstructor +public class PluginQueryEndpoint implements CustomEndpoint { + + private final PluginFinder pluginFinder; + + @Override + public RouterFunction endpoint() { + final var tag = "PluginV1alpha1Public"; + return SpringdocRouteBuilder.route() + .GET("plugins/{name}/available", this::availableByName, + builder -> builder.operationId("queryPluginAvailableByName") + .description("Gets plugin available by name.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Plugin name") + .required(true) + ) + .response(responseBuilder() + .implementation(Boolean.class) + ) + ) + .build(); + } + + private Mono availableByName(ServerRequest request) { + String name = request.pathVariable("name"); + boolean available = pluginFinder.available(name); + return ServerResponse.ok().bodyValue(available); + } + + @Override + public GroupVersion groupVersion() { + return PublicApiUtils.groupVersion(new Plugin()); + } +} \ No newline at end of file diff --git a/application/src/main/java/run/halo/app/theme/endpoint/PostPublicQuery.java b/application/src/main/java/run/halo/app/theme/endpoint/PostPublicQuery.java new file mode 100644 index 0000000..c880186 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/PostPublicQuery.java @@ -0,0 +1,22 @@ +package run.halo.app.theme.endpoint; + +import org.springdoc.core.fn.builders.operation.Builder; +import org.springframework.web.server.ServerWebExchange; +import run.halo.app.extension.router.SortableRequest; + +/** + * Query parameters for post public APIs. + * + * @author guqing + * @since 2.5.0 + */ +public class PostPublicQuery extends SortableRequest { + + public PostPublicQuery(ServerWebExchange exchange) { + super(exchange); + } + + public static void buildParameters(Builder builder) { + SortableRequest.buildParameters(builder); + } +} \ No newline at end of file diff --git a/application/src/main/java/run/halo/app/theme/endpoint/PostQueryEndpoint.java b/application/src/main/java/run/halo/app/theme/endpoint/PostQueryEndpoint.java new file mode 100644 index 0000000..9136eea --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/PostQueryEndpoint.java @@ -0,0 +1,119 @@ +package run.halo.app.theme.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import lombok.RequiredArgsConstructor; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ListResult; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.theme.finders.PostFinder; +import run.halo.app.theme.finders.PostPublicQueryService; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.finders.vo.NavigationPostVo; +import run.halo.app.theme.finders.vo.PostVo; + +/** + * Endpoint for post query. + * + * @author guqing + * @since 2.5.0 + */ +@Component +@RequiredArgsConstructor +public class PostQueryEndpoint implements CustomEndpoint { + + private final PostFinder postFinder; + private final PostPublicQueryService postPublicQueryService; + + @Override + public RouterFunction endpoint() { + var tag = "PostV1alpha1Public"; + return SpringdocRouteBuilder.route() + .GET("posts", this::listPosts, + builder -> { + builder.operationId("queryPosts") + .description("Lists posts.") + .tag(tag) + .response(responseBuilder() + .implementation(ListResult.generateGenericClass(ListedPostVo.class)) + ); + PostPublicQuery.buildParameters(builder); + } + ) + .GET("posts/{name}", this::getPostByName, + builder -> builder.operationId("queryPostByName") + .description("Gets a post by name.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Post name") + .required(true) + ) + .response(responseBuilder() + .implementation(PostVo.class) + ) + ) + .GET("posts/{name}/navigation", this::getPostNavigationByName, + builder -> builder.operationId("queryPostNavigationByName") + .description("Gets a post navigation by name.") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Post name") + .required(true) + ) + .response(responseBuilder() + .implementation(NavigationPostVo.class) + ) + ) + .build(); + } + + private Mono getPostNavigationByName(ServerRequest request) { + final var name = request.pathVariable("name"); + return postFinder.cursor(name) + .doOnNext(result -> { + if (result.getCurrent() == null) { + throw new NotFoundException("Post not found"); + } + }) + .flatMap(result -> ServerResponse.ok().contentType(MediaType.APPLICATION_JSON) + .bodyValue(result) + ); + } + + private Mono getPostByName(ServerRequest request) { + final var name = request.pathVariable("name"); + return postFinder.getByName(name) + .switchIfEmpty(Mono.error(() -> new NotFoundException("Post not found"))) + .flatMap(post -> ServerResponse.ok().contentType(MediaType.APPLICATION_JSON) + .bodyValue(post) + ); + } + + private Mono listPosts(ServerRequest request) { + PostPublicQuery query = new PostPublicQuery(request.exchange()); + return postPublicQueryService.list(query.toListOptions(), query.toPageRequest()) + .flatMap(result -> ServerResponse.ok().contentType(MediaType.APPLICATION_JSON) + .bodyValue(result) + ); + } + + @Override + public GroupVersion groupVersion() { + return PublicApiUtils.groupVersion(new Post()); + } +} \ No newline at end of file diff --git a/application/src/main/java/run/halo/app/theme/endpoint/PublicApiUtils.java b/application/src/main/java/run/halo/app/theme/endpoint/PublicApiUtils.java new file mode 100644 index 0000000..142b720 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/PublicApiUtils.java @@ -0,0 +1,70 @@ +package run.halo.app.theme.endpoint; + +import java.util.Collection; +import java.util.List; +import java.util.function.Function; +import lombok.experimental.UtilityClass; +import org.apache.commons.lang3.StringUtils; +import org.springframework.lang.Nullable; +import org.springframework.util.Assert; +import run.halo.app.extension.Extension; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.GroupVersionKind; +import run.halo.app.extension.ListResult; + +/** + * Utility class for public api. + * + * @author guqing + * @since 2.5.0 + */ +@UtilityClass +public class PublicApiUtils { + + /** + * Get group version from extension for public api. + * + * @param extension extension + * @return api.{group}/{version} if group is not empty, + * otherwise api.halo.run/{version}. + */ + public static GroupVersion groupVersion(Extension extension) { + GroupVersionKind groupVersionKind = extension.groupVersionKind(); + String group = StringUtils.defaultIfBlank(groupVersionKind.group(), "halo.run"); + return new GroupVersion("api." + group, groupVersionKind.version()); + } + + /** + * Converts list result to another list result. + * + * @param listResult list result to be converted + * @param mapper mapper function to convert item + * @param item type + * @param converted item type + * @return converted list result + */ + public static ListResult toAnotherListResult(ListResult listResult, + Function mapper) { + Assert.notNull(listResult, "List result must not be null"); + Assert.notNull(mapper, "The mapper must not be null"); + List mappedItems = listResult.get() + .map(mapper) + .toList(); + return new ListResult<>(listResult.getPage(), listResult.getSize(), listResult.getTotal(), + mappedItems); + } + + /** + * Checks whether collection contains element. + * + * @param element type + * @return true if collection contains element, otherwise false. + */ + public static boolean containsElement(@Nullable Collection collection, + @Nullable T element) { + if (collection != null && element != null) { + return collection.contains(element); + } + return false; + } +} diff --git a/application/src/main/java/run/halo/app/theme/endpoint/PublicUserEndpoint.java b/application/src/main/java/run/halo/app/theme/endpoint/PublicUserEndpoint.java new file mode 100644 index 0000000..9ebd7b2 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/PublicUserEndpoint.java @@ -0,0 +1,285 @@ +package run.halo.app.theme.endpoint; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; +import static org.springdoc.core.fn.builders.requestbody.Builder.requestBodyBuilder; + +import io.github.resilience4j.ratelimiter.RateLimiterRegistry; +import io.github.resilience4j.ratelimiter.RequestNotPermitted; +import io.github.resilience4j.reactor.ratelimiter.operator.RateLimiterOperator; +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.HttpStatus; +import org.springframework.http.MediaType; +import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; +import org.springframework.security.core.context.SecurityContextImpl; +import org.springframework.security.core.userdetails.ReactiveUserDetailsService; +import org.springframework.security.web.server.context.ServerSecurityContextRepository; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.ServerWebInputException; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.core.extension.service.EmailPasswordRecoveryService; +import run.halo.app.core.extension.service.EmailVerificationService; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.GroupVersion; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.ValidationUtils; +import run.halo.app.infra.exception.AccessDeniedException; +import run.halo.app.infra.exception.EmailVerificationFailed; +import run.halo.app.infra.exception.RateLimitExceededException; +import run.halo.app.infra.utils.IpAddressUtils; + +/** + * User endpoint for unauthenticated user. + * + * @author guqing + * @since 2.4.0 + */ +@Component +@RequiredArgsConstructor +public class PublicUserEndpoint implements CustomEndpoint { + private final UserService userService; + private final ServerSecurityContextRepository securityContextRepository; + private final ReactiveUserDetailsService reactiveUserDetailsService; + private final EmailPasswordRecoveryService emailPasswordRecoveryService; + private final RateLimiterRegistry rateLimiterRegistry; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final EmailVerificationService emailVerificationService; + + @Override + public RouterFunction endpoint() { + var tag = "UserV1alpha1Public"; + return SpringdocRouteBuilder.route() + .POST("/users/-/signup", this::signUp, + builder -> builder.operationId("SignUp") + .description("Sign up a new user") + .tag(tag) + .requestBody(requestBodyBuilder().required(true) + .implementation(SignUpRequest.class) + ) + .response(responseBuilder().implementation(User.class)) + ) + .POST("/users/-/send-register-verify-email", this::sendRegisterVerifyEmail, + builder -> builder.operationId("SendRegisterVerifyEmail") + .description( + "Send registration verification email, which can be called when " + + "mustVerifyEmailOnRegistration in user settings is true" + ) + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .implementation(RegisterVerifyEmailRequest.class) + ) + .response(responseBuilder() + .responseCode(HttpStatus.NO_CONTENT.toString()) + .implementation(Void.class) + ) + ) + .POST("/users/-/send-password-reset-email", this::sendPasswordResetEmail, + builder -> builder.operationId("SendPasswordResetEmail") + .description("Send password reset email when forgot password") + .tag(tag) + .requestBody(requestBodyBuilder() + .required(true) + .implementation(PasswordResetEmailRequest.class) + ) + .response(responseBuilder() + .responseCode(HttpStatus.NO_CONTENT.toString()) + .implementation(Void.class)) + ) + .PUT("/users/{name}/reset-password", this::resetPasswordByToken, + builder -> builder.operationId("ResetPasswordByToken") + .description("Reset password by token") + .tag(tag) + .parameter(parameterBuilder() + .name("name") + .description("The name of the user") + .required(true) + .in(ParameterIn.PATH) + ) + .requestBody(requestBodyBuilder() + .required(true) + .implementation(ResetPasswordRequest.class) + ) + .response(responseBuilder() + .responseCode(HttpStatus.NO_CONTENT.toString()) + .implementation(Void.class) + ) + ) + .build(); + } + + private Mono resetPasswordByToken(ServerRequest request) { + var username = request.pathVariable("name"); + return request.bodyToMono(ResetPasswordRequest.class) + .doOnNext(resetReq -> { + if (StringUtils.isBlank(resetReq.token())) { + throw new ServerWebInputException("Token must not be blank"); + } + if (StringUtils.isBlank(resetReq.newPassword())) { + throw new ServerWebInputException("New password must not be blank"); + } + }) + .switchIfEmpty( + Mono.error(() -> new ServerWebInputException("Request body must not be empty")) + ) + .flatMap(resetReq -> { + var token = resetReq.token(); + var newPassword = resetReq.newPassword(); + return emailPasswordRecoveryService.changePassword(username, newPassword, token); + }) + .then(ServerResponse.noContent().build()); + } + + record PasswordResetEmailRequest(@Schema(requiredMode = REQUIRED) String username, + @Schema(requiredMode = REQUIRED) String email) { + } + + record ResetPasswordRequest(@Schema(requiredMode = REQUIRED, minLength = 6) String newPassword, + @Schema(requiredMode = REQUIRED) String token) { + } + + record RegisterVerifyEmailRequest(@Schema(requiredMode = REQUIRED) String email) { + } + + private Mono sendPasswordResetEmail(ServerRequest request) { + return request.bodyToMono(PasswordResetEmailRequest.class) + .flatMap(passwordResetRequest -> { + var username = passwordResetRequest.username(); + var email = passwordResetRequest.email(); + return Mono.just(passwordResetRequest) + .transformDeferred(sendResetPasswordEmailRateLimiter(username, email)) + .flatMap( + r -> emailPasswordRecoveryService.sendPasswordResetEmail(username, email)) + .onErrorMap(RequestNotPermitted.class, RateLimitExceededException::new); + }) + .then(ServerResponse.noContent().build()); + } + + RateLimiterOperator sendResetPasswordEmailRateLimiter(String username, String email) { + String rateLimiterKey = "send-reset-password-email-" + username + ":" + email; + var rateLimiter = + rateLimiterRegistry.rateLimiter(rateLimiterKey, "send-reset-password-email"); + return RateLimiterOperator.of(rateLimiter); + } + + @Override + public GroupVersion groupVersion() { + return GroupVersion.parseAPIVersion("api.halo.run/v1alpha1"); + } + + private Mono signUp(ServerRequest request) { + return request.bodyToMono(SignUpRequest.class) + .doOnNext(signUpRequest -> signUpRequest.user().getSpec().setEmailVerified(false)) + .flatMap(signUpRequest -> environmentFetcher.fetch(SystemSetting.User.GROUP, + SystemSetting.User.class) + .map(user -> BooleanUtils.isTrue(user.getMustVerifyEmailOnRegistration())) + .defaultIfEmpty(false) + .flatMap(mustVerifyEmailOnRegistration -> { + if (!mustVerifyEmailOnRegistration) { + return Mono.just(signUpRequest); + } + if (!StringUtils.isNumeric(signUpRequest.verifyCode)) { + return Mono.error(new EmailVerificationFailed()); + } + return emailVerificationService.verifyRegisterVerificationCode( + signUpRequest.user().getSpec().getEmail(), + signUpRequest.verifyCode) + .flatMap(verified -> { + if (BooleanUtils.isNotTrue(verified)) { + return Mono.error(new EmailVerificationFailed()); + } + signUpRequest.user().getSpec().setEmailVerified(true); + return Mono.just(signUpRequest); + }); + }) + ) + .flatMap(signUpRequest -> + userService.signUp(signUpRequest.user(), signUpRequest.password()) + ) + .flatMap(user -> authenticate(user.getMetadata().getName(), request.exchange()) + .thenReturn(user) + ) + .flatMap(user -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(user) + ) + .transformDeferred(getRateLimiterForSignUp(request.exchange())) + .onErrorMap(RequestNotPermitted.class, RateLimitExceededException::new); + } + + private Mono sendRegisterVerifyEmail(ServerRequest request) { + return request.bodyToMono(RegisterVerifyEmailRequest.class) + .switchIfEmpty(Mono.error( + () -> new ServerWebInputException("Required request body is missing.")) + ) + .map(emailReq -> { + var email = emailReq.email(); + if (!ValidationUtils.isValidEmail(email)) { + throw new ServerWebInputException("Invalid email address."); + } + return email; + }) + .flatMap(email -> environmentFetcher.fetch(SystemSetting.User.GROUP, + SystemSetting.User.class) + .map(config -> BooleanUtils.isTrue(config.getMustVerifyEmailOnRegistration())) + .defaultIfEmpty(false) + .doOnNext(mustVerifyEmailOnRegistration -> { + if (!mustVerifyEmailOnRegistration) { + throw new AccessDeniedException("Email verification is not required."); + } + }) + .transformDeferred(sendRegisterEmailVerificationCodeRateLimiter(email)) + .flatMap(s -> emailVerificationService.sendRegisterVerificationCode(email) + .onErrorMap(RequestNotPermitted.class, RateLimitExceededException::new)) + .onErrorMap(RequestNotPermitted.class, RateLimitExceededException::new) + ) + .then(ServerResponse.ok().build()); + } + + private RateLimiterOperator getRateLimiterForSignUp(ServerWebExchange exchange) { + var clientIp = IpAddressUtils.getClientIp(exchange.getRequest()); + var rateLimiter = rateLimiterRegistry.rateLimiter("signup-from-ip-" + clientIp, + "signup"); + return RateLimiterOperator.of(rateLimiter); + } + + private Mono authenticate(String username, ServerWebExchange exchange) { + return reactiveUserDetailsService.findByUsername(username) + .flatMap(userDetails -> { + SecurityContextImpl securityContext = new SecurityContextImpl(); + UsernamePasswordAuthenticationToken authentication = + new UsernamePasswordAuthenticationToken(userDetails.getUsername(), + userDetails.getPassword(), userDetails.getAuthorities()); + securityContext.setAuthentication(authentication); + return securityContextRepository.save(exchange, securityContext); + }); + } + + private RateLimiterOperator sendRegisterEmailVerificationCodeRateLimiter(String email) { + String rateLimiterKey = "send-register-verify-email:" + email; + var rateLimiter = + rateLimiterRegistry.rateLimiter(rateLimiterKey, "send-email-verification-code"); + return RateLimiterOperator.of(rateLimiter); + } + + record SignUpRequest(@Schema(requiredMode = REQUIRED) User user, + @Schema(requiredMode = REQUIRED, minLength = 6) String password, + @Schema(requiredMode = NOT_REQUIRED, minLength = 6, maxLength = 6) + String verifyCode + ) { + } +} diff --git a/application/src/main/java/run/halo/app/theme/endpoint/SinglePageQueryEndpoint.java b/application/src/main/java/run/halo/app/theme/endpoint/SinglePageQueryEndpoint.java new file mode 100644 index 0000000..e66ace4 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/SinglePageQueryEndpoint.java @@ -0,0 +1,108 @@ +package run.halo.app.theme.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import lombok.RequiredArgsConstructor; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.router.SortableRequest; +import run.halo.app.theme.finders.SinglePageFinder; +import run.halo.app.theme.finders.vo.ListedSinglePageVo; +import run.halo.app.theme.finders.vo.SinglePageVo; + +/** + * Endpoint for single page query. + * + * @author guqing + * @since 2.5.0 + */ +@Component +@RequiredArgsConstructor +public class SinglePageQueryEndpoint implements CustomEndpoint { + + private final SinglePageFinder singlePageFinder; + + @Override + public RouterFunction endpoint() { + var tag = "SinglePageV1alpha1Public"; + return SpringdocRouteBuilder.route() + .GET("singlepages", this::listSinglePages, + builder -> { + builder.operationId("querySinglePages") + .description("Lists single pages") + .tag(tag) + .response(responseBuilder() + .implementation( + ListResult.generateGenericClass(ListedSinglePageVo.class)) + ); + SinglePagePublicQuery.buildParameters(builder); + } + ) + .GET("singlepages/{name}", this::getByName, + builder -> builder.operationId("querySinglePageByName") + .description("Gets single page by name") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("SinglePage name") + .required(true) + ) + .response(responseBuilder() + .implementation(SinglePageVo.class) + ) + ) + .build(); + } + + private Mono getByName(ServerRequest request) { + var name = request.pathVariable("name"); + return singlePageFinder.getByName(name) + .flatMap(result -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(result) + ); + } + + private Mono listSinglePages(ServerRequest request) { + var query = new SinglePagePublicQuery(request.exchange()); + return singlePageFinder.list(query.getPage(), + query.getSize(), + query.toPredicate(), + query.toComparator() + ) + .flatMap(result -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(result) + ); + } + + static class SinglePagePublicQuery extends SortableRequest { + + public SinglePagePublicQuery(ServerWebExchange exchange) { + super(exchange); + } + + public static void buildParameters(Builder builder) { + SortableRequest.buildParameters(builder); + } + } + + @Override + public GroupVersion groupVersion() { + return PublicApiUtils.groupVersion(new SinglePage()); + } +} diff --git a/application/src/main/java/run/halo/app/theme/endpoint/SiteStatsQueryEndpoint.java b/application/src/main/java/run/halo/app/theme/endpoint/SiteStatsQueryEndpoint.java new file mode 100644 index 0000000..40792d0 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/SiteStatsQueryEndpoint.java @@ -0,0 +1,57 @@ +package run.halo.app.theme.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; + +import lombok.RequiredArgsConstructor; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.theme.finders.SiteStatsFinder; +import run.halo.app.theme.finders.vo.SiteStatsVo; + +/** + * Endpoint for site stats query APIs. + * + * @author guqing + * @since 2.5.0 + */ +@Component +@RequiredArgsConstructor +public class SiteStatsQueryEndpoint implements CustomEndpoint { + + private final SiteStatsFinder siteStatsFinder; + + @Override + public RouterFunction endpoint() { + var tag = "SystemV1alpha1Public"; + return SpringdocRouteBuilder.route() + .GET("stats/-", this::getStats, + builder -> builder.operationId("queryStats") + .description("Gets site stats") + .tag(tag) + .response(responseBuilder() + .implementation(SiteStatsVo.class) + ) + ) + .build(); + } + + private Mono getStats(ServerRequest request) { + return siteStatsFinder.getStats() + .flatMap(result -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(result) + ); + } + + @Override + public GroupVersion groupVersion() { + return new GroupVersion("api.halo.run", "v1alpha1"); + } +} diff --git a/application/src/main/java/run/halo/app/theme/endpoint/TagQueryEndpoint.java b/application/src/main/java/run/halo/app/theme/endpoint/TagQueryEndpoint.java new file mode 100644 index 0000000..a54120d --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/endpoint/TagQueryEndpoint.java @@ -0,0 +1,144 @@ +package run.halo.app.theme.endpoint; + +import static org.springdoc.core.fn.builders.apiresponse.Builder.responseBuilder; +import static org.springdoc.core.fn.builders.parameter.Builder.parameterBuilder; + +import io.swagger.v3.oas.annotations.enums.ParameterIn; +import lombok.RequiredArgsConstructor; +import org.springdoc.core.fn.builders.operation.Builder; +import org.springdoc.webflux.core.fn.SpringdocRouteBuilder; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.ServerWebExchange; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.core.extension.endpoint.CustomEndpoint; +import run.halo.app.extension.GroupVersion; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.SortableRequest; +import run.halo.app.theme.finders.PostPublicQueryService; +import run.halo.app.theme.finders.TagFinder; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.finders.vo.TagVo; + +/** + * Endpoint for tag query APIs. + * + * @author guqing + * @since 2.5.0 + */ +@Component +@RequiredArgsConstructor +public class TagQueryEndpoint implements CustomEndpoint { + + private final ReactiveExtensionClient client; + private final TagFinder tagFinder; + private final PostPublicQueryService postPublicQueryService; + + @Override + public RouterFunction endpoint() { + var tag = "TagV1alpha1Public"; + return SpringdocRouteBuilder.route() + .GET("tags", this::listTags, + builder -> { + builder.operationId("queryTags") + .description("Lists tags") + .tag(tag) + .response(responseBuilder() + .implementation( + ListResult.generateGenericClass(TagVo.class)) + ); + TagPublicQuery.buildParameters(builder); + } + ) + .GET("tags/{name}", this::getTagByName, + builder -> builder.operationId("queryTagByName") + .description("Gets tag by name") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Tag name") + .required(true) + ) + .response(responseBuilder() + .implementation(TagVo.class) + ) + ) + .GET("tags/{name}/posts", this::listPostsByTagName, + builder -> { + builder.operationId("queryPostsByTagName") + .description("Lists posts by tag name") + .tag(tag) + .parameter(parameterBuilder() + .in(ParameterIn.PATH) + .name("name") + .description("Tag name") + .required(true) + ) + .response(responseBuilder() + .implementation(ListedPostVo.class) + ); + PostPublicQuery.buildParameters(builder); + } + ) + .build(); + } + + private Mono getTagByName(ServerRequest request) { + String name = request.pathVariable("name"); + return tagFinder.getByName(name) + .flatMap(tag -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(tag) + ); + } + + private Mono listPostsByTagName(ServerRequest request) { + final var name = request.pathVariable("name"); + final var query = new PostPublicQuery(request.exchange()); + var listOptions = query.toListOptions(); + var newFieldSelector = listOptions.getFieldSelector() + .andQuery(QueryFactory.equal("spec.tags", name)); + listOptions.setFieldSelector(newFieldSelector); + return postPublicQueryService.list(listOptions, query.toPageRequest()) + .flatMap(result -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(result) + ); + } + + private Mono listTags(ServerRequest request) { + var query = new TagPublicQuery(request.exchange()); + return client.listBy(Tag.class, query.toListOptions(), query.toPageRequest()) + .map(result -> { + var tagVos = tagFinder.convertToVo(result.getItems()); + return new ListResult<>(result.getPage(), result.getSize(), + result.getTotal(), tagVos); + }) + .flatMap(result -> ServerResponse.ok() + .contentType(MediaType.APPLICATION_JSON) + .bodyValue(result) + ); + } + + static class TagPublicQuery extends SortableRequest { + public TagPublicQuery(ServerWebExchange exchange) { + super(exchange); + } + + public static void buildParameters(Builder builder) { + SortableRequest.buildParameters(builder); + } + } + + @Override + public GroupVersion groupVersion() { + return PublicApiUtils.groupVersion(new Tag()); + } +} diff --git a/application/src/main/java/run/halo/app/theme/engine/DefaultThemeTemplateAvailabilityProvider.java b/application/src/main/java/run/halo/app/theme/engine/DefaultThemeTemplateAvailabilityProvider.java new file mode 100644 index 0000000..5f1ce78 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/engine/DefaultThemeTemplateAvailabilityProvider.java @@ -0,0 +1,25 @@ +package run.halo.app.theme.engine; + +import java.nio.file.Files; +import org.springframework.boot.autoconfigure.thymeleaf.ThymeleafProperties; +import org.springframework.stereotype.Component; +import run.halo.app.theme.ThemeContext; + +@Component +public class DefaultThemeTemplateAvailabilityProvider implements ThemeTemplateAvailabilityProvider { + + private final ThymeleafProperties thymeleafProperties; + + public DefaultThemeTemplateAvailabilityProvider(ThymeleafProperties thymeleafProperties) { + this.thymeleafProperties = thymeleafProperties; + } + + @Override + public boolean isTemplateAvailable(ThemeContext themeContext, String viewName) { + var suffix = thymeleafProperties.getSuffix(); + // Currently, we only support Path here. + var path = themeContext.getPath().resolve("templates").resolve(viewName + suffix); + return Files.exists(path); + } + +} diff --git a/application/src/main/java/run/halo/app/theme/engine/HaloTemplateEngine.java b/application/src/main/java/run/halo/app/theme/engine/HaloTemplateEngine.java new file mode 100644 index 0000000..fcbd3c3 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/engine/HaloTemplateEngine.java @@ -0,0 +1,53 @@ +package run.halo.app.theme.engine; + +import java.nio.charset.Charset; +import java.util.Set; +import org.reactivestreams.Publisher; +import org.springframework.core.io.buffer.DataBuffer; +import org.springframework.core.io.buffer.DataBufferFactory; +import org.springframework.http.MediaType; +import org.thymeleaf.context.IContext; +import org.thymeleaf.messageresolver.IMessageResolver; +import org.thymeleaf.spring6.SpringWebFluxTemplateEngine; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import reactor.core.scheduler.Schedulers; + +/** + * Default template engine implementation to be used in Halo. + * + * @author johnniang + */ +public class HaloTemplateEngine extends SpringWebFluxTemplateEngine { + + private final IMessageResolver messageResolver; + + public HaloTemplateEngine(IMessageResolver messageResolver) { + this.messageResolver = messageResolver; + } + + @Override + protected void initializeSpringSpecific() { + // Before initialization, thymeleaf will overwrite message resolvers. + // So we need to add own message resolver at here. + addMessageResolver(messageResolver); + } + + @Override + public Publisher processStream(String template, Set markupSelectors, + IContext context, DataBufferFactory bufferFactory, + MediaType mediaType, Charset charset, int responseMaxChunkSizeBytes) { + var publisher = super.processStream(template, markupSelectors, context, bufferFactory, + mediaType, charset, responseMaxChunkSizeBytes); + // We have to subscribe on blocking thread, because some blocking operations will be present + // while processing. + if (publisher instanceof Mono mono) { + return mono.subscribeOn(Schedulers.boundedElastic()); + } + if (publisher instanceof Flux flux) { + return flux.subscribeOn(Schedulers.boundedElastic()); + } + return publisher; + } + +} diff --git a/application/src/main/java/run/halo/app/theme/engine/PluginClassloaderTemplateResolver.java b/application/src/main/java/run/halo/app/theme/engine/PluginClassloaderTemplateResolver.java new file mode 100644 index 0000000..d77dd5c --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/engine/PluginClassloaderTemplateResolver.java @@ -0,0 +1,105 @@ +package run.halo.app.theme.engine; + +import static run.halo.app.plugin.PluginConst.SYSTEM_PLUGIN_NAME; + +import java.util.Map; +import java.util.regex.Matcher; +import java.util.regex.Pattern; +import org.apache.commons.lang3.StringUtils; +import org.pf4j.PluginState; +import org.springframework.core.io.DefaultResourceLoader; +import org.springframework.lang.Nullable; +import org.thymeleaf.IEngineConfiguration; +import org.thymeleaf.spring6.templateresource.SpringResourceTemplateResource; +import org.thymeleaf.templateresolver.AbstractConfigurableTemplateResolver; +import org.thymeleaf.templateresource.ITemplateResource; +import run.halo.app.plugin.HaloPluginManager; + +/** + * Plugin classloader template resolver to resolve template by plugin classloader. + * + * @author guqing + * @since 2.11.0 + */ +public class PluginClassloaderTemplateResolver extends AbstractConfigurableTemplateResolver { + + private final HaloPluginManager haloPluginManager; + static final Pattern PLUGIN_TEMPLATE_PATTERN = + Pattern.compile("plugin:([A-Za-z0-9\\-.]+):(.+)"); + + /** + * Create a new plugin classloader template resolver, not cacheable. + * + * @param haloPluginManager plugin manager must not be null + */ + public PluginClassloaderTemplateResolver(HaloPluginManager haloPluginManager) { + super(); + this.haloPluginManager = haloPluginManager; + setCacheable(false); + } + + @Override + protected ITemplateResource computeTemplateResource( + final IEngineConfiguration configuration, final String ownerTemplate, final String template, + final String resourceName, final String characterEncoding, + final Map templateResolutionAttributes) { + var matchResult = matchPluginTemplate(ownerTemplate, template); + if (!matchResult.matches()) { + return null; + } + String pluginName = matchResult.pluginName(); + var classloader = getClassloaderByPlugin(pluginName); + if (classloader == null) { + return null; + } + + var templateName = matchResult.templateName(); + var ownerTemplateName = matchResult.ownerTemplateName(); + + String handledResourceName = computeResourceName(configuration, ownerTemplateName, + templateName, getPrefix(), getSuffix(), getForceSuffix(), getTemplateAliases(), + templateResolutionAttributes); + + var resource = new DefaultResourceLoader(classloader) + .getResource(handledResourceName); + return new SpringResourceTemplateResource(resource, characterEncoding); + } + + MatchResult matchPluginTemplate(String ownerTemplate, String template) { + boolean matches = false; + String pluginName = null; + String templateName = template; + String ownerTemplateName = ownerTemplate; + if (StringUtils.isNotBlank(ownerTemplate)) { + Matcher ownerTemplateMatcher = PLUGIN_TEMPLATE_PATTERN.matcher(ownerTemplate); + if (ownerTemplateMatcher.matches()) { + matches = true; + pluginName = ownerTemplateMatcher.group(1); + ownerTemplateName = ownerTemplateMatcher.group(2); + } + } + Matcher templateMatcher = PLUGIN_TEMPLATE_PATTERN.matcher(template); + if (templateMatcher.matches()) { + matches = true; + pluginName = templateMatcher.group(1); + templateName = templateMatcher.group(2); + } + return new MatchResult(pluginName, ownerTemplateName, templateName, matches); + } + + record MatchResult(String pluginName, String ownerTemplateName, String templateName, + boolean matches) { + } + + @Nullable + private ClassLoader getClassloaderByPlugin(String pluginName) { + if (SYSTEM_PLUGIN_NAME.equals(pluginName)) { + return this.getClass().getClassLoader(); + } + var pluginWrapper = haloPluginManager.getPlugin(pluginName); + if (pluginWrapper == null || !PluginState.STARTED.equals(pluginWrapper.getPluginState())) { + return null; + } + return pluginWrapper.getPluginClassLoader(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/engine/ThemeTemplateAvailabilityProvider.java b/application/src/main/java/run/halo/app/theme/engine/ThemeTemplateAvailabilityProvider.java new file mode 100644 index 0000000..dbc60b7 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/engine/ThemeTemplateAvailabilityProvider.java @@ -0,0 +1,9 @@ +package run.halo.app.theme.engine; + +import run.halo.app.theme.ThemeContext; + +public interface ThemeTemplateAvailabilityProvider { + + boolean isTemplateAvailable(ThemeContext themeContext, String viewName); + +} diff --git a/application/src/main/java/run/halo/app/theme/finders/CategoryFinder.java b/application/src/main/java/run/halo/app/theme/finders/CategoryFinder.java new file mode 100644 index 0000000..80bd684 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/CategoryFinder.java @@ -0,0 +1,35 @@ +package run.halo.app.theme.finders; + +import java.util.List; +import org.springframework.lang.Nullable; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Category; +import run.halo.app.extension.ListResult; +import run.halo.app.theme.finders.vo.CategoryTreeVo; +import run.halo.app.theme.finders.vo.CategoryVo; + +/** + * A finder for {@link Category}. + * + * @author guqing + * @since 2.0.0 + */ +public interface CategoryFinder { + + Mono getByName(String name); + + Flux getByNames(List names); + + Mono> list(@Nullable Integer page, @Nullable Integer size); + + Flux listAll(); + + Flux listAsTree(); + + Flux listAsTree(String name); + + Mono getParentByName(String name); + + Flux getBreadcrumbs(String name); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/CommentFinder.java b/application/src/main/java/run/halo/app/theme/finders/CommentFinder.java new file mode 100644 index 0000000..88a22a3 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/CommentFinder.java @@ -0,0 +1,26 @@ +package run.halo.app.theme.finders; + +import java.util.Map; +import org.springframework.lang.Nullable; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.extension.ListResult; +import run.halo.app.theme.finders.vo.CommentVo; +import run.halo.app.theme.finders.vo.ReplyVo; + +/** + * A finder for finding {@link Comment comments} in template. + * + * @author guqing + * @since 2.0.0 + */ +public interface CommentFinder { + + Mono getByName(String name); + + Mono> list(@Nullable Map ref, @Nullable Integer page, + @Nullable Integer size); + + Mono> listReply(String commentName, @Nullable Integer page, + @Nullable Integer size); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/CommentPublicQueryService.java b/application/src/main/java/run/halo/app/theme/finders/CommentPublicQueryService.java new file mode 100644 index 0000000..b11d92f --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/CommentPublicQueryService.java @@ -0,0 +1,32 @@ +package run.halo.app.theme.finders; + +import org.springframework.lang.Nullable; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.Ref; +import run.halo.app.theme.finders.vo.CommentVo; +import run.halo.app.theme.finders.vo.CommentWithReplyVo; +import run.halo.app.theme.finders.vo.ReplyVo; + +/** + * comment finder. + * + * @author LIlGG + */ +public interface CommentPublicQueryService { + Mono getByName(String name); + + Mono> list(Ref ref, @Nullable Integer page, + @Nullable Integer size); + + Mono> list(Ref ref, @Nullable PageRequest pageRequest); + + Mono> convertToWithReplyVo(ListResult comments, + int replySize); + + Mono> listReply(String commentName, @Nullable Integer page, + @Nullable Integer size); + + Mono> listReply(String commentName, PageRequest pageRequest); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/ContributorFinder.java b/application/src/main/java/run/halo/app/theme/finders/ContributorFinder.java new file mode 100644 index 0000000..904bf57 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/ContributorFinder.java @@ -0,0 +1,17 @@ +package run.halo.app.theme.finders; + +import java.util.List; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.User; +import run.halo.app.theme.finders.vo.ContributorVo; + +/** + * A finder for {@link User}. + */ +public interface ContributorFinder { + + Mono getContributor(String name); + + Flux getContributors(List names); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/DefaultFinderRegistry.java b/application/src/main/java/run/halo/app/theme/finders/DefaultFinderRegistry.java new file mode 100644 index 0000000..fd1a949 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/DefaultFinderRegistry.java @@ -0,0 +1,110 @@ +package run.halo.app.theme.finders; + +import java.util.ArrayList; +import java.util.List; +import java.util.Map; +import java.util.concurrent.ConcurrentHashMap; +import org.springframework.beans.factory.InitializingBean; +import org.springframework.context.ApplicationContext; +import org.springframework.stereotype.Component; + +/** + * Finder registry for class annotated with {@link Finder}. + * + * @author guqing + * @since 2.0.0 + */ +@Component +public class DefaultFinderRegistry implements FinderRegistry, InitializingBean { + private final Map> pluginFindersLookup = new ConcurrentHashMap<>(); + private final Map finders = new ConcurrentHashMap<>(64); + + private final ApplicationContext applicationContext; + + public DefaultFinderRegistry(ApplicationContext applicationContext) { + this.applicationContext = applicationContext; + } + + Object get(String name) { + return finders.get(name); + } + + /** + * Given a name, register a Finder for it. + * + * @param name the canonical name + * @param finder the finder to be registered + * @throws IllegalStateException if the name is already existing + */ + void putFinder(String name, Object finder) { + if (finders.containsKey(name)) { + throw new IllegalStateException( + "Finder with name '" + name + "' is already registered"); + } + finders.put(name, finder); + } + + /** + * Register a finder. + * + * @param finder register a finder that annotated with {@link Finder} + * @return the name of the finder + */ + String putFinder(Object finder) { + var name = getFinderName(finder); + this.putFinder(name, finder); + return name; + } + + private String getFinderName(Object finder) { + var annotation = finder.getClass().getAnnotation(Finder.class); + if (annotation == null) { + // should never happen + throw new IllegalStateException("Finder must be annotated with @Finder"); + } + String name = annotation.value(); + if (name == null) { + name = finder.getClass().getSimpleName(); + } + return name; + } + + public void removeFinder(String name) { + finders.remove(name); + } + + public Map getFinders() { + return Map.copyOf(finders); + } + + @Override + public void afterPropertiesSet() { + // initialize finders from application context + applicationContext.getBeansWithAnnotation(Finder.class) + .forEach((beanName, finder) -> { + var finderName = getFinderName(finder); + this.putFinder(finderName, finder); + }); + } + + @Override + public void register(String pluginId, ApplicationContext pluginContext) { + pluginContext.getBeansWithAnnotation(Finder.class) + .forEach((beanName, finder) -> { + var finderName = getFinderName(finder); + this.putFinder(finderName, finder); + pluginFindersLookup + .computeIfAbsent(pluginId, ignored -> new ArrayList<>()) + .add(finderName); + }); + } + + @Override + public void unregister(String pluginId) { + var finderNames = pluginFindersLookup.remove(pluginId); + if (finderNames != null) { + finderNames.forEach(finders::remove); + } + } + +} diff --git a/application/src/main/java/run/halo/app/theme/finders/FinderRegistry.java b/application/src/main/java/run/halo/app/theme/finders/FinderRegistry.java new file mode 100644 index 0000000..7dfe034 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/FinderRegistry.java @@ -0,0 +1,20 @@ +package run.halo.app.theme.finders; + +import java.util.Map; +import org.springframework.context.ApplicationContext; + +/** + * Finder registry for class annotated with {@link Finder}. + * + * @author guqing + * @since 2.0.0 + */ +public interface FinderRegistry { + + Map getFinders(); + + void register(String pluginId, ApplicationContext pluginContext); + + void unregister(String pluginId); + +} diff --git a/application/src/main/java/run/halo/app/theme/finders/MenuFinder.java b/application/src/main/java/run/halo/app/theme/finders/MenuFinder.java new file mode 100644 index 0000000..af45f29 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/MenuFinder.java @@ -0,0 +1,17 @@ +package run.halo.app.theme.finders; + +import reactor.core.publisher.Mono; +import run.halo.app.theme.finders.vo.MenuVo; + +/** + * A finder for {@link run.halo.app.core.extension.Menu}. + * + * @author guqing + * @since 2.0.0 + */ +public interface MenuFinder { + + Mono getByName(String name); + + Mono getPrimary(); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/PluginFinder.java b/application/src/main/java/run/halo/app/theme/finders/PluginFinder.java new file mode 100644 index 0000000..c113d39 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/PluginFinder.java @@ -0,0 +1,14 @@ +package run.halo.app.theme.finders; + +/** + * A finder for {@link run.halo.app.core.extension.Plugin}. + * + * @author guqing + * @since 2.0.0 + */ +public interface PluginFinder { + + boolean available(String pluginName); + + boolean available(String pluginName, String requiresVersion); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/PostFinder.java b/application/src/main/java/run/halo/app/theme/finders/PostFinder.java new file mode 100644 index 0000000..8347976 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/PostFinder.java @@ -0,0 +1,54 @@ +package run.halo.app.theme.finders; + +import org.springframework.lang.Nullable; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListResult; +import run.halo.app.theme.finders.vo.ContentVo; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.finders.vo.NavigationPostVo; +import run.halo.app.theme.finders.vo.PostArchiveVo; +import run.halo.app.theme.finders.vo.PostVo; + +/** + * A finder for {@link Post}. + * + * @author guqing + * @since 2.0.0 + */ +public interface PostFinder { + + /** + * Gets post detail by name. + *

+ * We ensure the post is public, non-deleted and published. + * + * @param postName is post name + * @return post detail + */ + Mono getByName(String postName); + + Mono content(String postName); + + Mono cursor(String current); + + Flux listAll(); + + Mono> list(@Nullable Integer page, @Nullable Integer size); + + Mono> listByCategory(@Nullable Integer page, @Nullable Integer size, + String categoryName); + + Mono> listByTag(@Nullable Integer page, @Nullable Integer size, + String tag); + + Mono> listByOwner(@Nullable Integer page, @Nullable Integer size, + String owner); + + Mono> archives(Integer page, Integer size); + + Mono> archives(Integer page, Integer size, String year); + + Mono> archives(Integer page, Integer size, String year, String month); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/PostPublicQueryService.java b/application/src/main/java/run/halo/app/theme/finders/PostPublicQueryService.java new file mode 100644 index 0000000..e1ef8e6 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/PostPublicQueryService.java @@ -0,0 +1,54 @@ +package run.halo.app.theme.finders; + +import org.springframework.lang.NonNull; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.theme.ReactivePostContentHandler; +import run.halo.app.theme.finders.vo.ContentVo; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.finders.vo.PostVo; + +public interface PostPublicQueryService { + + /** + * Lists public posts by the given list options and page request. + * + * @param listOptions additional list options + * @param page page request must not be null + * @return a list of listed post vo + */ + Mono> list(ListOptions listOptions, PageRequest page); + + /** + * Converts post to listed post vo. + * + * @param post post must not be null + * @return listed post vo + */ + Mono convertToListedVo(@NonNull Post post); + + /** + * Converts {@link Post} to post vo and populate post content by the given snapshot name. + *

This method will get post content by {@code snapshotName} and try to find + * {@link ReactivePostContentHandler}s to extend the content

+ * + * @param post post must not be null + * @param snapshotName snapshot name must not be blank + * @return converted post vo + */ + Mono convertToVo(Post post, String snapshotName); + + /** + * Gets post content by post name. + *

This method will get post released content by post name and try to find + * {@link ReactivePostContentHandler}s to extend the content

+ * + * @param postName post name must not be blank + * @return post content for theme-side + * @see ReactivePostContentHandler + */ + Mono getContent(String postName); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/SinglePageConversionService.java b/application/src/main/java/run/halo/app/theme/finders/SinglePageConversionService.java new file mode 100644 index 0000000..15f6a85 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/SinglePageConversionService.java @@ -0,0 +1,55 @@ +package run.halo.app.theme.finders; + +import org.springframework.lang.NonNull; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.theme.ReactiveSinglePageContentHandler; +import run.halo.app.theme.finders.vo.ContentVo; +import run.halo.app.theme.finders.vo.ListedSinglePageVo; +import run.halo.app.theme.finders.vo.SinglePageVo; + +/** + * A service that converts {@link SinglePage} to {@link SinglePageVo}. + * + * @author guqing + * @since 2.6.0 + */ +public interface SinglePageConversionService { + + /** + * Converts the given {@link SinglePage} to {@link SinglePageVo} and populate content by + * given snapshot name. + * + * @param singlePage the single page must not be null + * @param snapshotName the snapshot name to get content must not be blank + * @return the converted single page vo + * @see #convertToVo(SinglePage) + */ + Mono convertToVo(SinglePage singlePage, String snapshotName); + + /** + * Converts the given {@link SinglePage} to {@link SinglePageVo}. + *

This method will query the additional information of the {@link SinglePageVo} needed to + * populate.

+ *

This method will try to find {@link ReactiveSinglePageContentHandler}s to extend the + * content.

+ * + * @param singlePage the single page must not be null + * @return the converted single page vo + * @see #getContent(String) + */ + Mono convertToVo(@NonNull SinglePage singlePage); + + /** + * Gets content by given page name. + *

This method will get released content by page name and try to find + * {@link ReactiveSinglePageContentHandler}s to extend the content.

+ * + * @param pageName page name must not be blank + * @return content of the specified page + * @since 2.7.0 + */ + Mono getContent(String pageName); + + Mono convertToListedVo(SinglePage singlePage); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/SinglePageFinder.java b/application/src/main/java/run/halo/app/theme/finders/SinglePageFinder.java new file mode 100644 index 0000000..d577b88 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/SinglePageFinder.java @@ -0,0 +1,29 @@ +package run.halo.app.theme.finders; + +import java.util.Comparator; +import java.util.function.Predicate; +import org.springframework.lang.Nullable; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.ListResult; +import run.halo.app.theme.finders.vo.ContentVo; +import run.halo.app.theme.finders.vo.ListedSinglePageVo; +import run.halo.app.theme.finders.vo.SinglePageVo; + +/** + * A finder for {@link SinglePage}. + * + * @author guqing + * @since 2.0.0 + */ +public interface SinglePageFinder { + + Mono getByName(String pageName); + + Mono content(String pageName); + + Mono> list(@Nullable Integer page, @Nullable Integer size); + + Mono> list(@Nullable Integer page, @Nullable Integer size, + @Nullable Predicate predicate, @Nullable Comparator comparator); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/SiteStatsFinder.java b/application/src/main/java/run/halo/app/theme/finders/SiteStatsFinder.java new file mode 100644 index 0000000..06b2e38 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/SiteStatsFinder.java @@ -0,0 +1,15 @@ +package run.halo.app.theme.finders; + +import reactor.core.publisher.Mono; +import run.halo.app.theme.finders.vo.SiteStatsVo; + +/** + * Site statistics finder. + * + * @author guqing + * @since 2.0.0 + */ +public interface SiteStatsFinder { + + Mono getStats(); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/TagFinder.java b/application/src/main/java/run/halo/app/theme/finders/TagFinder.java new file mode 100644 index 0000000..4590f02 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/TagFinder.java @@ -0,0 +1,34 @@ +package run.halo.app.theme.finders; + +import java.util.Comparator; +import java.util.List; +import java.util.function.Predicate; +import org.springframework.lang.Nullable; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.extension.ListResult; +import run.halo.app.theme.finders.vo.TagVo; + +/** + * A finder for {@link Tag}. + * + * @author guqing + * @since 2.0.0 + */ +public interface TagFinder { + + Mono getByName(String name); + + Flux getByNames(List names); + + Mono> list(@Nullable Integer page, @Nullable Integer size); + + @Deprecated(since = "2.12.0") + Mono> list(@Nullable Integer page, @Nullable Integer size, + @Nullable Predicate predicate, @Nullable Comparator comparator); + + List convertToVo(List tags); + + Flux listAll(); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/ThemeFinder.java b/application/src/main/java/run/halo/app/theme/finders/ThemeFinder.java new file mode 100644 index 0000000..239226f --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/ThemeFinder.java @@ -0,0 +1,17 @@ +package run.halo.app.theme.finders; + +import reactor.core.publisher.Mono; +import run.halo.app.theme.finders.vo.ThemeVo; + +/** + * A finder for theme. + * + * @author guqing + * @since 2.0.0 + */ +public interface ThemeFinder { + + Mono activation(); + + Mono getByName(String themeName); +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/CategoryFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/CategoryFinderImpl.java new file mode 100644 index 0000000..2bc65c0 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/CategoryFinderImpl.java @@ -0,0 +1,291 @@ +package run.halo.app.theme.finders.impl; + +import static run.halo.app.extension.index.query.QueryFactory.notEqual; + +import java.time.Instant; +import java.util.ArrayList; +import java.util.Collection; +import java.util.Comparator; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import java.util.function.Function; +import java.util.stream.Collectors; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.ObjectUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.data.domain.Sort; +import org.springframework.lang.Nullable; +import org.springframework.util.Assert; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.content.CategoryService; +import run.halo.app.core.extension.content.Category; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.Metadata; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.theme.finders.CategoryFinder; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.vo.CategoryTreeVo; +import run.halo.app.theme.finders.vo.CategoryVo; + +/** + * A default implementation of {@link CategoryFinder}. + * + * @author guqing + * @since 2.0.0 + */ +@Slf4j +@Finder("categoryFinder") +@RequiredArgsConstructor +public class CategoryFinderImpl implements CategoryFinder { + private final ReactiveExtensionClient client; + private final CategoryService categoryService; + + @Override + public Mono getByName(String name) { + return client.fetch(Category.class, name) + .map(CategoryVo::from); + } + + @Override + public Flux getByNames(List names) { + if (names == null) { + return Flux.empty(); + } + return Flux.fromIterable(names) + .flatMap(this::getByName); + } + + static Sort defaultSort() { + return Sort.by(Sort.Order.desc("spec.priority"), + Sort.Order.desc("metadata.creationTimestamp"), + Sort.Order.desc("metadata.name")); + } + + @Override + public Mono> list(Integer page, Integer size) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + notEqual("spec.hideFromList", BooleanUtils.TRUE) + )); + return client.listBy(Category.class, listOptions, + PageRequestImpl.of(pageNullSafe(page), sizeNullSafe(size), defaultSort()) + ) + .map(list -> { + List categoryVos = list.get() + .map(CategoryVo::from) + .collect(Collectors.toList()); + return new ListResult<>(list.getPage(), list.getSize(), list.getTotal(), + categoryVos); + }) + .defaultIfEmpty(new ListResult<>(page, size, 0L, List.of())); + } + + @Override + public Flux listAsTree() { + return listAll() + .collectList() + .flatMapMany(list -> Flux.fromIterable(listToTree(list, null))); + } + + @Override + public Flux listAsTree(String name) { + return listAllFor(name) + .collectList() + .flatMapMany(list -> Flux.fromIterable(listToTree(list, name))); + } + + @Override + public Flux listAll() { + return client.listAll(Category.class, new ListOptions(), defaultSort()) + .filter(category -> !category.getSpec().isHideFromList()) + .map(CategoryVo::from); + } + + private Flux listAllFor(String parentName) { + return Mono.defer( + () -> { + if (StringUtils.isBlank(parentName)) { + return Mono.just(false); + } + return categoryService.isCategoryHidden(parentName); + }) + .flatMapMany( + isHidden -> client.listAll(Category.class, new ListOptions(), defaultSort()) + .filter(category -> { + if (isHidden) { + return true; + } + return !category.getSpec().isHideFromList(); + }) + .map(CategoryVo::from) + ); + } + + private List listToTree(List categoryVos, @Nullable String name) { + Map nameIdentityMap = categoryVos.stream() + .map(CategoryTreeVo::from) + .collect(Collectors.toMap(categoryVo -> categoryVo.getMetadata().getName(), + Function.identity())); + + nameIdentityMap.forEach((nameKey, value) -> { + List children = value.getSpec().getChildren(); + if (children == null) { + return; + } + for (String child : children) { + CategoryTreeVo childNode = nameIdentityMap.get(child); + if (childNode != null) { + childNode.setParentName(nameKey); + } + } + }); + var tree = listToTree(nameIdentityMap.values(), name); + recomputePostCount(tree); + return tree; + } + + private static List listToTree(Collection list, String name) { + Map> parentNameIdentityMap = list.stream() + .filter(categoryTreeVo -> categoryTreeVo.getParentName() != null) + .collect(Collectors.groupingBy(CategoryTreeVo::getParentName)); + + list.forEach(node -> { + // sort children + List children = + parentNameIdentityMap.getOrDefault(node.getMetadata().getName(), List.of()) + .stream() + .sorted(defaultTreeNodeComparator()) + .toList(); + node.setChildren(children); + }); + return list.stream() + .filter(v -> StringUtils.isEmpty(name) ? v.getParentName() == null + : StringUtils.equals(v.getMetadata().getName(), name)) + .sorted(defaultTreeNodeComparator()) + .collect(Collectors.toList()); + } + + private CategoryTreeVo dummyVirtualRoot(List treeNodes) { + Category.CategorySpec categorySpec = new Category.CategorySpec(); + categorySpec.setSlug("/"); + return CategoryTreeVo.builder() + .metadata(new Metadata()) + .spec(categorySpec) + .postCount(0) + .children(treeNodes) + .metadata(new Metadata()) + .build(); + } + + void recomputePostCount(List treeNodes) { + var rootNode = dummyVirtualRoot(treeNodes); + recomputePostCount(rootNode); + } + + private int recomputePostCount(CategoryTreeVo rootNode) { + if (rootNode == null) { + return 0; + } + + int originalPostCount = rootNode.getPostCount(); + + for (var child : rootNode.getChildren()) { + int childSum = recomputePostCount(child); + if (!child.getSpec().isPreventParentPostCascadeQuery()) { + rootNode.setPostCount(rootNode.getPostCount() + childSum); + } + } + + return rootNode.getSpec().isPreventParentPostCascadeQuery() ? originalPostCount + : rootNode.getPostCount(); + } + + static Comparator defaultTreeNodeComparator() { + Function priority = + category -> Objects.requireNonNullElse(category.getSpec().getPriority(), 0); + Function creationTimestamp = + category -> category.getMetadata().getCreationTimestamp(); + Function name = + category -> category.getMetadata().getName(); + return Comparator.comparing(priority) + .thenComparing(creationTimestamp) + .thenComparing(name); + } + + static Comparator defaultComparator() { + Function priority = + category -> Objects.requireNonNullElse(category.getSpec().getPriority(), 0); + Function creationTimestamp = + category -> category.getMetadata().getCreationTimestamp(); + Function name = + category -> category.getMetadata().getName(); + return Comparator.comparing(priority) + .thenComparing(creationTimestamp) + .thenComparing(name) + .reversed(); + } + + @Override + public Mono getParentByName(String name) { + return categoryService.getParentByName(name) + .map(CategoryVo::from); + } + + @Override + public Flux getBreadcrumbs(String name) { + return listAllFor(name) + .collectList() + .map(list -> listToTree(list, null)) + .flatMapMany(treeNodes -> { + var rootNode = dummyVirtualRoot(treeNodes); + var paths = new ArrayList(); + findPathHelper(rootNode, name, paths); + return Flux.fromIterable(paths); + }); + } + + private static boolean findPathHelper(CategoryTreeVo node, String targetName, + List path) { + Assert.notNull(targetName, "Target name must not be null"); + if (node == null) { + return false; + } + + // null name is just a virtual root + if (node.getMetadata().getName() != null) { + path.add(CategoryTreeVo.toCategoryVo(node)); + } + + // node maybe a virtual root node so it may have null name + if (targetName.equals(node.getMetadata().getName())) { + return true; + } + + for (CategoryTreeVo child : node.getChildren()) { + if (findPathHelper(child, targetName, path)) { + return true; + } + } + + // if the target node is not in the current subtree, remove the current node to roll back + if (!path.isEmpty()) { + path.remove(path.size() - 1); + } + return false; + } + + int pageNullSafe(Integer page) { + return ObjectUtils.defaultIfNull(page, 1); + } + + int sizeNullSafe(Integer page) { + return ObjectUtils.defaultIfNull(page, 10); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/CommentFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/CommentFinderImpl.java new file mode 100644 index 0000000..08c6e4c --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/CommentFinderImpl.java @@ -0,0 +1,48 @@ +package run.halo.app.theme.finders.impl; + +import java.util.Map; +import lombok.RequiredArgsConstructor; +import reactor.core.publisher.Mono; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.Ref; +import run.halo.app.theme.finders.CommentFinder; +import run.halo.app.theme.finders.CommentPublicQueryService; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.vo.CommentVo; +import run.halo.app.theme.finders.vo.ReplyVo; + +/** + * A default implementation of {@link CommentFinder}. + * + * @author guqing + * @since 2.0.0 + */ +@Finder("commentFinder") +@RequiredArgsConstructor +public class CommentFinderImpl implements CommentFinder { + + private final CommentPublicQueryService commentPublicQueryService; + + @Override + public Mono getByName(String name) { + return commentPublicQueryService.getByName(name); + } + + @Override + public Mono> list(Map map, Integer page, Integer size) { + if (map == null) { + return commentPublicQueryService.list(null, page, size); + } + Ref ref = new Ref(); + ref.setGroup(map.get("group")); + ref.setVersion(map.get("version")); + ref.setKind(map.get("kind")); + ref.setName(map.get("name")); + return commentPublicQueryService.list(ref, page, size); + } + + @Override + public Mono> listReply(String commentName, Integer page, Integer size) { + return commentPublicQueryService.listReply(commentName, page, size); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceImpl.java new file mode 100644 index 0000000..3a39a80 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceImpl.java @@ -0,0 +1,318 @@ +package run.halo.app.theme.finders.impl; + + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; +import static run.halo.app.extension.index.query.QueryFactory.or; + +import java.security.Principal; +import java.util.HashMap; +import java.util.Optional; +import java.util.function.Function; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.data.domain.Sort; +import org.springframework.lang.Nullable; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.util.DigestUtils; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.content.comment.OwnerInfo; +import run.halo.app.core.extension.User; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.Ref; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.AnonymousUserConst; +import run.halo.app.metrics.CounterService; +import run.halo.app.metrics.MeterUtils; +import run.halo.app.theme.finders.CommentPublicQueryService; +import run.halo.app.theme.finders.vo.CommentStatsVo; +import run.halo.app.theme.finders.vo.CommentVo; +import run.halo.app.theme.finders.vo.CommentWithReplyVo; +import run.halo.app.theme.finders.vo.ExtensionVoOperator; +import run.halo.app.theme.finders.vo.ReplyVo; + +/** + * comment public query service implementation. + * + * @author LIlGG + * @author guqing + */ +@Component +@RequiredArgsConstructor +public class CommentPublicQueryServiceImpl implements CommentPublicQueryService { + private static final int DEFAULT_SIZE = 10; + + private final ReactiveExtensionClient client; + private final UserService userService; + private final CounterService counterService; + + @Override + public Mono getByName(String name) { + return client.fetch(Comment.class, name) + .flatMap(this::toCommentVo); + } + + @Override + public Mono> list(Ref ref, Integer page, Integer size) { + return list(ref, + PageRequestImpl.of(pageNullSafe(page), sizeNullSafe(size), defaultCommentSort())); + } + + @Override + public Mono> list(Ref ref, PageRequest pageParam) { + var pageRequest = Optional.ofNullable(pageParam) + .map(page -> page.withSort(page.getSort().and(defaultCommentSort()))) + .orElse(PageRequestImpl.ofSize(0)); + return fixedCommentFieldSelector(ref) + .flatMap(fieldSelector -> { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(fieldSelector); + return client.listBy(Comment.class, listOptions, pageRequest) + .flatMap(listResult -> Flux.fromStream(listResult.get()) + .map(this::toCommentVo) + .concatMap(Function.identity()) + .collectList() + .map(commentVos -> new ListResult<>(listResult.getPage(), + listResult.getSize(), + listResult.getTotal(), + commentVos) + ) + ); + }) + .defaultIfEmpty(ListResult.emptyResult()); + } + + @Override + public Mono> convertToWithReplyVo(ListResult comments, + int replySize) { + return Flux.fromIterable(comments.getItems()) + .concatMap(commentVo -> { + var commentName = commentVo.getMetadata().getName(); + return listReply(commentName, 1, replySize) + .map(replyList -> CommentWithReplyVo.from(commentVo) + .setReplies(replyList) + ); + }) + .collectList() + .map(result -> new ListResult<>( + comments.getPage(), + comments.getSize(), + comments.getTotal(), + result) + ); + } + + @Override + public Mono> listReply(String commentName, Integer page, Integer size) { + return listReply(commentName, PageRequestImpl.of(pageNullSafe(page), sizeNullSafe(size), + defaultReplySort())); + } + + @Override + public Mono> listReply(String commentName, PageRequest pageParam) { + return fixedReplyFieldSelector(commentName) + .flatMap(fieldSelector -> { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(fieldSelector); + var pageRequest = Optional.ofNullable(pageParam) + .map(page -> page.withSort(page.getSort().and(defaultReplySort()))) + .orElse(PageRequestImpl.ofSize(0)); + return client.listBy(Reply.class, listOptions, pageRequest) + .flatMap(list -> Flux.fromStream(list.get().map(this::toReplyVo)) + .concatMap(Function.identity()) + .collectList() + .map(replyVos -> new ListResult<>(list.getPage(), list.getSize(), + list.getTotal(), + replyVos)) + ); + }) + .defaultIfEmpty(ListResult.emptyResult()); + } + + Mono toCommentVo(Comment comment) { + Comment.CommentOwner owner = comment.getSpec().getOwner(); + return Mono.just(CommentVo.from(comment)) + .flatMap(commentVo -> populateStats(Comment.class, commentVo) + .doOnNext(commentVo::setStats) + .thenReturn(commentVo)) + .flatMap(commentVo -> getOwnerInfo(owner) + .doOnNext(commentVo::setOwner) + .thenReturn(commentVo) + ) + .flatMap(this::filterCommentSensitiveData); + } + + private Mono filterCommentSensitiveData(CommentVo commentVo) { + var owner = commentVo.getOwner(); + commentVo.setOwner(OwnerInfo + .builder() + .displayName(owner.getDisplayName()) + .avatar(owner.getAvatar()) + .kind(owner.getKind()) + .build()); + + commentVo.getSpec().setIpAddress(""); + var specOwner = commentVo.getSpec().getOwner(); + specOwner.setName(""); + var email = owner.getEmail(); + if (StringUtils.isNotBlank(email)) { + var emailHash = DigestUtils.md5DigestAsHex(email.getBytes()); + if (specOwner.getAnnotations() == null) { + specOwner.setAnnotations(new HashMap<>(2)); + } + specOwner.getAnnotations() + .put(Comment.CommentOwner.EMAIL_HASH_ANNO, emailHash); + } + if (specOwner.getAnnotations() != null) { + specOwner.getAnnotations().remove("Email"); + } + return Mono.just(commentVo); + } + + // @formatter:off + private + Mono populateStats(Class clazz, T vo) { + return counterService.getByName(MeterUtils.nameOf(clazz, vo.getMetadata() + .getName())) + .map(counter -> CommentStatsVo.builder() + .upvote(counter.getUpvote()) + .build() + ) + .defaultIfEmpty(CommentStatsVo.empty()); + } + // @formatter:on + + Mono toReplyVo(Reply reply) { + return Mono.just(ReplyVo.from(reply)) + .flatMap(replyVo -> populateStats(Reply.class, replyVo) + .doOnNext(replyVo::setStats) + .thenReturn(replyVo)) + .flatMap(replyVo -> getOwnerInfo(reply.getSpec().getOwner()) + .doOnNext(replyVo::setOwner) + .thenReturn(replyVo) + ) + .flatMap(this::filterReplySensitiveData); + } + + private Mono filterReplySensitiveData(ReplyVo replyVo) { + var owner = replyVo.getOwner(); + replyVo.setOwner(OwnerInfo + .builder() + .displayName(owner.getDisplayName()) + .avatar(owner.getAvatar()) + .kind(owner.getKind()) + .build()); + + replyVo.getSpec().setIpAddress(""); + var specOwner = replyVo.getSpec().getOwner(); + specOwner.setName(""); + var email = owner.getEmail(); + if (StringUtils.isNotBlank(email)) { + var emailHash = DigestUtils.md5DigestAsHex(email.getBytes()); + if (specOwner.getAnnotations() == null) { + specOwner.setAnnotations(new HashMap<>(2)); + } + specOwner.getAnnotations() + .put(Comment.CommentOwner.EMAIL_HASH_ANNO, emailHash); + } + if (specOwner.getAnnotations() != null) { + specOwner.getAnnotations().remove("Email"); + } + return Mono.just(replyVo); + } + + private Mono getOwnerInfo(Comment.CommentOwner owner) { + if (Comment.CommentOwner.KIND_EMAIL.equals(owner.getKind())) { + return Mono.just(OwnerInfo.from(owner)); + } + return userService.getUserOrGhost(owner.getName()) + .map(OwnerInfo::from); + } + + private Mono fixedCommentFieldSelector(@Nullable Ref ref) { + return Mono.fromSupplier( + () -> { + var baseQuery = isNull("metadata.deletionTimestamp"); + if (ref != null) { + baseQuery = + and(baseQuery, + equal("spec.subjectRef", Comment.toSubjectRefKey(ref))); + } + return baseQuery; + }) + .flatMap(this::concatVisibleQuery) + .map(FieldSelector::of); + } + + private Mono concatVisibleQuery(Query query) { + Assert.notNull(query, "The query must not be null"); + var approvedQuery = and( + equal("spec.approved", BooleanUtils.TRUE), + equal("spec.hidden", BooleanUtils.FALSE) + ); + // we should list all comments that the user owns + return getCurrentUserWithoutAnonymous() + .map(username -> or(approvedQuery, equal("spec.owner", + Comment.CommentOwner.ownerIdentity(User.KIND, username))) + ) + .defaultIfEmpty(approvedQuery) + .map(compositeQuery -> and(query, compositeQuery)); + } + + private Mono fixedReplyFieldSelector(String commentName) { + Assert.notNull(commentName, "The commentName must not be null"); + // The comment name must be equal to the comment name of the reply + // is approved and not hidden + return Mono.fromSupplier(() -> and( + equal("spec.commentName", commentName), + isNull("metadata.deletionTimestamp") + )) + .flatMap(this::concatVisibleQuery) + .map(FieldSelector::of); + } + + Mono getCurrentUserWithoutAnonymous() { + return ReactiveSecurityContextHolder.getContext() + .mapNotNull(SecurityContext::getAuthentication) + .map(Principal::getName) + .filter(username -> !AnonymousUserConst.PRINCIPAL.equals(username)); + } + + static Sort defaultCommentSort() { + return Sort.by(Sort.Order.desc("spec.top"), + Sort.Order.asc("spec.priority"), + Sort.Order.desc("spec.creationTime"), + Sort.Order.asc("metadata.name") + ); + } + + static Sort defaultReplySort() { + return Sort.by(Sort.Order.asc("spec.creationTime"), + Sort.Order.asc("metadata.name") + ); + } + + int pageNullSafe(Integer page) { + return defaultIfNull(page, 1); + } + + int sizeNullSafe(Integer size) { + return defaultIfNull(size, DEFAULT_SIZE); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/ContributorFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/ContributorFinderImpl.java new file mode 100644 index 0000000..3d05eef --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/ContributorFinderImpl.java @@ -0,0 +1,38 @@ +package run.halo.app.theme.finders.impl; + +import java.util.List; +import lombok.RequiredArgsConstructor; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.service.UserService; +import run.halo.app.theme.finders.ContributorFinder; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.vo.ContributorVo; + +/** + * A default implementation of {@link ContributorFinder}. + * + * @author guqing + * @since 2.0.0 + */ +@Finder("contributorFinder") +@RequiredArgsConstructor +public class ContributorFinderImpl implements ContributorFinder { + + private final UserService userService; + + @Override + public Mono getContributor(String name) { + return userService.getUserOrGhost(name) + .map(ContributorVo::from); + } + + @Override + public Flux getContributors(List names) { + if (names == null) { + return Flux.empty(); + } + return Flux.fromIterable(names) + .concatMap(this::getContributor); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/MenuFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/MenuFinderImpl.java new file mode 100644 index 0000000..d40378c --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/MenuFinderImpl.java @@ -0,0 +1,156 @@ +package run.halo.app.theme.finders.impl; + +import java.time.Instant; +import java.util.Collection; +import java.util.Comparator; +import java.util.LinkedHashSet; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import java.util.function.Function; +import java.util.stream.Collectors; +import lombok.AllArgsConstructor; +import org.springframework.util.CollectionUtils; +import org.springframework.util.comparator.Comparators; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Menu; +import run.halo.app.core.extension.MenuItem; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.MenuFinder; +import run.halo.app.theme.finders.vo.MenuItemVo; +import run.halo.app.theme.finders.vo.MenuVo; + +/** + * A default implementation for {@link MenuFinder}. + * + * @author guqing + * @since 2.0.0 + */ +@Finder("menuFinder") +@AllArgsConstructor +public class MenuFinderImpl implements MenuFinder { + + private final ReactiveExtensionClient client; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + @Override + public Mono getByName(String name) { + return listAsTree() + .filter(menu -> menu.getMetadata().getName().equals(name)) + .next() + .switchIfEmpty(Mono.error( + () -> new NotFoundException("Menu with name " + name + " not found"))); + } + + @Override + public Mono getPrimary() { + return listAsTree().collectList() + .flatMap(menuVos -> { + if (CollectionUtils.isEmpty(menuVos)) { + return Mono.empty(); + } + return environmentFetcher.fetch(SystemSetting.Menu.GROUP, SystemSetting.Menu.class) + .map(SystemSetting.Menu::getPrimary) + .map(primaryConfig -> menuVos.stream() + .filter(menuVo -> menuVo.getMetadata().getName().equals(primaryConfig)) + .findAny() + .orElse(menuVos.get(0)) + ) + .defaultIfEmpty(menuVos.get(0)); + }) + .switchIfEmpty( + Mono.error(() -> new NotFoundException("No primary menu found")) + ); + } + + Flux listAll() { + return client.list(Menu.class, null, null) + .map(MenuVo::from); + } + + Flux listAsTree() { + return listAllMenuItem() + .collectList() + .map(MenuFinderImpl::populateParentName) + .flatMapMany(menuItemVos -> { + List treeList = listToTree(menuItemVos); + Map nameItemRootNodeMap = treeList.stream() + .collect(Collectors.toMap(item -> item.getMetadata().getName(), + Function.identity())); + return listAll() + .map(menuVo -> { + LinkedHashSet menuItemNames = menuVo.getSpec().getMenuItems(); + if (menuItemNames == null) { + return menuVo.withMenuItems(List.of()); + } + List menuItems = menuItemNames.stream() + .map(nameItemRootNodeMap::get) + .filter(Objects::nonNull) + .sorted(defaultTreeNodeComparator()) + .toList(); + return menuVo.withMenuItems(menuItems); + }); + }); + } + + static List listToTree(Collection list) { + Map> parentNameIdentityMap = list.stream() + .filter(menuItemVo -> menuItemVo.getParentName() != null) + .collect(Collectors.groupingBy(MenuItemVo::getParentName)); + + list.forEach(node -> { + // sort children + List children = + parentNameIdentityMap.getOrDefault(node.getMetadata().getName(), List.of()) + .stream() + .sorted(defaultTreeNodeComparator()) + .toList(); + node.setChildren(children); + }); + + return list.stream() + .filter(v -> v.getParentName() == null) + .collect(Collectors.toList()); + } + + Flux listAllMenuItem() { + return client.list(MenuItem.class, null, null) + .map(MenuItemVo::from); + } + + static Comparator defaultTreeNodeComparator() { + Function priority = menuItem -> menuItem.getSpec().getPriority(); + Function createTime = menuItem -> menuItem.getMetadata() + .getCreationTimestamp(); + Function name = menuItem -> menuItem.getMetadata().getName(); + + return Comparator.comparing(priority) + .thenComparing(createTime, Comparators.nullsLow()) + .thenComparing(name); + } + + static Collection populateParentName(List menuItemVos) { + Map nameIdentityMap = menuItemVos.stream() + .collect(Collectors.toMap(menuItem -> menuItem.getMetadata().getName(), + Function.identity())); + + nameIdentityMap.forEach((name, value) -> { + LinkedHashSet children = value.getSpec().getChildren(); + if (children == null) { + return; + } + for (String child : children) { + MenuItemVo childNode = nameIdentityMap.get(child); + if (childNode != null) { + childNode.setParentName(name); + } + } + }); + return nameIdentityMap.values(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/PluginFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/PluginFinderImpl.java new file mode 100644 index 0000000..0426b40 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/PluginFinderImpl.java @@ -0,0 +1,46 @@ +package run.halo.app.theme.finders.impl; + +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.pf4j.PluginManager; +import org.pf4j.PluginState; +import org.pf4j.PluginWrapper; +import org.springframework.util.Assert; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.PluginFinder; + +/** + * Plugin finder implementation. + * + * @author guqing + * @since 2.0.0 + */ +@Finder("pluginFinder") +@AllArgsConstructor +public class PluginFinderImpl implements PluginFinder { + private final PluginManager pluginManager; + + @Override + public boolean available(String pluginName) { + if (StringUtils.isBlank(pluginName)) { + return false; + } + PluginWrapper pluginWrapper = pluginManager.getPlugin(pluginName); + if (pluginWrapper == null) { + return false; + } + return PluginState.STARTED.equals(pluginWrapper.getPluginState()); + } + + @Override + public boolean available(String pluginName, String requiresVersion) { + Assert.notNull(requiresVersion, "Requires version must not be null."); + if (!this.available(pluginName)) { + return false; + } + var pluginWrapper = pluginManager.getPlugin(pluginName); + var pluginVersion = pluginWrapper.getDescriptor().getVersion(); + return pluginManager.getVersionManager() + .checkVersionConstraint(pluginVersion, requiresVersion); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/PostFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/PostFinderImpl.java new file mode 100644 index 0000000..e53b5e0 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/PostFinderImpl.java @@ -0,0 +1,283 @@ +package run.halo.app.theme.finders.impl; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.in; +import static run.halo.app.extension.index.query.QueryFactory.notEqual; + +import java.util.Comparator; +import java.util.List; +import java.util.Map; +import java.util.stream.Collectors; +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.ObjectUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.data.domain.Sort; +import org.springframework.lang.NonNull; +import org.springframework.util.Assert; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.content.CategoryService; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.exception.ExtensionNotFoundException; +import run.halo.app.extension.index.query.Query; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; +import run.halo.app.infra.utils.HaloUtils; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.PostFinder; +import run.halo.app.theme.finders.PostPublicQueryService; +import run.halo.app.theme.finders.vo.ContentVo; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.finders.vo.NavigationPostVo; +import run.halo.app.theme.finders.vo.PostArchiveVo; +import run.halo.app.theme.finders.vo.PostArchiveYearMonthVo; +import run.halo.app.theme.finders.vo.PostVo; +import run.halo.app.theme.router.ReactiveQueryPostPredicateResolver; + +/** + * A finder for {@link Post}. + * + * @author guqing + * @since 2.0.0 + */ +@Finder("postFinder") +@AllArgsConstructor +public class PostFinderImpl implements PostFinder { + + private final ReactiveExtensionClient client; + + private final PostPublicQueryService postPublicQueryService; + + private final ReactiveQueryPostPredicateResolver postPredicateResolver; + + private final CategoryService categoryService; + + @Override + public Mono getByName(String postName) { + return postPredicateResolver.getPredicate() + .flatMap(predicate -> client.get(Post.class, postName) + .filter(predicate) + .flatMap(post -> postPublicQueryService.convertToVo(post, + post.getSpec().getReleaseSnapshot()) + ) + ); + } + + @Override + public Mono content(String postName) { + return postPublicQueryService.getContent(postName); + } + + static Sort defaultSort() { + return Sort.by(Sort.Order.desc("spec.pinned"), + Sort.Order.desc("spec.priority"), + Sort.Order.desc("spec.publishTime"), + Sort.Order.desc("metadata.name") + ); + } + + @NonNull + static LinkNavigation findPostNavigation(List postNames, String target) { + Assert.notNull(target, "Target post name must not be null"); + for (int i = 0; i < postNames.size(); i++) { + var item = postNames.get(i); + if (target.equals(item)) { + var prevLink = (i > 0) ? postNames.get(i - 1) : null; + var nextLink = (i < postNames.size() - 1) ? postNames.get(i + 1) : null; + return new LinkNavigation(prevLink, target, nextLink); + } + } + return new LinkNavigation(null, target, null); + } + + static Sort archiveSort() { + return Sort.by(Sort.Order.desc("spec.publishTime"), + Sort.Order.desc("metadata.name") + ); + } + + private Mono fetchByName(String name) { + if (StringUtils.isBlank(name)) { + return Mono.empty(); + } + return getByName(name) + .onErrorResume(ExtensionNotFoundException.class::isInstance, (error) -> Mono.empty()); + } + + @Override + public Mono cursor(String currentName) { + return postPredicateResolver.getListOptions() + .map(listOptions -> ListOptions.builder(listOptions) + // Exclude hidden posts + .andQuery(notHiddenPostQuery()) + .build() + ) + .flatMap(postListOption -> { + var postNames = client.indexedQueryEngine() + .retrieve(Post.GVK, postListOption, + PageRequestImpl.ofSize(0).withSort(defaultSort()) + ) + .getItems(); + var previousNextPair = findPostNavigation(postNames, currentName); + String previousPostName = previousNextPair.prev(); + String nextPostName = previousNextPair.next(); + var builder = NavigationPostVo.builder(); + var currentMono = getByName(currentName) + .doOnNext(builder::current); + var prevMono = fetchByName(previousPostName) + .doOnNext(builder::previous); + var nextMono = fetchByName(nextPostName) + .doOnNext(builder::next); + return Mono.when(currentMono, prevMono, nextMono) + .then(Mono.fromSupplier(builder::build)); + }) + .defaultIfEmpty(NavigationPostVo.empty()); + } + + private static Query notHiddenPostQuery() { + return notEqual("status.hideFromList", BooleanUtils.TRUE); + } + + @Override + public Mono> list(Integer page, Integer size) { + var listOptions = ListOptions.builder() + .fieldQuery(notHiddenPostQuery()) + .build(); + return postPublicQueryService.list(listOptions, getPageRequest(page, size)); + } + + private PageRequestImpl getPageRequest(Integer page, Integer size) { + return PageRequestImpl.of(pageNullSafe(page), sizeNullSafe(size), defaultSort()); + } + + @Override + public Mono> listByCategory(Integer page, Integer size, + String categoryName) { + return listChildrenCategories(categoryName) + .map(category -> category.getMetadata().getName()) + .collectList() + .flatMap(categoryNames -> { + var listOptions = new ListOptions(); + var fieldQuery = in("spec.categories", categoryNames); + listOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + return postPublicQueryService.list(listOptions, getPageRequest(page, size)); + }); + } + + private Flux listChildrenCategories(String categoryName) { + if (StringUtils.isBlank(categoryName)) { + return client.listAll(Category.class, new ListOptions(), + Sort.by(Sort.Order.asc("metadata.creationTimestamp"), + Sort.Order.desc("metadata.name"))); + } + return categoryService.listChildren(categoryName); + } + + @Override + public Mono> listByTag(Integer page, Integer size, String tag) { + var fieldQuery = QueryFactory.all(); + if (StringUtils.isNotBlank(tag)) { + fieldQuery = and(fieldQuery, equal("spec.tags", tag)); + } + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + return postPublicQueryService.list(listOptions, getPageRequest(page, size)); + } + + @Override + public Mono> listByOwner(Integer page, Integer size, String owner) { + var fieldQuery = QueryFactory.all(); + if (StringUtils.isNotBlank(owner)) { + fieldQuery = and(fieldQuery, equal("spec.owner", owner)); + } + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + return postPublicQueryService.list(listOptions, getPageRequest(page, size)); + } + + @Override + public Mono> archives(Integer page, Integer size) { + return archives(page, size, null, null); + } + + @Override + public Mono> archives(Integer page, Integer size, String year) { + return archives(page, size, year, null); + } + + @Override + public Mono> archives(Integer page, Integer size, String year, + String month) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of(notHiddenPostQuery())); + var labelSelectorBuilder = LabelSelector.builder(); + if (StringUtils.isNotBlank(year)) { + labelSelectorBuilder.eq(Post.ARCHIVE_YEAR_LABEL, year); + } + if (StringUtils.isNotBlank(month)) { + labelSelectorBuilder.eq(Post.ARCHIVE_MONTH_LABEL, month); + } + listOptions.setLabelSelector(labelSelectorBuilder.build()); + var pageRequest = PageRequestImpl.of(pageNullSafe(page), sizeNullSafe(size), archiveSort()); + return postPublicQueryService.list(listOptions, pageRequest) + .map(list -> { + Map> yearPosts = list.get() + .collect(Collectors.groupingBy( + post -> HaloUtils.getYearText(post.getSpec().getPublishTime()))); + List postArchives = yearPosts.entrySet().stream() + .map(entry -> { + String key = entry.getKey(); + // archives by month + Map> monthPosts = entry.getValue().stream() + .collect(Collectors.groupingBy( + post -> HaloUtils.getMonthText(post.getSpec().getPublishTime()))); + // convert to archive year month value objects + List monthArchives = monthPosts.entrySet() + .stream() + .map(monthEntry -> PostArchiveYearMonthVo.builder() + .posts(monthEntry.getValue()) + .month(monthEntry.getKey()) + .build() + ) + .sorted( + Comparator.comparing(PostArchiveYearMonthVo::getMonth).reversed()) + .toList(); + return PostArchiveVo.builder() + .year(String.valueOf(key)) + .months(monthArchives) + .build(); + }) + .sorted(Comparator.comparing(PostArchiveVo::getYear).reversed()) + .toList(); + return new ListResult<>(list.getPage(), list.getSize(), list.getTotal(), + postArchives); + }) + .defaultIfEmpty(ListResult.emptyResult()); + } + + @Override + public Flux listAll() { + return postPredicateResolver.getListOptions() + .flatMapMany(listOptions -> client.listAll(Post.class, listOptions, defaultSort())) + .concatMap(postPublicQueryService::convertToListedVo); + } + + int pageNullSafe(Integer page) { + return ObjectUtils.defaultIfNull(page, 1); + } + + int sizeNullSafe(Integer size) { + return ObjectUtils.defaultIfNull(size, 10); + } + + record LinkNavigation(String prev, String current, String next) { + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/PostPublicQueryServiceImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/PostPublicQueryServiceImpl.java new file mode 100644 index 0000000..201444d --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/PostPublicQueryServiceImpl.java @@ -0,0 +1,191 @@ +package run.halo.app.theme.finders.impl; + +import java.util.List; +import java.util.function.Function; +import lombok.RequiredArgsConstructor; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.util.CollectionUtils; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.content.ContentWrapper; +import run.halo.app.content.PostService; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.metrics.CounterService; +import run.halo.app.metrics.MeterUtils; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.theme.ReactivePostContentHandler; +import run.halo.app.theme.finders.CategoryFinder; +import run.halo.app.theme.finders.ContributorFinder; +import run.halo.app.theme.finders.PostPublicQueryService; +import run.halo.app.theme.finders.TagFinder; +import run.halo.app.theme.finders.vo.ContentVo; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.finders.vo.PostVo; +import run.halo.app.theme.finders.vo.StatsVo; +import run.halo.app.theme.router.ReactiveQueryPostPredicateResolver; + +@Component +@RequiredArgsConstructor +public class PostPublicQueryServiceImpl implements PostPublicQueryService { + + private final ReactiveExtensionClient client; + + private final TagFinder tagFinder; + + private final CategoryFinder categoryFinder; + + private final ContributorFinder contributorFinder; + + private final CounterService counterService; + + private final PostService postService; + + private final ExtensionGetter extensionGetter; + + private final ReactiveQueryPostPredicateResolver postPredicateResolver; + + @Override + public Mono> list(ListOptions queryOptions, PageRequest page) { + return postPredicateResolver.getListOptions() + .map(option -> { + var fieldSelector = queryOptions.getFieldSelector(); + if (fieldSelector != null) { + option.setFieldSelector(option.getFieldSelector() + .andQuery(fieldSelector.query())); + } + var labelSelector = queryOptions.getLabelSelector(); + if (labelSelector != null) { + option.setLabelSelector(option.getLabelSelector().and(labelSelector)); + } + return option; + }) + .flatMap(listOptions -> client.listBy(Post.class, listOptions, page)) + .flatMap(list -> Flux.fromStream(list.get()) + .concatMap(post -> convertToListedVo(post) + .flatMap(postVo -> populateStats(postVo) + .doOnNext(postVo::setStats).thenReturn(postVo) + ) + ) + .collectList() + .map(postVos -> new ListResult<>(list.getPage(), list.getSize(), list.getTotal(), + postVos) + ) + ) + .defaultIfEmpty(ListResult.emptyResult()); + } + + + @Override + public Mono convertToListedVo(@NonNull Post post) { + Assert.notNull(post, "Post must not be null"); + ListedPostVo postVo = ListedPostVo.from(post); + postVo.setCategories(List.of()); + postVo.setTags(List.of()); + postVo.setContributors(List.of()); + + return Mono.just(postVo) + .flatMap(lp -> populateStats(postVo) + .doOnNext(lp::setStats) + .thenReturn(lp) + ) + .flatMap(p -> { + String owner = p.getSpec().getOwner(); + return contributorFinder.getContributor(owner) + .doOnNext(p::setOwner) + .thenReturn(p); + }) + .flatMap(p -> { + List tagNames = p.getSpec().getTags(); + if (CollectionUtils.isEmpty(tagNames)) { + return Mono.just(p); + } + return tagFinder.getByNames(tagNames) + .collectList() + .doOnNext(p::setTags) + .thenReturn(p); + }) + .flatMap(p -> { + List categoryNames = p.getSpec().getCategories(); + if (CollectionUtils.isEmpty(categoryNames)) { + return Mono.just(p); + } + return categoryFinder.getByNames(categoryNames) + .collectList() + .doOnNext(p::setCategories) + .thenReturn(p); + }) + .flatMap(p -> contributorFinder.getContributors(p.getStatus().getContributors()) + .collectList() + .doOnNext(p::setContributors) + .thenReturn(p) + ) + .defaultIfEmpty(postVo); + } + + @Override + public Mono convertToVo(Post post, String snapshotName) { + final String baseSnapshotName = post.getSpec().getBaseSnapshot(); + return convertToListedVo(post) + .map(PostVo::from) + .flatMap(postVo -> postService.getContent(snapshotName, baseSnapshotName) + .flatMap(wrapper -> extendPostContent(post, wrapper)) + .doOnNext(postVo::setContent) + .thenReturn(postVo) + ); + } + + @Override + public Mono getContent(String postName) { + return postPredicateResolver.getPredicate() + .flatMap(predicate -> client.get(Post.class, postName) + .filter(predicate) + ) + .flatMap(post -> { + String releaseSnapshot = post.getSpec().getReleaseSnapshot(); + return postService.getContent(releaseSnapshot, post.getSpec().getBaseSnapshot()) + .flatMap(wrapper -> extendPostContent(post, wrapper)); + }); + } + + @NonNull + protected Mono extendPostContent(Post post, + ContentWrapper wrapper) { + Assert.notNull(post, "Post name must not be null"); + Assert.notNull(wrapper, "Post content must not be null"); + return extensionGetter.getEnabledExtensions(ReactivePostContentHandler.class) + .reduce(Mono.fromSupplier(() -> ReactivePostContentHandler.PostContentContext.builder() + .post(post) + .content(wrapper.getContent()) + .raw(wrapper.getRaw()) + .rawType(wrapper.getRawType()) + .build() + ), + (contentMono, handler) -> contentMono.flatMap(handler::handle) + ) + .flatMap(Function.identity()) + .map(postContent -> ContentVo.builder() + .content(postContent.getContent()) + .raw(postContent.getRaw()) + .build() + ); + } + + private Mono populateStats(T postVo) { + return counterService.getByName(MeterUtils.nameOf(Post.class, postVo.getMetadata() + .getName()) + ) + .map(counter -> StatsVo.builder() + .visit(counter.getVisit()) + .upvote(counter.getUpvote()) + .comment(counter.getApprovedComment()) + .build() + ) + .defaultIfEmpty(StatsVo.empty()); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/SinglePageConversionServiceImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/SinglePageConversionServiceImpl.java new file mode 100644 index 0000000..655165d --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/SinglePageConversionServiceImpl.java @@ -0,0 +1,153 @@ +package run.halo.app.theme.finders.impl; + +import java.util.List; +import java.util.function.Function; +import lombok.RequiredArgsConstructor; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.util.CollectionUtils; +import reactor.core.publisher.Mono; +import run.halo.app.content.ContentWrapper; +import run.halo.app.content.SinglePageService; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.metrics.CounterService; +import run.halo.app.metrics.MeterUtils; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.theme.ReactiveSinglePageContentHandler; +import run.halo.app.theme.ReactiveSinglePageContentHandler.SinglePageContentContext; +import run.halo.app.theme.finders.ContributorFinder; +import run.halo.app.theme.finders.SinglePageConversionService; +import run.halo.app.theme.finders.vo.ContentVo; +import run.halo.app.theme.finders.vo.ListedSinglePageVo; +import run.halo.app.theme.finders.vo.SinglePageVo; +import run.halo.app.theme.finders.vo.StatsVo; + +/** + * Default implementation of {@link SinglePageConversionService}. + * + * @author guqing + * @since 2.6.0 + */ +@Component +@RequiredArgsConstructor +public class SinglePageConversionServiceImpl implements SinglePageConversionService { + + private final ReactiveExtensionClient client; + + private final SinglePageService singlePageService; + + private final ContributorFinder contributorFinder; + + private final CounterService counterService; + + private final ExtensionGetter extensionGetter; + + @Override + public Mono convertToVo(SinglePage singlePage, String snapshotName) { + return convert(singlePage, snapshotName); + } + + @Override + public Mono convertToVo(@NonNull SinglePage singlePage) { + return convert(singlePage, singlePage.getSpec().getReleaseSnapshot()); + } + + protected Mono extendPageContent(SinglePage singlePage, + ContentWrapper wrapper) { + Assert.notNull(singlePage, "SinglePage must not be null"); + Assert.notNull(wrapper, "SinglePage content must not be null"); + return extensionGetter.getEnabledExtensions( + ReactiveSinglePageContentHandler.class) + .reduce(Mono.fromSupplier(() -> SinglePageContentContext.builder() + .singlePage(singlePage) + .content(wrapper.getContent()) + .raw(wrapper.getRaw()) + .rawType(wrapper.getRawType()) + .build() + ), + (contentMono, handler) -> contentMono.flatMap(handler::handle) + ) + .flatMap(Function.identity()) + .map(pageContent -> ContentVo.builder() + .content(pageContent.getContent()) + .raw(pageContent.getRaw()) + .build() + ); + } + + @Override + public Mono getContent(String pageName) { + return client.get(SinglePage.class, pageName) + .flatMap(singlePage -> { + String releaseSnapshot = singlePage.getSpec().getReleaseSnapshot(); + String baseSnapshot = singlePage.getSpec().getBaseSnapshot(); + return singlePageService.getContent(releaseSnapshot, baseSnapshot) + .flatMap(wrapper -> extendPageContent(singlePage, wrapper)); + }) + .map(wrapper -> ContentVo.builder().content(wrapper.getContent()) + .raw(wrapper.getRaw()).build()); + } + + @Override + public Mono convertToListedVo(SinglePage singlePage) { + return Mono.fromSupplier( + () -> { + ListedSinglePageVo pageVo = ListedSinglePageVo.from(singlePage); + pageVo.setContributors(List.of()); + return pageVo; + }) + .flatMap(this::populateStats) + .flatMap(this::populateContributors); + } + + Mono convert(SinglePage singlePage, String snapshotName) { + Assert.notNull(singlePage, "Single page must not be null"); + Assert.hasText(snapshotName, "Snapshot name must not be empty"); + return Mono.just(singlePage) + .map(page -> { + SinglePageVo pageVo = SinglePageVo.from(page); + pageVo.setContributors(List.of()); + pageVo.setContent(ContentVo.empty()); + return pageVo; + }) + .flatMap(this::populateStats) + .flatMap(this::populateContributors) + .flatMap(page -> { + String baseSnapshot = page.getSpec().getBaseSnapshot(); + return singlePageService.getContent(snapshotName, baseSnapshot) + .flatMap(wrapper -> extendPageContent(singlePage, wrapper)) + .doOnNext(page::setContent) + .thenReturn(page); + }) + .flatMap(page -> contributorFinder.getContributor(page.getSpec().getOwner()) + .doOnNext(page::setOwner) + .thenReturn(page) + ); + } + + Mono populateStats(T pageVo) { + String name = pageVo.getMetadata().getName(); + return counterService.getByName(MeterUtils.nameOf(SinglePage.class, name)) + .map(counter -> StatsVo.builder() + .visit(counter.getVisit()) + .upvote(counter.getUpvote()) + .comment(counter.getApprovedComment()) + .build() + ) + .doOnNext(pageVo::setStats) + .thenReturn(pageVo); + } + + Mono populateContributors(T pageVo) { + List names = pageVo.getStatus().getContributors(); + if (CollectionUtils.isEmpty(names)) { + return Mono.just(pageVo); + } + return contributorFinder.getContributors(names) + .collectList() + .doOnNext(pageVo::setContributors) + .thenReturn(pageVo); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/SinglePageFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/SinglePageFinderImpl.java new file mode 100644 index 0000000..256e7ef --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/SinglePageFinderImpl.java @@ -0,0 +1,126 @@ +package run.halo.app.theme.finders.impl; + +import java.security.Principal; +import java.time.Instant; +import java.util.Comparator; +import java.util.List; +import java.util.Objects; +import java.util.Optional; +import java.util.function.Function; +import java.util.function.Predicate; +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.ObjectUtils; +import org.springframework.lang.Nullable; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.AnonymousUserConst; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.SinglePageConversionService; +import run.halo.app.theme.finders.SinglePageFinder; +import run.halo.app.theme.finders.vo.ContentVo; +import run.halo.app.theme.finders.vo.ListedSinglePageVo; +import run.halo.app.theme.finders.vo.SinglePageVo; + +/** + * A default implementation of {@link SinglePage}. + * + * @author guqing + * @since 2.0.0 + */ +@Finder("singlePageFinder") +@AllArgsConstructor +public class SinglePageFinderImpl implements SinglePageFinder { + + public static final Predicate FIXED_PREDICATE = page -> page.isPublished() + && Objects.equals(false, page.getSpec().getDeleted()) + && Post.VisibleEnum.PUBLIC.equals(page.getSpec().getVisible()); + + private final ReactiveExtensionClient client; + + private final SinglePageConversionService singlePagePublicQueryService; + + @Override + public Mono getByName(String pageName) { + return client.get(SinglePage.class, pageName) + .filterWhen(page -> queryPredicate().map(predicate -> predicate.test(page))) + .flatMap(singlePagePublicQueryService::convertToVo); + } + + @Override + public Mono content(String pageName) { + return singlePagePublicQueryService.getContent(pageName); + } + + @Override + public Mono> list(Integer page, Integer size) { + return list(page, size, null, null); + } + + @Override + public Mono> list(@Nullable Integer page, @Nullable Integer size, + @Nullable Predicate predicate, @Nullable Comparator comparator) { + var predicateToUse = Optional.ofNullable(predicate) + .map(p -> p.and(FIXED_PREDICATE)) + .orElse(FIXED_PREDICATE); + var comparatorToUse = Optional.ofNullable(comparator) + .orElse(defaultComparator()); + return client.list(SinglePage.class, predicateToUse, + comparatorToUse, pageNullSafe(page), sizeNullSafe(size)) + .flatMap(list -> Flux.fromStream(list.get()) + .concatMap(singlePagePublicQueryService::convertToListedVo) + .collectList() + .map(pageVos -> new ListResult<>(list.getPage(), list.getSize(), list.getTotal(), + pageVos) + ) + ) + .defaultIfEmpty(new ListResult<>(0, 0, 0, List.of())); + } + + Mono> queryPredicate() { + Predicate predicate = page -> page.isPublished() + && Objects.equals(false, page.getSpec().getDeleted()); + Predicate visiblePredicate = + page -> Post.VisibleEnum.PUBLIC.equals(page.getSpec().getVisible()); + return currentUserName() + .map(username -> predicate.and( + visiblePredicate.or(page -> username.equals(page.getSpec().getOwner()))) + ) + .defaultIfEmpty(predicate.and(visiblePredicate)); + } + + Mono currentUserName() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Principal::getName) + .filter(name -> !AnonymousUserConst.isAnonymousUser(name)); + } + + static Comparator defaultComparator() { + Function pinned = + page -> Objects.requireNonNullElse(page.getSpec().getPinned(), false); + Function priority = + page -> Objects.requireNonNullElse(page.getSpec().getPriority(), 0); + Function creationTimestamp = + page -> page.getMetadata().getCreationTimestamp(); + Function name = page -> page.getMetadata().getName(); + return Comparator.comparing(pinned) + .thenComparing(priority) + .thenComparing(creationTimestamp) + .thenComparing(name) + .reversed(); + } + + int pageNullSafe(Integer page) { + return ObjectUtils.defaultIfNull(page, 1); + } + + int sizeNullSafe(Integer size) { + return ObjectUtils.defaultIfNull(size, 10); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/SiteStatsFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/SiteStatsFinderImpl.java new file mode 100644 index 0000000..3003853 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/SiteStatsFinderImpl.java @@ -0,0 +1,71 @@ +package run.halo.app.theme.finders.impl; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; + +import lombok.AllArgsConstructor; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Counter; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.SiteStatsFinder; +import run.halo.app.theme.finders.vo.SiteStatsVo; + +/** + * A default implementation of {@link SiteStatsFinder}. + * + * @author guqing + * @since 2.0.0 + */ +@AllArgsConstructor +@Finder("siteStatsFinder") +public class SiteStatsFinderImpl implements SiteStatsFinder { + private final ReactiveExtensionClient client; + + @Override + public Mono getStats() { + return client.list(Counter.class, null, null) + .reduce(SiteStatsVo.empty(), (stats, counter) -> { + stats.setVisit(stats.getVisit() + counter.getVisit()); + stats.setComment(stats.getComment() + counter.getApprovedComment()); + stats.setUpvote(stats.getUpvote() + counter.getUpvote()); + return stats; + }) + .flatMap(siteStatsVo -> postCount() + .doOnNext(siteStatsVo::setPost) + .thenReturn(siteStatsVo) + ) + .flatMap(siteStatsVo -> categoryCount() + .doOnNext(siteStatsVo::setCategory) + .thenReturn(siteStatsVo)); + } + + Mono postCount() { + var listOptions = new ListOptions(); + listOptions.setLabelSelector(LabelSelector.builder() + .eq(Post.PUBLISHED_LABEL, "true") + .build()); + var fieldQuery = and( + isNull("metadata.deletionTimestamp"), + equal("spec.deleted", "false") + ); + listOptions.setFieldSelector(FieldSelector.of(fieldQuery)); + return client.listBy(Post.class, listOptions, PageRequestImpl.ofSize(1)) + .map(result -> (int) result.getTotal()); + } + + Mono categoryCount() { + return client.listBy(Category.class, new ListOptions(), PageRequestImpl.ofSize(1)) + .map(ListResult::getTotal) + .map(Long::intValue); + } + +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/TagFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/TagFinderImpl.java new file mode 100644 index 0000000..0f6a135 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/TagFinderImpl.java @@ -0,0 +1,112 @@ +package run.halo.app.theme.finders.impl; + +import java.util.Comparator; +import java.util.List; +import java.util.Optional; +import java.util.function.Predicate; +import java.util.stream.Collectors; +import org.apache.commons.lang3.ObjectUtils; +import org.springframework.data.domain.Sort; +import org.springframework.lang.Nullable; +import org.springframework.util.CollectionUtils; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequest; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.TagFinder; +import run.halo.app.theme.finders.vo.TagVo; + +/** + * A default implementation of {@link TagFinder}. + * + * @author guqing + * @since 2.0.0 + */ +@Finder("tagFinder") +public class TagFinderImpl implements TagFinder { + + public static final Comparator DEFAULT_COMPARATOR = + Comparator.comparing(tag -> tag.getMetadata().getCreationTimestamp()); + + private final ReactiveExtensionClient client; + + public TagFinderImpl(ReactiveExtensionClient client) { + this.client = client; + } + + @Override + public Mono getByName(String name) { + return client.fetch(Tag.class, name) + .map(TagVo::from); + } + + @Override + public Flux getByNames(List names) { + return Flux.fromIterable(names) + .concatMap(this::getByName); + } + + @Override + public Mono> list(Integer page, Integer size) { + return listBy(new ListOptions(), + PageRequestImpl.of(pageNullSafe(page), sizeNullSafe(size))); + } + + @Override + public Mono> list(@Nullable Integer page, @Nullable Integer size, + @Nullable Predicate predicate, @Nullable Comparator comparator) { + Comparator comparatorToUse = Optional.ofNullable(comparator) + .orElse(DEFAULT_COMPARATOR.reversed()); + return client.list(Tag.class, predicate, + comparatorToUse, pageNullSafe(page), sizeNullSafe(size)) + .map(list -> { + List tagVos = list.get() + .map(TagVo::from) + .collect(Collectors.toList()); + return new ListResult<>(list.getPage(), list.getSize(), list.getTotal(), tagVos); + }) + .defaultIfEmpty( + new ListResult<>(pageNullSafe(page), sizeNullSafe(size), 0L, List.of())); + } + + @Override + public List convertToVo(List tags) { + if (CollectionUtils.isEmpty(tags)) { + return List.of(); + } + return tags.stream() + .map(TagVo::from) + .collect(Collectors.toList()); + } + + @Override + public Flux listAll() { + return client.listAll(Tag.class, new ListOptions(), + Sort.by(Sort.Order.desc("metadata.creationTimestamp"))) + .map(TagVo::from); + } + + private Mono> listBy(ListOptions listOptions, PageRequest pageRequest) { + return client.listBy(Tag.class, listOptions, pageRequest) + .map(result -> { + List tagVos = result.get() + .map(TagVo::from) + .collect(Collectors.toList()); + return new ListResult<>(result.getPage(), result.getSize(), result.getTotal(), + tagVos); + }); + } + + int pageNullSafe(Integer page) { + return ObjectUtils.defaultIfNull(page, 1); + } + + int sizeNullSafe(Integer size) { + return ObjectUtils.defaultIfNull(size, 10); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/impl/ThemeFinderImpl.java b/application/src/main/java/run/halo/app/theme/finders/impl/ThemeFinderImpl.java new file mode 100644 index 0000000..5c463fd --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/impl/ThemeFinderImpl.java @@ -0,0 +1,66 @@ +package run.halo.app.theme.finders.impl; + +import com.fasterxml.jackson.databind.JsonNode; +import java.util.HashMap; +import java.util.Map; +import org.apache.commons.lang3.StringUtils; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.Theme; +import run.halo.app.extension.ConfigMap; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.theme.finders.Finder; +import run.halo.app.theme.finders.ThemeFinder; +import run.halo.app.theme.finders.vo.ThemeVo; + +/** + * A default implementation for {@link ThemeFinder}. + * + * @author guqing + * @since 2.0.0 + */ +@Finder("themeFinder") +public class ThemeFinderImpl implements ThemeFinder { + + private final ReactiveExtensionClient client; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + public ThemeFinderImpl(ReactiveExtensionClient client, + SystemConfigurableEnvironmentFetcher environmentFetcher) { + this.client = client; + this.environmentFetcher = environmentFetcher; + } + + @Override + public Mono activation() { + return environmentFetcher.fetch(SystemSetting.Theme.GROUP, SystemSetting.Theme.class) + .map(SystemSetting.Theme::getActive) + .flatMap(themeName -> client.fetch(Theme.class, themeName)) + .flatMap(theme -> themeWithConfig(ThemeVo.from(theme))); + } + + @Override + public Mono getByName(String themeName) { + return client.fetch(Theme.class, themeName) + .flatMap(theme -> themeWithConfig(ThemeVo.from(theme))); + } + + private Mono themeWithConfig(ThemeVo themeVo) { + if (StringUtils.isBlank(themeVo.getSpec().getConfigMapName())) { + return Mono.just(themeVo); + } + return client.fetch(ConfigMap.class, themeVo.getSpec().getConfigMapName()) + .map(configMap -> { + Map config = new HashMap<>(); + configMap.getData().forEach((k, v) -> { + JsonNode jsonNode = JsonUtils.jsonToObject(v, JsonNode.class); + config.put(k, jsonNode); + }); + JsonNode configJson = JsonUtils.mapToObject(config, JsonNode.class); + return themeVo.withConfig(configJson); + }) + .defaultIfEmpty(themeVo); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/CategoryTreeVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/CategoryTreeVo.java new file mode 100644 index 0000000..b429af6 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/CategoryTreeVo.java @@ -0,0 +1,72 @@ +package run.halo.app.theme.finders.vo; + +import java.util.List; +import java.util.Objects; +import lombok.Builder; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import org.springframework.util.Assert; +import run.halo.app.core.extension.content.Category; +import run.halo.app.extension.MetadataOperator; + +/** + * A tree vo for {@link Category}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@Builder +@ToString +@EqualsAndHashCode +public class CategoryTreeVo implements VisualizableTreeNode, ExtensionVoOperator { + + private MetadataOperator metadata; + + private Category.CategorySpec spec; + + private Category.CategoryStatus status; + + private List children; + + private String parentName; + + private Integer postCount; + + /** + * Convert {@link CategoryVo} to {@link CategoryTreeVo}. + * + * @param category category value object + * @return category tree value object + */ + public static CategoryTreeVo from(CategoryVo category) { + Assert.notNull(category, "The category must not be null"); + return CategoryTreeVo.builder() + .metadata(category.getMetadata()) + .spec(category.getSpec()) + .status(category.getStatus()) + .children(List.of()) + .postCount(Objects.requireNonNullElse(category.getPostCount(), 0)) + .build(); + } + + /** + * Convert {@link CategoryTreeVo} to {@link CategoryVo}. + */ + public static CategoryVo toCategoryVo(CategoryTreeVo categoryTreeVo) { + Assert.notNull(categoryTreeVo, "The category tree vo must not be null"); + return CategoryVo.builder() + .metadata(categoryTreeVo.getMetadata()) + .spec(categoryTreeVo.getSpec()) + .status(categoryTreeVo.getStatus()) + .postCount(categoryTreeVo.getPostCount()) + .build(); + } + + @Override + public String nodeText() { + return String.format("%s (%s)%s", getSpec().getDisplayName(), getPostCount(), + spec.isPreventParentPostCascadeQuery() ? " (Independent)" : ""); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/CategoryVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/CategoryVo.java new file mode 100644 index 0000000..9a83cdd --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/CategoryVo.java @@ -0,0 +1,42 @@ +package run.halo.app.theme.finders.vo; + +import lombok.Builder; +import lombok.EqualsAndHashCode; +import lombok.Value; +import run.halo.app.core.extension.content.Category; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link Category}. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@Builder +@EqualsAndHashCode +public class CategoryVo implements ExtensionVoOperator { + + MetadataOperator metadata; + + Category.CategorySpec spec; + + Category.CategoryStatus status; + + Integer postCount; + + /** + * Convert {@link Category} to {@link CategoryVo}. + * + * @param category category extension + * @return category value object + */ + public static CategoryVo from(Category category) { + return CategoryVo.builder() + .metadata(category.getMetadata()) + .spec(category.getSpec()) + .status(category.getStatus()) + .postCount(category.getStatusOrDefault().getVisiblePostCount()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/CommentStatsVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/CommentStatsVo.java new file mode 100644 index 0000000..c8ece19 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/CommentStatsVo.java @@ -0,0 +1,22 @@ +package run.halo.app.theme.finders.vo; + +import lombok.Builder; +import lombok.Value; + +/** + * comment stats value object. + * + * @author LIlGG + * @since 2.0.0 + */ +@Value +@Builder +public class CommentStatsVo { + Integer upvote; + + public static CommentStatsVo empty() { + return CommentStatsVo.builder() + .upvote(0) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/CommentVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/CommentVo.java new file mode 100644 index 0000000..42b2337 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/CommentVo.java @@ -0,0 +1,50 @@ +package run.halo.app.theme.finders.vo; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.experimental.Accessors; +import run.halo.app.content.comment.OwnerInfo; +import run.halo.app.core.extension.content.Comment; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link Comment}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@Accessors(chain = true) +@EqualsAndHashCode +public class CommentVo implements ExtensionVoOperator { + + @Schema(requiredMode = REQUIRED) + private MetadataOperator metadata; + + @Schema(requiredMode = REQUIRED) + private Comment.CommentSpec spec; + + private Comment.CommentStatus status; + + @Schema(requiredMode = REQUIRED) + private OwnerInfo owner; + + @Schema(requiredMode = REQUIRED) + private CommentStatsVo stats; + + /** + * Convert {@link Comment} to {@link CommentVo}. + * + * @param comment comment extension + * @return a value object for {@link Comment} + */ + public static CommentVo from(Comment comment) { + return new CommentVo() + .setMetadata(comment.getMetadata()) + .setSpec(comment.getSpec()) + .setStatus(comment.getStatus()); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/CommentWithReplyVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/CommentWithReplyVo.java new file mode 100644 index 0000000..2e9019a --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/CommentWithReplyVo.java @@ -0,0 +1,31 @@ +package run.halo.app.theme.finders.vo; + +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.experimental.Accessors; +import org.springframework.beans.BeanUtils; +import run.halo.app.extension.ListResult; + +/** + *

A value object for comment with reply.

+ * + * @author guqing + * @since 2.14.0 + */ +@Data +@Accessors(chain = true) +@EqualsAndHashCode(callSuper = true) +public class CommentWithReplyVo extends CommentVo { + + private ListResult replies; + + /** + * Convert {@link CommentVo} to {@link CommentWithReplyVo}. + */ + public static CommentWithReplyVo from(CommentVo commentVo) { + var commentWithReply = new CommentWithReplyVo(); + BeanUtils.copyProperties(commentVo, commentWithReply); + commentWithReply.setReplies(ListResult.emptyResult()); + return commentWithReply; + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/ContentVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/ContentVo.java new file mode 100644 index 0000000..addf263 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/ContentVo.java @@ -0,0 +1,32 @@ +package run.halo.app.theme.finders.vo; + +import lombok.Builder; +import lombok.ToString; +import lombok.Value; +import run.halo.app.core.extension.content.Snapshot; + +/** + * A value object for Content from {@link Snapshot}. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@ToString +@Builder +public class ContentVo { + + String raw; + + String content; + + /** + * Empty content object. + */ + public static ContentVo empty() { + return ContentVo.builder() + .raw("") + .content("") + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/ContributorVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/ContributorVo.java new file mode 100644 index 0000000..06396bc --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/ContributorVo.java @@ -0,0 +1,49 @@ +package run.halo.app.theme.finders.vo; + +import lombok.Builder; +import lombok.ToString; +import lombok.Value; +import run.halo.app.core.extension.User; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link run.halo.app.core.extension.User}. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@ToString +@Builder +public class ContributorVo implements ExtensionVoOperator { + + String name; + + String displayName; + + String avatar; + + String bio; + + String permalink; + + MetadataOperator metadata; + + /** + * Convert {@link User} to {@link ContributorVo}. + * + * @param user user extension + * @return contributor value object + */ + public static ContributorVo from(User user) { + User.UserStatus status = user.getStatus(); + String permalink = (status == null ? "" : status.getPermalink()); + return builder().name(user.getMetadata().getName()) + .displayName(user.getSpec().getDisplayName()) + .avatar(user.getSpec().getAvatar()) + .bio(user.getSpec().getBio()) + .permalink(permalink) + .metadata(user.getMetadata()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/ListedPostVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/ListedPostVo.java new file mode 100644 index 0000000..bf1d576 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/ListedPostVo.java @@ -0,0 +1,59 @@ +package run.halo.app.theme.finders.vo; + +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.SuperBuilder; +import org.springframework.util.Assert; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link Post}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@SuperBuilder +@ToString +@EqualsAndHashCode +public class ListedPostVo implements ExtensionVoOperator { + + private MetadataOperator metadata; + + private Post.PostSpec spec; + + private Post.PostStatus status; + + private List categories; + + private List tags; + + private List contributors; + + private ContributorVo owner; + + private StatsVo stats; + + /** + * Convert {@link Post} to {@link ListedPostVo}. + * + * @param post post extension + * @return post value object + */ + public static ListedPostVo from(Post post) { + Assert.notNull(post, "The post must not be null."); + Post.PostSpec spec = post.getSpec(); + Post.PostStatus postStatus = post.getStatusOrDefault(); + return ListedPostVo.builder() + .metadata(post.getMetadata()) + .spec(spec) + .status(postStatus) + .categories(List.of()) + .tags(List.of()) + .contributors(List.of()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/ListedSinglePageVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/ListedSinglePageVo.java new file mode 100644 index 0000000..499a6b1 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/ListedSinglePageVo.java @@ -0,0 +1,53 @@ +package run.halo.app.theme.finders.vo; + +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.SuperBuilder; +import org.springframework.util.Assert; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link SinglePage}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@SuperBuilder +@ToString +@EqualsAndHashCode +public class ListedSinglePageVo implements ExtensionVoOperator { + + private MetadataOperator metadata; + + private SinglePage.SinglePageSpec spec; + + private SinglePage.SinglePageStatus status; + + private StatsVo stats; + + private List contributors; + + private ContributorVo owner; + + /** + * Convert {@link SinglePage} to {@link ListedSinglePageVo}. + * + * @param singlePage single page extension + * @return special page value object + */ + public static ListedSinglePageVo from(SinglePage singlePage) { + Assert.notNull(singlePage, "The singlePage must not be null."); + SinglePage.SinglePageSpec spec = singlePage.getSpec(); + SinglePage.SinglePageStatus pageStatus = singlePage.getStatus(); + return ListedSinglePageVo.builder() + .metadata(singlePage.getMetadata()) + .spec(spec) + .status(pageStatus) + .contributors(List.of()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/MenuItemVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/MenuItemVo.java new file mode 100644 index 0000000..b2dece1 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/MenuItemVo.java @@ -0,0 +1,62 @@ +package run.halo.app.theme.finders.vo; + +import java.util.List; +import lombok.Builder; +import lombok.Data; +import lombok.ToString; +import org.apache.commons.lang3.StringUtils; +import run.halo.app.core.extension.MenuItem; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link MenuItem}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@ToString +@Builder +public class MenuItemVo implements VisualizableTreeNode, ExtensionVoOperator { + + MetadataOperator metadata; + + MenuItem.MenuItemSpec spec; + + MenuItem.MenuItemStatus status; + + List children; + + String parentName; + + /** + * Gets menu item's display name. + */ + public String getDisplayName() { + if (status != null && StringUtils.isNotBlank(status.getDisplayName())) { + return status.getDisplayName(); + } + return spec.getDisplayName(); + } + + /** + * Convert {@link MenuItem} to {@link MenuItemVo}. + * + * @param menuItem menu item extension + * @return menu item value object + */ + public static MenuItemVo from(MenuItem menuItem) { + MenuItem.MenuItemStatus status = menuItem.getStatus(); + return MenuItemVo.builder() + .metadata(menuItem.getMetadata()) + .spec(menuItem.getSpec()) + .status(status) + .children(List.of()) + .build(); + } + + @Override + public String nodeText() { + return getDisplayName(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/MenuVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/MenuVo.java new file mode 100644 index 0000000..857e5a3 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/MenuVo.java @@ -0,0 +1,59 @@ +package run.halo.app.theme.finders.vo; + +import java.util.Iterator; +import java.util.List; +import lombok.Builder; +import lombok.ToString; +import lombok.Value; +import lombok.With; +import run.halo.app.core.extension.Menu; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link Menu}. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@ToString +@Builder +public class MenuVo implements ExtensionVoOperator { + + MetadataOperator metadata; + + Menu.Spec spec; + + @With + List menuItems; + + /** + * Convert {@link Menu} to {@link MenuVo}. + * + * @param menu menu extension + * @return menu value object + */ + public static MenuVo from(Menu menu) { + return builder() + .metadata(menu.getMetadata()) + .spec(menu.getSpec()) + .menuItems(List.of()) + .build(); + } + + public void print(StringBuilder buffer) { + buffer.append(getSpec().getDisplayName()); + buffer.append('\n'); + if (menuItems == null) { + return; + } + for (Iterator it = menuItems.iterator(); it.hasNext(); ) { + MenuItemVo next = it.next(); + if (it.hasNext()) { + next.print(buffer, "├── ", "│ "); + } else { + next.print(buffer, "└── ", " "); + } + } + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/NavigationPostVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/NavigationPostVo.java new file mode 100644 index 0000000..be927d2 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/NavigationPostVo.java @@ -0,0 +1,38 @@ +package run.halo.app.theme.finders.vo; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.NOT_REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Builder; +import lombok.Value; + +/** + * Post navigation vo to hold previous and next item. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@Builder +public class NavigationPostVo { + + @Schema(requiredMode = NOT_REQUIRED) + PostVo previous; + + PostVo current; + + @Schema(requiredMode = NOT_REQUIRED) + PostVo next; + + public boolean hasNext() { + return next != null; + } + + public boolean hasPrevious() { + return previous != null; + } + + public static NavigationPostVo empty() { + return NavigationPostVo.builder().build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/PostArchiveVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/PostArchiveVo.java new file mode 100644 index 0000000..45f953e --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/PostArchiveVo.java @@ -0,0 +1,20 @@ +package run.halo.app.theme.finders.vo; + +import java.util.List; +import lombok.Builder; +import lombok.Value; + +/** + * Post archives by year and month. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@Builder +public class PostArchiveVo { + + String year; + + List months; +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/PostArchiveYearMonthVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/PostArchiveYearMonthVo.java new file mode 100644 index 0000000..a145bc0 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/PostArchiveYearMonthVo.java @@ -0,0 +1,20 @@ +package run.halo.app.theme.finders.vo; + +import java.util.List; +import lombok.Builder; +import lombok.Value; + +/** + * Post archives by month. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@Builder +public class PostArchiveYearMonthVo { + + String month; + + List posts; +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/PostVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/PostVo.java new file mode 100644 index 0000000..40560d4 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/PostVo.java @@ -0,0 +1,62 @@ +package run.halo.app.theme.finders.vo; + +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.SuperBuilder; +import org.springframework.util.Assert; +import run.halo.app.core.extension.content.Post; + +/** + * A value object for {@link Post}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@SuperBuilder +@ToString +@EqualsAndHashCode(callSuper = true) +public class PostVo extends ListedPostVo { + + private ContentVo content; + + /** + * Convert {@link Post} to {@link PostVo}. + * + * @param post post extension + * @return post value object + */ + public static PostVo from(Post post) { + Assert.notNull(post, "The post must not be null."); + Post.PostSpec spec = post.getSpec(); + Post.PostStatus postStatus = post.getStatusOrDefault(); + return PostVo.builder() + .metadata(post.getMetadata()) + .spec(spec) + .status(postStatus) + .categories(List.of()) + .tags(List.of()) + .contributors(List.of()) + .content(new ContentVo(null, null)) + .build(); + } + + /** + * Convert {@link Post} to {@link PostVo}. + */ + public static PostVo from(ListedPostVo postVo) { + return builder() + .metadata(postVo.getMetadata()) + .spec(postVo.getSpec()) + .status(postVo.getStatus()) + .categories(postVo.getCategories()) + .tags(postVo.getTags()) + .contributors(postVo.getContributors()) + .owner(postVo.getOwner()) + .stats(postVo.getStats()) + .content(new ContentVo("", "")) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/ReplyVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/ReplyVo.java new file mode 100644 index 0000000..4f59d9d --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/ReplyVo.java @@ -0,0 +1,51 @@ +package run.halo.app.theme.finders.vo; + +import static io.swagger.v3.oas.annotations.media.Schema.RequiredMode.REQUIRED; + +import io.swagger.v3.oas.annotations.media.Schema; +import lombok.Builder; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import run.halo.app.content.comment.OwnerInfo; +import run.halo.app.core.extension.content.Reply; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link Reply}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@Builder +@ToString +@EqualsAndHashCode +public class ReplyVo implements ExtensionVoOperator { + + @Schema(requiredMode = REQUIRED) + private MetadataOperator metadata; + + @Schema(requiredMode = REQUIRED) + private Reply.ReplySpec spec; + + @Schema(requiredMode = REQUIRED) + private OwnerInfo owner; + + @Schema(requiredMode = REQUIRED) + private CommentStatsVo stats; + + /** + * Convert {@link Reply} to {@link ReplyVo}. + * + * @param reply reply extension + * @return a value object for {@link Reply} + */ + public static ReplyVo from(Reply reply) { + Reply.ReplySpec spec = reply.getSpec(); + return ReplyVo.builder() + .metadata(reply.getMetadata()) + .spec(spec) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/SinglePageVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/SinglePageVo.java new file mode 100644 index 0000000..b1ed938 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/SinglePageVo.java @@ -0,0 +1,43 @@ +package run.halo.app.theme.finders.vo; + +import java.util.List; +import lombok.Data; +import lombok.EqualsAndHashCode; +import lombok.ToString; +import lombok.experimental.SuperBuilder; +import org.springframework.util.Assert; +import run.halo.app.core.extension.content.SinglePage; + +/** + * A value object for {@link SinglePage}. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@SuperBuilder +@ToString +@EqualsAndHashCode(callSuper = true) +public class SinglePageVo extends ListedSinglePageVo { + + private ContentVo content; + + /** + * Convert {@link SinglePage} to {@link SinglePageVo}. + * + * @param singlePage single page extension + * @return special page value object + */ + public static SinglePageVo from(SinglePage singlePage) { + Assert.notNull(singlePage, "The singlePage must not be null."); + SinglePage.SinglePageSpec spec = singlePage.getSpec(); + SinglePage.SinglePageStatus pageStatus = singlePage.getStatus(); + return SinglePageVo.builder() + .metadata(singlePage.getMetadata()) + .spec(spec) + .status(pageStatus) + .contributors(List.of()) + .content(new ContentVo(null, null)) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/SiteSettingVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/SiteSettingVo.java new file mode 100644 index 0000000..485ee1a --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/SiteSettingVo.java @@ -0,0 +1,132 @@ +package run.halo.app.theme.finders.vo; + +import java.net.URL; +import java.util.Map; +import lombok.Builder; +import lombok.Value; +import lombok.With; +import org.springframework.util.Assert; +import run.halo.app.extension.ConfigMap; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.utils.JsonUtils; + +/** + * Site setting value object for theme. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@Builder +public class SiteSettingVo { + + String title; + + @With + URL url; + + String subtitle; + + String logo; + + String favicon; + + Boolean allowRegistration; + + PostSetting post; + + SeoSetting seo; + + CommentSetting comment; + + /** + * Convert to system {@link ConfigMap} to {@link SiteSettingVo}. + * + * @param configMap config map named system + * @return site setting value object + */ + public static SiteSettingVo from(ConfigMap configMap) { + Assert.notNull(configMap, "The configMap must not be null."); + Map data = configMap.getData(); + if (data == null) { + return builder().build(); + } + SystemSetting.Basic basicSetting = + toObject(data.get(SystemSetting.Basic.GROUP), SystemSetting.Basic.class); + + SystemSetting.User userSetting = + toObject(data.get(SystemSetting.User.GROUP), SystemSetting.User.class); + + SystemSetting.Post postSetting = + toObject(data.get(SystemSetting.Post.GROUP), SystemSetting.Post.class); + + SystemSetting.Seo seoSetting = + toObject(data.get(SystemSetting.Seo.GROUP), SystemSetting.Seo.class); + + SystemSetting.Comment commentSetting = toObject(data.get(SystemSetting.Comment.GROUP), + SystemSetting.Comment.class); + return builder() + .title(basicSetting.getTitle()) + .subtitle(basicSetting.getSubtitle()) + .logo(basicSetting.getLogo()) + .favicon(basicSetting.getFavicon()) + .allowRegistration(userSetting.getAllowRegistration()) + .post(PostSetting.builder() + .postPageSize(postSetting.getPostPageSize()) + .archivePageSize(postSetting.getArchivePageSize()) + .categoryPageSize(postSetting.getCategoryPageSize()) + .tagPageSize(postSetting.getTagPageSize()) + .build()) + .seo(SeoSetting.builder() + .blockSpiders(seoSetting.getBlockSpiders()) + .keywords(seoSetting.getKeywords()) + .description(seoSetting.getDescription()) + .build()) + .comment(CommentSetting.builder() + .enable(commentSetting.getEnable()) + .requireReviewForNew(commentSetting.getRequireReviewForNew()) + .systemUserOnly(commentSetting.getSystemUserOnly()) + .build()) + .build(); + } + + private static T toObject(String json, Class type) { + if (json == null) { + // empty object + json = "{}"; + } + return JsonUtils.jsonToObject(json, type); + } + + @Value + @Builder + public static class PostSetting { + Integer postPageSize; + + Integer archivePageSize; + + Integer categoryPageSize; + + Integer tagPageSize; + } + + @Value + @Builder + public static class SeoSetting { + Boolean blockSpiders; + + String keywords; + + String description; + } + + @Value + @Builder + public static class CommentSetting { + Boolean enable; + + Boolean systemUserOnly; + + Boolean requireReviewForNew; + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/SiteStatsVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/SiteStatsVo.java new file mode 100644 index 0000000..89ddc40 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/SiteStatsVo.java @@ -0,0 +1,35 @@ +package run.halo.app.theme.finders.vo; + +import lombok.Builder; +import lombok.Data; + +/** + * A value object for site stats. + * + * @author guqing + * @since 2.0.0 + */ +@Data +@Builder +public class SiteStatsVo { + + private Integer visit; + + private Integer upvote; + + private Integer comment; + + private Integer post; + + private Integer category; + + public static SiteStatsVo empty() { + return SiteStatsVo.builder() + .visit(0) + .upvote(0) + .comment(0) + .post(0) + .category(0) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/StatsVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/StatsVo.java new file mode 100644 index 0000000..a4a6590 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/StatsVo.java @@ -0,0 +1,29 @@ +package run.halo.app.theme.finders.vo; + +import lombok.Builder; +import lombok.Value; + +/** + * Stats value object. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@Builder +public class StatsVo { + + Integer visit; + + Integer upvote; + + Integer comment; + + public static StatsVo empty() { + return StatsVo.builder() + .visit(0) + .upvote(0) + .comment(0) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/TagVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/TagVo.java new file mode 100644 index 0000000..fc1e4c9 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/TagVo.java @@ -0,0 +1,39 @@ +package run.halo.app.theme.finders.vo; + +import lombok.Builder; +import lombok.Value; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link Tag}. + */ +@Value +@Builder +public class TagVo implements ExtensionVoOperator { + + MetadataOperator metadata; + + Tag.TagSpec spec; + + Tag.TagStatus status; + + Integer postCount; + + /** + * Convert {@link Tag} to {@link TagVo}. + * + * @param tag tag extension + * @return tag value object + */ + public static TagVo from(Tag tag) { + Tag.TagSpec spec = tag.getSpec(); + Tag.TagStatus status = tag.getStatusOrDefault(); + return TagVo.builder() + .metadata(tag.getMetadata()) + .spec(spec) + .status(status) + .postCount(tag.getStatusOrDefault().getVisiblePostCount()) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/ThemeVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/ThemeVo.java new file mode 100644 index 0000000..550b920 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/ThemeVo.java @@ -0,0 +1,42 @@ +package run.halo.app.theme.finders.vo; + +import com.fasterxml.jackson.databind.JsonNode; +import lombok.Builder; +import lombok.ToString; +import lombok.Value; +import lombok.With; +import run.halo.app.core.extension.Theme; +import run.halo.app.extension.MetadataOperator; + +/** + * A value object for {@link Theme}. + * + * @author guqing + * @since 2.0.0 + */ +@Value +@Builder +@ToString +public class ThemeVo implements ExtensionVoOperator { + + MetadataOperator metadata; + + Theme.ThemeSpec spec; + + @With + JsonNode config; + + /** + * Convert {@link Theme} to {@link ThemeVo}. + * + * @param theme theme extension + * @return theme value object + */ + public static ThemeVo from(Theme theme) { + return ThemeVo.builder() + .metadata(theme.getMetadata()) + .spec(theme.getSpec()) + .config(null) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/UserVo.java b/application/src/main/java/run/halo/app/theme/finders/vo/UserVo.java new file mode 100644 index 0000000..fa60d07 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/UserVo.java @@ -0,0 +1,40 @@ +package run.halo.app.theme.finders.vo; + +import java.util.List; +import lombok.Builder; +import lombok.Value; +import org.apache.commons.lang3.ObjectUtils; +import run.halo.app.core.extension.User; +import run.halo.app.extension.MetadataOperator; +import run.halo.app.infra.utils.JsonUtils; + +@Value +@Builder +public class UserVo implements ExtensionVoOperator { + MetadataOperator metadata; + + User.UserSpec spec; + + User.UserStatus status; + + /** + * Converts to {@link UserVo} from {@link User}. + * + * @param user user extension + * @return user value object. + */ + public static UserVo from(User user) { + User.UserStatus statusCopy = + JsonUtils.deepCopy(ObjectUtils.defaultIfNull(user.getStatus(), new User.UserStatus())); + statusCopy.setLoginHistories(List.of()); + statusCopy.setLastLoginAt(null); + + User.UserSpec userSpecCopy = JsonUtils.deepCopy(user.getSpec()); + userSpecCopy.setPassword("[PROTECTED]"); + return UserVo.builder() + .metadata(user.getMetadata()) + .spec(userSpecCopy) + .status(statusCopy) + .build(); + } +} diff --git a/application/src/main/java/run/halo/app/theme/finders/vo/VisualizableTreeNode.java b/application/src/main/java/run/halo/app/theme/finders/vo/VisualizableTreeNode.java new file mode 100644 index 0000000..5f9b0eb --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/finders/vo/VisualizableTreeNode.java @@ -0,0 +1,37 @@ +package run.halo.app.theme.finders.vo; + +import java.util.Iterator; +import java.util.List; + +/** + * Show Tree Hierarchy. + * + * @author guqing + * @since 2.0.0 + */ +public interface VisualizableTreeNode> { + + /** + * Visualize tree node. + */ + default void print(StringBuilder buffer, String prefix, String childrenPrefix) { + buffer.append(prefix); + buffer.append(nodeText()); + buffer.append('\n'); + if (getChildren() == null) { + return; + } + for (Iterator it = getChildren().iterator(); it.hasNext(); ) { + T next = it.next(); + if (it.hasNext()) { + next.print(buffer, childrenPrefix + "├── ", childrenPrefix + "│ "); + } else { + next.print(buffer, childrenPrefix + "└── ", childrenPrefix + " "); + } + } + } + + String nodeText(); + + List getChildren(); +} diff --git a/application/src/main/java/run/halo/app/theme/message/ThemeMessageResolutionUtils.java b/application/src/main/java/run/halo/app/theme/message/ThemeMessageResolutionUtils.java new file mode 100644 index 0000000..d6943df --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/message/ThemeMessageResolutionUtils.java @@ -0,0 +1,261 @@ +package run.halo.app.theme.message; + +import java.io.BufferedInputStream; +import java.io.BufferedReader; +import java.io.File; +import java.io.FileInputStream; +import java.io.FileNotFoundException; +import java.io.IOException; +import java.io.InputStream; +import java.io.InputStreamReader; +import java.io.Reader; +import java.text.MessageFormat; +import java.util.ArrayList; +import java.util.Collections; +import java.util.HashMap; +import java.util.List; +import java.util.Locale; +import java.util.Map; +import java.util.Properties; +import org.springframework.lang.Nullable; +import org.thymeleaf.exceptions.TemplateInputException; +import org.thymeleaf.exceptions.TemplateProcessingException; +import org.thymeleaf.util.StringUtils; +import run.halo.app.theme.ThemeContext; + +/** + * @author guqing + * @since 2.0.0 + */ +public class ThemeMessageResolutionUtils { + + private static final Map EMPTY_MESSAGES = Collections.emptyMap(); + private static final String PROPERTIES_FILE_EXTENSION = ".properties"; + private static final String LOCATION = "i18n"; + private static final Object[] EMPTY_MESSAGE_PARAMETERS = new Object[0]; + + @Nullable + private static Reader messageReader(String messageResourceName, ThemeContext theme) + throws FileNotFoundException { + var themePath = theme.getPath(); + File messageFile = themePath.resolve(messageResourceName).toFile(); + if (!messageFile.exists()) { + return null; + } + final InputStream inputStream = new FileInputStream(messageFile); + return new BufferedReader(new InputStreamReader(new BufferedInputStream(inputStream))); + } + + public static Map resolveMessagesForTemplate(final Locale locale, + ThemeContext theme) { + + // Compute all the resource names we should use: *_gl_ES-gheada.properties, *_gl_ES + // .properties, _gl.properties... + // The order here is important: as we will let values from more specific files + // overwrite those in less specific, + // (e.g. a value for gl_ES will have more precedence than a value for gl). So we will + // iterate these resource + // names from less specific to more specific. + final List + messageResourceNames = computeMessageResourceNamesFromBase(locale); + + // Build the combined messages + Map combinedMessages = null; + for (final String messageResourceName : messageResourceNames) { + try { + final Reader messageResourceReader = messageReader(messageResourceName, theme); + if (messageResourceReader != null) { + + final Properties messageProperties = + readMessagesResource(messageResourceReader); + if (messageProperties != null && !messageProperties.isEmpty()) { + + if (combinedMessages == null) { + combinedMessages = new HashMap<>(20); + } + + for (final Map.Entry propertyEntry : + messageProperties.entrySet()) { + combinedMessages.put((String) propertyEntry.getKey(), + (String) propertyEntry.getValue()); + } + + } + + } + + } catch (final IOException ignored) { + // File might not exist, simply try the next one + } + } + + if (combinedMessages == null) { + return EMPTY_MESSAGES; + } + + return Collections.unmodifiableMap(combinedMessages); + } + + public static Map resolveMessagesForOrigin(final Class origin, + final Locale locale) { + + final Map combinedMessages = new HashMap<>(20); + + Class currentClass = origin; + combinedMessages.putAll(resolveMessagesForSpecificClass(currentClass, locale)); + + while (!currentClass.getSuperclass().equals(Object.class)) { + + currentClass = currentClass.getSuperclass(); + final Map messagesForCurrentClass = + resolveMessagesForSpecificClass(currentClass, locale); + for (final String messageKey : messagesForCurrentClass.keySet()) { + if (!combinedMessages.containsKey(messageKey)) { + combinedMessages.put(messageKey, messagesForCurrentClass.get(messageKey)); + } + } + } + + return Collections.unmodifiableMap(combinedMessages); + + } + + + private static Map resolveMessagesForSpecificClass( + final Class originClass, final Locale locale) { + + + final ClassLoader originClassLoader = originClass.getClassLoader(); + + // Compute all the resource names we should use: *_gl_ES-gheada.properties, *_gl_ES + // .properties, _gl.properties... + // The order here is important: as we will let values from more specific files + // overwrite those in less specific, + // (e.g. a value for gl_ES will have more precedence than a value for gl). So we will + // iterate these resource + // names from less specific to more specific. + final List messageResourceNames = + computeMessageResourceNamesFromBase(locale); + + // Build the combined messages + Map combinedMessages = null; + for (final String messageResourceName : messageResourceNames) { + + final InputStream inputStream = + originClassLoader.getResourceAsStream(messageResourceName); + if (inputStream != null) { + + // At this point we cannot be specified a character encoding (that's only for + // template resolution), + // so we will use the standard character encoding for .properties files, + // which is ISO-8859-1 + // (see Properties#load(InputStream) javadoc). + final InputStreamReader messageResourceReader = + new InputStreamReader(inputStream); + + final Properties messageProperties = + readMessagesResource(messageResourceReader); + if (messageProperties != null && !messageProperties.isEmpty()) { + + if (combinedMessages == null) { + combinedMessages = new HashMap<>(20); + } + + for (final Map.Entry propertyEntry : + messageProperties.entrySet()) { + combinedMessages.put((String) propertyEntry.getKey(), + (String) propertyEntry.getValue()); + } + + } + + } + + } + + if (combinedMessages == null) { + return EMPTY_MESSAGES; + } + + return Collections.unmodifiableMap(combinedMessages); + } + + + private static List computeMessageResourceNamesFromBase(final Locale locale) { + + final List resourceNames = new ArrayList<>(5); + + if (StringUtils.isEmptyOrWhitespace(locale.getLanguage())) { + throw new TemplateProcessingException( + "Locale \"" + locale + "\" " + + "cannot be used as it does not specify a language."); + } + + resourceNames.add(getResourceName("default")); + resourceNames.add(getResourceName(locale.getLanguage())); + + if (!StringUtils.isEmptyOrWhitespace(locale.getCountry())) { + resourceNames.add( + getResourceName(locale.getLanguage() + "_" + locale.getCountry())); + } + + if (!StringUtils.isEmptyOrWhitespace(locale.getVariant())) { + resourceNames.add(getResourceName( + locale.getLanguage() + "_" + locale.getCountry() + "-" + locale.getVariant())); + } + + return resourceNames; + + } + + private static String getResourceName(String name) { + return LOCATION + "/" + name + PROPERTIES_FILE_EXTENSION; + } + + + private static Properties readMessagesResource(final Reader propertiesReader) { + if (propertiesReader == null) { + return null; + } + final Properties properties = new Properties(); + try (propertiesReader) { + // Note Properties#load(Reader) this is JavaSE 6 specific, but Thymeleaf 3.0 does + // not support Java 5 anymore... + properties.load(propertiesReader); + } catch (final Exception e) { + throw new TemplateInputException("Exception loading messages file", e); + } + // ignore errors closing + return properties; + } + + public static String formatMessage(final Locale locale, final String message, + final Object[] messageParameters) { + if (message == null) { + return null; + } + if (!isFormatCandidate(message)) { + // trying to avoid creating MessageFormat if not needed + return message; + } + final MessageFormat messageFormat = new MessageFormat(message, locale); + return messageFormat.format( + (messageParameters != null ? messageParameters : EMPTY_MESSAGE_PARAMETERS)); + } + + /* + * This will allow us to determine whether a message might actually contain parameter + * placeholders. + */ + private static boolean isFormatCandidate(final String message) { + char c; + int n = message.length(); + while (n-- != 0) { + c = message.charAt(n); + if (c == '}' || c == '\'') { + return true; + } + } + return false; + } +} diff --git a/application/src/main/java/run/halo/app/theme/message/ThemeMessageResolver.java b/application/src/main/java/run/halo/app/theme/message/ThemeMessageResolver.java new file mode 100644 index 0000000..6737700 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/message/ThemeMessageResolver.java @@ -0,0 +1,37 @@ +package run.halo.app.theme.message; + +import java.util.Locale; +import java.util.Map; +import org.thymeleaf.messageresolver.StandardMessageResolver; +import org.thymeleaf.templateresource.ITemplateResource; +import run.halo.app.theme.ThemeContext; + +/** + * @author guqing + * @since 2.0.0 + */ +public class ThemeMessageResolver extends StandardMessageResolver { + + private final ThemeContext theme; + + public ThemeMessageResolver(ThemeContext theme) { + this.theme = theme; + } + + @Override + protected Map resolveMessagesForTemplate(String template, + ITemplateResource templateResource, + Locale locale) { + return ThemeMessageResolutionUtils.resolveMessagesForTemplate(locale, theme); + } + + @Override + protected Map resolveMessagesForOrigin(Class origin, Locale locale) { + return ThemeMessageResolutionUtils.resolveMessagesForOrigin(origin, locale); + } + + @Override + protected String formatMessage(Locale locale, String message, Object[] messageParameters) { + return ThemeMessageResolutionUtils.formatMessage(locale, message, messageParameters); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/DefaultQueryPostPredicateResolver.java b/application/src/main/java/run/halo/app/theme/router/DefaultQueryPostPredicateResolver.java new file mode 100644 index 0000000..d86a393 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/DefaultQueryPostPredicateResolver.java @@ -0,0 +1,73 @@ +package run.halo.app.theme.router; + +import static run.halo.app.extension.index.query.QueryFactory.and; +import static run.halo.app.extension.index.query.QueryFactory.equal; +import static run.halo.app.extension.index.query.QueryFactory.isNull; +import static run.halo.app.extension.index.query.QueryFactory.or; + +import java.security.Principal; +import java.util.Objects; +import java.util.function.Predicate; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Component; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ExtensionUtil; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.extension.router.selector.LabelSelector; +import run.halo.app.infra.AnonymousUserConst; + +/** + * The default implementation of {@link ReactiveQueryPostPredicateResolver}. + * + * @author guqing + * @since 2.9.0 + */ +@Component +public class DefaultQueryPostPredicateResolver implements ReactiveQueryPostPredicateResolver { + + @Override + public Mono> getPredicate() { + Predicate predicate = post -> post.isPublished() + && !ExtensionUtil.isDeleted(post) + && Objects.equals(false, post.getSpec().getDeleted()); + Predicate visiblePredicate = + post -> Post.VisibleEnum.PUBLIC.equals(post.getSpec().getVisible()); + return currentUserName() + .map(username -> predicate.and( + visiblePredicate.or(post -> username.equals(post.getSpec().getOwner()))) + ) + .defaultIfEmpty(predicate.and(visiblePredicate)); + } + + @Override + public Mono getListOptions() { + var listOptions = new ListOptions(); + listOptions.setLabelSelector(LabelSelector.builder() + .eq(Post.PUBLISHED_LABEL, "true").build()); + + var fieldQuery = and( + isNull("metadata.deletionTimestamp"), + equal("spec.deleted", "false") + ); + var visibleQuery = equal("spec.visible", Post.VisibleEnum.PUBLIC.name()); + return currentUserName() + .map(username -> and(fieldQuery, + or(visibleQuery, equal("spec.owner", username))) + ) + .defaultIfEmpty(and(fieldQuery, visibleQuery)) + .map(query -> { + listOptions.setFieldSelector(FieldSelector.of(query)); + return listOptions; + }); + } + + Mono currentUserName() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Principal::getName) + .filter(name -> !AnonymousUserConst.isAnonymousUser(name)); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/ExtensionPermalinkPatternUpdater.java b/application/src/main/java/run/halo/app/theme/router/ExtensionPermalinkPatternUpdater.java new file mode 100644 index 0000000..45d673b --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/ExtensionPermalinkPatternUpdater.java @@ -0,0 +1,84 @@ +package run.halo.app.theme.router; + +import java.util.Map; +import lombok.RequiredArgsConstructor; +import lombok.extern.slf4j.Slf4j; +import org.apache.commons.lang3.StringUtils; +import org.springframework.context.ApplicationListener; +import org.springframework.data.domain.Sort; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import run.halo.app.core.extension.content.Category; +import run.halo.app.core.extension.content.Constant; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.extension.AbstractExtension; +import run.halo.app.extension.Extension; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.MetadataOperator; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.theme.DefaultTemplateEnum; + +/** + * {@link ExtensionPermalinkPatternUpdater} to update the value of key + * {@link Constant#PERMALINK_PATTERN_ANNO} in {@link MetadataOperator#getAnnotations()} + * of {@link Extension} when the pattern changed. + * + * @author guqing + * @see Post + * @see Category + * @see Tag + * @since 2.0.0 + */ +@Slf4j +@Component +@RequiredArgsConstructor +public class ExtensionPermalinkPatternUpdater + implements ApplicationListener { + private final ExtensionClient client; + + @Override + public void onApplicationEvent(@NonNull PermalinkRuleChangedEvent event) { + DefaultTemplateEnum template = event.getTemplate(); + log.debug("Refresh permalink for template [{}]", template.getValue()); + String pattern = event.getRule(); + switch (template) { + case POST -> updatePostPermalink(pattern); + case CATEGORY -> updateCategoryPermalink(pattern); + case TAG -> updateTagPermalink(pattern); + default -> { + } + } + } + + private void updatePostPermalink(String pattern) { + log.debug("Update post permalink by new policy [{}]", pattern); + client.listAll(Post.class, new ListOptions(), Sort.unsorted()) + .forEach(post -> updateIfPermalinkPatternChanged(post, pattern)); + } + + private void updateIfPermalinkPatternChanged(AbstractExtension extension, String pattern) { + Map annotations = MetadataUtil.nullSafeAnnotations(extension); + String oldPattern = annotations.get(Constant.PERMALINK_PATTERN_ANNO); + annotations.put(Constant.PERMALINK_PATTERN_ANNO, pattern); + + if (StringUtils.equals(oldPattern, pattern) && StringUtils.isNotBlank(oldPattern)) { + return; + } + // update permalink pattern annotation + client.update(extension); + } + + private void updateCategoryPermalink(String pattern) { + log.debug("Update category and categories permalink by new policy [{}]", pattern); + client.listAll(Category.class, new ListOptions(), Sort.unsorted()) + .forEach(category -> updateIfPermalinkPatternChanged(category, pattern)); + } + + private void updateTagPermalink(String pattern) { + log.debug("Update tag and tags permalink by new policy [{}]", pattern); + client.listAll(Tag.class, new ListOptions(), Sort.unsorted()) + .forEach(tag -> updateIfPermalinkPatternChanged(tag, pattern)); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/ModelMapUtils.java b/application/src/main/java/run/halo/app/theme/router/ModelMapUtils.java new file mode 100644 index 0000000..892006c --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/ModelMapUtils.java @@ -0,0 +1,56 @@ +package run.halo.app.theme.router; + +import java.util.HashMap; +import java.util.Map; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.Scheme; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.dialect.CommentWidget; +import run.halo.app.theme.finders.vo.PostVo; +import run.halo.app.theme.finders.vo.SinglePageVo; + +/** + * A util class for building model map. + * + * @author guqing + * @since 2.6.0 + */ +public abstract class ModelMapUtils { + private static final Scheme POST_SCHEME = Scheme.buildFromType(Post.class); + private static final Scheme SINGLE_PAGE_SCHEME = Scheme.buildFromType(SinglePage.class); + + /** + * Build post view model. + * + * @param postVo post vo + * @return model map + */ + public static Map postModel(PostVo postVo) { + Map model = new HashMap<>(); + model.put("name", postVo.getMetadata().getName()); + model.put(ModelConst.TEMPLATE_ID, DefaultTemplateEnum.POST.getValue()); + model.put("groupVersionKind", POST_SCHEME.groupVersionKind()); + model.put("plural", POST_SCHEME.plural()); + model.put("post", postVo); + model.put(CommentWidget.ENABLE_COMMENT_ATTRIBUTE, postVo.getSpec().getAllowComment()); + return model; + } + + /** + * Build single page view model. + * + * @param pageVo page vo + * @return model map + */ + public static Map singlePageModel(SinglePageVo pageVo) { + Map model = new HashMap<>(); + model.put("name", pageVo.getMetadata().getName()); + model.put("groupVersionKind", SINGLE_PAGE_SCHEME.groupVersionKind()); + model.put("plural", SINGLE_PAGE_SCHEME.plural()); + model.put(ModelConst.TEMPLATE_ID, DefaultTemplateEnum.SINGLE_PAGE.getValue()); + model.put("singlePage", pageVo); + model.put(CommentWidget.ENABLE_COMMENT_ATTRIBUTE, pageVo.getSpec().getAllowComment()); + return model; + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/PermalinkRuleChangedEvent.java b/application/src/main/java/run/halo/app/theme/router/PermalinkRuleChangedEvent.java new file mode 100644 index 0000000..ec6c3e9 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/PermalinkRuleChangedEvent.java @@ -0,0 +1,30 @@ +package run.halo.app.theme.router; + +import org.springframework.context.ApplicationEvent; +import run.halo.app.theme.DefaultTemplateEnum; + +public class PermalinkRuleChangedEvent extends ApplicationEvent { + private final DefaultTemplateEnum template; + private final String oldRule; + private final String rule; + + public PermalinkRuleChangedEvent(Object source, DefaultTemplateEnum template, + String oldRule, String rule) { + super(source); + this.template = template; + this.oldRule = oldRule; + this.rule = rule; + } + + public DefaultTemplateEnum getTemplate() { + return template; + } + + public String getOldRule() { + return oldRule; + } + + public String getRule() { + return rule; + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/PermalinkWatch.java b/application/src/main/java/run/halo/app/theme/router/PermalinkWatch.java new file mode 100644 index 0000000..d1f95ae --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/PermalinkWatch.java @@ -0,0 +1,19 @@ +package run.halo.app.theme.router; + +import run.halo.app.extension.AbstractExtension; + +/** + * Accept permalink change event. + * + * @param extension type + * @author guqing + * @since 2.0.0 + */ +public interface PermalinkWatch { + + void onPermalinkAdd(T extension); + + void onPermalinkUpdate(T extension); + + void onPermalinkDelete(T extension); +} diff --git a/application/src/main/java/run/halo/app/theme/router/PreviewRouterFunction.java b/application/src/main/java/run/halo/app/theme/router/PreviewRouterFunction.java new file mode 100644 index 0000000..eb87d91 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/PreviewRouterFunction.java @@ -0,0 +1,174 @@ +package run.halo.app.theme.router; + +import java.security.Principal; +import java.time.Instant; +import java.util.List; +import java.util.Map; +import java.util.Set; +import java.util.stream.Collectors; +import lombok.RequiredArgsConstructor; +import org.springframework.context.annotation.Bean; +import org.springframework.security.core.context.ReactiveSecurityContextHolder; +import org.springframework.security.core.context.SecurityContext; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.content.PostService; +import run.halo.app.core.extension.content.Post; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.AnonymousUserConst; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.ViewNameResolver; +import run.halo.app.theme.finders.PostPublicQueryService; +import run.halo.app.theme.finders.SinglePageConversionService; +import run.halo.app.theme.finders.vo.ContributorVo; +import run.halo.app.theme.finders.vo.PostVo; + +/** + *

Preview router for previewing posts and single pages.

+ * + * @author guqing + * @since 2.6.0 + */ +@Component +@RequiredArgsConstructor +public class PreviewRouterFunction { + static final String SNAPSHOT_NAME_PARAM = "snapshotName"; + + private final ReactiveExtensionClient client; + + private final PostPublicQueryService postPublicQueryService; + + private final ViewNameResolver viewNameResolver; + + private final PostService postService; + + private final SinglePageConversionService singlePageConversionService; + + @Bean + RouterFunction previewRouter() { + return RouterFunctions.route() + .GET("/preview/posts/{name}", this::previewPost) + .GET("/preview/singlepages/{name}", this::previewSinglePage) + .build(); + } + + private Mono previewPost(ServerRequest request) { + final var name = request.pathVariable("name"); + return currentAuthenticatedUserName() + .flatMap(principal -> client.fetch(Post.class, name)) + .flatMap(post -> { + String snapshotName = request.queryParam(SNAPSHOT_NAME_PARAM) + .orElse(post.getSpec().getHeadSnapshot()); + return convertToPostVo(post, snapshotName); + }) + .flatMap(post -> canPreview(post.getContributors()) + .doOnNext(canPreview -> { + if (!canPreview) { + throw new NotFoundException("Post not found."); + } + }) + .thenReturn(post) + ) + // Check permissions before throwing this exception + .switchIfEmpty(Mono.error(() -> new NotFoundException("Post not found."))) + .flatMap(postVo -> { + String template = postVo.getSpec().getTemplate(); + Map model = ModelMapUtils.postModel(postVo); + return viewNameResolver.resolveViewNameOrDefault(request, template, + DefaultTemplateEnum.POST.getValue()) + .flatMap(templateName -> ServerResponse.ok().render(templateName, model)); + }); + } + + private Mono convertToPostVo(Post post, String snapshotName) { + return postPublicQueryService.convertToVo(post, snapshotName) + .doOnNext(postVo -> { + // fake some attributes only for preview when they are not published + Post.PostSpec spec = postVo.getSpec(); + if (spec.getPublishTime() == null) { + spec.setPublishTime(Instant.now()); + } + if (spec.getPublish() == null) { + spec.setPublish(false); + } + Post.PostStatus status = postVo.getStatus(); + if (status == null) { + status = new Post.PostStatus(); + postVo.setStatus(status); + } + if (status.getLastModifyTime() == null) { + status.setLastModifyTime(Instant.now()); + } + }); + } + + private Mono previewSinglePage(ServerRequest request) { + final var name = request.pathVariable("name"); + return currentAuthenticatedUserName() + .flatMap(principal -> client.fetch(SinglePage.class, name)) + .flatMap(singlePage -> { + String snapshotName = request.queryParam(SNAPSHOT_NAME_PARAM) + .orElse(singlePage.getSpec().getHeadSnapshot()); + return singlePageConversionService.convertToVo(singlePage, snapshotName); + }) + .doOnNext(pageVo -> { + // fake some attributes only for preview when they are not published + SinglePage.SinglePageSpec spec = pageVo.getSpec(); + if (spec.getPublishTime() == null) { + spec.setPublishTime(Instant.now()); + } + if (spec.getPublish() == null) { + spec.setPublish(false); + } + SinglePage.SinglePageStatus status = pageVo.getStatus(); + if (status == null) { + status = new SinglePage.SinglePageStatus(); + pageVo.setStatus(status); + } + if (status.getLastModifyTime() == null) { + status.setLastModifyTime(Instant.now()); + } + }) + .flatMap(singlePageVo -> canPreview(singlePageVo.getContributors()) + .doOnNext(canPreview -> { + if (!canPreview) { + throw new NotFoundException("Single page not found."); + } + }) + .thenReturn(singlePageVo) + ) + // Check permissions before throwing this exception + .switchIfEmpty(Mono.error(() -> new NotFoundException("Single page not found."))) + .flatMap(singlePageVo -> { + Map model = ModelMapUtils.singlePageModel(singlePageVo); + String template = singlePageVo.getSpec().getTemplate(); + return viewNameResolver.resolveViewNameOrDefault(request, template, + DefaultTemplateEnum.SINGLE_PAGE.getValue()) + .flatMap(viewName -> ServerResponse.ok().render(viewName, model)); + }); + } + + private Mono canPreview(List contributors) { + Assert.notNull(contributors, "The contributors must not be null"); + Set contributorNames = contributors.stream() + .map(ContributorVo::getName) + .collect(Collectors.toSet()); + return currentAuthenticatedUserName() + .map(contributorNames::contains) + .defaultIfEmpty(false); + } + + Mono currentAuthenticatedUserName() { + return ReactiveSecurityContextHolder.getContext() + .map(SecurityContext::getAuthentication) + .map(Principal::getName) + .filter(name -> !AnonymousUserConst.isAnonymousUser(name)); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/ReactiveQueryPostPredicateResolver.java b/application/src/main/java/run/halo/app/theme/router/ReactiveQueryPostPredicateResolver.java new file mode 100644 index 0000000..1d571ce --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/ReactiveQueryPostPredicateResolver.java @@ -0,0 +1,19 @@ +package run.halo.app.theme.router; + +import java.util.function.Predicate; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.ListOptions; + +/** + * The reactive query post predicate resolver. + * + * @author guqing + * @since 2.9.0 + */ +public interface ReactiveQueryPostPredicateResolver { + + Mono> getPredicate(); + + Mono getListOptions(); +} diff --git a/application/src/main/java/run/halo/app/theme/router/SinglePageRoute.java b/application/src/main/java/run/halo/app/theme/router/SinglePageRoute.java new file mode 100644 index 0000000..d0fc787 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/SinglePageRoute.java @@ -0,0 +1,172 @@ +package run.halo.app.theme.router; + +import static org.springframework.web.reactive.function.server.RequestPredicates.methods; + +import java.nio.charset.StandardCharsets; +import java.util.List; +import java.util.Map; +import java.util.Objects; +import java.util.concurrent.ConcurrentHashMap; +import java.util.stream.Collectors; +import lombok.RequiredArgsConstructor; +import org.apache.commons.lang3.BooleanUtils; +import org.apache.commons.lang3.StringUtils; +import org.springframework.beans.factory.DisposableBean; +import org.springframework.http.HttpMethod; +import org.springframework.http.MediaType; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RequestPredicate; +import org.springframework.web.reactive.function.server.RequestPredicates; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.i18n.LocaleContextResolver; +import org.springframework.web.util.UriUtils; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.SinglePage; +import run.halo.app.extension.ExtensionClient; +import run.halo.app.extension.ExtensionOperator; +import run.halo.app.extension.controller.Controller; +import run.halo.app.extension.controller.ControllerBuilder; +import run.halo.app.extension.controller.Reconciler; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.ViewNameResolver; +import run.halo.app.theme.finders.SinglePageFinder; + +/** + * The {@link SinglePageRoute} for route request to specific template page.html. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class SinglePageRoute + implements RouterFunction, Reconciler, DisposableBean { + private Map> quickRouteMap = + new ConcurrentHashMap<>(); + + private final ExtensionClient client; + + private final SinglePageFinder singlePageFinder; + + private final ViewNameResolver viewNameResolver; + + private final TitleVisibilityIdentifyCalculator titleVisibilityIdentifyCalculator; + + private final LocaleContextResolver localeContextResolver; + + @Override + @NonNull + public Mono> route(@NonNull ServerRequest request) { + return Flux.fromIterable(routerFunctions()) + .concatMap(routerFunction -> routerFunction.route(request)) + .next(); + } + + /** + * Set quickRouteMap. This method is only for testing. + * + * @param quickRouteMap fresh quickRouteMap. + */ + void setQuickRouteMap(Map> quickRouteMap) { + this.quickRouteMap = quickRouteMap; + } + + @Override + public void accept(@NonNull RouterFunctions.Visitor visitor) { + routerFunctions().forEach(routerFunction -> routerFunction.accept(visitor)); + } + + private List> routerFunctions() { + return quickRouteMap.keySet().stream() + .map(nameSlugPair -> { + var routePath = singlePageRoute(nameSlugPair.slug()); + return RouterFunctions.route(methods(HttpMethod.GET) + .and(exactPath(routePath)) + .and(RequestPredicates.accept(MediaType.TEXT_HTML)), + handlerFunction(nameSlugPair.name())); + }) + .collect(Collectors.toList()); + } + + private RequestPredicate exactPath(String path) { + return request -> { + var encodedRoutePath = UriUtils.encodePath(path, StandardCharsets.UTF_8); + var requestPath = request.requestPath().pathWithinApplication().value(); + return Objects.equals(requestPath, encodedRoutePath); + }; + } + + @Override + public Result reconcile(Request request) { + client.fetch(SinglePage.class, request.name()) + .ifPresent(page -> { + var nameSlugPair = NameSlugPair.from(page); + if (ExtensionOperator.isDeleted(page)) { + quickRouteMap.remove(nameSlugPair); + return; + } + if (BooleanUtils.isTrue(page.getSpec().getDeleted())) { + quickRouteMap.remove(nameSlugPair); + } else { + // put new one + if (page.isPublished()) { + quickRouteMap.put(nameSlugPair, handlerFunction(request.name())); + } else { + quickRouteMap.remove(nameSlugPair); + } + } + }); + return new Result(false, null); + } + + @Override + public Controller setupWith(ControllerBuilder builder) { + return builder + .extension(new SinglePage()) + .build(); + } + + @Override + public void destroy() throws Exception { + quickRouteMap.clear(); + } + + record NameSlugPair(String name, String slug) { + public static NameSlugPair from(SinglePage page) { + return new NameSlugPair(page.getMetadata().getName(), page.getSpec().getSlug()); + } + } + + String singlePageRoute(String slug) { + return StringUtils.prependIfMissing(slug, "/"); + } + + HandlerFunction handlerFunction(String name) { + return request -> singlePageFinder.getByName(name) + .doOnNext(singlePageVo -> { + titleVisibilityIdentifyCalculator.calculateTitle( + singlePageVo.getSpec().getTitle(), + singlePageVo.getSpec().getVisible(), + localeContextResolver.resolveLocaleContext(request.exchange()) + .getLocale() + ); + }) + .flatMap(singlePageVo -> { + Map model = ModelMapUtils.singlePageModel(singlePageVo); + String template = singlePageVo.getSpec().getTemplate(); + return viewNameResolver.resolveViewNameOrDefault(request, template, + DefaultTemplateEnum.SINGLE_PAGE.getValue()) + .flatMap(viewName -> ServerResponse.ok().render(viewName, model)); + }) + .switchIfEmpty( + Mono.error(new NotFoundException("Single page not found")) + ); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/ThemeCompositeRouterFunction.java b/application/src/main/java/run/halo/app/theme/router/ThemeCompositeRouterFunction.java new file mode 100644 index 0000000..f1b39af --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/ThemeCompositeRouterFunction.java @@ -0,0 +1,137 @@ +package run.halo.app.theme.router; + +import java.util.ArrayList; +import java.util.List; +import java.util.stream.Collectors; +import lombok.RequiredArgsConstructor; +import org.springframework.boot.context.event.ApplicationStartedEvent; +import org.springframework.context.event.EventListener; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.router.factories.ArchiveRouteFactory; +import run.halo.app.theme.router.factories.AuthorPostsRouteFactory; +import run.halo.app.theme.router.factories.CategoriesRouteFactory; +import run.halo.app.theme.router.factories.CategoryPostRouteFactory; +import run.halo.app.theme.router.factories.IndexRouteFactory; +import run.halo.app.theme.router.factories.PostRouteFactory; +import run.halo.app.theme.router.factories.TagPostRouteFactory; +import run.halo.app.theme.router.factories.TagsRouteFactory; + +/** + *

The combination router of theme templates is used to render theme templates, but does not + * include page.html templates which is processed separately.

+ * + * @author guqing + * @see SinglePageRoute + * @since 2.0.0 + */ +@Component +@RequiredArgsConstructor +public class ThemeCompositeRouterFunction implements RouterFunction { + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + private final ArchiveRouteFactory archiveRouteFactory; + private final PostRouteFactory postRouteFactory; + private final CategoriesRouteFactory categoriesRouteFactory; + private final CategoryPostRouteFactory categoryPostRouteFactory; + private final TagPostRouteFactory tagPostRouteFactory; + private final TagsRouteFactory tagsRouteFactory; + private final AuthorPostsRouteFactory authorPostsRouteFactory; + private final IndexRouteFactory indexRouteFactory; + + private List> cachedRouters = List.of(); + + @Override + @NonNull + public Mono> route(@NonNull ServerRequest request) { + return Flux.fromIterable(cachedRouters) + .concatMap(routerFunction -> routerFunction.route(request)) + .next(); + } + + @Override + public void accept(@NonNull RouterFunctions.Visitor visitor) { + cachedRouters.forEach(routerFunction -> routerFunction.accept(visitor)); + } + + List> routerFunctions() { + return transformedPatterns() + .stream() + .map(this::createRouterFunction) + .collect(Collectors.toList()); + } + + private RouterFunction createRouterFunction(RoutePattern routePattern) { + return switch (routePattern.identifier()) { + case POST -> postRouteFactory.create(routePattern.pattern()); + case ARCHIVES -> archiveRouteFactory.create(routePattern.pattern()); + case CATEGORIES -> categoriesRouteFactory.create(routePattern.pattern()); + case CATEGORY -> categoryPostRouteFactory.create(routePattern.pattern()); + case TAGS -> tagsRouteFactory.create(routePattern.pattern()); + case TAG -> tagPostRouteFactory.create(routePattern.pattern()); + case AUTHOR -> authorPostsRouteFactory.create(routePattern.pattern()); + case INDEX -> indexRouteFactory.create(routePattern.pattern()); + default -> + throw new IllegalStateException("Unexpected value: " + routePattern.identifier()); + }; + } + + /** + * Refresh the {@link #cachedRouters} when the permalink rule is changed. + * + * @param event {@link PermalinkRuleChangedEvent} + */ + @EventListener + public void onPermalinkRuleChanged(PermalinkRuleChangedEvent event) { + this.cachedRouters = routerFunctions(); + } + + @EventListener + public void onApplicationStarted(ApplicationStartedEvent event) { + this.cachedRouters = routerFunctions(); + } + + record RoutePattern(DefaultTemplateEnum identifier, String pattern) { + } + + private List transformedPatterns() { + List routePatterns = new ArrayList<>(); + + SystemSetting.ThemeRouteRules rules = + environmentFetcher.fetch(SystemSetting.ThemeRouteRules.GROUP, + SystemSetting.ThemeRouteRules.class) + .blockOptional() + .orElse(SystemSetting.ThemeRouteRules.empty()); + String post = rules.getPost(); + routePatterns.add(new RoutePattern(DefaultTemplateEnum.POST, post)); + + String archives = rules.getArchives(); + routePatterns.add( + new RoutePattern(DefaultTemplateEnum.ARCHIVES, archives)); + + String categories = rules.getCategories(); + routePatterns.add( + new RoutePattern(DefaultTemplateEnum.CATEGORIES, categories)); + routePatterns.add( + new RoutePattern(DefaultTemplateEnum.CATEGORY, categories)); + + String tags = rules.getTags(); + routePatterns.add(new RoutePattern(DefaultTemplateEnum.TAGS, tags)); + routePatterns.add(new RoutePattern(DefaultTemplateEnum.TAG, tags)); + + // Add the index route to the end to prevent conflict with the queryParam rule of the post + routePatterns.add(new RoutePattern(DefaultTemplateEnum.INDEX, "/")); + routePatterns.add(new RoutePattern(DefaultTemplateEnum.AUTHOR, "")); + return routePatterns; + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/TitleVisibilityIdentifyCalculator.java b/application/src/main/java/run/halo/app/theme/router/TitleVisibilityIdentifyCalculator.java new file mode 100644 index 0000000..8124445 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/TitleVisibilityIdentifyCalculator.java @@ -0,0 +1,34 @@ +package run.halo.app.theme.router; + +import java.util.Locale; +import lombok.AllArgsConstructor; +import org.springframework.context.MessageSource; +import org.springframework.stereotype.Component; +import org.springframework.util.Assert; +import run.halo.app.core.extension.content.Post; + +@Component +@AllArgsConstructor +public class TitleVisibilityIdentifyCalculator { + + private final MessageSource messageSource; + + /** + * Calculate title with visibility identification. + * + * @param title title must not be null + * @param visibleEnum visibility enum + */ + public String calculateTitle(String title, Post.VisibleEnum visibleEnum, Locale locale) { + Assert.notNull(title, "Title must not be null"); + if (Post.VisibleEnum.PRIVATE.equals(visibleEnum)) { + String identify = messageSource.getMessage( + "title.visibility.identification.private", + null, + "", + locale); + return title + identify; + } + return title; + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/factories/ArchiveRouteFactory.java b/application/src/main/java/run/halo/app/theme/router/factories/ArchiveRouteFactory.java new file mode 100644 index 0000000..a931524 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/factories/ArchiveRouteFactory.java @@ -0,0 +1,123 @@ +package run.halo.app.theme.router.factories; + +import static org.springframework.web.reactive.function.server.RequestPredicates.accept; +import static run.halo.app.theme.router.PageUrlUtils.totalPage; + +import java.util.List; +import java.util.Map; +import lombok.AllArgsConstructor; +import lombok.Data; +import org.apache.commons.lang3.StringUtils; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RequestPredicate; +import org.springframework.web.reactive.function.server.RequestPredicates; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.i18n.LocaleContextResolver; +import reactor.core.publisher.Mono; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.infra.utils.PathUtils; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.finders.PostFinder; +import run.halo.app.theme.finders.vo.PostArchiveVo; +import run.halo.app.theme.router.ModelConst; +import run.halo.app.theme.router.PageUrlUtils; +import run.halo.app.theme.router.TitleVisibilityIdentifyCalculator; +import run.halo.app.theme.router.UrlContextListResult; + +/** + * The {@link ArchiveRouteFactory} for generate {@link RouterFunction} specific to the template + * posts.html. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class ArchiveRouteFactory implements RouteFactory { + + private final PostFinder postFinder; + + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + + private final TitleVisibilityIdentifyCalculator titleVisibilityIdentifyCalculator; + + private final LocaleContextResolver localeContextResolver; + + @Override + public RouterFunction create(String prefix) { + RequestPredicate requestPredicate = patterns(prefix).stream() + .map(RequestPredicates::GET) + .reduce(req -> false, RequestPredicate::or) + .and(accept(MediaType.TEXT_HTML)); + return RouterFunctions.route(requestPredicate, handlerFunction()); + } + + HandlerFunction handlerFunction() { + return request -> { + String templateName = DefaultTemplateEnum.ARCHIVES.getValue(); + return ServerResponse.ok() + .render(templateName, + Map.of("archives", archivePosts(request), + ModelConst.TEMPLATE_ID, templateName) + ); + }; + } + + private List patterns(String prefix) { + return List.of( + StringUtils.prependIfMissing(prefix, "/"), + PathUtils.combinePath(prefix, "/page/{page:\\d+}"), + PathUtils.combinePath(prefix, "/{year:\\d{4}}"), + PathUtils.combinePath(prefix, "/{year:\\d{4}}/page/{page:\\d+}"), + PathUtils.combinePath(prefix, "/{year:\\d{4}}/{month:\\d{2}}"), + PathUtils.combinePath(prefix, + "/{year:\\d{4}}/{month:\\d{2}}/page/{page:\\d+}") + ); + } + + private Mono> archivePosts(ServerRequest request) { + ArchivePathVariables variables = ArchivePathVariables.from(request); + int pageNum = pageNumInPathVariable(request); + String requestPath = request.path(); + return configuredPageSize(environmentFetcher, SystemSetting.Post::getArchivePageSize) + .flatMap(pageSize -> postFinder.archives(pageNum, pageSize, variables.getYear(), + variables.getMonth())) + .doOnNext(list -> list.get() + .map(PostArchiveVo::getMonths) + .flatMap(List::stream) + .flatMap(month -> month.getPosts().stream()) + .forEach(postVo -> postVo.getSpec() + .setTitle(titleVisibilityIdentifyCalculator.calculateTitle( + postVo.getSpec().getTitle(), + postVo.getSpec().getVisible(), + localeContextResolver.resolveLocaleContext(request.exchange()) + .getLocale()) + ) + ) + ) + .map(list -> new UrlContextListResult.Builder() + .listResult(list) + .nextUrl(PageUrlUtils.nextPageUrl(requestPath, totalPage(list))) + .prevUrl(PageUrlUtils.prevPageUrl(requestPath)) + .build()); + } + + @Data + static class ArchivePathVariables { + String year; + String month; + String page; + + static ArchivePathVariables from(ServerRequest request) { + Map variables = request.pathVariables(); + return JsonUtils.mapToObject(variables, ArchivePathVariables.class); + } + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/factories/AuthorPostsRouteFactory.java b/application/src/main/java/run/halo/app/theme/router/factories/AuthorPostsRouteFactory.java new file mode 100644 index 0000000..31fe720 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/factories/AuthorPostsRouteFactory.java @@ -0,0 +1,99 @@ +package run.halo.app.theme.router.factories; + +import static org.springframework.web.reactive.function.server.RequestPredicates.GET; +import static org.springframework.web.reactive.function.server.RequestPredicates.accept; +import static run.halo.app.theme.router.PageUrlUtils.totalPage; + +import java.util.Map; +import lombok.AllArgsConstructor; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.i18n.LocaleContextResolver; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.User; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.finders.PostFinder; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.finders.vo.UserVo; +import run.halo.app.theme.router.ModelConst; +import run.halo.app.theme.router.PageUrlUtils; +import run.halo.app.theme.router.TitleVisibilityIdentifyCalculator; +import run.halo.app.theme.router.UrlContextListResult; + +/** + * The {@link AuthorPostsRouteFactory} for generate {@link RouterFunction} specific to the template + * index.html. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class AuthorPostsRouteFactory implements RouteFactory { + + private final PostFinder postFinder; + private final ReactiveExtensionClient client; + private SystemConfigurableEnvironmentFetcher environmentFetcher; + + private final TitleVisibilityIdentifyCalculator titleVisibilityIdentifyCalculator; + + private final LocaleContextResolver localeContextResolver; + + @Override + public RouterFunction create(String pattern) { + return RouterFunctions + .route(GET("/authors/{name}").or(GET("/authors/{name}/page/{page}")) + .and(accept(MediaType.TEXT_HTML)), handlerFunction()); + } + + HandlerFunction handlerFunction() { + return request -> { + String name = request.pathVariable("name"); + return ServerResponse.ok() + .render(DefaultTemplateEnum.AUTHOR.getValue(), + Map.of("author", getByName(name), + "posts", postList(request, name), + ModelConst.TEMPLATE_ID, DefaultTemplateEnum.AUTHOR.getValue() + ) + ); + }; + } + + private Mono> postList(ServerRequest request, String name) { + String path = request.path(); + int pageNum = pageNumInPathVariable(request); + return configuredPageSize(environmentFetcher, SystemSetting.Post::getPostPageSize) + .flatMap(pageSize -> postFinder.listByOwner(pageNum, pageSize, name)) + .doOnNext(list -> { + list.getItems().forEach(listedPostVo -> { + listedPostVo.getSpec().setTitle( + titleVisibilityIdentifyCalculator.calculateTitle( + listedPostVo.getSpec().getTitle(), + listedPostVo.getSpec().getVisible(), + localeContextResolver.resolveLocaleContext(request.exchange()) + .getLocale()) + ); + }); + }) + .map(list -> new UrlContextListResult.Builder() + .listResult(list) + .nextUrl(PageUrlUtils.nextPageUrl(path, totalPage(list))) + .prevUrl(PageUrlUtils.prevPageUrl(path)) + .build()); + } + + private Mono getByName(String name) { + return client.fetch(User.class, name) + .switchIfEmpty(Mono.error(() -> new NotFoundException("Author page not found."))) + .map(UserVo::from); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/factories/CategoriesRouteFactory.java b/application/src/main/java/run/halo/app/theme/router/factories/CategoriesRouteFactory.java new file mode 100644 index 0000000..712f6ca --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/factories/CategoriesRouteFactory.java @@ -0,0 +1,43 @@ +package run.halo.app.theme.router.factories; + +import static org.springframework.web.reactive.function.server.RequestPredicates.GET; + +import java.util.Map; +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.finders.CategoryFinder; +import run.halo.app.theme.router.ModelConst; + +/** + * The {@link CategoriesRouteFactory} for generate {@link RouterFunction} specific to the + * template + * categories.html. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class CategoriesRouteFactory implements RouteFactory { + + private final CategoryFinder categoryFinder; + + @Override + public RouterFunction create(String prefix) { + return RouterFunctions.route(GET(StringUtils.prependIfMissing(prefix, "/")), + handlerFunction()); + } + + HandlerFunction handlerFunction() { + return request -> ServerResponse.ok() + .render(DefaultTemplateEnum.CATEGORIES.getValue(), + Map.of("categories", categoryFinder.listAsTree(), + ModelConst.TEMPLATE_ID, DefaultTemplateEnum.CATEGORIES.getValue())); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/factories/CategoryPostRouteFactory.java b/application/src/main/java/run/halo/app/theme/router/factories/CategoryPostRouteFactory.java new file mode 100644 index 0000000..3bc378c --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/factories/CategoryPostRouteFactory.java @@ -0,0 +1,125 @@ +package run.halo.app.theme.router.factories; + +import static org.springframework.web.reactive.function.server.RequestPredicates.GET; +import static org.springframework.web.reactive.function.server.RequestPredicates.accept; +import static run.halo.app.theme.router.PageUrlUtils.totalPage; + +import java.util.HashMap; +import java.util.Map; +import lombok.AllArgsConstructor; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.i18n.LocaleContextResolver; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Category; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.infra.utils.PathUtils; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.ViewNameResolver; +import run.halo.app.theme.finders.PostFinder; +import run.halo.app.theme.finders.vo.CategoryVo; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.router.ModelConst; +import run.halo.app.theme.router.PageUrlUtils; +import run.halo.app.theme.router.TitleVisibilityIdentifyCalculator; +import run.halo.app.theme.router.UrlContextListResult; + +/** + * The {@link CategoryPostRouteFactory} for generate {@link RouterFunction} specific to the template + * category.html. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class CategoryPostRouteFactory implements RouteFactory { + + private final PostFinder postFinder; + + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final ReactiveExtensionClient client; + private final ViewNameResolver viewNameResolver; + + private final TitleVisibilityIdentifyCalculator titleVisibilityIdentifyCalculator; + + private final LocaleContextResolver localeContextResolver; + + @Override + public RouterFunction create(String prefix) { + return RouterFunctions.route(GET(PathUtils.combinePath(prefix, "/{slug}")) + .or(GET(PathUtils.combinePath(prefix, "/{slug}/page/{page:\\d+}"))) + .and(accept(MediaType.TEXT_HTML)), handlerFunction()); + } + + HandlerFunction handlerFunction() { + return request -> { + String slug = request.pathVariable("slug"); + return fetchBySlug(slug) + .flatMap(categoryVo -> { + Map model = new HashMap<>(); + model.put(ModelConst.TEMPLATE_ID, DefaultTemplateEnum.CATEGORY.getValue()); + model.put("posts", + postListByCategoryName(categoryVo.getMetadata().getName(), request)); + model.put("category", categoryVo); + String template = categoryVo.getSpec().getTemplate(); + return viewNameResolver.resolveViewNameOrDefault(request, template, + DefaultTemplateEnum.CATEGORY.getValue()) + .flatMap(viewName -> ServerResponse.ok().render(viewName, model)); + }) + .switchIfEmpty( + Mono.error(new NotFoundException("Category not found with slug: " + slug))); + }; + } + + Mono fetchBySlug(String slug) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + QueryFactory.and( + QueryFactory.equal("spec.slug", slug), + QueryFactory.isNull("metadata.deletionTimestamp") + ) + )); + return client.listBy(Category.class, listOptions, PageRequestImpl.ofSize(1)) + .mapNotNull(result -> ListResult.first(result) + .map(CategoryVo::from) + .orElse(null) + ); + } + + private Mono> postListByCategoryName(String name, + ServerRequest request) { + String path = request.path(); + int pageNum = pageNumInPathVariable(request); + return configuredPageSize(environmentFetcher, SystemSetting.Post::getCategoryPageSize) + .flatMap(pageSize -> postFinder.listByCategory(pageNum, pageSize, name)) + .doOnNext(list -> list.forEach(postVo -> postVo.getSpec().setTitle( + titleVisibilityIdentifyCalculator.calculateTitle( + postVo.getSpec().getTitle(), + postVo.getSpec().getVisible(), + localeContextResolver.resolveLocaleContext(request.exchange()) + .getLocale() + ) + ) + )) + .map(list -> new UrlContextListResult.Builder() + .listResult(list) + .nextUrl(PageUrlUtils.nextPageUrl(path, totalPage(list))) + .prevUrl(PageUrlUtils.prevPageUrl(path)) + .build() + ); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/factories/IndexRouteFactory.java b/application/src/main/java/run/halo/app/theme/router/factories/IndexRouteFactory.java new file mode 100644 index 0000000..eecaedb --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/factories/IndexRouteFactory.java @@ -0,0 +1,81 @@ +package run.halo.app.theme.router.factories; + +import static org.springframework.web.reactive.function.server.RequestPredicates.GET; +import static org.springframework.web.reactive.function.server.RequestPredicates.accept; +import static run.halo.app.theme.router.PageUrlUtils.totalPage; + +import java.util.Map; +import lombok.AllArgsConstructor; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.i18n.LocaleContextResolver; +import reactor.core.publisher.Mono; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.finders.PostFinder; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.router.ModelConst; +import run.halo.app.theme.router.PageUrlUtils; +import run.halo.app.theme.router.TitleVisibilityIdentifyCalculator; +import run.halo.app.theme.router.UrlContextListResult; + +/** + * The {@link IndexRouteFactory} for generate {@link RouterFunction} specific to the template + * index.html. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class IndexRouteFactory implements RouteFactory { + + private final PostFinder postFinder; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final TitleVisibilityIdentifyCalculator titleVisibilityIdentifyCalculator; + private final LocaleContextResolver localeContextResolver; + + @Override + public RouterFunction create(String pattern) { + return RouterFunctions + .route(GET("/").or(GET("/page/{page}") + .or(GET("/index")).or(GET("/index/page/{page}")) + .and(accept(MediaType.TEXT_HTML))), handlerFunction()); + } + + HandlerFunction handlerFunction() { + return request -> ServerResponse.ok() + .render(DefaultTemplateEnum.INDEX.getValue(), + Map.of("posts", postList(request), + ModelConst.TEMPLATE_ID, DefaultTemplateEnum.INDEX.getValue())); + } + + private Mono> postList(ServerRequest request) { + String path = request.path(); + + return configuredPageSize(environmentFetcher, SystemSetting.Post::getPostPageSize) + .flatMap(pageSize -> postFinder.list(pageNumInPathVariable(request), pageSize)) + .doOnNext(list -> list.getItems() + .forEach(listedPostVo -> listedPostVo.getSpec() + .setTitle(titleVisibilityIdentifyCalculator.calculateTitle( + listedPostVo.getSpec().getTitle(), + listedPostVo.getSpec().getVisible(), + localeContextResolver.resolveLocaleContext(request.exchange()) + .getLocale()) + ) + ) + ) + .map(list -> new UrlContextListResult.Builder() + .listResult(list) + .nextUrl(PageUrlUtils.nextPageUrl(path, totalPage(list))) + .prevUrl(PageUrlUtils.prevPageUrl(path)) + .build() + ); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/factories/PostRouteFactory.java b/application/src/main/java/run/halo/app/theme/router/factories/PostRouteFactory.java new file mode 100644 index 0000000..fd7b4c2 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/factories/PostRouteFactory.java @@ -0,0 +1,258 @@ +package run.halo.app.theme.router.factories; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; +import static org.apache.commons.lang3.StringUtils.isNotBlank; +import static org.springframework.web.reactive.function.server.RequestPredicates.GET; +import static org.springframework.web.reactive.function.server.RequestPredicates.accept; + +import com.google.common.cache.Cache; +import com.google.common.cache.CacheBuilder; +import java.util.LinkedHashMap; +import java.util.List; +import java.util.Map; +import java.util.Optional; +import java.util.concurrent.ExecutionException; +import java.util.regex.Matcher; +import java.util.regex.Pattern; +import lombok.AllArgsConstructor; +import lombok.Data; +import lombok.Getter; +import org.apache.commons.lang3.StringUtils; +import org.springframework.data.domain.Sort; +import org.springframework.http.MediaType; +import org.springframework.lang.NonNull; +import org.springframework.stereotype.Component; +import org.springframework.util.MultiValueMap; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RequestPredicate; +import org.springframework.web.reactive.function.server.RequestPredicates; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.i18n.LocaleContextResolver; +import reactor.core.publisher.Flux; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Post; +import run.halo.app.extension.MetadataUtil; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.infra.utils.JsonUtils; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.ViewNameResolver; +import run.halo.app.theme.finders.PostFinder; +import run.halo.app.theme.finders.vo.PostVo; +import run.halo.app.theme.router.ModelMapUtils; +import run.halo.app.theme.router.ReactiveQueryPostPredicateResolver; +import run.halo.app.theme.router.TitleVisibilityIdentifyCalculator; + +/** + * The {@link PostRouteFactory} for generate {@link RouterFunction} specific to the template + * post.html. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class PostRouteFactory implements RouteFactory { + + private final PostFinder postFinder; + + private final ViewNameResolver viewNameResolver; + + private final ReactiveExtensionClient client; + + private final ReactiveQueryPostPredicateResolver queryPostPredicateResolver; + + private final TitleVisibilityIdentifyCalculator titleVisibilityIdentifyCalculator; + + private final LocaleContextResolver localeContextResolver; + + @Override + public RouterFunction create(String pattern) { + PatternParser postParamPredicate = + new PatternParser(pattern); + if (postParamPredicate.isQueryParamPattern()) { + RequestPredicate requestPredicate = postParamPredicate.toRequestPredicate(); + return RouterFunctions.route(GET("/") + .and(requestPredicate), queryParamHandlerFunction(postParamPredicate)); + } + return RouterFunctions + .route(GET(pattern).and(accept(MediaType.TEXT_HTML)), handlerFunction()); + } + + HandlerFunction queryParamHandlerFunction(PatternParser paramPredicate) { + return request -> { + Map variables = mergedVariables(request); + PostPatternVariable patternVariable = new PostPatternVariable(); + Optional.ofNullable(variables.get(paramPredicate.getParamName())) + .ifPresent(value -> { + switch (paramPredicate.getPlaceholderName()) { + case "name" -> patternVariable.setName(value); + case "slug" -> patternVariable.setSlug(value); + default -> + throw new IllegalArgumentException("Unsupported query param predicate"); + } + }); + return postResponse(request, patternVariable); + }; + } + + HandlerFunction handlerFunction() { + return request -> { + PostPatternVariable patternVariable = PostPatternVariable.from(request); + return postResponse(request, patternVariable); + }; + } + + @NonNull + private Mono postResponse(ServerRequest request, + PostPatternVariable patternVariable) { + Mono postVoMono = bestMatchPost(patternVariable); + return postVoMono + .doOnNext(postVo -> { + postVo.getSpec().setTitle( + titleVisibilityIdentifyCalculator.calculateTitle( + postVo.getSpec().getTitle(), + postVo.getSpec().getVisible(), + localeContextResolver.resolveLocaleContext(request.exchange()) + .getLocale()) + ); + }) + .flatMap(postVo -> { + Map model = ModelMapUtils.postModel(postVo); + return determineTemplate(request, postVo) + .flatMap(templateName -> ServerResponse.ok().render(templateName, model)); + }); + } + + Mono determineTemplate(ServerRequest request, PostVo postVo) { + return Flux.fromIterable(defaultIfNull(postVo.getCategories(), List.of())) + .filter(category -> isNotBlank(category.getSpec().getPostTemplate())) + .concatMap(category -> viewNameResolver.resolveViewNameOrDefault(request, + category.getSpec().getPostTemplate(), null) + ) + .next() + .switchIfEmpty(Mono.defer(() -> viewNameResolver.resolveViewNameOrDefault(request, + postVo.getSpec().getTemplate(), + DefaultTemplateEnum.POST.getValue()) + )); + } + + Mono bestMatchPost(PostPatternVariable variable) { + return postsByPredicates(variable) + .filter(post -> { + Map labels = MetadataUtil.nullSafeLabels(post); + return matchIfPresent(variable.getName(), post.getMetadata().getName()) + && matchIfPresent(variable.getSlug(), post.getSpec().getSlug()) + && matchIfPresent(variable.getYear(), labels.get(Post.ARCHIVE_YEAR_LABEL)) + && matchIfPresent(variable.getMonth(), labels.get(Post.ARCHIVE_MONTH_LABEL)) + && matchIfPresent(variable.getDay(), labels.get(Post.ARCHIVE_DAY_LABEL)); + }) + .next() + .flatMap(post -> postFinder.getByName(post.getMetadata().getName())) + .switchIfEmpty(Mono.error(new NotFoundException("Post not found"))); + } + + Flux postsByPredicates(PostPatternVariable patternVariable) { + if (isNotBlank(patternVariable.getName())) { + return fetchPostsByName(patternVariable.getName()); + } + if (isNotBlank(patternVariable.getSlug())) { + return fetchPostsBySlug(patternVariable.getSlug()); + } + return Flux.empty(); + } + + private Flux fetchPostsByName(String name) { + return queryPostPredicateResolver.getPredicate() + .flatMap(predicate -> client.fetch(Post.class, name) + .filter(predicate) + ) + .flux(); + } + + private Flux fetchPostsBySlug(String slug) { + return queryPostPredicateResolver.getListOptions() + .flatMapMany(listOptions -> { + if (isNotBlank(slug)) { + var other = QueryFactory.equal("spec.slug", slug); + listOptions.setFieldSelector(listOptions.getFieldSelector().andQuery(other)); + } + return client.listAll(Post.class, listOptions, Sort.unsorted()); + }); + } + + private boolean matchIfPresent(String variable, String target) { + return StringUtils.isBlank(variable) || StringUtils.equals(target, variable); + } + + @Data + static class PostPatternVariable { + String name; + String slug; + String year; + String month; + String day; + + static PostPatternVariable from(ServerRequest request) { + Map variables = mergedVariables(request); + return JsonUtils.mapToObject(variables, PostPatternVariable.class); + } + } + + static Map mergedVariables(ServerRequest request) { + Map pathVariables = request.pathVariables(); + MultiValueMap queryParams = request.queryParams(); + Map mergedVariables = new LinkedHashMap<>(); + for (String paramKey : queryParams.keySet()) { + mergedVariables.put(paramKey, queryParams.getFirst(paramKey)); + } + // path variables higher priority will override query params + mergedVariables.putAll(pathVariables); + return mergedVariables; + } + + @Getter + static class PatternParser { + private static final Pattern PATTERN_COMPILE = Pattern.compile("([^&?]*)=\\{(.*?)\\}(&|$)"); + private static final Cache MATCHER_CACHE = CacheBuilder.newBuilder() + .maximumSize(5) + .build(); + + private final String pattern; + private String paramName; + private String placeholderName; + private final boolean isQueryParamPattern; + + PatternParser(String pattern) { + this.pattern = pattern; + Matcher matcher = patternToMatcher(pattern); + if (matcher.find()) { + this.paramName = matcher.group(1); + this.placeholderName = matcher.group(2); + this.isQueryParamPattern = true; + } else { + this.isQueryParamPattern = false; + } + } + + Matcher patternToMatcher(String pattern) { + try { + return MATCHER_CACHE.get(pattern, () -> PATTERN_COMPILE.matcher(pattern)); + } catch (ExecutionException e) { + throw new RuntimeException(e); + } + } + + RequestPredicate toRequestPredicate() { + if (!this.isQueryParamPattern) { + throw new IllegalStateException("Not a query param pattern: " + pattern); + } + + return RequestPredicates.queryParam(paramName, value -> true); + } + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/factories/RouteFactory.java b/application/src/main/java/run/halo/app/theme/router/factories/RouteFactory.java new file mode 100644 index 0000000..3c89535 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/factories/RouteFactory.java @@ -0,0 +1,33 @@ +package run.halo.app.theme.router.factories; + +import static org.apache.commons.lang3.ObjectUtils.defaultIfNull; + +import java.util.function.Function; +import org.apache.commons.lang3.math.NumberUtils; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.ServerRequest; +import org.springframework.web.reactive.function.server.ServerResponse; +import reactor.core.publisher.Mono; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.theme.router.ModelConst; + +/** + * @author guqing + * @since 2.0.0 + */ +public interface RouteFactory { + RouterFunction create(String pattern); + + default Mono configuredPageSize( + SystemConfigurableEnvironmentFetcher environmentFetcher, + Function mapper) { + return environmentFetcher.fetchPost() + .map(p -> defaultIfNull(mapper.apply(p), ModelConst.DEFAULT_PAGE_SIZE)); + } + + default int pageNumInPathVariable(ServerRequest request) { + String page = request.pathVariables().get("page"); + return NumberUtils.toInt(page, 1); + } +} diff --git a/application/src/main/java/run/halo/app/theme/router/factories/TagPostRouteFactory.java b/application/src/main/java/run/halo/app/theme/router/factories/TagPostRouteFactory.java new file mode 100644 index 0000000..7c92eb0 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/factories/TagPostRouteFactory.java @@ -0,0 +1,116 @@ +package run.halo.app.theme.router.factories; + +import static org.springframework.web.reactive.function.server.RequestPredicates.GET; +import static org.springframework.web.reactive.function.server.RequestPredicates.accept; +import static run.halo.app.theme.router.PageUrlUtils.totalPage; + +import java.util.Map; +import lombok.AllArgsConstructor; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerResponse; +import org.springframework.web.server.i18n.LocaleContextResolver; +import reactor.core.publisher.Mono; +import run.halo.app.core.extension.content.Tag; +import run.halo.app.extension.ListOptions; +import run.halo.app.extension.ListResult; +import run.halo.app.extension.PageRequestImpl; +import run.halo.app.extension.ReactiveExtensionClient; +import run.halo.app.extension.index.query.QueryFactory; +import run.halo.app.extension.router.selector.FieldSelector; +import run.halo.app.infra.SystemConfigurableEnvironmentFetcher; +import run.halo.app.infra.SystemSetting; +import run.halo.app.infra.exception.NotFoundException; +import run.halo.app.infra.utils.PathUtils; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.finders.PostFinder; +import run.halo.app.theme.finders.TagFinder; +import run.halo.app.theme.finders.vo.ListedPostVo; +import run.halo.app.theme.finders.vo.TagVo; +import run.halo.app.theme.router.PageUrlUtils; +import run.halo.app.theme.router.TitleVisibilityIdentifyCalculator; +import run.halo.app.theme.router.UrlContextListResult; + +/** + * The {@link TagPostRouteFactory} for generate {@link RouterFunction} specific to the template + * tag.html. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class TagPostRouteFactory implements RouteFactory { + + private final ReactiveExtensionClient client; + private final SystemConfigurableEnvironmentFetcher environmentFetcher; + private final TagFinder tagFinder; + private final PostFinder postFinder; + + private final TitleVisibilityIdentifyCalculator titleVisibilityIdentifyCalculator; + + private final LocaleContextResolver localeContextResolver; + + @Override + public RouterFunction create(String prefix) { + return RouterFunctions + .route(GET(PathUtils.combinePath(prefix, "/{slug}")) + .or(GET(PathUtils.combinePath(prefix, "/{slug}/page/{page:\\d+}"))) + .and(accept(MediaType.TEXT_HTML)), handlerFunction()); + } + + private HandlerFunction handlerFunction() { + return request -> tagBySlug(request.pathVariable("slug")) + .flatMap(tagVo -> { + int pageNum = pageNumInPathVariable(request); + String path = request.path(); + var postList = postList(tagVo.getMetadata().getName(), pageNum, path) + .doOnNext(list -> list.forEach(postVo -> + postVo.getSpec().setTitle( + titleVisibilityIdentifyCalculator.calculateTitle( + postVo.getSpec().getTitle(), + postVo.getSpec().getVisible(), + localeContextResolver.resolveLocaleContext(request.exchange()) + .getLocale() + ) + ) + )); + return ServerResponse.ok() + .render(DefaultTemplateEnum.TAG.getValue(), + Map.of("name", tagVo.getMetadata().getName(), + "posts", postList, + "tag", tagVo) + ); + }); + } + + private Mono> postList(String name, Integer page, + String requestPath) { + return configuredPageSize(environmentFetcher, SystemSetting.Post::getTagPageSize) + .flatMap(pageSize -> postFinder.listByTag(page, pageSize, name)) + .map(list -> new UrlContextListResult.Builder() + .listResult(list) + .nextUrl(PageUrlUtils.nextPageUrl(requestPath, totalPage(list))) + .prevUrl(PageUrlUtils.prevPageUrl(requestPath)) + .build() + ); + } + + private Mono tagBySlug(String slug) { + var listOptions = new ListOptions(); + listOptions.setFieldSelector(FieldSelector.of( + QueryFactory.and(QueryFactory.equal("spec.slug", slug), + QueryFactory.isNull("metadata.deletionTimestamp") + ) + )); + return client.listBy(Tag.class, listOptions, PageRequestImpl.ofSize(1)) + .mapNotNull(result -> ListResult.first(result).orElse(null)) + .flatMap(tag -> tagFinder.getByName(tag.getMetadata().getName())) + .switchIfEmpty( + Mono.error(new NotFoundException("Tag not found with slug: " + slug))); + } + +} diff --git a/application/src/main/java/run/halo/app/theme/router/factories/TagsRouteFactory.java b/application/src/main/java/run/halo/app/theme/router/factories/TagsRouteFactory.java new file mode 100644 index 0000000..bdd4015 --- /dev/null +++ b/application/src/main/java/run/halo/app/theme/router/factories/TagsRouteFactory.java @@ -0,0 +1,47 @@ +package run.halo.app.theme.router.factories; + +import static org.springframework.web.reactive.function.server.RequestPredicates.GET; +import static org.springframework.web.reactive.function.server.RequestPredicates.accept; + +import java.util.Map; +import lombok.AllArgsConstructor; +import org.apache.commons.lang3.StringUtils; +import org.springframework.http.MediaType; +import org.springframework.stereotype.Component; +import org.springframework.web.reactive.function.server.HandlerFunction; +import org.springframework.web.reactive.function.server.RouterFunction; +import org.springframework.web.reactive.function.server.RouterFunctions; +import org.springframework.web.reactive.function.server.ServerResponse; +import run.halo.app.theme.DefaultTemplateEnum; +import run.halo.app.theme.finders.TagFinder; +import run.halo.app.theme.router.ModelConst; + +/** + * The {@link TagsRouteFactory} for generate {@link RouterFunction} specific to the template + * tags.html. + * + * @author guqing + * @since 2.0.0 + */ +@Component +@AllArgsConstructor +public class TagsRouteFactory implements RouteFactory { + + private final TagFinder tagFinder; + + @Override + public RouterFunction create(String prefix) { + return RouterFunctions + .route(GET(StringUtils.prependIfMissing(prefix, "/")) + .and(accept(MediaType.TEXT_HTML)), handlerFunction()); + } + + private HandlerFunction handlerFunction() { + return request -> ServerResponse.ok() + .render(DefaultTemplateEnum.TAGS.getValue(), + Map.of("tags", tagFinder.listAll(), + ModelConst.TEMPLATE_ID, DefaultTemplateEnum.TAGS.getValue() + ) + ); + } +} diff --git a/application/src/main/java/run/halo/app/webfilter/AdditionalWebFilterChainProxy.java b/application/src/main/java/run/halo/app/webfilter/AdditionalWebFilterChainProxy.java new file mode 100644 index 0000000..7a8ce77 --- /dev/null +++ b/application/src/main/java/run/halo/app/webfilter/AdditionalWebFilterChainProxy.java @@ -0,0 +1,35 @@ +package run.halo.app.webfilter; + +import lombok.Setter; +import org.springframework.core.annotation.AnnotationAwareOrderComparator; +import org.springframework.security.web.server.WebFilterChainProxy; +import org.springframework.web.server.ServerWebExchange; +import org.springframework.web.server.WebFilter; +import org.springframework.web.server.WebFilterChain; +import reactor.core.publisher.Mono; +import run.halo.app.plugin.extensionpoint.ExtensionGetter; +import run.halo.app.security.AdditionalWebFilter; + +public class AdditionalWebFilterChainProxy implements WebFilter { + + private final ExtensionGetter extensionGetter; + + @Setter + private WebFilterChainProxy.WebFilterChainDecorator filterChainDecorator; + + public AdditionalWebFilterChainProxy(ExtensionGetter extensionGetter) { + this.extensionGetter = extensionGetter; + this.filterChainDecorator = new WebFilterChainProxy.DefaultWebFilterChainDecorator(); + } + + @Override + public Mono filter(ServerWebExchange exchange, WebFilterChain chain) { + return extensionGetter.getEnabledExtensions(AdditionalWebFilter.class) + .sort(AnnotationAwareOrderComparator.INSTANCE) + .cast(WebFilter.class) + .collectList() + .map(filters -> filterChainDecorator.decorate(chain, filters)) + .flatMap(decoratedChain -> decoratedChain.filter(exchange)); + } + +} diff --git a/application/src/main/resources/META-INF/spring-devtools.properties b/application/src/main/resources/META-INF/spring-devtools.properties new file mode 100644 index 0000000..53afa99 --- /dev/null +++ b/application/src/main/resources/META-INF/spring-devtools.properties @@ -0,0 +1,2 @@ +# See https://docs.spring.io/spring-boot/docs/current/reference/html/using.html#using.devtools.restart.customizing-the-classload for more +restart.include.apimodule=/api-[\\w\\d-\\.]+\\.jar diff --git a/application/src/main/resources/META-INF/spring.factories b/application/src/main/resources/META-INF/spring.factories new file mode 100644 index 0000000..e63b880 --- /dev/null +++ b/application/src/main/resources/META-INF/spring.factories @@ -0,0 +1 @@ +org.springframework.context.ApplicationListener=run.halo.app.infra.SchemeInitializer diff --git a/application/src/main/resources/application-dev.yaml b/application/src/main/resources/application-dev.yaml new file mode 100644 index 0000000..4475d96 --- /dev/null +++ b/application/src/main/resources/application-dev.yaml @@ -0,0 +1,47 @@ +server: + port: 8090 + +spring: + output: + ansi: + enabled: always + thymeleaf: + cache: false + web: + resources: + cache: + cachecontrol: + no-cache: true + use-last-modified: false + +halo: + console: + proxy: + endpoint: http://localhost:3000/ + enabled: true + uc: + proxy: + endpoint: http://localhost:4000/ + enabled: true + plugin: + runtime-mode: development # development, deployment + work-dir: ${user.home}/halo2-dev +logging: + level: + run.halo.app: DEBUG + org.springframework.boot.autoconfigure.web.reactive.error.AbstractErrorWebExceptionHandler: DEBUG +springdoc: + cache: + disabled: true + api-docs: + enabled: true + version: OPENAPI_3_0 + swagger-ui: + enabled: true + show-actuator: true + +management: + endpoints: + web: + exposure: + include: "*" diff --git a/application/src/main/resources/application-doc.yaml b/application/src/main/resources/application-doc.yaml new file mode 100644 index 0000000..af0af75 --- /dev/null +++ b/application/src/main/resources/application-doc.yaml @@ -0,0 +1,17 @@ +springdoc: + cache: + disabled: true + api-docs: + enabled: true + version: OPENAPI_3_0 + +spring: + main: + banner-mode: off + r2dbc: + url: r2dbc:h2:mem:///halo + +halo: + extension: + controller: + disabled: true diff --git a/application/src/main/resources/application-mariadb.yaml b/application/src/main/resources/application-mariadb.yaml new file mode 100644 index 0000000..e29c94d --- /dev/null +++ b/application/src/main/resources/application-mariadb.yaml @@ -0,0 +1,9 @@ +spring: + r2dbc: + url: r2dbc:pool:mariadb://localhost:3306/halo + username: root + password: mariadb + sql: + init: + mode: always + platform: mysql diff --git a/application/src/main/resources/application-mysql.yaml b/application/src/main/resources/application-mysql.yaml new file mode 100644 index 0000000..fe3846c --- /dev/null +++ b/application/src/main/resources/application-mysql.yaml @@ -0,0 +1,9 @@ +spring: + r2dbc: + url: r2dbc:pool:mysql://localhost:3306/halo + username: root + password: openmysql + sql: + init: + mode: always + platform: mysql diff --git a/application/src/main/resources/application-postgresql.yaml b/application/src/main/resources/application-postgresql.yaml new file mode 100644 index 0000000..d519c62 --- /dev/null +++ b/application/src/main/resources/application-postgresql.yaml @@ -0,0 +1,9 @@ +spring: + r2dbc: + url: r2dbc:pool:postgresql://localhost:5432/halo + username: postgres + password: openpostgresql + sql: + init: + mode: always + platform: postgresql diff --git a/application/src/main/resources/application-win.yaml b/application/src/main/resources/application-win.yaml new file mode 100644 index 0000000..5c8b123 --- /dev/null +++ b/application/src/main/resources/application-win.yaml @@ -0,0 +1,5 @@ +spring: + r2dbc: + url: r2dbc:h2:file:///~/halo2-dev/db/halo-next?MODE=MySQL&DB_CLOSE_ON_EXIT=FALSE +halo: + work-dir: ${user.home}/halo2-dev \ No newline at end of file diff --git a/application/src/main/resources/application.yaml b/application/src/main/resources/application.yaml new file mode 100644 index 0000000..a24b43d --- /dev/null +++ b/application/src/main/resources/application.yaml @@ -0,0 +1,99 @@ +server: + port: 8090 + forward-headers-strategy: framework + compression: + enabled: true + error: + whitelabel: + enabled: false +spring: + output: + ansi: + enabled: detect + r2dbc: + url: r2dbc:h2:file:///${halo.work-dir}/db/halo-next?MODE=MySQL&DB_CLOSE_ON_EXIT=FALSE + username: admin + password: 123456 + sql: + init: + mode: always + platform: h2 + codec: + max-in-memory-size: 10MB + messages: + basename: config.i18n.messages + web: + resources: + cache: + cachecontrol: + max-age: 365d + cache: + type: caffeine + caffeine: + spec: expireAfterAccess=1h, maximumSize=10000 + +halo: + work-dir: ${user.home}/.halo2 + attachment: + resource-mappings: + - pathPattern: /upload/** + locations: + - migrate-from-1.x + +springdoc: + api-docs: + enabled: false + writer-with-order-by-keys: true + +logging: + file: + name: ${halo.work-dir}/logs/halo.log + logback: + rollingpolicy: + max-file-size: 10MB + total-size-cap: 1GB + max-history: 0 + +management: + endpoints: + web: + exposure: + include: "*" + endpoint: + shutdown: + enabled: true + health: + probes: + enabled: true + info: + java: + enabled: true + os: + enabled: true + +resilience4j.ratelimiter: + configs: + authentication: + limitForPeriod: 3 + limitRefreshPeriod: 1m + timeoutDuration: 0 + comment-creation: + limitForPeriod: 10 + limitRefreshPeriod: 1m + timeoutDuration: 0s + signup: + limitForPeriod: 3 + limitRefreshPeriod: 1h + timeoutDuration: 0s + send-email-verification-code: + limitForPeriod: 1 + limitRefreshPeriod: 1m + timeoutDuration: 0s + verify-email: + limitForPeriod: 3 + limitRefreshPeriod: 1h + timeoutDuration: 0s + send-reset-password-email: + limitForPeriod: 2 + limitRefreshPeriod: 1m + timeoutDuration: 0s diff --git a/application/src/main/resources/banner.txt b/application/src/main/resources/banner.txt new file mode 100644 index 0000000..be58cc7 --- /dev/null +++ b/application/src/main/resources/banner.txt @@ -0,0 +1,8 @@ +${AnsiColor.BLUE} + __ __ __ + / / / /___ _/ /___ + / /_/ / __ `/ / __ \ + / __ / /_/ / / /_/ / +/_/ /_/\__,_/_/\____/ +${AnsiColor.BRIGHT_YELLOW} +Version: ${application.version}${AnsiColor.DEFAULT} \ No newline at end of file diff --git a/application/src/main/resources/config/i18n/messages.properties b/application/src/main/resources/config/i18n/messages.properties new file mode 100644 index 0000000..8d1bf19 --- /dev/null +++ b/application/src/main/resources/config/i18n/messages.properties @@ -0,0 +1,83 @@ +# Title definitions +problemDetail.title.org.springframework.web.server.ServerWebInputException=Bad Request +problemDetail.title.run.halo.app.infra.exception.UnsatisfiedAttributeValueException=Unsatisfied Request Attribute value +problemDetail.title.org.springframework.web.server.UnsupportedMediaTypeStatusException=Unsupported Media Type +problemDetail.title.org.springframework.web.server.MissingRequestValueException=Missing Request Value +problemDetail.title.org.springframework.web.server.UnsatisfiedRequestParameterException=Unsatisfied Request Parameter +problemDetail.title.org.springframework.web.bind.support.WebExchangeBindException=Data Binding or Validation Failure +problemDetail.title.org.springframework.web.server.NotAcceptableStatusException=Not Acceptable +problemDetail.title.org.springframework.web.server.ServerErrorException=Server Error +problemDetail.title.org.springframework.web.server.MethodNotAllowedException=Method Not Allowed +problemDetail.title.org.springframework.security.authentication.BadCredentialsException=Bad Credentials +problemDetail.title.run.halo.app.extension.exception.SchemaViolationException=Schema Violation +problemDetail.title.run.halo.app.infra.exception.AttachmentAlreadyExistsException=Attachment Already Exists +problemDetail.title.run.halo.app.infra.exception.FileTypeNotAllowedException=File Type Not Allowed +problemDetail.title.run.halo.app.infra.exception.FileSizeExceededException=File Size Exceeded +problemDetail.title.run.halo.app.infra.exception.AccessDeniedException=Access Denied +problemDetail.title.reactor.core.Exceptions.RetryExhaustedException=Retry Exhausted +problemDetail.title.run.halo.app.infra.exception.ThemeInstallationException=Theme Install Error +problemDetail.title.run.halo.app.infra.exception.ThemeUpgradeException=Theme Upgrade Error +problemDetail.title.run.halo.app.infra.exception.ThemeAlreadyExistsException=Theme Already Exists Error +problemDetail.title.run.halo.app.infra.exception.PluginInstallationException=Plugin Install Error +problemDetail.title.run.halo.app.infra.exception.PluginAlreadyExistsException=Plugin Already Exists Error +problemDetail.title.run.halo.app.infra.exception.DuplicateNameException=Duplicate Name Error +problemDetail.title.run.halo.app.infra.exception.RateLimitExceededException=Request Not Permitted +problemDetail.title.run.halo.app.infra.exception.NotFoundException=Resource Not Found +problemDetail.title.run.halo.app.infra.exception.EmailVerificationFailed=Email Verification Failed +problemDetail.title.run.halo.app.infra.exception.PluginDependencyException$CyclicException=Cyclic Dependency Detected +problemDetail.title.run.halo.app.infra.exception.PluginDependencyException$NotFoundException=Dependencies Not Found +problemDetail.title.run.halo.app.infra.exception.PluginDependencyException$WrongVersionsException=Wrong Dependency Version +problemDetail.title.run.halo.app.infra.exception.PluginDependentsNotDisabledException=Dependents Not Disabled +problemDetail.title.run.halo.app.infra.exception.PluginDependenciesNotEnabledException=Dependencies Not Enabled +problemDetail.title.internalServerError=Internal Server Error +problemDetail.title.conflict=Conflict + +# Detail definitions +problemDetail.org.springframework.web.server.UnsupportedMediaTypeStatusException=Content type {0} is not supported. Supported media types: {1}. +problemDetail.org.springframework.web.server.UnsupportedMediaTypeStatusException.parseError=Could not parse Content-Type. +problemDetail.org.springframework.web.server.MissingRequestValueException=Required {0} '{1}' is not present. +problemDetail.org.springframework.web.server.UnsatisfiedRequestParameterException=Parameter conditions "{0}" not met for actual request parameters. +problemDetail.org.springframework.web.bind.support.WebExchangeBindException=Invalid request content. Global errors: {0}. Field errors: {1}. +problemDetail.org.springframework.web.server.NotAcceptableStatusException=Acceptable representations: {0}. +problemDetail.org.springframework.web.server.NotAcceptableStatusException.parseError=Could not parse Accept header. +problemDetail.org.springframework.web.server.ServerErrorException={0}. +problemDetail.org.springframework.security.authentication.BadCredentialsException=The username or password is incorrect. +problemDetail.org.springframework.web.server.MethodNotAllowedException=Request method {0} is not supported. Supported methods: {1}. +problemDetail.run.halo.app.extension.exception.SchemaViolationException={1} of schema {0}. +problemDetail.run.halo.app.infra.exception.AttachmentAlreadyExistsException=File {0} already exists, please rename it and try again. +problemDetail.run.halo.app.infra.exception.DuplicateNameException=Duplicate name detected, please rename it and retry. +problemDetail.run.halo.app.infra.exception.PluginAlreadyExistsException=Plugin {0} already exists. +problemDetail.run.halo.app.infra.exception.RateLimitExceededException=API rate limit exceeded, please try again later. +problemDetail.run.halo.app.infra.exception.EmailVerificationFailed=Invalid email verification code. +problemDetail.run.halo.app.infra.exception.PluginDependencyException$CyclicException=A cyclic dependency was detected. +problemDetail.run.halo.app.infra.exception.PluginDependencyException$NotFoundException=Dependencies "{0}" were not found. +problemDetail.run.halo.app.infra.exception.PluginDependencyException$WrongVersionsException=Dependencies have wrong version: {0}. +problemDetail.run.halo.app.infra.exception.PluginDependentsNotDisabledException=Plugin dependents {0} are not fully disabled, please disable them first. +problemDetail.run.halo.app.infra.exception.PluginDependenciesNotEnabledException=Plugin dependencies {0} are not fully enabled, please enable them first. + +problemDetail.index.duplicateKey=The value of {0} already exists for unique index {1}, please rename it and retry. +problemDetail.user.email.verify.maxAttempts=Too many verification attempts, please try again later. +problemDetail.user.email.verify.emailInUse=The email has been used, please change the email and retry. +problemDetail.user.password.unsatisfied=The password does not meet the specifications. +problemDetail.user.username.unsatisfied=The username does not meet the specifications. +problemDetail.user.oldPassword.notMatch=The old password does not match. +problemDetail.user.password.notMatch=The password does not match. +problemDetail.user.signUpFailed.disallowed=System does not allow new users to register. +problemDetail.user.duplicateName=The username {0} already exists, please rename it and retry. +problemDetail.comment.turnedOff=The comment function has been turned off. +problemDetail.comment.systemUsersOnly=Allow only system users to comment +problemDetail.theme.upgrade.missingManifest=Missing theme manifest file "theme.yaml" or "theme.yml". +problemDetail.theme.upgrade.nameMismatch=The current theme name {0} did not match the installed theme name. +problemDetail.theme.install.missingManifest=Missing theme manifest file "theme.yaml" or manifest file does not conform to the theme specification. +problemDetail.theme.install.alreadyExists=Theme {0} already exists. +problemDetail.theme.version.unsatisfied.requires=The theme requires a minimum system version of {0}, but the current version is {1}. +problemDetail.directoryTraversal=Directory traversal detected. Base path is {0}, but real path is {1}. +problemDetail.plugin.version.unsatisfied.requires=Plugin requires a minimum system version of {0}, but the current version is {1}. +problemDetail.plugin.missingManifest=Missing plugin manifest file "plugin.yaml" or manifest file does not conform to the specification. +problemDetail.internalServerError=Something went wrong, please try again later. +problemDetail.conflict=Conflict detected, please check the data and retry. +problemDetail.migration.backup.notFound=The backup file does not exist or has been deleted. +problemDetail.attachment.upload.fileSizeExceeded=Make sure the file size is less than {0}. +problemDetail.attachment.upload.fileTypeNotSupported=Unsupported upload of {0} type files. + +title.visibility.identification.private=(Private) \ No newline at end of file diff --git a/application/src/main/resources/config/i18n/messages_zh.properties b/application/src/main/resources/config/i18n/messages_zh.properties new file mode 100644 index 0000000..818f7e3 --- /dev/null +++ b/application/src/main/resources/config/i18n/messages_zh.properties @@ -0,0 +1,55 @@ +problemDetail.title.org.springframework.web.server.ServerWebInputException=请求参数有误 +problemDetail.title.org.springframework.security.authentication.BadCredentialsException=无效凭据 +problemDetail.title.run.halo.app.infra.exception.UnsatisfiedAttributeValueException=请求参数属性值不满足要求 +problemDetail.title.run.halo.app.infra.exception.PluginInstallationException=插件安装失败 +problemDetail.title.run.halo.app.infra.exception.AttachmentAlreadyExistsException=附件已存在 +problemDetail.title.run.halo.app.infra.exception.FileTypeNotAllowedException=文件类型不允许 +problemDetail.title.run.halo.app.infra.exception.FileSizeExceededException=文件大小超出限制 +problemDetail.title.run.halo.app.infra.exception.DuplicateNameException=名称重复 +problemDetail.title.run.halo.app.infra.exception.PluginAlreadyExistsException=插件已存在 +problemDetail.title.run.halo.app.infra.exception.ThemeInstallationException=主题安装失败 +problemDetail.title.run.halo.app.infra.exception.ThemeAlreadyExistsException=主题已存在 +problemDetail.title.run.halo.app.infra.exception.RateLimitExceededException=请求限制 +problemDetail.title.run.halo.app.infra.exception.NotFoundException=资源不存在 +problemDetail.title.run.halo.app.infra.exception.EmailVerificationFailed=邮箱验证失败 +problemDetail.title.run.halo.app.infra.exception.PluginDependencyException$CyclicException=循环依赖 +problemDetail.title.run.halo.app.infra.exception.PluginDependencyException$NotFoundException=依赖未找到 +problemDetail.title.run.halo.app.infra.exception.PluginDependencyException$WrongVersionsException=依赖版本错误 +problemDetail.title.run.halo.app.infra.exception.PluginDependentsNotDisabledException=子插件未禁用 +problemDetail.title.run.halo.app.infra.exception.PluginDependenciesNotEnabledException=依赖未启用 +problemDetail.title.internalServerError=服务器内部错误 +problemDetail.title.conflict=冲突 + +problemDetail.org.springframework.security.authentication.BadCredentialsException=用户名或密码错误。 +problemDetail.run.halo.app.infra.exception.AttachmentAlreadyExistsException=文件 {0} 已存在，建议更名后重试。 +problemDetail.run.halo.app.infra.exception.DuplicateNameException=检测到有重复的名称，请重命名后重试。 +problemDetail.run.halo.app.infra.exception.PluginAlreadyExistsException=插件 {0} 已经存在。 +problemDetail.run.halo.app.infra.exception.RateLimitExceededException=请求过于频繁，请稍候再试。 +problemDetail.run.halo.app.infra.exception.EmailVerificationFailed=验证码错误或已失效。 +problemDetail.run.halo.app.infra.exception.PluginDependencyException$CyclicException=检测到循环依赖。 +problemDetail.run.halo.app.infra.exception.PluginDependencyException$NotFoundException=依赖“{0}”未找到。 +problemDetail.run.halo.app.infra.exception.PluginDependencyException$WrongVersionsException=依赖版本有误：{0}。 +problemDetail.run.halo.app.infra.exception.PluginDependentsNotDisabledException=子插件 {0} 未完全禁用，请先禁用它们。 +problemDetail.run.halo.app.infra.exception.PluginDependenciesNotEnabledException=插件依赖 {0} 未完全启用，请先启用它们。 + +problemDetail.index.duplicateKey=唯一索引 {1} 中的值 {0} 已存在，请更名后重试。 +problemDetail.user.email.verify.maxAttempts=尝试次数过多，请稍候再试。 +problemDetail.user.email.verify.emailInUse=邮箱已被使用, 请更换邮箱后重试。 +problemDetail.user.password.unsatisfied=密码不符合规范。 +problemDetail.user.username.unsatisfied=用户名不符合规范。 +problemDetail.user.oldPassword.notMatch=旧密码不匹配。 +problemDetail.user.password.notMatch=密码不匹配。 +problemDetail.user.signUpFailed.disallowed=系统不允许注册新用户。 +problemDetail.user.duplicateName=用户名 {0} 已存在，请更换用户名后重试。 +problemDetail.plugin.version.unsatisfied.requires=插件要求一个最小的系统版本为 {0}, 但当前版本为 {1}。 +problemDetail.plugin.missingManifest=缺少 plugin.yaml 配置文件或配置文件不符合规范。 +problemDetail.theme.version.unsatisfied.requires=主题要求一个最小的系统版本为 {0}, 但当前版本为 {1}。 +problemDetail.theme.install.missingManifest=缺少 theme.yaml 配置文件或配置文件不符合规范。 +problemDetail.theme.install.alreadyExists=主题 {0} 已存在。 +problemDetail.internalServerError=服务器内部发生错误，请稍候再试。 +problemDetail.conflict=检测到冲突，请检查数据后重试。 +problemDetail.migration.backup.notFound=备份文件不存在或已删除。 +problemDetail.attachment.upload.fileSizeExceeded=最大支持上传 {0} 大小的文件。 +problemDetail.attachment.upload.fileTypeNotSupported=不支持上传 {0} 类型的文件。 + +title.visibility.identification.private=（私有） \ No newline at end of file diff --git a/application/src/main/resources/extensions/attachment-local-policy.yaml b/application/src/main/resources/extensions/attachment-local-policy.yaml new file mode 100644 index 0000000..c4a331c --- /dev/null +++ b/application/src/main/resources/extensions/attachment-local-policy.yaml @@ -0,0 +1,75 @@ +apiVersion: storage.halo.run/v1alpha1 +kind: PolicyTemplate +metadata: + name: local +spec: + displayName: 本地存储 + settingName: local-policy-template-setting +--- +apiVersion: storage.halo.run/v1alpha1 +kind: Policy +metadata: + name: default-policy +spec: + displayName: 本地存储 + templateName: local + configMapName: default-policy-config +--- +apiVersion: v1alpha1 +kind: ConfigMap +metadata: + name: default-policy-config +data: + default: "{\"location\":\"\"}" +--- +apiVersion: v1alpha1 +kind: Setting +metadata: + name: local-policy-template-setting +spec: + forms: + - group: default + label: Default + formSchema: + - $formkit: text + name: location + label: 存储位置 + help: ~/.halo2/attachments/upload 下的子目录 + - $formkit: text + name: maxFileSize + label: 最大单文件大小 + validation: [['matches', '/^(0|[1-9]\d*)(?:[KMG]B)?$/']] + validation-visibility: "live" + validation-messages: + matches: "输入格式错误，遵循：整数 + 大写的单位（KB, MB, GB）" + help: "0 表示不限制，示例：5KB、10MB、1GB" + - $formkit: checkbox + name: allowedFileTypes + label: 文件类型限制 + help: 限制允许上传的文件类型 + options: + - label: 无限制 + value: ALL + - label: 图片 + value: IMAGE + - label: SVG + value: SVG + - label: 视频 + value: VIDEO + - label: 音频 + value: AUDIO + - label: 文档 + value: DOCUMENT + - label: 压缩包 + value: ARCHIVE +--- +apiVersion: storage.halo.run/v1alpha1 +kind: Group +metadata: + name: user-avatar-group + labels: + halo.run/hidden: "true" + finalizers: + - system-protection +spec: + displayName: UserAvatar \ No newline at end of file diff --git a/application/src/main/resources/extensions/authproviders.yaml b/application/src/main/resources/extensions/authproviders.yaml new file mode 100644 index 0000000..b8b4178 --- /dev/null +++ b/application/src/main/resources/extensions/authproviders.yaml @@ -0,0 +1,16 @@ +apiVersion: auth.halo.run/v1alpha1 +kind: AuthProvider +metadata: + name: local + labels: + auth.halo.run/auth-binding: "false" + auth.halo.run/privileged: "true" + finalizers: + - system-protection +spec: + displayName: Local + enabled: true + description: Built-in authentication for Halo. + logo: https://halo.run/logo + website: https://halo.run + authenticationUrl: /login diff --git a/application/src/main/resources/extensions/extension-definitions.yaml b/application/src/main/resources/extensions/extension-definitions.yaml new file mode 100644 index 0000000..b654fd1 --- /dev/null +++ b/application/src/main/resources/extensions/extension-definitions.yaml @@ -0,0 +1,49 @@ +## TODO: Currently, Halo does not support i18n for configuration file descriptions +## So Simplified Chinese is temporarily used as the default description language. + +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionDefinition +metadata: + name: username-password-logout-handler + labels: + auth.halo.run/extension-point-name: "additional-webfilter" +spec: + className: run.halo.app.security.authentication.login.UsernamePasswordLogoutHandler + extensionPointName: additional-webfilter + displayName: "用户名密码注销处理器" + description: "用于用户名和密码认证的注销处理器" +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionDefinition +metadata: + name: delegating-logout-page-generating-webfilter + labels: + auth.halo.run/extension-point-name: "additional-webfilter" +spec: + className: run.halo.app.security.authentication.login.DelegatingLogoutPageGeneratingWebFilter + extensionPointName: additional-webfilter + displayName: "注销页面生成过滤器" + description: "用于生成默认的注销页面" + +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionDefinition +metadata: + name: halo-email-notifier +spec: + className: run.halo.app.notification.EmailNotifier + extensionPointName: reactive-notifier + displayName: "邮件通知器" + description: "支持通过电子邮件向用户发送通知" + +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionDefinition +metadata: + name: search-engine-lucene +spec: + className: run.halo.app.search.lucene.LuceneSearchEngine + extensionPointName: search-engine + displayName: "Lucene 搜索引擎" + description: "Halo 自带的本地搜索引擎" + icon: /images/extension-points/lucene.png diff --git a/application/src/main/resources/extensions/extensionpoint-definitions.yaml b/application/src/main/resources/extensions/extensionpoint-definitions.yaml new file mode 100644 index 0000000..2e09811 --- /dev/null +++ b/application/src/main/resources/extensions/extensionpoint-definitions.yaml @@ -0,0 +1,99 @@ +## TODO: Currently, Halo does not support i18n for configuration file descriptions +## So Simplified Chinese is temporarily used as the default description language. + +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionPointDefinition +metadata: + name: additional-webfilter +spec: + className: run.halo.app.security.AdditionalWebFilter + displayName: "附加 Web 过滤器" + type: MULTI_INSTANCE + description: "用于 Web 请求的链式处理，可以用来实现跨领域、与应用无关的需求，如安全性、超时等" + +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionPointDefinition +metadata: + name: reactive-post-content-handler +spec: + className: run.halo.app.theme.ReactivePostContentHandler + displayName: "文章内容处理器" + type: MULTI_INSTANCE + description: "扩展在主题侧显示的文章内容" + +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionPointDefinition +metadata: + name: reactive-singlepage-content-handler +spec: + className: run.halo.app.theme.ReactiveSinglePageContentHandler + displayName: "页面内容处理器" + type: MULTI_INSTANCE + description: "扩展在主题侧显示的页面内容" + +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionPointDefinition +metadata: + name: comment-widget +spec: + className: run.halo.app.theme.dialect.CommentWidget + displayName: "评论组件" + type: SINGLETON + description: "扩展在文章页面中显示的评论组件" + +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionPointDefinition +metadata: + name: username-password-authentication-manager +spec: + className: run.halo.app.security.authentication.login.UsernamePasswordAuthenticationManager + displayName: "用户名密码认证管理器" + type: SINGLETON + description: "扩展用户名密码认证" + +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionPointDefinition +metadata: + name: reactive-notifier +spec: + className: run.halo.app.notification.ReactiveNotifier + displayName: "消息通知器" + type: MULTI_INSTANCE + description: "扩展消息通知器，以向用户发送通知" + +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionPointDefinition +metadata: + name: search-engine +spec: + className: run.halo.app.search.SearchEngine + displayName: "搜索引擎" + type: SINGLETON + description: "扩展内容搜索引擎" + +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionPointDefinition +metadata: + name: template-footer-processor +spec: + className: run.halo.app.theme.dialect.TemplateFooterProcessor + displayName: 页脚标签内容处理器 + type: MULTI_INSTANCE + description: "提供用于扩展 标签内容的扩展方式。" +--- +apiVersion: plugin.halo.run/v1alpha1 +kind: ExtensionPointDefinition +metadata: + name: excerpt-generator +spec: + className: run.halo.app.content.ExcerptGenerator + displayName: 摘要生成器 + type: SINGLETON + description: "提供自动生成摘要的方式扩展，如使用算法提取或使用 AI 生成。" diff --git a/application/src/main/resources/extensions/notification-templates.yaml b/application/src/main/resources/extensions/notification-templates.yaml new file mode 100644 index 0000000..6290a22 --- /dev/null +++ b/application/src/main/resources/extensions/notification-templates.yaml @@ -0,0 +1,189 @@ +apiVersion: notification.halo.run/v1alpha1 +kind: NotificationTemplate +metadata: + name: template-new-comment-on-post +spec: + reasonSelector: + reasonType: new-comment-on-post + language: default + template: + title: "[(${commenter})] 评论了你的文章《[(${postTitle})]》" + rawBody: | + [(${subscriber.displayName})] 你好： + + [(${commenter})] 评论了你的文章 《[(${postTitle})]》，以下是评论的具体内容： + + [(${content})] + htmlBody: | +
+
+

+
+
+

+ 评论了你的文章 + + ，以下是评论的具体内容： +

+ 

+        

+        

+      

+
+---
+apiVersion: notification.halo.run/v1alpha1
+kind: NotificationTemplate
+metadata:
+  name: template-new-comment-on-single-page
+spec:
+  reasonSelector:
+    reasonType: new-comment-on-single-page
+    language: default
+  template:
+    title: "[(${commenter})] 评论了你的页面《[(${pageTitle})]》"
+    rawBody: |
+      [(${subscriber.displayName})] 你好：
+
+        [(${commenter})] 评论了你的页面 《[(${pageTitle})]》，以下是评论的具体内容：
+
+        [(${content})]
+    htmlBody: |
+      

+        

+          

+        

+        

+          

+             评论了你的页面
+            
+            ，以下是评论的具体内容：
+          

+          

+        

+        

+      

+
+---
+apiVersion: notification.halo.run/v1alpha1
+kind: NotificationTemplate
+metadata:
+  name: template-someone-replied-to-you
+spec:
+  reasonSelector:
+    reasonType: someone-replied-to-you
+    language: default
+  template:
+    title: "[(${replier})] 在评论中回复了你"
+    rawBody: |
+      [(${subscriber.displayName})] 你好：
+
+        [(${replier})] 在评论“[(${isQuoteReply ? quoteContent : commentContent})]”中回复了你，以下是回复的具体内容：
+
+        [(${content})]
+    htmlBody: |
+      

+        

+          

+        

+        

+          

+             在评论
+            
+            中回复了你，以下是回复的具体内容：
+          

+          

+        

+        

+      

+---
+apiVersion: notification.halo.run/v1alpha1
+kind: NotificationTemplate
+metadata:
+  name: template-email-verification
+spec:
+  reasonSelector:
+    reasonType: email-verification
+    language: default
+  template:
+    title: "邮箱验证-[(${site.title})]"
+    rawBody: |
+      【[(${site.title})]】你的邮箱验证码是：[(${code})]，请在 [(${expirationAtMinutes})] 分钟内完成验证。
+    htmlBody: |
+      

+        

+          

+        

+        

+          
使用下面的动态验证码（OTP）验证您的电子邮件地址。

+          

+            
+          

+          

+          
如果您没有尝试验证您的电子邮件地址，请忽略此电子邮件。

+        

+      

+---
+apiVersion: notification.halo.run/v1alpha1
+kind: NotificationTemplate
+metadata:
+  name: template-reset-password-by-email
+spec:
+  reasonSelector:
+    reasonType: reset-password-by-email
+    language: default
+  template:
+    title: "重置密码-[(${site.title})]"
+    rawBody: |
+      【[(${site.title})]】你已经请求了重置密码，可以链接来重置密码：[(${link})]，请在 [(${expirationAtMinutes})] 分钟内完成重置。
+    htmlBody: |
+      

+        

+          

+        

+        

+          
你已经请求了重置密码，可以点击下面的链接来重置密码：

+          

+            
+          

+          

+          
如果您没有请求重置密码，请忽略此电子邮件。

+        

+      

+---
+apiVersion: notification.halo.run/v1alpha1
+kind: NotificationTemplate
+metadata:
+  name: template-new-device-login
+spec:
+  reasonSelector:
+    reasonType: new-device-login
+    language: default
+  template:
+    title: "你的 [(${site.title})] 账号被用于在 [(${os})] 上登录"
+    rawBody: |
+      [(${subscriber.displayName})] 你好：
+
+        你的 [(${site.title})] 账号被用于在 [(${os})] 的 [(${browser})] 上登录。
+        时间：[(${loginTime})]
+        IP 地址：[(${ipAddress})] 
+        如果你知悉上述信息，请忽略此电子邮件。
+        如果你最近没有使用你的 Halo 账号登录并相信有人可能访问了你的账户，请尽快重设你的密码。
+    htmlBody: |
+      

+        

+          

+        

+        

+          

+          

+            

+            

+          

+          
如果你知悉上述信息，请忽略此电子邮件。

+          

+        

+      

diff --git a/application/src/main/resources/extensions/notification.yaml b/application/src/main/resources/extensions/notification.yaml
new file mode 100644
index 0000000..f955c40
--- /dev/null
+++ b/application/src/main/resources/extensions/notification.yaml
@@ -0,0 +1,231 @@
+apiVersion: notification.halo.run/v1alpha1
+kind: NotifierDescriptor
+metadata:
+  name: default-email-notifier
+spec:
+  displayName: '邮件通知'
+  description: '通过邮件将通知发送给用户'
+  notifierExtName: 'halo-email-notifier'
+  senderSettingRef:
+    name: 'notifier-setting-for-email'
+    group: 'sender'
+---
+apiVersion: v1alpha1
+kind: Setting
+metadata:
+  name: notifier-setting-for-email
+spec:
+  forms:
+    - group: sender
+      label: 发件设置
+      formSchema:
+        - $formkit: checkbox
+          label: "启用邮件通知器"
+          value: false
+          name: enable
+        - $formkit: verificationForm
+          if: "$enable"
+          action: /apis/console.api.notification.halo.run/v1alpha1/notifiers/default-email-notifier/verify-connection
+          label: 测试邮箱
+          children:
+            - $formkit: text
+              label: "用户名"
+              name: username
+              validation: required
+            - $formkit: text
+              if: "$enable"
+              label: "发信地址"
+              name: "sender"
+              help: "如果用户名为实际发信地址，可忽略"
+            - $formkit: password
+              label: "密码"
+              name: password
+              validation: required
+            - $formkit: text
+              label: "显示名称"
+              name: displayName
+            - $formkit: text
+              label: "SMTP 服务器地址"
+              name: host
+              validation: required
+            - $formkit: text
+              label: "端口号"
+              name: port
+              validation: required
+            - $formkit: select
+              label: "加密方式"
+              name: encryption
+              value: "SSL"
+              options:
+                - label: "SSL"
+                  value: "SSL"
+                - label: "TLS"
+                  value: "TLS"
+                - label: "不加密"
+                  value: "NONE"
+---
+apiVersion: notification.halo.run/v1alpha1
+kind: ReasonType
+metadata:
+  name: new-comment-on-post
+  annotations:
+    rbac.authorization.halo.run/ui-permissions: |
+      [ "uc:posts:publish" ]
+spec:
+  displayName: "我的文章收到新评论"
+  description: "如果有读者在你的文章下方留下了新的评论，你将会收到一条通知，告诉你有新的评论。
+  这个通知事件可以帮助你及时了解读者对你的文章的反馈，以便你更好地与读者互动，提高文章的质量和受欢迎程度。"
+  properties:
+    - name: postName
+      type: string
+      description: "The name of the post."
+    - name: postOwner
+      type: string
+      description: "The user name of the post owner."
+    - name: postTitle
+      type: string
+    - name: postUrl
+      type: string
+    - name: commenter
+      type: string
+      description: "The display name of the commenter."
+    - name: commentName
+      type: string
+      description: "The name of the comment."
+    - name: content
+      type: string
+      description: "The content of the comment."
+---
+apiVersion: notification.halo.run/v1alpha1
+kind: ReasonType
+metadata:
+  name: new-comment-on-single-page
+  annotations:
+    rbac.authorization.halo.run/ui-permissions: |
+      [ "system:singlepages:manage" ]
+spec:
+  displayName: "我的自定义页面收到新评论"
+  description: "当你创建的自定义页面收到新评论时，你将会收到一条通知，告诉你有新的评论。"
+  properties:
+    - name: pageName
+      type: string
+      description: "The name of the single page."
+    - name: pageOwner
+      type: string
+      description: "The user name of the page owner."
+    - name: pageTitle
+      type: string
+    - name: pageUrl
+      type: string
+    - name: commenter
+      type: string
+      description: "The display name of the commenter."
+    - name: commentName
+      type: string
+      description: "The name of the comment."
+    - name: content
+      type: string
+      description: "The content of the comment."
+---
+apiVersion: notification.halo.run/v1alpha1
+kind: ReasonType
+metadata:
+  name: someone-replied-to-you
+spec:
+  displayName: "有人回复了我"
+  description: "如果有其他用户回复了你的评论，你将会收到一条通知，告诉你有人回复了你。"
+  properties:
+    - name: commentName
+      type: string
+      description: "The name of the comment."
+    - name: commentSubjectTitle
+      type: string
+    - name: commentSubjectUrl
+      type: string
+    - name: quoteContent
+      type: string
+      optional: true
+      description: "The content of quoted reply."
+    - name: isQuoteReply
+      type: boolean
+    - name: commentContent
+      type: string
+    - name: repliedOwner
+      type: string
+      description: "The owner of the comment or reply that has been replied to."
+    - name: replyOwner
+      type: string
+      description: "The user who created the current reply."
+    - name: replier
+      type: string
+      description: "The display name of the replier."
+    - name: replyName
+      type: string
+      description: "The name of the reply."
+    - name: content
+      type: string
+      description: "The content of the reply."
+---
+apiVersion: notification.halo.run/v1alpha1
+kind: ReasonType
+metadata:
+  name: email-verification
+  labels:
+    halo.run/hide: "true"
+spec:
+  displayName: "邮箱验证"
+  description: "当你的邮箱被用于注册账户时，会收到一条带有验证码的邮件，你需要点击邮件中的链接来验证邮箱是否属于你。"
+  properties:
+    - name: username
+      type: string
+      description: "The username of the user."
+    - name: code
+      type: string
+      description: "The verification code."
+    - name: expirationAtMinutes
+      type: string
+      description: "The expiration minutes of the verification code, such as 5 minutes."
+---
+apiVersion: notification.halo.run/v1alpha1
+kind: ReasonType
+metadata:
+  name: reset-password-by-email
+  labels:
+    halo.run/hide: "true"
+spec:
+  displayName: "根据邮件地址重置密码"
+  description: "当你通过邮件地址找回密码时，会收到一条带密码重置链接的邮件，你需要点击邮件中的链接来重置密码。"
+  properties:
+    - name: username
+      type: string
+      description: "The username of the user."
+    - name: link
+      type: string
+      description: "The reset link."
+    - name: expirationAtMinutes
+      type: string
+      description: "The expiration minutes of the reset link, such as 30 minutes."
+---
+apiVersion: notification.halo.run/v1alpha1
+kind: ReasonType
+metadata:
+  name: new-device-login
+spec:
+  displayName: "新设备登录"
+  description: "当你的账户在新设备上登录时，你会收到一条通知，告诉你有新设备登录了你的账户。"
+  properties:
+    - name: os
+      type: string
+      description: "The operating system of the device."
+    - name: browser
+      type: string
+      description: "The browser of the device."
+    - name: ipAddress
+      type: string
+      description: "The IP address of the device."
+    - name: loginTime
+      type: string
+      description: "The login time of the device."
+    - name: principalName
+      type: string
+      description: "The principal name of the device."
\ No newline at end of file
diff --git a/application/src/main/resources/extensions/role-template-actuator.yaml b/application/src/main/resources/extensions/role-template-actuator.yaml
new file mode 100644
index 0000000..7d3ecb4
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-actuator.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-actuator
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Actuator Management"
+    rbac.authorization.halo.run/display-name: "Actuator Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:actuator:manage"]
+rules:
+  - nonResourceURLs: [ "actuator", "/actuator/*" ]
+    verbs: [ "get" ]
diff --git a/application/src/main/resources/extensions/role-template-anonymous.yaml b/application/src/main/resources/extensions/role-template-anonymous.yaml
new file mode 100644
index 0000000..06e23a7
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-anonymous.yaml
@@ -0,0 +1,48 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: anonymous
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-own-permissions", "role-template-public-apis" ]
+rules:
+  - apiGroups: [ "api.halo.run" ]
+    resources: [ "comments", "comments/reply" ]
+    verbs: [ "create", "get", "list" ]
+  - apiGroups: [ "api.halo.run" ]
+    resources: [ "*" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users" ]
+    resourceNames: [ "-" ]
+    verbs: [ "get" ]
+  - nonResourceURLs: [ "/apis/api.halo.run/v1alpha1/trackers/*" ]
+    verbs: [ "create" ]
+  - nonResourceURLs: [ "/actuator/globalinfo", "/actuator/health", "/actuator/health/*", "/login/public-key" ]
+    verbs: [ "get" ]
+  - nonResourceURLs: [ "/apis/api.console.halo.run/v1alpha1/system/initialize" ]
+    verbs: [ "create" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-public-apis
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "api.halo.run" ]
+    resources: [ "*" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.content.halo.run" ]
+    resources: [ "*" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.plugin.halo.run" ]
+    resources: [ "*" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.notification.halo.run" ]
+    resources: [ "subscriptions/unsubscribe" ]
+    verbs: [ "get", "list" ]
\ No newline at end of file
diff --git a/application/src/main/resources/extensions/role-template-attachment.yaml b/application/src/main/resources/extensions/role-template-attachment.yaml
new file mode 100644
index 0000000..8bc9967
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-attachment.yaml
@@ -0,0 +1,43 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-attachments
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-attachments\" ]"
+    rbac.authorization.halo.run/module: "Attachments Management"
+    rbac.authorization.halo.run/display-name: "Attachment Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:attachments:manage"]
+rules:
+  - apiGroups: [ "storage.halo.run" ]
+    resources: [ "attachments", "policies", "policytemplates", "groups" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "attachments" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "" ]
+    resources: [ "settings" ]
+    verbs: [ "get" ]
+  - nonResourceURLs: [ "/apis/api.console.halo.run/v1alpha1/attachments/upload" ]
+    verbs: [ "create" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-attachments
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Attachments Management"
+    rbac.authorization.halo.run/display-name: "Attachment View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:attachments:view"]
+rules:
+  - apiGroups: [ "storage.halo.run" ]
+    resources: [ "attachments", "policies", "policytemplates", "groups" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "attachments" ]
+    verbs: [ "get", "list" ]
\ No newline at end of file
diff --git a/application/src/main/resources/extensions/role-template-authenticated.yaml b/application/src/main/resources/extensions/role-template-authenticated.yaml
new file mode 100644
index 0000000..a5d9200
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-authenticated.yaml
@@ -0,0 +1,155 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: authenticated
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: |
+      [ 
+        "role-template-own-user-info",
+        "role-template-own-permissions",
+        "role-template-change-own-password",
+        "role-template-stats",
+        "role-template-annotation-setting",
+        "role-template-manage-own-pat",
+        "role-template-manage-own-authentications",
+        "role-template-user-notification"
+      ]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "configmaps" ]
+    resourceNames: [ "system-states" ]
+    verbs: [ "get" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "auth-providers" ]
+    verbs: [ "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "plugins/bundle.js", "plugins/bundle.css" ]
+    resourceNames: [ "-" ]
+    verbs: [ "get" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-own-user-info
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users" ]
+    resourceNames: [ "-" ]
+    verbs: [ "get", "update" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users/avatar" ]
+    resourceNames: [ "-" ]
+    verbs: [ "create", "delete" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users/send-email-verification-code", "users/verify-email" ]
+    resourceNames: [ "-" ]
+    verbs: [ "create" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-own-permissions
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users/permissions" ]
+    resourceNames: [ "-" ]
+    verbs: [ "list", "get" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-change-own-password
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users/password" ]
+    resourceNames: [ "-" ]
+    verbs: [ "update" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-stats
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "stats" ]
+    verbs: [ "get", "list" ]
+
+---
+apiVersion: v1alpha1
+kind: Role
+metadata:
+  name: role-template-annotation-setting
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "annotationsettings" ]
+    verbs: [ "get", "list" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-own-pat
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "uc.api.security.halo.run" ]
+    resources: [ "personalaccesstokens" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "uc.api.security.halo.run" ]
+    resources: [ "personalaccesstokens/actions" ]
+    verbs: [ "update" ]
+
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-own-authentications
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "uc.api.security.halo.run" ]
+    resources: [ "authentications", "authentications/totp", "authentications/settings" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "uc.api.security.halo.run" ]
+    resources: [ "devices" ]
+    verbs: [ "get", "list", "delete" ]
+---
+apiVersion: v1alpha1
+kind: Role
+metadata:
+  name: role-template-user-notification
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "api.notification.halo.run" ]
+    resources: [ "notifications" ]
+    verbs: [ "get", "list", "delete" ]
+  - apiGroups: [ "api.notification.halo.run" ]
+    resources: [ "notifications/mark-as-read", "notifications/mark-specified-as-read" ]
+    verbs: [ "update" ]
+  - apiGroups: [ "api.notification.halo.run" ]
+    resources: [ "notifiers/receiver-config" ]
+    verbs: [ "get", "update" ]
+  - apiGroups: [ "api.notification.halo.run" ]
+    resources: [ "notification-preferences" ]
+    verbs: [ "create", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-cache.yaml b/application/src/main/resources/extensions/role-template-cache.yaml
new file mode 100644
index 0000000..d2faf04
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-cache.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-cache
+  deletionTimestamp: 2024-06-01T00:00:00Z
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Cache Management"
+    rbac.authorization.halo.run/display-name: "Cache Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:caches:manage"]
+rules:
+  - apiGroups: ["api.console.halo.run"]
+    resources: ["caches"]
+    verbs: ["delete"]
diff --git a/application/src/main/resources/extensions/role-template-category.yaml b/application/src/main/resources/extensions/role-template-category.yaml
new file mode 100644
index 0000000..d40cef5
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-category.yaml
@@ -0,0 +1,30 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-categories
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-categories\" ]"
+    rbac.authorization.halo.run/ui-permissions: |
+      [ "system:categories:manage", "uc:categories:manage" ]
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "categories" ]
+    verbs: [ "*" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-categories
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+  annotations:
+    rbac.authorization.halo.run/ui-permissions: |
+      [ "system:categories:view", "uc:categories:view" ]
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "categories" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-comment.yaml b/application/src/main/resources/extensions/role-template-comment.yaml
new file mode 100644
index 0000000..36f335b
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-comment.yaml
@@ -0,0 +1,38 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-comments
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-comments\" ]"
+    rbac.authorization.halo.run/module: "Comments Management"
+    rbac.authorization.halo.run/display-name: "Comment Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:comments:manage"]
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "comments", "replies" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "comments", "comments/reply", "replies" ]
+    verbs: [ "*" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-comments
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Comments Management"
+    rbac.authorization.halo.run/display-name: "Comment View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:comments:view"]
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "comments", "replies" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "comments", "comments/reply", "replies" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-configmap.yaml b/application/src/main/resources/extensions/role-template-configmap.yaml
new file mode 100644
index 0000000..889f40b
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-configmap.yaml
@@ -0,0 +1,32 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-configmaps
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-configmaps\" ]"
+    rbac.authorization.halo.run/module: "ConfigMaps Management"
+    rbac.authorization.halo.run/display-name: "ConfigMap Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:configmaps:manage"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "configmaps" ]
+    verbs: [ "create", "patch", "update", "delete", "deletecollection" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-configmaps
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "ConfigMaps Management"
+    rbac.authorization.halo.run/display-name: "ConfigMap View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:configmaps:view"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "configmaps" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-menu.yaml b/application/src/main/resources/extensions/role-template-menu.yaml
new file mode 100644
index 0000000..24a4d71
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-menu.yaml
@@ -0,0 +1,32 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-menus
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-menus\" ]"
+    rbac.authorization.halo.run/module: "Menus Management"
+    rbac.authorization.halo.run/display-name: "Menu Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:menus:manage"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "menus", "menuitems" ]
+    verbs: [ "*" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-menus
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Menus Management"
+    rbac.authorization.halo.run/display-name: "Menu View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:menus:view"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "menus", "menuitems" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-migration.yaml b/application/src/main/resources/extensions/role-template-migration.yaml
new file mode 100644
index 0000000..6edc1c8
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-migration.yaml
@@ -0,0 +1,24 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-migration
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Migration Management"
+    rbac.authorization.halo.run/display-name: "Migration Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:migrations:manage"]
+rules:
+  - apiGroups: [ "console.api.migration.halo.run" ]
+    resources: [ "restorations" ]
+    verbs: [ "create" ]
+  - apiGroups: [ "console.api.migration.halo.run" ]
+    resources: [ "backup-files" ]
+    verbs: [ "list" ]
+  - apiGroups: [ "console.api.migration.halo.run" ]
+    resources: [ "backups/files" ]
+    verbs: [ "get" ]
+  - apiGroups: [ "migration.halo.run" ]
+    resources: [ "backups" ]
+    verbs: [ "list", "get", "create", "update", "delete", "patch" ]
diff --git a/application/src/main/resources/extensions/role-template-notification.yaml b/application/src/main/resources/extensions/role-template-notification.yaml
new file mode 100644
index 0000000..fdce8c3
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-notification.yaml
@@ -0,0 +1,21 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-notifier-config
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Notification Configuration"
+    rbac.authorization.halo.run/display-name: "Configure Notifier"
+rules:
+  - apiGroups: [ "notification.halo.run" ]
+    resources: [ "notifierDescriptors" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "notifiers/sender-config" ]
+    verbs: [ "get", "update" ]
+  - apiGroups: [ "console.api.notification.halo.run" ]
+    resources: [ "notifiers/verify-connection" ]
+    resourceNames: [ "default-email-notifier" ]
+    verbs: [ "create" ]
diff --git a/application/src/main/resources/extensions/role-template-permissions.yaml b/application/src/main/resources/extensions/role-template-permissions.yaml
new file mode 100644
index 0000000..9fb86e3
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-permissions.yaml
@@ -0,0 +1,32 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-permissions
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-permissions\" ]"
+    rbac.authorization.halo.run/module: "Permissions Management"
+    rbac.authorization.halo.run/display-name: "Permissions Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:permissions:manage"]
+rules:
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users/permissions" ]
+    verbs: [ "create", "patch", "update", "delete", "deletecollection" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-permissions
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Permissions Management"
+    rbac.authorization.halo.run/display-name: "Permissions View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:permissions:view"]
+rules:
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users/permissions" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-plugin.yaml b/application/src/main/resources/extensions/role-template-plugin.yaml
new file mode 100644
index 0000000..82ff040
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-plugin.yaml
@@ -0,0 +1,45 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-plugins
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-view-plugins" ]
+    rbac.authorization.halo.run/module: "Plugins Management"
+    rbac.authorization.halo.run/display-name: "Plugin Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:plugins:manage"]
+rules:
+  - apiGroups: [ "plugin.halo.run" ]
+    resources: [ "plugins" ]
+    verbs: [ "create", "patch", "update", "delete", "deletecollection" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "plugins/upgrade", "plugins/resetconfig", "plugins/config", "plugins/reload",
+                 "plugins/install-from-uri", "plugins/upgrade-from-uri", "plugins/plugin-state" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "plugin-presets" ]
+    verbs: [ "list" ]
+  - nonResourceURLs: [ "/apis/api.console.halo.run/v1alpha1/plugins/*" ]
+    verbs: [ "create" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-plugins
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Plugins Management"
+    rbac.authorization.halo.run/display-name: "Plugin View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:plugins:view"]
+rules:
+  - apiGroups: [ "plugin.halo.run" ]
+    resources: [ "plugins" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "plugins", "plugins/setting", "plugins/config" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-post.yaml b/application/src/main/resources/extensions/role-template-post.yaml
new file mode 100644
index 0000000..d48246b
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-post.yaml
@@ -0,0 +1,41 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-posts
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-view-posts", "role-template-manage-snapshots", "role-template-manage-tags", "role-template-manage-categories", "role-template-post-author" ]
+    rbac.authorization.halo.run/module: "Posts Management"
+    rbac.authorization.halo.run/display-name: "Post Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:posts:manage"]
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "posts" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "posts", "posts/publish", "posts/unpublish", "posts/recycle", "posts/content", "indices/post", "posts/revert-content" ]
+    verbs: [ "create", "patch", "update", "delete", "deletecollection" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-posts
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-view-snapshots", "role-template-view-tags", "role-template-view-categories" ]
+    rbac.authorization.halo.run/module: "Posts Management"
+    rbac.authorization.halo.run/display-name: "Post View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:posts:view"]
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "posts" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "posts", "posts/head-content", "posts/release-content", "posts/snapshot", "posts/content" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-role.yaml b/application/src/main/resources/extensions/role-template-role.yaml
new file mode 100644
index 0000000..c05dad2
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-role.yaml
@@ -0,0 +1,33 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-roles
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-view-roles", "role-template-manage-permissions" ]
+    rbac.authorization.halo.run/module: "Roles Management"
+    rbac.authorization.halo.run/display-name: "Role Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:roles:manage"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "roles" ]
+    verbs: [ "create", "patch", "update", "delete", "deletecollection" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-roles
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Roles Management"
+    rbac.authorization.halo.run/display-name: "Role View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:roles:view"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "roles" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-setting.yaml b/application/src/main/resources/extensions/role-template-setting.yaml
new file mode 100644
index 0000000..7507ee6
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-setting.yaml
@@ -0,0 +1,38 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-settings
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-settings\", \"role-template-notifier-config\" ]"
+    rbac.authorization.halo.run/module: "Settings Management"
+    rbac.authorization.halo.run/display-name: "Setting Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:settings:manage", "system:notifier:configuration"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "settings" ]
+    verbs: [ "create", "patch", "update", "delete", "deletecollection" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "auth-providers/enable", "auth-providers/disable" ]
+    verbs: [ "update" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-settings
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Settings Management"
+    rbac.authorization.halo.run/display-name: "Setting View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:settings:view"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "settings" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "auth-providers" ]
+    verbs: [ "get", "list" ]
\ No newline at end of file
diff --git a/application/src/main/resources/extensions/role-template-singlepage.yaml b/application/src/main/resources/extensions/role-template-singlepage.yaml
new file mode 100644
index 0000000..8dd5b1c
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-singlepage.yaml
@@ -0,0 +1,39 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-singlepages
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-singlepages\", \"role-template-manage-snapshots\" ]"
+    rbac.authorization.halo.run/module: "SinglePages Management"
+    rbac.authorization.halo.run/display-name: "SinglePage Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:singlepages:manage"]
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "singlepages" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "singlepages", "singlepages/publish", "singlepages/content", "singlepages/revert-content" ]
+    verbs: [ "create", "patch", "update", "delete", "deletecollection" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-singlepages
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-snapshots\" ]"
+    rbac.authorization.halo.run/module: "SinglePages Management"
+    rbac.authorization.halo.run/display-name: "SinglePage View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:singlepages:view"]
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "singlepages" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "singlepages", "singlepages/head-content", "singlepages/release-content", "singlepages/snapshot", "singlepages/content" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-snapshot.yaml b/application/src/main/resources/extensions/role-template-snapshot.yaml
new file mode 100644
index 0000000..bbc4939
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-snapshot.yaml
@@ -0,0 +1,25 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-snapshots
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-snapshots\" ]"
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "snapshots" ]
+    verbs: [ "*" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-snapshots
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "snapshots" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-tag.yaml b/application/src/main/resources/extensions/role-template-tag.yaml
new file mode 100644
index 0000000..868812e
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-tag.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-tags
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-tags\" ]"
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "tags" ]
+    verbs: [ "*" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-tags
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+rules:
+  - apiGroups: [ "content.halo.run" ]
+    resources: [ "tags" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "tags" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/main/resources/extensions/role-template-theme.yaml b/application/src/main/resources/extensions/role-template-theme.yaml
new file mode 100644
index 0000000..6b6c375
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-theme.yaml
@@ -0,0 +1,42 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-themes
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: "[ \"role-template-view-themes\" ]"
+    rbac.authorization.halo.run/module: "Themes Management"
+    rbac.authorization.halo.run/display-name: "Theme Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:themes:manage"]
+rules:
+  - apiGroups: [ "theme.halo.run" ]
+    resources: [ "themes" ]
+    verbs: [ "*" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "themes", "themes/reload", "themes/resetconfig", "themes/config", "themes/activation",
+                 "themes/install-from-uri", "themes/upgrade-from-uri", "themes/invalidate-cache" ]
+    verbs: [ "*" ]
+  - nonResourceURLs: [ "/apis/api.console.halo.run/themes/install" ]
+    verbs: [ "create" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-themes
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Themes Management"
+    rbac.authorization.halo.run/display-name: "Theme View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:themes:view"]
+rules:
+  - apiGroups: [ "theme.halo.run" ]
+    resources: [ "themes" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "themes", "themes/activation", "themes/setting", "themes/config" ]
+    verbs: [ "get", "list" ]
+
diff --git a/application/src/main/resources/extensions/role-template-uc-content.yaml b/application/src/main/resources/extensions/role-template-uc-content.yaml
new file mode 100644
index 0000000..a8f6072
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-uc-content.yaml
@@ -0,0 +1,116 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: post-editor
+  labels:
+    rbac.authorization.halo.run/system-reserved: "true"
+  annotations:
+    # Currently, yaml definition does not support i18n, please see https://github.com/halo-dev/halo/issues/3573
+    rbac.authorization.halo.run/display-name: "文章管理员"
+    rbac.authorization.halo.run/dependencies: |
+      ["role-template-manage-posts"]
+rules: [ ]
+
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: post-author
+  labels:
+    rbac.authorization.halo.run/system-reserved: "true"
+  annotations:
+    # Currently, yaml definition does not support i18n, please see https://github.com/halo-dev/halo/issues/3573
+    rbac.authorization.halo.run/display-name: "作者"
+    rbac.authorization.halo.run/disallow-access-console: "true"
+    rbac.authorization.halo.run/redirect-on-login: "/uc"
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-post-author" ]
+rules: [ ]
+
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-post-author
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Posts Management"
+    # Currently, yaml definition does not support i18n, please see https://github.com/halo-dev/halo/issues/3573
+    rbac.authorization.halo.run/display-name: "Post Author"
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-post-contributor", "role-template-post-publisher", "role-template-post-attachment-manager" ]
+rules: [ ]
+
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: post-contributor
+  labels:
+    rbac.authorization.halo.run/system-reserved: "true"
+  annotations:
+    # Currently, yaml definition does not support i18n, please see https://github.com/halo-dev/halo/issues/3573
+    rbac.authorization.halo.run/display-name: "投稿者"
+    rbac.authorization.halo.run/disallow-access-console: "true"
+    rbac.authorization.halo.run/redirect-on-login: "/uc"
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-post-contributor" ]
+rules: [ ]
+
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-post-contributor
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Posts Management"
+    # Currently, yaml definition does not support i18n, please see https://github.com/halo-dev/halo/issues/3573
+    rbac.authorization.halo.run/display-name: "Post Contributor"
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-view-categories", "role-template-view-tags" ]
+    rbac.authorization.halo.run/ui-permissions: |
+      [ "uc:posts:manage" ]
+rules:
+  - apiGroups: [ "uc.api.content.halo.run" ]
+    resources: [ "posts" ]
+    verbs: [ "get", "list", "create", "update", "delete" ]
+  - apiGroups: [ "uc.api.content.halo.run" ]
+    resources: [ "posts/draft" ]
+    verbs: [ "update", "get" ]
+
+---
+apiVersion: v1alpha1
+kind: Role
+metadata:
+  name: role-template-post-publisher
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Posts Management"
+    rbac.authorization.halo.run/display-name: "Post Publisher"
+    rbac.authorization.halo.run/ui-permissions: |
+      [ "uc:posts:publish" ]
+rules:
+  - apiGroups: [ "uc.api.content.halo.run" ]
+    resources: [ "posts/publish", "posts/unpublish" ]
+    verbs: [ "update" ]
+
+---
+apiVersion: v1alpha1
+kind: Role
+metadata:
+  name: role-template-post-attachment-manager
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Posts Management"
+    rbac.authorization.halo.run/display-name: "Post Attachment Manager"
+    rbac.authorization.halo.run/ui-permissions: |
+      [ "uc:attachments:manage" ]
+rules:
+  - apiGroups: [ "uc.api.content.halo.run" ]
+    resources: [ "attachments" ]
+    verbs: [ "create", "update", "delete" ]
diff --git a/application/src/main/resources/extensions/role-template-user.yaml b/application/src/main/resources/extensions/role-template-user.yaml
new file mode 100644
index 0000000..ebd69d1
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-user.yaml
@@ -0,0 +1,54 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-manage-users
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/dependencies: |
+      [ "role-template-view-users", "role-template-change-password" ]
+    rbac.authorization.halo.run/module: "Users Management"
+    rbac.authorization.halo.run/display-name: "User manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:users:manage"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "users" ]
+    verbs: [ "create", "patch", "update", "delete", "deletecollection" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users", "users/permissions", "users/password", "users/avatar" ]
+    verbs: [ "*" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-view-users
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Users Management"
+    rbac.authorization.halo.run/display-name: "User View"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:users:view"]
+rules:
+  - apiGroups: [ "" ]
+    resources: [ "users" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users" ]
+    verbs: [ "get", "list" ]
+---
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-change-password
+  labels:
+    halo.run/role-template: "true"
+    halo.run/hidden: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Users Management"
+    rbac.authorization.halo.run/display-name: "User Password Change"
+rules:
+  - apiGroups: [ "api.console.halo.run" ]
+    resources: [ "users/password" ]
+    verbs: [ "update" ]
diff --git a/application/src/main/resources/extensions/searchengine-lucene.yaml b/application/src/main/resources/extensions/searchengine-lucene.yaml
new file mode 100644
index 0000000..f1f729c
--- /dev/null
+++ b/application/src/main/resources/extensions/searchengine-lucene.yaml
@@ -0,0 +1,11 @@
+apiVersion: plugin.halo.run/v1alpha1
+kind: SearchEngine
+metadata:
+  name: lucene
+  deletionTimestamp: 2024-06-25T00:00:00Z
+spec:
+  logo: https://lucene.apache.org/theme/images/lucene/lucene_logo_green_300.png
+  website: https://lucene.apache.org/
+  displayName: Lucene
+  description: Apache Lucene is a high-performance, full-featured search engine library written entirely in Java. It is a technology suitable for nearly any application that requires structured search, full-text search, faceting, nearest-neighbor search across high-dimensionality vectors, spell correction or query suggestions.
+  postSearchImpl: run.halo.app.search.post.LucenePostSearchService
diff --git a/application/src/main/resources/extensions/system-configurable-configmap.yaml b/application/src/main/resources/extensions/system-configurable-configmap.yaml
new file mode 100644
index 0000000..5d22168
--- /dev/null
+++ b/application/src/main/resources/extensions/system-configurable-configmap.yaml
@@ -0,0 +1,52 @@
+apiVersion: v1alpha1
+kind: "ConfigMap"
+metadata:
+  name: system-default
+data:
+  user: |
+    {
+      "allowRegistration": false,
+      "mustVerifyEmailOnRegistration": false,
+      "defaultRole": "guest",
+      "avatarPolicy": "default-policy"
+    }
+  theme: |
+    {
+      "active": "theme-earth"
+    }
+  routeRules: |
+    {
+      "categories": "categories",
+      "archives": "archives",
+      "post": "/archives/{slug}",
+      "tags": "tags"
+    }
+  codeInjection: |
+    {
+     "globalHead": "",
+     "footer": ""
+    }
+  post: |
+    {
+      "review": false,
+      "postPageSize": 10,
+      "archivePageSize": 10,
+      "categoryPageSize": 10,
+      "tagPageSize": 10,
+      "slugGenerationStrategy": "generateByTitle",
+      "attachmentPolicyName": "default-policy"
+    }
+  comment: |
+    {
+      "enable": true,
+      "requireReviewForNew": true,
+      "systemUserOnly": true
+    }
+  menu: |
+    {
+      "primary": "primary"
+    }
+  extensionPointEnabled: |
+    {
+      "search-engine": ["search-engine-lucene"]
+    }
diff --git a/application/src/main/resources/extensions/system-default-role.yaml b/application/src/main/resources/extensions/system-default-role.yaml
new file mode 100644
index 0000000..dee595d
--- /dev/null
+++ b/application/src/main/resources/extensions/system-default-role.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1alpha1
+kind: Role
+metadata:
+  name: guest
+  labels:
+    rbac.authorization.halo.run/system-reserved: "true"
+  annotations:
+    rbac.authorization.halo.run/display-name: "访客"
+    rbac.authorization.halo.run/disallow-access-console: "true"
+    rbac.authorization.halo.run/redirect-on-login: "/uc"
+rules: []
+
+---
+apiVersion: v1alpha1
+kind: Role
+metadata:
+  name: super-role
+  labels:
+    rbac.authorization.halo.run/system-reserved: "true"
+  annotations:
+    rbac.authorization.halo.run/display-name: "超级管理员"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["*"]
+rules:
+  - apiGroups: ["*"]
+    resources: ["*"]
+    nonResourceURLs: ["*"]
+    verbs: ["*"]
diff --git a/application/src/main/resources/extensions/system-setting.yaml b/application/src/main/resources/extensions/system-setting.yaml
new file mode 100644
index 0000000..eaf4414
--- /dev/null
+++ b/application/src/main/resources/extensions/system-setting.yaml
@@ -0,0 +1,195 @@
+apiVersion: v1alpha1
+kind: Setting
+metadata:
+  name: system
+spec:
+  forms:
+    - group: basic
+      label: 基本设置
+      formSchema:
+        - $formkit: text
+          label: "站点标题"
+          name: title
+          validation: required
+        - $formkit: text
+          label: "站点副标题"
+          name: subtitle
+        - $formkit: attachment
+          label: Logo
+          name: logo
+          accepts:
+            - 'image/*'
+        - $formkit: attachment
+          label: Favicon
+          name: favicon
+          accepts:
+            - 'image/*'
+    - group: post
+      label: 文章设置
+      formSchema:
+        - $formkit: number
+          label: "文章列表显示条数"
+          name: postPageSize
+          value: 10
+          min: 1
+          max: 100
+          validation: required | max:100
+        - $formkit: number
+          label: "归档页文章显示条数"
+          name: archivePageSize
+          value: 10
+          min: 1
+          max: 100
+          validation: required | max:100
+        - $formkit: number
+          label: "分类页文章显示条数"
+          name: categoryPageSize
+          value: 10
+          min: 1
+          max: 100
+          validation: required | max:100
+        - $formkit: number
+          label: "标签页文章显示条数"
+          name: tagPageSize
+          value: 10
+          min: 1
+          max: 100
+          validation: required
+        - $formkit: select
+          label: "别名生成策略"
+          name: slugGenerationStrategy
+          value: 'generateByTitle'
+          options:
+            - label: '根据标题'
+              value: 'generateByTitle'
+            - label: '时间戳'
+              value: 'timestamp'
+            - label: 'Short UUID'
+              value: 'shortUUID'
+            - label: 'UUID'
+              value: 'UUID'
+          help: 此选项仅在创建文章时生效，修改此选项不会影响已有文章
+        - $formkit: attachmentPolicySelect
+          name: attachmentPolicyName
+          label: "附件存储策略"
+          value: "default-policy"
+          help: 用于指定在文章编辑器中上传的默认附件存储策略
+        - $formkit: attachmentGroupSelect
+          name: attachmentGroupName
+          label: "附件存储组"
+          value: ""
+          help: 用于指定在文章编辑器中上传的默认附件存储分组
+    - group: seo
+      label: SEO 设置
+      formSchema:
+        - $formkit: checkbox
+          name: blockSpiders
+          label: "屏蔽搜索引擎"
+          value: false
+        - $formkit: textarea
+          name: keywords
+          label: "站点关键词"
+        - $formkit: textarea
+          name: description
+          label: "站点描述"
+    - group: user
+      label: 用户设置
+      formSchema:
+        - $formkit: checkbox
+          name: allowRegistration
+          id: allowRegistration
+          key: allowRegistration
+          label: "开放注册"
+          value: false
+        - $formkit: checkbox
+          name: mustVerifyEmailOnRegistration
+          label: "注册需验证邮箱"
+          if: "$get(allowRegistration).value === true"
+          help: "需要确保已经正确配置邮件通知器"
+          value: false
+        - $formkit: roleSelect
+          name: defaultRole
+          label: "默认角色"
+          validation: 'required'
+          if: "$get(allowRegistration).value === true"
+          help: 用户注册之后默认为用户分配的角色
+        - $formkit: attachmentPolicySelect
+          name: avatarPolicy
+          label: "头像存储位置"
+          value: "default-policy"
+          help: 指定用户上传头像的存储策略
+    - group: comment
+      label: 评论设置
+      formSchema:
+        - $formkit: checkbox
+          name: enable
+          value: true
+          label: "启用评论"
+        - $formkit: checkbox
+          name: requireReviewForNew
+          value: true
+          label: "新评论审核"
+          help: 开启之后，新评论需要管理员审核后才会显示
+        - $formkit: checkbox
+          name: systemUserOnly
+          value: true
+          label: "仅允许注册用户评论"
+    - group: routeRules
+      label: 主题路由设置
+      formSchema:
+        - $formkit: text
+          label: "分类页路由前缀"
+          value: "categories"
+          name: categories
+          validation: required | alphanumeric
+        - $formkit: text
+          label: "标签页路由前缀"
+          value: "tags"
+          name: tags
+          validation: required | alphanumeric
+        - $formkit: text
+          label: "归档页路由前缀"
+          value: "archives"
+          name: archives
+          validation: required | alphanumeric
+        - $formkit: select
+          label: 文章详情页访问规则
+          value: '/archives/{slug}'
+          options:
+            - label: '/archives/{slug}'
+              value: '/archives/{slug}'
+            - label: '/archives/{name}'
+              value: '/archives/{name}'
+            - label: '/?p={name}'
+              value: '/?p={name}'
+            - label: '/?p={slug}'
+              value: '/?p={slug}'
+            - label: '/{year}/{slug}'
+              value: '/{year:\d{4}}/{slug}'
+            - label: '/{year}/{month}/{slug}'
+              value: '/{year:\d{4}}/{month:\d{2}}/{slug}'
+            - label: '/{year}/{month}/{day}/{slug}'
+              value: '/{year:\d{4}}/{month:\d{2}}/{day:\d{2}}/{slug}'
+          name: post
+          validation: required
+    - group: codeInjection
+      label: 代码注入
+      formSchema:
+        - $formkit: code
+          language: html
+          height: 200px
+          label: "全局 head 标签"
+          name: globalHead
+          help: "注入代码到所有页面的 head 标签部分"
+        - $formkit: code
+          language: html
+          height: 200px
+          label: "内容页 head 标签"
+          name: contentHead
+          help: "注入代码到文章页面和自定义页面的 head 标签部分"
+        - $formkit: code
+          language: html
+          height: 200px
+          label: "页脚"
+          name: footer
+          help: "注入代码到所有页面的页脚部分"
diff --git a/application/src/main/resources/extensions/user.yaml b/application/src/main/resources/extensions/user.yaml
new file mode 100644
index 0000000..8658a99
--- /dev/null
+++ b/application/src/main/resources/extensions/user.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1alpha1
+kind: User
+metadata:
+  name: anonymousUser
+  labels:
+    halo.run/hidden-user: "true"
+  finalizers:
+    - system-protection
+spec:
+  displayName: Anonymous User
+  email: anonymous@example.com
+  disabled: true
+
+---
+apiVersion: v1alpha1
+kind: User
+metadata:
+  name: ghost
+  labels:
+    halo.run/hidden-user: "true"
+  finalizers:
+    - system-protection
+spec:
+  displayName: 已删除用户
+  email: ghost@example.com
+  disabled: true
+  bio: 该用户已被删除。
+
diff --git a/application/src/main/resources/schema-h2.sql b/application/src/main/resources/schema-h2.sql
new file mode 100644
index 0000000..d16ef18
--- /dev/null
+++ b/application/src/main/resources/schema-h2.sql
@@ -0,0 +1,7 @@
+create table if not exists extensions
+(
+    name    varchar(255) not null,
+    data    blob,
+    version bigint,
+    primary key (name)
+);
diff --git a/application/src/main/resources/schema-mariadb.sql b/application/src/main/resources/schema-mariadb.sql
new file mode 100644
index 0000000..370cb7c
--- /dev/null
+++ b/application/src/main/resources/schema-mariadb.sql
@@ -0,0 +1,7 @@
+create table if not exists extensions
+(
+    name    varchar(255) not null,
+    data    longblob,
+    version bigint,
+    primary key (name)
+);
diff --git a/application/src/main/resources/schema-mysql.sql b/application/src/main/resources/schema-mysql.sql
new file mode 100644
index 0000000..370cb7c
--- /dev/null
+++ b/application/src/main/resources/schema-mysql.sql
@@ -0,0 +1,7 @@
+create table if not exists extensions
+(
+    name    varchar(255) not null,
+    data    longblob,
+    version bigint,
+    primary key (name)
+);
diff --git a/application/src/main/resources/schema-postgresql.sql b/application/src/main/resources/schema-postgresql.sql
new file mode 100644
index 0000000..96c46af
--- /dev/null
+++ b/application/src/main/resources/schema-postgresql.sql
@@ -0,0 +1,7 @@
+create table if not exists extensions
+(
+    name    varchar(255) not null,
+    data    bytea,
+    version bigint,
+    primary key (name)
+);
diff --git a/application/src/main/resources/static/halo-tracker.js b/application/src/main/resources/static/halo-tracker.js
new file mode 100644
index 0000000..c919bb0
--- /dev/null
+++ b/application/src/main/resources/static/halo-tracker.js
@@ -0,0 +1 @@
+!function(){"use strict";!function(t){var e=t.screen,r=e.width,n=e.height,a=t.navigator.language,o=t.location,i=t.localStorage,c=t.document,u=t.history,l=o.hostname,s=o.pathname,p=o.search,f=c.currentScript;if(f){var h=function(t,e,r){var n=t[e];return function(){for(var e=[],a=arguments.length;a--;)e[a]=arguments[a];return r.apply(null,e),n.apply(t,e)}},d=function(){return i&&i.getItem("haloTracker.disabled")||T&&function(){var e=t.doNotTrack,r=t.navigator,n=t.external,a="msTrackingProtectionEnabled",o=e||r.doNotTrack||r.msDoNotTrack||n&&a in n&&n[a]();return"1"==o||"yes"===o}()||j&&!w.includes(l)},g="data-",v=f.getAttribute.bind(f),m=v(g+"group")||"",k=v(g+"plural"),y=v(g+"name"),S=v(g+"host-url"),b="false"!==v(g+"auto-track"),T=v(g+"do-not-track"),j=v(g+"domains")||"",w=j.split(",").map((function(t){return t.trim()})),E=(S?S.replace(/\/$/,""):f.src.split("/").slice(0,-1).join("/"))+"/apis/api.halo.run/v1alpha1/trackers/counter",N=r+"x"+n,O=""+s+p,x=c.referrer,P=function(t,e){return void 0===t&&(t=O),void 0===e&&(e=x),function(t){if(!d())return fetch(E,{method:"POST",body:JSON.stringify(Object.assign({},t)),headers:{"Content-Type":"application/json"}}).then((function(t){return t.text()})).then((function(t){console.debug("Visit count:",t)}))}((r={group:m,plural:k,name:y,hostname:l,screen:N,language:a,url:O},n={url:t,referrer:e},Object.keys(n).forEach((function(t){void 0!==n[t]&&(r[t]=n[t])})),r));var r,n},V=function(t,e,r){if(r){x=O;var n=r.toString();(O="http"===n.substring(0,4)?"/"+n.split("/").splice(3).join("/"):n)!==x&&P()}};if(!t.haloTracker){var A=function(t){return trackEvent(t)};A.trackView=P,t.haloTracker=A}if(b&&!d()){u.pushState=h(u,"pushState",V),u.replaceState=h(u,"replaceState",V);var C=function(){"complete"===c.readyState&&P()};c.addEventListener("readystatechange",C,!0),C()}}}(window)}();
diff --git a/application/src/main/resources/static/images/extension-points/lucene.png b/application/src/main/resources/static/images/extension-points/lucene.png
new file mode 100644
index 0000000000000000000000000000000000000000..718236e8587c5aee6a856647a1bdd9bceb8a3536
GIT binary patch
literal 10005
zcmeHNc{mhm+aF6MN+D%8hGZMY7{-i!H};*BWj2g3ni=~RQMSqwS+f-)OCq}{*~(r>
zmMB@WBti>)L!EOv-}`>=`-eXdj>_iReUd!viUPo_HYMm*4~d_>L~6olbb8
z$Q(ZD7mc7rc`7jvN7lCRgeaR-ob&SX`L+!?GRTgv6-ot#YJw6y?(eLvxbHl9IF|?)
zc$eU+mmHFFX@Q#<-MCY=w%{gTwoy0R^iKIEyqD>w`6JU(75%!EkPM$*no^B7c7bpc
z&drFORrSN0TQh^In-?{m-}=d{gf1w>ZM_exKj1Q4;Z}6=p@X`^@aoPt_Wi+Enii*e
zX|WGWgLV{fxp2W=mX#aw_Zs|Hhv_v#GUMC0r!1vprq=AG7S1&}tE)D}BnH97*AU{p
zKFd!&8>8YWnedD)j%VwN!2uIbRxT2aA}5tjx2<*Z_gtQOyGG)B7|@H^upeHq)eVP@
z$M{RkG`!J%#P>E(Vm0yem4@Egf{*5h=6G)fj-nM*9$U`(ZFsjB4v%@i=ef*nAiXss
zqqA}#YJjX&Q5GC2`&M-B+AC%KB+&@B!vo?OpL%O+*2et#;Af{=2G1Ax9C~+*QQKjs
zt@ml@hE<1x^HUkCXHUf$QZG3fIn>64*K9YND$)dh3*0I2V~27Wr!XbPKNl&jz4v~r)^dM_@kP4$WXhsNz<)7Jc0WgF1NwqX#beA{K|ed*_|4Ye~s!Ut7l&W4MP)$yZ6G^%3*l#`V!x
z0A;~g`GJnS6jPn_;I8mfPHBG0r=8Du(A;LXI!lEoE>uK_}yPp$98>Ln5x9O0B4^3S+%6%6b`}uW;@6aKDOBv$+lZe+>@{Pz&#RX!y
z&dH{UGMP@Xhc3+ojxDFwS3e8tNIy8mKhv!Ob%uF`2$HqUH$h~FwGG3eeD8GhlZ-li;y(y|vo}^RG*Jp9hb8yLRNcLZ!-?rvd7MQ4FO@;aggp4IfqmJp$_F-|Rm@
zUex25b@RGr_Mkc-zKXN9vF7G`;Xc1wqsNl|^RL8%5?X|dOD6Ou2;Jq@47FTO9TG-s
zQ=JCdCxTwp-e8g{YklG4xZ&(y5wM@&WDd#uaO1u7;<#H{Owv*U1@Ow=fyP+VwR&QR
z^y=BfX>~7;2y2=z(w+iz7_qUysL`)|4U8}0G&204jpOACBDgJbv$8`ios+WWqIt8$
zm8K&G0YP|fkd@+#xvEd?2B=}hDb?F)xc9o~7GG#Pu23__9$0P^O~LV`l9p_Y6C@fEG_2VL0pvB3y+zLr3YRoi0dQ9XnB#3-hShFD!iZhf;ju%rNUL
z_IF2=AMmQD7aJj+pXFPhESJoY90n?XInOZ(oU)$5-t?S1p?!Z)e^Ow2mKEyY>he6f
zD=p?hg4nvEu0?lLO%97)5_eZxV=F5wSmK6sZ2mG4*W-3m
zVtpc4reQetEhBVMb-^m>xwy+48URH5YX1u@e)A@r2$pUKSJ0U=Q^+au7L+M__tCVw
z0#n69`CRQ$UTNmQw}D{IdS#Ec%U|Ii{yNCalh&bcohus@zH2=~VQ>N%6m
zl4iZ&yZg7;iVua;T)2Jq{c}ehpzIa@6brI(t5oVVw0(l3;nC#D5GEWVd6va=^zB-*xZ
z{c<7{G5Ej&z!xYn8Xc_6jsF8g$UiHYY_e;p6LK$@Pq;L@!`LqNUah
z1_J1x9c9jMU$%CZUx2II-x;k+a6881X(!Ogy~+29j}4cFuGU62T={}F;GlwyzM#`>
z?Uw5%r4uSckDWNF^j3^1Wpw$YZ%bD+mntz(Yn=@PtQ@0
z{wDIYw;#6hC^boG9(K;d1rE#Yli}LoXk(=v6MQjH{W?>7+ccVkNgfKnBaD&#vJNpg
z{Pb}#sMN0VIR3>nclL@|&WxoJpe&)?q;S(U6d4rJlbX@e0qtk4Y%-s}%-1#V&g9cO
zavg4>mDMsidVDnF!wcI`zq__ez#@yLI~wcu4W>EjdXJWU-687&?_QuQE|taHFrRw4
znmc6M`1PpPnrJNNkqmM3=Wg`<+WJ*?2r-)^C`(YX_O!7#Ife=M5n}`kA2QiV{RUSV
z%QkCegMABBgzyxI0(V#sYves}N6fawq7H0qymKU}<$1jxDakO?${qM5BR*1fxnx_)
zZiq0|@^)OKTbIu+@#=*~WZHOr)zb&@0@*xkkloOd35Hd}(qU^DBm>zviW6ZV0sIe=IQofeO0g|xs-db!aTmb)}w8&;)y
zLd2<}R=UQfe1WCgH_gKPEicc^gtm=_ry(_IyY&#YIi==>Jz7UrMcxOxsP)&6YPm%o
zxZ-;=uG5<|a`-}a-2sV5O5`liVX-(--xpH?<~ei)Oktw~eks@3XuO@pc!KFi!(JRv{Z$Z#^O_#8t`cpWa%VqG6g{b&2zS&B2&B`Dx$x@|Adx=kvZ66?R<-ApDj#>qcr)MH
z)3JWKhA%rL?&uB#(HYkpqmAk+t0SXngmQ4h+2c`dLm;Pdi&c&SzO?#9{uC`ugF5K>
zJdNQI;6n0-`4xjKwa*%?{ep~jP&SVmN^9m($&2l}_MUQ#+4`xCceUBdGWZPzL$@Ze
z3~Z@~HLrBho-$N9`BB4Ws^G#v<+$adCY;xc(VPzvX5u=3$H1Of@bUE#+4#q`FU?Le
zP8_98I9tCwt!k0@<@VMk*iGh`ix`tI_&PC?E|1!z>};`?(wC>O?;(^0fk+
zv^rgugLML8rG)Av{H;iaN_pCw6xu-LyK!deFx5tGJcV+bLZu4C8%h2zqElK
zr<1^EcN55mjqWEDD%=`4v&7=j-uB6YB`ik+Ji;^vPV{~<@8os)?3;K{`w5Vbp=E9H
zsHWWsF4mHPfLy?_FnUWlF-l2(k5~?Xug6I&NjbSg_gzAh>W1!QPVjxiu!|qUAwqxF
zcvtTThu)zvj#y
zGmUGiHP?&+k#j3=o4sr=<)#Okrlv$p^NaI3wH+5*ehdt{9E_FqetfLRU6S&RA^y#4
zF+P@$+JHG`{5iJ#+?VX1hELsat#~x9wak34;?V2to44M3%gS(Y8O1G!>EoG6;IS#~
z)=kWrqids4<-Fy+utyfM(r}xjKE@;cO&c$Vq+IT6aDN>ji!j~P4z5(2C$dUAo43#)
z7xdulz72CX)#pCciB07%YWuit^+c`=*UKXR_^^0)kpGd6=SBeM>&ztWc;fh8TF2zIs{a0GfvJnOP>
zbckJluEbKX%@hFUOk;T72Z|f4UeLY0l=8;Ka&aHyYKkGLZ%*aafJP@W#e%+vM(2dh
z$r4z`GPp0&<$TONI%U0cB}7kvkeO9Z1K-zUTt-{0qFKVnr1&H>E`eyIrCoa7BC+`?
zBMUBV1f%L^c$<3Bc*20rwMa2D{qMG&Qx#R00D+9h+4P(GSCH^F^u~r*z}oHQ7PzkI
zY;+A*(zA9D9Aovvgo2SqQ*VZ`nvhVM?Z!nuB_nmK2Owq3mmwGeEt2lKdSoN-52_pR;aB_l~jY#K;iq~{o*6q`$F?r
z;`@v0i3SaehXT--kC}vB%pwb3EbNMK=#w%wv4dIcxRe8p_nEdesZG(bT2#u9y9PF%
zgdxM5BZD7tIE4ji5?7k{Y1GZ~Dsm*22iUT0A!Y=b6R=9{A{V74`ifjPE!e#UqhLq2
z&GyB5UBfZl_c^c2JAN?dl5`b!Bx^}{SwjB-p3)1^eIN5LAqVofD(ApOwtTgUnn|GJ
z5}S~^h~B_yy1t`JLxZ|3hc;{;q8tf@ehPV$ka%6!Oq(LkxzyyaX3=ssLf^|lyANe7
zN|E)PCWzbDFq%06Y#`Uu{?J18jJVk$@hsWiNV8WdUhGYM{q`jH3z0~@LLK;Q6n%b!
z!-I1IaosIN2@3kH@%EEuZl;Za4;XBRq)Io+p|oNlbSrBw9+%d!oZtUwelhg!>5a7b
z#bW*Z$OLs+?7Pmr0jaf_~~2CqTYA*70*_<8LOVX{9FR2Zj9h%k$A7&ECFO+wAp_I
znr_1A=PNpvhb!vSoVv$(oT~jsKKT%v2{p)L(Fm8g6Al>lnLjyWqlO$
z1A*et3X^KAQxUS_yqqc!cz7~{8htX~mBZ$W(PA-?6{^pzwT?C7W$){zd#Fx!(N5#}
z#wTM)2I7Kp%u9CjZ6rQ?@t3HuOJ_==;dez$bol2(z@nAnsB;;143=lVST+w3_Z2qy
zuN1SlKJ6#!<)?d(TB-4+i(2
zY)lwV-q}=ai_8Aja^YQiOx5Uc-n=#C)2Nlaz2jtFs`ZHwo~86!&d-GD5D0utt~Nvt
zzGf~QoW||G#GqgEHO-Xv5Vvu4Fb~6#hnaQz%3@^-<%%amflPO3^`xu=Rk}0GY=C!c
z)C}J^vm_CkAB?zNKAUpzet(?@-gKK^v-^JCGlwk|y6^mR#s_FGzW8<`3NLUigrh+M
z0H6scXlR(AG&Fv@d7<97WCX=4={{EFdE#KMCCYB95Gjunsffvi3qB
zS4P1j3*hb-*ObqPv*VMtGJK!iVq#Sx*{yC}A-CW|owc7)TyM&&OB^4yAz-awveTl|
zg+=q%rErQ?2;%vnF3X{YQz2;if-(tm<~sRrB7-Pqtqjl&1;nZBCl_
zXuZ(XdKJ#&6a*>-
zg@UOFFxk(8g7yV_kOg-sesE~w$ygG>lR_YR0Czdj7@`+N2?V0f1AmfJXR%toRN+qp
zyW>52G6g4vq7Gox^-uv)PzXdG41t272&rH7sk4TLziWGte@2lSPbputrRKE$<`?k%9a|h4LU%&>mR)E)|trl0fB=gX3jopmK6xIjFoW
z7>1FS0b>w29F+`$kafc25I79>7Ybt%f!YaZw_m;5rNU9E5HNYX91JD{hQJXJFbpP#
z1*36JSTGKP!N4#OIXMg-u}8I=2c((_N(ls&{Ndl8#Ka9vaUzo3l|Tjr4=>+8pcVvo
zyg3EE8#HM-X;~Nq0+WHrPz^xj{s39wNn~n~?{Z2*B%#o~85|a=O=Uz=i;dupcE(G2
zdN}V*?4|`tT?{p_=-u9+GVjT$Ye8y|@MsE=WI-glDS>u91MX7pwG>eCXR{y;h}b>F
zJun`(+iyQRP95zmwKr6h`d8q8U@~_h`gr{Bc>aL?&Z0)5_z+3wj7i2AS3H*TuX+9%
z_;)5V>Rv~tko-{pW>NnQr}(2>b*Z{UlHV`(&GF}djDBoLZiKy10fBp)01}P;5q>h-
z8;{#d0X2?4rm!w(4`)1exBb~_zsU*zq>QC85Cp^tgQr%UJOT`pg`vUnSTr0gBa4?o
zAfypk1OoGCb~4e4;)5pP)tsp{K+Q9?wf6E16xpjj(LbYoT=3Ky0YhYw5D4f;dVi+-
zKeHZ;3>*Q4;h|tO210F1JQMml$zd-#7}kD}D>0r6Y96nD2!
zLqp`R302(PVv(rbPBQoM^mHTONqGO7;1NjCwv(k9(=#&-sPB1!bspV1|y7^%x&PBxOd@mso2!gO_oN-93Wbw_N<6{BJCi8e1$7Cy^X
zq?d8!KrP*GG{==~a~V*H(QP{BMaR@+&r6*BXtMh5Q_prs`s7Fa@>uGm!tAqWL7Qs8
zqYU)4p{mr6V|vFk(J#NvZueh+3zFh<#@oeMl%6-)uaoMJ9LGL+G
z-B3*K3N-$CocH6C*FeL%Txq?{I|;bl`}3}F^Xc41dYkn2t_`wGCr>V)CMu9#{(9am
zZv0)H@7J$KFC6%y@1N0SX;zZ!Y;+?x2o4r-KP6h7YllLavX;?X$)6<^F9{*?Z3DCu
zuth=A{a@7*+P6*Xb-COWb`f;PXTf(S9;w3VGC6y;>!Or5EGlE-=^OT6rHg?kRCb#e
z8K%u8stIh_p02*(~g;`T^G>dE3StS$rQs>$$
zv{{Ay`D#Wq2SwRdkixBR*^jRbkb>JU!x
z%IUI%0o2Vm?M&G!oRI!ZL;HFzU%h){&)#ru20JPiWIj0J5pd&rlj4iS!7eL9)SW`{
z=G16CuDi3o_w5~Pqk;?LZV}jcJC}UmY(d|3Xudo2PpEo7?5O0?YT87Rqx{XQax?3N
zbmVS09@4U!>i6Q^tzpa0%sfJ?(>BgIhp7DoKxr9ima033
F{TJ9FY`Fjc

literal 0
HcmV?d00001

diff --git a/application/src/main/resources/templates/error/error.html b/application/src/main/resources/templates/error/error.html
new file mode 100644
index 0000000..e02aee9
--- /dev/null
+++ b/application/src/main/resources/templates/error/error.html
@@ -0,0 +1,130 @@
+
+
+
+    
+    
+    
+    
+
+
+
+

+    

+    

+    

+    

+        
+    

+

+
+
\ No newline at end of file
diff --git a/application/src/main/resources/themes/theme-earth.zip b/application/src/main/resources/themes/theme-earth.zip
new file mode 100644
index 0000000000000000000000000000000000000000..8a1cd4f9e751032ddfe909b37fcd38937e2d4f6f
GIT binary patch
literal 361683
zcmbrEb8zHezo28=wr$(CF|j?dZDV5FcG9tpiET|Vv9mMx?r!aS_gA%b-|eohuKwfO
z|2@xn&gUE@Sx_)EAgDiYg(g2up#S;$2@V7V4MY#5A}%Z@FV0|Rs;&kP1eua$X_o%y
z^Y`1;0~QDv>;V`E=+EOoKpwWxK#*vle;+Rn{Gq1nuqcJ*muJ9S)zc?xi?Kadx!;J%
zP<5mt1_m|W0q54&5Iah|o~Ev|z91_FLr-okdKTKaWyVQeNJHE@8Q;&^n)iyC{<~R5
zSPdo-FV=kKWrlmleFi(A*VI-LbXQM;bI<7v3l3Alqz$>{8#q4aH#?uo7@(WMnxXSY
zWa$xZTw+k0QqrxKpG81$aD9DWSTlBWFNi}`pf^QeXNPPV>rk6IyS0!xRtuYCj5NQH
zUV4PcmzZyjve-CxwHNzJ<2vn9b>|wV(x`q|b7QBH<=OkA5rV#-=9bfdn+>N8RpVz>wyByvl4xWkVob)pCogeR1XwK3Kur5_5^Q6%W_0ZQLGDm(b2g*tng
z%#j2SRWe|%gQErkGyzMvzquV1rC;ppBLEhtn5aT=G2G<$F9g`m3;8jx{`PQpz<6*o
zVQQ}%rMEc#AyG7MG4JFS{W6Pr@25qSCPQ(DfBU_`yHE5R<}?XQwjXd<%=cG|Qm?r)
z7VyG#@5Z}q2Kz+UJkCr(+%H|TZivtC_YK6WTgkLWCVAn|1*V(TVs+u-rZX`bO6)nl
zwqQ(fn=Ou>Tz-pCoi%!SvZVuFBEpsoDE@rV-A_ldiu?>Ua+4Qt$TGprWi)rCA`kfT4OvPEtX~B%T9E~g-
zD5moz%KL7>Sesc&6unyd)s&V+@QdK24ynw=P4S?;*gejoPvjR#AXx@OhUb3USy)=avObjCG3@~67880-8eJ-GFM8xZ-fF}YZCGoF-%s4f2(ydIe
z?=4^yqZ3lpro~nf%qmeP=n=xeh6&ioWZ-Is5(DH~fz(iJdNOC9Q~;Pem!axPb(hy@
zvXbJ$(&b8QX^1;(_%1t?7fFN(>~X#>8v^=gJ2gulMJ3@8hk}K?xnq_AZ0T^8sRKVv
z#rVp~gX);m_+7X_?dnUjx24>U#sfA45!Qukj0797lJWwPN1c5A8e?NbepJiC^XCM&
zH(i^$hn^PWYaF=b&ZKpC9d_E5eN2{cAI}>B-m~uoqJGSXX)$hF?OL3Q23R=;BjI~xV8X!GYusv7
zA_&}Dm>XLo(rv$6y`TDcEYk(A#Kz~5!?a@@Ex~_-Y4dvf$Wm2;fRiX*X
zHGvQcLtvpe6!}pCeGh#bdTqzl_0=N=0H4y8=NtnZ56x1C0)F2_T4IaHLl?p;_&?0@Wl8W
zHv?(c`s2!Y
zOZ$V7GG*!lO9O%<+4;4(tILScU_DI{T#_CZi|zJISt~L?57^Qy@aK4;l8nSK3cejbK)z&8+_siXvrd2XCKI&93k>XxM|_vwh#n7}hn7RX5A)joM%d*^i~=oE4I
z`ul}i?Syb{bu;c_eNKm4oZdJJf?NTrvhVA#*7T5Q3gIA3o#w&3Fzl*^=u*VbWlLf^r7|k6`ygu)7>&7RDW*#dKUwk|C>arc<*8Cg*wK}IKRzXLwbK@=?n??2;yZ|
zT^BFpCJqf0X|p+0wI+aZO)|}xDR7Hhs@T5Kz}*-DdID*sU(X`eL-QvN9%j-~VJ3Ez
zyZy2+J1zL3D&e70r*Jqtw%rmR$oEzdSSYc!7{CrQ!{f9;FY9{NeDQ9T|ChZ}Wbt6o
z*u7}D5?8m4Lr!`fq1!dv<#A%VPs#wB_JRs}fGM+Tom=*C
z)@olrQIZU?q8=$jw$?`Y@_3yzabW*aA_z)h$j80Kfse1@P@QbK+S^U~U_N;$k+bvU
zrq9_29u`};so2-h>g}i7(^*4Gs=1OU1p}|4m53Q$8Vy+)9rCuIK(G-}GHT{5dJbOH
zV0mN+itik*6!qZ1i86zDdLwOs@mOAlD3?zmIhHC@4e!klG#1
zh4{PwufcvJFR7%B!!2st3aVq>m!e+&?x2X+bYPn-ctMD4_(!$(ku)Fu9
zdE;Qpc6>b0+3Q!c{{aq*6}5EQD6r?X1dHCwROR^+@=sRlgQ1R<=rzJ;8jNnwB0>PS
z;l^gPYAbWG=+jGQ%SzO-XRVSO%N(+Q?C~C!1*{KYiDJk6vE?glqTA}>S}LO~$LQe(I3x-P9>UpM
zK4+12p`{!ZnKZPKekFQUVm6jU^bHY=LA3t~D6i4!Y9NQR?!^lg!^VJRRBfLudENpt
zYLG6{>O1C8^F!jSiQb`j1JfOV@=7+z^_Iyk#9Si1Z-d*?`d%l@zxy=SK^|EQ2vLT-B1#v=JFjx(}L
z+@3?9XahtXiH-}!Vn_!CJSnrmMA3d>o8nYF5X3Y5uvKcl?W}O4?UcB}Kn5p%@sUE`
zkRQd>#lx@XPLiMh`KXT3;N$AZ8Lfh>$Kzh@i%;Z~CsLJLb$&BCW#Z75WzCkOC(0fL
zN44?3L(5aBv@j!ITMmThsi#}sBYjj&!T9^2bErA%pi6an6m@1%-j=x@je$Aa&Gb43
zAXoxw@XLL-z%&ZuVw9>dXpq)md&c|~MFS+4CbQDGp`A5_EM%B1{=lU9P)}KTZWWg(
zk**k4g#pu@eR48g%IZ)RS-u=`QnvNB2E$MIUgsKg6G>V$U#>$WTm?F{ws`jNj!c#F
zKnD;|SHZPjXkqCRfEub;M#?5yG(W%W?E>uP4HKq2#Mi!np$F3_V+dQ%UVeUd0uSTN
zX=-IcVQ2A-&-%iw*j$iCma10O#?flIzEvG~J}59xat==^F(XYqf>2SDBims{q*clQ
z(||gl;xDdB6H!>_!6fh+N}l!8#oJEBzd}55$7^f6;
z5{MACB6DEcAm05v=gA^
zK%(A=#7QWYjTQuiRJ;!T88O%X>$?+-FiLw!Y(-Dw*#nN@37|5Nvxk_9s8NIN|?D+jD-90m=~Z_
zj0czj-}K^Ov6@9Y!NNywLPC>miQZok~6
zILd9B92R8z(AQWq>x#o{RRtepv6yIr>;PVl6&*fbmjwNuan64ehj9M*ObRwoD=Hbg
z1uwooMVCGOeG2iphso%OB_ivzB7Z$?mnp!kB5;+cvTC^Y*a=F=X{KY8(7%`60CUH_AoIj*LF#r{|>XH%dzZDC1LLBGUq==radf
zf|a!abJbOTQR@
zXDCsRN9_kh0*!R?gZ?NX)^%bX_!U_6MI=BFb{QVY4s;D-^tO+S16*d`4&=aj#PkcA
z#|;7Q*XQfF4QS!z{MHxVUU{X1`2i*$88e)?%;7yH78L$2ZpqW|n@k@XTSS%bZ{MBj
zO7eloM^HGfWMACeM|l?&>rA08^9P<#;RUuFXn5`1dwgh@-~xf=`B!mDU)3HbHw!ph
za}PsVX(VB=Wc17*77~u6x(!P>%)1ql!+Hp@Sku1;lx&Q`*B?6H`0(=Whjj`vQ8mp#
zjA4eL@!H$(#@_h3xN);3buuc>Oct(~LyD@xcShl=sSAfzCq4Oy(Q}h^$mA-RG`e
z5+Jy2I~3>ciTw2bjxFXwpPw+~QekVv%%gXZ%(IA?hP&xw!ow8ZN~wd@IcY-LsAUPi
zd->bGCQh;JF{Pm`qujv_v4x!B0`)RH{}wgjlQMn`ZTqFcvibTde&_>v&yhfE&=(8y
z7z|nv>*y)S2P;gWir6jQAy(qB_~r=YJmv~e*;8Zh4A*Bz--Nnte+&yzsC@lCM%<0||Z5`G%DH5VO)UC#8E_K&S|x?bocS}FnOYx3tUD~VrR^*bJj
zKN6x9LHTK>0Pv27xH~?W!I>2IPouA%AM3@V`okpv2G)?`{+L6W{UBf9_l$QW`vBU-
z0^GQ&rWBfwWA|RLIuG#!}=Zds~4%K_6ZF>
zQeaiiXa18aeQvdfhf(z@Yw>yEki7h0c)xw050WcQioX1p!cT|4fux`6GxY6GApI?t
ze{LCPr2ngBj4aIl`z=$WW#F*Ef#iQ(W|(3mJ+IQbSgaqqs-1?uD%%D^4*@sGq=Z86
zR3H{uOyV8+)_CbUxcx}Iyi)MSLp$dijb9;{YPx10h+a;fGS77i&iU#DJn}H
z{(xkSLY4nbdEnI2*5y5O2GXA@wg+?{Y#?|j)AWM!riPhPI$e7ukorAUrQ5e_LChL0
z5iYM;Eda$BFPc0@F-OsX2Pl%HWMR5o4vMN*rv{JI8aayxG>KRhsr@L8te|QJ+Yv^#
za3%zvEen_bEkc8aas`a99CS&!$dt)avBS&~a?h(55@3fu$DA9ZY~*(?G)uhLIZ%Yq
zN4kLh7;NX~NYoxXy~=+72x_mTBa41dU9$ggsI;=3G
zj$^`vROjQ<3$kr!Bc$d4WgiT*dUVi
zSq&%xHefKk1=PmQm&vdSdcw9@c6$BTKI5lY73@=He@!Su_ivbww^7FHZ(o4n@;hXr
zts{SnLcvXyL0b(e<<&VkFZ3#BLsd!Rf#DJgkY7@E{zN%VHJyV
zJE;U&aRp6w2-lUa8e6{nF8JEEqE
zKK+7W9-lM84*j(HTR*ZAhqL8CVE+FY-_0@bg?)p22mqJiu1u}Yf4L@aqhmy40x-i
z8@=ken0vhLS{qiLm#nJ-6gU&${c+bNxFZCou->_6S=U%Dj+wP8pLK;pt$A#fWu}>M
zp?V@7Z0kLJAE7f@ku2iOe7T#aB)>~QX}^BWn;(gKD{k0RU#bASF1|+*Qo=x1&1PV9
z@$k?(4-{Foatr9WM1$u`y3mq(Bt5k_hlUfPg$2sHdA6@&_v)fTW^qP-IC=bg#l9
zte>bZ3gq>CsY9|~Yz!_=PR{1W^wMgp_^AoAgM_@b8K%n`Ln3AtlChvL0YV&VtqV8T
z^j1W7jO3?T;|hbZ1Vtdh{SK#ij7UDN#fi#3PzU}0ir<-D1v2{2sQ$0s|5^O2kpETu
zE=GTb_W$ioY>qmA{DuV5szu>
z8^CrbSY!gwOsMbylRR}O)g{GZRNTaizN{DLN+($4En2U!2b4CYajabID
z*CHUyQALIZaif>6kktyN=$-?|Dv8JI!TIFaNRt=+yHtL}c9&Ek#d$SnFKS63m$X(l
zJ}jAf&&9;7f-(Npil_;987ClTjriZRvDgsiKQDv?bodV;kAp&A>mCS{^XQJ^z-Am%Zzk@>$vX(ATc9@|TRZ`_uaX>-#K{$Fp$D~sF$G!>>}4nOATWQGByHMRQM
z8M?1=`$=wrCe=xUih+}aHsY=z<)@>VilBaK7mN7YZC%T3mOTewz<+7}&hHa#_~-EL
zFSGwla|kpL5Zb?tq^#^s%{>15IA3ZA#~-kv^*m|v6(;hK#%9g*A&^+ZEDQurvOsb<
z;&enNr@Q_db1SXk(RLDr-47Xx1ob`+3u(suoW3IZ1ZRxPl9nxVJQyg+d3piN?s$Lx
zn)#IzFX;XHlD3j3WF*T>IK5tn+*gUVAl4cYJg`0?X4J07K-sF5CdZU1pE3g~*Cbx7
zO>Q}`zdKy2W<{S44X$6cE`r9rpgLJ&h%`7p;y6jcU^`P_s6$L+Lp(#Qyuf0`?AH)U
zLfAo;`6!*Cl6oe<#%Bgw`NW+IV;uuIn`y`mvSv0#(r6v&eaH1JYhCHGSE1{zT2q(p5JxjOm2MTr7gLav!$liP`y
zL}fGve%MT+35v~-p@E*fI=(e-E(GNSchLHHyv6JTb-)r!kj`L44nb@##zeq*12uRA
z3}Ntnr6R*yo_BP>az8wzV=H8{Inyvpfa)}HH0B(Erhvx|unt*<@8E3jIt@YSe?8=w
z0ej5Tk8rNiiO{SQm(}F=I=4PV3){BPeIUX%(K
zk!oQ>__&y!5j9~~VMZ$}7x^UB`Z)y)i!i~ipImjumfrjE5#Gkw+xzvf^r6Uj?f-rp
zZ{U|3NY{VS&!yh(P%w0=ilc)G>BO>gP=9`5QYKRmCXau~52d?~6MatSBeElj^LWrciqF{9ATQHR$VQgu#^e&d(O77IRcj;=S$@NF?i
zqGEy!OME`KJ}iPvg&%>Zyu>c+krpr8)7YDCG3s%BH2tzem*&=9?Z87@&dqKkJp4#x
z32Y!q`G~9#*kt#h7=ngsV-(63yL_m5J_Gn^@b9HbZ{mf${X
z0p?WWgXz}8mIdQnwuu>=IOyZm(cm;U{80je0$bD=oc>z|9ev+GGNC}AAI1xAsdIYt3^KC7{Tn%7pJPvWfm26K(b@){#9*mZL=Ej>rFtvi
z7guv?`0+S9O)*cUL?u7oO7~I468MGBJ3s268A>JkALY?jJUqlgFv)aHETaN1K2dM3U(B*fuU|xYW7jHT59E`F|;>of}cEva{11n`WuX(Uz4CoO;783Lf
ztIPwXauP@e@U)nB)xfRQ?0zraJ+}-R`~tvdrEJvE1ziodeT`3`g09_|)=)H@eok<1sBn)K!(w>QRoR5W7OOE!9d`r94CE7mGMOho;Dt{1x=e}_ABKP=j|9CZCth28@qTVTk=2J&RxX+G?{%`R
z!{`WWm-)Dpd`iWaF2r%QGK__={D&gcihr_=7AT1$=)o{xzm$P=HE;vFBr-=!V+_ij
zVO>sFQB$WPnnOET2=@?Oi}Z+<#d4U^9g9PFppO2Pfw`odjEVa4shU0uK1t4oHR-F0Koi9HXc>h0wg#e
zXEYd!!=Z%|r9M;UoyCzH8olrg)ap5M!SF2e{om1o{GXse0-R`~
zX%w3lyCh++3TsIV=_KqnP5~oi7shQhWLb69Ts@L0?=O9O-sFXBhSb;(;|d62L%DGX
z)8_h(S#Hl8$C?H0xIZwgpsuOD;{DK>Gf(T#`*jl>&#)c1N@l!(v!)4am=U4&MnT}+
zz?|_289Zz}&-t6iC}`f(pmJ=G3H2??EC|B(7yma(mMQQ>P+?6L&fT|K%N0jbtQaHb
zyNjlsJfGVWMuWB$HqHh$-<*bg!tb%<8u69`Fhq0TZ0xmm%+Rw4hUBED{JI}~-J!<-EHYu|gF8~fD%OAUnX+~^RaJ)vS?hBv!ql+~E0Kz^qq4L&-yBCt
zKtqrqw|7{q;3Cg-#zU;MlLPPQ*Y5m?G&52NHFx`>UD5ZpGfu4+cw{|M?k%o$NMvHq
zncrnmVNo2URKHbGwdgg{s}+;~7vK&RKuChn~yx^?_zrh-e-&asWanHLXu
zT(3RtNeqLDfP;&c7z)zGUW<5wlfC!Aovu;8w*^>1d;6rr;R@J=EDeM5b~j*B69oAt
z2*JoJ5Eo)|JGkubTc$Rk3EQq;NYG=&7nnGg)w%7;pOO{yR=GgP&NDF&ge#N=JmiVd~pD4i~0choaekH4AJC&(~g+Qlp`JCNonV`v$x$PWqT!;
z9-s45aIP3^>j}ObyePg+76J2n!MVxxIt2tmic-p6I6WDbP`w!i0{_aHgLSd)ZoO)D
z*UO^D_+N#ghg!9{lnjA|Y2Hrdj(VlE1q6XOXl~
z00CkAi%9Go?9A+4{*7_sC62tqLHmP1Z_u*b9vHkCWwM-G2v<|zFQBc#UvP74;9kY#
z>kDD8RMNw4$#gJi-fN!$+c5X7;RL#d{&N_^@6iHDNpjN7`%`fB;>v`!kv{Q0JJ-MG
zF^d?tyM3Oz+Uk_(RNY=qMLzgMEOQ#=z*urU8&X1{D3X_~k0w2mRV2m-W?vRSnXn(VS=qB^WD9ne8!v)Y*s_l&9favy6!XChPTGmUJd<
zMg(si_&i2<(r{8Tyg;ska>K}I`RZ36*bZ(gD9Q@P@mnN-(1CJ%kFx)Y
zvbX3^vTdZ|RJ??rj_7$o7=Rh34@Q>-V2kWc43nh)dGSWL^K~{F9qHGw#7;c8UPK1g
z2CiY4N6C4!v6NS`w}HtdxTxeOq2lHKCRlBAv_>{Qq_HMhZvNgYei`M}(m&PZYg;wk
z^-DKMggTl&ERa*+4F!$jnoUFd7h7I5bVwY}#>fT5YZAJ^&EOv-DxoTF%gbEO%
z2;+ACc>yyfeUf!Oas{9dM^Y>)Lla{KX%%rKEb+JU!|rIvkpN?pxmXNh+cQ0Z_P!fT
zaM?$p&OkU(E)QOa)VRer@rBD+6%nS|hW8YiLi3pKBa$RDnv8d9)8McJAu3w#!|H{N
zRzLL3r&S8`3k)o{%B~aXq=og6brK@{GR{upG(3Q{5v|S}5<+D0FBDTmbKzIDk{Fb2
z#1<($%BRXms13|g-VSlF4o}4c2qx1@e?l6Uqd^`(Cp3l75zd2CXAD8iVXnyL=y*q8
z!0qS?$bkKX&#FrS!j}pehb&NQjQaf>dJLlH+_YxsCq%A`m@%bBSe~cUSS*Rh4>2Jq
z7-(3;z5su4*U1WhzY#01Q+>Bq&1jb}He9pIj2~gX>PQa}4r83Z_B-FHJs8SgMw~(7
zi&BJ)N40a6*-ldQ_S9!cjeI8i$gzh;VbC$NA;5Fpp1N#1UIBcjN{i5vGcH>74%V4H
z_%7ONj$kDy6J_Lzh3mOXto5^CemZMSQlN7uhsC3!4xqY;V#wso>7bPaM#!@;U|w%_
zc#h0YD~pZW;Cy4u)#N|uno~m55)Gd3pU8)TKmlotoZ$R8y&uzA?hbhN3n+<)WT?^E
zWgglovBXW}6DK<~8X`YHwrI6_s@>^3CfB_L>d|+@n;xgr47%5+b?`SGzDrH)2qBCa
zoFE&iH{+p&>!u;VVJi0hnBeNrW!akOp*3+tiv^e*>EFJRp={g=VsZxy8H4!S;+5Q{
z)gO|aw2vjr<%G)dKvnp?w4$+S+n#Gik9JN4>d-PurAvL3PctM+=Nf^?W{Fhg3SNUJ
zzTSC`CEZvbx1hsP(vQoYOMH)3ebJb94kFKBg~=A~lPto@E1HMNqYWkFP1%F7T0)a5
zQ9_5*DhN5SNpy}FzvEly;@2zsrB|K1#l3cFmsm|~B?^!x&n*h?HT2+NZsPmet$^w3zm=@<@x1FFud~1
zW6%+8cYkrp3)0JO1T&yReWflp-{!=t`Rn-Uh1Lya;*CA4!-^XZeCh76I?c~5hH`Akro8jTvtaKB
z1hk3)56fBaEm>c=$Gd)G_0jo6aMwUqGQEe2NhBB)*;;CuA81)Dju$l)$L=Z}R$|u2
zSo%_A#wftQGF@3a8A@8lcE_{HmV*&^s!{0+_@ii>%F1vX@MPZh3M;iexo)izyon!G
z_Jp9D(r$4c=!F@lE
zsO_+DvtnQ$J>TD1<2ho@XYb6pNyBf
zwWgaQ7a3%k=RsVHb|LP{SInKvsEZgVDetJ;mXj(+G`08Da(Xh7n?~PG=s#iqB`@ZUj}>;`^t|Z`AoEOsgKomtx!V
zuai;;VmWX6>kJO4RAO@=WvX%T6xb=hp_bdeIoTF4$OX+!@jfqA^xBVcw9zu4_QnNM1iM;j>)A>&vB=yhlrq
z^Q;&==<1%%;=KTBPma}UsiwQ_7VCO+qar;f&s>wz_IHuCwn=REY3r+kMY~2fJI7nD
zEZZ*7>sMElblOa{HP$!GgTy5P
z&SnP#kG(j3lq9ZSFV(7!8fB;f_B#l9^1%Fb;!41$ya=oy;k4611T36mVWl(l-@j^G
zoz*Wowfv69;4^#iHKW}UEREsz@T8W@7@ZMx-9XdzEefHn
z|16c4dHMm5`1WNp<&4PLoVRgbna#1ao!+gs2uYLpnOdBsENLMCbv!N;1N<>2E?vRQXp|BlIZD!1*kxHcoJhfv+N%YU{9|8&H_G^qou8
zkM-^h*VE^HcttVS-}?jYNaN;gew9BCNe7BS-tv2*-6%}
zCCut5kl%><`+!-ZbrQ5=7Fdh_u3jIt5hs;fL$Xkn3I$s~Y@9iE?gcG_5%Lm3t*9fsl`Sg;RR`dJ&J%Zgu!2
zem%K#*N^X=LRW~nHY)isKz%^S(@@8z5-(&P3g)G#aC^l~H}uo&@|67+RrO;()Xh=v
z@m`l4OUBr=_valWqQD6Xj3dK?A=PUo)D*9OL-Bog6?OeNq!&6)$lsue3k`l#FXL}FQAOege7r1e@CA+pKBxmk!6Togi
zGd=2hCJ(khqZyt}vpC5Dz_9BZtl0Vg@};Dt{lbH?mKLGImLfSd{~)9YRRtO-K5N`3
z;86-i6hTMa#6LmO%$E~B5FUVo`hA;mF{A(UT-gFI$iDd&C8$R(p2v9cmAPDgIO4Lw
zwaa8!mKgqi1$vsC#@xdtFeV}szPJ2QY(a++d3Jr+_kL?swVg3(B3GPxab%y%f{*)4
z00qNuRFpq0w-J7%4`gvF6bYrT*uI6K`&-XWc4dW~DB
zZhrX_ZuJzcB)EiD2H(y~k#@J-f#~5I3%iJ*w(x^-R7vGYx&ujawsh1rgaIS|o`jty
z*jVBMk>7*KTdRH9Gl(S=3cEFUC2#&-Fr|~jk-B7SHd#hCne|oo8wkWgN@Y8n@+Hxa
z;udg$XdjquwMe~CE6LMGbW=$o1go7T;LE!gJDbgePFyG5Gk{W{AwtEunt$asX
z7!B=#x_)bp3*YqXlB$rqud<8qGFqgwl|eBt&OG+XTYvG>r<)GZmAK8;ueiZuPVo06
zm?{Ic|CE~hGts#j*q;lNf7JEQQq%f#2LG=o?Y36-HvfjxYSgFW7McD!4GwuBNQ=|1
zZBp^)mDwH)Ub~}+{r-Eo8{XOs#Zo072xe~J%C1v_2keMb62%ssCApUr3+qly?~C(_
z;riiOP^4`?~~tgGQdY#NU0Y2Q;-WoCv8BbEhQuJjKNC|0X{t$wR9
zj_nm*;-VzhOXtqCl0YKMAOY5lJva`>&$qW(gB?GhKxYqN#cLPy)oNw}1|l;V5(-A{
z-TY{*a>9`xHyNMPb?^dZac2h`ff$k9^MMp+3o;;%{x=wfP@AU`b?;7RLF?v^nD
zi{dAAt%oRZRq)z{{xRW5{e{(NGk}J6AkEWjnwG~!aYAb$vg2xqH==^W1SPV0LeC`3
zBH~9T;d5{>t-E7cLI}sn?`utBUUB4#pW+K)ZJDtvVL4|(p-ohaTu5(EYD|0(s#rKRmGv>Eesy~AJgCy)3ggDmKYU$m&<}7p;pb`ao`NUEI=?B~kCe_g
z2MYGjNk;ioGBjqZnO<>NGf(@lNSRPmEPYU6sUH(BFWRBE+PAC6)>`dk)uIOD>uz2P
zJ>gbwgSMo*47t*Ms^UnVYoh+tj4zpSDQ_GwW$`C_2!G`*$yKWL<>|~FiD=o`D*0gd
z0lUu=Mca0t{yHW6+W@p!k~@7MKtO+?_-9;X(f{k=lhJn*ODi|Ce}kAyt!alp$JV`1
zbyy2O)}s`9UK=*3DiTupuNDTs3q=eL<*t^R#Iv*7qpVlA_Xo8H3|S$n;dKxvq=J4;
zw?=#goiwmE95gImk~sB;ljV9|Prp3_o{r6)x5Ekf{XWOnP!FpTa_r$3>*zzwiK7pN
zUW!ud)aW2{W?XpeX#ENP%!Z1mLsvjpju63Ov7JuKANE-e?FY(#F|nLPiUbE@bXI{3
zQ{fckWC`~60zR>gnuE6`5gE+#Ep;6j9upP8Av39rYzevfRM=E*KKH*fjqR`@JHgL~
zIE#mR{s@#E6+7g6*%%n}nu*;{WvI`Y&6#fbZ*5~>oW*QK%S#iV+~9fzS%Q9`d6ovI1lsu<
zng#~yq1hs6Z|IY}hOfSxPR7oX?AFX_GLZDDOujW@wyx!7YwfJr!Jy8EMa-BC#d?pS
z{KCi2`5XFX!S|7qWm;ilCzxt*Q6b?%={4qRp6jM)+Hi4!#o2O*X|&{?=Cc?qS&25D
za)E;K;noBXiST6{#F?CMBz(hLawBR9SZBop2xv$*izmJQhrf)$C5;c%%)I94d$Uny1m^qIgSB@I&a_?HMq}HyZQHhO+qN^A
z*q(4=+xEn^ZA>u9mwDD&yY{nd-mhvs`~8vpxvI{)?(6QOyU*_9=w@`i<(nITh?K%I
zG9F*pU+$a~wh40Bc2k>~t%MQSND`c*-3c
z9Wd4jx(l?ROtm{o22GvalJTo8XI|3cT2^@z3)(r`^cu7=?T~UF!!z*>U+0js&gi4z
zRkIO;Wr#~uF+-PZXECIR!3h|0Y2cX|iH&^6>#{4j)D#%G#r$?qF9%O^Y%Y>C_iNjN
zmkF18CzY({w2C7e0O8p^fXc=(tQC8!JE}*XU$}(zrFZC~ReRW)leZS{_-+QoDCk$u
zyhIz!Wr4t#DJ|X(X&HEHW3T(_VHaalX4ftVbu^DIAxr;(8r&fU@e1r2`UxDg(ZN^4
zR%WxA66WwIjb2d4WzE^m{;<``jF^{x8kl5KYRb_3pmilB4FK5N>r
z^vgXio$&v5_+ad_CjOti;@@ulUk?9Iirc?alx*!yTy6fD^7c=MBmS+?VCeigZ{#1T
zdjE7b!r#s|b#k(I`ri-?mw$Fnu>W@Sf8L3OsgwPG-)=2ZleJ&tKYLa>!Qt
zRDy)3hjIxA)*~nsa6)@!i(tVX>3WgMvaup0%(!2KQ$pC(XSYpQwPm?`7Nzz4$^ctw
zBp-I;Z@^epydNo#Z4M2NO5>?V5K?^e>Q6@)qlQ(s{pCaDut+C}NTFF9CDK9-8LN>s
zs&}3@B5_6euo1P>x>G-JN^Lamq4X6F$c@nWo;b?bG-(s#eKtA*>7mc)=EcWqP)$0F
z@Nr`dqFkT$&3MX#L!#27QbA-aN>+vi1?(?^+Z_Z`02mNsrhd?ZNuNtU_hr!6td;C~N!&evlpbF+h&O$kFs?l%oC*EAZuG)Sp
zz@}3j@R*tvqhxQY3r?K!@9AO(Gi`gCt0D~7HQU&m%kvO%yDRO1b>rM=b!$|nZmD#>
zJSEAtM`yb?rBN1;Dq<$B$MG)BqsEh7ug^TV11Vn78@nND?0-I4$i;Xv*T<7)WNftT
z7I?2wunKtsv(_}5$2`P+2niMgLIikALot
ztj8JJ!x(2DqXrxAku^RGVIs|66i3TC|7-Wj^vK2EEiwoneF{%qp6-b->;2l$UARr#
zY)W0(u~0~Qk`BwEPt4Zq$`zk3XaK!VX
z%JJ#)FWE%rI`_rzDM!Bn`{#UC^YaPGAE9h!Z|`F2MC)vCY-woo-($K`ZOv|t0mk=A
z9bqVdkJ7QZ*dm5w`3&z7Hq>aY7Hx%zgws*&eoK5*&PUQ~OBzSI5Z+S)*D5^?F1wnxPQn9;|(juVYTS|vSll16##TMlex4zL6XI~g3*xE*2Qa!>B6Mm(;@
zXFnnMyGKxkp}Rp;L`9#0D`*YLbfe1XVm`4v*)am*Pl_z_E3vQZ{5{W+G;l*^^;+ZN
z-lYh;7**0m&~(+g!JDK@9y2EwAAa#~+t}xn
zRvKfpvBBh`j&Dxh-Kt}zNsg8dQc6nJ1uW%B*U9fl=KAKqeq>4{YaAHia=tdMF~oIR
zX?q`!7xzw5^vJNq1X98Cjn}DlK@Y{UhkP(c&4d)EwubQMVNTk2CYe^MwT%_5%%Yhz
zoE4-O6IcBP0X>b|H0YL5qz@U;_BAUEiRHgoVrxSeI#~LkRK?!Y1_7OdWs+nT&}Oxq
zn}_{EcFz1JG^#55t(ZN>*Hew-9-|MDp5gcrlb}ISsse9XPVq|{tY>A)c)1z$
zv{^%%eQ3u}GC2&`Kfc=$dv*D@SZvdhG)wGka^>UFh1m6y=n#2p_|$Y=_l0ljzwlKz
zmwV_v%J0c@?JC1mf-73Ns3~eZidU@2b^)2CTHQI!qdkQD(0mQD8-}
zX>{XHnO_K}Wvn-F%1N*$&Ogd@{MIw+mLU4H-dxy%x>?hiD3p7)!7;QzvRg#KCigQ&
zjt<@;O}+&y_ng?*e2cdPMGp@ZeUxXWm9UO#7LroRqzhWF{AawTy!a2=_H^1}h`Bsm
zTyce72?vtwNw7BTIm_bB8NeIHTIjh&SsursA<)@kY2{Iz$;q9V{tcElQ#-$o$;v9O
z;J-kLFr?Ow_6f@0(EBqenLevEM1KUOvxT9PDeY&p{U?wtQsYke46~C@C=_ISuna^O
zGaeO42bHT9!7)BS5dk6^1ie5#hzGzeS?9EDYZHOGjYl`@{jk^IN`*Xis1XKxbJee%
zc1E@uY7j;kWi^IDs7mP^%TiuYY~6$n#c!WIn0Rc0B#3XWIOiUN6uYfvVByEWdSMpr
z!``BDKM7&b-3b#wC0jUmC_*R`a7q(EH=~pcvk9f<4MDM+fXvX~4X3l@P{=tBlInQi
zzEEj$D;j2x8RHx$Q9L#mirh1c#p^itn|2ws8dAYw%)s2?jL#BiQ5hXwmosE-1ve71
z{X}~xDxxX*)n{?2(mO)jjug4ZEao)Riy&R^P_L&moaJL;MZS-i%Rm`pvw>N6z-g+A
zvwe*2ff4e4ONA7tZHNjreHk~U)^?KvGFKth@VY1~`uQFhi^$&cB
z$@g~&5P7)fp02~B=O{tORmA-E)yIMF7$SZ6m}53BbPd@mn$^>7>;$CJ3S@&u_G?p&
zpxe6g-xC3KOPe?*8Yi8mLkX9s2mnNP=B4uZuF?dg2-=LZaWG5^``i@aJ@y3kOBA8I
z`8;CXn80&s_OvN2YCK==Z`M9OD$y-jmX8>LcKATv_Z_^dIYb|S)O`+HxR4CIqHWmp
z;9rF&_qf2V!vIgwEAGv^N9^rZ8cs!^V-FEpAFZ65zhnmG)KZ=S%J
z7<|P!I3w-S;4k^TL8T>b-LpMpKz!OauTAOvM6R+&?E=U`iLH72rV9;-C;YT6S7E7+
z(bat6aA~K9FUgnz(^r?vF)kr1Dx(CQZA@FvKX;Wed6h79s$8|zw+&-UMhqcOHPh>e
zKHhWNUrr3qjGSjlc5o4*A>4o}TrvB(GH#U6p*dlUMZ+nfR+A?2@ZlS6fTC$OJ>L8`
zK#Ze77E;yj+_o_eDy6p;7O{(R4f*aQWqwhjkO=B!XHxNtKbuFU1@?JGpua_B2H
z1Mf+LmR73R&P32~sm0C5hbL!8CH^0uFa5yGbq;2VU5?yL%FTFgguxHD8jrj!=Jd81
z?I9OcGf1bC%v+W|`}MSK^Xe6QaH9S4>rNQuc90sO`Za&Aw@bYHb|61{`+IgPE*o%l
ztPl9_s|tz6YFgW;+xYDq{_Hl$paB3V|L8W%ObuOJolH$=e-HMdH8ylI`R@aIvYNEh
z9vi~OD++~I8BZD1{mpVzB^LLJ38$uM>KG7_01`96C{RWMs&@H#;+U-xr~DzFWdMTz
zH7g4Ei^QX2^jw?wM2-(TBAiik?)jc
z358-#Na{mqV6{x(hHrQ=(55FrDAEoTgHUdYFeF>r+Q0&c$kg6bMNB0T6
zp0dyd=x8z0OWdd~akrpvK$t`kM6Atc$_jU4+
z4|Pn$@)GfLw|JM(04W>hlrScfCc4jO=)MUAAkve5XdRz$vf;2-jx
z8l?p(X2O!0B+V2G88tu1*S?=S-9An^`ZF*?pG>8dxP`5=;edmS8F224HIV2gibRrs
z98d`>sqN}X+QaQHT%aSJ%u7l_2U87doHj5hEsy4)gk^~VNh3N#@PI6V)v;EPEPJoc
zYRt=?^_AVo5^ALGa@B2*k8KS~NKnRkR?`LNSoC&J`D35OU9R|*zei8SHs~QQIlsPDkN9c_KGaBSI^FTR%@SkdvFW#co5MQh=v!D6c9Lo3zurY
ze|<<2-fYfcb4f;5KR8&9s8@jZWVL|~ysx0}Nz_}w72AlaPjuU>A-o|l5s<^#e_I@P6;>4guWZ&_|DjA=4XS|z^?w4Oxice7Gp@*Pa|G>Bm_-)LL|V~
zpEWU~sBfx8LZc{PvFH0np?cy}3?^b#eA>(PSRujgTz3?&$FiRtS|M{$zI3T^qn_!V`0)`35h65lQUebi{9pTEuzi6~
z*?RUTcsR2cjZ;P0U*(ISZFDKkEc7g;r;Z*C;{>Pos{MccddTH}e|?hAf=I;)bjv`|
zKsoN1OkThWcYTbW-)%3)^*b(+PjWtAN;Tea*?}u$rs@0f@!LI=9a@ZKe!7R>PTV3dwF>6e`V7abK
zh{f)8#!xE_p90XNMwKmQvP%=unvzAOmBeFA(=ja1V_8I&3((PRYc!_PN5Es80G$u0
zrcZAZ#Nf9DoNcnH&p!#2)@x;3A&rs7Sq&RpIT`0)3-eUo2SBU&md7r0_x;RN+Y%Y
znf!9>S54}W$=Z063%G9WaNFv96YJnD+qhmN!@O(r7jLL^mSmrGg!$&dUcyqsSo~nz
zu}X+x$u#4RorIU-*S|*UIlmt&=YDo{ejERvVZr&y`5^lvEdC=aqBXO$`Me7M_aSpZ
zZ8YH%ADutcU0_s4agt0+4bxO`!hlsAcLv}o+{o2pXj(})p_O-pZs_lfaehK;=^1eg
z_bKVL3@px$pZQg1Ytji07}lW7=GOv>Bxp-pM`~a5+ZcO*QRmc_8~6b-B=+$ihoZv=
z3~V#OhzT}U;6RXu3aR~!bTV!Vggb~dH
z8m>L87IwA#-~lt`U>b_7#Yjg=;uT}orjd+J=90f|`Na<2n{B6dlOa=RV$#=hQ0g*H
zcP88DYP)K^`{c5jrfQf~Ema1(g=btr5jB@z#Ko{^60Q$Hh3)`PPq=$&vUEwV6=KF4
zt8oc(nVxv6yoEW_QB{34UFW&Rv=(jMh#}lwAHUn*Gh}6Cs{)H{R}@&>6x=-NP3ZJ^
zvtSt_HRSV}EdWi(qOl2i8iy%mxPkpTLjXtjBzT}4MO8!_-MVLpfSs*aq^kR^UF8TZ
zS}#1Xm`yiA3jdSd)%d-MB+#0{gFjCc-1bNYZxWhWhA2tk0^bV
zoFR9~hZ>b^v_CC6{7Chx#MqEI2CT6m^Qb$%PgG$=Qz6_GeEByHqZ3}ri|usu7+k1V
zw#jw7X-7O#p&_sZ(`Z@P+_XLD$S_gJD%gk32-V%Otb@}u6h}LcS`S9N=4{)Qpa$+r
zpH&fipO_f8E|umzKFfkFdzeFAo57yaE$0=xk1b*zX80+2kk}z&3daWbOd}cU?nyWT
z*0hs#R@RIL>-+hP_|=$lADTuXk_=2^2RQGPChCi78s-es%!HE;>c=^XaFJ
z6;Y1YTomtVx!&R*j8~=>Ax*+EFyXq>pUs@apXabcR9N6aAdyqbLQ~C^409n~)T-%z
zokvDWC)|cm;PE-!u=+iVOL;TX`}%nb
zY?R{%@I`&(C|Z0{AE9OObgRlLIOq0lCW*Q=a$Dd;IzL0*uS#>877oN;VmqjKKjO5-
ze=btPTN1ilqty&Bk)K?iuJ(1-I*B*rOE6qNolOo7y%a=H?Gu<25i-i-H*3pFQ&t%j
z!0#j1+wOW+?eH{2;E9*4)AcrL@Jld@5o65ID*DPBXmMi;_J^
zqu>D)p~dm>eAevm|En`d0o!d1hd!4P5y(p1^g6Sk9wImtl?TOJO@puM28PblpBs73tm)SWrdMNbe$i878&gpsybWpsybOX_5cA5`H<`Ttgs70ZZfPcPnb2XWI2^z|
zQlwXbrZ{6TT&#@K#MGE<5VogxhNbi34!s?idu9*kRN(-$LtrLU<
zTL~eJEQIb|Ix~Su5C(#ozK~FLDmx*HdL(Z2C?>WZ8)!<6?%GbBs;pVOv`$t0?CyjyT1K~8G0YZl@+$YC&@Bpw^dNCF8zMx6;N8l#H+?(HTrI=8-1}Y^%#T1>jMH#@$T%Hc2N2
zc2twM@)A;sb%1c&F6CD)=-F7qn7G648>=r`PxMPH7_+TK4;PMQ^A1v+Rjq=S{@rlpj{-BmF7?(Q*eLfez1<=`WS{=E|mlEGkEjI
zOsj3C19I{H+9m>6>}Pqw6p+#=v~pX3FSOGyMxV=~tG}e!!#9hIt|PPD&Y-kyW%AXm
z!zq{{s@pH8`PcSA^4_1o?7Wdxd8|
zvx$9q0bj)1u6C?9mK5jfXY$Xe>S&CJ9JEM~aJ$!3&%mm@eczu`fB5^ny#B}yxSpbf
z7!!;WR8YCtO6<@O5)|LM3DJFAyza&4Gms+G*MDsP;@0eq<*NU$;VQ_+x3^QDl&|0J
z^3RTR_|wf2{?U-EpIAwPUBX>&SbQ6c)XzFY$oZ>$6XiK%l3lr`lq9ruR%Y
z!5bC@3UK}3Keg1W$+IDl-$?E>*8_q4+&_$;&itNUkGA;Xv+G(iyh4Apwak@>A+0aV3&~8a>7l*=;YJ(cY3OHfs8{(lTg>&a(|UraW$2pk
z?^S-x1`_YZQ6p0pTf5ZKt_imssMUPI$wM742*M_H@D63g?(x=d)8uRfr5TGm3msRr
zJq9hMmHjpzm-;=IM4#2VcrJ(e!hHwJ5ZOL=L(T$recCS-=K&r&lZe(Nt
z+Xm1Skty2BtX3d8-i3^CJP&^RSlAmbCM?p1h9`TPmf)1F`D8g#*e~GbcwqNf<>#>m
zvjv^Bdt;Z!?HS&Qwy=<~gdq-3;mCzB!{;RR##owUlaTv3J|9N@i?afC2{ja$_OOnH{Tc3MsejCuAP3sx+f4XD-
ztDW@U=g^%RYrg}u?+734-S=CWOaZr&iV(QRW<>c`RUqBS&t1Xa@!vWE;#ioq{
zr{=rc$Lr1EMPZz~u9wEH%w9kdBkz^)_hTy
zusr$BaGNdW;b>%i2&DdP20Ftsg~ea-D6IqGI4L^n5E7o^gOhsj&?mE5BOV3)M``JF
z1VZ=*tG(wVS4Y$k5y6(&)(-`0D@m+9>JMP4-dF37;u17w!UZZtK~UmKn`NyD>8y4r
zPDAQFW>g&yN+LhK3Tho9LA+3YUlR+^{Cm#P<2r*{xK6L);E&0|X7p#139-iJ#gTWp
zwU{uc5?BDC^*6vlX*H3jY6vy4Tdcn6)9Uoj4OUc25424|=!oLCJLpN{IO&L=j(6Ns
zBXpI)2(-VfW8|L?sQE92${vl2{S%?=d$JP)qe~J;If`*V0zWZDACZWm_jO=C<#gD=c*CG!J6
zJoaw9X9=dtmu=FUZzPL0&%0iAZZ;D*w4*8RFwqdLZ0=k`lf+W{;^t7E4wwnJaxseF
zf(kf@sOj;+V=Ah{+$S6Zl8cTw2s2hR*60brs_;v)e32X*V6d+AvrZi#jl6eQ{Pnh3
zHYw9-GyxN06QfhjazPWyN+vrAlUdIl8@o_lKco#_R@Hqv-!L9Z@m3Rq4sy^lPLV38
z&;#Nd56*rFvQ@d(HdKPm&IT>!)RniY2>q@KVkcV6827aEM@RR$3(&2jx>Z}75jytu
zwPg9#G*LmSL=;bNt5y*;lsM!_WcJzJEKOZADOron%{P&J;3nLYJ!J^3h;7122cT)Y
z^O>P!&skVt%EG7B?%TLi&PQ*(C7Ud(I#fnd_5e=Uk1EMV$R(3!@?O=X)%13F;XR7g
z@B*_dxTMFx(WnMe)1_2T4J-%NqHSHK`)>cq7q=Crl&qm^zVJg;Q;n=6lNi1|aGd#|
zx@~d~7eB(+4Skfhjlrd38{pjfXmjd9Z8Ju8vPUnsVD%};Y4~YKz8Ml!9ABa=6?hW3
zY5c(q6%w)WnD(!M(ovd-Dz06|D|`TU{-BVJ`wW9y`3hsdrZVEWUCL#EBR%K1^JXUW
znX~0%8M1}TRYgJkvMqHsl@9tfEUA@%<--i;Z`4^uG~8@Bi%0Zb*`qsgF-{Lj+dVj4
z%W|`>n993NweTm-zOLR_;yy@O*c#d02VBJ25-`iHtvd65GRinaA
zr=e5}(zDOag+HY5THtLcq&_zm1}@M!KO*&Epd~?#iGRB-2y*l&(YCAtq7PRze;7V|*AXRZd(g~E$XSCgD^
z5haa`eeN+qWbv{Z$KtzCte@NXfQKhCP;5_Z)K9mn=s%+3ynCQN_ySs@w+Qr=tN+!D
z8Hz$F^-DzsFrD`-r$>~fE9|NRw=SM_mrpn39R#!465hmt1&r!SQ{WCK?p6dY*B3k3
z?xwm_6Xdn7D+{>$F4yixaU&IKRP(_Z7eEU9`o@WfktH)~!w
z=DEkX*;V*qDZrGkwKL3O>-ypw;TWf`=&p<$cAlK{>r*h{C7||vp64wGe-$6A_A#0A
zKWS9I-T$8h!_a5Q_%qMo|EaRLIGO%~LA{}gy>^)b2w_)#QHU3WoE3zX2`Ug3QmWOe
z`i6mwHoPtlomO0c4^$al0KAyXCNwFacC7Q2Ow7
zHfEXARu>;(%V1-Lzw*5JLHX{bh>rKH;pvu-F84pp@sA!SbF%#u|WVs}+$8fct}?)#IxM-bPvUHm^WYAD2M96nHK31##G}M4VL2icGuE
zAJ2YMYnP(_=8G?Uq3@^B0K?cc8q9
zhKKb}^R;mgbhG4`{IUE_efZ;;AmLn(6ZwrT{D@t*4-U#IoXu65V+4YMsj@R9K|THxustG-vnZ!HVH`7*AyFZ
z!$?-zILi_7!V$q?4o3tMqZI4p-(lLw@xW1kLUY)|fH|zoi5Nige-b{+!QP>2%a>re
zF90&K{EPLvD@Dp5^D&zso`tlC7CZFviI;AY)@
z$(p;w{#{o2R$i^L{7DV`{o4NgLiI@hrvVC%Cm1NSQmF`z*@IY4&{1rP~nooP&BdrMs)F%$gVlDohM)YdI=6^@ag>o19f1kaV!$84
zF}RUULSrAF9!{lk5JiWAhbc1WP-3Q&93*F2FO_dBdR2JvEEK0PI^Q+?pGl~PGX<|s7gvEUxBT)rJz
zaA*=aN+^SlPmbVhQIoYOBL%`oQ>yZRA)r8W;lcw6b|R4Gln8rmvXBWop-HzCWzg7p
z82&7-$bJWrHg_7?Zy(jEd=%(+8L8I<^O_bef_PXiTWLb78Vc6${~`6o=qyz62LR|)
zlat)+kiE)yjibML6jAVy6JZMQ%m&0#$SL8SVCp1d?2psD3Mr@=QjSJ9Z0_mGp#j16lSRW`0j|1kTM&|>p>*rEnSU&dz!D*nxMS&fAxEBQZVy)C*1H
z7C%WtV3I}Kle{x`_1%z#>akQCfiz*4Mx9~|lu^N&)7~2tMhdM=!#pDr1PK^2T}yB^
zo^S_ctJ`}AizTK_E#M-Wl?__SqMsj1`Yf@dQ4)f=`-6Zxa>hM{&o*fkA|Oy2UCe}t
zIY&6?(4}nbEt_IQ9oh$6CnCExVpsKfumzzd#jT7oTt{z!DgGeNyMSwJO+}y7?JUv0
zHJr;=G0+o_zj-K6>F7>8_LXLzRh@fk;HtPY9@t4XH3##bMpNHtTKa2(cYpYy{AW5
zUkRA?OH9>NX~$+n;D;U;-SllZNLgxr;c2$lPd%t{c0X->FJa=-M{KPk1j2pPr=^G7T)&TpJNz8q=e=fsaB#bceG{SQ=h!X3ms|M{O@7a=_x;i6
zk{?|kFWAh}TSIW~J$vk#20yWeDAcUz#043Go#=A`UJ?k%c={72O&E@zzZ7XG5%pov
zYk)X{7@oiAh3a#+Q6P3sWD@G$pKK^xiZVyP`jpA
zXl+XNig)ZTWwr2}=$*Vm?6xxDsNWO3n}Jf|Fp~vEN=S~N)&hk++1d}(;RjC-FMD)-
zkuf3OWHuLz)puh;Jwvc9p4uWDZuBX;2=j
z+4ws{&h>t7EQJwD2qVV*#?;FPB+c*~&80U}8ncjFS*igR58EL+s(@;
zJN?I_&#w*i>ctAnlqwgfmzBcQClgz(6g%^k^5ywXS_{WG=qmVA`iuwNXVJW__?FLo
zWn(FExf)On6NQ}9HhZo#0Xj<)oybTzR%BJQ#4JH$NuYoXJg{G>E|7aA;z3-2rpm81
z6NqK2Pn*~%sUm`|r7$OTmswixEGgNAy!!qIHZ$R%;!>lVPOXa;+buh714nXN|N
zdmqO);)+1&mIz5tCQ=7Mig
z44qdKBxI93KS{U|yJ$v85vRK7Q~f{>ngY-UjD4QE4*lX6@C4MVHMxW0242z$RL1-k
z=)JMR;kKjWRup!9lkd#C%detGaW?AD|6%p(K6;OU@7!-eR`QovHCF7?<9qXQZ=_s!
z_F!nQ5}_9Dlp^I5UIz_LJxQSo4qPjV2|NVBFnxZVn^3xpi*jF_p5_$#2g!yys*tss09Sr^s`v
z_~~sq=}pA3Q@EA|PaFZuv$A-EIO!kau1x>wl)o?O*2^P%fUR>54}sGKT{~6eNlP&?2M4
zQ-BDesxL^~9nO2*%-HfMEf7HQ1?8n1-=@C(g3Y=yVJfe@ylJJ+-79Q)dRwT!d#e7C
z=UAzeg(3_fsj7>VKe7vwX902md|iY3709}@wl8^q<2m{#W8gimKvb?mrlv1aic^U;SclV+wJlvQo_9|_Cadi~{Cv8*UUUls
z;Yb%Bh{0N>JHo49fd!;xW2nN#
zRg`q(Sdul$F|sXe;U>nB&7|nK&uUKhI&a%SV|vxC
zvr;y`6W5%~7U#mAPLa`;nY3o2YsD6a94IbO9x6~rn1RP{lAYx-BT3P#J9bJInz>L&
zS8NSr40HpwMI@O#8ooQumk)q#cHp9kC+Z8myu#)E&ro=|c^zvi
zuSEK^^bTmg?S2Q3t&3ls>f5}aSm5WvV{
zN~QTGvPBY&bCf}IbKrr4lhVl6Lbm5P3~JNRvBAKJt0ZNBKugxBDnWDOybrpLFNcax
znVcwD
zv{S*dO4Kwp8^qMXzAF0hbLk0}e~kp;7`i2el-nH*OE7VVhHIjdb(fwvJZc@~cIS74
zhFX=DPyS`Anro=kXnyUrU-hMnf*ci(AOaC(L6t6=R68I{Y}_OY7gpPvb!&=u6xH!b
zTovNZ3rK+}EkXq@)I%S-#WdpxN=VsIJ~XKN4E*>rM&H~j39bOuC>J~pd2WzeP)$I6wTIJ8YKWyj^Ar=Wbvro6(?tLx^>oV9s%yk+dTS
zF!8>|-l3k5I|qD@V}p;W+`K{LC5W&0fZ65z-FzSKFBk8_sjpZ3Pm1+vHnP4j##_~?
z{$L@Yg9q%o9h$D!&k_CR`}Dsr{01Q}?%SV)r{B=|GpI)YN5a#80;YqL{U_z=9~9#@
z)H;faFUcS&R3=47VmxjKwT~nQKuD!^|q18GScT
zgO*Ac5<7}wijpVIAn_OqHKyo)9dQzRfZ-HQLY1=!g#;;RB^=z%TN7O$#!3p~D2hOG
zW(pusLmIxmvttKf`U-E>ccW;4>xdRJJ%u@7T>a}b8NdRWYyx$B!~Cc>k?|)CVJug)
zMxF9LKF2Ilpt+UfK$Obn{$iwu9zAlxj^FmLatHw0UBw#b;s#;)N@gKaHk3!xjMnF>
zJsMNPLRFfCX{a%>fspi>+Bljdu9==uQnXkk6TcgX49o3+3Z`=zymxE3O2crr-7muNF4HW^;9b4}NKM;xJX&x71AA
z&8=er-v|o%m^EX>bMvrY2l5aY?b|v`BmyaIiX+oDR89WAAD?nH5XZ?Eq-UkPepR)j
zVT{63->5Yo5s8TM9Bz*t{VM8?L-UbcO>f(r`I}mumE^?;N$P+>a!FJC
zZZs?9<0|C~FM`=>8xeo33w;f3V39}7;g
z#E{lE-`D5c$K8H0!$q8)1(bz&g4<k?0?|&&lVBIC<}hhQ$gAIK}pjOM6zCp%f+CoOh{NOqSGtu
zXUr^Tv?4cWRcw6;fQ@FeGMTZ)pc9PGJ<3u{g
zZ3Wx9|HNKeMAIS>fM$IBm&{C1wAv_c1N*%+y$XdXB-MuuHYhicSPB~H-m_;NZE|++
zCa@)dqy|$0@d>Xenq->5U*i+4X3V<=N6Q)75W}xO2n_Jt2WzqxI&h$vhL@mV=vrZY
zlIIqftOR-Yc3xBY`Tap@3$7XnB-^KH2`!cY*%+-%KBCC7H#79_#JLWw8JAH^@1
z8=5a0(66A*MDP%IYlp`pUR^{mV&~FO;9~B=n&1~Ps)92cY-{4>Nap3~34hq%90U)*
zWJV?|cBXY@4AaBkn;1y|=YU~pf~eU~jj(nz*M4nZm19W@+HIX+_8FJkMGSi_Su=C`M+AIgS~^RjiJ+D@{oTp$i!EL*M5xwVdIV(&I*v+
z!eZPl8!Zgi61C{*bpgtTBf9Xf@Y#-Np;N+nA~
zDK?NqC&h{$s~l`g(|Be%gFZ_=S}{kM@55N(0x6IPI$N=j0~B`goiTgIyD7&qvx35s
zhf;?lNTJqwBI$F|CN$6?PWu%j(BA5zbsRgTk#4gLa{Y`PjDXT$xG8x3&X+SR9j*{0a41aE?OaDg)_A
zm%6ggRy9Y(m?>tHmt{Cb+q{kR^ow%Ft8GLXUDjaU)V8>g_sO+I3D2&pMtCFOsZ>de
zS?f4VgDQTx&qYZgtXtl7XdcF#ER>Nw{gaL~dx4uI{|HPqH}*?yJ2#og(WxqU4xhj0
z%dh2?CPPWJmD{%FvrFZ>5AI^$<Wd#+6K{)h#Zvm0fD*xkIOfod@r&vCAK8+
zmkDp{Euj>RN+!MSCa9FPEDY2G-{#}<(2yZWshR_hXTWe9>wz?7NMmjH99V+tX1Gql
zqNDiT*903yJ6lNHuiB_4}
z%R3a-g&H*T7WVrh1L=hHR8WA>NJ`$8rE`p;ZcLMzI~x<_)wxw&Z!Pcd&o65~hE(icBT;MkQ}R>|r1jhLR@uAJ;eYYUtT1z_R;V7>KlE!h
z+FCFR;*~-g?%rVpP&4ybm$R@=nH1C>-e~=
zifWD_x5R$e3xzE<;9(oOhpq7(d?fg=S%mQ5Lu!VCF5+fvC)`t*yS~s6)LI`uUhGn4
zhw8mvcw^eiqyyd(_hZCwe&8WveYTR_bj?~jzrRZeI7-7qNAAvxxa|!rs5`mqN&Dn=
zNt4PY1RfHS#wl%zLmtpY)p=buTr8~wC|~SzrOuBCRJHItYV@8&8Nf=R)hz~YhwdHU
z>8wMsD~~sJp00(VJavb!%qkh%Cul&=Mtn<3cfy0mtoXF1u1al#6@Y(b_|h%&#sB0jp4Y(Pp@t8Z!s
zG2@P17#vH2a1WFM?H((Eobd2Nai?5H6)9_9xBeV4uDdqF*5H!OLSo=BjuKc3l;;=v
zvE#XGoKUeVTxU40`e^?><8ZX$gQ@NE;oz?@@e(5H)A)&=-x&EbdVoKl{#icwpG4;0
zt$NFUGVDq;PEf9&0YUVMcaXwJ5lvVK0Vyg&%7z0F-C@tth_RM<%~DI%G_nPN`Z8bu
z%Q35LsYf!Su1<{E?_-jtaCHIz3T^5@G5jnAGis5`xRz1MyUu{kWXXoBA}Oh`H$zQ2
zp~X}qd0BM~nZ*OV3Tf75yK-92)08C&Ah8lv*fEzx;i19?XFw|m<&hK`VYm;Ok3^D1
z8!THiSx!o-em2Cqm^LJD)le{4l@d#)cW!Y{iUUhgn6vLPu~Zy1%{ruOdpa65agb;t
zY3Nc6D0RjO@hNyOckgxWe{O
zmr<4v^bz`-e2x&Fh#!%T)!pr9W#Yzkjqp|C~8GfB^V^bB6!#
zlBKhY=jR2_*x6ZC1r`82DbvFAKYy+s&;WoS51(g)pnO&-J!~KWz)?OcGynjFffv3f
zU)Lp?HvRcQ#bX@HU&vOzgbFf2^VU>3!0HOz!n4!-d@KcIX4XvRG@?tCrlpz>#qS3@
zPrXb0=|di5%~W4kINMO{Wu`^Ll!8p&glr!3X2^hZfIjZZhhc`k=Htt*wfQr1rDSE-
zi9@T3{CTw`$@$5PH`Au1zvgY-#y;AoMH8)FGMz;aZT#W7oo8&%$7L(<;&siM>T{r7
z^u@II&8}ZtHoE(uP5kSej~nL(oG3!}>(cY_p3Ry4T_&x<=r5bw)QvEv{_EJIcc16c
zEi>XN%u{Fol{c#nJq7M}QMO#v=KhU|EtBY&?$M?C=-xxO`pKhrJGSfkg|ZRfOopH4
zefxXuHgC-S@8)IvKRN#o07pQ$zrS4O-hcbo!GB$jmfPjvO0nm}mS361;l
za*_`|jwUpP^VMLr&hI+wXTDr4H>+%%4}Sj7@95qCuleP!$ku~*`Jz}3C@C8+2d|e4
z+78)f@OC!JZSx*VQ^syR%h$AQt_KyU^SXZ`pWkn2&Wc8#lkkuCn;l`jTQySS=#Q<12_@eDo
znw%+T#tAi4YY_-XU<;(qON6;68*vb
zYPRrQhwD6Qw4GN{1;)blp87hT_VylwdNIq3$+^ScUtV0$zzuy#M5AuTf@o~bK45lK
zsyY`lBG9{4vCJkVZimMoi>BJ{o86q2!|mNvZ`C@WcClE>B6@z)c*xhmK_P|6B
z`&MeTJ!nR;56U^c=iM~4i-Ec_&ZkVYs{OQ|b+;t?GTYt`h1($CrQ=Lx7bU2ED5n4@
zH_LiiRGZ~)yjyRm%xXEKvweL(q#*|-nUoom{36>G+xyx4aQ2YXwiKa88Jp
z5P6aP(B*xYKPh<|^nY>b-weI*yf5Rn%HT~-ls9h_uG8vr>*babs?W{G{JK$tKkLF9
z>L~*h&F|aldzCGaTYubEAF~B*vQJAQ@?Ke&W~=Zwi)=+pa6KDu7eq6L9#M~*8IiPG
zTkLY3O=dYL^Ljb=t5e16^ceGITsn^NIf{UoXqF#cobpcI?|N
z*G+XJzE^mijhpR&d=ixd-D##+Qsh>K7p`vh^Xv-uzPq@%Xk@z7_2uYglzKvip47(s
z(F>xpeGrZ)dm;V*yO93ZC~_e0XtHfRpX_Ciiru>G-)M~`Zs+p6Vy@TOX4{yTTV6S3
z!gQBc>(Hjq(Lx)mnjJ8jjoeMXnq}q3WKG;)iMB(54mD10;Z-H>Ay{Q~F|9K8P_AT}Qf8Gb#h(tbO
zpzDk>%?A&6`N6?aQmkXM;`x62D#DeP$
zantlE>TkgbQJoNR!iPUcAAYUV?gQFkAT0|Tt;_X{#kk#^=7y3yLHpdkG|S1Jg0d
pauJv@xZC`)B#oBI;aCZ~VM|IyjT^-e3?RIQbcdXr!QQeU)
z+M^on7Mhfib~7wFp}c~2Omo5;8LFKTR~e?2QMJFWLD{8J!CKct;Bu-A)yasf9No@w
z{onSkJI>f&Vw~KwoH%`N<#1}xG9h{i-N?Ae=0wTvmUKE@6m)7@;q<(eO-uC#^zMy!
zVwu29Ra${6uLe4lttQOZXu{BO0CBu6oYUD@m4eK7{rpm)dbH(pv
z-UqfHZ84s}O#SGtvLN&va8sgzRsP=bHpNnK+2t~rg0QG~-fKnNTi~
zsb7^5E}@Gp(oCIJCM6YCE+MT7N$rxD(l&J+lyotbeCaE$(mkCuFStc2mpxk#kq}P5~
zLX_WSOCoeB9lVibs-!BVs#c~XCC2WX$JZv=;k~wFRco5;5MC4W!GEoZY{ko)RZ>1y
zX+t}O&lX|lLUsaLDy%YVK51mggb~9AA~K0TLqVJgN^{y~O5(*wLZPWw*xJpeObA?98+5dR@nUQwF5nI@yZC
zF8SX&>43um!GCXLSn0UT`L}Kk)gh+wfnGkdPTtZ==+Qlp!25i9sC#-S{{AP?Hs+^p
z0!tw`4JY~K-+9;UE77>Shtyinp`U5g>1L2dosJ^q@4KrN_IJ;uAO7WP*Vh*{c}#Bx
z;cwg@Yk~8fX|8Lj3#?h(vM43DzuQ2g%^B8KX|2%R)NVor3|R#KQdP6f=PMrdvd}tT<=OV77!Y4Z4AjeTATHJzlSWnfKwWvH
z@&k2`RaM8Usv}kP@v8br)#!ND=txy_ysFu&%IxQQd2RX7$!wily*wq=nf^K_S#y*3
z6e_b^VQQ~i$fDr#uh-e?u6i5d;c^zsPM%F5@sv8Vu}ZExHYu}nz-DL}XC#+p#yRhu
zW+9t&AHXqfc5&;#lwYNfTN6~72M>YXa+Fb*a!qy%cAFjL+v}VJ;%+&1FDi3s9y2Ig
z>1hQM{)E04DS>eE5mJRsYNk}>R9vS@n^Y$#o6sntIYm_87K&)XHZG}7NjSyIUbYW6
zzWNhQ+4f~=!$14?_NO~rU17IsU@>cHeTX2AUt09MAH14SwyT|;oi{a7?MnP5JpV}T
zvl?sjWLVqrc_h|VrN>}>>x)i*F89YDy+f$G(
z%Qmsz^KrD;u5Nk}??M3Pm5VGJNcMmnsas(W(-v6aM|7gHV2QSO9;}j5D^F_e%#vLM
zT+MFt(bKh_dNK;>pE%w+o%R<@3N2B^XM+lIZj0)2fs*=_YE7%0sg#^nKT~BoU13KD
z+9+__u1|cpg|J=k7GpZ(_SC2BJXj^>MKN1#W}EZtDV+&+eO8AHr`aXz4xqkLqjjEr
z^si|YH#Hi3NYyzI1mP+R=RY28Sk-r%ib%U$t3YZON$G!Vf^$WR%Px#Ii1}U{CCx8O
z+;p2LDZWj;Yx#-8W7uW*RXsKt?&p`gpyh7y8SA`V6DzIRfP72?l9sX(^e;NS0ri*$
zLTW%zFGPC0fe(KeU3LfPvH{wwwTb&4sK>_YvTmiV)-BtUpV{7lp*zqXrGNPIhwt?3
z*Z=$~{P1f}i~Y^S#*?A)gb5F|!my8w+-DD04LEuX++O0?4>t+J4?pVgZV%FT;zFh>
zHipYuIrC9SBn}CA6bU9*r$db*ul#om>KIh6*(Y{%}{iW}|FJ@cY;(0gWJ^%+?I^>oF*73kqa!C`x1y_k>lB$!cV!BGR
z-0*{Msp`Tf8c)I)!_I*RXZFxY#dT^|XVx
z=-X
zitAQ!(NkEIMcdu%4qs)uukkjW3jO7);z_Hx>?v%evDFC5l1`Q?vvfDd;a~JFL(16p
zcZ`@X@K`8nLp7|gH@;n#qY#bEk}zeN~)$>KT0JGG6_r8vyBCg6yIy=zw$P
zEfzj{nXvjC4%subaRN7Mb-6swV`d{QxucUB5izkwo=P9p&YH$Ceq1vN@e>LDJE@(z
zH|jt$=MVDUZRkyy`eB$NGQ^7#KN?4;!HiCT8OELv+7rh{p$XGG43p5KkxftR_@Oy#
z03@Ez5KM6zz~o_oBsyr}MJEp9p~d^C73%|4x{c
z248*zTt7SB1?XOh@E>qG!A1|H!L%#7fz?zgd3hl$~FLvIDwyceJd;a}{+8e)N1Z+6@_ZP5v
zXXT(k`O+B|O_-SjT?b5{k1~j|JauSVFb|JT3-q@zI>Z3=tQxt$YQpH~vXDoX#ox9^
z#G`e3Btsw=Vc4Vo8BZu#pphjqlU15-1Y{mIgoDL8cd@FTOSb}T!vmR)7Y$aRzhvF
zRwn^Iz-4v8HzJ6tecp;HYJ9x3+jx&6(zZW4znB#y3D$#(@T0~Y)PYBh#4_ZlkyHg6
zHPY%Zqeh|)Flq`6E`+F=gy5mZccU**i8Ujos?K-fr|^79)cCCS)h-L{^|)EH+4cS4
ztG?Wx!PpPM>dWjMo=zZEUrxCSda`=PvK^6icK(lHz%V$UCDxMO)vx}FicovEL*9{t
zuHJUgG)N3Occ!>h8rOm^P5GD)9FBvUdJQV?sDYh;!GZO8{@Y^pO=EM)m~Cfskj#tS
z!g;>zMzgU$%0JEW^~*pH!a*Ph!~is^Om^<_n?OXH<_cl&tiBO|Bi56)S$?u4(O;}t
zN**dDo2AsDQmR=hI#jBKR~+>gilaG|%Ck*QJNE8TLn3HIs;anE<#E+{L|y&IR1WL9
zAYIvPk*^y83O%a%^F96j{eOabF7sa2K@6VJ#0{R^HGtM}2%Oh}EcYO@wzUs*Y?6bZ
zIj^^t2&Fz)&1QB`(t9ZBLnsNE9PX~o>;RAUfJX;`N6H)q&Y2zHW)C<=!`uhiW(BL&
zvW%)SJx+2Z5o?C`C0=X-XFR@3$>xi4rR#*VY|
zJ!?n1f8OJpDX+h3L#nU5dNPpPDb1_5ojw`BWpNse`YJ6SH$Ir;+A
zv-X#Tz4PqFt5X+#7pL8dxGLhcR@3Yd?Cf)47t8C1V843dZN4VvpAG#4-2e5<#(ce;
zXNyCyXJ0nvM`8c#myY=Zn1A7zAB8SHcU;`w>%iT8?oOU<#!tG9y+3)y>?B-?}>Kv%&dlvovvE~*w70L|yv%s33eIaU%N3vl@2|NYPZ^MW4#
z7mxpi$NzrOUVNr!?U}u$cVt|=)$n4rrZv92;01o#y0DiL-j%T&B%d#A7ml?Ml9)1zgV5dO2*`oK8~BKKMb|+U1sE?p$Y*@c+_1u2IGJQ{qLSagLb0zJ-F
z>~;0|)8!y+nsO}s@b>0H%Or}0Zq8!BDKg#bG%g+g5}Z)|$R4uzeQulGW9Y^Ic=6ew
z+DFYkq|AHlP#oBi;;8`1&js|*_!B*P0?7MoiT3={biKhGgRB{
zo4q)Oo|2=>v-2u0>&9MU*Od<*paw-6i(0mvv5WBvy4>cuiA0;({#E*;^CT
zg+~nf@yqLbe*nZG*SN&I_ul?P%ea-&`8j~TU#s|n-gT*&y|Ca5;I&Cw4>zsPQvJ9lYf#|{2CYlxK77G&QheUxa~ig|_f*iP@=Q`>1Jg&iOgUxlOU{x||-
zxEBk<1Je}mDu!z>$AvPK>D|6SbMI{*C#iqda83>mr$fPth2!b0_=3spGE@%ui4YI{
zGDQdG#d5iQ6pC%tMI-UCD-SJyZg2SJG|s>4SZ;>icPiE*DsSd)Em6uOsWp-DdB;pb
z8F~~&MxA#p6}?qpL+H&Y^;48-MzKu7^L^D4v6L>rLl-I+)(3TFRB)
z$|djIiwr1kFWmB^?geQNXVl|h$n)Nr?(JZ`XL4gSQH}$+SP3
z(UY*vys)wd->S>3o+R$G_D-J{bGTKnWJt3yM
zI`z5i*YwM3HSk%^Sx@PK)xzenhTtzTvbGvN)in7PY>jO^PP7U>shO{h!HEXBC$zA&
z+dt73_W8!GR&!5nhH3$Sdd9s4{wr|rJ@B8@l-7m+D0|uy7|dGjpRUn9V2bH%-AAa%
zPXhQD15d9>r+t*1x>UYFJ4CA^pTS0dru$c`*;8H7p19d3m!msl`6SYBXP}-QW;5w)
z%GM_|`lNE{iS0e1gnFdKuOfM$*xuLb;onLSZ&U6QEjA~*Np@g=kx<+{vYrmsm&yDc
z9`Na4J;HkWD0^qSkw+OFpWI&9i^~(q^!>1(Mu>02eqzN(FYvFa{pfG->#0DFP}V0=
zh8%jlWwLLysOWUre%XHk{3~%lya9)#X3k
z%!|Pv)oXh7=ykFA>HFz+yBhxZwjL}{PaC6ITBZ~
ze*Z`HFI4~1L%j7*-;Z}|_@%stt=DC(vhCEH{Pg`hAw6L-?P+&eN9ZS4$uHmk*eC`d
z{(4vBKYgEH<%{KH@_kuVzBYl5V~^gv@=eH%=2sEg|287@%M@RPKZ`hsq~emE{AEr!
zUulPdU>p+qPQ0Z2_J#T7dv9FKRvj!Hl0RO$zcd>3_M*P}VV-S1HjLYyu|M;w`%lkL
zFWH3clmlV-M-GKN?@QbB6l%^!8T?4(ucX1)+`Mw;%jM!XSTxm?ch=33We`YdJQ;+c
z%F-Z>g=e33ImLlYX;}oRG-F={X&8C@bnhYzq>3@s8Y0oSQKHOqADr)n+=TS()2>+t
zZX3#|PN=Zb_>V;)P%8FipiGhxlqB}-6Pd!NLr-gx$Fw5+M4%!Oq&lVIu~L*A83jxe
zL+=UUM@7<*mbyf;BtW5(D4_hnBzo-A5o+v%M7$8qhEj7Lml_8$PJQrlDoCi342+5x
zw6M*L11%yyh*C-U8bGjb2)o!~${iH8gQDyp_l>*x%RHj8o`?by=`0RXqdog9he}2Q
zyHO>WjY#vv=?J4|Qe^AcPXi^X;WQcp{YbheVHx>R5XTYnY^laRH8iF)N(9vCwude^gJ8sGo;!SuZr~T~;
zwEW9l1V$uOi}q(hOE!tQ-B=d1eFSfDp$ks2x!GRBK9{ji?yDd&qmuVhQ=k2+al?%p
z*El+jZAZ=ej6$*3wuR`BI^MWfHqI^6c6uZAl`p4nKfXNzt+cl@XCrKJIM(#WaM{I{U3J@<`o3i|i#=a$8a-^Jw8oO(Q`ZgRcnJh`}A
zY(XN{^PX8^;W9{Amf#a@pVGRB(8ZGO32-#+(+qNnD{ywNn-ga+QHzWGGyqM4yG<*AZuCyA>1BGM5)
z=S48huhz@O^FQe4BBC?E9t6*u{<|4{{>S?~wUf!S`iy6El3&fnIsMsu+%8wodP?6Z
zFUo||c?t-CbRahqJaHw$I>D#6H@f-li}%r|IZ^j$D#E#+;C!DOJfHCj$tSblVyj<%
z{YBAH&BtEcVB?@%kymN`4Zd&M`u63OFIuX5fRSOK5;_lpD2Xx|5Wg6dx>*^dF+bj>
zBs^THsVWi__MsYxKD`shiwfcnp0lRCTvfNfrG@5ix2Rx|DP;vL15Ny2y~K3Q|JCb<
z2#$m%n7B(nqNgF5fpz%?9AjWezDRvDrUE{ccA8Eod~-f6J44XZ#+mhe*U&V_?^-|W
zBTJ+K^bA21%eOG!g@qpnupVfcyo$W2Jh)&E3`3LENmL9pD3;IoXyOHcJE@C&@{LfF
zr=lAWC#AlU`c3$0&pO;)X{cc6SV=t^U(TY=X+GLjkB?zBHqGXB|@k&Kg
z#S2)zs#|Da|LJ!?xp24O^Cnz$0!@W@m$H(S|0eiLH0de`1uIX>mjo}*m`csFS@Dff
zr?1QFsC~Vu?&?j$j@~rd)0=h~qB(&rAdRQ~?}4eA=ZjtW>q5_!IA{C?|GsJ8VFA;mO)2j$5R;o`QpL0R8WedTNSc%Mu)7*A2eetf0h#U3R-<7wVzmz&>(5E=&waen4aMBHKY3hv+`X9O{B%=8D)3Glo7MB5fr6Ac~9y<(GwGwSia+$9#bB
zEAXImN-2cNpeDiaZA}2N#TdxX7JNeZa{LIjspBi3o90@mFSruwGpbzQSoD3uA4m}j
zC@Q@QbgZZJstXRC;Q$($i9jm2w&Q74dx4_TaM>RtJSZZn%27H|Qf9;j5wqCGV@$2k
z8x0c3A6F$Yp8t-4HUY%g0|ccbndmDe(3EIRy@>_?6N)340+BF%pK5^3hKY+DDAuR7ZwN3#mt-1fuE6D0iZK-Ym->X`MMaU%sG2BtutM|c9Zwq+863j|
zi;GBLF`;}JV>*%qBTShQ!k^N_$F$-e3&JS2;Zdo+LTKL@kx7(G9fYYzrBPLY5RO7v
zToTU?NE~qn!=BPvq38@m^S%vova=zr+>Rz=hCtZ_!mUU_T_*TG!^aXL47fTlq`pe-
zM{4}4l;&Q<0D`D00qavt!&0^J=^Z3B#BYs(0S|DZ?F1`j2VO>YgcAfj(Vz#Zxx$iD
zws8zOjWcy!&|l<^?G#ExcM*3VV+}Jfy|M9O1V7?5Obc+tCspy$2rAJVDw+2}Vr7MP
z`l$b?4^*g+DX*6(L2Vq@8nq3Q`Q_7`w%fPdDLZjkuLy&qc5Lq0*5N&1+_JSW)i2Nf
zrY4h0r3(SDFWe=!HG?5>yLN
zfXFrM_##d0nbM0Hj^P-yD>1_MPu(H4-yb^;j!>Jx;82LclqhCRq{P8NBi|W49&|hA
zDILB%Q}|;u;kkmCUOQKf#yk%81!qNv5G_W5aYW{=s!Y(Z4b;3Q8qob
z9Aoh)P{@>-H%+H`l`E1@^EgQ9R1F`4MDztn=pH0~2ZVdM8)e^AbTH^P5oAyzGnFz(
zllNeK-cZ_mr2R67jVi`$MJm2ZL5-)FG!=uRHU_eMY!H-6+cS9+UO^5>rgZjmv?(#F
zHXl^~J;eTaN~AK4<{RQok^J8%o_J6+LmxQe=(v%@R$vusoXqxp4970XRLBsk
zD^*m#(JDfd`q{A$-ZxAkGUeFOWt0a8NA_bX}@PG_PTreZ}n$8IW
zw?_r$03!xAfR37KNIpILRe3qvPIsekZB5do;QEg-7Np{<3-(r^3c-MBl@J9&;Jpla
z`O&nF187x=y#W71{2l&AaSQ=V(rHLM49-PxX#!_psNwvq6!98TBQ9S{4*YMtzSi(3
z!K=Ac`x#
zIYp<~Z3(emAxpC)tut>-xdBV^Cgh7f41{9^p4u2bQ0v2ub(J$0|Z$gpyS2n`7|BswP~N=NZ)I!z-(Wx)Yk
zG7;l$7e_F#V*6?6?}3aI*|$bU<`O{*DU22H5eDZPCgv>!U0Sml9aT84DyCj3!wWdW
zU3&QEG9dayx|-?xi(n>5#cv@DKw1f*4UAxYiR&s5jKy99zH1;#*;Z5I
z19aXJk%Q10h3x4JNj5Q=Vdl#|OOsJ3_|gzj&_CLMDLk=hFN#7F#|CN@OW1id3sZ?v
z#Gpm2xPwYHWH}wrT3GeqX{A$E%Mn9}sw}%v)d)Kr8eBMjLunWa#wqdav&PAfA%H#q
zlXSM&Y_rRCHvh(U0S?pfHJxq{)`(9;5e)(hY78N~*O8?7-@&7)Ob*
zUVwx))ZeLv3Fxmaa#C?<17pb4ot_&;(4G<6>R<`kF{9`QeBcp^J{wXP9?T>O5KS4C
zwB8ni6+wh9at-6z?1UZTF>qwHx7&n3mLU2J9K(ZS6HE!SDG86A&zNm2cT*x>VdXq);0+VfH1+F2c#SK}Fu8)&
zC6aHYqILOc&Z7Z0O&Kay;YA6p7h&M0hlL}?&{)&jVWUCF8f`wlV+1vh={%+nflJZs
zorHuhALY1tEyc-iVnPy#rgqUngJqbZ3z!EBBS2CX<`|z?bjDbQ%xHcAGMkb+h?t9{
zg@IHaQg9YfbW1CJfLYSgav5=^z;N)xX~vQ?wRmQVZ>zJJRFMU47;7LU*eoba
zjTF?bgg0dx#@JLC2Pq>BKGJZ%VS!66+Wg6QW0*9vd8TaJVC99(XeVs{AU-dJrOH^;
z%RD2-t_DrBw1yp_OUN*f!Kg`-2pkE3#YgZ0@Oc#^f=w!3)sJM%cna(03)7}DcDe+Q
z0q^OEQD%OWcXv66ra(H>e{-vHPUz$l1~GDYme*bqL#U+g%kpj3Cwqw-n0IL1d`vZ=
zM>5F9zIb@mEGK*PvGMI2GNAEGG;QUOITl1#VGZKxf*pu1LbV>)+Yn17u1$XahcSL*
zFrUo6Ib|L3o|>p9{zP($bq;k&1jCt?(MUpKOEvV>G2hW>b=NFmCXrL^GU3uXa_>ZE
zReHq~_DzaAFW;wAg`3~5U}qOo7(B)xk3P&8M4v5W9NhK|(Y+zZ53@)ItG9b4f)hno
z1`?6ADudZ2hBUKQ0%t35OD;5upAqM3&pvIyDChDs`ZTA7oUr*N6zLlbLc|zHhA;-B
zAwRv7lJ))J8!8)%*U%MNrG0F92FTS{kjJ!q9pbpgi4Z$k3{^Z_^M`R3uaRr#$Q9%_
zY9JQx8PIF`X24uB+1L;#1H~epPe>CX6qn#+=nqc7P_vvzrvvmQFr_Q10iB0pIItJt3RhLXfvtcq
ziR6~iFyo~hS}FLu^6$^sDpWNM*~12JxWtxvpK#}iQ0xq8hCc~y@zQ|d;gv5p>
z88reMCiDipAqkW)>WP?rJtFQEe2S!Se>QAZO4*+TUO61}LK`cCK!|@8cmoBmwW5MA
zQy3y#uL~KG_^yT^L+!mBBn!Q&Y3rW+Dlny1qq?nxIY_cSu|^gECeWR
z4B;;l7<4u3^N3m0IMAtWV5;!1#*_|vs0C8!%;*dsLm-C+jKi6k?SdtdPT7R7>Wy(u
zM=3;U-<0}mf!lSpV5ZN2XG>}LV9JF>jPQtA`OO^w2V~fI%}y$qQjJz5J?;IykdI(M
z$KpX6@%lvJgM?_U(IKR6uX?FYbIZd=P$05$Gd1uIvlhm-iKqjSeVEHr)*Ze
zqZwSzn}p)iJNPvSsCY@x%%J$jKfCjg#WW|4UMXjbP+=oCQH%pNq12Y6h*;_+mLwJ%
zWbl$rd4;Ef-*HC|ZXQk@7RE%ZP!=YIwUufJELHbMyRY}4cw?9^I6TP$po0Xua{GZl
z;`uMf&1{if=d;oBn_HA2PBu)vl8Ud*kFE1vT;Au*%!*+(O~?m22dWyZgdmQ1_BBqr
znD6Y-?7V}+M5W*%G{+a{5bq|&bsM2b;Qoi|d;mmH>Vzb469~mzy-J}?W=jo8qD0su
ztaK^TG3YqVDXb_W)*wlMVj^Mb2W|!=5cl50T?n4LkeOMn6u~2uMeK;(kwr{|KVj_%
z7d3DnGGML^%yaM~pw6(@aVjAdNLFY_oH|0oyaPfC55`DYr%1_c7ON^kbRX&^65W04
zyc6NVeSuSr)kDk>(J^Y+6AFp~Mg2_KtfLI>88KE_Zaua>%^6`DEerztpZa{82u@0(
zB36w8=|~71eF;lpFP><3lVKKUwz#)_{L^AW0HF
z(qF?w$??3Wz>-SC1iL4NvQ31b%_3}Em_YLGr2<<>eEQ#$g`exd6ipw%FKx&g>y^ft^M?xb>%SflFYl78PrnLMDlX
zML6;7v&2gqRtH4ZwnI$DymG|C4?MtQ9@7>_vHe93>(~X3m2JDk9%ezx)>8*DW+i)=
zh*ml$(M|~Cj3gYmXSj}Pr#Dx`mTGsTMyfpcpks!gyfAHO*qNXQQ4BRiigVY}4G2t}
z&YL%*sZT)WR8rc^>@s8LkE+Yh{~#*}#ibv()}Xk`oYv*2%Qn
zzN{B}_F2j>k(69}ipLcm_9zgz%dWS)ZS7DdKd%f9haOZCM7U9x4|Ksk<(1F%;oynl
z-1nn34z?8TS8JeY`}>BALY>V0K3bzE*Kg#$VW_=Rkhs{sKG=2!1RVbah9B-+@=$xt
z8a*vZeW)orwifKve!O>GXUjm+H(FdyHE?N7IpMJ}<%d#=C=sz6r(Wxw?VykESGQrOZm~aqy1LE3
zLG!%e%jv?`tcJ3D0nS+%z$D)_6RNm?Vhz(}q6DI70^Lq|N(y#|0@IL=SGwp=Q3cuV|xPrY~&lur?As_uR^6T_y${cC|
zj+vc~Qz4*fLF6+d6FQ_K7!p;=?qq3cKfpUDm<+}XcGwh+Ojb*gkPC+x!&c<@HFQgo
z1*;HzgC;fui{1_?^@E+U00693YQ3_`4B;n1oO7Vpahr#Q5^h?Lc`4HKa7O
zRWyvEh_z%>BCEC}@2!Y;W9dqSPAKqS%8~)iyRtNz`^p(HNop&sx1CWLd{z_BK1-vk
z*6aXiVt5weu7AP5CI){Dm9g!_v(FN)HTj3Et+1wQJT3KaqXZqaMWC)VaM?hlAS?ioO9NrG2>6M)P-3;htdMb7Dg7(u0ujTu8Nt3_tZ{<`a20~Y
z(H>(bR9^ki|EFv(k3xucw9%7NAz+AZv0n+c9qa>%w63VML*X}I*u4M&iJGIV5ckW!
z@E0P+(4-KhO{6%+6rv(gTZoW0X2$Booo}ra9CHb(I<}exDAN@Gnx1sNbVP8llVR-;S%1d@P1wlU=J
zuV)ScqIsGoOjYz)v0E{OKd3lDcDM(9#m|AVE3*1sZ2ZNTYW(%D-`dWX!fH|AnnEW)
zN@qsmxj$|LCm|a|49C+Wlv3itJ1k+*Si*3r;+I4jsL{c4!W&R>U_YO7pb0-?+O^BE
z?t(o?Rz^1s{K?6rp%WWQ@&GK4&2g1_m?9+P^>}o?Bta0o1qU
zRK)5wY3+_D_w{hvPVVxUQ3Tvt2!BVW8M3=0}CSnhZNX2$AJUbZt8==shM63x^
zDUYPjBMBcQ+%^DyQ}bO7?70X-Z>Iq>z85m53lwM(rFrg+oo-J9MBM%
zL6nBQyoJ@3#{7e;CGOGd1d3p&9R+@G7PmwyZqH!=)(=j535+t%KB*P^bi!|jf9f(a
zhF_=9_>Nig#!Rw;B0ElP2^7cz{(;-__`?=}HQR<1`|O|1zGT2SVb1}B!vuOf#Y3Ql
z0b?Dx_bHcUS261=7Vty~w&O;8sIk&bK(Ae1KjFI*N%QYSaR>_zQ?@Ti_FQ8#F)fq`
zt`_`bup0i`kj@b!$bm7jb)Apkss!}3{nc3Ib3x3#T~-lO5eN>3hfJ|6fZ~uUu(T<2p$=j8X|7o8pzWQEZ7?;ih63ND5g7x|
z7P|$p4^j@0bUu|Kpi99U4Sp|-m*58*7GgGlu>S!NVx_p!)^!)SvHvi8V6rPPyl_z-
ze2Q~=g==mEFMp2Xhk1enxQWmv=racl3HCE#=UBlU(eL1_pMBhZdl8%X!3K!;lD#Cb
zCUC0qc4zX26gc7FM8M7iodZpdp~x389I8Py1%y`ihXDDvZgVMq3)qHMvU>*XDqtfa
z<%4>I5s%n+9MlJUjafjr(eRxjkomzpu$MSvmQb@yBs{+R!(L;=JT3n&IG^^4H5iiJ
ze%Yr7L2Jwa2u20=B))(Qn-0o_gxz!a_pGtjMG9)8Ewxhc*TtPCyj!S6>=%x)VVOFG
zj}Q(Yi~yQs)*%8NP5G?lPzTNCDR!@f?{37NCSwlv57;9F-QajJZSMtw9TX9A?2Q8p
zC0J(oQG(lmB7<#k9tR!@>v+!NBJIseBI1Z4kN`{w6b}5tryu*su&)Zo#PR&O!G=c_
zOXM+IPKEWcg0&J<$~KE_%s-5t1{|^zAx?k|fDp&ny2*pX4pSIUguea`_V)E`yUl;&
z-x}@Z;v6t&!}7}BiJBKTp7#9;)LXq0*kGQ0R)!cl
z;Z&NXa0KUv753>QO8DpPHB^HshwwP79ymqpFNq8e%t%EYbjFUDVWMB*wk*!96x6gq
zJlOhTpkq)yNjQ|EwC;H}q`?TowG+=iOP!{P`SRujccS2mDSkTLM2IZ|Rf7grGWG1U
zw7d{^q~V&CasW`;2m?YyX~Hzapr+;@F=@EXv-TdLz^@SX$#rEFx5H}AD8gkc(7U-m
zWmO$nMPK^-H_vrGo@T%CZ;b5k9pY|Nriw}O8rRFXcMtL6ns1B2;ve(6vqvDixwH3H
z7$U};=9bR1ASzc9E^mVyRsmNVru}@(al{S(K8=8C2QO4`%zmY`z}S}y0iyILqeB7e
zmdfhSKE`3B3-~6mHVXQ(#Ativr)?IVrSKWTN`wCZKg&In5Qj!w`xu^(Y%kF4t%x90
z4kd+e3Sa3$qAJ_g;k3$P5}i+mPAi;qacG4GoWe=M;utfFn1p~Pa4&spd!RjeR(q1eC9rll}f}hRzJIDNu_9i
zB;c1y!;C8(QDZu#|Ei4x{f0`D*L=GMn^Z{Z!VA22_yxZn#bIA;Lx(&M4Gi3?O@tK|
zCJD^LX?aCK$gW8?J_dKz@)b;MuVq)v8230S*gNRpL2x$zNfVjj3LL%$$DwS~RbRS~
z3=BjBe;#-}r|hW4f1&zLpj`iY4cUy}LAdm9e5G!WRE4k#4&;o~l(u71fFp)ZQ>1Tg
zyilUe6h51wDX>&=Ic1^?zN7?-Kl*qBHE2QSkdG_K-ZEW^^c1&5=mN2;5GRNX|AKp7
z5pozJl5z@bYWmjNFJWeQ12?PR!HrtC%iVT2`W8cvaHlEsxrR-t#nBE%-h&dUZ%1O{dpZDW3arT8vX`z*cVLTMX&4KE$O_K%HjLT=bkQgI2KczPcl
zjwWaIH|vU%Sa6dmJ0iB;HVzq1fyZ6gH56CiT<@#{Nvf(4ct#1Hh0wEwIPC~0C~>*h
zh+_oF)=Iv`9ZfhpCH4ngKM{+PJb$|OX*!$kzO@A%ahy!}8lh{Vl)NJ5i(`?#hr2_9
zC`u?LI1W1E$+p#`#yxEjtp=BE11VXbWDjT%3@w_o(~h4pzZCkJz#)+_;Iu
zQmjRWR|(%+#Fr;48{kiH1f9(=1t`xx9Td%WDiO+p9ccptQCvsh)Qnd;|Hk}G?X?dv
zJGSD~5M`We^R3`($5=s?unT>}h8k8xCG6#4I4rDs2lvg^bhgOy9agv=m8!t(Ah{y%
zDb{+WOi*yu11__O-$3*g%+105i|=HhlP5^*-4Dj_;EdS>9oYM1*eON3HyXY-#>P>x
zK>^PFbc|sNSoH^$9$y{JCYms1GjPa;Y*sy|92_U2XpG@uH*Mie8n}=L-u|q1G8k1h
zA`7eSikS`PTRyAzPw${+2geLIw>U6|gT(aoTTPRJjcJzB0P9^3iN=%_S{)(T4D1&H(e#*a<{pv6_b-k!Os<)qPaay#^Dyc^{>kA|X7pXS+Qwz%9Js!-;)
zDixG?r~>lZg=dS82f=e@tN3VH9E6R$R^c%X;Wl3%1YhR2Ti6vvzCBpSWw%FZeQJtF$(Tneh^qTu%x}+|C82a0F
zw%8OIEs|Sb3^~KUc|X<*r(Ltz+NEttbXvM>wbGp>v;_HIY8;8C)zamWR^;Pb
zk;H&2V$@Z1ax2l}yF!gbbik8D@K7V${AO!ccxyQ#wb4us+X|u$sLi7LaCf0<+bwK`WqUm&HV88ll$8*jE?Rvl$}$TAkl&@
z%eHOXwr$(CZQHhO+qP}n>Z8UkL6fXDx@Y|ZI
z$D8qg`S$&f!*%2ShH>~6<@ulA{6_Yo`}X>yJPeS*Ls{MpmOc3ZKE4ZfW|{1z
zm{|XS#?GQ8Z=OD-tRVnH)w|R76>vh-pB=W9!0>*DO)56FF1h$&)O{}m`}ukB&aQt-
zOL1etkeFTz|iN7Jj~Pl
z@}@}=y&vy?fW6zKY8RPjRA>w22q%_5Yjxti+;MW>E*Bz0%r*NTJ~m0^!(xdrq&*bA
zIBak+qhV=Jo0nD-2=53O@-6N+d00;#$!CnRZ*zZ%v19O;4fbL9clN^h5qx*7Yb9-Z
z`Df0mPrb4cw|Au7y|L{OcDwxK-Kk%Fgks;T_Q!i$GZe^wFy4zJt=TMQarv;}*pm6m
zGW(Jb2hHBr)`xFj>g$)WxEPl6*?YyeJa@id7DAA>J$FD5!wYz5u
znX+-sjwFcBLd4`65MJ63Qa<6?9HQ|0`$NIe&W+Vi7S&EDYY)U|b*f9^HM8Sdog8ZU
z-2(A#Me~`cTT(V7GI5Lt<6E69u6f-0c@`!hbuZ0B@T^9uPPoETR?k*zT~bno?++MP
zYd!^>ACI%HxohyOYHcs-vRW_ov;S6w?pk?l!}_Dj6>MMWx%Y!-D{h{ns`9-b?n{*aws%KG6&?%6*vK7VMwc=buNcKFkTV^##<(^+Lpsv_UGL?IMbRY+ICl8ZYN*L9~{F^yntIQOiJ+7I=tkc
zeVU|s(w{enw%)+<77wq^Zt6B<`ePuG_%~0X_4Rb?%ws&+^f3}%aJWNSzr~71QOgIpYkG9+z>>lM+LYgsd%z36z*7y`No>9=rMm;vlPE)N%n~`N7|aH(2V2XOL=^oGSfwU
zmr0F>%eFzNU^dKk!RTjjpS#pnw>sTM!}CvZcgq$%#H&_0TFw@scNaNKI=s4BQ*}Qc
z?mLXr=TKftvAvgBoKPvBviWkq*Z8#04^D;arGeEpST9^@HRs9dFW24DNpzQSmwf-Y
zuP=STCd&HveV<7Dno-PGvuoG!Ah4Yl{s;fP6VqG})9y(D=4!R5?|}h7GSX#JR$m{l
zz6P%nAFmdNS79Ho&fdE!kY!Tpl@kM(6fH=o
z;Gm5trg9Y>sbaJ5BvB@fETEgh!HRRgexB^bKI%@q_1dF2;MyCX93eB5GvniQS#X}q
zda!&%B2}8W<>cx>TE6-$k(^AfQtDh$^{%Y8s-)JwgHGeB;&(dh5S`JPXePn#J$Y1d
zdC^f&MK2A}9|gW1Ij`Y{DSa)!z_mq`njO~F;R}KkK6L7E@$PV8)!9m`4wuHor(4CX
z)AKPk!raY1k`{2U;!nHS0muLSKIHfNST=Ec1zekgr?;G)UBlM8TGnLzba*>dKNCfj
z(y(?S{!_y_X17h)R&CbwASC_%8*VsiU^{kgsumDtQe8@
z)2ERbi38ie$Cd5y)k*aefsId3%Y2Jh{EVUOxlUJ(OMlso)7j0dxlJZw&_1?-kd&)
z@OY(w`^Dj>62=w-tFvC(#06vwYBxKLsvITUyU8nz
zZtl3T$A9U(9q{eb3=^gz83T!572iAMiaE{&Ig`ge69TvZp3&*yJm2?JhwrgBi*>$Y-5s$m*aL^&;o+kS%&%)X62X?{5_dO@8;TmH9kq@F
zjDJUd^A?jpoIz?zxG~8=k^}w>o1a+DaVl(gueGw=IkIOJ+$9QsXBbiS?u&93WYA|4
z#Cw~GeUCx5uHS22Dl^kaEJ%j!y2w8!=25aJaw5I+^3~;w8U&P$tf736JZCgK>|_z@
zG5Gk|MQbVCk#Ce^DcX|!SH-pn`uVp;(W*WxZ&kvMYkBghgIVp4V9*;C~4MkN~THRG$Ew!~R
z8aH!N4@of<#$XhL8Ci4*AoQ337>gDGb`U-cM3}7y3@}yON>E5car1#>&^MjbBD$35lQq|w2cO-=NUhY+FsE~Z4*_J;i+r5rlj}^YFDs}BWbUrwB-e5m=u0($IpIj2`vS>v5L+jqY
z{Y?5P%5M|ZGwslO6%CG4)#|8*sR(^OTw$g5t;mAv-rlP<iiT&9-$%!u@SEcx`j2B1jT2QJzlUg=hAI?|(V6Q8?m1}uKj({v>H9tVlAdgp
zWx9R+_&fK{f%pd{p6aF|;YNrfRW=T(dQIv#u-)p7@I`{Fs$$TOfnP@paQ}J^Cn-Nn
zN4Y`c2`+P+*k2N!I!{@H17sw1*WnVG9^z!s*vS#O@2W58F`}h-y{i@w0oSLJcz^;>(=|fF-(4o
zTxY1oBSwk4$(Jj2x=p~;KJ<8UKRjKje;UvMotusqC*}`yBC;@V{&?oaXoWZA%XK2s
z$c#2#VB@!^m|}~mQfUMN-i|Co!Cyjuy(9iwvk{k7@>i{JvP3_DtVOC0R%!jy;D)6}
z@}!=>jv$0JkZ%4n%Lw=i!#goiiL&T}3SJC{4Jfz-T{4sw^4MZbF$@6&w%g^r(+qrsxaeBOCM}vOJ
zeEbBF0`G`w(6>HcyP6h=BZ4>}A?XrF+YO?^WpKdNQitim9ONu!Zk)QP;L}%OkUzZC
zoQ!hPe}e-==N;~{n4b{uEUnVrpA^OLPlZQg&VbzQ9o0~Azyo%{luL4XrKF(xUBpSB
zUt4l{p_W6_^dt6ay#F%htgix{4HQ%>Dgj;0K159)E)?{SBY*GV;;L!-;`{CgLJfC3
z6}qANAIyI;(2J4MO}-ZAWf#B
z_xSlHa4B*EU_ChS`qJ>A0zbgQ=bb!+xo*}LYoC$>lcX1+9kD-(N^S5}sXl1_{${>H
z?aHgE05gg!L5I-L7h8+bpy_jIB!7%)Rv|fi+Gz>}7?U)|N?#cF%5{;_`y>^%_*b0$
z;6@)n
z+AN%a(XcZHCKyoblFQ<{1;p-}H~#}*CvRFjt!f8%z$icNky}gB!`&LFCTIxn)H}y5
z=_xLN!573R-JofmVM`7S)NAC{<=n>G^991!-3_Y*&@t*@dnr%!Yw|KK5CAW-DuDsq
z{TGYR_9&Se#wwYixFagQ+T(-pO1)Jp;5)9lP`d&g*QLx;6O{0N<`_r;aR^k3
zEnm<=cp?fL3I1@mnW$gqs~T4O6n(SZM>CA$d|MQep8J?6|1&8rm~7lq2higsuqQ?1
z8#qNA1cn=4o$dut9b6(M?K1|MXe|5Vg(z6=tfwMPfC~(!u9+$_7DzT;6w!hmRUcA-
zhC8H7?N?V1F4{zI5OBVrmyRXTII)-aOE`lc^vJX2n@Zn=nCGT+g0|h6bPNaxHw*E0
z0t#^L0JGqWh)=o`C`$!ofHV~lBGY{u0wSl$IZU|$U?ca9A(@*mrwH_qc$Zscu
zxSaQ>K}LrjS|+XbAfv1$jWqao7z3a(EAR_&!n+r2sy-j40;Y~@8c1^LJWH~Qx-gIe+Ec%9=xs3|3FD=85tQ0_%8j-S)-H@^4>IQ}#|*^WOFXBsq@;i0a1T$9
zz;o0WgTf&bBtSRnQCvYx
zPCgJ^W-11ulUXCzq-DxRH1*Sq5odA)fbj%SHmtm~-n_gEFLc5@^WaJaW>QPxQ*RtP
zfFPR|OeZ~|R-pUrUhW^P!;Djbi@2avo1hVce-byqEaeo|1xLVp^`GHE0;(Opbel>-OggyEZ8-6ukzK9xa
z-*oP2h3*XeYO*%j8;ZMjOZ*NWp!X=ri7t&A_-v+#J2e36RUIat@v{Lw;u9Ua4P+FL
z5r+r1Y%_?-&C9#Hs*Ri`RHb;Y3CI;<%wSj;1UVva8!|7VPn#P$z`1^nx|h}B64(Zm
z32UQafH+6hnq#F2UUdM`z=jT*z>L5iRQchk$7#<&Ldy9epf7Pm?YyTsQ5}=t%Uc&X
zWUJj}Q>}N0^x-wS1!882C~}|YX#D{aZ~Y7*!|6Xp{TuwRevi@13(p3>5gs0|M4691
zijZe=cv-OAC^!!jsM51EgbNYw;#z#5{WZf6u{p&-oL@&grNTiRxDqU34Ff7(QPbuT
zMenH}WrjWVMdzuQV%+oc}K6g9*1OXroqM6t@9Snhm31lNb>=1;Z|e|8&|;3DmzMHB820?dH(zwDddPYtF|c08YQr+UGsFx0x%1u$?3&P0+xNBRr-&pM`yW&gxHXT5vwe-WFnWv>tu!nBD&Piff
zl_0bfD9$-GZ<=dOkjbImfci~hIn?dW&ezV;*UrkHT#z6L%qhu%m9lNP;2b7SoF-m$
zT`1vi3KVj1G%((f%DMn%g#CdIP(VenD!a_%7xgIlGGjF0>IuBl2x7QZQO+}Drmkv8
zAZ3rmHF$P}62~ytv$r+|?5hOv5ivVD#C`1TE%U}$xdS7bx3f#;ciQ&q#GqWjUh#;G
z1-D8ejcoz}0wJvm_yi7IuBBt$RAg<{i(Cst9-Z0{Aq`k;=Xs*r&g)Fv|HQdebnWXq
z{ez~{MWO-f%Axu@)jQ*kQ}c%15guh+@s>jcm(?N`<(=jZuFT-BU9m;bWx{P
zJ0RF!okBTTd(n^{LblxPegAu#9WVRjB**3r9rt1B9Y8jVSwJv*ec{+Aj|jz;Z+p4
zJk1vLjyUy;Is2$ux_M=kuOl&`NUw5TNn7J#FwInhdK!2&&7v>b?xv?&A~8Vx5!K)}*6Q-?
zhl)#YZte-yAn)!Vc>acZ=pXptib(;_k&sMKCnT6N!X?BLqeML+vISLEN}@(qnnQLR
zb)uR;hRW>F4Dd(6myv5l#+B0%x^3#dZj?JI1?{a-X^9_Hb$VGlsS<4vL0j;
zr7Q=sRUw0cQV2RwVc<4~`WNDteyAMikYALf&}qnCUQYnr(8z<4C
z5YnJ(ox~25h{xd904|~?G%(s%wwxXba!5tP_CIcd!HJCUR;#{~8WGqD&oc*wEZisg
z;}n_;v`c2B0a>!MLA{5Z{n(F`v|JK_OyaXjm705$X!(nfqd5o;Pz>q3#9o8&UN}f%
zmYxehD7wlARs)9&WJelsM{Drhk_Tl*aG>p~(LOK&7{YoEH%F%qQ!P?mv{g!t8U>Iv
z2{|*zwkSQ-taC(Ec#?R#s&IG@@oh+h0y^iXEHF83a?PC8RC=#s$&;6P;
z$61s_(YhX#J`Vk!GatbAF8{XydcyGd-5scyLaxR@-B|ln#4M_j#0A$a}*S
zz$E>P4+4;`jepn9-+$xx*!>ovi$lPn;(6coi{E7r7VM87{nfwQ-M$@II5L6T!5<(h
z5IJlDe2yBYMTu2Rv)&qi7Klg!G-E-@1gXr^Vw0Q)pa?u5F%Y9wK>)Ed&xvU*8o8mB
zMtI}SyL|vDRgBQx*snZ}dxiD`36>%slwT6!5Ab>RUobt~-+|l^e?u4^RsY1);C)p@
zb5kJ=xQaPTzrfUjMthDEK!PmbmDiftzVjW!;46;Z0|FuH;63(+aa@(&hY0ng)H
zz(HjRM?h+^U~laA5<37b-&bA@SL}3J%2eANM>y}YQ<)<4=;d;W&1@k0eajs{BusCM
zh%6w*PXTK%GVG`k%LT?0+704&Jj+(kgkiavDR>1X&IFpoacgG+Ig~fz_<`qs0mr
zC{ZH10$XyekD?H;P#To1%3}$5u{4cpJ32IsH2UKe4Hgwt2as6Q9)~d0DR0h^IRKi1
zA86lxR1B@{FciPM>am=*hpqd|pQ(_FdUSUj{I4WPHv
ziI07G;a=uHbD}u*w35s2IRivTy!(BT`rW1^
zyq~!waP3k3ghmihc85jxqH@4#S;!iJ$+g^EgDFB0CO=i-#t{2RuN5q;NU8vzxr0!a
zqCu-ykn0R06&sEIwP)knawO3~jrya*@D-PFZA!px&BMF6Fg1>AZ)=D(yt6bx7~}+F
z@?i>A-%&tkq0Q{{6;$+X>DRoqYs_jEQ6LjWmK-1k(pEB1gzsTsIL@RpFdNb&^hm|b
z?Jyc8ipbJ1yzTAbWOjkQ9jKU7h$(S)yeuZ)+FWM(-C=n4A84;DR!m19SQ8UnH}~Fj
zU1mz};W`YtzwJ*EkWwhJ%vZ)ERU)6!hdrxqh=AWKApMkoAqp?o>j1&)ar8D+0aXR-
zDIx^?^2rB&+5&bL%Q&)X0m}k;BzLlD42KDwXkRr$(B!zod#Rp!
z5F(i7fyXKwY=`qWPN14dV2RtsRF7*FMd({QvQp)|K^fEt1EOocHqTf0IiVUOZ@)P6
z^iZNK1N&xWYq8YPXF0#aR)O~FRdfohD;;H(O*YT&BxBT|)VN!?OLsTiU~8O20eQKw
zBBeDQ-}`Ze-%R)dZWks%eCmn>qu!
zbYeF__XxY!;WLdB3pY}Mjqvm#oaS7SFj=3XqYnUhYlOrZb(TpF&W`x
zlT2CAVMgYP-+7!vAh{*IZc%xY*)^kQqd#a2QL<=
z)y<$R49gS`cj77rwc;2Si
zFdQSK(&2=
z7D5AXtYv5oF15_CyR;j|K&q@rL)gP_ro^egoSm8otCU>Qw}*d^x@vE$mJZC|zVzgg
zsXARVN*Tr|go!S0V&hf~EPbU>HAfun9e#*_EpACC-X?V3!2ip|!NE0Bqe#M}(9!U+
zL0Iyv-`FXGx&#yNDcpDfs4Z4yyjBzp;NW@I=)5{p6fvsG_tk21?LmEg|D$!1BeLh<
zmvy8#D3jo*D5*e#&%ZaNq@&t}8*-JKMjLWhC3;~_l&i#A-zQ)XqU7n1xKQ}f&1!IgjE@ch6H>32iCJ9Q3
zuu7=14oy9W+|(%zfU%#a4j{Pr5R(*8jdxWb&ylU(%0a+&wLF1tz&Dm9w
zbg%?y*<^$?A7@p&!P7#2t9Vs=HKkdBJT>XS4Qi0dHRR^9E!!?esLzlZ0qRkG
zZj1A2lazCp3o!|P*i>n1GL__Zil&9rN2Hsk#T>7R~LaDa3*qG$A%Yo<>J)daOsAB131&W
zVAMi1a+Ic|&52Xl31!BQ@Fd}v6r?5hu$p47c*P;{kjn%O`wX2zsY<
zu@+-0(h7*Cm3C4VlSgl0&=57=xj${-V%{$>KJ9v(woQ@@+ceLoflrWP+Zs@|hUgO?
zV)>gjNmluqXYDBG+Wl`6j9JfX5w~qY%}`fAg)~v{x~$jW7;5UT7X^1BiY=zqvFKVh
zxYh28YpJj1bRuo+ws#zg(^04-LDQq^nw|uK{gf^KS_C{qbNH9Ag8Xf6Pfw9QB9AC@
z@ol;YM9Pv)WCbxUscAzlwSD^&e#?({1K#`;0D)+HzRizi)6#-mY8Vv0wSDca$|v4y
z&y-o@$9{S|)u1-RJzY(eziDG-OUDi-SPvi2lE=l+bizQG=yeITY4ysz=w(_0-yX0*y->
zni8ig^Ek6lms5kD9%VL~WVEVB;vr?hMzIq9T;~sM_5DR@{}u(8Bxw<|6QFjg#?CiF
zoyHYt@4pn5&yNbq6%HYdsQ>ySLGt3>F8xE=+R
z+~)(ZpKoaiM^i&f2lVuiWIITLd#o<~I$owIkCYSrLE5hbMxJO~b+<$n5ZNZeiYuSk
zG&mtWdT`W{5GtuDPo^+eui{|y_YyP+0|>|mg54&F?L>l4+HMFp?54IJcScFcHn*4!
z#Oc?NT}YU{u6A{_@l(Kn@3s&$Sb+tu%U0z$OdOp*1vM->tA2zPr{Q>1+X-WUpWFJrS>x%?cpUm|>
zTbta5MYUsM*J_(YTuIX)OKtqA6u!utRH^15p32$O9(9}Z2?X%_Ti^6Z+DhnmgQFjn
z9Ow;v&UAVed^K`zTh-)8wE;PmLs8tx9_}HvGA7+$ITXlxs}Nu{%Ff=Te6ia4r7G!C
zE-l0xV4!<0Hk!{I4CnC;gHXGfqdM`ld>bP9Tv)<>M^(tUynzK$+rPV@SI8xS!holG
zbLUk#t2#OySi~GTY1N`y8GT=S6qJi4z_o=aBtpTJ@zEs-{KtxUrP3deI};JbF--Z(
z_^=Zh==4=SIq>Kb+a##@kifoYvj734&P=6KP8n`M7?At{`P1}c4suh5gO!X@nd8za
zx)NLB8fLRQQ45PXAQgC2XHh((bjvvpKQ@G7!JtxxD-mw`KygPCQX2wU%bfI5j1DhC
z2%!-y6Hl6PhVnQ^16rH+HL+Wl-j0bQwo4fiYY)pb#J*3{o-iySziZWQqVV?2;V{h#
zX+0BYVB3|Rm~B^}Es83)Z5G~Qrr#ER6+b
zvK{PHHnMCx<$pON;OS?yc&~;LQV9}Py;sjI#?HaU$0}=#
zY-1v*e16jvp_0g`3ZygTn86@exnd)1@>c4qcjYqW2$l&<5Dlz0Mht~M_0k{%@gX9O
zSw0bm*ZAxuJa-5Uyz0#GR;Il-L2414VPcnYDkQDy;<6mEQuC8McasctCZ8!#oxw2n
z=f3b6KU##a^-Li!`6wGM2?xM)U3yD#iD4ax#wE=r6dRzX4aL}`FmkxH%Ze1Q_uMHC
zwzSi=;q^^8&^gT(q(in0L_^}GNpq+hjw*72vM|Zg@ElsjaqKw65mN*jX!H#%NU085
z^$m!rA)&Qc1rflR=gc~+eB1Fs-!tA)qwX0}9Mn>AI7S0u@lP9Kdvegw{DpUlEQi}?
zX5sWp9FXcigpmkybea@Dbbm7U$ZYiN62LuL?_f$c!RQ;%rSOoy
zX4G%GXvp4O5un@NhmZ1Gng;`R`BW^*&_mnZ+NAu-lpcc$qhBEQVus~OBg>#n
zL}rJ3rK!HcJXty!Y$c~h3D%NDjP%%SFuYNv`!|!NZunJ*}9N$mlTc=-B-P51f9walZA3-{3rS3!JXU#AifaN8;T;*a?y7j5VIW
z0D3bhMiIZcJ|!K42@X{0Gr+0kIs;r(8~>xJl({xTkL~MR1ed%tAlu~2;?SDwSuqo&
zI#EM{i4;r&&t;W2BhuS&XJF}L*{N5ou}{=#rc#~&9uiD|TY86~40Av(k8o#vu!C~M
zK3dB{T2}plB+^Fyb8EDPLKUS3t*H$c8g?0dCsMCn3(dsExTky`dBxWORVSV|4od9I
zdoyWzRI9e2<}wmfKRh(1q|Br
zIR3*;;u`-Z{bhvTNz$M%)vYTnO-8J08Z0$zi3^F8uQyVFWk73<9hFPnpa5h%6I1F4
zz&=?3&O<0%MG#(biti+XqDd@){@4xeaW*eL-0NJ19d1tN9wDU;qTTky#IC|%Q$&RL
znmT)P+pk}a#v>UdQWAYpBks_gjyQy3#JWYrIkc5*d)pXLVl;A=
z@(^ZvRhv;a8sJ|t#e_q3y}gBGXyX6qF_4DSM=xHdIqiVNL~qEP}If0i&ScA7Bgm$iKCNfwnJsVDOC;}Jq>CX)T$z14)h~e
z+<)?A$Smp>6Ds0I7jU4t;IAA8%AytoA(aLH4#D{MA&ff1XcTR)7Mgp*S~k3)xYc7{
z?`lCtqUEa?jdcie9KLYm0ozhF`B_aFoD;H$tz)LoV994IKAgTMnzO>lv
z&`My+iV+O=lg#_al1SvYD0Ou*Hvz!iY$Vsjl#nJt@Ow6wAf&{9hj=!C;Y~|cRo+BU
z(E?J|0B}`6>eMqwIjuHFElA}S;(}M%e&GS3qKqVJ#JNm7xc`fe5D^W`=THY(*T%Ta
z6wO9JmXcy`kA1-W=qh*^ce7lUkv0hN66^W8hJbuMrBEXm61E2*Byr)%bO8|X1Tb>?
zeD$cm@{t^l6V-UdCqH0540-&G@%!h<6Zov94_ded$W*+$mF?&kxdu~3m~*9?r#CJ5
z(+*VRmY0zj#~wr!x@Ri*K>$5u8bqf>@u*clt2h8KDM$||jyl%8L%DvP8$vaO0cMDk
zlr9wizL(rRjsaanPNz4*E$I???HB)B#GMO?sIYKkU*9c;JcI$j3%9akh&%5Ch2(aY
z4!Hf925=!E!o7{Dnij7qUD?HumZJx&NI0l^Cz=&7iS7lz?8^CQvwp=HuK?BiWczj7Aue)u?p>^?F)4bL+Jk{caM6U`
zCMg?=vMUGCP5FZ6o64X{7!y*7vjrcWBmr_BDT>I0-0;q2cpEa*-v_EgXe_}8Q0E3$
z^ERl8^NDm_`W<6%HwStf$fZj3Zg5-I67+D)I`)_Z^sJk-0rjhmidFm^1(*ZCbR3JV
zuyeSZsq13?-g%jqlELGw5y2}o-6-;obOh6Q4mZ;oMiPaYpY-klr_s|sMg_HCuQ2tk
z55W=|ktI+UY1?WLoO=to-M;FH3|t{|A(b>*6mXU$jYIg1T-=4&=;HiBCSaUAIRPXt
zKD(e`1?s(HMxgP_sv3VlLMp+!
zSFGVw)0(!?CKGK#hv`}i5fOHP{BwktTnZPpB%2AOTmm2nhn5WDP-BI}s9c
zX<^~e*@c*ZVvGios%zQ9>O;C&z~}`umalM8J!+I{M$45M
zhnIV=_H&nQXtMy6nt=4@r)?R-f%1b|yTfEWD4e9$0!Rb^OAT8RhBK_+lC
zE~4jN5)W~{Fs_?A#CrrYv%@r1gfhrbX?Kd>Zl>3}j=4ydqf+rys633(cGWNr^iHlA
zs-81_T}M&bW5M`6MZ0Gs2v+id-rgJPg-;kQrU+ZJya_LQlMI~}*z>&ZJgNo5XoN0C
zEsiC7MFn6yJU{5`K4S3{U`7hYAntUb4b`}{Ni^l~7nHl;r&b4e}x}s0OH_&kpKgrm<39u6ZU%D
zjENx%rVG;zpbi`@uN@u9ZBIb2-0oM<>Xjmap7hUwOZcKv1hK3~ak)>WV^2wx{
zV}zE@7Ua>YAie>E>1aSah^0ZyhY)B^X@k@T(>^To1~(Df(_=lJlZtxC8}x8%J5=QR
za5-ouJo-U&@I({l9+K@IqKdDxOPNe#us^x3aWj0~)z`M4NZWuU)pdr{qX}z3k@o@8
zDM^vik3dJ&Z03WuohUot~xG0cZT?fS7*`1kK|MdP5j&KoSQ_gCkie8kk(7@)<)ws?!t>*KZ>}RC-x`0HC){h&&WPC4BTlVv|#X
zjJ`{CWaRB_0sJ-F{Z?~QqVX+hp{zARb_!tHXa#F+iF!y8a#xUiNE&MhU={S!f)rBu
zz|-^Umosq#f}L1o!*o>&5x8+1^#m^^il{L`be1agv1NNoz27xWeHls{0@+ejbE4Yc
zwvw*4l5^++0nGUTH*!S;mcVE5n9J85HJvt#YsLp!Yh9V-!<3=h0Y}V81TK!Gk{S=T
zkmm)dXVy-u%ULR`A_A^h(Ih|Z(
z%;#6l!wPjg^0{+y_V?gqYg?E{_o)gsDEiO>nXKw0moey5RvsiGQ5~j4-x*cG&9+xj
z&!!_-+dV2|INFov8O0lfCb3J)EYQo`zh(8g8yVT}rLbxU(a#3GX|L$Pwnw(|jmamY2MfW&buNq(D
zfXy{dzyN@x!6+#2F)B!QUW;_h#zGE&?I&qD7hRXfGY4(tOg
zLPby)U?7YMz)dOMMHna&dEqB0lZAD_Sg7j6TQ(G|KV}r$FIgF5y5o&Wd;7-w=0`>-7;t5x
z^soy{h~}xKvYc~A#z{#biv_+#B;QY!GP|=;VnDtT-8C_Lvug&1$W%t)VkbjUl^0>5
zRHgYbOOzMz>Kc02P#`50EUw1<{0;VtD8&N87nk%oJZ=2*{j}2OSaF(wWflKUR*bYq
zjMV$FTENi0@-*5M7UpQ-e^}ztA-~qrv;g}N3>^;`87BznTuJr87t6^YO%fUngy9-#J5|te{TNr}a`UENlLNA4}q5+yGJbGjp$z4YZ
zqpYPoXhm>q%t}8T41_Ry!<&Em45U!Ri=g<7M0R6)R2L!*A<=9_1fmgqBEvqt3!eXT
zzzwxXeGCzW7pOTe|CmdkHgF2a2Yot)86_i>NtZNL;ig~cFbpdOsXC9YY7$J@mn%+V
z+Cos=J#Qf)u31#rH)vkM&=-ZukyMZXSsK)=CQxB^YC<$+rk3&^lIIcmq6G8$Oj!Yn
zD>kqO%TB@ie5un~v^EKe87cqlG7`Nka3ODeN<&i|U7w?Lh>*$}4dLq^QEeAwOA<2f
zEZ5A82L}SX5R#uGhKGm?V%|i&*u~<5BUVPo>%iQE{7{)A@;usPf`xJ_8iuIj0sfvKn*4{xGKHPlKw#2PYKWK_+>5Yj
zEMGQZ5he$GMd%JD5Ov#{VrKxks+8|7D$<_Y3I()C`1XLV*QSWC8q}n*va4B90^L8M
zkbWjj@9_a+k4Z5+7F+0yVcdEm@_|UIZ@J6`ObQkiEXCTGhq3zjZqF7P1C?Ma>e}k2
zK;EMgGH?5P5@=2&V-&M}^XFE#PZVKJPdYVdxS8(ihvY~k_Ey@l2<44$Y!p^Ca_*&t
zT?r0FoFrR25m9qoW9S!uVzh|JcT_WD94vE-2X@9fBNZyX0^L^Rxd{TJ=Ek@`Jzy@L
zU74!N*yAVE5|Qv6Tr&DROO8g<$Ctl}l2;uzw2|j7Q*323Dk5cq7}49*Wj?^cTP=N3
z6Ylq?LGmF3AtO|cHrd<|Xc;~y&RKmm;+pCN202y?9s1(T6|3`ilK9sV?U1_Ph9*24*Wq%L2A_klEo$ay|k
zGxkp@-j-f(7=v@&Qge*M@ECu&F*(j=aPZ0q%T?#|Y=j-KW~7V9BGhYFyo))#q2McB
zpTicAZvb(z4;ABs+R3GpJ)gT<1{D*4Fu=Fn-ueoG+iZjlFg=Y!_
zwMR{!JC0Fa{WyfdMVuPR4Svt4q26U#8>bKL&CO7bxP8mSJ+2+@>6J+VF`g&OL~E|nLhFWXT*5pKg=ZAx!qMp
zbj)2Z<8?U_?kd1bPFuQ+q%}fFn72ETzJx=%KR5J|!>tRPjI-UK!z*wA)+s^;QTVIC
zI7hYv4Oljdo+?hw6(zNY42^)4$Y(M!58Qj)PqZ^|CO`^0GMcd2XNd+!fw)7Y7GMq!
zY<&P^%j|Wuo{(vPCyN9@47WSS{M3JKg1#6L$v~M;csg*lAgN0b;mJ~79!m(=J2Qz=
z%5NZ@g5vLY4Mq
z7r7yl2GFBN880m*5ZWy)A_cOAGS4kR%zHfElsD6zjso
zIQz-=e)&YiEE^R?Z7}t)D2Dv
zLpWm{T*-n3BJo~wK|TKSDYpuJq4<73dI75ZXLr?|ifPcyLF$S4Q3+W}3>!pZYBx
;&^Xo!6DH{^
zTdn!!zMvmul4q=fsRqeM`j9fyCn8-0F_(rSr?{lfsMdXx0-nAgymfxm9a41-
zgu?fvFCtkA=+rhOeFK8NlCUQOAun|20dyrOgn&)$b8d}&C}8H#q=WfBhj|uD@0Sd8
zul;jo-K5hcBmDfeXLT&Pn(n`?fUXaf7&ROLq4dL`8tD#tJ=OFnuvOpnxfkr(wGPEj
zWSIES1szjER*-*Wy#8HLdZ>?H+H!QIpnA`7Uwe3L^nPFxHnE`y-y4;>9}qFYo`0cd
zwEGHQGG^o4w=$xXtVr85J_&K11@9y3W+HdCULgT85F!u7G$UIAa+Y71R}4mHR^BUO
zRk$UvC|8^lN_1x3V|Al-cD%Z!6G%rkOGuc6##Lvu!YU$Yn>k?xHgc7xX>BOfJ*laO
zMe=}DIZBy*Di?_+*C^h~pwrC%Q?$o&9-CJkk?JIB*@dVCOAFY96u8mBfxIPs$6}
zfosEtDsU9?C+nr9Ggqc&IFNp!7!ZGZAs}Rk7|w-&V~8S7*d48fw;-ftp1;P7Vm@Kr
z@^%PNO972?Wtd6^iec=9_A1c1sbaC9lR)p)k|fHjuGFWk(t2kKR&yF#s{%2c4>6skKwc0)6Z`h^HzzN3w0o3$<+b{EbOPx(UCB}%&~RnbJ5
zl#167+$M%xIflgFj9i!)=Qk9J739SOnx-n8!h;l9nWYwA5~OaqVdRdpE(o7tw>eXB
zW;RTTy>lH}p?3}}`<+Z$Y_qnJ(U?ESfu@_S?dsAC>kn`OU{lKKiG3n6%$`3Cg=_ac
zd-nb_Wx*D4(Ol6DKr;My^58c|;xafSOj!k?1L*0tEI$T)ORDNnpO`@nO8snzEoH$tIId4|ZZUR8@;aBIrYt%=*``{LIFV9!NuMTk!VJ{
z;UDKqH2nl<5@?Ck)=+B}!h?ALnyi7&b3f8=AnSjcEQ=OxfiF=3x^2N{zXsx{gN)?A
z@WB=xL%G~L_pJiy7sn2e)|G;8p|Nd}eWCCmU3MAXDz?BfTao^UvU3W~tP8jG7u!k4
zw(X>2+crD4lP|VyJLy;*+qRvKZJ+)x&fTt4XJ5=(sC7H%s5R;x&uH_CQZ8-*kBGJ)
z7eBX$-HojAaVTbloHMf}oWAr8e?PAK3L@N6po7p^pTb|{YFaz3rS~2J`}+(uyykd$
zbJ%?rerG+oB&Z|ddD+u@J>ms^GWhp&K%u3ILiv5`y#kV)ube
zki32r-StdggyTul3=qMrNN9Zz3p%AHS`FtfYCozgB0DC;&A^VC$K)7p-ixWkm(i%X
zmFQL@ZN3x**g^A%W#Y$bM>ZguvKh0+15WVPC?@DJ43tJr-VnGn%l(cg+=I5jUhmk{
zpeDDFr7)dksqVXvL!}7A?a_FoLsDs%b|;Bb8FfuRosiW&J?dbDu|{Db8`f|}*&PF?
zDzo+fCV6QX~|`S3U0Y|X9a0Z2Czv4K2YyvsFMmM
zGv>v`HJyl7mx870?WLdsE823+1D~tS-}|V7!_Y(~Q%hRDV)ZaF9}aY(Z<7*Wj_IL6
z?+diZ0&G^24q>Y;?I7wCM`NPEGcEjEwJHYGpcwQ|Q{kGq0jOV8vPJu7*-zPj$vTpv
zGdX8aN`Aw>^N-TCidtFhN+fA7@RZ^w0WaL(mga~2n!BqckMI|Y0>z?s|TLCgN-a?SY@uf
zC5+X-^Z|zLV1^{QX{K;PB@xXx+Di`BWkiC7;4#bGJv_f*%)N}o
zIKMnmY6}C29ZDPZ3ZkYYHi4)G%!T64Q~J)_S5+R%fpGFDF`4mhz7D0kLD1%DF
zLR=+H86ZZw;Q(z737wtc-tS)FUXUaSP2;p34w>sXk}jgU0#OpYvcevD;7Y0MUu25VN_o@i^_8R#We|-A($kGnt_3m|leBG*R9Cu@=ItYVuHb&#
zIrfPjYxGBEVxup5-mNMlw42QF4aiVN+G=OhI9#fvMt;l8Zi_&ak<9Mm=>cI{R;4A{81xVV99-?ugTWPczfK=uI~rr^?@hGTGFuB33CY(X^{r#jTwyjD}MG-
z5jj6~NENCl{frlRs6JhZoB7-#GlId3iP0O!75ozEFPe4Y)I3p<(S{l*fP;#1fffHc
zoDcSSpd7NvOm-|qi?68_67&yv?+lpwsYhG$IghSsO$zqNw_gN8@k$Do#1xXmbM-lx
zbrojs%M(^^cW6-`Lm>qq^0mp{y}v`W^fU0im%(NcJytiemM5(T&*`hxWA}X`b^M(`
zU-$=i668xTd#yB}%n0lbFwFbRn%INXE^rRpj#>tsla
z`hEUVk>-HZy-}5kp5Mo|8@_KdcKLF76&Y5QH*2FlT&KP3L*lp2$yaO*N4`X$*Pe@CzJB70Jbk#(DPs
z7oHXAbT~gE;wGS4akV%iD4z%0hAZ2T&J^SGxZu{^{w`(d`W2?0<^e*^TNxvK5t;1r
zt{(CU{ajmMV~G)YK@eQM8>xNA%(UU-V<%sU7|y@^_s19dRdy~3sZI}0S4hYcsikl@iV$1F}G4?qW=AaZ_24ciF&o%?e2U`-{-k{hMR^VrfHhz&28bWiF1mp*@
z;zMxPNoT575<~idgstca)E-<`h0oy3LtNZN212@c;X^se!ykSW#tCxYb+6V29KraT
zZBXVvPFxY3UjSbXd{Ml31umX;5aN$?2|K-?k%E(YJKQ@Y^y|JuI9~#1KOiQblq0yQ
z^Cf)KTaD(dNyR$&*P|(y&B3em&KWK_woBd$)1%0K+&{VIY`kb9>^|){0NiwziB^xc
zx6MeiE8=uPGA4N9D=>>aeZ$L*Cfo^5!jV?oOyd+?pY|%Jvr7szqm~|ND-g3+{I4JO
z2{bf**RXHX7nehJ=n!70OEqt&4wzov-+OJ&dCzIGw^vFz)3szST96nX``KRG6uCzw
z|CCs@8I5o}SZ!U_j_vy6axd%Mt;U1%JqXk1Gpr#?0X?E#CmJ+6Jg@B3Mc_VeOeNIC
zV&7W#H@2lhyEbdi^-P~=x6z4Zm?h~;%a%$+3&R
zLmC&JYQ$cfOE~VY&7Izk0ozS%p6QVDW_iWpn0@RyB6Tj-n8Jd0L+p(4W^!%&GAfQ6
z(cWRDKspNpsne$xxc&)Hfr
zp+!@vM)kXQAAg1>`l_d(y301Ho=)@g{TK%d9iSGMD-K6O}-cC*vV@FEFB@
ze3414?hm@*eYLSYeO-o@;XQreR4X*cOlB{IZiP?z-U7xXBnHbSX}d}OPRK4E_+cBw
zf&yAO&Cey=Krt|OJ$4mQn4k1kZ3$G&otirEy{M?hiYV#Ga$l%HIQ6x^Un&3W{_RnZ
zOBczwT4{q!+lS#N{=z`mx4!!EulKFZ>*fr_CX#?QG^h{ZuE2v04{Puj{|bxerl^sril(+Ip(IY
zXie4b>|&#kU7=_qr=<6@3{rZ}OpUXst6Qgan7U08rkitJp-o9DzT9GnESJdu{TSby
z8aKu%xgb244DjTX})Fn_>3x1AJgu@C7VS#|}~uzHNr
z0U^D8ypesMzxTqi&O08OH8w#TM|ADQQ9MY~h5@a;JP;TEfH_6Zpc$~_cuc*)kM4p!j|g9)?!
zb~a^U2%g0jgvYQvrw>gyPjRhom1Ft&YS=x?)j?};we;}v3EHyN*A{h>9kUx|Ya6{&
zW#qE0PxUO!PR7;!XOptm8(aKz0MpK{wCiuKxFE=DEFXiWEoa8%$T}Uv3eE+T+wc$E
zMw&x@FcEyEu_;8F7a)6xp7hqtgipzq=qho=@9hi5z88a`6v<@m9_PA
zA2)}0r3O@)&;7H&rC$j;I`^>;C{g^8VMTm+*CjZQI(l6jkd}k`F}=N8?e#Bayt?nb
zZpmT6=mp@awxUj26vK;UzG2>xdqH=>lpalS&2wK=!c?+pWGVjMI@u>@@)64rT|KsL^!d7+mqsrr4$D<#`HxD`ms;F#Vs1gUD^PYV
z@Fmi^^cAEA40W#*n-YCnH2tbfXYU0%EKN>u6_ib6ga2R}(4+~=e@{NaG3aNvHGB>!
zq}w`UCjP|WpAFjr*#z7An$Zo&6X@$1d)ebS-p{c0-7FoH1$^d+9sBi{p0j6~D}$Z=
z8kF@(eLA9*Lc?Cj-U&g@VSf
z18|O0j5?@q<6@KlW}ENJ
zqfHUfC4?mRgBHt*Rs}X_!=IN7%Ghr#Cs0Ug)Ke~X=vv%g)Yo#hXN!1a(8AyE4>XTU
z2PuMzLAjt=lkWK=)L?qEW7UC)7HdJmh&qWZcW;n3s~Id#ZR&R(lAWFNATUbMx#N})
zjEY0>om=D`_n}(VSDh{pvRsXK$aS>wgbjMXfT#*Ti_+U0@$()$u_hn*BgZzNhj1|<
z7u04d?7||aG_P@ICFuJm^RvC1LM5(=2_9Lxh7A$2o~S~U=}T3y6gHw)*r>dHPfPw*
zXAWl#s1~jge>_(u%#2T?-dVTstZ`B=7wS^iCI-#7mTl3J9?VlP*~LF*$E{;~cXTuY
zIku6WYiVyM?fA8f(l@917`IxBh$N+mS(SizkKPqk3V0u{>mgASI{Ccf{Jul_zU;Y8
zuM>Y3cLbTphMzO%|D`}-%O#)DYE=1R@O{+N5>-axm!{UOyE^oJbN#ghe3=sX{QQ2^
z==rV!me8h5B+|+K)?T&6C4KeC0!g}2?+kfU4A|i{e|aE?WXFH5&yD4uLlpnQKyr;b
zMk2i(PuL3cF(fDb9lTZUB~|%HEphP$gYKPO&b<~#bLaS7q7PWV)wH_<+2;C-K&r!e
zvuEgoul6N8*GNnc4&TI+=7JBUG>Zy8F}8HXLEr#Jj9w_A7RVE`psRM8FXaVAPcyC}
zXr&L_?eiLy6>!v8z8Y==Cwu9Yg*o}d9@D5aZlFwE9kp4jHq&`jA#zWw@$&b!2ucm&
z5IlmuT`;N-|E|kIAKk~jQVD&pJ4a&?G=mrEdW;g#(tPx;M}nSL@N{thGALZXlLCtZ+Yikv
z!pnmRhBlf`DyQSFN3J8WBk!JX;MeQ*_ZjeGAn&_l=W|HlJ(V
z{I&qTZ2+GX{N5>nZ(#!8*Zcvg{wxpHXa;hTKFmn8910*xB}RP?h$o0*MCWosj4U{f
zIs9ysYf%>WHTYc%MT>D!olc28`G*EyXK^`;S;?90V)jb=;Ar%}fQV`GoyTUyoSV=D
zDcT2e1^d+f4s$a&Vzf=0pTTBe54{Tvl@3=$#)MXqpR^9J@11!Uga|I#l?V~%I#HcN
zw;*XsYwcmyJq@HD1MyT=#lSZ%YNflCNS*yXbQjGnJ+&?s7uI^POQW;DY!Ak~OB>mh
z65l-g52H`emP$RSD}K8Zqw3Ca&M2H>CjhhG@wxrgOrj9O?r=$?Y1?v#ZOOK?In(;G
zCXgsZj!tvJO#UlL?N18VdehX(7_!$}6;!WR=n(2$yn9+jrjpg{W3*JwRVH>e+c~+A
zsk^_|=ltRYmUSQzA_`~mt4}&q_JOiHCO?dg
z|I#(Y>P+Y34t?d@BmH16^A8?Lk3z;9D>6m*O3U?^*~S&AP9C$#z2oppwWSiAY4e7I
zXYA;WuRNK?Ai&cFRnEg#1oBJ9so%_)BNf;*71rCtOZUs)WcW*=%%~bLKDe8tm3pYm
zoJf{RyO`_3?*bZtrpPAnkD14Wi$quF*TX{T`x*$sDNGZJqXIdvF55cc_2pLreyaGu
z=dG0c>Cn0a&AZBS)1*$>*M^S8d}yCJRYin)(H#;?QY
z?|opmF?0kT$JRBAi
zxZYc)wgC1JR6ZUQ2XV%|VXU+XRtyP@r{F_3W1k#6vDy&+G}4HVWSEi9j97YqCOMKd$^TN5Zk
z+fN|YwW$JwqM@*xR)^YWe~XRD-TAm4w%qu_myyqCWr1a}=(($&EY97Ihqi$s{qqM1
zOU-k5%i|i;rd~3u4)+?O>9Q+gv~)G+Hw1{<12pVkh}v@u_6X
zv>-M5zVA-#az&p+^{*{~kH($vzdf&8-;WC4H$9(4J6}k^rTti
zHcA)7n6|?{5r3EgRuXT2{6Tfd-MtvL8TSX7(lmA*{DV|K3t!8P>v{@5Y7*q3;amVY
z;Ag){)n&8c<0I(Vm+It;z}NfEMNM_I%8zs3o}`(y?yk21wv4e#lnV87(avj
z&$qv5gaPx+UJaWAIF}95p@gYeT(uS1@FTlFw#wyeesoSdN7?d>(MOD>EGSN|KG3y#
z>v#rnci+y2et(amJ-799Z4PtJ3x-vB{Ec-2qwFKoXK#iLK@=;fF<>|fVrRTJ$GkW2
zi?!#D>Fi6%+COhiyDa)4-P6x{w{4wnM#rvSC3yF&y*vGu&$P
zZNqPUReHr%IQS_%ojiknBwMl*fiZDd95A4yZ`jZ;GOEMC@8>4dLmuaZ0ORn463;C`THB=K(4X~dsS-t-X
zl+fOCal0vBH*U18)>V3Y$2hUO_uN1@KN>zM=$}DC1cmR<&?#vg+)S!pU-n_o_S?Xw
z!;Dx2PQgscyCjN$3Zr!dU{mxbUo=HYcNr5K&z$;~A}y(`{|kz|VBU&~#oqcS=oJgn
z3Af?`A<8c>zhM+*pr9k!H8&HL0D%9XkN-0cauW#vpaReXT+D18Y>ZsYoEeRroy}aF
z8GqRtS^Rslu(z`?vNJF?`()|Ly?A0U(=5q&E?Y@)8KJII#cTAV^7yD*wCw{I^7)|NH2^NcHp+!n;WP%gJyr+zSCw9}?Jnq=#E<EkWoQbWy;?~SBDJMF!R0b3Fg%_WQp}kcwwaWl
zE0wad#mZ~Eqzfs$qtU!uO^U0Te52v)M*{}qD9AI3Tz!5_v$>*s6=MH9hZPJIP*U9m
zB;@@*%eCKH$A6TNsMSG;6nE+s=c#dK(}j+j#&F`j0BhCy1T_f=hHU(P3l`sdeCHwTW#jTvYP)U-ex37DR?yeoK*IE)G?Vf
z59<`C!&pHGWKI_XCKCD2=bdK}kw*RKmy$U*n$)-3HU4&KG`q13A|h?raf4v74u-J*
z9k&~2#GS!KYjdDl#z8~FVx05i3rGHe%cL}#CW%DIxf;ULoTj9ps*X#|wVWxs41-v2
zP2CmFw^^=qI%2jRDzlX!ye>yO=gHogubtp2GnOx}XP~{^=007e)fX?~;-GUd8a!ji
z$jUFbpQ5p0#JyLby6M4M5wCJmBfgq12SF_DWGvq9&1Gh&-fvBFz8%lb&9yt=!jDb6
zQfssn!*?@hvYReG&P$XVrWWNSW`>4WWLzkzvAA5hj}9!dI$6n5aYsi^Y6YX-ZAS{Ct^9O)O4@N#%}3
zQGkl6$jnmV&LhIgR2SsD4kZ6$jw?T(#
zlNTm8(M+Dd004MpDN!L+&4Fw+PgRvQ{8H#hu91Qw3A5OuqUmTETi&PI?nCmukhIPV
zVlrev!Mh4o(IJd+Iomu(_U1p!Y-VLokWleU^!_~$v
zt~)~^eiFCImgr&dEa4ssv}`dr%KI>Qj3at^aG3XY3lwf4j`v^zat|5-
zU?iouwDe&28Lv6S$n|(aD^}ZWoPjku>^)5Y$%91#r0mo9+M0C7uY9G+o2eLVW?FQ(
zNd><|za-i(hKxzA5Gvu8Z~v|aYVJQvso9&RU9L-c0c3(JQ?R?k(+-R!>-hDVs?$S
z=pge72tbhaNAo1+
z#QH7!(3O~o7%;z#uL~6|3LHerUT)Ds;wF2g4t@WkBE~TiX0nv!_ku5~H@ELB&n!Ov
z&2-G{8)o*79tr<}$mQ)F(td86N+BqG+RScdl9k!8dRiy9j?eQ4+n1AachOQ6A9?4V
z61mghgHSJqS}xJw32I)d2(huwizGI}m>e>WS?!EpNv`*tUN8&MonG+MT9*~0T~zLc
z_&f`Il|l|mWjZ>sZgUzb%O!oH`e`M}6n0ucKpS+(e?zNGZGY|Qjc>&^-(0fwn&L>`@U8ifdS{qO+|ekkM>
zU0&2nbVLYSSsRJDfLBf<9Nr!h%jX!uS({DjQ*VNVO3TUyyUR#aJsofX5Lvj7w{2#H
ztxWEiV>6Bs@qr5gX8n+e_o>R%xaR82HjPiO2?>!=E%`6TTpv^u2TJ#Ak`nAq{(AUWL&W)LfJ9$
z!D506!xOw2-}1bg|dp(}C_
zNppGO{?5+f{-1wzz2{I==&hx4cL1NzcwS;E;wJ3CS?X5zm$7w1OEVFg4;|Yhw6eA(
zibz_ESDVMhGjRin$W4H1wI@*y&_rv6BBqC`ckZxod2df01&9ArHl(t}sqUOv8qv}o
z4b2XRmdNfysmc8soq+U-j#@RfXy|Z2;Zm+0o7%`qaz!5pX$W`m5;SYk!)JT$K?Drm
z`1gvG&J}ivsO1}x+oJofXLTc`z`zRkk~QT(^|*8vcwSantUWUh{DS9{_`$7N)%@F;
zOZ&Y%vNp{XwzIQySGLBqI(rm`%-(JIW4hN(Ndw)a6^83!N+q^}P0LkvKYhx4`1tR1&ZmJJja`}oThN^p13uT0b&==tY
zSsmQ8Dv>b9=e#5#XFd3+aYMlnaSb|`tgV)7dWu^Q4}#qFoJ%PAT%iG&
z(cx`3{tkQ*W0zn7E?7CxvHg~}uRa$bafMO+4m_3w5e08Ips2USy(bg!*l!B0jtb7s
z^VDvl9)?^$lMm67VL%PNym)>HGQERpo6{j!ix?7$n*9j*@xBX|M6xrsaT?=w{r6E`
zTU^`5(2$6=i7Htq4Z-Ti*&MhfTjqIx{%Zb`4f1>7(WNd~0oRLFcbtNo1?hMz5GZ?TlsX@TO1FKjEOMV9QE<
zGg2I12~*PctoP0FMx-A3HX<2vb$L6U?3!0%Qnq8Zwm9MkCBs3`P{4)_*^K8qnL^@m
zRx*3D3!wSsp*5}bO?PPxBA&Kw_-nj7SWc<7q7c4ApN8}=FVmqm*6ny(_^*5H{bufc
zfO!gjr|!~s^n?7N2?gLKL&uFL33B;e*WK!sC5X{}`rofvU4+l+gWC#>J?p1#QS`Cp
z7t)lU?$0;NIjiQ?bA6{cvWI*PYbVzPbT%9b!nJ_J)7Q=+pgO)GLY2Q#tOBaF&wCrG&
zR>v=-WTST4yV4b43UFT5dH*I|N%cOu;D$s>$&xOj@?he2)n_gugqe6Eb89l+>=tJt
zN;{6`XFHBQQ(layrnd*UVOMAbrb<&FiYfe5A9#Gc`+PS2y0Hef8@&>)Hi-=8!aMI5
zZFKDtGK)MFe}Fpn7#Vngavff7U{MB3w(V`<)cunnmUSuzP7I)gux4r7Nl)*chfAY^
z4F^GLqyk*bNHh|8F$f+zD8VNQ(=+CPeqo+1Nv*OYX~zlG>#*kvB=$XDpD_i8oIfGJ
zgef{7z1dfAn24%#=04jtQzRrtG}*69xpL*Ww`46#)_24aSbtxrxXR&@9G!6T1IJh0
zAH@`GJd5r(fDTTP3|-=YrTq^RhQnvf$qteSCMIo1Ni5#hgCrKifDSXXkeg+ynJqn8
z(+phRl9luBhpORQp6hN#v6o~Ar;(L5UC`oRBSM|Sbjsk`+s2TI_k`hlbtsi~nqv{#|4
zDpsfFn_`}!Y@n6r@nP(aA4e1Mr!Q~YmG|xk@W-{=j@t~^%8H#_hrL42TsIKREtu_2
zgp$+y-!BS4N=#m~M%Xa$KaW9iV8m|kpNsIHlkh)#4A6)G0L}lyV=y%{H*&Rcp*M0f
zaxrpZaCZCOxeT@%8+N#y$e$Q)@3N6A#MrBdnQ(!iUEq@Ig>n7sF~N4G1E~8%20N^*
zx?_Sky(rBxPIkxH*m_+bZ=TEsR|IkI?*otM*?E(E-35
zFt#P&x8CW!`SarG-Z3Z!cRO4JSNBI?2mh8lr-sih%u_^WZL&jr7r*C$+zs;taKZU_z!Z5JM55cB*z0=j(3Iff>qmzSebS$;+?J=8n>9P6
z`>QXdZ5tIy1HIq$9%s`XpI(sUe~yuycuPmm%qZ^O|mAh?7n}w&ogpr
zAZ;v6_x9Efd266$sOu&IoujwZgblglVPf$556HiME*|P#nR=C*bZ9ZQ@$qQeGD1RTO2uTgE2S#ny)9B6sF`Q$
zV0fsucttBMvKA|}iM@j#pLZ}-rP>e1lEAPUyw^Rlb{Aa}1=mA|8?D(4kI_@;mBAEl
z5-hqlCe62bn=g%p9c@9^{ZZ5+A)$R5&T=EOh$*eX0Rza
z)so=(1jrWhhwmSkgjKVX$Z>AWrv8JXnBby=%t)rsVi!0(Wkvz9WJB7!nq(|jV=3S5
zq=-Q+{zOUuW>%~lrF9+3I%U=u6?0e#nYPD>hBtUR$5C843_%?S9TVw*{^Yx2QWrDM
zDPBCa8)c5Ry11FL-*7Alln&`ayW!V?-4*huFl6{y%@PvEk8})=?o!vsgfIgHKrK$-
z!q)tnL(Tv#W0gXO@PLVMF6IVR%;fPLmNIIvno3}0!@!G(azgE8
zRG$9Rex@eoSY6M2#NNG9nbd36>@9VTi-h|5uU73ACo&%p>_s
zqd2;R1Ol6k+-EeN`f*&OJ4g`U3JGucUXMsY!?>tLF?)G7M38WI>2R=t%ei^EaCi7n
z0%FZK9fBpv^5+ENua-R*i{vBnBB1HAh*Bwb`%q1LK(dE1%9cfd-p
z#{%+?dmHX_kiY~Fi-8QhD7_M_8(BT>OVMtBNsX06a0K(w*Agnl;#tw2Itg}~-zDO^
zDfxOS-k^ga>hvIkv!`uJh?NEN%`F9#$Rys&?;$gdx@H(Kmx%iKq^V{{(Ml%OapprH
zoZeG>UTPCMir%*P$0=lx0W|V|^de0gv>pU`y@&=lq~9AvxKI#FAz_jm6MN@W#W&)6
zg9)nBicxb(+$Gg_y_P2!+G7f!9v9nP)Fqdrp^FE``XN3_i!|oU)7~qstBGdSTwZ&1
zXN{`aawcUyVE&)NhpvyrE(n-QGD8mK>42T2p6;p8TBNOItSl;)S;g?WwF@Qutp
z+)PI;lgu*5s!ERXXj-wd(%q1F9p8$0yB`@f#inMZg#U}9|4_78VhW9n{YOGPF%|nu4UBA^qgD
z2=Jn>xr`&H7&j%o^oq8cNu`lKw*&?}wvK%?8l;||j;xk%4O|O0l=~DR?oRu)dMKRXhjAQ6BXrv5l($LcTz}TEHhl2Y`j~=^Cvtgmk@kueE9*c%C3DUp^?w?XLW?@Ky2M
zZEgJB5fc*AarqknO1!Int57e1(O6lfWpB{^d7K9{{rZM|IVKh*X!(4Rf9o-gN7nMp
z0FF(3+(S1YDc%^cu;kZdg+*WVD?ezOpl*b2%7MIFiF2y{;>%qXBb*J7IaMtq3Q43IqW_zT;!3=;1K8ftX
z6o9D1c=LSFhQx(RJJ|TGJL)z*5OnAe$)VojJEMHM34!Z>iS$*?_U4Zs{6N5r6~!E`
zLm5eVz<#Ps&)X7g9cYsfBuMZJ9MG<6EwL^J_Ddz=+mvjFh|!QEn~eS1V24&x7N9PI
zM&|dr1NMM&C=r2xS|+S2|JOb;9%M%lEFeW)nYI|^mC!j~*+SAL;SIeKa!n8u9CH1B
zOO5ulf>WQPv)y%6Kb{K&k|Y$DTN0s`3icXjN%Z%=K@M4uAa&2FL%-*h}d5ODJ2Za8QgZC>X#z^Ll=}@1c;q0
z2WEs^j)6`C!Bsc;u`d+?PkkZCi_ljmDUT3pF~ATmN(Fk8TKFIWS{^;vK?EYn3PSA3
z4;gSFi^|4Ov%HS3h9%~XNGMNao>)wQJI0I6X
zs!d5dsrUY%G(=H_W@itiwMQ41LMCwCCUrE>7y5EBOyB{
z|LXb&F*J?9;#L%UG?MHd>{7&*1cf99;}ItqC7vC~=P@MN3=LHPG3@kc4fci2G+;|2hXA(H+8%q>9C!P@j_Bw!_a*}x)*b#C8e
znP>}fb;a=Vah;&}*ZzTe0=4}Sp4HG)8T`?75
zgYnUs#^3||gP4<)+P=EjHgQA8bOG>5<$%aFhZiO@`!KudTVF`U{^w`
z8RS&@!Q-QW(gDehLcYq=AmDM){E06oSC|FsgNfO6Jj^Q7(n4~W@YwmN@Uih|RFqU>
z!jt(dPB4ic#6)?tI~buEn}5BiqX7*eqkcfl-jHZm2O`_Bgp+f_;ypzza6HJQkcnPX
zv);qB<(n89=oE-gaz}P5nPnRlR%|8@C)mp6(TPfIoCcyIgS3>8K0^mV5_rV0F~Q=g
zpp1vOLD^m-+@IeKc0s!I)(GJ|C3b#Vj|>m(!k|Q;1)xN*4nKW1w6LM^C~QHCO(CVh
zdr$L#8inbq6*JZ4uu9Dh<4x+V)3b_Q-YesaB8LgWn
zKaOzoB{`+MH90lNgq-SlPi|frktJ;r#5YoKSQ#!_IM%TK$w{+<8(VV=Vy46AEFU7U
zHO0rO9aeOr*9Z)l5r`f?tS)Gsz-KEKiWl2VVWk4D^X8(*nxJxJE+pH`E5pA7&
z{AeN;bh}4bGpukV3-uHEJUIz7$I0Y{Gy*Q+l5`CG5-jZ>QzH5#!y7Wu!bmz$dN@uQ
zCTCFiFnd)h7+tcbiOm5j8)GpVdyxfO0g~UgcT;wV%9q28IIyts
zhv0*84NPR4crdII`FjGwLKzK;ST03W_QM3_H_v4A)!oo-qSbf+VO+wPi}njY!lkbX
z?hJ?;Y#bO1BTMjo9$5(U8qkg!@E&)3b2p?Ka0rMjA&xdgD{`^ZxM$*54l7vYKd4=t
zCA3uKzckNt$H(R!7V10$J$bk;anV^BIH;(oB&FK}Y!0?%_I6~XgTclpz$kiiYN`a)
zO#38-QKzMobkbm&V;UOC`36@q$skwm%`~H>Z#-<=xiq7G>ocr|EodgtMF+)O
z8I?If`rWIALL}mR$umls%9_$)p+BvxgKxXwtO8?V
zgiZEV)C?mmF+9^fhqSOzVKqR~;bD_vA+v@-%@T``GuDar=5cl_I7til
zPojdH1ENO-TiOs`Kpb*p^*}`#_O2|Fr3^5LuyOnu@m)dS;9w&+Z|QyHN{R_n;v2dZ
zCsm?Y9&bPeo>2yroO%~-T|0IvYKYUE!fT}d(%j%;g7C&=X!L??`Ug`0QM)sOSd>>X
zu>p2Is%|K^e?X=g`%6toJ=_URDS}wsa8R-R)@$#?_ae8+<-@GKG
zGe0*Fy?X>oIFrL5rc*N_$*>57st06j-GC%GtFI4BT_hvY!vNq+{2RS&`+@hH?gbfG
zG!DvgxDAj&+yjKAe{`<;{XSLYY8ae5wwlbzyxxhX>SkvUTCof)hMsZAtK+&OtUjv*
z$`E04IZ$H6D|=_}8XSVr@B${eP^SquxyG)+=@GMirf*Mi~NDuDx6QSFoRJ
zAg4eQEB;mB8ya1Eb_CT%nl9{$3l4p*=OI&5#Z#Ro7`=SJ$VF8w5ix6(OvNB1JxABTaQV(&*#nY)1YP`U!MN)%9{S*-6!CqK(n&y*P?dNY(|Hha>8MDI?2cz=9LOu^|7%Cr?c6w
zGufpB2s+zEr{2*icDl6)Zw18=9{UJqO9Mmm`VQ~;finOnulLx5{m6Egk*hB*PBhCb
zoDI_b+BmV)3L!wd%4_S)`7~8fduezbLGVYt|IZ(i)W}q66$Xj!&BUi?HX=H-iL+P_
zwQ_N~7_La7*pZQ0u%Dywepkp9WUbI8DolUnEBQWei{v4GF!3Ml)#H$tiS}M|PS$`u
zVi-TwL~VU{YkE;opXI-;CHh_OkuSyMdVn3WRBGXH(ZwscA>gUIjg4l{%cx*V@K+CgX1d^4DJqP4hUny6s=Pbce!RlPfj(nZZ-@K3;z$d;Sk)nkLFil5
zzq!LAvTg3wKT)Et=mP?dXV`=%QC9odjoq&mqeY3{e1bGvRQ|74N(&2Y`;wzw7V
zAF&*Xcc*7OYxQwKE#xlUv5;dOKQA%_BPsgFYK;YJa`GQ7Cl`OKHdl($E4T>}LXv~I
zyOk&Eg#^J2c^QX01rk6<3Ek|slQ1Dy)LiHk_2I;zl9cJ-M@IALc9`ACUeGU4QdZKa
z5fHaX7Qy1T#=D<~J$G&05JZjM7KtNUyOel*iR7yj32IEvjfZ2jLVH-?5UhpjVnQn3
zP74U|f#|d{0O%ftw7g9=&w^XmQrZnt=<9kb7Ctpg8WkCbFltO>(vC!HjaD#>QJ>v1
z{L5T*UG*r8aIr*z!YbMtuIaGBD<@7Ovcf2$AE6SaWC*pqtV%EU$)T~H$;3t>`j%^mKPf1w
z((G52(YyM-@w!cKZPd^pn?1*d-9_hJo1UlkQm>Cgg331iWqT4?T@-{7OEW}Wcwxz4
zw$9l2xj#5bUFmDcy?%b>=T&V}@2&kYP6HFAD$T$kQi)O7TRSjg*K`Rk5%-`yr_Q%DAk;+WAS$
z_J~9roVr~I(J@eZ`is)w8CL&(KZz1@*tMNUvVlj;h@}q`O
z8j4yHV5iYA}!=l9)lY#9a9?zq87i7jEC_zHllX!x=cQxPFV6
zvmxo_-2R5Mr5tJbb%yhoR3q%ygBJz4?9FBCh20`48_wlLrm8dJSf?WEjb<`
zuCqN(WDm;uG2B{dKbCQo7IrrN)|C>B8s9W2DkZGfBhU|6oa<13kOHs5vHm%C_+i1xtH1o>A@L+Av=t7mvg9@FZWvC&btYnFGuVQd1wH
zG@ztHKb#4GI{P>2+aXZE%y7V{*vjy7dj_ky2`H@O3+~pmVX|s>TzJ%ZFg&HC2>P1+
z9{^WCsK1V_WfVn0lgcfcV|uJVophr+$B`8S?B4J{nci$&iu&k0
zOAm|ITQc$r@&_!W3y$&SFmKsqq^?#+dzyCT``96mIY7UfMtLPHP~^-hrWr)(;eTF$NWb}_Oj_fx=FOWi*
zy;`&o(NMlaNK;FhwhjkJXw+BJ4bbNn^cImD>|eOfX6+72Jbtkctc#
zWhvRKE6D3eAqZ~!+VoI;c`>43O}C=yg7MCzvE~x2=&f+t`{~TZx+&^2>L2=4w?VS9
zu!NKm`jo^eaV*A+Uh>Bfj@S<_zrkvDKcO%MscMW`n@7J5b8_SK%9Wo)+O-S?`H-0}
z_7VGD2T!@yp)H(~>d+s2eE7Wj7sfm~JU|HJsRyxb5nxQ|GQRf#~#6|iMF}_V|G;!K`
zd+1oq1nf^Sot=kw8M^47Bd&_&#A#5xYTZue(6xLi`xZ=Hif(Ai>(ybANFYhR&QaNh
zh9iN-39&U}13#1#q@e^3Re1zdx>F;!JBRAa?^-{VwB6jGU(YB0@r40-IeVfi@W8UTJVs1ncya3WQt@z2BHiW8VLURKc_qv(M_f>Z
z?wJf#7hGow>^|)k)dlT@HRQ+`7G@5VX?K*6>MxS3kEWE3zR+N-NAOGhzS`U43}Q`F
z9$o`9xd7DUAqmne3>$iVm2elb=`!fgGDuZ08=yaGs`CsOD@8(Uc#gQsM6ThN)5HP0
zxhuxr$(;BrbpHBOu|0z>)OVB{vk~3Y5tLlixAT2m#8>UElk|I|Ut(H`DA
zG4M(x{@reFw|NkuwLXmQN6kPYn@Rpf1Mz9k<2}{GfOK_Dd1P@>2@Q_E#}El-W|BP#
zq;wA)qAcM$Xri>wP?t--4t};$yFBX4>wJ14A3eCzPjQ-iO~rRC^0nhu`bzRTJPz9s
z7F~;m?f#l5d_TD0QFWX|ZPRl%cC@=nqpCj>;E(29+*2r;4dT?(Q#~;yU%7c?W2n#4
zc1+4!Mo^F!toQM?E5m1Im;{%ddMRa^N`Qi1O6X%iHoy@-f{2s5CuL*6m%mFgL2aWm
z%LftyoKj$Sp^241yUL43Uew>2cB*8;xII?HBBIEZs8f^f?n5;edxN5Tmh!2Ck;`=M
z$AVmHR@vUCe60p_FpuQGqfaTyH4e9gzoTgGny{`)8*)btF7Y&TxV*?zr%L@)?4zgq
z8U?taPdMIBgVPmQq^7Gx$;4x5xH-%$A;AoSPDpiasxxJm4;-wR#Cz=nE$PLH4Np^vQuD=iA-P}BwEvAg#tP&Dgd34P$
zdaQi^G0F~kqw(L93p!n%v3Y{hz+5{jS^SqxDREvb-n0cW{^#u0}kRF$H({7q6D>u`3#5
z*E3=T$)h83nZC|U&Ksif#rm|M(hOn9Je?C&$G=pcHOx*cQ{R>6vgcXj
zhC7{;QhG>0sjI0&Dk&k(!VqQ%8L1;BM7U$qk&+F{<$oYirNS;aL`LUihJu`$t^rQK
zr3qL87~cjd>!J9+-O*+p22eB@AG#{q+ZoqtQf^;?B4Bk#EwB7AR_{kT9T4Hj%%wOamH_G&Q9b
zOE*&Gd;@0gbyO=C2|#t&wQd*MTpoTFDuL?eel0-VdRyZI;NXA%@oD(mGiyMZ$p>Z&
zxy%6^*?{I38&YJgk^a^f*PliHi)T!7>%z_D_V?mKG!7W_@17%kY!w_#?ndJ^iY8;<
zbd$_$r>;<7_DoGHmblA#`9Rm5LwM?-T6gzAR$RL#AvU^pE^2w8GLbNbESRQ|L$fIn
z{drtJ@+xm|X-y1t5?D=Fpwb+>VPy_82RRemLy>|3M8oFj1-yiRB6w;H0fcZ-)vCZ|
z0LNjh%^C3jKvT8tyRNi{^{?SBMH3B^b*aw^U1~LPhsmuCRJ->g-J7fvZWasCd~ZB5
zE1s-=Y-o|>P)JVCv3NO5U{;#!T<|Q)tBo1K3A+aec>`mNHr-pM<1Jb-2g4fTYICDT
zTZWjeG~E1m*k%s%x#_tR*OUN0B`E<-w|S*ij+NPuu#JsWX@UGb|4XI8O=m@DVrD@R
z&g+9?5!%y;p35u$arnj@{)jEj{Z+kVfKB^U^sBh$nRK@a(-9i#bk0j=Hf1S!RFKS2
zEgIANPuT6398CwF?&V)gzAc-XdpR@i`)_qEIQN$4gVGrV(BT%q-?`fLCQc;}?X&|6GkoR=_+R4RV{AuAF}1VW1Ws
zSKz12L7|DfK5TU-*GqSTcN9QD#73>{_6
z6ybG_`jv7*hj7b2F{6!`*b(0KRqjaNA^QyWi=35Y`Xe;Q(J1?=z_r5Nm9=g-c4*(7
zqhRI4^?23fB$~q$5kOZ7flBK+s4)lwN!bK1``T_
z?NtG0Y1q1Otm^A|#iwIcMR?8F^4*>J?)bvqYxv{DJ^bd9VEfE^1IAK6|Hh;NP)BF)
zIO1zYgX$(UL;ku-WX*f{u9F6Jl!HTwHsgiLLRTg1Cy$jvY)}P}wK6l%_p(0&^l77O
zQc9Wp*LQ(RkO-0Hm$WbPhis+S#!j!C8?`D(e;sTd6ux+f!4(;#~S
zqhG5ODxA{i8Zx|3^W3hlrfIlib6n89hMg+J~*gOUJdTS!ZsW!q1YXg
zil49%Z}3NUr9qK}Z*&{!a+#N}HnCb0$>nG5sTkRv%#0fCAo$k3{Jb7slWgqN>t33I`LnUs3W#W3V>&mFSnwM
z*;uKlKvCbFI9jXeP73g7$|_u?j)pJ?Oco;P*eAD*L^|$OakV(KXm=sq#pGW9;}JHu
zOtlCn$2nGgU_50-U_-a~M=+BWJ)cZ%L{+o4=1^~jGs(3Mt0^xJuXcc0
z+&c!9*|^sNx*6mx7Xq&`YPkg|R+-qGKF{N2dN&GsTk5DJYQdZh@wN+4M939AzCoA<
zeL6l(betSReII&h;t9=*L&7y1>D?9vEV=mM-6vC{>IR2t_gl_k*F~hdfpXJ8t<$XI
zw1ChjxysA*0TUu#w~&7?xnJ-0N~Krm(A;>aXm;SqpAUg@RF3NLx|ft>eh+caTt;%C
zb%QR!5gYQwbuegxqDBFOsG*R_Z{oBd-?eh|V
zj-F}?O%oGFxlEr5!tb~L82ZDpTB+`ZJ4v2a!*9y(WgR%6JUVuqP`u`2x1e7nxYD{>
z`t62SqvBo%WTTRW^D%R9riE=?6q9V7e3><}
zX3&0L-=mpmsx|XjH%?@yaf&wWd+}5c{=}H^<%&UCmqBttgZ>_Bh8vDgYn<;pK`AGY
zM6N8K%Vn*6ZKgA2k)>{@626A>wyqDIuxk;N<*|r@U%UUqI&p%Q5wSCi7at!Vv%Nfk@K#6X0(tpwY%VfpR;)Jy$%p|SDKe5FlIQYT-;_3liXe-Wpv2)#Dp(H50N#u
zcJm)XXJ#JPn;*NL6@b~zSY!@kY?>o|v?>Dzb!$c%(rod{6S-mOT{fZ^J5fE3XhC&!
z*Nh$vxaCrvPRF-mtqi?%I&;TmL&sfu7ESoms;Ph{0bK}ev!(-D{kh@G%}WP&F;w59R++#gWcXGj
zzB(h+D}KTXuft@i=2F{E(aY1dkJi!1r_y$@M5z7>52i
zN`PO)E|(-bMstH_mTAuIx}Bqpk~6Ekp8_8ji#V(~SPE7i$Cr0a>CwMTt4p=TuhR|!
zEgs-ZfQ#gnEH2a_fC6czw3S4VZNDn~Pafq^z4b-{>=+MyIg0=OnL;Gss{(?1=G+XL
zw7pd1QGPh$nbn7Rw6bNAD}T+!_9-#7HZvk{z>cIoa?ywMh8X^hOM2l%M%T4c-!(^9
zO=G|21GHf}owm~XoelQzom(w)gJSq@&
z;a{M}Z1m~uMF$eRLlwC-f$Lq*)5E96_*&E2&=OIh!kj*
zF4QQ&uEWgW&@JD}DsT22vSw0`Cq5xQrkjVAcl`9AkfO+T*Y+3KPKCSV%tt;PSqW_x
zGWUpja)Kz{C1vWN1%)bI*g8?Y0in52JuJOwZm%7Zhu5i$OP;^ltKYAi)YT?p9El~>
ziC{R&u8H`RhR8}ry{_Q)HAg&|v@*2&S&D;38nM!qv{xA2VYJrLZAoO%=Vw~}@6KQ`
z2ne9Sr<7G*gd(m>uaa(X>&=8s7jLw88Jd_W1;wuCoca$_PizKh{%?BhOKwN4Qk8{F
zcklQ%ey2G1#NgE-y}o0j!my<52r;u6-Enbc+P;_6n*mo?@g5T8jkgWRlho$tK;%ZpGijEDND8cXL
z^Cy}~Yw<27$VRI=EF-B7*^CCp{Lh;Y;L*AT+_lbsc-7HY8_q3fws^gkE3PsP<1JUztTn;As!ztz!gXuZZ
z!p(S#oV1!c0w-W-)YC*!p$a|4SP#QpDsm_Hd#8_jJ{v0>;|BaWQy)plsdroW#!u&F
zO7cKQZjedQ3h%L4r;?;phiwFS!u)&*+?(%TWT2Lsd}rv>Miba1jA
zMvdFn7^8m1;t9Oy)_LsLBu?zw8bz^3*&!bdbTubgRvE;6iryviaYjU*Wi+l}KlAN8
z#i+BN*6CNFzS@NygnkSc47VZ%!((v$B%=Bc$>Zgoio_vKz(t4+S$EH93aW9Gb7g@eFd-bQ
zkL02{mZqjDMjt|+kgzMy=7K%TP6g@i?XIn@w3({RBCl!f37TL+ryU3lWt%2-j)pF;q1G`dz;cp+8f!L0%G=AAOYarS4(7NRBDsCMdt
zqMV#yd(WuNG8^}u{hK4F1(<2AxL5eLQ{J4&A*1IjDaqO+>6DUig?t6;%l)HV4f2BR
zd?4xFht^2mlgga*!Ts59qQ*!zk8rC=0y|x|!8#H-n2k5tzO)j|wsed#&#gL7%QI>*
zi3u%VN=|hMU?`B?xcCelW?vfDR=Sg*njkx%q}Hw`*BqPW{v1XZ6{_=(|=SD=nz>A
z8bgQi_a;1A|L$lOMja__9MF3^amH}w$8x??(J
zZ}{9EoM4()ixK5wL^z+l_Qn@}GdcZqX+=}OsTAh*OjUX@>KrryIHQjx%EJ%|DiEok
zk!A?VwJONA*$s4nH;G~f5xdPWk1$Wj{C?(GZTyL%5Mh1s@&es&7ppCI_&>FFwF4>Y
zEMRYK7tb&ifMC)^pm-18!z{3bLqQm@Bd)KiY}_Mhct5>bQH&`zE$ws7cTnu&ek
zlyEuBuE^c`_WS#@g82V)kGDg$mk%!2?v08o;O6upV17>wiy_v~0LvHp&ZE|=F+0opu
zyo7}ln0mzRXpd}-*6zw;3Mg9BllHVY^)oSZJjSatrw_-LwK+7)r-!?rX5wR6#mgnD
zG}_Cx5iFy44uA;bhL;k!Prc0yvegLtLpJGJa@?RckU@9WjqY(!@wQI$Vlcd8-f;^Y
z(y0e_PrbW8J@e;s)Dq(x9M`=e-=Er&=G(f!Gg>A4_x^FsCqDT#KW3pUT8kV?4W}OX
z_`
ze3Mlm@Do=5Wr6}=fwodnP+Bdq|8hQlS0|1>x^B)-TU!sQ&wIx0>pJiCSfx
z>}yHxix<60!wU#_;~ufFyM``YVGJCn3tx?YSR}0Rj@Nrr#Jtl5bdh~YsztQkV&_wU
zU670vfEH_hfnSFqoHpqN3fcC0Q*SB3sA!}-R*BOsvN-N+Sn!0(v*BwghpZ4Q*F@g-
zy@f72+ZVaU&q}V;4s^vX75UDy)x2@o-;=pvz3raV@IN0$#}IjWCQEEmxNzXX?@@bJ
z&bX+)BHUg#jxs1eSVGK+LpjWZx$OAhfs1xyZ)>EsikDrg!dJQk)b!IWp4xUyeiThU
z=txa5>%ve;P#iL+ucJ_Zpz4mbD7>01n!M%*8UjoON>~**8faVK8#6x;jy)UA3RH?L
zIp|X-I?{a92l}+{>5S9s}ke#t&?NRqJt-!7M<0X((B(A40b;-LFv4mnOW8to{Dqgy#4r>Jv5
zMic9GIh%S{OHnbtPK!fn=E;o{c^o#in4)yeg;w#-(4
zp*W~GJShM6cfoN|*8!vT1E{&E*rDfvbO(&lwUV#{X@l{a5x3vP}x
z_s4ef>ODp$s_xN(XR9bP!E_E8Bjq1Aa
zr+&=nM^oK4*iXg9?|#t@FlW|W)+;3BI{ra-Sf5H`vI(A1!+G}2;x6YZzlI->tqW0g
zEk46fc(=;!{C+BL_`Nn}1$XlG%R7!gl!#f%;ct7J50ntrUp2&$`snrrmkxyHC$W`9
z6ry~N@Zh_+wa00-+?R`O)zXY$SU5W+9zz_HR)vEPvOtb)g~%YjFhU{6Y`Yz#z5hvo
z?Dwf!%(b4dKGZu+UJt*MaB_C6=n5m7lotDOeO2r~+Af~A;YUo{__&hv)ra5hfA3he
zt)t=5*v<#%yG|{(>dy3ycBia`@=SI!69rlynpg(Hm59#s@l5erSzOU8@!$5J;yOd3
z$Es5Pm>^J#n>D*|V7k(yWG7!XY@7fK+Qal1-{pvKEEUTpzo$vn2P!rM-Q%PtvNQEoSG2{{BI~
zahey&v1w$WqIMVDCFMT|!nd_*KVwJFH5~G+eNx&?auFKMdHUsLHOnP)_Ha`thrd~m
zT=wan50ZZnWY-n3gLS0?)%sD}pycLSrHRo5dv2!Fa>TOuxl`Zp+z|aC5##5+#0@U3
zcuB=Ss}$i6$DRDERZQ~&tZ2kNLYr5hpIzT(CheC2M9EzJT%cuvRJYcLs6&otKED3F
zYzsr%{d~l6`=Uu!jP@O+xKG!_(bdM-!t&&v8|_mijp;THD=a$Gnu*0_)wVRG{)BH3
z3GIT?P#->i>sf^x%lnOH5^JP1+GuziRb5|rb$zcxbWCj5(7eZZo?p&@r$vh=A@=WY
zDePh1gVF|jgNgmd1}S7^_uQ)uMYG{2D>ZCFUI_#x-*n~ubc?)eS+_S=;J#LJ&V;xN
z2nr)9r6$R|3xse6=%ZS!cD)ixW#k$RM
zl^spn=nLtMl+ZEKLPOp{_+Qt=mqe>8p-tUCJ-!`{T8q}RsKrvgVH-B)?w(wj9^g;0
zQP?)Ytq%X`(tr}e@Y{Yrj61O+^2}bYCXUYlHxQkWh(vjr&yStS{t2XX!bYtCVggM9
zde&cvnf}?zexWvbRrs~&s}@=e=xQ^?yQTS-VFP(Rc&h)PZwIb8OV>bf;0o*hTtB}Y-;Nxaod0X?Y5m^Wn@fhFnv$t82=R+J6z!a
zm;nrr&TzB}^y>s!nWLZgL!h6-p$Y|4#qDUSS$3UsK>JZa(eK^r2T(yuGYf*Dupy_)
zd3#J$b>Mu|+MK(v%dmnFU@jOdiJ--uH_b3%nfeG#V*Y9&!~`)rh`;@&DPj
z6Qe9*PRI?Rs9ys}vf_Pwpi>H;LG!11A@3yuQ`tRfeuFK@2}yn@Zx|qh0H4@mZ7X{u
zi^!xMAC(Z#K6I-R`S
z&W>|r?VG$G
zyI!$P`jnpJuKKH=Nfx|sQq4@(Z1=r_{QUf6b)f7J#oA!x!E~(Wl5!x@oKjzVdtT9+O~#jCz6Lz
zcGK@Y&oCP-4;F_;v5Z!N#S`&uGt9l1;0WJt6D`*V7FW4(J7c4p+2!_uXhY%HH;!5w
zHtUpcMEjX5r{70Vn%<1YdTJ^INlgRy)K#3!VF}kaZ;g;Z>5C23yK={X$qlI1ktzLh
zo!YkQh4ZLa#f~+dh3>|O$%h+kg(WolP;ty9UMa=4ky}VmO2(4mBe(`T%69-71unE)7SGFSmp^wcRe9#1&vKDjoLFq_ML8w8=iQ;wI
ztMKu*svd6@c1qoH8!wxuw|-`4rb1)66&=v!>VO
z)IRnyc__Sp;B4F}-od)Hm5D+DwInyjy{O#&Z8Gg}7U8@x)8KZL)EH7AHNJcr{ZeScwVQcWo+|EhcZfMfIAlzy5hRTU8!mQC3Fmln~ZZcq47nW>Sq#0ZNJ9Q-bjC)x3F)lB9Xz!GS
zxmar2e9mFPQe0hZf0*IQ^4PyA9D-Ij6+6`7M=T1Se_@LY@*iS~c-z*(7R0q8@u~6W
zl#hi?g82E)rw2-Yu+;4${FE23JawmWxOBVyzU6hwLDTGpZ`HGA$b+|hpBo8ho?eSK
zBJu99uT8mDl5l(tdDo;wVCKHC`D7dfLQmKz-BM(Mf!dB-DM+%+LHB$44l~Z~&e3W)
z6U0NI+LmT`rvv&a9)F14ahKfr%iQ}kYO`WM1aIH5)aHnl;1FW&i%&W{!`pvRJJ*(Z
zXIzlNBbENcq+Yj(kmca$NMYZEC@Ri_SrHx*=IvJh93Pi4AV^!Ad_k`LOL#u>^gU65a@4nXe6bShxZZ@NidmBzJlP)
zFU?%Lut8U7&?c~kL*$6oDdYYG6V(_yLtOK&u*K6@EX@&603rZB+S{eu*
z)%AqjvEJ-@qh+6)`yASq{p`r3zC-7+1r3!S=fXNp2REEE`NTHr!6b?kFC(_(`Tea+9X
zq9GYIwNuVkhqF)3|
z2`UB6XM(uA9q;}W&a;}vi~oo*+80bD6i$@A&}%uQw#tZ#x;o1o^(-QXj75p*mEjXD
z1A@IwSAKNy`&EZLuHkH-FiMvOG`ZlWJo4UkxDzB{<9S2K@y+TX2R@1m0iOwmXgi2^
z$w&QUqpBV}>Ypw2uL$aNh}M5_eve7`gr(Bk$-d?t`Y#`bBzIO1Q#I%Y%;=DTW9pSL
zEVgb6Dw;SlqW4-T68z_s=ym@*@=83P4r%G*K?$NtTdaG#5DzNf(>yqc(5T`nXcgL>qOYT@+
zvt~NxF#1fI($g_yN<<}=6=)|)XDCp~SoIy(RU2Vz)WfBNrRq~KS7F0Jo*{V+fJxXDhE
zOO;3ah-cwcInFlEm@s;NkDV*A>x1~?Kac}pzg~fD!~tUm>_>?7_DGPRzIcXogSph7
zF`8MI7>Im0{cdvQLKBH>)Qnwsu?wRXhWXgIpSWY#u2FyHeQz^m!D63_Y4JR{)`oXF
z`%b{$=Ul#ve^MXj)3u9TP#>PMY<;SbbcaxL?!+Re)XzTb3`|Z~pi`80zUTly2HOM_)apL;*G))4WX&WmK$AG0
z>P+HS{+xL{KP9(5he|Igo-U0gI=6u9BEF@ePe92(ofH^#b6%|<=i>P
zW9QZ6v8`G8lY>h95ermxNgmzdlhebs2yTF|>s_d*DC*%7{U6dUnpY0MwMyt?
z=1|$q>IVct_WRHK&5|b_AaY2KEE@M+|_<@wM{6V8o8qr@izxOc&p
zyIHz|=)t2Hk!xn?%m8eDZn(rGk4mp+Og(%j9J)lhh{A~Mhiv_ubSJW!uf&MRMw)}O
zlOv@$ys^PsXrj&!nw*8@Uw%qG5w(2()$Hr3<@d&`;+eNEgkd4?uGs}oG#3S??|h?~
z&YT!nZg|2w7Z>?)zXp&Em84xsNi|AvCol+-GG`?Vj!mDRF;)TJ$}Z}$)D;yK6fnt!
zJ@{{arX%%g11Se$<8SIT?9Lqu8X0^os#`)bi^ux2nZtw@TEopoJif#6>(B*yHKpC?
zWa{AB+JYiOX`qb6$#oxV*oM^Se`@<{d18nX6Uj3D3jeIWJ%l7$>u?MlSQ4b`POYFi
zKSf2dU~{Zi%Zi42n3D%GDCPj2h*E-%?hVcZP4iJOY^
z)%tDz8g|U{2jlod=Uc8sHop*t5=GwZDNp{?8}>Or)cZy6k)DacnUJXllJR%nyP-gXk0&qNIGwDkM?fCQ`wW*E;xbN-fq-3
zx1D55%`NJ7>#MmsJ7k#NdBi$uEo{!@VBAt4#|bBj&p`_GgL
z-88E1QDOW1?MvCI4}A-CJodX6Pe_x>~F=ls^^9?bm0!Hb%Cf
z&l6&s8BtoMxtzh`(C8et>4R@ebe4_0uUuszIVH`finId4rUquXtGuf8mbr5W9jold
z)?z}}=x@jYQ%?lEv0MK~))DJ@9M~i&8#ox>|{M#}s58Dwd
z*m)5wbimZ-|GFa-=MW5)`M;ihQB-1i-#M#qjlPUjt^5a(X_{Hgw2|YDc`|
zkfqNHEU_Jbz80Y)ntM$Mo_m@0S4+e>ZR4(}*a^p5T<^R?jo%2UD5Eu#GpRa7&C_)Y
z9>Jp2h_(Z9XGX?qhWnYF*H-v?GZO=gQFFU!ByjgUDaq;j&j}lQ&aw~>(43z?-?$9g
zSA>@JS_zxT(;RFZJN0Z#?In_ioC%%8FY>M!PS4K`91A66cb^F?YRmJ~BF3k%?Q`#-
zj6;N}Lb7J5r%!om{a96LReD~Z>GM#bAUBsoH6+D0)H&8X4}DA19v-0b>wyj|tNr71
z6XO;4p|Prc{NiOoV!q&99jSewG8_q&tV~>G=yUXQ#N?#U1a3Mpft3
z-_g2#;|doidC@Ml`xXq?MqFm)@<6Wc%B!Jwt)YD-L)EVvusMCZ-_?hSS?zwT;DNZ6
zzB{#1rMfL;!9{Zw-n%GkH2ql-Z@TqV3Kn2lC147_UIE*xe4dsn_mR?QG_u&QZ?1~+~
zV_cv8dO0X3?3aM=?r@i0=!^ITm@vmo)WSEfW}AlA=VEVD&RpXih*>k$HX#AU8fcqb
zK{%Oh=5_)Ar|nLVFLy&A5UmTz3_rVTRLU6?C$e9}bV;>rJ#6da%kRSBO44=M6$@5E
z#$he}1`}`h!Ds`)iGcH#g_ruQ3+LnGYMq(f&awIZFAjVhBjQijmNn{9g5n8}>+^$R
z*O&WB>kC${u6xjDQYVcja4Y9_EeG|@Mg1ipoJgG(l-6q~y4AVlRh0zU7uhp~6DKG~
z@@fa(%ny_{r^Y}3S;$y3))k4mg;60uI4T@8zekR1l!<$r!g85qPd
z`=&GRXuCZ03dsb}f{*+=-pP(md7mLV5m4ATHd9w5zGeJ+5(jghy^WNyQ0B
zJ_Z#o5WP^G}tT@D$0P_7Ut-SyYys!X{`2yw(b6Ql8r@O1X1j<7XTD6Tkw%J
z8Q^o*hz**OCWiVK|Gf?bntUDlbe!VxjQceX#+cW|;17gNr+g?e_=wkM4#hT?lnfj6
zq*YhxtDpqe{gMyiH-R>WBhr8`(#ex6=Jzq36
zZZNxa=8C2bpAHo4(VV12Bn&PE6Y}h)`j9X0HBg5ue3i8?_=Q>F0BPbxy)tQxvczsK
zk`p|*G4f>BK*J7HQ@3qpU9dW+ut5Cws%@klg;?>zH=uI>^ZD}a_4My46(&b+qe9_6#^^xcB~&c
zYCf@HyKn0FNa!5Cm@@83_Ly6qa%(yAOWx)0eWD!-n<}YJqSUDva{bWx@7R;)Z5r(w
z$oG4FN^46@>b$=-*IA0w60vj0G-aWC&nnZ3@CSO%AEAy&KP-F!aIC_u=w(a9w_imsPZIO&M;84Q$uVMfncsm?;VsMkAG{6n`6=CGVv*eHUQ1>3
zwAK$xJY!rzU-`M+pOgxF5BxF7@xJAb@d@y5aIU>`PEBXET|8FUb!*R|Uv7)n2@M53
zGgH5f7zpl^<3IkO`88Jqhi$Z~IaUobOW3-_&_jMBtJNW@n|uEd8;Ihzyvoakk2_}v
zJW%bcV&a1X>&(e9`zz&mqjg4=n&EhdBLU^;){7&#SK*Dk?HNYDoXU
z*j$rnEH)5q`8C;S_SA67?mwSYw&Li`{q5R3R}I!>#@BBqcvTqD#em#eR@3!dp=N+p
zR!Hd76<*6Fwx#b
z{K2R-56tJv9V;CUL$7_@LVsh~!EVs`*`TDftq30q%6_Oor1CoH!Ccd_H{nly
zv3%nXPR4Ie2c0BQaXwVLioCaH-Wd(pMMt3x
zYv0vOMD1=X-0n8}P8FZxhs!e!|imDzYO
zbzlGp#%=h_atjA(i;r7xp|_G=&!^NZp66ZFQx@BkDYcv5UsQwh8vT
zGprJ2^iYrHIdvjd->PPG&$F4JW}0zFA9ZU8U0Fk~6&EJ5OPXb4#j-a1tPtM|R_Lj)
zrxAnPZXqu~^9NVDbuiv2RQzI;=I<6R$S*MdFJ%8urvjUME;<@_P^oU}4!OI6K0>=Fg9mBciXPmP+O~UL
zXbp^!MtMiWtvR&7pO8K~R-(rUz}6{@{+py9awf-vj5I_Cm7gZ7H09%y4Xer+Ut-?|
zvyBM3KZ#FG2kQ;YoC$5M$*F%F?)qU{RqNBH_Tx6;&g2FbTR0i&KilCtigT`AlFMF?HH0wXo(&R7byNa^u0AVeNKt
z5HGd2DZgYpg=^PwG3)sQCY>ND{vAEHPr?OBsCr}hX{l)vl>nrv8e;~rw##UZ9OdP`
z5p_JaAR5ke5jz81y!7kddFPGN)j8kQh4&TN@5CEtPt`GSmyaa`hT}HO7+(8#7p2uM
zvNUQ>U!vDGm-cP7K|iYBClY04{ieJ}-UJ7ow%jw!_@bAr_pB?iePU#EO1-BQZz|*w
zgFEmX*IxEP9a1Tkz4;U|(EdNuhJiZU@=P^TlZiH9TM%OyX5)UNh
zSILK8v;bx3tM_4%2cp>Ds+;Uo$$2nKsA#CJV2w0q`S~{-dDK_oFX}3$g?dqSc@E;e
zZ3Nk#%hBOtfptb2U3?(H344O(w(YPR&cpbf6PnLD+bP}r?PtQ?3Fdrl|2!{
z&#_-OJrf*sD$E6+eL6V!^guiQzmOj^G&rY0+<)9jNtCR^$qpv5LaP~R;@IBG;!^Jt<8i9n
z;jTVSyDcFe_y$(eo|%SvySHA9Km)?lW?Q$k-YSD8Ki@R&wS23P#xDyWFtFMM4ulQy
zP2XO9pi!Yic2sX?l(pSW8}GjGrIV>Z%xf7cf8_nq>ycA52w-rX&As
zt7!E-Xl44P1_5WO>RjaDeDv2C#bx-fI_~$9MT|`Pb4~w1PS#*pbbmf}mX?+rQnQ<_
zH`HL!ubL<_QrFFiV;wEAt6}59!lU-Kg?Si?xx>Nsg;(mh$9;DZtocEdid!SOjLZDQ
z?{f;*yBP?wQ{{{BUWU2q{l#GvOCrvzgn7`&M6q&OX?ue*w
zH+@^2`GW!bA@^c%jz6E1K33B)Das?_j;L-dH&-*4EDK2t4fHnT<6`3?Xh>5ia+c2n
zI(UTa{(Lu9E~CwtSF){C*t#Kary*1GMDg>`>=w^%+V-U0Z3>fvXc8CWVq$7YPiIXO
zSH-ioI5`idRL>D9XF_Js5@ved4+bR2s0T%q7MC%gZN!F!1^YAl#FzvVW
zRF^J=E^Vg)%+2Z(crh6GzMl~CH+OZP|E(kME$K`v-pGo{aTI=2JNjGo&7|=&@#Vq-
ziir55>C>`fjaD0m!~@fN>#YML^^zG|KNwdQ8-J(^IxiG;*67t#*kWfj&Jj3nh9Y>!
zgX%br!w6@h*zYF~yN)Ml)?kTc;N}5w_+uyME}dbjrtJmJ)5xCLeoH_XuC>3Ip+{D|
z6f!y{PI?0dAKZHBAbA3NUS=eO|MVne1e}8O_Ot2Mr-!xl^tDa*YZRpC(DNOg9j7a1
zk{*TpxOq6M)x<|b`@%sx1@Gu`0&&o%mWV#VI%UwTz}tO`d;JyZO|d}}r|KaqZEUiz
zAaX27JT!dwSlff^g8e%~j$dcdt^99HqbC#VZayp;Jg4{j^vPz@czWruM}OPzLjJQ+
zJ~iMb(-1xPE)08UhUQ`
zxSozq>fvKKX~|WVg%REsqDCL5yXeAbl5e!n6@gvU6i;J-s+|{*_^gwIb6V%|G<}@M
zC5Xh_t+jPJ8*Tl33(@v01O6j6vNJibyQlqOzbl&XuyOycspDHhChIGkhyYzcqQB%w
zYUV#TiKbr;*JPgHSKjaB4cp&&Q9Qqh;B0xw{NuqTi4tFHbuByp4WXG2MmOF8l=v&piz0FamDOYtt
zPA2QEcq1WnGEQ(170~jqWqZwb=i`{d3bx}}y0%ErSjgouw&OV|+XE{8b#VJ;YWUQplcWyjPb@a%3W`3Ae1#Ij6R{6xDDtM^RI!-&4Z2Xt+j
z61lNjzY*1BY{=C1F=nv_^u+?1SDJLF
zhmv?B6Sc*QcFJVi)}Z00LK}e^$>qqEjzHWdHcE|>Xig+@t;m@Ey~!-YP@&EJ)79;2e+{jp~I`O<;Ad#=R`}*70g}ZZW^h1jmRvE6lBV@RCnt;N6RfYU9gzVKFPg{w
z#v+AR8WroVx{i?V540Sj=4mmUP;*C86Ew83x-I`qFSpL_^^heQP|~ZlS;B$#Mn@Ns
zF3at^j*UI&jAjj8UPZ3Sb&-uAx-Uwr5t}v@Dk@Dgn)NmP*=F{jc`s6xJcB)5lg|h{
zcFH&7ad2q8*H^v_gW_X?st#cxcZ@g|Df%{=;uVlbo{h`}(%SU$BbD>66DipqDJ2J8
zs*tR}c^yi_?GFl4Gm`G&xYL$*{mk^V_K-khPaFObZiigDk6%0`?=RQ`NPTWSHkXo65cUge_?NW>P%VuMslyE>feUZ3g|WHqyVu@3>nX{n?ZV$4{dZ
zad&V08ng7^1$@EieF4N~Z^u;twUqwo_A!|1jw<4yl1-J?w!Qn04n{odl+T_hn9|WJ
zZ$r4;+xJhlfVDe)VEtYpW-KEwYO}3@ey>+2rjQUUv`*50)oL_lxrx(&zv!4Q$}7IG
zJKU_iEc4nKUU-F*5GV9C8D*sQ@P>|D5tkTv*J}Ft3Lb8I+IKNt=RCfo&~*DZ-NJyp
zNIM*0vDG(}J8m=wG7IGVL##{c2%p}20w6U!W(j3wIL7MoVZYug>1xZmS#f8ltI3o)*iG}H
zFg8rh%f%;6ty(q0H{z%2QC_3zqfu^VO+xQf-^LD7-J+O&q
zdVy4U%q1rghMO+GU&pL&-oL9uXm6r^&fX=&$~ar=<@9@!s$swBpT~a;)X6W)xo*Tx
zj<(B-@FtOsj7>3RxUTdBM|D}5v(UvQUURb>OE^N7Ni_7ZN}7$QhOBBFf#_AyWALIs
z60P3;)qgsz6Rd8itG^yiI%py8c;M5`vFFmoI89v_XHG^bX{VdUosAxZ;^G2zPF>w(
zw#UU?F1RClaU*%~YF>eFg;(o~P_HMgn@s8=-V+`3Hj75=cmEe+pn-fF7V-4Ikngc!
z9P;$*GY!XpoZnFucMnI*m62Io1(i~SEeQd5X8k3|!bT0O7=b|eVK6p_LrLcEv@3bZ
zn)#Ua@Mn>t;tU
zr{8VQZx%83TPXzg49?CvrWdPkpxch8Y%p6~Hhnu>y$&My-^5L$rb1`bH)W+%xY&QqEDlpg
z`*QZap7|p*)S!9&IuV(4tmH>q3_iSCScW@kZ%oJxdyJiQ;!SPjM(#Xl-!}Ji?ht1d
z9d$5xKwM*Q683Vcp{>lOE1gc1-PA=ny0F0&tT$S&!1t2m!X=5Vuz};$S@w}L9VgQ6
zPLx|UD@~8K^ODipbUm?1bbw6LC?6nE=Jtk&jZXy-Ej_e7cUrX)a%}JcT)cx0)AP00
zSh&g2=H31FZFywL6>Bp=
z3huTF7N!qm2WDczPI|fUoUd!p-VQYGH`sqoL|(VI%EO^^og;}};^$az5vW&Ucg7oG
zEi~n&-x{Z?5WVM8y(=aet_NWYq5f4#>yvZO2b{X0VDH8v+vbY_&t
z^RF{m|F7@A>Z&d}a@qO1nwc2{J5OLKnAmKYQIm`L_)#V+2A+5ib4Qx_sLu<1t+O-Q
zh|hj2N=EIne6DFR9dhclxAt#S1J_cw6d(fP>#~G4{MU6t-@M?2<45g(*sq2?CE|$<
zXMIc1&l)wVd2R&1uFWotz1f097sp3*4ITWrPCb>dfjGQhbJu9*Y1fE+lU5Vc^BNJe
z;Mxl)yUq#M&CH<6dh?hf;5!U{T`dfN7lFd!&-x%ev~Vamo%v9o6IOR4j#`m|cB=Z>
z;I}D)U*C){z)zgpOh1pmus(wP-E59sNDCkNh)0{v3KijS(}ZG?DWOX_(|eL**hQI+
z`cgUULCZn?9C75BGuD^v>*sOIF1ORRoqUpeEQx`c=GEk1v}Rm;y1gX+KI>g|&Ci;N
z=hSiF-U#H4*oCDcz(WIBxYC;Vx^F7FWY9u5kyS44K3BC*JA**60aXYQ1X4j+;-8U*Y6!b;KjnH>;oNHTl=|9*(%@czFYr6g(`Or-{)O8PS_e)WIb-&&sc^F1j*VZ6y?Vh_vL~-QJJ-G!F=U`mfl6
zYsl9Lbi>EhmcQQQXZH!jgROoK^b;JSi23-OU?a3)EqSzAHi^iy7FeF_nmdKjrSlV9
zu#=Qxjp7PJukU}h;&VcH+wD@~y`sEMw5ku_y4WV8;?G*Dhmy<|q2Hm^YwLhd@QaI;UfgRWZG(bj&07S;Ptb*2@r2z^pdWFhKSyaq
z-qoWA%Cp`ye(5mxb|Qm0(2o|DW#Ze)0s{VgQpJT2b)^f?`vV@k)PG&cCLF7B7Pq2L
z47U`!nH=8iof4XCLP-uT7d@n14(k^K9UYNUOuu?T4vrFz^nmNO2MGyKSN|?`G31wUh|8~Vxm0c
zvPZKu3Jl6;g8R~X>w=uf;)h0B{nrB-ySP~5de=0uRaBL~su7St?njR4x1MNuQ|KSW
z`^E@G%s2LI?(52AIhQsCu=Ph;v*1)W=3R0~^V#~2yM;2|D#T^w2xTSPW@+#})bjw&<+|fb6uEfXd3jB3Bj(7RA
zHiHZ3K47zIXkA-yMl21u%RAcm6xN-o?9eQfq!q$e|Rv
zKvN9H+T2|ke)jg-G=(74+RIMF$HFaRF$b-_q7l2xeL2qK$(O{Utn|@i%{OzbqV%Y^
z5G-0m&1O|le|G#c!W2VZab$e_2XRg|0XKu>flrQ7hVwBiD|ywSJ$8%u`Q(
z2SnMzXw4r@<=LApsR$}idUfS7#n5S-P?=UeM(z7
zvkYc}#y7NDDQ_cnwBJBq?Re3EQ4pzS`{~Bgp*P<7SYk>`-B2pczCF({bfkIv`%x})
zw1F7my|JQGFVW3kJ1=NR@QBsIr-+N5B@q$K@KJ7l^qbx%k=y>nSK?;EPT8RYFIZ_`
zbZq$W=S5%cwAD;2D`#rfnV(+di{t-V3Y)iF$U_(e>^2GoT|yP2?6)F3NQ2-`z!+GS
zM0EsNico&gRh<{U!bm#@c6Hf}pT()Y^sdo&iw8PD`1)@TOG)s0;&?(Z4!rDeGk
z=nqb5(v(Rx!igg+ZZM<>zU#_?-uI`h6cyjbefV@)!9m1}Qi&+GWhR7t5>0zngt(
ze5zzUd$UJBueFEk)+%Dw`jUf)=O0zKxww)D^fCD)hDys8!TAqS_T9-kUD_gM7*E%+
z*0-2B(kSmBZrT<+H21Bt9_K@@E15{1Gi`K=e|VuVH^c?6X`}{NDeznv#Td!^6X3CT
zJ>3^pWflo(78~>No0JMA4a1*Nb}i&G|Pkg4~V!LbXs2I
z2ggD7AB6U&)VisG=#K@qOV()rr
zYat}0#Vq2uth}yh4fQFF?Kh0a)m%q;D#O~$XN+nCx4n1ht>d$uF=NfqPyTp-E)MJU
zY0w*DGkjb>^vHJviJ0iwuHqEbRui%zThoQ{@7uz{LX!|-%RomuSd+e9FfRcxlrjW`_*nm6WdUFXjs+ID
znF60~_2Mr^u)`r$74If{Xk;P+U*ShKeqTSf_+b
z;lxlJ>tTQ$HQFUORQT&?e97+YV9P*VR`o?4Kdyf}kca0R2aK`}-M0N1w);LhXwpEiFAhiwi5neY^M~+aY#R#JqGqK_NGz4$!JN1;DK-;I7iEP0)
zV^OrHhBpY@TzqQhLylqd_7CrZkFP7-suA#3bp6i@2H#^tgijh1hvv`(XW{WpUyp)o
z&VJ=Pz(56N9S=n*#h?K5-Yb|HS9s2f@N^4hPpz~3^wA_%Zlo@
z*6gRU?Z#}EiJutJZwX1Au0BRyUk^RS&DQBt8DUhX%n>|q%fX9WK<|r*8xtFpcBCSMW7~KbxK_Jr~mD>bCW1QhIrBRmFM3N%YB)!C@M^w%^Y!*FI-EeQ(xS
z#3Tb|7z9p`Bn&TZ(Vdr>F!+c_p%>z-XSh&==J=KFZ|c57?>UX>>zUT_`P?FzAIlQk~$ac3m1=*|`iDAEmRN9$N6&s}RfzR9Dg#
zmTH@dN>DL(X!xG?zNX|y)7WuCjpVwM^{K2~$!~_5zn)4McVm!+#GXwpnZ&(&^3a-?
zFotPE*6SnLqRc?=n`}`|;jTY~1-X$Xp)VWNX2HAMxw+vz#Pep?bVdQQ7+W2?0uoqKP#RSPxlZ+y$=?CDy
zXk7+t+3P-spb|vt#4oC>azA_zGJwh85?|!FWlWgpQ^T2+)m=}S*}~Lyj@=D&x&w_q
z+qCt%4z=ivX1A--4MoP(Or72B(^RJbJv)Qm_Z%mDdaHBq)(?Bz(Km*weTOIQIZrk<
zUc293O=iEIrKaTEBR1yW&zp}z%^_w`B^U~Jl>$M4uRVpsKoUw4z*S&vDc)h^NH|({
z!lK`Q2>G8JRXX|b^Bg_(P=}<2_OvI_>KkCY@n>O@hj&$VMboOlJw+hEfIzq!l8wG{`5f!Tf*j-nP
z1t0Z>dLCARfM)_PSf9BczEoTTIjEG@rr3fWv8|)E3nSm?!IaDW(QU@82T#eQ`&}aT
zYx`~5xdwa|Eo$pKl1~T^>w)7>5Zz*hux?5;>j!Ml*D{aMeaPfv~Jy#}Iq$!>aykCEj*Rs
zq^XhNGXKdwzzB{uSL14)a~^kv47awu1Z*dPW8Y~s3bqx$7_b2s
zgJfk70UG>^)&VIkC`h;^-H?x4g_@j=bUF{KlO5YqNGL{;Z1>xm=F&~RBPP8G@wneA
z#9`X{ca=UGxyx#F?K(9&Rl;Fr52y$Y)P|c2G1VhnhhTPZuvN`a*JIq}=m?kHuWUphhB)MXT$5}*o+^VM*Em}sf)NC^0PpM6NVUyvwp$2VYHEY^}b
z5Ks_JT3Clqfw=-c-6~d`+pBW(Lw&8UYfw*XbW+)dY5gV|Cpr(^6L~okJ4!Wd#_F}G
zCfzSIeNU$N^;6S%4EeWqIKEazg&Po=4fZ&wYI7>jPh{Zxk$+|u4uwBOY+$_&e^d+v
zk=Gq$WFSb-!-~IX$;HQ8+)=UtcULK`_IHZ_HTRtJt_Y27H)D>cqjpzh3)aVT4{-6n
zrbNzlGwpHXEw4nc2FnR7Udr`>fIp+j*w=!Tr(4srxj#5&WLfyPZXxy@xLfC|5Ntl;
z)opy(ts{KQ&Ox}DQ6>tr=a2s3MKUbJr|eb(cQF`tSdV^m(U99K{8B?(TL8q+o>tW$FSACIJ
zdAo2=7i!wF#LxB{g`m-gdG%*TSyXa})4JEV)6ePTorRlgYCES+3wMPG%O2iM2aTM%
zw3#AB3W1Q@rvjv0AS)rTUlbP?X;uN;?4LQ_2L#Gy2!tM-UCE@O(R$Bca;a5tU2%#X
zt+ziXHM)ZH(;(}+HsE^Bl%%hv!E)`~g(Fmt=mGjY=1J9qXp*|lNL
zi;jLhByOzC{DnVMQBNH7wsB+@dsfQCC?YMC;W2>i)t0>dSW0oNGUfsx2!squZ~Paf
z`mwO~g09g1{QA^g5k#&mt==(vG~eMEA%gU<(eiD0om!rzwhb!Vo9_Iw>H7Crt)Z92
zG`1dv9?-NsX}~0MOkC}o8X$ChJXmA(4f|jF^P75ab<`is%v0R}KBNy815qe=JdmA8
z#K#N{kjm^cTtq;7MSI#{mtX}Xds~-6yr0N=TvRklotxyjk;C#xP2qj%$+HYx_05_h
z?;^bF2DY0G!Fpi4#BNh-MGscB#`w5e?_SS$zUP@Qd&6sJn)WH)me@hrZH_wqZ@fxcOC
z@P{x3r)|~0H4(B$4M(ZDZ<2KaF+1I=imSRBs8sZWDA^MUc-^8SN#T{lL2sU6jmWol
zMyr#z{~Q)wbNq5MQA9%TH6#E5UAg10W{OgB=7$jQUzFzGTrIa&31<An$Oxnt^9x7vusdtObv(Z-^4SzQg>Pwkv=2|&l<-d%SaxC}}%q#RrZ
ztk{-If5t9IdFple;V&uK$Q}C$PgYI$s@ZA6EEenCof&WK8sd9bxNeI&EPvQ-PmKZA
zv6=Dpn}kv0x!|z<_``%Dp84!>Vo>;GYouyVhLG6K2F&M~8S(UuDFS+s#+uRrgCA8{
zX&40Qp&~W!8|U}0$Q`d*e{u)7-C`}A8oEZ>%wptVVvd96`AnX))l9R4msR)J5ZC9m
zp}~l1jmcHj_ol#h-Nti!PGEV1NX{GKO1~K4S(Ta*4DXiN8S(sE<(t%1>GT
zj(d|}Z;PikUNmt#MhrM0zS%Rnp$IwM>^GLoXcyqTD)@FCu43vkB
z`i-?d9N|~L37b55x1NWmZU-yw$jXgoW=QKa6bfRqzzjvn`@%nGkm3`M8=?phB`I~f
zt)r~`?jpg7f3lqTh3@
zDh=ll=`-B??q_WFT==nPM1$eUo01(;4l-si8~6@wEy_Zw3u9;l$9i^m;qHeCGEM53SuL;GdL6$0l|{m@20JlzBx;rcahraYBN0bP
zYZKW?H$_KH^iFV|JiYa-@w7(72mH@E)Eb(Qn*%=BQ0W|JW@Zt405H;$I1eR}n4SE|
zdGg4vEi>5X8#!4=A^)5vbY_HO5IWY?2fA|)I&LO)cczcE(lY7QEOpTtE?Q)3WIT3S
zG(D@!tn)@}zK0?b1^+^4-7jNmM3MKf_YA*!LH@9{A+j)_B0vpX3%e|B76WJ!?B4AK
z!dNf;Sqsu|{zZzg3zlQC#LkCF_tsfHpHiq2M4J|pLXNAdUjLP|$@?K9>GYH^I-u8p
zlXG1Ej1cq8$o60ATaM(t7bG69PprE|6y6tyj=c!>BKHSyHMfr9x&WG3K#=Yf#G;%m
zD-x~cD849*Qr+h#XZ>%+Uhz)+aS!*d
zrSX*35|MaZ2q(fjPlIT2SVw*YM;Rp(xL2f)F{hGIdcs}IEl;+7aIf`4iqoUMBhsg^f1<3DkWgrfZ}JP)0dfZS4ixHO5W~E~XCy
zA3o~q#l3giMVscTi0KS+IK_^5#PRe%iQ~5Fn&RTx27k|x;o;{)l3?PfV$2S0m3fl}
zZhHL42q{Hy0~69*39{1YvcD;))^i|zj~VOS`fe;EloN7YiJwdis7RV^qqE8W*V~6q
zz7S?=gnz%^F0JtgztC>~DgKk5;1IV6F*!Wk()&lh)4rWOO+B65k>jS{8g1s(j}LaG
z7kgfIj+K#4!+d1Tvh))6@uTEXt$1095?PMy5~|Y5Lxcg5bsH$XNhsct%yNQD-^|OJ
z!1dpGb6)o|%x?(}v?fr(PWm$Q5VVY3{g+(hq{*hJ@~Ut~KG&v2V_W3Y+3B#L5OMV5
zrq&nqafaoYU^+5A;r<~rnMJxlAj>xJNGT%CVAi00+X12i5((fJ6b_Lh5~#tO(p`kv
z`maiq=ZMKcxL}L1lxm!YK7)S$$rNhp%&_19y&%!PCBAoRh?oS0);d~>v!SKl%4oLwy}OwCRQV$pJQX~+((C4^#}AJ9@{
zo07xVlqXQhWkr^bIo=4A(rglvOwyy5
z=%CxnBDUwiyRUjAxoUwicFTWTd2&9Y;^{
z3hPt-uusxBZ#y1c*J?iCt1!r;o_@_}-)53|=KWz}$nijQ8lB)=u4ZO&O>1djnU#_w
zQFH)FSw(Pp4BT}ByLzBVC0;|%Zi?z8_^y|qM>t=@)!3eaa5eAM>D;P9=ys4$)>W)x?ML>534
z7acPMvb+ilO3dQPI-muT6qUQwrBpQ{1O52|bgNs)3+9+ZTBDtAj%@LyxaH-kJ34s<
zGki|Q>pSgs4TMHLG$EqR17COd)*xAg_T@coeyDCjqKm?2LK>n2h+|P`{t1~&IJMDN`Dnp@J<5Cf;
z$u8|RA?1uqe!YoSh%a$~8-1O(yHDDO(|k}<{}y}usQ1IsK)pY1(#JX@{_w?hsct+9
z1K0sS>%NG>yy+*7oVmR~0JBe#kxzHGhNXV*Ry*WoT#N7RN+n`vL>wd3TN0NjT-TX9
z)XO#y23U1hEs7#V4p)YB;AavyXIuWKVURtrw@Zf??aZ$(t`bm*#Md4X
z$8Eca$8x8rQ3}&u+|JCOb2?+YE=^B8Do^nwqR;0fuMqb9ahh8!a?%yixurn2@F~%DH3*uH5J991EayGoFH_6<=X$%4a3gQ0m@g*j*X+d0TW?
zm-CCsUCe49QCBK@f^dvi3LZ3
zGvi80Uflp8IBS}B>Rajx^_=26^|CBIr=4u=TCR5^ovJb#<&P-tB7&%VAe&udXWL`)>JR5UaewtCxX`*>p|Zr*xnIn
zLlWcEA4XG})*J5bb*XFQ_wX7l-!7M&-zIyuFNEGUY<^g?CEdq%7
zw0{y}f`^;bWxIvZq%(De*fQ5%yJN@K=c(eJol_7AaZ`PIT+H)#a~p?yvnGi`y{6PF
zTRK<+;Ilc`ksb^FaDE^1C0N`QrOy{kB^**>`*f$3Mb*+}IFI{g*p<2BFXl8a`b0&N
zH8^Vah4_G^S2;d|1I0NtqKCzvZ^uebW6>HHE_M$O|L$>)M1L)6NiRQaesytnpdp8Y
zZ}FD7^p_-u!xIJ07WTGP4UX9aThjUT22q-zWcSOwO1xYdnP
zb=01jGkU)GHhqr4Sj()J$>SHtjd?u>4PeYeJe86DpLYl6A1t&fv%{0I)iwL|L+M0W
z>3#FvENqv*;^~fnTim;M*V95yRuO4o{rM6xLXYQH=MJdZkt+g*#0u)mAY>7?ZC1&Y~>Q1`GHr)mfj!7^#y8Lvj
zNu4&!nUE%WG!;U>$yCa|3LzZ6R5SCm!6g!-ZP8R%z#zDI4%9
zJ%I>XF%m)k31`5WFYGXO7NRq_FrS`JkK2(F2wFs;H%2Y#6l!d
z`{K$l=9(7f0PNl!6{XnQ6l-&LU|5S^02!OV3Xppl#euXi-XaEqu_*Sta*n3qFgYAo
zgFlS*7j?DMQyxE9C*lPhsisdS4UbbJBececOH5^2ZPjgGb)=U&s>2lL`&j7fvJ&7m
zDasI#w}2kU%W8vhI?@cXa@|HEZ1K{U;4#qOVl$Y;qWwRvo8c!~W!*1~a14L`_FibS
z8Y;-*`zqJkv6_HK+?dC1~6C{Nal$3en@z?cG$Q3hrhM>znGy{u?%
zZ4H5}6e)0Yix`-7JPd;Y&_TfCEoeJ!A2`z3I$XMEuWyA*TeB{{n``}`3ajekU{clA
zU*j4+k@YJkNkg-QBZng&4ZLl`)?1Y~g=e%2EJ4=su^LJq1FzlQCQK7f#u
zv5uFvhTTyXlY)z|%wCi__B>OdAYW*QJ7)V^CP|!zL`UOj(MS4y6`BVT|U-P9jBhS7dVziu9qeMH?kb_Zg`n9u`e6mXM_l$H(b
z-fbHM?A|qPBtUAjOVTzHwn{)&B@MGcawu>y_TE(t1_PK>6r7@P7`oGDTBOTz94?J~
zH@ma!YcaLbWxyfun7#EY2DZl{=tfs}9Ws#YSc$u*2%;Xdn8iqGL4i*gDJ=>D_}>Pi
z6hi^v3cx#aPj`wkpt&fe*qC^jwM880r!8V+cgRUwLzScuP)|>5C5y{i6uJ0cw2|_>
z%>*?h(gzX#YHBRJV{V}Tp-E&VW0yGPeJrfr#hQi=7M;QMv{w{+R&G?35b-0;FF`2a
znGY0TIw$}Q6g);QexEjAM3j(+kxKIg9g7%Hw4h3|Dwh#}>pDb9Q?j_KWN}SfNg1w4
zp;j~bD}3wjEv%r4LSjtzXKqvF|*
zmUD6b5DEq810H)#1qBEd3iO!3oPJS)-7B!LLCD3+09q%71avQ6RtW*S3<#(UB@IyV
zyZfMKXWcOFc?6Elo9gfv~HdWGDEP@{wK!9SFIR_5niS;t90{|j*w<`tWTgN
zt%YAH6ANZOF(2`mH)j|y8Ca-^BY>z|Nzqynm@J?Omw+iAQkJv0cUc9H4%j6?1HtX0
zu&Z+MXFc8FX8~Dohu!s1tY(Tr07b71kK+?-ocs!oWC^t)~>Y888r_US?^aGr+(V0kHG^0#IHK
z0C5^9;;=hfHb96V*)Q-#>M@SF`GnuynJj^H1OKpAxjdWblh6%DKCtCueDwPO4*+Cs
zV4#p_r2ztA1{f01WdnX8{udP>42=U~q^oHV1T6LdWZ^O5^ij7;K#Ozu)4iE3N7JvA
zn#5&`Oa8iZm4HD;b|VtCLgkmQAb{#~l>&7Kh=EZCe32Z$Di{#I0?hbD
z1%m!1$CaC^;Fp
z83IB9d>!C&ARnCoz%)QMY<|lw);=18pRu$yTPaJ+k4FFy0{IGfEg(8W05X*ZZe)c}
zV7CD$x`K>{wXzZ&4{HJLtiXxweqHesG?&P{i0W-X9pEuQk09Z}uHcJBvH9x-zbPW*
z&c2C@-SJ6Js}AImG(~)z-$wwfhu#$g)OuYXatHL&Zr08hK(`D^5DJu|rA^NeYapCq
zb{>^k$=9_yS)dAKaXDZSFc4)a5)!Fswrtm@1ZCJKHF4C!DNl&i$N@S96~x8KKv!Ln
zQe67DH0~z|fB=XZ1m6kjn&Qd}pQP!lNx1}8841@uk(afXP}c;h@T0MxG6Eu{xcbI5
z0EkI6lq^2wz~5~Sg+ta|J-YaU#AR>=wyMW9KoN2vL@{P{YX}thE#J27|7i{oOio^Q
zrR4!ZE(Ri{2!Yi6_Wt+(r#&nN5`#Nr23zAIbPcpV1!)L8YsaTtmnNin(Olbi}~xuV5_vaPvvbMES
z{1K3lq{XeKnhY!kBGG-M*(VwCN3e*QM>H3fqtwP
zs>6%5vzVoeN~?Ll3SeiI=8*#DWcG0sB>+o{tE=yqUPbWv_V76NzDu#3UMB4U4o+N)q;XsDUwpLG`hL(?Tmg~fcfcjW&&^5>CW
zXa2b>OXIE8crLHW@dGU8e`t;QZRPj>S)GCSL~-FG)a-w2
zy22=~zAUA(`nP59aWE;x&)l*$tT6n4LFzTqla)CCkHV$6{0r0!{JTQ*zj%Ii{sRWG
z7OZIgKlzGJ;+wyX_3Fq1YWBa3yV8BHMd@z}75`r2wFdr2SL14HErHcH|8)?(jN)tf
z=9s^3y9`zZl7Ev;YmV^$pu7lcgw7Bt#lP1UvIeRCrtOJYH6}RMzb#syG(T(hcLz3G
z^-Fea%-2*%@RyvLU!`6vk&clN3%Vv&pAPdW$Skyj#r$>4wX{KcL6<()
zcI~8p>DtHHf}g-OVo4qg%oAKrTe$5KAegIn7J`5TBE2vFdk^xRlmwPvl7jvN_TOHJ
zv=kH!EMI{?U0r@%5^kDFs9^^A1{`X`^2?IpVkDOpA^&g(J6w)|WLon@O5o#T@Y`~S
z3Y{MTHh)6vf3)WKCVNe3B{?t%aRanxqT4PSvBC_VYYMwaD9WyH8Thd3YC_DEuCzw3;CEaeDTFs
z1!rTVATnmZNWsG%AVrDGz90RidKQPd+K-Oxmehz(Sl
z4F!+#di3sq?I`Cw_s_jQzULbs<96>gv-+AfGka!3WAMefF#rSxh2V4$(%%>DwgJfR
zy%!vrZy^iH2d4u=Mdt
z^MME*m;i!7#xZno{0
z8Pr{dl`E?)uDf66WjP`aQ7$$%Ag-tAlgawxXofcWCvX6d;OYr(Q8(?=@bIr(11U6I
z*StiT7-iWkMJAIa1Q0r3!I7Y)0Fb3w2j%36LcnaWwiHBChR194jhGD4%+(V?kLo
zeNuC=@MQ2vibL1AjG_%W>8$6|rsOybC~5w$b0GL-bO5vq0#gu#5w&g0dYPzwJDuDupz&#v>d9L@g=8}BTh?z8o3Ap!fV@a(|Bx5}
zD2+h0y{s&sqpi_!f-MC~7d)reFjkgfQf6iucy*$;ECsB@NXGmF4}h1OnF2cr0)88m
zj$C7~CR6un$@;pX65FiMz`F?@DP#sCiT)E7&{rPVMnfr3SzR{3hB`^iQcocp>bz_R
z5*20)BwQuP`Y!*3SE#qt2B5M|?zRX#9+HKA7-?%dIM~o|{mN@o11V7TmY{oz;MT!w8@RQO(4f+f=!bz)1*kVusH$ce0nNUv0
zS@ZY|_rbacc4f}JH^2&@?MvbQK~UYyI}jJ#mIAf`Q95m^&|RVcnt;Qhlbg<^fE1;X
z8T6%y`fUhm=hMPw!{E6^BtX=H0C05e0s_v}-4F6D8>(+Vvmlj1lVT)Gd=2E^s2akt
za~q-YY$Q4_WeSk$*kBOvVCOUFb7S`8raA)|(1N9wzo)hOD;D^*HX{<74am_^5Epj<
zqi+*LJSF@x7!+0DpWZ=LG>|lm3T`R7ext13rXwE?AR#0QtVEhk;%5|b6w7N1%Fp_;
z-tE$JVZ}-4ColJdU+Lnppkwnv>!RR!H(lsVXy_%d6^SRh?-nB|#%_VQooeI~quO@T&$
zNZE+WRF9(Q^z~VPUG;rA*idbKebI*5H>wO@f17jIkr(Ts%w-
z)}LK%XJt7v?d#fZBgF!ZS86GyK)?R1RsrB_AeW9rm=L#<5K?C?3v{mtgZ^JLpkVLN
z$&zuFl^{dDJ0XMw@g)H!Bs>;CYC9{Jp@6v54G+VNO9$l6o%Xz6a>UCnV3y{>0%HUj
z_PrJWjl2hH#uN{y0M-zd2Y@(Bd5HQ~l6~y+prC@ws`a7gU0A8gY01mMYq<^_I!4D~
zO{j4?pqh+S0s%f^z}199RhVW6&aCZFP|wSqUK#IOQdPhp7X6duV=F*>Bjz@S02V@E
z4aJi%Hr8#mC8k~5S{nxUA02Q|pR87)(LgVb{HYcS%nP6y6eK`_3MkUyDs~BV?veR-
z?Ldz9pSxb$A1C9|rQh`vOMnHKp<~$;JivzO*U@9D2r|)Qr3Ftsg8WW~&)1(k%F5t+
z%})#g3LV^Bz&ytl0CLjmB0C6X+v=z<-27XIXl2)jFIufD!O#p?7&7iBH!B2Xu2aee
zv!&)v1w6XqYB9!x<};8zKXK#1+<;y0Ud3r5QHDxR`mR(E2Z<~3J7DaBnhM*(giZHB
zZB#R6g-6tS3KqirgIFw3Xc(QJxaV%IyuT8R~4ez|FSC_Tu?-1B9oqeo;
zMx(jJN&HlUyLJtY;U;uo4J^H|Mq17$u+D!v;@X}0CxajYmL&cswwG&Sxre;4;b}1_
z%$;r_?DYldvmuxE?`Ls1w=pV9w)j&f50aij=Q<9FVyIB4xW0`wY&7csl1R+zlRNrOj5Xd9Xj1{iHWH}jy~Ad6$%DHZ)o!(fjT;fROe
z!GE+3-Bq(Dt*6%y-cY`p#Zi_@S?>6LFbGz|!vS3^#+_o?itoEVecIRKlKtJDfbXzB
z7z8bn4k4YA)kadVrUhx#Lu#IZJ+BSU8^p2VzEbfM(I5^ap2V&&(bl+mJsABchXUz}&9e!0NATF!(r#XD~cLo8hDITS*?O*5NU7K~k^ug=9?>L-sw;wcr
zmmZf4EHVvRn2XKuvJh^wW6j^#@a{>%q&g=B_Z|2fEpV<`V~UV$HuBCXH_iLKgXQOU
zP@UC#Xf8h;sYChEw1u=`4lLDujlXJmvEHe4e@ZiK%lHo
zYKZ;AlNZktIBx0*`t%=g-}M5=6WCY~w%EicHJB5&aqc!zw8w?>I}zL~3L6iNppME~
zcH3ozUGjd*CE;heedi4Tl?SC$WIYT$RDIn-_Hyxax=6nOE*UAsA|BK=%1GC??#Yyw
zItSF8%ddb-)MDl6c!;*St;N*`wD+}H##A@;f6nPQ0bjpyZl%2~$G
ze_!z7nxoDsEEc#UYiVm#qR7mStv?gmLu5tMe}e^E##69xAUDl+y~35?Lzfk~fQ;V(
z!A7yrG$`Eys~}u<<;K?i*Fz_F^vFYHrSO25V_8mRM
z6=$*`Bs??*3)Gq`Snhh=Kfnc)aa;)y4hA7FiNS);-^AV_4uq=n-epmX%)sLIP|gn<95gw|-+o;QWWH
z&Yz4|qnZGQi<5C#s$
zOe152j5dZ0^go+O7^kfa24=r-N{-H*+r!7gj?5*DuPhVp0Kv4Cg3aIQb!_f=Tfo0<
zZK5C{y6L21i|O+7pR%gI8Q^crV_?+5Qz#{}19mg-oOiJ3D>sIOn8wSZbVlwDE&Tb=
z+gbGAUhKj`>2>C^hVpj9Mw6fuFHbike*;58w2hE*=_O?gPkPmRzQ!5$3M^oys|xEL
zc=@Wg(UzAseo8046*d-|R%|iYFx{@+_Aep>`G!We3a1AJUA?W|&o*G7OGouaZIA$KJR6P?m)SO3LJmkTAQ
zq$um(`31RIts3y%FWD;qzz#wh5sx|^WXpf7y5saOvnD`(-r;n
z|5ZV(XzBlF7Kw{rS^!bVZ>xda#X$JdY9J5SO`m_gOwI26qt
zq{6XSF2_Oy8xo)C(rWH^7_>No3<02#F<3l>&7}t%3E`LKvcC}wMMUe6Nc5`6czljI
zm=1%t2$lMIxfI~r!tD|+DRBw34gk>=(#7V+gTrEgP*F*)%7;>
zZaUmIueGqyHPHo!mN98d)IfpnRbWzaqQ-s`-9bKhdL)^s;+%Tv;>~@wB^DOu#rPZ&
zv=vdL!?k_-Hv<8nQppm|iTs{3gA|0$I#Xh-P0!VUUf<8BUwZgh*qX+hkl@RVEZ12Q
z4$MF*;q8;2SLLN96qq)O=9E=QyuIdO_TrtvTFZ2E(|GRmVA>BpxB^Ha-`3bsTU?v(
z$)jSf%ZTaHG3IctOdP*(V4sDZ<((pP5Yh6W@4IP15Ge-4Tj>uM(u?b2QmDbzl
zU*hUJfh0W_=7g$`MZR>Jo(>dUMq~xWp=A8Kl+T1ee6;^%-C&7@xhWmH^l`QCZ(^Vk
z9M-ebcDCvI`Bj!KKm>etY*wb^@K_FUM;Kp(+}$Idk$KFDmMIC8UR9)sPWDRU*cM1+9@s!Mf29#
zze`H0((ef%W`}=#|5xx}-F?gA!hEFRKkLEtXzH~(k!6KaQcxIlU6^7h8E2fw>T%QX
z&wgz=G&5LhVQ8XFVE;p33{IP83`(w4ln=n+P{nurB2X%<6ywRv-uC;irs`(Oii=H8
z2~&PTR0u%$SaI$UcQh^
zAHaqnbO0Q}VN^LnCf9}~#pJZ9zny;lvc#uuu(+7A9N_8S&WVd7VxjplY1T#>do5)3RJO^yW6IBD2m4HJ`}jG-A%ineQQb*r|#UtGsk>r&e~
zgo@<@$)GBLG}b^z01dzp6+D&+MshHk0ZTby;sW7+nhkX`Lm9()b;tt{_*j+!jLT>>HGAn8jNQhjt18yyLO0p=uK
zNl(#KGYhFy72`=kv5%8yZw{6Ofnt-jT$Y-yZaSV`)ySnz8U_WV#f>8%z%~{jXc-aH
zkYNy=D$o-!*%R>Bq7P_2p6NRDuRJYpYa`c0!T=JUVU30gp@IAyV$fBa0AnI6YuxXa
z*5}cB%h9^D+-0H&rl!J#r4m$cN>ww(cBigCk&)uCTG|h6KRX?!3d(WR7P(9)
z1(qW#3x`!e8wE(97eVmx{B%P?92r}yNVW5!b%R#RVX=Dru01}cm@#v|#KLgd(4nT3
zw0I*FArC@<)j?dz+_Qj_q|vAV6fU>8Q#?oJ#VM8yEr7Uv%i1j`f@_ylM_Q^#0T8nI
zcuYPWYC_J1;b1_TG(CgID61Hvmod41GK9Zg;yI_2#oE;q{^7%o&m}=YKKaXRg34e6
zhPr?*m|&O?U^pm{28F@vF^x!%kgk_4mO)OvmQ=khMl$Ljj~vrF3mTba8v9$YsG=jP
zB4IiDIRqF20%mLwj}$w
zGzkarIU+&7MG=gyKlYL}+it@OO3ePf@u1O>__U#Mq%;^131A`t
zSS}8zbVOn9sZ7W1oKSB+lC@Rr@O+qWt#6s_vUM*FbaeT2u!e>bbZvYDH{pem0EJeG
zlAWx5&j{sKp~G6C&w4N14B`5D{I}2x7^bDcDBLuP`~5iqZ5%RQ=lR{*QoVq@+KlR;
zo`W_My(g>xECb&X=Lvyjp?HA5YEew?n-YNU3hO|TyTN=ay
z`YHlI;IOA4szq@$pW8N9eCM4r{CX4D?k%6SoVjn#{!xefY8F@nviwS_p-$@+Lb^@U
zqYL|t{d#uHP0sIh@SM4C_)`T89n%HC3Sr#-5{*L>Ah5hN1F0JyeJ>N{+ShD)xHvdC
zSgZRTe0d)Xdg&X_2q;VzYU6^?O{pH*H))m;didE*p9l3;hQ+|o1%fxEqakujFWC_w
zP)ds77Avi>Nn`)^3m0~W7?nBLdH!@R(9(bvjpL?1U+g*xGIqRKSX3+r
zlNa_sS_inN7=TQZa5zjZOkDcf-IgKm$4{F7x4?}>Kh1`Nk}(9Nx!aP#rb%=r$)Aj_C~cAYn&tnbcPbF1x!?U);6iTFNP@u-h7kmexo5|8Z}@Y+
z_QcHT`Jvi>w7vZ4TJ&qNZKRr^0s$xp1lt#bMPGfRV_=Y
zIzU3e=p;TI!`E%+JLd~)caKi52n(x#ID+1ThKd8|B$u<8!1gua;TOEh%WF%1-`EQnZdvff^?ckPG3Mgxm~1LQg?=uQYUIyzdn+2*!L`yU5u%N#5K
z?y&n8as?dG+!td(ztfMC_Uk#a@ZQUIaFD_sT>ttuG#!nALFGu=0t80F^etlV{d;9z
zRu-fc&?7)X>97bGSwL`S7A^eGL|;(;<|_d5Q9wWvDFTHN;P14b>+O8GF!O3=h5b+f
z5JShIK}V*OrDSMXe!aI}&(GQp)~wh6yLg6e^xL2ktPWIj5d&AdMiW+y8GLZM)C4n>o?
zo{1hhqaOO_SqCpGLtv$11eymL6eNc16?L5n8L(1|AZE~tpy=r2HR=;uv9)D(
zOS4J8?J>Xsbg<~~Ve~>LP9CDwmRYQb7FLMhzW9w{kyGs}dr#Kicrdse@#wz*^0|^g
zkAR3Pu=JN8?|`v%Ir6e`zeliJ9swX=k$DMiS0^-f
zh1HgnEKBBBw}EosJcr=;I}X~kUwAZNJ4jg>EocoSx(k6Q(G!rNIUKUAIq0uTRuEYL
z^aBB;fyx!;ll%QQ9Pmr|#&6q7q@^>!U=g8c?n<;D`*1Ym+E@SkZ57;zyXyc3)9+^W
zuDcvI_*KlmG6D84Fa$a;E|n;zxv@UT9ly-kuLaH3247l&dcb?%uLkh@tUj7MZ-yaL
z_wSmY`R41t(GP=}!=y_yq!=vc#LFSU-(2li^3f0|lx@IYl@&AvcK`p<7T9}`3Pqz+
z4u;>@HS|3{`;~go8Krd%_(b=I{8|1ZQ~ZT`SRq<~)T)e`xNz)&?eZXasTZdI6AB8U
z&^&3SuZ&5Hs-rjPLgdxxyA35(XuZ
zS>p5igKtI08kg3k>cjq504QkPEHEnkD*yzBC~zwIHEa601sLMgzwJZj7PKKbW5q7!
zo8>@hEA+lUwXd>bxAXlmZNNC4OSv*=S8#{2}nZ}8r=q;CD
zHJ+?o#7%qwqD{^oN(zTN_@EaR|=
z=~aT0pDTOte2H
zGT*XX+NUPwm6hk0fBq+(co}?rr==Z)Hx8pxod*QL3T27*VN}F}#FxS{GFk~?;N4A3
z=HK?m%XjbHd{6B7pPI_^&Ug8nuly}`{LF5n%@^Ym?Tw9($I9%k5}D^21{<){N**rI
zRQ|0jiZB=2XPk$*RbGfJw6xDma1nkjHl;&e+s^HyrP}1(@c=JmxEEfk;GJrl(q+ychunYHO+b1me2h-am^$BwT
z{6QXQvf2$dU;Ynxo9~0*Zm8Si(hE^F2b%5HZfaUhJ|H&Ni&Yh!AR3f{c$v(_xkc;w
z_Tj|Y#zntX{c(xf!v!*6!J!F5UP45;n#hi!rZy$NjN_Yf;N}d>6(S_`b+iWLv6+%v
z%WgW)wWS^!s9Y*{6?G|KxNZpMlzxCPPvQ9QzTcZtCsnLwm&IDohoo
zIgM5l^r%t9Ic?8mU4Q7KmRY_%+xvhx@kjuKPV?-K=B(X5>+k5iJ=;v93?A!qP*j5V#aCOq`np4nY6uw}sG
zPw^U7-7(a@Y84sUF(QvKc-Mo)8tW7!I5`t}#)W$eWYz>aYbfIKYPRicj&W<@cRPP6
zx!`fr*rq;3n}!rU8Fsfli6b$RWT%m|vysdh4Rk6fINh>mL-gE-7Zro659i4%bA4xc
z6KKl|shbaio+iR%(v6LE%SN{fJ)SVHaId)D8QnbKQ8P;O*`94sGwQ?B{4x5u+Z1Qj
zu=+fjGk%B&$u#ElB-{eY8_5n4oXbdmTPg7uPcQT6dCmpn#;4?)Xd44&`Kp)%yPb-C
zVvLO~>qILY%a1{9Ua~Tc+dzVDnQcDlc-mN1#8l`U$JqFo$lrvpiN*TFyyJ8x*Vhd<
z=FX*&Y6)BUGWQkqhaYiFN|I^D$P6f{3kDFkvsm-(1FUa_2`J&t-F3`MWq1Mn`{>fu
z(~sEJyl$k(SV3SUJ^-}O=Jg}Sq@)GFBSWyGIg}`0;@aOS(zIp6HcNN!O45~HjduqK
zc8)dLjuFv29LGG*?dHo*6N)V~72=*5{Wt%y9b8d?L4;1880kOKf$Mh)trRuHso+>&nRpLH
zr(m^LBb|zpo;p^r;yIT>I)jx7jlzUAJXj^RQsMd5D0zV>e#Cl(B#l)>&E4xW5*t-|
zh*F-67;&38FmN2(!TbUgZrt;?l1Tg1xbsv?3lt)J$^H6aiK$eNnyqRaDbAwH{)Aol
zhn$x+l6Tc)?ky6D^Nx$pxfFt$m^8qck_I5do7CS_|#l-=pwgKBc
zp4oj$O)1#>l9HKlnzDQ6Hpe5CO8zb5*UmeuEA3FW#om%D(KFZA6aOIE7_fav;f-yQ
zQl^V0_Ih>Xoi1dmy*!e`rE#(HZ-;g;lmhY5=@T`!vo;rWntfPxGGPyWE*xNzHyV;^
zA3&SaV-(a*qW{{(lyIARAD4`xc^??&Dt3$`a^9HJ&Gxv?=`BA-oYLf>u6syDm7x!g
zA6L91|CH}fo%%gyNZPtUb;8YamrAGjfhWZk2R4q(rL1-YB65nJS16-x+w8ow!yi>y
zv!%`lAjf$l=7gsRynIETi^k~`01^}YbtEeKX8J%lOKe+xmW5X@P}
zn%t%cl#bJ3@lcSS3&xDiundMvi!4qt?QZU2v_^`lPT-bGpNxd|0q3L
z_EGcCa-1#dX~z{dZ4gKc(l{etYfa~OG)3_@i(W)1$ZIsO;;c`THio;k9Bfq3$kV3Q
z!04S8DLvS#$jagvFrsLcf?eFJFF>0gJofTjq2Q;)4+|z??q7hu31)3>
z^T2I}kIV*{=Wa5hTp@F*e$14u=|wf^qb(x=T-$c&I*~CEA^vT52i_E|+Mv|;_=8V2
z%5kDb%u=Q6o{S@rV;;)s+EFPW&Z8blb9EGA74IYM5EL9gO4HOk2AUa_8cwb$dS~W;
zbDgVd(qXbyxSM;R&RKD*ifu~HIE&=g_1^L>b+Oro>s4ZcEoyB`ETN8-xf(l_?>1F6
zIkj~>DXD<_BOOq@EP2ceZO`dPuyr3{>%>l0-UThAN2S5
zy#MLk+f1+B??q-mkiyn#FRZ)0ExoM7KE!jGPI%~Plg9iGTZ1@5
zZ_f$15Y6dr$8A{G{(|v!9C@a&7ZWX_w`#JHfDT{nBtL!GQl>+%0DdkKuIWS*FKRE0
zQgS)-+|f~D6!%FX;!5Y*^-nj3WgXMLRGVXvVE8($cS5exyUl4PoI`a}R+Y-27&PBt
z!j(FruPPQ;c;#l=h8~r4dSAy!zp^WJogUL2MNl**k9v8gyg}3SPk9I^a)e3EHf_b7
zhxmq6DZ`)#o#>m~y`XViyKwlkeev5bKu2w5ob%s^_Wn2q%#fAa2N19u#NDVSZ{kv)
zbczL{hmvQe=$e2#TC|w4svwg@UtNM6^4{%Jsc|DSO6S8Sy(7e^Z4s~`p%$p3^8aGg
zp~s
z*oR4AC#1Zc5m9G1jY$k3z{qBXryp5X~j>Z~EN4m(nL
z!S3i>8$)Pe=_&z!Avv;lL7d~ZX`~3Ok0BOWhuB2Z47#uIL}Wh6P^WscC77oD75W8u
z@V~&%7$}@$c#52FsoK0w#*xKXBXN)6t?c8vo8=;+Kg4kXV`*FsZ=iUcys#^^dQMAP
z=tj(yo@(tFG?aEq1tvrD8EQNrtmC(_H7!kRm2O~@TE2_F?!`{#frFm4d#X1R4jzWy
zH`3MV*zu_#>eC_FlaKpuwWA2SF!Q&e
zZBanU>y}=32^3$5e5TZ(GRshvVl!RS4wh|>Zq;vROFQk-^*$gx8<%*1m8G2uLlb7g
zjhj^UMRuY@kq=TQC5}tQeW==JC2JAnZeQZ8R8aYcO-zN-(5eqTORMNnNId0ZaTzYFFGGoGmOzhju7Y5{+q8D0wVtjf_DQuP6WDoh{Pu
z-@TN-A|%X%Y}<*g6!6Gc)xH^J-smj1<5~nq#lN-AmH-z!sJLd%vG<7sfDoyZj5fh9;+8UVV
zo>2`saO+KpRa@kr`(B9Qj(Snw^P-%E-&-F#IQ#6ahR|D^CxrFYp2}4XYF$usLodzsdFCp3i!pj>|heeOWT?(c&rJlP;K>>Fd?CE
zsuWK+ctiXtJnda+vwz4rKV=WZ#`Dh+_@SuhL4Sk`k4v*#3ND@6CwGW_1gaS@2R|8G
z;+l0-R@SF+r|s=Gei}!R{-OwGlthS7uqF7{oyD25(`O0
zAtF?+`}sgM5hiySS$f|iDxv!lM|k{DW&azky%fmWrp7;xqEE#HTe3}?+b9}^Sf`P4
z$LlfF7_aite5~E%aRt8@wwJb~nkl&VkYM*b5%1NV4*O47pH(puctdcK3%6d_cby$&
z6Y>}C@W&A9c76>*0fKD%9;Jw_ZGT9=P^UKcg%@tRe#`FF1GO9~c8jz_abappY1dR?
zQ7(I5Al|j`bPr^$$`#2~I*xjA`iZwr+2&nKDVNo&QqZX0S~gwnNNd?Fqf3j8E#JFI
zGwyJ4wMSKnyVT=BYE2-p7{cf1FcMQCzmcH*IdT`i77}yVt%Wnno4N0XGHXtV!Fn-?
ze0qSH0HIdcF%)=dtLV%+QrDd>)22fL8LE^#`RT+c2PuH2ZaxfDTNsV(6PB3uJ%Pcf`M5rWH{sGrgUG3Omrf~$
z(+B*)KKbd4&9RpO3SJqCeI?O`!3o!QuYE$fn;~x5H*6GJ%AWz-+-fe(EK5|dKV%R&
zae5Ezi|=a|Y#CfR$G^W;@q#%MWgT7jxIO?!#hA`t$9g6}#oOC^U5+5Zl?*<$uP6-du50
zkoVq1IB8-%O)}l{RUqS|P^!1RQW(GNOPsN2l(LFU0A!KEAStP#DjnCuc~!l06f(*6
z0)`b$5geGP+eU@6eh!jW$mZQ6j1w;!w=4oUG@|yo3t=N?e9aS&r=nZ5${f+&%?iR5
zs>K{W#!=KknQaQOv}-tMo>>6IY;LG0)KVkWTS)v|s*wL~q>xztmOyz!JBu@S0dGc$_|N@a_;v*cW@ye028UH7F%*k}|eowg#Qdn5g+ihZYzBm}NqU!M|8
zlSBI!>vAM*9sHZo8}VbxbsT9ht!h4FwD`$!N)9Q|lXQh@E_Hai=qhLQ=WF
zPA11Js?W7vP_6P(vPi63UJ->BAOa5ic-;oH3bhliFc!N_=zDGKZkcK{!Tu7u=Nirs
z6Is8C9;q-cdHcwVn35KGL3td0ojSKWyBf0bMCwxPeBf27cO+oe;E8F!|gH@RLON1nB#
zm{*Q$W!A?xVXC8yq{3Z~6pSC4DqdG@!5H;6&2x`ks!OC6T!MR|Z@0;v;L?t6!dk%xn$fSvse6p6E{%@(J)@$Y%~^NL
zyrjCGcpDdsAG&n_-nGwROM|(cB^^$q+hufNuhRTm~I^ru+uG5*;Kq?4twsS
z*daNa)}V9B=a`U%j|;+j_AxzsQUp<=D#*uz%FLY$oEbi5^fn3CwBcZ9mtIL|ee6j+
zOJielwSdUB7bM3cL4F}?G_4bu(I*~%NDBqiUdhkG=dS$G8$m4qv+uYII!?h#d|4df
zm`WlKx$L1;D`v>Bz4F{`lXV@3Q3o&*SpKetR!FQeG~_(1beHf|Hk(l1Woq}?0JG_M
zrvoRy{3;8wrX#`nPUGdu4(p6vNzm%I4$KYwV~k<`kMB=cleIH+x3J5c32N&YdACxK
z878{9zWtZSyu~Rr+}<`bNkX^fyEg+uam617Ql?Pp@~?<(<4&Bxra?|$B#;d3D(#Hnl3JB+dpDBh`W8WXUj+IQrwliTSKo)s^8es=28u{iw^fpJyew-mt=eL8f=#5}t>pvlsqIm>NFN`+7pL(_-`SXGFuoD$L9}5xdl$;y|iD0?@
zmomLft!b4ctf_y$Yv8Gyoi~z3-Yc&a5{(~%T_)9SPi~%pL<4f{`*8C?v3|LRNV_bS
zugUGoD!FGdrrqXlH*vwFgdy`>lqloFX8w}++1ooMnnlQ^6?_|TwP&7{`k_2G92J>r
z)o^d}Z^R5a)Npusj?r45huzi@krT1AMB>U+n3m!q>)$CQ^)pRM=&8FRhtLPL-OQ$R
zNQ=#d?{pjY@Tv1hA9X}HieQ1Rj?x-si!o7;Be5gB5mh4!r1h;PsGxlwPO_e-3?)8G
zv~R79;5(Nd+2*Q5mR%blI`6^@VdO=bx%#onaZ^zPR@;>R+UUna4d?u=-PL_764^Mw
zk5i8h<6+d1>*N`0aN_x6xI0~j8Txw*H2r21r;jWGok%QP#t{LI|NB{gi3upHMy$E^
z7wVl?8xRh-E(XnnLKhGxm>b+E#<`$u=#*U}AsSl>*
zGuEf5?Mg{pH#wSHX(m6CcSGB?R?_H0>lQ}W!o5!oCgYU22l78;uBaZ?=A-H7k23ll&p-3hV=mh34lhP2eIr2M;j50MtLlUtuG!(yjDqL`0Mhdz^c<3Dp|&dh$_W#c_Y~-mlnzCmiGR{>HV5OJY9QC1brQ}A?7Zo
z=uyGlNlhk30;W38;;jnZ07dFayl4R5cHJG9Ba8!m|rAw
zAFEsQ0CC4M-ugoc?=5E{;uJGTpphhiK;EmWJyMg~c&@E;r`U%V@x^XQvi@yq=;P87
zBVGFvUPPvg61Gn{i84!d#BL}SMkfvJjHzoS1gJD`k+g}=spw8ij7x=N2K${U_`r&S
ziSW-tXgJPC25dm?Fzyyc+*-By&sE9ewpTBsA2!VkSnyfFPOe7r#>m%(iuZeJhirJm
zqi3(Q=e(bmrZSJfDwnu~u!+8e?M}p@5p(ZY<6i&n#9W>Ie(OZTB9n*v->DLL5jc;e
zW8_Wo&!|_F_v5_V$rXRJ%5J(2TGRgB=TH8ffm?ve(fA2ad0Zl`eU^7!;uy|FZ0!{`
zE~-)}OFe8-=z+;-yJ9clSx(0F37f~#w@9avYH|Db*$2ujVpP>43;Wmbi6lDn#U7zI
z9i%3S6{oN>JhN0X%6XXlcdyDlmX2`p?x_Pxp2l9s$dR@2gsL2-1)mb^P&=vXe=^wKEr%+JI4R`W4iVj~6y)PKP
z__;+ugzOu^?7C~%5*~{#a4we)6?7*%zAaf$oNA$lYb(#taPzB~{4J{)`Vo(J$kHUP
z&?B{^$0)98<5=cmrShjEdb<}S`@-ZL-L#@_rLHm~R!(0q8H3@)w^4JClHc@Utr+RH
zzzvf}Nj6rNz6zHU@wcHbbMC84BeKl`NzclPAD7n5oUJ82?0KkDu|rwUdS29Vk21p`
zvPwtQvs_QOUAZ&rO1oKW()FU96R-#YG3{oKsq?7!pQaf8IJeg5$&h(cE*+yJV&)a8=pt1KStXc*2
z3@F*p6p*ibA~;seii31)_A0jsK#}VL`}kEEFX{(M)PqGiAI~+)hzp8pMLY7>xZE9g
zhHqx?dg-`J_Cl58X+8axHn#+f6?*d>NhLMh2ML-utYMrcN%khaiE}k@xpv09fhzC?
zNE*KUEP3Xl6yAEjF=tb;AL_;N_<_S?A^Hi?(raGa9WZqYDQ}%nJ$q9+aI1!O47wTa
zOa;{NLRn{ZgZ*a?CuHSK^c;}8FR!M)LlH`)Qt^KY!ybE*6_{6Oa`F=ODz*H&d&Pr=
zZhF{nAV8WnTou19-uw{~d$&~iwXMDb7EyFX!BjRd^ndB;**&OmP9?MHA)?WPOj<`+xJ{~
zdrK)wLMz`|C5ows)N*YKO!gsmie~O(@3tgjlPJQcZFpc<@5Bv`krmcdEeV^Q?j)xZ
z>#P^Xg_wWyto^)h_idgj3(g2`E9||O!#<~Nxke&<@t%c$wr^q^_HWvdQsPr-KX-kr
zLXBSdx`u?Yk7CD-{ED|%w{}De%iD=$nNyzmRWq<%4_hm*>UVpH>@7VU-;^xh8Ih_f
zqGo#3;SDi$JU|q2iuOjO6yMWei|Kk;dBydFM0A*f?O#Uwiq=Xh-(&BkG79Sz_6y&j
z>5U-P*xs_sdp{})ZPbqrJpI73p$|C-~_)9%H!jK?A@
z<%1hVB4KsKp?tSW^-O9U85Uccg>F1eEgJoyq6cm?Sd2=b-`Fn%~;1gQE;zkldBx5
z!}gTUxuoc({*QFGf$&0a(o@0MboA-tPyMo9Bu0|l%Suh|iQYY8?yK>16D^dm{71EkB`d4RhV6
zb0))|>P0|FFGTerR=L(G#6(?*&%63^Tj9M!N$>S%rv&s()&pUAwr6%Mk
zCtJpg$2b$|Y1sE6k6-gzy!R#YMN9uU=wpegdLA=&ze#-!fZky(Zypfsg?=$ZSDb0Z
zYV8D+hD*$yN096_9SXF)COOo+yu+KIjUSb`>oUCoe;+bds?r(E!M%ebD`v4gK~JBFDt^>7;#
zJ)m+m!1cq%R}`&n#d(9P(#Eht)fRSp%ue#~>luaPJ8l_^OzFsI8>y{r+k-hZ8-13i
za8-qx(>{8K+(qf5E*H?jkd}@66F$-p#NFL7FV8$Eu6S^-
zXwr=%(ZP|TzLG-f-z$`iM;T<-15+3|8!D>HK&(xCSTwFaVwm(NCqa`{)g9a
z*{<<+q!H&#FTQdT3Oy_lY((D|PcxYYA~cQ#%D~Lm7aIuQo5
zN1udO_Gsi8Uya){Q&ZDW7|OqQ@(OKl#Xy_l{2k5?_a+lqputntdQ+6m>3C1k_qAQF
zJnLuISLl^?j{yxC@6%+{{Y6fD$qb%#gOoa*wjNMbRpvqRD8`U3E4ZuccB;1c=g%v-
z>`5|kLq_Bn>zd11$T@Y`dyp(cD1V@y6NvnFyedlj5#A+(a#v?)n{-8-+5_FL?p7=j
zHH=tu8xnd}iMa30b~D6?vPv6rC`jd1?Y$rc3x$p_g|N}N(!j1PYqgeDmLK`3p>lWb
z-i-I$c3*$%^DUk~x&R&OLUTLj@8JSv-erH$0sWkwks1xLAi*>ASbZqPoUS5@-ABOTes
zS&gZO`~rDeJ>r~Y&C8O8ON};bsjLpQ^1Rb13zNX%j+T~2Op1&@T)&}NA*7Isrz#A=
za7j}-netnG{Cq1N*Eowy3K*2jpY|^nus-{?Qe@DeW3BaA+%-M%vtu1kD^wkUwuVmC
zGmVfY5zAYBa<1kgr^oQkH5+&iI_mN7)eeA`YFlncq15q@HJkQC)6P9XGWJum4zL*F
zP)OYWcw0uE4SU!%tbup5Ep}TCP;CwBVIw<@(Fc!;x9c7(IN>*
zej0fKp+1&}>N$4MY3MC2V-vm+EgW6}Sj%2q?CRbAFf-J?++_L){sX;LQY>34tP;sN
z@#n@{Ux4aWn?F7_?)_VTeiJ=#Kb1d4{Hn!XxBf(ndlM{0QhR~Z{6^%=+csMd={Ur>
zjIg`wCoD}hAKopx<;$ZQ(cw`*x-8Jc8}B%`x3cN%
z`di8Q6(=)8okEHdwMvXM`7hg9wlzL$<%LNn$%ysoVylU7O}y0xgATE`Omr1SRrymN
zUrvs4xt!CS^sHl~+ls{Q1|mooa$j`LsxI@7qB-`9ajdwwgaqTTa1L!_VZ*76LHn+)9PfV5ooFc2QHd%*
zKdjB`?(cEWC%+h2)
z?4_39>X&&?-`%Ck!!umX7wO6Wzhk_JD5d5A*oR1$J^h@IQ5TtOpduTTZT)w2jdw8;
zu7GLE)ZV@mIk}MjT|%N-F1l}>be=;Pb~5ZuJ^RcDlv8#t2#SjPA$GWu(u=At=GHw`
z+BafN5q1XdZsk8xt_-Gl+>u;GYS_HKMd)0q9@1kXoz|CDklzz~Gt0SH!i2MZ7h0Rs;UG$A!0zbE93HTG-}4`pTx?vfeFy>E+l`xTfB7E
z1=2kh?vZuS@m=to2PQKYxBEp_4;SwBc2f!#bJ3I;6f@GUKK+7hc>oi;E5A@TzOmGf
zICTkDvsNP~H>O8sOQL*&F^|S!!VX-yqy0V_PBfdC5_5o4wntBdHN&%0^8ew`Ec}{a
zxW7Gmz=)Bf2S{yzg9*}IQj%lDaEz2tS_!>JcZZ;KNemdHL6I080@8>#sicY`CHlPg
z@BJIj_nhlG=W|*(d#Dqesq}p(54chuLPNsWbc>%8hcB11*fVW>42xB7
zfQqmK?SOS#M>)15yE=zm=yk^aL#1DUoH{up)(+Fra<Q9ro`A;yZmgTx=va39
zmgEuU&Dz19VLEX_OfD5~?l>Tk0=Xt`$~ccT7>n+U@u6U)w7?-utCQk~MVm~@j41*d+(6i2UnJ!Y}q6^^lO92*!DOzx*h1+R{q!r5wB+LLIozfoiS
zh#5n@FYMI(d%D?3!bINrCc@x+P#Y>)pe)N3*2105S^R;o!H}5r&E7Vhe#9xXJr(Ce
z0Si?gkNL7Wm362}Rr!P2Kd^Ch7u~VA4uvCXgoT~kXOM8DQX&3gt^lS(t5_+zy6rER
zN7!ilw4;9DC3!&j(5`Ql){w3vw#<}xIbzTyqT(jw$`F8DJqZzUWlc)FgI#Pl+g)*8
zW@q1~j0H2fk$of|E49;d5XX56&RD~7wC>4QU?Do?{P`x?sya8a=vm7jdckNw5ka_7Tejqcc8C^bn@{#j6|mL5ElKM@(XA|x!|SyeZrg*?c9{Y|u4$1`X=
zYEHE4oby2e;kRNrYQ!q7g}J+B?!hT=!1!~o8limYXWt~TaOy;>73_mjvhd}tb$8!Y
zn=M>2#&W;_11p=#C>^RA`cdDve+TZ}^0uy^b9K63pmHXVx+zpb1U_9E0%%9k$3>hr
z=otl8L*!%0Ztk%-H*@m+?1+WJq#`!Or~vBo!m8!vZBJILYRTLR@9juGqV)%NEoj~p
zooLHG{eTxA?SN1Mrse65(4{;MG&WDtH_^o*gdCTJh~%gVOVt!4ggUh$&Mv_~sIJ5erXf#>Xs
z3d(y9pyBC%uUF8RMAV3KVZVsw&wEC)31f{Pc?g`VXAo%Tw3%k>q3VM%+qy(n*pps-
zgR**>Qcy}3w_tlz_7Fj-`KAIL78Jba+ni4`;_X)M`ZrM~(7YwPJBIy`_t?l$y%nr;
zQ4ue6tLWh5w2zivU0~BKmFNBoYYzw`$mE`Z>9mR_qy59A?m}sC?Bx;#;)>O!MjQ%`
z67y$DbPwfJ_=MBw@0B`#Ga2u6jh%w{A2y-HlA^hNr02Z%MA1IdO9A~4aH9gxg*n6)
zRqdYJWnbpGG`ueZj6kAdXVM!p!~gkY+ruUw%<2hQd>e4^6FB;M3^M6cvCokQ_9
zZOt$YMQTgDj)oRs$}BK|w(AV}@Lj}pUyD6Ygq0A@3R|3!`w;!9hTe!s=4>#Q5+|$I
zG!GTdn?>|RSASs5(EWR9AolK+VY%kLKdh~_;mMY{c8w2m9Vyw$vOQ=6<>*K2l=Cuy
zeg*yNw5A#b7XghMX}3C-3=DAgaLQfqF|f}mF4BPbMzK;7SJMxQ0LFHsv}+fw%JSt7
zeX^R&4Bzp(j3j5|kELJ6{pU+vwo``3S+s#RQp)2NRR}~@R6KBkt5bxk^=U!QRm~vB
zb6AcAZn|RKVTmxz5GO&WWah8UE>jvWgxf0Yr(3OC#1bXPgR-YWQO!B=%&C4=5KHV@
z_l0R(Qiz6JkTOMJZoGIG$I|;fdqauvH5`kUxExDAXm&YMt6rvT;z~!X(54N7RFo6+
zU@p6aB1EL}58URWzpXFY*01iob*k>^wW^R3ww<9wC*Py)7lx!Q{7apcOrS9Vm}%8E
zBS(BZcwQFC?}}+v3=)%)qDq}pr3kCZOQGon?hu(&4+w|}SV~x1FyArNxp|O9I|9}P-*ejU}Bj9V~f4Bkw1?-zN1cth*d>aj|BQ(@l|2bluH}^v_aB^|v`!7^{4uwAaDJ?i#$WRDmxGP?XTl5?FhwI1{ozGTC
zBV&6PhcZy>QP?2N2!933$;lysaYo+9DCW#?DxLrk>i<5AG_VN$OY?sDiN*Xw;}=GT
z3$LwCI?p&d4=Gq)Pl5a)2Nk5oW((y|?_W{Liq<^JYY04uiqY*ROT#1>E1)GufzQxJ
zL8H+9U7{5JR@N8FOs;kBdminwo>1as;-Ia8Q+ke}e6e|bhqfGHD48w|OU4w@BK^|7
zoNciPE>pQsi8m4-FK83DQe4szMk|jK3*?uuK0ONxEAm?iKb0CQ`>~7XVvVwt9sQtV
zg~2F1H&c~T;nX_o4ulC&rlrbx&P{AD7~}Xlg_x~>7%j4w;I*QwUL?P+5yry8Qf(D>8toM}BbpD;eh&}izA#Tg3NTtp1cX&>
zl}zn|A$b7t(b(5EP7U_!Ssy4Nxqz+oZJ*40v1jPQ99pO3soR8$HUOQQPIt-lS4Oz9
zQ<)0vhHRK(%TS5)03Z+Yq6F8djJ-zlg*&zH?*qugkv1P(7*~%u
z0m04A2lJIMmDXyJ+kw#Vv;8Ly`KQ@~u>KKIS(hFBnnOP2G*G$V8h9-Sa!vtYLG;RJ
zm(U@WvNNy&!#bSAz3;RBgx{ehrh^GEzjfr0)w5GZHnANQ9x2>Br
z#^{BHqeIPA8B9+*f|qzcn%F}Giio&_xWqc5?*2oGHP$D_2p~J5*>M+VJ6^#
zgjgdna}<~w^I6%Jx`;X5fGVUzLXRq`1FMvLrEbtyWS<9wvA~G+bfy^
z3LV752JXRumTWX%7$*Cj!)Zwe~&U
zdV-&kn?N>GjYV>pm%Zwx6yI^BIF&oJo*#t;WCeMD!mQFBdN@R9hS8Rroxf>wH(3Ah
zsFq*;H?>OFY4U7+7eSKoztNyjP!Q)4!#iafj&nr{#+sUjZwtnSx~W7Reb-J{2&dFz
zVjcF43-j~At)r@!z}HXzMo0*0^;3WL?g^30?$2?5E_WCs)>4?E1@$l}x0*ey=1JpR
zej?U&{P8!8AIG`gR!zLli~~ytv%WyE=s=yA%xV3>KMxY+JwQuf%7SMaSS%nimz4yZ
z5!X)KLNnF;MJ)5bin0?`F2;fP^SG%^anCK4ctB&3CZ7k8lTp^@U$Qe
z(l^76JH8Kr0F
zAFSiGqM%2)w=|<^yEevhWq8k1`coCB%b1&Ia7e7~%gx;mil$*rfMVn$+A1CVluki$
z?ZLte17=X?i2=F2WWcsCX{GT(UoOjL-4T$nIxQs{NNcyvxX?xp(`=vmCZvzkn0uxT
zaPriM00T06xs_E|b!KASXtC0+c=?~KNxvywyWZEx?NifeJudy|rkh2@kHguP#|0W8
zdd<=@{1UNp4J#`?wigg)anCRrq*@hI62rHqE9;N-`NC9nihH`83Q+kyFrutJ5}C
z=EE`Qt)uz;8z@MmK-Kzz_uJc+_tELm8=lGwD1sPzl2-6S7Pw*JLgJml_ZEs*<+!c$Ds>cR^iBMMO1P$MZpAifm(se#R>-KEkdH?wwldm
zk*kh)`7S53mr~^SI`b|3J=N_lZ$x-=&9w7sI4865h2_+g^fSIYDp5U+kqKT4X$|Ec
z6FM5Gj#+dDgNo{j`P3sZG&~Zy
zr)!gK(c=G#%JJj*Wv@G%8SrP8rw}M#Q^g*8Hke=6qaw@q@x+qM)8O5pYaV6t~XebHTNfY7~z{
znC+qWTCdB|2SNO`=%LLqXE}S07WM#GaE2JVx%y5&{!2n)!G@C0dm@!+g52yI@%FBk
z>0at>hi%#PA%AF0GAQdWb)qRGoPGz&-HCzI0&DX~
zyQmnEu#S9Ad%N_pPlg(HlRa-v@><+|a?O@`n;ddn>R;6C(q2DYG4ynlHBXvVuSXvq
zb|6ZOv>w&~3)U!-W(AEPdw$xyQwpeK2JtxK0ZrdNb85lQAJ&=_Tnpx3Z19AGrH7~r
z@_#3vRc%5-Q$dzF=hOXS=af=wfvnN_n~wGmw_D*RfEWrRYMQ4}v6A<^-?rCaEp%;H
z*wH8)#EzQK*9^01c5>sxxz4?S(pnI{#~j*;4i%2H)CYN^Q&mx%U#tWZ5Z|aK55am
zpi`N8Ck$C0Z8ot6Q7f~;r6^K&iZ=WnHTmj;=o6(j{D5hXY@EtcxM^p3)asYTE!C=W
z7ich6Ram7|!>D>eHV?tpd!W~}H0Rl54V$;!1=1l);#dpX0kKq+P|m6<>vBbcUtdm5
zD^4U&lwIi;Z7}ZI^MKWrm76NmOCGpJiM^%0K>mQJfqDV`?dUE{c#J5$=eZewSps6u6|5rcKXD@c{zz_0fGyWCOPDym{n;vJ=QGA!&J_XR#kbg$q)Q{U>~
zdO|IrgQN*^8r4ls&s=e)FZ2qHQejLY70~jP8N^Z$OypE1X{J5j()tKvp;0UE?a#hZ
zvErocQ)wyY8YG8YgovAY)C4+_P8e!k|JO&vkelrgE8BcGy(4|19g=PS;Gd7cbYZK;
zL_IS3QN=q~$ZY17{ZDX>uyv1PeCvjW)-QOHDzBsOOu4E!IqGC|zto4p`+9napMI(Q0OxwyJ!*aE?HlSBC=ZyiYFpT<)=qBB
z%{x7j-l-Mnm-oTAC!n2>HTU#ax+x_rdo{X84`?A*#lUAk4Az%z6>#lAbx>Mu6s-sn
zVcyobN8vbPg7DqZT^x|67syeNlhi`ZKE%9_iKyRif_D+xL}5?B(~68k6Ia@vB-#~T
z@Z6C?3k-`Cw@E(m&QsMopx3@TH6!A<>i$vO{wSmqMtLDe-(No+tzlcY#Mc&7E@>xD
zggzPpf$Gt5B}N_kzWSoG9YjUKG>aa;z@i6E!w@C4;R2}Nq>M^PBnSwq$l7zHu4K<%
zdag=!vSyF@Lq{<5R9qcZT-Gnp1|GtK1hM4)*Ana#imf1ZiZe3ne7}lI>)L{h^>;f&
zh+0G$Qkm_=khFDW@Zmmi*RoP&TWE*ke}FLC=Q_`VGUf!Ub`G5q%{`u{W=2*u>o>ZX
zq`Zpond;UmjQfZe795_4ADJo8fLa=eN5BmYsmVoewL9
zpz{-Uo>>2DP05ptkc@Y&J}8zy<|hZmhv!nSfjq7=qw%GD*w5vwxE0(py$RPNK+fe8
zwly>JD0n`H3>8-J{XTtxI!ergHHaBB)sMBT=92RzSOmhwBPv>=NHCota_xKbaZICG
zZw$xM{y|K+9EE*?hq%S6)+qnW2!|hP<`RjAg@(pig_-V|Za}&Ul?I2gfs%PDE*gW#
z_)g}Ia3?~lva;0J;cR|WGIW7+Vvs_-gBt1%w87Cq=XapL6AyB|Ye5|(N`VBjl4vaj
zSQM_|KDP8#RUqJY+UFpC4D55`|9ysf>enZ2E0h^dy;Ih@kmuett@4AOGfy1&rp10n%@prHtk=l6Jg)Dy7htmbG=do&m0|i!={lhdxeH@g-)xMEp`;(8R5902wol5a
z6h2O2&B}9io;z}nI)8BLRE9a^mNFGa4d+LidvbSI-TsBlvMJjC+;m;ZpeE4L>ffc1#Q#0
zs3dQuv|=L7QQv=9y1IN2ut$g3bYr`yGF^dII5046f5wVY(VDlPAX7J+c*dr5lTd!*
z^3)6^SV0qP#Q~-uSLgN>KD5sD{rr4?m73G1o~yAPOZ-E1vnkPk^(XSzp*q*7Wd;HQ
zgX7X812jR#--qH}=h<+4nyYJztG}_mYLe_4GKsqpgzj9X1YAFtrv(Bp#T%F1n9^M8
zp4hChsjd)wjxgs
z5;e-t@;)30#+2o6#oHEZCmR)_^{DB8pEfbNC+cLT*E&r!QJ=Y{BC~84)=9tpoH0%>
zS&FlKUr)f>XZdOB+S76a3*1^-%~sQ=+w0*ro#^=I;tk&6;3#X!wzzO3CzTH9p%3L=
zOdrQkBItg0&YMWQ0S9g4U;~G#PhpiZ_%S0@b$fa3uth^4Kb?PGXW{+!Nd%uSHI_$v
zf2$1JVoU^Jp+k#>-WLx{nGEc$7jArlWS;qwJ~nAn?LYzL!;#*t6I*DA;}*R?G%6MH
ztAVm7jfBQ#9VF_BQm5iy=1?_guuF&Jp$mJ6SSyKd#P^8?2B0(t`#{h+A>Ts-M6M>4
zmnlhOi(cx=)Fm2zzZ?+yX831S`Fe~zVx)API`TZ`6uF3|KEf^g#X(NgjHpmt5)wH^
z_kTq0mi`ZrFW#dpHDNu}ZZFefRv8nh$s^t3+)dSK2g4sdMZs0pYaJrTi)olZGRdIqpuZbpJkUr
z(?Wf<7FhJ3GCu>GnJoGd
z-YO3BRj{=o>{fInx)?16gKjs@-dy8o6OR%Nm;QM*{)hjMGV9GNdJ2ecoFri5=S8H~Bi9F9_?S_nxYXG2f!O@TF;y!f9hq-<6v
z&r)!LI4FJcN2q?A8}QtiVe&qfN63m6MbBPN5+_Zy_xV7ZCkKT;&zQfAmS2B*Bjr0l
zSAI65u8mK8PA}qCpc?PV&ST>_a@e@-hh~?025B$9;%4L}?dx|4%h-v9sqy)E^UoiR
zK7a=_S`B)x?qXnjuvJ%EH}An>iUK7RNKKTp#n!n@$r|_e0YXt+Q3=2Z#Z=q6bAMqC
z;n?PrlhSZFma_HCk)M`%?cUT2s1CR@b~-8fqCtM~p}qd~D{dJ_KV=(HUW*2BJlB@b
zvrX8rWxf=CYS>o@I^AyTt?usY41>I3OO0P!&M@j|tF-?%)HJ^q;&$Tm1YH!3-ipq2
zEkpcvB_i`v$MuWl@Vli3PS+CS)W(THel9L-?E@i_&wAdvS`@0oF;?8U&Kt+Gs__-_v!yal)N=-w8|CLAR`Pm>4!`ak)~xu*2GglRU($
zjlnHV;`N-}F&WHzRQn%EbF8m|)?
zdzg>MIth(ed`O0ERXZPt$)HyGI#rq};i%9F@a#mf99-Dac<(!pxx1FCGvGELx!Ci=
z?vu0hEl5G^X31wwBdze;$b+BMBO-Y0lITT6t|T=BkMR@204rPd0>b2FZQy?D!~)kM
zxgwwVLurPTQj*{}oD{sX_8XJkWK+jSV`|Xcau4cF(f_L4s$K_uNE0>R>>~t8efExN
z3ByZ~VLVeCKU^xUS`h6JQsjszvpLwAmo-iVKyQ&LImf(vdWy|W9Sc#fLZK;Qc`As;
z0#?1+m&Z~q24p%B=6;?t^Xg)fmyGJG6h?%^xdEj%cy
zLKmk8IGFX*5O2;`PPAD5b7~QAfmzT^NxV1xDtHYWR@41v%?gqw!0+Jb>Mcs?Kh8XdBvoC)qG{bbgV0F@e95RmqqRS^ZkG2tEy$48)*F+YC^c~
z_Mz5I*sSo??jQlvv+ZWYfVW1?ytVzBU`V}sSA(F2Y{%X20AJY
zt`bhs!LMqM=&3m;Sp+E{PE;(zVvEhyNh^tgvz|Q4tf>qufVA2vx;MKf?C!N*A`nlV|w$U=tx`>PJ##^!kI7_jW)i1%2
z(7`2&D2$Nwi?6_zJ2yqJU5Ief>xAHm2jqhmT`YU_I;k)=hQc7vqYhy3%Sz
zmEpI#mDC-LzSY^@7T|6MJ;fZX-)aH-j*QYDIh4dKzbWJy;NFK@V0>Y%~)1s$`fQw-}S3iU9k)Pf&a5a|&em0$0^`4RQ`j6ME=yu7T
zQLWrH+1EY(b~Iu)o}Awa9{lf4M;_L{a9WY~p{?<0GV&%3cP4}a;WXvOD(b#K-YkYy
z8{fC)C3(N2EC45g{;asRsnLp?q(tkUKa(+~_+=XJVuqtcW{Q@e5OBr>>pG>Q=sdV;QH7AuegEWT}hPmJi#>k0{#VkZx-+3JT&
zFY=hqY8M>_xa-FS_w;_P8-0tuYc=V=sN`>GfU`$?RXx^^Dp??Pp6ry#H!!@#tC^=I
z2Vy;vjkD!_t*f7iluK%HUnN$B#Z2M(DI1@
z6VWSiyp0nw-ErKCy)oSYc1do;sp@M!1p}MV=gKcPQ?a+giwy<;2XGIG3!gwJ+FOPy
zXck0~feSyode-}Qe@eCHkV)fX<@1_6!=CMIN4M)GBytU^7bK@CsQ=-!$gi#-qwZw4
zhe;6M4sUF5U1G
zW+SQ0r`>o*_=Ax4&>(vhh>;Vv*?&caqwg2oZ7D5WZbUVPaN8ySIf4I?6ql)08$LjAhObs6GDZzIjbyR$EjKL5c+5l?u?ZP565AiNOMBXOiwu^+ca4VO7hDZ+L!77h6m_f`$4vSJ>)z&A=rggjN+owt6LkJQUJ
z+CFhqiq-k~wx&$=)!+Pef6JHt#w3Lq9prwKP~`3SY>f1Ix>SyF*#(m8BzD(hvQ9tL
zlMwqPWVq&VLriR7#Goo1G+2gj)=$XPJs}-)>;sivD4WpKlmApPvZpS6@DwDI91=JY
z9d`wubYrT6W0fd1d88?Oskx5e?ex3Nac?GmlJm=($tzqmAW|>ATBtPmm8yq}xDkH$
z+Z`(h5>pSNbyCkn-iPFAMXUAOm_l+DvI4Z@>-1l<%{b^pU*T75p3#aeExNbRYeCi`AeXgg#5hxDz_
znVfcXT&vD#AHQ4>ceTAfnzFI77QIt7U|rBPQ8P4J--DHc2}#Vle%OYB7=Y154|VS|
zI}W1Y0ZUZcsJ>crOi>}JkeDC>mme$yxX$vM{j16r6y<#6P%72@d77GmN~OjaO*qC-
ze(tQFyIp7M5aLrm%^7gQ=pc3%^LX2*N-trI(+!^X)TSclBfk0$niolI(Fq){e_=eDhyS=3ltqf}EuYyBk=6lngpS
zzgirJ30iGdwnMUof)XHFgX_4+5<8}qYBBrTA9j8$HciL(6&?#9*go>(7k=ZExc>eI
zxprKQ-CE&Dpq1}qY7$3`3QO(oW%rMrsW;adVPvwe~v#?GS;OjxmhKl)K~;ya=tnzGZQKmL+Pc)$UdWus(FZE0foMaC$C)n3PefL{KqF#LvhV+ENH41w{A9n+~MT~2t{97^xTTAtFU
z-~qS%pLJqhSd)e8s_NSh98rG_9O^xM6UI@>F2~Ev9g3iE5{#(y9KJLW88h?rI7-F@
ze-HC@aNtcdoL&17zVYRqo#3)fMU&g>xHW#U?ke9GvyDJFzuQ|1mmSgNkt)&y9qEpD
zlRJI3%RMq6hIos7JSO%dPoT#m%Z87gu#!o)`B!2$W@cPlwnNkxCh(!ob;qMSD2BOZ
zu#S9&TZDQWrt48b0pG0=Gkr6E9|~+^py~@RJJy-+@rod90HzRB$-_`SKv0$5M#m|0
zCc*)(x4tl}NYGM4l*K?U(%Rk|&WtRzf6#v){vjG~Zq~7fvImt~&i(00`Jp!g9Y|0b
zXD5KqaFJ6u9B78f*VcB`*ej;$J)L<{iQG@Nzv<~L*?lC_JLCY1*H8Zxc6`U$F8@_$
zP2Ytl1x%4%k5~4dOB#>y-P)VX0~!W(l>?)Ts_%SxzlzY
zY^Cq4=8i?MIrTmt$&|`t`m(;frGlJ3t5K3c@&R)D%*NZ}_wLRTRUA5$Kb;qOT=(45L$tn#?z1Zbc2lic6b~X(?PAWz_I$
zr{T{Qze>S$VD;9IbW9^##P=Dz3R4rcYz;cfPdrN8wJ=3daex91Rjb9{FP?=#mt`8m
z_?_VjzC#m2)w-EGmBoiX9AbG8?p_L99?_*p(kjvmiXNh;}Y4G2TT;!@b1KwUf
zE0^sxxYk8zEwZ@Md;FV_k0Jz=rGogSpo$Iv$4JpWkpt<}$ZHdV$x5sNob}s#LZ=ip
zwt2>KW61T=0)kCpK`cU)F3-XRr=!vOKR}|W5Qb^cT$I1_d)6OeDjYKBS0Y_m;n^5#
z(GZ;vodJtg;4?W5aSF`6^j*yy=?;3oKg$vEKbaG@F#x^5_AH0Twy3ynh`TeXG-0Rr=|DO}UxMpDNW__~ryu1+s@J>`A7b^wBnzh1X@U0d?yxz>T;}M%`HNh&gN+aGz82;<
z9QwLjO;C;uvIa|2Q;V;G7202Uf9f|1d{F|c?18mEih4j@uLUiPD!WMbqv+SUsJnB@
z|Fk57vHvDk7W%N92?Y#h
zn4vadNnEu|g=1@jEQjRbbr=^*U~10*7WN$Cfe4>-Qt>kK~jgJj2^8aW(
zD#?D!+S~Wn%VSU2c)XUs(U^5sVuJMtN|jyfN|m9rQr*A1EW0t+B`fClD~g25v`>Fu
z?*MXW)A$ZB_cS%$AvdL9)7c`bqKfpwP$h@#c;Kp<0RIo*zaH$|moEylE_1O?3L#EK
z$xkl?zG5;RV0Y2p{KgFmf$v5kaYytM)!GW#v;*1woD;pu3;6K|{-$oRN6s4oYR-51
zrqe}gwDz&P8Wsp>86vY>DfOjk_nif<9{
znc-YghQ;@Dgx<#;OqvgI0#G2Tad#lTDtL3FlJ_H{<)XJ+`@`_G<}I%IC^|7Y-MHR#
zf|o;>>gb0@hJtUl>Z3xfoL{R9OBLr1o5J$@N1Ue(zgAK%dmwJYi#Fhdji{DR!@c9j9fY2-^ExeESUwOLn`&Gx-j6LeFjGd@$8SJp<
zw`9=P8)cJMoB>x}a68bB2kTc%u4%Li5iaXAxFG23ugdx0F!{v~RLkelW0hBmHXpMZY(
z*+Ov>$91dt=-rUE_+or9c#aj~DO-r!%sLaYX8CdYhyQQEw^{9C&x!PYWr|*l(D#O0
z9vUr&dhD!s-P@(F0HpV1`0eet2{P=sCCfFUA-8Ry6`C(V)O>9P?7;Vhg&m4eN6%iQ}aQit{tLpS^C9C6C{DI7>A
zK?y3Z7AreKmB>Gp8giJx_)~Ldxk>mC;X>E89B(D%rPZ|IBezVa>jKBc5xVN*TN;1P
zx$G(DeH18pGf}i_WuM*O`LWMj>(K+Y6v`j)T@54uu|kK8Y>m&1Xf16qqFwhE%rQvK
zlok+sVLt^_fJ}C9D7tsB;U^Zj)R8SqMEhfmkxC5iDV=p)lpHON`Qz?306P&c_eze9
zlfnCDexc1aIK{92{$~Y+rFwo4^X+6$41{&x($IHO0bBlgBlup6F!uSu%Z4DwsAu3S-bbrDEWCAqj
z|2Dci?v#;^%Py0!qR0;~^I_#^+Bn!@>Nju6q`x-~+>$^}YFkibv76%mdYXXa
z@i_^zRc9I9Q*!tw9p>cIX&35j$gyrnbJA!i#aq*cBi@Om)Pnv3A-5f^PfCgvMMmo8
z7yPGOLnWBb3GS|&gRtq`h6*9ZRIoMWE^c%~2zEF`6P_5z4fB+5%pZ<@9`!d!NUL~C
zky%>;$x}e-Nw@#!oo{$yj)q4NJ+)}NukZk&~ma%I2kpL5NIQk*g6P|Kqyj-5p
zq!!Za$W-dF*M1QWwT?QfgLRFTACoxFrdWSb&$z5mpNc>#d+EVhKlT?Bc4f|@LzlfO
z=HShlbKW9DXyd-^_J}ldqG-JLnPiEr2iINh#EKb%rXwSUHk|l932SFa&DhkSv;2E6
zP{v!IjXO01t1;ha!+fR7GF_qUx^ZI^D{|1OV>Jv}iPDu-|0_B(LSLV^wK#t$uh|8Y
zh-$oJ@ypR-h4aFJ+u?{wy6Q?l{I!@Fdu73+O^k;}3iy70PH&8(_z&`60#VzW&_!_C$rk2}cXCLAemsgfxBfTDrMVUPQgk
zgcPdZ|92hp=z!zgUxWIrw7Ydq>_`^>AAZxy-)O0V85>I
zdr?+WV!K@NP&T_HPd|uPW=f=wQIX+xwumNAX%LIF0gsGJiK9Qe8_w4IqN%M?W}(&I
z!>DV!p>Ywh4|KsabX;*U)wew1Pj*6oTH?;afiFvpyGnQbZa$AlpZ8r;23og^B0|*c
z`Rdt!s6^ESQqRzRWZ1P%E}8ha_iRDAt&VW#Ofc;n)R?X6dt86E0Vz4-Tzwk~11zuVcxJVGB#
zTYqA9p;(Y**v%QyIYCe4JD!9RUxqim{BCK_LIKgdTquouedou6w8tpn{shz8*a4Pu
zyfhpr5-Or$ez!KgVV`p!yZkh~8oO@0sP6y8L0T30bO*$NwR*ubA~Ci5VYg{GHoV}O
zspgEdIrI|m!Jkpse>(LIluZ(muX)OW#A1GgAj^x>()Wp_9rhG7=}
zW+kk0p7hG9nCL&8WEhyQaEQ8e7TBGqZGm;m)UV$JS0^uKPFS$jB5Mbac^0axvrv;<
zD!r^?M)J@70vjK$zSk4{cx=p?l8Ny@((g*{&NzudLe5@mvBb8BKOgF1xYcs5uI1oR
zg>q`6st5v%bEeLXkh}i}xIJTUG(N$DXU7ijWa5u;yFB5eOk3C2HGLkp7y~R7x8!;eHP3s{{
z7EuBz&8+U$5M$k&e{yd)g6@>x+$HTj98+weFYmH5hRJm7`I!N$hx1~g+abwUdlK82
z^1U^D5Mfcqk8l;TVH8}Szl&PVCTh3aOL9DA?|Iv
z)fblwSbjR7FnxH;S7Ew$K7Va`y-51%7Pf1EAeHe|zJ|v)n@zB$Ui&rriG6PYbIk^$
z@j}}TqNd{w!+504%U9eWIfTvZ`LavXX!qq*c4r4EpIyMXoWj6*REtZ#*wy9bgn&Lv
z=Guy^aF+62u?*LTW7FS;lv|%!b->wS=nJ3C6kXXSo$_%y@o74t{25Bwzv|Mybun`h
zJaO6yd#Bj&G^@(>i@R`H{qBdZKqsd?pY1ZH2!`pqk2!=Rx@29yKNzko*Z;^YmG*Lv
za9sD$sN+m_+;PHyNcugwA~YgM3sr4gi0gYX$;;B{$^^Axz!#$1Y4l!;l6;KAVq2{}(!bu&ewGjpywj%2Q
z2b!`T&I+F%F^D#r3!)X;oE?S@17Go^B>_w~ckc`&PNzhZmNtCl&&zVr4u1K8@tvZ6
z%nirPp$Pul{eiJd2l~B~+B$c=3~V3;phJGVXL>~bvstD}&yh|IMOis?T<0s>tr<@N
zh2EUKpQ83QH)e#6Wh}(2QclY&kksnp=GpEI@vP?JyPy91+@@7QT*sH}Ya{a+9DkYA
znEXpaka!SeIojs=T(wf-(L`aKYDfEkK=nx3%ax`C2mnjyo1LtFG8Aumy9~jv`yEM1
zARaL1SL+%qS30{h96?A5PWVapJf()3x0Zt};OZFOWB*0kQE}q*iQ)FAcxM>tsYQ9?
z6Z$$5QTV|2IzVZ~UHe<(0$*JKXUfPqIzgA49ZmYZ&k&p}cykU*O+;#mqrZYXzE3IaFpT`FeHs&komGqO6jdchPHMG0M
zc)vCN`=?j->!N!tr8-EN#vjuSyHCF}kQyW)U`3wG3=5F}IY7q04oOQA=(BZv2w7A6
zm*!P!>OYK`0sGO$-CzMu})M4E0{sgQ|{7{%&*Vev3A+FWz7!4yfS_Vic-3=S9bS!|4E(PgQP)1vXk}4>O%158?^Ecdk
zU*~;(IOk@kXi^nP7AQ$8ybQO!C4yPiwX)QFK7<5WdKQm>~
zKPxXk?wRX_nG>9LqIlEVq{Pu6N+*x&%>kb&I!EY=ifVdKzEb``qmgmtpF?<59LFrHZ*P#~
zhVZLsKC%W&3T$^}vtEJ~B-;v`v1h%LXp*s#)+HIA|QEq0k@}1(P{p#{I5F?1J5pp#qN~A&9mnW
z%l{dEKh$RU|4%mDAM9;7FeXi31vR-3kVdfXxIxfEVANiV2!64VGAP_;+*gm2X`3I<
z&r>C@{KU=OWE@P_9iQYVF`AG^{QWFM&OGMiTomBFMJvBmek#{H=G|`SLFdQ0{d(?+A=u@(jZstU2HW?k
zp%xD&=`^{}*Au6`Tw5+7Mt8FghN9_lP%lIl#-ZseNM^*|lgn902>$8*&ima`7ZkGX
z4Dau*Wq2`+V-W^CaS_?=&JybdxQsrL9UqTa57=|Hxc+|pzZ7~#@gGv2X~w~CnOMve
zxoFhdvJu^>elF4>m=^xKZOW#G6j_pbe4CYJYsYRnpY*`kR@`9u
zeLP@i)RyXH_i
z<4n}5XyMrE%2&DoL_DJ~td(n90i$|~8-{1ixq6QS^oi9m60L++f(ibBKvV#gkj-jdZT54#fstxEA<-fyoa1&&cJ+!mP+wk
zD7Hnoq;B*0LNideX$v@Pi|=q^hdqoP)a7LN6WI)k>=nX0$#FRG5pKPdg~k>u{JlNr
zpfVq{E!%(x(a1+K5{{@@^n9SJ4tCCpDxNL{O}8TFr`6{95(Kw+ik`e<&@%NHy}Wll
z#@A0LM{BjK<+G)^3&>nfgfwk$7d_V6ZaRf{w=rtv&PrQ%6!}TS0Uo#t4)M1cisdS)
z-{o=bfjNPE*XX(aqogbZPfbki{;_?dPK)lRPOnk13pGpQlOeix4-6c}NlxHMxYq%_
zx-X8@b)kkKdwk(y8CQgM_AOj^d*jS^TWIXE+}RCjW$;PtX)DWJ(}LuhOnY(ksi>;WiBZyHp86+nEw#}p;UWh{b0
z@kbCm~SNnqTl(_mdxON_FP$`0Qt~
zr#zn`#YO)JNM|_NX
zx?1}Zv~4k~elP45mQe+)%iO9tsEmt$vsI%k^(6&xZ^Ciz-i(9&8}pmlGhXlekl!_0
zp4d?M9Sj50VtP&D34Q**IPC~xqtG51zZB#wgyBHA`C)I6)5~&!gw@-ex8vu>a(EZR
zPWa!P>M)ik_kZK?*zI(xB_`JnV-~Wu9#P4&m5KR;w{k*&x5D*wr)wFPIvG0#y{m1V!p2}-UEgA(DA8HGK
z)~R32kdcW=O=-4U&?P^kh;`VnaVqKZHHry4C9#0c0W+$hRTPC8`tLG+$pLUTCB~wvHJE2)+7JEFl7rOA9`OKK&nHl
z+}~_3gEzc%+2ySHYp_faoa%M(>WH*XXUSSO^+pa&deC#|j)*A%T^n6+O3`=QEOkt1
z(UOqc>cQ=k{e~Cxem9WQl8hIc34v;7RQC2P{N!6@HgieWl&ocLlyz!;EJ+O=t);cz
zis59eTY{5+>1hO?c5N!D>*i?s+EJA3_HGlG4tbrRwPeSDphtJ#+pSop7U#~$uGFBr
zx@}b9PPUCP?TtR^A0R%(?DBXHxmHkMsRte`j`!HO3=yBmQULy8u9i5~
zk!Tcy9p}#&gM!E95{Ad)#x*f2hhxMRJsfTpe$uE`-|CmT$UL7=K5-ab|D}s#m8AcMdOJ;3)MK9
zE;+&Nc;QveQywW{520kIzjs3K&D(t`d8-)HdugR?E3}h$Gijuu{W@0_CN<{0$J|M5
zCl8~+C-_;^t75j@+4QgRjz2}Mfbpx`Ef=NPIr(r@m6d7ROG{6YBnNs%$xmVv=RV78
z;?QuYiP4t#_^ccG1K2Zg;W7D+0~&sL_}TN3BZj
zOdzk%*qd79^;-K?t`z~hf&1yWEFHN5>M7+*m?(HrK?-FkZ6Hdpc&$$^IjtG&JbR+D
zX}SGd)QiX2#*osFMu;m#ovChiTY9U_21Ya{OYN`VoL|1OZ#0pzCs+z~?F4c1wp4%J
z`<8%_2?W-v`zaEu%ONEaN^@?AC#zAiJ>n6}`%g4an1ZQv1*%>1(Y^P59w5gwFFb$0
z+7ID){B!4T_Pxuh^M8OCR(tZ3TJ7K0p#PiiwL0OmrT_9WiMNN9x)n`N9vyS)SeYc?
ztioDXHkWzw=*ng@z9-KM3RX6GPx^tZ{LC`PNr}=w>x3=4{IFQ`59@cqyg|N1x
z;oE;7Ii|Fw026s0Ui4vu{@tQesB!q4y3(~^yRr9;ev*DmfB8}HG@--9f%>YVvgF!7
za{E`qj=bv>kJ+yVK`BhW_v^a-w_?6eGi6QRKt+GNiTm6`nEj<-9v*CLzB)Haw3~h5
zG~TNgj>QQg?zFaz^!!ynrE!JmPJZqs(HIN$7Hm*0
z(Y+Lezjr0t)h@&}2vdTv?H|uWSnB=(T9`F~V?}jRv>7`$Sc5D&!D%~=qIPw8>l|=2
zdG?!`s9Bu5+W~U&Kbotmd;8Qp``X~+zI~2Xodngp#scT#r#;NTiu2khs*K}yPH|3(
z1AIOl!Rn%|feV9vFwHbtPOorLqaRy!1=CkiER%6sHw4+T?b`)^mKMzl9y=dN6g5N5
zd+bm??#$_oUN%5kc6ypLVgY_0_pdPOxhm~RRv^XAdg?pDk6+FJ)p})B?L7mK*
zTiUC*#vrAU=_TM~aaMOtrHhZ-3Vi`sQ8bmIulP@JsQ`%~^*nRc{>)dr9n;lemubGX
zMouQ@2OwrVDQQBMDcW9k`-qm=dDq;yguK5uPyrr~RhjzftaR+=KZe_LGHucOEs2C!
zmXj-^;8890U=Ai47mj4lY@gHJ*H-OIVZ+{CE#%&dzm(-^0Zv;*C}kfddDPlI#~HZ&bR*NAo*aCMJ#NW7SrzwRO7Z_4i<|_C0wHS1=AUHCPHX7GC)S_3*Om5%X(hZ6DZ}
zGX5CO8McJmg(8F&)FHEKap`Rji!Pc&KNc0fY|DPd1VZ-T+iAaYEpaBABNg%U8t0mu
zj?46%W#hifMyN?+NJ@&vEAcZ6u&}(;1Z$)=scR~&ujHYZtYKBY>aR^`mJ$WB
zSt3fnKdLA8KT8$57Y*L`+<#Qh@!da(W(x)~58CH&>!;JK6fjj45Ik4q;o($vD$e;&
zVE!dHxR8xVH(uJUbT=?iQ|U@AEBeWnW@-Y>J@mesbm>${1qfhBNZTt($^!xs}Bbpr&91wN>i{!z2!Jg6tT{CjmGk=JWN
z?{2iqZte)jK$ZN<8x>E*=Dl8zGq2Gimz})I$(*l@=rTsGJ|CzSe2((*6~EMCu}s=n
zU?kz$Tg((A-ODCk3tMbPM`TUnd0;^$#u1@oYO75K-48rwN>sh~*Gtyl^of-v*Ljs$
z0f-6^J+)gDhrAJ89*y+fswuaF*(vQ-#Y}QHj7v04XD8^1GP(uUWCUr1&TTI*vY^_X
zqw7blz`c`!ED0#lW$ylILh@Ai*?BM_FU19kPk*qMm&}nbHH@FZZ`k%G*Shv@87bY5
zux!Ki!ahpU3YqiwVqwR(A1utzF8R%dXyu5|5swKMUD!J1FWl@32WqmL5vXa$6T(z!HTF*qM74{b*
zzrzoJYuf_x9EwX#4zadH2BAXsZIg@+7{wO`9BfCRs0xWZLiL8?{!c^e}qOO5+H3(In^d*kd)<%K^5U`Z^t_
z;M4R|Cg^tM!&~WDL|4o;;em8qw+HS^$`)%s-_q2;Uxg|>;aL_7ZVTJk)!DDt!k`N3
zK&w|(4tWjIwB6qY^ENdr<9$;49$7vzsv{TmgeY`vhc(Mo709KhX3G*ngJy$t{&&)-Et8&KNKtm-Q3)ro{^h
zI?^7l)>L5t0-|5$%X1W4xipD0cd%3Fk@tC@%`&ZXZwsTtm-0HI`+-@3tWYw^^)YLG2^|EAbm(EP5*@!B>?o6?m-PS+)9CEj`yw)$_m6Y$V+@F*ZV_)qPCP
zvAQ*sKGOqorL_qYT$BHUNnWL!C}|KCtsiJX7~7~)Q6v%tJt}4d8V=2O&EBoJJu1p7u2;VLFjLnRkN)hgmV4=
z8ra6j8ACVlqWhsgZT`AxxAL%eZ#9X&EuRCO9XQ~YBdrW1Dbr%+-@aPa#Z4S4#2wv9
zEQd{b5Qmc$^qWCgmKkDhFTu@L@}-sH?wSA{ogCkASi$
zS`pxwqJX$;9xjerQAMF}r0f@+WLBN@UoG*px~j^w2wCgbWt*b^J*>P<$*=hx2dd8e
z75H0jR7!Q1m8vkITrq{SKfOnJ*bZgGWE`1
z>lA!$z$e2fq?^o$wUlp@U3;paE~ZDyMJZD)#L-0{hsqesJ8+GBEN>>`D)=E3Jn#cO
zYi)i-If6lsuDWI{bp=5d^IqAp^WC4>koi$bR^RY>L;e+@hxf`Q+u9{kg05sTWTKz
zKZWH*4{b;Py6M!acsF(#KC=Tv^zZL(xn+ML4_(@9KIUGm)aX}4i@@htbAs-cF?q-=
znmbK1GbpoJ{UEN=mySRwG%zy-ZqtW$wDuMS^%{QbQ-%0lH#LI9(^Ib2sQ~
zy3aDWfIQeUw5x9vju^v2fLRj)N}h@k2I;~;bNm|zC~Maru7b44F3q#9zJAmiCW8@R
zXp3>1{?arD?`hxoLLD}%mTT)#kr6Nx;|+O1vqU2bQW_CZN)(oaqFTLFMn_qp*sVNE
z>EtFF8k|le??bB4SDyYVFR&|)&yGLZGymL)c{Cq2L(C5ASA224fs26*v(`=oSfZvy
zg3ZDn3fA=eR`z{#L+HQDuU^h~uCzzF3y)
zf3X_vKPA4*5^j3hWJWZ&X%^(AqRo*4UoCc*d1h%Hg*hJdRggz@J6`{W;mK-nBfqZpwUxMFgvj%%K3ahvRGlN>mkb
zbNrHITe3hsXNcj0ol$d@;2ARlpgbdA=fku@6J<2Se%~|w*Pskd=AU?}Be5Fa=--}r
zVU`$ru;3UV_6CD*h@pp+lB9ICKQErq+aN-p7ibzxG1z-}2jsFnasBi-(sddYkrnP3sfVy*jCk#%
zlCns1o5ygi*Hg)D;GF`Eb1*sk&e}uk>jAO#WDNbQ)3&MXAc~dZMc5EkIp1}a~_=NPzEio-$IbmITxnK^4L2|v$teG;WU
zpzV@oZ(b*q8rb$RJgD|I`)+0cy~GBcp)_w(Iw0*ayXAHjyKmFcX8cd{g4UWnjp-L#
zBBZflVKW8RnWP0(#slN~=E$rD&`{)zd%CNkyxCf+tJR1P*P3;z=5tMAU>M_X>)P{s
z$I4e-&uQv3(?2if0F47KW5@sdOXBJXx1hPcO0aeE16bd7Gsz}NcKP^7cfl6!_w-3M
zv$Ol^dB1N8H4fU~rg_ShiF;um)kKNGNgJYD4fLN29b&}hfNPS^`HpPPY&PK!od@o`
z%nceXw5)w7eXFIY{saFDQdPD}7OO6h5TC`ZE6hhDT2}KaygQomgn6!@YsIBC$hXr5
z0)cgUcb#b#)#x`H(8<6jBUsEeu6RD1gA+~^n%<&8#+55>;*;*feh<0p<5S^een3B8auty&@pUeNy5GYC>Qd0Xv$`JAClWp}*&1OK+S
z6LV2rZLX+0`Agy|kac$EH4i{iKjYtT;lp@kaoEVX#&zEZJTZZe#Veqm+W)b8-^Cc1tm^&gAJ(##05m_z??rGQf<9C20en8+BXf6j_WQ@zpzr3TkQ7><
zxO+zWCjtmfs%5OFeY*S84hX{zfTI!Ke{j2J{@GaKgS%G>wa>56P|*Aq7>Hj!-FG8l
z@T^rRG-*s2^qrSjroQLo9^lW%af5Ud*i*Z+5>BCew$U4Z6+G|cSY3dLq(_lD(TbzB
z7P;a4p!o+}-CAGte`n^sWgeAxwJSZ`n2ykr(jf+wQat+QVN_-ubA&I9!tTy0O0&yo
zVIaa|PRZZ~hx7$}Xu2I;ucP0z5jv~#(|*s*62X%bieUq^$MPLi_E%
z4P#fS=M!gQ_Ezp#k3$R}8ttyMK{Qi)*?e=UM$wuucaK-@H*}Xqp`muOnf^bBC8tA&
z@>IoXdv)gmzJdvPYw||Y@gu5=cDa_7^!rC-7+OXu0;0K<>Xf3BzWn=I!#@DedH$b|
z)Vmqa<-;H4hNqD^?=NANFvSHuD*^PJdcdOEG$u;^%iP>N_HTZSyVgaN4$Dkw5$gix
zkqOgIaMkbRB*_}D?qUwRr&NKSkSbA@lC^{dkb{FcPBDuH(%tuB8M*uV;trkdoI_A6
z0{y0ChrDUxht<$ssV-W4eXJTgce}foJZ(A-8K{Pj9=N-;=g7I#%$^9yzTH1QdGO&C;aH3+R6=q&Qv+@Ew2eGcugA=3)3Ut#F!^H6
zd~^2`)iC;$*!E+DZSS@gIOG^Nm-I&r2U6>HT0ig(T7I~KXX97eXnfaXPSa*i+p^+T
z8`w0tGYk`TJ$l%WyDcriU4$=(&th5LIA7ka%bjk^#%Od?`LQ}?Pk>sp=A2Bkkr_jU
zAcOe};T4`w#pn)`Ma4#%S!`q8(=qoXe(k=_Ma+yk2IHR_g
zkke;tbrcyid+2^W_9|CsLyu7HlJdmC*4#tvm_4o+sPLKPq2er7^V;=iue@{)q8V#n
zAF4t7H|a{xUOE|lnp0o_QwTw$Yk09E4RD(mb;p%08m=9&U8xr2D{caqla!K>mkZ>#
zQ2Gb3siiVPiR!O`)AdqAHhL;^IeecD(|V+26)5d+`N?z~7-hAUvrHOzQ(y24K97Gg
zG2xPhZZ4YBxM(cJZ9=bb_cXB%emks0$-ZpNqc^!9ZQln!uuMW?782U
z5fLDl`pV%bwkMG=f(D|Ul
z5(w}C@ki&Q04VbQ`w9=$Pb=uCQ%RPrDEqYuT@3pC0deM}v+DWeu}adFNkdSE}U179G&LW3H{t69+1J=eACFKcw1Rrec|0)D=~x*zK7Tp9f{
zYzX#dHfl=fd|2V*7J0+uUS>~`!VWC1OY?z-?u%{Q34X1i>>q%NoR-q1AmOF#*c6vz
zV4E|{AbY++$fLPYT_hDbec&g-e&S-E((+<>IEQ@Nu!9-q!vNou(6ENs!^5&v)I713
znmt39vFgE5qTS-?;jG;zsCi(tUY(h8A+#}gO|h%TJJ-4W>3czutRKE&>5IPw;ve0s
zm{c<2*l$yh;9Uw_8!M4fcI0PE8R15Q)2~~Sl1-JiJ&=x
z+9ZUEv<&6x&&{>lcX?EA06MbhQuT0}5XpBR9un!t%@2bm$DkcmYD4*zeQdt;UXYoss~bW6kjc9ugL_UdiI1KpDVxLQ!ZO-NAbSlWFyi=i&0k17
zzsE!chl^F{faE@!>J9-7ZLPf1_ncEQmXBp-O6$u`ZD=gK8Nx5};q6X0vj6fJYai~Y
zbTZw+p&`v;H?9bhcEkqQ<8#CBv4XrVAGrbX!=fSXXiH?}Qq>MBATroU#)6l66y>Vp@T@whq@{YPDUZ{Is7o
zPDJ^ETOiErP{N6OE&NDlcML2y#wp-{@$fi)T+se*`&z>o$KOr2=NF$z=R8Fl0_-f2
zZ->>~k4dr1vxLsPt1&2ni6KFiQSb!*trj1=YBz+uj6b51OW3bL*z;pw_$
zK`Bu0*hCr$^b?g?6qMn!SjM}B0d2q{gm($uObng=W!%m@
zMt}GsU9UGsX=jBtq^CXXPfaX7HrOGV?bc7O!X}5ChNTXl+q#3~^$Ek-4%DR-cRJ8Z
zBvm6Uy5eJj)AC_X*;k>;WoP<*$cc$yxmv+yYMd&-RByOD))f>JEiG2R$Ih%aewh5;
zEObda&YbIzRJ0`Y@%Uo_V4qtA+((u4*I8X=#K=a_
zge}7eaD!D(rHe!0Q^l;N)F*X8V|_)NdIvA=kJ(9Ds=2N({5_eJx=r$LcPM{H*h6y$
z34j(sT~nJl!-fi%_wFd^xBoPbql5#^X)sKCH{D$R__7Es(#0kj_|Eed88OTscvCZ8
z2Z}AansgGsDfas7=>JHBQ1H}gpwa2>~Iq}Z7=CX(>651nQNQN|eoH_kcjrsv47Cwy&+6ZciIGCYO-iGRZIt*pK2
zZDC*S@>JyG?vtPCuY9%bz-MhS#_#>)yjhVRX#FJ$)hWh#u?OVKSj8z-JK(7QIPKdP{B`;FAk
zxh~O#CYPj9W+uV%EUWpE$%pnqq663WOkWk?;YlYJ#4kLJemh_TtB#d9VHU0qSl5W9
zu2AuomH?}$K(VW7@DdB(bTwmDLT&&IDX+G1&=q&O_FdL!mNRIXqyXv|4e97WpnrM~
z`~|yfsyQdHGfulS%yuAbngx1Kj2wWu0W_VHV@ZB^}1Stv1V*s`4&buBNn^
z9u9NT;H(fAXMrKtzdby`kQ4A;pkKQTmd&=YgV|33S_pFRKzRMo^
zDgAwVvafOoy0AmX8kdO8)#^vAu=>XRR;C?27*I*EJeHNN$#$X}^8F!!iJoV3fVb{0
z?cO>wdt&%V{o~rM`>8XxBlnN3<+syKSPVJYE#t@Ok`Wsx+}^l_Fd~CXG%(4WMz_ym
z`L)_Bez3$h=sd8Al!N-Xg&kDQ$AJDg3T8BbZ;yl(Xc(Oi_6ASd
zg*3$Oir)3~V@-2DHzvjOM&x%&J9JH2HCP
zX;xlAmUROEpIp86Y3py3>cN^;SqtMw=d7PHShc!|YCX=Hj4*~xFVqiNd6fS4ZeXcz
zRj_fEh7r7V;cl#PcILb$tZONqZ7*2xad&GCp!xdXFGq(g7Ww0eVSio8C-
zt(Io&#=6|+)>Cd`>b_6(tzbKg_}PWB)j6zqB`Q?1{(dVL3M5W!X-7)YpTXev{(3-l
ztHpxQ_*42DV;o)stT#-34d?~KGVOsL?>+~zD2Zk)cS^*0XSS$|BcePATt^2Gy3kEI
z_&F8`!d52#vT;BWz4kAA2Ecq~M=^qdBo_cA&DYC=Bc
zF$JVQF^7)I!`_NBo=4lW69*i{IK#uu-y&?q@QdKu(`Py|N1CHgpZ(#+ltHM9n*H?E
zLk}Ho=aGV^_HUy56&mX8J=?;0`EZ49VWc|`xsN
zOoKD4sI9a#Jvq2FvGdiiL=Am<(u#*@b^A8OYH!l1k=1TpiowT-LbFz8UTzhQk*+Q`
zckl16q<$Uh6HkV7eIz-}JQzmysJ5~SL6KHd{Y3i_j`*Qgf9JMp2
zzZkHWjgq_|$$it7#)Q-g0Rfn--*g=SEjf6r+MOU#!{9>CW6dA|pQ3H>hGY>Nrb+gu
z>pNS2wP!U|QgXyC0w3P`Z6qaX(yY7dmtf%`nLO?|Y`5ko{6gze{Kv>GmJ(tzMDuCK
z@<264Sf=Y$BTgMm#yl20Lro3B+QwDu=wXj1LdD1AoRZVJmia~_`VfT9@i{~gTaMH5
zg?fXC2OjWoZGRlH0y!a3O6iF`8pOv#1zW!qm;EF&hu|pk
z2N4gM_p#n{R7D)RbC`d=QW|*yWrf_
zSlR_{-qP6Iv)f#R@H}}o(LFJ9{Bi4@o28p$VwnPhYUp#K7x=8(6Nv)q4^-nW%B!5G
z9UVNCMBR3c&B)Cf!22f;GqYU`_C3$c!EBP)=?Z
zY_8((PNO`>f_Y;}h~(mF+_@P|IPTOH{nh_&>LV2oTEeg3wznY2v-F*cSAt89Q$y$z$1{H2HfJ1aITh>l>p*xvtKi#d-S1xYCbOmuU%FtIYHZ*#3?sKPU55+?@D`!m<1k9Ib(tS$-69tA3T
zmTr~Iq~)phZXyNWsSv!68gk69b#2poF&y*=s+emmEh@irR~8bI(w2-|npJzwJw9W2
zJve0}vYFPo(Q(RUHiOs~*H)zsdmSgG3yq^VS5-G&NVYRqWIl%wK_HR6uORtGo*8s1
z2D37VI&0^8=|;|-5sZ=FcyceQ=stsTr8y%#bcyh%|A12P``Y5YAH1mU-$7S-^v25)
zw2#t8-4gBI&No0~V-K>Ibka$O>^Dxn-wLnt-q{7w?Y=cNwIe-PC%)A?+XRzRVG_N0
zlq2UN2}R&9S+_xJY2+ELNa-9T72j4XDDEECs*V)2Wa}f>ctCt9sO}Nm(K>W?NEJyx^jTe=NPo&RD1eo|tG)HZGwyujf(H&%c
zHxt2o))*On*?`|EO6A}?oZmgonhkFg*>!#}+d^I9$Yst|_76ZmoNDz$^Q_cxIM_1R
z29^zn2?~@V7bVY-#5o3C1^GMt9QU|z-&~6q2C=iN(CAxdZ7}{{fy1|X`JCMDz8vX>
zo0o!}){QMRADNw4Cf#0slzg?Um40~qA3f8GHr43ooY_31d-r3a>K&cKZKuEUfF29S
z3Tos#yG0*kEAYYgiy1T1J`QTCl}yepO&g`WZ!MRv<4&Hwz`b(f>Y;zdh5@6YYuL-#
z4j2aHBb6=RtAJ*t4!dAJx3O0CauL-<lFx-poLB~iK{F0btDeZ{ALsUaLen-jnvJd#3|2T7^s#FiKEw2o&({&~
zpmY@X#8Q_HJX=joxl0DT)YUjiv8jjl~M%xV}8>fuW~fzF#?fPspfnPLJFtGQY-DI^&fDT6;?(hvjm&XSng}a=Q=S5#L3ON6~1?7(E05aa1;vm>s|Z+5*d3@4=PK
zuJ?m;s$(_4m(Ac4s#`y0C_KQhD)N+7K#RE_CMZfU`U)AfI&NJF?e|9wVAKMC3rV%yF`V43)N5T4c9KE1o|l17tlQaq$SJI
z!du55{{rvD%XxJwnl7d%Urnd`S)XCP*GrI+lC+j`>s;s(6G>}dRaceD!^-0N
z2df+=OiS5EOzXtab8ya)*Oq`{Pwc+Yx~q$r9vZm@6wUF9oev9UsP?@8H6~U}k%doE
z((Ey6By+COSpB4Q5aGp}H{zoQ&ReUoO>{x6pAiVAZWk|7;PN^$?Gps=7)7CT#bw&!+uKN_;v3WfKjyQ%fInB%)0?7-GzjzMBp`ihTC
z@&I?eMElJ?tT@@>p+~c2JR84W@pj+MHhEKON(v%Oc^WjT;HWa
z+)yRQ8Af$OpR`#v&zndXq@e(V#kO`I-j2R$h?xB2OxbkxjOzM@43Snh2C<_i0%_mY3SyVaFn#HP!2JRkSJVtED+
z6=*gXs9(>_?9{LQf|0a`{6e=ElAEqEza|i|Jy@<1HnIdI{eRvj$gpsjRp}obs$|gZz
zu;Ynd9?KE09>m>+3U8_)7r2nS$;*|J+fq-=AM$!Stz=_65f=L?4&LHzC-pg19_g}H
z>5IOovhdDLq*$%k>)M1!scAutlLE(8ge4pg%e{$@mRFmYhaFQ1YLPqMj7!obRrTgN
z!<<;;IKCM#1Xd1EYrP(1o=>`}I(P;>%(2p#(uEDuW$jb8pqCfiL=Qg7^p|(#76D~4
zs%$22bR}%54wf~7rSAtsiMH%1;QJA&KwHGO(**&L<$Pw003u7?8|Iz#(08>D$zv_RS3=v2T8ykPJ?hc!B
zrrLF4x|9xH!R}H>dY494(zGfSIUrqi;mz5WUT#81p_UTLm>}Uq@{
z5*mttLbZqhQG)dqJXfn#6yf9
z729=*TUdxnoW&Va)JqQaxOvC!9-A97`)#d@CRNq`L%Pf(6Gp7vk|7?^1i=$Ngab9l
zr|f$Ij5Rhr7l$azt%+?JiIikw%Ei>SyT8gmOtGtFU|$8>6U
z1&_1>jBce~zA`#R9x~P|rK;R{O`TWJ9TjC^$V@i@!_I9!J8Mw9fQXk=ib)`rthDl3
zQ`2>tT(~W|ib!hR4;ASf(|GaQr{(d>V2NvCD8niFZ-D2|aPma8sw}JHyqc^l=HpU4
zYJ?+fyVwC0x4dO$dgi7raSx&NK8Mi5`dkh*T#GM6OFx;+QL*$VC-w2@OFbFr1a3Wz
zky=?UUeiMvc*JxTx3I4o=B+Iia_BU8!(c#)z*CTGA`Gkv+6+W2rsT;42$$*wwLNLa
z4PA?qxezyw*HX^4JOKb93pG&@@@mo$31RJ5OeMHn`;MDAWmUS>Ymm4V0T`;RDVUD+
z8aXLsGNsjvc-@8_LW$vR%8J>rtmQ+C4DydPw%53^0J(L5_CXLa*wS#N
zRBUTy&MvI8c;7^+%Br%5ue&My+ZM&I$}3jNDx#1RWlIfF`O(~>-Qa?f0+bT(m?N!7&4w6rRw1hUmKkha2v7$J(n8MMp>
z7$JgLO1R@*^u1&_u^H09b^uNKbs(l%Vt&ps2(8mz?R)W|BmBQn?yP>X{v
zhO0^kshnUNT~RKwwl20xhZu_8Ky*kIklOF$y9IeXp>H0s{{Z9C%ugM##)=Fph&|0)
zWZy2xRC1u>l}CJTGuAGFLK+O^Q$bpH*Xp3mn5_P
zV)ldDun8pt&A{iTYr1*_h+WNo4o
zsK&q%$+;PsD;9D26d;uNfbnkhSpZ%
zN>5qd;&;0IQ{yGBVwtDkC{7vnUB*
zsr0h5M<%br2B`t#TJOhUW4T)S4jHQU<+R<%uFY%n8x?-$(icSu<8fx_z`7sYtCg>i
z>UK~|_ng7Hk1dnT3x*m41A5UE$l$4>ocr^Sl7a1*cCCZwngECsDC
zis={e)BvLk5eJd6;zsf+*!aB&76rN~MyUelz(ZQAnp+ImS4ISORr-L;`h5C>>5jb?
zaw*l4{4PP09m5+i!Ck7dyHVkx&;tv7sRWEG2Om<$F$)Cs-@#4#zjDVElF`omV$UY5pJsZWWiaf3?(6@`Yn
zR2w+!TL)BX?c6nV+b!eyRlLtq2U^JpRK3%RHG4PY*G0kji)}tfs-{#xu%o~?i&`r+
zwXZ9Zl{%*-(yOc(^9MGdSgtKqXA!C{7N=JK0E#n4twRG=rp;Mw{KJ%Ow15UU7~>Ep
zlMrar#&bX_v>jgTsV(eAWxDlzC7$Z9dlLdO6`i_Nua@#vEyJ&-U_P1bPuxO17t-4M
zM@v$dRE(n_1__*FtQf_nGZ@U`W379}ET-;(mhrdw4}jO6lC9JI>|wtB3zDzP|X(is)cf7-P@^^TU-GzoLCC9-
zN#ngdtE-E8ek3^*+^A{d*_fqEGwXLHTDeCq%Tc)2(PcIwzb2~6IMtY7WId|AKU0)T
zuN-StCt+a3v+YM39fj8%h64*;P_C!<@iF#LgldK0OLQUech>VeA2
zFAM=9Fe++P3eGcSrBgVGS6h^Hvkcl>k?UDjamZX7
z8H}u{3qDWC4X74j+YG2;cD&_}4EYDp!~FjM@;wKsj0h`|xXd4DKGp36697u=0t6c#
znC@#EsPYC+iE3&nVv_7D96Jhtl&2cjy0cZkl7km4dJrf*h4i^XVgedhj5TRwL=`#Njp*fBg{fI*iDxQU&Z3Lz
zxL0bGdqgZ6T8o{?K2EC3(rmc1D}viJBWO0QO{~?Ny9D>3m8Qnp=7MMz2YGdQg-#X7
z8+T3Bg}M05JlP5DW;q7ZRUL@-aw;^gd##Ek;*@r+)Pq`VDwla
z?g$_d%Q|EN)B)LRZD+{+k3$f3K0O_J$-p^|0f>Z}tT_F=X-pQQxuVf^Wh=AGvYtbQ
zuE$aVu6Ugd>6*~e&&Xay?O3tJypXi3twp%WeQ8ti9Y|~WnLLWDDaJXz}*nd{^b_3khbIOZW${{S0)t_qI$WG}*5g{QJQZ<0!6~r*Fv?`T7h5Nnf13m~M7V5?fbK6#0wp|FY>ITHye#V7W
zOYNba#3^6l{I^nRx#|SyyqW?xfcC%?VS8>$ZdnK?f$
zHJ=`pqQ(JOE>4~3XNv?^PynV2%}fX~MgjS)*#?E{3w2TIMigunEovEcv1zpkdIkeB
zumQ@H5~d|;d=@O07A-30dkrE%&;o*%7N0A!y8CbmvaCXqx9A`Z
zYQ%=;&==O;qxh(WF-7=9?^~t<7p`TQ4?vR?ba-
zh~*5mlp6&lMGCI9_pm~u4@b6-6;o9_3$)dYimak*ebwb-!
z5<8cc4T027*_1emhmMM{7b6dqBtw!lQ3wzjk^m+Qk&FPjfg@Lz6p;V`oC%yqX2EHm
z@t7E_?`3Y?Vw^QrwL!7s4vAq>Nj<0)SoqqDO)YwrG~SGEtd^`kZ$p*26|SSizb1o2<@I`sSH|7f
zo`I>N{{Ry;$k14iXCMzF63M}AzCs%`YG@=S;r7PC63p^h*3onR6Nuq&YGfO(qeOXpIa%QU3tXsE7EFM*tl46!hLJ6UCB22R$<>RREIN36U|{
zl~s2_7i~x)d`G!0R^yO94R?5(kcnzleLRKDyjSYRak|||SzSy~XTlO9zN**lw&3lac)62*LwfJP1goj`K9h5{N9H5ou9V_3K)
zgNELx2Dz&0igU%VnA}SkmS%+&h&JJUjOhL@D1N}e+%RX!{6jGX4m
z+(l9X7R`S-FdMVCy+9EVs|61$XHa|`g|mR+?x&GS-?x>!tZ-P1g{TwQ24^7yCldW4
zu(q;{0*_401_wf
z_gGT;(y4b9+P2=R_}sKF$*CONngHs^k65{EL~-x0ls&r;sAeG<2keS^5{8+}az-7Y
z`V2mY(Ek8I@IXQw8pwB0v;G}Ga8%&^&{Y>)n)PBx7=+|g$kD8>rxjK#VZAccgB*l4
z-AgASEHxEHvy5s($+V@8%&JUpu`L+fVYVa3&dSWjw2Iy3UzGG&QM&pA!jMU_f$+Aj)Go7}Hp)rFWRB)VU%T(HS^3ajO)
z=n+-w?MYR%3mpq;LX(>-$)k`_*}cSS$a4?KmgQWoKsgK|Y@`@|P{2J1p9dQeQ(M@8Ewem7#Z~U*^Q?UPf)y-lxzg;TMg&_$%INO=
zOYXX>*;cDknzV%(U7gFT&SEd(YsI{D<+(m?J+)NB&Wq%!71A8nVgS+dl<+PMUnDPt
zvaDM+YaiK5ep{R`?y(|D%;m4Q0U=4@^BQmwiy47Q}
zu?=F{i!b7KuDaa-%GfT%uxdtVjuUJnDya-|%dLt^76z?ny&z!l2L+3x0<8jT5r{5S
z!b3+SjZ7(3wT?H2)P0Tj11h%AEzh49VPvz5S
zAX$lpW7?a^zPg;Da0mxj$1~tSeby%Nu4Pk;cLMgf;xi)9-zd=
z2;4J^7A4PI@@y8&P3a@X6_pFiIQ+WB7CR=U9FcNWV)&`#6y`Bye`v_A-7|12D6q2r
z8TliPW1@eN$A#Ln#{4(rZEbKpHlj9$KyiV9PqVv~kF3c>(9{gke5woYC%heNUnEK8N}Q3~eA-a3)qD%(}fSG0*{@
zZgVh1$D$eAEEztSz{jV=uE35$w82A5_Um1stBF@8+M?MZ^N)qm6hANLy;7WPVCLRsy!AcvH%#
zP9?^hxh1csii!AO*dOH6Td7vqH;&FZDGnLE2g*wRd4t;U`kzDmE-G>eApZdCL%XNqv
zt%+Bu#fx&GAy_~l2@De%IEkV4CK=rQj%T!hhJNqaJq*sE#3BxlpfG@9scNgs20*uC
zEve08ycP5#*^Gg60+$0kSz;_g9hp+nP-x<-Qq=%e9Z`Ws*IdI$XrN&>M;3zp64k(@
zA99TMxkeXeWHiYIi-rtKQvJC_QEErBs5&DGjw>?n%4%~gWz?4h*_gN7s*H|2SXZZX
z{6kdLT9;C4Ar`htcNl@>C05Op97jZPZx|z6OVtYHHO$Xh^bppqDsq$egXPrL^j;H=iv!YKl!Y(+rJ#wx8)!dwOEw~FIt
zLt{=&VP^x7H1aJ~p=)^m0Oc#&i^fyEp!pS^DrO#uiSB|{d*ydckouoP52^kVtY!ZI
z$ME=vjs8^;c^~@VxnA;{iPxvd!)dB8BL`zXRYqoD$R5&tKWUgoJ!&P<(5X@-7-$2e
zDnip@!B(*g(%yA=6fsP&z}=8SxFlj?E*fY-06{v(%F|!TU2tv?dg%(;~*n^G1oq3qRYxoKPfCxVhOuc
z&0sKE8XCq&+-f_sm0@B`pk;7WzgbpQ*FGVh=U8F`g>z>hc$sReQ%)Jy)Ct>Nl=8J_OgW|ZHSMhgrSqwgh
z(E1q=TDN
z&m~}FG)KC!31GcJ+$cn@`y!Qe9uptI3)Pjzppq@zvQSzDH7%oKQ0Uo#YrI>QC($LY^h)Zs}|L<+M-o0O0L>4!i`;38mYP#jB>IcxkFsz!K
zMKd@l@MCp5h1kvW8q7_ZqNsQSU=u5`0Y*yN!&R*HVzT!6JV?%oqS0m**+q^jD^U#e
zXchNrGD|zBj)qZJDK)5^u=wuDLg8-$r=_>9%&5A8j6cZQw(#rn(3bfPpysz_p5Rk2
zHDD;T&8XrUGW}egPf9&!x{Fr`yS%U+Z
zAi*>C`Gca>^^uO&5($;-I+*kwpQfg3L(<6GBdOY=mJ%#N;PolwiE^sCSoKQHPc5gk
zwWhUO0=-b>M%bQ8;cUR}Cdg)C+Zy{y#LUA(lQGm($RhxVjLPS;=oc_EfDMf;uPm9l
zX+1qbhZ$L75LvUE>o8m|z(>NS;v
zqEctaHA@w0(6V-oU{YCTNi=gi@>yM}$<_*$SdS>J@Yo1Tfj1#;q)!Pm6CQ|R9;P7J
zf>o5{9io^{K*44h2N@V(K2gk41hAH5NGg|9$nRShviWi)!^rgqV9&#AOMV8+D+qK-
z{DR6I5~i#&sI7>4*N9b=`>C?Btc(@PTg9_gs?JL6^^%g}NvGRYNVgspo+-#wTYmSk
zO>Qv!atyKm04|1Awx;&h#Z81i7R4)LVOx%H2Vkx}5X$0qER764r|Cb?U)$3?WaH$(
z#eGL-UWPpsh<$PC*RPS
z31Dg}2*?6rV<6`U14Ke)lroyw1?jOHtn%zCcV=d(i8SkGEL
z$b8s0+oP~o9A{kG5LnHIuwbp39fYpTu`8dk*d@#FL|c)Vjb~8Iu5t{-B7LM77u=_?
zJ;q=$_=JWzR1EE}-U-ahl|qcEuJ+M`!`YRafpl;a4vmmn+g=%WT1hBBPB$8D1ZskO4@cZA?0
zep6to#E5&W%Z3Yj7<~`Yet;&hh<~1e^allsA56k?=sk7F$EfrjpM%sRpm8w{02s+0
zfKJq{m?4ms<21%148qxf*;E##>eXRDEf&@+$W^Q5kOo71mZX4G`UBpbW_1$U-K^uM
zivX?+`4}LEIZ`v;>;Q+qKs^%y=&^HQWn)@fT`cIz<*TCKAY$sgTT;|u^>RZFRbqz6
zWIF|GZ96NklKQ=>>z7?q$l^LHguJK>nK&@i1S}Udl
zKnxlNDhU8o*;lY!ty_p(DzOR{{eo&3;fv!crKS!{$;rbikP0_v;Ob=-tHi0PVE71G
zVp+7fVm6$LT9`W)rW+VyCT1pjMeLsOKIo$p9f8mj1hz)~n0$*7n_zp`7^?;p7U}H3
z2sr^(-aJBz%JpWeo~d1G;P^{gR>RgV7V-ejD;_*
z!DVKntVTJ(R&UHvXS6yn@B$B+N^(lE(V2h;MQFK3xeCBB4^oTW3RZ$R=yd_a$D(}g
z?fC|L6Yz&?6&a_M4<3vV*{SLj*tRLE*5vFFcPQe}xfeOJUm{yuP>&ptyobq4%T&r4
zy78mb(#rfS*uZqa)@RTR#SpFtf-7Pd8Tc!sLJE_vF&OGT<(mxH$fH!yIoa5(bF^g2
z^q~q6S5oH^r$Q?u%KrdAvUM3Y02q4;12GDwo3)0KVx!wYXKG){fQ9fs+^R>lvpy}Lg|uXun{tCavsVnMz)?sYem2dXGT`%
zz;GCSbIeWAEd+SoE+qX1K<-6^YO?tKA8k$
z{XsH4Jcw5YYYlz(k`zyZ&RF`cNh|7(Rxp)VLbZ8`W+6dntdP%2m{fqIf}DtJs`>Aw
z>#;4C)Idw!M*FF+F{_=1@)e1ro2e+!bqI+TDd@rIrw`g(Q?Q3uIeLIwY*s?zqbjq*
zZ7WsG^%b=PwDB&c*Ygu9E`A;hXw}3$T2286QWxn
z`%1rVpoBP^tQD7+(4H!k)Rz7CCRM{k_$is7&S%I%%RhYP9>cLlT7z*z0cpsAaBM=*
z5*LrjDGhaU5$m>;TSEh33sHCpTMc@*CafCRI@pC+oCFvKEPjQ3#DGFGF@YLnfH$z|
z5M(N$ffN(mV#_Tm!*gPstgTA99CDdEC$+ZKuEK$!mXbv
z2g-e%-}M?8eNUnFKR`2RPyS;+#N_AHoXvXdkBDKZf*z*X^v*`Z8Jp#PCRiMkF%Qqk
z^u~QN>+u1DU{&=#%b?zt%2^*MJb{OeW2S{4v~9(lLZZG%bZV+_H?Daj)UR}(laJBq&MgXSK_<&cBqHfFv+%xswN)mmLi116+aK#ni1#IFAUAWs@NA)z>p
zYZK!ZxlKz#a$o~h!V+;aGclR)&D0pwue2X(oT8D281!ZA0#yzJs9=^lF2$ImgQ#Os
z+7Xs!g}Mh2uTVH!AEI0fJvz1YZZ~$?KWWiz>u?6xi(U^G|W%bad
zej6LP@;1s)xmc}hOF^Hq;h&HgM5(Q_kQCfBE!rEau5k#rk8+ty;b_L3a%z@ow<+;i
z`Gj`wny6M~Pa4XOIjDB8oRy>QY(HzEH7WqhXgN=h-9FxL`i%@er|Lh@K@UgNF$9py
z=t#gg5c>YY0~ZX_IrKuH+M!?Ih%h1e9|UFt23V9h%oes0)quGHdWyja#2^`?h@87o
zhk@hq$`@UO)rCyPUt+tgHVc~3~V*=PPA94BD1R!X;D+QY56vDPb)=CVe
zwXkYpH5J-ItS*i#F0Qr`r0%RR31qO?uM;eq7`5aDb%dM%T~D-_xG?rdaR|k3ODN1$
z1}*_|G|bEg5ISl!gpmObchulC4RY8zc4UP?dj=pl5tT?*e-~vDRjs)i68P0`6@a9#
zaE_Y1hC&Y;oK^Cc%M`0}6_Rc&6u7ZIMTrlvfVM)VS`Ub#C!vBB#O#ndA8P1Ur_A_<
z&0!(I$eQ7AP{6}$GZ2KTf}<-w)^oD$h89-I;;^mGR3~Sc58>;u`75h=Wk9nMS0K|%
znxmc70b;fq-AH-(cQccftj@66!T93hDGcWc%j37V{FCO<*avHV=!)XD8!8!$6#IGK
zd&B5qh9CFBYk~g&bXOn8AGgQolbQQE=s*Cl#Ops3<_3yk81xv5#Yw>jQWW8xQIQ<#
zLB>uGbKJ1xz{~=28wldaQ8Z=jXwh~7S1~?rvk<=y@QAhA|H=}7pED8ij+NM
ztlKIItl`;`SIVzJQ^z^3&=vJpl<6yXGQ=${N6vRz^$VlwrohJCh6wZ|ukXXW#L@OoKaMLsj`L54pm@z42q
zVTaJe^q-)d{{Xfv*ZtOijZe|?6l_&?FeyHuWI^Z~s8p;cFrI-k;LLke*RRYSdJJUJ
z<{!0t9`y%STtEPT;sOD}m~v${YaAm_9w6OV7O9nk&ls|-8t$@y%Im4gpLFgcb?^h>
zkm(MBTcIJBP|V|{bO16rqU%G3yzaE}UZZUr7bdIl;kei^4$V1ZQz_F`q1#Z|w$$$#
zE7z&$Fz9`(J*ZCoI2q6!mrOT{3b77Q;Do@LiueVFK1u)`EmUT;OfIAZ4LKNiI*JOq
zr+1@IHGvK+59}N^sNH812#ec}v502fPz>?P(mC=$%8^uxt){`Z`$wCC)>n2*?N>^vn}IY
zX|T10O%lXME
z8`uaWJ1hqTE+83;Ir)zaF!~sOq8)u1^{Mn@(Gw7oewBTbsMz!b8Sw$Y@scsv`A*sN
zSXta4LbwXqm>}T6F_2dwh6*#7YI3yNL=Fri+MeJmX0MHA^7^Vr;_`yaDNAc0sp}am
z2x$GnFrcNOfd#P+xolzknIO8CUM=lIS`pUtW}G*2w$@4`9jXc^yDnO1coCA2Ggbu)3RD1#%F3eh=@|7?tV<3b_Y96Eg7uBC}wY
zsZ~Rej6tlAAY8FRj)Nu8v9o&YYW(mfgn_FrNgaU*hob6LxO~7#0>#vWQNvsbA95V!
z)q{_4VcPm;W*D&gV>7To7y>J_yQ%*GA=s7<%mW~N;~*T)Re20cq8)}xJ*>EKgsR-p
zSY>WXA29CcDy-*vsZS(iD8PctUs&0yQd_ho-xF-cpT8Nf`s9ZSI8U4Z0Lb@cY*B}{
zR?TCn?T*nKc4Zh@&--2Qt|xZHepY5FCtlS06y`0~Lxf
z@!G^Vgu!D1&Imoga~WoOF!uw9dne}wWiE11cyTsTG5
zj#d-xAgFPbuhTFHen(KjJIMur$bkDtQp1u4W@G%@@ma_qtG8ma)((1Vu+=imFqS7w
zrxke3b~tC{{J0uc#gIB^tP!ql)io$z4B#c4W=4K(Vw+yKYS-cp!ITY3`=hUXMQYri
zHLkijlrE~n+61rXDFRqXt@Yj}wVcDXM{)THV9GNYr6Q
zv1?68*l3Z!Mq&G1b!6-3YObSLD~q
zMlMR?5017@tf@$A7Z3=UQ(9&eD%)zHt0*2bT|ksgB48H#@jl@PU>wT+QGo*yh6u3K
z$;;7|_}3+zWCK;e>RJh{nT&IZVx7KX?yNx|&)KFS9b#uk49L`9t2p+r$s0m9TE@%A
zC6nQs*!#_iDe>}uVql0ebupA<;a?#1;X#b$VIUBC2Uc~;r*4@>U?sH@Ee@u^v`mNH
zt{xz*k_+0=&y$KU$x&Qgc9i8}oPjVIfegH2qJNR4Lg%5WgBb`+&Pxp?CuF#Lsw@%
z7*_++9-?E^6N0N7+Y8L+)8=DS+QLqAm22{d2N7!q$0t)@L?4YY<4oi%JA;<^dfaz7ZCaew}
zyCE8tJ-0-H9Q9*i<*Bj*n2Uj)g!qJ$1P!3`Pmu1aw=m6Z(S(&g)=*V}9is?Wy2Z>6
z0yuKkdzDFLB;;wg;oXssb-sqD7MxSB=>%*hy76uFez)U)kgPHpQm^M-5c2>oyvz89mC3RNF
zRq0zDmT}RU2I_45+SZ_#W;*0$ZC?st_gMlk1PWy&32DTr09k`7%
zhWH-XmiWq8m9qfoNm5Q%8$yF41PnNJ(Sw|3XRPJ~$iyw~H5P$b3tQQf5u=j`IT|o2
zhxwaJlP7yt4}2?_a-}+szS_po9ED2W`!7V|&Kq5Qysx~1td?P0uC~*##JvQnQ
zovO5hWwe^B_%yd;?gzR$t(0U23(00A%9kmxkzF=KRxON5&H(x6XU6cu52=UxAU!fz
ze&0|ypK&0MTw#8dVS@vEK+HW7a|8zi_Q@0CW@Jvt?MS=ZkkAsK48yPr!Hr59Cgf~3
z@uQ1tM1Ke7Rb#E3icPg!K&|Yj+g~BI7IkbGbTowmRV737UGU`Mfu`;MfwRYP+)7&B!Vk->FhU(6CT>DO@V+;&XAW|hq-H^~s
zOk^^`xt{?6&Y;Rh(vFhkig3E@y_Ws)90rV~VmuDBcnk(A?8hi_K()UqkGV%ADNbH&OM5)P$1N~T>G=w#1otTlg9Kuhx#Y+
z^Z}7Sf1^DKh<`%_PVod2Fr3W6>7J?u%j6hgY^Z7QSZde>@?8u20bTB|F9mxjX802Nr7FQPMGgkVOXG4`E3zr8l?GE6FQYWs&Oz!KE7h0I{c_MK-^
z&%5Fdnjk7fKIS0!>m^z0EC@KDl?>gC1ps6y$QcX?J~N!?8T52;(=c~2h(-(II%+z=
zT&dj}o0lg9DC(9f!GAHbVxEsvrUxj&qBg~F(-NX{(T>GKv9f!0186X6Ml9Tl>TW?9
zZo=V-+qO7lv&i}eONLd$WDF|LxNy(!D
zoeNibt2M;<+Evsja=+>Ek4Pnqd{!=M9komD)cFIOU{DuA%UsWV&-9)jL+E`^^h}YTwH6txWWIVQ$
zVsjQH!qsOgPy-z>#Rrk>s-a`17=a6+E~-O04A^x~vj7y&kYg3F+0Zin94PT&QrFP9
zu&V<11bA6PTUs&39lk=6J|=Y}^Z?3O&>(1sM|}m0hC-l`fWrb>7{)klAt>up0Kmoh
zFqmU2OLlVN0xd+bs+HOy1Q+|OZ_Rb>geSE!`pXDCrl#l;7Otgdu1LZ7Z1%5+4N9(3
zTsNF+U(HRKm51>^wTNU0R@k28C0U!ct8gr_TB;Qs+1WkL6Qxq#Rfg+STR^M^M6m}a
z-fOi{bjfjtKE|NhS1el3pV>N!{ny%YPjwFMY$Ifc8raxZOsuPV?W?j$ScIq_Jiqkb
zAL!O{AUG@%6mc~mW9iO7Btmk2q1Yr5GxPvq_0*4`Oc61at(A#JrVT8yY%5~}Mf|#i
z^H`xQeVg3d*I>|VjV8pz0oCi(i3JCfj!LDG>(*Cp00$a-0MIbYF31SZ0SI+0aBJ4lhpulAP-gEhpB^r0aykh9)$>BsC5soVEm6vpIYq(p@K*_^bBBzQ(99Sd52Li!rS9R+v
z<=JTCjiFqjtgHp7vGBtnsP>*xu$9+_z(U8QcZi9L9}%1^VUb$o8esO!ZvyqGOY%%B
zlr*0qC(V0Aebf<~RAn#VpP<9YwcV
z@KnHXzj7Xr{{W~0RD^2=n*u9>dWJMQoh~J0xzAayTtxObI^VK
zw5X{&ql)1rUc_*%Q`Ro_o-*zly{&$q5f6+~eYRvb4W%ayY5cp6N@b6PtyKPE1EAYy
z8DpNw$>sfz52=UH!{~ma{RqZBtxm8U7dsvQ05A0l;aHMkIRMKmDeJdG=VTFp$@LI)
zMEM|6u_a?D9C@wwS{h}(`td#
z@q;5$XN6JtY>xM-O3_mFnN}?S=7Fq#RZa&3N`iVZGaJt8miHWQXtDJx41qE+fiaPwUu&f
zASue&ji&C(H3;f1LJQi;yVH#g1L)ZLMGaV!x5EGe=l>WHIfL$wJq!9YbY$42u0jt>v*&qFHM;kwMxyk
zsG<;%F~=CS0pAx~2ad4f5fQUr4eD0^03-I*-A1yOfL_|Hvi0N~v*3;yDHIoXIV;@M
z6=l+^2*(#9SNFeb$bE$Xna5WxVF_-<%aBUGL=%{OuM9qhVt&Pardse(Kq0~~8)F8j$JdkvmD|@G6k%Q%Sxj{WMNYN98PIPCNz6X>htR|5VTbxIdn4!_OrN7Zg9b3v)&nxHXV7;DCVW6}ZOeLMW2yHKs1giP
zF|1{jxG<@zYOdji*cTPzw}pb&64LQ%tIG8tN~2i+K0riCexxmLaySP^!CF
zwAbYDJr0WedaZRK0|cp-%WaM41y7FJxm!OVBa-UvLGlFLAq>k>z83&DH}kA4%)UWt
zfa;mqHCmBsEq@!wZ`m0IqsPA!*c!^wmb0X^21-%HBf6_#!dcjPFbuPiW1&4_S~Wo28AAZ*J0
ztcY1bbg(I{&$cMTDa#Lweow>zl=i$IE74zQDhwTq{if5UHjQbgMWkMQ`q?yw%qhWR
zW%U{fV`^-5#MceotVX1XQnT^+%og6FAI!LB%4~E7wQHzJV`|1H#h5Ius$h7y*ey`@
zpM5{%Pqva#8r=axAOWu`6~g2%Y(9CP>NGI=m|^~a3DH08MELbSx%%@zbAnlLaRU`0
zvJA&aVXp&RdgxKSc_y|WSTOWep%^v4mH;_G#=o)xt>YxtSn%#EZMCSn+R17{JUg!(
zfyfD*lxbz8n!y}TBi~corJj1tD|(RNy>z-M!mzUSrq_DeKn7?SvW81Dw;IiC&XO#A9}_m#|7+8kYlUlZQj9o^05=#tuK1ZioI&M|t#hye;C
zR7$#AMuVi(h;57%q&t-c6(mGTK}ErOzrXiCxc7dZ=brO??z!jeT9lqh&ZQBdP1(Q-
zkFoZ(G0=ut#-7D3vC^8&QZ47$c!XlBTH2H~%=m?Vx|JK;YD1T%T{A(WCBFkWyDZqY
z@%g^(wUF4REVv=RF~r2-i4n&q?qGJ(tP#exkUjWVSp>`P6gr_YbrQ|n{%|BS3&&JJ
ztDO+Pmy}ve#-BmNvmy_^)rXW%Y9dJQ%Cu_{yV524ytm)v};RF`Lf?~brv$#D5%gr6jo&rL7|4)
zu**xuxR0kb)%!PespMbu2u*`5!G=Y$jc-mX-Cw?s1M!v~+hK9>*9v0RnzKAZ42N
zKXjth2gdtBN!I7-yzHNk!HdGTWFiEmRvq6GxzpK8U99B^(uVgL#zsWBF1G%W?ms%e|z=i
zWrj4Oi{8V4Fq<`kaA9d$+J#!tf7K6EMmg9nA4JJKFvIwn#-qmDVxiavG}7)(U>
z0PIk^-y{+SndeC1QVyrLWCO>A`uIaTo8S0RuDB*5^`ImWG&gWi;Tvst_&32inW(n`
z$Og=sA0;OmECpy3h|=uxY#SfKWvsSpgoG-Mh!GK$a8TEnlb>n!_1aOS353qAIZQl%
z$vqCcgD;S1*rNC~j!r222PidKfQcd$_nF7cpp#A*{!tGpFy9v<$5zfCjhE4O;0mG^NNN0XJQP_$`sNxcLuu9`I4XQJAG3uipSBTNo+$Av{I^;C=dYi#
zFvjBgMc;;GLOD{4ly2|e2)VO-L#BKilu?H3{>;!Zdauob)idxpLgBkEWam(4_%aSj4l*xm}_^f1^1UDU22Vqmgqs(IJ0Wq)I}e
z(OfJ_FSA+5p#djFk5NLrThr8*YQ2(dXxUO8ecH#_HtYGLeFQYT%oIBx!#$@XzqnZv
z>5F4oS4r!1xvvwDn$8yNkX3F=E#BxFs7g}c(q4iKC7F@oj&3_pLIP;Q)k7t{jfSj@
z`j)+=`|w6Ex$hW??A~P(rPMXv`8TBV!A0E?az>y#LYU^AA!q^b?EjKO=K
zkE7>Dguu0yuZzpExA$`_p5>;y>DymFq(yA@-=wQZJ~s&`izAt@Y-TX^pXTn|xkjms
z2_sZWJ3U($#1;=XzjUm(ApL58?{VE`U9$jmJ{sFsc9{G2!4}~ig3p0!r%Ym%p%d+w
zkdO)iPJE>kI6+)(4yhLLHqk6CKG&KYDKur8zk$osOdC#pr8i!nV&vazzed`t9{@KmZ=U9_fM_sz&tZ$Ni4eqG(6
z|5Bnw#HDSbJjYpl1#feNYC$wr2UL{9zQR68FEKV
zp=ry=S^U5!A6j`Qa}(RtniJJ`povSwv}ZbW>>X9s5qsWDAxV-;b7n@I1MZZx@U!$7
zGl^zoPF`^Q9L-1P%|w#+702C6X$YM)*(`W%|M)X1ZRwM@Q}?H?72>RmhLHdasOC{8
z(6X|qv_+BxWPZ7CwQ{S2G#12@zvXe_T=%hfra2+9b;0B1NSqT$4RukUQmCh4W5+`$
zR|$?0CJxkaI@MfWl)P!*+jvK0AB+AH_@!cQ;LX>(E=!96&Xj;i*tMKe#ybb5&RR+p
zTBIYp^0vX0%Cym8>}u!I)-fr+>y4)vo9BYN(@A=n?#Ti(|Jh}otRP*KYGC_Rg4Wb+gKM{tMP
zo+p00nBQ%CM8S2xPJG?T-tsEne7o31qLm$mY%W~o^<6CGQp(*bisVh1X76o%fuDO$
zw0<#vWLlMGL^9AQKih&>pKbQL&W_kd4DCMLCe_D74%>jszvIv0uIrzEKkQdacLwa&
zay_hFER+$uF-PS!K^XgNaV5*IP}zX>YL)iR^}TqSt?zLCar=9$v&obLT(?E$Rgcf}
zfC+XrnUQaNpP0Xq9a+#Ihl;$OQ&LyDnW*H|QcDcZ$Wj~Se0e;@r*W5G#Oqn5`Q&Zx
zL(kl0L8e>`Kk7W~s1^&%>Av8SO`r)Cf{aob5kmEw!BA(b66VzxKV0wWIjPFqyfe^N
z3s)M6kolezx7CNZ;h<=wK!-Dhe*mKqh>4v+OVW4~&3TQcX^
znpIxs1dPk*vf^z4%S1m*Nu!lx4TrBtlzSXC9p}JHV=zy#`uh`#P#;@PF%Bk$6-&y3
zPww5_xUWjB@fL#x-1>7JDrDviKa2-qf;e%d)-ER=!$yfE8TSy!OlLG
z_|x0JHwBX={GhbINP&`XBm)|HOB>sC?(j+pJDRD`&OCSsctNvq|^!Hwu-FUaW=-2h<^CB7D-bam|CvU^$N8EGwVuzpQMV(PQ
zMaHHk7Ei|0Q^%8s2|rLXcVWAdK4rAc5!`T3MLHxH;KKGPtUd(&Hp?#n^)|_UcDi(o
z%bL9uB+TjJrQVz&9e0Qj>;;=Gn4Yz(~eH4$ds(lj9+N2FQAA-6Uzq(W)Pitd|E#5xG#`rc^&qBlTiU||0K+^;b$!ZQy^H?1RS
z3p4vnrmF8U{{Y7192AAtpOz^@vqqWL-uVG$y3d?wO~(1%1(wa9rLeL?kNIj+YVRP$
zP-B?&3K3^r6}fER)+_zi3wN7%TBpI;Thr5#!w1qHHmuD+V2)&6(LkjOJFlKe^>CZ>
zQNdQABGY8tH}^-A%D^f~Bn(^C+B#$CQ9wEDpeTYHcbiBBPFq-8+WY)QRW<9;9O{z3
zpkF!<(F=$f559HZYla10c0AiUx}pi7)Iz{}yk;oPHvC3^T4<8*GlP83LttixM~c4@
zt`bMmq#YOl)>`gW=~JnH0I*Lg3U3fk>KaJ;xnplW2(^}%WoA^o^Uf~k6>eM#4UWuR
zp{!Q?tp{|{b3A>dp(YCw%FVOs>dQR?t$s=ByRvDoS%mvm>h
z)+ghkF#l+gfj!(d@8{!Q_?h$L7K8qzMvt<#U@53pgYuM88k!Zoa0rfKYW!PRIm2u_
z5Ep!lLutwjY3xwF`jD1mn|V+_HC+^OL+`DV0b~f4Y2mT#d{V^>OsFvp2HsEk8TeOG
zg4ZglC%jl0i6Gu>DXF~K#JroKU7hYA0aDo6!#x5_(QO3uVx%0i@5(
zM`kEV0O>Qv(X~3Rs=|*cn91h2bVl1qzc(6Uv^fp4Mc!GrHz=qV;4tc;O$;P!B)EMBiSp})i`Uv
zRccd+ZYc1IB_TpSN(Xt(*oM?iUup+41^j8#LZ3UGPKVxMcRvzClMphTE4~>a%Yn3@
z8iMUM(TEeb|B@Rp5+AlCLd`e|Kt`bzWA+m@x8!3
zx@y}*0xU*`UEdj$KWc72W!2GC*W$NBSO-|8MMR-sVfdDBLqo_k*1FhP)@Qc{t=ArZwwW`|1Kt`QYRM#vB&Ez+ysZ?+dGV*R=%
zhc-nY<`vSX77S84C3Ac9mIfjF2dM$#0o*N9D7^jNLrw%~yIh>Kqlk)g=Yv6iW2x3=
z9*TrDlrTy=<0I5Pwg?SC(-2?~tpAvMZLl-LPWZWj?pgYyDeHp$Cq_bNzR2cu?|gx2
z&h$)UNpJgbqwRpe6{g@y%R-A7`dmrgk5xo^pQlRu%qRm?7c#IWC`vW+zSG7BI=x~(
zh5(;inU{YY?Wga)RN-7_7V_kF4}u@$bCuQf5?6&8XS~G~2y|9YUx+^pm?{J&`u*KR
zqQF+=U$cnq=dqu!SOdqbDJAZ^P05TfeQ~8KAFNLft#G`T4p{f7Gz$c5?`P=$Oi1D*
zFYhPepAB!u4~i49ZTcswz!>~k)W_mw2A&kid{UPi82?;cq+hb&Vlp=Idu*t#3aeCY
z&i9V+G2+%3#^%g5QykWohaWH<#G{+V=U@dFF~Q?@bYnomayPd1Oy6ukFuPrBj#&=Z
zetOc=)Sl@B-|w~cvKww;2PQL0Vd2Ep%IBzT?mzRoM|WR|9S=2e#j*b)&Cc()oEG9S
zj2jnognIEZ+XFeC^;Qj~x5_TLmHq-Hj74JX)a!&-hcc6`#w9Sf+H$kXX*7rOUV4qv
z`q{fFwLQ{n?&|21)SH1(#7>({Ih;znu%3uVG~IFb*)LT?QRH;4!mYi3H#_T8LI(4_
z!ElwVo)|JQGB5nL82$9sVvJz!&CyD%
zKDrA)ma|a*Bc>y(d;^r_dD=9X}3Ml2Ez~Evj6JPmZ}fbICCN#
z@}BS&v*)`kL5I3m8YAyuA8koVSUT@w3Sk%O3H$5uVId>S{;V&N$B=-&N8F`61^tVw
zmQE1kqP`$!BEQ7Eb4hUranj)g|UP0Km&cxrVnkViRrAsEYQ1?s{0PA
zsQVMwz}w!IuuOa91@yZ8nv+xJ9OI#J4N5S?dVXe`cm(o_R?O3Y{b^MS?9OD
zNqP!`Hc;~FihFrHq6!`~Y|D1g?s3ev!A-Npt!JO9dx#f2adp$WXhTUfE;U;M
z$qv5;T5L9YYJz_j1|^Wo(!S13d%w%*oP`WHqZ(hpaG-tqkP0ok_TStJo871^dO6FZ
zY8bdzCm&^<;ztgRTxI=e>AKxfII$inB#7e0tYoq8WNTcRYlyq8QSJsshl2@*PEVjM&6FJslr22@G}jEXiKZbj#!1m>FL{d7Du
zuQfi{!Z-7m`GAeuznUs_c8KT|oJo5mGi7jUpE%6QC?4A0tR5=U`ijdA6|?IgKuJmC
z_tB#ub)dmmQgJQG{NW(983QZvTo;P7>I!RZ@2c}f3MkNit8Jug`x3a&Ng3Y$fOu75
zH+NfT$vYFzsl+mlRZ&Ecz;12iq|N?4VFdiB4aUHxRpMxQpf)yIh`L*1pZGXm4;kMj
zs27d26y>qNs>iNY}?+N}HbTP)MeD-u|TP^fOs-=J`
zn-V=*w-vq6J@P-VE{pYK!XHVh#hVm2|Gd&BWtb;SB7s6FAv|g{?o}mo@j8W~v&qlm
zZ<9kDF*#;ho&n~*8x;6kj2XzVgUH9JJ95OjY1lLeZ_oaZ_pXL6FN||*`a$G~A!aOz
z?bMNd%6nznpnOn)u!M2cf~nbPsft((Sv&A$>qtJjT|-0_`Yy|QXtBre76lP|vCZvs
zo++PakC$hruSOgdtV}SN1m&qD8sXe)dxvfFYPE-WOCdeeFX%`JtQPBGDJpKOIny1I#9JPR
zdJ-L%L4p(@x{9Ikn8FJa)Zf;pH|U68>|_Y5Rw$w~m71{%2p*{U15*MnDw?VMTG*Nu
zxP~bV&AKv!cxcWd2|MXFPh(@Wz_LcFzBpsebUf_&d)+HddB5jU=J0Vxsap
zkI@W^sZBFKTY@seg*y7S`_@LI1+#<&`voZzo#}jXl*U4a$dt=;sv8X+U9f2
z6po*Z-Mz92<7iZ{-%Km?E3XauTI*HjLzDTqhmGLJ+!E-W{!AaeQ`oR=GTl+{A$kF1U!I}3z>){j-kf!V3;-SXo{=+I~+Cbs-h#sJ=EV-l?fC0U65)3
z+imy;E{Bp#gaH12D(OXlIig{TTM46~`~$(=g5#a_m+NJtJ(3QFbCoE6jXSsbInoAB
zR5I>*^dy)mb>5ur!5~`gU7__^wKjH$Iw^x0cDMb$Er*Cqq{>RV*ioynb
zmI4V2>Vkx@esqNDe1i&lYZ|$!&7|_)XQjoI;`Rt8G^i9sN8zK*+N5ttN6jY5a@l`N
z3D9;xcI_0^F{0J3si?HA$e6S->isaztDUJY@9U~or*
z(+^$gUik#`#A}{{s(+_U!8Y_%NTcd(6j>M0TL@64`^|Cn*oVcl54YBAxDyzDR`8^4
zr!hNZ44v#6jWP2(?^ac;8k3MA`q45+j+GJ|
zHet8D?UNGGcK}x&{y<+^;ykV_S;-br8B+UPFm)yDdtB3mvhF1`Eek+LDq3iOvs3Ain
zUD2f7x9nv`b*eVaGn=>MZ!^vulC&qBcGPwjdNZrB7wrp#GW0;bm_hJbNYkk$;M
zXWWW51kq|~S{etovr2B-bf`@09IdxOElCp63YcUa79j1}$N)oK2BaD$f6GsR{MN{t
zaVT!H-2}0NFVw@y9g#P9<)5;hDI0?mi#sXa+STlx71Af;-2#CDj&^lM&u)uZmT9`D
zy0}Z3PQ_4lwC(3wn}i~5?^tjcHx?1$Vd~dnJN}`Z%&mQ8)IS9@%zdt5jrF(v$p`|<
zyrLn278=3Y>5t1i5RO{*qfYwN2&2tTbf#%(e|&Ei1+_3aE_gpECLSU_#Q{-%6ppyZ
zHg{IIK;}4_mA2jkzGKl@{-O2jcoK?I68R#^!FCufCR(rJX6Q@ertnVo`!L_&0{qBZ
zo?A*OH!Z*IfI-`Jp;GL!bNrCaU_ImfM*?{-?Tqqa?wWv&Etzrqc)k=Ia>4=r{}Oeb
ze}I>kAY8f~-^kwI^qovY)ED_8YJOQOgt8FZ&d|osKWaC>vyHZdF}}U{8DCY0kV_w{
zHBjwF^(#cHMO~Akg~Z4$FRo73i)Q;6_<^6P6ThVgWEI?w&0&+UJ$4x9>`M&kcL7kGySJ|fgYkCen66IX@81WuYEDIcc+>DkAqs%-}|+qB)Cl#`41pKb3rnc
zyiG@Gxjt^UGVl0(RF;-G4b;X4*4I+jL97gSRguXX24&U?XomeM=89LaWShVD2IM|^W4ws{#l?tqzmKjJcsjJBL{^tH5^fuZduxRyi^k!$3pZfE@cxU!r^6^WsdNYJN>DS|uh1
zprxLs-s7C06&GzA!54Vd<9}B;iR7sJUFUynLPm&1vX!K$2)<9SO>FJWyh5L~j6Kx0
z3l>hg8qT}1=)bgg*imIFRr=HtMKk5O(QAJ>vDpmbFC3WvuV8j0{sH)zQlIPjlUn9S
z{;B_QW*A_|pPhZ>x1nt1cxg3Es}>50KDa7gR{A!2%#_gzB&entx}&=@Ev@_zV3k6&
zoyJ~Fi?{Z`a5F^|l
z!wl`S{_;aa-sWN~W67^G%w~1FQSu;Rvt!2@_6IL(TO=oq3U~WL&U|q%3p8FNa5`2e
zTUEkBD-U0Ne*!wVm6G^QR>XnqQWC0|-)fpHQI26#Y1aAw=!Bc(jLh(OiimMxPfBQt
zP4<;B#)~I2pBv0>NAnJf(if7Lcp=hFE>@0^m>#PbVswxnfVMB>wxcFZl$?{~oMrsa
z))+LE!j@4y);slvDMLB)J6r~6++SLdjTPvX-{Ty@Y1+%UAq`bqx;GETvW8HvWy2g}
zo@oAFo3;VtFIuBc&#lwbomdwq&%bj4oqk?&XhC|4l!g}0ZA=w;+2tKBnv!VQcibxF
zIVfa?!kW%8Z$%^QVq%V2P88YlSf&N$0tm4fhv>h$dt!I+CsChEDX)6P*y*90XeG>1
zgGZ-efM+m)FJC3&Dp&OOiRJ(M0sVJbG%{ayhX&otnD`^66i1mr?>TFtD{Jmw=fJco
z?>{b()W({3s?_GwncTVsMSV0_du5K`s(mZq9>w+%%nwS&7fmAh%Mm(V&nP75fhR2U
z<4qU9_wIeG6{`qlCY@B}wr{Xr!^`xn+tqQ;RQbUKaD-_!bAlbgawK2L{`88NL9saN{rZ`9zSSS9)aBJgdy6ry-(
zN?e&AFu1nsn!r$=^&#IW|{KnU9Ym27#6b*q;+#D;4Im43{^Byadpmr*IDiU
zA|zy+hmOZm5cXAAM?Pk)`njZ6v|xK(x~{=<9Box7)MNAqg=LjGqTMZVztirsqKy32
zZTFJZi54E4kHSXf{b|KECXypY4NmDVTY!sD`Vw$U;+JatA`DbFEQtlRKk|FtE}#)-
zBb?dd#i#R)@7VC0AW2axDBym~&te|%u5FRu5jX{m8n;bx_g3ASNB-EfL~4Q%vj37}Rjv{5>Ti1>`0`Bb)k_%5y&f
zw~{!N>fV}dSA4cPBMmw14ZxRTMQ(0d*k2oC^rQS#NvpOQ>|+K^8eBdU-5-P)Scj5@
z_*e@Z&A^OI%U(gfh%(S&pcN`)q($J^i?Iv366My><7a$q6JkpXByD8KvtOo{xpP%x
z`5#-nWHWd+uI;&}Xz`f>1iPZtT$NmjhlFOXj{~#3MFka4NmZ(ncPLh6CFNPdd4E)q
z_ivcfKXQn63&848523H(+jw(r?+pY=Awa9Qe^c|P2&P7yxg~$PcO4k?`*ZU0$3=J8
zmNbT_o}!X)NXMwQkkONVmKdjmYe~f@_BO4do25lxKIF=EX#4PhBC-(J0Exlb$lJN9Ify;vn%H&aUc%Oybc>nfmP}XH)F*pPNjc$(J@C+)zg7E8NKr_q<-ko7A#g
za#D#cJ(-*5$0?7P%br{Ho3e|;ylj|5hA`kwV|T#)cXdyB3X}IZ4~yca^Pf0SJlV4$
z{Y?>Q2)c8J-naI>jGPIXdNt__<{<2YSS2>C?5)XP5iuY3aX(zc4&RH9#o9kfnWQ+D
zz#q?=edMEK2YTuMXZ?eA?asLCnai^9iW4$wC(wG+8jJPwNWouuq;EQ*gWat)t
zD8qCcYEi0HpftLT?B&WCD<8zp1+jO>cU$+{n0Qg}R}}wgcap8{K^dkMrzQr_8lfdS
z4y9@nw5CQ92{|7|9`YXi16-5{O#eIy(dz;Jd|ibmKKMG1Yc-J;$(unw=(NKs;796k
zDxQ&d1!R{0qPSNFYlMG6%J#yR5hm+KHoI{TDm1HaMvPhqLCDrmT>Fa2lRYNIZn_fs
zS}l1C2_ggsVa#i*5kE?sN%Q=RLjgU_4f;>9zJ`>mtg%kq+a_lvo6|Ffn`2^+ZIeW|
zAMZ71Ic5z^>*F&!`4vig9`JMh9=oavuzemDHp{HVu9xu1K6!D3=^K_~=^vnq&oDM^
z@GDOn5=u`>5y{%{VhrWq&>w~`QIIH^^-R0u(7xM~?`D25Hw(y(&Bw}KG!+KoQf2Ph
zj~->sQY6f-kI(2_<)<9DZ??;E_%Xny-{NZ4&2#MWn+YI(-kmXa33^Dy7HY%O=BwNpw|!aB~h3}WH(8L+^)gYIog#j
zqS5O#g+EU0bI#(((bJgYo%aEvHNT%1e^sPKe?F>bn}kaXaFoA%_|Z$tPwbLatp?Di
zGZ9Izy9Yn|t=OXN$*ilp4kTsxLV}*|Q+H0SDY9J&3Ebk&AC&R(;vF0k0x+Zu#VUjW
ztNI<-#19=}OS3(_8$}C~#tgksW-hIXh5Tk7zRqdi>&11=Ohvew3YNw_kc=@~fo8MZ
z={bZq{t!RZP(a)q_pA_cIQ7mZsBlb5B$^;#(;qICJI5uc$}D#R69xTJKXiv7#<*0}50`
zb2lfPbiNp9dePR^;p@pp5<9pk>dHqj*lj87+kb%FgHWTFhH!YMdr6(0x+TlDqi>kz
zvmd>CK5d$(2Uw3p)~W)!6g!eM$-anY9Vk!ajHB(oqJ5TO9Cgkk2^A~1|LMMM#`%>J
z3SzGS$Gqe1f0Rl-gwn{+57~QN2+j>ps27#<@p|_dP6-=B;MGWagAVn(1z|*rjHqed
zZDV$D(;|Yw(KIlGlEvrY!hAuDxTN^DusK57x+9#MoRE_@V14IZkzIz)>*BTXRoXG%
zP|9Xy(BRN7JkoZHJvlCPk*E*a3L8vZxQi9QF<3O{?h){Bb
z|K>h}S`Qe$rOVh^V8GZ?AYlxy2L%*(2T6FR_5^&_<4I8NZRaE)r8vHs+W6>74X_pP
z+xW^TU93145LfDG%vrv5adGP_k^8qOO}*aLd1C-znH{Rwo|5&e?3xoI7qaE%>@6RH4qt
z$1A)r0;tRR$)O+=gvAqp9#Y7_OcZUT5
zV|z4+2pv|k;0pf&78fC-4xA15ztfV^!(J3w4d0c#luv&)nZRQby3AVA7Kp4_g;>NZ
zsHY<%!&=k|dkLi0`@>t)i+yig(#R*5RKv-CrpAE3Pem38=#tV?w|kBbC;2~P`jR}V
zG;t{n|28W04d7&6oFe*`$|Ytn5S}EE9+zg}NwFSl&*&4{i1|Jua48cfkIxMVxF_Hi
zPJh`{R+l%eomRw8oVS~V%k3*5HHW=lC~2sq+n`pQRICr{POWB_(+m0%Y3If}ygIxI
z@~X_X^^=sM-541mya&0!u%v(0Z(SFZ!}+Xx7Bz%X{;Gd82}J9^h;E8j-C&K)GT_py
z`_ert=9iL9W0=@q=`;?rdc$uM5RP_7(h05oCvhn2Z(aW1@tE(B|!;vI;mX{TOg$6{u
zD2TC*gWA+cENO!%L51H-yWV>^-%ESEru&`@{EK||NPI6?>1gHWv;w9sx4C~ta?2<52N{AWNKqU8=WI=0}~*BOGRO|d6UULM8QCU>AkM!VC+gf_U@SRSM?T(u#&tq$&`at#va|7$m4kjARZ|Z^
ztki4!w__Oe_9ueL{K4JQ2W*p>YR4;oqs){Sa$Py60_?D+lhb5hRp?jv1t%ae0X{>c
z<67`!)~+9-yqBE<_subd6X6xsEDsC46@+x#;C|B=+v1zYuHgY$R2jcuXB<%ckVlf=
zeH+NGmjy7i08Tv#(~y&}HSVEx%{*`FbGj>>VQV8z011L7*A&(DSG#iZ3#Pu4Zw1ss
z8rHKGSThS>dPoMO#STG@5ZHNhfo}$A{lI|~87hmg`%C|OQa@oHkIs{oEh2}|exUTK
z-?|q#n&x{c?p}N6az~xmzL2l**kYkInf8>Q;)RWNvrG|f_0V|=SYFEQy-4Nar%Jmp
zPwjW445r}}W~JLJnI*%x7@7Gi{~Ys9Lf*S^@KBpbSCDj@q7`bIbX8p)NXPk__%@$?
z+fZSdcR~*cPqK57cqGwU0Bit><2MiPa@@(P93H0QnWyS>F7R3poCm+Ns?waX{~_-M
zfV+pl-|tq=erG~sRs#I-(p{W`MGYBw-4dz->w-JdL&ND0EjUEH+Z6Hx1Zlz
zi$0kXt~;(B^qDuj4Ri`E>>$)Qc=7zeD6XHa!6}Y?S0A8`KBLVFBm&aT2wLp!)a6v}
zv*zE+!empT$R`?6
zn#7<+=1$E>w#}r3L{%Z9U!sUWdSIM3Tqub|V%CwgK+i`zZzw@BCz`#NJ#eQGu;J9Z
zitul&fnnPwHc+*@{k5tzIFV(jrJe5qlB={VZqcrG*)I-3L03rI1$iQ=fPov$3O%MiSqNlIw#&^C0h$
z={e+%{~)K`X)${6bN&j%&Fk=60E$)xo2s#Sub
zv*oduar$kvP0t^vpKBbHlqpif=y^2VHQQayIhvaWj4oNn!WSN?N>;tzz~bxXbuvK3
z)OWRcfU#28KJbih#Vw>!`(MGz%0aMY>O2
zxjLhPtdtnEM>f~#D2n-0EW>0@mfutPpcrpyucuT}MxVL*omj&UDw9a^03^Cv&pb}Y
z`6~Yb>@_E^0a0S%Ffq7$q_&AOE{bXdq8AZ%2E@obD4cQqA*s^+17n`NC#N`P5ggsk+bq0dhJ=9In#ouH^2ASbF%+
zqNDjagfhEtCK$h3=l1NQGqh=?$r1A2a
z8jR{JA}?@d=W{Xu(#PNvxX=D>b27G*GiMw-VSxw{$P+{;DT`L+nGI>zg*GWuJY{kY
zJ$Q-+ScP&P_hglXi@LG(TGPF5(8^78rYR_cs>)V3S{VciZJ44Dw|7Uo>i$&ck!!IV
z^Lc%{w?@jZ@tlE#!o-{-Bjd%KqF^OmN)U^&NPwXQ$ffv}S0Gx4qo|&cM-o}3>`d=o
zx%|`XT8Dc59>P>kg>vO$x%Hj-$l;cs7q>g_!LPBjTaaW6xgI08_L%Y6)dkQcqaA-72S
z`gu~7kzFna0#5HkR5epDt}wlCW$$-<(s=6^S5BEPRU6l69%g;
zp5M7m5ki0_F6#LnM{CN(K^2oYhYv()ktK?>sTdt-BXJ@1%*~n<+hkuPILguXrHQUD
zh^73DhsN35eFYh-GorC7Don|*A8b^6cdg&YnFzcqioqXXfTpdOD)T=0sG7JJrZ!W&FEY^s_Wds}CxtoEqnvmv{nHs2gx+C*l&2G}^`N14x
zFaE1I8Dghe^rj;@ETQa>qj#7wjbYX4XNDfZQ_*ghv99}Y)GDqSRQJmBRfiOZRg7i#
zAlf6C2_*+L{Nzp+oU
z#<3v6EdK#y0uTDG`Eb{_yBOw&f4%JBo5o2PBnBgO3B6XUkGKWbCExY(;0pxjbO-6*
zEt=J68)UzKVbmZa0AefUP<;5r5wNr*$-b{Ghm`}@7yST8KoRwMYOu@S!c-O+5_Cm7
zRNx_XYJ<++5lNdmxsy+|8wYs{Mj)#eK)j>$PY1$%{fABFtbtKuO5=Rg?05gCr^(YX$c
zdTg0ak~fvaPb@t0ng%friJJV$2fBfMbZCa@?x*|oW%)FJU@QKrULk9b3H?NDP7*gB}Q7h
z9HoleMI~Jh!Q*zd`;|^qu8ez#r~y9a*s>r}5Y=_{^o8mboTcAmzNZ6r1SiCEnCD~w
zXA{Wy2*pM~GNtUXN#}1R?uL0AMHy4>l~>hj*vOkr(myAlUdRfnvv&j@f+&_W&-+u4
z{jHp9>QCnaI`lSdfE<$3$PE4cF}MYm1Xhk1PuMY8ze+<-iTeWq?51aU$XU>>*cyms
zR8ZvQQmqPwXl!*pn#+h)LL=h&E#Q4gUZb1gHv@%iGNFvlEgc{M3ZRsvIhl
zsPeguhKpyrbPakqADF#46n?@GPQ`|-Pu`*rQ@z4()LsH{wFHLN%U7HPiKJ^@6DrIw)
zcP#awXKtYEgtj}o7S)qDRdxd>N~$bttO#-gHi4WhYqCp#5s_wcOvFB@AQ9Uq`G|B_
zf`5fb#6LzpkuqR2SVj-IeK8j%b|E={k4ytIGlEt#mz_eTC1)g9C0^#Wqn|B=GRqF3
zeXzH>qlZErophNF2GqUXSNA1ti!R29GgYY1H_V{(?d!q8ScRe>yQxx<3tV$-$E
zp;!P)E3~(XYL-GuDiCq#YzDXi!m(P5whECG-4p=Yc^^K4vlMCwbM0_bLdzGo8+Qv$04f8wfOe
zNM75vZsQKn0a(J@e
zWdpEIA@l<f3I2eKQrg_2hou_nCMJ;4@~NR;>LCYCgbF3i2gd_t2DF_)d7u)
zsrXkaubn$pw2e{ssmv!aPF={~k_nC7O_f@Oi(SedPOO(#^8tiTjIPfa-8_qn9lJF%26L87V>zE7dzt<5Glz-oQP??{P{%Is
z?}4@so=Y#VR<@=Hs23Sgit(d()O!Np-1vw{LfaKhl$Zt2H^eM;I*&jgQ<|=3vyt~Z
z6(o$;Q<#;db8NzK9?%%tSe6SFQ!d-E8p7Qu$^Dq)&_M@EPtbp|7=ST02hU<5P(vvJ
zb3OzZfPl>SnIS;L)UeJWI3D72kaG)cej<_3Vo#)Au6$%T*e~+h|ilW!$SF(3qDPH0CAQ%C@>3W&_VE{
zF^)_>*b(#kI3#@->(ek23teM+U_sK2ggI&Bc$ox@w)1_bkgP+{`%lNWRUie(0OD4e
zVtkfX`&_tX(+HRa0+tNbO|cZ}>Fx}D=j6gmA0zFSEL@fOgQ8BxR1Ve<%n1rBw-r^0
zRO4CFhG825KXW)evjo5=tl}t)bLt=voCtrhfc+@S6nbKOeFLMq#CAfw+pukRG>+IS
zN2^eM#B>)bqc~OuZGrME&yiFaQ3+j2vyMmMPzB>M>k$ZAj%@z`o4;uKl=m?1XDyRH
zAR}IYVTeEi0I^pr6&5EQnTSM!%*?`Al1oCNWv*IjVXrYtfX+-FpFW}}pAf_U0Inw|
z`aBK}%a2i0Mx}&A?Ubof1U;W#vFHX&PmqPF_=5mvBfMuY_X!Og_mkwxEtZeWwGpVW
zYPOSr<3>!+yo5ji&6W^@J$w`Nh;bBTiq#^qC$SG>ARW8eV_Ar7IHAB^Mc!9LEj7oW
zpCpWW0qC%qpX^>T0D*D{!6!b7yAq{g?hH<`1kNYS0GWx8L6b3w`zOsWr9RRdQbZ>T
zItYEM)IU65%o*0rN1PD#yGQ8}jt-#{qUSJt*u{(;lk+q{k95HyrDH$go_zod|
zY&$UuOd!LYVl8aI30c&ZSS%!t!#YAs5=ww(#2=UjCfW2=%nZ7hE$ASE6YHPsX*v2;
zNjSmwf@eT__XvcR6H|mkV^+beE2PduPoLZz1wDPR5GNVMcHdL+?HyL=*e~VcCr}K+
zp2PzsyL^a#0LVW$%=lfRu42;BQ4|a`*;XBx=mZ$abCpHOI+idTPm%xw<`V$GFO@$K
zK>&pR0A;CTy}1wdVhrN5Sy5g=LZ*iZ`2x#ILF#%xCOL<)-s7J$<7HpUh>ME`gnNsJ
zW)$2*Rc2U#4w%Y`u>qNy4U8VpF4S($rEpJ{z_n@tz}h(^gV4f!W>MMjcVD$t+b$F
z(MB1qb8E2jC82{NSRSTjO5I6LkYZ`qjRYx(!!Wo(xnq|A$01>DqUn+DR~R2LeLhJ&
zD&_`IJu`?Pg#Q3%K{Mp8MA~fZJGQ(L=#H%(yb9GC6(FCO8WW#E@DD?veh+n@^mi*O
zyegwEtUDX5Q27qb%h+|y*sE{Y(TQ26&?X^86Rc&4bf1<1v$E_I_W*~p0Lch|76p2p
z7&5R7oM3t%?9P6GGYBgvIb-=&Fi2hD?0ih7i}HRUTzY=nb@S*CWOZE59I-KQ#GlEx
zI8{eY-9i#u+(>s=mKL4lr+oy@svjpkWGOdvcVG};xP{!A^D#bPZjPhSc0kktv>1fL
z{h${2uh!%c{kY5>pWJ+&f=v67u^n(5safeQIm$7u0>?9=O?YG2UZ!Sc
zfafOwu!Q@y+5|XP3VqEO=hO+*%*<6S2vI&D5ExJPkPlJteFgy?dV|pPCVYy9SbPW$
zLqXJYiMCd}6+O5jS}?GD=dsiblV%N$$^@Qvgt3d27?~Iop#d2!nV11EpKnG1Gmr)W
z{?iB$l!MVVWW69)ebITL2G`$85paBoJbqNI7NuoPrpYVBnPs&5Skz!sAD=
znryQ@d2o8kY(dyY
za{QRT1EHuU#41Ke?`PR!*^+Xwx`InF(agaUS2J1h3k;E&@ON39pJ;`mre{DF>~}MO
zqx(>}F_n~pbk9KI5IkO@XD8G`as3(gCu~fNdJgBn{?mbzf*QY)jHUt_xPGxeVF{gpr(#A56$`Ec1TclmoSZ^V76Yly
zU>TSo>PXD_`a}m1E`0!>Fm?T?7$8UKiOd9pU;)2n$n_H){UR@L^k-&ega>Fw6bX)(
z8R{P3M8NdOhco63WSshm@dPI%dMLpD)j7|gpCcz8qo7G*Jyo#Yif~WQpfdzaF!T@!
z)_O1;5t);m;%rRM)3>I5RAc*D`+lGYA3*fZVQh@ze9wW2h&A*F1f2a}u=-Vf5BA_3
zeL^SQ@=E$=KD~jHK0SUufF^#0T*7^Gh)#dEhv>}CXJ4cyN%|FLf467QdXG>tCQq(@
zk@^U;Kin+OlREtzK?%>&tNqqh{^E#6KiDe&0C7YEC+1`Ig8u+<{y$tV_gD;nb%4kB
zRAj-|_f!o303U!@-To_;ML*F{Kadg1HU9wS$0LFL6a)LL2lrG#{{YQiKmMaY{{Z}N
zGBN)E{4yi2{s42=>yQ2*#6SHK)wL)4*^a-FI>+;H10Vcr=l=kpnEo~kk^ca}r}(}-
z9E<+|$kR<6kM5`>7j|?10MhhB{{YWUfB6L`{{Tw3jr0EiZV&$eb6RM!_O_R)zq-HU
zxl6{k{HHRWRlocikN*Iz0XhEw?O;&j`>nCZ@F?yP{{W<1WwD?C0F<}w{{V6S!~jMR
z00II50|NsC0t5sF0|EgJ009CKArdh`0}xRlB4ILdffJE1LV%$oQgE>ZGeBTsP;$Y7
z(G-xNup~p0!0=PD!qC$H+5iXv0RRR+0RI5=vh`p7a&|xb!34aC$zk*TYbHaXp;SNo
zw+?C;9A$>Tro6BFst#LNqTE|c2%OTd>8cabrB7pCg$3b%-Fv_P0D@ELPE(8hMSs@1
zO}AhF00x7(xr_aeqF=G}GlT1i^`rh`{g15r+4ZyQk@d^_A5@LxeR4jzA6q`N{$l-)
ztsly8eFxDaF>BGc^<{--AkGn`Hv?QOG?u9>oC
z7j3(4VvUb-H#a_;KA!uVoBB3Swi)!hNX|?ozw7q(Y;EYnG`ca{CHnHH
z#L7}qHfY}_Y{`ixZp_m*D?PU`*P}2;wsrSDoBMxI_=)bH;TVGTeRR*R-+VRS2L7GR
z{{ZMR%s<_jX_+rtW?g>^3cGLW#H_kZ<#&2Ii|o+SSzI4J3+;(h@cV9Y>cQ?xM=?FE
zNcTmr>H})~p6NDwVwbNevl0E@ZT|r4Z8|Tu{jvNkl^SN$S-)(UrfgbAyH|WOHe|}|
zuBq}`cAm`_MkVUsz6xj4UnsaqNcTmr>FW_}_e=1PY*P93W7C5ZOW@s^W<44I0IlEn
zbnO=xW-T5WnJBWpq*;mN;hB$br#-PMeMzD!F7=EWA7
zp7pvuntunjq>5>;zx3&aW?dgm{rhHAZ{L4joFm&s>v!X}eHs1*f7ko6VV_l-B9C%O
zj*>Qs;hCgUSTQqX*TM7{)Q_mWN||~SUkuudqY~}2M(q}wzXiCp+Z0-foAuzSD_$Ax
z_Oj~N{jGyzEBY9;ux0A_FsT?a{{V}Fc4hb5J?@)6mVGSSwZGxnw|pC;k5a+8zis~j
zg|}@zMPrvrR+o+sbXkW*N}4okiR~1glB8nHO_?gJ_bM>|04UxvUQx1W%4wLHmHQu4
zH!+jlX65Um+Orl@wdwGAJ<-WqyA_1KD+IX`>*2O
zQ(U5@3YU~Abh5m7?^!ZjWoBc4W^LOsGjS7LT7C^P&&nxDsSX`aY`mXPnx2XHdoyp_
z(ZXg9QIeFBeny~FW`M6xJBQS
zGX0D*=w?cm3@EqxXSNBISu;r8n;%Lm+Kv4bQr!BZ`A71e;_SoxcI2X;e9|pQ%f8pA
z9-Y^tG|zHzeqwuiv47aMvGB~}_+C5i%Ifsf`CFpnmD_L0zI$Y;I{6$PQAJy%Cp|M8
zjFLk4YOWt{B@YcA7Y7abqc!(OD8sX!-V9SYMroL|Y-LfOR@D5W*SUY%8=IH?2w@)V
zl&N>mYDQU%oOZ%EMq56f`&qh1R9o`6DiPF|Cxhv-@{#<^+2HzU-IUwy^sDq+FmKx@
z!G>|$Or+6j+BNcws_lsP-?!4f{{X?mHz@ZiF)byjCc9zw;M>!c`9rE~&O6gRx%e`C
zdU5ErgXz-#Hf9aX_EGA6OKBM~WyP~Q`R$9b^GAo@CNtlD-sPVq!zik+^&{u~6~S^T
z8~QS=_TbFRvof<0E&l)mHkZKSwC9$M5pjPt+a~PiwYN{j81!WdN=qfCsM5=nQcsi2
zM^*6O1<9uV7i=Ptgoi0zBBKKqDK49nJ-r1I|^h0N`?lemr_;+xQn5
z{u(!SjolRU;r8~)qS@@v$0M!EdojiS4cU_$`l@j+rtGGx`eL^0;*HWUR#~_3H|^lc
zwp)%%O}4mbskVzfl-HXvCHL67!{wvsa(@HW8h#&Z)fW6@{{ZYdl281vlT3f%ryrEZ
z`jP53evD?{h~C1BlReG9mRi`vZ0GhV^y6%apiDoi%h3Eu{LOM0_u{f401t|;3|`6^vXKlw+}JJb0bpC9Ek
z#YoyQ{F}wEhILVCRX3z%}AMBy)N
zwi9a8<$n{y^1C>`*gT@vejleM8B$4}%=~{!dCT-x{j-E&cF&_Ri#KMfrRAB)!GnWw
zo0Sbk&T&%v(e*aIGE$xW(BJCE2KIk73F<4O)XcX>zIv=p*_TN6wPoe6EUi>1t=A^^
z_7o-VNY=Vh@nV#;RFz>BYDlKAG~}fh!yMs<;hG)Ap;Axbmj$Qbn}c!lWy!^lrk}gP
ziAGYarnVDH??bx#*?MD!Ck!GIr%tkcs+g(ipDfcf+I-m^Jx8m=h(%2&$~0-FK7L6@
zO14sRjc-D7yz+}uk|^3I2=>zXMLqcWF009V`5*Q+&ur%SE)7W4I6QJC2chp!tr>_j_h&{Y4+X#Z4G0QPg`=UYIu}BUevSt{D1}U;Cn0
zhk*`N{97%4dtj&eU9;NJpGHw@+`shNEBYYV_Y|?;V(-2T_Q#_p4K({(+vK#8OOl5b
z63eKMRwd;YlV+TwITDRF$0?-H=g_A4i*(Ua!!A8JNg_X~NscQccaH}#6eDBAQ~Tsj
zNeYvU`9qb9r!{rttSWdU>ZNoz$z#dGiegWvkB!CDjn?@#i7(Vs_@+4BCR?0KZtIfN
z	>kHDljTC$Zh*JPR$aD}qsO(}7BlP-E`^rVnsI;-&Ka&$p
z7>(a0;Br-i{8~x#7CApNl{mhFllL8JvYfD6yFI^B@XZqG`~0?Q
z!S8a%gf$eK@>0txLY!qgMd+EYtJQbmJ&Wm1QopNK5_d(O4ZUG!jY!%%`&A%3wwAn=@hT-#Q5Q(PPCgFQ&`@Lc|vL>
zG-9N_P1*G7^JA96N%P0Q;E4G-by~i0xVoK9bhrsw}wpLWN7F4Q68eav=
z+F?0gjfEMd@kPQBQSyt!{tXICeC0i-DmYSnI^ZT2aHlnhPGlW|6
zN7D&J{{WVkObr54F3QH
zzW)GAe2Sr|l%u5<+0ScsYLwGnJRaL?=nZIq1
zDB!h^gE=tRU^p`A3vuDDm4*9rM4bnEdvBi{#2Je*)KR_qzO<_2ael{{Ui|r~Myie;u*>
zJR?yhb$pq4IWl9n$%8J;S#C0+JU7Z?_CcX)%seJii?1dd?UIsL@M@Hk_%K`BwlHE(
zw$#k7+cIuS)nK;w6lkvntckUbQ$3%I9_B5}_em}V7(qEcO*=KY^uM|8m06{BbV#@@akYzl+91%gy&nj1*(|mB)hr
z0ELuZ>;BHK^|#~6QT@yQ9qCK8xjgVuT$yG&(!27{FTyYM+C@z|C8kSawMp5BCS0P-
zFUiZk3S0OpO9jMo!)t_9cCSU2iM%~Rm(%3LwHjGbJ=~e5dwD8WzD+5`*EA`9rb$!3
zx-Rf&kGg(GKBB+4;*!brrSMkCY+HjXZ<7o2**N7t1)lH2J`4^`VD`&DCzB>iGyecb
zu~YW^p?k07cxckqJ|B{q8kDbwILmZXSS~vX4qAR_j-{CjxJxfYk$E>l|4`7!waZ{6N+eZ)%YnCquY}#;*E^|0227^g1cm^GeXKa_{gKw+vKNB
zJ(@nMYlb~lX!gtSX>z7hinYort|)2w8(m1rlvk5K#kF3w7>X|Fw>$fx(zLu4`b>YQn_f9Ru1R=gWew4-+*|%m3s;?$?q9l(
zk;k>^p>gxt&HHX{X};O*gzwW&(MC)fO(qQXQscm$wI6|9W0As6(;An$FNP^V$36u9
zq+XBNmXlsn^mr_12Mo=aV4DfmlaT6f_Ms7WEIMcOp#v}a}HcLngxHrpLrD%F*4
z#V1a-IG!X>w`vMlxr&CEX57ORo%e
zrABSpX{h`PNtaQw^)mhEvDc
z3gox(u;Xx*{^E;Kd_O^lEX#IBUu+
zNfecrElC(O$rV-e+iVuumA58k7xJ0^05|Nvjf}id*`(U#F0J)#22ejuJt8o
zwV3|^MYt(%%PWH><)bdl7TT2G9t`?Yu|_`Cd1tm-myz#|5uysdSfdy@`FkNRYWSh9
zJ_$uHb7#8W!Y?KExwKSa`6*eHDQb#Kgo+xJuk3W=jc=;|0B+PfL$!|BF}Y5UYR79>
zXsOFSQYl+Kt0Vqe6;r-N4KcOIv31~5xhLX>D9+Q}9@UZIUy(|*vfXEvKh#l|$q#Im
zAtti+$oKmm8}c;eOxHZ3(xhFZ9;_JWj@a$)
z+_=A0!}k9GUFmkZDgOZKHt>vgwq&cMhby|^R&I;N(wS;F?`FnVYVBI6%{uM$qP~+F
zBw_}2qXtz9TtDGi?kLMi_++A$Klc>1=fM8}gMY$Nm$?@myXOqJyY*VchMNBXT~lJf
z@IU=UMHSCys#QfIrPRV+o-t7^<-;H@c_C{y7aMVFS$nvp4XipBD0_C2^}
zXJ)4Jk9FX!HaCK$ExAavtLDvIn9|9{{mQ8h
zO*|8o$vE))I8Hid_IJ5y=D1|y>E9+7v{C(6rSNEr#D{UVxv|=>u}c@pReToY>F{PP
z-y-=HD{Fk2rk=)NT1J|&MP4{!l@My^a=afUa*UhNbiW2Fi>RX|Nv4L^J5iY!lCI7#
zlCL&Os?kNU#nWFUX^AAdYT2rp3XYkr#dn@)!%WX=@8h{E;}f^p*ZzYmx&GQ
zR~?4mYvp#v8Bfz)@7HT{!EYDp#{PZC;Dy=UJrKUD!PW}((Xi}}qMW>WivhBL8G8Cycu7zbUY@a?$*B3|lb5+bo
zB_?~3CvMoE3hcfRxf@MU;$B%&_ZHzx;H7Q+ntYoUw*LTOHsn;khslPdn3Z5siZaad
zT4|YBE-h(gV9CWZYDGCDI%ak)cC;q)&Gh}u<(U+tlsMHV`4pV)_efsnx3!8^^$j#*
zwKEL9*B#1Y>p}g|s;p6LtTc@>Ma02wKa=S`lFeH&*5!X@W(c%a5b&}}Dpe%DmS}b0
zQ`3jwjO!jy{{YP&?lgQBMlI1bi6x0g{{WO~i@33;2W)=i$tf)OV{zH`uSR_s^=Gzy
z74=8Kad#5eqKx*YVACarTFigfO~>vn{{ZROHAsGkDM88ck-{-fPsawCB-{F$F^^W%
zU|ZyQu^M$(;B~3Ll}EijK2Px4MogO{DP-RU5s%68DR!dX!%>b9^y14`_CtqKZ6W*c
z&xNr+d(v?4W8WD#8dT$s5aTU6mmIR1Dk!#TaE!j#929i4PZ?!NMn$DxVarO>vF(mo
z@2`VasH)n`;>Ol2-i&YB_BrE73@{o9B@?CQT04|
zFwGV2GQ}q)g5C!3QKcUp-PxB+!DMx8_a2>^D{`8qTYGk|U3YQdaerEWx+B!-rqsAd
zag-`#sXTD_HAdV&a@VHPIWk(FSCL$H#iHVhlC1CGzLUq1brnKu>PNmRP<*Fo_#T+!
zhPz;8@H>lV*6GKR5V{XB!~KuR~?yA%4Wm8#>(K*Y5W(+
zz5ACP%_ENK3nn%^A=CVr+;)mhiYkn|MO7g`CpjwUadhmbmbN|E6N|xbV&i5?j>aTf
zX2oL7D<35{eP4C&6`3$)((nt3C_G3Rcw$
z=PdGEXRUL|fkoG6E!~)l$?jBVj@7xT;*WIcGSjlS@?F{-ZC9dED{IDh}^)MpmRKN^PcQDc_N$O)=*Mm)liYYBgp%eN7(MW%5{^JNO!=KaSSp
zgBvp&5_LwFD=kf9$nuR>MX#vTrEkF~jW+AD@LJffJ+*Kp7m}qq8jV+!%f8k83tqZ;
zh?>QrDedOA78H`&QDxIl*J!TKOUZik;FKOy{={b{+_^3}L?sK#GrxOGuFEa8_lz!~I{GxY{29+G1>TmsrqF(Qg2uXctO@G;*znBc}xnt1;JW8AgD_+_az
z@XGXOwXK9xMI)4HS?4FYQ{fv?QfS4#@8Gmtds$=o;HTLa+QvFBwsLR$Dti}c(Uo5&
zOJ2Ha*Mr-!PrY-)DX-{v2gj=i{IuVeH^0xJ`>2!>lecC|$}{N5`#jlA)t?5KnNIwh
z|7_Q8Q<6PV5QonMOlo0
z4?U^xooUFq%V+e!7SEhd+fIqiOjMotS41dMyGUfTJxJPy=y9~1b`+yJWTf4*C62C{cE=~#RcaG^nAp|XS8Fu7
z$gg6bCSFH^#`{%vqNx>u`e{TXPPaKM^SNH9WyoxUbq_~m#
zmy=89_!%p+^1G=iv{T>Lp7``+reo1XJTjSnnq@!xU+4Wv*R5XF>rYM7%43p_o8reM
zjs*=;kxYHQdvB8*mq_2f?%7_9@94pOt!{gkOdbz`$7YPOqSCUm?}AWwtAWP1I&zFx
z$&7ercSSElUA^DGWm}o7cBR2y4YFrr2#3!ikB&?W0;6*~_Su$Wy%mGXGqC;-rDUk`
zYFRzVv{TAr#t@{HC$VzrrkQcj*X&a&O8g1CqSE}Cp}VT>k47{68#cd^&C0URg44-Q
zJ-J5xshVW9BTiCd_oUFZKgufA@aWAWYb#9`8#B)bgioi7{{V4$6Id&@d*6`_cc-5Z
zy~+#$tNe-RR#nw_6FhdueT!?>
z?`PXhagNTnToiBH9h8&UY|EkcP^*`b#kwtzp9ZTNkj*Ce8`1U`wXY(ScJN9&GN06o
z+458U$~~vYB_&7CBa$r*JC*O1sx4aD0nS4JwSRF;?blBHOhNIAvB%vOF2Z
zo1&UV)Xyk!-5BJiqh<=BUVa9n7L(vk1s+kc;LmTjBxU@|a}2NV%fc?_+aPdv^BjMI_X_
zHmPYw^lyEcMXm*c{Ev5KGLtekk!dt3B(gr8(Ld#6Wt-nD}ETGp;P9M
zdmUj{YT=m5A5Kk|=+A5x%I?!O6#G*t?cWE6Q!#&y&v&}MDU*$AkM~E>elmNNGZMk>
zMpg|m;J2|@Ep6+jY23KK!Bl42X62%o)#ZAAeH43F;KtqrnEwESeEM=z?N4H#;rafE
z72s7k<9i!~6uw^{f-;v;YJ7IW^lx?RLhZi(gr3dhxVl>qah)>Ui&Agk%cFMaQEP5a
z6NsYN;;3oOCVQ$#R5rU-T^8=i>Ac~V<+p5XY$mr8l_WdE^WDVBST9xIZ0>ArxsmuR
zs>9^mZzUHQ;8KgpZm798NK%9QqM>TdSQ2uw(@eH|MCfk+00PM3S)R>FDll!f)Gnf)
zOv0zjMm7^i!Qx{#JRqB4Y2OvLfwk5y55z-rF-~TS&BHwmWK$=5c2zryTi5lO6Nf
zqR`iBEWu@B#~C9JwlG_cqPl%Y8Te+I$4r*Za%M@dJ`A@-??X<~z6m5IT+LQS+?QI(amJ+X9)dojgTt_N9P?fffT_ov(Kxrb}`UN5~dujqQdM3?+L
z8(g<$IuLDc_DH^^ZS=(3O7JBsUQAlcG1~=tZ_jL@CaVS=`t#p&+sLs@&!YzgnzQmc
zkxv4W*wodgEZEISs_paI&#Jpra9S7YY|D=wyhK`EjaRu4eO_*wDmy;a($9j>q^soey&PEL^4IdQxa`Ln{VbeZ
zcO@!zib<+1tRZ;sab>)&&r0uz)928eG2QWGc=04#!~XztAH?|a**vdJKUOv}S88Q7
zpXhhnmQszjnk5Ibe(wU5x{{l6-o2xoVc}l|X=lFi!EsK@FVybbS!;}x%=6?_{{V?-
z)3K#j+|u%4_R}Ryq}>(Z*JZNb>{a8vFVAT;isR8w1EV`VyHjsV9me9u+IDI@S*IFT
zXRxUE%BZTr?AeP_vYseWgTbarNFFry8D!~Tr%ln
za|t9Uy4!KXp2|%Y#U$;Q3|9xbKd{!Ep=pW~q>?SBSLxKgPE71OqPJ!XzS+A&l6sTM
z^lV_Kv9=1^y6-JJp~ggI6HBkTYueGOv*i}8*66LDdM>WHTcg`F*+Y8k#g28AheY0*
zmyaWk@4=Y3qjGzyE47U?2e`-ZcK$t;4rYV2;rlzx_Vp3ff)Rd?79@#7x4}CnQsB83`ZSJsNR+S1ds_=WQ7>-388|Tvd
zXDGi$KY{K~;f?rD(OV+IEDTnnL&fS0t&$-v+#WyJH8pg4ytXn`=WJ
znF*5}qf$eXDXSc^T_*hUD6FrPX0z~Eq=h7@^WRiuk}|7|mRHEB(@SPSzZc92+Kw?RWmBPJxIrA81QG&xrgYkO1;OH{Cd87
zy5!HH>bv8*YZc?*xl1p59Ag|5D%hy3`skv#Bk{R|QY!Z}G_RUNip`Jp6;Y}(*uBx7
z$rxr&flfZ?3Q?MC!CI-6WJ@X5M@+h=I!0H0ibIRjBw(*3`foOcTdT>D=#7-`@@Lb6
zpJrtCyRwU4lAFnU4H$T=rdx&?k3~M;2H1O{xJz=LB=&wyFLmE;*1Z|-`1vENH^{87
zM%KI8lGm!oM6UD4@G0eTTFU+fcD3~{=p|U|3(%vB@P`tcp+O~Yo=YXvdhJy@J=1s-
zd25&OXRPVpwy=dI7^Jp(Pjt0b&$o}0nGjjU-5H#mUHyUdo>!YM
zHjP}d&Yg{Nm6~Lq!Ell*tJFz+vRA3s;>!O3@Y1Ksb~i4cRz4kAd2XPO+kb9Q^0wY~=#VXpLwyJwGG#rAm{f55ld4ldEB`He0j$879IaF(R~6zu+C
zI37$dz?=4#`my*k6(o#7M!S6aHasD#$duJRir0oEDa#u%#Y=LpVzjeNtrS(!mxO9r
zgXEP-q&Q6}C(gprG?lHzqO~kB#$xbewGUD+V-_aIYV3M(W^+Pip)@qPJ>A=DKARPe
z_AdRRXsH$=ueFrC>!-=3)sK7?8?;_=W3|HAHFFf67vnBPsrmrYWXjpP8pS6j1v9R
z@LJt)Dp+G9D7+T;^l5zT#-ARF;rFy^ipTU3p4i;ENy)gYUnb|eIIF$O>8VOySt!a;
zj&@8<`=#ORM&Ss;n!+7o`AF2W_a5Dn5SrZ@TS-WRj8xJ>gzhbP;HXJ8&PwXd5^>5x
zo1OiQN^d>1<0SChSr(pF^;7U?xSi0nG;H2#_$tG%UmnE!;
zq7Le$DXCg&sgkE&P~!0TW0T5740KvAZtAz~OTOLmdq)>9oQhAnrG1>J&3%j`BW%AV
zJfh7=+}-*zZ`&g`?P#eKS!NH8*gVDXXL8ak&eAJ`FSa`@dm69Lp={#)U+#=$f3c5F
z*;_HX`=ZyXzhc%K;HT-dS8H28=mNc0ShM4f^(x1O+UTQU$tfu>I|?$Jx5=h3NqH4z
z8B~lrXNofHZBx~XBIK^DQeAJox}v{UG9`Wo6&R-Zd!1gK-XUthQ2CiN;X&F@Bs~(WXkwDjZn!t;AD!9G4`p
zNv+Cz72i}}xo(S3@7pW3-Kff>QZtVtFuSD39Hr#Hsd*^7$zFXrxD|HCqWj%nYwXu3
z$)8J=WLBtEv2u;SHCZl8P<{Z@)@nHcRa<$g=q^1XVv@@ZM{e2-7m
zxGCfVf)?VX=w*37ZSO9g+e&1y=&=quEv>c$N&-ftqjD_^js(03Uv+C9%#`xhz3
z*uDCnYGz6ktw?f$!WX(L+iXrQ?52@=ayKO3xoKpj`f-wf<{Y8Zr{N9eCS@62UM&mYnr-IBGX5wRUMja2QJg*~3cCQ7tQYm)7+VDRb$qHYqL$xX`Rz5ND3jk{n(c?!zr_
z+1vXSDiwD58oYSyqRM^mj@UD~b+Kz>1=XD2b>yzuH|>(*%jB)iFJ@`oEt#FXmYADa
zT$PPIsK)EpVvE~{;LiR`dQ_wNMM_kes?+;$Q!{D#^k;6?jCT1&cC=F(f6yI&115<*
zQL0Jt+MdP_p(p0W@_lH%L!`$iYvTL~x=f^djj_qK+jJ~8iN`2Z$u`%?shcF%_Z2KrZBeZm8lk2&!5&o@J*vg31*i@Ze`19sQG$(?6jC-U
zR*SybEgu6$2X7;GtyTqBgD<;GRh9n6?MTxu`Pjj?YMNBhNsU;W$|*{$_bho`nVq{S
zBXbnH_dgr@`^VkKIY)b{t)8j?MnJj0QEGgPkRa4v#eK|1M4H$uS_H8vN@LtzRIG|v
zp?rjhtwv%~B}h;uf>@>EC>2!Irg!iE;Cei+_v?B+pFh0AbFsjuqNCEQ@nWzNEyBn(
z1vrBkSa|~YF}4#_y$#>-G}>C6_TZC{k2Re3T@_IGDEiqazIJxvlphdY9Mm-weg3@l
zr)Nqtaem^!g8cEu-D0ISP~4@DyEyJQG1}qXtoyObt#NDm4~$*T
ze^1P^>`n`BnaS6poyv-o{!H!pvwR)5zNW3$D`!aogf)RMOQAVqURIp!K5m$-XuDA-
zKRiq6YKY#?2r@i7Cd6#rir
zJk`xhroQf2AegGZtAWW>9^}mlq)snfUbNmqn){#B|3P>x%CNRw$#k$C&D(}Qx{+(5
zXPxRRW?{`pX9LRv9e0`;=pf&geRXuajq-f2^}a!OY_^Bs*
zy~me(Z>NV4Z7PpLYFPUbb2dbU9rxk-&s$-E_lb
zrB?+cqW1pn8p&z#f(n|ZF4CbgNSG#&zATy$MwhPKjT^jNzBHUP;rwErUS7e-k}A(z
z^m9B^YDSCIk4f$XtNhbuAx!B7P@BdQF--8iTujmQ+z50*qCC!bQge#WYUE3sC{i%0
zWs_y+hO!}`7K)2F(RWAk7s7#*u(+m{h}Au{go~dgzgx8`bqx}mmY!p4^N%y_wH$ER
zr>aHMYqZ?MEiNtL8$IEVvj9jm3Q=_hIJwkK*EQFSU|CK2Z&CoykkmQr(p-jO-Zy{E
z?u*^#!KrZM9hsuMYKiG~GJL5*^7Rrp?uZ%>#*2fUO0f
z0meND1}Rh90hnqHMrz&6(#QYG7#6Mur3`{^yn!zjJYq4c<*X_TPk^HiF(Rhcm{W0b
zTcT|)Y5b*bH#0PXL%=#%(t};N)T7N6Su85`wzSp9FVCG2HEGabtB#$)OT<|^=$>An
zop<$%6zxjYE&p`Y7xHo#pXfd09l2VMHu2a5zS7%9oM<0tAiNkLe8);grlInVdAlrd
zIbC&@V||hhXbH()pl=RzIi7cJ`c7u`nM`C+W7H=@-Z#UPR{vubMoP^L^+)8?v@lXX
zZC~|kXzdVWI~)P{F2jds5W$_^lj}$2@V(k{_N-7Y5(Ui3H^i|$`3f91Aux3#)u6Mgo0>vMO+A^<_nzCre(05UU>fWNyk80i=anq=+
zKN59+i%IH{|75mR4p$D94x5pv!p(=Z`S9)mgN@|M>!N;0Q~NfUS5t-pZMM{!
z6^aJqmRMMR2OWmBU*r5s*O~Y0Y0-wmKzO2NKS^n`T5_!;mLG}T@hEAk=*$M7NsFR^
z$F)zK#Ul)q!*ZnMwS{tn4MH8U^pYvLRCM(3?!#}MaV%T=z*mX^*Inj*XWr}2q1AY9
zOq0uIX%qSwkQ#FvlSzjdPHUsS70qV#EeI|0PdZ9c1IO_BnA{;!ev$UJBsR!L$NZ^M
zk@57#CVN55k9t$c0=f`;$KQj3)ja(tm%SU!TB0b6)O|W?`U-8@Jg0ZuMw-IpLFV>5
zO8dM1?hdE8RTy%f+9oLpJ5&&hfgxpC{Q*9DO3lOWf74nR>8Xf3r8{!X%~l!+48`M*
zjfnauiApx=sK2pqwSl^5mg$SafIh`lxub?Y_jR&$f90W0b7`VdjKp^Q)p)ZN`a`EL
zWAS4Aauf4m$KJ?-{oA%C-JkhFALUCk%%47}KV**u7922mpz50ry2iakYpSe4wk#iM
zd~ZFl!9m=puqm%m61Jy4AHfOZhV6Q%nEQ<1Z)wTmfSsEDW`UXN9Uz(h3DF~TZ^g%j
zcfMU9Y{A;|@=5Yq(;gzA$&DZ6-7-dM)53!=CKqS4WJ=q^%{sy6kf#4X+@6{DNzLlW_5h)U>mp
zbKHhm&Ra-|z4;vz29n&+;)~wuSiOZ7^N|ip#}wpm5_yqFMhN6!BIve@q;a37|L};j
zw9og_xr~dFntED}ZSGCI7&i|oeq2=j)iP%QT<9JcTY#W$5b+$>JTTV-;Pj_ta4~q{sbXIgkS(Yn$DARt!sj_G|
zQYoPg-_ao~a5&eUAH?kdY(pIeFJF-+7<{JX$Xe-XGSw2~^KELv?DornBV{|U=@Tc!
zc4YlCba|R9aa+`TRr){EuRs5m76#$>9qH`*Xrw_RvODTT8i9-gKEBObdu
z%3;Fyw@m|UdACe!#^tls598hj8c{M021zOK?~8(`h_Ey<@t}h)=qB=mJME{h7c!tr
z7Oud8@oU)8hgeQa)tmU>T$$7ZK;@4Y;ZsN+c^6T6bJ}vld=~rZ%i@Xg#oVoote-N}
zf45$bQRGT=?C1iWdY|d|msuXGcp?3IH>sOoa{v>-<05mPPnnm)v~{cDOwTq*x_glh
zx7LVjp-v^^GX!TsvHb}As28mQ<`Edx01K|ZSeFg@A-aD5BrWj7L!}3>r?DC>8U*10
z03Lh|ExFuQ6OIRGpDkE<;8yM>qr-clcoM6@RHDwT4E+o|QrALjIR4Q&9xDLV%2ZEr
zZ)oDdYae#1O!m#yxy0G5WMGmW+o2k>Q%*t
zm77Q=fQ8+G0JdC7G`Q!H$NXIQ)Iwp*Qovb6$GJeL%SOEeU3jP_-k^KZ)u%ry`RX=qj>x!xA^Ee
z2l|X*3lEXUcPFjhU0gjX3j==huC*<3=H;(%v>V=Mkl&kFvR+fQN!V
zy%RW6LQpILm%A10HNKUBReLv;Wr`8v-s4te#|T4smTjwnScL-%5C8jN@V|O&=Q~M)
ziMF5=>zCerO(vsUf2*2GRPuFQtf+GRUwiE6o%muwA^oaz^9eR)=TI>;@^bLM1CVm~
z+<|#4LhfkBs;$b9+08G$yro_d=D+zO_1%Fbq0Ak3vp<`)xj8oue`IBFd1u(YHfsGz
zm>lKZ(qi=8c^8RT{#cUc`ejP@f0mT1QK=1b0qM5CaoOkY)YrM@FOJWN+NB|5fyAu(
zXI3)q@Br+6%2slfF(D)ogBJJJdbhGP7AQOzDDE6~ma^-=MuS)3wt2nC{>->}I8821
zr`yvjt-n*eCFA7sz0-6fORXc}?@ba#V?Jr&C|k7#xEAAi$2Yf-^KM1^Q^U>qOoD0%
zDK*ON_V(u=tZ($0&LeKn(Af@c`
z^ZVwtb+g(*YIE~0@i}%?Ab|%#)Z4=URy(61SR2}7kkc0~Pdvukb0;$lkJ+(8%=c&4
zGF;|+{-T(V@A~f=8)pB;F8E6La9q>+BsZhpb|;Zkc__VM1LD``83QBb#u1TjB5l0v
zh8IC&&(EY-vdy3f--N?t1|~w@cD|uw9+^s13|Z(CFN*kGaNnLwnzaa#HiqD*br}&)
zq=^e}&Vq})t42Y~f%NLgAxbF{&6C?PalgOB_AUa;sPAZNw@Kw52vvJk3MX@FeUt=E
zav`>oY|_NgW~sck;-Dx|+9o>ozTbet3WH>x8KNoc-}n`IKS=5uqwzk{oj?uh4IKE-
z;S1g*XEdtGpmaXVW1f8}U}$o;!{6d0$F5;H4_p(e*8X-&~$iaxtl9NYQ0#(Xs=O$V(>KNKyy*or!MBMeaQRqmE1o5&M~2|M!yZAPAF7pMpgFQ{%4po|ldYY7aBZC6%
z^DvThE#jc>$nL{|4rcpe$HGF0L$apFQF75#p`8zwxfJz*d({I
z{QOGjgVjc%vIQCopi-zI25``A{Zw95)_E;@AzG-EO>pE}EVKF_`$(>!wJ~hD_Jr#--j}(7UkWI=GhsQpxZyEE2
zhw1#RJ%>RYF|oM0y*RREpYi;@fw>nT8l1;_rcDz{Qc*~JMEuOsHwjR?1AN?u#6`qY
zta!mVYy+K=mLIgwQ2Y?^XUalj+ImOt)Qc>JZY1hSnwU*z>2+H8Fh?jO%%njRZ0ivs
zU-4$691FwPa4|$7QSc;ew5}QV3m*v3fWEJ
zSx4B;o#8(Bk~^=dtqW_+cdwScWcBUoE;IyNPOz|43ntkm?g
zdz>wYMC*tYPPKmw#OwK?>1NnP=xo=)ge&*tpAc7EvD9Nkn58!PrjRZH;H*yjLPlm
zMVyyfy4d;>hk?RZSeU2ckgr2)@ryp6ibHduUt;4Mk_jDO<&ISW_XMW0!Izhtq{#_0=;La2R
z+SOV=m1+?T@8#Q!^gm7%yWF~7y7yL-=Do(+P`GSDz8Hx{F>pqfQoyjxkaDsqKJA}D
zzWOrz=d(}0@RIpv;X@U2E
z^wop7`!;pT2fx>uvjjJyN(##k*qsNT|Dd*!pl@-rgFc4pX`iyOrG2+qWd07vtUq9@*GL7LMa!*S
zBk3*w|If%#{MwKpA17Ae04v&8ebc%7qcW9Xe@orP6Mw^eS9jal
zsPIr2^|reYs@n@M`lwucdi&vLJ`xdB-Qe+wvla8}0v4ngzCS}cuPC)*%8rKkHdDS)
z+g`nZCgj+j=A>+Pi{CZSTs>54$^5r-%Rl|mO7G=`P>||Sbr^k9)3MZrvwhyP{PY$J
zbS)-fppIi9C|-K0qf}H?wmL=m!4beIo)18j&}wZA4Qd0|q!g;K9FkOW7Wsn7{1(Rj
z>kI)sd!o1Cx_?THuVbm))Xfy5SCbh83&E7sQwV<(U%O9pHS(rSH6bLcmgWC>w+ZA+
zEz`f*1h^x=uc$PuB@~ir&ZYB@x)(Q7+hRp;Ueg?$4`qs%MqJamn~kc7I0Y+1lPcDz-2{hB1j(bd)QVg9uX2g;=A!bNAn_*Nh_#rMS5k-sh=5v&iKj6uoW*o@xYWJ~*9oMxnb
zdh6V#(hQ<#-uPmZZuc1Su6!el7g#4&_&cDgC+RBJx020S(1hpC9ZsSfzI``g+L~|9
z=Ab@~nqF)VP7cktPooFls>*nKVgk+PR2_hevyk?yqAkD!t$2v#5e^$8;kYyiNIn*i
z-O}y(xxaDZOXEu$DY2Ez=9HglbWd-TJ6A*USVmWiCcf-q^A9RVVfj`{bDF
zBTbKcgB>~h6@-!f{WBQ|w`47zPpHZ<%c#KpM?*l-;=~~cr-nlsGRk4*%LQiPC8LC7
z6S17pJpZxBj=e55WsR6;;T&QSBWs=cRKf8&J`NNXF(}3l!P4wZGK$7?zWM0x4Bnt;
zM0{#bTPJvLQk!27_qIpTwA2r8HKJdS1>R33xpNum-=W0w}RU2j&IY%F_S=
z{VSu=mzYBPjjf)V!=PQz_QgjV=3Pa78+0VL#9TGV!CK!dL&to0!%1jCixK9~GkfMA
zhJ8}c$2M|&3Sh;$iYGk(CR6uB$gVL>)hEEUdZtd^_A~WZ{H!Cuwf^g6-$uHzg>m9G
z?JUc(R|k`=JV-6Eh|cHDG2nChpGU=gem?kmre6ubq*yPieERRZLa!J|SI^u6B?e@)
zvv6{hU|MEL7p`GrW(`WqD@*kma_Noxbav~mlH7Q_g`CXMk`In223pwuzTi@7SWPo%
z)p_amqk6rL&7A;4H$emTfQHNW-~`P!otakWVKcOFgI?{hy2l@^wp8`CR}y&GatfSg
z(QD$4SL~~VxE%MX;F8*kL#(b
zHkWo|ONdUtF1%xzqM)uK9gYC#uIk^dH2>ss*F(`>(-ey6d$O3D)VIuy)PO|b`e1=X
zl}+cZ6>1H4!u7VffD!aA0~E;gDU)5eF*QQ7g_J_)A~0u(#42eUXX*8G&w*0uLEq*!
z1>4D%pjgiz>GS_$YH1!-Av7uIo
zQI?rEo6-)d4{8wsg^sFAh8kb@?Bs`bsSTzZ|4(7ZmKR@RyvzazDu@s|Z+)i0AmgqK
za9%CuBe$%*AQ(iil##S4QVL)3cWpp9%D9Dj2B`W#%PreqNleQlCr~!EwmwW5nB+()4L9anhH8u3qP-x
zXDPGI#4A3SI+PW`pqGhCFK$`3fFE()d;hmlHwj&rKA3>vxW{7vDW1dpta5IlYxz8EkS)4Dnn^E?JRtGwg}BLIxyiPEb5y|nu-=iR+`DD+cH>P8`X
zFbJuJ9?+iI>kEhKDWMQs>NKrdX4$BlCf5E+pICKPIFu1-?wF_tfRQfOu+;?M^E6SU
z(pE^1f9Cha6MJ`W$BjBR19-nd6NAm}MOj{~j8Pj430`IVXq0GM>IIIeHu}CVT1khd
z8NX2TW6lRV$_>g9NJn7h66zK@fE9?CuBiKH|BMp`D!xwD;H$Q9t^(*-Q$K$FI5P5t
zj$1rY>)p{^m>M}%`S=Q01%GV!LK*)hKQ!^9lg2-}})CS!%=U#=((
zt+o(M5Dc0{A?#}{Bqx=ly6WlL^i=RO_xa)f9h#)NP`DHCIt2v1QjRk#E$DzmIv`6R
zAD{0Kj4nvl@RH2A26L|H-g3PWl9&WYF=~0KiA4=qNmzye_MdiLfzH!{zgBu9{ilKZ
zK^)+&!4rjcS*iTokQWOr{<{yI_q)ccDGgN%4UYv2-#uD7@EpmHb`=_X{>5qvQK=sg
zHmIL7(jxIsRuzeqUL&`T$Cc}LTY>X{NaSE(xyuqq*+8>XsqZ9%B9Du&7RvczJ@5ga
z5dJB@&LA0*^IOU#$=K+-uJkJD_3m(xKh0iEex%8!K)P+^d5V+oNj>0}o&2E|>Vqo5
zN?yI|Hd;LM1)x97EBAR}Q*U{YF<%XBUqMQuJ73n`hg|}*JyDB}y}Yp17^nJJa*vW}
zOQVYbe^Z_Bmd9IMZa}qqhXZ}9v&6z~MVIP_2=N?;KY!&a{H2;k?UC0;M?Gl=?RSqp
z9y~sNofB*;UZajlxUTx?pm%GHdMjHa3dp3*BbRXqa6C3VBMRE$mY1Cq=Om%02kMefIrt|Z!)_f9~J8p
zAwT8-!5y)}(W*bM*Q%$PiQ{_f)GHlE9Dgc%>?Hg}y3=3M{7S?Rds(oFPs=MMNQ}bq
z>3@6u@7iyf5p{3+RHK_9*5+7wtr#Fx8^I?o5wz!ptaNq|v(A=Ie8urhD4U-39s3gRe6ng-mf
zyETF3jv3Y;xX(|Go&CBnoxNBrFHMq`TVSEy_Plx_Cs>N8d^lOWASQ%z{1d+J)7qir
zV^mn$qp&J2-_R~pYVTIE@k-Xix>8j7HqK)tCBr~;=x5;2Pkjx~tog~jO%hqK_8Mvc
zN@9CpEXOday_HeXd%(0qDWp*uOOB2eqDcimnY$g;Yn#m5;uiIhI{97mlG>CHwJ@ap
zC5D>_O&`JDN>x!E>kXX5eK-PlD4Dt5wilm4%@Sh6?P~91I?Vg6JX504hyQevDh_=r
z8dp?%e+pRXS+@On$IVvY^fw!5%oRR)|LKQ0W-LqTP*<~ST#B?1jLlhrxu|;US%x2&
z8(BGv2UlN=YpOBUREj`qS!gYls{%1Kf#=tCnv7?{Es}%1I(CMJ@tJ|s?>md-b3Ypr
z{mA2&?^!vXLv;z>dpLgzuzvy+y@BuG{yrJp^xWK;|^*jL$}V
zV6)m~{9-3=F=zkH@wEY%9qBYPl?@GPDF1cAlj?6ZE>I^PiLWatPgdw{;4Op(7zl{I+prhh2;#DJ?U%4yMfbzlq8Styq;lMTrt7BDcsYl#-Oru7x@fZ(I@$g3jiTP#S#S((8t&Cv3I1~IU
zjkR9n%)mm$acIB&Z2{W0&!y|DvXdR5H_!h-r{B{s*hj<`aXeqv15g7iL~IIDU*Gjf
z=4>ykN)d-8=6vm7j*2HdqVKvzsr%oNx#{5})4Ig&r98fEG-bcPGqTjo#1e+_5(n&t
zTP6bkTi}4ht7oDX^+Y>N7ogAGCF8{-6Lp!Izb@nl%TZiPB?zU?cGL37gSN3}9q6K)SCFTEtqHFy@|S%^&F
z0?JlA=i2q0H_L!6$(kMaV6P3=(h>RG<$`!P?bn4Y>uAjdL~?=({b(NPDsV4sZjCB_
zx_#d1NZw}?=NdgexVTqYcpX_>0ua?sjT1d*g|bN8+S>8WEDsSY0oTiIcWjhxoGob(
zhxNRu#IhFdrxj$FdV@$n#B80^oKXumQT3?qQbI
zz?!#pwzy=vs~5=Gwtr>rmXZo(bty>
zNjVP)b?Oate&xqjhknPHqg~xI@I66XcBqx4IYx?&GL|bKqQnr46qoL@S0F>{iWQ=S
zbQZ$hy=dgPjwV9hfAjOVr2&x~Qq`BE9i5?{K@F8#v9+(MdtKw0^m|*cG+XA6l$uZ$
zMc>Zi?Z?okjzl$?GW0`aYRe|i&0~Mhi>3`0+aJP5=Vm?iF$Xm0vZFlYx@II44Dfes
z!!}eY+;O?O;{Vdzm9?IdM*YR2h^FfhTQ~I{0&C4PAKs0%)V&#RHZ{^q6X&&Dq|CW6
z+qb5#vTHrk*-r$Y^x|_P{fmt<2zo~2HJVzkB0HzzwHmkU=6r`rncQKOUl%S~nN>Nb
z?i)L(t!|hW+rV0P^zP|P=bS+F0J1RjKcUX9gq=--FLkNeMLlu$gPEwHN!V?#O!WB6
z%$^{ykoSH)6#ZDRD+2Kxu{5f{-5AiQ3^9i)7ivA&vPy-_)P0>8zgP*p@$#lrQT|pr
zGvLRs3-jSl@WG4wAj`-(J1gvM0!*~``Ka*-aG0+Oso603n5pWSB--o8*m)SGC{!5K
z&ys7}qwazg>n3wE9W?PN**?h?=hFDo?H#>V1PiMqc>jk?`sb0_~)15G1tceQd)<-VB%IX
zjDNoqB91=+E=wm^P(S{qeCRQ2Ziz-);14@J
z1`7=|Z&*|q{I*s6Ab!!2U_sM9d9xq;5MR6-NLLDL3x<>aE39lC+KBLIs-nqCl|_s(
z@I}LqK+Zp1ba>Bem}u{?$81)thB8EM&~KI~dutb%*Hg3rLD^-(H6NC#!Z>cPsT}{A
zFg6ttD+u?UQ)}{XJg-(!tjO(1ksUDZ{dS=n^=U;3F;?tu=h
z3}zW&f)oX%cjzuSU(%d&%azjIJiVr#wWlmFn9dRIF$jjgFbL@1#bArR$uO-Meg}_)BM#B$|KU6H
zdG*oxLdLCGT`;j1b|7U9LG@jvU_h)!M905dL?xlBbLArcvdUA@>czL`e1M^;7LmjQ
zYY&NB6|2#bby^ne_DTdYVpjES9_f6__t|PypLlrl)@HU6iXV5H9y%I2FjF>bQO|a!
zSg&Kka_X+QikeRySi^(GcfHWyl(nH%XIElpje61CKN}IdUmCmrR@#S&GR5GXrCiMS
zUl+U`&-1psUyqi#em?ul?g246Vb8C@M%A~i+UiJiXj-CF-8W(!l&sO>DMPu@Y5gJCMk!s=eo!nWrAqCRBQhGhpSqU$?*G
zC0Cy}?TYYsadWQI
zOPN8D<&+EC;jZRKq2F
z6h3g$?Hk+{txMt04o!(sHD+?J95V+zb9Z-Bx7yTXLAPyhl2#?#RIT7l&7pn9v>d3V
z7f8jp#|j9()sdc01+!9YPP3WsS-k-pT-M4M!*L&k*7%YJ@qSSYR&QNOxL9$oXm29g
zhnm-P+iB0LtQ8>2K!iwS-|M)Y!7>Q}1;6ru@AmK+SM2kaSPCz92FmQew;>f%V-aBs
zQ)T9h{iI^1CIrn-^PdiI{~7b^0zBZ?1ytQmhIqodcW0B?_ZaKe&Z3707TR7G*#**1
zbBv(Y>`Ro&6^1)1tp`{M>UU8{iU2`<*lz=Jn<_=$m9jT1T@;QVBdyCDJFv$g&;?Q{
z*j*cD63MmRx_tDj8
zi>pB7T#}qF;&mURkZOrG$I(A#bG^9_XV4V;*|RWWg2k@9nL&vIrd`Q_+F@9&!jYc-f^EZW$hg*MYbDV
zy9Z9aUwQAIy8pgsu>?_P#}>57L<<;2{od={>5_Vx(Q(W%aqq$Q#q$((kHBg4H68cP
z601usnTAAe6`l~nM)*2_@l58Zcjl=?GM`1y&E8x6T^b-mv{!4DL>uz#2g_~>h_yC-r>B@-P
zZt^SlA1{^58J8vv;&!
z?qTpp3SyqnN0G8!SdyE&nu4m&6vTk~)Tz4QeRF4>Sl;HNlW1kk@{SghsYz)~t-^D6
z^UH<@pXu%Z+J9YmL{Hn~l)Gx^;;~2SUBf4wJ@$1Q@g?Nh_z!MCuj}mIGj`eYt`wxjUKitv%A90lhqC>+BwZ^Wr2iStxK8RyEFOH*mI*J`J!)GjUR8Rdev^{SU219)fhiU~~D+$8a{}qV}wOoy=;@uzM${J2%
zcK~bMs6Ms1>wog_<1WSkzjJ~615Q5
z-%`5!>w;uuo;aHH6`t`I_uYV%{p*sB5wy=Y$G`G1WM|36@EGe*Jf+Vfy$n+qn?s+%
zF<`c`D#a6Hk^B8$Lt{`m9`-srugX_w56#gco5(<(^S0lZPYUk^pza&r!~NAp#Hg&i
z`{D{gZ=S3i4y#;1UyE&8pxIg&jth~_8qY`S>H@MP2>vxQr`am7e_j%IG4R<@K(zGLg$t!<1wMi%$`vZCITJB$?aYY+kn#Rf5Y(w9>
zi37EF@~e98d*LJc3l8N!kwx1m1l_K2q@t_JU#-izPy8H*h~TK^aoF;X>Xv=>iP&lS
zy?i67e$p^+w<9iDMaSdY2VU`#^7d@4gh)?DTiQrYk##VjH)c|9#nvsG$;p)}?PH2>
zI8;?@4+Mr=mp{VW!=yF_jr@rIYz04eqjnpupVHM68*=0BW`+3q)TQQ@cFzgd0*F;v
zUh%IBO~rtk-i5aig`_O9NNeES)v25-DX{P)%EGm;RT8d_OGMX_S@nU@G@Tq?D$QNQ
zAgzVN)GOg6+iDpOx?Q;)Bj
z>(5bt4fpXtX9Z?!Wyn&zT9W1x8lK%}m?y_bU=eSbyiD$}>1L<44R{&<0@mN`-D~0*
zS5e1y?;0q+sQrIalX*Y&12Ois6__^&?%Dl8!FfbV_-|aCdA#0SqG7$zthtX4RXF^e
zRz8SKUFzzUy#|%|53u=^OoA^f(g$m3fS*=Evu8?)er(h+0LGq^$|zwq^yC;hrn9U6
zc9g@!nE6UUGbTH9yE+9Yc+qOzU!J_p`<6sN4b+Wi<-VV$PtRM?z(Txw7z(=LgGor#
zImuXZH&0p04cK)owy1k_-YK6STXMP|w>^$aFe)y#Sgfx!UgFL5nO{ClS6UEhx!w1A
zMNiI6Ki6zUS;3BBDfp~T>TB0{C}d3yZB)qa%qTCxtZFOVCb#hcb{KTeDVRE*fY@YI
zyezy-@4H>Dx;yHflSkQ&6votknvh%kO68sim@hc%>2#6!_f;RE9D`D-wIATY>L(97
z4$~@#5a=h!^sfYB`KW!j7(mFDBktPFK+aEMdkTC4Yuscys-5qt{^f0RRI@U86M~Ti)OI-fZ|{27jWI;uuTd_e
zZxY;LHz7L^9p?!1z707_5bDEovQl$@{p}2*COiW2?`ohf^y);Nh6i-l{}VTB*tKNu
zzw&OF;uEy~pgcMUWKb65eq3Lv|LVkg>mjT6aYU|caOCd>t9;lxtNuz>f!hJ`&D#XwGa2}`@n(2OC%iFFr)iFm5#VUA$IZAaJOJg>{BxRf1ZM`wLIAsrd_E!b(I~LL8yHqFG4=N_d6J=3tK}*Qsd36$xJqtFwlyn=ws1IXh&a70
zI~ez4?(xP4(6yH5UnV>ITg|JN!mt`}KGKLR_Yj<~xR~hbkP-nhAsUXaAI>cJrhiu4
zEO3H7+*q`YdTj&0t*MEVhHcV7JGxp~f*S3cjgQ82bQ?C(rsY34JR*2J?c}#|&E@Rp
zKD#5HDaw@a9Ts__(WH64(ERD;sfagB+$rlWZIiTW+Q6iV$7T_t6hKN|M8_Q~8giyq
zy9MwY(4c_G((vUsHU6B#5_?c>>l;+cPs-HjyU!ioxFj`R&75nw%R
z-a1mKR0)k5SZyy4L5oT5C{&Re4GpgU)TjarmlvzPFU8=pj@0S3JI(tei^oeM)8JiWYu1S+X{ddA2wh(OSk3i3?
ziXO;bTzolq@_@bSBQNYBS9ZGJWT3G|HJX_}Tot${t>k+k9ucdl*+LgNQ`=Ap{dHkF
z$)wH^z5nY1iM&2metpn)J!a2^*CyN~%PNxpA>t-O0cw(Ok|&dB=dBF`C{8eO^?r^E
zOc6~%{w%I^yLuXQ&+2@Z(J80)g!H)_Y^h)~AGV{c2Q?ytYZso=rFT
zeOH^>;*RoX@83rP_asAxAYb4n4TL|Lb-?#2x7!T#A>Ls
zM<#dE19*Ua`fl)?3vlwnMNAFktA$uQHHtrtU$A08y%n*=VWqO9@p7kbb1qZ7!!+Yu
zJ84z;o=DSY8O)YqeCjori_EY^j5a;*PGP1=V_3lTN7VQ4Y{0>oxKiIqBSLUJoKBT}vw`Hr%Z_EK3I^9WLTS7}a#W>5JuL+CWF2B9Uig@=5{`npEIH;Fi88@z5>1J(H4SZSlsYDqPr(7wl)jg6^
zz+!6EMS}(kI7Io%qg~DEdB*au3$5E%$NN+im~vB*K|9Q4%5y>#C#SR=Oq6f5Xv$QX
zzIpF}k~~s|m`l2ke0c78SuQ7Rd@W3&{gc*mS!r-?qt?+jBUT4g-HB2CxbrOCs2pN@*M0
zX31BpKlt{-OIOJ9?@^sL8~C4DSb-#wogbbD^-&mc)DU!tly5yJW21w%O!zaHCH3pV
zA8c0BoUo_uOUyOh%U{a@AOn-^uHSSnCe-?W+q34#;l>0&x1pf5AJV2WZ}i4;*SNmf
z(+w;?;=qZ^zOq+7?ryz5RPFhNnd#YhDDGMckoOKVX>iPxt8r%RrsmDQGS6MA{0Fm)
zqZe_sRHojn`wk^Ni;VaOpEBnIve3fjGqJ>#q(1#Ky|eXn#e92ne^ON4^{}z>#X1Dv
zWS?CP{K$hPXOU3OYR?Y*Sm=3nraN`gZ}p&ER)qpl=2k?*jAihN9)Ciw9`N65+Hs*T
zXUp3?3j8o0)GnltBOar7lYq@@ve%=l@1J(acHfQDo>~nu30hvgf%D1lNf8Qa=M>ob
zGL?!ib$Ax8*XI4N#Z~Qo10?X#!(SJ^NrA=cXS7ZR|{vH3oUh$^2OHW1;bNt=WCMFi8ZOhqd)
z3(8Dxc-wIjv%JrM#xp(SzcV!dM-3^$^V>scp%eQa&QSc992`NtwWS8P^1fD$U
zk*kmVtmoJ4>7c|DD}TGG(1hYc*O}2#m~8N<8Peg%`d~S9a7*M>NG4>{&?z^^4OPJ~
zRIcS$PmTWX^?;M2_XbC}$xM>hK>NGAR%6ytsi~wJ@it8r92$^*r33zK&_;|DI_Iet
z+KQjxh3XCs#)`D?+Tf2SnsiZlRGiGrEI>rHXp&7&r`^?lnfHYwjFlOWPqGg9sjZR|
z6>rH0>%PU4%U+_0%ie0YPyiblT?@;ef4yD+3mmdRRC?J9K(M(7CdB4n7xJ%EPK+q@
z`XiN86s=f_aXNCeH{=Oi^VqKoPQNa^_VynR%idyY%A9zP5ac3`oT4!`Eh7{9BINt0{=wEx#v}2GHN@b+p-~5KmBQ3R%jtvF_$yPY^8M
zlYq&zTB-nMvC(1*!;G93rt}M)bVv46@DAKVgVZ~EsR1wIPtd8FBy{iYE15PNAATf2
zQn$<1LcV5#bzQDrSl33%YiId`Ylr}xmGv(zD=NHW|4DBunWXt7Qm(8{d~7CwL=_Fi=oPq?9S6vxAc!w
z2jy-_<_#u!KU(}YFS!~ncw3~0bX!8Lvu6fnnrxo9UG1W=yPVV&63+lz71T78VcpRe326%D;rS|AblqoV6K}Y8T+JcO~FG_U1
z?ZLF>@LoXS^>1or8X2beBZVh+a)DzTdq2I#hNe;zjm1lwn0RIo--B9>$4D`&aH7Kj
zBt>aI08{@Qs^1^wS2pk1CfY(av#h({ObdKs5vvjCCXx7^A1&grzkHL%4Ger~e{|pJ
zAcIutp1Rdm&PrU&##SuTE~qJ&p_T{u>s3;Q2gN9(jP()0R9mzF}rT
znO9%Yvd`I-n%wfU8rvu+l~;+W(98<%;C1Ykv?hp&
zn|)Jnuqu=A``TaL#pHbza0@pY+nbbH}Par6}H~{o{ny
ztadPb7Nx+G^bHMIzDr{*@5@x8y%giM;l8l8@equ1CmlqPUce@NcKcFyQz`jNyjT!R
zy~EZs+yv#XYou5|)FC>Xl$P7_qGomB)Vh^yC0}-DkEYp+nDlC`u}|kV1>9!>Abp)0
zud1^i8;3^lK$c$d$&b9aH$S+kgbV0zg}TVW`YBlO#58mRJiCOKB#}$iHQhJP1l!3K
z?KQ!TI(p3%1ZNQJa0M&B@F
zt1>cJ&ZEfD+ArstU%@{)&paW&lT9pI&2@E$!iKYIdWQHbgOder${E$(cd>ZNa~om}
zgf>u_B9FX)qSxAWm-qx&zEIta7e^9PNwIZfJ_dg7gK1$IkwYzeu_cI_5-LV=_K(H8
zEsD3Ws0A`%$Ezp>sRG9b*|?SFp#V^9i68;4oMQwwKCqITs!t?CU8FaKZc41_nKfi{L
zMc!muv5FwZx-&PwxB2gXiT->Z6>wzBD63KeOKzih~*h;l+lQHJpY3KBRI=3@xW46{i|pp7cn-a-3il
zvNk+X1Snb0!in}p+<<3CEAF-LYntIkRgGpeJ@HRdeM520lQ
z3);Ljg0oSqgRyOH4MAS-!>pdC
z0a$(x4JJ`$>P%8)T*p@F?`0eIVQCgn|JO{o?ha!a*Ezyqo78)mqi
zl~*#01{Qq+2046CL1QOX{mfdY*FDpe`Di_~zZ2i-4JmELJT4jgti=VVwHWUwizE>o|7sP^Z%>F#Xfbu7y27D^T9qreXJ=1w
zWH+}?KPF9iiN9XzvA~N-VOOOcVV~Tbf%Mzir!J0%eU@|^AxYF{k3X{AsdG!$1U
zE_&*m&NPp;U!5{2k3YW0UX;Er>>HT4`N24_YbfN!LMbNhYs=v~J!q=x;)Ac`;5=T!
zps~_#C4T4(jnnThuw%`El$6>OD%DYVCTi-H`q0(#s=LoM(a81G&;ciG2z!_!sH9~-
z8Pz4lm>ZYa`5AiD@L49#7$f07afhU-+N4{GpiAfhP;_*9imBRxU5WJd@=4DCPm%h!
zj0*CL-sJNwTre`T&^~zAG&F?N(SM91;D#r9c<0c>5FX}cs%^dr|p;12xklh*b7z{
zW&<08R3TH_3m=O{TGWCT*IMRjB@9ac{$hY~%EK0GACIq|R#YaRd^N9&b*mb??D?P_
z`5RmF(RY3+=>gS@Oe&!+PqQ0biu&f@oj+IiM?EzqEa@Zj9D94iNf{iBRSE~0?#+5j
z54`OKu)EYkS_jL=ubJgNAj&(wfD{Y!;KaL{I{Q?D{ecZ#_XBphVC
z3IJYfY*nKLtJ|+!jMJtc=FWDExo`Z0@0aw|7146A3@5!n?=Gp1VtqikDiEB|3$IWLi8<
zK0hN@ileduOyC0i3rE6>9lEFL==4MHa*zrgfIagO4SO8GB@
zyEVCbtt@_aG4PVBgFWjLi&{8Raq}1YqI_DJGF0Oh9st)P&?Ib6$o^(l*^_Y@LUv#i)
zX!!nLUVWB;z}~CAT^fpSKHwT(Nm3;bmjU3?{ZU9T?OW4dS?V!D7PY?|Ehv{|IakhU
z{3mvgw(e5LM>ld&$tFn$2myd;kS|JjayW6hkYH8q{
zs*MfD9VzyM+ZrKGyq*j#qm55e`jm
zvGw!#=#mrJt)JUG&h9ArGz1*j?fKVts+|*0m8BO3i$-}c>n#_ZpN~3>OYb`|RqwJj
z&9#EuON{s5cwwAsRO6`C?xe4+{}5HI+=}R&t$1r4>%fK%s%igDT6Wlpt+ruA+1e@Q_%D^HqvBXd*TZnxl
z9BoVW+&plCnP&n_Zj+q__T{i8bd40bV`0MS4IRR%rJhX*HO|)`-r6o(u?W<;cgQc*
z7}P-VF~qEMqTc*SHQV*cHdm02LR~W^O}dj*SF-(0L~3Q<;o{Y~8#o9Ixgf
zVGS?XizS>owbG7XuXMoZSsXZ+s+V{+A2up_w6ikw;Ad%Jx~yL_r(vM-0mWL8g!EGX
zDcgYj(h@%6Jk2+~^R4})hdb!3H1X&)p{on0+l@aIlfVr9My(DXnIM}r30-pizI)`I
zEWU9;g&epqc$1DLuIitakZQ!h?y+BP!QY_2BUu++j
z)VN6X8cVi`@Y7cI6|q6<3tk)Tb7}3--Z`BF=Ee5v-lLw9v%5@}8?KLJED*oa@si8s
zY2P=w&KC}bSrPMNay#!aatG2P$E?CGy*Zoh!{r6KSQmF`1XJaV!Mn5YD4Jy{6sGNC
z8Jb1u)VHJLwv!E17XA1HLSxjLwJy1|n}cVE@yuhspzzsSPj}h?(ZbK#*fir&Kf<+H
zjaq#vR{$BlnsxQQi`ltOdj3)WAJHBR$HYsnJOEwc|IAXJzSBdyiDnf2@Q2AC20KQB
zrup0N?-e@7h#-|uSFUsSg>8BBAZsVcez|jV#~@Cy;&w8Tg{6Cd_8vb)ek8fC6thfH
z66!$5ST+Q&_ayB^0T
z8e(sAXT7^~(04uncwgs9X{tih8uV_%J<~G1(P+3#gnL)B9z`hXFr1}8)k}AK0XE8k
zR$Bx^lzs~>l!&A6ZkSIOua6+mB&inh6@-F9vVU^qk;liw@BL)7{-N;t!;T)k{d>~f
zl_qTSMY3zNQ(kOq9xT)NJS}9nDMPBxmif%@(ZM5ov|!noF(9P#ug2tcTw2>4!>Ix6
zE#K@&kFf|_LtMB*6FxX4WblKi2T;wGuna%GmYeUV-DsTf_s32=&OOP6c{xcSkQ`!b
zm-^UaTgi@pam=MVwQ#0Zl!G6s`Xl{f{wTi%
zHh4xM75;F>%2A?2_omJFekY}uE8il#R+SSvfp=2_6$
z&L`G`xrwQPHI$3F*GzRgN%BLPd)4r!OlwlvB;!!gg3~(DWw13Q@}{D(Yhj5}L|2xM
zacOjJJ$MD&e`!*I40|QB2bw%KZG>3cGs(r|k-v;}SC~VdSCqSkE8sPEP9<$IC17ur
zWwGkXNHqJ5SfcSJzSu5~!CQN4nDLjs1S82G6)bCeQ6RTfA*V(Mxp^N08F6Z5DuEzqe
zEUI{2G_n0U85Ttw(|oeas`FEfSe36f3u;}x@i*FB4LVoW&
z<5MHoNyFoZK|T4sH&ba)i>bdR{E(0R3$x~828NsZxbQWsr9BaqCo~47jQ+X
zELyATaLq4?BI36k!*LEV57G*6c
z(-G025$kyKX``|(<6ZdwEvmKk##m+oqL&z-`~70u9EU2JvetIP
zJ5$#si5@!VuHyLrLa~wkcl@4cH^;AIb)F$X1fL`xXf4ug&ycT1r0i
zws`v^b$A@;)TtDc`
zqFazHN}vB0Xzec&%0pp;R5_fyahy;xA@~WyvL6V2%}s=nU*p8;Zr
zWeYaknf5L4K1_N*YWI8nCA>~HjJ(Rjt2H&P9S`RYZ@N985*Mp=jQ^Zp$
zYb%DX&e-8d$qx{0*qJ_R{N-}uk+Rr$V9=rvcDeC%Eg451_brw=OFh7<&=1V-zv@3o
z@%1~%+uyk`$~QMEWlSFOL?83*gbeSY?l%$!()j=$etGlE2hnP@ILut1F+>KDSecG`
zpAjB~Rb6b7=1bbJZZg2z2+jsL>5j|vlid(7vNaDiV8s8AQ0m!
zfGkXnExy%kOn9t#H!8qo`{a#$9=3Ed?G8-YiHLWtzK>ZV|MN;Flkm>=$>GgfVX~F$
zCulrevOE??)oS)6_H`8f<&!D-A@~TiUc^{#9bcOkuKz8qZN2#TPQ^dja*BYmA1C=S
zY{w4)w*}tp?e3i5t;`ZC1wPoH@zIUGdIDG8;iBUj9aYZDhl*mU#7KWAIYP&LQ2@b0
zltwizM+V|mQ&W|L)MQ$c5ui|+mP0Ar(AB+h{1ez&ldu0P
zrKPu<3o2&`J9)Z&yQbr8)w7!pW{LQjoX9+x+BPE}`T(mqdpRM&5l7c@BpgX|%bWGe
zFYIVMGEAitwlTp+Mkjs@M6+RaSGvf}N=ArAZVB^V3r&=ysA6g>%im3fo4a$EaEjIoBh%?bg
zq}8)h@)2M`A_j(QZBW~r9$r1j_$?|ceoQHt$tQu3kx@G9ER6R4a3S=ux(`}C%IttEzKa5DaoQQA#XRU
z^3bz~!Ws=GsOZ16?SnHkfdW6$dTCVxkV^caV2xJUV&C8)lE_b4S@QQw5~IIx1`S1<3ZOUIma1mLVVhgH&Y6@T#P{(ttXnX+hzxMYkw(KPBK^te6ch
zt$1!QaFGo%effU#?U$C)qD>}%em~?&w=LiVqo{L(Xl0~@0hunP(&uq5z2<~ZprY-M
zq{LH?EU%NW-30+CMJaP6{l+@S0;-}Sob+m|L9KU7>t8Epj)yM_w}gT$*~vZqZD=XD
znqiPmF-ya>fA=WxDm^x?^hzt6ekfZ0$Y9q{nc&M1?{Y|Ayy1EkU`}j)yi$=f$}D?a
zV*Z%s=zsWN0u`PSURQg=vGxYsFG5VzScdjEEH#ppTp3&udu)321`6USHvLMR7&GRC+-=JVI8h_5+NUCxt!bCUDAG!Ea=h@K)!k2sXo@DD9F<>wnz`
z=(4Zrms~QI`#f~5H?_4ST_IS;?NHak%*t;UAC42>=zJb8TG%FfQT&$~!Y$}&yGt(d
z)PxNaxnChzpz``7=?pHntiw~Uf%)9rt1Z2NVqbF2&I)u=1QvRNc~*oX`|QTaE8|ys
z=3&>Z%B8zQQ#?JuHEPjK794&jY>(myQ~RupQdJ;*<;#F@U6x-~C@!1o$eO^*>Yb~&
zf}1%ZSCF~Oo4v>=&O0M?)SW|l^Hviq?v
zJa^-Q;2k4d(~hsaYx_^(lct-Z`FnXlH*ws+T-zIx|5|4YICoi;nT!#3qHiI#(!{hy
zEQ<yYczFV+-&D?}iz@p2@q`?s5baOz46j&_53ChJ(4@gYyG;e(4XhF*b
zT(=ZS&R)|lcZg{i-H}`8mY8Qw=U5Rlf8|f9xFeY%NmK_}wve~h)osi5#MbArU_JhE
zd7p1B!_?BU%$kI8dS~4`@M@htkud)I&y7l0bSgwNL3(Gmi=4ZDoecHdsv6gA&iNcx
z-Z^(}Ds+${YnRZIBlw}PwEez@lpNg`vGD3!`)tvKpwijIC70Vz-Iep%k`t?+6Kccf
z%dhb+`jT3i?|&UE+$RgN95nx9u`2t0SZF&PpOZNRi63&i;xX-b@#&GFJ=6=~P>H;w
zT2rG^SBMm|W5^!SuAzY$gQgP7yXSP!BgyDVyu8Gb~G`WBi@~^6!9iYu=fx1Z%roUO@;wFh34$=
zh2SX!Z&|m)NyEv8UxBkX_Wq%9Aa!bcTrNq$$*i;ShLyts%`c*$B=4(htvc+S>Kq#J
zzn&(`kNJm6zd8Oz^HkP~Gdp^y`AbHQC8X`qDU`mlYiM_$wtk^U1Ar`qoTt=Jq?xNc
zVqOIjeqd!EVH`TnAnfL@u|Jj`dD|4tMz!OHN=^iOk|pN@GV7;Pb4!3<-HcKLbZ$V<
zG@JRsFD)gqa#vNab!>iRk6v9u%=g?h_xV}n3IT!pFcjZZe#sRL^i5FD-L2Q+x|nDwEl{MejEBNtfJ{<
z+zlu7y)XLMEu{yj+swDK1y
zLc&&a2$b5Y5d3dT(|)hf#db@3=@&JI?7!4F1dKhwt(yk`d#Ffqu=}Q^<*Dt%A1Pm7
z)r2Y7`)7H_)l;q?m)?u9O4_@b@2)nSHL+=#GX
zss-Z0J&ukV;muhJQ%{g1TQ(M|sBFc?NQ>Qqjr*PV{RcdYjYrSQoZg1yE_n7;z@E1U
zHyNh&R)^c?7m`hFHkUdRH&2_AFKqGXP_F!~31t100E$8{A
zzqswm%Q5Ohcl)oq22$jF!xA&UCe>$Zb|Tf{6ua^NeWkVcUdwt!b}q~jJ}lGD
zWnn)uJ=e1(tfLImX1S^O=>WBT{P?XL6Lf7ap+BdpF=0t59xZo%iS=cN-s73i-4;1ccj~3cUIL
zt9O5My_=+2FW~(?@ReJq8bfVl8PzPc4R>Se$6C
z|E4(Wk}Ke=%u!H6ea)C%V9+HOxG?WF9A>#$U%p56%z^GGI(;`uQ+piVnKEfx<46%E
zl*`5lCB9kkE8YmswqJ53Y}Cg1rV_p>ukZx#!1F|B3?R3MLexyn1@lqE3`>*tp_@E?
zIP+4XaA)+9!p5P=RiBn8Rc0e)%c@U#6h>~@WYc~;K{%;O&kX_+9W2HGt~b#42tY%O
zn+1Vj`At(x%_8lvGGvXCbSxUbk@X=)w`ux@SQf-V*7zYLYd}SMU>?sAOP^CnY2wk7
zCwqFv3h-OA%vIHB#Z#+bp7enx<}(p78HAH&^T*DVzD!;0
zunFW&Hik;vI7mGJ{}CDxOO^qDH+8xYsTuIN2Nd{ejGqB0=9k-*=baEZV1-xqB{XJ(
z{>D}qrbHorkydwSZFj;FtFXmbW61ViA)VK^l;)0@PmfK+S*<`l=7N$l4
zV~;dv5hIuaw>h4eRZpu0dW{|gVYh}_IdHO#Q0^exI`T^HDvPt)i4%^3Wayj`V*{0*j|{>OjpDCBJ{6zKWgz@P;&4oJ-wg4Rt9+-%opwWI
zevgJ+GOLwGz~T~rApm-+Va;EGGT>8u`!*=3U-sY)+6HRYfu*|d`A0X!kI8$jJ2*7n
zJ@!cjM75uGOm2!F0hw1OL?9tD_r0&Kp$3k59SSk`pFax)
zDMAE_j`&&t8PyDW5z}1IJM}>3F>;x^rPC*uuBoWw{vPF=t==Y1s6u|JHXbBCtjcbN
z`UYc_yro*jXziuP>Y)fdiqX?#sL(%+=1To`{gp9BNC5}kSvHmXT;-jIGmq$PbrkYF
z&HKtvE06da0j+4Dd`a0Jh~G(g#y{`lC09zab}IbHcjxEkF>ek7nB?{xDhGSYykTuj
z-J-mmmFP3o?+?i`w9PHB(Z4o-KivE4a}ZTMk-WkZ&l}c8M_2a9?=B^7*g(a|FpK6jT
z>aTCrsS6S~uRl8^W*3uIG{xy{*knax_F#49&Gp&nk&7I$FDzwhEyrgu>(Fa60;Q&&
zZB0)-L3$&`uXce;Ts?*q{0UoSqpNEXKYC*)9?<;KYUdwYKHI2l{zVIb(eFPpGc46+
zb`5a_K2X+MrT{clt<(!&#Rl6*Tc8}uJHpP0ok3u&W&`*Dil@!6Nu^mfVC{n(Qvh&V
z2h0=ZBp{Gvl?nBNh9TEZ(C++>o@Q{pYm2P*g{b*~>Lx1w%Z5os97O*qX;yZOVrjW#
zEOsRunGUM?u~@Pw5ddlqXC;U?kch+m5`Flpeh($&tcC0*Cesy!0P`7^
za6u=cPv>9s5Sc|(d%98!{!}gES=d~f6K7cha$ze2M!UX0;rX=09Zu;S-i%nY%9tZ(
z_4_eQX}+{?XHHvnfbZ=a>rnop#Xm^fB=K{NRL{i5-114fj{12;b=B(D1mJVxaHWLg
zF$9$9toKKGQmyik8njx>PSdl+78((@VOY<=BN?A`$Pv$i1+BmnrLyd;VxpFdEB?nq
zrPQ%$pX^S{fn}W3S>w%0sqD7vYaIGgDF_+rhjx8HdNW@_4XFdmpN1*0}m!a?!j~HVPe8!k2=-=!=^tfTE?Z
zXAh{b0i$TzCyUoC!dw6@S!jv*e3c6SNpGqs
zoWkMV?DjIPy<7JnhyF0t#f-vl6=eCq%L(Re;}G_4%SBp%soWK$cRLPby~$T4LCC3i
znGCPBtxPe)ps2x*sjZ|4cZDPA$zm8{t=JqT#bKz3m{m7F*8Iq73J{B?jhft^x
zD)Y#G@6uCe
z@lZ=fD&D@c$j0paaVXmWqK>BmpDlq+D^muy(^11!6Fo#n<%aU?vjEc_S{GX7bG$qb
zK^G1<@HU=IkhSZ9fMRt*+8@aZ;R`8=x(t4mW%edybY8m4FtV$+wMxW8g%Ac
z@5i8u^CIR>2v
zcs*i_eTaNRU8o;8PetF|Iu>MU9%C;4uT|HD-qnSlQUw_E>efJ%)4nCR3uF23i0lRF
z-=F_m9WH2mTtUW|r}$=rO=d^MY8hFUD0A~MM3wHF{SnbjGyS4P+>K;w;!AaO^QZ(^(nT;pL!GgF>AUS!9Ee$*>3ltLKUJW{M
zFZ#R~m`z%?XGFSZGX@S6z+GFF3gf`r+;umiL&7Z^38w2-ZdbG>B8w!|h0Pq>B+GQ7
z?+0gXh4+jL=18T$R{7_uL0jeB2(sOGdFAgmFD$j2y=^3a+3!8s$X2hfJX%`4<+sQ(
z)s%i&vy-5(4F7<&F-dgZ$BFzFNs|=w7T=RH=AU1}gA27D%1ke7ru!=~1-JpW&Mu-m
z4{W8K1b^D>>nZ^sd06|QRic{0Hf0LGnxqH{
zky{001xrUwGBvP}BZ1u+tV*pf3ZJ0c&|$3JkpVpfv*s-oyGy6o9NkrfqJo=DYIJ;T
z#xgFpOZh5bwH+%aXFyhR3wSQcUWv2*;B$_nr7#3&MKgfOmEj
zp3|G8!WApN5E^RvhC-YH)%I&+f+Wkya93MQ!)>#(VowSLHUX>gBvn<-M=UCx^g!=JbxsU+O
z+D*F9S&t!z=%cDeWh0Py{Hf%A$oNb{J5OU~&b@~~y03uN5JyaQ3Qt%|hH8d&C=
zw1C9}_7XD0u^Jw1bJadC+!>z;0$$AWva_tSOAy}~S6EBxrqY<9Chg4^f%(g(iFROG
zmm`v`GzDfrMI5Y_5{o;u$^P&K!>o*nezo45+}9a*6jVzz6M$sJ0#apWn#;n}zvU^C
zBoBNxjr&orahj@jrNsJBNP|T^4_`34jO9m;y<;}YaLG)+mXuqZ8JX}gf_>`1ZTg63
zd_dRij^mlUfc$w3y>?in{g@0^u
zZkg<=@YUAQ(K~T}U8(YB<@G`Hg$}WvC2#-wo*SxQ-7Mh%Igmg!n`W29Gd{%ImGcZNyMl7)(w
z4@rrh*J-Pi&sPrs%1c{AaKzrl)I-IdTEgbBuyEaOih8#zRHqc)7dD5m4?t0?6~fZA
zj(9%i6*$0lJhBBdu{53xxug9@N&1C}Tk=m_Mc>)G7Ka4AafTQ0uKJM03EAeW)zXRQ>GFuTxyrljl86&IA+x01
zK?N;daw#)d-tC(pD?we1M8tb9q`%0)G`T)<8?
zMq0&}Tx!F%@p=z%7Y@#D18XEUL?{y;e_oSVeWwPDtW4KYNWQSzOdrui2`V*rm*|Vf
zi+P#2eN;cGp*cU0N=>rqjz{)r4)W?WVG(ON63y=!RpB3JMg?NnkLCZ|E&uww
z?m>hHs@6%l(nP_b`p4I`XC50f+wc5JAemtK1H-EJm1GBuuve{`GcbsEBeU9yMK-K%
z!J8P=CdaWv_qg9TSlB)Hr#a3}Hvtv#n?Rvifldjb0=%g*I6fcth9
z+&s8t8%56A};p2|h++eWA{O-wN;oS@!f(GrgZ
zG-w_VVJfSz2!d&@m!leEw(j|c)_5_pHqdXbLCssAfRyr
z)yn$Um3YfIz`z#dowSv}o_qQAgnc5XucM`y87w;=El?-wJ6fRzh)3F!*g
ze01>$7A62KQywlTlv4V=*8=cYTA3$z@wJOIua*S42}^sVeBOCiAkw|~pPl(4lOvXI
zBiw(zN6h7&lm2fQ;^08-yr$lRscdR`9EdSrQb%bu&+_W9h&u8@jt%Ax221Kw^)mfDoJB*J3J
zjHIS|N9B4c1yAM6?RhnoQpaO^Xjl*(W8CsQ!5wn=1MZ5cc_!DD)=QA;CCKTO$&SI(
z=e{DVnk@cn^jsLJ)(Eb}SPH8OZ8d+ZnoyTyVd?y9t`c-{ChOC`>J#`X1<>8HQY{~8
zAp3pixJs2U&lsos9;UP4PKG78Em*!#ns=eul2kNl#Dg7cJ(7E$V*Ke&1s>PA1=|V0
z#o0{Rlc+Lu4Qe%Cz#d4qE``pSqg+Mh)#)EFSwv?CJtCT_rrBt_>^N!plE=7%GR*k@&yiJ|j7)eB2NnD8v<>r5
z+yZ>DAJcaz=hGi=HZu4rmUSqCYLaQ3MHJ}ak009Lh>H5Wic-b9tN1y
zsBh4IurEIKCP}V#Dh;3LdM`MKr5J?V4Z*3;{_;>=f5PNi^y9WHBhF9-@48ZJOaEqcsIDq1N5a}|3(k<1ks`c@=H1i~Wi
zq-Y7926IM=KIp9a#dLxPS`o%8r|HguCG89cW931&B$;24yVZ)G`04EB@49W)EJK4=
zNyc)ftUw$pAMiPZxJ3W4DucS@QczPc8(b>m#VlQNh1g&;^|BrqRtmaJ-y2-T`$V*0
zPs4|vfjZ0mhiOo7G+SvhdkAl5wa9x2WCU2P6Q%dt)xC7bvTT&D!|E&jZE6MG%fD0(
z`h`+OV(cpajQw$JLb@Ppl8OIL+2$$GLtAK?;a`n#FDh;*J1^c8s9f`Ym
zIjs#9?^4+(wS#m&?m6&-N*32=*Jv%21;4X@npbJq4wo9oX>eGF2r{@h$mQ`g1?92(
z4)o|5P5^fC5IxEHK*&Kg>c$h?zQ3Q^^uI%7oA}#tAEXTYyx+d}cLYDTX>!qwRR%Rj
z)HufE)8XP%-QHV(xHnxvi%;XyICa`j>MptTj7IC|rJ)HBI#0PTAJ+@Z(02LEcmQMFIH?%
zc0eCiErjVrBHwZX3rlwAFS*>!g=&*1FDm&=$nLoGz^X^3tT|Gf+ftZ=>+Px$jC8#3
z?hmBvx}UvVQD9hu9}>c^lcDL^mh~(ISEL6OvFZI#AT-r3nL1x~m+e;&4x^O|{~8B7
zWP!4|HZF}l5%6?RDzhYADZ$!KNYIMbkZ;l47##d%Ha0Xi)QKAUSVp5c)eXXS#=;%5
z$|e2RU6e5d-?$1*He$MT`=?RHYVtVJfrxq?>$Sk7A{bO7fmNma}R2x`0-?~+q
zLvL+0%fF(qaN&^Sz?R&Gh=)I#7Iq`DKVh&G=3Tdj5xicq(@vYk>|~UYVt!|nI6)3`
zgCW)qfbXtb=DjfI7V61S$>mX#fa
zT?g-mTg2V}s&27{$&R#S4T^xg_czk^?(d^2x%CpT
zf?S2KH0T;d`xvwl>K#gtF~r5N?TfY@h2Cz?ylCm-?S#praOA`c*5=PRW6fGwweCWPi2E+UD0cXN->>r-X@#-3s~=Xn9b|5|
z_k?C&09fTYW*EHeLEhuPSBG+&Tr^j<4t
zioSMVa+TjF
z-s3YOC|jr^J=o+f>#R`(yfa@iXj_k~K6vu0m2zb;iEHu8g}tcl#g`Vn
zd4KLoG0m}!$+rOkVN*7xBGDdg{6#7XPJ|<=_^Z_(GaoYS%H2PuG;Eq@+l0?eYUelQfGlM
z4VmxAUe6@ha%D@yV^ie`)KM8ls_~+)g9xJ~?^_N{59&x%e`V;dnTxn4Wozn&OV`;j
z;ul49XbZeKIso-?rEgzT#&exZytN
zL@i3ZoZoXWSt*DlgB0m{u8}x_J$(6>L1J>gti~%clXn@Jl#HEKx-?rqIh+`(jvPT@Xau_
zFKqRl#tE&5;KU-oK7V?m=)BHHNxQ{H#3q9
zqC&hePAgRXPZ@`XPYbt+;f9cty1XD8m(*YTKsmXT-ClmN)fF}7j-+M_9K)%E|!p?$cs
zq5kp1_ndROTRpX@ag30d$E@vlRA>^Ti7iHJORS`3t*6yeyCM=|XAkTlNquGpkJ~bPO`Mv_FzoSbB#fGTG#u3|A@G2FdMfA%9P>Jx=Be2e){;R8^dB%Gm7H6NrPCs
zx!!MjQVh@W2iAWzW2Z{S$gjs|nd2HTt9A`Rdun9C6EEL5BNLOp7t?wrl`BaKAiPW=
zDahhshr-f}zR@C4x;nZ`y&;(6#n-l$zYC!};L<^ZZMwP@NUw@L`enprALJg_s?7nhFt<=o-ID9?`RN_fkMoHCalD;y#Wrvu
z6dzs_t0_!A>j7TB(cAs)F;s#aU
zUy9J^s1X!?b{NUG^5*+oqhNt8sKgWP6~a=rxZtKaP+Nn$(u4}FqqPpb3V>5nvvt7<
zm1-dQU^!%GuI=SgfZ$18Z
z&)%zNH|fcs$&-ExS$-tr460LEKLv^(dYYcQyXdSWj<&GV6^3HEHGS`-8kK%UnBl*q
zrIimSh4nP5EztVF#J(OI*zqJ3DUMC$jv-VjJFt4S2fn+Uu2J>~Pxr
zK|5@-Hf+2+qo_n)cKqIv+;bMlvWFFdcK7m|OR83t)#SA0YK=eEX(N~S5ag$RBENQYl|L}jXWZ4YohUFKiqusADU*G5`Tx|GN8wSmatV&du&F0o!L7i{KxZK((!
zvw>@cJ6=<%mT|(+{2#$?;qVR+81U#BBC%fjqSsNl$IArJWWTE#Ff$i;_1xO-~$H-5z}yy7i;`U6x2*?nsO%*XG5C^nlu+c
zXgZam%P3<4nh&-Dxrz&d_smLpAqI(cIuTk4PIqzNP`
z6N^LrG+zYGVoeUW7huH^mS;NqYOuWU+4XCYSH@2X8b@R!^F;W^OvAH
zRSeq^xFyt9&b`zvcg3cNJ>yuy7RdyPscmkX%3QIn#|3hOJrN@P6I!42K^+-YL-ln$a3O_(KAZE_q@V<_e5|0?vD$Q!M;JJ;+N}>|1_?
zXukH_3%YlrhokNN>9`uinKI1oe|`OR`FdZQ66ueoqRlR%L)qu=>`BCu7vSUp~F7h&bR1
zgfwb5*Phx_#>fvUH9&SqZAq3|nydV(_&2CrE)&ulc|>_vOY$|DD#$m5`%LSURAj=^
z4gvwCvy$L>2Zo%P0;b`Jqw3L@K}^8d&-yWiu}@Q8?vD(lYF{Qi?+M*e*bkUNZx1-}
zNLG`aV$_S9yGFvayoelgUZn;r<0`%FV`|4X55sqk75dxfXILG1(5NPRzeVAM8oh3q
zRbTV1tQnSVlewLpy!?=k%{&$r0}lo3VfR1>MMnus&1WR@qY!tPVT4xvJU5E`s?D@A3XE_T*M68EuO5g;+NvAT?BjqJ|5j;&El4I+*r)w$f_OEnqhiD{;l
zUAOwOI;tNMtxb`6zbZxv>_qEgt*v?3r@YHb(=B@;bsxf1VPWC83b3{GiLW}<{6xSn
zWch;TbdqbLWMY5#Q}9P`TeQ4ZRT8k
z+i0KhQeKRz9&L5%gEW>}jd|XqF7;iq#H{0*+<>F(+Ys?R`gx@>G3JWxe`nA(^>1~A
zHp`Cipw2e_e;xQj!j)$%c7%I>$!jMoTbvVlqmB0l%;q1M^5LZ2%0g5E3p@{1milCeEQRe
z{T@RQcWIc3gm6t$q7ZR6mg6RFQmT6-ywdVKvW!UtEJ+o-#L%t;6nEs4z4_(t^e>`9
zwnv;jPk5B{a3g*pxCXQ6FSjuT7SL3MyLHoyDTfiWKX+KM{AWhMcAuoSx4?0oA=scMh6gc30F5)|5N4Jca^t$++5EBk&=Dml0r!1k#f>|~7U%bq^vjQ_a
zy^AM{7U3Cguv}O&|4S4)+PMCT?YVsZd9s7<|8n@JUK+XcH`JY~C={g?AkL2(kIu{$
z)=tIGcpBcFPa^{5@9fcFl#98Zc#O`TRlR3+UJNx~*-uNaNi7HQIDGf5YFw$wUCVCK
zvE+??7i0gh{0CdlM1BkJ>wO7DJhLU0jBdsh#Puh=kjUD@8#2$dG6;_G2HKWe^K
zC(Ic4JpeKD%63iH{HJX(1X4m@mc);_{FxI;g68|9h>@g)8&X3{Sqa6IcW&QJN+bE0
z1Ww~%JNwVy1IcMnOat%hJ4lE`+3W0I|G`Ys>`J)x%QOvYOX}mJ22;IM;tq~lSC=6E
zF-=~15ZP3`3#2Tsz2tD)5VZ3o$9uO$4^QjvMi|x2GYmxLg#eLovDSRp=Z1fp-tXHB
zAba_Bv?SxCx)01w|E@Ib)v@+ckgc4pu>+m#;0S&$;z_$M0rm|CE+feN5fghO`CPaO
zFK=pZ*om;$VK;Z~+!I>Sa>i0IK8*OSj&GhFEbn)tFYgd@06s53gtUDrjLrz_dH*&yiUa1$;8<8McXmqsZQMkYX3ST`Hoy(q2EqtT6Z2)eO_q4u^qID-&*}x
z__2}K(m~F!g6uR$9-V-H%bh6jY^3ZKG^uY!eZZOAUd_|B9eW!3$-wml`n5o+_M#Xb
z1-k$I=00;{VHeSfZ*qNMt0+iqtVZROM8$x%it9M3i`65Q(1aWf6_wnP)^mZD<#;)t
z)TacV?6h~JJ*b$EmF4|j+Z{UK{(84Ax>@fuD(^lSTye~mG?ad_TSeBv+f8-t_$>|l
zkqvc16wunRI*3=e@{Jf@IJsNpm(IX&w3Ep^yAHSk@CkZmN9S6u;ff*u#Wikj(Z?^B
z`wf3432oYLlb5gTKUj5tXX1-uNkV?AM+Hc<*VgO&ti%a{>&>N90SXd;8(!vsHA|fJ
z%W6xWlxV@^!>Ps}9pQPa^$Xdz@=kUl6ZwU1`CE?o&M0hpV#4|7JWrH9I_1(Y2|lkJ
z2ftFvBFDyT)%%2W%Y56deU5j~Z4Qc)YwQ&nBO+5Hvby|5-@1yn4|mej&+YG3`43>b
zxhwn2>ST!_%r|)R;uARLq4AozC``K9U+<1^v~FHPXGFazuQrR0;|7>
zlJsw>u;ITnE7ueUTESOrHK*JGPBQJ?ju95&nM`y?lO0IQ%wr+5p@6+5#7#Rt_EwqV
z@qExQI?hiQtX?wS%(XlX)l1ttXNSz+c7}gWmG=
zHtI^|E9ffG%I82w3@s49E%jN|_37UCwNCAk;-5864De5(w=?mWq(=u7XRm0D{_cpJ)*N0V{(nu9*)!~0Qx~R}S
zb?_`pcicV9ZvMe|O#D8L0^1%!KMw`>1&V9O+w<+19b345S=-&tV|2Z-OS0N1LXrXP
zGE(&>Yw6>!dj;ZBH8eZZz8pLsfhE3ou&GU}O*KE9FN{i(#Fc~I$KKqmTTk4LnPbsR
z6<4HxCrC&)x^s02Gkv1C#y&ew^2IluvCHhZ;2D8X*$9aG*c~)yvG52BTrmXQDuXZk
zyyjrN=`ljs+sUz5eu;TSbshTRhnF$vV<*6|?m`$7$|6Ezqg>Uh^@fzgKo
ztC@Em>?XnPu_K-S%CByeS10wa=UO=A**{w2fZcz&lS4*Dq%94LiOWB94JVPuROZ>0
zn6uBX*a+~bR|gB`$v1BO_*gL1>^z>8WvD$>*kEK5UJsM56w1XI0OF&u&|V_T
z#be>j>5q2UcFe`2F3%3B*Ners?40U~jv)RlR0}ngG7QH%>wwQ;;1AIN*vcL0H+y&{0m8amBVcedmXZz+*@7
z{w(EEFRw&k_L}^c^vU3#8}Kkb-r)kBH06%q*G&fwOLZN=B3j%Me#SE&kg9b&<2td(
zhs*JgvqhTzo7s2&YZ8w-SL}5t%^f=nH6+$er?Y&`=d3#!)4#JG*95}DtaP-P*BFs3
z5^dZZH5>%$22py11s;Yx@uQig_R)an@o~MOUv5N{G9uD_onAW2m7mEtCiThD?Qucw
z+XXVLXHI;;I{YJHp=zZVe(NCDqH5mXk>W!#FI35g%Vi{a#ujisAXAN-zYY6c8BFiv
z*jK#+mpox0Z5Ql9B($V}8y(>0v*7TEiCgI3jBUeo7kqnuE+Vq4{XE_hk|Z0B>n6T}
zgo>8B*!ws9GcJvLoN#HI_Ntga0Ey(e+(=lwn_$|j8WvxV=qFmwWq&;9Bo%YdJgR9H
z`%0!g9Ks*v0h(>j+3$BLys=tI9>DarekHAc&0?m7`z#h65)Two9QJnf3?t+@!n`l|
zftWC!YPfN6G{2j-MJ)0*;N^$0_^d^sOIccpkN$>(F9BdW68uxeqL7;JAWv~VbioV#
zzCi;QuNNIk+u-!m=gZ%G?x$<}y7sS$^cUy_00epOs_ed1r&MU@$LDed@uv5$%8{J)
z_dxOwMFA%Qd-hM9B*UDN7rC9yhC{0AXfA-g@B-6Akc3#vHdOLMvUOw8t=ygd*&3a~
z6V89X_m9uWgbADg%@ILOqT>!oQ=M{t(5b4y>yY>7Wl8=+3b}Oqd}Swh=*J1`z4IWt
z4ka^74ADjxsDh<8C4&K|C)qv)h#ve;(;*bJMSUW?`lT!F+^Mw_OqMbv$HI`Vkk1qfhSQ5TpW|x
zzWT!%ZUiE4DvKQ+4M;bYy0sYqw15Vcm(UJao^lEP)F4T|5NkawjXiDo$XIGm5)J
zakYLr~5GyJUt9pTfOqftmL
z0YsD@?l3ykq(15HE4+cN8>2g8C7s;lFZ4Q2UpCwE2w$-s?wac~Y*c6BCKh|TXwJ?*
zB3Lf%d_STg*?Cr<@R-N2bi7%yPDT+UE7BoZ2j*4vMP*s;au9<#Q$|>>i)CY*46UwD
zMBd!Xbi9x9r5PP6Dah0*uf75&D}|czs5hRtTammdFe~}Ti6=JB=?(_3?UVH=Ga?Ot
zqOVIpO{TH7J04vMsl9u>u{_$VojZQhw!nd|J=!scpws;QujE(f_j)d`=Uy;cZ`aGG
zS5K_L8X7RLBVHQs$5^1w5!a6>L)gyiW48r
zuHtLXMZQ@~PCRIyBvw+~l=gJPcVp}OP*jtz;{*2UVCvJX*}kdp5GAKKnc(A2aw>r7
z$X*r_)FW?K|9`Trvqj!G;aZeL&N@aCuGs$1j&^?0@piU6`F`^B4p?tF|03#o@7M+Z
zbV{F4`wbCLS^`oWHrs^>nQD-6G>U?8uPMPhT&AdJ+0M@#g>TUJG>r7F$znmMC^5?h
zz^T{ey%PPt=B>EL9>~AVzgV~;%0JI~pML!Q$MIC)Uqjip>Wj5y$(oz#vXgEs6_tU#
zA*fZZiKCH(s;JGIVSJfH6}&iv^J7tiLpe)^o+Cb_admRh~xD$v6X?0JHUetYDx?;Qgl{IFmSA}+0AK-YrNn7)F`Xd{gMn6l|
zy`GZZc;@8Qb1`zOZ!3AdQ5r`Z`Tk$IkGFeGv!H4lYQ$uIyT7>-02w3nOcfH~rGs|v
zpK!l5c0nJ3sd&8px*y}E()N~HZb&H0kJ`?Zwc-~vxEej^G`IZR)nhqd)#3cf{3Mg5wdX%B-ayg!eX~jwn+43gI9F=j>OH6%F(N?bX
zc?IOxT1>!c`fhNP3VJ#@gRX0^0Ox%()dWv7`0Xcw{7JFqVYe{%Gcmm|-lKEk`3DS<
zLqdtj5*_Zs0}HehH?P=suh>>k`D-yLD~n`H)s3$74fl)fS`*m(OskT0A1W0%owtIa
ztEw;WCdnQHM#I#lcp~vtfP*Tt-i=z+G|9bPHu&JlxbP!Y@I?anun$$DvOQ$JuGjV+
zFH+}ldo6>d9~}3*Izs0JtghEV=L98zaUETm&rWl%NhJVwy)jUdP|7OCT$Xm9N5e?X
zb<4c(53?X|7iT!<4l#C<9AiTwF45{A1REL|#_WX`dL+}zW5{R)#;ZP&7m$!jSxk$F
zA#zV1eYbb8;!et611yk&iD*?2c(dab%)L>;Regu`49!1O)m2!5kNeN`1IBb~np(1E
zjcYP+0iw*y!8-`_ULQcgcT7X~*$3jy!57*nW2S~%)6)D*U
z(Xg(WI+l9FE;2k{^@>fIQgz5Vx;h>UjL>Kv7Z|fB_HiUwq@PIL)A%_HQ7Z(5d2Eew(@JivJ252GFiIZo8ETuQ9=I{T^c1(zYo;vOM3HeqHN+)UDXH
z7h&UmTctdcWu2OzC<2%d7hbjg1D(E6`&`xei^!{rM@|xjMaNv@ONb8d7~&E}&`Dx5
zL*Vy?35%%g!p?Tt!N#iqj?0EH7bnCRVhUlJzl7=z8owCyk%0JLvCWN50;$VTxePBr
zV!9LwE%Il_O+-S;o`z<1uwHn91x(x+l{J3D!cfOv((W|aYzZGQJC>8WchrH?bKcxS
zzfe$jSF&=zr$56cZ>7UWl6DsVx&*=o;ja+$oNa4WCn8<&b$-CjRgvw->(waa1Gm4g
z*ybMU3n>H4?OtfF2OBu!Qd{@Adq9x>~nE$8Wifx8)`*;0Wh>`Wz-1Ynf0
zD-EuAh3(0giDCk&oD8|fpYCywEx`PbA@>l)H8?@eCg04Qi4`>FpgH+mG2paCE)zo!
z3&JfQ2G`JDLFaoN*YYIz~>SOytoFd3{vE@+!;9Thg*TrFL|x{AtXhY
z4s{C9baKx1_A$)$HqG*Q!^&8t%*ODYVk3L5*Q{|~vBeS`f4aIA*+!|middq06zQyT
zI1ck=CqGxVah!4_bAThC5I)yIb8{f~J3n05g14f(Zl6!9H01loAJK}0?BQ7C^LQDo
zf0R}KJOr;_6|G%R%KK&=R+s9!8Ko&2dA-rqg_#)6S-~%G=}9qLvr`rKNqW@GO?Z68
z7JQ)Ls5R$Hz8~$pu{uhOW>1LfJh|kEjCi;U;-w*&rnWIpS0>NGL8cPZ?k?Rz^WEm^j^+
zTHMd{X)66W^EEB$vrF=UYKRGQjZ~BQ3CVWlw#x$5%JE%-01Sw3TP_H-@?Z?H(`
zp+3W&c!qp-jkB~BLYCAhr1k|!?<5_$;%xF?WR=7oJzytW%E`0T%Z%V-k+-~TDLuMD
zqJUUi(eP(UI|0dM*5WC@qiJSRxsXkHg>2Hv``;WAuO@>=9-aM-uQ$A$`&yb&uxp6e
zH(EQ4T|E6~{>Ur_vS8^lTGah(aZh={0rWFN?>g*Y8aRKh7k$SI1g^vhc}`Toq3v*r
z6B@v2y>DP1<9zh)o6y^^&m(%>g2BdEBsOL2Ed<-j0eQaHcPm01FKon~-@t@cCqXlT
z1Aj6AXz?WT@?mu3cvU_`EzqK>48A7UA1VUBP}nm35L78<9j(Qat0jAR3n~IPb58NQ
zK40b&1aqY)n{&AyGD9oCfF_;^xF<&U_TwW7$p!)sM;linXLug>i8`^?
zfp)g^`<4oYj}mXb400&z+{TZot-U8C6`f_&X&Dr2jaB|ZG_|V?)F+VK%1NAiPt&+s
zPi1P9${;xAUTN|~f=WnwdERTYlMIDB}mXz=hwj
zWQPT$G1MBhJh91-oRd~UjlW*8~)8#IG@CoOd#BlTD?K8xaskWFI;a^pTBg?LD
zsLei#g%eMU?z@;%Gy*!-4}Mr(KSeFtNss7_N11Ga13JFsD9__(X{>s|qGc&?>tinU
zzO|{@q4CID*0=~qa*HcXb+BF^7uw;!#%KjogZwMMA*w!Qk%FevQ=Q;omGpbM{5xEl
zxN*MP74vDs)N7{dc?P+D#@Puh*Nz+W9A=;LIzDD`ePGl*F|8La3(<*B+zHib_lB*s
z984~riaPv89Y=0=v_S!q@q@Bg(K6#zDW0O&MRBQ*i@=;ZrFOga_nOV$Vo2t?U8km{
zSp^gczf9P79cDzqk_&-Dh-I<~#pN!d+DWk%6dIu5a~{fBrc#EmHH$_$r{9y19LM32
z#i=H0g~hMsG1K=Ap9k|85vq*pth*%TfxcSFX3wp~@$aA<(`B~6K()}p6@%acUK^EFlR}
zyYhLqNd{b!SkNpe?0K?X`daP+BCwjCr>F
zYr~Rh2^!^_
z%Ee>lTbv?Erb`T120yGm~mvE?X
zZ{dzWo-spxjpb}36BK6{7Qzwers}n=dha|H`?g(xcWasA^2$C?S^7g^wP}+f_E3Ou
ze=He126Ki)INrhg9Lv`hcbRQ2)maA6_0f?KT3OW-_YgUM_kk(K01v7!>kGI*a!OIw
zS1w@XWP1*2_F9G-cgxQ{;w^CHSny@87k8J1$NhRVtkzU9IH3JgLXO>P)<2W*GuQX0
z4n{435^=!3&HAaFZ|O6#QJ53s99i`O$|TFqC6X`I?Ch3p;Z$eqJTG$pPYTZ@OM`DAupE+RO2LB++8MZAv6h^b;GKRl^G<
z`i?}hq-IJc_{%R4Bo`u0?Px-!Rjkt4QFgCqTH#zT|IWecB+HdT^9r>Obu8s-=SBaB
z>NF(m_C9+WGS9AbD%ij={;R99?QiU9I;BUrLZJ7CQ1C8i%bEWO0JQ(%P5vQWUMo;+
z{I}Q7(o0c!b1zVFvcH!d%@wc?nxspN$t+HbC?J7Lpwr^xvX5J;>T%0;>BA_y=kB1?-
z8l?Dr^UDS+wb*qb=E@z{U@rrVh@3JvYDhF-hni%BjR0ZI-{rZXrT5tbyu%%HI>2{Q
zqLQ~t!?I`Bq(yHk7zv0YHFm%FIH@!4nlbQXoPeZ})&(YE;
z9M2b6s*{w}ZO1;@&*|lxE=xqAG*!qC+3MCH3Tw%HiaZq^CcL1gne!;7_uISM)&ZF+
zgy5Ykw($jpFZn*lD#>?V{?m&1=ZbB=8gs>_QnopqxgN`}$)dNEU$Oleam6Mw5=crr
zOP{?KRGs^&UMpgg^--e1E$WZ>DBmv%>N+i-pz!mAQtqAHC#FiLN09mPcHu2(b}H$CEo
zz)Otk=Jzh|E@iuQ$&+b_&G@I*d#cxLnRRLnRT_|HrpawNo5CUEL&}fW%_;Z1?VXym
z1pL(O3Ek-)wGJ6CUo@_;W(EY>iqa5My&H_N>6GG6Q&h^Sx%h6my<#6Lao0KxMt@lS
z%MPR5*qHxxJYBTcP)ToJvBI*doD4eWrULp8S`2EyQdN-Yccd%``%|=;EZ&arLp(UP
zS&+~xh0sjBK(@6C$w9&}DX+HD7ZxkN%p}~<2L!ZtLQCTPL>+Ej%m(9
zg)^k=|AqzV`Sy6byiTg;Axw7mHn?#O&mYEQY}t9~-TOPus{x+xpiAL=jr1P573e{M
zr`J@DJ+<_jp4@1VJs2Z)7Vv94cR1&c$H;#A!W4YrlEy6Gqh^Hp!XBEd%8@?`
ze_C|>BZ=&K5hb)IFm?6Dtfu=AYPjM(tf#!%Zzugx?hXKhOsw
z>MeQyogwSnSCU=yuGr`j$UZBDK$xJqK!ur&O_zz
zja%LRuK%Sh#CL_(
z4t_y8>MmwAaY$>Onq~vdEPIC}8P8^V&;59AHA<6+S=q$`I3+;Hrl7_$EufFn*X&4I
zFIuLWxC^a!ee2Vj-yG%*9Lgt7wG6+yEUejk@w@-Ggg22Kqa-X{1G0qD@Zhsmm^)AK
z(wrij_%+MRP2cPAC2~z8Yg*KMzq7vZi~bCNTiFWIxoJfBEoq8D#l_MfaUW
z#e#fFW$}nZdUYuEnW0}`nvcQftUeFUln>}mV>DQd0Nb*I
z0HXxJoyXKoTwLasso0yGo;F(HKEJo2UBKRmZbENkedZNgHb^m$tD2f(UGE>NUmV{J
z4iOA-F^TAr3vn%e$ZZr>uhqOgF~sY(SO8OL4>MG9oW?>GS7RP=6Kz;(c}2&(a68=l
zOk@u;2m)U1%D9L0h!O|QP;KBlt##Xk}R^m0@XlW8R
zZJuwIAl=FuE{E^DrZ^IZ(wdwfmmuuZ4pD@D^Q}O)9gq6JwX_7vvJM1`CTehHrz`49
z&#F55iKpC?d@KL-JP$?yIZk9AW=gQ8R*xcMmkdhpLKqPwZAENZDnA%xZDM;3PyEY`
z7oJRrV1XNUaXxxC^v!+33bzx}LZt-er;!HjMQSOpOP5-X`ByuOx|w;ZSwnntQ7%6o
z3KCg+fOXP8rY5Y%X2h9PzKWXz_A|c%{nwWk%pMJQP_4exfDhk_)Naf0
z72Au;_{j!5O;mX=iU#H>JabagqwUWKNloOqxr
zRw*Z$oZPl5T@9Hp?>+Uq{Ur@=xdkWET{bIybKV!u6FKeHv{dCrcqW9`E3&Jt;iVuw
zEZ1(0@#i$-S!cNd1fA1H7c4~n6R}jpHKY0gV{8e>i2_VCyi$wYl^gUMpl>7wkVM2THQDAMjc3av=psF95KXlq20BSdOeS4-*mpWPog71UB4&CJ8n=)6ITM`g}&@h{(5
zx~nF`xxuM~vG&O^y|o
zZ+qI;OB_-lj-yI}Ah+JP_Xsux`<|6QHljv+f@%;uXm?xp{@%ea1```y$S21-jqb4h
zjj7qu5AAR#clCLF#A3IB#nI3}e?bzw`J}*j+^!pN=RB0FAm(u??~Z2bv{!&dQ&>EF
z;N2?Fg~}*BF(^1~wv-G-S-8xql30c|V{!U6sA}*pIU%Y~x3_(q=WF1RH
z_;27i6UQjD
zpG!Y+ps|~x>auxIukUETKNFHdJZjC13yC-T&Xv1V8Jn|fiUE`LtW<3j^=Y}me`OneDsp2RXV*=mFo`zl5&8_m>TgPz}q{>D26FSKgJ>Q!@8{?0LYRhF9sJx!&oWhJYNNKCXtS4ma5eI0G||id^CB9+Hs$
zt&&HHJ&%}}fO;2eL#m$7%d+Ru>C^5Y&=dIFe
zTb2BMDX^tQWnepFR1@VyQ`qhS$~%IoMXImWzH42?uTQJ%JyZ-77kbLX+t(k7_E8uK
zyrw>V3NS&<%*1gd;1;Bqsxsimz6F-;!Qq2TTsD4%oVw~}GqWFdnW?Dq?k+_LS2w0X
zgBkPps9Np__l&X-sg%y74R6QwIGNwRTshW_#ZA`hCzQaLf_Sbr%@*DxONg;fLQAbJVe^1`2t$;;O--U&7VmsdG
zJlsv#dTf@?e2Ggj@qa6)LcU&de#?DQj7)nvkUmxS%Y~;upz@A{s`spoAU1((gs~+@
zvNDA@dw|EOCKRYHCkBYvv)dc~B34ikn`gX7zV3oPK}{v<{1BuGn0zU$I38
z&$?pUuV)cp$e_U}$$PNtj)dpM8?_+orN$D&g{_M|o;?)URE;cI)IqL7b8cMcq~1DG=;e^D2zL3
zp3Ess*=x=+dSP5dvDhTNY*YWz#9N)IR;m)qC_<-dEg(rRD=Kk0s$EF@L^vsbn|h((
zj!I0@PJU$krhv%*0QclbrNn4F;J!soJ%e~$bZoqD3*Tf
zpoZ|y5c0{ae{#rqt)X^75t6Rfw+1orhXJv~li%=a5K2#3CmuXc<9DRC
z!*i#to=5WU^$FTd`E;3=$9q-c5?1S8{%g*CXf%hgwI?k>LJg0@x!c}v{kOd_y4cKX
zc%Z+wTVv4P2+0HYgeys7#u;YL%`X<`{~r@)=&A(LQa8KfWASZ&!irrKUVaC3Zc+(U*y_#J~xicMADmH`0B2;o|hHC2^|bE2bq*aFB@C??
zXS*DH?!Sco(;iizsbsg4>l4%!@L{-?WjD7#YQ6L8+2uy#x~@rCEmAIs7Gu7%Khxnm
zyQXYMXEs*3u-xpz@;Ra#>EpLik9evzz?yUBiCbZ$tmY-eg8Y00Enq^>Cm$0A6Hh^?
zho>`gwH0B8AL<%jJ883XPV=(o?GUut6(ada$;CBXxY69zH$pX9aqo({e7x;WWBHBt
zG-LQSN0pw@UeR{nuetctMH>_ZzR^kw5#~5i1v%XvoiKi$hcdh~>Sx`#r6MIVl&tPe
z-F2x*(_xH#E)ZlV58YWNhGi|ks{=zUS^5#64$n2-))&qVO^0)D4t_*a6<#C{DJeO?
zHh&3Qziw8cd{o(7RRLMudpg@yTJS4`OVGvOf5&uDz1MV2Uj^w<$;o{qtaJ(Hb%6Tz
zNBS{hBq#5FS%8fjFPtskZTFMdoLVXNuJ2vV8Nu7{-UKwnixUy_
z@ldDg@Cn>M%@Lx*SDq|{&rvipPnk*_#rk0XYs&=&A9IA=(`nH3)ibSgi4U{LHyQ9U
zz=RdWL^0nk!jcCgO8eY;;bXpj7H(Bi$3_1u;3u~H1RZSpK0l?+(cb8_48QJcQ#XIeWQHw
zbg7H}_1-d0w9f>AD&no-+o#tIKxIsGLsdCcAq)BwFb@*2xh6*J>|j)g?YaHlGgPjry6eKc!R%u
zP_Y-9v9RZ|?}8f=$m@88`XnQFyNqgf=uyW39rn}Cot8l7G~F7cpVjIvCty
zSllKdtMG@^Ew`sDg@xyNvv~)?;$zVbMrH?`Q25InR!Y-2@dWXE842932Gr*>)l=j<
zf8ki~+c&VRnRphIwK;O+KG|7NCvxEqmRj)pc5(kx)F!xN$&ct2uMp_P<8;4G@nkQY
ztV_n$4kTOu#h8I+P-Sed!^MHl`l4e6On)Yy1#h*5E-J(;KDnwKh4$VRy7pxOnl#*qbXPT
z!MaAe+*=2B_tczL6|)CJ(zy@=VO9NRVuT)t)FXsTtgTg+jM=SX9xQh*9vcBeSrx@B*JDJ^!fSe0R-EML=vJ8QUSQc>v
zd>1oYv!$4MS9Sqgy|*b0&`p}eR<_}0o!hvmzIsC8RLAn7Wh9|(Nbx0ZO{5rr^-+5Z
zI6vpxZz@L1_(rarkwY`~`eEmdMgyM!+&vPO@lHV_k7R9D4wLi@$b`jH;VU*P-U%dU
zj^)ow!q3;|LBUPIGpe&%1Sj3LpG!8S0zYSx;9bE8kvd*p#7|~&M41ElV=-f`?MXJ(
zUNUyfhTfU&_`);GbY>17WpA}E+w`0ako%h5D0f>a9DXS>HnrY78?WO-RzYtDsv32x
z{K~TeJ-$hCTVf@<=wq_HW)
zBa{ZX#mnEw_z|~6*axfbcE*(r3kfuf$@=qOv*xqS{{<BsEfmZZ_h=0V<;x8jU2u4gX6$4v==})0>{e01NFTq{Xisl;GBm3h!t&M5
z;dyG869nD4Y@iD&N9(m^pCkl6D8VT$MPo#%X-q+mJSSw+2Oq+TvIsZ7x7FOwr0gb0
zysJccd^SH-b4GZdi#@sd@Mnq
zI&$F6%*q;C&vGqzw|33;M;72YDw`0nwNVli0I1~Kl+={UyAilR+4g<(RkSeI9Hy+z
zch+Iwyql|MN}I_4T~}7Vaa`_>e51~cZApbZm)TRFfb4CO&f9ZDILPpPmN04n%
zGPP;=3ujt4`LQ7{Qf16maFbV(R593rBtRYot4Kf_CvDR|L9&1jxAvsE#U=k&#B=8I
zzhTaHYwaP!0vombCaH^_6RBA1JE`?c_uXXQU&)FxWt4u4&3yCQ&sz_sh9);icbPCn
z*ptmu#z(*^j1xu~eV8_@`1fvhhg@LmBCaJ%_}=s4uc$ofBq|hzc6jXa;!<-EzmcIt
z%?7j_X4H2`lOMH(HD?fV^~8U8`iSufqco4f)7iwHN9#w0^E6WjuJx3t|7`6hXLhyc
zrK(s1zjbTOI13olbZO@4xR5UmyMV}r(2x2Kn!(*CRkHSjO|2$RtrcqMD?%$Dc(`b~
zTrTC}T}t@_>h_!EKZOMLru?}Frz?JW%Zxz}tda}-U_DiiU;obX^*A=ewfGluc@KoB
zO+Py~#A>m+k^{9$RSwSbm<2D45VZ4$#0Vb8MT?AcP16Bk4!W3-Am?~5SiL22T^M+#
zkK0}tS?~LCYPk~JZ7Ux$9?$fiL}S@Q2(G$~1jMYaW#l`1t`=1Uf$X|UBc+DbDiI|HT!)Ui^K4~R;Zc@$q^~4|iE{e1QB
zP1JQ#4!nt;@x2;BqwPtlea2adb#0Er2hEp)2}LuzHUrR!q&!5^>OW&)ezG*Cb0;Ar
zFK~F8i%#rGDEG#zkFBiMo=OP`KQ}R-oC}`_9N5c7;9cQAH!SQ;sE{`JwAJ85ur1RC
z`65I+_os+S<{_`>OL#13j%Fkt;vIgCyQ&wTxGAwFg^5Z}-D2GM#v@&VN<&Zv=|q3T^5+|deLk;4pF`)7
zc&mntBj+P90)L`%UQ_izzz8L|A3g)>{|4i5ZEG3Ki@AZh&w9vlAQP%Tcj3a5)8Ym0
znv36h6in8wDYcfV{OO&I4K@nPK$q%zSYx`Npke+MRQ>D}UU(t5#IMZrj}muNt$!Of
ze*rEFHLxIekqAHgQ!c-k9eM%{vd=&*LVlO|4A5o^4?%mtYg>ytpYUWVBo=(s+gjKcEL~3l>A&JyUP$&Tvk94e*g@4QZ3}mNFQ3KGx!L(HqZ;)^^&fZS6D_?#BJjH$Eq!
zTFTs)QwL*<(zi!Fg+fE5mL69Tc{;ZxEpmcr47k_uX)EFFu%G_h)*yoKJw>TB^ZTW5
zJa6QD=@TSx&|@OyU)rtS$vaUHvuS$OxnC#ExT2-I{Ce>1c@n+P&}#t
zF*U|x;)GNUDp;TTZ;y;=yl->=7ugM~7+*Kna{Q>koaRcpAF#M%0HKKR4c&zmbprnB
zb+|H>EPje~NXw}Akzjg5xx-eo+&;DU7*o6$=Svtk=DdnCt&Q~JSVqK-HV7;mYZw9P
zR32??MQJ5dCGymgn#?)W1Hf7bD1r;xiEg7-@4_pd&Q1@@vRI=CA3qEj&(bZNCZ8n<
z4iw~XJVS+Gv&8BecvYdp2(U&V3-C2@bZyu<+C-M!0e5w)GqPZwlUV&`MUHgx_*8B{
z{|~FLe7(tmsxqXs1i5%AX5E=V^39i&Yql|AY5d59P#JdamnI?-KnuUosQAr5R}D9A1=GL^TdT)jEC~q2g5^ceGt_0HeKa
zgLgB!iVyx<3q@u*#TX}jrhnKRib$A#|*9m}TSiH)+yE^+vjM*W_5({Gii%G0Dj+$YyP-t^*FoXr_))M$28FyK$i)f;i8r@uMb6LUOwFicnq!NEZ24@D0iqU>
z+kJ9`&nT@JS)(Ta+-`i!6p|P@iM6VvTZ>Ds17M7ai4t_%IBuhmmP`=F!4Js+Z_8=}
zBi~TA!U1w`e(ca1>EeEC`wSNHpCHf#Gqq$_^Iy$nNZ`?NR(Iq*QUtSwhI
z!oI(97*qFx$y7v}OLzLhOS@~O0)NzTb=QliGZ7X%FkdSv`3vr80Y8~S8g#oOAQDKG
z{7qZJn=nhl`$WrQCqO<&{#3GB>bqp^N2DpK(5L^F
zdew6S{V|7ex!8;RCDRXAd90_1qr}nZFqlp}4`wI4Qx>Iv)Lrs6B}a-}>8de(;yo?C
zfUa2zfF(Rb1vr9o5^7aJVehIjix0iSmjhG!5t$zRJGc8b`tDiKU%?DP{;zDQkNq{>
zD(#eB^L1w>2S~9?WINNQr&bm(_|A&j?ZNy<)pX`b<+Bo6gfleQ)TWBB!9>(t%T+M#
z0J^>BrtbEL$b_0;I>r0FZ{pEVgg%#@iTvjMJqiZ!&+Ah^cz41*3R1TrB&np}kgr9N
zgursdj7w|*eRLJFr2;X*tViDBG@ecnch)tV@(ZwkHZr02jWdqvXK9n)oWZaFaIBks
zss+BnyevpzRMVsahVgk~@FiQV^3ivroI1}A)NutV{eSwD2JLQ3jiUJ2h3-^WFICgH
z3Z|;5rWY1Fzxv*|u}?$6VHal5oZhl~ZAY_WJBEO@OpA-oWF7Dn+8ZYq-n$kB{J=vZ
ztFI2r)xDqn{GnbA5gg=r3#aaIXmlFcdVEB_xMnl!A|{-18=#XV%POZIKF|MsQy5ro
z@){mp$dj*fe2yuL1IAO-n%BBzeDD7OvG+oo!``a&4huOO4?0&7I1F;Tdct;goomSa6EnE&?nqa4Td2Tl~~au4&+
z2D+|L$;jid2AkbMpe*>#nrb;zz)|-8>et0~mEro%5KvCZ}&&7{Gk;w)B%z&^&(Eb&zWUDe9UvFn`_wy
zcu3d90@<(GKnlPEunp;4QCSb(bf#mh-Hw>K$OVSKjLPpc#9C%4ik3Zc0Fmq$stFZs
zKWxZ?J#Qa3uDtqt>}^h*k6ZY<9c=kR#N+%C+RE?T0vd;%r
z(|tG1PJOAqm%G)*3!(BAriZ?|B}f?8UNF$fR@t%`bO0@QcvI|Zz&!edq1@nrA
z+kxc|H5C-bqh}nMyWqh5g|`ZNoJx$nT~SZq{A<31u1Jc3PeJDxn1T0ENyG80yl|}e?uCpQYRQ!c&2E4
zJ$)<~o>hix8kQhP)hT3NeA;>eS(`(hdck=d1!Q51A)Xs1?D|TReS;122LNK9sM_U&
zyzgh`?W9CErvJ79Gwbr2ZL62Oq=P7HYMjuF7fY;wRX{M--5WHWR&pUj_k
zg-2(~RN$EXo$R*88k0;=QuSs|X3aI*$Jxais8z162lg^AxEXtwsTm}dhv*tckZR}o
z&k1<%?0}wv@jw$0IKj46u=fX&7W=U`*QYPWtHjsV=C)Ooa7k{tl!v=nr}Z%XztI}8)@EHcaHS($tnT0<~jNz)*DjM_wK|BZ}Ql{p1I7t`j2eQ!a|v))gC
z%`w^SBEDJlh25LW$%+Mp#(L+0Hlpn$4lsulKF2y{8Az=V}l_T3Ns$aLtH^l^zkXstK*^3
zqaHh1Jvqq}p4muYaw=!?DA6PuI&pC6c2_;Iacs9yz!07(91V^L9!6U{S^8XLVI_Bw
z-@9u7482WDjeR*j~-
z(``TPjbc7joff`%t3gbJDy@LUUNe(N&nI5ek%!F$sm`QW2FzK81QtKBbr=Iulf4Od
z{O;Ry*00)US6xX0>zs1+$1LZyq2E_a@WKj;u1+gJscrKGyooX3x%rgYaQ>g5?>8i_
z>@D#|`y&{#$l$)%W;t>ta3kC$#@BHm&pfZ-nk}v`TgwFx{Fc1EZ2uNWad7nKYrPuE
zyb`dvdQFh92mOupm?~d1Hsvf*g2wsK0?hIC=U*3%<4HqCjhrB9E0_*
zc4U%|G@-oKmUJ_$z|zd!?CryTB&XB1;ltOo65Sa>F7U*qct3^J7A}4;!N~6ek5un~
zj$G#N;;ZH+_7(P@Ll2uJh|l`QdbRu}*7hg@v5
z33P4YMMrJOv4Y(jijwur542^_FjK$e9?1XsiAeGouZ#jgPusLgpefOUz%l{a+}S3H
zmxvI!Y*GR!QmzQI(<*zW@bu?{_{j&x(A@45dFQ&Z>g#
z(pKKn=W|raU}3afDL5xP>venX{U{V(dapD$yoMa|w(Y#~XKGc8>RqiMT6pk5-d$qN
zV4LjY_S!1Cyqld-exV|Ku|F`0Z=^2DiQB~8X^ojBz#X>b@Ts!45_QgkF0G~W>Hg*+
zcdM$mxM$aFo%YPJ$fKrXW#<>Eu%4!7fITU)=igZ=smJ&6va^-b0+r!$^FoeBUT{E&
zwUxVwI@wJ@*ETu*52Q}gPs+oPAA?;E~uY+Jj^RIMgiJ?bO)gtFwCEX7W**+|V--T04l
zP~_Gxr4GNn9uAA=u$TTsj`>_2%mK`DgC*m;t!x?Q8l)ek;w#=$KdAmG!eq+nMMO?D|hnQ8sS|Fd+E`CT)UX;<%a}*)39AJE&LSXj$5&RWwsyQ$bPu
zogd#-?8F!*83=o-N}me@wh~&Ka~_m{9xZ0IXTav!KW;%Bl**O}yI{F<&p)-^)ftx4
zRJ%kZTHDAUW~%984{22oTD9M*8TQt&h-yp&2>pX(!D~wkLPzhIGB>hSH%=0o7(G?F
zVDk3T0>+H&%Hj$;R+wOQL2>8iGh}{1chIclNv1$MBgUo$Ykx_#+U{w}r5uBzrvq;<
zVcX%{mGK6&6?Vt%AB{$cp2_Gju!5HbttG?;r|dOYet
zJI+<9+*j%y_76*MV{7@h0T&{qd&6~J%Gq_RwdfTV-(o4tt32A%m0sj85L{pJaSk(f*@qHaw9}5yVYWDVK7rhjcg;CX}dMnm2|6A<+yg!_Z@szt}dv2^9V*lX3Jq9~1*$y5b%|SDYKbH$M4B;_Op)EFr!i0(+
z%*eHOlR@F3GS0jbE|hTQ^hE)cC&7Hf5!tz#ETCtRl)eBt=*I?Ms+D2_oKFPG#vlE=
zP_yE*b0h2tTzAp|R%}-DVJSqd@<+VaS{5eho@&Ze?Zv%-svR<{@W|e0pra>xtdhcz
z$?pv~TWLpqE@IY+V-UHRFR&?Y5hxnKfh$=5N+uLAsz
z;s9N;kwI|f(h1exe_3G*bko+mR2kc3j0OQjN;iX}p}}5hM6OV89@obgk+sB??C00+_BZwU=w~LJh)AkwAxoH<&`w``xOO*q#G(x=VN7D
zB2N*!1vGW5nDF|T2Bdt*8)MVO#$huTmSJiX%{DUABK?t>m9cKa1DB9OcFjq*=m^ZN
zJ05V4=vb?GSia?&P~X@*{8zqYz&E1g?z*oZt+
zqLj7`Evg#-V{eFlwmy}SP_-4Q@%awR8W1bgdp;XP^;-L3ZlT*K38}g-h(PMqeXR5E
z8Ux7ae%@C>22&6rzT~=Nv
z!k@?@N}>~~G6`@69(KIrHB
zBPk*hLKev}Dw;vXkp&Nd%$?-^$}~kTw@$EDEUpMB8opYy4|rDD@qQ=ufP2ZXvGfZ>-pl8p2-*KLQV`@AD}+ojvN|=hO}Lo
zpr;8wWrcP%G!2&qYPQd5r3cx_A*b-yH2Y4b^o}vEpja>u+`bCQZfk%4%lz=&+Bpb2E
zFL|3jSn)GWdIW+Swsq)uum?eV9A&;Z{S97eK5bpBjxsW3s_aK_@5$q)H8|AM){j&T
zfysz@Vxk^S8u4Lv(QOCw{Po?zEkG+b+w)Qh`SnRSm#IZ{{+K&<6OrcaB4)G6)S%wu
zDyHLw41*h;lcN?w{i}0I9UX6rnb-dVJ}8vBaw-`1n+NDc3o^IjOZu@T_n^*7vBt{}
z`PX$Mx5+>zTpQbZ;9{gz)bOQvz9Q($)qRva=meM+l7$N0g?x}_EEFOU81P1$a;Qn{
zKI$*Z2<_^Hkfvd9;gpuVPOU*%X%8R7F~hv+S#=luRAKTIxXrh^6c9XLJ)u8#Tdsz_#Kh>fU^Mjf9=!Pu^R|v}
zO3Qh$MZSC|g{_O~lt(^oXbA~i;y*WK#~)yJlfTvsK8SbwcPIJg)$NC4;4K8^7U^+y
zQEpplgm=c9tKyHL5`C4RY4OOeC5`~iAln#T2S`25`ncK1Le>*38MQ88C&n?JYOS}m
z-JrUTFf|NHS~}+I+ex$6PTnu4b5^VA
zT_p(+ogDGguz=Hex4s-0p+ANZ2Ulv3K6}lqy*OJJ9zWweqdXZLKf{L!YwS|17sl?|
zajpOHMT4BbiW>}+YECi*fW+t+hZ!n*cD3J_Waf7Au&Xs3ZSLg}tw2GHq9!o^#}YZ1dYHs%gg19PcR1Qe*$o=zBcl*mE=b2(xSk9%s9MLX%q
zb2t*Hsa2sg&afPk^gZ62%2P}Y74{n4jr=O$60pAq>Z7ibzI$tP$glLa`I9xK`Bjz0
z&&uEAoGtcTv;FV)!CwjI{Zc(E4f4Dnw*I6?n~|jua`oWZ){wrW&%B#h#9|&4#qp{3
z--fSDSr{)FD&XwI*fYo?zuImx85G;{GlNBMl(^NVYumYOIM|lh75^Lt|)Iq6x$I>@pQO=Af|JPj`CK3&tLk>dZGYS=D-)_k}J
z0utQ807?vL>iCJR#RIHa2!x&|i8G}0*O(v;W{REK(&be;OsV6(SuF*BRBF%5RFM0~
zoSk}ezq*#z&s@XiPZ^=JC?S%JgnlG^kZ%R{I9gp<5g=xG43XBLM6hDza?AsBVY9~wQ^pvb$n
zs7?`ks+KG^MH;T0!|G3XCI?aiHmsGbfs#A7ZxG18q~o0-
z_jjY6NA;j(ecpl&&3Lc~X(f_e8iG_Au9N8lLyC<2g%ey=UQ8~J;?@w1xlJW(tBlNH
zw_-B`h@30?(XpwMNkx{tl;;+_UDt>q_!l{LS-Q7_hQ
z5?+ybDLv@d@?WX~I205-apx#LJYxNGoWvB3PrY_?Y77jB(#o0j{mMCJ;|l`vi2mp~
zcxP_C+up(*mCJg;)X(XjPi#0)|9=ZEJ3sXYMg!Q91+&-+=L%8y_Vt>`7u>d!zl|mqKt)D7oa!W2pmvT#oph?@ui+NmECp#^c|*n
zg;|bTq#F6QI;NOQJEoD0YY6yF1QvUcoY{5F2FPa|X#N+`|Bdmrva^!t7tMogIikC9
zx#%L1)g2W>9?5qoA(h)kn=q5DQV9;jS+xZ#>_)clBjVDbsJojq0jfwsStQ5HVjp`c
zN_Mq%wIOrp4pEUudv2fuxAvqetkLu7hAVW3KSWFEdmT+6$YZT}I0Z7qc$hCW9Jm?|
z6SLjS-)_?XftFAWvvLuc{$XsaN;=CraCc4~@+e`Q>W<9b?*F3-CY>IuHGy)3BH$S5
zP1dn>j($yIq-4W|utnt_A`Fr5TeC6w^{DEp-fLeIf##twiY|e7$}-{yhzjRM^C$#v
z({J^may#0aA&1_R3(b91(DGZ=jjtI5jG3)=OaSNN
zn{w2She@gtjNzLSVt>R3l6O}kwuo!N2Hb<--2Q2CnpXXq)n?_XQP
zpFJ1*1Z1Go-g{Ax-6f?yh}?TRLyzeb2$hEzWJ9tY*_l4izM$MrTM5(Ccmq%Z(c}?>
zV!nKi`VlD=20%rhK27^nhuGcWO7(
zmH!-Qd^jBA=6&W&zsizuOn5u6F376qC+}f|B?70(_Q6kRa-#|tMZE;x${i#F_=>~9
z7mTrubXkOE5xG?5R_=^D8oJ%nZ`}S7ie<<)+@UViCT~TWyT5t&ZFjV$1_(
ze4A-t(8q;*ZaBp|n>NeI5q9z9(eH}q@9xbl5wpPG!R?UoRs6kW&E(Vl&=@&%_qIxX
zoI>L#Qt#k-wQKYxr}5R&es=-mQu+Id?0C>;*~?L)$Dmk@QLRf;{F4z-ohi+-7MJDd
z8=zz>SNUV4_T2aF?`o%~jF?0Eo5LIry|YP*B7+~@ZmsKh3_XzE{nATUk?i)r)4asa
z!_sIrzb_lF73u<-3@pj?_)fgf-z8r1^t6R&5khxv)IJp>xHpikV6Kn-G=}XJ2kH&9
zS}uyt0u_#p&%LUCcBuyq$Xd%$s#lS!umE71i_bZi
z?X|VSqSxP4zRZ1HWRIzdiEIsAPn}+xFCDrF_c;;ahqZ@XIQz!#6Rxy-{?2|$a25Rr
z^z3l?#1Qq}2cmrPOZtR*RScX?kBM0*v6Yc&LR{7F>sxw!E7kJ;`h@Q1aMz8mwwSBf
zEHa0r*jX4|B^cf7#7#YwU!8Y$aaFWmZLgJ@Hf!H|(M7TElq4oR;m2jT%Z9i!0ZHv7s^2CSd>#c~5-T&$t3=B2Eb{=#a%l+%T6!a{c>F&O#H6QLx%qJg`<{|>8
z=&QkpmnyP~PYXa^N>YklMl^XOPri0yoDX;A_C|c+I{B7*%1yH?pOBLeR}e(DcJu^A29P#1*XOgtXH{d4h*yg~{lqJ_HOtt2vjDLIcaVrZBNxne7l8`7`{3-4_#tq)s
z21xhnszSVS=Y`DaZF0ttrT|82)3#QktaTNk{gD2>XY*$V!Y>H^t!2=66K<3AcWd;L
zo#ric>3dl)88-ui0+dwwwn68VV&(c&bnpnnSd14QQ}g?S+xY(rf8j-%Xm*
zb1B~d@VUt1zIKb=Wv7g$7c#4(P_P*!U>5n#g%2dJI8lw2^#JE|C>?Gj;6U|uLGL%$
z#2@xRP^Lu3e4nC)bC>!B9<3uSHy%~4UHdxoCe$q_rsKznnWL1ZB*^gyS(pFfhAoY
zwW)R~Wm6^N7@fUuO`Km@ShlP!$T-Wjqx|5$cvIxs&MK)n(`o#-R`%#M^+C_^g7-WSNWd0KGo8$
zW}DgUXVL;?Rgj1F&PD&pQc@^
zvdS`|#~bY_4o=r>5Zh|Vz}KReSzn$TMXPMS3Sap>zwM*!K(^MOb}7F2ch#h&Tn{sA
ze;422<=gsQHT&ZF3
zuNbBNFjE*&EEy5!9j;=!P^mEe9)&qh-JrpY1)?v`^p@!BXMxF2NWv1jISig>W&Q7G
zhHOGcmupbw3vVV$3O@k#!zjb}mfpgHpnrPiyDWo2&Ss-QIG<^OszsWD?mNd@E)R{b
z1dCVXuGt>`om$N9w=<04QLRc<5ClURsCvdrkoj8FNkE9jV!y;4v14Vo4yJX
zoligA?fdvf+3m`(=VhKt1oKnW!k%tQtv`p@
z{S$iuSK2U?9%GUFFdhP{an-ib4l5D?LD2}f`u+eIzQj^#+Bn~&+V)16rF>uZX
z-1$bGrE2RH@?>@dFEsJ?`}?*!gASd+tG|?GCZy{23SQx5IyI+I^CBK19v|zbLl%>l
z;4+%Q#JP7RFE>knpv-$jCPPRnn->q@uI~MvX5#_oTkKHW7T8@w%E@Y1gIuRKF(5ea
zH_Q)mSuGAvdXP>91WBI?Q6UZ4Ll=KR&>C7Z&9CK|cEWR(}*>#R*pBf7CzlO8V5Kp)fE!K3)1{@QQA&40$NgUH+xPj_tv2
zwoilTqd2_L`jiz;uiTmk{ZbPUYMvfuK?V$4proM2t#(|!txOPkI2;?@6Ry$g#2lIl
zOr7Dmq$bH(Z;-WfT7IJK!H+=g{X33mcQj
zPK#uo|0*6Kv)f&RjuY>uy*ApYtq{y_wN^1*5-aIx5+i?XoEhZV!DuFMK5Dhflw5E{
zp<7FM1%_npJ-*eQ6-Oq>!(GuW!*y11=Nv+^*KGS<1-47mYkC|Z7hkG`sfr7T!{z_8
z$hR?Ns}nzrpXa+uLL%v+RrbJLOR!5>tN)fjOBcW@v7XW<*;p7E5~MGoL<364Xtgd-
zelC2rE`V@i{a!zc$iI5<_N%J>S6&FE1s`iyN0z2=mVLf>I2GWDyf?DuxNGn^O{*3RRGV|3v&&VOUSSQtK3#^
zbi9k{pS?RnA6_L*C!^BKOnKH*;+_WdN30%eS+E{mvt^juT(fPfUVWTe?3uSWfbh53n`tC)fHTPfcI4+S}P%ytx{7whB5AOFec-v=^~Z)_9N>
z;2b6ISj%pT
z>cpgFLe=Nv;`TucPm*tV_J41CDX}s97)>wfCmTa2%TuOT&mS)pn34&H1HnmmK7hgS
zEBkA<5j4hy-RNo;F?Na~5GOPY-Uk(s9LZqX13KYE=
z>fhY4v@1sxVb3LB(4zI3+c2_y<3X`I*M4W(9^s?
zwC(0*-{(#S^Sn;+#4yVR|1}~1QQ~hc+cwwl{oDZ`_8%R-x~Wq|NjzpiLcQQH_P4)@!H>YgiD%
z72aBy>|ZRm-`^;<9Bpb%VA(tKAYdx~5^-D&oxrl2mt&z>P$3J?k@8JMO|Md%K18LY
zqeVgAa5ZovXnD_S4;IRdt!#H3+2J4>iPgx~VS@|4q%MPD)yU41L4i(^LszFZUlKSY3vnAfDC^qn?Z4?c
zEk|NH{E{&pAq7twS^(mCPk;d?-lT`YCcb%pqC$0BAiFqKA;v+Siv1kf5$Cz;Rx_J{T@45+^jrEy
zOiQ$bTzfZQpA3#W(Amg?Xg~mK2;BaL`SgLO+~;NULn_bO@D%f1uzU+hbE{u2JgwNP
zvonqikn9__J`QQMa~85xsK+%MV>COGkX`j3?z)_cZwrB^1?%h`cqy~{s>4VH>OO*gdTmJ`tVL}uhV
zJlDb?Yjc7IUR!#yuc_>(&?$eZGuB*F*D$x(1y?<96%0FJ@M1M16b{b+Y0y;TT1G(H
zNH5x(Eh7GSv)jz1*1xrbd-NAv8rvR){#YR@K?6E>v0-`-89Z-{2j#d1k<$x96xp=2
zrU)AzXaZfI-U2!2d=f2!eiwk@W9H0we8>)#5RTxsu`DS=e=3>z2zBkdxgIU8=lB2#5tZGm~mPyeZ`D%c>&`h^cmEnx1!e|i4m
zBOUy9XorPR(X;ptKAWIDhqYY2mv*6-aH!b#_MF~Nr@RN6@;|!keP&MW4C4)B34gbj
z=0AYRIn^DQyKcQ{BhxdJN8f>{7LCr0+_g)ODb(D>+}>t4XIkJctW%NrNgfzrPA2y#
zB+OrQdzJ12ROQ1lV=uLT1BR|v8U5ev-;tmx7Z}+$u{-IBFs)%J5FUBO$qh6IVHdhR
z1NQM}`70qS!Fhl^Z#*`kAUk@q0#4Fh6uuSh-qwk+KFFD~tjH$qMaCXVlmz~u_~=A&q=Z22YUx3j;oQnsKMdcbvKYvILe{>0
z&?taKd_9;$;9a><4L)zSbpZP{-W!>DR@pBR6uEY=5L6Cnxoj4MhD`dq>V=I5%_2~*ed4~
zus34CLkH=-NJzeBlg6hD<<_swP!J6pW%=pvtMQ*li)x6J30a9iZ`*q6t^AhgA;(~s
z7Ef*T4y=zZ>7hI?1q#_6VuU22noyp825;VuVph98YZHW!#%$x_Eir;NLNccBRy4epCM1x
z7|lv`V(8KfQKB&g>EQuezuW70xznC(crKa9o0Jz`ed>RosnOOnh8`WdW=qGDH5#0h
zLOZI?bBnkxsr4fIe|nPno4$E`UlS{Z*~UXe_vm<0bSJNOK!xqdYXdj2051=xof6Uh
zRD>Xq^Fk~LJ-0pDD$r+c<%|v}FjsQy_UC7mn_RO^<*?Q#91vZM!wVV30dFZykEyIN
z3_1sXd9DIxNyG)v`AAz-?75H%v7{t3xxm>b+sJbcns2-kMGrZKGteR7E_w4sxI?1N
zCS0eGVROeRvV(!;kYQLHTeKee-@#s*uj1WXR~8qZRdAtqgEZES^^|#wlG&
zA8277_4e|wv`CU#JkL2>1Glpazcew~XWPdYrDA0VdaHEcvXb`q`F+X*_DQ}WpPf1k
zv%QwWzfAqFJmIZ(Zpo=$eWAQJt>pe$u|?n`O+PV{ohj6M$lOR}o#+VwbBqHm)&E;4h
z=!KQ>-~#OaGcJ{8|CQa(#Gbd=f@m52dHo6>a4Br=KfyD~i&M1up!uFQg_>(Rj9$NC
z!#BteyxRwB+SC01Eqe!4Q(4be3Q(-6~NDG7-Fpv;KQ9vNl2}m)NP(lxXe7}EXt-DsveV*s;v(G;JoO{-~
zlE200Dl92_e`nkWPR0T8(un@6c^qr*x=I943yKqxY^w4yKD@}5UXw|dBdtZt=
z*$E|__-@`c@7Zgdeo%H;=7QXvqENAH7oD?PMuq|G^w!@xWr57k|9+wEBU4vjRk@4U
zMcu8KFTd_ldi_5k_10rZdp1SEF0Aq>xN;^YD>M|E7TNCIEMhQlD?4}Jju=m#n}Z+S
z^N3zAY-Q$RSsPB_TKx8pr_6F5y{-4>523?#oL1D?BS-#iOCJcY_g~BfC1C2ORBm(L
z_^O!fR5wz%TZ^uf(AoC*?LQLZMUNDHx1Y8{`;YC0Km2#w=v_Em-&#TfVbgXy*uBp^
zxXk6A(Hpx%g^j_#JU(lREYbBY+cn+QkD*5AsJUuR&b9e=Aq8=J&UIb~({HAagQK$T
z@oxt6`*DqHr8BG4W~AhH8s3-tn)=y2xZG&=2WDAyEP^A8EGcC)Om?Q)FGX8}B2@ef
z^iE`@+^RouR;E|X>d)@N?EPsutwZtSny57v
zc2X~f8k&cp_+fOc@sy&$UJq<#Qid5Z?y*}>g=4y?R&somvf#S
znaU>><&ZX{*1xC+<7qfrhap7HM&Js2XMwobIa`=bBp-84REdSYFMtsi8J51it-#-H$oc|Q%q0^aYrXMd8>
z$gS+Wv95J@J@iiOySwWxQN<7xLx~fzre(jamdGtu*2%ZsDLVbE^N-5Z-8!@}?*+O4
zrIRCVK>JsQ_6;_sT0%>sSPk?~FPki@$8B_qJUH7g-3rcmfWx~}=G2m}!#@)D0Uxf5
ze|`05k_i7r!3D)Z?1e{anNHWgmT3@^B1@x{Ri1&fV$n;#x}9dWR2EwXB1F!43?@L=
ziQ)YyZIGb04;Vu^s_)k9-7S9n!6jmI^qlAVOgm!EdSf3x(}f+8>C{!Jly#`RH?nUq
zudLLb4M$w*Y3avC9UMLK)VAOYpP?LeU+FK7elyb^UD@oU)EQk<>=-Rqa?}Znof?~t
z31%a2POVwAmmFk@fDS`0ThkDdOiIE4iy!gae29zW+W?rOWPVXlDM=8F-83JXQ_wq8
z`{(VdJXLUeGBDvsW?YPmiIx?;4-zl;E
z@UVhJ=<>Me7fA!3RN2tmmR-5%+2rv0(bxp?mMK4?EW*}iM=AYMr4m+M*>t%jv>GuE
z`$DNYyT4cRSeTib^g8CZBfdEToCJ>NeWJHoseckFaoa!%5$KAB&9@e
zSN|97Na4}fGaZ2!XB&)Wc`IX0A~P(h*x(4@d&=H9Pc~rH&g!a&ncITX3D%O{iqfN+
z+QH<`dA@QTL{2bCDT$}}-o{=une_7UOVTrRyC)DT6>u@$%JrT!o}kwe<@4Oxi<;~w
zb~}98d}z7n86$kj9K#0yT&iQb9GJMMq*nIF|DGMDK`A0cJ;Br%eY!kFUPu>hHH?^d
z5{=e0#WjjAE&%>aa^0$0+lcbNH8CeZhN;OYkH%(S4^H*3n`&v0?Xs2w(8T4Z3EE}g
z!zwPtQ5sX+*A#-b(=FVh-Y6v}&%ry!I7Kciv4`dyIZZ5lF4t9Zuy9yraoHQ`qNUa4
zxe7IgHHyiFFQtQnCfzI>fL_m5Wi7=D8bjpudi}Al5JxPrV?5{E2L|h+5*ixLEM7?{
zx}(%y%r5#_Q6QYTGj3V>7b8aU
zx@Blrq)!M*M31V$OyyM_%!XA&OKrbadcPMsJ7-bMN`46qd?J?T;I-+?+lnE5nIw(f
zAeQ~9K}!BR72L#n0`4R1oXVlWvWF{8@z67qRqY~UWsS?)XSy=@MwNy4Q)C7&rd764
ztR`0zWXpn^5(SjrZ!P3>;%1?`u%MS=Yg(1|*}>#I_;LSycdrpJX}Q;DG#qsaEW9mN
zG{2@DzcJHh^ETvFjEa8Ndy48U?45EDw{s#!KsYsGVa^9V?Zy%GiaI$y7|zsQ`nG`+
z8Z)4!sS2&m^2=Q&1#=?}QdYXjyCzD4KPjRNT)HyHw!Nl*?x+{>Uria<6V^s{%-tz}>s*3Pmu&
zZ;gtb^UP6^qq9)=g%1*z8%0-fRhxDqC4K_;7E+YkbrPGt`Swl80=>OO&y3jg2nO3V
z#*%pOF_&)a6ubs?0xg~b);x_dM$5epnVxDR4G`_jUTsFx)u^~UU|c`8-)a+J8VlU%}W$(+?TwZOFfiZrF3UjwbchB7<1)u1wkBZT9${+;d
zmg*m;9|)#4?fWBeX>hYb7Wt*84}^fD@cjxCvAQmAYf!9NB3gBg)HsX!LQRm~9{$t!
z{rZ;RN|*SfY<Cu|;z73~>^ibQ#>p0Gz>-oBPq-TD+~HlJ;kk}7%9YFM)nXJzq
zgnF5bJ?l9}%_`=_S5#?rU=tW$vA{-w1!MCii=)@9Rw%_NzW7I79oOxj6oT!V(+=
zoB(Z;PHE{uiU+!=-cSYvQJ8A6K~OT}tBM$%yC8Y;>q7Tj^rK0t>=T35*cjjDbh^u!0A^{$D+Gu3OWxko?dEJ1%@#yAtYn3
z(O_HWR;d*EBByx@Y)j#2Jnre9^pm$Zs9JWEXR8IEzu8i1I@`9dT-cJIb`w@E$9lN9
z%C!wmaZAn+>XnX}TK!vv9_$EEx*Nuy?}-<91i+9f0uj<0Cf&2Z4~z`WPbz(y#y=9;
zBB!wj*rg}tf0Za5`llE1Rb5p*$-j7k+NqORWb~0Xdm*EBbFfoK%&0B0Kh!5$3-S+K
zeB#u%(7ZI7+W7!VWn7WWQywjkAn;!l)tmGlx-OJKaI-So5+yHL)>?iX;7Fie=)#Yw
zjl54WjGLbKBd7E#g{|uxug$_H1CsHTUfs_{4)|K7q~gPtOM1mw){gZ}u*-z4=v3Ke
z!-w=#-j9cW6B<|Sqe7~xJG9dhw;DIOUNdyCo6shGs(sGGAMdST3m>v+HlbLfV_ROk
z#QL{ll9iX9p{=mvrz-u^#>=VV^DBMOtD6c`4C6*6Y1{{=9zZx84eF}3E=ap*QWX0#
zLrQWkC~H3j(h~IBFemd@<^g6svaU3>xv(*nb!P@@p`$RlC(mzRtnD#M4UY@JISzmc
zGb@-mQjpV`6(zzXS9g&~GD3-&lckNtaBpL6_^gF9r=#TuAjW^&{WTqzMIYWh(Y(>K
zF+4k$i(L0*6mDQ*!pdoA#o9wEOOnHgPt
z><1vUMc8sRsKDc*ap=21HAh?I@dAbVmWM;0zZ9;OzmeAAj
z)0%#?2mWHxXFP1NItq>#@GM>0M30}g&PjNp(mNWC!_x-#^z=BH<{K*wacWM%SxHYS
zdouWPKU2Jwaoy9(T#m+XK(vKQ>Z
z38d$1GmbLesB)0BV}#aQJw3f+z(x_oXWi5*g@ZaNG!*z_kENhJuyAJ7vjJ2%inoed
z2Fh~p=ATKkGdv3c8R8anLc22yfEqxM^z>498kdXIZUI$+>1vi=Iq<1(7i*z)+;pY%
z`f<;^jbsu37bMk#R53a8f8~RtwIiQ;rAwI{<%=!hQpMLO7EB!mzlhY&M?*8c0s)0a
zekc`lk^(gu5{W|@b_t{5%MtncC4<9-RzABq+OF@u9-s-)aCgl+dV1#N@_g2g8H6yh
za8dUZa3O-l4b3kZ8TMJz?)82_8aTwv4RO;8&1>?tVY7^Lp0?v8j_-$MJtNdLv)xJU
zIJH|J9ZpXgZk!HHnEbtve`acyt*YB=hccHS*D7c}{{Dz!`iMQZR^M`3YFgpI!0<|H
zk6CHuwRwu>2B{v)C&PHmtzS}ddDS>Q?*!Y!zsbjDJoXnE;Kav+%hrv>B~}SXI=uw>
zO?X;Cil6^(=~BL~8NW+nvoPkAc5JB1ZQ}g`1v85TEOHjTFP@8kUci>^YhMsj<#5g#qa2K
z0_Ux`ZPl~)^GV076yZcEiNzr7*6K!1*zlV2M!s2+>Y|ma*ny!d-2S_k;!-Uca<*wl
zx%t^&mxoG_Gmu$^O$gm;}>MwsT1qv`K%gf=8Y+m_ffuE0129TL#RADU5ojZSNOyh
zZgNFy;{t&vXKv#H|8rD;X!j-JmtU_*a7KW08_Fln3FC@*feo*79`?#P&v`G8-v2*C
z;N`t|iT4uE|IQFD0xt6^DNE>tY5!uuck7DoO;4{Me+>tL^&V#3uKW1ElLX%XJ4s+0
zZ55pkw62?|F}
z>&E^k@Al2i&v|}6b8JeAfK#=ow?*%<$~f#2RrET%E=w`>uE1
zqeYz<&JnW=Loq{$V&?v_|5w!S3H+!#1sm!6Z3D}nkvllUIiqf3is3d3ND}^pStVj>Al-Cy$Z1A<
z6tiv8dvkc*si*bZzGCQ=+*=19_N)QVRyz&L_ht)5V?!OPM*~0C{5o7!a_dW)5fQ&u
zC}^B_;wzs}tH23H-Ak}j=n`*~PWKI6lAkJMiPq$<>zH*6dl*iR9q$}?3%=J*2g{De
zhCILrey+Y(^8in-ahw{g9+@qE0<4Zje0m2t_UK(qP^KyRQTDHYFL@`;`*R=L`=^kD
z&ACs|pXM}w2?=gHES~kR9-~e5t$85GI!WJ4g?}%{_+B#bbL|tU6l6FE}FGQoZvP(bXLQsJ)R6mmwf5@f8da2
z4^~`*lA{)`(;sDas#LiJG!5l9cJDC0`$GkxBGW1eQh
z=i1&FJ2%ov_990=RGj*d(XJkDr&+jX9Tx7@&ki+akmfrk&bOr&bcsup1>fZd_#Tps(7iD^IdiAJ#+Do9
z`pP}Eml(>cg@ovyMa$G7QLHa(I
z_kRwRk_3&$Bx}OtOhuRH=T&!QbL~4y9>TRKg5i}I)ydimDf!KS6l_c$tUilc8}k^M&Sx#x)h)1dxC~Rjs^G1
znxX=C96`YyxaV2z>av_y^hont>)R)j%Y+yc!6nX?+NPw=yvaV5Epvi-{M9szo&~v4
zrIZ|%g@HTjx8Ht%!@%B)Fsjt+8z_#$qMyE1q`%dhHZ277^qkERTkbc#yRf%!y!pA7
z(&FKJc+95@_y7xXl3kMj5GWD3{kX~q;V2DhFu4D4Mzb-kd~KgEHN1xk*!~5HZ9gTq
zJ1Vv*)2Txik~OA}eDHxz$WO$|}J!|Z8TJfGt4Czm*AZMFn_EEvBM
zRqWhS;jl12reJall5YfqH1y%KD(G!y$V249oB&^#74pi-7_@cYeeeM%X*){7J|XOHNL4E|Kj&xvr(?yyD@C0RNqstpLOi
z5hma@y0AbPq|*c#(bHz;4U+HG0VvMBIw*j4brmn10OmJf$|c(2M=Q6(7c|0h2;r=T
z&m3t;_C)15k4}etuFV@CODZ?RYtIP}#kNk28#&d@MYob)%Ubdi#;9sVUlug%lYc;D
z`!uN?Wseupy@|(ZP7eFt8V_vpki4@(K!n4WY#5{i
z_ul$#{ijwwIwa}7l*6g*570rZlU>!jz7!V_2xQ*HyEQayP+&usK&E}M>lv!>F}Myc
zcQ@;w{8jgX4<52@YltJgcZ6!mj0VW(rl-Bb4sz^XeP+u_#b*Ji+x7d!tTA1i7;`H;
z#56|1QNNYE^I+=IlJ`~qiRYd9`Hb5zl`;+Z9y3cbuU(yW=eCh=WNiDj6H=Eg=KxCa
z7~$EN@Y+kxkg$Y03NGO=AAWOwYv4Ex$UO9a+C+LMQV7Y0l{-vUe((uCXq(Y7d{~jS
z?T=cBa}vC%i>za<4#Np52A7Ug@b!mQ#&kk8r43D+H+;JX+m6C`A6`=!%F
zjYLT;iO}*hx;|HY+i@)2^=*Wiu@9s{l+N%m@?F==xY-Y!N6*hMan_+z9wXQ*NeQ{_
zJv|93==gOS05WD8oM!cp_n!;1&q92N^|L>q&t6|7jdA@$^i#_ka}Q(|iF
zVI9pU%!bb0mMU%R-z=pW`)hL*>*gOwTs8pP7JH^~2dF*GHqf0k4lZ!Pm(M;&9jO*nrE(Q)Sg6|;gVyPh1IQ_gn%`VnhW0Her{kq1
z3PbIwLq`{~C&X0Bc3kKrS}k9AQ{ce%WQy}SPl1j^f5W8cSg%8_jh0<`-}m7FD9)~o
zPfVB)&0SBfB$tRVE--s*W779xxY@hjrF`kvr94LGI_&wsBRyoI(P*rA2A;rb?C_PnM-Wuq$t@z!OE~B{
zzYmtcv5u6yD11rBE%BidITf_fwP!KB$p&*~4Tt
z`V=UKt*_NR1cAVH8Carr?-cW*atnMagmJ)_UI6=Fq%>7Qfs(WT+I^V@^~5$|tfNLUKn}3OJK38>Z$@68OX=HJwwIdsn8gERLlgTz339m>_O&W8?WW6)cTWS(x+_rsIa~O>I
z2PNsB*g)~y#NOPtvWiC_FS30)c8?eo_^eHx>144+@Th|PFM%VO?W2!yBp+}?|Gt9R
z2Gp7@(KC+PeRzn*3NoRh6Z@reYZ;fGG8^QXo$l(l8Vr{TF)G;U;3B6k8rU5bryhLH
z^S4vqD9y8%JKpg|$hCd_Npq_uMBk^le>~}xfHB1F+n4TLR#TJ+`26ZZgZ_*Be--`C
z4BQ!qTwS8)56#^ud#Ozu3D0RFkdV61xdaK>hHK7CDFtA^1$ta1rFrwEaWJdRsiG3K
z(>KpeIs6Z&^zeA;pJVrdDWYjXimvc3fqz}BhAD{rO(jp2?y9MwQ#bwc7Kwb-nC&y}uBEWjxlZQrmy)P7VVnn66oH>;6M
zN=#&>91Er(K4Z!4+cSo49!K@u(9tE{)egy*1w#Z!aTV-HKg)X~Mnb*AB-b~$c_UaN
zs@)go$n5Yv=P_`q(5XX!z)PPdMC4kE!dK$GE4OJ4rf{PnvwwFoFF<#zwwtX7XYP<9
zBlf-0008bHE=!E;TS;7)Z#1xWAq%qt7$%=L4Xnv$;12zh@3Vlkvd75wT41m~Y~)43
z6eLYE4{F7o)7
z#$nrRd2axE6u}&5sVTthUA7u2XmE_<99(k6KT`e)4aoH>@htJum0Ub?mg%lLVhIh0
zncCA8)ZLzhqu6!mdGwKU@f-y@nAW_0fqdgdZaVqB5eUri-Yh<7WbqFTz+38d@4MNR
zZ2{)zvDQ#Kv4hm6C#J=+ZxGVBzN{yrnB!=qDQXd%bY1Z1r{%4<;-QM2Vd)dP!oeDm
z#Q^jGSO<)(lZtlpWwrFO1ERy}Q?75>(6)94a++su5}p3{KfZ1!E^Kh~zKm+<;5b`r
z6b1R-_!RjjO0M4T(TYt$^+v*r+3(i9bKl&RNgj$>Kk@kYoQJ}d#ZJCCj3Emhs$L+%
z&Uw<&XeQL@x_AA;{8D4b72&VzEo)9E&b?OgdC`TP?-2J3O^R}FpItxa2?C-?0v0C%x4xww=ehp&=4J%AnRmto#T
zS`W!@vS5AD$|}re;8KZb(MQ8^?mh>+WV3P3Bmc^u90bU)6NPT$-$Tf~?72
z#WU_stOua@Gtq*f7^JD&NVE?s=X$XKZCIdb@I}$6{-56qeyH#}jjCTR@lT=F8;P67WyJ+z-9;^y&Qq^QuTAWF&H2Rbsoj1*GfuxHJ-@)<3~Ee4b#RTM
zE=q4QtPAmhMte=V+zV1dXJif6i=p(Ei(v~5@EmAu`8m%cE+VIUU5N>yLq|p**s6nV
zz;ET|LH^OYjxAFB$}adM_7jXreQUrs0gdqd&d+n6OHW5Mu=b7Dq%9XVW@s|VU^_TvPq;v%KaB*WEWUq7KA?>ZW{CQC)cXqzGHd&NfaoLtLdrJI8
zCAV*svcn}GELZaT=4qImmSJ<3Lz2MD
z6Ud6IG_HPo!#e7$YzC(0m5xe!NZl5@H!T#enF@6aWYS2mnsAepdhh00000006G&001rkEdX?7ZE$R1
zbY*idVRLh3baO9hZDD6+b1!6NW?^+~bS+|GV{2z}Z*^{DE^uyVRa6ZC2b7y=Wt5v}
zWt5v}Wp#K9009K`0RR956aWAKcx(v(2NVMU0001_f$Y3_IGfx1H`?#sZFM%bD6LA3
zrHGj-yBcGunrCW?G3J@b-ld2bYMyD0B|=S6VyK$ulA@%N8iODRf*6k7_I&suq&HQejI@AbKdC-4`~)vjN;edXM_bJsQ0L3-!T(fxhy+<*SQ^v79E
z2g5S*tYGW>^yv#{JG*n|1QPw;v^?v0!P2FJ)cYbIed7+NIQ;3?u`B*wPC_gyVg?tG
z`dML@A)!2idS1-Ng8N)1?WUd|q76K~JQ+ZAj59g%f*+j%@#zNB0DRBlv22b{qs1qV
z7wkfNe+aCkC2DmR)qibT2nmnM(=P|tye|;Ga&n9zQAT(1I?<-u7=MN-9gFl~k#zsO
zKlEY8mgD(-S+|b~U!TOW-};dVPlX^Z<9Y7_odoB~e>4yDyuym)KgvtB&)H8i8N1>V
z`B6i-^wCZzU3!cIsy_T1K7ZUey^C{IchH8Jk1ghf?my=*%)*Ya@k;Rzy^UYK5J~t$
zxF4j!$XwG&`SQ+&N!;twlhrpLeMn*SC|Vx`LcW;+@f;SNo>u--HuqifIBq)dJlpMa
z?yFi-25PJC_LjUq(JqT+{1HhOsI^)8%pDK{yS5xMdt`TQ^Ufdssg$bw!|S(S=l>&g
zOvftd(!9p8dq(1O_w3a5w9lOj<~w)p?}&5f4$rFoUOsouPwd>e)tBea$!DB9$Lg8W
zq^ofD!$sR?YM^tc|GwU~lqR3mT=rBq^*Q@i|M^z!b5%S$3Gh`h@zt{lxaaBZ0d{tC
zxaS+>>2Och)){i{%D9ymjWR#;nA)s>i8u=rUQz!3$Q|rQ8ll#2@M1i_S3QLlkX-#pO
znagX@(0RlO!grJr5`Ymk^EWZVB{i+1?MDHEUKQ*T!x`8->LbODRmAzfSm>&=D$bY3
zwCUWtA-&fJYHg$(jC*x?T>A3&*d#9?XV
zkmHxO{acCiXB(l@Vb{?tU!1H{UHru6y6BQ8oP6
z2=^K76-ifro-u#k{x#0Oxx9Y%yeW9F@TTV8onJFMV*mRl=fAZ*b_X^aA73shEpBd)
zFI`7TMgFElSPJ*QRQOa1+NYizwh~WI3IBoaZUMV>P6mEm@k8ypk>|e@N
zk6|?8^3U-p8h3PY#qkIocJQYt9o_F7_keP~Iu!tHk6uhrS{S*@<+1RRTP3u9V_vCw
zYo7i%1}63tc4Py4b<7Pre9Zlu-an~LAU>E5+ZR#;=xJU~UPj*LFpcK5;&uSXN}5!nu_m)%f#-OPN`!jGbxUnt7$Le^oXcA2!ss+7t%REn4o_IpVqtIoUT?4L^ZLwEO>@w+{0!
zKHw_;%1=bV)j=#?3-1dVuu&Z183sEQuiiMUYh)O_1SGvziIz-e)dVd(Sa5lF&sz#L
z$XOte)T_xN2rn>UM5-6bUSy1qk&OWXS`Q`D-u8+y*S@&NXB4BJk@D_+Mqx}*hDk&{
z95krPxPm0Viq6A@o0e)3K!}MqF=g(D
zsq(csJNpuWM3D1C&1&15^?Zx~)N2+vBVW>|wM_Um72N{USB`p#&9~w~pSdnBCmjE+
zKg3n)IQZl=;>j;r+?UK8IsD@%4~|mvMcCl75A?Vl7kPpKw&0Ew6Pz3$(^kLFOWjVh
z3@tqt71M?Lxx6gBE|zIsp0c;?Gwac8x5B;M3^LZ%>1zw9PZA|9+onbQNtWZjP;=1<
z#A5K-7$~G*{ucUC4Wh+bp^s)+Z=!~YdSXn){c58;z*T1^hi_Lxm`0Vik_oKL1N3!P
z^Dfo9H+i1@mSXl_GWs-hTcC};L70xOELA60JvPr&$f2&r%sd(FY;-NA-P1cTFiU1+6{_$8p)*>X~bsWJTpgft$E
zK?<=xtwkCQAk-4>qSA=SgVnVo=X&!VHoMqizqw{60Kb(GD&@`n80Eyw*NTVP(PGe#
zfUMWBzi*D5$#5&nFJ|B5|I{(NS=)L>)qUXK56{DHSv<_$UsxdbP}%?$EE->PGIW7=
zv`RwgdKx?w1bUKro((kj_Sm`Bbea^$zGrCR(211UE2&8R;AF)8aj3E!CnC@Fc|84!
zRkZT8C$?|Z&3dm24RvZpr1(6^h%1n+?^GOFn{~Tw(bjC?E}dQJgBaf%oiD|WH<$U7
z#t#mTd@(b(_qy4LP4rj2S&F}o+d<+c)c{Kav55swSDcmxP}cvX}$Wuj!^p$!nwZx_R6(
zB2q@(nCzsk`j8I2Oq&B~f%18vmmW(hs0N35JD#ib$fJ}ZWY$dtM
zIYDT_8}Zs+{(yUGO=e~7iKc?ut1c=vOgFW^{5{5q^k>r
zUlLmSt75wX
z{(5rtf>HcbKzyctaTKK`Oro)H@`_gD1oEK)Ft{`P?cV8>SY-qQ(VcSlgXfJv2N(r*wutQ
z%REInOA(Qg5w7uFaM+1&^~bfWtWNeJO~G4*af#oOnRGxvtMzC;ap0aNJ0rKA=2j1p
z!3whQsXF4yZH)umeg}t3P!%
zJUJOB&t8`&3D+xMS8hQO(@6)mBs(o^j+T?qBx-_fDaVTCf
z=;V8SE;)3q(8)0aBq;umsl=3cy@Qo|w!7D!TT9tfPp;>;eCjkt<*hwPM7S*&8CS1r
zZYN0(QI%E*!k^9W^*x772i2=9?}Iq88oJ+Mp5BxnpXeI!2E=qEWIW%>qV;rxQnE5J
zP+O{l582xZN7OpvhExUk#x6MYM!o-|nu)PEC3;dmZdAgji14U-bDovr;&Ivk>2D}f
z{Sym?eYRNlJ@H&uJ!&aiM%GRi#AwFO^#cC+lV3&p(MLZ|Z(>~4(avP+UVU*&#&SQ-XPaiTH7ELqCUJ)Qm$zV`dny$vxOLKEGBY3>HCoDz#
zr?t{!Xu}~f)ntRJWQ{biWcCfjlPN`43$7;gWQ+#0h8SPH5klS2(1!Vs>;mC66}^S`j-CocM5tgpobxW%gl
z+G57V+)uQfs4%%eh9^rZH6CxT(}@yV{fN7h*1_vttdaA&lZR@o#F4yVeU2i{el^N&;0Sq2NJDEXGDaUZCML%
z(RoNJs!LOI@F#V*qq6n2RWCTN;`y2axVzbu@5Qhb2eiKdb+5e&*}`7|4u5tA#nT#m8@)YPkuFz_SB2gSwohKNR+@?GNWh
zRkfY$qtwW)lo?7XnLOc`7a{kc7?h(Y-Mv5i`8v~KXN81>P*d>T-`bDuxAu#e@4@Ap
zrd+zJW;?WSQ$mPCr68cQFPE+=^dL^D0p|Nius^$}mURO!*zawQ;U}^>ju=t8g3ZZw
zeb^LJ=fYQuq56>L`6CVEA{t3&kf@V~FLk26UE{4)PJnjRcF6{^lf`m!*Lf34pc-0p
z*qQJZX}6W)7=T;c%zwDQQF8!7w#`3Mct)@NR5Wz{dBFKH}?-whVaT
z=rWDkCrQf;wv+mV24PT4u8-y9IL;q~$}@E+v~i7&h9`CM!GZ7wK6d*R&o_$>1rdBI
zUXqWRsXty5OSu%F+Z!|wC~0RWGu}4k<`rX!;kGIX37^=+XyAW-!S~JZpXSGYU%Pib
z>}fT~<_tr9d!x?61^+{b>dr}Mf>QAa(bi45njo&O@=m(rBX7z=XzR?nQ8u{x`^IW{
z@7PumCs-wR!S-#Ddgy9Lzd5yjw6MyvR^Q>?E0b!cOxd>1G?jQk2~qbHBhe5{QQ@M!Q%
zxeGDp@`r^r1rl4RE!07+qF~}SPh*g;NgA329p6JN9v&Tqw&2CfrcQSDa_zEth@}+7
z0A&b_eFW6Z2ALQ9^%V`BY`{fMV!)EOi&f+$BMqWE@gdwdqous^GKI&7U#sclL!=>-
zXeg1^N`(q+`$}iWb=!gQ6NZ6HI{Eo+)Qw~wsrkOn9#1btYvEfRvmZznSTu`sZCU2}
zTdkh?cYO$jXA`7d|7z0>i>#YLc`lH$%MhFgaxb)1ouEOUQ3zdJG^e_A)l6s;SJ9^H
z8({|nRaKKD8A340`WOj2o(O205hk{*)(3I}N{~Yw!aT-3OeZJlr}M@qPlfZpefrH>
zj!Dn4J3q1CnZ0xiAs~!ML_+Oo&A^FKZZ3D
zmz!>oABVMCxM!E+#yQAm_$9lir_eOhB$cPn-hd5KZt0L@uaJ2yQe|cbg6-}#<8^i~
znb$Q1YfoAUry;w%8_JrmI%MW@uHWovUJtE@6f(f6d9-dRs0j*r;7wU`t2deC)3~um
zjo(A`iHQyr^sb%E;#)!j=yjf7oUazSxL)bfl=qrNNT*1EK|)AH3ly_FkG*s=@pReG
zSXlXJR;l`pfO7Q7=s&xHKWUo((=Ylrm$hz0MrOgKL_QUea*W0+VlVh~bA!YBRLJ_Y
zu`QT*f~dd_fiY8VP*2muIJF?76pZEW5{7J$4Ka-$tN1YST_F#895=~@R~)=rTSjXj
zgn0*5-&2v%*(2<4BdeNyk-giCF0}oXgW&qDVROEBpfa|@R-fE?+1o4~&OkP;i}Q0o
zoPtATA1UMv^W860o}5U0&$duF`&R@KuY~y+dbA%}i-Io0cRX|OZ7|~Sdf{=)?C2~$
z?u>lbXsuNt`7TfUC;T`<^Go{drE`b*g1{>8SEeC`XTmFGiEF^Dqe&fGvpf6tr^`-h
z3*C*a>$w3>D*ffv^eQ48jO!Eb=I4tVb(dhL>@E15%daOtAF@|yhLVOm=%^(jQMm}r
z&~xP%oPWBiXjVQ4#Qvl7{j-hOw<>0KJq;VJJDaKbO(Ddt*}z-(rMSOh%BzITmkLLn
z3>Lxx1oU`qDXU*YBk&QYcDJUWkz_6l4cmvF%FWG#ZSMDB9j`)?LK<}N``g65guO|`
zZZa{Qa6Ez285wDzE_C{23HEn4P7J!yg}a?P0pQL^Y3&#e{*EcJeC=&7(>fH4dW@hd
z27X7pTW-jf-+8y*RPG{)6xT`cSet3}Q<&l4Kr-pplhTmuQ^^z}(UlC9=XBwN*iIs-
zc&FhcixhWS-qW>L2~eWNrB+8feTWAE<3-%lwM`)vJAV(As+w3YcY!V*{wQ>^6&+b*n%U>+Np8*kdXzov9;Z&6gt8?+bG(<#Js#88Pyjj!|_
z0@RbT5y#>1&fl*sqiRG%#&2fbKf5b<+-TQRA$WG1;tD28Dokc7KRa!Nvoos-vdp-DW0^RrW^4H+A6-=VZ0+_|Edn596&4sE&ym41fvQ^FSo8MrYV;KW
zahYl**_$S1DDzfuxLcA;1R6B5N>rU8L9)I49sfvM1iVwnl#o;2KS^9PoEq*Q-JD1-QW*0VP_me
zv1{Ep-FTQ4V3fgiXyjO%N?79IioY(n<0&1`PMAALR_DesY
zvHs`)%C6|~+)R{c`uyeEBt)tDvGrGqwigqQH(8xupTTz0~pKo!t5Rem8r&
z*x&-I5lQbkaRM%igbAF;05iIqr-_t9eQcha_5G@)i1Dx-k+=Itj$?`XLbG(tMF+H1
zKtg_AzC#(gXeGQ_>odsKufI&%E#jLAUrdWDRQM1t7^AAfn`L0oe;bwj?rzG#2VrVS
zA+EvwhhsRIyvcpK+ponHgC-S>y2#%taUPSjBplMHI_@)y
z8`*n1J8t!OORKzmYl}`cRfizYx{-c`ux;P^soS|MD*eKalttU>>p-W}1&tD>J5QH`
zt;vTo=*p&Uwp>%JBm^fvVZ^h6P7U}6Rl+8zpEl)XWFJ%xzs)MU{ql|L5YsClOOAy_
zWq$4mkyKB$5_Dj;L#5I?w(^ROt@xU-6jQ3n7=Tb@c;cAF`s$)TuD+U#6FJY?OwOgZ
zsht^4A6WNqF!M+o7;>q#DdCX0;el7kx*J;o#6g&ICZ`uv%u){UA9J3o)_MW&+S6)h
zonF-N!FgDsGwN$9;!?K)15anejbW?x$1NR;-i?;V!x#9v9*DVuhqRQr?kWV<$Anki
zz4zCt)2Ayp{%=mIy3kPY9Y&yQ;^uK%RkV61&=oZnRdu{Zw4!Cs?%dOG!}%NP_bkVO
z!R{P{s6!W;YHW-^$<#}jJkye+V=1V75IgQd8K&bB7A2aRUQ#2^&CbqppH1s;zWH1jp*=%{>*+V4(R)0)^
zO8faVl6d5SX0NVY>}vYZs
zakg6l2{&$79eqchuAb7WV7taALk9=UC!62edn;6q_z7PUK!7e`z&1RY2cB7Ncjs5I
zLhom=BD6b0u6uvf0L)@EC?9RynfM3nYcOrFk#>LSTXB)X$KZNupXR#bHy8jEPv4bo*9z5(agHtZEr|8
z!N92Ir%Qwr+AxNLj*g#38~omY6#3$>Up<{Dz^EHHYw2KHpr5s#;K9kI&>T{SoOW
U%~SbLac-nE*NtK8=yNr;2sma^3Npu7+=^L@})Di1&d
z+_UnLj8k|PTW!cJot-O|>M%ME#eN0koB=WgS;c7%`Z4K-tAEfi5#yiH=o2xvlVVD^Ebxi(J}*s_X-cmE!0tr$TuEfKR9Le
zm0m7=n;E_}h~y*MvafS$eY%Dr99?{ER{eqp%x47B1=WQ%H<&Xr!o?CnHmJ%biQjI!
zqw`OH8mDg2y@tLg`~P9QEOd+Ma#m{e2M~8hLG*n_pc)e^D7EldG;C4yap(%dIcuMd
zRN{`CkQ<#YGA*x@tS8g*WO=t+t~!)$D18hfZFuQpdPedmF_pqStVBe~%3-SquDjmy
z-rYFWMjEVhzhT|@2?e_wPErfMskn8U`uO+9v!Wlxbd%A+iIbU(?8D)>AwM(N*K}-Nll9sPG?L9dEz_
zq|Qu(0gTENniP?N$f+YFCF}(g;eE9`OZJj%H~3G-PmkNeXt=hgW6T#Am*@%NH@NOR
z3zRz1(mg{H(7DnZzkP?ld}oRrFfm1O3An`_n*gbs1B3FaOjqPzq_Am}wIixRPp(>@
z9KIy07S*j=5})FH0h+Fw$vFngxgI#QPndXrTx>8`ck-y4_>3@;$_4cdL*I_43-|I4
zLT^`J6^X=Cc?w6D_hzz_w|<}+@c6;W#6qJ5%Lc1G?Uw6_B_YWjg~tq>jEQUmU-yO<
z4?+zm-|eouGk?aZ@?4}3C?VD(w-oxQpiErn@(kJ)
z`uL7EKUTb67=Y=2NLt5{m0&yV2e!4z_-qif?o4pZ*66&i{0DxSZh&4xE2R9u8x<$!
zOz4W4uIBOuKHwg6W8t638!^VrxXa&-kNKXJlQJU3wXWTELa}y8J{~!p%RkwWX{~OS
zmHB>w8w^);LKT7zJntP+Z#^kg{OP&;lz-uutBR>^Vvtk$ZNe>afjNN%Q^78+(L_PI
z+WeD7>)>NV+m9|uZ6XdrYLO-X2|sVAMV$VY_=Y1sW@M)MQ7>X(h_6juu2?N0-=hJy
zj<$73NTAnoUw;fcbgOmG2$kndpj$jcL7Vke%@c?F6XqTbV=g!FW&d8EhOG3V99*c4
zp9{6`Q0=^|V)IlJ+|eQm-92%wnrRCOF=J7=);|ut+0fcB))P5r8`M}H0yJQ+g^<=7kwBFLq4J>
zE44vMfgbXjNgqkJggw%0ZPbdnnx&_PYYJnrFj8Pa0g_d@Vg{b5sNuPUGhkQo@{pt<
zU?)iH!+vBN4M*6oI`KH2l!4J?G@95lQG37|aEz{?3W#a0$K!Ckm8=v0>9-^KS9EYc
zkwJNXUrgRcuXEN#C0y2az6DQcJH85A@o3%L)`4$=C+oCtHp_B_a@~K;W_Rhi5HH9y
z?eRz0_E-xCMp}3YBkjB143Bv_$*gNsQV1XNc~+21ita5k73aLWrW0A{eR5JuK@-M;Dw8LY!l3+FbFnk*lhFe%
zA}fUgdDJ^5J`gunEMlVj*{HO?9MA{h;0g2tT8F@k>(xT$YrFVVl?0Li1CMw8x;m=`
zV%Y8r*%@kGk;{4W^iCf*N8Cbkr>!f!s%8(+ZNgGz2NPe@D!#iTsrkwwGiWoFf#kEaA&@{
zyf${^@ZVI3lM0OH2%tb6aYb0U(-@TUMo}(o{~2u2qiwUFRPYtOfyQa$n!c&U^mnyZ
zl9t2as_eOr2X3;mvNp>)h9Ln|d4O`*+uhV@__Hol|tFs?ui^nlW~3f0!a^&a#k8C$nfSz#-V+kiF;lv~!_yLZ30`jCcOlFb|FJ@86$@>#_W
za>9t&djtpxf?d*(znxN6ACza}nrh3MV{?}!C~?IrEhDG?1I4Swxn9~Kjj^jF-EZ6>
z#{GLnYR9a9gKO>xRzX9L%p37sFxA1x%N8~6X1kox$=97xM1~SAvHscRkf!&x7Lu3)
zmw;A_y!@(Rk@Rf8-39N1<&~91mzF7maB&?8%1I%mhsdgu$f;e5v&2}q#p#*mEtwi!
z>)-P9q}h{SD!foN?=q_$%gUS}t+o&;=q)CYdJr*tVm%AJ5j-i!W$G+mMBU@7Jl4@0zJaQiem7~-j7#H+JQp;2kVWu3t30vrgAF)-&IAdl&UOh1YjiOyP2r8fKO#EF
z3wjWyl;rOc;ko`Itk9Qo^dY~$rI0hm*
zCka3_43c;XII)#p=?FjEBm`?+fi5LdD3sdi-5}lbqL?OxuCUM9-X_l#uI{csvG6o@
z^pWUu0o7Gn>n@c1DqtA%hW&0rZA(pWvak+HV=AQ0q$)3WWYSNq$lq^VjXj~eLqTqu
zV}0mi;>yaw>XA45{Y90m5@#2!G`=WoyIUIn^ann>iqUB&ZRJu{A<_0A>i{U0sy%6J
zX)ZJ4Z%ocYuha049Ck)WPr{=_agsQ(M}jVDIAAo`}DXs~}E4PkvS&0&3fKqso8#pD;frE3U*w8n;rRf;z
zT_s2sSb=?m9H)4Q7?F-%wRLrC6`i4rjy7={IJ2>-_V~
z2-461Z|`jn7%3z@ec)Rsq=6RDMq5Hq$=|;TnGVyP;4t<}Zr&$dEB=u?}4f2IoNMO2YY_Y&Jmc%WP0JE1
zKW}K!7nd4hOf1}RUtCc20P_-lnHvZjZ(v(Rwn%xHhk}B&TX_>9`*}Q-9^w1Jq6!IF
z&yv;+rA%zuOCN8TC*Yx>6VmSf9|AroHTg(R2{D7E2nISjBWa}FLPrjAlfpI!(2KGBia%x=xy2#f!+sf96=|>O0&Z7B^zY%zzVgv{9G8J|*
zC}**`ULj{OeBE-&aJVcH@I0&JGPi)r1C3aqrXb4R!>n~{QD!M;8L1yM@sSSPAi80nww*UlA`Y0UH}z0QlYe=-1JJt{mBzi1z(`A*EwhYuE}x
zEvmNfp5vJI8H6FVy0(a^-7F%tTy3}1Ub#I7!A)Rxon+ayBeTJ@cAAbf&hT0an^evQ
z*WHbqjgWHm79^3~j!C7?_?9pElbL173KrXi^H2&tInokzpoEGE+eEtXE&H~*tf=s>AKbGx
zw&s1L&3KnwzM7Lh0ne9A2@F7NnJgz!9*>jo_rURZl%NbU6&=A>a_23}vScamT-EeE&cu#Q!*{ti1
zwPoZ(HRO=3eyMXgDl66p2^p{N=HWg+o53J-hLG-Ge#T|FIbBQ6eJ1IU`7ntmdes6I
z`#jE}V^F?+p$p;2cYCSN7{6cE1UXqeEowV3Z=1`#uO|$OS?SRJ@<6lM?8?@bOLPK>
zGH&`hf4Akz@0_8iUn0Z6$Onkg8g+Ge#TXANl4U3h_1(r=pZX|KcC8hrIpS0^AG#5m
z4qP5tlXED5&qZ+c3(^%J6|iMJX56JXC2K7qrI2#qjP*QOw(v@~pcIh^71RM+YwLdel(d+u(zmwWw81%DM@
zf?aphZRf=46Pzj0JSt?q{R;%2qtDvKT-Iw4APEaOar=0v=kKUcQ&ww~t^V!?6x;iD
zPy#ab#^3DyfR-8GqNmgA6uo|C8e6!}_;X*|TFFsiISTV+wVud(hVl~U+!c4u;f!a5
z1IzK63C%M6v&j(n@k!u*|8aH)APzXu%3lDeuH<(JGPt2yoEzIexVbo%Z&~4wlhzpv
zeRGFvJvC^w4$5`gp{6zAAE^u6fMSCk{1usZ8a%uOKMZ;9MELLe*Q3nU;PIwu_8QY_
zcCzQW0ka@&{)3Uz!Sp@;z5EZfackPm`1m-Z>V*Do^})_Tplb0~evAYokU|b&0{%)x
z4O{ye3=NGmurIcY?ROnDwrj^8XIqEPJHqyeu$5F+_XSgD;YRlWV3p{w5d`;WGI=sZ
za9bAy(2s5MXbPLGj<6NuOi3qT|4BFs+@A%U9&?MgsZHog1|pmqctxQ^04@
z+%X)fi$gft>`K>xgPN)&Z$%LM@nUUPZZ?gdhBewv+85SH=q{9A=Fw1Io22+Ro}tqc
z%0LO>dVr}F8*kdv{BIS0Px$>UmW-aURGWIsibVV3CLai7!}m(aG!Utz%uF<~?qlUf
z2&x_tS$~C_Co*?g&v6Cb0;BTm=e_O@f0Ai}ntJ_3mjl3zl+>n#zMYD_*tIok@``MU
z+sm_Km>AS-7Jzi_6hALWts9PbwPb>+bomZ8f7p;pewtU_5xx>AE3Q##VzDEf!`s*1
z?kRuJ$RXqY{8Y5#bP;xJ-QwC+vUXoLR#%b(+~{2&I^V%82)B*pQX}eg|8lhc&BglD
za?IyeQT|+{5q%$?d1oeQ-tqMFOqA%1?6i_>2H2=R7q-)!DLM%y^F||p!TA?2=P7%F
zKrBxgY9w#RMuu;B%UM_Xw>JuF#691mr-(ui{5rmVoXD8^WY$qo&+ke<=4>l0hb`j9NTt$q^OP|bD-%3O;1-mGgKCfd*xIYMZ-YMBDdD<#CS1^Y5Wj}YL2(H6gmOC9
z)*Fe1ZH=4;SwFmgIdLotpb`V(Lj8E53Ekczb0B^v5^TNtrP^XZnu(Xx;CnxoPbOh2
zRd>FB)K3Zam(7Z!i#aO9j?*PP$930RWtgfg7AE99UH+5qrlI}qlBGR_Xl7^Y?l7J9
zq$;_9iky+w+4T(`Fu~Q0_u+SnX)=z<|ENa;Ct6%d6KUN{sD^bqa=r(023(sN-{WVj
zW`oowP&uz7)kXX*scSnGmEqdW2yZz;rBU`hl{RH!zmYPSI|
zPZb<2H4x<6EPB{1MTbKsiX`FDRA8rorh{4A;dBS9b>O~h+X;uEAyC3qC9i<0poOYu
zWo4yqthH?)=5`#juc+sdN~YZWb@CK&O7e9vgfQ9^7#l;P;i*ApMW%*QkY!NBb)4^C
zV=op;R+_2K?gjJZ&Z5$((G}9WSnMKrMqCg;pmR4b%}~QyOfd>M=RAuw)D#?rOPRV~
zn`(dQ$zb?$x}HKA&}I>-5gv&htuQR86Yn?U<5uAWg&MeJvRsyME%<68Z3?~yteRLa
z*%(XFbB*jcni%zcvk2!cW)ae;o^TRiN~jG^>qJ3O(pA5Rbd;$?X!|Q8{X9i-2wRW?BR?E
zsS6_jP59-xtl@e;)J0k6o~9b(>^+dAKvEPnUK(>~+qxVK^OZEp5$p(WX1mF&
z!cN~C(ok+O>6eShhJ>Iku6t)k-`4R3M4D#Q8Kp4XggZd$z{Rgq(bG=FdPr1Bf7haa
zNcFc{LGDtiK(6aoA!p*I?3&8JcscPBBHB3SW>=mWIR}wTUJdTy4!o?}`Q|y(lhY{3B>7SAINu?2ver;ADy9uhT+D_gk4?aMIz^%~Jg{9dF(s!BG})Ao#3Qg*
zT}c{_O5~j!9|sRq_$t;;gi%pylv*ER4zLNe+De{U#x&4d!FG#}TiUnUh3kVGklDE$
z*Y(GA;b?f?^(eB(68UkSQgG;~R4Nr3%kvJ0;g~j)HQ#1YdF*Is%dO0DPXDG>o@56;1d+To2k#^c11RfkYD!TW6p`e
z{5Z|V`ndpl?Dw?Pa8NRr+B78-dga9iXtBI9XL*UKkG&XFEv_JfNWc3%biFJ4
z36IXV2QvpR&ZAWwOv?jyD_sOvlR4<}F#(j&#yHMx;XBuATAncRh!~j{$G#BDiZy(a
zqF-@1kz8KB8hWRE__0`&hI8B^uEFCp{dDp4V0n4D?Ueu2zSh!t2*mRl7(5YU`$buI
z1*yVmEHgI#*A9RFuV-xbM}Mk4&z1lo@2TN9Xw?E`b*;x-1!~6K2X>>RBbu7ET@d8H7SZGkq|A=*7W
zqQ&N9nj|`-FeOpYLMDma@Igvaff;W@CeO(F%>d`8)b`QBLk5DACjz26zcH+AVY{5(
zM$M1TVCY74SmCy6KtZ?h$!rK928Tx(4=vW@i5lVQTpuzXC<>s|s{tDpT
znN)n$>KT-C-NJf*p&q+nD;gA4ANXYR2?{=Z60I()I;N2%#!iNM$jPL!L@ht%5$aAJ
z(VlKKQL<
z{UZ<~mVB9M-^Krg=E48f@&AMmp6eNzAm*;#M0G~N`-#oBwGv>5B$%Cii+O$A`2dCN
z?`<$U4_Tg=(h(y^l4Zg5slgBe8ah4>!3lH#yDLc*BAUs*82^D5KIuWLq5z0}e(6ew
z@m+iyOkcudb=7y&51P>&ngDGvZA2rud%X=|n+pfYj+9y=a@YONqZMeOI`gQlzMrLl
zeiL+(JhVsc9+@93X4n0c@+f6<}H2HMY1YQjEbzSE4O(D;GS)knPuP)|HG&3op>&RjiD
z3??#|=(geW_^VdqkOqrH&!-|4<(+qqI?oNjPoIJdSR6V#RqJZ{9|(;;BAZX%Hc}}-
z@RX(0(C+u3A*Ax8ui!*yjHxkP+9<9^nwO*@u04D(gU+5D)?EYueclA3zvJb;bKEq=
zMrmWq1XNUmz!Zi0iePe1gz|5EuWUnsT&XNa+2$+C9#R!uOG`)#|JNnUMOsNNND){>v`rMJ?H;TfBICf2TF{NxPR4h_bD$h`i_=I
z=%Op^U~|*v%?}KIX?1v}qp&4YBNW?<)44lIdLV>Q02*Gxt^3zbeMB2~KCiCvf5ZMf
zX?VBRtELSWC~f_4gvj$?pr+4FI#cURiM}_+?d`ZVni%$|N!T6Cg(mYl^T?T3!bmu>
zD3PQ+^Lm0-$0xs3hF29yu(sq>?q&{C(Yj#$KyQyzqKXWobb
z)H11nGG3=L=z{BXv%I}IJCp5n`<*U77&0U0Daye}Ekr-uuH`kBi?8pbEV`v6ba$*&
z2=Gai7aB38N{OO6(eiRgYf;io3vy0(WF#*3$UvU@(~(b^
zs;)4|%-JqZ552XHbsVs!Q3=rC>NES#a$M4HQu3Y8ddVJg5ey_KSi7+z)=Mg-A6eH!
zJoR>WD^bXjbu-h-NkTBCrK_n}08=t@mG*gkepFzfR&qS}4N)cSgPtX;sHo`h5{F9Y
z2bungxWtS`=Wva$qrTsE-_hqq2jG@$y|{~Fc$_UJgVNtuP_}caih;i9=t|h`BJFjx
z&JvEllxUhZ)Lm@oFDdLX(^~)0L^1dX1Yo3N9MRHJMZ9_Q#*=6CTkBTGKT>?Z6XbqA
z@^4XyYxVW&Q@2{^u}t*dip^9b2ohm
zXlls27S#Zko-lLJHaAA>s$RIkgpyWF)ceR*^uQ2F8SvJN@1MQ*P?M~yX3HUl(=fA@o-xXW>dOC
zJv?$sEGD0ODY0Lt3!j^DWS#oJc2mVhi)%apf3}Sgj;vy5UuV-aakK#P(F|;dO2Qv^
zSDk1^w-{;mUV8o31Y{yx7HHc)vxIJKax<6WmX6Mi?i;KJO5L582QU<(yVz0MxoObn$8SDC-tEPovjg
zQIcgB+U*tk;a@3>;A-6CN0#m~sDL$%CPnF7tf52lt2nkUGZmZd(abj&Z|D|~!V}tq
z2(;l^rr}idaKMuSy?*M(ig$=ttK4IZg)pg=EEpXfaW6iH{5X-JdLqV@y$hjYWR>!d
z^0K87I3KnC>V=sKr3Ju}4WbuP1ek1XZ4Z}k{dz8a
z9~k~KhNYwh*xow*Aqp^4x%HGsHy9jKWOZ;fa&!Lfaz))W4KTNOIku5{t(;=yy
z+_c_$5Ern7oEGo-%QUU$p7x~J*3sPOsP`sPes)Z|-Ns6%#UpK=A7s92Y!7*~QSq1r
zyB&PPC|ws%MeJCB`yKN7h!OG`FH1xpT>;yDHLm(G?u%WVb~}j~(Xry1QwpLKH|bpM
z(#2Kp+R6voO;;;j%3Ig+k6YjxL%}Wo7aQ*#&*uO20c)$MYSB`P8mXeK+IxiB
zYVT2@sMvePR%&l8B}Qx4-YZ7csu8m&X~YhKlpu)k^!L5Lzx#fk*X#NGlk567=X2iU
zT<08&bOHVQs9yx21f?KFeM)ao*+>2O8=G%{temM8Jutk)!ynH*!KckXjxQ^+*4y9H;?C%5MFl%In$bc4
zzRlvf*>dfo3ZEtmuSDwJ-T3#TNrW<*iw_8YR1b#;zDCMmbu#3#^Mi0x{dz#mjjHQu}ZWD{~0L+2BP9x
zzZ=cufq3)fx`IRNO?g|Oft6}^8imwk?|1T!7pWH^l?f(2dr+BQyS(K7z&Z(Zxj&*3$g6$L^r;y$ri~d
zG<~oTAk?6IIVX+%i!+bLO3m`w*mh@K32^sN1Dm%TbMfzEpHe>O0w`bgs&DCBUfj6k
z35feAIe}XLRFmi5XUBa~dl!FiHo)s*{&G-GsuO~BVu-n|a4%itA=SvRKptF$ZuPah
z>_W4v<=b7(7r27}#==hg(%S5*zNw3i0$OB9dN4Jxu+y@NoCAwc(61t=5EUhU7w#`+^u5b)`n*9J5cwKN@)XKYB1<_pFT_
z*Wn*WGvsKcbA`-Ti#bz@u%?tXzD(x~d5zsMb~ILzW-viiW3r1F=$l(2h2(%N`&hU_
z>ga&iyh{9cO+C7d$AaUk+aYglY|_~2hN0iO^x{Qt4bT+3Dl$YGKby^oTAVuu8NTYU
zTnh8iGx{rbC7l|oB*}IN$!aV&w+l&=0V5e1-}J5zFxpV`wl4=`J4%;~TxWJGkb&)g
z@mR^mY+VbLI{|G>IP>f3@V_#)x&I=fsmayC%{k7~wD|2&%k~3|>pX$Ix1j;KbR7iOLvS#ZXScLuw@{OK=mp?RgxjY3$U=`SBsC1Lnj&h0SxV_-k*LyjjM}^{pq{hCp
zV%@D`vnuz8HwJ9l-4?qO1bIFde|<4(Ba(ABCR4p>gV6^2$&)1K^A0b^^wN%9Scg+iMTK_qi5p6aGm~Z(
z+#2E+I_IBuPgpY^*j94_N;I#xiK{v$Q1`x6|`PL&lvDzqQ3+w#Zq`!$zb0vxnI!K$d0EzHbuk)-uav_Hhb(tHYuTjp&T{d%x)zSS
z)PHMc)QT?4LXX7#Oo7)|f3;)x@NAawy_ySZ+LZ?Vl5u?ei!6%y>U}dh!Nd*@Oe*qN0D9m
z<@KAlIQq2mqI3PVV=TvQjE~)4k
zJ#JW-?dNKaZZaLv;-9TK8PEP{Zak6o{GKTEt{dwfwTk2X83^HAjr%|rS*TVmBsJO~
zBRI!7$W+wKt*@Z+wU7rV|b1e6IP2sB#gFGm_dC&R#>KZP8Kz1J1z8i#SSPH(VBuAbF%eE
zlvd;kN=@)SN5aPOU;JM_6@@0-H@?i?k>O7_EcRj=DemR$@{Gn+b1B
zz?}uRFU)Bnnv<+d5Hq-hGp9y#qsrq=n{F8^UhxF2dB}ETk)_i8IQ8^C$Fr=kZD%XO
z_5^k>$yE6Dz*r=JIXOL8S6iiTDnI~Pu&G?}VcoH`*}BLj-D$P(2TlZkFF}MY@lZy`
zc9&4|Fey4H$hJ~aJ#lW%KN!-!AR-NDSrow3e0`8$hZquiI$}K~f-EYtpD3_YfyV^R
z40~8m%|v#orJ_mA{>4USUq>Q8-?C3WfrTB!Q3x9FGdx=h6Q1&+h
zB@H<`MZz~8I^In)rM-W9hI@kjg1X7@?VKE?<->o6H~uLM`C5b1KQR!l4#G~tn6TJ+
zEzJ4SkXl+WyD|6^;-z(ih+r{vu!p!*wBgkr)`s61#dEE#POafkM5K5DFmxn7*Bf{I
z?A+3^q>!O>62ICBZ_LPm@^@d1T=tH=2WlMmRx{UR90$^$GlCF=e2`kSqSlU0yQu{q
z18!jBZ{GY4JXCQms`l4j;7mWs!+=_I`Ta3kdT;S;zu8h$F~@*9s`SpWnBI94RK%>;
z)#VGQ8P|dfW+3qE$Kg@U=gkXy9o>)9Wi+U%xy0)A6!ba!0PyN5mFN1tGp)Wxv%UuN
znnKx0N(EsPAlE0lyAEU+|yV8Z&p38ec8MaTlfn-0Ex$9XQ+AKHs&0ffCdt
ze^>==jAvPftvI-U;&x=nO^G+^^!56)dYhV6rY#6}GIe=5=5P`rp+E0y^xB!DC`pa+
zjtaG9+k8+~$uOKbh`%cUy*?OGKV0hEz{{KzeJerKn7OOQuMC~AS7W0$QeIvtRH4~e
zs2L3bGEx;rHO`(ys%9ZvL(rSO&Uh@c+cN+?c==YQ3gc0~5H&gO4`Xx?7&Dm5|G44s
zQBTErRNcmO0f&Qo8E~uXKWIPwljk0$5ofQgl%w{O4M@}+t7^WiazA6E{@-ytoSD^s
zz+0!Z@&|oU$jU~6RJ(U;we*SR;$XKGcBd4ZRKm$tIv13V^i
znFY^N4;8)C+wb72lrH4?;@_Kad#oy^kJ#6@wq~1WzD*c*2*3?yjcfCx%e?b=l=U>t
zm_Sq`kwv!EzJk1F@8()6kuAuFVy~VSvRBa`eEw0@49SUF-f7tm3JVNmD)a}^sRsu5
z6pP4(Og9{{yf=I8Yygj&&2UVUo7fpQhz-GXEJ~uD!izc8Ym(^=i$rFgxL5Iw_{;~S
zO`haEXDY^ZH3o*oTsanR*&Hhl+
zt(V3^&LxI6cb@JmcA3IWM$dv$fE4#^&>bzv{b$q9v@i&Jpw3~AVjXQ3bD&4TRfMGsHfl0e@-;xCxiehTWv&u=cD8YF
zFr~qdg5DiDZh>I(hKy!2i&j3f7$RKf{W*J&LG$P3Pt>Q^)`}4R`}r(7DSv4vQ^W{{
zFh&uVUXQ{7Q8dAIi>yeg(9_j~zNtDEI#pG2ZgF?&5ib~mFALXQp}?kiBuHl4R3E3F
zvEuQeG!8HuU1M$nn#t<35qW6lDh@sNgO!wDS1mfaytG{R2yXMoZw{~cOgDp&Vo={^
zq^knOTzPMujMOjYO!a&_<@{UkyS>HKM}L>jMU{UrR(ay+q*^4T$6`~Sv%l(6U)k~!
zV1QMg7HL*-7VBzTYTwEe6;q$?R4e_fH3AIj1}3tB89qE-HDlq8*t3|vDFL0hVqZ}HC!yyV
z{dc1wnH$PZQ8rY3Dsg(6uV$zo
zmQTyE|66YQm!3l@fUnG1=+k0tk_A5$75#^z(U-(5zRgOw*L^e5n*E)9hp<4jhgAN?
z*YPS2J0Wb}_JB>jiyI0kDVg8C%qEvtASai=8_DZm1Fg;M@&+EU*mZ>cSuSA!;zven
zyHBPoYh?pY{|q8ulLH6cg9&hdU_h9s=ag@CKVy_jX6M1iJP?0)yV&rL;9#3+bpbHw
zuV37)sKx}^syROYKDb4rtYr6Bw%)8~bpD_R$+@dqM6>GEY(B;SLOE48>sMpuN0CML
zDQ4RfJr~Q%Zq-!G66?l*VngOzKnQ6pY!ctaP^)&_OX$Xrm&DbJf%q5@fvv6L
z`ysIEj^4V?khQJNJmyw+WE%vxev*{&+F#o;FaSTEhe!+PHh(rSx3l~>ZF(#OeNGeI
z7eP~PqQN2kh+1XMMuzEw*$&`%l~dOvREEb2va+w?@2*|CW}ScE`%j2*uQei_gq&iVk7Q!)~G!Z{W608kQ}oyWkR|K2s{XC7)_
ztmtK^7apiC6LkLDH=pyKaN~oxg5wugwp9P${%SdqF@?e?I_0v3;0<)>fp=}NwaGE&
zSnB!xyy8mx*S5cX#CTOCZ|)dXK4yNTxITN)kTUKx>%ZqWFB5uY#?2vY{-kBWwRsMb
zJ{MA;sZtwufD?B|F>)^W7$*xOTaU>rk?xm+;!6;mt1>TOOhJ&z)*UHzc9>-oe{h4>*_-?}G#dA5|wZUH=Z^8FC4p@SB?dDIQzKZ?DmHi%ioHHxB&dB$_eE-7q
zV#_gyA#DF_K_+{qj^zK?1OIjsNIzJc<6ksh@
zHZwwu$B4}2VdxQn`lTWEkof?u_}J^}`K8a&6n3YUc4eXa7CK7Bzf9E)xd04h_Sr3S
zI~&h{a#rq87{6Sb0jHGUzy=ua+;i;uz&AhuxLBYaUF2!a6`7a~WrUXA%1{4U40#JZ
zrUUsD<9M}3Ibo)CvHnRYF;~7CY>Sp{oNZx}(pnL8*G^!VH(%n#>rFArf9f{fdA&}>XC-hVT=f;3t!uSqh9)f
zFf-*95qK~PB_-8KTwZ#so2l3+{?N>sRjwcm19cBUzeZKI+%X$a(ql>M^2W?f5Zh}*
zS4t3l3S}ydrH#0OB5wN-#H*j2`8I~;&!@QbiiX?9yls8hf?tbA*rb(qVHax*`YnS|
zeqV6^sXCt0aBezEA)xszkAQ97>EO;Bah(DyzIhnZZKfsP=tsJX?xxs8=j|F?M1Z@D
zMDBRg@zU^s+t8A8h9sL9X2Wgf)|rij=Diwb|9aEC3J}$}L&^O$3q!zM>7r6~^_01@
z(E~{O#uA~$jXpte*dy1`SY_dWeUAm3lZQ`he%8pV?gGAFLiKdP_}Hs{7nHiypTVg7
za&gIjoY`)u?+bOcvoy+o;LY3WO~zm>HCIuPxcmMc)wo&pbjK%ay&k5VL2D~*nxniQ
z<;^{vnr)ywLUApxBoC{dTld@?X0t2C
zNA{4!WLt?`%@ccJou(SlYjHETd$LFMmQ{Y{Qxl$;jJ+zoroPU{=$aVmUo2r-tiYyGI^2u>t6tExP})-gssLHW3Mw|
zVl;Dno8MCDP{!5bH5h_Aslrw)%72Q*eZ?W=B_t_=^jn0DPusnLSr&VU=RP_MeLt{O#gK)Q3kCg@
z$m__OvUHlwFBgc$T+M`CU2$&EIdW75k^N7fEA{`RF30p(geg4P{o-TK0d?Xu2hGE|
zMH*%69I6ECY$iK@c#W%VTJd6ejpqbEy4C$r&&hON4bHubuodLq)8h>LZf?vKwVczj
z*8u`O&s^*4>*_MgUT9KN?Q7umg6hvlxi(hLjjIm5Y|AfDQ8#$ehiWyHJ`DI@Lwh-M1ubA)c6x~j1n&LP@xI#-DIq4Ne=ALZ^u65$@
z*aE7ARj+zecX7KMFl05b2YJ#%ltvN5uK2Gu#Y6wXR}g-<6$QZ~P(kQC)iMU$>_A}S
zZ#OAy^^}-SLw~85R<&Rz_r{wK+>jb&AJDuJCel4yGl#Lng+Y;`cZi)sfL8V1{b6-O
z70jC?u|X#xGc(;{cjCCaA810t^^Xqu{r?)K|JilKL~Aqca*7UHk%Mf{794)DFX8D|
zt9N~kJ?AleU`8j|^SjB{Rmj#Tu-?+&m3aP~x_MJIMH>~2A#$e_sLnsP`=B>W|ynk&R{zUYvA
z`bg_+E=Z33-`j}_TiN`~Glwyc`Z(=2zq`|X+Fgxl!3O^Uo=-{x>KC8Er(%FnEnl5Y
z+*|&7=S5So4);hgmu8#7{!b#agG?OeFXkrr7@&J#7^1~DgE~4}05L$$zg=yi_cLP(
zx$C^;7=KJ;uLeKz5gi0Ys+Y@U=78WvXI)()P`BPvr%>x8Q)dKkv8WE%=`D_BI%Y2x
zYYI8v$!Oam08@F`-eHL~+bzBZt-gO=#La$X<-Fy*QG^G^rt0T>Y{{N2&NfU03OqD^
z}b7_7!BQe27ry8s)gW!ih~KX$2)S0Na;J}Vx2j#e{uMxK1R9kOd<
zA`a~st#&4dBziWRs-$mMxt!NjLz&5Eth4j;@?MC+2E1MyX=U2+uABRNdg_@}H^gTL
zv1N^J48w2a=~sN59Wi|*WrS_p-C5H2Ffn<5b%IhQIA=oA(
zLStkQ-tDfJY>x%`Jw2K1^Bwp8<1LYoSI+8syj}8`5^d&(JU&|kjhx_=Z77J<$P*mD8>A|hv?nLld)#2%b@-+
zU3PammQ+G%b*$Q7XE&et+{C9J{jPHHwO!SR&Q+Jmcz
zA9#~&s=cm4@-IQ3iv=nO+XKlHI1|G^$EzjpUiciW$(
z{&~4HUYB2QgN1GF(l`5o>iO_zi}=ze8B=-xk(sADc-9V*;@uKFOIO_Z9kN
z_>GA%Y@H^hBJgiFPhgSRx%v6EI`gei0t^oRIN?K0#76rfyhQ#`l>x$f`QD*xwP=gsC*Pi39
z91r4HbWa9~NodPFF%V-HQ0S-m3rwH0XMYV^D=5kL?$XzfL8Jhm?=ZI;&t5LySNdCc`z0Y0`2&=(iwV(**MKkxWZe4{ONjd@bLW=M{~Q!=ITs4u%3s|sW)zfx0@QUqIE
z5vR+k6qgDo(!c9sUPHj*g9WEdHhJtj3`s!%nYM|#7C9h~V*H@?W{?VIFA$YLFZnP($
zkj8etEwuh5BK4?XNNy3c&>G|H?ynF4{
zj(tyeXh_~6kFpZCK)fq{{V)4m{b!0G>~Ki#e1$u~*PA7ow*ldfww|bZ6RpPA!8OR(
z`ROaAgin6%7oM;2vE}b7co-v`Z5+<$9+wK0IT~j61G3Q{yher&+EBmU{RnWPUn9b*
z2jU;(Z{o!VaAaKS3^MULJ1xRn%5;$y6JT9x&kTSp)Hs>1LhRAMnn29&gxQV22D-vG
z9>?;1T0pwll57$8;CpUiGLq657#WES;5vIDj*s+SGn}}xxru}miJ?6`D3>hPtD_zD
zMk-gt!zhUM)>`1yQ9?N7xL%J_A+^2zXc>b&1NUggaXgEU79y(7g8!T^K%SHnJE?h#
zGJ}!%#=H1!w;yW~ab`zq9J~l{yQxSLx587Q33bB=id%5fJGZV4Ukf+jE_Yq~AsW*c
zK-jNVgQ#UbN)PoG4!tjXMIPtvntMw9^TyYIBabR$k~c9jGMa5IB#Dhy373ynp(J~y
zR2p!$es*;dhVQWg$=a+~_eg7Ix`DL4s@g>o{C$#HfH1$%@$*D^h^ClDq
z$IRo`h+WPdv%>>1*bs@)i+wl@(i()@MEbDQpg=vrLBw+m27V06QB^A`=PVi|aO>m~
z*TOE=3NF@*GJu6~!Z0M8JJt^dBT6KPZ{~@k6=K6VpOt(7?4~Z(ykC~#`24txOl6&=
zy%cLax=}QwgQzKpv3{05lIxv4#4*wMkYe=Hrga!gSziE4N=#QQfQMso7nG^&vRE8=k#XGaLb$g*pbYm)3YPT64?IH<0N@H!RdYC@4(EB_&2ON%-tn>l8UE
zYLeWXmjT$OwhpZ`^-Y=JtJT)Y*`hD@P4Z__ph}D1Ifn1g9&1@APWigpE*m_xD88-L
z=#(kw_t)NgsX36W(^1Ly(pF@rM_ec2;3+Ts^e#fGho)%WDx@2+B!&N@6Ta)ef)n5N
zhMQhJ-dQm;`sd7I4gO7g_xF?EXyotccIlo_sgQDxuyx^!>?hAZcW*V@LUBF$x
zwIrm22Hyel6l&|l?ek(Y
z-e{yY3liHBU9mbChZTz*~Jo%DJ{q=lqUM=wQl&H#Y
z*?D%ZA;2a4?F|J9s_IFwS^*o^XXkq$qkn_#Uqd$epNHcY?1d3uB52=TllHrJhdvD!
za7Z3@Q3hszpW@Aj`(T#W_uWZgNUUn{wy&DXk7!vRzRs(yg99Ov{r8SCtSM_eab+T3=}7iE2F{8q<<7QKE*GwLbx>g^i3wfc)5wLReBig>CU0=+clf{8K61OC6%tHstTj`x-lskch&n|UJ1
z>GKzJy}H)NBGOwhlD8u`Y!bVzYGK`?QIOobF^VH+JFAq5-N7MAT!Mqxu&agHZChmy
zpQS8(J_vpmB<>FrLifG2>It2x`Mz*?v3s=O)hyLxDhu&yF>MN2dso(H9rpX0gjC}8
zUmn<(pthBw8uENYdrkFh58Nu-9qQjMr-$Y9eolBNm7)^bpb>IHtY`(dnGt30vFniv9?hn?H_;LC?mHA
zyKY#H%(vyPr
zaudQrXIr`lqx?PVh2EL|c!W%`nP_q0Q@xe5fKO<^@kGH#d7pY&KIGHDg^tz>dA)h9tK~
ztlC@799oBF^DpI&vB$D4sKxWq-v$NEwX2q)$8lp4$$gu3>IQtJCJgqY`z*2|q-B_o
z)N~5$w%21w-%Q1Rl=Xf&4kQzH3HDiP)UF^Qdqet$BstIYn!Z`hA_H3(b|8VlD#VXn
zM1ahP^3X#k=OOKEb>zRl7=icZi5)b&Vc4of*NC`Wd8e;2W>v|kRQs=Pfi;`x$Csd|q1TBqYrROcV{&|Ve
z?HC(tleokYFdt~x@FAj?g*3&*(tF9>pOR~g8bouQE(g587wy>D)w81ibBrTZ^|4dD
ze?90$7768NY}eI#&-sj8;N|YE!o8F}v{mO4D_;2Z5ue!QY^4c-$OrdkD&t+Cdij$@
z5)JGO^tn8}u9RZCGdD_|FBeKU-C*77BUx#C;I*>Z!UOahqC42N6Cc+0oH)9?BPEtFIoDh7~9Dg_2JLJ0xD$8aoSE
zp4gcGHCpB`)`I@hx%PvfZED)7W16CLMn9^4Son-T)w)Gu?)tcyhJ<8NCYVO+o>tIP!1?tYW$T$>D!ax3_3`%|E1#Zk@tmLqA{l^Ea*4~(AV{@Gv^)GS^V{e$$R{Xov|(YVE1DE;^IRB%gIb=BY!3XCgWz+
zdG}v&b)FT58|~XvA(fwfU+Vf;f?JYdIO3?!5>aF-<SCG|rAZ?t&px
zhCD~qy*$-uEHqZuFLt@Z&dYSztkP#{t-1)KJ?8@pP6rcL+j3n27wfZ7=EOR4k=V)e
zN&jl^0G82Izt&bf&UDZ-fN+TE6OrRwCh67mnx1!egVh9`tQR_m+z+8xS=cyhT6NS;
z@N`4$?_Y-I+{<=W6i7`^xRvX(VuQ5Etu2u0h&|x&Hzx62))Iay44|MX=O)*Re51Pb|HVsMc(;@>hQgq~t2S^-VPC~Y)4HCpDuP9%HqWApyf56=%XE7s!Iu`wp
zSep&grup`V=Le0n@A?e_kHd2U(VZz{?c2st0y?*@p*=s9P3eYsEVYiO0X~bTHK6XeqdH-z
zUH>63nPi*gA6mHJuvU$B#!t_NmS=U7H0kg3Q+?B8xNIVi>695KxE>EUCW{ZoBdJzqt<)2J@7$|~P%Xn)`DiZl&
zbhx3bL&D&_q+NZ3si;nkHmgQ!eL@R6n
z2fT5hAS)#UpL^Vhr?Brr{>HjtUyX-{>q?7X_88qb|2L-RAr<%kM}+M$UVjJd4n>skKVnnsw-3$DGS4
z6*EpvI6L1&T8H_3k(8E1viamE-@sl({E#+6-XR|z_&`7Q4Z_9N6%qUHfmjB>ES_?L
zL*j{3QNhrzK)8Q7Uz66KZbyc0*GZnN;n+f4$bDgSRxOJ4Bm+QBsi2$eSa3h}>n-nx
z(f1T0IV2e5gwSSl-o`&Cv-1Q(pUebko_NYF7Z7~r$qbs;mB)U6`jyH+p??&YVXwoA
zbUA^CS{Y7_(V3RQTo;KhvGpN=XAZuhPSHba2XLtP)!x-%Pw4sXbbK(5*~j$Nt(v`#
z{RLZTSu;&rDLK$1e_Z9fyLZk{nqiV=&iv?uIf_TTnbwcA-;7L)j6c0uOgff3c;>+<
z2J#NA2LJ@+i;Q40plaKr_Sjg@Db6_hn^g2&H?W5NLc-;am`4(%_v=12Mmd1v5}58$
z@?@uHlY}!t%^0>14>nT5&QoRth^zcp(nc*PvdJFk9$-gvwjFytZm+%*AnIfCiMbXZxfs&z7xDK`79x;rj+DqD>|Og
zWwxIjwAUg5MYkQIW5I)D4i6sPV$5ivyJ;xwY;7c8;`R`DvAivUVX*3wlEuiKFB7eq
z21WcqGyDuZIr`741e+w$^R=}`3q@=i56d8_!MO&Ag25Wc!W6-1izVcO49;moaA#q`
zj8m2RHMP-{HKI!XT6nla(C^=F{wgh|C+*?Re+uKqTwDeyNQA;QhSgZUHxvQ+nqR80wbxJ8CLxYC^a8`S_+K_6KeI>()#6WOz7MqkhHG(F+?`mn`e18YX;Q
zRD`yqzz2rUyYNe}p35nQf~yOUu%uY($S&#)0nw0}e-n2H8~5Kji9+nD*7@$F5+DCk
z(9!OFLDIPokbLeruLesX#A``JaAI4a80L>4AnuU0Zk^)`WVelpCRU*#AwABBd?sdU
z$3_&=!hO^tfEBAG^E%BYo@T4OAtUcQmfrtj_-Iox5>7qvARsi&&r0E&`g072sd@OG6Arn3Ac(QMMX*HhtC$a2WA_Ow>MTUPrl@=!9x8F|5r)JIFbBg
zno-HwBs4UIpREbKs&ZR8#_Td<5XNYZM-LJPW>hPU7#`LMe9G1pB&FMDI9Mo3AYfp%
zR_+$xlo`G)ON>L*5(Xc^+}MOp-k=;-qwHH;r8;r6gew&@U|Y
z?p2WTvq#sPX}%Zb<{PF9xEQL8lhA4>VDbWPit_V)H+#LOd;MpGXSOOk%
zHtFqNo^xxGg+1b-6bWa4)vbFhqsy`V8iL6Yz~GDB6F8h5>;%*uZs$26!>{=S$%tv0
zRzsJ|T~}6>pj!d~1_eVacEeK!DA9xgK!BHEDtqP4?=-X`M?6q3cheLJ4}P^7I*W(L0$bbc|6n=iPc61)%#zr-Ub{(mI&
z5EU((jU8rj1D679sDk-K4d0!KdWNy{@3zb-{CX|*HfcOZo4pR(RWJ2Y!qnAHBNWhS
z%6DzKF0XWD(vSGbLuOw;n|*S+H3Y@qVK?4{M0(H;-Lk;s-q4@U)Ocm4kQn0MVBtf@
z%&@hO6y*sN<`BJ)`^A@8jfHmmCvSf3gb?}o7H5uS?q={f4-2WQxMf+_n?^1F2(Lfg
zdhq257M#!MT5rw|1@i@e!rN_9M8qmFntK(;z>AFw6K?*ER2-R)rD3j9H;Q#%Onhgp
zfViy_derw<3+G1n9Ut%Q!HIjDm*7TOw`A&&g_(moXbeQ+u3&|Np5POEGqu=04lNk+
z=wuJ+Dcm8CZ}q=gp9p0N5vS_2B3_tK)rgvSjZ10_M`Luthzsa~ux_LqLOCqd_wr)c
zjFi8)9Pq{^`Wx7Rt6W>N>dzOoe69G>Y;t1~c7V^z7YRxO4^
z{1alw#`Qi=U@{3L$M$)q&frg_BhFi+9=V`mMq52*bYavTi114TgHo5d97P2s1@~|;
zyZ%^O!}anQhf**Jk30o{%z-C-vV}NPnLrIZKSf<&9vH1duWiK~Wna#%{WroDSk3?P
zu>50rk~cRw-_LHZ&18(O$=pFGPNkPQ`gQ~c`m!QaB-n&?)-Fy?_D}ZDW7vp)CN3B7
zbM=JtJ)(f--Kob^Lrn|rcL{=iUbxM@0|~wd$VOa33x*A3nU|lx
z_XWkJE!a}3`^v0pwSc&QznWqT`8jyHYjeEbg+sJLIZtLsTm4(-(K@VGM>=7FE#{f&
z`}-;GOP#Rx?z}@Pi|Z#^yPF*1p0pPtEM?yZ*^`yw(%~}$!??1PpVQWIJrEpNf~A#!
zg!zjP5&x<(%B76kmuo4&3-`;)u;A8(OSY@os||^}xk8^6ZwTMKVTX=%t7%Ped#He0
z9mrUdxHxRg3iI>E&9DXggmy1ou^k>mnE^SaKTi^l8wyH~W*G{)g7Aw$S21#zQw7A~
zlmeiX9q%*ht|#G?(LC&T$2i!(q*QO%T9YYc0_+4DYcQ{#I+4C5jVdfr8#hxb%~kkP
z>Zp)N8y@*-*tF1$f`g_vwO#$U*s81)TI~+Wn2WXzm^dBb&HDAu3-QOa<(d@RmM|T|(xpcK7UTfI{fi!GgEvGEK
zmXIrcs^i_W!DdF-h{Wp+%jW~YZ82q`dy+@XX$p}Lz
z9kF9pAt8C2q^|VR(2>dT=+}RiJLLA2#wFB%THr+Fer4@pQ$`G4>eMaG+4LB)93&pV-oV(N+
zgz2(+vAA{+d)Me;+&A5ClTd|RjqVVC!UYi>cBm?Mev~i)B%U!`m4zK&HHB?wg07Bs
z4)@PP`Le%F_JxMY>{Iu73Vmm^Md6h`=*JhUP<&>UrKORQS0yVQbSj|}p{e6jlK6rQ
z^%&3Q;27;&k^`g(l^zHrDdbc9$i3ln?NK_peH7`p3d&6H{8C4^AI5v%2YzBsJaRX8
z->JHPe-?fx?eV;y+D~Z!R<`09&vTB#2t`sr;IHRflcu*`(ntKH>s5RCjj9O8pD#n)
z3JUv!6`Owp20O6I-=Y6@W2T=N6Yd-(n0F9`@t+5REd|3jk84ZnyVB_Rz
zWde>Sx8m-T9$0rzdpma#+hs5H`5X$HjFTxE%E+MS25Q^B5}Lp@Noqg6uQ$`|REKgm
zc-7k4*3sZwhBqOEh#p857h
zckC;>U#H9*>>>W1ATc$^>k)@Eo-n-|!C
zMA2g_E8&@dD=(i7bgZ8{|EZ={|EY_T&jg0p$8WiJ7#=1
z5w`xiI|r)+18bED%Z79<2qFx@41fjrobB%H2o$dg3^LMdzRE5&(`SvgmKYyx%##n_T>|Kap~=vo4Up?Y01Rz!Zyy%X7H?6+d7xahpU|q3oZtHIXDq?uvY_6
z+N^Fwf=em=yH!sx;mpM9y0m~$6sPx7ZGEvP*GZ3}D0@}e7%Ddw9IsU6&LZ)0ou+s=
zbRJ)Eae6RQ+kGmN`nWL0@xWS!B?TeGebn3j`AHDv=lHqQ8%m@!Bs4D!9dgTRt$I2T
z?k(bYf_2z$#GW4>%HMODbyXR5iMmXXyXv|0zpCvyAFzk62t4wy+WGbv5PqwuE?&+0
z%NTg@*+_XA0I>Xiw$`osNkNjel1*ylIc^C@_g6TWyW#f6UjTn
zXIrt8R5XvIVv?D3Uc`Cxm9FRBPjehu8@pR~r=FvA*LG}~B95Y0QlA~5D`+2G^7b*c
zL#d?^$+s~oJta-LDUxsBqTuoo!{1VWL4vVGDQvQ#C$nhjcT~$Hd9?4|yx3h
z)A+BD>m4JJH@Zb^#D~&A2aqR7>qhI%nVA`Gv`$COwU3f$6MmGd_)w{1Z4F=Ick5P9
zR;EMffke`+a8r*Sr0A3^so<`<9b-o;N
zxrlqzuC1rw@~}1xw}0Mk)ii+$+s{Kh@^?pBpt_bUENT=SYTU)n%GYVNAmb35>x$?s
z``Z$kj+(lpvIAl=L4gOu_#XVlzy=bE?V6A?v-v+5Fo#;E2&sC28%d5jCRr
zXhqSqV((pQkJvS0D?*hRwQ5Vv7L8T4N@`VYg4z^SBWiC&)!Xm$KHul}9>@Fd{YQ@b
z&h@#@^SnOS+WD8wfzZP1)}}(74}y-Vb6mKMcuCjlECM)%B)>6&*u}mZwcy`pe-jS$aTFzXSv7^u-+68wOtPvkjD!TvkTd+>v!0Gb6
z)<1RDVnRTPnoa=fZ2RnQlvKgZHhPhBe%>K3F=XfR3>_Mpd$73|pEb@(?ScWDt7~dg
zf>X8R1AXxM#-1N+%SK-@lSIAY^K;*xHaw9&-z=*NYdURTneGfb7`mLEE<$sBjpmg1
zTMa#(?iaNTnd=^w(pvCSm3>*<^If$U;nufu{50SsNYX1-ymFGi6m>m1Wnj4RdvcpV
zmnXZQ6WETnA}{ed>)+rU-zLQ`tw&O;P4x!2m`zHz#4O9Ne8x%W5;o;zz3KCK0=^3=
z#eYGo8EeW{r|GM&J_0AA*Kr2f;kqxeJp-}fl2THVieA<lgdm^&Uj97u+}92Q`o97)@6L9N7ri1SPMDPNJ2E>CRdQI#H$OYx-0MBF
zm*v2f9H~u4-31pOCr<;?E}S^xUoP
zj_rJ)`whsgWOSrz0y|qlIMCKJoIQvciwIAT>x%ArcU_R1tN?#S%z@A6kt&En07XFr
z50@j9eW{`V+EPW_IhmkLa(h8yX}*A9Cj6j0rDSis?5|u3S%E+xTG!g|s~`b~v%9Q+
zSz*^B?2>-y!ET1tzh}VlU(gSyWgIv?UfQ|XJ6$^YuIIO5|>Bi
zyx3lQVA!u0z=v&F7{;Qz!Usp?*pGqV!vWU})q5j#k=Lr-nL}pN266^pr+#XBd=jTb
ztEGK_<1_NAq~^wyvUCkoXKd}|*D#D58a`II{845iYL$iFsJQ|Ab@tCkRz@!ha8Z1r
zW4GtpY0jhT9`w6YLsMEpr}bVSHLA@E@ZMX
z`bsh}Tx*6e2zo~!X}ha+!}d_ijmh234gr)poIm~ER7p)#lDJE*M8!)^iKbcW9Ybst
zXp%#y#QDqJK%dZioZ(upaYD=`
zB^rA5g}}R-2Nwi?$yvE#T;pCr>6XXw$?VN4b@%5k27>AaZf%bT2TmygK~SFr=s--Z
zW(Sxlda3tk4KqK#Z9Snmx6h3d*l0u;F#bdpJzpCSUkTKQ=(L;mz&XD@L`IyLl<2Gm
zYA@L<1-3R4JRH>ya8<;K#9TSPh`~@m9EsT^GGOMlNJeuEP~dYK|GmMbi;JzK0`dKM
z9T-W1r|E7j@w40zVe2T=|0KsMEPNOX!eay)fm1T1vvD)Z?R)oC?D=S@RP42&%GU8y
zn4-1j0&WA)Mkr(=?sS-LNqdlYv8pw6d_mam<})|lM0iQq$>f8aMwZ#F?d=Zw`8aXQ
z*Hv*3j0&kS
z&#TDc^La^MIn7B=*g}NoDg^(QvkW5H86Fa040@6VcZgAibz8B~U=IP-A1eik(gVel3C@P4|p
z)X-l)UR1Mp!MXzcS_TyRN;W#4rAH%QKB>y!-&pAkFpf-I`gHE%|81-NOL_>b^G#{Q
z2}=&~l^rT-Sd^Lb)5)K?i{q_HkFgI~+|n+l6sv(0zEIn>K>#(Fky7t9S%8Em9d~B6
zr^JZ-OB455;UJ*H=y!`gITGP+)Rd6fq~y@-++OP?=O6dpUUtv){_%JIQ=NRyFd+ro
zoxgvchAwyn0)_g7w3-PUs4vN+r^Xjy2ZaPF$GO=Axn~NW;0sPTM(V;NuA+0dcXs@v
zBVEi=4MjOEYO8-fk@CP=Qx%G20%X9_kB~fQS`
z&>rpUI|I&BOe3Kq`n%@WOW%zoMFoCSk%d5z87S6hxnhW3@kIb(HdXv)#*&nywiZ?k
z8{M((IVFkq?9$|}uYS3)>L$Yx?K~u>5|>|!umu315}Knn57MQUaaR*>&+ECeoKyAu
z_FN8T7Je4E(66SjZxSJ=Az-nh4$
z_JN_-nt}?S?M$`ngvkYvfy3LR+hfRYJTK(qy)~d2&Z|@Ipi(abmsZif1#+}uguSh$
zVlFXppXAkc){Gw1T3x&cd%3h1yrU4hcj!EN56RF>&&|S(H828F>LA~{EOnlmnVxiu
z4?1LC>HRzau#OA|-pPPssS?2M<8>r{4Ns{BMq_Ubr4LI~!@XG{pAT-u4mD=SBRl|1
z>^pLCUH}EMiVl%#)UMi&xca-odk{&{C
zOVdJzCi!(1!uBRF>m~0{{36Id|NrEEMjL10EJUHk~Msit#nGCr>P*T*RES8Ap
zS=hM?{a~Jr4OCHEsi~%snzVATvM9cQ@yn5F+1q@|Y5Im~
zgR}#~;rzhiM$ZAsLIXo_DFHx!EY~n{q3-HLVI0)?)9ecL_xj-M`NiTrX3?t3N}{$g
zii${_Ea^YGj<}_-xz1)X#tJO*t8?R~L7Eh}@GR;AtIG34g+HOQ{-eoh;6;B(EpXWXqU+z9?sd-6
zf0LEgAPaNSCG(xdrgqf_8nBHEo!qF}h3G!qwX_lL9lca*Ca2CLEGeZhg(vAUv?2*b5MFppv3^
z$P+y;^+tlpM#|};4{lPMndKyrWW(~cHYX)Ae|0?Bs*-5j|4PkQP?5~C?t(d|%Cb4=
zVDVg3TW5$+>|XeQ2-8Kpn)~ySK;SsO2Ok2xM^5?<7Fr3-5Z8XJZnwl2op9*BMvsam
zmNAxyTT8YX!>hS%xeKY}Wp`ORIfC9koJwUeq`6a?RiLOsJO`kl>R8nJ7YRw8Lh-T~
zmH|wM56(dR#-q)q?dcz#XUp+fBncf@Mq>|K_tGMB>uDkNuaW4yPXWh5$}{~_Z%QMr
zLQYo?7M`V#vqJ$=A)~&xNOE*&?8x~P!t}W8J2-ycVuADIzFX5znYXtGtoc}QUTQc2
z1Mev*hecTudk{I|x>UCyap191Efxrak(J3JfecbWB_1vV?qPdn?m`0{7r1!PZN*pR
zKtNIq5C~ucE2L_YgTyFdn$C~8dNaiJz)wS
zZwA{Xbn;@rP*O>we*Yk$-J=Xd)?;2sug8-3w}Zur^M_2T2>%D{O(Vux32
z`HH|NfkqGaAY5#x)_-j(Uo
zm2ovd7)$h<)4kJ`B9+91rQR(EAKR)
zy!2qGi*dg>S9ss5Y7#G7^5H@8+}`jA$Fm!X8_oP?Tr%D+QAx1@j!~9k`HEZs2L=Jd
zH!KnAdWvFtzz%TlV=c%qfVSO6lPKrO^vJw?neP20szx2k+JWu
zY@Gl3y*|=k6-v$rILzzZtU+%VET0itlKwU4pUc93*)xB{HqZr;gjVJjqs@)egEdm;
zzPI?oeBnUbe3JT*k=xek2Xw^^?=_Mw^WuIID&cwPUi(O2WsOK~b?b+#=F+mR!6$FmjwVna($zY#}kA3U`e6qt#068F1M
zyYWpb9x9>1U9IG%Llil?%aPc9PRKd;-|=%78l9K&(b5r&MOYj3e$LlRR!Zx2fb?ZI
z0bKrdEs1f3FL4R^D
zaxMwsm*<@F|8wc|G4mNe(oDO_dt#n6mg(M*km63u+}t6R{)@ZoIjlm$ykGW9jMF;Q&nCccx*VLdi#3#
zhxAlOw&p}98Jk{s4nA(g&b&5m+;$7HxgR=*L&7
z0&23yWLcf*Wvl05zly*!t*4!$$I%s@xjEDjlM;TeP#HJ6C}d8w*Uon#=6#CJ8Xo(8
zxDAoLC|O0vrN#6#3K191@>z&=oQzSJOZm-@W_y5PG7#Vf0?_G#0bs_#d=LdvQrC!#
zT$~app?gKZIsr$6!BgiH6vN`M_(00Uy^$qSrE{G<^j9#)=AX)EOFIWj#{cGwE{p!9
zQ4Eq>$TYrtNsRdYEt=n*c3y?7U*AU;z=cp0hLhfmJ`;G++-Tl~vu|y7RI{cW4u2P3
ziZ>9oj&^1i8#s6-x2?F8gKD2n0^qJVsC20VBlzxWBs2BEqY()R4Lxb(m+v=u0b>1v
z`EU3NOQWdZKYgZ%yyQ?>;NswsyrZjG!($)JMD5e+b@I>CE_1bmseRMaS^i$Fvwshc
z83TZg6KugcX7RDiaY*x*82dp^4uN377F!r0Q5qlZH9-D$#K3L#ZdXq`CHl1$&`DiQ
zhWchfL8&Yc0!m62av5$Dbg?%3GG?%x(nBT#M2Ya0EI0E%ERN6D@{F{P;vW$m3TB?$
zI{sdCRbh40NL4SY@%R4ZgY(UUA?A&h1O6eRC^6Sk!P}b7Q)%z#k_usNJLAD+=b)EU
zHiBbTsjBCD$A_KsmTTOYwnfj((RQ-4s7JG+OfSg|DHPq=D
zlno2aKNX6n`5Ut+gD@yF%|Q(9VS~6(4jD^!K{y}=8=J*S7Nk!Jl#HvuQwt-7CX0Wxcj@0Cxo&-h3!ng8XbMXlV_kE(|jOKzRw7yv9-7nBgEj4ZcuZaJDLf?J|LI%x(l?l+i&t?O>W6jFW
z&SxtP2Qo290ubJyWe6bru@cLx4`MuWk%JUb(HD!OR==OIQ?)zQ
zyiV~SNWD;zEB7MDc+Ai?b-vrkPD#tka!{H&wgAzM#dFkm$3(c)!v+uJ?p%d5A}Xzc
zEZtceKnF=49lDTS^xcu$h*evF&kF;Ph0||8|5si2_w~xL_W5hH3|}>f
z^y$-S(bZZ}%9s(Mn}yIM@*8A;{jo2{zxS1HK2cmuErH*^g4^Hl_jnNCfAM3Q$HKS2
zGVe8hUFzkM*OZ$_*V6mhg^Uyc1{)vV$Tj(yPSiFm(0BgJQ(4WW0NQy`
zlZ^S!KsLH_0?y!hsSvfJxTgYDH?3PNU||gTUJwftfWQ&^WNny;L=mZx0sCAMPBYGb
z1o?sbF)M24IJ2bD`I~pM=E0PISxsEcc$2ivZ75XVLNsHelkFQnmn`kUh2I8lC`L&t
z$u-;4+i!2L`y)Xvr^_%vqO0D*tM=k4Q_JySi&)Ky!(xZ}dFbzw)8<8{dH
znwQga6((=BVySBh5oj*c!~+U^+{d*ujD2@eKf2F(|79KtuA5ZPomL(*@<_XvJ*D0~
zj^p{&_D-mu937@<`@SSuhd$^UGG4W3N|C4Z1uG()ovhG7(WLGDTDfX|#A-W2Ra0}s
zaJV3b!6>@)yI$HD%0P_SoC-k3tt3s35M#7vbmWL}sxy1e3XWg_giP)f{4WrB_+QC-
z@tUEHTmZoRf%VeqV^xZpnau^6X0qHgQBUci+sy5rBpnCVSzrvAD-zw>1!^{j`RPO*`dzAvxy1OUZ-
zVDvc+-zU8w+GZ|x8tY0s;RaEd+uDo_ZQNust3Rl(wZl&iJA)U_zd!dsX|Q^B`qSs$
z3$UTYRD`<(EM+xNj<#DKq&XTH&YtP7HCkK#Y|3I5#}C`+Y`UgL!!zv?5`;4#TCGR{
zl2|bwSR9#WAN9bidy0WhYE*VN`he|O1y>W;1p`G`wH^+rIzo)3lfSc*frEB#9;#AN
zVE{r(SGj&rm`=}#4;}=xKACr?x5lkLYkh!g+yCt|?YngxDqt#}9Wlszb5_dX(Lz@-
zNPST*QEh5SMU5XE41MI89h<85yyVl#gywgqxQXsz-`Dik1E2YFfk<)GsyRUIS~d3W
zR(!0Wu3>ZZ8g;b|BRKbk7FW)7Yi>$Fw53pZAQ%>_U78QKQ$AW#LkQI*N1(B+j03v`
z0y7BBVN6dR4hJjnBJ%<4Hssj)CBtkN
zty+2QB@eU&t1Lu=x5YVpZ7k)x;$)@{c@-!_Cr5vKx!KC6`H2sJ!p)i%qZC&vQ(L@8
zCoglw93dX%_ro;sI;vhzohq{Or??aaN1LuZH$FU0YdD{bjf;l(kOIa!RYM&?LmrE^
z=ZZ`qlY6{sYilB!E5sb4XQ<2kdwhvBQZNwUA4Zscs*W;xxF1)^`&^EhIhppW4=zek
z(C$Xikr=ywm1Ss1L!-2kZeuH9HH8JN8N<-~oEpo>vpUYz10p3YY}&K6?MJ2@Kk4Ozn6a>*2ai;0r5oH#p6mk0t{`s>4z%&ix0$WwQ3&U
zt+-n4%v9|w!X+pf%QRYu>aul8QUf7rSn)7H5S!otO{qSuX>F#U7{&xF6`haeK+?o`
z^%a_7;5TV*zQ>YN0;Hs*ArMA!F@&DM$i<)C@v2a9&HG=Xu^a_{h)dzRh<`_Mgy#Lr
zjkg9unWtcdijs<;YCW<$ys)D12vFiru=z%(hE!Flb<3{#ss#JJ_7epR*0b+G&a4;p
zg^R=7_)rM~(bY?SxLZ&OyuZT^EPed-bGn-V?kYfN=4rN}uA6)7nLBncP^h8AMA
z@1D*1WT@C4Yi%?qYBhWc_}c$zdOrRz`j7(p;w~k>ZlrcYR^qO~y|N^{;>u_I`uU0?V?!48jpQZ-mIVY6AC#25
z5=(^O@#{}(9^5Ac93P$rHSQ8i%)wqPQfFi#8>O#FFjD*)_LJCO1eo2jtwDf3cXi2X
z2TScP-aZg|VQ|+drhwAv_ak{YB_tgB6!JU~9IgR#dPqA0<0^c24~Bc*#QvI`2Q31y
zz78M`m>C+Hwj)MphX+Lhr~rti+nP{;M-+mkRF)}XVgl;JU4gelGJz&YLkdc1aQ$~%
zw72?+DA^mL!vBg4=kWgp(Yb%pBrG#vtbo+jkO+GU@vZ9VquNn?KF^d)bE}2)uz8}
z9s7qoE|tiHLD;el#KdmLYCT5*)hI{6X=9pFm%XW8qC=%M(Z6RK3
zk38{sLFELH=9q2>t=4GL0f>tR>d?6PH*SD@_hjGp*b)1(7K3dnzQ!#k7*6F_nDUp5
zqc_e6f6~~+a|{>dfs6M5_mWKRh)Fo?7Dz%5-8XJ>GL$p)ngdn#m3Rwz?d*X75|$Q2
z%aB%sur~m9ytyHfr3RrYiXMU=F5Urv@b9up@t7D;97GR9w3E8=5b8j=)n`8{lhn(KCJtG8v{1-Ua@BiC9O}IEeoCdc6lFe(&ON;SP;44N6BQm9}
zTK}u$cT!ScpsB`FQ*Efmad9#E;U^pbY^lIw)=op-zy5X&ihzhi?4-y5uS_GyX_EUL
zavv%>v2y`bZIBc~ZL*954r6jD^bB_VwVRWubba7^sh2r(b$RJpvw69e_48>SeWin-
zUU=?n%$wAD{{}5{A1zTa4Km>7EZ<`}O?)XdML#P_9`HVshuO}jJ%=?rIXkUfuI5Z?
z5P2JljY94Y|FNd}TxhF3&R&`g#W2|+bd3<*@pSFsU~7G`8$O!?*(zKq1FCC<^xOjn
zsdVUl^rY_;l@1vovonhu4$$W{qGY=2RIJ$N&Hf044cLuVkm?^ba++m%$B+}t9_1_-
zKN9?zF@RKf^}1H-+c(aK3SITo+&=C#kIU2h4R#h~2Dv_$o3fyGwTF~oeZq0*a1x=h+g=Bp=nA4T9OPX$U;^cF=!6@){&wq
z0Y)qpx^by<=jNHG#C@i*t|R~7NU9y(|5ka1#R9lr6yQ6tvp754or^o|H
zNngmo{*JRme(kNPAqLEI+9oloYtNQ-)s+}%3|5JZ{n1+_X=lV3iZy(`!_@!u=P;`*
z0HI4RVI&>w#LXv-d>h@4^2HJnfG=ZUy)n#i@-M_^`dhbR5vV9)4$}?DKbL-O`mu=#
zJ;Bfc^FCY-*dl)3fGCHeQ^t-__@~OfjYQ#Po7(HVs?CFLAFSePK0_s5!p@XmhODVW
zzC>W5KjbNxb1HWTM}-?R^}<~M!NPKD%2#R7+{mVwtBW_
z2(3~hI781YTK}gf&!S63xXb@@;{y9dsET|f()E!qR?7{nDb9=%BclLD=er099@M_V
zl{iZf-|X)qizA8~|LWKX!SXH_N{AiS-TX!YJ}Zmu26wWery%PX0P@&$n)a`h8&(8R
z(-hk(WAKsl4HwtJM&f@@m675Os2Nxm`!-buE(tKq$EEC9FUzMu3nHA!-mFaT+xs#_
z_=7$tB^>yn!&;l~yddKqdgZ@2@`_Yok^Nq<=8;?W)R$uCq_&R(&I%mIZ{ulx#N+r8
zj)HE0HjL_WTN}bWo_G#s)4lzOoSrW~0c-0<+Z(UO&;!C{0fNN29~s`(}
zk`%Xf#On+8w46SnnFc-#1oAzfx{D~bMX7$L{W3s1fMmS}Rs~?7fe3~h;>g2XO)w@+
zY08ijwLZ?kE)ZM&jw~VzAAuEk;DhE0&twrGLGgHH3W|ugsrp~Wo@d2m>xmrn4~5BV
z-@J`PFC0Djxs%Zp`TqZ>Ip#Q`9z#Yn$A(#x$#ru`!g2d@j=gjc!-tSz9Jvr1Yji(Cp7%M$-(PiAlz-CNpp+-GJyCXzIVmaDP=?5RJ`Jlpyy3
zQBYX7Qyx_RJnzKC5sN?py&@EpQhK$9t5P)eBco^bA>OQ}@_m^XLDlgWj~MrHkNH;R
z+!B9!KYf2cVe}|x(!*oEubkK6(fH@-zL=e%p(^iOD`GIQ93eoHvI;$rfjN@t=|+>q
z5AXoM$ps$m6yjWDdQ9R*X=8WqkZ@Q}8^;0VHE&cEewq9xvw@IE0Qn?1mY*K8c1<{m
zDARd(Lf#f$v#?RHJ4Fd*b&j#<0d8S|P){DTC=Tk{Pt@xL&2nPSsRRNh?>VtemF{J*A(3KKy61;?*t&}IZSX$Vgn_`vK
zy9@dVj8jDOQKpT`-MN~dT_8XXz{tjqT+wk63bJj9D)wv_a`gmTcs-WgQuO&8XBqXkoGQS>#}+
zYH^B({ps@e62@rbarbVZ`Dpp@u}*6I10osEt6AWQ`BVe18o$5y)H9%KPlnJucRdTG
z1}r^8a!CQLA$6yVfX?_hYJE-Tr@;fK&czuHrE5TH70zh8a=~cmcMnu;h<1j=7ZV
z%2Fh@!}tPcCJo>-ff(g->Hljyy7zBnrow_DW6~v+@^kiJ2SIvDWc!N#NMm0>IaMq=
zi-iUnjz=t}jLI?EJVZ$QtR=MpFgP?aTx&Hj&s$$`M8!Zv-|#9Bz;y5(1Mbz^CEkED
zFxn}RlY_~~q5NGKZSP~^>q>3Dq-Wn!2l5LewA^&BwXuG`A&Z1K0Cbq9?o&s
z%-hL!BgjCGxHPwwvr*Nmp#2;@?5hFD`r5OkIg(eULpXxvlN*xEjkTNs(n<&lLtmFi
zt8LZdu?*VCwd4rJ&#H92hUFCds&uTyK42Rlmy*xgYsolN6d1q)Y4(rB6gX$|{nA#~
zcDRi^Y&W<~A#EoD*w=b1QJA>5|9gFZz3++#3auWwhKu;D81y8?$D-zOC8L)tM`AP?
z83dCAXiWW_lJpY%Y&62mn2rIUnIs!u?Ru-AD0=m&k?zjJ(EDRgqkyqaO5<`*BHSo5
zA68>yAE#*20^O`JNEW5HV&oWLku3SHa(?VGLTrWgDoRh^_|c6=lEwfSDt*vAJi0ev
z0&2!C_4#xwXQ*o7lQ$7C=i#wRlW*+#zv*Zu|J4~gD8w%5c>$QX2!!P)f}^?hh-`+$cQ=id+%_RhINb
z5+5uR0FiG%$GQMvYd|rbUVuJor4jTb7fsA>1Qk7373RXkVrT*#ViY3CSfWussSo6q
z_heSMot2jY=jn6iGHXY7R092A(ObSZM0qabZnCNhbPTqN>2`|Ax+8ZpEZXyw4lfUYnKl$5(!oB;1UVs5<
zq!fn<)<_nlR+gkIq9AcOw)tkUPKQvk*=Z%Mc-00#6HM
zl2i-KO~Ac6;Xr(3Fe1(VS{o@kh*OC&UUjZ%e86$9<~DuQvK*XLghqakDaXJim2|A}
zQFP5$BiDM!vtlFoZZJZOj;tSj?`iLd^H%s(xshFL!3C$`j*P;##cQb(c@ql}f~Hq(
zb}5j#Jz3nDWC9pS;a@Qq!OaTDCS%Ao2$GSYM<%>MqvckkO8AI?L+c_2~7zC*;=R88ftnqN;YRV9+EoCv9tG}5tF*=m3p3vzWjB(vh(NS@=w^`
zA33{M<61Ez;XUMOIAm!u?ozSMxL#0>kLNCX<7r>NC335|GGpm{r{(S&u
zm6y2jX+rO*|CFoniLS|7kooG0^s;Apwn`elEWONVdb-W4
z;-3-XZ5c?wH9*_Y`!LmaQ0OC4gJy3Zt=h`hMrmTjWA`U-cg76T3$Q)sVs%55
zzA1Q1uwdU|{>>|{26kY-xj-EOwtJ>H@^z$GOh4mdQ4vjp@c|!bU?Y4h{_xa|I&)8g_%(z5^R8M>2R)`YgVs
zrDX#5mY5_vkYfEKOVOhFK
z#lUcnaEI&bs_?hl4jG2;7X5;K{hbo3Rf=VeE4GR87e7xs8d^_(Eq1IN9h~GTtgs4b
zyz_}JBCJ>*!(($@M4xE8D)|!#vzFW2+wsprPv7t8@D6U6O>R^d6BuXe-JR|?SyWC#
zSlKfAeJj}@+ebmo%17%7mgmP3wmBQSdU;iOtG>tC8Fmxmgjw%*mnRSYsF=p)lb^}|7t>~1j;a5eL}O%5xUP2d{hcMX5RDIR
zCPs9Frry1d%4|Pv?n`c_uKUem-!J=!yc^;{zS%0>R(-3uZs~Go#g8BfwJo*VWaYiT
z9M8TDd#S16qUD<2ZLrDl1Up)_h1Sp(ODpO9!1G-O
zyVdC9aSn*cq!&AysMC6BabMx`4*_0P%#i3Q?$(CQ_w{1hw
zwC0sfCnHB0^!+?SN7l4sSm)8fgUi;-Ul(ELB|Td!D@*rUPqzZ*i#G8?d9AIM`*>F$
zmcVDk2soE_BqGzmkTYU2B9
zBgrX!3Zr(@bHcEclM?5h4+e>VB2S;}mIxuP??
zNODL(K@rl2y>N?Kv#gl%O>jsY?=SFp@aH1hLm|q@=)mkiMt#z+YC_{_O{@>(um?|1yMabuL6XsUdxJ88Q1Eac)@
zGjTw5W6gE@+-$PRJZLa*;Afia5st>a@m)>j!O=$|+;yQ}#c7A$(%ccn1vpB*HCmfQcVnfb-)h-8E~TGhP4
z_i3JggJ!Ns>(7zSvQwAuSeEnle1DfZb8iG9NzL?d)IX9=UQd~
zcf-)O)l1_9;m>|UzGRbvqwLKOW+=%sqZ~@yA+?C{f?F+@nYH4Pm#At!(-x=PtMmH
zEqzaaA0ED0AIi{K2s^8sEMP%vo0NZ2&n}DVX0c=Mb{&jw))y7!?EYx!_;#hF!cJ~5
z`~1D=ddYjYjf3ow`fip!AD{X%@5Ft!xeY<3ylWzslV-A&85+osD#$l2RysNaZv~RU
zCS>L7So}&6YR%TYY=d1o5uYF&d~5H=<1NiHMemkif5{uy{_&!I?tipfVvt7Okx0D4
zBsI#-0^;nfWRL87f}Bo2nCok(VVAL2u^08XcY=KugpDsAR=nn!(N^l!6aSoU_jq2A
z;h0s=uUPobSVeX;&)YiJA@OB-@3)`&Mxx&&E`%NocDIJfSL$;fTyJcqt=f0navs-X
zO=fH!XJUIIyAd@0c%r{$$F+WLatVEL;BZTFvieOqBV4~nZSGLmg%{;e;0EK?S
zHJU3Xr+1i**UQ?)37@zgp(lNbI8sX6v!KvFyMx^%`i0|CC;zc(lxS6*gi%$7FT5%E
z=*YNO0?qlv$0N%w-VVvJvN%|@Rq2yDDyleRg%>1=ci$a*=XVr4?BgLTGRg0ZR8HWy
z4(*&Zeum!!YYyF*!SiU3@MvA#O2ORykR=Zdznw(lFaCYc?`ssS-~zET5=%e75^Bex_^9
z@<8TMHhPuGl+b$lv?6V`C9&mrqu%|U*XeJyzr~1m?i`7^5
z_u!F&CK&smCO&Z(9Rxk&NM6C}N%v=D_b2T7co2y+PijywNwo75c|w0*Ps+W{vzf50
z|17g)8zK8EnDh2qM2_8>bsy8bdzjs|`cH}CI0%Isd8sQ-C-
znsf0p&@K4Q>fTK5mbdRRiZCHpnOB(?_F(cY!R1!PO#Q{_&!v{I9_+UI%2cid)NZy5
z)i7SCPWR&N2RC1V{yKb-Nya0hXCx|PW}C6`g>p|l!M}h$y>W1AA+1G8ewI4s(VN)ni7-kjH_`@Bdu)|<;BCMmSB*<`Uq7g9M*CUx;=i6*Z32&D
zg?J;8_Nv}_{_aO`Lyo6+noO!rWv#3TWv;heD=c~H2P_jrI`B&cKvMh4D^~wm7vLaP^3egOTTkG&(-^Pth
z)@0TXJg>!@o|IYSmYqFjt2g%Vc5(PPj=nXyAy-+48q_x-xKv<0C&fu-lbgGqwG&Oh
zx2^tEpMSiBdMX0`VS#6A|G^%gOs>ggMIZFceJfQYW3^?r@bc)YAS0MN9W0NfypQ%$RxJ8AS<#B!Cc>B%mS&0t93W5SB;K`IaBA
z>eZ`yRqw0%&X0S~J*T_Ry?y$2pVNJ+x?&Q}aOzvkng~>i#o)?%0r||C=f?@qgOjZZj_f$BRDy{%=R=3&Oo^S{yD>lYI$x^Ra?js+*;dH-RZ(BUR
z)n6+g`q7PEBFB?Ut|Uz80Z)Sm5WSNQXl2GAwTCJ)G*S1Z@Mr-Opee!)qx)4QC1zwO
zS&m)p+6xHCd7l!Ry{|REOaXOY2bHybm_Ut1-iP)g2ro?X=)iUgX;V8a_KVg=Iow6#
z!@A(-z*u)9U}4YmOrD_8RzQfO7S>=*i^
zPJ{yjswPV!j*8$Ux~P@UFN@BIy5Tmit*}#)^sfAlL`B55Q95g#6~qG<)oc#d^NS2jLDq3Tz_~;*imfrver2b%$3uF=Ex69GB<~ag2;zg$;ifqb&}brYv+h
zuFK&=tVBnuVVr@}YF3mTJ`IYP*svn2VSXgpTZ<&~Q-~NoLSK!Nfo|8(t6=Fy7
zx*A;2hIJIymRU`P)H+oq=As$aj#fS0A=l;&5XgsD(PUT&r@x}H$vOHc0)nHUP@1k>6RLZ?#$vM@d6Ga&u
z=+*q{RhXrW#1Oh}lVp4~O_8(v_|8L>*0`7Bg3bO|jC&n5wv=4TEM;Vs9E@S0?qx`t8e(-^KYulM+0awPy
zN8Zo1zh4i|=<8!`d@iwW2c+ept0&dco9p_^T+n1j11b+Fir3+mDP-^3Tht6dwv!{M
zXHt3XffwyEon5LUTLt;H4FvB6rRtDlgS=fvr8?JUZ(TI$wivLRg;QWGf6c1M>H-0N
zh^7Nnw-VY;kHQcmYk`bq?FZzxMJGFF{eHvxzCI(t_q
zW_lM-K5}*@6(we_%&#nq04VU~mtSSJlIMQ+#pUlEFU{;Ph`)Tx7LW``u03kIs~E_{
z$_&(LlrU*WJP>%fLAdwppwKrBpon-KAnWOX?>%m19S5HlGVQ9OfR@r3!27;+0rUzz
z1_qq5p`wf^jt~k3G$!z2tatJ8{Vl)Ho7KF-H07Y8!LiHpwF;M2^j;mTsI~|&up>Tx
z&#!y~>le&a%6-&~S(#tsPj7^)q?hHxta@ilj0-OJbzjicvKaLxkqLVcdXO~aT`idE
z!H+Oc6p7v@CsUjUcPJ0M=ExVoyhD03%Um>Q`Hc0+vOpS~dNK>S8*CW?*~=)YTP%T=
zUjguU?r3}W{CG(F5EY}!$)KU#gUj(bTBX$Y0&Q9!oWzDx=y?bs{3?kK3z_h_`ZbW`
z1r4cjx=O9HfTh-Pp`)d<{_J|ECO_S7KJn1EU1q^jhhOwuHEWyH%x-`09WAa`?K~Y{
zM;jdOC&*97lpwhNd@T5-QN;3&JRQVC*#>6=UV&rwe~p=+<|`=hN8C@@?RV
z=WuKR^J}GfVg;iyp~3`slKQS1CJHdS;AjKY=(|FaJC0*vaAt}bsH4qYS4!rxAYWR~
zK<)>H^qTHhK3F@Ik&)qL#Eq&sTzK>7qQBjM85e*c-KR!{4m&!eO?CRVyPz;7$2f%q
z_GD|7FG{z|A=HD_AYS54Z@kQrxi{zC#MzKj`@Tv4!DDlQdrxX5d8IMqvbl?bh?47u
zFw&(XUh*>#4uW**%X~fg!TZ3O4IV)eXOTIKPSlafkGtLl^OBeg3
z8rD@M#3j$Rz5^h7ODQ(M{Zn%60&}tVw=TgZ#GUpg&Bj5ENyg22BYWBM^4VBTda?;<(vN
zybALIr$l%;xE~eLf#MuzOwHXcDk@6rIrEw7n4VJ1rGBg++PiyP>liKcvf)rSnS37u
zCbH`2QLs!yyXYsztZQE|c8u`$D)swQ(yU5SM2Fd(arwYyrBk%jx`tiJ&J2EglY0ty
zWfl0{b^iM2^PB9d6D|L?k=$-BJ#HY@9*}#)9OM%pC`?mYXf^^>;qx)UyMT#{*eta$
z&5_7{Av1+DwY+$ps@|=ZuI?zJVwl{LbQaLc-5P+INFx%G#HJnE6WZwnj(&?Y57NY9
z^vg91=Z+}k!svDML8^ralMrCwTtf$SPr=5xkmpG$_*R|sXse)$U@uM5tyZ30M579E
zamuLME`uzbT76om6A~H9_^6v|}6tCjr_Qmk#C=j^-crc745JQg$Vb3}gy6peN+rlk!Nvz;la
z-WSD6DVI33-yPFf{0JC4mdOd@ei}=|g@k&89gBInoSfIRsy>I%w{3Aj&#vc=jhQ{`
zU94(v&_+NTe4*;>8;A5;8vSt3>C?+gMo)A$Wir<&1xjgnmhO#eEm^LMWS`~)FwrDm
z7B3fD$JBVtBYn}E7z?Rk4JA`=iLO)^j6TN_QAf-|oduJ#Ie>Wcjs5%nA&#O;n0B3B
zmyfb179w6_9|iz}|Kk}Af!Jk-&Rb=lQ3j+jI1tODF~5`c6214cc6RJRglknNol>9h
z2})D%0fawe(L796eA<%c;@6p0k#zqfBlvE_ijrKLugR+@OBtKMQF(qoM@QC5+!&}=
zSI4rMX|uj(OW_c9kyxFEI)%tOAgJdIWbjIZ6FDxv5(r|KVryl^@i?*RT-*z-^E{Fh
z0IAr_-ZV!%C=Y7)@l+x#`y$g>Bb4(5>g?Sy5;30R71|-qdlihj&S~6K;1nD-v{z74
z(#)f@E8|fe!nxBp?32$oUUoGIF-oxDPylsZ&1K(~k34VtL8%#Z?)DYe$FvOg`d8J3
z_iPzIbn|Sj^UM%cN%(^4Q8`V1&%ZZsbXeJw94EbZ!k|8qZB)aUYGeXNFjC9fJxTP>
zI4`g}CRC4+6*&wRgH444XgB
z==fv6$9Sm+lXXbSKnzJ4!~2qgaJWUSA2n;aT)=fs=G0c{9j@h8TDbLT$Fkmj!D-xQ
z-I(k&Yk6Udc@w>8k0$Iwl?w)puvTva%G~ylkoPI1sA@TwFV4%5EQ2a|l^gC%>pRt4
z26)mEY%}hUEspBX2B3AZ?sN+BZAJ#ZH?;}dDeWcLveiQLU_36!EaIL4X(3M%!G>
zkb4ClI&=_MWVn(lsD8COB_hU0tm&nFqjc3$F-_&bJ9u
z$*Cmeso!b4Ja~iFb%mv6HNC{UhgVKVt9*}O>22F9wM03wZLR#m`b+$)RixeSY4bHb
zKE`n6OV(|d#U!@TUgd)hnnQvoCO238ZxiCGOe(n}_3{D-_a!ztpnNba^e*V&P*i)z
z+|&!2qBy#wEBulH`xW%$!78JkBm>L2R{*+u|SiJ)t5rWRO8uLLh>Bwj*#FHPLEyi6CWO742v1M
zX1>z@;CXS)G6xXX4o5}rR%Pur4`ryP`pnbsa3_8rS?l<;)}Vf#W{|kle0iF8%J0C?
z&QA2eycowbIa|;vy>~cJ@Q4=2k&h<+CG2`-R)&M7cI;GT7EgIsQ65>kXf@x-%t3U{
zM>f_%NHFz2$)p&18&ryw3<#hB+TiiftTSr-qui2;QENI2n*>5)>2$lwGc5Ed!sz~f
z+LbTT_bklPkCtJFMK(h&3RXlN)+4Ti;VS{f?e)r)wrSOvwa{UmCWk*G-#_k@`oNmi
zD*jLd)m*JI{2`{XsVaC0{j8RCV1tJ^ZZYEI80NB!-OkB%GnxG*bJ*_$bNs{H3e958
z$2MAPzD9M!sUhr=4Pum_>iY{?o-C9}pvgRzwu;C7rG>sTP+-5xtDU~vL(iNfaz7_-
zG~^>jHq6(t+aY{(P2n{XpbNiY!6ifXI(%DC2{cOzaS&Dju
zyVdqcoySA3C;_l_2v6|ae6jWov)$%!kyo;iAWdU+%NnuX;Qek;^QL9H`1$oej=~!D
zYSST>OVQhn$c-UECUVLLyBltci?VqVQ$5pucJsTXPVX_>IJKm^x)OBvb4{-@pL2@V
z{Qv=4khL<=I>$_nLql6L%+N!3ZdHGpyy$y0l9VDtV&19o`%5(xol%8ApQDiTmJq2=}V8>|$=Pvnjf1AV0cm=UAFA2`(AAE$cC*2>+oKV&+U
z(1{)D6w)R%>@*UB#)qT!{RY09=exjmy9a`}haOeu>IKGlzocrN&*gc62Sh_&%j}bD
z?`uHAqElAZD(pH};&e{n>e9pi9BY#K{^x!(TFY|5XN#(Q7z5KYq|h(5JXg*6$l*s{
z8*P?zJ`%*KXusJc_dX79%`SqVmzoRVULxyZ8*26Cq~|p^^P{pPh_^!2&1NnKRL7l!XfYY$-tYI
z1+S*+_)X?E4SszMa-o*5jXp%?lqx&4G#rMDeths~avd0e9zH_xv$yPCt{+M?O%&UY
ztY2M~`|0eK9R9qir$6-RFdx9tU*s(+gw8uHueo-p_P~~+JB<2P^EvCu$k&OwRfogt
z5svaAtV}54lGw+s@$EYyzDD_FS!n8^w83a1vT;G5sG(+V`EgqRD{-m$?6NGeUF?k)
zeRkdb-4bA2#XF>=mfDzO;qh0XP}&c%Hho!SU5q(-GMT%k`Q0^={vNLysjw9i1#uP)%5L
zM*wuKz)-$vhhK%y1~=8bb{(z$!F+9^vCkuGJJTG0d&3gi&Vr`DF#k!S1IqWmKe?&U
zYJ&o}Q@fkor(cb6UY(83-}+BdC5JDfN26OcF>`(`u9cwyL8XiW*5Sde-t><#lx`RkVVaclIS
zw$$JjbnLf{v!s~r*qSa$`Jg8KEhGJAkv+F1u#yrc{eMh)Jq`T2&+Nyo0m=_ZaAGLd
zTU?QH{r1@I6Ek&n3u856>xj(hi3`NH-za{Ux4)0Fq-eEotL20DR&3J`W|?HR_12Af
zQ{F_$u=@x9B){+fDNp`Q`hQEhf9u>%w1WC4Z{iP9tFjdx=53M=-FV6JTx#{$H(_v9
z`5%tEdaQHXmhKMU8e|FjVy)U<0>0F%_Akkxf0O>#CB2~v)mBWb2RC)cU0P~etf$nby_J$s{)X_w(;xn9*?Ifv_CM>}Zc94Po!p4uylDi3uLrxk1*43S
zfvC-!l>P~QeH}eL9laCR^iCLq42(gBS|?5zpE!{p>GtHG5HNo3p0~pPdxUPafnPTf
zewHAh!aQ#ogEuesw{8WYf~E8gt}5oCHhUHR)_d7A4CQm((i4O74f6E!mC`fPKd};C
z{9qGE{-1$v{2d5nc=Etr6ZcIRO$m%A5^0R|^A8X7M0*5FS^QZ$bk5)32X)BC7kOO!
zkmP+oS2blx*z_lkJ1Phn=;2#T-pEtuIK;&P)h>@6aWYS2mnsAepdhh000000065*001EXEdX?7ZE$R1bY*id
zVRLh3baO9ib1!jnX>WCNE^TRUE^2dCR1E+Jl$&T}l$&T}l$&T}b$AN^0R;5{000CO
z0001ZYzY7d6axSN005+cwOspi+c=W`ef|pBSLGs2NFhjy)Wftd$z>mPPBJ?)yLVMC
zor{rRiyN8rl5{*-+yDFZ*8pF7WF}X8wHb>9fkr>SZh*wTIz1Zv<)<`%CJuYNeXdB~PknrBuel>Ky^fBL&xR>yH%eZ5!t%|QKn
zpBGhma&r8Tt<+7LsnzjO{qQbdJ#5s4{u!CBv9j#haZR?Rq(`5e=-*Ltx4O`mma=En
zNb3NDU#x1KmZD*dxOynnpsb3NIGfk)gG#gfB`F5kyinCck?ooGBMUTI7AmRKMHct&
zt;(KR<>
zby$?`(!iJQ25D*OmhSFGN5veWl6BIw1SF&z6bT6>Bo+A{-|zJt
z@OaL7U(Rx|T>LY?d*+^*d-j>x=gChuA~ZG>Wru#2pY~C{9!pSz*U!ey^UhAC&CtAO
z<3vPga?D6_uJpa=VDnyKWw7#gVOmS&6h&SHqx&n-`jKQ*=CsK19cJ;_>yG;Fx69Ug
z$ZOXS
zP_Y!+ow;c;|0Kx#PWD?V%)`&BI~g-9cEMEHKF#y2YLbp)Z2oa;lnFKl_U(@fZ^eiY
z&XCh?m6a?&5Npi1KkCwR9-_zb?@Q42sFEZ)9yMCN{47!*pm|>G9Vcr~;(<&Ad8T;O
zYp<~I{hPWBVY^nz!TQ~}I1Nr+E*&!O!s4?M3WEqm)=WZp4N4bg9*5d=fd#s5-fiW;#vXOqNwy
z%@bTIdW#*tHzObiAvP5&F0F!Lt6*O}pNaAVV_td^V=a*tgcsojW}9S=6crStdA88~
zXE_*U)=;>EtM+Pcnp@4u^V24}77Cs4CQg_tIz7$2)1FrE>cOgi#+U0ZSTEAV3~d#w
zTotNtVXSop8uwIzCryub4n(q*kIZ03nWU$$dj;e?sp->OAk?+>Bnels5YzGJ_4`vAiCK}j`dVo7N{VP@_ySda
z1)rRu#~GBj@CWKtp_3BR$#N98ed&{%u>1NMmRq1+UH6N^DaT7|;hstV(
ztYHojnbWptd(O`mfJdMZie}FFZu9=27<%oQ9tF0iuBI$070p5?pY2F7@
z-sYL{EJ`Mfa#~FU6qeLdvPw67o;mcstiiN&R8ijvu_jnwi{+~0IE^g~fitT^A~JOw
zs+xR1k-rIH5uv;c{5`l2M;}VukL6h^7fg5?a(D+=;!y8q{xaqQ+FRJ
z*c@{^Fc!D4Ahe!gVEVGGVrnmBjp^Ty$bZcl4TB)^j`ixm6ziSN;9m6dkK`|(S_T=R
zKRCq3JG~#f*(M(0r%!ZeopH9$ihN_8}JJ7}GHVAB(F9&F+0ALnvtE-N==xBS2_fHc`%MwR%?f
zK_l`B!cOtF8UJ8?T$%T`85NbNZiRwIr&A#Urs>59+`_uAHAOO0Fe3M_lV5_fG0JxJ
zm2+Kt&GRJ`s`nwrXOK;{4&>=Z%ofEXymu~5J{^ysP2oItUQmrbVjS*K&7eDjRL7m0(bniB19l&f{amq4S8cu%!{oaXb8g=oMVwy@587&
z_LuLu}f>lz~b3a
zG>uft*Bz`q5!wu*+6tT!Gbi!4o-1-ZRzA$+%yDS4H3@~h4!Naj8}6(vFXY)DB@cTc>{b+?ob%AO}#
zu*lE1`$cV3t
zT@1$_m&s=##>hbk;JS}^bBW9CaV-9!A~`{nj+inm8Q%#V>FHn$m+*a8=aXzA3E;Wz
z!ImHk#t!bsIE(ZHvhzDKA7D01piiiWFS^K_5u?LcaEoHTIrpv091v_Y+}{n_MLk3a
zL9&gZc|=7!uRzTsa6kYLDy1`B;A<3p%u4BH;_3rQyNCkcuJlL^mS-~)
z3zA`Z#ncuQ-CXhze;2Z8V3frnZI4~6DPE4WWHT%{709HnPG_`a%oWRH6lePCSo8)h
z-oVI3>4wk;BhW@JV@~xxQ0$mMpN3|$
zO;Jf=C#A0s@84|eIASn!j4AO$)hLSS3{^lUcU%(RQj04Fis+qaVOoJWr6=4Ev5$BB
z4_&fwaMP@~im}YY@b9Q~B+7~-n94>HVbfYGGWNnzs2;6$_et9uJ{)zvbD!xrgG*jq
zQ7SrNov)VO#25FJWo!
z;G3zU(Go7>jRKY954nZcq8IKp4%)`Aidwx?)-cIPe#ubs7L5*tV+ZGx)q!-T=Ke?h
zFlEJI7#}A2>JuX22kTQ`gc%9SUu!)ws>Y?lv`53|w`syYh$a8x_Hy}@VJQODmoeX!
zEV_!#oZ6`5YlJ>R5=!i?`_B+rlrj(R$YY`cH_Fj^iZz&Oz23hzgYLx@LO~vHO3Y3$
zK>b8HkX=CVnCn%42-yuj<*n~obx6z8<1T8D%zYQAx4
z2yUYnm=0+-6z4D+Sk+{Bl?lx+?nDtrrXP7{pg6T^848I+0pqk|8#_1S>lr#n{iW=Q
znOsVR_{;6)WQlJd*>6g2&v93-1lT8NT8h0I_Bb6IdSA>L_3RtRpo5PSWx1hBLd*1r
z{-Fc&-8vI4xSTyjb(2E(ihCR>X$wi}dMiU~79#_*@b*9%^Qe#WZqnO2;IWHh9}Hlr
zQ`=*+S_yLJy3L6tpS+Udvl^NSnb=*jjU1{{qaX$)Ij3@Ak>ev94Q&f~4dm?tMKsA~
zFCQc6c0O)>1cr8Tf22149^LCFSFDY%)5`2$U$ogKwGv%XGd}CP@0{caKTey_7&Y-9
zNR$xm7iV}so>qJMoL=Pfvlg#dheSNe*l#`E57Kmc&m>TWn^*RdzDd1q%ur#!<)FW(
zP_<$Lo@4HJA56Qc)?fF)5Mi>{e!R$TA|M7WO{n>$$-RT}$_4m}2d80zUM3q0Z{))T
zafy9Tp=;Z$5>;cv)+BnJ!^^1lN$@y5Apx8(+CsaPUd@xGA1MS%!s?80@;mNSjc;l1
zJ2!YG>(UuRny3d*A?>d$i8+gfEl?OOh=HcuM1W?CtHM;f)lN(Sp)?9BxhhD`?eSi5cn
z6V`(@O|Rd0N6q-|bs~EC{WoSwx;L+VVeJNW3V8~H155#C-g
zmgF8#!%>ymkNCuo{6sJF^_nfwB-84x`2ELaYqq7?UD}zk^VX0dDFP?oOn&2&G@BKb
zlUDiGR(Z>LT+2XGen~If1_f
z`Pd#>@R3AM*;_lN8O^Q&RJz>-98prFUmo(kXiLx0BNF9I?=yenHY75%ANi^L)Atcs
zmuJuE6tB6=mzr>72i2MQ`{#y#YptftgWvNlGem|P2(C9Tl9W@uz0Ws4ZilC{q4cDz7)HgttQXQ$?=v`jkRB6qGizd^tR%vH
zm-qDmxdETh?vA2sb)NC{_mr!vFCNnj4vNbJ6zzEmTV$259d_~*SX8-DnRN;8?!_Zx
zc(-gXx3bSd_cVQJ-cKQ$A{b7WWV9dLLbA$d<=!AsTa!c7s~y?O5O{C*Tr;fUM76ct
z&fY+~s&Fuz|Lk4#xGzRkLsN?3nv3L@N?2C~%TOURGl_zEYtu_5ma(F7LsOcfBj83`;d6a7lyEduyuX+MR$W+^m3Cnn8d+JSx;&h(%yfaVvM)4jzk0+R}7TA+yul{_L
zM7Ipt~Zay>eRNVq;PIPu+-pqZbqf^3YmLdL^Ex!9YiOEGTD%%_Gz_<1f!
zeU|e`INu=+k104N-I(RX*?XiaGPB^!S!5W_bv&G!vsOabrvuEgtgO=9eNB%VdftkH
z44da#G%&SeD}tizZwv@3=(U)Hjac4lhM+lc&PsM31?AcKl7qw7(J|uSvt~1&tH
zue%J+XU4GQax6qNK^yJr-Y&9NFFF}^ue-(okBB-)(wcm^tq@KvKIeZwJGhMJ=
zS4jV1qo$z&UU~i0{k0wZtAr1O1(piPz$H?B&jwUfNJ9G`b(fb+HPMBh1VzDeyM_XGqcl8t{
zzAzRwq$Vpt4WpK_sSr|47z8LEF5bWINEL44>F61?8ksjUgQVg+Rdbny?a&Q
z>3PbcNqafMQiZZF(sW4VSAhO50vB0FRa#s2`Kt&LOYQ&u=oj
z!&BP%%;so&*^1%J058uwg=TCVEmyi`S(Aw;=B58GoiNkF$9As1C)Zd{bWL6^!W|sJ
zVue|YTj!%2p3DRg_U!`HlB$UO8Xg0kWC7Wy`7T$61@fBQW@-C?96*~c}
zvCkM47C*-B6_!i!3N
zx~;H|qwwZN`xE}w9IklEC#p?bg>Riaav3vQ(Ey?)d_W*fP3
z)W~W5Ca9D8bL`6Lor=;h$0lj{%GK95HYRJIwdEHr9HV5NPgmq9g)-i|2PzGjv49Ht
zyvv@=7+D+*S45-YQ`;U=9MG?1mzMmTlj;ScKvWA#ohOwE|0W3)o~v71%3PTFE)HDM
zCd|T2Ids0Al%M!OGIyz9i~Zp>!RUyG*KnELa}mc^toKX&p6i1jpDC|abZ^Jr>Qbk9
zo>#5A9X2wHyEZB_H<
z_Srszs6G0^8*S9jghfR9+#mXXpbG}ag1rQe^H9A(2?nXEn_4C*Cf%D7va+nnHGDmN
zQ8tbP$I9;5Ggb6y<>Pm5u#w@$Pvzu&_5NO+HW=~N{qAJpRHoB-Tdp5m-r1f}{}Wqx
zpW@8`AC}lJ=SGwQ)=;e%RGQ%wTW=q_-0OM@u8O)V8Sml8!!|y?D*(BL_T7ARQnvOC
zIm+kmv0Er@F{-s|P_(m$!9h#&yj>@Pwh6NKv;ktnLQnMj(d%3Gf{XgQOiZo1!*K;F
zL0Rz57hBqRMf1Abr-^jD%Kd@vTqUMx9x91*CF4uHWfMr~Qyw>8A=HYA)GCi|y*V2&
zj>8dov$6R?1en=<`;@Fx#$h)!TClyLe8=@3bpzUX6b5k@FG*v9X#J}}YssE&zr5p!
zyooQoOfq6c5}+c8{|tVDUo_t62Mq;@)4k+Oc(uXk8ds}clbW}ZwE1)9SNy`2(e>0|49s%9c+8_3dN
z98H>f%u$S3!m&x6%@hegD}F)h{FT{|?8-dYBYFmbwFwQ%Yc~oevz~_fGtcWY-)F)D
z?$KD8V^04(@pRoYG(tNdIE1%V)1!%KFuvQxEDpkY!jN}1+%*DI9ENusdMya$-mrGY
z3r^vjFL0kX6m_=X)GmBo_D0R}7*%Ju)?LjQ9S)VKN*eG4Szy+;IxY1lou!uIsTum*
znvg_U6?Y)9u~6c~H}a)AKvLk6+?MqnJVJ0OQQfp&8~z@*de>e0vyX_=(8Jqz!pXl2
z2DYi6?Q+lLTJ+Go0#jboQcN!E>>pSzUpy?GjH)@L*?MZ%cOa^&oCr%}%z7lWI}AOe
zo+D#=w#RgyMUpIC@<3|BTcRG1?~HPJwD~snLcd#C02@mmTW=x@@)Z(JeqhE7#hP=qODJ0{L#Kq&n;h;BL{(gG--a{zR^JhfiQoxZ|uO1U@k99M~A=Fr-_X1*X-iKRyaBf
zD|(iuZi`fcJfciXM`r{Isw>>RN#OWiWlrXsgo+rRIhLUD@pTJ}+X&U%WH|@r1P;#9
zknAJA2+eK#^tA4vJ>yHboGobQ!C
zASqSt%FGpDSSc`OPNB`|g{D~Lj=A{0$wACX&e|yVnU~ab5MeD$H?C`PkoWq~M-P10
z`hI2CmN;OTlpwat}cP1MHtJY4C3&#^-
zF|QXqzBfGRTX`Q%o&n}B2XCUm(R16f1ZhtK_W3>*Gt<|==UeV
ze(#7fLG^f;rQ7dntQAwAi}QSK1IEhzA%{Z};m2-t$UhHd1=?LdY_6?_fJlt=&vx1^
zi;cQlK=W%11q8wX(f;Uy{qf2R{P9OuK}KFffy>e6ADff>XCv*GCfcuJGkbK@InhBN
zdJYf>=aSgx01W8Uxj~$4UH{U){}laWJr^5*KmNzOAbMLy6B~4)9r%wWr~kDjn?kh++$;gpUqu5`%h^p&01$!!0uf&_ksx5Se|BOaPBviAD-m3i
z8B<>a1O-eGi0~4Dn&Bb=P~l4Q1$nM{7XtD}0S!nm$=7ARDBl|BDBD6|URQ!J>C&-H
z0}vNL36e{Yd+Zk>mT)&aDC|mzOjoFG0iZ*}4G`$sB}6UvMT8^N5$xo4wcYkOrriJ|
z0|9~as~Y_x7a7iWP&eq+5bR`1iyc5#G6FpIvO{G{UPL%RobFwXfGRX%695FA8W3Wa
zH+)FuBEb@7Z3l4&|2@d>Qqo1Q-InQ4x(IQE+Q1!vNrk_fntmsr;KFWi%TOy{l>g@h
z#Q!25|B`sGOX9&W7!>xG7ymQuwa$rc|2SbvfoPz-AU!W|?2`1K#<2s#pjV0s{BDEh
zYXHa?05M(yWvO4Z(ofJ`DAWxM<8*~uLo6MxL}WCYNp1p&d_aWIUn1Vr{vFZP&JqUZ
z1o&6vm8{zJr2)JfSRfGVCEh*#-|_B(E#2TSunp&rGmF#O5@vHHHC?~2>SX~@dWs4H
zQD4G_8T}6HVCe;gU+s+4C^9Ey0W=f=a@&ndsHeAohx(bPIqyOofX%#;dPLTHdxJop
z8^#3zMA{!g_s1(QP}Smh%>T`plPW!57ZE_99zaXFOSCwf-_d}R?tf9P`~x}PQy~AH
z0M+>Az58_ccewu#iYwXi)ey+3574X|(Cl*jp*j8z^^d)CgMqJB@Z^+M=uZKAl@Cy_
zU$Uh(^mjy8hz;1v@@ig^m7vnD43vlFOuriPsq^nxc3?}Jzv+-ayzbWum*Rq2+cK73
zze9OIY;1o_zWpzG|6&obEz^C8^XIW*195fxpBQA9bYb?ssLP)Wh$B$^{%@LGtRuE%
z!hS~qMg;$=t$v|&0lYpD40?vIo)qngQ!3AawwE=Vfk?^k+Om{*~J(hr+YY61r
zi$0JSDB*X}ZvTHK|M7k$PP~u%;2^;1{g;Frd;cQm=b`!2*PLNcAmv^yY(qi)ZV=Tm)1IT$jiWkN*?-kBL^`$c8#zy?%!yRB@^SE{g>4FINjC5&wz(XI_T<&0_ec
z$^rRjAO#f=DAN=HL~}`Huc(XIi&@3h%?t1)YuEoeto!R{>M#MLxmX<#$l}AVVJQq8
z4FCK@dJ*Pm3CsmUAa}ukVL13#o_1%C(>pv6Xb$*gxul#D8^XWx{!C}KP$yeUCkrbu
z#L|h&*~#`F$>-mUB>zfXnb#*T1`+`}P@%A0qLzyOd#Vlit|i>TjnmTI(hWHDT;2aR
z7t^fviGVN?h|m`aBzlQEE%V>GR+iTHY++EilMN>y4
zD9ZIl{ {
+                assertEquals(HttpStatus.OK, entity.getStatusCode());
+                assertEquals("\"https://halo.run:6666/print-uri\"", entity.getBody());
+            })
+            .verifyComplete();
+    }
+
+    @TestConfiguration
+    static class Configuration {
+
+        @Bean
+        RouterFunction printUri() {
+            return route(GET("/print-uri"),
+                request -> {
+                    var uri = request.exchange().getRequest().getURI();
+                    return ServerResponse.ok().bodyValue(uri);
+                });
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/config/CorsTest.java b/application/src/test/java/run/halo/app/config/CorsTest.java
new file mode 100644
index 0000000..efc6701
--- /dev/null
+++ b/application/src/test/java/run/halo/app/config/CorsTest.java
@@ -0,0 +1,93 @@
+package run.halo.app.config;
+
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.MediaType;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.web.reactive.server.WebTestClient;
+
+@SpringBootTest
+@AutoConfigureWebTestClient
+class CorsTest {
+
+    @Autowired
+    WebTestClient webClient;
+
+    @Nested
+    class RequestCorsEnabledApi {
+
+        @Test
+        @WithMockUser
+        void shouldNotResponseAllowOriginHeaderWithSameOrigin() {
+            webClient.get().uri("http://localhost:3000/apis/cors-enabled")
+                .header(HttpHeaders.ORIGIN, "http://localhost:3000")
+                .header(HttpHeaders.AUTHORIZATION, "fake-authorization")
+                .header("FakeHeader", "fake-header-value")
+                .accept(MediaType.APPLICATION_JSON)
+                .exchange()
+                .expectHeader()
+                .doesNotExist(HttpHeaders.ACCESS_CONTROL_ALLOW_ORIGIN);
+        }
+
+        @Test
+        @WithMockUser
+        void shouldResponseAllowOriginHeaderWithDifferentOrigin() {
+            webClient.get().uri("http://localhost:3000/apis/cors-enabled")
+                .header(HttpHeaders.ORIGIN, "https://another.website")
+                .header(HttpHeaders.AUTHORIZATION, "fake-authorization")
+                // .header("ForbiddenHeader", "fake value")
+                .accept(MediaType.APPLICATION_JSON)
+                .exchange()
+                .expectHeader()
+                .exists(HttpHeaders.ACCESS_CONTROL_ALLOW_ORIGIN);
+        }
+
+        @Test
+        @WithMockUser
+        void shouldResponseAllowOriginHeaderWithForbiddenHeader() {
+            webClient.get().uri("http://localhost:3000/apis/cors-enabled")
+                .header(HttpHeaders.ORIGIN, "https://another.website")
+                .header(HttpHeaders.AUTHORIZATION, "fake-authorization")
+                .header("FakeHeader", "fake-header-value")
+                // .header("ForbiddenHeader", "fake value")
+                .accept(MediaType.APPLICATION_JSON)
+                .exchange()
+                .expectHeader()
+                .exists(HttpHeaders.ACCESS_CONTROL_ALLOW_ORIGIN);
+        }
+    }
+
+    @Nested
+    class RequestCorsDisabledApi {
+
+        @Test
+        @WithMockUser
+        void shouldNotResponseAllowOriginHeaderWithDifferentOrigin() {
+            webClient.get().uri("http://localhost:3000/cors-disabled")
+                .header(HttpHeaders.ORIGIN, "https://another.website")
+                .header(HttpHeaders.AUTHORIZATION, "fake-authorization")
+                .accept(MediaType.APPLICATION_JSON)
+                .exchange()
+                .expectHeader()
+                .doesNotExist(HttpHeaders.ACCESS_CONTROL_ALLOW_ORIGIN);
+        }
+
+        @Test
+        @WithMockUser
+        void shouldNotResponseAllowOriginHeaderWithSameOrigin() {
+            webClient.get().uri("http://localhost:3000/cors-disabled")
+                .header(HttpHeaders.ORIGIN, "http://localhost:3000")
+                .header(HttpHeaders.AUTHORIZATION, "fake-authorization")
+                .header("FakeHeader", "fake-header-value")
+                .accept(MediaType.APPLICATION_JSON)
+                .exchange()
+                .expectHeader()
+                .doesNotExist(HttpHeaders.ACCESS_CONTROL_ALLOW_ORIGIN);
+        }
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/config/ExtensionConfigurationTest.java b/application/src/test/java/run/halo/app/config/ExtensionConfigurationTest.java
new file mode 100644
index 0000000..ee0ad61
--- /dev/null
+++ b/application/src/test/java/run/halo/app/config/ExtensionConfigurationTest.java
@@ -0,0 +1,268 @@
+package run.halo.app.config;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.anySet;
+import static org.mockito.Mockito.when;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.csrf;
+
+import java.time.Instant;
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.MockBean;
+import org.springframework.http.MediaType;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.annotation.DirtiesContext;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Flux;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.Scheme;
+import run.halo.app.extension.SchemeManager;
+import run.halo.app.extension.index.IndexerFactory;
+import run.halo.app.extension.store.ExtensionStoreRepository;
+
+@DirtiesContext
+@SpringBootTest
+@AutoConfigureWebTestClient
+class ExtensionConfigurationTest {
+
+    @Autowired
+    WebTestClient webClient;
+
+    @Autowired
+    SchemeManager schemeManager;
+
+    @MockBean
+    RoleService roleService;
+
+    @BeforeEach
+    void setUp() {
+        // disable authorization
+        var rule = new Role.PolicyRule.Builder()
+            .apiGroups("*")
+            .resources("*")
+            .verbs("*")
+            .build();
+        var role = new Role();
+        role.setMetadata(new Metadata());
+        role.getMetadata().setName("supper-role");
+        role.setRules(List.of(rule));
+        when(roleService.listDependenciesFlux(anySet())).thenReturn(Flux.just(role));
+        // register scheme
+        schemeManager.register(FakeExtension.class);
+
+        webClient = webClient.mutateWith(csrf());
+    }
+
+    @AfterEach
+    void cleanUp(@Autowired ExtensionStoreRepository repository,
+        @Autowired IndexerFactory indexerFactory) {
+        var gvk = Scheme.buildFromType(FakeExtension.class).groupVersionKind();
+        if (indexerFactory.contains(gvk)) {
+            indexerFactory.getIndexer(gvk).removeIndexRecords(descriptor -> true);
+        }
+        repository.deleteAll().block();
+        schemeManager.fetch(GroupVersionKind.fromExtension(FakeExtension.class))
+            .ifPresent(scheme -> schemeManager.unregister(scheme));
+    }
+
+    @Test
+    @WithMockUser
+    void shouldReturnNotFoundWhenSchemeNotRegistered() {
+        // unregister the Extension if necessary
+        schemeManager.fetch(Scheme.buildFromType(FakeExtension.class).groupVersionKind())
+            .ifPresent(schemeManager::unregister);
+
+        webClient.get()
+            .uri("/apis/fake.halo.run/v1alpha1/fakes")
+            .exchange()
+            .expectStatus().isNotFound();
+
+        webClient.get()
+            .uri("/apis/fake.halo.run/v1alpha1/fakes/my-fake")
+            .exchange()
+            .expectStatus().isNotFound();
+
+        webClient.post()
+            .uri("/apis/fake.halo.run/v1alpha1/fakes")
+            .bodyValue(new FakeExtension())
+            .exchange()
+            .expectStatus().isNotFound();
+
+        webClient.put()
+            .uri("/apis/fake.halo.run/v1alpha1/fakes/my-fake")
+            .bodyValue(new FakeExtension())
+            .exchange()
+            .expectStatus().isNotFound();
+
+        webClient.delete()
+            .uri("/apis/fake.halo.run/v1alpha1/fakes/my-fake")
+            .exchange()
+            .expectStatus().isNotFound();
+    }
+
+    @Nested
+    @DisplayName("After creating extension")
+    class AfterCreatingExtension {
+
+        @Autowired
+        ExtensionClient extClient;
+
+        FakeExtension createdFake;
+
+        @BeforeEach
+        void setUp() {
+            var metadata = new Metadata();
+            metadata.setName("my-fake");
+            metadata.setLabels(Map.of("label-key", "label-value"));
+            var fake = new FakeExtension();
+            fake.setMetadata(metadata);
+
+            webClient.get()
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/{}", metadata.getName())
+                .exchange()
+                .expectStatus().isNotFound();
+
+            createdFake = webClient.post()
+                .uri("/apis/fake.halo.run/v1alpha1/fakes")
+                .contentType(MediaType.APPLICATION_JSON)
+                .bodyValue(fake)
+                .exchange()
+                .expectStatus().isCreated()
+                .expectHeader().location("/apis/fake.halo.run/v1alpha1/fakes/my-fake")
+                .expectBody(FakeExtension.class)
+                .consumeWith(result -> {
+                    var gotFake = result.getResponseBody();
+                    assertNotNull(gotFake);
+                    assertEquals("my-fake", gotFake.getMetadata().getName());
+                    assertNotNull(gotFake.getMetadata().getVersion());
+                    assertNotNull(gotFake.getMetadata().getCreationTimestamp());
+                })
+                .returnResult()
+                .getResponseBody();
+        }
+
+        @Test
+        @WithMockUser
+        void shouldDeleteExtensionWhenSchemeRegistered() {
+            webClient.delete()
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/{name}",
+                    createdFake.getMetadata().getName())
+                .exchange()
+                .expectStatus().isOk()
+                .expectHeader().contentType(MediaType.APPLICATION_JSON)
+                .expectBody(FakeExtension.class)
+                .consumeWith(result -> {
+                    var deletedFake = result.getResponseBody();
+                    assertNotNull(deletedFake);
+                    assertNotNull(deletedFake.getMetadata().getDeletionTimestamp());
+                    assertTrue(deletedFake.getMetadata().getDeletionTimestamp()
+                        .isBefore(Instant.now()));
+                });
+        }
+
+        @Test
+        @WithMockUser
+        void shouldListExtensionsWhenSchemeRegistered() {
+            webClient.get().uri("/apis/fake.halo.run/v1alpha1/fakes")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody().jsonPath("$.items.length()").isEqualTo(1);
+        }
+
+        @Test
+        @WithMockUser
+        void shouldListExtensionsWithMatchedSelectors() {
+            webClient.get().uri(uriBuilder -> uriBuilder
+                    .path("/apis/fake.halo.run/v1alpha1/fakes")
+                    .queryParam("labelSelector", "label-key=label-value")
+                    .queryParam("fieldSelector", "name=my-fake")
+                    .build())
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody().jsonPath("$.items.length()").isEqualTo(1);
+        }
+
+        @Test
+        @WithMockUser
+        void shouldListExtensionsWithMismatchedSelectors() {
+            webClient.get().uri(uriBuilder -> uriBuilder
+                    .path("/apis/fake.halo.run/v1alpha1/fakes")
+                    .queryParam("labelSelector", "label-key=invalid-label-value")
+                    .queryParam("fieldSelector", "name=invalid-name")
+                    .build())
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody().jsonPath("$.items.length()").isEqualTo(0);
+        }
+
+        @Test
+        @WithMockUser
+        void shouldUpdateExtensionWhenSchemeRegistered() {
+            var name = createdFake.getMetadata().getName();
+            FakeExtension fakeToUpdate = getFakeExtension(name);
+            fakeToUpdate.getMetadata().setLabels(Map.of("updated", "true"));
+
+            webClient.put()
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/{name}", name)
+                .bodyValue(fakeToUpdate)
+                .exchange()
+                .expectStatus().isOk()
+                .expectHeader().contentType(MediaType.APPLICATION_JSON)
+                .expectBody(FakeExtension.class)
+                .consumeWith(result -> {
+                    var updatedFake = result.getResponseBody();
+                    assertNotNull(updatedFake);
+                    assertNotEquals(fakeToUpdate.getMetadata().getVersion(),
+                        updatedFake.getMetadata().getVersion());
+                    assertEquals(Map.of("updated", "true"),
+                        updatedFake.getMetadata().getLabels());
+                });
+        }
+
+        @Test
+        @WithMockUser
+        void shouldGetExtensionWhenSchemeRegistered() {
+            var name = createdFake.getMetadata().getName();
+            webClient.get()
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/{name}", name)
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(FakeExtension.class)
+                .consumeWith(result -> {
+                    var gotFake = result.getResponseBody();
+                    assertNotNull(gotFake);
+                    assertEquals(name, gotFake.getMetadata().getName());
+                    assertNotNull(gotFake.getMetadata().getVersion());
+                    assertNotNull(gotFake.getMetadata().getCreationTimestamp());
+                });
+        }
+
+        FakeExtension getFakeExtension(String name) {
+            return webClient.get()
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/{name}", name)
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(FakeExtension.class)
+                .returnResult()
+                .getResponseBody();
+        }
+
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/config/HaloConfigurationTest.java b/application/src/test/java/run/halo/app/config/HaloConfigurationTest.java
new file mode 100644
index 0000000..56818a0
--- /dev/null
+++ b/application/src/test/java/run/halo/app/config/HaloConfigurationTest.java
@@ -0,0 +1,44 @@
+package run.halo.app.config;
+
+import static org.junit.jupiter.api.Assertions.assertInstanceOf;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.test.annotation.DirtiesContext;
+import run.halo.app.search.SearchEngine;
+import run.halo.app.search.lucene.LuceneSearchEngine;
+
+class HaloConfigurationTest {
+
+    @Nested
+    @SpringBootTest
+    class LuceneSearchEngineDisabled {
+
+        @Test
+        void shouldNotCreateLuceneSearchEngineBean(
+            @Autowired ObjectProvider searchEngines) {
+            var searchEngine = searchEngines.getIfAvailable();
+            assertNull(searchEngine);
+        }
+    }
+
+    @Nested
+    @SpringBootTest(properties = "halo.search-engine.lucene.enabled=true")
+    @DirtiesContext
+    class LuceneSearchEngineEnabled {
+
+        @Test
+        void shouldCreateLuceneSearchEngineBean(
+            @Autowired ObjectProvider searchEngines) {
+            var searchEngine = searchEngines.getIfAvailable();
+            assertNotNull(searchEngine);
+            assertInstanceOf(LuceneSearchEngine.class, searchEngine);
+        }
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/config/SecurityConfigTest.java b/application/src/test/java/run/halo/app/config/SecurityConfigTest.java
new file mode 100644
index 0000000..2c7257c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/config/SecurityConfigTest.java
@@ -0,0 +1,39 @@
+package run.halo.app.config;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.springframework.security.web.server.header.StrictTransportSecurityServerHttpHeadersWriter.STRICT_TRANSPORT_SECURITY;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.reactive.server.WebTestClient;
+
+@SpringBootTest
+@AutoConfigureWebTestClient
+class SecurityConfigTest {
+
+    @Autowired
+    WebTestClient webClient;
+
+    @Test
+    void shouldNotIncludeSubdomainForHstsHeader() {
+        webClient.get()
+            .uri(builder -> builder.scheme("https").path("/fake").build())
+            .accept(MediaType.TEXT_HTML)
+            .exchange()
+            .expectHeader()
+            .value(STRICT_TRANSPORT_SECURITY,
+                hsts -> assertFalse(hsts.contains("includeSubDomains")));
+
+        webClient.get()
+            .uri(builder -> builder.scheme("https").path("/apis/fake").build())
+            .accept(MediaType.APPLICATION_JSON)
+            .exchange()
+            .expectHeader()
+            .value(STRICT_TRANSPORT_SECURITY,
+                hsts -> assertFalse(hsts.contains("includeSubDomains")));
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/config/ServerCodecTest.java b/application/src/test/java/run/halo/app/config/ServerCodecTest.java
new file mode 100644
index 0000000..202fe6b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/config/ServerCodecTest.java
@@ -0,0 +1,94 @@
+package run.halo.app.config;
+
+import static org.hamcrest.Matchers.equalTo;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.csrf;
+import static org.springframework.web.reactive.function.server.RequestPredicates.accept;
+import static org.springframework.web.reactive.function.server.RequestPredicates.contentType;
+import static org.springframework.web.reactive.function.server.RouterFunctions.route;
+
+import java.time.Instant;
+import java.time.LocalDateTime;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.context.TestConfiguration;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Import;
+import org.springframework.core.ParameterizedTypeReference;
+import org.springframework.http.MediaType;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+
+@SpringBootTest
+@AutoConfigureWebTestClient
+@Import(ServerCodecTest.TestConfig.class)
+class ServerCodecTest {
+
+    static final String INSTANT = "2022-06-09T10:57:30Z";
+
+    static final String LOCAL_DATE_TIME = "2022-06-10T10:57:30";
+
+    @Autowired
+    WebTestClient webClient;
+
+    @Test
+    @WithMockUser
+    void timeSerializationTest() {
+        webClient.get().uri("/fake/api/times")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.instant").value(equalTo(INSTANT))
+            .jsonPath("$.localDateTime").value(equalTo(LOCAL_DATE_TIME))
+        ;
+    }
+
+    @Test
+    @WithMockUser
+    void timeDeserializationTest() {
+        webClient
+            .mutateWith(csrf())
+            .post().uri("/fake/api/time/report")
+            .contentType(MediaType.APPLICATION_JSON)
+            .accept(MediaType.APPLICATION_JSON)
+            .bodyValue(Map.of("now", Instant.parse(INSTANT)))
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody(new ParameterizedTypeReference>() {
+            }).isEqualTo(Map.of("now", Instant.parse(INSTANT)))
+        ;
+    }
+
+    @TestConfiguration(proxyBeanMethods = false)
+    static class TestConfig {
+
+        @Bean
+        RouterFunction timesRouter() {
+            return route().GET("/fake/api/times", request -> {
+                var times = Map.of("instant", Instant.parse(INSTANT),
+                    "localDateTime", LocalDateTime.parse(LOCAL_DATE_TIME));
+                return ServerResponse
+                    .ok()
+                    .contentType(MediaType.APPLICATION_JSON)
+                    .bodyValue(times);
+            }).build();
+        }
+
+        @Bean
+        RouterFunction reportTime() {
+            final var type = new ParameterizedTypeReference>() {
+            };
+            return route().POST("/fake/api/time/report",
+                    contentType(MediaType.APPLICATION_JSON).and(accept(MediaType.APPLICATION_JSON)),
+                    request -> ServerResponse.ok()
+                        .body(request.bodyToMono(type), type))
+                .build();
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/config/WebFluxConfigTest.java b/application/src/test/java/run/halo/app/config/WebFluxConfigTest.java
new file mode 100644
index 0000000..e60e287
--- /dev/null
+++ b/application/src/test/java/run/halo/app/config/WebFluxConfigTest.java
@@ -0,0 +1,157 @@
+package run.halo.app.config;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.Mockito.when;
+
+import java.net.URI;
+import java.util.List;
+import java.util.Set;
+import org.hamcrest.core.StringStartsWith;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.context.TestConfiguration;
+import org.springframework.boot.test.mock.mockito.SpyBean;
+import org.springframework.boot.test.web.server.LocalServerPort;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Import;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.socket.WebSocketHandler;
+import org.springframework.web.reactive.socket.WebSocketMessage;
+import org.springframework.web.reactive.socket.client.ReactorNettyWebSocketClient;
+import reactor.core.publisher.Flux;
+import reactor.test.StepVerifier;
+import run.halo.app.core.endpoint.WebSocketEndpoint;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.extension.GroupVersion;
+import run.halo.app.extension.Metadata;
+
+@SpringBootTest(properties = "halo.console.location=classpath:/console/", webEnvironment =
+    SpringBootTest.WebEnvironment.RANDOM_PORT)
+@Import(WebFluxConfigTest.WebSocketSupportTest.TestWebSocketConfiguration.class)
+@AutoConfigureWebTestClient
+class WebFluxConfigTest {
+
+    @Autowired
+    WebTestClient webClient;
+
+    @SpyBean
+    RoleService roleService;
+
+    @LocalServerPort
+    int port;
+
+    @Nested
+    class WebSocketSupportTest {
+
+        @Test
+        void shouldInitializeWebSocketEndpoint() {
+            var role = new Role();
+            var metadata = new Metadata();
+            metadata.setName("fake-role");
+            role.setMetadata(metadata);
+            role.setRules(List.of(new Role.PolicyRule.Builder()
+                .apiGroups("fake.halo.run")
+                .verbs("watch")
+                .resources("resources")
+                .build()));
+            when(roleService.listDependenciesFlux(Set.of("anonymous"))).thenReturn(Flux.just(role));
+            var webSocketClient = new ReactorNettyWebSocketClient();
+            webSocketClient.execute(
+                    URI.create("ws://localhost:" + port + "/apis/fake.halo.run/v1alpha1/resources"),
+                    session -> {
+                        var send = session.send(Flux.just(session.textMessage("halo")));
+                        var receive = session.receive().map(WebSocketMessage::getPayloadAsText)
+                            .next()
+                            .doOnNext(message -> assertEquals("HALO", message));
+                        return send.and(receive);
+                    })
+                .as(StepVerifier::create)
+                .verifyComplete();
+        }
+
+        @TestConfiguration
+        static class TestWebSocketConfiguration {
+
+            @Bean
+            WebSocketEndpoint fakeWebSocketEndpoint() {
+                return new FakeWebSocketEndpoint();
+            }
+
+        }
+
+        static class FakeWebSocketEndpoint implements WebSocketEndpoint {
+
+            @Override
+            public String urlPath() {
+                return "/resources";
+            }
+
+            @Override
+            public GroupVersion groupVersion() {
+                return GroupVersion.parseAPIVersion("fake.halo.run/v1alpha1");
+            }
+
+            @Override
+            public WebSocketHandler handler() {
+                return session -> {
+                    var messages = session.receive()
+                        .map(message -> session.textMessage(
+                            message.getPayloadAsText().toUpperCase())
+                        );
+                    return session.send(messages).then(session.close());
+                };
+            }
+        }
+
+    }
+
+    @Nested
+    class ConsoleRequest {
+
+        @Test
+        void shouldRequestConsoleIndex() {
+            List.of(
+                    "/console",
+                    "/console/index",
+                    "/console/index.html",
+                    "/console/dashboard",
+                    "/console/fake"
+                )
+                .forEach(uri -> webClient.get().uri(uri)
+                    .exchange()
+                    .expectStatus().isOk()
+                    .expectBody(String.class).value(StringStartsWith.startsWith("console index"))
+                );
+        }
+
+        @Test
+        void shouldRequestConsoleAssetsCorrectly() {
+            webClient.get().uri("/console/assets/fake.txt")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(String.class).value(StringStartsWith.startsWith("fake."));
+        }
+
+        @Test
+        void shouldResponseNotFoundWhenAssetsNotExist() {
+            webClient.get().uri("/console/assets/not-found.txt")
+                .exchange()
+                .expectStatus().isNotFound();
+        }
+    }
+
+    @Nested
+    class StaticResourcesTest {
+
+        @Test
+        void shouldRespond404WhenThemeResourceNotFound() {
+            webClient.get().uri("/themes/fake-theme/assets/favicon.ico")
+                .exchange()
+                .expectStatus().isNotFound();
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/console/WebSocketServerWebExchangeMatcherTest.java b/application/src/test/java/run/halo/app/console/WebSocketServerWebExchangeMatcherTest.java
new file mode 100644
index 0000000..cf2944b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/console/WebSocketServerWebExchangeMatcherTest.java
@@ -0,0 +1,39 @@
+package run.halo.app.console;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.http.HttpHeaders;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import reactor.test.StepVerifier;
+
+class WebSocketServerWebExchangeMatcherTest {
+
+    @Test
+    void shouldMatchIfWebSocketProtocol() {
+        var httpRequest = MockServerHttpRequest.get("")
+            .header(HttpHeaders.CONNECTION, HttpHeaders.UPGRADE)
+            .header(HttpHeaders.UPGRADE, "websocket")
+            .build();
+        var wsExchange = MockServerWebExchange.from(httpRequest);
+        var wsMatcher = new WebSocketServerWebExchangeMatcher();
+        StepVerifier.create(wsMatcher.matches(wsExchange))
+            .consumeNextWith(result -> assertTrue(result.isMatch()))
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldNotMatchIfNotWebSocketProtocol() {
+        var httpRequest = MockServerHttpRequest.get("")
+            .header(HttpHeaders.CONNECTION, HttpHeaders.UPGRADE)
+            .header(HttpHeaders.UPGRADE, "not-a-websocket")
+            .build();
+        var wsExchange = MockServerWebExchange.from(httpRequest);
+        var wsMatcher = new WebSocketServerWebExchangeMatcher();
+        StepVerifier.create(wsMatcher.matches(wsExchange))
+            .consumeNextWith(result -> assertFalse(result.isMatch()))
+            .verifyComplete();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/console/WebSocketUtilsTest.java b/application/src/test/java/run/halo/app/console/WebSocketUtilsTest.java
new file mode 100644
index 0000000..aac0fd1
--- /dev/null
+++ b/application/src/test/java/run/halo/app/console/WebSocketUtilsTest.java
@@ -0,0 +1,51 @@
+package run.halo.app.console;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.springframework.http.HttpHeaders;
+
+class WebSocketUtilsTest {
+
+    @Nested
+    class IsWebSocketTest {
+
+        @Test
+        void shouldBeWebSocketIfHeadersContaining() {
+            var headers = new HttpHeaders();
+            headers.add("Connection", "Upgrade");
+            headers.add("Upgrade", "websocket");
+            assertTrue(WebSocketUtils.isWebSocketUpgrade(headers));
+        }
+
+        @Test
+        void shouldNotBeWebSocketIfHeaderValuesAreIncorrect() {
+            var headers = new HttpHeaders();
+            headers.add("Connection", "keep-alive");
+            headers.add("Upgrade", "websocket");
+            assertFalse(WebSocketUtils.isWebSocketUpgrade(headers));
+        }
+
+        @Test
+        void shouldNotBeWebSocketIfMissingUpgradeHeader() {
+            var headers = new HttpHeaders();
+            headers.add("Connection", "Upgrade");
+            assertFalse(WebSocketUtils.isWebSocketUpgrade(headers));
+        }
+
+        @Test
+        void shouldNotBeWebSocketIfMissingConnectionHeader() {
+            var headers = new HttpHeaders();
+            headers.add("Connection", "Upgrade");
+            assertFalse(WebSocketUtils.isWebSocketUpgrade(headers));
+        }
+
+        @Test
+        void shouldNotBeWebSocketIfMissingHeaders() {
+            var headers = new HttpHeaders();
+            assertFalse(WebSocketUtils.isWebSocketUpgrade(headers));
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/CategoryPostCountUpdaterTest.java b/application/src/test/java/run/halo/app/content/CategoryPostCountUpdaterTest.java
new file mode 100644
index 0000000..8b0fab5
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/CategoryPostCountUpdaterTest.java
@@ -0,0 +1,227 @@
+package run.halo.app.content;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.verify;
+
+import java.util.List;
+import java.util.Set;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.mockito.ArgumentCaptor;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.SpyBean;
+import org.springframework.test.annotation.DirtiesContext;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.content.Category;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.Extension;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.ExtensionStoreUtil;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.SchemeManager;
+import run.halo.app.extension.index.IndexerFactory;
+import run.halo.app.extension.store.ReactiveExtensionStoreClient;
+
+/**
+ * Tests for {@link CategoryPostCountUpdater}.
+ *
+ * @author guqing
+ * @since 2.15.0
+ */
+class CategoryPostCountUpdaterTest {
+
+    @Nested
+    @DirtiesContext
+    @SpringBootTest
+    class CategoryPostCountServiceIntegrationTest {
+        private final List storedPosts = posts();
+        private final List storedCategories = categories();
+
+        @Autowired
+        private SchemeManager schemeManager;
+
+        @SpyBean
+        private ExtensionClient client;
+
+        @Autowired
+        private ReactiveExtensionClient reactiveClient;
+
+        @Autowired
+        private ReactiveExtensionStoreClient storeClient;
+
+        @Autowired
+        private IndexerFactory indexerFactory;
+
+        private CategoryPostCountUpdater.CategoryPostCountService categoryPostCountService;
+
+        Mono deleteImmediately(Extension extension) {
+            var name = extension.getMetadata().getName();
+            var scheme = schemeManager.get(extension.getClass());
+            // un-index
+            var indexer = indexerFactory.getIndexer(extension.groupVersionKind());
+            indexer.unIndexRecord(extension.getMetadata().getName());
+
+            // delete from db
+            var storeName = ExtensionStoreUtil.buildStoreName(scheme, name);
+            return storeClient.delete(storeName, extension.getMetadata().getVersion())
+                .thenReturn(extension);
+        }
+
+        @BeforeEach
+        void setUp() {
+            categoryPostCountService =
+                new CategoryPostCountUpdater.CategoryPostCountService(client);
+            Flux.fromIterable(storedPosts)
+                .flatMap(post -> reactiveClient.create(post))
+                .as(StepVerifier::create)
+                .expectNextCount(storedPosts.size())
+                .verifyComplete();
+
+            Flux.fromIterable(storedCategories)
+                .flatMap(category -> reactiveClient.create(category))
+                .as(StepVerifier::create)
+                .expectNextCount(storedCategories.size())
+                .verifyComplete();
+        }
+
+        @AfterEach
+        void tearDown() {
+            Flux.fromIterable(storedPosts)
+                .flatMap(this::deleteImmediately)
+                .as(StepVerifier::create)
+                .expectNextCount(storedPosts.size())
+                .verifyComplete();
+
+            Flux.fromIterable(storedCategories)
+                .flatMap(this::deleteImmediately)
+                .as(StepVerifier::create)
+                .expectNextCount(storedCategories.size())
+                .verifyComplete();
+        }
+
+        @Test
+        void reconcileStatusPostForCategoryA() {
+            categoryPostCountService.recalculatePostCount(Set.of("category-A"));
+
+            ArgumentCaptor captor = ArgumentCaptor.forClass(Category.class);
+            verify(client).update(captor.capture());
+            var value = captor.getValue();
+            assertThat(value.getStatusOrDefault().getPostCount()).isEqualTo(1);
+            assertThat(value.getStatusOrDefault().getVisiblePostCount()).isEqualTo(0);
+        }
+
+
+        @Test
+        void reconcileStatusPostForCategoryB() {
+            categoryPostCountService.recalculatePostCount(Set.of("category-B"));
+
+            ArgumentCaptor captor = ArgumentCaptor.forClass(Category.class);
+            verify(client).update(captor.capture());
+            var category = captor.getValue();
+            assertThat(category.getStatusOrDefault().getPostCount()).isEqualTo(1);
+            assertThat(category.getStatusOrDefault().getVisiblePostCount()).isEqualTo(0);
+        }
+
+        @Test
+        void reconcileStatusPostForCategoryC() {
+            categoryPostCountService.recalculatePostCount(Set.of("category-C"));
+
+            ArgumentCaptor captor = ArgumentCaptor.forClass(Category.class);
+            verify(client).update(captor.capture());
+            var value = captor.getValue();
+            assertThat(value.getStatusOrDefault().getPostCount()).isEqualTo(2);
+            assertThat(value.getStatusOrDefault().getVisiblePostCount()).isEqualTo(0);
+        }
+
+        @Test
+        void reconcileStatusPostForCategoryD() {
+            categoryPostCountService.recalculatePostCount(Set.of("category-D"));
+
+            ArgumentCaptor captor = ArgumentCaptor.forClass(Category.class);
+            verify(client).update(captor.capture());
+            var value = captor.getValue();
+            assertThat(value.getStatusOrDefault().postCount).isEqualTo(1);
+            assertThat(value.getStatusOrDefault().visiblePostCount).isEqualTo(0);
+        }
+
+        private List categories() {
+            /*
+             * |-A(post-4)
+             *   |-B(post-3)
+             *   |-|-C(post-2,post-1)
+             *   |-D(post-1)
+             */
+            Category categoryA = category("category-A");
+            categoryA.getSpec().setChildren(List.of("category-B", "category-D"));
+
+            Category categoryB = category("category-B");
+            categoryB.getSpec().setChildren(List.of("category-C"));
+
+            Category categoryC = category("category-C");
+            Category categoryD = category("category-D");
+            return List.of(categoryA, categoryB, categoryC, categoryD);
+        }
+
+        private Category category(String name) {
+            Category category = new Category();
+            Metadata metadata = new Metadata();
+            metadata.setName(name);
+            category.setMetadata(metadata);
+            category.setSpec(new Category.CategorySpec());
+            category.setStatus(new Category.CategoryStatus());
+
+            category.getSpec().setDisplayName("display-name");
+            category.getSpec().setSlug("slug");
+            category.getSpec().setPriority(0);
+            return category;
+        }
+
+        private List posts() {
+            /*
+             * |-A(post-4)
+             *   |-B(post-3)
+             *   |-|-C(post-2,post-1)
+             *   |-D(post-1)
+             */
+            Post post1 = fakePost();
+            post1.getMetadata().setName("post-1");
+            post1.getSpec().setCategories(List.of("category-D", "category-C"));
+            post1.getSpec().setVisible(Post.VisibleEnum.PUBLIC);
+
+            Post post2 = fakePost();
+            post2.getMetadata().setName("post-2");
+            post2.getSpec().setCategories(List.of("category-C"));
+            post2.getSpec().setVisible(Post.VisibleEnum.PUBLIC);
+
+            Post post3 = fakePost();
+            post3.getMetadata().setName("post-3");
+            post3.getSpec().setCategories(List.of("category-B"));
+            post3.getSpec().setVisible(Post.VisibleEnum.PUBLIC);
+
+            Post post4 = fakePost();
+            post4.getMetadata().setName("post-4");
+            post4.getSpec().setCategories(List.of("category-A"));
+            post4.getSpec().setVisible(Post.VisibleEnum.PUBLIC);
+            return List.of(post1, post2, post3, post4);
+        }
+
+        Post fakePost() {
+            var post = TestPost.postV1();
+            post.getSpec().setAllowComment(true);
+            post.getSpec().setDeleted(false);
+            post.getSpec().setExcerpt(new Post.Excerpt());
+            post.getSpec().getExcerpt().setAutoGenerate(false);
+            post.getSpec().setPinned(false);
+            post.getSpec().setPriority(0);
+            post.getSpec().setPublish(false);
+            post.getSpec().setSlug("fake-post");
+            return post;
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/ContentRequestTest.java b/application/src/test/java/run/halo/app/content/ContentRequestTest.java
new file mode 100644
index 0000000..3130735
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/ContentRequestTest.java
@@ -0,0 +1,127 @@
+package run.halo.app.content;
+
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.Snapshot;
+import run.halo.app.extension.Ref;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link ContentRequest}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class ContentRequestTest {
+    private ContentRequest contentRequest;
+
+    @BeforeEach
+    void setUp() {
+        Ref ref = new Ref();
+        ref.setKind(Post.KIND);
+        ref.setGroup("content.halo.run");
+        ref.setName("test-post");
+        contentRequest = new ContentRequest(ref, "snapshot-1", null, """
+            Four score and seven
+            years ago our fathers
+
+            brought forth on this continent
+            """,
+            """
+                
Four score and seven

+                
years ago our fathers

+                

+                
brought forth on this continent

+                """,
+            "MARKDOWN");
+    }
+
+    @Test
+    void toSnapshot() throws JSONException {
+        String expectedContentPath =
+            "
Four score and seven
\n
years ago our fathers
\n
\n
brought forth "
+                + "on this continent
\n";
+        String expectedRawPatch =
+            "Four score and seven\nyears ago our fathers\n\nbrought forth on this continent\n";
+        Snapshot snapshot = contentRequest.toSnapshot();
+        snapshot.getMetadata().setName("7b149646-ac60-4a5c-98ee-78b2dd0631b2");
+        JSONAssert.assertEquals(JsonUtils.objectToJson(snapshot),
+            """
+                {
+                    "spec": {
+                        "subjectRef": {
+                            "kind": "Post",
+                            "group": "content.halo.run",
+                            "name": "test-post"
+                        },
+                        "rawType": "MARKDOWN",
+                        "rawPatch": "%s",
+                        "contentPatch": "%s"
+                    },
+                    "apiVersion": "content.halo.run/v1alpha1",
+                    "kind": "Snapshot",
+                    "metadata": {
+                        "name": "7b149646-ac60-4a5c-98ee-78b2dd0631b2",
+                        "annotations": {}
+                    }
+                }
+                """.formatted(expectedRawPatch, expectedContentPath),
+            true);
+    }
+
+    @Test
+    void rawPatchFrom() throws JSONException {
+        String s = contentRequest.rawPatchFrom("""
+            Four score and seven
+            years ago our fathers
+            """);
+        JSONAssert.assertEquals(s,
+            """
+                   [
+                    {
+                        "source": {
+                            "position": 3,
+                            "lines": []
+                        },
+                        "target": {
+                            "position": 3,
+                            "lines": [
+                                "brought forth on this continent",
+                                ""
+                            ]
+                        },
+                        "type": "INSERT"
+                    }
+                ]
+                """, true);
+    }
+
+    @Test
+    void contentPatchFrom() throws JSONException {
+        String s = contentRequest.contentPatchFrom("""
+            
Four score and seven

+            
years ago our fathers

+            """);
+        JSONAssert.assertEquals(s, """
+            [
+                 {
+                     "source": {
+                         "position": 2,
+                         "lines": []
+                     },
+                     "target": {
+                         "position": 2,
+                         "lines": [
+                             "
",
+                             "
brought forth on this continent
"
+                         ]
+                     },
+                     "type": "INSERT"
+                 }
+            ]
+            """, true);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/PostIntegrationTests.java b/application/src/test/java/run/halo/app/content/PostIntegrationTests.java
new file mode 100644
index 0000000..629f3bb
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/PostIntegrationTests.java
@@ -0,0 +1,144 @@
+package run.halo.app.content;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.anySet;
+import static org.mockito.Mockito.when;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.csrf;
+
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.jdbc.AutoConfigureTestDatabase;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.MockBean;
+import org.springframework.http.MediaType;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Flux;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.MetadataOperator;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Integration tests for {@link PostService}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@SpringBootTest
+@AutoConfigureWebTestClient
+@AutoConfigureTestDatabase
+@WithMockUser(username = "fake-user", password = "fake-password", roles = "fake-super-role")
+public class PostIntegrationTests {
+
+    @Autowired
+    private WebTestClient webTestClient;
+
+    @MockBean
+    RoleService roleService;
+
+    @BeforeEach
+    void setUp() {
+        var rule = new Role.PolicyRule.Builder()
+            .apiGroups("*")
+            .resources("*")
+            .verbs("*")
+            .build();
+        var role = new Role();
+        role.setMetadata(new Metadata());
+        role.getMetadata().setName("super-role");
+        role.setRules(List.of(rule));
+        when(roleService.listDependenciesFlux(anySet())).thenReturn(Flux.just(role));
+        webTestClient = webTestClient.mutateWith(csrf());
+    }
+
+    @Test
+    void draftPost() {
+        webTestClient.post()
+            .uri("/apis/api.console.halo.run/v1alpha1/posts")
+            .contentType(MediaType.APPLICATION_JSON)
+            .bodyValue(postDraftRequest())
+            .exchange()
+            .expectBody(Post.class)
+            .value(post -> {
+                MetadataOperator metadata = post.getMetadata();
+                Post.PostSpec spec = post.getSpec();
+                assertThat(spec.getTitle()).isEqualTo("无标题文章");
+                assertThat(metadata.getCreationTimestamp()).isNotNull();
+                assertThat(metadata.getName()).startsWith("post-");
+                assertThat(spec.getHeadSnapshot()).isNotNull();
+                assertThat(spec.getHeadSnapshot()).isEqualTo(spec.getBaseSnapshot());
+                assertThat(spec.getOwner()).isEqualTo("fake-user");
+
+                assertThat(post.getStatus()).isNotNull();
+                assertThat(post.getStatus().getPhase()).isEqualTo("DRAFT");
+                assertThat(post.getStatus().getConditions().peek().getType()).isEqualTo("DRAFT");
+            });
+    }
+
+    @Test
+    void draftPostAsPublish() {
+        PostRequest postRequest = postDraftRequest();
+        postRequest.post().getSpec().setPublish(true);
+        webTestClient.post()
+            .uri("/apis/api.console.halo.run/v1alpha1/posts")
+            .contentType(MediaType.APPLICATION_JSON)
+            .bodyValue(postRequest)
+            .exchange()
+            .expectBody(Post.class)
+            .value(post -> {
+                assertThat(post.getSpec().getReleaseSnapshot()).isNotNull();
+                assertThat(post.getSpec().getReleaseSnapshot())
+                    .isEqualTo(post.getSpec().getHeadSnapshot());
+                assertThat(post.getSpec().getHeadSnapshot())
+                    .isEqualTo(post.getSpec().getBaseSnapshot());
+            });
+    }
+
+    PostRequest postDraftRequest() {
+        String s = """
+            {
+                "post": {
+                    "spec": {
+                        "title": "无标题文章",
+                        "slug": "41c2ad39-21b4-45e4-a36b-5768245a0555",
+                        "template": "",
+                        "cover": "",
+                        "deleted": false,
+                        "publish": true,
+                        "publishTime": "",
+                        "pinned": false,
+                        "allowComment": true,
+                        "visible": "PUBLIC",
+                        "version": 1,
+                        "priority": 0,
+                        "excerpt": {
+                            "autoGenerate": true,
+                            "raw": ""
+                        },
+                        "categories": [],
+                        "tags": [],
+                        "htmlMetas": []
+                    },
+                    "apiVersion": "content.halo.run/v1alpha1",
+                    "kind": "Post",
+                    "metadata": {
+                        "name": "",
+                        "generateName": "post-"
+                    }
+                },
+                "content": {
+                    "raw": "
hello world
",
+                    "content": "
hello world
",
+                    "rawType": "HTML"
+                }
+            }
+            """;
+        return JsonUtils.jsonToObject(s, PostRequest.class);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/content/TestPost.java b/application/src/test/java/run/halo/app/content/TestPost.java
new file mode 100644
index 0000000..0dfeadc
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/TestPost.java
@@ -0,0 +1,92 @@
+package run.halo.app.content;
+
+import java.time.Instant;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.Snapshot;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.MetadataUtil;
+
+/**
+ * @author guqing
+ * @since 2.0.0
+ */
+public class TestPost {
+    public static Post postV1() {
+        Post post = new Post();
+        post.setKind(Post.KIND);
+        post.setApiVersion(getApiVersion(Post.class));
+        Metadata metadata = new Metadata();
+        metadata.setName("post-A");
+        metadata.setVersion(1L);
+        post.setMetadata(metadata);
+
+        Post.PostSpec postSpec = new Post.PostSpec();
+        post.setSpec(postSpec);
+
+        postSpec.setTitle("post-A");
+        postSpec.setBaseSnapshot(snapshotV1().getMetadata().getName());
+        postSpec.setHeadSnapshot("base-snapshot");
+        postSpec.setReleaseSnapshot(null);
+
+        return post;
+    }
+
+    public static Snapshot snapshotV1() {
+        Snapshot snapshot = new Snapshot();
+        snapshot.setKind(Snapshot.KIND);
+        snapshot.setApiVersion(getApiVersion(Snapshot.class));
+        Metadata metadata = new Metadata();
+        metadata.setName("snapshot-A");
+        metadata.setVersion(1L);
+        metadata.setCreationTimestamp(Instant.now());
+        snapshot.setMetadata(metadata);
+        MetadataUtil.nullSafeAnnotations(snapshot).put(Snapshot.KEEP_RAW_ANNO, "true");
+        Snapshot.SnapShotSpec spec = new Snapshot.SnapShotSpec();
+        snapshot.setSpec(spec);
+
+        Snapshot.addContributor(snapshot, "guqing");
+        spec.setRawType("MARKDOWN");
+        spec.setRawPatch("A");
+        spec.setContentPatch("
A
");
+
+        return snapshot;
+    }
+
+    public static Snapshot snapshotV2() {
+        Snapshot snapshot = new Snapshot();
+        snapshot.setKind(Snapshot.KIND);
+        snapshot.setApiVersion(getApiVersion(Snapshot.class));
+        Metadata metadata = new Metadata();
+        metadata.setCreationTimestamp(Instant.now().plusSeconds(10));
+        metadata.setName("snapshot-B");
+        snapshot.setMetadata(metadata);
+        Snapshot.SnapShotSpec spec = new Snapshot.SnapShotSpec();
+        snapshot.setSpec(spec);
+        Snapshot.addContributor(snapshot, "guqing");
+        spec.setRawType("MARKDOWN");
+        spec.setRawPatch(PatchUtils.diffToJsonPatch("A", "B"));
+        spec.setContentPatch(PatchUtils.diffToJsonPatch("
A
", "
B
"));
+
+        return snapshot;
+    }
+
+    public static Snapshot snapshotV3() {
+        Snapshot snapshotV3 = snapshotV2();
+        snapshotV3.getMetadata().setName("snapshot-C");
+        snapshotV3.getMetadata().setCreationTimestamp(Instant.now().plusSeconds(20));
+        Snapshot.SnapShotSpec spec = snapshotV3.getSpec();
+        Snapshot.addContributor(snapshotV3, "guqing");
+        spec.setRawType("MARKDOWN");
+        spec.setRawPatch(PatchUtils.diffToJsonPatch("B", "C"));
+        spec.setContentPatch(PatchUtils.diffToJsonPatch("
B
", "
C
"));
+
+        return snapshotV3;
+    }
+
+    public static String getApiVersion(Class extension) {
+        GVK annotation = extension.getAnnotation(GVK.class);
+        return annotation.group() + "/" + annotation.version();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/content/comment/CommentEmailOwnerTest.java b/application/src/test/java/run/halo/app/content/comment/CommentEmailOwnerTest.java
new file mode 100644
index 0000000..5d61364
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/comment/CommentEmailOwnerTest.java
@@ -0,0 +1,52 @@
+package run.halo.app.content.comment;
+
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link CommentEmailOwner}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class CommentEmailOwnerTest {
+
+    @Test
+    void constructorTest() throws JSONException {
+        CommentEmailOwner commentEmailOwner =
+            new CommentEmailOwner("example@example.com", "avatar", "displayName", "website");
+        JSONAssert.assertEquals("""
+                {
+                    "email": "example@example.com",
+                    "avatar": "avatar",
+                    "displayName": "displayName",
+                    "website": "website"
+                }
+                """,
+            JsonUtils.objectToJson(commentEmailOwner),
+            true);
+    }
+
+    @Test
+    void toCommentOwner() throws JSONException {
+        CommentEmailOwner commentEmailOwner =
+            new CommentEmailOwner("example@example.com", "avatar", "displayName", "website");
+        Comment.CommentOwner commentOwner = commentEmailOwner.toCommentOwner();
+        JSONAssert.assertEquals("""
+                {
+                    "kind": "Email",
+                    "name": "example@example.com",
+                    "displayName": "displayName",
+                    "annotations": {
+                        "website": "website",
+                        "avatar": "avatar"
+                    }
+                }
+                """,
+            JsonUtils.objectToJson(commentOwner),
+            true);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/comment/CommentNotificationReasonPublisherTest.java b/application/src/test/java/run/halo/app/content/comment/CommentNotificationReasonPublisherTest.java
new file mode 100644
index 0000000..44ae342
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/comment/CommentNotificationReasonPublisherTest.java
@@ -0,0 +1,470 @@
+package run.halo.app.content.comment;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.Map;
+import java.util.Optional;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.NotificationReasonConst;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.Reply;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.core.extension.notification.Reason;
+import run.halo.app.event.post.CommentCreatedEvent;
+import run.halo.app.event.post.ReplyCreatedEvent;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.Ref;
+import run.halo.app.infra.ExternalLinkProcessor;
+import run.halo.app.notification.NotificationReasonEmitter;
+import run.halo.app.notification.ReasonPayload;
+import run.halo.app.notification.UserIdentity;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+
+/**
+ * Tests for {@link CommentNotificationReasonPublisher}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class CommentNotificationReasonPublisherTest {
+
+    @Mock
+    private ExtensionClient client;
+
+    @Mock
+    CommentNotificationReasonPublisher.NewCommentOnPostReasonPublisher
+        newCommentOnPostReasonPublisher;
+
+    @Mock
+    CommentNotificationReasonPublisher.NewCommentOnPageReasonPublisher
+        newCommentOnPageReasonPublisher;
+
+    @Mock
+    CommentNotificationReasonPublisher.NewReplyReasonPublisher newReplyReasonPublisher;
+
+    @InjectMocks
+    private CommentNotificationReasonPublisher reasonPublisher;
+
+
+    @Test
+    void onNewCommentTest() {
+        var comment = mock(Comment.class);
+        var spyReasonPublisher = spy(reasonPublisher);
+
+        doReturn(true).when(spyReasonPublisher).isPostComment(eq(comment));
+
+        var event = new CommentCreatedEvent(this, comment);
+        spyReasonPublisher.onNewComment(event);
+
+        verify(newCommentOnPostReasonPublisher).publishReasonBy(eq(comment));
+
+        doReturn(false).when(spyReasonPublisher).isPostComment(eq(comment));
+        doReturn(true).when(spyReasonPublisher).isPageComment(eq(comment));
+
+        spyReasonPublisher.onNewComment(event);
+        verify(newCommentOnPageReasonPublisher).publishReasonBy(eq(comment));
+    }
+
+    @Test
+    void onNewReplyTest() {
+        var reply = mock(Reply.class);
+        var spec = mock(Reply.ReplySpec.class);
+        when(reply.getSpec()).thenReturn(spec);
+        when(spec.getCommentName()).thenReturn("fake-comment");
+
+        var spyReasonPublisher = spy(reasonPublisher);
+        var comment = mock(Comment.class);
+
+        when(client.fetch(eq(Comment.class), eq("fake-comment")))
+            .thenReturn(Optional.of(comment));
+
+        var event = new ReplyCreatedEvent(this, reply);
+        spyReasonPublisher.onNewReply(event);
+
+        verify(newReplyReasonPublisher).publishReasonBy(eq(reply), eq(comment));
+        verify(spec).getCommentName();
+        verify(client).fetch(eq(Comment.class), eq("fake-comment"));
+    }
+
+    @Test
+    void isPostCommentTest() {
+        var comment = createComment();
+        comment.getSpec()
+            .setSubjectRef(Ref.of("fake-post", GroupVersionKind.fromExtension(Post.class)));
+
+        assertThat(reasonPublisher.isPostComment(comment)).isTrue();
+
+        comment.getSpec()
+            .setSubjectRef(Ref.of("fake-post", GroupVersionKind.fromExtension(SinglePage.class)));
+
+        assertThat(reasonPublisher.isPostComment(comment)).isFalse();
+    }
+
+    @Test
+    void isPageComment() {
+        var comment = createComment();
+        comment.getSpec()
+            .setSubjectRef(Ref.of("fake-post", GroupVersionKind.fromExtension(Post.class)));
+
+        assertThat(reasonPublisher.isPageComment(comment)).isFalse();
+
+        comment.getSpec()
+            .setSubjectRef(Ref.of("fake-post", GroupVersionKind.fromExtension(SinglePage.class)));
+
+        assertThat(reasonPublisher.isPageComment(comment)).isTrue();
+    }
+
+
+    @Nested
+    class NewCommentOnPostReasonPublisherTest {
+        @Mock
+        ExtensionClient client;
+
+        @Mock
+        NotificationReasonEmitter emitter;
+
+        @Mock
+        ExtensionGetter extensionGetter;
+
+        @Mock
+        ExternalLinkProcessor externalLinkProcessor;
+
+        @InjectMocks
+        CommentNotificationReasonPublisher.NewCommentOnPostReasonPublisher
+            newCommentOnPostReasonPublisher;
+
+        @Test
+        void publishReasonByTest() {
+            final var comment = createComment();
+            comment.getSpec().getOwner().setDisplayName("fake-display-name");
+            comment.getSpec().setContent("fake-comment-content");
+
+            var post = mock(Post.class);
+            final var spec = mock(Post.PostSpec.class);
+            var metadata = new Metadata();
+            metadata.setName("fake-post");
+            when(post.getMetadata()).thenReturn(metadata);
+            when(post.getStatusOrDefault()).thenReturn(new Post.PostStatus());
+            when(post.getSpec()).thenReturn(spec);
+            when(spec.getTitle()).thenReturn("fake-title");
+
+            when(client.fetch(eq(Post.class), eq(metadata.getName())))
+                .thenReturn(Optional.of(post));
+
+            when(emitter.emit(eq("new-comment-on-post"), any()))
+                .thenReturn(Mono.empty());
+
+            newCommentOnPostReasonPublisher.publishReasonBy(comment);
+
+            verify(client).fetch(eq(Post.class), eq(metadata.getName()));
+            verify(emitter).emit(eq("new-comment-on-post"), assertArg(consumer -> {
+                var builder = ReasonPayload.builder();
+                consumer.accept(builder);
+                var reasonPayload = builder.build();
+                var reasonSubject = Reason.Subject.builder()
+                    .apiVersion(post.getApiVersion())
+                    .kind(post.getKind())
+                    .name(post.getMetadata().getName())
+                    .title(post.getSpec().getTitle())
+                    .build();
+                assertThat(reasonPayload.getSubject()).isEqualTo(reasonSubject);
+
+                assertThat(reasonPayload.getAuthor())
+                    .isEqualTo(
+                        UserIdentity.anonymousWithEmail(comment.getSpec().getOwner().getName()));
+
+                assertThat(reasonPayload.getAttributes()).containsAllEntriesOf(Map.of(
+                    "postName", post.getMetadata().getName(),
+                    "postTitle", post.getSpec().getTitle(),
+                    "commenter", comment.getSpec().getOwner().getDisplayName(),
+                    "content", comment.getSpec().getContent(),
+                    "commentName", comment.getMetadata().getName()
+                ));
+            }));
+        }
+
+        @Test
+        void doNotEmitReasonTest() {
+            final var comment = createComment();
+            var commentOwner = new Comment.CommentOwner();
+            commentOwner.setKind(User.KIND);
+            commentOwner.setName("fake-user");
+            comment.getSpec().setOwner(commentOwner);
+
+            var post = new Post();
+            post.setMetadata(new Metadata());
+            post.getMetadata().setName("fake-post");
+            post.setSpec(new Post.PostSpec());
+            post.getSpec().setOwner("fake-user");
+
+            // the username is the same as the comment owner
+            assertThat(newCommentOnPostReasonPublisher.doNotEmitReason(comment, post)).isTrue();
+
+            // not the same username
+            commentOwner.setName("other");
+            assertThat(newCommentOnPostReasonPublisher.doNotEmitReason(comment, post)).isFalse();
+
+            // the comment owner is email and the same as the post-owner user email
+            commentOwner.setKind(Comment.CommentOwner.KIND_EMAIL);
+            commentOwner.setName("example@example.com");
+            var user = new User();
+            user.setSpec(new User.UserSpec());
+            user.getSpec().setEmail("example@example.com");
+            when(client.fetch(eq(User.class), eq("fake-user")))
+                .thenReturn(Optional.of(user));
+
+            assertThat(newCommentOnPostReasonPublisher.doNotEmitReason(comment, post)).isTrue();
+
+            // the comment owner is email and not the same as the post-owner user email
+            user.getSpec().setEmail("fake@example.com");
+            assertThat(newCommentOnPostReasonPublisher.doNotEmitReason(comment, post)).isFalse();
+        }
+    }
+
+    @Nested
+    class NewCommentOnPageReasonPublisherTest {
+        @Mock
+        ExtensionClient client;
+
+        @Mock
+        NotificationReasonEmitter emitter;
+
+        @Mock
+        ExternalLinkProcessor externalLinkProcessor;
+
+        @InjectMocks
+        CommentNotificationReasonPublisher.NewCommentOnPageReasonPublisher
+            newCommentOnPageReasonPublisher;
+
+        @Test
+        void publishReasonByTest() {
+            final var comment = createComment();
+            comment.getSpec().getOwner().setDisplayName("fake-display-name");
+            comment.getSpec().setContent("fake-comment-content");
+            comment.getSpec().setSubjectRef(
+                Ref.of("fake-page", GroupVersionKind.fromExtension(SinglePage.class)));
+
+            var page = mock(SinglePage.class);
+            final var spec = mock(SinglePage.SinglePageSpec.class);
+            var metadata = new Metadata();
+            metadata.setName("fake-page");
+            when(page.getMetadata()).thenReturn(metadata);
+            when(page.getStatusOrDefault()).thenReturn(new SinglePage.SinglePageStatus());
+            when(page.getSpec()).thenReturn(spec);
+            when(spec.getTitle()).thenReturn("fake-title");
+
+            when(client.fetch(eq(SinglePage.class), eq(metadata.getName())))
+                .thenReturn(Optional.of(page));
+
+            when(emitter.emit(eq("new-comment-on-single-page"), any()))
+                .thenReturn(Mono.empty());
+
+            newCommentOnPageReasonPublisher.publishReasonBy(comment);
+
+            verify(client).fetch(eq(SinglePage.class), eq(metadata.getName()));
+            verify(emitter).emit(eq("new-comment-on-single-page"), assertArg(consumer -> {
+                var builder = ReasonPayload.builder();
+                consumer.accept(builder);
+                var reasonPayload = builder.build();
+                var reasonSubject = Reason.Subject.builder()
+                    .apiVersion(page.getApiVersion())
+                    .kind(page.getKind())
+                    .name(page.getMetadata().getName())
+                    .title(page.getSpec().getTitle())
+                    .build();
+                assertThat(reasonPayload.getSubject()).isEqualTo(reasonSubject);
+
+                assertThat(reasonPayload.getAuthor())
+                    .isEqualTo(
+                        UserIdentity.anonymousWithEmail(comment.getSpec().getOwner().getName()));
+
+                assertThat(reasonPayload.getAttributes()).containsAllEntriesOf(Map.of(
+                    "pageName", page.getMetadata().getName(),
+                    "pageTitle", page.getSpec().getTitle(),
+                    "commenter", comment.getSpec().getOwner().getDisplayName(),
+                    "content", comment.getSpec().getContent(),
+                    "commentName", comment.getMetadata().getName()
+                ));
+            }));
+        }
+
+        @Test
+        void doNotEmitReasonTest() {
+            final var comment = createComment();
+            var commentOwner = new Comment.CommentOwner();
+            commentOwner.setKind(User.KIND);
+            commentOwner.setName("fake-user");
+            comment.getSpec().setOwner(commentOwner);
+
+            var page = new SinglePage();
+            page.setMetadata(new Metadata());
+            page.getMetadata().setName("fake-page");
+            page.setSpec(new SinglePage.SinglePageSpec());
+            page.getSpec().setOwner("fake-user");
+
+            // the username is the same as the comment owner
+            assertThat(newCommentOnPageReasonPublisher.doNotEmitReason(comment, page)).isTrue();
+
+            // not the same username
+            commentOwner.setName("other");
+            assertThat(newCommentOnPageReasonPublisher.doNotEmitReason(comment, page)).isFalse();
+
+            // the comment owner is email and the same as the page-owner user email
+            commentOwner.setKind(Comment.CommentOwner.KIND_EMAIL);
+            commentOwner.setName("example@example.com");
+            var user = new User();
+            user.setSpec(new User.UserSpec());
+            user.getSpec().setEmail("example@example.com");
+            when(client.fetch(eq(User.class), eq("fake-user")))
+                .thenReturn(Optional.of(user));
+
+            assertThat(newCommentOnPageReasonPublisher.doNotEmitReason(comment, page)).isTrue();
+
+            // the comment owner is email and not the same as the post-owner user email
+            user.getSpec().setEmail("fake@example.com");
+            assertThat(newCommentOnPageReasonPublisher.doNotEmitReason(comment, page)).isFalse();
+        }
+    }
+
+    @Nested
+    class NewReplyReasonPublisherTest {
+
+        @Mock
+        ExtensionClient client;
+
+        @Mock
+        NotificationReasonEmitter notificationReasonEmitter;
+
+        @Mock
+        ExtensionGetter extensionGetter;
+
+        @InjectMocks
+        CommentNotificationReasonPublisher.NewReplyReasonPublisher newReplyReasonPublisher;
+
+        @Test
+        void publishReasonByTest() {
+            when(extensionGetter.getExtensions(CommentSubject.class))
+                .thenReturn(Flux.empty());
+            var reply = createReply("fake-reply");
+
+            reply.getSpec().setQuoteReply("fake-quote-reply");
+            var quoteReply = createReply("fake-quote-reply");
+
+            when(client.fetch(eq(Reply.class), eq("fake-quote-reply")))
+                .thenReturn(Optional.of(quoteReply));
+
+            var spyNewReplyReasonPublisher = spy(newReplyReasonPublisher);
+
+            var comment = createComment();
+            comment.getSpec().setContent("fake-comment-content");
+
+            doReturn(false).when(spyNewReplyReasonPublisher)
+                .doNotEmitReason(any(), any(), any());
+            when(notificationReasonEmitter.emit(any(), any()))
+                .thenReturn(Mono.empty());
+
+            // execute target method
+            spyNewReplyReasonPublisher.publishReasonBy(reply, comment);
+
+            verify(notificationReasonEmitter)
+                .emit(eq(NotificationReasonConst.SOMEONE_REPLIED_TO_YOU), assertArg(consumer -> {
+                    var builder = ReasonPayload.builder();
+                    consumer.accept(builder);
+                    var reasonPayload = builder.build();
+                    var reasonSubject = Reason.Subject.builder()
+                        .apiVersion(quoteReply.getApiVersion())
+                        .kind(quoteReply.getKind())
+                        .name(quoteReply.getMetadata().getName())
+                        .title(quoteReply.getSpec().getContent())
+                        .build();
+                    assertThat(reasonPayload.getSubject()).isEqualTo(reasonSubject);
+
+                    assertThat(reasonPayload.getAuthor())
+                        .isEqualTo(
+                            UserIdentity.of(reply.getSpec().getOwner().getName()));
+
+                    assertThat(reasonPayload.getAttributes()).containsAllEntriesOf(Map.of(
+                        "commentContent", comment.getSpec().getContent(),
+                        "isQuoteReply", true,
+                        "quoteContent", quoteReply.getSpec().getContent(),
+                        "commentName", comment.getMetadata().getName(),
+                        "replier", reply.getSpec().getOwner().getDisplayName(),
+                        "content", reply.getSpec().getContent(),
+                        "replyName", reply.getMetadata().getName()
+                    ));
+                }));
+        }
+
+        @Test
+        void doNotEmitReasonTest() {
+            final var currentReply = createReply("current");
+            currentReply.getSpec().setQuoteReply("quote");
+            final var quoteReply = createReply("quote");
+            final var comment = createComment();
+
+            assertThat(newReplyReasonPublisher
+                .doNotEmitReason(currentReply, quoteReply, comment)).isTrue();
+
+            currentReply.getSpec().getOwner().setName("other");
+            assertThat(newReplyReasonPublisher
+                .doNotEmitReason(currentReply, quoteReply, comment)).isFalse();
+
+            currentReply.getSpec().setQuoteReply(null);
+            assertThat(newReplyReasonPublisher
+                .doNotEmitReason(currentReply, quoteReply, comment)).isFalse();
+
+            currentReply.getSpec().setOwner(comment.getSpec().getOwner());
+            assertThat(newReplyReasonPublisher
+                .doNotEmitReason(currentReply, quoteReply, comment)).isTrue();
+        }
+
+        static Reply createReply(String name) {
+            var reply = new Reply();
+            reply.setMetadata(new Metadata());
+            reply.getMetadata().setName(name);
+            reply.setSpec(new Reply.ReplySpec());
+            reply.getSpec().setCommentName("fake-comment");
+            var owner = new Comment.CommentOwner();
+            owner.setKind(User.KIND);
+            owner.setName("fake-user");
+            owner.setDisplayName("fake-display-name");
+            reply.getSpec().setOwner(owner);
+            reply.getSpec().setContent("fake-reply-content");
+            return reply;
+        }
+    }
+
+    static Comment createComment() {
+        var comment = new Comment();
+        comment.setMetadata(new Metadata());
+        comment.getMetadata().setName("fake-comment");
+        comment.setSpec(new Comment.CommentSpec());
+        var commentOwner = new Comment.CommentOwner();
+        commentOwner.setKind(Comment.CommentOwner.KIND_EMAIL);
+        commentOwner.setName("example@example.com");
+        comment.getSpec().setOwner(commentOwner);
+        comment.getSpec().setSubjectRef(
+            Ref.of("fake-post", GroupVersionKind.fromExtension(Post.class)));
+        return comment;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/content/comment/CommentRequestTest.java b/application/src/test/java/run/halo/app/content/comment/CommentRequestTest.java
new file mode 100644
index 0000000..5312b6f
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/comment/CommentRequestTest.java
@@ -0,0 +1,86 @@
+package run.halo.app.content.comment;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.Ref;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link CommentRequest}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class CommentRequestTest {
+
+    @Test
+    void constructor() throws JSONException {
+        CommentRequest commentRequest = createCommentRequest();
+
+        JSONAssert.assertEquals("""
+                {
+                    "subjectRef": {
+                        "group": "fake.halo.run",
+                        "version": "v1alpha1",
+                        "kind": "Fake",
+                        "name": "fake"
+                    },
+                    "raw": "raw",
+                    "content": "content",
+                    "allowNotification": true
+                }
+                """,
+            JsonUtils.objectToJson(commentRequest),
+            true);
+    }
+
+    @Test
+    void toComment() throws JSONException {
+        CommentRequest commentRequest = createCommentRequest();
+        Comment comment = commentRequest.toComment();
+        assertThat(comment.getMetadata().getName()).isNotNull();
+
+        comment.getMetadata().setName("fake");
+        JSONAssert.assertEquals("""
+                {
+                    "spec": {
+                        "raw": "raw",
+                        "content": "content",
+                        "allowNotification": true,
+                        "subjectRef": {
+                            "group": "fake.halo.run",
+                            "version": "v1alpha1",
+                            "kind": "Fake",
+                            "name": "fake"
+                        }
+                    },
+                    "apiVersion": "content.halo.run/v1alpha1",
+                    "kind": "Comment",
+                    "metadata": {
+                        "name": "fake"
+                    }
+                }
+                """,
+            JsonUtils.objectToJson(comment),
+            true);
+    }
+
+    private static CommentRequest createCommentRequest() {
+        CommentRequest commentRequest = new CommentRequest();
+        commentRequest.setRaw("raw");
+        commentRequest.setContent("content");
+        commentRequest.setAllowNotification(true);
+
+        FakeExtension fakeExtension = new FakeExtension();
+        fakeExtension.setMetadata(new Metadata());
+        fakeExtension.getMetadata().setName("fake");
+        commentRequest.setSubjectRef(Ref.of(fakeExtension));
+        return commentRequest;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/comment/CommentServiceImplIntegrationTest.java b/application/src/test/java/run/halo/app/content/comment/CommentServiceImplIntegrationTest.java
new file mode 100644
index 0000000..0b16005
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/comment/CommentServiceImplIntegrationTest.java
@@ -0,0 +1,159 @@
+package run.halo.app.content.comment;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+
+import java.util.ArrayList;
+import java.util.List;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.SpyBean;
+import org.springframework.test.annotation.DirtiesContext;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.extension.Extension;
+import run.halo.app.extension.ExtensionStoreUtil;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.PageRequestImpl;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Ref;
+import run.halo.app.extension.SchemeManager;
+import run.halo.app.extension.index.IndexerFactory;
+import run.halo.app.extension.store.ReactiveExtensionStoreClient;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Integration tests for {@link CommentServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.15.0
+ */
+class CommentServiceImplIntegrationTest {
+
+    @Nested
+    @DirtiesContext
+    @SpringBootTest
+    class CommentRemoveTest {
+        private final List storedComments = createComments(350);
+
+        @Autowired
+        private SchemeManager schemeManager;
+
+        @SpyBean
+        private ReactiveExtensionClient reactiveClient;
+
+        @Autowired
+        private ReactiveExtensionStoreClient storeClient;
+
+        @Autowired
+        private IndexerFactory indexerFactory;
+
+        @SpyBean
+        private CommentServiceImpl commentService;
+
+        Mono deleteImmediately(Extension extension) {
+            var name = extension.getMetadata().getName();
+            var scheme = schemeManager.get(extension.getClass());
+            // un-index
+            var indexer = indexerFactory.getIndexer(extension.groupVersionKind());
+            indexer.unIndexRecord(extension.getMetadata().getName());
+
+            // delete from db
+            var storeName = ExtensionStoreUtil.buildStoreName(scheme, name);
+            return storeClient.delete(storeName, extension.getMetadata().getVersion())
+                .thenReturn(extension);
+        }
+
+        @BeforeEach
+        void setUp() {
+            Flux.fromIterable(storedComments)
+                .flatMap(post -> reactiveClient.create(post))
+                .as(StepVerifier::create)
+                .expectNextCount(storedComments.size())
+                .verifyComplete();
+        }
+
+        @AfterEach
+        void tearDown() {
+            Flux.fromIterable(storedComments)
+                .flatMap(this::deleteImmediately)
+                .as(StepVerifier::create)
+                .expectNextCount(storedComments.size())
+                .verifyComplete();
+        }
+
+        @Test
+        void commentBatchDeletionTest() {
+            Ref ref = Ref.of("67",
+                GroupVersionKind.fromAPIVersionAndKind("content.halo.run/v1alpha1", "SinglePage"));
+            commentService.removeBySubject(ref)
+                .as(StepVerifier::create)
+                .verifyComplete();
+
+            verify(reactiveClient, times(storedComments.size())).delete(any(Comment.class));
+            verify(commentService, times(2)).listCommentsByRef(eq(ref), any());
+
+            commentService.listCommentsByRef(ref, PageRequestImpl.ofSize(1))
+                .as(StepVerifier::create)
+                .consumeNextWith(result -> {
+                    assertThat(result.getTotal()).isEqualTo(0);
+                })
+                .verifyComplete();
+        }
+
+        List createComments(int size) {
+            List comments = new ArrayList<>(size);
+            for (int i = 0; i < size; i++) {
+                var comment = createComment();
+                comment.getMetadata().setName("comment-" + i);
+                comments.add(comment);
+            }
+            return comments;
+        }
+    }
+
+    Comment createComment() {
+        return JsonUtils.jsonToObject("""
+              {
+                "spec": {
+                    "raw": "fake-raw",
+                    "content": "fake-content",
+                    "owner": {
+                        "kind": "User",
+                        "name": "fake-user"
+                    },
+                    "userAgent": "",
+                    "ipAddress": "",
+                    "approvedTime": "2024-02-28T09:15:16.095Z",
+                    "creationTime": "2024-02-28T06:23:42.923294424Z",
+                    "priority": 0,
+                    "top": false,
+                    "allowNotification": false,
+                    "approved": true,
+                    "hidden": false,
+                    "subjectRef": {
+                        "group": "content.halo.run",
+                        "version": "v1alpha1",
+                        "kind": "SinglePage",
+                        "name": "67"
+                    },
+                    "lastReadTime": "2024-02-29T03:39:04.230Z"
+                },
+                "apiVersion": "content.halo.run/v1alpha1",
+                "kind": "Comment",
+                "metadata": {
+                    "generateName": "comment-"
+                }
+            }
+            """, Comment.class);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/comment/CommentServiceImplTest.java b/application/src/test/java/run/halo/app/content/comment/CommentServiceImplTest.java
new file mode 100644
index 0000000..ac23f1e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/comment/CommentServiceImplTest.java
@@ -0,0 +1,434 @@
+package run.halo.app.content.comment;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Mockito;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.http.server.reactive.ServerHttpRequest;
+import org.springframework.mock.web.reactive.function.server.MockServerRequest;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.context.junit.jupiter.SpringExtension;
+import org.springframework.util.LinkedMultiValueMap;
+import org.springframework.util.MultiValueMap;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.content.TestPost;
+import run.halo.app.core.extension.Counter;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.core.extension.service.UserService;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Ref;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.infra.utils.JsonUtils;
+import run.halo.app.metrics.CounterService;
+import run.halo.app.metrics.MeterUtils;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+import run.halo.app.security.authorization.AuthorityUtils;
+
+/**
+ * Tests for {@link CommentServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(SpringExtension.class)
+class CommentServiceImplTest {
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private UserService userService;
+
+    @Mock
+    private RoleService roleService;
+
+    @Mock
+    private ExtensionGetter extensionGetter;
+
+    @InjectMocks
+    private CommentServiceImpl commentService;
+
+    @Mock
+    private CounterService counterService;
+
+    @BeforeEach
+    void setUp() {
+        SystemSetting.Comment commentSetting = getCommentSetting();
+        lenient().when(environmentFetcher.fetchComment()).thenReturn(Mono.just(commentSetting));
+
+        ListResult comments = new ListResult<>(1, 10, 3, comments());
+        when(client.listBy(eq(Comment.class), any(ListOptions.class), any(PageRequest.class)))
+            .thenReturn(Mono.just(comments));
+
+        when(userService.getUserOrGhost(eq("A-owner")))
+            .thenReturn(Mono.just(createUser("A-owner")));
+        when(userService.getUserOrGhost(eq("B-owner")))
+            .thenReturn(Mono.just(createUser("B-owner")));
+        when(client.fetch(eq(User.class), eq("C-owner")))
+            .thenReturn(Mono.empty());
+
+        when(roleService.contains(Set.of("USER"),
+            Set.of(AuthorityUtils.COMMENT_MANAGEMENT_ROLE_NAME)))
+            .thenReturn(Mono.just(false));
+
+        PostCommentSubject postCommentSubject = Mockito.mock(PostCommentSubject.class);
+        when(extensionGetter.getExtensions(CommentSubject.class))
+            .thenReturn(Flux.just(postCommentSubject));
+
+        when(postCommentSubject.supports(any())).thenReturn(true);
+        when(postCommentSubject.get(eq("fake-post"))).thenReturn(Mono.just(post()));
+    }
+
+    private static User createUser(String name) {
+        User user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName(name);
+        user.setSpec(new User.UserSpec());
+        user.getSpec().setAvatar(name + "-avatar");
+        user.getSpec().setDisplayName(name + "-displayName");
+        user.getSpec().setEmail(name + "-email");
+        return user;
+    }
+
+    @Test
+    void listComment() {
+        when(userService.getUserOrGhost(any()))
+            .thenReturn(Mono.just(ghostUser()));
+        when(userService.getUserOrGhost("A-owner"))
+            .thenReturn(Mono.just(createUser("A-owner")));
+        when(userService.getUserOrGhost("B-owner"))
+            .thenReturn(Mono.just(createUser("B-owner")));
+
+        ServerWebExchange exchange = mock(ServerWebExchange.class);
+        MultiValueMap queryParams = new LinkedMultiValueMap<>();
+        MockServerRequest request = MockServerRequest.builder()
+            .queryParams(queryParams)
+            .exchange(exchange)
+            .build();
+        ServerHttpRequest httpRequest = mock(ServerHttpRequest.class);
+        when(exchange.getRequest()).thenReturn(httpRequest);
+        when(httpRequest.getQueryParams()).thenReturn(queryParams);
+        final var listResultMono = commentService.listComment(new CommentQuery(request));
+        Counter counterA = new Counter();
+        counterA.setUpvote(3);
+        String commentACounter = MeterUtils.nameOf(Comment.class, "A");
+        when(counterService.getByName(eq(commentACounter))).thenReturn(Mono.just(counterA));
+
+        Counter counterB = new Counter();
+        counterB.setUpvote(9);
+        String commentBCounter = MeterUtils.nameOf(Comment.class, "B");
+        when(counterService.getByName(eq(commentBCounter))).thenReturn(Mono.just(counterB));
+
+        Counter counterC = new Counter();
+        counterC.setUpvote(0);
+        String commentCCounter = MeterUtils.nameOf(Comment.class, "C");
+        when(counterService.getByName(eq(commentCCounter))).thenReturn(Mono.just(counterC));
+
+        StepVerifier.create(listResultMono)
+            .consumeNextWith(result -> {
+                try {
+                    JSONAssert.assertEquals(expectListResultJson(),
+                        JsonUtils.objectToJson(result),
+                        true);
+                } catch (JSONException e) {
+                    throw new RuntimeException(e);
+                }
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    @WithMockUser(username = "B-owner")
+    void create() throws JSONException {
+        CommentRequest commentRequest = new CommentRequest();
+        commentRequest.setRaw("fake-raw");
+        commentRequest.setContent("fake-content");
+        commentRequest.setAllowNotification(true);
+        commentRequest.setSubjectRef(Ref.of(post()));
+
+        ArgumentCaptor captor = ArgumentCaptor.forClass(Comment.class);
+
+        when(client.fetch(eq(User.class), eq("B-owner")))
+            .thenReturn(Mono.just(createUser("B-owner")));
+        Comment commentToCreate = commentRequest.toComment();
+        commentToCreate.getMetadata().setName("fake");
+        Mono commentMono = commentService.create(commentToCreate);
+        when(client.create(any())).thenReturn(Mono.empty());
+        StepVerifier.create(commentMono)
+            .verifyComplete();
+
+        verify(client, times(1)).create(captor.capture());
+        Comment comment = captor.getValue();
+        comment.getSpec().setCreationTime(null);
+        JSONAssert.assertEquals("""
+                {
+                    "spec": {
+                        "raw": "fake-raw",
+                        "content": "fake-content",
+                        "owner": {
+                            "kind": "User",
+                            "name": "B-owner",
+                            "displayName": "B-owner-displayName"
+                        },
+                        "priority": 0,
+                        "top": false,
+                        "allowNotification": true,
+                        "approved": false,
+                        "hidden": false,
+                        "subjectRef": {
+                            "group": "content.halo.run",
+                            "version": "v1alpha1",
+                            "kind": "Post",
+                            "name": "fake-post"
+                        }
+                    },
+                    "apiVersion": "content.halo.run/v1alpha1",
+                    "kind": "Comment",
+                    "metadata": {
+                        "name": "fake"
+                    }
+                }
+                """,
+            JsonUtils.objectToJson(comment),
+            true);
+    }
+
+    private List comments() {
+        Comment a = comment("A");
+        a.getSpec().getOwner().setKind(Comment.CommentOwner.KIND_EMAIL);
+        a.getSpec().getOwner()
+            .setAnnotations(Map.of(Comment.CommentOwner.AVATAR_ANNO, "avatar",
+                Comment.CommentOwner.WEBSITE_ANNO, "website"));
+        return List.of(a, comment("B"), comment("C"));
+    }
+
+    private Comment comment(String name) {
+        Comment comment = new Comment();
+        comment.setMetadata(new Metadata());
+        comment.getMetadata().setName(name);
+
+        comment.setSpec(new Comment.CommentSpec());
+        Comment.CommentOwner commentOwner = new Comment.CommentOwner();
+        commentOwner.setKind(User.KIND);
+        commentOwner.setDisplayName("displayName");
+        commentOwner.setName(name + "-owner");
+        comment.getSpec().setOwner(commentOwner);
+
+        comment.getSpec().setSubjectRef(Ref.of(post()));
+
+        comment.setStatus(new Comment.CommentStatus());
+        return comment;
+    }
+
+    private Post post() {
+        Post post = TestPost.postV1();
+        post.getMetadata().setName("fake-post");
+        return post;
+    }
+
+    private static SystemSetting.Comment getCommentSetting() {
+        SystemSetting.Comment commentSetting = new SystemSetting.Comment();
+        commentSetting.setEnable(true);
+        commentSetting.setSystemUserOnly(true);
+        commentSetting.setRequireReviewForNew(true);
+        return commentSetting;
+    }
+
+    User ghostUser() {
+        User user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName("ghost");
+        user.setSpec(new User.UserSpec());
+        user.getSpec().setDisplayName("Ghost");
+        user.getSpec().setEmail("");
+        return user;
+    }
+
+    private String expectListResultJson() {
+        return """
+            {
+                "page": 1,
+                "size": 10,
+                "total": 3,
+                "totalPages": 1,
+                "items": [
+                    {
+                        "comment": {
+                            "spec": {
+                                "owner": {
+                                    "kind": "Email",
+                                    "name": "A-owner",
+                                    "displayName": "displayName",
+                                    "annotations": {
+                                        "website": "website",
+                                        "avatar": "avatar"
+                                    }
+                                },
+                                "subjectRef": {
+                                    "group": "content.halo.run",
+                                    "version": "v1alpha1",
+                                    "kind": "Post",
+                                    "name": "fake-post"
+                                }
+                            },
+                            "status": {},
+                            "apiVersion": "content.halo.run/v1alpha1",
+                            "kind": "Comment",
+                            "metadata": {
+                                "name": "A"
+                            }
+                        },
+                        "owner": {
+                            "kind": "Email",
+                            "name": "A-owner",
+                            "displayName": "displayName",
+                            "avatar": "avatar",
+                            "email": "A-owner"
+                        },
+                        "subject": {
+                            "spec": {
+                                "title": "post-A",
+                                "headSnapshot": "base-snapshot",
+                                "baseSnapshot": "snapshot-A"
+                            },
+                            "apiVersion": "content.halo.run/v1alpha1",
+                            "kind": "Post",
+                            "metadata": {
+                                "name": "fake-post",
+                                "version": 1
+                            }
+                        },
+                        "stats": {
+                            "upvote": 3
+                        }
+                    },
+                    {
+                        "comment": {
+                            "spec": {
+                                "owner": {
+                                    "kind": "User",
+                                    "name": "B-owner",
+                                    "displayName": "displayName"
+                                },
+                                "subjectRef": {
+                                    "group": "content.halo.run",
+                                    "version": "v1alpha1",
+                                    "kind": "Post",
+                                    "name": "fake-post"
+                                }
+                            },
+                            "status": {},
+                            "apiVersion": "content.halo.run/v1alpha1",
+                            "kind": "Comment",
+                            "metadata": {
+                                "name": "B"
+                            }
+                        },
+                        "owner": {
+                            "kind": "User",
+                            "name": "B-owner",
+                            "displayName": "B-owner-displayName",
+                            "avatar": "B-owner-avatar",
+                            "email": "B-owner-email"
+                        },
+                        "subject": {
+                            "spec": {
+                                "title": "post-A",
+                                "headSnapshot": "base-snapshot",
+                                "baseSnapshot": "snapshot-A"
+                            },
+                            "apiVersion": "content.halo.run/v1alpha1",
+                            "kind": "Post",
+                            "metadata": {
+                                "name": "fake-post",
+                                "version": 1
+                            }
+                        },
+                        "stats": {
+                           "upvote": 9
+                        }
+                    },
+                    {
+                        "comment": {
+                            "spec": {
+                                "owner": {
+                                    "kind": "User",
+                                    "name": "C-owner",
+                                    "displayName": "displayName"
+                                },
+                                "subjectRef": {
+                                    "group": "content.halo.run",
+                                    "version": "v1alpha1",
+                                    "kind": "Post",
+                                    "name": "fake-post"
+                                }
+                            },
+                            "status": {},
+                            "apiVersion": "content.halo.run/v1alpha1",
+                            "kind": "Comment",
+                            "metadata": {
+                                "name": "C"
+                            }
+                        },
+                        "owner": {
+                            "kind": "User",
+                            "name": "ghost",
+                            "displayName": "Ghost",
+                            "email": ""
+                        },
+                        "subject": {
+                            "spec": {
+                                "title": "post-A",
+                                "headSnapshot": "base-snapshot",
+                                "baseSnapshot": "snapshot-A"
+                            },
+                            "apiVersion": "content.halo.run/v1alpha1",
+                            "kind": "Post",
+                            "metadata": {
+                                "name": "fake-post",
+                                "version": 1
+                            }
+                        },
+                        "stats": {
+                            "upvote": 0
+                        }
+                    }
+                ],
+                "first": true,
+                "last": true,
+                "hasNext": false,
+                "hasPrevious": false
+            }
+            """;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/comment/PostCommentSubjectTest.java b/application/src/test/java/run/halo/app/content/comment/PostCommentSubjectTest.java
new file mode 100644
index 0000000..f3744ea
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/comment/PostCommentSubjectTest.java
@@ -0,0 +1,67 @@
+package run.halo.app.content.comment;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.content.TestPost;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Ref;
+
+/**
+ * Tests for {@link PostCommentSubject}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PostCommentSubjectTest {
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private PostCommentSubject postCommentSubject;
+
+    @Test
+    void get() {
+        when(client.fetch(eq(Post.class), any()))
+            .thenReturn(Mono.empty());
+        when(client.fetch(eq(Post.class), eq("fake-post")))
+            .thenReturn(Mono.just(TestPost.postV1()));
+
+        postCommentSubject.get("fake-post")
+            .as(StepVerifier::create)
+            .expectNext(TestPost.postV1())
+            .verifyComplete();
+
+        postCommentSubject.get("fake-post2")
+            .as(StepVerifier::create)
+            .verifyComplete();
+    }
+
+    @Test
+    void supports() {
+        Post post = new Post();
+        post.setMetadata(new Metadata());
+        post.getMetadata().setName("test");
+        boolean supports = postCommentSubject.supports(Ref.of(post));
+        assertThat(supports).isTrue();
+
+        FakeExtension fakeExtension = new FakeExtension();
+        fakeExtension.setMetadata(new Metadata());
+        fakeExtension.getMetadata().setName("test");
+        supports = postCommentSubject.supports(Ref.of(fakeExtension));
+        assertThat(supports).isFalse();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelperTest.java b/application/src/test/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelperTest.java
new file mode 100644
index 0000000..0173015
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelperTest.java
@@ -0,0 +1,136 @@
+package run.halo.app.content.comment;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doNothing;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.content.comment.ReplyNotificationSubscriptionHelper.identityFrom;
+
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.NotificationReasonConst;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.Reply;
+import run.halo.app.core.extension.notification.Subscription;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.Ref;
+import run.halo.app.notification.NotificationCenter;
+import run.halo.app.notification.UserIdentity;
+
+/**
+ * Tests for {@link ReplyNotificationSubscriptionHelper}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ReplyNotificationSubscriptionHelperTest {
+
+    @Mock
+    NotificationCenter notificationCenter;
+
+    @InjectMocks
+    ReplyNotificationSubscriptionHelper notificationSubscriptionHelper;
+
+    @Test
+    void subscribeNewReplyReasonForCommentTest() {
+        var comment = createComment();
+        var spyNotificationSubscriptionHelper = spy(notificationSubscriptionHelper);
+
+        doNothing().when(spyNotificationSubscriptionHelper).subscribeReply(any(UserIdentity.class));
+
+        spyNotificationSubscriptionHelper.subscribeNewReplyReasonForComment(comment);
+
+        verify(spyNotificationSubscriptionHelper).subscribeReply(
+            eq(ReplyNotificationSubscriptionHelper.identityFrom(
+                comment.getSpec().getOwner()))
+        );
+    }
+
+    @Test
+    void subscribeNewReplyReasonForReplyTest() {
+        var reply = new Reply();
+        reply.setMetadata(new Metadata());
+        reply.getMetadata().setName("fake-reply");
+        reply.setSpec(new Reply.ReplySpec());
+        reply.getSpec().setCommentName("fake-comment");
+        var owner = new Comment.CommentOwner();
+        owner.setKind(User.KIND);
+        owner.setName("fake-user");
+        reply.getSpec().setOwner(owner);
+
+        var spyNotificationSubscriptionHelper = spy(notificationSubscriptionHelper);
+
+        doNothing().when(spyNotificationSubscriptionHelper).subscribeReply(any(UserIdentity.class));
+
+        spyNotificationSubscriptionHelper.subscribeNewReplyReasonForReply(reply);
+
+        verify(spyNotificationSubscriptionHelper).subscribeReply(
+            eq(ReplyNotificationSubscriptionHelper.identityFrom(
+                reply.getSpec().getOwner()))
+        );
+    }
+
+    @Test
+    void subscribeReplyTest() {
+        var comment = createComment();
+        var identity = ReplyNotificationSubscriptionHelper.identityFrom(
+            comment.getSpec().getOwner());
+
+        when(notificationCenter.subscribe(any(), any())).thenReturn(Mono.empty());
+
+        var subscriber = new Subscription.Subscriber();
+        subscriber.setName(identity.name());
+
+        notificationSubscriptionHelper.subscribeReply(identity);
+
+        var interestReason = new Subscription.InterestReason();
+        interestReason.setReasonType(NotificationReasonConst.SOMEONE_REPLIED_TO_YOU);
+        interestReason.setExpression("props.repliedOwner == '%s'".formatted(subscriber.getName()));
+        verify(notificationCenter).subscribe(eq(subscriber), eq(interestReason));
+    }
+
+    @Nested
+    class IdentityTest {
+
+        @Test
+        void identityFromTest() {
+            var owner = new Comment.CommentOwner();
+            owner.setKind(User.KIND);
+            owner.setName("fake-user");
+
+            assertThat(identityFrom(owner))
+                .isEqualTo(UserIdentity.of(owner.getName()));
+
+            owner.setKind(Comment.CommentOwner.KIND_EMAIL);
+            owner.setName("example@example.com");
+            assertThat(identityFrom(owner))
+                .isEqualTo(UserIdentity.anonymousWithEmail(owner.getName()));
+        }
+    }
+
+    static Comment createComment() {
+        var comment = new Comment();
+        comment.setMetadata(new Metadata());
+        comment.getMetadata().setName("fake-comment");
+        comment.setSpec(new Comment.CommentSpec());
+        var commentOwner = new Comment.CommentOwner();
+        commentOwner.setKind(Comment.CommentOwner.KIND_EMAIL);
+        commentOwner.setName("example@example.com");
+        comment.getSpec().setOwner(commentOwner);
+        comment.getSpec().setSubjectRef(
+            Ref.of("fake-post", GroupVersionKind.fromExtension(Post.class)));
+        return comment;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/comment/ReplyServiceImplIntegrationTest.java b/application/src/test/java/run/halo/app/content/comment/ReplyServiceImplIntegrationTest.java
new file mode 100644
index 0000000..c2365bd
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/comment/ReplyServiceImplIntegrationTest.java
@@ -0,0 +1,152 @@
+package run.halo.app.content.comment;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+
+import java.util.ArrayList;
+import java.util.List;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.SpyBean;
+import org.springframework.test.annotation.DirtiesContext;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.content.Reply;
+import run.halo.app.extension.Extension;
+import run.halo.app.extension.ExtensionStoreUtil;
+import run.halo.app.extension.PageRequestImpl;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.SchemeManager;
+import run.halo.app.extension.index.IndexerFactory;
+import run.halo.app.extension.store.ReactiveExtensionStoreClient;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Integration tests for {@link ReplyServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.15.0
+ */
+class ReplyServiceImplIntegrationTest {
+
+    @Nested
+    @DirtiesContext
+    @SpringBootTest
+    class ReplyRemoveTest {
+        private final List storedReplies = createReplies(320);
+
+        private List createReplies(int size) {
+            List replies = new ArrayList<>(size);
+            for (int i = 0; i < size; i++) {
+                var reply = JsonUtils.jsonToObject(fakeReplyJson(), Reply.class);
+                reply.getMetadata().setName("reply-" + i);
+                replies.add(reply);
+            }
+            return replies;
+        }
+
+        @Autowired
+        private SchemeManager schemeManager;
+
+        @SpyBean
+        private ReactiveExtensionClient reactiveClient;
+
+        @Autowired
+        private ReactiveExtensionStoreClient storeClient;
+
+        @Autowired
+        private IndexerFactory indexerFactory;
+
+        @SpyBean
+        private ReplyServiceImpl replyService;
+
+        Mono deleteImmediately(Extension extension) {
+            var name = extension.getMetadata().getName();
+            var scheme = schemeManager.get(extension.getClass());
+            // un-index
+            var indexer = indexerFactory.getIndexer(extension.groupVersionKind());
+            indexer.unIndexRecord(extension.getMetadata().getName());
+
+            // delete from db
+            var storeName = ExtensionStoreUtil.buildStoreName(scheme, name);
+            return storeClient.delete(storeName, extension.getMetadata().getVersion())
+                .thenReturn(extension);
+        }
+
+        @BeforeEach
+        void setUp() {
+            Flux.fromIterable(storedReplies)
+                .flatMap(post -> reactiveClient.create(post))
+                .as(StepVerifier::create)
+                .expectNextCount(storedReplies.size())
+                .verifyComplete();
+        }
+
+        @AfterEach
+        void tearDown() {
+            Flux.fromIterable(storedReplies)
+                .flatMap(this::deleteImmediately)
+                .as(StepVerifier::create)
+                .expectNextCount(storedReplies.size())
+                .verifyComplete();
+        }
+
+        @Test
+        void removeAllByComment() {
+            String commentName = "fake-comment";
+            replyService.removeAllByComment(commentName)
+                .as(StepVerifier::create)
+                .verifyComplete();
+
+            verify(reactiveClient, times(storedReplies.size())).delete(any(Reply.class));
+            verify(replyService, times(2)).listRepliesByComment(eq(commentName), any());
+
+            replyService.listRepliesByComment(commentName, PageRequestImpl.ofSize(1))
+                .as(StepVerifier::create)
+                .consumeNextWith(result -> assertThat(result.getTotal()).isEqualTo(0))
+                .verifyComplete();
+        }
+    }
+
+    String fakeReplyJson() {
+        return """
+                {
+                    "metadata":{
+                        "name":"fake-reply"
+                    },
+                    "spec":{
+                        "raw":"fake-raw",
+                        "content":"fake-content",
+                        "owner":{
+                            "kind":"User",
+                            "name":"fake-user",
+                            "displayName":"fake-display-name"
+                        },
+                        "creationTime": "2024-03-11T06:23:42.923294424Z",
+                        "ipAddress":"",
+                        "approved": true,
+                        "hidden": false,
+                        "allowNotification": false,
+                        "top": false,
+                        "priority": 0,
+                        "commentName":"fake-comment"
+                    },
+                    "owner":{
+                        "kind":"User",
+                        "displayName":"fake-display-name"
+                    },
+                    "stats":{
+                        "upvote":0
+                    }
+                }
+            """;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/comment/SinglePageCommentSubjectTest.java b/application/src/test/java/run/halo/app/content/comment/SinglePageCommentSubjectTest.java
new file mode 100644
index 0000000..ffe796b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/comment/SinglePageCommentSubjectTest.java
@@ -0,0 +1,75 @@
+package run.halo.app.content.comment;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Ref;
+
+/**
+ * Tests for {@link SinglePageCommentSubject}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SinglePageCommentSubjectTest {
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private SinglePageCommentSubject singlePageCommentSubject;
+
+    @Test
+    void get() {
+        when(client.fetch(eq(SinglePage.class), any()))
+            .thenReturn(Mono.empty());
+
+        SinglePage singlePage = new SinglePage();
+        singlePage.setMetadata(new Metadata());
+        singlePage.getMetadata().setName("fake-single-page");
+
+        when(client.fetch(eq(SinglePage.class), eq("fake-single-page")))
+            .thenReturn(Mono.just(singlePage));
+
+        singlePageCommentSubject.get("fake-single-page")
+            .as(StepVerifier::create)
+            .expectNext(singlePage)
+            .verifyComplete();
+
+        singlePageCommentSubject.get("fake-single-page-2")
+            .as(StepVerifier::create)
+            .verifyComplete();
+
+        verify(client, times(1)).fetch(eq(SinglePage.class), eq("fake-single-page"));
+    }
+
+    @Test
+    void supports() {
+        SinglePage singlePage = new SinglePage();
+        singlePage.setMetadata(new Metadata());
+        singlePage.getMetadata().setName("test");
+        boolean supports = singlePageCommentSubject.supports(Ref.of(singlePage));
+        assertThat(supports).isTrue();
+
+        FakeExtension fakeExtension = new FakeExtension();
+        fakeExtension.setMetadata(new Metadata());
+        fakeExtension.getMetadata().setName("test");
+        supports = singlePageCommentSubject.supports(Ref.of(fakeExtension));
+        assertThat(supports).isFalse();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/permalinks/CategoryPermalinkPolicyTest.java b/application/src/test/java/run/halo/app/content/permalinks/CategoryPermalinkPolicyTest.java
new file mode 100644
index 0000000..fbd1e1a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/permalinks/CategoryPermalinkPolicyTest.java
@@ -0,0 +1,64 @@
+package run.halo.app.content.permalinks;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.when;
+
+import java.net.URI;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.core.extension.content.Category;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.ExternalUrlSupplier;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+
+/**
+ * Tests for {@link CategoryPermalinkPolicy}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class CategoryPermalinkPolicyTest {
+
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    private CategoryPermalinkPolicy categoryPermalinkPolicy;
+
+    @BeforeEach
+    void setUp() {
+        categoryPermalinkPolicy =
+            new CategoryPermalinkPolicy(externalUrlSupplier, environmentFetcher);
+    }
+
+    @Test
+    void permalink() {
+        Category category = new Category();
+        Metadata metadata = new Metadata();
+        metadata.setName("category-test");
+        category.setMetadata(metadata);
+        Category.CategorySpec categorySpec = new Category.CategorySpec();
+        categorySpec.setSlug("slug-test");
+        category.setSpec(categorySpec);
+
+        when(externalUrlSupplier.get()).thenReturn(URI.create(""));
+        String permalink = categoryPermalinkPolicy.permalink(category);
+        assertThat(permalink).isEqualTo("/categories/slug-test");
+
+        when(externalUrlSupplier.get()).thenReturn(URI.create("http://exmaple.com"));
+        permalink = categoryPermalinkPolicy.permalink(category);
+        assertThat(permalink).isEqualTo("http://exmaple.com/categories/slug-test");
+        String path = URI.create(permalink).getPath();
+        assertThat(path).isEqualTo("/categories/slug-test");
+
+        category.getSpec().setSlug("中文 slug");
+        permalink = categoryPermalinkPolicy.permalink(category);
+        assertThat(permalink).isEqualTo("http://exmaple.com/categories/%E4%B8%AD%E6%96%87%20slug");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/permalinks/PostPermalinkPolicyTest.java b/application/src/test/java/run/halo/app/content/permalinks/PostPermalinkPolicyTest.java
new file mode 100644
index 0000000..f1655c6
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/permalinks/PostPermalinkPolicyTest.java
@@ -0,0 +1,115 @@
+package run.halo.app.content.permalinks;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.when;
+
+import java.net.URI;
+import java.text.DecimalFormat;
+import java.text.NumberFormat;
+import java.time.Instant;
+import java.time.ZoneId;
+import java.time.ZonedDateTime;
+import java.util.Map;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationContext;
+import run.halo.app.content.TestPost;
+import run.halo.app.core.extension.content.Constant;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.MetadataUtil;
+import run.halo.app.infra.ExternalUrlSupplier;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.utils.PathUtils;
+
+/**
+ * Tests for {@link PostPermalinkPolicy}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PostPermalinkPolicyTest {
+    private static final NumberFormat NUMBER_FORMAT = new DecimalFormat("00");
+
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    private PostPermalinkPolicy postPermalinkPolicy;
+
+    @BeforeEach
+    void setUp() {
+        lenient().when(externalUrlSupplier.get()).thenReturn(URI.create(""));
+        postPermalinkPolicy = new PostPermalinkPolicy(environmentFetcher, externalUrlSupplier);
+    }
+
+    @Test
+    void permalink() {
+        Post post = TestPost.postV1();
+        Map annotations = MetadataUtil.nullSafeAnnotations(post);
+        annotations.put(Constant.PERMALINK_PATTERN_ANNO, "/{year}/{month}/{day}/{slug}");
+        post.getMetadata().setName("test-post");
+        post.getSpec().setSlug("test-post-slug");
+        Instant now = Instant.now();
+        post.getSpec().setPublishTime(now);
+
+        ZonedDateTime zonedDateTime = now.atZone(ZoneId.systemDefault());
+        String year = String.valueOf(zonedDateTime.getYear());
+        String month = NUMBER_FORMAT.format(zonedDateTime.getMonthValue());
+        String day = NUMBER_FORMAT.format(zonedDateTime.getDayOfMonth());
+
+        String permalink = postPermalinkPolicy.permalink(post);
+        assertThat(permalink)
+            .isEqualTo(PathUtils.combinePath(year, month, day, post.getSpec().getSlug()));
+
+        // pattern {month}/{day}/{slug}
+        annotations.put(Constant.PERMALINK_PATTERN_ANNO, "/{month}/{day}/{slug}");
+        permalink = postPermalinkPolicy.permalink(post);
+        assertThat(permalink)
+            .isEqualTo(PathUtils.combinePath(month, day, post.getSpec().getSlug()));
+
+        // pattern /?p={name}
+        annotations.put(Constant.PERMALINK_PATTERN_ANNO, "/?p={name}");
+        permalink = postPermalinkPolicy.permalink(post);
+        assertThat(permalink).isEqualTo("/?p=test-post");
+
+        // pattern /posts/{slug}
+        annotations.put(Constant.PERMALINK_PATTERN_ANNO, "/posts/{slug}");
+        permalink = postPermalinkPolicy.permalink(post);
+        assertThat(permalink).isEqualTo("/posts/test-post-slug");
+
+        // pattern /posts/{name}
+        annotations.put(Constant.PERMALINK_PATTERN_ANNO, "/posts/{name}");
+        permalink = postPermalinkPolicy.permalink(post);
+        assertThat(permalink).isEqualTo("/posts/test-post");
+    }
+
+    @Test
+    void permalinkWithExternalUrl() {
+        Post post = TestPost.postV1();
+        Map annotations = MetadataUtil.nullSafeAnnotations(post);
+        annotations.put(Constant.PERMALINK_PATTERN_ANNO, "/{year}/{month}/{day}/{slug}");
+        post.getMetadata().setName("test-post");
+        post.getSpec().setSlug("test-post-slug");
+        Instant now = Instant.parse("2022-11-01T02:40:06.806310Z");
+        post.getSpec().setPublishTime(now);
+
+        when(externalUrlSupplier.get()).thenReturn(URI.create("http://example.com"));
+
+        String permalink = postPermalinkPolicy.permalink(post);
+        assertThat(permalink).isEqualTo("http://example.com/2022/11/01/test-post-slug");
+
+        post.getSpec().setSlug("中文 slug");
+        permalink = postPermalinkPolicy.permalink(post);
+        assertThat(permalink).isEqualTo("http://example.com/2022/11/01/%E4%B8%AD%E6%96%87%20slug");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/content/permalinks/TagPermalinkPolicyTest.java b/application/src/test/java/run/halo/app/content/permalinks/TagPermalinkPolicyTest.java
new file mode 100644
index 0000000..cd40a75
--- /dev/null
+++ b/application/src/test/java/run/halo/app/content/permalinks/TagPermalinkPolicyTest.java
@@ -0,0 +1,67 @@
+package run.halo.app.content.permalinks;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.when;
+
+import java.net.URI;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationContext;
+import run.halo.app.core.extension.content.Tag;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.ExternalUrlSupplier;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+
+/**
+ * Tests for {@link TagPermalinkPolicy}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class TagPermalinkPolicyTest {
+
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    private TagPermalinkPolicy tagPermalinkPolicy;
+
+    @BeforeEach
+    void setUp() {
+        tagPermalinkPolicy = new TagPermalinkPolicy(externalUrlSupplier, environmentFetcher);
+    }
+
+    @Test
+    void permalink() {
+        Tag tag = new Tag();
+        Metadata metadata = new Metadata();
+        metadata.setName("test-tag");
+        tag.setMetadata(metadata);
+        Tag.TagSpec tagSpec = new Tag.TagSpec();
+        tagSpec.setSlug("test-slug");
+        tag.setSpec(tagSpec);
+
+        when(externalUrlSupplier.get()).thenReturn(URI.create(""));
+
+        String permalink = tagPermalinkPolicy.permalink(tag);
+        assertThat(permalink).isEqualTo("/tags/test-slug");
+
+        when(externalUrlSupplier.get()).thenReturn(URI.create("http://example.com"));
+
+        permalink = tagPermalinkPolicy.permalink(tag);
+        assertThat(permalink).isEqualTo("http://example.com/tags/test-slug");
+
+        tag.getSpec().setSlug("中文slug");
+        permalink = tagPermalinkPolicy.permalink(tag);
+        assertThat(permalink).isEqualTo("http://example.com/tags/%E4%B8%AD%E6%96%87slug");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/endpoint/WebSocketHandlerMappingTest.java b/application/src/test/java/run/halo/app/core/endpoint/WebSocketHandlerMappingTest.java
new file mode 100644
index 0000000..3fb4e43
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/endpoint/WebSocketHandlerMappingTest.java
@@ -0,0 +1,55 @@
+package run.halo.app.core.endpoint;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.web.reactive.socket.WebSocketHandler;
+import org.springframework.web.reactive.socket.WebSocketSession;
+import run.halo.app.extension.GroupVersion;
+
+@ExtendWith(MockitoExtension.class)
+class WebSocketHandlerMappingTest {
+
+    @InjectMocks
+    WebSocketHandlerMapping handlerMapping;
+
+    @Test
+    void shouldRegisterEndpoint() {
+        var endpoint = new FakeWebSocketEndpoint();
+        handlerMapping.register(List.of(endpoint));
+        assertTrue(handlerMapping.getEndpointMap().containsValue(endpoint));
+    }
+
+    @Test
+    void shouldUnregisterEndpoint() {
+        var endpoint = new FakeWebSocketEndpoint();
+        handlerMapping.register(List.of(endpoint));
+        assertTrue(handlerMapping.getEndpointMap().containsValue(endpoint));
+        handlerMapping.unregister(List.of(endpoint));
+        assertFalse(handlerMapping.getEndpointMap().containsValue(endpoint));
+    }
+
+    static class FakeWebSocketEndpoint implements WebSocketEndpoint {
+
+        @Override
+        public String urlPath() {
+            return "/resources";
+        }
+
+        @Override
+        public GroupVersion groupVersion() {
+            return GroupVersion.parseAPIVersion("fake.halo.run/v1alpha1");
+        }
+
+        @Override
+        public WebSocketHandler handler() {
+            return WebSocketSession::close;
+        }
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/PostTest.java b/application/src/test/java/run/halo/app/core/extension/PostTest.java
new file mode 100644
index 0000000..f721de7
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/PostTest.java
@@ -0,0 +1,32 @@
+package run.halo.app.core.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.Mockito.when;
+
+import java.util.Map;
+import java.util.function.Function;
+import org.junit.jupiter.api.Test;
+import org.mockito.Mockito;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.MetadataOperator;
+
+class PostTest {
+
+    @Test
+    void staticIsPublishedTest() {
+        var test = (Function, Boolean>) (labels) -> {
+            var metadata = Mockito.mock(MetadataOperator.class);
+            when(metadata.getLabels()).thenReturn(labels);
+            return Post.isPublished(metadata);
+        };
+        assertEquals(false, test.apply(Map.of()));
+        assertEquals(false, test.apply(Map.of("content.halo.run/published", "false")));
+        assertEquals(false, test.apply(Map.of("content.halo.run/published", "False")));
+        assertEquals(false, test.apply(Map.of("content.halo.run/published", "0")));
+        assertEquals(false, test.apply(Map.of("content.halo.run/published", "1")));
+        assertEquals(false, test.apply(Map.of("content.halo.run/published", "T")));
+        assertEquals(false, test.apply(Map.of("content.halo.run/published", "")));
+        assertEquals(true, test.apply(Map.of("content.halo.run/published", "true")));
+        assertEquals(true, test.apply(Map.of("content.halo.run/published", "True")));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/RoleBindingTest.java b/application/src/test/java/run/halo/app/core/extension/RoleBindingTest.java
new file mode 100644
index 0000000..cacf7ba
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/RoleBindingTest.java
@@ -0,0 +1,60 @@
+package run.halo.app.core.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.time.Instant;
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.Metadata;
+
+class RoleBindingTest {
+
+    @Test
+    void shouldContainUser() {
+        var subject = new RoleBinding.Subject();
+        subject.setName("fake-name");
+        subject.setApiGroup("");
+        subject.setKind("User");
+
+        var binding = new RoleBinding();
+        binding.setMetadata(new Metadata());
+        binding.setSubjects(List.of(subject));
+        assertTrue(RoleBinding.containsUser("fake-name").test(binding));
+        assertFalse(RoleBinding.containsUser("non-exist-fake-name").test(binding));
+    }
+
+    @Test
+    void shouldNotContainUserWhenBindingIsDeleted() {
+        var subject = new RoleBinding.Subject();
+        subject.setName("fake-name");
+        subject.setApiGroup("");
+        subject.setKind("User");
+
+        var binding = new RoleBinding();
+        var metadata = new Metadata();
+        metadata.setDeletionTimestamp(Instant.now());
+        binding.setMetadata(metadata);
+        binding.setSubjects(List.of(subject));
+        assertFalse(RoleBinding.containsUser("fake-name").test(binding));
+        assertFalse(RoleBinding.containsUser("non-exist-fake-name").test(binding));
+    }
+
+    @Test
+    void subjectToStringTest() {
+        assertEquals("User/fake-name", createSubject("fake-name", "", "User").toString());
+        assertEquals(
+            "fake.group/User/fake-name",
+            createSubject("fake-name", "fake.group", "User").toString()
+        );
+    }
+
+    RoleBinding.Subject createSubject(String name, String apiGroup, String kind) {
+        var subject = new RoleBinding.Subject();
+        subject.setName(name);
+        subject.setApiGroup(apiGroup);
+        subject.setKind(kind);
+        return subject;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/SettingTest.java b/application/src/test/java/run/halo/app/core/extension/SettingTest.java
new file mode 100644
index 0000000..1d3e830
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/SettingTest.java
@@ -0,0 +1,103 @@
+package run.halo.app.core.extension;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.security.util.InMemoryResource;
+import run.halo.app.extension.Unstructured;
+import run.halo.app.infra.utils.JsonUtils;
+import run.halo.app.infra.utils.YamlUnstructuredLoader;
+
+/**
+ * Tests for {@link Setting}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class SettingTest {
+
+    @Test
+    void setting() throws JSONException {
+        String settingYaml = """
+            apiVersion: v1alpha1
+            kind: Setting
+            metadata:
+              name: setting-name
+            spec:
+              forms:
+                - group: basic
+                  label: 基本设置
+                  formSchema:
+                    - $el: h1
+                      children: Register
+                    - $formkit: text
+                      help: This will be used for your account.
+                      label: Email
+                      name: email
+                      validation: required|email
+                - group: sns
+                  label: 社交资料
+                  formSchema:
+                    - $formkit: text
+                      help: This will be used for your theme.
+                      label: color
+                      name: color
+                      validation: required
+            """;
+        var unstructureds = new YamlUnstructuredLoader(
+            new InMemoryResource(settingYaml.getBytes(UTF_8), "In-memory setting YAML"))
+            .load();
+        assertThat(unstructureds).hasSize(1);
+        Unstructured unstructured = unstructureds.get(0);
+
+        Setting setting = Unstructured.OBJECT_MAPPER.convertValue(unstructured, Setting.class);
+        assertThat(setting).isNotNull();
+        JSONAssert.assertEquals("""
+                {
+                     "spec": {
+                         "forms": [
+                             {
+                                 "group": "basic",
+                                 "label": "基本设置",
+                                 "formSchema": [
+                                     {
+                                         "$el": "h1",
+                                         "children": "Register"
+                                     },
+                                     {
+                                         "$formkit": "text",
+                                         "help": "This will be used for your account.",
+                                         "label": "Email",
+                                         "name": "email",
+                                         "validation": "required|email"
+                                     }
+                                 ]
+                             },
+                             {
+                                 "group": "sns",
+                                 "label": "社交资料",
+                                 "formSchema": [
+                                     {
+                                         "$formkit": "text",
+                                         "help": "This will be used for your theme.",
+                                         "label": "color",
+                                         "name": "color",
+                                         "validation": "required"
+                                     }
+                                 ]
+                             }
+                         ]
+                     },
+                     "apiVersion": "v1alpha1",
+                     "kind": "Setting",
+                     "metadata": {
+                         "name": "setting-name"
+                     }
+                }
+                """,
+            JsonUtils.objectToJson(setting), false);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/TestRole.java b/application/src/test/java/run/halo/app/core/extension/TestRole.java
new file mode 100644
index 0000000..d5f631f
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/TestRole.java
@@ -0,0 +1,60 @@
+package run.halo.app.core.extension;
+
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Roles to test.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+public class TestRole {
+
+    public static Role getRoleManage() {
+        return JsonUtils.jsonToObject("""
+            {
+                 "apiVersion": "v1alpha1",
+                 "kind": "Role",
+                 "metadata": {
+                     "name": "role-template-apple-manage"
+                 },
+                 "rules": [{
+                     "resources": ["apples"],
+                     "verbs": ["create"]
+                 }]
+             }
+            """, Role.class);
+    }
+
+    public static Role getRoleView() {
+        return JsonUtils.jsonToObject("""
+            {
+                 "apiVersion": "v1alpha1",
+                 "kind": "Role",
+                 "metadata": {
+                     "name": "role-template-apple-view"
+                 },
+                 "rules": [{
+                     "resources": ["apples"],
+                     "verbs": ["list"]
+                 }]
+             }
+            """, Role.class);
+    }
+
+    public static Role getRoleOther() {
+        return JsonUtils.jsonToObject("""
+            {
+                "apiVersion": "v1alpha1",
+                "kind": "Role",
+                "metadata": {
+                    "name": "role-template-apple-other"
+                },
+                "rules": [{
+                    "resources": ["apples"],
+                    "verbs": ["update"]
+                }]
+            }
+            """, Role.class);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/ThemeTest.java b/application/src/test/java/run/halo/app/core/extension/ThemeTest.java
new file mode 100644
index 0000000..3492d9e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/ThemeTest.java
@@ -0,0 +1,152 @@
+package run.halo.app.core.extension;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.List;
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.security.util.InMemoryResource;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.Unstructured;
+import run.halo.app.infra.utils.JsonUtils;
+import run.halo.app.infra.utils.YamlUnstructuredLoader;
+
+/**
+ * Tests for {@link Theme}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class ThemeTest {
+
+    @Test
+    void constructor() throws JSONException {
+        Theme theme = new Theme();
+        Metadata metadata = new Metadata();
+        metadata.setName("test-theme");
+        theme.setMetadata(metadata);
+
+
+        Theme.ThemeSpec themeSpec = new Theme.ThemeSpec();
+        theme.setSpec(themeSpec);
+        themeSpec.setDisplayName("test-theme");
+
+        Theme.Author author = new Theme.Author();
+        author.setName("test-author");
+        author.setWebsite("https://test.com");
+        themeSpec.setAuthor(author);
+
+        themeSpec.setRepo("https://test.com");
+        themeSpec.setLogo("https://test.com");
+        themeSpec.setHomepage("https://test.com");
+        themeSpec.setDescription("test-description");
+        themeSpec.setConfigMapName("test-config-map");
+        themeSpec.setSettingName("test-setting");
+
+        themeSpec.setVersion(null);
+        themeSpec.setRequires(null);
+        JSONAssert.assertEquals("""
+                {
+                    "spec": {
+                        "displayName": "test-theme",
+                        "author": {
+                            "name": "test-author",
+                            "website": "https://test.com"
+                        },
+                        "description": "test-description",
+                        "logo": "https://test.com",
+                        "homepage": "https://test.com",
+                        "repo": "https://test.com",
+                        "version": "*",
+                        "requires": "*",
+                        "settingName": "test-setting",
+                        "configMapName": "test-config-map"
+                    },
+                    "apiVersion": "theme.halo.run/v1alpha1",
+                    "kind": "Theme",
+                    "metadata": {
+                        "name": "test-theme"
+                    }
+                }
+                """,
+            JsonUtils.objectToJson(theme),
+            true);
+
+        themeSpec.setVersion("1.0.0");
+        themeSpec.setRequires("2.0.0");
+        assertThat(themeSpec.getVersion()).isEqualTo("1.0.0");
+        assertThat(themeSpec.getRequires()).isEqualTo("2.0.0");
+    }
+
+    @Test
+    void themeCustomTemplate() throws JSONException {
+        String themeYaml = """
+            apiVersion: theme.halo.run/v1alpha1
+            kind: Theme
+            metadata:
+              name: guqing-higan
+            spec:
+              displayName: higan
+              customTemplates:
+                post:
+                  - name: post-template-1
+                    description: description for post-template-1
+                    screenshot: foo.png
+                    file: post_template_1.html
+                  - name: post-template-2
+                    description: description for post-template-2
+                    screenshot: bar.png
+                    file: post_template_2.html
+                category:
+                  - name: category-template-1
+                    description: description for category-template-1
+                    screenshot: foo.png
+                    file: category_template_1.html
+                page:
+                  - name: page-template-1
+                    description: description for page-template-1
+                    screenshot: foo.png
+                    file: page_template_1.html
+            """;
+        List unstructuredList =
+            new YamlUnstructuredLoader(new InMemoryResource(themeYaml)).load();
+        assertThat(unstructuredList).hasSize(1);
+        Theme theme = Unstructured.OBJECT_MAPPER.convertValue(unstructuredList.get(0), Theme.class);
+        assertThat(theme).isNotNull();
+        JSONAssert.assertEquals("""
+                {
+                    "post": [
+                        {
+                            "name": "post-template-1",
+                            "description": "description for post-template-1",
+                            "screenshot": "foo.png",
+                            "file": "post_template_1.html"
+                        },
+                        {
+                            "name": "post-template-2",
+                            "description": "description for post-template-2",
+                            "screenshot": "bar.png",
+                            "file": "post_template_2.html"
+                        }
+                    ],
+                    "category": [
+                        {
+                            "name": "category-template-1",
+                            "description": "description for category-template-1",
+                            "screenshot": "foo.png",
+                            "file": "category_template_1.html"
+                        }],
+                    "page": [
+                        {
+                            "name": "page-template-1",
+                            "description": "description for page-template-1",
+                            "screenshot": "foo.png",
+                            "file": "page_template_1.html"
+                        }]
+                }
+                """,
+            JsonUtils.objectToJson(theme.getSpec().getCustomTemplates()),
+            true);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/attachment/endpoint/AttachmentEndpointTest.java b/application/src/test/java/run/halo/app/core/extension/attachment/endpoint/AttachmentEndpointTest.java
new file mode 100644
index 0000000..e3c7fa4
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/attachment/endpoint/AttachmentEndpointTest.java
@@ -0,0 +1,266 @@
+package run.halo.app.core.extension.attachment.endpoint;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.mockUser;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.springSecurity;
+
+import java.util.Map;
+import java.util.function.Consumer;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.data.domain.Sort;
+import org.springframework.http.MediaType;
+import org.springframework.http.client.MultipartBodyBuilder;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.BodyInserters;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.attachment.Attachment;
+import run.halo.app.core.extension.attachment.Group;
+import run.halo.app.core.extension.attachment.Policy;
+import run.halo.app.core.extension.attachment.Policy.PolicySpec;
+import run.halo.app.core.extension.service.impl.DefaultAttachmentService;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+
+@ExtendWith(MockitoExtension.class)
+class AttachmentEndpointTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Mock
+    ExtensionGetter extensionGetter;
+
+    AttachmentEndpoint endpoint;
+
+    WebTestClient webClient;
+
+    @BeforeEach
+    void setUp() {
+        var attachmentService = new DefaultAttachmentService(client, extensionGetter);
+        endpoint = new AttachmentEndpoint(attachmentService, client);
+        webClient = WebTestClient.bindToRouterFunction(endpoint.endpoint())
+            .apply(springSecurity())
+            .build();
+    }
+
+    @Nested
+    class UploadTest {
+
+        @Test
+        void shouldResponseErrorIfNotLogin() {
+            var policySpec = new PolicySpec();
+            policySpec.setConfigMapName("fake-configmap");
+            var policyMetadata = new Metadata();
+            policyMetadata.setName("fake-policy");
+            var policy = new Policy();
+            policy.setSpec(policySpec);
+            policy.setMetadata(policyMetadata);
+
+            var cm = new ConfigMap();
+            var cmMetadata = new Metadata();
+            cmMetadata.setName("fake-configmap");
+            cm.setData(Map.of());
+
+            var handler = mock(AttachmentHandler.class);
+            var metadata = new Metadata();
+            metadata.setName("fake-attachment");
+            var attachment = new Attachment();
+            attachment.setMetadata(metadata);
+
+            var builder = new MultipartBodyBuilder();
+            builder.part("policyName", "fake-policy");
+            builder.part("groupName", "fake-group");
+            builder.part("file", "fake-file")
+                .contentType(MediaType.TEXT_PLAIN)
+                .filename("fake-filename");
+            webClient
+                .post()
+                .uri("/attachments/upload")
+                .contentType(MediaType.MULTIPART_FORM_DATA)
+                .body(BodyInserters.fromMultipartData(builder.build()))
+                .exchange()
+                .expectStatus().isUnauthorized();
+
+            verify(client, never()).get(Policy.class, "fake-policy");
+            verify(client, never()).get(ConfigMap.class, "fake-configmap");
+            verify(client, never()).create(attachment);
+            verify(extensionGetter, never()).getExtensions(AttachmentHandler.class);
+            verify(handler, never()).upload(any());
+        }
+
+        @Test
+        void shouldResponseErrorIfNoBodyProvided() {
+            webClient
+                .mutateWith(mockUser("fake-user").password("fake-password"))
+                .post()
+                .uri("/attachments/upload")
+                .contentType(MediaType.MULTIPART_FORM_DATA)
+                .exchange()
+                .expectStatus().is5xxServerError();
+        }
+
+        @Test
+        void shouldResponseErrorIfPolicyNameIsMissing() {
+            var builder = new MultipartBodyBuilder();
+            builder.part("file", "fake-file")
+                .contentType(MediaType.TEXT_PLAIN)
+                .filename("fake-filename");
+            webClient
+                .mutateWith(mockUser("fake-user").password("fake-password"))
+                .post()
+                .uri("/attachments/upload")
+                .contentType(MediaType.MULTIPART_FORM_DATA)
+                .body(BodyInserters.fromMultipartData(builder.build()))
+                .exchange()
+                .expectStatus().isBadRequest();
+        }
+
+        void prepareForUploading(Consumer consumer) {
+            var policySpec = new PolicySpec();
+            policySpec.setConfigMapName("fake-configmap");
+            var policyMetadata = new Metadata();
+            policyMetadata.setName("fake-policy");
+            var policy = new Policy();
+            policy.setSpec(policySpec);
+            policy.setMetadata(policyMetadata);
+
+            var cm = new ConfigMap();
+            var cmMetadata = new Metadata();
+            cmMetadata.setName("fake-configmap");
+            cm.setData(Map.of());
+
+            when(client.get(Policy.class, "fake-policy")).thenReturn(Mono.just(policy));
+            when(client.get(ConfigMap.class, "fake-configmap")).thenReturn(Mono.just(cm));
+
+            var handler = mock(AttachmentHandler.class);
+            var metadata = new Metadata();
+            metadata.setName("fake-attachment");
+            var attachment = new Attachment();
+            attachment.setMetadata(metadata);
+
+            when(handler.upload(any())).thenReturn(Mono.just(attachment));
+            when(extensionGetter.getExtensions(AttachmentHandler.class))
+                .thenReturn(Flux.just(handler));
+            when(client.create(attachment)).thenReturn(Mono.just(attachment));
+
+            var builder = new MultipartBodyBuilder();
+            builder.part("policyName", "fake-policy");
+            builder.part("groupName", "fake-group");
+            builder.part("file", "fake-file")
+                .contentType(MediaType.TEXT_PLAIN)
+                .filename("fake-filename");
+
+            consumer.accept(builder);
+        }
+
+        @Test
+        void shouldUploadSuccessfully() {
+            var policySpec = new PolicySpec();
+            policySpec.setConfigMapName("fake-configmap");
+            var policyMetadata = new Metadata();
+            policyMetadata.setName("fake-policy");
+            var policy = new Policy();
+            policy.setSpec(policySpec);
+            policy.setMetadata(policyMetadata);
+
+            var cm = new ConfigMap();
+            var cmMetadata = new Metadata();
+            cmMetadata.setName("fake-configmap");
+            cm.setData(Map.of());
+
+            when(client.get(Policy.class, "fake-policy")).thenReturn(Mono.just(policy));
+            when(client.get(ConfigMap.class, "fake-configmap")).thenReturn(Mono.just(cm));
+
+            var handler = mock(AttachmentHandler.class);
+            var metadata = new Metadata();
+            metadata.setName("fake-attachment");
+            var attachment = new Attachment();
+            attachment.setMetadata(metadata);
+
+            when(handler.upload(any())).thenReturn(Mono.just(attachment));
+            when(extensionGetter.getExtensions(AttachmentHandler.class))
+                .thenReturn(Flux.just(handler));
+            when(client.create(attachment)).thenReturn(Mono.just(attachment));
+
+            var builder = new MultipartBodyBuilder();
+            builder.part("policyName", "fake-policy");
+            builder.part("groupName", "fake-group");
+            builder.part("file", "fake-file")
+                .contentType(MediaType.TEXT_PLAIN)
+                .filename("fake-filename");
+            webClient
+                .mutateWith(mockUser("fake-user").password("fake-password"))
+                .post()
+                .uri("/attachments/upload")
+                .contentType(MediaType.MULTIPART_FORM_DATA)
+                .body(BodyInserters.fromMultipartData(builder.build()))
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("$.metadata.name").isEqualTo("fake-attachment")
+                .jsonPath("$.spec.ownerName").isEqualTo("fake-user")
+                .jsonPath("$.spec.policyName").isEqualTo("fake-policy")
+                .jsonPath("$.spec.groupName").isEqualTo("fake-group")
+            ;
+
+            verify(client).get(Policy.class, "fake-policy");
+            verify(client).get(ConfigMap.class, "fake-configmap");
+            verify(client).create(attachment);
+            verify(handler).upload(any());
+        }
+    }
+
+    @Nested
+    class SearchTest {
+
+        @Test
+        void shouldListUngroupedAttachments() {
+            when(client.listAll(eq(Group.class), any(), any(Sort.class)))
+                .thenReturn(Flux.empty());
+
+            when(client.listBy(same(Attachment.class), any(), any(PageRequest.class)))
+                .thenReturn(Mono.just(ListResult.emptyResult()));
+
+            webClient
+                .get()
+                .uri("/attachments")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("items.length()").isEqualTo(0);
+        }
+
+        @Test
+        void searchAttachmentWhenGroupIsEmpty() {
+            when(client.listAll(eq(Group.class), any(), any(Sort.class)))
+                .thenReturn(Flux.empty());
+
+            when(client.listBy(eq(Attachment.class), any(), any(PageRequest.class)))
+                .thenReturn(Mono.empty());
+
+            webClient
+                .get()
+                .uri("/attachments")
+                .exchange()
+                .expectStatus().isOk();
+
+            verify(client).listBy(eq(Attachment.class), any(), any(PageRequest.class));
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/endpoint/EmailVerificationCodeTest.java b/application/src/test/java/run/halo/app/core/extension/endpoint/EmailVerificationCodeTest.java
new file mode 100644
index 0000000..ee3838c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/endpoint/EmailVerificationCodeTest.java
@@ -0,0 +1,122 @@
+package run.halo.app.core.extension.endpoint;
+
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.when;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.csrf;
+
+import io.github.resilience4j.ratelimiter.RateLimiterConfig;
+import io.github.resilience4j.ratelimiter.RateLimiterRegistry;
+import io.github.resilience4j.reactor.ratelimiter.operator.RateLimiterOperator;
+import java.time.Duration;
+import java.util.Map;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.springframework.http.HttpStatus;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.context.junit.jupiter.SpringExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.service.EmailVerificationService;
+import run.halo.app.core.extension.service.UserService;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+/**
+ * Tests for a part of {@link UserEndpoint} about sending email verification code.
+ *
+ * @author guqing
+ * @see UserEndpoint
+ * @see EmailVerificationService
+ * @since 2.11.0
+ */
+@ExtendWith(SpringExtension.class)
+@WithMockUser(username = "fake-user", password = "fake-password")
+class EmailVerificationCodeTest {
+    WebTestClient webClient;
+    @Mock
+    ReactiveExtensionClient client;
+    @Mock
+    EmailVerificationService emailVerificationService;
+
+    @Mock
+    UserService userService;
+
+    @InjectMocks
+    UserEndpoint endpoint;
+
+    @BeforeEach
+    void setUp() {
+        var spyUserEndpoint = spy(endpoint);
+        var config = RateLimiterConfig.custom()
+            .limitRefreshPeriod(Duration.ofSeconds(10))
+            .limitForPeriod(1)
+            .build();
+        var sendCodeRateLimiter = RateLimiterRegistry.of(config)
+            .rateLimiter("send-email-verification-code-fake-user:hi@halo.run");
+        doReturn(RateLimiterOperator.of(sendCodeRateLimiter)).when(spyUserEndpoint)
+            .sendEmailVerificationCodeRateLimiter(eq("fake-user"), eq("hi@halo.run"));
+
+        var verifyEmailRateLimiter = RateLimiterRegistry.of(config)
+            .rateLimiter("verify-email-fake-user");
+        doReturn(RateLimiterOperator.of(verifyEmailRateLimiter)).when(spyUserEndpoint)
+            .verificationEmailRateLimiter(eq("fake-user"));
+
+        webClient = WebTestClient.bindToRouterFunction(spyUserEndpoint.endpoint()).build()
+            .mutateWith(csrf());
+    }
+
+    @Test
+    void sendEmailVerificationCode() {
+        var user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName("fake-user");
+        user.setSpec(new User.UserSpec());
+        user.getSpec().setEmail("hi@halo.run");
+        when(client.get(eq(User.class), eq("fake-user"))).thenReturn(Mono.just(user));
+        when(emailVerificationService.sendVerificationCode(anyString(), anyString()))
+            .thenReturn(Mono.empty());
+        webClient.post()
+            .uri("/users/-/send-email-verification-code")
+            .bodyValue(Map.of("email", "hi@halo.run"))
+            .exchange()
+            .expectStatus()
+            .isOk();
+
+        // request again to trigger rate limit
+        webClient.post()
+            .uri("/users/-/send-email-verification-code")
+            .bodyValue(Map.of("email", "hi@halo.run"))
+            .exchange()
+            .expectStatus()
+            .isEqualTo(HttpStatus.TOO_MANY_REQUESTS);
+    }
+
+    @Test
+    void verifyEmail() {
+        when(emailVerificationService.verify(anyString(), anyString()))
+            .thenReturn(Mono.empty());
+        when(userService.confirmPassword(anyString(), anyString()))
+            .thenReturn(Mono.just(true));
+        webClient.post()
+            .uri("/users/-/verify-email")
+            .bodyValue(Map.of("code", "fake-code-1", "password", "123456"))
+            .exchange()
+            .expectStatus()
+            .isOk();
+
+        // request again to trigger rate limit
+        webClient.post()
+            .uri("/users/-/verify-email")
+            .bodyValue(Map.of("code", "fake-code-2", "password", "123456"))
+            .exchange()
+            .expectStatus()
+            .isEqualTo(HttpStatus.TOO_MANY_REQUESTS);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/endpoint/PluginEndpointTest.java b/application/src/test/java/run/halo/app/core/extension/endpoint/PluginEndpointTest.java
new file mode 100644
index 0000000..75ec310
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/endpoint/PluginEndpointTest.java
@@ -0,0 +1,506 @@
+package run.halo.app.core.extension.endpoint;
+
+import static java.util.Objects.requireNonNull;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyInt;
+import static org.mockito.ArgumentMatchers.argThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.test.web.reactive.server.WebTestClient.bindToRouterFunction;
+import static org.springframework.web.reactive.function.BodyInserters.fromMultipartData;
+
+import com.github.zafarkhaja.semver.Version;
+import java.io.IOException;
+import java.net.URISyntaxException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.time.Instant;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Objects;
+import lombok.extern.slf4j.Slf4j;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Spy;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.boot.autoconfigure.web.WebProperties;
+import org.springframework.core.io.ByteArrayResource;
+import org.springframework.core.io.FileSystemResource;
+import org.springframework.core.io.Resource;
+import org.springframework.http.CacheControl;
+import org.springframework.http.MediaType;
+import org.springframework.http.client.MultipartBodyBuilder;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.server.ServerWebInputException;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.Plugin;
+import run.halo.app.core.extension.Setting;
+import run.halo.app.core.extension.service.PluginService;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.SystemVersionSupplier;
+import run.halo.app.infra.utils.FileUtils;
+
+@Slf4j
+@ExtendWith(MockitoExtension.class)
+class PluginEndpointTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    SystemVersionSupplier systemVersionSupplier;
+
+    @Mock
+    PluginService pluginService;
+
+    @Spy
+    WebProperties webProperties = new WebProperties();
+
+    @InjectMocks
+    PluginEndpoint endpoint;
+
+    @Nested
+    class PluginListTest {
+
+        @Test
+        void shouldListEmptyPluginsWhenNoPlugins() {
+            when(client.list(same(Plugin.class), any(), any(), anyInt(), anyInt()))
+                .thenReturn(Mono.just(ListResult.emptyResult()));
+
+            bindToRouterFunction(endpoint.endpoint())
+                .build()
+                .get().uri("/plugins")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("$.items.length()").isEqualTo(0)
+                .jsonPath("$.total").isEqualTo(0);
+        }
+
+        @Test
+        void shouldListPluginsWhenPluginPresent() {
+            var plugins = List.of(
+                createPlugin("fake-plugin-1"),
+                createPlugin("fake-plugin-2"),
+                createPlugin("fake-plugin-3")
+            );
+            var expectResult = new ListResult<>(plugins);
+            when(client.list(same(Plugin.class), any(), any(), anyInt(), anyInt()))
+                .thenReturn(Mono.just(expectResult));
+
+            bindToRouterFunction(endpoint.endpoint())
+                .build()
+                .get().uri("/plugins")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("$.items.length()").isEqualTo(3)
+                .jsonPath("$.total").isEqualTo(3);
+        }
+
+        @Test
+        void shouldFilterPluginsWhenKeywordProvided() {
+            var expectPlugin =
+                createPlugin("fake-plugin-2", "expected display name", "", false);
+            var unexpectedPlugin1 =
+                createPlugin("fake-plugin-1", "first fake display name", "", false);
+            var unexpectedPlugin2 =
+                createPlugin("fake-plugin-3", "second fake display name", "", false);
+            var plugins = List.of(
+                expectPlugin
+            );
+            var expectResult = new ListResult<>(plugins);
+            when(client.list(same(Plugin.class), any(), any(), anyInt(), anyInt()))
+                .thenReturn(Mono.just(expectResult));
+
+            bindToRouterFunction(endpoint.endpoint())
+                .build()
+                .get().uri("/plugins?keyword=Expected")
+                .exchange()
+                .expectStatus().isOk();
+
+            verify(client).list(same(Plugin.class), argThat(
+                    predicate -> predicate.test(expectPlugin)
+                        && !predicate.test(unexpectedPlugin1)
+                        && !predicate.test(unexpectedPlugin2)),
+                any(), anyInt(), anyInt());
+        }
+
+        @Test
+        void shouldFilterPluginsWhenEnabledProvided() {
+            var expectPlugin =
+                createPlugin("fake-plugin-2", "expected display name", "", true);
+            var unexpectedPlugin1 =
+                createPlugin("fake-plugin-1", "first fake display name", "", false);
+            var unexpectedPlugin2 =
+                createPlugin("fake-plugin-3", "second fake display name", "", false);
+            var plugins = List.of(
+                expectPlugin
+            );
+            var expectResult = new ListResult<>(plugins);
+            when(client.list(same(Plugin.class), any(), any(), anyInt(), anyInt()))
+                .thenReturn(Mono.just(expectResult));
+
+            bindToRouterFunction(endpoint.endpoint())
+                .build()
+                .get().uri("/plugins?enabled=true")
+                .exchange()
+                .expectStatus().isOk();
+
+            verify(client).list(same(Plugin.class), argThat(
+                    predicate -> predicate.test(expectPlugin)
+                        && !predicate.test(unexpectedPlugin1)
+                        && !predicate.test(unexpectedPlugin2)),
+                any(), anyInt(), anyInt());
+        }
+
+        @Test
+        void shouldSortPluginsWhenCreationTimestampSet() {
+            var expectPlugin =
+                createPlugin("fake-plugin-2", "expected display name", "", true);
+            var expectResult = new ListResult<>(List.of(expectPlugin));
+            when(client.list(same(Plugin.class), any(), any(), anyInt(), anyInt()))
+                .thenReturn(Mono.just(expectResult));
+
+            bindToRouterFunction(endpoint.endpoint())
+                .build()
+                .get().uri("/plugins?sort=creationTimestamp,desc")
+                .exchange()
+                .expectStatus().isOk();
+
+            verify(client).list(same(Plugin.class), any(), argThat(comparator -> {
+                var now = Instant.now();
+                var plugins = new ArrayList<>(List.of(
+                    createPlugin("fake-plugin-a", now),
+                    createPlugin("fake-plugin-b", now.plusSeconds(1)),
+                    createPlugin("fake-plugin-c", now.plusSeconds(2))
+                ));
+                plugins.sort(comparator);
+                return Objects.deepEquals(plugins, List.of(
+                    createPlugin("fake-plugin-c", now.plusSeconds(2)),
+                    createPlugin("fake-plugin-b", now.plusSeconds(1)),
+                    createPlugin("fake-plugin-a", now)
+                ));
+            }), anyInt(), anyInt());
+        }
+    }
+
+    @Nested
+    class PluginUpgradeTest {
+
+        WebTestClient webClient;
+
+        Path tempDirectory;
+
+        Path plugin002;
+
+        @BeforeEach
+        void setUp() throws URISyntaxException, IOException {
+            webClient = WebTestClient.bindToRouterFunction(endpoint.endpoint())
+                .build();
+
+            lenient().when(systemVersionSupplier.get()).thenReturn(Version.valueOf("0.0.0"));
+            tempDirectory = Files.createTempDirectory("halo-test-plugin-upgrade-");
+            plugin002 = tempDirectory.resolve("plugin-0.0.2.jar");
+
+            var plugin002Uri = requireNonNull(
+                getClass().getClassLoader().getResource("plugin/plugin-0.0.2")).toURI();
+
+            FileUtils.jar(Paths.get(plugin002Uri), tempDirectory.resolve("plugin-0.0.2.jar"));
+        }
+
+        @AfterEach
+        void cleanUp() {
+            FileUtils.deleteRecursivelyAndSilently(tempDirectory);
+        }
+
+        @Test
+        void shouldResponseBadRequestIfNoPluginInstalledBefore() {
+            var bodyBuilder = new MultipartBodyBuilder();
+            bodyBuilder.part("file", new FileSystemResource(plugin002))
+                .contentType(MediaType.MULTIPART_FORM_DATA);
+
+            when(pluginService.upgrade(eq("fake-plugin"), isA(Path.class)))
+                .thenReturn(Mono.error(new ServerWebInputException("plugin not found")));
+
+            webClient.post().uri("/plugins/fake-plugin/upgrade")
+                .contentType(MediaType.MULTIPART_FORM_DATA)
+                .body(fromMultipartData(bodyBuilder.build()))
+                .exchange()
+                .expectStatus().isBadRequest();
+
+            verify(pluginService).upgrade(eq("fake-plugin"), isA(Path.class));
+        }
+
+    }
+
+    @Nested
+    class UpdatePluginConfigTest {
+        WebTestClient webClient;
+
+        @BeforeEach
+        void setUp() {
+            webClient = WebTestClient.bindToRouterFunction(endpoint.endpoint())
+                .build();
+        }
+
+        @Test
+        void updateWhenConfigMapNameIsNull() {
+            Plugin plugin = createPlugin("fake-plugin");
+            plugin.getSpec().setConfigMapName(null);
+
+            when(client.fetch(eq(Plugin.class), eq("fake-plugin"))).thenReturn(Mono.just(plugin));
+            webClient.put()
+                .uri("/plugins/fake-plugin/config")
+                .exchange()
+                .expectStatus().isBadRequest();
+        }
+
+        @Test
+        void updateWhenConfigMapNameNotMatch() {
+            Plugin plugin = createPlugin("fake-plugin");
+            plugin.getSpec().setConfigMapName("fake-config-map");
+
+            when(client.fetch(eq(Plugin.class), eq("fake-plugin"))).thenReturn(Mono.just(plugin));
+            webClient.put()
+                .uri("/plugins/fake-plugin/config")
+                .body(Mono.fromSupplier(() -> {
+                    ConfigMap configMap = new ConfigMap();
+                    configMap.setMetadata(new Metadata());
+                    configMap.getMetadata().setName("not-match");
+                    return configMap;
+                }), ConfigMap.class)
+                .exchange()
+                .expectStatus().isBadRequest();
+        }
+
+        @Test
+        void updateWhenConfigMapNameMatch() {
+            Plugin plugin = createPlugin("fake-plugin");
+            plugin.getSpec().setConfigMapName("fake-config-map");
+
+            when(client.fetch(eq(Plugin.class), eq("fake-plugin"))).thenReturn(Mono.just(plugin));
+            when(client.fetch(eq(ConfigMap.class), eq("fake-config-map"))).thenReturn(Mono.empty());
+            when(client.create(any(ConfigMap.class))).thenReturn(Mono.empty());
+
+            webClient.put()
+                .uri("/plugins/fake-plugin/config")
+                .body(Mono.fromSupplier(() -> {
+                    ConfigMap configMap = new ConfigMap();
+                    configMap.setMetadata(new Metadata());
+                    configMap.getMetadata().setName("fake-config-map");
+                    return configMap;
+                }), ConfigMap.class)
+                .exchange()
+                .expectStatus().isOk();
+        }
+    }
+
+    @Nested
+    class PluginConfigAndSettingFetchTest {
+        WebTestClient webClient;
+
+        @BeforeEach
+        void setUp() {
+            webClient = WebTestClient.bindToRouterFunction(endpoint.endpoint())
+                .build();
+        }
+
+        @Test
+        void fetchSetting() {
+            Plugin plugin = createPlugin("fake");
+            plugin.getSpec().setSettingName("fake-setting");
+
+            when(client.fetch(eq(Setting.class), eq("fake-setting")))
+                .thenReturn(Mono.just(new Setting()));
+
+            when(client.fetch(eq(Plugin.class), eq("fake"))).thenReturn(Mono.just(plugin));
+            webClient.get()
+                .uri("/plugins/fake/setting")
+                .exchange()
+                .expectStatus().isOk();
+
+            verify(client).fetch(eq(Setting.class), eq("fake-setting"));
+            verify(client).fetch(eq(Plugin.class), eq("fake"));
+        }
+
+        @Test
+        void fetchConfig() {
+            Plugin plugin = createPlugin("fake");
+            plugin.getSpec().setConfigMapName("fake-config");
+
+            when(client.fetch(eq(ConfigMap.class), eq("fake-config")))
+                .thenReturn(Mono.just(new ConfigMap()));
+
+            when(client.fetch(eq(Plugin.class), eq("fake"))).thenReturn(Mono.just(plugin));
+            webClient.get()
+                .uri("/plugins/fake/config")
+                .exchange()
+                .expectStatus().isOk();
+
+            verify(client).fetch(eq(ConfigMap.class), eq("fake-config"));
+            verify(client).fetch(eq(Plugin.class), eq("fake"));
+        }
+    }
+
+    Plugin createPlugin(String name) {
+        return createPlugin(name, "fake display name", "fake description", null);
+    }
+
+    Plugin createPlugin(String name, String displayName, String description, Boolean enabled) {
+        var metadata = new Metadata();
+        metadata.setName(name);
+        metadata.setCreationTimestamp(Instant.now());
+        var spec = new Plugin.PluginSpec();
+        spec.setDisplayName(displayName);
+        spec.setDescription(description);
+        spec.setEnabled(enabled);
+        var plugin = new Plugin();
+        plugin.setMetadata(metadata);
+        plugin.setSpec(spec);
+        return plugin;
+    }
+
+    Plugin createPlugin(String name, Instant creationTimestamp) {
+        var metadata = new Metadata();
+        metadata.setName(name);
+        metadata.setCreationTimestamp(creationTimestamp);
+        var spec = new Plugin.PluginSpec();
+        var plugin = new Plugin();
+        plugin.setMetadata(metadata);
+        plugin.setSpec(spec);
+        return plugin;
+    }
+
+    @Nested
+    class BundleResourceEndpointTest {
+
+        private long lastModified;
+
+        WebTestClient webClient;
+
+        @BeforeEach
+        void setUp() {
+            webClient = WebTestClient.bindToRouterFunction(endpoint.endpoint()).build();
+            long currentTimeMillis = System.currentTimeMillis();
+            // We should ignore milliseconds here
+            // See https://datatracker.ietf.org/doc/html/rfc7231#section-7.1.1.1 for more.
+            this.lastModified = currentTimeMillis - currentTimeMillis % 1_000;
+        }
+
+        @Test
+        void shouldBeRedirectedWhileFetchingBundleJsWithoutVersion() {
+            when(pluginService.generateBundleVersion()).thenReturn(Mono.just("fake-version"));
+            webClient.get().uri("/plugins/-/bundle.js")
+                .exchange()
+                .expectStatus().is3xxRedirection()
+                .expectHeader().cacheControl(CacheControl.noStore())
+                .expectHeader().location(
+                    "/apis/api.console.halo.run/v1alpha1/plugins/-/bundle.js?v=fake-version");
+        }
+
+        @Test
+        void shouldBeRedirectedWhileFetchingBundleCssWithoutVersion() {
+            when(pluginService.generateBundleVersion()).thenReturn(Mono.just("fake-version"));
+            webClient.get().uri("/plugins/-/bundle.css")
+                .exchange()
+                .expectStatus().is3xxRedirection()
+                .expectHeader().cacheControl(CacheControl.noStore())
+                .expectHeader().location(
+                    "/apis/api.console.halo.run/v1alpha1/plugins/-/bundle.css?v=fake-version");
+        }
+
+        @Test
+        void shouldFetchBundleCssWithCacheControl() {
+            var cache = webProperties.getResources().getCache();
+            cache.setUseLastModified(true);
+            var cachecontrol = cache.getCachecontrol();
+            cachecontrol.setNoCache(true);
+            endpoint.afterPropertiesSet();
+
+            when(pluginService.getCssBundle("fake-version"))
+                .thenReturn(Mono.fromSupplier(() -> mockResource("fake-css")));
+            webClient.get().uri("/plugins/-/bundle.css?v=fake-version")
+                .exchange()
+                .expectStatus().isOk()
+                .expectHeader().cacheControl(CacheControl.noCache())
+                .expectHeader().contentType("text/css")
+                .expectHeader().lastModified(lastModified)
+                .expectBody(String.class).isEqualTo("fake-css");
+        }
+
+        @Test
+        void shouldFetchBundleJsWithCacheControl() {
+            var cache = webProperties.getResources().getCache();
+            cache.setUseLastModified(true);
+            var cachecontrol = cache.getCachecontrol();
+            cachecontrol.setNoStore(true);
+            endpoint.afterPropertiesSet();
+
+            when(pluginService.getJsBundle("fake-version"))
+                .thenReturn(Mono.fromSupplier(() -> mockResource("fake-js")));
+            webClient.get().uri("/plugins/-/bundle.js?v=fake-version")
+                .exchange()
+                .expectStatus().isOk()
+                .expectHeader().cacheControl(CacheControl.noStore())
+                .expectHeader().contentType("text/javascript")
+                .expectHeader().lastModified(lastModified)
+                .expectBody(String.class).isEqualTo("fake-js");
+        }
+
+        @Test
+        void shouldFetchBundleCss() {
+            when(pluginService.getCssBundle("fake-version"))
+                .thenReturn(Mono.fromSupplier(() -> mockResource("fake-css")));
+            webClient.get().uri("/plugins/-/bundle.css?v=fake-version")
+                .exchange()
+                .expectStatus().isOk()
+                .expectHeader().cacheControl(CacheControl.empty())
+                .expectHeader().contentType("text/css")
+                .expectHeader().lastModified(-1)
+                .expectBody(String.class).isEqualTo("fake-css");
+        }
+
+        @Test
+        void shouldFetchBundleJs() {
+            when(pluginService.getJsBundle("fake-version"))
+                .thenReturn(Mono.fromSupplier(() -> mockResource("fake-js")));
+            webClient.get().uri("/plugins/-/bundle.js?v=fake-version")
+                .exchange()
+                .expectStatus().isOk()
+                .expectHeader().cacheControl(CacheControl.empty())
+                .expectHeader().contentType("text/javascript")
+                .expectHeader().lastModified(-1)
+                .expectBody(String.class).isEqualTo("fake-js");
+        }
+
+        Resource mockResource(String content) {
+            var resource = new ByteArrayResource(content.getBytes(StandardCharsets.UTF_8));
+            resource = spy(resource);
+            try {
+                doReturn(lastModified).when(resource).lastModified();
+            } catch (IOException e) {
+                // should never happen
+                throw new RuntimeException(e);
+            }
+            return resource;
+        }
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/endpoint/PostEndpointTest.java b/application/src/test/java/run/halo/app/core/extension/endpoint/PostEndpointTest.java
new file mode 100644
index 0000000..7933535
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/endpoint/PostEndpointTest.java
@@ -0,0 +1,182 @@
+package run.halo.app.core.extension.endpoint;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.Map;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationEventPublisher;
+import org.springframework.dao.OptimisticLockingFailureException;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.ContentUpdateParam;
+import run.halo.app.content.PostRequest;
+import run.halo.app.content.PostService;
+import run.halo.app.content.TestPost;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.Post.PostSpec;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+/**
+ * Tests for @{@link PostEndpoint}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PostEndpointTest {
+
+    @Mock
+    PostService postService;
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Mock
+    ApplicationEventPublisher eventPublisher;
+
+    @InjectMocks
+    PostEndpoint postEndpoint;
+
+    WebTestClient webTestClient;
+
+    @BeforeEach
+    void setUp() {
+        postEndpoint.setMaxAttemptsWaitForPublish(3);
+        webTestClient = WebTestClient
+            .bindToRouterFunction(postEndpoint.endpoint())
+            .build();
+    }
+
+    @Test
+    void draftPost() {
+        when(postService.draftPost(any())).thenReturn(Mono.just(TestPost.postV1()));
+        webTestClient.post()
+            .uri("/posts")
+            .bodyValue(postRequest(TestPost.postV1()))
+            .exchange()
+            .expectStatus()
+            .isOk()
+            .expectBody(Post.class)
+            .value(post -> assertThat(post).isEqualTo(TestPost.postV1()));
+    }
+
+    @Test
+    void updatePost() {
+        when(postService.updatePost(any())).thenReturn(Mono.just(TestPost.postV1()));
+
+        webTestClient.put()
+            .uri("/posts/post-A")
+            .bodyValue(postRequest(TestPost.postV1()))
+            .exchange()
+            .expectStatus()
+            .isOk()
+            .expectBody(Post.class)
+            .value(post -> assertThat(post).isEqualTo(TestPost.postV1()));
+    }
+
+    @Test
+    void publishRetryOnOptimisticLockingFailure() {
+        var post = new Post();
+        post.setMetadata(new Metadata());
+        post.getMetadata().setName("post-1");
+        post.setSpec(new PostSpec());
+        when(client.get(eq(Post.class), eq("post-1"))).thenReturn(Mono.just(post));
+
+        when(client.update(any(Post.class)))
+            .thenReturn(Mono.error(new OptimisticLockingFailureException("fake-error")));
+
+        // Send request
+        webTestClient.put()
+            .uri("/posts/{name}/publish?async=false", "post-1")
+            .exchange()
+            .expectStatus()
+            .is5xxServerError();
+
+        // Verify WebClient retry behavior
+        verify(client, times(6)).get(eq(Post.class), eq("post-1"));
+        verify(client, times(6)).update(any(Post.class));
+    }
+
+    @Test
+    void publishSuccess() {
+        var post = new Post();
+        post.setMetadata(new Metadata());
+        post.getMetadata().setName("post-1");
+        post.setSpec(new PostSpec());
+
+        var publishedPost = new Post();
+        var publishedMetadata = new Metadata();
+        publishedMetadata.setAnnotations(Map.of(Post.LAST_RELEASED_SNAPSHOT_ANNO, "my-release"));
+        publishedPost.setMetadata(publishedMetadata);
+        var publishedPostSpec = new PostSpec();
+        publishedPostSpec.setReleaseSnapshot("my-release");
+        publishedPost.setSpec(publishedPostSpec);
+
+        when(client.get(eq(Post.class), eq("post-1")))
+            .thenReturn(Mono.just(post))
+            .thenReturn(Mono.just(publishedPost));
+
+        when(client.update(any(Post.class)))
+            .thenReturn(Mono.just(post));
+
+        // Send request
+        webTestClient.put()
+            .uri("/posts/{name}/publish?async=false", "post-1")
+            .exchange()
+            .expectStatus()
+            .is2xxSuccessful();
+
+        // Verify WebClient retry behavior
+        verify(client, times(2)).get(eq(Post.class), eq("post-1"));
+        verify(client).update(any(Post.class));
+    }
+
+    @Test
+    void shouldFailIfWaitTimeoutForPublishedStatus() {
+        var post = new Post();
+        post.setMetadata(new Metadata());
+        post.getMetadata().setName("post-1");
+        post.setSpec(new PostSpec());
+
+        var publishedPost = new Post();
+        var publishedMetadata = new Metadata();
+        publishedMetadata.setAnnotations(
+            Map.of(Post.LAST_RELEASED_SNAPSHOT_ANNO, "old-my-release"));
+        publishedPost.setMetadata(publishedMetadata);
+        var publishedPostSpec = new PostSpec();
+        publishedPostSpec.setReleaseSnapshot("my-release");
+        publishedPost.setSpec(publishedPostSpec);
+
+        when(client.get(eq(Post.class), eq("post-1")))
+            .thenReturn(Mono.just(post))
+            .thenReturn(Mono.just(publishedPost));
+
+        when(client.update(any(Post.class)))
+            .thenReturn(Mono.just(post));
+
+        // Send request
+        webTestClient.put()
+            .uri("/posts/{name}/publish?async=false", "post-1")
+            .exchange()
+            .expectStatus()
+            .is5xxServerError();
+
+        // Verify WebClient retry behavior
+        verify(client, times(5)).get(eq(Post.class), eq("post-1"));
+        verify(client).update(any(Post.class));
+    }
+
+    PostRequest postRequest(Post post) {
+        return new PostRequest(post, new ContentUpdateParam(null, "B", "
B
", "MARKDOWN"));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/endpoint/SinglePageEndpointTest.java b/application/src/test/java/run/halo/app/core/extension/endpoint/SinglePageEndpointTest.java
new file mode 100644
index 0000000..9e3fcd8
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/endpoint/SinglePageEndpointTest.java
@@ -0,0 +1,92 @@
+package run.halo.app.core.extension.endpoint;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.dao.OptimisticLockingFailureException;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+/**
+ * Tests for @{@link SinglePageEndpoint}.
+ *
+ * @author guqing
+ * @since 2.3.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SinglePageEndpointTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    SinglePageEndpoint singlePageEndpoint;
+
+    WebTestClient webTestClient;
+
+    @BeforeEach
+    void setUp() {
+        webTestClient = WebTestClient
+            .bindToRouterFunction(singlePageEndpoint.endpoint())
+            .build();
+    }
+
+    @Test
+    void publishRetryOnOptimisticLockingFailure() {
+        var page = new SinglePage();
+        page.setMetadata(new Metadata());
+        page.getMetadata().setName("page-1");
+        page.setSpec(new SinglePage.SinglePageSpec());
+        when(client.get(eq(SinglePage.class), eq("page-1"))).thenReturn(Mono.just(page));
+
+        when(client.update(any(SinglePage.class)))
+            .thenReturn(Mono.error(new OptimisticLockingFailureException("fake-error")));
+
+        // Send request
+        webTestClient.put()
+            .uri("/singlepages/{name}/publish?async=false", "page-1")
+            .exchange()
+            .expectStatus()
+            .is5xxServerError();
+
+        // Verify WebClient retry behavior
+        verify(client, times(6)).get(eq(SinglePage.class), eq("page-1"));
+        verify(client, times(6)).update(any(SinglePage.class));
+    }
+
+    @Test
+    void publishSuccess() {
+        var page = new SinglePage();
+        page.setMetadata(new Metadata());
+        page.getMetadata().setName("page-1");
+        page.setSpec(new SinglePage.SinglePageSpec());
+
+        when(client.get(eq(SinglePage.class), eq("page-1"))).thenReturn(Mono.just(page));
+        when(client.fetch(eq(SinglePage.class), eq("page-1"))).thenReturn(Mono.empty());
+
+        when(client.update(any(SinglePage.class))).thenReturn(Mono.just(page));
+
+        // Send request
+        webTestClient.put()
+            .uri("/singlepages/{name}/publish?async=false", "page-1")
+            .exchange()
+            .expectStatus()
+            .is2xxSuccessful();
+
+        // Verify WebClient retry behavior
+        verify(client, times(1)).get(eq(SinglePage.class), eq("page-1"));
+        verify(client, times(1)).update(any(SinglePage.class));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/endpoint/SystemInitializationEndpointTest.java b/application/src/test/java/run/halo/app/core/extension/endpoint/SystemInitializationEndpointTest.java
new file mode 100644
index 0000000..82cf8a2
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/endpoint/SystemInitializationEndpointTest.java
@@ -0,0 +1,89 @@
+package run.halo.app.core.extension.endpoint;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.test.web.reactive.server.WebTestClient.bindToRouterFunction;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.endpoint.SystemInitializationEndpoint.SystemInitializationRequest;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.InitializationStateGetter;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.security.SuperAdminInitializer;
+import run.halo.app.security.SuperAdminInitializer.InitializationParam;
+
+/**
+ * Tests for {@link SystemInitializationEndpoint}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SystemInitializationEndpointTest {
+
+    @Mock
+    InitializationStateGetter initializationStateGetter;
+
+    @Mock
+    SuperAdminInitializer superAdminInitializer;
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @InjectMocks
+    SystemInitializationEndpoint initializationEndpoint;
+
+    WebTestClient webTestClient;
+
+    @BeforeEach
+    void setUp() {
+        webTestClient = bindToRouterFunction(initializationEndpoint.endpoint()).build();
+    }
+
+    @Test
+    void initializeWithoutRequestBody() {
+        webTestClient.post()
+            .uri("/system/initialize")
+            .exchange()
+            .expectStatus()
+            .isBadRequest();
+    }
+
+    @Test
+    void initializeWithRequestBody() {
+        var initialization = new SystemInitializationRequest();
+        initialization.setUsername("faker");
+        initialization.setPassword("openfaker");
+        initialization.setEmail("faker@halo.run");
+        initialization.setSiteTitle("Fake Site");
+
+        when(initializationStateGetter.userInitialized()).thenReturn(Mono.just(false));
+        when(superAdminInitializer.initialize(any(InitializationParam.class)))
+            .thenReturn(Mono.empty());
+
+        var configMap = new ConfigMap();
+        when(client.get(ConfigMap.class, SystemSetting.SYSTEM_CONFIG))
+            .thenReturn(Mono.just(configMap));
+        when(client.update(configMap)).thenReturn(Mono.just(configMap));
+
+        webTestClient.post().uri("/system/initialize")
+            .bodyValue(initialization)
+            .exchange()
+            .expectStatus().isCreated()
+            .expectHeader().location("/console");
+
+        verify(initializationStateGetter).userInitialized();
+        verify(superAdminInitializer).initialize(any());
+        verify(client).get(ConfigMap.class, SystemSetting.SYSTEM_CONFIG);
+        verify(client).update(configMap);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/endpoint/TagEndpointTest.java b/application/src/test/java/run/halo/app/core/extension/endpoint/TagEndpointTest.java
new file mode 100644
index 0000000..1eb3214
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/endpoint/TagEndpointTest.java
@@ -0,0 +1,104 @@
+package run.halo.app.core.extension.endpoint;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.when;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.springSecurity;
+import static org.springframework.test.web.reactive.server.WebTestClient.bindToRouterFunction;
+
+import java.time.Instant;
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.content.Tag;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+/**
+ * Tag endpoint test.
+ *
+ * @author LIlGG
+ */
+@ExtendWith(MockitoExtension.class)
+class TagEndpointTest {
+    @Mock
+    ReactiveExtensionClient client;
+
+    @InjectMocks
+    TagEndpoint tagEndpoint;
+
+    WebTestClient webClient;
+
+    @BeforeEach
+    void setUp() {
+        webClient = WebTestClient.bindToRouterFunction(tagEndpoint.endpoint())
+            .apply(springSecurity())
+            .build();
+    }
+
+    @Nested
+    class TagListTest {
+
+        @Test
+        void shouldListEmptyTagsWhenNoTags() {
+            when(client.listBy(same(Tag.class), any(), any(PageRequest.class)))
+                .thenReturn(Mono.just(ListResult.emptyResult()));
+
+            bindToRouterFunction(tagEndpoint.endpoint())
+                .build()
+                .get().uri("/tags")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("$.items.length()").isEqualTo(0)
+                .jsonPath("$.total").isEqualTo(0);
+        }
+
+        @Test
+        void shouldListTagsWhenTagPresent() {
+            var tags = List.of(
+                createTag("fake-tag-1"),
+                createTag("fake-tag-2")
+            );
+            var expectResult = new ListResult<>(tags);
+            when(client.listBy(same(Tag.class), any(), any(PageRequest.class)))
+                .thenReturn(Mono.just(expectResult));
+
+            bindToRouterFunction(tagEndpoint.endpoint())
+                .build()
+                .get().uri("/tags")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("$.items.length()").isEqualTo(2)
+                .jsonPath("$.total").isEqualTo(2);
+        }
+
+        Tag createTag(String name) {
+            return createTag(name, "fake display name");
+        }
+
+        Tag createTag(String name, String displayName) {
+            var metadata = new Metadata();
+            metadata.setName(name);
+            metadata.setCreationTimestamp(Instant.now());
+            var spec = new Tag.TagSpec();
+            spec.setDisplayName(displayName);
+            spec.setSlug(name);
+            var tag = new Tag();
+            tag.setMetadata(metadata);
+            tag.setSpec(spec);
+            return tag;
+        }
+
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/endpoint/UserEndpointIntegrationTest.java b/application/src/test/java/run/halo/app/core/extension/endpoint/UserEndpointIntegrationTest.java
new file mode 100644
index 0000000..b83f2f6
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/endpoint/UserEndpointIntegrationTest.java
@@ -0,0 +1,125 @@
+package run.halo.app.core.extension.endpoint;
+
+import static org.mockito.ArgumentMatchers.anySet;
+import static org.mockito.Mockito.when;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.csrf;
+
+import java.time.Instant;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.MockBean;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.annotation.DirtiesContext;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+@SpringBootTest
+@AutoConfigureWebTestClient
+@DirtiesContext(classMode = DirtiesContext.ClassMode.AFTER_EACH_TEST_METHOD)
+@WithMockUser(username = "fake-user", password = "fake-password", roles = "fake-super-role")
+public class UserEndpointIntegrationTest {
+    @Autowired
+    WebTestClient webClient;
+
+    @Autowired
+    ReactiveExtensionClient client;
+
+    @MockBean
+    RoleService roleService;
+
+    @BeforeEach
+    void setUp() {
+        var rule = new Role.PolicyRule.Builder()
+            .apiGroups("*")
+            .resources("*")
+            .verbs("*")
+            .build();
+        var role = new Role();
+        role.setMetadata(new Metadata());
+        role.getMetadata().setName("fake-super-role");
+        role.setRules(List.of(rule));
+        when(roleService.listDependenciesFlux(anySet())).thenReturn(Flux.just(role));
+        webClient = webClient.mutateWith(csrf());
+    }
+
+    @Nested
+    class UserListTest {
+        @Test
+        void shouldFilterUsersWhenDisplayNameKeywordProvided() {
+            var expectUser =
+                createUser("fake-user-2", "expected display name");
+            var unexpectedUser1 =
+                createUser("fake-user-1", "first fake display name");
+            var unexpectedUser2 =
+                createUser("fake-user-3", "second fake display name");
+
+            client.create(expectUser).block();
+            client.create(unexpectedUser1).block();
+            client.create(unexpectedUser2).block();
+
+            when(roleService.list(anySet())).thenReturn(Flux.empty());
+            when(roleService.getRolesByUsernames(
+                List.of("fake-user-2")
+            )).thenReturn(Mono.just(Map.of("fake-user-2", Set.of("fake-super-role"))));
+
+            webClient.get().uri("/apis/api.console.halo.run/v1alpha1/users?keyword=Expected")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("$.items.length()").isEqualTo(1)
+                .jsonPath("$.items[0].user.metadata.name").isEqualTo("fake-user-2");
+
+        }
+
+        @Test
+        void shouldFilterUsersWhenUserNameKeywordProvided() {
+            var expectUser =
+                createUser("fake-user", "expected display name");
+            var unexpectedUser1 =
+                createUser("fake-user-1", "first fake display name");
+            var unexpectedUser2 =
+                createUser("fake-user-3", "second fake display name");
+
+            client.create(expectUser).block();
+            client.create(unexpectedUser1).block();
+            client.create(unexpectedUser2).block();
+
+            when(roleService.list(anySet())).thenReturn(Flux.empty());
+            when(roleService.getRolesByUsernames(List.of("fake-user")))
+                .thenReturn(Mono.just(Map.of("fake-user", Set.of("fake-super-role"))));
+
+            webClient.get().uri("/apis/api.console.halo.run/v1alpha1/users?keyword=fake-user")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("$.items.length()").isEqualTo(1)
+                .jsonPath("$.items[0].user.metadata.name").isEqualTo("fake-user");
+        }
+    }
+
+    User createUser(String name, String displayName) {
+        var metadata = new Metadata();
+        metadata.setName(name);
+        metadata.setCreationTimestamp(Instant.now());
+        var spec = new User.UserSpec();
+        spec.setEmail("fake-email");
+        spec.setDisplayName(displayName);
+        var user = new User();
+        user.setMetadata(metadata);
+        user.setSpec(spec);
+        return user;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/endpoint/UserEndpointTest.java b/application/src/test/java/run/halo/app/core/extension/endpoint/UserEndpointTest.java
new file mode 100644
index 0000000..9396cfe
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/endpoint/UserEndpointTest.java
@@ -0,0 +1,514 @@
+package run.halo.app.core.extension.endpoint;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anySet;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.csrf;
+import static org.springframework.test.web.reactive.server.WebTestClient.bindToRouterFunction;
+import static run.halo.app.extension.GroupVersionKind.fromExtension;
+
+import java.time.Instant;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.http.MediaType;
+import org.springframework.http.client.MultipartBodyBuilder;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.BodyInserters;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.RoleBinding;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.attachment.Attachment;
+import run.halo.app.core.extension.service.AttachmentService;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.core.extension.service.UserService;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.exception.ExtensionNotFoundException;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.infra.utils.JsonUtils;
+
+@SpringBootTest
+@AutoConfigureWebTestClient
+@WithMockUser(username = "fake-user", password = "fake-password", roles = "fake-super-role")
+class UserEndpointTest {
+
+    WebTestClient webClient;
+
+    @Mock
+    RoleService roleService;
+
+    @Mock
+    AttachmentService attachmentService;
+
+    @Mock
+    SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Mock
+    UserService userService;
+
+    @InjectMocks
+    UserEndpoint endpoint;
+
+    @BeforeEach
+    void setUp() {
+        // disable authorization
+        webClient = WebTestClient.bindToRouterFunction(endpoint.endpoint()).build()
+            .mutateWith(csrf());
+    }
+
+    @Nested
+    class UserListTest {
+
+        @Test
+        void shouldListEmptyUsersWhenNoUsers() {
+            when(roleService.getRolesByUsernames(any())).thenReturn(Mono.just(Map.of()));
+            when(roleService.list(any())).thenReturn(Flux.empty());
+            when(client.listBy(same(User.class), any(), any(PageRequest.class)))
+                .thenReturn(Mono.just(ListResult.emptyResult()));
+
+            bindToRouterFunction(endpoint.endpoint())
+                .build()
+                .get().uri("/users")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("$.items.length()").isEqualTo(0)
+                .jsonPath("$.total").isEqualTo(0);
+        }
+
+        @Test
+        void shouldListUsersWhenUserPresent() {
+            var users = List.of(
+                createUser("fake-user-1"),
+                createUser("fake-user-2"),
+                createUser("fake-user-3")
+            );
+            var expectResult = new ListResult<>(users);
+            when(roleService.getRolesByUsernames(any())).thenReturn(Mono.just(Map.of()));
+            when(roleService.list(anySet())).thenReturn(Flux.empty());
+            when(client.listBy(same(User.class), any(), any(PageRequest.class)))
+                .thenReturn(Mono.just(expectResult));
+
+            bindToRouterFunction(endpoint.endpoint())
+                .build()
+                .get().uri("/users")
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody()
+                .jsonPath("$.items.length()").isEqualTo(3)
+                .jsonPath("$.total").isEqualTo(3);
+        }
+
+        @Test
+        void shouldFilterUsersWhenRoleProvided() {
+            var expectUser =
+                JsonUtils.jsonToObject("""
+                    {
+                        "apiVersion": "v1alpha1",
+                        "kind": "User",
+                        "metadata": {
+                            "name": "alice",
+                            "annotations": {
+                                "rbac.authorization.halo.run/role-names": "[\\"guest\\"]"
+                            }
+                        }
+                    }
+                    """, User.class);
+            var users = List.of(
+                expectUser
+            );
+            var expectResult = new ListResult<>(users);
+            when(client.listBy(same(User.class), any(), any(PageRequest.class)))
+                .thenReturn(Mono.just(expectResult));
+            when(roleService.getRolesByUsernames(any())).thenReturn(Mono.just(Map.of()));
+            when(roleService.list(anySet())).thenReturn(Flux.empty());
+
+            bindToRouterFunction(endpoint.endpoint())
+                .build()
+                .get().uri("/users?role=guest")
+                .exchange()
+                .expectStatus().isOk();
+        }
+
+        @Test
+        void shouldSortUsersWhenCreationTimestampSet() {
+            var expectUser =
+                createUser("fake-user-2", "expected display name");
+            var expectResult = new ListResult<>(List.of(expectUser));
+            when(client.listBy(same(User.class), any(), any(PageRequest.class)))
+                .thenReturn(Mono.just(expectResult));
+            when(roleService.getRolesByUsernames(any())).thenReturn(Mono.just(Map.of()));
+            when(roleService.list(anySet())).thenReturn(Flux.empty());
+
+            bindToRouterFunction(endpoint.endpoint())
+                .build()
+                .get().uri("/users?sort=creationTimestamp,desc")
+                .exchange()
+                .expectStatus().isOk();
+        }
+
+        User createUser(String name) {
+            return createUser(name, "fake display name");
+        }
+
+        User createUser(String name, String displayName) {
+            var metadata = new Metadata();
+            metadata.setName(name);
+            metadata.setCreationTimestamp(Instant.now());
+            var spec = new User.UserSpec();
+            spec.setDisplayName(displayName);
+            var user = new User();
+            user.setMetadata(metadata);
+            user.setSpec(spec);
+            return user;
+        }
+
+        User createUser(String name, Instant creationTimestamp) {
+            var metadata = new Metadata();
+            metadata.setName(name);
+            metadata.setCreationTimestamp(creationTimestamp);
+            var spec = new User.UserSpec();
+            var user = new User();
+            user.setMetadata(metadata);
+            user.setSpec(spec);
+            return user;
+        }
+    }
+
+    @Nested
+    @DisplayName("GetUserDetail")
+    class GetUserDetailTest {
+
+        @Test
+        void shouldResponseErrorIfUserNotFound() {
+            when(userService.getUser("fake-user"))
+                .thenReturn(Mono.error(
+                    new ExtensionNotFoundException(fromExtension(User.class), "fake-user")));
+            webClient.get().uri("/users/-")
+                .exchange()
+                .expectStatus().isNotFound();
+
+            verify(userService).getUser(eq("fake-user"));
+        }
+
+        @Test
+        void shouldGetCurrentUserDetail() {
+            var metadata = new Metadata();
+            metadata.setName("fake-user");
+            var user = new User();
+            user.setMetadata(metadata);
+            when(userService.getUser("fake-user")).thenReturn(Mono.just(user));
+            Role role = new Role();
+            role.setMetadata(new Metadata());
+            role.getMetadata().setName("fake-super-role");
+            role.setRules(List.of());
+            when(roleService.list(Set.of("fake-super-role"), true)).thenReturn(Flux.just(role));
+            webClient.get().uri("/users/-")
+                .exchange()
+                .expectStatus().isOk()
+                .expectHeader().contentType(MediaType.APPLICATION_JSON)
+                .expectBody(UserEndpoint.DetailedUser.class)
+                .isEqualTo(new UserEndpoint.DetailedUser(user, List.of(role)));
+            // verify(roleService).list(eq(Set.of("role-A")));
+        }
+    }
+
+    @Nested
+    @DisplayName("UpdateProfile")
+    class UpdateProfileTest {
+
+        @Test
+        void shouldUpdateProfileCorrectly() {
+            var currentUser = createUser("fake-user");
+            var updatedUser = createUser("fake-user");
+            var requestUser = createUser("fake-user");
+
+            when(client.get(User.class, "fake-user")).thenReturn(Mono.just(currentUser));
+            when(client.update(currentUser)).thenReturn(Mono.just(updatedUser));
+
+            webClient.put().uri("/users/-")
+                .bodyValue(requestUser)
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(User.class)
+                .isEqualTo(updatedUser);
+
+            verify(client).get(User.class, "fake-user");
+            verify(client).update(currentUser);
+        }
+
+        @Test
+        void shouldGetErrorIfUsernameMismatch() {
+            var currentUser = createUser("fake-user");
+            var updatedUser = createUser("fake-user");
+            var requestUser = createUser("another-fake-user");
+
+            when(client.get(User.class, "fake-user")).thenReturn(Mono.just(currentUser));
+            when(client.update(currentUser)).thenReturn(Mono.just(updatedUser));
+
+            webClient.put().uri("/users/-")
+                .bodyValue(requestUser)
+                .exchange()
+                .expectStatus().isBadRequest();
+
+            verify(client).get(User.class, "fake-user");
+            verify(client, never()).update(currentUser);
+        }
+
+        User createUser(String name) {
+            var spec = new User.UserSpec();
+            spec.setEmail("hi@halo.run");
+            spec.setBio("Fake bio");
+            spec.setDisplayName("Faker");
+            spec.setPassword("fake-password");
+
+            var metadata = new Metadata();
+            metadata.setName(name);
+
+            var user = new User();
+            user.setSpec(spec);
+            user.setMetadata(metadata);
+            return user;
+        }
+    }
+
+    @Nested
+    @DisplayName("ChangePassword")
+    class ChangePasswordTest {
+
+        @Test
+        void shouldUpdateMyPasswordCorrectly() {
+            var user = new User();
+            when(userService.updateWithRawPassword("fake-user", "new-password"))
+                .thenReturn(Mono.just(user));
+            when(userService.confirmPassword("fake-user", "old-password"))
+                .thenReturn(Mono.just(true));
+            webClient.put().uri("/users/-/password")
+                .bodyValue(
+                    new UserEndpoint.ChangeOwnPasswordRequest("old-password", "new-password"))
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(User.class)
+                .isEqualTo(user);
+
+            verify(userService, times(1)).updateWithRawPassword("fake-user", "new-password");
+        }
+
+        @Test
+        void shouldUpdateOtherPasswordCorrectly() {
+            var user = new User();
+            when(userService.confirmPassword("another-fake-user", "old-password"))
+                .thenReturn(Mono.just(true));
+            when(userService.updateWithRawPassword("another-fake-user", "new-password"))
+                .thenReturn(Mono.just(user));
+            webClient.put()
+                .uri("/users/another-fake-user/password")
+                .bodyValue(
+                    new UserEndpoint.ChangeOwnPasswordRequest("old-password", "new-password"))
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(User.class)
+                .isEqualTo(user);
+
+            verify(userService, times(1)).updateWithRawPassword("another-fake-user",
+                "new-password");
+        }
+
+    }
+
+    @Nested
+    @DisplayName("GrantPermission")
+    class GrantPermissionEndpointTest {
+
+        @BeforeEach
+        void setUp() {
+            when(client.list(same(RoleBinding.class), any(), any())).thenReturn(Flux.empty());
+            when(client.get(User.class, "fake-user"))
+                .thenReturn(Mono.error(
+                    new ExtensionNotFoundException(fromExtension(User.class), "fake-user")));
+        }
+
+        @Test
+        void shouldGetBadRequestIfRequestBodyIsEmpty() {
+            webClient.post().uri("/users/fake-user/permissions")
+                .contentType(MediaType.APPLICATION_JSON)
+                .exchange()
+                .expectStatus().isBadRequest();
+
+            // Why one more time to verify? Because the SuperAdminInitializer will fetch admin user.
+            verify(client, never()).fetch(same(User.class), eq("fake-user"));
+            verify(client, never()).fetch(same(Role.class), eq("fake-role"));
+        }
+
+        @Test
+        void shouldGrantPermission() {
+            when(userService.grantRoles("fake-user", Set.of("fake-role"))).thenReturn(Mono.empty());
+
+            webClient.post().uri("/users/fake-user/permissions")
+                .contentType(MediaType.APPLICATION_JSON)
+                .bodyValue(new UserEndpoint.GrantRequest(Set.of("fake-role")))
+                .exchange()
+                .expectStatus().isOk();
+        }
+
+        @Test
+        void shouldGetPermission() {
+            Role roleA = JsonUtils.jsonToObject("""
+                {
+                    "apiVersion": "v1alpha1",
+                    "kind": "Role",
+                    "metadata": {
+                        "name": "test-A",
+                        "annotations": {
+                            "rbac.authorization.halo.run/ui-permissions": \
+                            "[\\"permission-A\\", \\"permission-A\\"]"
+                        }
+                    },
+                    "rules": []
+                }
+                """, Role.class);
+            when(roleService.listPermissions(eq(Set.of("test-A")))).thenReturn(Flux.just(roleA));
+            when(roleService.listDependenciesFlux(anySet())).thenReturn(Flux.just(roleA));
+            when(roleService.getRolesByUsername("fake-user")).thenReturn(Flux.just("test-A"));
+            when(roleService.list(Set.of("test-A"), true)).thenReturn(Flux.just(roleA));
+
+            webClient.get().uri("/users/fake-user/permissions")
+                .exchange()
+                .expectStatus()
+                .isOk()
+                .expectBody(UserEndpoint.UserPermission.class)
+                .value(userPermission -> {
+                    assertEquals(List.of(roleA), userPermission.getRoles());
+                    assertEquals(List.of(roleA), userPermission.getPermissions());
+                    assertEquals(List.of("permission-A"), userPermission.getUiPermissions());
+                });
+        }
+    }
+
+    @Test
+    void createWhenNameDuplicate() {
+        when(userService.createUser(any(User.class), anySet()))
+            .thenReturn(Mono.just(new User()));
+        when(userService.updateWithRawPassword(anyString(), anyString()))
+            .thenReturn(Mono.just(new User()));
+        var userRequest = new UserEndpoint.CreateUserRequest("fake-user",
+            "fake-email",
+            "",
+            "",
+            "",
+            "",
+            "",
+            Map.of(),
+            Set.of());
+        webClient.post().uri("/users")
+            .bodyValue(userRequest)
+            .exchange()
+            .expectStatus().isOk();
+    }
+
+    @Nested
+    class AvatarUploadTest {
+        @Test
+        void respondWithErrorIfTypeNotPNG() {
+
+            var multipartBodyBuilder = new MultipartBodyBuilder();
+            multipartBodyBuilder.part("file", "fake-file")
+                .contentType(MediaType.IMAGE_JPEG)
+                .filename("fake-filename.jpg");
+
+            SystemSetting.User user = mock(SystemSetting.User.class);
+            when(environmentFetcher.fetch(SystemSetting.User.GROUP, SystemSetting.User.class))
+                .thenReturn(Mono.just(user));
+
+            webClient
+                .post()
+                .uri("/users/-/avatar")
+                .contentType(MediaType.MULTIPART_FORM_DATA)
+                .body(BodyInserters.fromMultipartData(multipartBodyBuilder.build()))
+                .exchange()
+                .expectStatus()
+                .is4xxClientError();
+        }
+
+        @Test
+        void shouldUploadSuccessfully() {
+            var currentUser = createUser("fake-user");
+
+            Attachment attachment = new Attachment();
+            Metadata metadata = new Metadata();
+            metadata.setName("fake-attachment");
+            attachment.setMetadata(metadata);
+
+            var multipartBodyBuilder = new MultipartBodyBuilder();
+            multipartBodyBuilder.part("file", "fake-file")
+                .contentType(MediaType.IMAGE_PNG)
+                .filename("fake-filename.png");
+
+            SystemSetting.User user = mock(SystemSetting.User.class);
+            when(environmentFetcher.fetch(SystemSetting.User.GROUP, SystemSetting.User.class))
+                .thenReturn(Mono.just(user));
+            when(client.get(User.class, "fake-user")).thenReturn(Mono.just(currentUser));
+            when(attachmentService.upload(anyString(), anyString(), anyString(),
+                any(), any(MediaType.IMAGE_PNG.getClass()))).thenReturn(Mono.just(attachment));
+
+            when(client.update(currentUser)).thenReturn(Mono.just(currentUser));
+
+            webClient.post()
+                .uri("/users/-/avatar")
+                .contentType(MediaType.MULTIPART_FORM_DATA)
+                .body(BodyInserters.fromMultipartData(multipartBodyBuilder.build()))
+                .exchange()
+                .expectStatus()
+                .isOk()
+                .expectBody(User.class).isEqualTo(currentUser);
+
+            verify(client).get(User.class, "fake-user");
+            verify(client).update(currentUser);
+        }
+
+        User createUser(String name) {
+            var spec = new User.UserSpec();
+            spec.setEmail("hi@halo.run");
+            spec.setBio("Fake bio");
+            spec.setDisplayName("Faker");
+            spec.setAvatar("fake-avatar.png");
+            spec.setPassword("fake-password");
+
+            var metadata = new Metadata();
+            metadata.setName(name);
+            metadata.setAnnotations(new HashMap<>());
+
+            var user = new User();
+            user.setSpec(spec);
+            user.setMetadata(metadata);
+            return user;
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/CommentReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/CommentReconcilerTest.java
new file mode 100644
index 0000000..1f6af9e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/CommentReconcilerTest.java
@@ -0,0 +1,114 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import java.util.HashSet;
+import java.util.Optional;
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.comment.ReplyService;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.Ref;
+import run.halo.app.extension.SchemeManager;
+import run.halo.app.extension.controller.Reconciler;
+
+/**
+ * Tests for {@link CommentReconciler}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class CommentReconcilerTest {
+
+    @Mock
+    private ExtensionClient client;
+
+    @Mock
+    SchemeManager schemeManager;
+
+    @Mock
+    ReplyService replyService;
+
+    @InjectMocks
+    private CommentReconciler commentReconciler;
+
+    private final Instant now = Instant.now();
+
+    @Test
+    void reconcileDelete() {
+        Comment comment = new Comment();
+        comment.setMetadata(new Metadata());
+        comment.getMetadata().setName("test");
+        comment.getMetadata().setDeletionTimestamp(Instant.now());
+        Set finalizers = new HashSet<>();
+        finalizers.add(CommentReconciler.FINALIZER_NAME);
+        comment.getMetadata().setFinalizers(finalizers);
+        comment.setSpec(new Comment.CommentSpec());
+        comment.getSpec().setSubjectRef(getRef());
+        comment.getSpec().setLastReadTime(now.plusSeconds(5));
+        comment.setStatus(new Comment.CommentStatus());
+
+        when(client.fetch(eq(Comment.class), eq("test")))
+            .thenReturn(Optional.of(comment));
+
+        when(replyService.removeAllByComment(eq(comment.getMetadata().getName())))
+            .thenReturn(Mono.empty());
+        when(client.listBy(eq(Comment.class), any(ListOptions.class), isA(PageRequest.class)))
+            .thenReturn(ListResult.emptyResult());
+
+        Reconciler.Result reconcile = commentReconciler.reconcile(new Reconciler.Request("test"));
+        assertThat(reconcile.reEnqueue()).isFalse();
+        assertThat(reconcile.retryAfter()).isNull();
+
+        verify(replyService).removeAllByComment(eq(comment.getMetadata().getName()));
+
+        ArgumentCaptor captor = ArgumentCaptor.forClass(Comment.class);
+        verify(client, times(1)).update(captor.capture());
+        Comment value = captor.getValue();
+        assertThat(value.getMetadata().getFinalizers()
+            .contains(CommentReconciler.FINALIZER_NAME)).isFalse();
+    }
+
+    @Test
+    void compatibleCreationTime() {
+        Comment comment = new Comment();
+        comment.setMetadata(new Metadata());
+        comment.getMetadata().setName("fake-comment");
+        comment.setSpec(new Comment.CommentSpec());
+        comment.getSpec().setApprovedTime(Instant.now());
+        comment.getSpec().setCreationTime(null);
+
+        commentReconciler.compatibleCreationTime(comment);
+
+        assertThat(comment.getSpec().getCreationTime())
+            .isEqualTo(comment.getSpec().getApprovedTime());
+    }
+
+    private static Ref getRef() {
+        Ref ref = new Ref();
+        ref.setGroup("content.halo.run");
+        ref.setVersion("v1alpha1");
+        ref.setKind("Post");
+        ref.setName("fake-post");
+        return ref;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/MenuItemReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/MenuItemReconcilerTest.java
new file mode 100644
index 0000000..aec1993
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/MenuItemReconcilerTest.java
@@ -0,0 +1,218 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.argThat;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.time.Duration;
+import java.util.Optional;
+import java.util.function.Consumer;
+import java.util.function.Supplier;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.core.extension.MenuItem;
+import run.halo.app.core.extension.MenuItem.MenuItemSpec;
+import run.halo.app.core.extension.content.Category;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.Ref;
+import run.halo.app.extension.controller.Reconciler.Request;
+
+@ExtendWith(MockitoExtension.class)
+class MenuItemReconcilerTest {
+
+    @Mock
+    ExtensionClient client;
+
+    @InjectMocks
+    MenuItemReconciler reconciler;
+
+    @Nested
+    class WhenCategoryRefSet {
+
+        @Test
+        void shouldNotUpdateMenuItemIfCategoryNotFound() {
+            Supplier menuItemSupplier = () -> createMenuItem("fake-name", spec -> {
+                spec.setTargetRef(Ref.of("fake-category", Category.GVK));
+            });
+
+            when(client.fetch(MenuItem.class, "fake-name"))
+                .thenReturn(Optional.of(menuItemSupplier.get()));
+            when(client.fetch(Category.class, "fake-category")).thenReturn(Optional.empty());
+
+            var result = reconciler.reconcile(new Request("fake-name"));
+
+            assertTrue(result.reEnqueue());
+            assertEquals(Duration.ofMinutes(1), result.retryAfter());
+            verify(client).fetch(MenuItem.class, "fake-name");
+            verify(client).fetch(Category.class, "fake-category");
+            verify(client, never()).update(isA(MenuItem.class));
+        }
+
+        @Test
+        void shouldUpdateMenuItemIfCategoryFound() {
+            Supplier menuItemSupplier = () -> createMenuItem("fake-name", spec -> {
+                spec.setTargetRef(Ref.of("fake-category", Category.GVK));
+            });
+
+            when(client.fetch(MenuItem.class, "fake-name"))
+                .thenReturn(Optional.of(menuItemSupplier.get()))
+                .thenReturn(Optional.of(menuItemSupplier.get()));
+            when(client.fetch(Category.class, "fake-category"))
+                .thenReturn(Optional.of(createCategory()));
+
+            var result = reconciler.reconcile(new Request("fake-name"));
+
+            assertTrue(result.reEnqueue());
+            assertEquals(Duration.ofMinutes(1), result.retryAfter());
+            verify(client, times(2)).fetch(MenuItem.class, "fake-name");
+            verify(client).fetch(Category.class, "fake-category");
+            verify(client).update(argThat(menuItem -> {
+                var status = menuItem.getStatus();
+                return status.getHref().equals("fake://permalink")
+                    && status.getDisplayName().equals("Fake Category");
+            }));
+        }
+
+        Category createCategory() {
+            var metadata = new Metadata();
+            metadata.setName("fake-category");
+
+            var spec = new Category.CategorySpec();
+            spec.setDisplayName("Fake Category");
+            var status = new Category.CategoryStatus();
+            status.setPermalink("fake://permalink");
+
+            var category = new Category();
+            category.setMetadata(metadata);
+            category.setSpec(spec);
+            category.setStatus(status);
+            return category;
+        }
+    }
+
+    @Nested
+    class WhenSinglePageRefSet {
+
+        @Test
+        void shouldUpdateMenuItemIfPageFound() {
+            Supplier menuItemSupplier = () -> createMenuItem("fake-name",
+                spec -> spec.setTargetRef(Ref.of("fake-page", SinglePage.GVK)));
+
+            when(client.fetch(MenuItem.class, "fake-name"))
+                .thenReturn(Optional.of(menuItemSupplier.get()))
+                .thenReturn(Optional.of(menuItemSupplier.get()));
+
+            when(client.fetch(SinglePage.class, "fake-page"))
+                .thenReturn(Optional.of(createSinglePage()));
+
+            var result = reconciler.reconcile(new Request("fake-name"));
+            assertTrue(result.reEnqueue());
+            assertEquals(Duration.ofMinutes(1), result.retryAfter());
+            verify(client, times(2)).fetch(MenuItem.class, "fake-name");
+            verify(client).fetch(SinglePage.class, "fake-page");
+            verify(client).update(argThat(menuItem -> {
+                var status = menuItem.getStatus();
+                return status.getHref().equals("fake://permalink")
+                    && status.getDisplayName().equals("fake-title");
+            }));
+        }
+
+        SinglePage createSinglePage() {
+            var metadata = new Metadata();
+            metadata.setName("fake-page");
+
+            var spec = new SinglePage.SinglePageSpec();
+            spec.setTitle("fake-title");
+            var status = new SinglePage.SinglePageStatus();
+            status.setPermalink("fake://permalink");
+
+            var singlePage = new SinglePage();
+            singlePage.setMetadata(metadata);
+            singlePage.setSpec(spec);
+            singlePage.setStatus(status);
+            return singlePage;
+        }
+    }
+
+    @Nested
+    class WhenOtherRefsNotSet {
+
+        @Test
+        void shouldNotRequeueIfHrefNotSet() {
+            var menuItem = createMenuItem("fake-name", spec -> {
+                spec.setHref(null);
+                spec.setDisplayName("Fake display name");
+            });
+            when(client.fetch(MenuItem.class, "fake-name")).thenReturn(Optional.of(menuItem));
+
+            var result = reconciler.reconcile(new Request("fake-name"));
+            assertFalse(result.reEnqueue());
+
+            verify(client).fetch(MenuItem.class, "fake-name");
+            verify(client, never()).update(menuItem);
+        }
+
+        @Test
+        void shouldNotRequeueIfDisplayNameNotSet() {
+            var menuItem = createMenuItem("fake-name", spec -> {
+                spec.setHref("/fake");
+                spec.setDisplayName(null);
+            });
+            when(client.fetch(MenuItem.class, "fake-name")).thenReturn(Optional.of(menuItem));
+            var result = reconciler.reconcile(new Request("fake-name"));
+            assertFalse(result.reEnqueue());
+
+            verify(client).fetch(MenuItem.class, "fake-name");
+            verify(client, never()).update(menuItem);
+        }
+
+        @Test
+        void shouldReconcileIfHrefAndDisplayNameSet() {
+            Supplier menuItemSupplier = () -> createMenuItem("fake-name", spec -> {
+                spec.setHref("/fake");
+                spec.setDisplayName("Fake display name");
+            });
+
+            when(client.fetch(MenuItem.class, "fake-name"))
+                .thenReturn(Optional.of(menuItemSupplier.get()))
+                .thenReturn(Optional.of(menuItemSupplier.get()));
+
+            var result = reconciler.reconcile(new Request("fake-name"));
+            assertFalse(result.reEnqueue());
+
+            verify(client, times(2)).fetch(MenuItem.class, "fake-name");
+            verify(client).update(argThat(ext -> {
+                if (!(ext instanceof MenuItem menuItem)) {
+                    return false;
+                }
+                return menuItem.getStatus().getHref().equals("/fake")
+                    && menuItem.getStatus().getDisplayName().equals("Fake display name");
+            }));
+        }
+    }
+
+    MenuItem createMenuItem(String name, Consumer specCustomizer) {
+        var metadata = new Metadata();
+        metadata.setName(name);
+        var menuItem = new MenuItem();
+        menuItem.setMetadata(metadata);
+        var spec = new MenuItemSpec();
+        if (specCustomizer != null) {
+            specCustomizer.accept(spec);
+        }
+        menuItem.setSpec(spec);
+        return menuItem;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/PluginReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/PluginReconcilerTest.java
new file mode 100644
index 0000000..92652fb
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/PluginReconcilerTest.java
@@ -0,0 +1,565 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.plugin.PluginConst.PLUGIN_PATH;
+import static run.halo.app.plugin.PluginConst.RELOAD_ANNO;
+import static run.halo.app.plugin.PluginConst.RUNTIME_MODE_ANNO;
+
+import java.io.IOException;
+import java.net.URL;
+import java.net.URLClassLoader;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.time.Clock;
+import java.time.Instant;
+import java.time.ZoneOffset;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import java.util.Set;
+import java.util.function.Consumer;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.pf4j.DefaultPluginDescriptor;
+import org.pf4j.PluginState;
+import org.pf4j.PluginWrapper;
+import org.pf4j.RuntimeMode;
+import org.springframework.core.io.DefaultResourceLoader;
+import run.halo.app.core.extension.Plugin;
+import run.halo.app.core.extension.ReverseProxy;
+import run.halo.app.core.extension.Setting;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.controller.Reconciler;
+import run.halo.app.extension.controller.Reconciler.Request;
+import run.halo.app.extension.controller.RequeueException;
+import run.halo.app.infra.Condition;
+import run.halo.app.infra.ConditionStatus;
+import run.halo.app.plugin.PluginProperties;
+import run.halo.app.plugin.SpringPluginManager;
+
+/**
+ * Tests for {@link PluginReconciler}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PluginReconcilerTest {
+
+    @Mock
+    SpringPluginManager pluginManager;
+
+    @Mock
+    ExtensionClient client;
+
+    @Mock
+    PluginProperties pluginProperties;
+
+    @InjectMocks
+    PluginReconciler reconciler;
+
+    Clock clock = Clock.fixed(Instant.parse("2024-01-09T12:00:00Z"), ZoneOffset.UTC);
+
+    String finalizer = "plugin-protection";
+    String name = "fake-plugin";
+
+    String reverseProxyName = "fake-plugin-system-generated-reverse-proxy";
+
+    String settingName = "fake-setting";
+
+    String configMapName = "fake-configmap";
+
+    @BeforeEach
+    void setUp() {
+        reconciler.setClock(clock);
+    }
+
+    @Test
+    void shouldNotRequeueIfPluginNotFound() {
+        when(client.fetch(Plugin.class, "fake-plugin")).thenReturn(Optional.empty());
+        var result = reconciler.reconcile(new Request("fake-plugin"));
+        assertFalse(result.reEnqueue());
+        verify(client).fetch(Plugin.class, "fake-plugin");
+    }
+
+    @Nested
+    class WhenNotDeleting {
+
+        @TempDir
+        Path tempPath;
+
+        @Test
+        void shouldNotStartPluginWithDevModeInNonDevEnv() {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var spec = plugin.getSpec();
+                spec.setVersion("1.2.3");
+                spec.setLogo("fake-logo.svg");
+                spec.setEnabled(true);
+                plugin.getMetadata()
+                    .setAnnotations(new HashMap<>(Map.of(RUNTIME_MODE_ANNO, "dev",
+                        PLUGIN_PATH, "fake-path")));
+            });
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+
+            var result = reconciler.reconcile(new Request(name));
+            assertFalse(result.reEnqueue());
+
+            var status = fakePlugin.getStatus();
+            assertEquals(Plugin.Phase.UNKNOWN, status.getPhase());
+            var condition = status.getConditions().peekFirst();
+            assertEquals(Condition.builder()
+                .type(PluginReconciler.ConditionType.INITIALIZED)
+                .status(ConditionStatus.FALSE)
+                .reason(PluginReconciler.ConditionReason.INVALID_RUNTIME_MODE)
+                .message("""
+                    Cannot run the plugin with development mode in non-development environment.\
+                    """)
+                .build(), condition);
+
+            verify(client).update(fakePlugin);
+            verify(client).fetch(Plugin.class, name);
+            verify(pluginProperties).getRuntimeMode();
+            verify(pluginManager, never()).loadPlugin(any(Path.class));
+            verify(pluginManager, never()).startPlugin(name);
+        }
+
+        @Test
+        void shouldStartInDevMode() {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var spec = plugin.getSpec();
+                spec.setVersion("1.2.3");
+                spec.setLogo("fake-logo.svg");
+                spec.setEnabled(true);
+                plugin.getMetadata()
+                    .setAnnotations(new HashMap<>(Map.of(RUNTIME_MODE_ANNO, "dev",
+                        PLUGIN_PATH, "fake-path")));
+            });
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+            when(pluginManager.getPlugin(name))
+                .thenReturn(null)
+                .thenReturn(mockPluginWrapper(PluginState.RESOLVED));
+
+            when(pluginManager.startPlugin(name)).thenReturn(PluginState.STARTED);
+            when(pluginProperties.getRuntimeMode()).thenReturn(RuntimeMode.DEVELOPMENT);
+
+            var result = reconciler.reconcile(new Request(name));
+            assertFalse(result.reEnqueue());
+            assertEquals(Paths.get("fake-path").toUri(), fakePlugin.getStatus().getLoadLocation());
+
+            verify(pluginManager).startPlugin(name);
+        }
+
+        @Test
+        void shouldThrowExceptionIfNoPluginPathProvidedInDevMode() {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var spec = plugin.getSpec();
+                spec.setVersion("1.2.3");
+                spec.setLogo("fake-logo.svg");
+                spec.setEnabled(true);
+                plugin.getMetadata()
+                    .setAnnotations(new HashMap<>(Map.of(RUNTIME_MODE_ANNO, "dev")));
+            });
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+            when(pluginManager.getPlugin(name))
+                // loading plugin
+                .thenReturn(null);
+            when(pluginProperties.getRuntimeMode()).thenReturn(RuntimeMode.DEVELOPMENT);
+
+            var result = reconciler.reconcile(new Request(name));
+            assertFalse(result.reEnqueue());
+        }
+
+        @Test
+        void shouldReloadIfReloadAnnotationPresent() {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var spec = plugin.getSpec();
+                spec.setVersion("1.2.3");
+                spec.setLogo("fake-logo.svg");
+                spec.setEnabled(true);
+                plugin.getMetadata().setAnnotations(new HashMap<>(Map.of(RELOAD_ANNO, "true")));
+            });
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+            when(pluginManager.getPluginsRoots()).thenReturn(List.of(tempPath));
+            var pluginWrapper = mockPluginWrapper(PluginState.RESOLVED);
+            when(pluginManager.getPlugin(name)).thenReturn(pluginWrapper);
+            when(pluginManager.startPlugin(name)).thenReturn(PluginState.STARTED);
+            when(pluginManager.getUnresolvedPlugins()).thenReturn(List.of(pluginWrapper));
+            when(pluginManager.getResolvedPlugins()).thenReturn(List.of());
+
+            var result = reconciler.reconcile(new Request(name));
+            assertFalse(result.reEnqueue());
+
+            verify(pluginManager).unloadPlugin(name);
+            var loadLocation = Paths.get(fakePlugin.getStatus().getLoadLocation());
+            verify(pluginManager).loadPlugin(loadLocation);
+        }
+
+        @Test
+        void shouldReportIfFailedToStartPlugin() throws IOException {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var spec = plugin.getSpec();
+                spec.setVersion("1.2.3");
+                spec.setLogo("fake-logo.svg");
+                spec.setEnabled(true);
+                spec.setSettingName(settingName);
+                spec.setConfigMapName(configMapName);
+            });
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+            when(pluginManager.getPluginsRoots()).thenReturn(List.of(tempPath));
+            when(pluginManager.getPlugin(name))
+                // loading plugin
+                .thenReturn(null)
+                // get setting extension
+                .thenReturn(mockPluginWrapperForSetting())
+                .thenReturn(mockPluginWrapperForStaticResources());
+            when(pluginManager.startPlugin(name)).thenReturn(PluginState.FAILED);
+
+            var result = reconciler.reconcile(new Request(name));
+            assertFalse(result.reEnqueue());
+
+            verify(client).update(fakePlugin);
+            var status = fakePlugin.getStatus();
+            assertEquals(Plugin.Phase.FAILED, status.getPhase());
+            var condition = status.getConditions().peekFirst();
+            assertEquals(Condition.builder()
+                .type(PluginReconciler.ConditionType.READY)
+                .status(ConditionStatus.FALSE)
+                .reason(PluginReconciler.ConditionReason.START_ERROR)
+                .message("Failed to start plugin fake-plugin(FAILED).")
+                .build(), condition);
+        }
+
+        @Test
+        void shouldEnablePluginIfEnabled() throws IOException {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var spec = plugin.getSpec();
+                spec.setVersion("1.2.3");
+                spec.setLogo("fake-logo.svg");
+                spec.setEnabled(true);
+                spec.setSettingName(settingName);
+                spec.setConfigMapName(configMapName);
+            });
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+            when(pluginManager.getPluginsRoots()).thenReturn(List.of(tempPath));
+            when(pluginManager.getPlugin(name))
+                // loading plugin
+                .thenReturn(null)
+                // get setting extension
+                .thenReturn(mockPluginWrapperForSetting())
+                .thenReturn(mockPluginWrapperForStaticResources())
+                // before starting
+                .thenReturn(mockPluginWrapper(PluginState.STOPPED))
+                // sync plugin state
+                .thenReturn(mockPluginWrapper(PluginState.STARTED));
+            when(pluginManager.startPlugin(name)).thenReturn(PluginState.STARTED);
+
+            var result = reconciler.reconcile(new Request(name));
+
+            assertFalse(result.reEnqueue());
+            assertTrue(fakePlugin.getMetadata().getFinalizers().contains(finalizer));
+
+            assertEquals("fake-plugin-1.2.3.jar",
+                fakePlugin.getMetadata().getAnnotations().get(PLUGIN_PATH));
+            var loadLocation = Paths.get(fakePlugin.getStatus().getLoadLocation());
+            assertEquals(tempPath.resolve("fake-plugin-1.2.3.jar"), loadLocation);
+            assertEquals("/plugins/fake-plugin/assets/fake-logo.svg?version=1.2.3",
+                fakePlugin.getStatus().getLogo());
+            assertEquals("/plugins/fake-plugin/assets/console/main.js?version=1.2.3",
+                fakePlugin.getStatus().getEntry());
+            assertEquals("/plugins/fake-plugin/assets/console/style.css?version=1.2.3",
+                fakePlugin.getStatus().getStylesheet());
+            assertEquals(Plugin.Phase.STARTED, fakePlugin.getStatus().getPhase());
+            assertEquals(PluginState.STARTED, fakePlugin.getStatus().getLastProbeState());
+            assertNotNull(fakePlugin.getStatus().getLastStartTime());
+
+            var condition = fakePlugin.getStatus().getConditions().peek();
+            assertEquals(PluginReconciler.ConditionType.READY, condition.getType());
+            assertEquals(ConditionStatus.TRUE, condition.getStatus());
+            assertEquals(clock.instant(), condition.getLastTransitionTime());
+
+            verify(pluginManager).startPlugin(name);
+            verify(pluginManager).loadPlugin(loadLocation);
+            verify(pluginManager, times(5)).getPlugin(name);
+            verify(client).update(fakePlugin);
+            verify(client).fetch(Setting.class, settingName);
+            verify(client).create(any(Setting.class));
+            verify(client).fetch(ConfigMap.class, configMapName);
+            verify(client).create(any(ConfigMap.class));
+            verify(client).fetch(ReverseProxy.class, reverseProxyName);
+            verify(client).create(any(ReverseProxy.class));
+        }
+
+        @Test
+        void shouldDisablePluginIfDisabled() throws IOException {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var spec = plugin.getSpec();
+                spec.setVersion("1.2.3");
+                spec.setLogo("fake-logo.svg");
+                spec.setEnabled(false);
+                spec.setSettingName(settingName);
+                spec.setConfigMapName(configMapName);
+            });
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+            when(pluginManager.getPluginsRoots()).thenReturn(List.of(tempPath));
+
+            when(pluginManager.getPlugin(name))
+                // loading plugin
+                .thenReturn(null)
+                // get setting files.
+                .thenReturn(mockPluginWrapperForSetting())
+                // resolving static resources
+                .thenReturn(mockPluginWrapperForStaticResources())
+                // before disabling plugin
+                .thenReturn(mock(PluginWrapper.class))
+                // sync plugin state
+                .thenReturn(mockPluginWrapper(PluginState.DISABLED));
+
+            var result = reconciler.reconcile(new Request("fake-plugin"));
+
+            assertFalse(result.reEnqueue());
+            assertTrue(fakePlugin.getMetadata().getFinalizers().contains(finalizer));
+
+            assertEquals("fake-plugin-1.2.3.jar",
+                fakePlugin.getMetadata().getAnnotations().get(PLUGIN_PATH));
+            var loadLocation = Paths.get(fakePlugin.getStatus().getLoadLocation());
+            assertEquals(tempPath.resolve("fake-plugin-1.2.3.jar"), loadLocation);
+            assertEquals("/plugins/fake-plugin/assets/fake-logo.svg?version=1.2.3",
+                fakePlugin.getStatus().getLogo());
+            assertEquals("/plugins/fake-plugin/assets/console/main.js?version=1.2.3",
+                fakePlugin.getStatus().getEntry());
+            assertEquals("/plugins/fake-plugin/assets/console/style.css?version=1.2.3",
+                fakePlugin.getStatus().getStylesheet());
+            assertEquals(Plugin.Phase.DISABLED, fakePlugin.getStatus().getPhase());
+            assertEquals(PluginState.DISABLED, fakePlugin.getStatus().getLastProbeState());
+
+            verify(pluginManager).disablePlugin(name);
+            verify(pluginManager).loadPlugin(loadLocation);
+            verify(pluginManager, times(5)).getPlugin(name);
+            verify(client).update(fakePlugin);
+            verify(client).fetch(Setting.class, settingName);
+            verify(client).create(any(Setting.class));
+            verify(client).fetch(ConfigMap.class, configMapName);
+            verify(client).create(any(ConfigMap.class));
+            verify(client).fetch(ReverseProxy.class, reverseProxyName);
+            verify(client).create(any(ReverseProxy.class));
+        }
+
+        PluginWrapper mockPluginWrapperForSetting() throws IOException {
+            var pluginWrapper = mock(PluginWrapper.class);
+
+            var pluginRootResource =
+                new DefaultResourceLoader().getResource("classpath:plugin/plugin-0.0.1/");
+            var classLoader = new URLClassLoader(new URL[] {pluginRootResource.getURL()}, null);
+            when(pluginWrapper.getPluginClassLoader()).thenReturn(classLoader);
+            lenient().when(pluginWrapper.getDescriptor()).thenReturn(new DefaultPluginDescriptor());
+            return pluginWrapper;
+        }
+
+        PluginWrapper mockPluginWrapperForStaticResources() {
+            // check
+            var pluginWrapper = mock(PluginWrapper.class);
+            var pluginClassLoader = mock(ClassLoader.class);
+            when(pluginClassLoader.getResource("console/main.js")).thenReturn(
+                mock(URL.class));
+            when(pluginClassLoader.getResource("console/style.css")).thenReturn(
+                mock(URL.class));
+            when(pluginWrapper.getPluginClassLoader()).thenReturn(pluginClassLoader);
+            lenient().when(pluginWrapper.getDescriptor()).thenReturn(new DefaultPluginDescriptor());
+            return pluginWrapper;
+        }
+
+        PluginWrapper mockPluginWrapper(PluginState state) {
+            var pluginWrapper = mock(PluginWrapper.class);
+            lenient().when(pluginWrapper.getPluginState()).thenReturn(state);
+            lenient().when(pluginWrapper.getDescriptor()).thenReturn(new DefaultPluginDescriptor());
+            return pluginWrapper;
+        }
+
+    }
+
+    @Nested
+    class WhenDeleting {
+
+        @Test
+        void shouldDoNothingWithoutFinalizer() {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var metadata = plugin.getMetadata();
+                metadata.setDeletionTimestamp(clock.instant());
+            });
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+
+            var result = reconciler.reconcile(new Request(name));
+            assertFalse(result.reEnqueue());
+            verify(client).fetch(Plugin.class, name);
+            verify(client, never()).update(fakePlugin);
+            verify(pluginManager, never()).getPlugin(name);
+            verify(pluginManager, never()).deletePlugin(name);
+        }
+
+        @Test
+        void shouldCleanUpResourceFully() {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var metadata = plugin.getMetadata();
+                metadata.setDeletionTimestamp(clock.instant());
+                metadata.setFinalizers(new HashSet<>(Set.of(finalizer)));
+                plugin.getStatus().setLastProbeState(PluginState.STARTED);
+                plugin.getSpec().setConfigMapName("fake-configmap");
+                plugin.getSpec().setSettingName("fake-setting");
+            });
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+            when(client.fetch(Setting.class, "fake-setting"))
+                .thenReturn(Optional.empty());
+            when(client.fetch(ReverseProxy.class, reverseProxyName))
+                .thenReturn(Optional.empty());
+
+            when(pluginManager.getPlugin(name))
+                .thenReturn(mock(PluginWrapper.class))
+                .thenReturn(null);
+
+            var result = reconciler.reconcile(new Request(name));
+
+            assertFalse(result.reEnqueue());
+            // make sure the finalizer is removed.
+            assertFalse(fakePlugin.getMetadata().getFinalizers().contains(finalizer));
+            assertNull(fakePlugin.getStatus().getLastProbeState());
+            verify(pluginManager, times(2)).getPlugin(name);
+            verify(pluginManager).deletePlugin(name);
+            verify(client).fetch(Plugin.class, name);
+            verify(client).fetch(Setting.class, "fake-setting");
+            verify(client).fetch(ReverseProxy.class, reverseProxyName);
+            verify(client).update(fakePlugin);
+        }
+
+        @Test
+        void shouldDeleteSettingAndRequeueIfExists() {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var metadata = plugin.getMetadata();
+                metadata.setDeletionTimestamp(clock.instant());
+                metadata.setFinalizers(new HashSet<>(Set.of(finalizer)));
+                plugin.getStatus().setLastProbeState(PluginState.STARTED);
+                plugin.getSpec().setSettingName(settingName);
+            });
+
+            var fakeSetting = createSetting(settingName);
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+            when(client.fetch(Setting.class, settingName))
+                .thenReturn(Optional.of(fakeSetting));
+            when(client.fetch(ReverseProxy.class, reverseProxyName))
+                .thenReturn(Optional.empty());
+
+            var exception = assertThrows(
+                RequeueException.class,
+                () -> reconciler.reconcile(new Request(name))
+            );
+            assertEquals(Reconciler.Result.requeue(null), exception.getResult());
+            assertEquals("Waiting for setting fake-setting to be deleted.", exception.getMessage());
+
+            // make sure the finalizer is removed.
+            assertFalse(fakePlugin.getMetadata().getFinalizers().contains(finalizer));
+            assertEquals(PluginState.STARTED, fakePlugin.getStatus().getLastProbeState());
+            verify(pluginManager, never()).getPlugin(name);
+            verify(pluginManager, never()).deletePlugin(name);
+            verify(client).fetch(Plugin.class, name);
+            verify(client).fetch(ReverseProxy.class, reverseProxyName);
+            verify(client).fetch(Setting.class, settingName);
+            verify(client).delete(fakeSetting);
+            verify(client, never()).update(fakePlugin);
+        }
+
+        @Test
+        void shouldDeleteReverseProxyAndRequeueIfExists() {
+            var fakePlugin = createPlugin(name, plugin -> {
+                var metadata = plugin.getMetadata();
+                metadata.setDeletionTimestamp(clock.instant());
+                metadata.setFinalizers(new HashSet<>(Set.of(finalizer)));
+                plugin.getStatus().setLastProbeState(PluginState.STARTED);
+                plugin.getSpec().setSettingName(settingName);
+            });
+
+            var reverseProxy = createReverseProxy(reverseProxyName);
+
+            when(client.fetch(Plugin.class, name)).thenReturn(Optional.of(fakePlugin));
+            when(client.fetch(ReverseProxy.class, reverseProxyName))
+                .thenReturn(Optional.of(reverseProxy));
+
+            var exception = assertThrows(RequeueException.class,
+                () -> reconciler.reconcile(new Request(name)),
+                "Waiting for setting fake-setting to be deleted.");
+            assertEquals(Reconciler.Result.requeue(null), exception.getResult());
+            assertEquals("Waiting for reverse proxy " + reverseProxyName + " to be deleted.",
+                exception.getMessage());
+
+            // make sure the finalizer is removed.
+            assertFalse(fakePlugin.getMetadata().getFinalizers().contains(finalizer));
+            assertEquals(PluginState.STARTED, fakePlugin.getStatus().getLastProbeState());
+            verify(pluginManager, never()).getPlugin(name);
+            verify(pluginManager, never()).deletePlugin(name);
+            verify(client).fetch(Plugin.class, name);
+            verify(client).fetch(ReverseProxy.class, reverseProxyName);
+            verify(client).delete(reverseProxy);
+            verify(client, never()).fetch(Setting.class, settingName);
+            verify(client, never()).update(fakePlugin);
+        }
+
+    }
+
+    Setting createSetting(String name) {
+        var setting = new Setting();
+        var metadata = new Metadata();
+        metadata.setName(name);
+        setting.setMetadata(metadata);
+        return setting;
+    }
+
+    ReverseProxy createReverseProxy(String name) {
+        var reverseProxy = new ReverseProxy();
+        var metadata = new Metadata();
+        metadata.setName(name);
+        reverseProxy.setMetadata(metadata);
+        return reverseProxy;
+    }
+
+    Plugin createPlugin(String name, Consumer pluginConsumer) {
+        var plugin = new Plugin();
+        var metadata = new Metadata();
+        plugin.setMetadata(metadata);
+        metadata.setName(name);
+        plugin.setSpec(new Plugin.PluginSpec());
+        plugin.setStatus(new Plugin.PluginStatus());
+        pluginConsumer.accept(plugin);
+        return plugin;
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/PostReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/PostReconcilerTest.java
new file mode 100644
index 0000000..b701523
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/PostReconcilerTest.java
@@ -0,0 +1,236 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Optional;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationEventPublisher;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.ContentWrapper;
+import run.halo.app.content.ExcerptGenerator;
+import run.halo.app.content.NotificationReasonConst;
+import run.halo.app.content.PostService;
+import run.halo.app.content.TestPost;
+import run.halo.app.content.permalinks.PostPermalinkPolicy;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.Snapshot;
+import run.halo.app.core.extension.notification.Subscription;
+import run.halo.app.event.post.PostPublishedEvent;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.controller.Reconciler;
+import run.halo.app.notification.NotificationCenter;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+
+/**
+ * Tests for {@link PostReconciler}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PostReconcilerTest {
+
+    @Mock
+    private ExtensionClient client;
+
+    @Mock
+    private PostPermalinkPolicy postPermalinkPolicy;
+
+    @Mock
+    private PostService postService;
+
+    @Mock
+    private ApplicationEventPublisher eventPublisher;
+
+    @Mock
+    private NotificationCenter notificationCenter;
+
+    @Mock
+    private ExtensionGetter extensionGetter;
+
+    @InjectMocks
+    private PostReconciler postReconciler;
+
+    @BeforeEach
+    void setUp() {
+        lenient().when(notificationCenter.subscribe(any(), any())).thenReturn(Mono.empty());
+    }
+
+    @Test
+    void reconcile() {
+        String name = "post-A";
+        Post post = TestPost.postV1();
+        post.getSpec().setPublish(false);
+        post.getSpec().setHeadSnapshot("post-A-head-snapshot");
+        when(client.fetch(eq(Post.class), eq(name)))
+            .thenReturn(Optional.of(post));
+        when(postService.getContent(eq(post.getSpec().getReleaseSnapshot()),
+            eq(post.getSpec().getBaseSnapshot())))
+            .thenReturn(Mono.empty());
+
+        Snapshot snapshotV1 = TestPost.snapshotV1();
+        Snapshot snapshotV2 = TestPost.snapshotV2();
+        snapshotV1.getSpec().setContributors(Set.of("guqing"));
+        snapshotV2.getSpec().setContributors(Set.of("guqing", "zhangsan"));
+        when(client.listAll(eq(Snapshot.class), any(), any()))
+            .thenReturn(List.of(snapshotV1, snapshotV2));
+
+        ArgumentCaptor captor = ArgumentCaptor.forClass(Post.class);
+        postReconciler.reconcile(new Reconciler.Request(name));
+
+        verify(client, times(1)).update(captor.capture());
+
+        verify(postPermalinkPolicy, times(1)).permalink(any());
+
+        Post value = captor.getValue();
+        assertThat(value.getStatus().getExcerpt()).isEmpty();
+        assertThat(value.getStatus().getContributors()).isEqualTo(List.of("guqing", "zhangsan"));
+    }
+
+    @Test
+    void reconcileExcerpt() {
+        // https://github.com/halo-dev/halo/issues/2452
+        String name = "post-A";
+        Post post = TestPost.postV1();
+        post.getSpec().setPublish(true);
+        post.getSpec().setHeadSnapshot("post-A-head-snapshot");
+        post.getSpec().setReleaseSnapshot("post-fake-released-snapshot");
+        when(client.fetch(eq(Post.class), eq(name)))
+            .thenReturn(Optional.of(post));
+        when(postService.getContent(eq(post.getSpec().getReleaseSnapshot()),
+            eq(post.getSpec().getBaseSnapshot())))
+            .thenReturn(Mono.just(ContentWrapper.builder()
+                .snapshotName(post.getSpec().getHeadSnapshot())
+                .raw("hello world")
+                .content("
hello world
")
+                .rawType("markdown")
+                .build()));
+
+        Snapshot snapshotV2 = TestPost.snapshotV2();
+        snapshotV2.getMetadata().setLabels(new HashMap<>());
+        snapshotV2.getSpec().setContributors(Set.of("guqing", "zhangsan"));
+
+        Snapshot snapshotV1 = TestPost.snapshotV1();
+        snapshotV1.getSpec().setContributors(Set.of("guqing"));
+
+        when(extensionGetter.getEnabledExtension(eq(ExcerptGenerator.class)))
+            .thenReturn(Mono.empty());
+
+        when(client.listAll(eq(Snapshot.class), any(), any()))
+            .thenReturn(List.of(snapshotV1, snapshotV2));
+
+        ArgumentCaptor captor = ArgumentCaptor.forClass(Post.class);
+        postReconciler.reconcile(new Reconciler.Request(name));
+
+        verify(client, times(1)).update(captor.capture());
+        Post value = captor.getValue();
+        assertThat(value.getStatus().getExcerpt()).isEqualTo("hello world");
+    }
+
+    @Nested
+    class LastModifyTimeTest {
+        @Test
+        void reconcileLastModifyTimeWhenPostIsPublished() {
+            String name = "post-A";
+            Post post = TestPost.postV1();
+            post.getSpec().setPublish(true);
+            post.getSpec().setHeadSnapshot("post-A-head-snapshot");
+            post.getSpec().setReleaseSnapshot("post-fake-released-snapshot");
+            when(client.fetch(eq(Post.class), eq(name)))
+                .thenReturn(Optional.of(post));
+            when(postService.getContent(eq(post.getSpec().getReleaseSnapshot()),
+                eq(post.getSpec().getBaseSnapshot())))
+                .thenReturn(Mono.just(ContentWrapper.builder()
+                    .snapshotName(post.getSpec().getHeadSnapshot())
+                    .raw("hello world")
+                    .content("
hello world
")
+                    .rawType("markdown")
+                    .build()));
+            Instant lastModifyTime = Instant.now();
+            Snapshot snapshotV2 = TestPost.snapshotV2();
+            snapshotV2.getSpec().setLastModifyTime(lastModifyTime);
+            when(client.fetch(eq(Snapshot.class), eq(post.getSpec().getReleaseSnapshot())))
+                .thenReturn(Optional.of(snapshotV2));
+
+            when(extensionGetter.getEnabledExtension(eq(ExcerptGenerator.class)))
+                .thenReturn(Mono.empty());
+
+            when(client.listAll(eq(Snapshot.class), any(), any()))
+                .thenReturn(List.of());
+
+            ArgumentCaptor captor = ArgumentCaptor.forClass(Post.class);
+            postReconciler.reconcile(new Reconciler.Request(name));
+
+            verify(client, times(1)).update(captor.capture());
+            Post value = captor.getValue();
+            assertThat(value.getStatus().getLastModifyTime()).isEqualTo(lastModifyTime);
+            verify(eventPublisher).publishEvent(any(PostPublishedEvent.class));
+        }
+
+        @Test
+        void reconcileLastModifyTimeWhenPostIsNotPublished() {
+            String name = "post-A";
+            Post post = TestPost.postV1();
+            post.getSpec().setPublish(false);
+            post.getSpec().setHeadSnapshot("post-A-head-snapshot");
+            when(client.fetch(eq(Post.class), eq(name)))
+                .thenReturn(Optional.of(post));
+            when(postService.getContent(eq(post.getSpec().getReleaseSnapshot()),
+                eq(post.getSpec().getBaseSnapshot())))
+                .thenReturn(Mono.just(ContentWrapper.builder()
+                    .snapshotName(post.getSpec().getHeadSnapshot())
+                    .raw("hello world")
+                    .content("
hello world
")
+                    .rawType("markdown")
+                    .build()));
+
+            when(extensionGetter.getEnabledExtension(eq(ExcerptGenerator.class)))
+                .thenReturn(Mono.empty());
+
+            when(client.listAll(eq(Snapshot.class), any(), any()))
+                .thenReturn(List.of());
+
+            ArgumentCaptor captor = ArgumentCaptor.forClass(Post.class);
+            postReconciler.reconcile(new Reconciler.Request(name));
+
+            verify(client, times(1)).update(captor.capture());
+            Post value = captor.getValue();
+            assertThat(value.getStatus().getLastModifyTime()).isNull();
+        }
+    }
+
+    @Test
+    void subscribeNewCommentNotificationTest() {
+        Post post = TestPost.postV1();
+
+        postReconciler.subscribeNewCommentNotification(post);
+
+        verify(notificationCenter).subscribe(
+            assertArg(subscriber -> assertThat(subscriber.getName())
+                .isEqualTo(post.getSpec().getOwner())),
+            assertArg(argReason -> {
+                var interestReason = new Subscription.InterestReason();
+                interestReason.setReasonType(NotificationReasonConst.NEW_COMMENT_ON_POST);
+                interestReason.setExpression("props.postOwner == 'null'");
+                assertThat(argReason).isEqualTo(interestReason);
+            }));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/ReverseProxyReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/ReverseProxyReconcilerTest.java
new file mode 100644
index 0000000..0f88e23
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/ReverseProxyReconcilerTest.java
@@ -0,0 +1,68 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doNothing;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.core.extension.ReverseProxy;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.controller.Reconciler;
+import run.halo.app.plugin.PluginConst;
+import run.halo.app.plugin.resources.ReverseProxyRouterFunctionRegistry;
+
+/**
+ * Tests for {@link ReverseProxyReconciler}.
+ *
+ * @author guqing
+ * @since 2.0.1
+ */
+@ExtendWith(MockitoExtension.class)
+class ReverseProxyReconcilerTest {
+
+    @Mock
+    private ExtensionClient client;
+
+    @Mock
+    private ReverseProxyRouterFunctionRegistry routerFunctionRegistry;
+
+    @InjectMocks
+    private ReverseProxyReconciler reverseProxyReconciler;
+
+    @Test
+    void reconcileRemoval() {
+        // fix gh-2937
+        ReverseProxy reverseProxy = new ReverseProxy();
+        reverseProxy.setMetadata(new Metadata());
+        reverseProxy.getMetadata().setName("fake-reverse-proxy");
+        reverseProxy.getMetadata().setDeletionTimestamp(Instant.now());
+        reverseProxy.getMetadata()
+            .setLabels(Map.of(PluginConst.PLUGIN_NAME_LABEL_NAME, "fake-plugin"));
+        reverseProxy.setRules(List.of());
+
+        doNothing().when(routerFunctionRegistry).remove(anyString(), anyString());
+        when(client.fetch(ReverseProxy.class, "fake-reverse-proxy"))
+            .thenReturn(Optional.of(reverseProxy));
+
+        reverseProxyReconciler.reconcile(new Reconciler.Request("fake-reverse-proxy"));
+
+        verify(routerFunctionRegistry, never()).register(anyString(), any(ReverseProxy.class));
+
+        verify(routerFunctionRegistry, times(1))
+            .remove(eq("fake-plugin"), eq("fake-reverse-proxy"));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/SinglePageReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/SinglePageReconcilerTest.java
new file mode 100644
index 0000000..486efad
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/SinglePageReconcilerTest.java
@@ -0,0 +1,254 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.content.TestPost.snapshotV1;
+
+import java.net.URI;
+import java.time.Instant;
+import java.util.List;
+import java.util.Optional;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationContext;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.ContentWrapper;
+import run.halo.app.content.ExcerptGenerator;
+import run.halo.app.content.NotificationReasonConst;
+import run.halo.app.content.SinglePageService;
+import run.halo.app.content.TestPost;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.core.extension.content.Snapshot;
+import run.halo.app.core.extension.notification.Subscription;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.controller.Reconciler;
+import run.halo.app.infra.ExternalUrlSupplier;
+import run.halo.app.metrics.CounterService;
+import run.halo.app.notification.NotificationCenter;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+
+/**
+ * Tests for {@link SinglePageReconciler}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SinglePageReconcilerTest {
+    @Mock
+    private ExtensionClient client;
+
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    private CounterService counterService;
+
+    @Mock
+    private SinglePageService singlePageService;
+
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+
+    @Mock
+    NotificationCenter notificationCenter;
+
+    @Mock
+    ExtensionGetter extensionGetter;
+
+    @InjectMocks
+    private SinglePageReconciler singlePageReconciler;
+
+    @BeforeEach
+    void setUp() {
+        lenient().when(notificationCenter.subscribe(any(), any())).thenReturn(Mono.empty());
+    }
+
+    @Test
+    void reconcile() {
+        String name = "page-A";
+        SinglePage page = pageV1();
+        page.getSpec().setHeadSnapshot("page-A-head-snapshot");
+        page.getSpec().setReleaseSnapshot(page.getSpec().getHeadSnapshot());
+        when(client.fetch(eq(SinglePage.class), eq(name)))
+            .thenReturn(Optional.of(page));
+        when(singlePageService.getContent(eq(page.getSpec().getReleaseSnapshot()),
+            eq(page.getSpec().getBaseSnapshot())))
+            .thenReturn(Mono.just(ContentWrapper.builder()
+                .snapshotName(page.getSpec().getHeadSnapshot())
+                .raw("hello world")
+                .content("
hello world
")
+                .rawType("markdown")
+                .build())
+            );
+
+        Snapshot snapshotV1 = snapshotV1();
+        Snapshot snapshotV2 = TestPost.snapshotV2();
+        snapshotV1.getSpec().setContributors(Set.of("guqing"));
+        snapshotV2.getSpec().setContributors(Set.of("guqing", "zhangsan"));
+        when(client.listAll(eq(Snapshot.class), any(), any()))
+            .thenReturn(List.of(snapshotV1, snapshotV2));
+        when(externalUrlSupplier.get()).thenReturn(URI.create(""));
+
+        when(extensionGetter.getEnabledExtension(eq(ExcerptGenerator.class)))
+            .thenReturn(Mono.empty());
+
+        ArgumentCaptor captor = ArgumentCaptor.forClass(SinglePage.class);
+        singlePageReconciler.reconcile(new Reconciler.Request(name));
+
+        verify(client, times(3)).update(captor.capture());
+
+        SinglePage value = captor.getValue();
+        assertThat(value.getStatus().getExcerpt()).isEqualTo("hello world");
+        assertThat(value.getStatus().getContributors()).isEqualTo(List.of("guqing", "zhangsan"));
+    }
+
+    @Test
+    void createPermalink() {
+        SinglePage page = pageV1();
+        page.getSpec().setSlug("page-slug");
+
+        when(externalUrlSupplier.get()).thenReturn(URI.create(""));
+
+        String permalink = singlePageReconciler.createPermalink(page);
+        assertThat(permalink).isEqualTo("/page-slug");
+
+        when(externalUrlSupplier.get()).thenReturn(URI.create("http://example.com"));
+        permalink = singlePageReconciler.createPermalink(page);
+        assertThat(permalink).isEqualTo("http://example.com/page-slug");
+
+        page.getSpec().setSlug("中文 slug");
+        permalink = singlePageReconciler.createPermalink(page);
+        assertThat(permalink).isEqualTo("http://example.com/%E4%B8%AD%E6%96%87%20slug");
+    }
+
+    @Nested
+    class LastModifyTimeTest {
+        @Test
+        void reconcileLastModifyTimeWhenPageIsPublished() {
+            String name = "page-A";
+            when(externalUrlSupplier.get()).thenReturn(URI.create(""));
+
+            SinglePage page = pageV1();
+            page.getSpec().setPublish(true);
+            page.getSpec().setHeadSnapshot("page-A-head-snapshot");
+            page.getSpec().setReleaseSnapshot("page-fake-released-snapshot");
+            when(client.fetch(eq(SinglePage.class), eq(name)))
+                .thenReturn(Optional.of(page));
+            when(singlePageService.getContent(eq(page.getSpec().getReleaseSnapshot()),
+                eq(page.getSpec().getBaseSnapshot())))
+                .thenReturn(Mono.just(ContentWrapper.builder()
+                    .snapshotName(page.getSpec().getHeadSnapshot())
+                    .raw("hello world")
+                    .content("
hello world
")
+                    .rawType("markdown")
+                    .build())
+                );
+            Instant lastModifyTime = Instant.now();
+            Snapshot snapshotV2 = TestPost.snapshotV2();
+            snapshotV2.getSpec().setLastModifyTime(lastModifyTime);
+            when(client.fetch(eq(Snapshot.class), eq(page.getSpec().getReleaseSnapshot())))
+                .thenReturn(Optional.of(snapshotV2));
+
+            when(extensionGetter.getEnabledExtension(eq(ExcerptGenerator.class)))
+                .thenReturn(Mono.empty());
+
+            when(client.listAll(eq(Snapshot.class), any(), any()))
+                .thenReturn(List.of());
+
+            ArgumentCaptor captor = ArgumentCaptor.forClass(SinglePage.class);
+            singlePageReconciler.reconcile(new Reconciler.Request(name));
+
+            verify(client, times(4)).update(captor.capture());
+            SinglePage value = captor.getValue();
+            assertThat(value.getStatus().getLastModifyTime()).isEqualTo(lastModifyTime);
+        }
+
+        @Test
+        void reconcileLastModifyTimeWhenPageIsNotPublished() {
+            String name = "page-A";
+            when(externalUrlSupplier.get()).thenReturn(URI.create(""));
+
+            SinglePage page = pageV1();
+            page.getSpec().setPublish(false);
+            when(client.fetch(eq(SinglePage.class), eq(name)))
+                .thenReturn(Optional.of(page));
+            when(singlePageService.getContent(eq(page.getSpec().getReleaseSnapshot()),
+                eq(page.getSpec().getBaseSnapshot())))
+                .thenReturn(Mono.just(ContentWrapper.builder()
+                    .snapshotName(page.getSpec().getHeadSnapshot())
+                    .raw("hello world")
+                    .content("
hello world
")
+                    .rawType("markdown")
+                    .build())
+                );
+
+            when(extensionGetter.getEnabledExtension(eq(ExcerptGenerator.class)))
+                .thenReturn(Mono.empty());
+
+            when(client.listAll(eq(Snapshot.class), any(), any()))
+                .thenReturn(List.of());
+
+            ArgumentCaptor captor = ArgumentCaptor.forClass(SinglePage.class);
+            singlePageReconciler.reconcile(new Reconciler.Request(name));
+
+            verify(client, times(3)).update(captor.capture());
+            SinglePage value = captor.getValue();
+            assertThat(value.getStatus().getLastModifyTime()).isNull();
+        }
+    }
+
+    public static SinglePage pageV1() {
+        SinglePage page = new SinglePage();
+        page.setKind(Post.KIND);
+
+        page.setApiVersion("content.halo.run/v1alpha1");
+        Metadata metadata = new Metadata();
+        metadata.setName("page-A");
+        page.setMetadata(metadata);
+
+        SinglePage.SinglePageSpec spec = new SinglePage.SinglePageSpec();
+        page.setSpec(spec);
+
+        spec.setTitle("page-A");
+        spec.setSlug("page-slug");
+        spec.setBaseSnapshot(snapshotV1().getMetadata().getName());
+        spec.setHeadSnapshot("base-snapshot");
+        spec.setReleaseSnapshot(null);
+
+        return page;
+    }
+
+
+    @Test
+    void subscribeNewCommentNotificationTest() {
+        var page = pageV1();
+
+        singlePageReconciler.subscribeNewCommentNotification(page);
+
+        verify(notificationCenter).subscribe(
+            assertArg(subscriber -> assertThat(subscriber.getName())
+                .isEqualTo(page.getSpec().getOwner())),
+            assertArg(argReason -> {
+                var interestReason = new Subscription.InterestReason();
+                interestReason.setReasonType(NotificationReasonConst.NEW_COMMENT_ON_PAGE);
+                interestReason.setExpression("props.pageOwner == 'null'");
+                assertThat(argReason).isEqualTo(interestReason);
+            }));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/SystemSettingReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/SystemSettingReconcilerTest.java
new file mode 100644
index 0000000..61edc6a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/SystemSettingReconcilerTest.java
@@ -0,0 +1,187 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Optional;
+import java.util.function.Function;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationContext;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.controller.Reconciler;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link SystemSettingReconciler}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SystemSettingReconcilerTest {
+
+    @Mock
+    private ExtensionClient client;
+
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    private SystemSettingReconciler systemSettingReconciler;
+
+    @BeforeEach
+    void setUp() {
+        systemSettingReconciler = new SystemSettingReconciler(client, environmentFetcher,
+            applicationContext);
+    }
+
+    @Test
+    void reconcileArchivesRouteRule() {
+        ConfigMap configMap = systemConfigMapForRouteRule(rules -> {
+            rules.setArchives("archives-new");
+            return rules;
+        });
+        when(environmentFetcher.getConfigMapBlocking()).thenReturn(Optional.of(configMap));
+        when(client.fetch(eq(ConfigMap.class), eq(SystemSetting.SYSTEM_CONFIG)))
+            .thenReturn(Optional.of(configMap));
+        systemSettingReconciler.reconcile(new Reconciler.Request(SystemSetting.SYSTEM_CONFIG));
+        ArgumentCaptor captor = ArgumentCaptor.forClass(ConfigMap.class);
+        verify(client, times(1)).update(captor.capture());
+
+        ConfigMap updatedConfigMap = captor.getValue();
+        assertThat(rulesFrom(updatedConfigMap).getArchives()).isEqualTo("archives-new");
+        assertThat(rulesFrom(updatedConfigMap).getPost()).isEqualTo("/archives-new/{slug}");
+
+        assertThat(oldRulesFromAnno(updatedConfigMap).getArchives()).isEqualTo("archives-new");
+        assertThat(oldRulesFromAnno(updatedConfigMap).getPost()).isEqualTo("/archives-new/{slug}");
+
+        // archives and post
+        verify(applicationContext, times(2)).publishEvent(any());
+    }
+
+    @Test
+    void reconcileTagsRule() {
+        ConfigMap configMap = systemConfigMapForRouteRule(rules -> {
+            rules.setTags("tags-new");
+            return rules;
+        });
+        when(environmentFetcher.getConfigMapBlocking()).thenReturn(Optional.of(configMap));
+        when(client.fetch(eq(ConfigMap.class), eq(SystemSetting.SYSTEM_CONFIG)))
+            .thenReturn(Optional.of(configMap));
+        systemSettingReconciler.reconcile(new Reconciler.Request(SystemSetting.SYSTEM_CONFIG));
+        ArgumentCaptor captor = ArgumentCaptor.forClass(ConfigMap.class);
+        verify(client, times(1)).update(captor.capture());
+
+        ConfigMap updatedConfigMap = captor.getValue();
+        assertThat(rulesFrom(updatedConfigMap).getTags()).isEqualTo("tags-new");
+
+        assertThat(oldRulesFromAnno(updatedConfigMap).getTags()).isEqualTo("tags-new");
+
+        verify(applicationContext, times(1)).publishEvent(any());
+    }
+
+    @Test
+    void reconcileCategoriesRule() {
+        ConfigMap configMap = systemConfigMapForRouteRule(rules -> {
+            rules.setCategories("categories-new");
+            return rules;
+        });
+        when(environmentFetcher.getConfigMapBlocking()).thenReturn(Optional.of(configMap));
+        when(client.fetch(eq(ConfigMap.class), eq(SystemSetting.SYSTEM_CONFIG)))
+            .thenReturn(Optional.of(configMap));
+        systemSettingReconciler.reconcile(new Reconciler.Request(SystemSetting.SYSTEM_CONFIG));
+        ArgumentCaptor captor = ArgumentCaptor.forClass(ConfigMap.class);
+        verify(client, times(1)).update(captor.capture());
+
+        ConfigMap updatedConfigMap = captor.getValue();
+        assertThat(rulesFrom(updatedConfigMap).getCategories()).isEqualTo("categories-new");
+
+        assertThat(oldRulesFromAnno(updatedConfigMap).getCategories()).isEqualTo("categories-new");
+
+        verify(applicationContext, times(1)).publishEvent(any());
+    }
+
+    @Test
+    void reconcilePostRule() {
+        ConfigMap configMap = systemConfigMapForRouteRule(rules -> {
+            rules.setPost("/post-new/{slug}");
+            return rules;
+        });
+        when(environmentFetcher.getConfigMapBlocking()).thenReturn(Optional.of(configMap));
+        when(client.fetch(eq(ConfigMap.class), eq(SystemSetting.SYSTEM_CONFIG)))
+            .thenReturn(Optional.of(configMap));
+        systemSettingReconciler.reconcile(new Reconciler.Request(SystemSetting.SYSTEM_CONFIG));
+        ArgumentCaptor captor = ArgumentCaptor.forClass(ConfigMap.class);
+        verify(client, times(1)).update(captor.capture());
+
+        ConfigMap updatedConfigMap = captor.getValue();
+        assertThat(rulesFrom(updatedConfigMap).getPost()).isEqualTo("/post-new/{slug}");
+
+        assertThat(oldRulesFromAnno(updatedConfigMap).getPost()).isEqualTo("/post-new/{slug}");
+
+        verify(applicationContext, times(1)).publishEvent(any());
+    }
+
+    private SystemSetting.ThemeRouteRules rulesFrom(ConfigMap configMap) {
+        String s = configMap.getData().get(SystemSetting.ThemeRouteRules.GROUP);
+        return JsonUtils.jsonToObject(s, SystemSetting.ThemeRouteRules.class);
+    }
+
+    private SystemSetting.ThemeRouteRules oldRulesFromAnno(ConfigMap configMap) {
+        Map annotations = configMap.getMetadata().getAnnotations();
+        String s = annotations.get(SystemSettingReconciler.OLD_THEME_ROUTE_RULES);
+        return JsonUtils.jsonToObject(s, SystemSetting.ThemeRouteRules.class);
+    }
+
+    private ConfigMap systemConfigMapForRouteRule(
+        Function function) {
+        ConfigMap configMap = new ConfigMap();
+        Metadata metadata = new Metadata();
+        metadata.setName(SystemSetting.SYSTEM_CONFIG);
+        configMap.setMetadata(metadata);
+
+        SystemSetting.ThemeRouteRules themeRouteRules = new SystemSetting.ThemeRouteRules();
+        themeRouteRules.setArchives("archives");
+        themeRouteRules.setTags("tags");
+        themeRouteRules.setCategories("categories");
+        themeRouteRules.setPost("/archives/{slug}");
+        Map annotations = new HashMap<>();
+        annotations.put(SystemSettingReconciler.OLD_THEME_ROUTE_RULES,
+            JsonUtils.objectToJson(themeRouteRules));
+        metadata.setAnnotations(annotations);
+
+        SystemSetting.ThemeRouteRules newRules = function.apply(themeRouteRules);
+        configMap.putDataItem(SystemSetting.ThemeRouteRules.GROUP,
+            JsonUtils.objectToJson(newRules));
+        return configMap;
+    }
+
+    @Test
+    void changePostPatternPrefixIfNecessary() {
+        SystemSetting.ThemeRouteRules newRouteRules = new SystemSetting.ThemeRouteRules();
+        newRouteRules.setPost("/archives/{slug}");
+        newRouteRules.setArchives("new");
+        boolean result = SystemSettingReconciler.RouteRuleReconciler
+            .changePostPatternPrefixIfNecessary("archives", newRouteRules);
+        assertThat(result).isTrue();
+
+        assertThat(newRouteRules.getPost()).isEqualTo("/new/{slug}");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/TagReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/TagReconcilerTest.java
new file mode 100644
index 0000000..d88fe3c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/TagReconcilerTest.java
@@ -0,0 +1,89 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import java.util.Optional;
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.content.permalinks.TagPermalinkPolicy;
+import run.halo.app.core.extension.content.Tag;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+
+/**
+ * Tests for {@link TagReconciler}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class TagReconcilerTest {
+    @Mock
+    private ExtensionClient client;
+
+    @Mock
+    private TagPermalinkPolicy tagPermalinkPolicy;
+
+    @InjectMocks
+    private TagReconciler tagReconciler;
+
+    @Test
+    void reconcile() {
+        Tag tag = tag();
+        when(client.fetch(eq(Tag.class), eq("fake-tag")))
+            .thenReturn(Optional.of(tag));
+        when(tagPermalinkPolicy.permalink(any()))
+            .thenAnswer(arg -> "/tags/" + tag.getSpec().getSlug());
+        ArgumentCaptor captor = ArgumentCaptor.forClass(Tag.class);
+
+        tagReconciler.reconcile(new TagReconciler.Request("fake-tag"));
+
+        verify(client).update(captor.capture());
+        Tag capture = captor.getValue();
+        assertThat(capture.getStatus().getPermalink()).isEqualTo("/tags/fake-slug");
+
+        // change slug
+        tag.getSpec().setSlug("new-slug");
+        tagReconciler.reconcile(new TagReconciler.Request("fake-tag"));
+        verify(client, times(2)).update(captor.capture());
+        assertThat(capture.getStatus().getPermalink()).isEqualTo("/tags/new-slug");
+    }
+
+    @Test
+    void reconcileDelete() {
+        Tag tag = tag();
+        tag.getMetadata().setDeletionTimestamp(Instant.now());
+        tag.getMetadata().setFinalizers(Set.of(TagReconciler.FINALIZER_NAME));
+        when(client.fetch(eq(Tag.class), eq("fake-tag")))
+            .thenReturn(Optional.of(tag));
+        ArgumentCaptor captor = ArgumentCaptor.forClass(Tag.class);
+
+        tagReconciler.reconcile(new TagReconciler.Request("fake-tag"));
+        verify(client, times(1)).update(captor.capture());
+        verify(tagPermalinkPolicy, times(0)).permalink(any());
+    }
+
+    Tag tag() {
+        Tag tag = new Tag();
+        tag.setMetadata(new Metadata());
+        tag.getMetadata().setVersion(0L);
+        tag.getMetadata().setName("fake-tag");
+
+        tag.setSpec(new Tag.TagSpec());
+        tag.getSpec().setSlug("fake-slug");
+
+        tag.setStatus(new Tag.TagStatus());
+        return tag;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/ThemeReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/ThemeReconcilerTest.java
new file mode 100644
index 0000000..b18f928
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/ThemeReconcilerTest.java
@@ -0,0 +1,335 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.AssertionsForClassTypes.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import com.github.zafarkhaja.semver.Version;
+import java.io.File;
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.time.Instant;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.mockito.stubbing.Answer;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.retry.RetryException;
+import org.springframework.util.FileSystemUtils;
+import org.springframework.util.ResourceUtils;
+import run.halo.app.core.extension.AnnotationSetting;
+import run.halo.app.core.extension.Setting;
+import run.halo.app.core.extension.Theme;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.MetadataOperator;
+import run.halo.app.extension.controller.Reconciler;
+import run.halo.app.infra.SystemVersionSupplier;
+import run.halo.app.infra.ThemeRootGetter;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link ThemeReconciler}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ThemeReconcilerTest {
+
+    @Mock
+    private ExtensionClient extensionClient;
+
+    @Mock
+    private SystemVersionSupplier systemVersionSupplier;
+
+    @Mock
+    ThemeRootGetter themeRoot;
+
+    @Mock
+    private File defaultTheme;
+
+    @InjectMocks
+    ThemeReconciler themeReconciler;
+
+    @TempDir
+    private Path tempDirectory;
+
+    @BeforeEach
+    void setUp() throws IOException {
+        defaultTheme = ResourceUtils.getFile("classpath:themes/default");
+        lenient().when(systemVersionSupplier.get()).thenReturn(Version.valueOf("0.0.0"));
+    }
+
+    @Test
+    void reconcileDelete() throws IOException {
+        Path testWorkDir = tempDirectory.resolve("reconcile-delete");
+        Files.createDirectory(testWorkDir);
+        when(themeRoot.get()).thenReturn(testWorkDir);
+
+        Theme theme = new Theme();
+        Metadata metadata = new Metadata();
+        metadata.setName("theme-test");
+        metadata.setDeletionTimestamp(Instant.now());
+        theme.setMetadata(metadata);
+        theme.setKind(Theme.KIND);
+        theme.setApiVersion("theme.halo.run/v1alpha1");
+        Theme.ThemeSpec themeSpec = new Theme.ThemeSpec();
+        themeSpec.setSettingName("theme-test-setting");
+        theme.setSpec(themeSpec);
+
+        Path defaultThemePath = testWorkDir.resolve("theme-test");
+
+        // copy to temp directory
+        FileSystemUtils.copyRecursively(defaultTheme.toPath(), defaultThemePath);
+
+        assertThat(testWorkDir).isNotEmptyDirectory();
+        assertThat(defaultThemePath).exists();
+
+        when(extensionClient.fetch(eq(Theme.class), eq(metadata.getName())))
+            .thenReturn(Optional.of(theme));
+        when(extensionClient.fetch(Setting.class, themeSpec.getSettingName()))
+            .thenReturn(Optional.empty());
+
+        themeReconciler.reconcile(new Reconciler.Request(metadata.getName()));
+
+        verify(extensionClient, times(2)).fetch(eq(Theme.class), eq(metadata.getName()));
+        verify(extensionClient, times(2)).fetch(eq(Setting.class), eq(themeSpec.getSettingName()));
+
+        verify(extensionClient, times(2)).list(eq(AnnotationSetting.class), any(), any());
+
+        assertThat(Files.exists(testWorkDir)).isTrue();
+        assertThat(Files.exists(defaultThemePath)).isFalse();
+    }
+
+    @Test
+    void reconcileDeleteRetry() {
+        Theme theme = fakeTheme();
+        final MetadataOperator metadata = theme.getMetadata();
+
+        Path testWorkDir = tempDirectory.resolve("reconcile-delete");
+        when(themeRoot.get()).thenReturn(testWorkDir);
+
+        final ThemeReconciler themeReconciler =
+            new ThemeReconciler(extensionClient, themeRoot, systemVersionSupplier);
+
+        final int[] retryFlags = {0, 0};
+        when(extensionClient.fetch(eq(Setting.class), eq("theme-test-setting")))
+            .thenAnswer((Answer>) invocation -> {
+                retryFlags[0]++;
+                // retry 2 times
+                if (retryFlags[0] < 3) {
+                    return Optional.of(new Setting());
+                }
+                return Optional.empty();
+            });
+
+        when(extensionClient.list(eq(AnnotationSetting.class), any(), eq(null)))
+            .thenAnswer((Answer>) invocation -> {
+                retryFlags[1]++;
+                // retry 2 times
+                if (retryFlags[1] < 3) {
+                    return List.of(new AnnotationSetting());
+                }
+                return List.of();
+            });
+
+        themeReconciler.reconcile(new Reconciler.Request(metadata.getName()));
+
+        String settingName = theme.getSpec().getSettingName();
+        verify(extensionClient, times(2)).fetch(eq(Theme.class), eq(metadata.getName()));
+        verify(extensionClient, times(3)).fetch(eq(Setting.class), eq(settingName));
+        verify(extensionClient, times(3)).list(eq(AnnotationSetting.class), any(), eq(null));
+    }
+
+    @Test
+    void reconcileDeleteRetryWhenThrowException() {
+        Theme theme = fakeTheme();
+
+        Path testWorkDir = tempDirectory.resolve("reconcile-delete");
+        when(themeRoot.get()).thenReturn(testWorkDir);
+
+        final ThemeReconciler themeReconciler =
+            new ThemeReconciler(extensionClient, themeRoot, systemVersionSupplier);
+
+        final int[] retryFlags = {0};
+        when(extensionClient.fetch(eq(Setting.class), eq("theme-test-setting")))
+            .thenAnswer((Answer>) invocation -> {
+                retryFlags[0]++;
+                // retry 2 times
+                if (retryFlags[0] < 2) {
+                    return Optional.of(new Setting());
+                }
+                throw new RetryException("retry exception.");
+            });
+
+        String settingName = theme.getSpec().getSettingName();
+        assertThatThrownBy(
+            () -> themeReconciler.reconcile(new Reconciler.Request(theme.getMetadata().getName())))
+            .isInstanceOf(RetryException.class)
+            .hasMessage("retry exception.");
+
+        verify(extensionClient, times(2)).fetch(eq(Setting.class), eq(settingName));
+    }
+
+    @Test
+    void reconcileStatus() {
+        when(systemVersionSupplier.get()).thenReturn(Version.valueOf("2.3.0"));
+        Path testWorkDir = tempDirectory.resolve("reconcile-delete");
+        when(themeRoot.get()).thenReturn(testWorkDir);
+
+        final ThemeReconciler themeReconciler =
+            new ThemeReconciler(extensionClient, themeRoot, systemVersionSupplier);
+        Theme theme = fakeTheme();
+        theme.setStatus(null);
+        theme.getSpec().setRequires(">2.3.0");
+        when(extensionClient.fetch(eq(Theme.class), eq("fake-theme")))
+            .thenReturn(Optional.of(theme));
+        themeReconciler.reconcileStatus("fake-theme");
+        ArgumentCaptor themeUpdateCaptor = ArgumentCaptor.forClass(Theme.class);
+        verify(extensionClient).update(themeUpdateCaptor.capture());
+        Theme value = themeUpdateCaptor.getValue();
+        assertThat(value.getStatus()).isNotNull();
+        assertThat(value.getStatus().getConditions().peekFirst().getType())
+            .isEqualTo(Theme.ThemePhase.FAILED.name());
+        assertThat(value.getStatus().getPhase())
+            .isEqualTo(Theme.ThemePhase.FAILED);
+
+        theme.getSpec().setRequires(">=2.3.0");
+        when(extensionClient.fetch(eq(Theme.class), eq("fake-theme")))
+            .thenReturn(Optional.of(theme));
+        themeReconciler.reconcileStatus("fake-theme");
+        verify(extensionClient, times(2)).update(themeUpdateCaptor.capture());
+        assertThat(themeUpdateCaptor.getValue().getStatus().getPhase())
+            .isEqualTo(Theme.ThemePhase.READY);
+    }
+
+    private Theme fakeTheme() {
+        Theme theme = new Theme();
+        Metadata metadata = new Metadata();
+        metadata.setName("theme-test");
+        metadata.setDeletionTimestamp(Instant.now());
+        theme.setMetadata(metadata);
+        theme.setKind(Theme.KIND);
+        theme.setApiVersion("theme.halo.run/v1alpha1");
+        Theme.ThemeSpec themeSpec = new Theme.ThemeSpec();
+        themeSpec.setSettingName("theme-test-setting");
+        theme.setSpec(themeSpec);
+        lenient().when(extensionClient.fetch(eq(Theme.class), eq(metadata.getName())))
+            .thenReturn(Optional.of(theme));
+        return theme;
+    }
+
+    @Test
+    void themeSettingDefaultValue() throws IOException, JSONException {
+        Path testWorkDir = tempDirectory.resolve("reconcile-setting-value");
+        Files.createDirectory(testWorkDir);
+        when(themeRoot.get()).thenReturn(testWorkDir);
+
+        Theme theme = new Theme();
+        Metadata metadata = new Metadata();
+        metadata.setName("theme-test");
+        theme.setMetadata(metadata);
+        theme.setKind(Theme.KIND);
+        theme.setApiVersion("theme.halo.run/v1alpha1");
+        Theme.ThemeSpec themeSpec = new Theme.ThemeSpec();
+        themeSpec.setSettingName(null);
+        theme.setSpec(themeSpec);
+
+        when(extensionClient.fetch(eq(Theme.class), eq(metadata.getName())))
+            .thenReturn(Optional.of(theme));
+        Reconciler.Result reconcile =
+            themeReconciler.reconcile(new Reconciler.Request(metadata.getName()));
+        assertThat(reconcile.reEnqueue()).isFalse();
+        verify(extensionClient, times(3)).fetch(eq(Theme.class), eq(metadata.getName()));
+
+        // setting exists
+        themeSpec.setSettingName("theme-test-setting");
+        assertThat(theme.getSpec().getConfigMapName()).isNull();
+        ArgumentCaptor captor = ArgumentCaptor.forClass(Theme.class);
+        themeReconciler.reconcile(new Reconciler.Request(metadata.getName()));
+        verify(extensionClient, times(6))
+            .fetch(eq(Theme.class), eq(metadata.getName()));
+        verify(extensionClient, times(3))
+            .update(captor.capture());
+        Theme value = captor.getValue();
+        assertThat(value.getSpec().getConfigMapName()).isNotNull();
+
+        // populate setting name and configMap name and configMap not exists
+        themeSpec.setSettingName("theme-test-setting");
+        themeSpec.setConfigMapName("theme-test-configmap");
+        when(extensionClient.fetch(eq(ConfigMap.class), any()))
+            .thenReturn(Optional.empty());
+        when(extensionClient.fetch(eq(Setting.class), eq(themeSpec.getSettingName())))
+            .thenReturn(Optional.of(getFakeSetting()));
+        themeReconciler.reconcile(new Reconciler.Request(metadata.getName()));
+        verify(extensionClient, times(2))
+            .fetch(eq(Setting.class), eq(themeSpec.getSettingName()));
+        ArgumentCaptor configMapCaptor = ArgumentCaptor.forClass(ConfigMap.class);
+        verify(extensionClient, times(1)).create(any(ConfigMap.class));
+        verify(extensionClient, times(1)).create(configMapCaptor.capture());
+        ConfigMap defaultValueConfigMap = configMapCaptor.getValue();
+        Map data = defaultValueConfigMap.getData();
+        JSONAssert.assertEquals("""
+                {
+                    "sns": "{\\"email\\":\\"example@exmple.com\\"}"
+                }
+                """,
+            JsonUtils.objectToJson(data),
+            true);
+    }
+
+    private static Setting getFakeSetting() {
+        String settingJson = """
+            {
+                "apiVersion": "v1alpha1",
+                "kind": "Setting",
+                "metadata": {
+                    "name": "theme-default-setting"
+                },
+                "spec": {
+                    "forms": [{
+                        "formSchema": [
+                            {
+                                "$el": "h1",
+                                "children": "Register"
+                            },
+                            {
+                                "$formkit": "text",
+                                "label": "Email",
+                                "name": "email",
+                                "value": "example@exmple.com"
+                            },
+                            {
+                                "$formkit": "password",
+                                "label": "Password",
+                                "name": "password",
+                                "validation": "required|length:5,16",
+                                "value": null
+                            }
+                        ],
+                        "group": "sns",
+                        "label": "社交资料"
+                    }]
+                }
+            }
+            """;
+        return JsonUtils.jsonToObject(settingJson, Setting.class);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/reconciler/UserReconcilerTest.java b/application/src/test/java/run/halo/app/core/extension/reconciler/UserReconcilerTest.java
new file mode 100644
index 0000000..f54997d
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/reconciler/UserReconcilerTest.java
@@ -0,0 +1,113 @@
+package run.halo.app.core.extension.reconciler;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.net.URI;
+import java.net.URISyntaxException;
+import java.util.Optional;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.controller.Reconciler;
+import run.halo.app.infra.AnonymousUserConst;
+import run.halo.app.infra.ExternalUrlSupplier;
+import run.halo.app.notification.NotificationCenter;
+
+/**
+ * Tests for {@link UserReconciler}.
+ *
+ * @author guqing
+ * @since 2.0.1
+ */
+@ExtendWith(MockitoExtension.class)
+class UserReconcilerTest {
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+
+    @Mock
+    private ExtensionClient client;
+
+    @Mock
+    private NotificationCenter notificationCenter;
+
+    @Mock
+    private RoleService roleService;
+
+    @InjectMocks
+    private UserReconciler userReconciler;
+
+    @BeforeEach
+    void setUp() {
+        lenient().when(notificationCenter.unsubscribe(any(), any())).thenReturn(Mono.empty());
+    }
+
+    @Test
+    void permalinkForFakeUser() throws URISyntaxException {
+        when(externalUrlSupplier.get()).thenReturn(new URI("http://localhost:8090"));
+
+        when(roleService.getRolesByUsername("fake-user"))
+            .thenReturn(Flux.empty());
+
+        when(client.fetch(eq(User.class), eq("fake-user")))
+            .thenReturn(Optional.of(user("fake-user")));
+        userReconciler.reconcile(new Reconciler.Request("fake-user"));
+
+        verify(client).update(assertArg(user ->
+            assertEquals(
+                "http://localhost:8090/authors/fake-user",
+                user.getStatus().getPermalink()
+            )
+        ));
+    }
+
+    @Test
+    void permalinkForAnonymousUser() {
+        when(client.fetch(eq(User.class), eq(AnonymousUserConst.PRINCIPAL)))
+            .thenReturn(Optional.of(user(AnonymousUserConst.PRINCIPAL)));
+        when(roleService.getRolesByUsername(AnonymousUserConst.PRINCIPAL)).thenReturn(Flux.empty());
+        userReconciler.reconcile(new Reconciler.Request(AnonymousUserConst.PRINCIPAL));
+        verify(client).update(any(User.class));
+    }
+
+    @Test
+    void ensureRoleNamesAnno() {
+        when(roleService.getRolesByUsername("fake-user")).thenReturn(Flux.just("fake-role"));
+        when(client.fetch(eq(User.class), eq("fake-user")))
+            .thenReturn(Optional.of(user("fake-user")));
+        when(externalUrlSupplier.get()).thenReturn(URI.create("/"));
+
+        userReconciler.reconcile(new Reconciler.Request("fake-user"));
+
+        verify(client).update(assertArg(user -> {
+            assertEquals("""
+                    ["fake-role"]\
+                    """,
+                user.getMetadata().getAnnotations().get(User.ROLE_NAMES_ANNO));
+        }));
+    }
+
+    User user(String name) {
+        User user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName(name);
+        user.getMetadata().setFinalizers(Set.of("user-protection"));
+        user.setSpec(new User.UserSpec());
+        return user;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/service/DefaultRoleServiceTest.java b/application/src/test/java/run/halo/app/core/extension/service/DefaultRoleServiceTest.java
new file mode 100644
index 0000000..b2ca0f1
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/service/DefaultRoleServiceTest.java
@@ -0,0 +1,331 @@
+package run.halo.app.core.extension.service;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.eq;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import java.util.function.Predicate;
+import java.util.stream.Stream;
+import org.assertj.core.api.AssertionsForInterfaceTypes;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.data.domain.Sort;
+import reactor.core.publisher.Flux;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.RoleBinding;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link DefaultRoleService}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultRoleServiceTest {
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private DefaultRoleService roleService;
+
+    @Nested
+    class ListDependenciesTest {
+        @Test
+        void listDependencies() {
+            // prepare test data
+            var role1 = createRole("role1", "role2");
+            var role2 = createRole("role2", "role3");
+            var role3 = createRole("role3");
+
+            var roleNames = Set.of("role1");
+
+
+            when(client.listAll(same(Role.class), any(ListOptions.class), any(Sort.class)))
+                .thenReturn(Flux.just(role1))
+                .thenReturn(Flux.just(role2))
+                .thenReturn(Flux.just(role3))
+                .thenReturn(Flux.empty());
+
+            // call the method under test
+            var result = roleService.listDependenciesFlux(roleNames);
+
+            // verify the result
+            StepVerifier.create(result)
+                .expectNext(role1)
+                .expectNext(role2)
+                .expectNext(role3)
+                .verifyComplete();
+
+            // verify the mock invocations
+            verify(client, times(4)).listAll(
+                same(Role.class),
+                any(ListOptions.class),
+                any(Sort.class)
+            );
+        }
+
+        @Test
+        void listDependenciesWithCycle() {
+            // prepare test data
+            var role1 = createRole("role1", "role2");
+            var role2 = createRole("role2", "role3");
+            var role3 = createRole("role3", "role1");
+
+            var roleNames = Set.of("role1");
+
+            // setup mocks
+            when(client.listAll(same(Role.class), any(ListOptions.class), any(Sort.class)))
+                .thenReturn(Flux.just(role1))
+                .thenReturn(Flux.just(role2))
+                .thenReturn(Flux.just(role3))
+                .thenReturn(Flux.empty());
+
+            // call the method under test
+            var result = roleService.listDependenciesFlux(roleNames);
+
+            // verify the result
+            StepVerifier.create(result)
+                .expectNext(role1)
+                .expectNext(role2)
+                .expectNext(role3)
+                .verifyComplete();
+
+            // verify the mock invocations
+            verify(client, times(4)).listAll(
+                same(Role.class),
+                any(ListOptions.class),
+                any(Sort.class)
+            );
+        }
+
+        @Test
+        void listDependenciesWithMiddleCycle() {
+            // prepare test data
+            // role1 -> role2 -> role3 -> role4
+            //             \<-----|
+            var role1 = createRole("role1", "role2");
+            var role2 = createRole("role2", "role3");
+            var role3 = createRole("role3", "role2", "role4");
+            var role4 = createRole("role4");
+
+            var roleNames = Set.of("role1");
+
+            when(client.listAll(same(Role.class), any(ListOptions.class), any(Sort.class)))
+                .thenReturn(Flux.just(role1))
+                .thenReturn(Flux.just(role2))
+                .thenReturn(Flux.just(role3))
+                .thenReturn(Flux.just(role4))
+                .thenReturn(Flux.empty());
+
+            // call the method under test
+            var result = roleService.listDependenciesFlux(roleNames);
+
+            // verify the result
+            StepVerifier.create(result)
+                .expectNext(role1)
+                .expectNext(role2)
+                .expectNext(role3)
+                .expectNext(role4)
+                .verifyComplete();
+
+            // verify the mock invocations
+            verify(client, times(5)).listAll(
+                same(Role.class),
+                any(ListOptions.class),
+                any(Sort.class)
+            );
+        }
+
+        @Test
+        void listDependenciesWithCycleAndSequence() {
+            // prepare test data
+            // role1 -> role2 -> role3
+            //   \->role4  \<-----|
+            Role role1 = createRole("role1", "role4", "role2");
+            Role role2 = createRole("role2", "role3");
+            Role role3 = createRole("role3", "role2");
+            Role role4 = createRole("role4");
+
+            Set roleNames = Set.of("role1");
+
+            when(client.listAll(same(Role.class), any(ListOptions.class), any(Sort.class)))
+                .thenReturn(Flux.just(role1))
+                .thenReturn(Flux.just(role4, role2))
+                .thenReturn(Flux.just(role3))
+                .thenReturn(Flux.empty());
+
+            // call the method under test
+            var result = roleService.listDependenciesFlux(roleNames);
+
+            // verify the result
+            StepVerifier.create(result)
+                .expectNext(role1)
+                .expectNext(role4)
+                .expectNext(role2)
+                .expectNext(role3)
+                .verifyComplete();
+
+            // verify the mock invocations
+            verify(client, times(4)).listAll(same(Role.class), any(), any());
+        }
+
+        @Test
+        void listDependenciesAfterCycle() {
+            // prepare test data
+            // role1 -> role2 -> role3
+            //   \->role4  \<-----|
+            Role role1 = createRole("role1", "role4", "role2");
+            Role role2 = createRole("role2", "role3");
+            Role role3 = createRole("role3", "role2");
+            Role role4 = createRole("role4");
+
+            Set roleNames = Set.of("role2");
+
+            when(client.listAll(same(Role.class), any(ListOptions.class), any(Sort.class)))
+                .thenReturn(Flux.just(role2))
+                .thenReturn(Flux.just(role3))
+                .thenReturn(Flux.empty());
+
+            // call the method under test
+            var result = roleService.listDependenciesFlux(roleNames);
+
+            // verify the result
+            StepVerifier.create(result)
+                .expectNext(role2)
+                .expectNext(role3)
+                .verifyComplete();
+
+            // verify the mock invocations
+            verify(client, times(3)).listAll(
+                same(Role.class),
+                any(ListOptions.class),
+                any(Sort.class)
+            );
+        }
+
+        @Test
+        void listDependenciesWithNullParam() {
+            var result = roleService.listDependenciesFlux(null);
+
+            // verify the result
+            StepVerifier.create(result)
+                .verifyComplete();
+
+            result = roleService.listDependenciesFlux(Set.of());
+            StepVerifier.create(result)
+                .verifyComplete();
+
+            // verify the mock invocations
+            verify(client, never()).listAll(
+                eq(Role.class),
+                any(ListOptions.class),
+                any(Sort.class)
+            );
+        }
+
+        @Test
+        void listDependenciesAndSomeOneNotFound() {
+            var role1 = createRole("role1", "role2");
+            var role2 = createRole("role2", "role3", "role4");
+            var role4 = createRole("role4");
+
+            var roleNames = Set.of("role1");
+
+            when(client.listAll(same(Role.class), any(ListOptions.class), any(Sort.class)))
+                .thenReturn(Flux.just(role1))
+                .thenReturn(Flux.just(role2))
+                .thenReturn(Flux.just(role4))
+                .thenReturn(Flux.empty())
+            ;
+
+            var result = roleService.listDependenciesFlux(roleNames);
+            // verify the result
+            StepVerifier.create(result)
+                .expectNext(role1)
+                .expectNext(role2)
+                .expectNext(role4)
+                .verifyComplete();
+
+            // verify the mock invocations
+            verify(client, times(4)).listAll(
+                same(Role.class),
+                any(ListOptions.class),
+                any(Sort.class)
+            );
+        }
+
+        @Test
+        void testSubjectMatch() {
+            RoleBinding fakeAuthenticatedBinding =
+                createRoleBinding("authenticated-fake-binding", "fake", "authenticated");
+            RoleBinding fakeEditorBinding =
+                createRoleBinding("editor-fake-binding", "fake", "editor");
+            RoleBinding fakeAnonymousBinding =
+                createRoleBinding("test-anonymous-binding", "test", "anonymous");
+
+            RoleBinding.Subject subject = new RoleBinding.Subject();
+            subject.setName("authenticated");
+            subject.setKind(Role.KIND);
+            subject.setApiGroup(Role.GROUP);
+
+            Predicate predicate = roleService.getRoleBindingPredicate(subject);
+            List result =
+                Stream.of(fakeAuthenticatedBinding, fakeEditorBinding, fakeAnonymousBinding)
+                    .filter(predicate)
+                    .toList();
+            AssertionsForInterfaceTypes.assertThat(result)
+                .containsExactly(fakeAuthenticatedBinding);
+
+            subject.setName("editor");
+            predicate = roleService.getRoleBindingPredicate(subject);
+            result =
+                Stream.of(fakeAuthenticatedBinding, fakeEditorBinding, fakeAnonymousBinding)
+                    .filter(predicate)
+                    .toList();
+            AssertionsForInterfaceTypes.assertThat(result).containsExactly(fakeEditorBinding);
+        }
+
+        RoleBinding createRoleBinding(String name, String refName, String subjectName) {
+            RoleBinding roleBinding = new RoleBinding();
+            roleBinding.setMetadata(new Metadata());
+            roleBinding.getMetadata().setName(name);
+            roleBinding.setRoleRef(new RoleBinding.RoleRef());
+            roleBinding.getRoleRef().setKind(Role.KIND);
+            roleBinding.getRoleRef().setApiGroup(Role.GROUP);
+            roleBinding.getRoleRef().setName(refName);
+            roleBinding.setSubjects(List.of(new RoleBinding.Subject()));
+            roleBinding.getSubjects().get(0).setKind(Role.KIND);
+            roleBinding.getSubjects().get(0).setName(subjectName);
+            roleBinding.getSubjects().get(0).setApiGroup(Role.GROUP);
+            return roleBinding;
+        }
+
+        private Role createRole(String name, String... dependencies) {
+            Role role = new Role();
+            role.setMetadata(new Metadata());
+            role.getMetadata().setName(name);
+
+            Map annotations = new HashMap<>();
+            annotations.put(Role.ROLE_DEPENDENCIES_ANNO, JsonUtils.objectToJson(dependencies));
+            role.getMetadata().setAnnotations(annotations);
+            return role;
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/service/UserServiceImplTest.java b/application/src/test/java/run/halo/app/core/extension/service/UserServiceImplTest.java
new file mode 100644
index 0000000..8b63e04
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/service/UserServiceImplTest.java
@@ -0,0 +1,405 @@
+package run.halo.app.core.extension.service;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anySet;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.argThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.extension.GroupVersionKind.fromExtension;
+
+import java.util.Set;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationEventPublisher;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.RoleBinding;
+import run.halo.app.core.extension.RoleBinding.Subject;
+import run.halo.app.core.extension.User;
+import run.halo.app.event.user.PasswordChangedEvent;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.exception.ExtensionNotFoundException;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.infra.exception.AccessDeniedException;
+import run.halo.app.infra.exception.DuplicateNameException;
+import run.halo.app.infra.exception.UserNotFoundException;
+
+@ExtendWith(MockitoExtension.class)
+class UserServiceImplTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Mock
+    SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @Mock
+    PasswordEncoder passwordEncoder;
+
+    @Mock
+    ApplicationEventPublisher eventPublisher;
+
+    @Mock
+    RoleService roleService;
+
+    @InjectMocks
+    UserServiceImpl userService;
+
+    @Test
+    void shouldThrowExceptionIfUserNotFoundInExtension() {
+        when(client.get(eq(User.class), eq("faker"))).thenReturn(
+            Mono.error(new ExtensionNotFoundException(fromExtension(User.class), "faker")));
+        StepVerifier.create(userService.getUser("faker"))
+            .verifyError(UserNotFoundException.class);
+
+        verify(client, times(1)).get(eq(User.class), eq("faker"));
+    }
+
+    @Test
+    void shouldGetUserIfUserFoundInExtension() {
+        User fakeUser = new User();
+        when(client.get(User.class, "faker")).thenReturn(Mono.just(fakeUser));
+
+        StepVerifier.create(userService.getUser("faker"))
+            .assertNext(user -> assertEquals(fakeUser, user))
+            .verifyComplete();
+
+        verify(client, times(1)).get(eq(User.class), eq("faker"));
+    }
+
+    @Test
+    void shouldUpdatePasswordIfUserFoundInExtension() {
+        var fakeUser = new User();
+        fakeUser.setSpec(new User.UserSpec());
+
+        when(client.get(User.class, "faker")).thenReturn(Mono.just(fakeUser));
+        when(client.update(eq(fakeUser))).thenReturn(Mono.just(fakeUser));
+
+        StepVerifier.create(userService.updatePassword("faker", "new-fake-password"))
+            .expectNext(fakeUser)
+            .verifyComplete();
+
+        verify(client, times(1)).get(eq(User.class), eq("faker"));
+        verify(client, times(1)).update(argThat(extension -> {
+            var user = (User) extension;
+            return "new-fake-password".equals(user.getSpec().getPassword());
+        }));
+
+        verify(eventPublisher).publishEvent(any(PasswordChangedEvent.class));
+    }
+
+    @Nested
+    @DisplayName("UpdateWithRawPassword")
+    class UpdateWithRawPasswordTest {
+
+        @Test
+        void shouldUpdatePasswordWithDifferentPassword() {
+            var oldUser = createUser("fake-password");
+            var newUser = createUser("new-password");
+
+            when(client.get(User.class, "fake-user")).thenReturn(
+                Mono.just(oldUser));
+            when(client.update(eq(oldUser))).thenReturn(Mono.just(newUser));
+            when(passwordEncoder.matches("new-password", "fake-password")).thenReturn(false);
+            when(passwordEncoder.encode("new-password")).thenReturn("encoded-new-password");
+
+            StepVerifier.create(userService.updateWithRawPassword("fake-user", "new-password"))
+                .expectNext(newUser)
+                .verifyComplete();
+
+            verify(passwordEncoder).matches("new-password", "fake-password");
+            verify(passwordEncoder).encode("new-password");
+            verify(client).get(User.class, "fake-user");
+            verify(client).update(argThat(extension -> {
+                var user = (User) extension;
+                return "encoded-new-password".equals(user.getSpec().getPassword());
+            }));
+            verify(eventPublisher).publishEvent(any(PasswordChangedEvent.class));
+        }
+
+        @Test
+        void shouldUpdatePasswordIfNoPasswordBefore() {
+            var oldUser = createUser(null);
+            var newUser = createUser("new-password");
+
+            when(client.get(User.class, "fake-user")).thenReturn(Mono.just(oldUser));
+            when(client.update(oldUser)).thenReturn(Mono.just(newUser));
+            when(passwordEncoder.encode("new-password")).thenReturn("encoded-new-password");
+
+            StepVerifier.create(userService.updateWithRawPassword("fake-user", "new-password"))
+                .expectNext(newUser)
+                .verifyComplete();
+
+            verify(passwordEncoder, never()).matches("new-password", null);
+            verify(passwordEncoder).encode("new-password");
+            verify(client).update(argThat(extension -> {
+                var user = (User) extension;
+                return "encoded-new-password".equals(user.getSpec().getPassword());
+            }));
+            verify(client).get(User.class, "fake-user");
+            verify(eventPublisher).publishEvent(any(PasswordChangedEvent.class));
+        }
+
+        @Test
+        void shouldDoNothingIfPasswordNotChanged() {
+            userService = spy(userService);
+
+            var oldUser = createUser("fake-password");
+            var newUser = createUser("new-password");
+            when(client.get(User.class, "fake-user")).thenReturn(Mono.just(oldUser));
+            when(passwordEncoder.matches("fake-password", "fake-password")).thenReturn(true);
+
+            StepVerifier.create(userService.updateWithRawPassword("fake-user", "fake-password"))
+                .expectNextCount(0)
+                .verifyComplete();
+
+            verify(passwordEncoder, times(1)).matches("fake-password", "fake-password");
+            verify(passwordEncoder, never()).encode(any());
+            verify(client, never()).update(any());
+            verify(client).get(User.class, "fake-user");
+            verify(eventPublisher, times(0)).publishEvent(any(PasswordChangedEvent.class));
+        }
+
+        @Test
+        void shouldThrowExceptionIfUserNotFound() {
+            when(client.get(eq(User.class), eq("fake-user")))
+                .thenReturn(Mono.error(
+                    new ExtensionNotFoundException(fromExtension(User.class), "fake-user")));
+
+            StepVerifier.create(userService.updateWithRawPassword("fake-user", "new-password"))
+                .verifyError(UserNotFoundException.class);
+
+            verify(passwordEncoder, never()).matches(anyString(), anyString());
+            verify(passwordEncoder, never()).encode(anyString());
+            verify(client, never()).update(any());
+            verify(client).get(User.class, "fake-user");
+        }
+
+    }
+
+    User createUser(String password) {
+        var user = new User();
+        Metadata metadata = new Metadata();
+        metadata.setName("fake-user");
+        user.setMetadata(metadata);
+        user.setSpec(new User.UserSpec());
+        user.getSpec().setPassword(password);
+        return user;
+    }
+
+    @Nested
+    class GrantRolesTest {
+
+        @Test
+        void shouldGetNotFoundIfUserNotFound() {
+            when(client.get(User.class, "invalid-user"))
+                .thenReturn(Mono.error(
+                    new ExtensionNotFoundException(fromExtension(User.class), "invalid-user")));
+
+            var grantRolesMono = userService.grantRoles("invalid-user", Set.of("fake-role"));
+            StepVerifier.create(grantRolesMono)
+                .expectError(ExtensionNotFoundException.class)
+                .verify();
+
+            verify(client).get(User.class, "invalid-user");
+        }
+
+        @Test
+        void shouldCreateRoleBindingIfNotExist() {
+            var user = createUser("fake-password");
+            when(client.get(User.class, "fake-user"))
+                .thenReturn(Mono.just(user));
+            when(roleService.listRoleBindings(any(Subject.class))).thenReturn(Flux.empty());
+            when(client.create(isA(RoleBinding.class))).thenReturn(
+                Mono.just(mock(RoleBinding.class)));
+            when(client.update(user)).thenReturn(Mono.just(user));
+
+            var grantRolesMono = userService.grantRoles("fake-user", Set.of("fake-role"));
+            StepVerifier.create(grantRolesMono)
+                .expectNextCount(1)
+                .verifyComplete();
+
+            verify(client).create(isA(RoleBinding.class));
+        }
+
+        @Test
+        void shouldDeleteRoleBindingIfNotProvided() {
+            var user = createUser("fake-password");
+            when(client.get(User.class, "fake-user")).thenReturn(Mono.just(user));
+            var notProvidedRoleBinding = RoleBinding.create("fake-user", "non-provided-fake-role");
+            var existingRoleBinding = RoleBinding.create("fake-user", "fake-role");
+            when(roleService.listRoleBindings(any(Subject.class)))
+                .thenReturn(Flux.just(notProvidedRoleBinding, existingRoleBinding));
+            when(client.delete(isA(RoleBinding.class)))
+                .thenReturn(Mono.just(mock(RoleBinding.class)));
+            when(client.update(user)).thenReturn(Mono.just(user));
+
+            StepVerifier.create(userService.grantRoles("fake-user", Set.of("fake-role")))
+                .expectNextCount(1)
+                .verifyComplete();
+
+            verify(client).delete(notProvidedRoleBinding);
+        }
+
+        @Test
+        void shouldUpdateRoleBindingIfExists() {
+            var user = createUser("fake-password");
+            when(client.get(User.class, "fake-user")).thenReturn(Mono.just(user));
+            // add another subject
+            var anotherSubject = new Subject();
+            anotherSubject.setName("another-fake-user");
+            anotherSubject.setKind(User.KIND);
+            anotherSubject.setApiGroup(User.GROUP);
+            var notProvidedRoleBinding = RoleBinding.create("fake-user", "non-provided-fake-role");
+            notProvidedRoleBinding.getSubjects().add(anotherSubject);
+
+            var existingRoleBinding = RoleBinding.create("fake-user", "fake-role");
+
+            when(roleService.listRoleBindings(any(Subject.class)))
+                .thenReturn(Flux.just(notProvidedRoleBinding, existingRoleBinding));
+            when(client.update(isA(RoleBinding.class)))
+                .thenReturn(Mono.just(mock(RoleBinding.class)));
+            when(client.update(user)).thenReturn(Mono.just(user));
+
+            StepVerifier.create(userService.grantRoles("fake-user", Set.of("fake-role")))
+                .expectNextCount(1)
+                .verifyComplete();
+
+            verify(client).update(notProvidedRoleBinding);
+        }
+    }
+
+
+    @Nested
+    class SignUpTest {
+        @Test
+        void signUpWhenRegistrationNotAllowed() {
+            SystemSetting.User userSetting = new SystemSetting.User();
+            userSetting.setAllowRegistration(false);
+            when(environmentFetcher.fetch(eq(SystemSetting.User.GROUP),
+                eq(SystemSetting.User.class)))
+                .thenReturn(Mono.just(userSetting));
+
+            User fakeUser = fakeSignUpUser("fake-user", "fake-password");
+
+            userService.signUp(fakeUser, "fake-password")
+                .as(StepVerifier::create)
+                .expectError(AccessDeniedException.class)
+                .verify();
+        }
+
+        @Test
+        void signUpWhenRegistrationDefaultRoleNotConfigured() {
+            SystemSetting.User userSetting = new SystemSetting.User();
+            userSetting.setAllowRegistration(true);
+            when(environmentFetcher.fetch(eq(SystemSetting.User.GROUP),
+                eq(SystemSetting.User.class)))
+                .thenReturn(Mono.just(userSetting));
+
+            User fakeUser = fakeSignUpUser("fake-user", "fake-password");
+
+            userService.signUp(fakeUser, "fake-password")
+                .as(StepVerifier::create)
+                .expectError(AccessDeniedException.class)
+                .verify();
+        }
+
+        @Test
+        void signUpWhenRegistrationUsernameExists() {
+            SystemSetting.User userSetting = new SystemSetting.User();
+            userSetting.setAllowRegistration(true);
+            userSetting.setDefaultRole("fake-role");
+            when(environmentFetcher.fetch(eq(SystemSetting.User.GROUP),
+                eq(SystemSetting.User.class)))
+                .thenReturn(Mono.just(userSetting));
+            when(passwordEncoder.encode(eq("fake-password"))).thenReturn("fake-password");
+            when(client.fetch(eq(User.class), eq("fake-user")))
+                .thenReturn(Mono.just(fakeSignUpUser("test", "test")));
+
+            User fakeUser = fakeSignUpUser("fake-user", "fake-password");
+
+            userService.signUp(fakeUser, "fake-password")
+                .as(StepVerifier::create)
+                .expectError(DuplicateNameException.class)
+                .verify();
+        }
+
+        @Test
+        void signUpWhenRegistrationSuccessfully() {
+            SystemSetting.User userSetting = new SystemSetting.User();
+            userSetting.setAllowRegistration(true);
+            userSetting.setDefaultRole("fake-role");
+            when(environmentFetcher.fetch(eq(SystemSetting.User.GROUP),
+                eq(SystemSetting.User.class)))
+                .thenReturn(Mono.just(userSetting));
+            when(passwordEncoder.encode(eq("fake-password"))).thenReturn("fake-password");
+            when(client.fetch(eq(User.class), eq("fake-user")))
+                .thenReturn(Mono.empty());
+
+            User fakeUser = fakeSignUpUser("fake-user", "fake-password");
+
+            when(client.fetch(eq(Role.class), anyString())).thenReturn(Mono.just(new Role()));
+            when(client.create(any(User.class))).thenReturn(Mono.just(fakeUser));
+            UserServiceImpl spyUserService = spy(userService);
+            doReturn(Mono.just(fakeUser)).when(spyUserService).grantRoles(eq("fake-user"),
+                anySet());
+
+            spyUserService.signUp(fakeUser, "fake-password")
+                .as(StepVerifier::create)
+                .consumeNextWith(user -> {
+                    assertThat(user.getMetadata().getName()).isEqualTo("fake-user");
+                    assertThat(user.getSpec().getPassword()).isEqualTo("fake-password");
+                })
+                .verifyComplete();
+
+            verify(client).create(any(User.class));
+            verify(spyUserService).grantRoles(eq("fake-user"), anySet());
+        }
+
+        User fakeSignUpUser(String name, String password) {
+            User user = new User();
+            user.setMetadata(new Metadata());
+            user.getMetadata().setName(name);
+            user.setSpec(new User.UserSpec());
+            user.getSpec().setPassword(password);
+            return user;
+        }
+    }
+
+    @Test
+    void confirmPasswordWhenPasswordNotSet() {
+        var user = new User();
+        user.setSpec(new User.UserSpec());
+        when(client.get(User.class, "fake-user")).thenReturn(Mono.just(user));
+        userService.confirmPassword("fake-user", "fake-password")
+            .as(StepVerifier::create)
+            .expectNext(true)
+            .verifyComplete();
+
+        user.getSpec().setPassword("");
+        userService.confirmPassword("fake-user", "fake-password")
+            .as(StepVerifier::create)
+            .expectNext(true)
+            .verifyComplete();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/service/impl/EmailPasswordRecoveryServiceImplTest.java b/application/src/test/java/run/halo/app/core/extension/service/impl/EmailPasswordRecoveryServiceImplTest.java
new file mode 100644
index 0000000..1d95fce
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/service/impl/EmailPasswordRecoveryServiceImplTest.java
@@ -0,0 +1,83 @@
+package run.halo.app.core.extension.service.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.infra.exception.RateLimitExceededException;
+
+/**
+ * Tests for {@link EmailPasswordRecoveryServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.11.0
+ */
+@ExtendWith(MockitoExtension.class)
+class EmailPasswordRecoveryServiceImplTest {
+
+    @Nested
+    class ResetPasswordVerificationManagerTest {
+        @Test
+        public void generateTokenTest() {
+            var verificationManager =
+                new EmailPasswordRecoveryServiceImpl.ResetPasswordVerificationManager();
+            verificationManager.generateToken("fake-user");
+            var result = verificationManager.contains("fake-user");
+            assertThat(result).isTrue();
+
+            verificationManager.generateToken("guqing");
+            result = verificationManager.contains("guqing");
+            assertThat(result).isTrue();
+
+            result = verificationManager.contains("123");
+            assertThat(result).isFalse();
+        }
+    }
+
+    @Test
+    public void removeTest() {
+        var verificationManager =
+            new EmailPasswordRecoveryServiceImpl.ResetPasswordVerificationManager();
+        verificationManager.generateToken("fake-user");
+        var result = verificationManager.contains("fake-user");
+
+        verificationManager.removeToken("fake-user");
+        result = verificationManager.contains("fake-user");
+        assertThat(result).isFalse();
+    }
+
+    @Test
+    void verifyTokenTestNormal() {
+        String username = "guqing";
+        var verificationManager =
+            new EmailPasswordRecoveryServiceImpl.ResetPasswordVerificationManager();
+        var result = verificationManager.verifyToken(username, "fake-code");
+        assertThat(result).isFalse();
+
+        var token = verificationManager.generateToken(username);
+        result = verificationManager.verifyToken(username, "fake-code");
+        assertThat(result).isFalse();
+
+        result = verificationManager.verifyToken(username, token);
+        assertThat(result).isTrue();
+    }
+
+    @Test
+    void verifyTokenFailedAfterMaxAttempts() {
+        String username = "guqing";
+        var verificationManager =
+            new EmailPasswordRecoveryServiceImpl.ResetPasswordVerificationManager();
+        var token = verificationManager.generateToken(username);
+        for (int i = 0; i <= EmailPasswordRecoveryServiceImpl.MAX_ATTEMPTS; i++) {
+            var result = verificationManager.verifyToken(username, "fake-code");
+            assertThat(result).isFalse();
+        }
+
+        assertThatThrownBy(() -> verificationManager.verifyToken(username, token))
+            .isInstanceOf(RateLimitExceededException.class)
+            .hasMessage("429 TOO_MANY_REQUESTS \"You have exceeded your quota\"");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/service/impl/EmailVerificationServiceImplTest.java b/application/src/test/java/run/halo/app/core/extension/service/impl/EmailVerificationServiceImplTest.java
new file mode 100644
index 0000000..81a99bf
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/service/impl/EmailVerificationServiceImplTest.java
@@ -0,0 +1,86 @@
+package run.halo.app.core.extension.service.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static run.halo.app.core.extension.service.impl.EmailVerificationServiceImpl.MAX_ATTEMPTS;
+
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.infra.exception.EmailVerificationFailed;
+
+/**
+ * Tests for {@link EmailVerificationServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.11.0
+ */
+@ExtendWith(MockitoExtension.class)
+class EmailVerificationServiceImplTest {
+
+    @Nested
+    class EmailVerificationManagerTest {
+
+        @Test
+        public void generateCodeTest() {
+            var emailVerificationManager =
+                new EmailVerificationServiceImpl.EmailVerificationManager();
+            emailVerificationManager.generateCode("fake-user", "fake-email");
+            var result = emailVerificationManager.contains("fake-user", "fake-email");
+            assertThat(result).isTrue();
+
+            emailVerificationManager.generateCode("guqing", "hi@halo.run");
+            result = emailVerificationManager.contains("guqing", "hi@halo.run");
+            assertThat(result).isTrue();
+
+            result = emailVerificationManager.contains("123", "123");
+            assertThat(result).isFalse();
+        }
+
+        @Test
+        public void removeTest() {
+            var emailVerificationManager =
+                new EmailVerificationServiceImpl.EmailVerificationManager();
+            emailVerificationManager.generateCode("fake-user", "fake-email");
+            var result = emailVerificationManager.contains("fake-user", "fake-email");
+            emailVerificationManager.removeCode("fake-user", "fake-email");
+            result = emailVerificationManager.contains("fake-user", "fake-email");
+            assertThat(result).isFalse();
+        }
+
+        @Test
+        void verifyCodeTestNormal() {
+            String username = "guqing";
+            String email = "hi@halo.run";
+            var emailVerificationManager =
+                new EmailVerificationServiceImpl.EmailVerificationManager();
+            var result = emailVerificationManager.verifyCode(username, email, "fake-code");
+            assertThat(result).isFalse();
+
+            var code = emailVerificationManager.generateCode(username, email);
+            result = emailVerificationManager.verifyCode(username, email, "fake-code");
+            assertThat(result).isFalse();
+
+            result = emailVerificationManager.verifyCode(username, email, code);
+            assertThat(result).isTrue();
+        }
+
+        @Test
+        void verifyCodeFailedAfterMaxAttempts() {
+            String username = "guqing";
+            String email = "example@example.com";
+            var emailVerificationManager =
+                new EmailVerificationServiceImpl.EmailVerificationManager();
+            var code = emailVerificationManager.generateCode(username, email);
+            for (int i = 0; i <= MAX_ATTEMPTS; i++) {
+                var result = emailVerificationManager.verifyCode(username, email, "fake-code");
+                assertThat(result).isFalse();
+            }
+
+            assertThatThrownBy(() -> emailVerificationManager.verifyCode(username, email, code))
+                .isInstanceOf(EmailVerificationFailed.class)
+                .hasMessage("400 BAD_REQUEST \"Too many attempts. Please try again later.\"");
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/service/impl/PluginServiceImplTest.java b/application/src/test/java/run/halo/app/core/extension/service/impl/PluginServiceImplTest.java
new file mode 100644
index 0000000..2e79ce0
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/service/impl/PluginServiceImplTest.java
@@ -0,0 +1,509 @@
+package run.halo.app.core.extension.service.impl;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static java.util.Objects.requireNonNull;
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertInstanceOf;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.core.io.buffer.DefaultDataBufferFactory.sharedInstance;
+
+import com.github.zafarkhaja.semver.Version;
+import com.google.common.hash.Hashing;
+import java.io.IOException;
+import java.net.URISyntaxException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.time.Clock;
+import java.time.Instant;
+import java.time.ZoneId;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.concurrent.ExecutionException;
+import java.util.concurrent.Executors;
+import java.util.concurrent.Future;
+import java.util.function.Consumer;
+import java.util.stream.IntStream;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.RepeatedTest;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Spy;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.pf4j.PluginDescriptor;
+import org.pf4j.PluginWrapper;
+import org.springframework.core.io.buffer.DataBuffer;
+import org.springframework.util.FileSystemUtils;
+import org.springframework.web.server.ServerWebInputException;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import reactor.test.publisher.PublisherProbe;
+import run.halo.app.core.extension.Plugin;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.SystemVersionSupplier;
+import run.halo.app.infra.exception.PluginAlreadyExistsException;
+import run.halo.app.infra.utils.FileUtils;
+import run.halo.app.plugin.PluginConst;
+import run.halo.app.plugin.PluginsRootGetter;
+import run.halo.app.plugin.SpringPluginManager;
+import run.halo.app.plugin.YamlPluginFinder;
+
+@ExtendWith(MockitoExtension.class)
+class PluginServiceImplTest {
+
+    @Mock
+    SystemVersionSupplier systemVersionSupplier;
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Mock
+    PluginsRootGetter pluginsRootGetter;
+
+    @Mock
+    SpringPluginManager pluginManager;
+
+    @Spy
+    @InjectMocks
+    PluginServiceImpl pluginService;
+
+    @Test
+    void getPresetsTest() {
+        var presets = pluginService.getPresets();
+        StepVerifier.create(presets)
+            .assertNext(plugin -> {
+                assertEquals("fake-plugin", plugin.getMetadata().getName());
+                assertEquals("0.0.2", plugin.getSpec().getVersion());
+                assertEquals(Plugin.Phase.PENDING, plugin.getStatus().getPhase());
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void getPresetIfNotFound() {
+        var plugin = pluginService.getPreset("not-found-plugin");
+        StepVerifier.create(plugin)
+            .verifyComplete();
+    }
+
+    @Test
+    void getPresetIfFound() {
+        var plugin = pluginService.getPreset("fake-plugin");
+        StepVerifier.create(plugin)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    @Nested
+    class InstallUpdateReloadTest {
+
+        Path fakePluginPath;
+
+        @TempDir
+        Path tempDirectory;
+
+        @BeforeEach
+        void setUp() throws URISyntaxException, IOException {
+            fakePluginPath = tempDirectory.resolve("plugin-0.0.2.jar");
+            var fakePluingUri = requireNonNull(
+                getClass().getClassLoader().getResource("plugin/plugin-0.0.2")).toURI();
+            FileUtils.jar(Paths.get(fakePluingUri), tempDirectory.resolve("plugin-0.0.2.jar"));
+
+            lenient().when(systemVersionSupplier.get()).thenReturn(Version.valueOf("0.0.0"));
+        }
+
+        @Test
+        void installWhenPluginExists() {
+            var existingPlugin = new YamlPluginFinder().find(fakePluginPath);
+            when(client.fetch(Plugin.class, "fake-plugin")).thenReturn(Mono.just(existingPlugin));
+            var plugin = pluginService.install(fakePluginPath);
+            StepVerifier.create(plugin)
+                .expectError(PluginAlreadyExistsException.class)
+                .verify();
+
+            verify(client).fetch(Plugin.class, "fake-plugin");
+            verify(systemVersionSupplier).get();
+        }
+
+        @Test
+        void installWhenPluginNotExist() {
+            when(pluginsRootGetter.get()).thenReturn(tempDirectory.resolve("plugins"));
+            when(client.fetch(Plugin.class, "fake-plugin")).thenReturn(Mono.empty());
+            var createdPlugin = mock(Plugin.class);
+            when(client.create(isA(Plugin.class))).thenReturn(Mono.just(createdPlugin));
+            var plugin = pluginService.install(fakePluginPath);
+            StepVerifier.create(plugin)
+                .expectNext(createdPlugin)
+                .verifyComplete();
+
+            verify(client).fetch(Plugin.class, "fake-plugin");
+            verify(systemVersionSupplier).get();
+            verify(client).create(isA(Plugin.class));
+        }
+
+        @Test
+        void upgradeWhenPluginNameMismatch() {
+            var plugin = pluginService.upgrade("non-fake-plugin", fakePluginPath);
+            StepVerifier.create(plugin)
+                .expectError(ServerWebInputException.class)
+                .verify();
+
+            verify(client, never()).fetch(Plugin.class, "fake-plugin");
+        }
+
+        @Test
+        void upgradeWhenPluginNotFound() {
+            when(client.fetch(Plugin.class, "fake-plugin")).thenReturn(Mono.empty());
+            var plugin = pluginService.upgrade("fake-plugin", fakePluginPath);
+            StepVerifier.create(plugin)
+                .expectError(ServerWebInputException.class)
+                .verify();
+
+            verify(client).fetch(Plugin.class, "fake-plugin");
+        }
+
+        @Test
+        void upgradeNormally() {
+            when(pluginsRootGetter.get()).thenReturn(tempDirectory.resolve("plugins"));
+
+            var oldFakePlugin = createPlugin("fake-plugin", plugin -> {
+                plugin.getSpec().setEnabled(true);
+                plugin.getSpec().setVersion("0.0.1");
+            });
+
+            when(client.fetch(Plugin.class, "fake-plugin"))
+                .thenReturn(Mono.just(oldFakePlugin))
+                .thenReturn(Mono.just(oldFakePlugin))
+                .thenReturn(Mono.empty());
+
+            when(client.update(oldFakePlugin)).thenReturn(Mono.just(oldFakePlugin));
+
+            var plugin = pluginService.upgrade("fake-plugin", fakePluginPath);
+
+            StepVerifier.create(plugin)
+                .expectNext(oldFakePlugin)
+                .verifyComplete();
+
+            verify(client).fetch(Plugin.class, "fake-plugin");
+            verify(client).update(oldFakePlugin);
+            assertTrue(oldFakePlugin.getSpec().getEnabled());
+            assertEquals("0.0.2", oldFakePlugin.getSpec().getVersion());
+            assertEquals(
+                tempDirectory.resolve("plugins").resolve("fake-plugin-0.0.2.jar").toString(),
+                oldFakePlugin.getMetadata().getAnnotations().get(PluginConst.PLUGIN_PATH));
+        }
+
+        @Test
+        void shouldNotReloadIfLoadLocationIsNotReady() {
+            var pluginName = "test-plugin";
+
+            var testPlugin = createPlugin(pluginName, plugin -> {
+            });
+
+            when(client.get(Plugin.class, pluginName)).thenReturn(Mono.just(testPlugin));
+
+            pluginService.reload(pluginName)
+                .as(StepVerifier::create)
+                .consumeErrorWith(t -> {
+                    assertInstanceOf(IllegalStateException.class, t);
+                    assertEquals("Load location of plugin has not been populated.",
+                        t.getMessage());
+                })
+                .verify();
+
+            verify(client).get(Plugin.class, pluginName);
+        }
+
+        @Test
+        void shouldReloadIfLoadLocationReady() {
+            var pluginName = "test-plugin";
+
+            var testPlugin = createPlugin(pluginName, plugin -> {
+                plugin.getStatus().setLoadLocation(fakePluginPath.toUri());
+            });
+
+            when(client.get(Plugin.class, pluginName)).thenReturn(Mono.just(testPlugin));
+            when(client.update(testPlugin)).thenReturn(Mono.just(testPlugin));
+
+            pluginService.reload(pluginName)
+                .as(StepVerifier::create)
+                .expectNext(testPlugin)
+                .verifyComplete();
+
+            assertEquals(fakePluginPath.toString(),
+                testPlugin.getMetadata().getAnnotations().get(PluginConst.PLUGIN_PATH));
+            verify(client).get(Plugin.class, pluginName);
+            verify(client).update(testPlugin);
+        }
+
+    }
+
+    @Test
+    void generateBundleVersionTest() {
+        var plugin1 = mock(PluginWrapper.class);
+        var plugin2 = mock(PluginWrapper.class);
+        var plugin3 = mock(PluginWrapper.class);
+        when(pluginManager.getStartedPlugins()).thenReturn(List.of(plugin1, plugin2, plugin3));
+
+        var descriptor1 = mock(PluginDescriptor.class);
+        var descriptor2 = mock(PluginDescriptor.class);
+        var descriptor3 = mock(PluginDescriptor.class);
+        when(plugin1.getDescriptor()).thenReturn(descriptor1);
+        when(plugin2.getDescriptor()).thenReturn(descriptor2);
+        when(plugin3.getDescriptor()).thenReturn(descriptor3);
+
+        when(plugin1.getPluginId()).thenReturn("fake-1");
+        when(plugin2.getPluginId()).thenReturn("fake-2");
+        when(plugin3.getPluginId()).thenReturn("fake-3");
+
+        when(descriptor1.getVersion()).thenReturn("1.0.0");
+        when(descriptor2.getVersion()).thenReturn("2.0.0");
+        when(descriptor3.getVersion()).thenReturn("3.0.0");
+
+        var str = "fake-1:1.0.0fake-2:2.0.0fake-3:3.0.0";
+        var result = Hashing.sha256().hashUnencodedChars(str).toString();
+        assertThat(result.length()).isEqualTo(64);
+
+        pluginService.generateBundleVersion()
+            .as(StepVerifier::create)
+            .consumeNextWith(version -> assertThat(version).isEqualTo(result))
+            .verifyComplete();
+
+        var plugin4 = mock(PluginWrapper.class);
+        var descriptor4 = mock(PluginDescriptor.class);
+        when(plugin4.getDescriptor()).thenReturn(descriptor4);
+        when(plugin4.getPluginId()).thenReturn("fake-4");
+        when(descriptor4.getVersion()).thenReturn("3.0.0");
+        var str2 = "fake-1:1.0.0fake-2:2.0.0fake-4:3.0.0";
+        var result2 = Hashing.sha256().hashUnencodedChars(str2).toString();
+        when(pluginManager.getStartedPlugins()).thenReturn(List.of(plugin1, plugin2, plugin4));
+        pluginService.generateBundleVersion()
+            .as(StepVerifier::create)
+            .consumeNextWith(version -> assertThat(version).isEqualTo(result2))
+            .verifyComplete();
+
+        assertThat(result).isNotEqualTo(result2);
+    }
+
+    @Test
+    void shouldGenerateRandomBundleVersionInDevelopment() {
+        var clock = Clock.fixed(Instant.now(), ZoneId.systemDefault());
+        pluginService.setClock(clock);
+        when(pluginManager.isDevelopment()).thenReturn(true);
+        pluginService.generateBundleVersion()
+            .as(StepVerifier::create)
+            .expectNext(String.valueOf(clock.instant().toEpochMilli()))
+            .verifyComplete();
+
+        verify(pluginManager, never()).getStartedPlugins();
+    }
+
+    @Nested
+    class PluginStateChangeTest {
+
+        @Test
+        void shouldEnablePluginIfPluginWasNotStarted() {
+            var plugin = createPlugin("fake-plugin", p -> {
+                p.getSpec().setEnabled(false);
+                p.statusNonNull().setPhase(Plugin.Phase.RESOLVED);
+            });
+
+            when(client.get(Plugin.class, "fake-plugin")).thenReturn(Mono.just(plugin))
+                .thenReturn(Mono.fromSupplier(() -> {
+                    plugin.statusNonNull().setPhase(Plugin.Phase.STARTED);
+                    return plugin;
+                }));
+            when(client.update(plugin)).thenReturn(Mono.just(plugin));
+
+            pluginService.changeState("fake-plugin", true, false)
+                .as(StepVerifier::create)
+                .expectNext(plugin)
+                .verifyComplete();
+
+            assertTrue(plugin.getSpec().getEnabled());
+        }
+
+        @Test
+        void shouldDisablePluginIfAlreadyStarted() {
+            var plugin = createPlugin("fake-plugin", p -> {
+                p.getSpec().setEnabled(true);
+                p.statusNonNull().setPhase(Plugin.Phase.STARTED);
+            });
+
+            when(client.get(Plugin.class, "fake-plugin")).thenReturn(Mono.just(plugin))
+                .thenReturn(Mono.fromSupplier(() -> {
+                    plugin.getStatus().setPhase(Plugin.Phase.STOPPED);
+                    return plugin;
+                }));
+            when(client.update(plugin)).thenReturn(Mono.just(plugin));
+
+            pluginService.changeState("fake-plugin", false, false)
+                .as(StepVerifier::create)
+                .expectNext(plugin)
+                .verifyComplete();
+            assertFalse(plugin.getSpec().getEnabled());
+        }
+    }
+
+    @Nested
+    class BundleCacheTest {
+
+        PluginServiceImpl.BundleCache cache;
+
+        @TempDir
+        Path tempDir;
+
+        @BeforeEach
+        void setUp() {
+            pluginService.setTempDir(tempDir);
+            cache = pluginService.new BundleCache(".js");
+        }
+
+        @Test
+        void shouldComputeBundleFileIfAbsent() {
+            doReturn(Mono.just("different-version")).when(pluginService).generateBundleVersion();
+            var fakeContent = Mono.just(sharedInstance.wrap("fake-content".getBytes(
+                UTF_8)));
+            cache.computeIfAbsent("fake-version", fakeContent)
+                .as(StepVerifier::create)
+                .assertNext(resource -> {
+                    try {
+                        assertEquals(tempDir.resolve("different-version.js"),
+                            resource.getFile().toPath());
+                        assertEquals("different-version.js", resource.getFilename());
+                        assertEquals("fake-content", resource.getContentAsString(UTF_8));
+                    } catch (IOException e) {
+                        throw new RuntimeException(e);
+                    }
+                })
+                .verifyComplete();
+
+            try {
+                FileSystemUtils.deleteRecursively(tempDir);
+            } catch (IOException e) {
+                throw new RuntimeException(e);
+            }
+            cache.computeIfAbsent("fake-version", fakeContent)
+                .as(StepVerifier::create)
+                .assertNext(resource -> {
+                    try {
+                        assertThat(Files.exists(tempDir)).isTrue();
+                        assertEquals(tempDir.resolve("different-version.js"),
+                            resource.getFile().toPath());
+                    } catch (IOException e) {
+                        throw new RuntimeException(e);
+                    }
+                })
+                .verifyComplete();
+        }
+
+        @Test
+        void shouldNotComputeBundleFileIfPresentAndVersionIsMatch() {
+            shouldComputeBundleFileIfAbsent();
+
+            var fakeContent = Mono.just(
+                sharedInstance.wrap("another-fake-content".getBytes(UTF_8)));
+
+            cache.computeIfAbsent("different-version", fakeContent)
+                .as(StepVerifier::create)
+                .assertNext(resource -> {
+                    try {
+                        assertEquals("different-version.js", resource.getFilename());
+                        // The content won't be changed if the version is matched.
+                        assertEquals("fake-content", resource.getContentAsString(UTF_8));
+                    } catch (IOException e) {
+                        throw new RuntimeException(e);
+                    }
+                })
+                .verifyComplete();
+        }
+
+        @Test
+        void shouldComputeBundleFileIfPresentButVersionMismatch() {
+            shouldComputeBundleFileIfAbsent();
+
+            var fakeContent = Mono.just(
+                sharedInstance.wrap("another-fake-content".getBytes(UTF_8)));
+
+            doReturn(Mono.just("updated-version")).when(pluginService).generateBundleVersion();
+
+            cache.computeIfAbsent("mismatch-version", fakeContent)
+                .as(StepVerifier::create)
+                .assertNext(resource -> {
+                    try {
+                        assertTrue(Files.notExists(tempDir.resolve("different-version.js")));
+                        assertEquals("updated-version.js", resource.getFilename());
+                        assertEquals("another-fake-content", resource.getContentAsString(UTF_8));
+                    } catch (IOException e) {
+                        throw new RuntimeException(e);
+                    }
+                })
+                .verifyComplete();
+        }
+
+        @RepeatedTest(10)
+        void concurrentComputeBundleFileIfAbsent() {
+            lenient().doReturn(Mono.just("different-version"))
+                .when(pluginService)
+                .generateBundleVersion();
+
+            var executorService = Executors.newCachedThreadPool();
+
+            var probes = new ArrayList>();
+            List> futures = IntStream.range(0, 10)
+                .mapToObj(i -> {
+                    var fakeContent = Mono.just(sharedInstance.wrap(
+                        ("fake-content-" + i).getBytes(UTF_8)
+                    ));
+                    var probe = PublisherProbe.of(fakeContent);
+                    probes.add(probe);
+                    return executorService.submit(
+                        () -> {
+                            cache.computeIfAbsent("fake-version", probe.mono())
+                                .as(StepVerifier::create)
+                                .expectNextCount(1)
+                                .verifyComplete();
+                        });
+                })
+                .toList();
+            executorService.shutdown();
+            futures.forEach(future -> {
+                try {
+                    future.get();
+                } catch (InterruptedException | ExecutionException e) {
+                    throw new RuntimeException(e);
+                }
+            });
+
+            // ensure only one probe was subscribed
+            var subscribedCount = probes.stream()
+                .filter(PublisherProbe::wasSubscribed)
+                .count();
+            assertEquals(1, subscribedCount);
+        }
+    }
+
+    Plugin createPlugin(String name, Consumer pluginConsumer) {
+        var plugin = new Plugin();
+        plugin.setMetadata(new Metadata());
+        plugin.getMetadata().setName(name);
+        plugin.setSpec(new Plugin.PluginSpec());
+        plugin.setStatus(new Plugin.PluginStatus());
+        pluginConsumer.accept(plugin);
+        return plugin;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/core/extension/theme/SettingUtilsTest.java b/application/src/test/java/run/halo/app/core/extension/theme/SettingUtilsTest.java
new file mode 100644
index 0000000..bbed171
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/theme/SettingUtilsTest.java
@@ -0,0 +1,137 @@
+package run.halo.app.core.extension.theme;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.Map;
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import run.halo.app.core.extension.Setting;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link SettingUtils}.
+ *
+ * @author guqing
+ * @since 2.0.1
+ */
+class SettingUtilsTest {
+
+    @Test
+    void settingDefinedDefaultValueMap() throws JSONException {
+        Setting setting = getFakeSetting();
+        var map = SettingUtils.settingDefinedDefaultValueMap(setting);
+        JSONAssert.assertEquals("""
+                {
+                    "sns": "{\\"email\\":\\"example@exmple.com\\"}"
+                }
+                """,
+            JsonUtils.objectToJson(map),
+            true);
+    }
+
+    @Test
+    void mergePatch() throws JSONException {
+        Map defaultValue =
+            Map.of("comment", "{\"enable\":true,\"requireReviewForNew\":true}",
+                "basic", "{\"title\":\"guqing's blog\"}",
+                "authProvider", "{\"github\":{\"clientId\":\"fake-client-id\"}}");
+        Map modified = Map.of("comment",
+            "{\"enable\":true,\"requireReviewForNew\":true,\"systemUserOnly\":false}",
+            "basic", "{\"title\":\"guqing's blog\", \"subtitle\": \"fake-sub-title\"}");
+
+        Map result = SettingUtils.mergePatch(modified, defaultValue);
+        Map excepted = Map.of("comment",
+            "{\"enable\":true,\"requireReviewForNew\":true,\"systemUserOnly\":false}",
+            "basic", "{\"title\":\"guqing's blog\",\"subtitle\":\"fake-sub-title\"}",
+            "authProvider", "{\"github\":{\"clientId\":\"fake-client-id\"}}");
+        JSONAssert.assertEquals(JsonUtils.objectToJson(excepted), JsonUtils.objectToJson(result),
+            true);
+    }
+
+    @Test
+    void mergePatchWithMoreType() throws JSONException {
+        Map defaultValue = Map.of(
+            "array", "[1,2,3]",
+            "number", "1",
+            "boolean", "false",
+            "string", "new-default-string-value",
+            "object", "{\"name\":\"guqing\"}"
+        );
+        Map modified = Map.of(
+            "stringArray", "[\"hello\", \"world\"]",
+            "boolean", "true",
+            "string", "hello",
+            "object", "{\"name\":\"guqing\", \"age\": 18}"
+        );
+        Map result = SettingUtils.mergePatch(modified, defaultValue);
+        Map excepted = Map.of(
+            "array", "[1,2,3]",
+            "number", "1",
+            "boolean", "true",
+            "string", "hello",
+            "object", "{\"name\":\"guqing\",\"age\":18}",
+            "stringArray", "[\"hello\",\"world\"]"
+        );
+        JSONAssert.assertEquals(JsonUtils.objectToJson(excepted), JsonUtils.objectToJson(result),
+            true);
+    }
+
+    @Test
+    void isJson() {
+        assertThat(SettingUtils.isJson("[1,2,3]")).isTrue();
+        assertThat(SettingUtils.isJson("[\"hello\"]")).isTrue();
+        assertThat(SettingUtils.isJson("{\"name\":\"guqing\",\"age\":18}")).isTrue();
+        assertThat(SettingUtils.isJson("{ \"flag\":true }")).isTrue();
+        assertThat(SettingUtils.isJson("""
+            [
+                { "K1": "value-1", "K2":"value1-2" }
+            ]
+            """)).isTrue();
+        assertThat(SettingUtils.isJson("""
+            {
+                "sites": [{ "name":"halo" , "url":"halo.run" }]
+            }
+            """)).isTrue();
+        assertThat(SettingUtils.isJson("{\"name\":\"guqing\"")).isFalse();
+        assertThat(SettingUtils.isJson("hello")).isFalse();
+    }
+
+    private static Setting getFakeSetting() {
+        String settingJson = """
+            {
+                "apiVersion": "v1alpha1",
+                "kind": "Setting",
+                "metadata": {
+                    "name": "theme-default-setting"
+                },
+                "spec": {
+                    "forms": [{
+                        "formSchema": [
+                            {
+                                "$el": "h1",
+                                "children": "Register"
+                            },
+                            {
+                                "$formkit": "text",
+                                "label": "Email",
+                                "name": "email",
+                                "value": "example@exmple.com"
+                            },
+                            {
+                                "$formkit": "password",
+                                "label": "Password",
+                                "name": "password",
+                                "validation": "required|length:5,16",
+                                "value": null
+                            }
+                        ],
+                        "group": "sns",
+                        "label": "社交资料"
+                    }]
+                }
+            }
+            """;
+        return JsonUtils.jsonToObject(settingJson, Setting.class);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/theme/ThemeEndpointTest.java b/application/src/test/java/run/halo/app/core/extension/theme/ThemeEndpointTest.java
new file mode 100644
index 0000000..4fc3194
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/theme/ThemeEndpointTest.java
@@ -0,0 +1,363 @@
+package run.halo.app.core.extension.theme;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.web.reactive.function.BodyInserters.fromMultipartData;
+
+import java.io.File;
+import java.io.IOException;
+import java.net.URI;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.reactivestreams.Publisher;
+import org.springframework.core.io.FileSystemResource;
+import org.springframework.http.MediaType;
+import org.springframework.http.client.MultipartBodyBuilder;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.util.FileSystemUtils;
+import org.springframework.util.ResourceUtils;
+import org.springframework.web.server.ServerWebInputException;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.Setting;
+import run.halo.app.core.extension.Theme;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.ReactiveUrlDataBufferFetcher;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.infra.ThemeRootGetter;
+import run.halo.app.theme.TemplateEngineManager;
+
+/**
+ * Tests for {@link ThemeEndpoint}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ThemeEndpointTest {
+
+    @Mock
+    ThemeRootGetter themeRoot;
+
+    @Mock
+    ThemeService themeService;
+
+    @Mock
+    TemplateEngineManager templateEngineManager;
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @Mock
+    private ReactiveUrlDataBufferFetcher urlDataBufferFetcher;
+
+    @InjectMocks
+    ThemeEndpoint themeEndpoint;
+
+    private Path tmpHaloWorkDir;
+
+    WebTestClient webTestClient;
+
+    private File defaultTheme;
+
+    @BeforeEach
+    void setUp() throws IOException {
+        tmpHaloWorkDir = Files.createTempDirectory("halo-theme-endpoint-test");
+        lenient().when(themeRoot.get()).thenReturn(tmpHaloWorkDir);
+        defaultTheme = ResourceUtils.getFile("classpath:themes/test-theme.zip");
+        webTestClient = WebTestClient
+            .bindToRouterFunction(themeEndpoint.endpoint())
+            .build();
+    }
+
+    @AfterEach
+    void tearDown() throws IOException {
+        FileSystemUtils.deleteRecursively(tmpHaloWorkDir);
+    }
+
+    @Nested
+    class UpgradeTest {
+
+        @Test
+        void shouldNotOkIfThemeNotInstalled() {
+            var bodyBuilder = new MultipartBodyBuilder();
+            bodyBuilder.part("file", new FileSystemResource(defaultTheme))
+                .contentType(MediaType.MULTIPART_FORM_DATA);
+
+            when(themeService.upgrade(eq("invalid-missing-manifest"), isA(Publisher.class)))
+                .thenReturn(
+                    Mono.error(() -> new ServerWebInputException("Failed to upgrade theme")));
+
+            webTestClient.post()
+                .uri("/themes/invalid-missing-manifest/upgrade")
+                .body(fromMultipartData(bodyBuilder.build()))
+                .exchange()
+                .expectStatus().isBadRequest();
+
+            verify(themeService).upgrade(eq("invalid-missing-manifest"), isA(Publisher.class));
+        }
+
+        @Test
+        void shouldUpgradeSuccessfullyIfThemeInstalled() {
+            var bodyBuilder = new MultipartBodyBuilder();
+            bodyBuilder.part("file", new FileSystemResource(defaultTheme))
+                .contentType(MediaType.MULTIPART_FORM_DATA);
+
+            var metadata = new Metadata();
+            metadata.setName("default");
+            var newTheme = new Theme();
+            newTheme.setMetadata(metadata);
+
+            when(themeService.upgrade(eq("default"), isA(Publisher.class)))
+                .thenReturn(Mono.just(newTheme));
+
+            when(templateEngineManager.clearCache(eq("default")))
+                .thenReturn(Mono.empty());
+
+            webTestClient.post()
+                .uri("/themes/default/upgrade")
+                .body(fromMultipartData(bodyBuilder.build()))
+                .exchange()
+                .expectStatus().isOk();
+
+            verify(themeService).upgrade(eq("default"), isA(Publisher.class));
+
+            verify(templateEngineManager, times(1)).clearCache(eq("default"));
+        }
+
+        @Test
+        void upgradeFromUri() {
+            var uri = URI.create("https://example.com/test-theme.zip");
+            var metadata = new Metadata();
+            metadata.setName("default");
+            var fakeTheme = new Theme();
+            fakeTheme.setMetadata(metadata);
+            when(themeService.upgrade(eq("default"), any()))
+                .thenReturn(Mono.just(fakeTheme));
+            when(templateEngineManager.clearCache(eq("default")))
+                .thenReturn(Mono.empty());
+            var body = new ThemeEndpoint.UpgradeFromUriRequest(uri);
+            webTestClient.post()
+                .uri("/themes/default/upgrade-from-uri")
+                .bodyValue(body)
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(Theme.class).isEqualTo(fakeTheme);
+
+            verify(themeService).upgrade(eq("default"), any());
+
+            verify(templateEngineManager, times(1)).clearCache(eq("default"));
+        }
+    }
+
+    @Test
+    void install() {
+        var multipartBodyBuilder = new MultipartBodyBuilder();
+        multipartBodyBuilder.part("file", new FileSystemResource(defaultTheme))
+            .contentType(MediaType.MULTIPART_FORM_DATA);
+
+        var installedTheme = new Theme();
+        var metadata = new Metadata();
+        metadata.setName("fake-name");
+        installedTheme.setMetadata(metadata);
+        when(themeService.install(any())).thenReturn(Mono.just(installedTheme));
+
+        webTestClient.post()
+            .uri("/themes/install")
+            .body(fromMultipartData(multipartBodyBuilder.build()))
+            .exchange()
+            .expectStatus().isOk()
+            .expectBody(Theme.class)
+            .isEqualTo(installedTheme);
+
+        verify(themeService).install(any());
+
+
+        when(themeService.install(any())).thenReturn(
+            Mono.error(new RuntimeException("Fake exception")));
+        // Verify the theme is installed.
+        webTestClient.post()
+            .uri("/themes/install")
+            .body(fromMultipartData(multipartBodyBuilder.build()))
+            .exchange()
+            .expectStatus().is5xxServerError();
+    }
+
+    @Test
+    void installFromUri() {
+        final URI uri = URI.create("https://example.com/test-theme.zip");
+        var metadata = new Metadata();
+        metadata.setName("fake-theme");
+        var theme = new Theme();
+        theme.setMetadata(metadata);
+
+        when(themeService.install(any())).thenReturn(Mono.just(theme));
+        var body = new ThemeEndpoint.UpgradeFromUriRequest(uri);
+        webTestClient.post()
+            .uri("/themes/-/install-from-uri")
+            .bodyValue(body)
+            .exchange()
+            .expectStatus().isOk()
+            .expectBody(Theme.class).isEqualTo(theme);
+
+        verify(themeService).install(any());
+    }
+
+    @Test
+    void reloadTheme() {
+        when(themeService.reloadTheme(any())).thenReturn(Mono.empty());
+        webTestClient.put()
+            .uri("/themes/fake/reload")
+            .exchange()
+            .expectStatus().isOk();
+    }
+
+    @Test
+    void resetSettingConfig() {
+        when(themeService.resetSettingConfig(any())).thenReturn(Mono.empty());
+        webTestClient.put()
+            .uri("/themes/fake/reset-config")
+            .exchange()
+            .expectStatus().isOk();
+    }
+
+    @Nested
+    class UpdateThemeConfigTest {
+
+        @Test
+        void updateWhenConfigMapNameIsNull() {
+            Theme theme = new Theme();
+            theme.setMetadata(new Metadata());
+            theme.setSpec(new Theme.ThemeSpec());
+            theme.getSpec().setConfigMapName(null);
+
+            when(client.fetch(eq(Theme.class), eq("fake-theme"))).thenReturn(Mono.just(theme));
+            webTestClient.put()
+                .uri("/themes/fake-theme/config")
+                .exchange()
+                .expectStatus().isBadRequest();
+        }
+
+        @Test
+        void updateWhenConfigMapNameNotMatch() {
+            Theme theme = new Theme();
+            theme.setMetadata(new Metadata());
+            theme.setSpec(new Theme.ThemeSpec());
+            theme.getSpec().setConfigMapName("fake-config-map");
+
+            when(client.fetch(eq(Theme.class), eq("fake-theme"))).thenReturn(Mono.just(theme));
+            webTestClient.put()
+                .uri("/themes/fake-theme/config")
+                .body(Mono.fromSupplier(() -> {
+                    ConfigMap configMap = new ConfigMap();
+                    configMap.setMetadata(new Metadata());
+                    configMap.getMetadata().setName("not-match");
+                    return configMap;
+                }), ConfigMap.class)
+                .exchange()
+                .expectStatus().isBadRequest();
+        }
+
+        @Test
+        void updateWhenConfigMapNameMatch() {
+            Theme theme = new Theme();
+            theme.setMetadata(new Metadata());
+            theme.setSpec(new Theme.ThemeSpec());
+            theme.getSpec().setConfigMapName("fake-config-map");
+
+            when(client.fetch(eq(Theme.class), eq("fake-theme"))).thenReturn(Mono.just(theme));
+            when(client.fetch(eq(ConfigMap.class), eq("fake-config-map"))).thenReturn(Mono.empty());
+            when(client.create(any(ConfigMap.class))).thenReturn(Mono.empty());
+
+            webTestClient.put()
+                .uri("/themes/fake-theme/config")
+                .body(Mono.fromSupplier(() -> {
+                    ConfigMap configMap = new ConfigMap();
+                    configMap.setMetadata(new Metadata());
+                    configMap.getMetadata().setName("fake-config-map");
+                    return configMap;
+                }), ConfigMap.class)
+                .exchange()
+                .expectStatus().isOk();
+        }
+    }
+
+
+    @Test
+    void fetchActivatedTheme() {
+        when(environmentFetcher.fetch(eq(SystemSetting.Theme.GROUP), eq(SystemSetting.Theme.class)))
+            .thenReturn(Mono.fromSupplier(() -> {
+                SystemSetting.Theme theme = new SystemSetting.Theme();
+                theme.setActive("fake-activated");
+                return theme;
+            }));
+
+        when(client.fetch(eq(Theme.class), eq("fake-activated"))).thenReturn(Mono.empty());
+        webTestClient.get()
+            .uri("/themes/-/activation")
+            .exchange()
+            .expectStatus().isOk();
+
+        verify(client).fetch(eq(Theme.class), eq("fake-activated"));
+    }
+
+    @Test
+    void fetchThemeSetting() {
+        Theme theme = new Theme();
+        theme.setMetadata(new Metadata());
+        theme.getMetadata().setName("fake");
+        theme.setSpec(new Theme.ThemeSpec());
+        theme.getSpec().setSettingName("fake-setting");
+
+        when(client.fetch(eq(Setting.class), eq("fake-setting")))
+            .thenReturn(Mono.just(new Setting()));
+
+        when(client.fetch(eq(Theme.class), eq("fake"))).thenReturn(Mono.just(theme));
+        webTestClient.get()
+            .uri("/themes/fake/setting")
+            .exchange()
+            .expectStatus().isOk();
+
+        verify(client).fetch(eq(Setting.class), eq("fake-setting"));
+        verify(client).fetch(eq(Theme.class), eq("fake"));
+    }
+
+    @Test
+    void fetchThemeConfig() {
+        Theme theme = new Theme();
+        theme.setMetadata(new Metadata());
+        theme.getMetadata().setName("fake");
+        theme.setSpec(new Theme.ThemeSpec());
+        theme.getSpec().setConfigMapName("fake-config");
+
+        when(client.fetch(eq(ConfigMap.class), eq("fake-config")))
+            .thenReturn(Mono.just(new ConfigMap()));
+
+        when(client.fetch(eq(Theme.class), eq("fake"))).thenReturn(Mono.just(theme));
+        webTestClient.get()
+            .uri("/themes/fake/config")
+            .exchange()
+            .expectStatus().isOk();
+
+        verify(client).fetch(eq(ConfigMap.class), eq("fake-config"));
+        verify(client).fetch(eq(Theme.class), eq("fake"));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/core/extension/theme/ThemeServiceImplTest.java b/application/src/test/java/run/halo/app/core/extension/theme/ThemeServiceImplTest.java
new file mode 100644
index 0000000..045b5f1
--- /dev/null
+++ b/application/src/test/java/run/halo/app/core/extension/theme/ThemeServiceImplTest.java
@@ -0,0 +1,463 @@
+package run.halo.app.core.extension.theme;
+
+import static java.nio.file.Files.createTempDirectory;
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.infra.utils.FileUtils.deleteRecursivelyAndSilently;
+import static run.halo.app.infra.utils.FileUtils.zip;
+
+import com.github.zafarkhaja.semver.Version;
+import java.io.IOException;
+import java.net.URISyntaxException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.List;
+import java.util.Map;
+import java.util.function.Consumer;
+import org.json.JSONException;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.mockito.stubbing.Answer;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.core.io.buffer.DataBuffer;
+import org.springframework.core.io.buffer.DataBufferUtils;
+import org.springframework.core.io.buffer.DefaultDataBufferFactory;
+import org.springframework.util.ResourceUtils;
+import org.springframework.util.StreamUtils;
+import org.springframework.web.server.ServerWebInputException;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.AnnotationSetting;
+import run.halo.app.core.extension.Setting;
+import run.halo.app.core.extension.Theme;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Unstructured;
+import run.halo.app.extension.exception.ExtensionException;
+import run.halo.app.infra.SystemVersionSupplier;
+import run.halo.app.infra.ThemeRootGetter;
+import run.halo.app.infra.exception.ThemeInstallationException;
+import run.halo.app.infra.utils.JsonUtils;
+
+@ExtendWith(MockitoExtension.class)
+class ThemeServiceImplTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Mock
+    ThemeRootGetter themeRoot;
+
+    @Mock
+    private SystemVersionSupplier systemVersionSupplier;
+
+    @InjectMocks
+    ThemeServiceImpl themeService;
+
+    Path tmpDir;
+
+    @BeforeEach
+    void setUp() throws IOException {
+        tmpDir = createTempDirectory("halo-theme-service-test-");
+        lenient().when(themeRoot.get()).thenReturn(tmpDir.resolve("themes"));
+        // init the folder
+        Files.createDirectory(themeRoot.get());
+
+        lenient().when(systemVersionSupplier.get()).thenReturn(Version.valueOf("0.0.0"));
+    }
+
+    @AfterEach
+    void cleanUp() {
+        deleteRecursivelyAndSilently(tmpDir);
+    }
+
+    Path prepareTheme(String themeFilename) throws IOException, URISyntaxException {
+        var defaultThemeUri = ResourceUtils.getURL("classpath:themes/" + themeFilename).toURI();
+        var defaultThemeZipPath = tmpDir.resolve("default.zip");
+        zip(Path.of(defaultThemeUri), defaultThemeZipPath);
+        return defaultThemeZipPath;
+    }
+
+    Theme createTheme() {
+        return createTheme(theme -> {
+        });
+    }
+
+    Theme createTheme(Consumer customizer) {
+        var metadata = new Metadata();
+        metadata.setName("default");
+
+        var spec = new Theme.ThemeSpec();
+        spec.setDisplayName("Default");
+
+        var theme = new Theme();
+        theme.setMetadata(metadata);
+        theme.setSpec(spec);
+        customizer.accept(theme);
+        return theme;
+    }
+
+    Unstructured convert(Theme theme) {
+        return Unstructured.OBJECT_MAPPER.convertValue(theme, Unstructured.class);
+    }
+
+    Flux content(Path path) {
+        return DataBufferUtils.read(
+            path,
+            DefaultDataBufferFactory.sharedInstance,
+            StreamUtils.BUFFER_SIZE);
+    }
+
+    @Nested
+    class UpgradeTest {
+
+        @Test
+        void shouldFailIfThemeNotInstalledBefore() throws IOException, URISyntaxException {
+            var themeZipPath = prepareTheme("other");
+            when(client.fetch(Theme.class, "default")).thenReturn(Mono.empty());
+            StepVerifier.create(themeService.upgrade("default", content(themeZipPath)))
+                .verifyError(ServerWebInputException.class);
+
+            verify(client).fetch(Theme.class, "default");
+        }
+
+        @Test
+        void shouldUpgradeSuccessfully() throws IOException, URISyntaxException {
+            var themeZipPath = prepareTheme("other");
+
+            var oldTheme = createTheme();
+            when(client.fetch(Theme.class, "default"))
+                // for old theme check
+                .thenReturn(Mono.just(oldTheme))
+                // for theme deletion
+                .thenReturn(Mono.just(oldTheme))
+                // for theme deleted check
+                .thenReturn(Mono.empty());
+
+            when(client.delete(oldTheme)).thenReturn(Mono.just(oldTheme));
+            when(client.create(isA(Unstructured.class))).thenReturn(
+                Mono.just(convert(createTheme(t -> t.getSpec().setDisplayName("New fake theme")))));
+
+            StepVerifier.create(themeService.upgrade("default", content(themeZipPath)))
+                .consumeNextWith(newTheme -> {
+                    assertEquals("default", newTheme.getMetadata().getName());
+                    assertEquals("New fake theme", newTheme.getSpec().getDisplayName());
+                })
+                .verifyComplete();
+
+            verify(client, times(3)).fetch(Theme.class, "default");
+            verify(client).delete(oldTheme);
+            verify(client).create(isA(Unstructured.class));
+        }
+    }
+
+    @Nested
+    class InstallTest {
+
+
+        @Test
+        void shouldInstallSuccessfully() throws IOException, URISyntaxException {
+            var defaultThemeZipPath = prepareTheme("default");
+            when(client.create(isA(Unstructured.class))).thenReturn(
+                Mono.just(convert(createTheme())));
+            StepVerifier.create(themeService.install(content(defaultThemeZipPath)))
+                .consumeNextWith(theme -> {
+                    assertEquals("default", theme.getMetadata().getName());
+                    assertEquals("Default", theme.getSpec().getDisplayName());
+                })
+                .verifyComplete();
+        }
+
+        @Test
+        void shouldFailWhenPersistentError() throws IOException, URISyntaxException {
+            var defaultThemeZipPath = prepareTheme("default");
+            when(client.create(isA(Unstructured.class))).thenReturn(
+                Mono.error(() -> new ExtensionException("Failed to create the extension")));
+            StepVerifier.create(themeService.install(content(defaultThemeZipPath)))
+                .verifyError(ExtensionException.class);
+        }
+
+        @Test
+        void shouldFailWhenThemeManifestIsInvalid() throws IOException, URISyntaxException {
+            var defaultThemeZipPath = prepareTheme("invalid-missing-manifest");
+            StepVerifier.create(themeService.install(content(defaultThemeZipPath)))
+                .verifyError(ThemeInstallationException.class);
+        }
+    }
+
+    @Test
+    void reloadThemeWhenSettingNameSetBeforeThenDeleteSetting() throws IOException {
+        Theme theme = new Theme();
+        theme.setMetadata(new Metadata());
+        theme.getMetadata().setName("fake-theme");
+        theme.setSpec(new Theme.ThemeSpec());
+        theme.getSpec().setDisplayName("Hello");
+        theme.getSpec().setSettingName("fake-setting");
+        when(client.fetch(Theme.class, "fake-theme"))
+            .thenReturn(Mono.just(theme));
+        when(client.delete(any(Setting.class))).thenReturn(Mono.empty());
+        Setting setting = new Setting();
+        setting.setMetadata(new Metadata());
+        setting.setSpec(new Setting.SettingSpec());
+        setting.getSpec().setForms(List.of());
+        when(client.fetch(Setting.class, "fake-setting"))
+            .thenReturn(Mono.just(setting));
+
+        Path themeWorkDir = themeRoot.get().resolve(theme.getMetadata().getName());
+        if (!Files.exists(themeWorkDir)) {
+            Files.createDirectories(themeWorkDir);
+        }
+        Files.writeString(themeWorkDir.resolve("settings.yaml"), """
+            apiVersion: v1alpha1
+            kind: Setting
+            metadata:
+              name: fake-setting
+            spec:
+              forms:
+                - group: sns
+                  label: 社交资料
+                  formSchema:
+                    - $el: h1
+                      children: Register
+            """);
+
+        Files.writeString(themeWorkDir.resolve("theme.yaml"), """
+            apiVersion: v1alpha1
+            kind: Theme
+            metadata:
+              name: fake-theme
+            spec:
+              displayName: Fake Theme
+            """);
+        when(client.update(any(Theme.class)))
+            .thenAnswer((Answer>) invocation -> {
+                Theme argument = invocation.getArgument(0);
+                return Mono.just(argument);
+            });
+
+        when(client.list(eq(AnnotationSetting.class), any(), eq(null))).thenReturn(Flux.empty());
+
+        themeService.reloadTheme("fake-theme")
+            .as(StepVerifier::create)
+            .consumeNextWith(themeUpdated -> {
+                try {
+                    JSONAssert.assertEquals("""
+                            {
+                                "spec": {
+                                    "displayName": "Fake Theme",
+                                    "version": "*",
+                                    "requires": "*"
+                                },
+                                "apiVersion": "theme.halo.run/v1alpha1",
+                                "kind": "Theme",
+                                "metadata": {
+                                    "name": "fake-theme"
+                                }
+                            }
+                            """,
+                        JsonUtils.objectToJson(themeUpdated),
+                        true);
+                } catch (JSONException e) {
+                    throw new RuntimeException(e);
+                }
+            })
+            .verifyComplete();
+        // delete fake-setting
+        verify(client, times(1)).delete(any(Setting.class));
+        // Will not be created
+        verify(client, times(0)).create(any(Setting.class));
+    }
+
+    @Test
+    void reloadThemeWhenSettingNameNotSetBefore() throws IOException {
+        Theme theme = new Theme();
+        theme.setMetadata(new Metadata());
+        theme.getMetadata().setName("fake-theme");
+        theme.setSpec(new Theme.ThemeSpec());
+        theme.getSpec().setDisplayName("Hello");
+        when(client.fetch(Theme.class, "fake-theme"))
+            .thenReturn(Mono.just(theme));
+        Setting setting = new Setting();
+        setting.setMetadata(new Metadata());
+        setting.setSpec(new Setting.SettingSpec());
+        setting.getSpec().setForms(List.of());
+
+        when(client.fetch(eq(Setting.class), eq(null))).thenReturn(Mono.empty());
+
+        Path themeWorkDir = themeRoot.get().resolve(theme.getMetadata().getName());
+        if (!Files.exists(themeWorkDir)) {
+            Files.createDirectories(themeWorkDir);
+        }
+        Files.writeString(themeWorkDir.resolve("settings.yaml"), """
+            apiVersion: v1alpha1
+            kind: Setting
+            metadata:
+              name: fake-setting
+            spec:
+              forms:
+                - group: sns
+                  label: 社交资料
+                  formSchema:
+                    - $el: h1
+                      children: Register
+            """);
+
+        Files.writeString(themeWorkDir.resolve("theme.yaml"), """
+            apiVersion: v1alpha1
+            kind: Theme
+            metadata:
+              name: fake-theme
+            spec:
+              displayName: Fake Theme
+              settingName: fake-setting
+            """);
+        when(client.update(any(Theme.class)))
+            .thenAnswer((Answer>) invocation -> {
+                Theme argument = invocation.getArgument(0);
+                return Mono.just(argument);
+            });
+
+        when(client.create(any(Unstructured.class)))
+            .thenAnswer((Answer>) invocation -> {
+                Unstructured argument = invocation.getArgument(0);
+                JSONAssert.assertEquals("""
+                        {
+                           "spec": {
+                             "forms": [
+                               {
+                                 "group": "sns",
+                                 "label": "社交资料",
+                                 "formSchema": [
+                                   {
+                                     "$el": "h1",
+                                     "children": "Register"
+                                   }
+                                 ]
+                               }
+                             ]
+                           },
+                           "apiVersion": "v1alpha1",
+                           "kind": "Setting",
+                           "metadata": {
+                              "name": "fake-setting",
+                              "labels": {
+                                  "theme.halo.run/theme-name": "fake-theme"
+                              }
+                            }
+                         }
+                        """,
+                    JsonUtils.objectToJson(argument),
+                    true);
+                return Mono.just(invocation.getArgument(0));
+            });
+
+        when(client.list(eq(AnnotationSetting.class), any(), eq(null))).thenReturn(Flux.empty());
+
+        themeService.reloadTheme("fake-theme")
+            .as(StepVerifier::create)
+            .consumeNextWith(themeUpdated -> {
+                try {
+                    JSONAssert.assertEquals("""
+                            {
+                                "spec": {
+                                    "settingName": "fake-setting",
+                                    "displayName": "Fake Theme",
+                                    "version": "*",
+                                    "requires": "*"
+                                },
+                                "apiVersion": "theme.halo.run/v1alpha1",
+                                "kind": "Theme",
+                                "metadata": {
+                                    "name": "fake-theme"
+                                }
+                            }
+                            """,
+                        JsonUtils.objectToJson(themeUpdated),
+                        true);
+                } catch (JSONException e) {
+                    throw new RuntimeException(e);
+                }
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void resetSettingConfig() {
+        Theme theme = new Theme();
+        theme.setMetadata(new Metadata());
+        theme.getMetadata().setName("fake-theme");
+        theme.setSpec(new Theme.ThemeSpec());
+        theme.getSpec().setSettingName("fake-setting");
+        theme.getSpec().setConfigMapName("fake-config");
+        theme.getSpec().setDisplayName("Hello");
+        when(client.fetch(Theme.class, "fake-theme"))
+            .thenReturn(Mono.just(theme));
+
+        Setting setting = new Setting();
+        setting.setMetadata(new Metadata());
+        setting.getMetadata().setName("fake-setting");
+        setting.setSpec(new Setting.SettingSpec());
+        var formSchemaItem = Map.of("name", "email", "value", "example@exmple.com");
+        Setting.SettingForm settingForm = new Setting.SettingForm();
+        settingForm.setGroup("basic");
+        settingForm.setFormSchema(List.of(formSchemaItem));
+        setting.getSpec().setForms(List.of(settingForm));
+        when(client.fetch(eq(Setting.class), eq("fake-setting")))
+            .thenReturn(Mono.just(setting));
+
+        ConfigMap configMap = new ConfigMap();
+        configMap.setMetadata(new Metadata());
+        configMap.getMetadata().setName("fake-config");
+        when(client.fetch(eq(ConfigMap.class), eq("fake-config")))
+            .thenReturn(Mono.just(configMap));
+
+        when(client.update(any(ConfigMap.class)))
+            .thenAnswer((Answer>) invocation -> {
+                ConfigMap argument = invocation.getArgument(0);
+                JSONAssert.assertEquals("""
+                        {
+                            "data": {
+                                "basic": "{\\"email\\":\\"example@exmple.com\\"}"
+                            },
+                            "apiVersion": "v1alpha1",
+                            "kind": "ConfigMap",
+                            "metadata": {
+                                "name": "fake-config"
+                            }
+                        }
+                        """,
+                    JsonUtils.objectToJson(argument),
+                    true);
+                return Mono.just(invocation.getArgument(0));
+            });
+
+        themeService.resetSettingConfig("fake-theme")
+            .as(StepVerifier::create)
+            .consumeNextWith(next -> {
+                assertThat(next).isNotNull();
+            })
+            .verifyComplete();
+
+        verify(client, times(1))
+            .fetch(eq(Setting.class), eq(setting.getMetadata().getName()));
+
+        verify(client, times(1)).fetch(eq(ConfigMap.class), eq("fake-config"));
+
+        verify(client, times(1)).update(any(ConfigMap.class));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/AbstractExtensionTest.java b/application/src/test/java/run/halo/app/extension/AbstractExtensionTest.java
new file mode 100644
index 0000000..6d42d2e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/AbstractExtensionTest.java
@@ -0,0 +1,52 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import org.junit.jupiter.api.Test;
+
+class AbstractExtensionTest {
+
+    @Test
+    void groupVersionKind() {
+        var extension = new AbstractExtension() {
+        };
+        extension.setApiVersion("fake.halo.run/v1alpha1");
+        extension.setKind("Fake");
+        var gvk = extension.groupVersionKind();
+
+        assertEquals(new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake"), gvk);
+    }
+
+    @Test
+    void testGroupVersionKind() {
+        var extension = new AbstractExtension() {
+        };
+        extension.groupVersionKind(new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake"));
+
+        assertEquals("fake.halo.run/v1alpha1", extension.getApiVersion());
+        assertEquals("Fake", extension.getKind());
+    }
+
+    @Test
+    void metadata() {
+        var extension = new AbstractExtension() {
+        };
+        Metadata metadata = new Metadata();
+        metadata.setName("fake");
+        extension.setMetadata(metadata);
+
+        assertEquals(metadata, extension.getMetadata());
+    }
+
+    @Test
+    void testMetadata() {
+        var extension = new AbstractExtension() {
+        };
+
+        Metadata metadata = new Metadata();
+        metadata.setName("fake");
+        extension.setMetadata(metadata);
+
+        assertEquals(metadata, extension.getMetadata());
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/ComparatorsTest.java b/application/src/test/java/run/halo/app/extension/ComparatorsTest.java
new file mode 100644
index 0000000..8265721
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/ComparatorsTest.java
@@ -0,0 +1,97 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import java.time.Instant;
+import java.util.ArrayList;
+import java.util.List;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+
+class ComparatorsTest {
+
+    @Nested
+    class CompareCreationTimestamp {
+
+        FakeExtension createFake(String name, Instant creationTimestamp) {
+            var metadata = new Metadata();
+            metadata.setName(name);
+            metadata.setCreationTimestamp(creationTimestamp);
+            var fake = new FakeExtension();
+            fake.setMetadata(metadata);
+            return fake;
+        }
+
+        @Test
+        void desc() {
+            var comparator = Comparators.compareCreationTimestamp(false);
+            var now = Instant.now();
+            var before = now.minusMillis(1);
+            var after = now.plusMillis(1);
+
+            var fakeNow = createFake("now", now);
+            var fakeBefore = createFake("before", before);
+            var fakeAfter = createFake("after", after);
+
+            var sortedFakes = new ArrayList<>(List.of(fakeNow, fakeAfter, fakeBefore));
+            sortedFakes.sort(comparator);
+
+            assertEquals(List.of(fakeAfter, fakeNow, fakeBefore), sortedFakes);
+        }
+
+        @Test
+        void asc() {
+            var comparator = Comparators.compareCreationTimestamp(true);
+            var now = Instant.now();
+            var before = now.minusMillis(1);
+            var after = now.plusMillis(1);
+
+            var fakeNow = createFake("now", now);
+            var fakeBefore = createFake("before", before);
+            var fakeAfter = createFake("after", after);
+
+            var sortedFakes = new ArrayList<>(List.of(fakeNow, fakeAfter, fakeBefore));
+            sortedFakes.sort(comparator);
+
+            assertEquals(List.of(fakeBefore, fakeNow, fakeAfter), sortedFakes);
+        }
+    }
+
+    @Nested
+    class CompareName {
+
+        FakeExtension createFake(String name) {
+            var metadata = new Metadata();
+            metadata.setName(name);
+            var fake = new FakeExtension();
+            fake.setMetadata(metadata);
+            return fake;
+        }
+
+        @Test
+        void desc() {
+            var comparator = Comparators.compareName(false);
+            var fake01 = createFake("fake01");
+            var fake02 = createFake("fake02");
+            var fake03 = createFake("fake03");
+
+            var sortedFakes = new ArrayList<>(List.of(fake02, fake01, fake03));
+            sortedFakes.sort(comparator);
+
+            assertEquals(List.of(fake03, fake02, fake01), sortedFakes);
+        }
+
+        @Test
+        void asc() {
+            var comparator = Comparators.compareName(true);
+            var fake01 = createFake("fake01");
+            var fake02 = createFake("fake02");
+            var fake03 = createFake("fake03");
+
+            var sortedFakes = new ArrayList<>(List.of(fake02, fake03, fake01));
+            sortedFakes.sort(comparator);
+
+            assertEquals(List.of(fake01, fake02, fake03), sortedFakes);
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/ConfigMapTest.java b/application/src/test/java/run/halo/app/extension/ConfigMapTest.java
new file mode 100644
index 0000000..2da4250
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/ConfigMapTest.java
@@ -0,0 +1,103 @@
+package run.halo.app.extension;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.doNothing;
+
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.security.util.InMemoryResource;
+import run.halo.app.infra.utils.YamlUnstructuredLoader;
+
+/**
+ * Tests for {@link ConfigMap}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ConfigMapTest {
+
+    @Mock
+    ExtensionClient extensionClient;
+
+    @Test
+    void configMapTest() {
+        ArgumentCaptor argumentCaptor = ArgumentCaptor.forClass(ConfigMap.class);
+        doNothing().when(extensionClient).create(argumentCaptor.capture());
+
+        ConfigMap configMap = new ConfigMap();
+        Metadata metadata = new Metadata();
+        metadata.setName("test-configmap");
+        configMap.setMetadata(metadata);
+        Map data = Map.of("k1", "v1", "k2", "v2", "k3", "v3");
+        configMap.setData(data);
+        extensionClient.create(configMap);
+
+        ConfigMap value = argumentCaptor.getValue();
+        assertThat(value).isNotNull();
+        assertThat(value.getData()).isEqualTo(data);
+    }
+
+    @Test
+    void putDataItem() {
+        ConfigMap configMap = new ConfigMap();
+        configMap.putDataItem("k1", "v1")
+            .putDataItem("k2", "v2")
+            .putDataItem("k3", "v3");
+
+        assertThat(configMap.getData()).isNotNull();
+        assertThat(configMap.getData()).hasSize(3);
+        assertThat(configMap.getData()).isEqualTo(
+            Map.of("k1", "v1", "k2", "v2", "k3", "v3"));
+    }
+
+    @Test
+    void equalsTest() {
+        ConfigMap configMapA = new ConfigMap();
+        Metadata metadataA = new Metadata();
+        metadataA.setName("test-configmap");
+        configMapA.setMetadata(metadataA);
+        configMapA.putDataItem("k1", "v1");
+
+        ConfigMap configMapB = new ConfigMap();
+        Metadata metadataB = new Metadata();
+        metadataB.setName("test-configmap");
+        configMapB.setMetadata(metadataB);
+        configMapB.putDataItem("k1", "v1");
+
+        assertThat(configMapA).isEqualTo(configMapB);
+
+        configMapB.getMetadata().setName("test-configmap-2");
+        assertThat(configMapA).isNotEqualTo(configMapB);
+    }
+
+    @Test
+    void yamlTest() {
+        String configMapYaml = """
+                apiVersion: v1alpha1
+                kind: ConfigMap
+                metadata:
+                  name: test-configmap
+                data:
+                  k1: v1
+                  k2: v2
+                  k3: v3
+            """;
+        List unstructureds =
+            new YamlUnstructuredLoader(new InMemoryResource(configMapYaml)).load();
+        assertThat(unstructureds).hasSize(1);
+        Unstructured unstructured = unstructureds.get(0);
+        ConfigMap configMap =
+            Unstructured.OBJECT_MAPPER.convertValue(unstructured, ConfigMap.class);
+
+        assertThat(configMap.getData()).isEqualTo(Map.of("k1", "v1", "k2", "v2", "k3", "v3"));
+        assertThat(configMap.getMetadata().getName()).isEqualTo("test-configmap");
+        assertThat(configMap.getApiVersion()).isEqualTo("v1alpha1");
+        assertThat(configMap.getKind()).isEqualTo("ConfigMap");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/DefaultSchemeManagerTest.java b/application/src/test/java/run/halo/app/extension/DefaultSchemeManagerTest.java
new file mode 100644
index 0000000..8b44ebc
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/DefaultSchemeManagerTest.java
@@ -0,0 +1,140 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.extension.SchemeWatcherManager.SchemeRegistered;
+import run.halo.app.extension.SchemeWatcherManager.SchemeUnregistered;
+import run.halo.app.extension.SchemeWatcherManager.SchemeWatcher;
+import run.halo.app.extension.exception.SchemeNotFoundException;
+import run.halo.app.extension.index.IndexSpecRegistry;
+
+@ExtendWith(MockitoExtension.class)
+class DefaultSchemeManagerTest {
+
+    @Mock
+    private IndexSpecRegistry indexSpecRegistry;
+
+    @Mock
+    SchemeWatcherManager watcherManager;
+
+    @InjectMocks
+    DefaultSchemeManager schemeManager;
+
+    @Test
+    void shouldThrowExceptionWhenNoGvkAnnotation() {
+        class WithoutGvkExtension extends AbstractExtension {
+        }
+
+        assertThrows(IllegalArgumentException.class,
+            () -> schemeManager.register(WithoutGvkExtension.class));
+    }
+
+    @Test
+    void shouldGetNothingWhenUnregistered() {
+        final var gvk = new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake");
+        var scheme = schemeManager.fetch(gvk);
+        assertFalse(scheme.isPresent());
+
+        assertThrows(SchemeNotFoundException.class, () -> schemeManager.get(gvk));
+        assertThrows(SchemeNotFoundException.class, () -> schemeManager.get(FakeExtension.class));
+        assertThrows(SchemeNotFoundException.class, () -> schemeManager.get(new FakeExtension()));
+    }
+
+    @Test
+    void shouldGetSchemeWhenRegistered() {
+        schemeManager.register(FakeExtension.class);
+        final var gvk = new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake");
+        var scheme = schemeManager.fetch(gvk);
+        assertTrue(scheme.isPresent());
+
+        assertEquals(gvk, schemeManager.get(gvk).groupVersionKind());
+        assertEquals(gvk, schemeManager.get(FakeExtension.class).groupVersionKind());
+        assertEquals(gvk, schemeManager.get(new FakeExtension()).groupVersionKind());
+    }
+
+    @Test
+    void shouldUnregisterSuccessfully() {
+        schemeManager.register(FakeExtension.class);
+        Scheme scheme = schemeManager.get(FakeExtension.class);
+        assertNotNull(scheme);
+
+        schemeManager.unregister(scheme);
+        assertThrows(SchemeNotFoundException.class, () -> schemeManager.get(FakeExtension.class));
+    }
+
+    @Test
+    void shouldTriggerOnChangeOnlyOnceWhenRegisterTwice() {
+        final var watcher = mock(SchemeWatcher.class);
+        when(watcherManager.watchers()).thenReturn(List.of(watcher));
+
+        schemeManager.register(FakeExtension.class);
+        verify(watcherManager, times(1)).watchers();
+        verify(watcher, times(1)).onChange(isA(SchemeRegistered.class));
+
+        schemeManager.register(FakeExtension.class);
+        verify(watcherManager, times(1)).watchers();
+        verify(watcher, times(1)).onChange(isA(SchemeRegistered.class));
+        verify(indexSpecRegistry).indexFor(any(Scheme.class));
+    }
+
+    @Test
+    void shouldTriggerOnChangeOnlyOnceWhenUnregisterTwice() {
+
+        final var watcher = mock(SchemeWatcher.class);
+        when(watcherManager.watchers()).thenReturn(List.of(watcher));
+
+        schemeManager.register(FakeExtension.class);
+
+        var scheme = schemeManager.get(FakeExtension.class);
+
+        schemeManager.unregister(scheme);
+        verify(watcherManager, times(2)).watchers();
+        verify(watcher, times(1)).onChange(isA(SchemeUnregistered.class));
+
+        schemeManager.unregister(scheme);
+        verify(watcherManager, times(2)).watchers();
+        verify(watcher, times(1)).onChange(isA(SchemeUnregistered.class));
+        verify(indexSpecRegistry).indexFor(any(Scheme.class));
+    }
+
+    @Test
+    void getSizeOfSchemes() {
+        assertEquals(0, schemeManager.size());
+        schemeManager.register(FakeExtension.class);
+        assertEquals(1, schemeManager.size());
+        schemeManager.unregister(schemeManager.get(FakeExtension.class));
+        assertEquals(0, schemeManager.size());
+    }
+
+    @Test
+    void shouldReturnCopyOnWriteList() {
+        schemeManager.register(FakeExtension.class);
+        var schemes = schemeManager.schemes();
+        schemes.forEach(scheme -> {
+            // make sure concurrent modification won't happen
+            schemeManager.register(FooExtension.class);
+        });
+    }
+
+    @GVK(group = "fake.halo.run", version = "v1alpha1", kind = "Foo",
+        plural = "foos", singular = "foo")
+    static class FooExtension extends AbstractExtension {
+    }
+}
+
diff --git a/application/src/test/java/run/halo/app/extension/DefaultSchemeWatcherManagerTest.java b/application/src/test/java/run/halo/app/extension/DefaultSchemeWatcherManagerTest.java
new file mode 100644
index 0000000..8e3ad08
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/DefaultSchemeWatcherManagerTest.java
@@ -0,0 +1,59 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.mockito.Mockito.mock;
+
+import java.util.Collections;
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.SchemeWatcherManager.SchemeWatcher;
+
+class DefaultSchemeWatcherManagerTest {
+
+    DefaultSchemeWatcherManager watcherManager;
+
+    @BeforeEach
+    void setUp() {
+        watcherManager = new DefaultSchemeWatcherManager();
+    }
+
+    @Test
+    void shouldThrowExceptionWhenRegisterNullWatcher() {
+        assertThrows(IllegalArgumentException.class, () -> watcherManager.register(null));
+    }
+
+    @Test
+    void shouldThrowExceptionWhenUnregisterNullWatcher() {
+        assertThrows(IllegalArgumentException.class, () -> watcherManager.unregister(null));
+    }
+
+    @Test
+    void shouldRegisterSuccessfully() {
+        var watcher = mock(SchemeWatcher.class);
+        watcherManager.register(watcher);
+
+        assertEquals(watcherManager.watchers(), List.of(watcher));
+    }
+
+    @Test
+    void shouldUnregisterSuccessfully() {
+        var watcher = mock(SchemeWatcher.class);
+        watcherManager.register(watcher);
+        assertEquals(List.of(watcher), watcherManager.watchers());
+
+        watcherManager.unregister(watcher);
+        assertEquals(Collections.emptyList(), watcherManager.watchers());
+    }
+
+    @Test
+    void shouldReturnCopyOfWatchers() {
+        var firstWatcher = mock(SchemeWatcher.class);
+        var secondWatcher = mock(SchemeWatcher.class);
+        watcherManager.register(firstWatcher);
+
+        var watchers = watcherManager.watchers();
+        watchers.forEach(watcher -> watcherManager.register(secondWatcher));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/ExtensionOperatorTest.java b/application/src/test/java/run/halo/app/extension/ExtensionOperatorTest.java
new file mode 100644
index 0000000..bdb20f1
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/ExtensionOperatorTest.java
@@ -0,0 +1,41 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import org.junit.jupiter.api.Test;
+
+class ExtensionOperatorTest {
+
+    @Test
+    void testIsNotDeleted() {
+        var ext = mock(ExtensionOperator.class);
+        var metadata = mock(Metadata.class);
+        when(metadata.getDeletionTimestamp()).thenReturn(null);
+        when(ext.getMetadata()).thenReturn(metadata);
+
+        assertTrue(ExtensionOperator.isNotDeleted().test(ext));
+
+        when(metadata.getDeletionTimestamp()).thenReturn(Instant.now());
+        assertFalse(ExtensionOperator.isNotDeleted().test(ext));
+    }
+
+    @Test
+    void testIsDeleted() {
+        var ext = mock(ExtensionOperator.class);
+
+        when(ext.getMetadata()).thenReturn(null);
+        assertFalse(ExtensionOperator.isDeleted(ext));
+
+        var metadata = mock(Metadata.class);
+        when(ext.getMetadata()).thenReturn(metadata);
+        when(metadata.getDeletionTimestamp()).thenReturn(null);
+        assertFalse(ExtensionOperator.isDeleted(ext));
+
+        when(metadata.getDeletionTimestamp()).thenReturn(Instant.now());
+        assertTrue(ExtensionOperator.isDeleted(ext));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/ExtensionStoreUtilTest.java b/application/src/test/java/run/halo/app/extension/ExtensionStoreUtilTest.java
new file mode 100644
index 0000000..1f70b3f
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/ExtensionStoreUtilTest.java
@@ -0,0 +1,47 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+class ExtensionStoreUtilTest {
+
+    Scheme scheme;
+
+    Scheme grouplessScheme;
+
+    @BeforeEach
+    void setUp() {
+        scheme = new Scheme(FakeExtension.class,
+            new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake"),
+            "fakes",
+            "fake",
+            new ObjectNode(null));
+        grouplessScheme = new Scheme(FakeExtension.class,
+            new GroupVersionKind("", "v1alpha1", "Fake"),
+            "fakes",
+            "fake",
+            new ObjectNode(null));
+    }
+
+    @Test
+    void buildStoreNamePrefix() {
+        var prefix = ExtensionStoreUtil.buildStoreNamePrefix(scheme);
+        assertEquals("/registry/fake.halo.run/fakes", prefix);
+
+        prefix = ExtensionStoreUtil.buildStoreNamePrefix(grouplessScheme);
+        assertEquals("/registry/fakes", prefix);
+    }
+
+    @Test
+    void buildStoreName() {
+        var storeName = ExtensionStoreUtil.buildStoreName(scheme, "fake-name");
+        assertEquals("/registry/fake.halo.run/fakes/fake-name", storeName);
+
+        storeName = ExtensionStoreUtil.buildStoreName(grouplessScheme, "fake-name");
+        assertEquals("/registry/fakes/fake-name", storeName);
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/FakeExtension.java b/application/src/test/java/run/halo/app/extension/FakeExtension.java
new file mode 100644
index 0000000..5933c37
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/FakeExtension.java
@@ -0,0 +1,31 @@
+package run.halo.app.extension;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import lombok.ToString;
+
+@GVK(group = "fake.halo.run",
+    version = "v1alpha1",
+    kind = "Fake",
+    plural = "fakes",
+    singular = "fake")
+@Data
+@ToString(callSuper = true)
+@EqualsAndHashCode(callSuper = true)
+public class FakeExtension extends AbstractExtension {
+
+    private FakeStatus status = new FakeStatus();
+
+    public static FakeExtension createFake(String name) {
+        var metadata = new Metadata();
+        metadata.setName(name);
+        var fake = new FakeExtension();
+        fake.setMetadata(metadata);
+        return fake;
+    }
+
+    @Data
+    public static class FakeStatus {
+        private String state;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/GroupVersionKindTest.java b/application/src/test/java/run/halo/app/extension/GroupVersionKindTest.java
new file mode 100644
index 0000000..53e17b6
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/GroupVersionKindTest.java
@@ -0,0 +1,87 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static run.halo.app.extension.GroupVersionKind.fromAPIVersionAndKind;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+
+class GroupVersionKindTest {
+
+    @Test
+    void testFromApiVersionAndKind() {
+        record TestCase(String apiVersion, String kind, GroupVersionKind expected,
+                        Class exception) {
+        }
+
+        List.of(
+            new TestCase("v1alpha1", "Fake", new GroupVersionKind("", "v1alpha1", "Fake"), null),
+            new TestCase("fake.halo.run/v1alpha1", "Fake",
+                new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake"), null),
+            new TestCase("", "", null, IllegalArgumentException.class),
+            new TestCase("", "Fake", null, IllegalArgumentException.class),
+            new TestCase("v1alpha1", "", null, IllegalArgumentException.class),
+            new TestCase("fake.halo.run/v1alpha1/v1alpha2", "Fake", null,
+                IllegalArgumentException.class)
+        ).forEach(testCase -> {
+            if (testCase.exception != null) {
+                assertThrows(testCase.exception, () -> {
+                    fromAPIVersionAndKind(testCase.apiVersion, testCase.kind);
+                });
+            } else {
+                var got = fromAPIVersionAndKind(testCase.apiVersion, testCase.kind);
+                assertEquals(testCase.expected, got);
+            }
+        });
+    }
+
+    @Test
+    void testHasGroup() {
+        record TestCase(GroupVersionKind gvk, boolean hasGroup) {
+        }
+
+        List.of(
+            new TestCase(new GroupVersionKind("", "v1alpha1", "Fake"), false),
+            new TestCase(new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake"), true)
+        ).forEach(testCase -> assertEquals(testCase.hasGroup, testCase.gvk.hasGroup()));
+    }
+
+    @Test
+    void testGroupKind() {
+        record TestCase(GroupVersionKind gvk, GroupKind gk) {
+        }
+
+        List.of(
+            new TestCase(new GroupVersionKind("", "v1alpha1", "Fake"), new GroupKind("", "Fake")),
+            new TestCase(new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake"),
+                new GroupKind("fake.halo.run", "Fake"))
+        ).forEach(testCase -> {
+            assertEquals(testCase.gk, testCase.gvk.groupKind());
+        });
+    }
+
+    @Test
+    void testGroupVersion() {
+        record TestCase(GroupVersionKind gvk, GroupVersion gv) {
+        }
+
+        List.of(
+            new TestCase(new GroupVersionKind("", "v1alpha1", "Fake"),
+                new GroupVersion("", "v1alpha1")),
+            new TestCase(new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake"),
+                new GroupVersion("fake.halo.run", "v1alpha1"))
+        ).forEach(testCase -> {
+            assertEquals(testCase.gv, testCase.gvk.groupVersion());
+        });
+    }
+
+    @Test
+    void fromExtension() {
+        GroupVersionKind groupVersionKind = GroupVersionKind.fromExtension(FakeExtension.class);
+        assertEquals("fake.halo.run", groupVersionKind.group());
+        assertEquals("v1alpha1", groupVersionKind.version());
+        assertEquals("Fake", groupVersionKind.kind());
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/GroupVersionTest.java b/application/src/test/java/run/halo/app/extension/GroupVersionTest.java
new file mode 100644
index 0000000..91edfec
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/GroupVersionTest.java
@@ -0,0 +1,29 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+
+import org.junit.jupiter.api.Test;
+
+class GroupVersionTest {
+
+    @Test
+    void shouldThrowIllegalArgumentExceptionWhenAPIVersionIsIllegal() {
+        assertThrows(IllegalArgumentException.class, () -> GroupVersion.parseAPIVersion(null),
+            "apiVersion is null");
+        assertThrows(IllegalArgumentException.class, () -> GroupVersion.parseAPIVersion(""),
+            "apiVersion is empty");
+        assertThrows(IllegalArgumentException.class, () -> GroupVersion.parseAPIVersion("    "),
+            "apiVersion is blank");
+        assertThrows(IllegalArgumentException.class, () -> GroupVersion.parseAPIVersion("a/b/c"),
+            "apiVersion contains more than 1 '/'");
+    }
+
+    @Test
+    void shouldReturnGroupVersionCorrectly() {
+        assertEquals(new GroupVersion("", "v1"), GroupVersion.parseAPIVersion("v1"),
+            "only contains version");
+        assertEquals(new GroupVersion("core.halo.run", "v1"),
+            GroupVersion.parseAPIVersion("core.halo.run/v1"), "only contains version");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/JsonExtensionConverterTest.java b/application/src/test/java/run/halo/app/extension/JsonExtensionConverterTest.java
new file mode 100644
index 0000000..9f7e3ee
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/JsonExtensionConverterTest.java
@@ -0,0 +1,104 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.mockito.Mockito.mock;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import java.io.IOException;
+import java.util.Locale;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.exception.ExtensionConvertException;
+import run.halo.app.extension.exception.SchemaViolationException;
+import run.halo.app.extension.index.IndexSpecRegistry;
+import run.halo.app.extension.store.ExtensionStore;
+
+class JsonExtensionConverterTest {
+
+    JSONExtensionConverter converter;
+
+    ObjectMapper objectMapper;
+
+    Locale localeDefault;
+
+    @BeforeEach
+    void setUp() {
+        localeDefault = Locale.getDefault();
+        Locale.setDefault(Locale.ENGLISH);
+        var indexSpecRegistry = mock(IndexSpecRegistry.class);
+
+        DefaultSchemeManager schemeManager = new DefaultSchemeManager(indexSpecRegistry, null);
+        converter = new JSONExtensionConverter(schemeManager);
+        objectMapper = converter.getObjectMapper();
+
+        schemeManager.register(FakeExtension.class);
+    }
+
+    @AfterEach
+    void cleanUp() {
+        Locale.setDefault(localeDefault);
+    }
+
+    @Test
+    void convertTo() throws IOException {
+        var fake = createFakeExtension("fake", 10L);
+
+        var extensionStore = converter.convertTo(fake);
+
+        assertEquals("/registry/fake.halo.run/fakes/fake", extensionStore.getName());
+        assertEquals(10L, extensionStore.getVersion());
+        assertEquals(fake, objectMapper.readValue(extensionStore.getData(), FakeExtension.class));
+    }
+
+    @Test
+    void convertFrom() throws JsonProcessingException {
+        var fake = createFakeExtension("fake", 20L);
+
+        var store = new ExtensionStore();
+        store.setName("/registry/fake.halo.run/fakes/fake");
+        store.setVersion(20L);
+        store.setData(objectMapper.writeValueAsBytes(fake));
+
+        FakeExtension gotFake = converter.convertFrom(FakeExtension.class, store);
+        assertEquals(fake, gotFake);
+    }
+
+    @Test
+    void shouldThrowConvertExceptionWhenDataIsInvalid() {
+        var store = new ExtensionStore();
+        store.setName("/registry/fake.halo.run/fakes/fake");
+        store.setVersion(20L);
+        store.setData("{".getBytes());
+
+        assertThrows(ExtensionConvertException.class,
+            () -> converter.convertFrom(FakeExtension.class, store));
+    }
+
+    @Test
+    void shouldThrowSchemaViolationExceptionWhenNameNotSet() {
+        var fake = new FakeExtension();
+        Metadata metadata = new Metadata();
+        fake.setMetadata(metadata);
+        fake.setApiVersion("fake.halo.run/v1alpha1");
+        fake.setKind("Fake");
+        var error = assertThrows(SchemaViolationException.class, () -> converter.convertTo(fake));
+        assertEquals(1, error.getErrors().size());
+        var result = error.getErrors().items().get(0);
+        assertEquals(1026, result.code());
+        assertEquals("Field 'name' is required.", result.message());
+    }
+
+    FakeExtension createFakeExtension(String name, Long version) {
+        var fake = new FakeExtension();
+        fake.groupVersionKind(new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake"));
+        Metadata metadata = new Metadata();
+        metadata.setName(name);
+        metadata.setVersion(version);
+        fake.setMetadata(metadata);
+
+        return fake;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/JsonExtensionTest.java b/application/src/test/java/run/halo/app/extension/JsonExtensionTest.java
new file mode 100644
index 0000000..62c5596
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/JsonExtensionTest.java
@@ -0,0 +1,80 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.json.JsonMapper;
+import com.fasterxml.jackson.databind.node.TextNode;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+
+class JsonExtensionTest {
+
+    ObjectMapper objectMapper;
+
+    @BeforeEach
+    void setUp() {
+        objectMapper = JsonMapper.builder().build();
+    }
+
+    @Test
+    void serializeEmptyExt() throws JsonProcessingException, JSONException {
+        var ext = new JsonExtension(objectMapper);
+        var json = objectMapper.writeValueAsString(ext);
+        JSONAssert.assertEquals("{}", json, true);
+    }
+
+    @Test
+    void serializeExt() throws JsonProcessingException, JSONException {
+        var ext = new JsonExtension(objectMapper);
+        ext.setApiVersion("fake.halo.run/v1alpha");
+        ext.setKind("Fake");
+        var metadata = ext.getMetadataOrCreate();
+        metadata.setName("fake-name");
+
+        ext.getInternal().set("data", TextNode.valueOf("halo"));
+
+        JSONAssert.assertEquals("""
+            {
+              "apiVersion": "fake.halo.run/v1alpha",
+              "kind": "Fake",
+              "metadata": {
+                "name": "fake-name"
+              },
+              "data": "halo"
+            }""", objectMapper.writeValueAsString(ext), true);
+    }
+
+    @Test
+    void deserialize() throws JsonProcessingException {
+        var json = """
+            {
+              "apiVersion": "fake.halo.run/v1alpha1",
+              "kind": "Fake",
+              "metadata": {
+                "name": "faker"
+              },
+              "otherProperty": "otherPropertyValue"
+            }""";
+
+        var ext = objectMapper.readValue(json, JsonExtension.class);
+
+        assertEquals("fake.halo.run/v1alpha1", ext.getApiVersion());
+        assertEquals("Fake", ext.getKind());
+        assertNotNull(ext.getMetadata());
+        assertEquals("faker", ext.getMetadata().getName());
+        assertNull(ext.getMetadata().getVersion());
+        assertNull(ext.getMetadata().getFinalizers());
+        assertNull(ext.getMetadata().getAnnotations());
+        assertNull(ext.getMetadata().getLabels());
+        assertNull(ext.getMetadata().getGenerateName());
+        assertNull(ext.getMetadata().getCreationTimestamp());
+        assertNull(ext.getMetadata().getDeletionTimestamp());
+        assertEquals("otherPropertyValue", ext.getInternal().get("otherProperty").asText());
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/ListResultTest.java b/application/src/test/java/run/halo/app/extension/ListResultTest.java
new file mode 100644
index 0000000..d4455dc
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/ListResultTest.java
@@ -0,0 +1,78 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertSame;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.lang.reflect.ParameterizedType;
+import java.util.List;
+import java.util.Optional;
+import org.junit.jupiter.api.Test;
+
+class ListResultTest {
+
+    @Test
+    void generateGenericClass() {
+        var fakeListClass =
+            ListResult.generateGenericClass(Scheme.buildFromType(FakeExtension.class));
+        assertTrue(ListResult.class.isAssignableFrom(fakeListClass));
+        assertSame(FakeExtension.class, ((ParameterizedType) fakeListClass.getGenericSuperclass())
+            .getActualTypeArguments()[0]);
+        assertEquals("FakeList", fakeListClass.getSimpleName());
+    }
+
+    @Test
+    void generateGenericClassForClassParam() {
+        var fakeListClass = ListResult.generateGenericClass(FakeExtension.class);
+        assertTrue(ListResult.class.isAssignableFrom(fakeListClass));
+        assertSame(FakeExtension.class, ((ParameterizedType) fakeListClass.getGenericSuperclass())
+            .getActualTypeArguments()[0]);
+        assertEquals("FakeExtensionList", fakeListClass.getSimpleName());
+    }
+
+    @Test
+    void totalPages() {
+        var listResult = new ListResult<>(1, 10, 100, List.of());
+        assertEquals(10, listResult.getTotalPages());
+
+        listResult = new ListResult<>(1, 10, 1, List.of());
+        assertEquals(1, listResult.getTotalPages());
+
+        listResult = new ListResult<>(1, 10, 9, List.of());
+        assertEquals(1, listResult.getTotalPages());
+
+        listResult = new ListResult<>(1, 0, 100, List.of());
+        assertEquals(1, listResult.getTotalPages());
+    }
+
+    @Test
+    void subListWhenSizeIsZero() {
+        var list = List.of(1, 2, 3, 4, 5);
+        assertSubList(list);
+
+        list = List.of(1);
+        assertSubList(list);
+    }
+
+    @Test
+    void firstTest() {
+        var listResult = new ListResult<>(List.of());
+        assertEquals(Optional.empty(), ListResult.first(listResult));
+
+        listResult = new ListResult<>(1, 10, 1, List.of("A"));
+        assertEquals(Optional.of("A"), ListResult.first(listResult));
+    }
+
+    private void assertSubList(List list) {
+        var result = ListResult.subList(list, 0, 0);
+        assertEquals(list, result);
+
+        result = ListResult.subList(list, 0, 1);
+        assertEquals(list.subList(0, 1), result);
+
+        result = ListResult.subList(list, 1, 0);
+        assertEquals(list, result);
+
+        assertEquals(list.subList(0, 1), ListResult.subList(list, -1, 1));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/MetadataOperatorTest.java b/application/src/test/java/run/halo/app/extension/MetadataOperatorTest.java
new file mode 100644
index 0000000..c5e016d
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/MetadataOperatorTest.java
@@ -0,0 +1,91 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+import static run.halo.app.extension.MetadataOperator.metadataDeepEquals;
+
+import java.time.Instant;
+import java.util.Map;
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+
+class MetadataOperatorTest {
+
+    Instant now = Instant.now();
+
+    @Test
+    void testMetadataDeepEqualsWithSameType() {
+        assertTrue(metadataDeepEquals(null, null));
+
+        var left = createFullMetadata();
+        var right = createFullMetadata();
+        assertFalse(metadataDeepEquals(left, null));
+        assertFalse(metadataDeepEquals(null, right));
+        assertTrue(metadataDeepEquals(left, right));
+
+        left.setDeletionTimestamp(null);
+        assertFalse(metadataDeepEquals(left, right));
+        right.setDeletionTimestamp(null);
+        assertTrue(metadataDeepEquals(left, right));
+
+        left.setCreationTimestamp(null);
+        assertFalse(metadataDeepEquals(left, right));
+        right.setCreationTimestamp(null);
+        assertTrue(metadataDeepEquals(left, right));
+
+        left.setVersion(null);
+        assertFalse(metadataDeepEquals(left, right));
+        right.setVersion(null);
+        assertTrue(metadataDeepEquals(left, right));
+
+        left.setAnnotations(null);
+        assertFalse(metadataDeepEquals(left, right));
+        right.setAnnotations(null);
+        assertTrue(metadataDeepEquals(left, right));
+
+        left.setLabels(null);
+        assertFalse(metadataDeepEquals(left, right));
+        right.setLabels(null);
+        assertTrue(metadataDeepEquals(left, right));
+
+        left.setName(null);
+        assertFalse(metadataDeepEquals(left, right));
+        right.setName(null);
+        assertTrue(metadataDeepEquals(left, right));
+
+        left.setFinalizers(null);
+        assertFalse(metadataDeepEquals(left, right));
+        right.setFinalizers(null);
+        assertTrue(metadataDeepEquals(left, right));
+    }
+
+    @Test
+    void testMetadataDeepEqualsWithDifferentType() {
+        var mockMetadata = mock(MetadataOperator.class);
+        when(mockMetadata.getName()).thenReturn("fake-name");
+        when(mockMetadata.getLabels()).thenReturn(Map.of("fake-label-key", "fake-label-value"));
+        when(mockMetadata.getAnnotations()).thenReturn(Map.of("fake-anno-key", "fake-anno-value"));
+        when(mockMetadata.getVersion()).thenReturn(123L);
+        when(mockMetadata.getCreationTimestamp()).thenReturn(now);
+        when(mockMetadata.getDeletionTimestamp()).thenReturn(now);
+        when(mockMetadata.getFinalizers())
+            .thenReturn(Set.of("fake-finalizer-1", "fake-finalizer-2"));
+
+        var metadata = createFullMetadata();
+        assertTrue(metadataDeepEquals(metadata, mockMetadata));
+    }
+
+    Metadata createFullMetadata() {
+        var metadata = new Metadata();
+        metadata.setName("fake-name");
+        metadata.setLabels(Map.of("fake-label-key", "fake-label-value"));
+        metadata.setAnnotations(Map.of("fake-anno-key", "fake-anno-value"));
+        metadata.setVersion(123L);
+        metadata.setCreationTimestamp(now);
+        metadata.setDeletionTimestamp(now);
+        metadata.setFinalizers(Set.of("fake-finalizer-2", "fake-finalizer-1"));
+        return metadata;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/ReactiveExtensionClientTest.java b/application/src/test/java/run/halo/app/extension/ReactiveExtensionClientTest.java
new file mode 100644
index 0000000..3363dae
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/ReactiveExtensionClientTest.java
@@ -0,0 +1,734 @@
+package run.halo.app.extension;
+
+import static java.util.Collections.emptyList;
+import static java.util.Collections.reverseOrder;
+import static java.util.Comparator.comparing;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertInstanceOf;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.argThat;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.doNothing;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.extension.GroupVersionKind.fromAPIVersionAndKind;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.json.JsonMapper;
+import com.fasterxml.jackson.datatype.jsr310.JavaTimeModule;
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Spy;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.dao.DataIntegrityViolationException;
+import org.springframework.transaction.ReactiveTransactionManager;
+import org.springframework.transaction.reactive.TransactionalOperator;
+import reactor.core.Exceptions;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.exception.SchemeNotFoundException;
+import run.halo.app.extension.index.Indexer;
+import run.halo.app.extension.index.IndexerFactory;
+import run.halo.app.extension.store.ExtensionStore;
+import run.halo.app.extension.store.ReactiveExtensionStoreClient;
+
+@ExtendWith(MockitoExtension.class)
+class ReactiveExtensionClientTest {
+
+    static final Scheme fakeScheme = Scheme.buildFromType(FakeExtension.class);
+
+    @Mock
+    ReactiveExtensionStoreClient storeClient;
+
+    @Mock
+    ExtensionConverter converter;
+
+    @Mock
+    SchemeManager schemeManager;
+
+    @Mock
+    IndexerFactory indexerFactory;
+
+    @Mock
+    ReactiveTransactionManager reactiveTransactionManager;
+
+    @Spy
+    ObjectMapper objectMapper = JsonMapper.builder()
+        .addModule(new JavaTimeModule())
+        .build();
+
+    @InjectMocks
+    ReactiveExtensionClientImpl client;
+
+    @BeforeEach
+    void setUp() {
+        lenient().when(schemeManager.get(eq(FakeExtension.class)))
+            .thenReturn(fakeScheme);
+        lenient().when(schemeManager.get(eq(fakeScheme.groupVersionKind()))).thenReturn(fakeScheme);
+        var transactionalOperator = mock(TransactionalOperator.class);
+        client.setTransactionalOperator(transactionalOperator);
+        lenient().when(transactionalOperator.transactional(any(Mono.class)))
+            .thenAnswer(invocation -> invocation.getArgument(0));
+    }
+
+    FakeExtension createFakeExtension(String name, Long version) {
+        var fake = new FakeExtension();
+        var metadata = new Metadata();
+        metadata.setName(name);
+        metadata.setVersion(version);
+
+        fake.setMetadata(metadata);
+        fake.setApiVersion("fake.halo.run/v1alpha1");
+        fake.setKind("Fake");
+
+        return fake;
+    }
+
+    ExtensionStore createExtensionStore(String name) {
+        return createExtensionStore(name, null);
+    }
+
+    ExtensionStore createExtensionStore(String name, Long version) {
+        var extensionStore = new ExtensionStore();
+        extensionStore.setName(name);
+        extensionStore.setVersion(version);
+        return extensionStore;
+    }
+
+    Unstructured createUnstructured() throws JsonProcessingException {
+        String extensionJson = """
+            {
+                "apiVersion": "fake.halo.run/v1alpha1",
+                "kind": "Fake",
+                "metadata": {
+                    "labels": {
+                        "category": "fake",
+                        "default": "true"
+                    },
+                    "name": "fake",
+                    "creationTimestamp": "2011-12-03T10:15:30Z",
+                    "version": 12345
+                }
+            }
+            """;
+        return Unstructured.OBJECT_MAPPER.readValue(extensionJson, Unstructured.class);
+    }
+
+    @Test
+    void shouldThrowSchemeNotFoundExceptionWhenSchemeNotRegistered() {
+        class UnRegisteredExtension extends AbstractExtension {
+        }
+
+        when(schemeManager.get(eq(UnRegisteredExtension.class)))
+            .thenThrow(SchemeNotFoundException.class);
+        when(schemeManager.get(isA(GroupVersionKind.class)))
+            .thenThrow(SchemeNotFoundException.class);
+
+        assertThrows(SchemeNotFoundException.class,
+            () -> client.list(UnRegisteredExtension.class, null,
+                null));
+        assertThrows(SchemeNotFoundException.class,
+            () -> client.list(UnRegisteredExtension.class, null, null, 0, 10));
+        assertThrows(SchemeNotFoundException.class,
+            () -> client.fetch(UnRegisteredExtension.class, "fake"));
+        assertThrows(SchemeNotFoundException.class, () ->
+            client.fetch(fromAPIVersionAndKind("fake.halo.run/v1alpha1", "UnRegistered"), "fake"));
+
+        when(converter.convertTo(any())).thenThrow(SchemeNotFoundException.class);
+        StepVerifier.create(client.create(createFakeExtension("fake", null)))
+            .verifyError(SchemeNotFoundException.class);
+
+        assertThrows(SchemeNotFoundException.class, () -> {
+            when(converter.convertTo(any())).thenThrow(SchemeNotFoundException.class);
+            client.update(createFakeExtension("fake", 1L));
+        });
+        assertThrows(SchemeNotFoundException.class, () -> {
+            when(converter.convertTo(any())).thenThrow(SchemeNotFoundException.class);
+            client.delete(createFakeExtension("fake", 1L));
+        });
+    }
+
+    @Test
+    void shouldReturnEmptyExtensions() {
+        when(storeClient.listByNamePrefix(anyString())).thenReturn(Flux.empty());
+        var fakes = client.list(FakeExtension.class, null, null);
+        StepVerifier.create(fakes)
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldReturnExtensionsWithFilterAndSorter() {
+        var fake1 = createFakeExtension("fake-01", 1L);
+        var fake2 = createFakeExtension("fake-02", 1L);
+
+        when(
+            converter.convertFrom(FakeExtension.class, createExtensionStore("fake-01"))).thenReturn(
+            fake1);
+        when(
+            converter.convertFrom(FakeExtension.class, createExtensionStore("fake-02"))).thenReturn(
+            fake2);
+        when(storeClient.listByNamePrefix(anyString())).thenReturn(
+            Flux.fromIterable(
+                List.of(createExtensionStore("fake-01"), createExtensionStore("fake-02"))));
+
+        // without filter and sorter
+        Flux fakes =
+            client.list(FakeExtension.class, null, null);
+        StepVerifier.create(fakes)
+            .expectNext(fake1)
+            .expectNext(fake2)
+            .verifyComplete();
+
+        // with filter
+        fakes = client.list(FakeExtension.class, fake -> {
+            String name = fake.getMetadata().getName();
+            return "fake-01".equals(name);
+        }, null);
+        StepVerifier.create(fakes)
+            .expectNext(fake1)
+            .verifyComplete();
+
+        // with sorter
+        fakes = client.list(FakeExtension.class, null,
+            reverseOrder(comparing(fake -> fake.getMetadata().getName())));
+        StepVerifier.create(fakes)
+            .expectNext(fake2)
+            .expectNext(fake1)
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldQueryPageableAndCorrectly() {
+        var fake1 = createFakeExtension("fake-01", 1L);
+        var fake2 = createFakeExtension("fake-02", 1L);
+        var fake3 = createFakeExtension("fake-03", 1L);
+
+        when(
+            converter.convertFrom(FakeExtension.class, createExtensionStore("fake-01"))).thenReturn(
+            fake1);
+        when(
+            converter.convertFrom(FakeExtension.class, createExtensionStore("fake-02"))).thenReturn(
+            fake2);
+        when(
+            converter.convertFrom(FakeExtension.class, createExtensionStore("fake-03"))).thenReturn(
+            fake3);
+
+        when(storeClient.listByNamePrefix(anyString())).thenReturn(Flux.fromIterable(
+            List.of(createExtensionStore("fake-01"), createExtensionStore("fake-02"),
+                createExtensionStore("fake-03"))));
+
+        // without filter and sorter.
+        var fakes = client.list(FakeExtension.class, null, null, 1, 10);
+        StepVerifier.create(fakes)
+            .expectNext(new ListResult<>(1, 10, 3, List.of(fake1, fake2, fake3)))
+            .verifyComplete();
+
+        // out of page range
+        fakes = client.list(FakeExtension.class, null, null, 100, 10);
+        StepVerifier.create(fakes)
+            .expectNext(new ListResult<>(100, 10, 3, emptyList()))
+            .verifyComplete();
+
+        // with filter only
+        fakes =
+            client.list(FakeExtension.class, fake -> "fake-03".equals(fake.getMetadata().getName()),
+                null, 1, 10);
+        StepVerifier.create(fakes)
+            .expectNext(new ListResult<>(1, 10, 1, List.of(fake3)))
+            .verifyComplete();
+
+        // with sorter only
+        fakes = client.list(FakeExtension.class, null,
+            reverseOrder(comparing(fake -> fake.getMetadata().getName())), 1, 10);
+        StepVerifier.create(fakes)
+            .expectNext(new ListResult<>(1, 10, 3, List.of(fake3, fake2, fake1)))
+            .verifyComplete();
+
+        // without page
+        fakes = client.list(FakeExtension.class, null, null, 0, 0);
+        StepVerifier.create(fakes)
+            .expectNext(new ListResult<>(0, 0, 3, List.of(fake1, fake2, fake3)))
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldFetchNothing() {
+        when(storeClient.fetchByName(any())).thenReturn(Mono.empty());
+
+        var fake = client.fetch(FakeExtension.class, "fake");
+
+        StepVerifier.create(fake)
+            .verifyComplete();
+
+        verify(converter, times(0)).convertFrom(any(), any());
+        verify(storeClient, times(1)).fetchByName(any());
+    }
+
+    @Test
+    void shouldNotFetchUnstructured() {
+        when(schemeManager.get(isA(GroupVersionKind.class)))
+            .thenReturn(fakeScheme);
+        when(storeClient.fetchByName(any())).thenReturn(Mono.empty());
+        var unstructuredFake = client.fetch(fakeScheme.groupVersionKind(), "fake");
+        StepVerifier.create(unstructuredFake)
+            .verifyComplete();
+
+        verify(converter, times(0)).convertFrom(any(), any());
+        verify(schemeManager, times(1)).get(isA(GroupVersionKind.class));
+        verify(storeClient, times(1)).fetchByName(any());
+    }
+
+    @Test
+    void shouldFetchAnExtension() {
+        var storeName = "/registry/fake.halo.run/fakes/fake";
+        when(storeClient.fetchByName(storeName)).thenReturn(
+            Mono.just(createExtensionStore(storeName)));
+
+        when(
+            converter.convertFrom(FakeExtension.class, createExtensionStore(storeName))).thenReturn(
+            createFakeExtension("fake", 1L));
+
+        var fake = client.fetch(FakeExtension.class, "fake");
+        StepVerifier.create(fake)
+            .expectNext(createFakeExtension("fake", 1L))
+            .verifyComplete();
+
+        verify(storeClient, times(1)).fetchByName(eq(storeName));
+        verify(converter, times(1)).convertFrom(eq(FakeExtension.class),
+            eq(createExtensionStore(storeName)));
+    }
+
+    @Test
+    void shouldFetchUnstructuredExtension() throws JsonProcessingException {
+        var storeName = "/registry/fake.halo.run/fakes/fake";
+        when(storeClient.fetchByName(storeName)).thenReturn(
+            Mono.just(createExtensionStore(storeName)));
+        when(schemeManager.get(isA(GroupVersionKind.class)))
+            .thenReturn(fakeScheme);
+        when(converter.convertFrom(Unstructured.class, createExtensionStore(storeName)))
+            .thenReturn(createUnstructured());
+
+        var fake = client.fetch(fakeScheme.groupVersionKind(), "fake");
+        StepVerifier.create(fake)
+            .expectNext(createUnstructured())
+            .verifyComplete();
+
+        verify(storeClient, times(1)).fetchByName(eq(storeName));
+        verify(schemeManager, times(1)).get(isA(GroupVersionKind.class));
+        verify(converter, times(1)).convertFrom(eq(Unstructured.class),
+            eq(createExtensionStore(storeName)));
+    }
+
+    @Test
+    void shouldCreateSuccessfully() {
+        var fake = createFakeExtension("fake", null);
+        when(converter.convertTo(any())).thenReturn(
+            createExtensionStore("/registry/fake.halo.run/fakes/fake"));
+        when(storeClient.create(any(), any())).thenReturn(
+            Mono.just(createExtensionStore("/registry/fake.halo.run/fakes/fake")));
+        when(converter.convertFrom(same(FakeExtension.class), any())).thenReturn(fake);
+
+        var indexer = mock(Indexer.class);
+        when(indexerFactory.getIndexer(eq(fake.groupVersionKind()))).thenReturn(indexer);
+
+        StepVerifier.create(client.create(fake))
+            .expectNext(fake)
+            .verifyComplete();
+
+        verify(converter, times(1)).convertTo(eq(fake));
+        verify(storeClient, times(1)).create(eq("/registry/fake.halo.run/fakes/fake"), any());
+        assertNotNull(fake.getMetadata().getCreationTimestamp());
+        verify(indexer).indexRecord(eq(fake));
+    }
+
+    @Test
+    void shouldCreateWithGenerateNameSuccessfully() {
+        var fake = createFakeExtension("fake", null);
+        fake.getMetadata().setName("");
+        fake.getMetadata().setGenerateName("fake-");
+        when(converter.convertTo(any())).thenReturn(
+            createExtensionStore("/registry/fake.halo.run/fakes/fake"));
+        when(storeClient.create(any(), any())).thenReturn(
+            Mono.just(createExtensionStore("/registry/fake.halo.run/fakes/fake")));
+        when(converter.convertFrom(same(FakeExtension.class), any())).thenReturn(fake);
+
+        var indexer = mock(Indexer.class);
+        when(indexerFactory.getIndexer(eq(fake.groupVersionKind()))).thenReturn(indexer);
+
+        StepVerifier.create(client.create(fake))
+            .expectNext(fake)
+            .verifyComplete();
+
+        verify(converter, times(1)).convertTo(argThat(ext -> {
+            var name = ext.getMetadata().getName();
+            return name.startsWith(ext.getMetadata().getGenerateName());
+        }));
+        verify(storeClient, times(1)).create(eq("/registry/fake.halo.run/fakes/fake"), any());
+        assertNotNull(fake.getMetadata().getCreationTimestamp());
+        verify(indexer).indexRecord(eq(fake));
+    }
+
+    @Test
+    void shouldThrowExceptionIfCreatingWithoutGenerateName() {
+        var fake = createFakeExtension("fake", null);
+        fake.getMetadata().setName("");
+        fake.getMetadata().setGenerateName("");
+
+        StepVerifier.create(client.create(fake))
+            .verifyError(IllegalArgumentException.class);
+    }
+
+    @Test
+    void shouldThrowExceptionIfPrimaryKeyDuplicated() {
+        var fake = createFakeExtension("fake", null);
+        fake.getMetadata().setName("");
+        fake.getMetadata().setGenerateName("fake-");
+        when(converter.convertTo(any())).thenReturn(
+            createExtensionStore("/registry/fake.halo.run/fakes/fake"));
+        when(storeClient.create(any(), any())).thenThrow(DataIntegrityViolationException.class);
+
+        StepVerifier.create(client.create(fake))
+            .expectErrorMatches(Exceptions::isRetryExhausted)
+            .verify();
+    }
+
+    @Test
+    void shouldCreateUsingUnstructuredSuccessfully() throws JsonProcessingException {
+        var fake = createUnstructured();
+
+        when(converter.convertTo(any())).thenReturn(
+            createExtensionStore("/registry/fake.halo.run/fakes/fake"));
+        when(storeClient.create(any(), any())).thenReturn(
+            Mono.just(createExtensionStore("/registry/fake.halo.run/fakes/fake")));
+        when(converter.convertFrom(same(Unstructured.class), any())).thenReturn(fake);
+
+        var indexer = mock(Indexer.class);
+        when(indexerFactory.getIndexer(eq(fake.groupVersionKind()))).thenReturn(indexer);
+
+        StepVerifier.create(client.create(fake))
+            .expectNext(fake)
+            .verifyComplete();
+
+        verify(converter, times(1)).convertTo(eq(fake));
+        verify(storeClient, times(1)).create(eq("/registry/fake.halo.run/fakes/fake"), any());
+        assertNotNull(fake.getMetadata().getCreationTimestamp());
+
+        verify(indexer).indexRecord(assertArg(ext -> {
+            assertInstanceOf(FakeExtension.class, ext);
+            assertEquals("fake", ext.getMetadata().getName());
+        }));
+    }
+
+    @Test
+    void shouldUpdateSuccessfully() {
+        var fake = createFakeExtension("fake", 2L);
+        fake.getMetadata().setLabels(Map.of("new", "true"));
+        var storeName = "/registry/fake.halo.run/fakes/fake";
+        when(converter.convertTo(any())).thenReturn(
+            createExtensionStore(storeName, 2L));
+        when(storeClient.update(any(), any(), any())).thenReturn(
+            Mono.just(createExtensionStore(storeName, 2L)));
+        when(storeClient.fetchByName(storeName)).thenReturn(
+            Mono.just(createExtensionStore(storeName, 1L)));
+
+        var oldFake = createFakeExtension("fake", 2L);
+        oldFake.getMetadata().setLabels(Map.of("old", "true"));
+
+        var updatedFake = createFakeExtension("fake", 3L);
+        updatedFake.getMetadata().setLabels(Map.of("updated", "true"));
+        when(converter.convertFrom(same(FakeExtension.class), any()))
+            .thenReturn(oldFake)
+            .thenReturn(updatedFake);
+
+        var indexer = mock(Indexer.class);
+        when(indexerFactory.getIndexer(eq(fake.groupVersionKind()))).thenReturn(indexer);
+
+        StepVerifier.create(client.update(fake))
+            .expectNext(updatedFake)
+            .verifyComplete();
+
+        verify(storeClient).fetchByName(storeName);
+        verify(converter).convertTo(isA(JsonExtension.class));
+        verify(converter, times(2)).convertFrom(same(FakeExtension.class), any());
+        verify(storeClient)
+            .update(eq("/registry/fake.halo.run/fakes/fake"), eq(2L), any());
+        verify(indexer).updateRecord(eq(updatedFake));
+    }
+
+    @Test
+    void shouldNotUpdateIfExtensionNotChange() {
+        var fake = createFakeExtension("fake", 2L);
+        var storeName = "/registry/fake.halo.run/fakes/fake";
+        when(storeClient.fetchByName(storeName)).thenReturn(
+            Mono.just(createExtensionStore(storeName, 1L)));
+
+        var oldFake = createFakeExtension("fake", 2L);
+
+        when(converter.convertFrom(same(FakeExtension.class), any())).thenReturn(oldFake);
+
+        StepVerifier.create(client.update(fake))
+            .expectNext(fake)
+            .verifyComplete();
+
+        verify(storeClient).fetchByName(storeName);
+        verify(converter).convertFrom(same(FakeExtension.class), any());
+        verify(converter, never()).convertTo(any());
+        verify(storeClient, never()).update(any(), any(), any());
+    }
+
+    @Test
+    void shouldNotUpdateIfUnstructuredNotChange() throws JsonProcessingException {
+        var storeName = "/registry/fake.halo.run/fakes/fake";
+        var extensionStore = createExtensionStore(storeName, 2L);
+        when(storeClient.fetchByName(storeName)).thenReturn(
+            Mono.just(extensionStore));
+
+        var fakeJson = objectMapper.writeValueAsString(createFakeExtension("fake", 2L));
+        var oldFakeJson = objectMapper.writeValueAsString(createFakeExtension("fake", 2L));
+
+        var fake = objectMapper.readValue(fakeJson, Unstructured.class);
+        var oldFake = objectMapper.readValue(oldFakeJson, Unstructured.class);
+        oldFake.getMetadata().setVersion(2L);
+
+        when(converter.convertFrom(Unstructured.class, extensionStore)).thenReturn(oldFake);
+
+        StepVerifier.create(client.update(fake))
+            .expectNext(fake)
+            .verifyComplete();
+
+        verify(storeClient).fetchByName(storeName);
+        verify(converter).convertFrom(Unstructured.class, extensionStore);
+        verify(converter, never()).convertTo(any());
+        verify(storeClient, never()).update(any(), any(), any());
+    }
+
+    @Test
+    void shouldUpdateIfExtensionStatusChangedOnly() {
+        var fake = createFakeExtension("fake", 2L);
+        fake.getStatus().setState("new-state");
+        var storeName = "/registry/fake.halo.run/fakes/fake";
+        when(converter.convertTo(any())).thenReturn(
+            createExtensionStore(storeName, 2L));
+        when(storeClient.update(any(), any(), any())).thenReturn(
+            Mono.just(createExtensionStore(storeName, 2L)));
+        when(storeClient.fetchByName(storeName)).thenReturn(
+            Mono.just(createExtensionStore(storeName, 1L)));
+
+        var oldFake = createFakeExtension("fake", 2L);
+        oldFake.getStatus().setState("old-state");
+
+        var updatedFake = createFakeExtension("fake", 3L);
+        when(converter.convertFrom(same(FakeExtension.class), any()))
+            .thenReturn(oldFake)
+            .thenReturn(updatedFake);
+
+        var indexer = mock(Indexer.class);
+        when(indexerFactory.getIndexer(eq(fake.groupVersionKind()))).thenReturn(indexer);
+
+        StepVerifier.create(client.update(fake))
+            .expectNext(updatedFake)
+            .verifyComplete();
+
+        verify(storeClient).fetchByName(storeName);
+        verify(converter).convertTo(isA(JsonExtension.class));
+        verify(converter, times(2)).convertFrom(same(FakeExtension.class), any());
+        verify(storeClient)
+            .update(eq("/registry/fake.halo.run/fakes/fake"), eq(2L), any());
+        verify(indexer).updateRecord(eq(updatedFake));
+    }
+
+    @Test
+    void shouldUpdateUnstructuredSuccessfully() throws JsonProcessingException {
+        var fake = createUnstructured();
+        var name = "/registry/fake.halo.run/fakes/fake";
+        when(converter.convertTo(any()))
+            .thenReturn(createExtensionStore(name, 12345L));
+        when(storeClient.update(any(), any(), any()))
+            .thenReturn(Mono.just(createExtensionStore(name, 12345L)));
+        when(storeClient.fetchByName(name))
+            .thenReturn(Mono.just(createExtensionStore(name, 12346L)));
+
+        var oldFake = createUnstructured();
+        oldFake.getMetadata().setLabels(Map.of("old", "true"));
+
+        var updatedFake = createUnstructured();
+        updatedFake.getMetadata().setLabels(Map.of("updated", "true"));
+        when(converter.convertFrom(same(Unstructured.class), any()))
+            .thenReturn(oldFake)
+            .thenReturn(updatedFake);
+
+        var indexer = mock(Indexer.class);
+        when(indexerFactory.getIndexer(eq(fake.groupVersionKind()))).thenReturn(indexer);
+
+        StepVerifier.create(client.update(fake))
+            .expectNext(updatedFake)
+            .verifyComplete();
+
+        verify(storeClient).fetchByName(name);
+        verify(converter).convertTo(isA(JsonExtension.class));
+        verify(converter, times(2)).convertFrom(same(Unstructured.class), any());
+        verify(storeClient)
+            .update(eq("/registry/fake.halo.run/fakes/fake"), eq(12345L), any());
+        verify(indexer).updateRecord(assertArg(ext -> {
+            assertInstanceOf(FakeExtension.class, ext);
+            assertEquals("fake", ext.getMetadata().getName());
+        }));
+    }
+
+    @Test
+    void shouldDeleteSuccessfully() {
+        var fake = createFakeExtension("fake", 2L);
+        when(converter.convertTo(any())).thenReturn(
+            createExtensionStore("/registry/fake.halo.run/fakes/fake"));
+        when(storeClient.update(any(), any(), any())).thenReturn(
+            Mono.just(createExtensionStore("/registry/fake.halo.run/fakes/fake")));
+        when(converter.convertFrom(same(FakeExtension.class), any())).thenReturn(fake);
+
+        var indexer = mock(Indexer.class);
+        when(indexerFactory.getIndexer(eq(fake.groupVersionKind()))).thenReturn(indexer);
+
+        StepVerifier.create(client.delete(fake))
+            .expectNext(fake)
+            .verifyComplete();
+
+        verify(converter, times(1)).convertTo(any());
+        verify(storeClient, times(1)).update(any(), any(), any());
+        verify(storeClient, never()).delete(any(), any());
+        verify(indexer).updateRecord(eq(fake));
+    }
+
+    @Test
+    void shouldGetJsonExtension() {
+        var storeName = "/registry/fake.halo.run/fakes/fake";
+        when(storeClient.fetchByName(storeName)).thenReturn(
+            Mono.just(createExtensionStore(storeName)));
+
+        var fake = createFakeExtension("fake", 1L);
+        var expectedJsonExt = objectMapper.convertValue(fake, JsonExtension.class);
+
+        when(converter.convertFrom(JsonExtension.class, createExtensionStore(storeName)))
+            .thenReturn(expectedJsonExt);
+
+        var gvk = Scheme.buildFromType(FakeExtension.class).groupVersionKind();
+        StepVerifier.create(client.getJsonExtension(gvk, "fake"))
+            .expectNext(expectedJsonExt)
+            .verifyComplete();
+
+        verify(storeClient, times(1)).fetchByName(eq(storeName));
+        verify(converter, times(1)).convertFrom(eq(JsonExtension.class),
+            eq(createExtensionStore(storeName)));
+    }
+
+
+    @Nested
+    @DisplayName("Extension watcher test")
+    class WatcherTest {
+
+        @Mock
+        Watcher watcher;
+
+        @BeforeEach
+        void setUp() {
+            client.watch(watcher);
+        }
+
+        @Test
+        void shouldWatchOnAddSuccessfully() {
+            doNothing().when(watcher).onAdd(isA(Extension.class));
+            shouldCreateSuccessfully();
+
+            verify(watcher, times(1)).onAdd(isA(Extension.class));
+        }
+
+        @Test
+        void shouldWatchOnUpdateSuccessfully() {
+            doNothing().when(watcher).onUpdate(any(), any());
+            shouldUpdateSuccessfully();
+
+            verify(watcher, times(1)).onUpdate(any(), any());
+        }
+
+        @Test
+        void shouldNotWatchOnUpdateIfExtensionNotChange() {
+            shouldNotUpdateIfExtensionNotChange();
+
+            verify(watcher, never()).onUpdate(any(), any());
+        }
+
+        @Test
+        void shouldNotWatchOnUpdateIfExtensionStatusChangeOnly() {
+            shouldUpdateIfExtensionStatusChangedOnly();
+
+            verify(watcher, never()).onUpdate(any(), any());
+        }
+
+        @Test
+        void shouldWatchOnDeleteSuccessfully() {
+            doNothing().when(watcher).onDelete(any());
+            shouldDeleteSuccessfully();
+
+            verify(watcher, times(1)).onDelete(any());
+        }
+
+        @Test
+        void shouldWatchRealType() {
+            var extensionStore = createExtensionStore("/registry/fake.halo.run/fakes/fake");
+            var fake = createFakeExtension("fake", 1L);
+            var unstructured = Unstructured.OBJECT_MAPPER.convertValue(fake, Unstructured.class);
+
+            when(storeClient.fetchByName(extensionStore.getName()))
+                .thenReturn(Mono.just(extensionStore));
+            when(converter.convertTo(any())).thenReturn(extensionStore);
+            when(converter.convertFrom(same(Unstructured.class), any())).thenReturn(unstructured);
+
+            var indexer = mock(Indexer.class);
+            when(indexerFactory.getIndexer(eq(fake.groupVersionKind()))).thenReturn(indexer);
+
+            // on add
+            when(storeClient.create(any(), any())).thenReturn(Mono.just(extensionStore));
+            doNothing().when(watcher).onAdd(any(Extension.class));
+            StepVerifier.create(client.create(unstructured))
+                .expectNext(unstructured)
+                .verifyComplete();
+            verify(watcher, times(1)).onAdd(isA(FakeExtension.class));
+
+            // on update
+            when(storeClient.update(any(), any(), any())).thenReturn(Mono.just(extensionStore));
+
+            doNothing().when(watcher).onUpdate(any(), any());
+            StepVerifier.create(client.update(unstructured))
+                .expectNext(unstructured)
+                .verifyComplete();
+            verify(watcher, times(1))
+                .onUpdate(isA(FakeExtension.class), isA(FakeExtension.class));
+
+            // on delete
+            doNothing().when(watcher).onDelete(any());
+            StepVerifier.create(client.delete(unstructured))
+                .expectNext(unstructured)
+                .verifyComplete();
+            verify(watcher, times(1)).onDelete(isA(FakeExtension.class));
+
+        }
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/RefTest.java b/application/src/test/java/run/halo/app/extension/RefTest.java
new file mode 100644
index 0000000..70a913d
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/RefTest.java
@@ -0,0 +1,25 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static run.halo.app.extension.GroupVersionKind.fromAPIVersionAndKind;
+import static run.halo.app.extension.GroupVersionKind.fromExtension;
+
+import org.junit.jupiter.api.Test;
+
+class RefTest {
+
+    @Test
+    void shouldHasSameGroupAndKind() {
+        FakeExtension fake = new FakeExtension();
+        Metadata metadata = new Metadata();
+        metadata.setName("fake");
+        fake.setMetadata(metadata);
+        assertTrue(Ref.groupKindEquals(Ref.of(fake), fromExtension(fake.getClass())));
+        // has different version
+        assertTrue(Ref.groupKindEquals(Ref.of(fake),
+            fromAPIVersionAndKind("fake.halo.run/v11111111111", "Fake")));
+        assertFalse(Ref.groupKindEquals(Ref.of(fake),
+            fromAPIVersionAndKind("fake.halo.run/v1alpha1", "NotFake")));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/SchemeTest.java b/application/src/test/java/run/halo/app/extension/SchemeTest.java
new file mode 100644
index 0000000..83e8332
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/SchemeTest.java
@@ -0,0 +1,114 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+
+import com.fasterxml.jackson.databind.node.JsonNodeFactory;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import org.junit.jupiter.api.Test;
+
+class SchemeTest {
+
+    @Test
+    void requiredFieldTest() {
+        assertThrows(IllegalArgumentException.class,
+            () -> new Scheme(null, new GroupVersionKind("", "v1alpha1", ""), "", "", null));
+        assertThrows(IllegalArgumentException.class,
+            () -> new Scheme(FakeExtension.class, new GroupVersionKind("", "", ""), "", "",
+                null));
+        assertThrows(IllegalArgumentException.class,
+            () -> new Scheme(FakeExtension.class, new GroupVersionKind("", "v1alpha1", ""), "",
+                "", null));
+        assertThrows(IllegalArgumentException.class,
+            () -> new Scheme(FakeExtension.class, new GroupVersionKind("", "v1alpha1", "Fake"), "",
+                "", null));
+        assertThrows(IllegalArgumentException.class,
+            () -> new Scheme(FakeExtension.class, new GroupVersionKind("", "v1alpha1", "Fake"),
+                "fakes", "", null));
+        assertThrows(IllegalArgumentException.class, () -> {
+            new Scheme(FakeExtension.class, new GroupVersionKind("", "v1alpha1", "Fake"), "fakes",
+                "fake", null);
+        });
+        new Scheme(FakeExtension.class, new GroupVersionKind("", "v1alpha1", "Fake"), "fakes",
+            "fake", new ObjectNode(null));
+    }
+
+
+    @Test
+    void shouldThrowExceptionWhenTypeHasNoGvkAnno() {
+        class NoGvkExtension extends AbstractExtension {
+        }
+
+        assertThrows(IllegalArgumentException.class,
+            () -> Scheme.getGvkFromType(NoGvkExtension.class));
+        assertThrows(IllegalArgumentException.class,
+            () -> Scheme.buildFromType(NoGvkExtension.class));
+    }
+
+    @Test
+    void shouldGetGvkFromTypeWithGvkAnno() {
+        var gvk = Scheme.getGvkFromType(FakeExtension.class);
+        assertEquals("fake.halo.run", gvk.group());
+        assertEquals("v1alpha1", gvk.version());
+        assertEquals("Fake", gvk.kind());
+        assertEquals("fake", gvk.singular());
+        assertEquals("fakes", gvk.plural());
+    }
+
+    @Test
+    void shouldCreateSchemeSuccessfully() {
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        assertEquals(new GroupVersionKind("fake.halo.run", "v1alpha1", "Fake"),
+            scheme.groupVersionKind());
+        assertEquals("fake", scheme.singular());
+        assertEquals("fakes", scheme.plural());
+        assertNotNull(scheme.openApiSchema());
+        assertEquals(FakeExtension.class, scheme.type());
+    }
+
+    @Test
+    void equalsAndHashCodeTest() {
+        var scheme1 = Scheme.buildFromType(FakeExtension.class);
+        var scheme2 = Scheme.buildFromType(FakeExtension.class);
+        assertEquals(scheme1, scheme2);
+        assertEquals(scheme1.hashCode(), scheme2.hashCode());
+
+        // openApiSchema is not included in equals and hashCode.
+        var scheme3 = new Scheme(FakeExtension.class, scheme1.groupVersionKind(),
+            scheme1.plural(), scheme1.singular(), JsonNodeFactory.instance.objectNode());
+        assertEquals(scheme1, scheme3);
+
+        // singular and plural are not included in equals and hashCode.
+        var scheme4 = new Scheme(FakeExtension.class, scheme1.groupVersionKind(),
+            scheme1.plural(), "other", scheme1.openApiSchema());
+        assertEquals(scheme1, scheme4);
+
+        // plural is not included in equals and hashCode.
+        var scheme5 = new Scheme(FakeExtension.class, scheme1.groupVersionKind(),
+            "other", scheme1.singular(), scheme1.openApiSchema());
+        assertEquals(scheme1, scheme5);
+
+        // type is not included in equals and hashCode.
+        var scheme6 = new Scheme(FakeExtension.class, scheme1.groupVersionKind(),
+            scheme1.plural(), scheme1.singular(), scheme1.openApiSchema());
+        assertEquals(scheme1, scheme6);
+
+        // groupVersionKind is included in equals and hashCode.
+        var scheme7 = new Scheme(FakeExtension.class,
+            new GroupVersionKind("other.halo.run", "v1alpha1", "Fake"),
+            scheme1.plural(), scheme1.singular(), scheme1.openApiSchema());
+        assertNotEquals(scheme1, scheme7);
+
+        scheme7 = new Scheme(FakeExtension.class,
+            new GroupVersionKind("fake.halo.run", "v1alpha2", "Fake"),
+            scheme1.plural(), scheme1.singular(), scheme1.openApiSchema());
+        assertNotEquals(scheme1, scheme7);
+
+        scheme7 = new Scheme(FakeExtension.class,
+            new GroupVersionKind("fake.halo.run", "v1alpha1", "Other"),
+            scheme1.plural(), scheme1.singular(), scheme1.openApiSchema());
+        assertNotEquals(scheme1, scheme7);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/UnstructuredTest.java b/application/src/test/java/run/halo/app/extension/UnstructuredTest.java
new file mode 100644
index 0000000..8db9b04
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/UnstructuredTest.java
@@ -0,0 +1,152 @@
+package run.halo.app.extension;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static run.halo.app.extension.MetadataOperator.metadataDeepEquals;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import java.time.Instant;
+import java.util.Map;
+import java.util.Set;
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+
+class UnstructuredTest {
+
+    ObjectMapper objectMapper = Unstructured.OBJECT_MAPPER;
+
+    String extensionJson = """
+        {
+            "apiVersion": "fake.halo.run/v1alpha1",
+            "kind": "Fake",
+            "metadata": {
+                "labels": {
+                    "category": "fake",
+                    "default": "true"
+                },
+                "name": "fake-extension",
+                "creationTimestamp": "2011-12-03T10:15:30Z",
+                "version": 12345,
+                "finalizers": ["finalizer.1", "finalizer.2"]
+            }
+        }
+        """;
+
+    @Test
+    void shouldSerializeCorrectly() throws JsonProcessingException {
+        Map extensionMap = objectMapper.readValue(extensionJson, Map.class);
+        var extension = new Unstructured(extensionMap);
+
+        var gotNode = objectMapper.valueToTree(extension);
+        assertEquals(objectMapper.readTree(extensionJson), gotNode);
+    }
+
+    @Test
+    void shouldSetCreationTimestamp() throws JsonProcessingException, JSONException {
+        Map extensionMap = objectMapper.readValue(extensionJson, Map.class);
+        var extension = new Unstructured(extensionMap);
+
+        var beforeChange = objectMapper.writeValueAsString(extension);
+
+        var metadata = extension.getMetadata();
+        metadata.setCreationTimestamp(metadata.getCreationTimestamp());
+
+        var afterChange = objectMapper.writeValueAsString(extension);
+
+        JSONAssert.assertEquals(beforeChange, afterChange, true);
+    }
+
+    @Test
+    void shouldDeserializeCorrectly() throws JsonProcessingException, JSONException {
+        var extension = objectMapper.readValue(extensionJson, Unstructured.class);
+        var gotJson = objectMapper.writeValueAsString(extension);
+        JSONAssert.assertEquals(extensionJson, gotJson, true);
+    }
+
+    @Test
+    void shouldGetExtensionCorrectly() throws JsonProcessingException {
+        var extension = objectMapper.readValue(extensionJson, Unstructured.class);
+
+        assertEquals("fake.halo.run/v1alpha1", extension.getApiVersion());
+        assertEquals("Fake", extension.getKind());
+        metadataDeepEquals(createMetadata(), extension.getMetadata());
+    }
+
+    @Test
+    void shouldSetExtensionCorrectly() {
+        var extension = createUnstructured();
+
+        assertEquals("fake.halo.run/v1alpha1", extension.getApiVersion());
+        assertEquals("Fake", extension.getKind());
+        assertTrue(metadataDeepEquals(createMetadata(), extension.getMetadata()));
+    }
+
+    @Test
+    void shouldBeEqual() {
+        assertEquals(new Unstructured(), new Unstructured());
+        assertEquals(createUnstructured(), createUnstructured());
+    }
+
+    @Test
+    void shouldNotBeEqual() {
+        var another = createUnstructured();
+        another.getMetadata().setName("fake-extension-2");
+        assertNotEquals(createUnstructured(), another);
+    }
+
+    @Test
+    void shouldGetFinalizersCorrectly() throws JsonProcessingException {
+        var extension = objectMapper.readValue(extensionJson, Unstructured.class);
+
+        assertEquals(Set.of("finalizer.1", "finalizer.2"), extension.getMetadata().getFinalizers());
+
+        extension.getMetadata().setFinalizers(Set.of("finalizer.3", "finalizer.4"));
+        assertEquals(Set.of("finalizer.3", "finalizer.4"), extension.getMetadata().getFinalizers());
+    }
+
+    @Test
+    void shouldSetLabelsCorrectly() throws JsonProcessingException {
+        var extension = objectMapper.readValue(extensionJson, Unstructured.class);
+
+        assertEquals(Map.of("category", "fake", "default", "true"),
+            extension.getMetadata().getLabels());
+
+        extension.getMetadata().setLabels(Map.of("category", "fake", "default", "false"));
+        assertEquals(Map.of("category", "fake", "default", "false"),
+            extension.getMetadata().getLabels());
+    }
+
+    @Test
+    void shouldSetAnnotationsCorrectly() throws JsonProcessingException {
+        var extension = objectMapper.readValue(extensionJson, Unstructured.class);
+
+        assertNull(extension.getMetadata().getAnnotations());
+
+        extension.getMetadata()
+            .setAnnotations(Map.of("annotation1", "value1", "annotation2", "value2"));
+        assertEquals(Map.of("annotation1", "value1", "annotation2", "value2"),
+            extension.getMetadata().getAnnotations());
+    }
+
+    Unstructured createUnstructured() {
+        var unstructured = new Unstructured();
+        unstructured.setApiVersion("fake.halo.run/v1alpha1");
+        unstructured.setKind("Fake");
+        unstructured.setMetadata(createMetadata());
+        return unstructured;
+    }
+
+    private Metadata createMetadata() {
+        var metadata = new Metadata();
+        metadata.setName("fake-extension");
+        metadata.setLabels(Map.of("category", "fake", "default", "true"));
+        metadata.setCreationTimestamp(Instant.parse("2011-12-03T10:15:30Z"));
+        metadata.setVersion(12345L);
+        return metadata;
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/extension/gc/GcReconcilerTest.java b/application/src/test/java/run/halo/app/extension/gc/GcReconcilerTest.java
new file mode 100644
index 0000000..455b5b8
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/gc/GcReconcilerTest.java
@@ -0,0 +1,127 @@
+package run.halo.app.extension.gc;
+
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import java.util.Optional;
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.ExtensionConverter;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.Unstructured;
+import run.halo.app.extension.index.Indexer;
+import run.halo.app.extension.index.IndexerFactory;
+import run.halo.app.extension.store.ExtensionStore;
+import run.halo.app.extension.store.ExtensionStoreClient;
+
+@ExtendWith(MockitoExtension.class)
+class GcReconcilerTest {
+
+    @Mock
+    ExtensionClient client;
+
+    @Mock
+    ExtensionStoreClient storeClient;
+
+    @Mock
+    ExtensionConverter converter;
+
+    @Mock
+    IndexerFactory indexerFactory;
+
+    @InjectMocks
+    GcReconciler reconciler;
+
+    @Test
+    void shouldDoNothingIfExtensionNotFound() {
+        var fake = createExtension();
+        when(client.fetch(fake.groupVersionKind(), fake.getMetadata().getName()))
+            .thenReturn(Optional.empty());
+
+        var result = reconciler.reconcile(createGcRequest());
+        assertNull(result);
+        verify(converter, never()).convertTo(any());
+        verify(storeClient, never()).delete(any(), any());
+    }
+
+    @Test
+    void shouldDoNothingIfFinalizersPresent() {
+        var fake = createExtension();
+        fake.getMetadata().setFinalizers(Set.of("fake-finalizer"));
+        fake.getMetadata().setDeletionTimestamp(null);
+        when(client.fetch(fake.groupVersionKind(), fake.getMetadata().getName()))
+            .thenReturn(Optional.of(convertTo(fake)));
+
+        var result = reconciler.reconcile(createGcRequest());
+        assertNull(result);
+        verify(converter, never()).convertTo(any());
+        verify(storeClient, never()).delete(any(), any());
+    }
+
+    @Test
+    void shouldDoNothingIfDeletionTimestampIsNull() {
+        var fake = createExtension();
+        fake.getMetadata().setDeletionTimestamp(null);
+        fake.getMetadata().setFinalizers(null);
+        when(client.fetch(fake.groupVersionKind(), fake.getMetadata().getName()))
+            .thenReturn(Optional.of(convertTo(fake)));
+
+        var result = reconciler.reconcile(createGcRequest());
+        assertNull(result);
+        verify(converter, never()).convertTo(any());
+        verify(storeClient, never()).delete(any(), any());
+    }
+
+    @Test
+    void shouldDeleteCorrectly() {
+        var fake = createExtension();
+        fake.getMetadata().setDeletionTimestamp(Instant.now());
+        fake.getMetadata().setFinalizers(null);
+        when(client.fetch(fake.groupVersionKind(), fake.getMetadata().getName()))
+            .thenReturn(Optional.of(convertTo(fake)));
+
+        ExtensionStore store = new ExtensionStore();
+        store.setName("fake-store-name");
+        store.setVersion(1L);
+
+        when(converter.convertTo(any())).thenReturn(store);
+
+        var indexer = mock(Indexer.class);
+        when(indexerFactory.getIndexer(any())).thenReturn(indexer);
+
+        var result = reconciler.reconcile(createGcRequest());
+        assertNull(result);
+        verify(converter).convertTo(any());
+        verify(storeClient).delete("fake-store-name", 1L);
+        verify(indexer).unIndexRecord(eq(fake.getMetadata().getName()));
+    }
+
+    GcRequest createGcRequest() {
+        var fake = createExtension();
+        return new GcRequest(fake.groupVersionKind(), fake.getMetadata().getName());
+    }
+
+    Unstructured convertTo(FakeExtension fake) {
+        return Unstructured.OBJECT_MAPPER.convertValue(fake, Unstructured.class);
+    }
+
+    FakeExtension createExtension() {
+        var fake = new FakeExtension();
+        var metadata = new Metadata();
+        metadata.setName("fake");
+        fake.setMetadata(metadata);
+        return fake;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/gc/GcSynchronizerTest.java b/application/src/test/java/run/halo/app/extension/gc/GcSynchronizerTest.java
new file mode 100644
index 0000000..48c270d
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/gc/GcSynchronizerTest.java
@@ -0,0 +1,52 @@
+package run.halo.app.extension.gc;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.Mockito.verify;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.SchemeManager;
+import run.halo.app.extension.SchemeWatcherManager;
+import run.halo.app.extension.SchemeWatcherManager.SchemeWatcher;
+
+@ExtendWith(MockitoExtension.class)
+class GcSynchronizerTest {
+
+    @Mock
+    ExtensionClient client;
+
+    @Mock
+    SchemeManager schemeManager;
+
+    @Mock
+    SchemeWatcherManager schemeWatcherManager;
+
+    @InjectMocks
+    GcSynchronizer synchronizer;
+
+    @Test
+    void shouldStartNormally() {
+        synchronizer.start();
+
+        assertFalse(synchronizer.isDisposed());
+        verify(schemeWatcherManager).register(any(SchemeWatcher.class));
+        verify(client).watch(isA(GcWatcher.class));
+        verify(schemeManager).schemes();
+    }
+
+    @Test
+    void shouldDisposeSuccessfully() {
+        assertFalse(synchronizer.isDisposed());
+
+        synchronizer.dispose();
+
+        assertTrue(synchronizer.isDisposed());
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/gc/GcWatcherTest.java b/application/src/test/java/run/halo/app/extension/gc/GcWatcherTest.java
new file mode 100644
index 0000000..e36f85d
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/gc/GcWatcherTest.java
@@ -0,0 +1,92 @@
+package run.halo.app.extension.gc;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+
+import java.time.Instant;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.controller.RequestQueue;
+
+@ExtendWith(MockitoExtension.class)
+class GcWatcherTest {
+
+    @Mock
+    RequestQueue queue;
+
+    @InjectMocks
+    GcWatcher watcher;
+
+    @Test
+    void shouldAddIntoQueueWhenDeletionTimestampSet() {
+        var fake = createExtension();
+        fake.getMetadata().setDeletionTimestamp(Instant.now());
+
+        watcher.onAdd(fake);
+        verify(queue).addImmediately(any(GcRequest.class));
+
+        watcher.onUpdate(fake, fake);
+        verify(queue, times(2)).addImmediately(any(GcRequest.class));
+
+        watcher.onDelete(fake);
+        verify(queue, times(3)).addImmediately(any(GcRequest.class));
+    }
+
+    @Test
+    void shouldNotAddIntoQueueWhenDeletionTimestampNotSet() {
+        var fake = createExtension();
+        watcher.onAdd(fake);
+        verify(queue, never()).addImmediately(any(GcRequest.class));
+
+        watcher.onUpdate(fake, fake);
+        verify(queue, never()).addImmediately(any(GcRequest.class));
+
+        watcher.onDelete(fake);
+        verify(queue, never()).addImmediately(any(GcRequest.class));
+    }
+
+    @Test
+    void shouldNotAddIntoQueueWhenDisposed() {
+        var fake = createExtension();
+        fake.getMetadata().setDeletionTimestamp(Instant.now());
+        watcher.dispose();
+
+        watcher.onAdd(fake);
+        verify(queue, never()).addImmediately(any(GcRequest.class));
+
+        watcher.onUpdate(fake, fake);
+        verify(queue, never()).addImmediately(any(GcRequest.class));
+
+        watcher.onDelete(fake);
+        verify(queue, never()).addImmediately(any(GcRequest.class));
+    }
+
+    @Test
+    void shouldDisposeHookCorrectly() {
+        var run = mock(Runnable.class);
+        watcher.registerDisposeHook(run);
+        assertFalse(watcher.isDisposed());
+        watcher.dispose();
+        assertTrue(watcher.isDisposed());
+        verify(run).run();
+    }
+
+
+    FakeExtension createExtension() {
+        var fake = new FakeExtension();
+        Metadata metadata = new Metadata();
+        metadata.setName("fake");
+        fake.setMetadata(metadata);
+        return fake;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/DefaultExtensionIteratorTest.java b/application/src/test/java/run/halo/app/extension/index/DefaultExtensionIteratorTest.java
new file mode 100644
index 0000000..d71d580
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/DefaultExtensionIteratorTest.java
@@ -0,0 +1,85 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import java.util.NoSuchElementException;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.data.domain.Page;
+import org.springframework.data.domain.PageRequest;
+import org.springframework.data.domain.Pageable;
+import org.springframework.data.domain.Sort;
+import run.halo.app.extension.Extension;
+
+/**
+ * Tests for {@link DefaultExtensionIterator}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultExtensionIteratorTest {
+
+    @Mock
+    private ExtensionPaginatedLister lister;
+
+    @Test
+    @SuppressWarnings("unchecked")
+    void testConstructor_loadsData() {
+        Page page = mock(Page.class);
+        when(page.getContent()).thenReturn(List.of(mock(Extension.class)));
+        when(page.hasNext()).thenReturn(true);
+        when(page.nextPageable()).thenReturn(
+            PageRequest.of(1, DefaultExtensionIterator.DEFAULT_PAGE_SIZE, Sort.by("name")));
+        when(lister.list(any())).thenReturn(page);
+
+        var iterator = new DefaultExtensionIterator<>(lister);
+
+        assertThat(iterator.hasNext()).isTrue();
+    }
+
+    @Test
+    @SuppressWarnings("unchecked")
+    void hasNext_whenNextPageExists_loadsNextPage() {
+        Page page1 = mock(Page.class);
+        when(page1.getContent()).thenReturn(List.of(mock(Extension.class)));
+        when(page1.hasNext()).thenReturn(true);
+        when(page1.nextPageable()).thenReturn(
+            PageRequest.of(1, DefaultExtensionIterator.DEFAULT_PAGE_SIZE, Sort.by("name")));
+
+        Page page2 = mock(Page.class);
+        when(page2.getContent()).thenReturn(List.of(mock(Extension.class)));
+        when(page2.hasNext()).thenReturn(false);
+
+        when(lister.list(any(Pageable.class))).thenReturn(page1, page2);
+
+        var iterator = new DefaultExtensionIterator<>(lister);
+        // consume first page
+        iterator.next();
+
+        // should load the next page
+        assertThat(iterator.hasNext()).isTrue();
+    }
+
+    @Test
+    @SuppressWarnings("unchecked")
+    void next_whenNoNextElement_throwsException() {
+        Page page = mock(Page.class);
+        when(page.getContent()).thenReturn(List.of(mock(Extension.class)));
+        when(page.hasNext()).thenReturn(false);
+        when(lister.list(any())).thenReturn(page);
+
+        var iterator = new DefaultExtensionIterator<>(lister);
+        // consume only element
+        iterator.next();
+
+        assertThatThrownBy(iterator::next).isInstanceOf(NoSuchElementException.class);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/DefaultIndexSpecsTest.java b/application/src/test/java/run/halo/app/extension/index/DefaultIndexSpecsTest.java
new file mode 100644
index 0000000..1b12a81
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/DefaultIndexSpecsTest.java
@@ -0,0 +1,75 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static run.halo.app.extension.index.PrimaryKeySpecUtils.primaryKeyIndexSpec;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+
+/**
+ * Test for {@link DefaultIndexSpecs}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+class DefaultIndexSpecsTest {
+
+    @Test
+    void add() {
+        var specs = new DefaultIndexSpecs();
+        specs.add(primaryKeyIndexSpec(FakeExtension.class));
+        assertThat(specs.contains(PrimaryKeySpecUtils.PRIMARY_INDEX_NAME)).isTrue();
+    }
+
+    @Test
+    void addWithException() {
+        var specs = new DefaultIndexSpecs();
+        var nameSpec = new IndexSpec().setName("test");
+        assertThatThrownBy(() -> specs.add(nameSpec))
+            .isInstanceOf(IllegalArgumentException.class)
+            .hasMessage("IndexSpec indexFunc must not be null");
+        nameSpec.setIndexFunc(IndexAttributeFactory.simpleAttribute(FakeExtension.class,
+            e -> e.getMetadata().getName()));
+        specs.add(nameSpec);
+        assertThatThrownBy(() -> specs.add(nameSpec))
+            .isInstanceOf(IllegalArgumentException.class)
+            .hasMessage("IndexSpec with name test already exists");
+    }
+
+    @Test
+    void getIndexSpecs() {
+        var specs = new DefaultIndexSpecs();
+        specs.add(primaryKeyIndexSpec(FakeExtension.class));
+        assertThat(specs.getIndexSpecs()).hasSize(1);
+    }
+
+    @Test
+    void getIndexSpec() {
+        var specs = new DefaultIndexSpecs();
+        var nameSpec = primaryKeyIndexSpec(FakeExtension.class);
+        specs.add(nameSpec);
+        assertThat(specs.getIndexSpec(PrimaryKeySpecUtils.PRIMARY_INDEX_NAME)).isEqualTo(nameSpec);
+    }
+
+    @Test
+    void remove() {
+        var specs = new DefaultIndexSpecs();
+        var nameSpec = primaryKeyIndexSpec(FakeExtension.class);
+        specs.add(nameSpec);
+        assertThat(specs.contains(PrimaryKeySpecUtils.PRIMARY_INDEX_NAME)).isTrue();
+        specs.remove(PrimaryKeySpecUtils.PRIMARY_INDEX_NAME);
+        assertThat(specs.contains(PrimaryKeySpecUtils.PRIMARY_INDEX_NAME)).isFalse();
+    }
+
+    @Data
+    @EqualsAndHashCode(callSuper = true)
+    @GVK(group = "test", version = "v1", kind = "FakeExtension", plural = "fakeextensions",
+        singular = "fakeextension")
+    static class FakeExtension extends AbstractExtension {
+        private String email;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/DefaultIndexerTest.java b/application/src/test/java/run/halo/app/extension/index/DefaultIndexerTest.java
new file mode 100644
index 0000000..a1d6010
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/DefaultIndexerTest.java
@@ -0,0 +1,277 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import java.util.List;
+import java.util.Map;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.exception.DuplicateNameException;
+
+/**
+ * Tests for {@link DefaultIndexer}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultIndexerTest {
+
+    private static FakeExtension createFakeExtension() {
+        var fake = new FakeExtension();
+        fake.setMetadata(new Metadata());
+        fake.getMetadata().setName("fake-extension");
+        fake.setEmail("fake-email");
+        return fake;
+    }
+
+    private static IndexSpec getNameIndexSpec() {
+        return getIndexSpec("metadata.name", true,
+            IndexAttributeFactory.simpleAttribute(FakeExtension.class,
+                e -> e.getMetadata().getName()));
+    }
+
+    private static IndexSpec getIndexSpec(String name, boolean unique, IndexAttribute attribute) {
+        return new IndexSpec()
+            .setName(name)
+            .setOrder(IndexSpec.OrderType.ASC)
+            .setUnique(unique)
+            .setIndexFunc(attribute);
+    }
+
+    @Test
+    void constructor() {
+        var spec = getNameIndexSpec();
+        var descriptor = new IndexDescriptor(spec);
+        descriptor.setReady(true);
+        var indexContainer = new IndexEntryContainer();
+        indexContainer.add(new IndexEntryImpl(descriptor));
+        new DefaultIndexer(List.of(descriptor), indexContainer);
+    }
+
+    @Test
+    void constructorWithException() {
+        var spec = getNameIndexSpec();
+        var descriptor = new IndexDescriptor(spec);
+        var indexContainer = new IndexEntryContainer();
+        assertThatThrownBy(() -> new DefaultIndexer(List.of(descriptor), indexContainer))
+            .isInstanceOf(IllegalArgumentException.class)
+            .hasMessage("Index descriptor is not ready for: metadata.name");
+        descriptor.setReady(true);
+        assertThatThrownBy(() -> new DefaultIndexer(List.of(descriptor), indexContainer))
+            .isInstanceOf(IllegalArgumentException.class)
+            .hasMessage("Index entry not found for: metadata.name");
+    }
+
+    @Test
+    void getIndexEntryTest() {
+        var spec = getNameIndexSpec();
+        var descriptor = new IndexDescriptor(spec);
+        descriptor.setReady(true);
+        var indexContainer = new IndexEntryContainer();
+        indexContainer.add(new IndexEntryImpl(descriptor));
+
+        var defaultIndexer = new DefaultIndexer(List.of(descriptor), indexContainer);
+        assertThatThrownBy(() -> defaultIndexer.getIndexEntry("not-exist"))
+            .isInstanceOf(IllegalArgumentException.class)
+            .hasMessage("No index found for fieldPath [not-exist], "
+                + "make sure you have created an index for this field.");
+
+        assertThat(defaultIndexer.getIndexEntry("metadata.name")).isNotNull();
+    }
+
+    @Test
+    void getObjectKey() {
+        var fake = createFakeExtension();
+        assertThat(DefaultIndexer.getObjectKey(fake)).isEqualTo("fake-extension");
+    }
+
+    @Test
+    void indexRecord() {
+        var nameIndex = getNameIndexSpec();
+        var indexContainer = new IndexEntryContainer();
+        var descriptor = new IndexDescriptor(nameIndex);
+        descriptor.setReady(true);
+        indexContainer.add(new IndexEntryImpl(descriptor));
+
+        var indexer = new DefaultIndexer(List.of(descriptor), indexContainer);
+        indexer.indexRecord(createFakeExtension());
+
+        var iterator = indexer.allIndexesIterator();
+        assertThat(iterator.hasNext()).isTrue();
+        var indexEntry = iterator.next();
+        var entries = indexEntry.entries();
+        assertThat(entries).hasSize(1);
+        assertThat(entries).contains(Map.entry("fake-extension", "fake-extension"));
+    }
+
+    @Test
+    void indexRecordWithExceptionShouldRollback() {
+        var indexContainer = new IndexEntryContainer();
+        // add email before name
+        var emailDescriptor = new IndexDescriptor(getIndexSpec("email", false,
+            IndexAttributeFactory.simpleAttribute(FakeExtension.class, FakeExtension::getEmail)));
+        emailDescriptor.setReady(true);
+        var emailIndexEntry = new IndexEntryImpl(emailDescriptor);
+        indexContainer.add(emailIndexEntry);
+
+        var descriptor = new IndexDescriptor(getNameIndexSpec());
+        descriptor.setReady(true);
+        var nameIndexEntry = new IndexEntryImpl(descriptor);
+        indexContainer.add(nameIndexEntry);
+
+        var indexer = new DefaultIndexer(List.of(descriptor, emailDescriptor), indexContainer);
+
+        indexer.indexRecord(createFakeExtension());
+        assertThat(emailIndexEntry.entries()).hasSize(1);
+        assertThat(nameIndexEntry.entries()).hasSize(1);
+
+        var fake2 = createFakeExtension();
+        fake2.setEmail("email-2");
+
+        // email applied to entry then name duplicate
+        assertThatThrownBy(() -> indexer.indexRecord(fake2))
+            .isInstanceOf(DuplicateNameException.class)
+            .hasMessage(
+                "400 BAD_REQUEST \"The value [fake-extension] is already exists for unique index "
+                    + "[metadata.name].\"");
+
+        // should be rollback email-2 key
+        assertThat(emailIndexEntry.entries()).hasSize(1);
+        assertThat(nameIndexEntry.entries()).hasSize(1);
+    }
+
+    @Test
+    void updateRecordWithExceptionShouldRollback() {
+        var indexContainer = new IndexEntryContainer();
+        // add email before name
+        var emailDescriptor = new IndexDescriptor(getIndexSpec("email", false,
+            IndexAttributeFactory.simpleAttribute(FakeExtension.class, FakeExtension::getEmail)));
+        emailDescriptor.setReady(true);
+        var emailIndexEntry = new IndexEntryImpl(emailDescriptor);
+        indexContainer.add(emailIndexEntry);
+
+        var descriptor = new IndexDescriptor(getNameIndexSpec());
+        descriptor.setReady(true);
+        var nameIndexEntry = new IndexEntryImpl(descriptor);
+        indexContainer.add(nameIndexEntry);
+
+        var indexer = new DefaultIndexer(List.of(descriptor, emailDescriptor), indexContainer);
+
+        var fakeExtension = createFakeExtension();
+        indexer.indexRecord(fakeExtension);
+
+        assertThat(emailIndexEntry.entries()).hasSize(1);
+        assertThat(emailIndexEntry.entries()).contains(Map.entry("fake-email", "fake-extension"));
+        assertThat(nameIndexEntry.entries()).hasSize(1);
+        assertThat(nameIndexEntry.entries()).contains(
+            Map.entry("fake-extension", "fake-extension"));
+
+        fakeExtension.setEmail("email-2");
+        indexer.updateRecord(fakeExtension);
+        assertThat(emailIndexEntry.entries()).hasSize(1);
+        assertThat(emailIndexEntry.entries()).contains(Map.entry("email-2", "fake-extension"));
+        assertThat(nameIndexEntry.entries()).hasSize(1);
+        assertThat(nameIndexEntry.entries()).contains(
+            Map.entry("fake-extension", "fake-extension"));
+
+        fakeExtension.getMetadata().setName("fake-extension-2");
+        indexer.updateRecord(fakeExtension);
+        assertThat(emailIndexEntry.entries())
+            .containsExactly(Map.entry("email-2", "fake-extension"),
+                Map.entry("email-2", "fake-extension-2"));
+        assertThat(nameIndexEntry.entries())
+            .containsExactly(Map.entry("fake-extension", "fake-extension"),
+                Map.entry("fake-extension-2", "fake-extension-2"));
+    }
+
+    @Test
+    void findIndexByName() {
+        var indexContainer = new IndexEntryContainer();
+        // add email before name
+        var emailDescriptor = new IndexDescriptor(getIndexSpec("email", false,
+            IndexAttributeFactory.simpleAttribute(FakeExtension.class, FakeExtension::getEmail)));
+        emailDescriptor.setReady(true);
+        var emailIndexEntry = new IndexEntryImpl(emailDescriptor);
+        indexContainer.add(emailIndexEntry);
+
+        var descriptor = new IndexDescriptor(getNameIndexSpec());
+        descriptor.setReady(true);
+        var nameIndexEntry = new IndexEntryImpl(descriptor);
+        indexContainer.add(nameIndexEntry);
+
+        var indexer = new DefaultIndexer(List.of(descriptor, emailDescriptor), indexContainer);
+
+        var foundNameDescriptor = indexer.findIndexByName("metadata.name");
+        assertThat(foundNameDescriptor).isNotNull();
+        assertThat(foundNameDescriptor).isEqualTo(descriptor);
+
+        var foundEmailDescriptor = indexer.findIndexByName("email");
+        assertThat(foundEmailDescriptor).isNotNull();
+        assertThat(foundEmailDescriptor).isEqualTo(emailDescriptor);
+    }
+
+    @Test
+    void createIndexEntry() {
+        var nameSpec = getNameIndexSpec();
+        var descriptor = new IndexDescriptor(nameSpec);
+        descriptor.setReady(true);
+        var indexContainer = new IndexEntryContainer();
+        indexContainer.add(new IndexEntryImpl(descriptor));
+        var indexer = new DefaultIndexer(List.of(descriptor), indexContainer);
+        var indexEntry = indexer.createIndexEntry(descriptor);
+        assertThat(indexEntry).isNotNull();
+    }
+
+    @Test
+    void removeIndexRecord() {
+        var nameIndex = getNameIndexSpec();
+        var indexContainer = new IndexEntryContainer();
+        var descriptor = new IndexDescriptor(nameIndex);
+        descriptor.setReady(true);
+        var nameIndexEntry = new IndexEntryImpl(descriptor);
+        indexContainer.add(nameIndexEntry);
+
+        var indexer = new DefaultIndexer(List.of(descriptor), indexContainer);
+        indexer.indexRecord(createFakeExtension());
+
+        assertThat(nameIndexEntry.entries())
+            .containsExactly(Map.entry("fake-extension", "fake-extension"));
+
+        indexer.removeIndexRecords(d -> true);
+        assertThat(nameIndexEntry.entries()).isEmpty();
+    }
+
+    @Test
+    void readyIndexesIterator() {
+        var indexContainer = new IndexEntryContainer();
+        var descriptor = new IndexDescriptor(getNameIndexSpec());
+        descriptor.setReady(true);
+        var nameIndexEntry = new IndexEntryImpl(descriptor);
+        indexContainer.add(nameIndexEntry);
+
+        var indexer = new DefaultIndexer(List.of(descriptor), indexContainer);
+
+        var iterator = indexer.readyIndexesIterator();
+        assertThat(iterator.hasNext()).isTrue();
+
+        descriptor.setReady(false);
+        iterator = indexer.readyIndexesIterator();
+        assertThat(iterator.hasNext()).isFalse();
+    }
+
+    @Data
+    @EqualsAndHashCode(callSuper = true)
+    @GVK(group = "test", version = "v1", kind = "FakeExtension", plural = "fakeextensions",
+        singular = "fakeextension")
+    static class FakeExtension extends AbstractExtension {
+        private String email;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/IndexDescriptorTest.java b/application/src/test/java/run/halo/app/extension/index/IndexDescriptorTest.java
new file mode 100644
index 0000000..08c3e44
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/IndexDescriptorTest.java
@@ -0,0 +1,40 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.FakeExtension;
+
+/**
+ * Tests for {@link IndexDescriptor}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+class IndexDescriptorTest {
+
+    @Test
+    void equalsVerifier() {
+        var spec1 = new IndexSpec()
+            .setName("metadata.name")
+            .setOrder(IndexSpec.OrderType.ASC)
+            .setIndexFunc(IndexAttributeFactory.simpleAttribute(FakeExtension.class,
+                e -> e.getMetadata().getName())
+            )
+            .setUnique(true);
+
+        var descriptor = new IndexDescriptor(spec1);
+        var descriptor2 = new IndexDescriptor(spec1);
+        assertThat(descriptor).isEqualTo(descriptor2);
+
+        var spec2 = new IndexSpec()
+            .setName("metadata.name")
+            .setOrder(IndexSpec.OrderType.DESC)
+            .setIndexFunc(IndexAttributeFactory.simpleAttribute(FakeExtension.class,
+                e -> e.getMetadata().getName())
+            )
+            .setUnique(false);
+        var descriptor3 = new IndexDescriptor(spec2);
+        assertThat(descriptor).isEqualTo(descriptor3);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/IndexEntryContainerTest.java b/application/src/test/java/run/halo/app/extension/index/IndexEntryContainerTest.java
new file mode 100644
index 0000000..05eb534
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/IndexEntryContainerTest.java
@@ -0,0 +1,56 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+
+/**
+ * Tests for {@link IndexEntryContainer}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+class IndexEntryContainerTest {
+
+    @Test
+    void add() {
+        IndexEntryContainer indexEntry = new IndexEntryContainer();
+        var spec = PrimaryKeySpecUtils.primaryKeyIndexSpec(FakeExtension.class);
+        var descriptor = new IndexDescriptor(spec);
+        var entry = new IndexEntryImpl(descriptor);
+        indexEntry.add(entry);
+        assertThat(indexEntry.contains(descriptor)).isTrue();
+
+        assertThatThrownBy(() -> indexEntry.add(entry))
+            .isInstanceOf(IllegalArgumentException.class)
+            .hasMessage("Index entry already exists for " + descriptor);
+    }
+
+    @Test
+    void remove() {
+        IndexEntryContainer indexEntry = new IndexEntryContainer();
+        var spec = PrimaryKeySpecUtils.primaryKeyIndexSpec(FakeExtension.class);
+        var descriptor = new IndexDescriptor(spec);
+        var entry = new IndexEntryImpl(descriptor);
+        indexEntry.add(entry);
+        assertThat(indexEntry.contains(descriptor)).isTrue();
+        assertThat(indexEntry.size()).isEqualTo(1);
+
+        indexEntry.remove(descriptor);
+        assertThat(indexEntry.contains(descriptor)).isFalse();
+        assertThat(indexEntry.size()).isEqualTo(0);
+    }
+
+    @Data
+    @EqualsAndHashCode(callSuper = true)
+    @GVK(group = "test", version = "v1", kind = "FakeExtension", plural = "fakes",
+        singular = "fake")
+    static class FakeExtension extends AbstractExtension {
+
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/IndexEntryImplTest.java b/application/src/test/java/run/halo/app/extension/index/IndexEntryImplTest.java
new file mode 100644
index 0000000..fbadfed
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/IndexEntryImplTest.java
@@ -0,0 +1,150 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.when;
+import static run.halo.app.extension.index.query.IndexViewDataSet.createCommentIndexView;
+
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.extension.index.query.IndexViewDataSet;
+import run.halo.app.extension.index.query.QueryIndexView;
+
+/**
+ * Tests for {@link IndexEntryImpl}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+@ExtendWith(MockitoExtension.class)
+class IndexEntryImplTest {
+
+    @Test
+    void add() {
+        var spec =
+            PrimaryKeySpecUtils.primaryKeyIndexSpec(IndexEntryContainerTest.FakeExtension.class);
+        var descriptor = new IndexDescriptor(spec);
+        var entry = new IndexEntryImpl(descriptor);
+        entry.addEntry(List.of("slug-1"), "fake-name-1");
+        assertThat(entry.indexedKeys()).containsExactly("slug-1");
+    }
+
+    @Test
+    void remove() {
+        var spec =
+            PrimaryKeySpecUtils.primaryKeyIndexSpec(IndexEntryContainerTest.FakeExtension.class);
+        var descriptor = new IndexDescriptor(spec);
+        var entry = new IndexEntryImpl(descriptor);
+        entry.addEntry(List.of("slug-1"), "fake-name-1");
+        assertThat(entry.indexedKeys()).containsExactly("slug-1");
+        assertThat(entry.entries()).hasSize(1);
+
+        entry.removeEntry("slug-1", "fake-name-1");
+        assertThat(entry.indexedKeys()).isEmpty();
+        assertThat(entry.entries()).isEmpty();
+    }
+
+    @Test
+    void removeByIndex() {
+        var spec =
+            PrimaryKeySpecUtils.primaryKeyIndexSpec(IndexEntryContainerTest.FakeExtension.class);
+        var descriptor = new IndexDescriptor(spec);
+        var entry = new IndexEntryImpl(descriptor);
+        entry.addEntry(List.of("slug-1", "slug-2"), "fake-name-1");
+        assertThat(entry.indexedKeys()).containsExactly("slug-1", "slug-2");
+        assertThat(entry.entries()).hasSize(2);
+
+        entry.remove("fake-name-1");
+        assertThat(entry.indexedKeys()).isEmpty();
+        assertThat(entry.entries()).isEmpty();
+    }
+
+    @Test
+    void getObjectIdsTest() {
+        var spec =
+            PrimaryKeySpecUtils.primaryKeyIndexSpec(IndexEntryContainerTest.FakeExtension.class);
+        var descriptor = new IndexDescriptor(spec);
+        var entry = new IndexEntryImpl(descriptor);
+        entry.addEntry(List.of("slug-1", "slug-2"), "fake-name-1");
+        assertThat(entry.indexedKeys()).containsExactly("slug-1", "slug-2");
+        assertThat(entry.entries()).hasSize(2);
+
+        assertThat(entry.getObjectNamesBy("slug-1")).isEqualTo(List.of("fake-name-1"));
+    }
+
+    @Test
+    void keyOrder() {
+        var spec =
+            PrimaryKeySpecUtils.primaryKeyIndexSpec(IndexEntryContainerTest.FakeExtension.class);
+        spec.setOrder(IndexSpec.OrderType.DESC);
+        var descriptor = new IndexDescriptor(spec);
+        var entry = new IndexEntryImpl(descriptor);
+        entry.addEntry(List.of("slug-1", "slug-2"), "fake-name-1");
+        entry.addEntry(List.of("slug-3"), "fake-name-2");
+        entry.addEntry(List.of("slug-4"), "fake-name-3");
+        entry.addEntry(List.of("slug-5"), "fake-name-1");
+        assertThat(entry.entries())
+            .containsSequence(
+                Map.entry("slug-5", "fake-name-1"),
+                Map.entry("slug-4", "fake-name-3"),
+                Map.entry("slug-3", "fake-name-2"),
+                Map.entry("slug-2", "fake-name-1"),
+                Map.entry("slug-1", "fake-name-1"));
+
+        assertThat(entry.indexedKeys()).containsSequence("slug-4", "slug-3", "slug-2", "slug-1");
+
+        spec.setOrder(IndexSpec.OrderType.ASC);
+        var descriptor2 = new IndexDescriptor(spec);
+        var entry2 = new IndexEntryImpl(descriptor2);
+        entry2.addEntry(List.of("slug-1", "slug-2"), "fake-name-1");
+        entry2.addEntry(List.of("slug-3"), "fake-name-2");
+        entry2.addEntry(List.of("slug-4"), "fake-name-3");
+        assertThat(entry2.entries())
+            .containsSequence(Map.entry("slug-1", "fake-name-1"),
+                Map.entry("slug-2", "fake-name-1"),
+                Map.entry("slug-3", "fake-name-2"),
+                Map.entry("slug-4", "fake-name-3"));
+        assertThat(entry2.indexedKeys()).containsSequence("slug-1", "slug-2", "slug-3", "slug-4");
+    }
+
+    @Test
+    void getIdPositionMapTest() {
+        var indexView = createCommentIndexView();
+        var topIndexEntry = prepareForPositionMapTest(indexView, "spec.top");
+        var topIndexEntryFromView = indexView.getIndexEntry("spec.top");
+        assertThat(topIndexEntry.getIdPositionMap())
+            .isEqualTo(topIndexEntryFromView.getIdPositionMap());
+
+        var creationTimeIndexEntry = prepareForPositionMapTest(indexView, "spec.creationTime");
+        var creationTimeIndexEntryFromView = indexView.getIndexEntry("spec.creationTime");
+        assertThat(creationTimeIndexEntry.getIdPositionMap())
+            .isEqualTo(creationTimeIndexEntryFromView.getIdPositionMap());
+
+        var priorityIndexEntry = prepareForPositionMapTest(indexView, "spec.priority");
+        var priorityIndexEntryFromView = indexView.getIndexEntry("spec.priority");
+        assertThat(priorityIndexEntry.getIdPositionMap())
+            .isEqualTo(priorityIndexEntryFromView.getIdPositionMap());
+    }
+
+    IndexEntry prepareForPositionMapTest(QueryIndexView indexView, String property) {
+        var indexSpec = mock(IndexSpec.class);
+        var descriptor = mock(IndexDescriptor.class);
+        when(descriptor.getSpec()).thenReturn(indexSpec);
+        var indexEntry = new IndexEntryImpl(descriptor);
+
+        var indexEntryFromView = indexView.getIndexEntry(property);
+        var sortedEntries = IndexViewDataSet.sortEntries(indexEntryFromView.entries());
+
+        var spyIndexEntry = spy(indexEntry);
+
+        doReturn(IndexViewDataSet.toKeyObjectMap(sortedEntries))
+            .when(spyIndexEntry).getKeyObjectMap();
+
+        return spyIndexEntry;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/IndexEntryOperatorImplTest.java b/application/src/test/java/run/halo/app/extension/index/IndexEntryOperatorImplTest.java
new file mode 100644
index 0000000..15d0f15
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/IndexEntryOperatorImplTest.java
@@ -0,0 +1,177 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.when;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.TreeSet;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.extension.index.query.IndexViewDataSet;
+
+/**
+ * Tests for {@link IndexEntryOperatorImpl}.
+ *
+ * @author guqing
+ * @since 2.17.0
+ */
+@ExtendWith(MockitoExtension.class)
+class IndexEntryOperatorImplTest {
+
+    @Mock
+    private IndexEntry indexEntry;
+
+    @InjectMocks
+    private IndexEntryOperatorImpl indexEntryOperator;
+
+    private LinkedHashMap> createIndexedMapAndPile() {
+        var entries = new ArrayList>();
+        entries.add(Map.entry("apple", "A"));
+        entries.add(Map.entry("banana", "B"));
+        entries.add(Map.entry("cherry", "C"));
+        entries.add(Map.entry("date", "D"));
+        entries.add(Map.entry("egg", "E"));
+        entries.add(Map.entry("f", "F"));
+
+        var indexedMap = IndexViewDataSet.toKeyObjectMap(entries);
+        lenient().when(indexEntry.indexedKeys()).thenReturn(new TreeSet<>(indexedMap.keySet()));
+        lenient().when(indexEntry.getObjectNamesBy(anyString())).thenAnswer(invocation -> {
+            var key = (String) invocation.getArgument(0);
+            return indexedMap.get(key);
+        });
+        lenient().when(indexEntry.entries()).thenReturn(entries);
+        return indexedMap;
+    }
+
+    @Test
+    void lessThan() {
+        final var indexedMap = createIndexedMapAndPile();
+
+        var result = indexEntryOperator.lessThan("banana", false);
+        assertThat(result).containsExactly("A");
+
+        result = indexEntryOperator.lessThan("banana", true);
+        assertThat(result).containsExactly("A", "B");
+
+        result = indexEntryOperator.lessThan("cherry", true);
+        assertThat(result).containsExactly("A", "B", "C");
+
+        // does not exist key
+        result = indexEntryOperator.lessThan("z", false);
+        var objectIds = indexedMap.values().stream()
+            .flatMap(Collection::stream)
+            .toArray(String[]::new);
+        assertThat(result).contains(objectIds);
+
+        result = indexEntryOperator.lessThan("a", false);
+        assertThat(result).isEmpty();
+    }
+
+    @Test
+    void greaterThan() {
+        createIndexedMapAndPile();
+
+        var result = indexEntryOperator.greaterThan("banana", false);
+        assertThat(result).containsExactly("C", "D", "E", "F");
+
+        result = indexEntryOperator.greaterThan("banana", true);
+        assertThat(result).containsExactly("B", "C", "D", "E", "F");
+
+        result = indexEntryOperator.greaterThan("cherry", true);
+        assertThat(result).containsExactly("C", "D", "E", "F");
+
+        result = indexEntryOperator.greaterThan("cherry", false);
+        assertThat(result).containsExactly("D", "E", "F");
+
+        // does not exist key
+        result = indexEntryOperator.greaterThan("z", false);
+        assertThat(result).isEmpty();
+    }
+
+    @Test
+    void greaterThanForNumberString() {
+        var entries = List.of(
+            Map.entry("100", "1"),
+            Map.entry("101", "2"),
+            Map.entry("102", "3"),
+            Map.entry("103", "4"),
+            Map.entry("110", "5"),
+            Map.entry("111", "6"),
+            Map.entry("112", "7"),
+            Map.entry("120", "8")
+        );
+        var indexedMap = IndexViewDataSet.toKeyObjectMap(entries);
+        when(indexEntry.indexedKeys()).thenReturn(new TreeSet<>(indexedMap.keySet()));
+        lenient().when(indexEntry.getObjectNamesBy(anyString())).thenAnswer(invocation -> {
+            var key = (String) invocation.getArgument(0);
+            return indexedMap.get(key);
+        });
+        when(indexEntry.entries()).thenReturn(entries);
+
+        var result = indexEntryOperator.greaterThan("102", false);
+        assertThat(result).containsExactly("4", "5", "6", "7", "8");
+
+        result = indexEntryOperator.greaterThan("110", false);
+        assertThat(result).containsExactly("6", "7", "8");
+    }
+
+    @Test
+    void range() {
+        createIndexedMapAndPile();
+
+        var result = indexEntryOperator.range("banana", "date", true, false);
+        assertThat(result).containsExactly("B", "C");
+
+        result = indexEntryOperator.range("banana", "date", false, false);
+        assertThat(result).containsExactly("C");
+
+        result = indexEntryOperator.range("banana", "date", true, true);
+        assertThat(result).containsExactly("B", "C", "D");
+
+        result = indexEntryOperator.range("apple", "egg", false, true);
+        assertThat(result).containsExactly("B", "C", "D", "E");
+
+        // end not exist
+        result = indexEntryOperator.range("d", "z", false, false);
+        assertThat(result).containsExactly("D", "E", "F");
+
+        // start key > end key
+        assertThatThrownBy(() -> indexEntryOperator.range("z", "f", false, false))
+            .isInstanceOf(IllegalArgumentException.class);
+
+        // both not exist
+        result = indexEntryOperator.range("z", "zz", false, false);
+        assertThat(result).isEmpty();
+    }
+
+    @Test
+    void findTest() {
+        createIndexedMapAndPile();
+
+        var result = indexEntryOperator.find("banana");
+        assertThat(result).containsExactly("B");
+
+        result = indexEntryOperator.find("date");
+        assertThat(result).containsExactly("D");
+
+        result = indexEntryOperator.find("z");
+        assertThat(result).isEmpty();
+    }
+
+    @Test
+    void findInTest() {
+        createIndexedMapAndPile();
+        var result = indexEntryOperator.findIn(List.of("banana", "date"));
+        assertThat(result).containsExactly("B", "D");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/index/IndexSpecRegistryImplTest.java b/application/src/test/java/run/halo/app/extension/index/IndexSpecRegistryImplTest.java
new file mode 100644
index 0000000..1b8bd17
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/IndexSpecRegistryImplTest.java
@@ -0,0 +1,73 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import java.util.Set;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+import run.halo.app.extension.Scheme;
+
+/**
+ * Tests for {@link IndexSpecRegistryImpl}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+@ExtendWith(MockitoExtension.class)
+class IndexSpecRegistryImplTest {
+    @InjectMocks
+    private IndexSpecRegistryImpl indexSpecRegistry;
+
+    private final Scheme scheme = Scheme.buildFromType(FakeExtension.class);
+
+    @AfterEach
+    void tearDown() {
+        indexSpecRegistry.removeIndexSpecs(scheme);
+    }
+
+    @Test
+    void indexFor() {
+        var specs = indexSpecRegistry.indexFor(scheme);
+        assertThat(specs).isNotNull();
+        assertThat(specs.getIndexSpecs()).hasSize(4);
+    }
+
+    @Test
+    void contains() {
+        indexSpecRegistry.indexFor(scheme);
+        assertThat(indexSpecRegistry.contains(scheme)).isTrue();
+    }
+
+    @Test
+    void getKeySpace() {
+        var keySpace = indexSpecRegistry.getKeySpace(scheme);
+        assertThat(keySpace).isEqualTo("/registry/test.halo.run/fakes");
+    }
+
+    @Test
+    void getIndexSpecs() {
+        assertThatThrownBy(() -> indexSpecRegistry.getIndexSpecs(scheme))
+            .isInstanceOf(IllegalArgumentException.class)
+            .hasMessageContaining("No index specs found for extension type: ");
+
+        indexSpecRegistry.indexFor(scheme);
+        var specs = indexSpecRegistry.getIndexSpecs(scheme);
+        assertThat(specs).isNotNull();
+    }
+
+    @Data
+    @EqualsAndHashCode(callSuper = true)
+    @GVK(group = "test.halo.run", version = "v1", kind = "FakeExtension", plural = "fakes",
+        singular = "fake")
+    static class FakeExtension extends AbstractExtension {
+        Set tags;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/IndexedQueryEngineImplTest.java b/application/src/test/java/run/halo/app/extension/index/IndexedQueryEngineImplTest.java
new file mode 100644
index 0000000..ce7d19d
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/IndexedQueryEngineImplTest.java
@@ -0,0 +1,194 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.extension.index.query.IndexViewDataSet.pileForIndexer;
+import static run.halo.app.extension.index.query.QueryFactory.equal;
+
+import java.util.Arrays;
+import java.util.List;
+import java.util.Map;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.data.domain.Sort;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.router.selector.EqualityMatcher;
+import run.halo.app.extension.router.selector.FieldSelector;
+import run.halo.app.extension.router.selector.LabelSelector;
+import run.halo.app.extension.router.selector.SelectorMatcher;
+
+/**
+ * Tests for {@link IndexedQueryEngineImpl}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+@ExtendWith(MockitoExtension.class)
+class IndexedQueryEngineImplTest {
+
+    @Mock
+    private IndexerFactory indexerFactory;
+
+    @InjectMocks
+    private IndexedQueryEngineImpl indexedQueryEngine;
+
+    @Test
+    void retrieve() {
+        var spyIndexedQueryEngine = spy(indexedQueryEngine);
+        doReturn(List.of("object1", "object2", "object3")).when(spyIndexedQueryEngine)
+            .doRetrieve(any(), any(), eq(Sort.unsorted()));
+
+        var gvk = GroupVersionKind.fromExtension(DemoExtension.class);
+
+        var pageRequest = mock(PageRequest.class);
+        when(pageRequest.getPageNumber()).thenReturn(1);
+        when(pageRequest.getPageSize()).thenReturn(2);
+        when(pageRequest.getSort()).thenReturn(Sort.unsorted());
+
+        var result = spyIndexedQueryEngine.retrieve(gvk, new ListOptions(), pageRequest);
+        assertThat(result.getItems()).containsExactly("object1", "object2");
+        assertThat(result.getTotal()).isEqualTo(3);
+
+        verify(spyIndexedQueryEngine).doRetrieve(eq(gvk), any(), eq(Sort.unsorted()));
+        verify(pageRequest, times(2)).getPageNumber();
+        verify(pageRequest, times(2)).getPageSize();
+        verify(pageRequest).getSort();
+    }
+
+    @Test
+    void retrieveAll() {
+        var spyIndexedQueryEngine = spy(indexedQueryEngine);
+        doReturn(List.of()).when(spyIndexedQueryEngine)
+            .doRetrieve(any(), any(), eq(Sort.unsorted()));
+
+        var gvk = GroupVersionKind.fromExtension(DemoExtension.class);
+
+        var result = spyIndexedQueryEngine.retrieveAll(gvk, new ListOptions(), Sort.unsorted());
+        assertThat(result).isEmpty();
+
+        verify(spyIndexedQueryEngine).doRetrieve(eq(gvk), any(), eq(Sort.unsorted()));
+    }
+
+    @Test
+    void doRetrieve() {
+        var indexer = mock(Indexer.class);
+
+        var gvk = GroupVersionKind.fromExtension(DemoExtension.class);
+
+        when(indexerFactory.getIndexer(eq(gvk))).thenReturn(indexer);
+
+        pileForIndexer(indexer, PrimaryKeySpecUtils.PRIMARY_INDEX_NAME, List.of(
+            Map.entry("object1", "object1"),
+            Map.entry("object2", "object2"),
+            Map.entry("object3", "object3")
+        ));
+
+        pileForIndexer(indexer, LabelIndexSpecUtils.LABEL_PATH, List.of(
+            Map.entry("key1=value1", "object1"),
+            Map.entry("key2=value2", "object1"),
+            Map.entry("key1=value1", "object2"),
+            Map.entry("key2=value2", "object2"),
+            Map.entry("key1=value1", "object3")
+        ));
+
+        pileForIndexer(indexer, "slug", List.of(
+            Map.entry("slug1", "object1"),
+            Map.entry("slug2", "object2")
+        ));
+
+        var listOptions = new ListOptions();
+        listOptions.setLabelSelector(LabelSelector.builder()
+            .eq("key1", "value1").build());
+        listOptions.setFieldSelector(FieldSelector.of(equal("slug", "slug1")));
+
+        var result = indexedQueryEngine.doRetrieve(gvk, listOptions, Sort.unsorted());
+        assertThat(result).containsExactly("object1");
+    }
+
+    @Data
+    @EqualsAndHashCode(callSuper = true)
+    @GVK(group = "test", version = "v1", kind = "demo", plural = "demos", singular = "demo")
+    static class DemoExtension extends AbstractExtension {
+
+    }
+
+    @Nested
+    @ExtendWith(MockitoExtension.class)
+    class LabelMatcherTest {
+        @InjectMocks
+        private IndexedQueryEngineImpl indexedQueryEngine;
+
+        @Test
+        void testRetrieveForLabelMatchers() {
+            // Setup mocks
+            IndexEntry indexEntryMock = mock(IndexEntry.class);
+            // Setup mock behavior
+            when(indexEntryMock.entries())
+                .thenReturn(List.of(Map.entry("key1=value1", "object1"),
+                    Map.entry("key2=value2", "object1"),
+                    Map.entry("key1=value1", "object2"),
+                    Map.entry("key2=value2", "object2"),
+                    Map.entry("key1=value1", "object3")));
+
+            var matcher1 = EqualityMatcher.equal("key1", "value1");
+            var matcher2 = EqualityMatcher.equal("key2", "value2");
+
+            List labelMatchers = Arrays.asList(matcher1, matcher2);
+
+            var indexer = mock(Indexer.class);
+            when(indexer.getIndexEntry(eq(LabelIndexSpecUtils.LABEL_PATH)))
+                .thenReturn(indexEntryMock);
+            var nameIndexEntry = mock(IndexEntry.class);
+            when(indexer.getIndexEntry(eq(PrimaryKeySpecUtils.PRIMARY_INDEX_NAME)))
+                .thenReturn(nameIndexEntry);
+            when(nameIndexEntry.entries()).thenReturn(List.of(Map.entry("object1", "object1"),
+                Map.entry("object2", "object2"), Map.entry("object3", "object3")));
+            // Test
+            assertThat(indexedQueryEngine.retrieveForLabelMatchers(indexer, labelMatchers))
+                .containsSequence("object1", "object2");
+        }
+
+        @Test
+        void testRetrieveForLabelMatchersNoMatch() {
+            IndexEntry indexEntryMock = mock(IndexEntry.class);
+            // Setup mock behavior
+            when(indexEntryMock.entries())
+                .thenReturn(List.of(Map.entry("key1=value1", "object1"),
+                    Map.entry("key2=value2", "object2"),
+                    Map.entry("key1=value3", "object3"))
+                );
+
+            var matcher1 = EqualityMatcher.equal("key3", "value3");
+            List labelMatchers = List.of(matcher1);
+
+            var indexer = mock(Indexer.class);
+            when(indexer.getIndexEntry(eq(LabelIndexSpecUtils.LABEL_PATH)))
+                .thenReturn(indexEntryMock);
+            var nameIndexEntry = mock(IndexEntry.class);
+            when(indexer.getIndexEntry(eq(PrimaryKeySpecUtils.PRIMARY_INDEX_NAME)))
+                .thenReturn(nameIndexEntry);
+            when(nameIndexEntry.entries()).thenReturn(List.of(Map.entry("object1", "object1"),
+                Map.entry("object2", "object2"), Map.entry("object3", "object3")));
+            // Test
+            assertThat(
+                indexedQueryEngine.retrieveForLabelMatchers(indexer, labelMatchers)).isEmpty();
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/IndexerFactoryImplTest.java b/application/src/test/java/run/halo/app/extension/index/IndexerFactoryImplTest.java
new file mode 100644
index 0000000..2239d38
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/IndexerFactoryImplTest.java
@@ -0,0 +1,93 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import java.util.Optional;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.Scheme;
+import run.halo.app.extension.SchemeManager;
+
+/**
+ * Tests for {@link IndexerFactoryImpl}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+@ExtendWith(MockitoExtension.class)
+class IndexerFactoryImplTest {
+    @Mock
+    private SchemeManager schemeManager;
+    @Mock
+    private IndexSpecRegistry indexSpecRegistry;
+
+    @InjectMocks
+    IndexerFactoryImpl indexerFactory;
+
+    @Test
+    @SuppressWarnings("unchecked")
+    void indexFactory() {
+        var scheme = Scheme.buildFromType(DemoExtension.class);
+        when(schemeManager.get(eq(DemoExtension.class)))
+            .thenReturn(scheme);
+        when(indexSpecRegistry.getKeySpace(scheme))
+            .thenReturn("/registry/test/demoextensions");
+        when(indexSpecRegistry.contains(eq(scheme)))
+            .thenReturn(false);
+        var specs = mock(IndexSpecs.class);
+        when(indexSpecRegistry.getIndexSpecs(eq(scheme)))
+            .thenReturn(specs);
+        when(specs.getIndexSpecs())
+            .thenReturn(List.of(PrimaryKeySpecUtils.primaryKeyIndexSpec(DemoExtension.class)));
+        ExtensionIterator iterator = mock(ExtensionIterator.class);
+        when(iterator.hasNext()).thenReturn(false);
+        // create indexer
+        var indexer = indexerFactory.createIndexerFor(DemoExtension.class, iterator);
+        assertThat(indexer).isNotNull();
+
+        when(schemeManager.fetch(eq(scheme.groupVersionKind()))).thenReturn(Optional.of(scheme));
+        when(schemeManager.get(eq(scheme.groupVersionKind()))).thenReturn(scheme);
+        // contains indexer
+        var hasIndexer = indexerFactory.contains(scheme.groupVersionKind());
+        assertThat(hasIndexer).isTrue();
+
+        assertThat(indexerFactory.contains(
+            new GroupVersionKind("test", "v1", "Post"))).isFalse();
+
+        // get indexer
+        var foundIndexer = indexerFactory.getIndexer(scheme.groupVersionKind());
+        assertThat(foundIndexer).isEqualTo(indexer);
+
+        // remove indexer
+        indexerFactory.removeIndexer(scheme);
+        assertThat(indexerFactory.contains(scheme.groupVersionKind())).isFalse();
+
+        // verify
+        verify(indexSpecRegistry).indexFor(eq(scheme));
+        verify(schemeManager).get(eq(DemoExtension.class));
+        verify(indexSpecRegistry, times(4)).getKeySpace(eq(scheme));
+        verify(indexSpecRegistry).contains(eq(scheme));
+    }
+
+    @Data
+    @EqualsAndHashCode(callSuper = true)
+    @GVK(group = "test", version = "v1", kind = "DemoExtension", plural = "demoextensions",
+        singular = "demoextension")
+    static class DemoExtension extends AbstractExtension {
+        private String email;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/LabelIndexSpecUtilsTest.java b/application/src/test/java/run/halo/app/extension/index/LabelIndexSpecUtilsTest.java
new file mode 100644
index 0000000..529858b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/LabelIndexSpecUtilsTest.java
@@ -0,0 +1,48 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.Metadata;
+
+/**
+ * Tests for {@link LabelIndexSpecUtils}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+class LabelIndexSpecUtilsTest {
+
+    @Test
+    void labelKeyValuePair() {
+        var pair = LabelIndexSpecUtils.labelKeyValuePair("key=value");
+        assertThat(pair.getFirst()).isEqualTo("key");
+        assertThat(pair.getSecond()).isEqualTo("value");
+
+        pair = LabelIndexSpecUtils.labelKeyValuePair("key=value=1");
+        assertThat(pair.getFirst()).isEqualTo("key");
+        assertThat(pair.getSecond()).isEqualTo("value=1");
+
+        assertThatThrownBy(() -> LabelIndexSpecUtils.labelKeyValuePair("key"))
+            .isInstanceOf(IllegalArgumentException.class)
+            .hasMessage("Invalid label key-value pair: key");
+    }
+
+    @Test
+    void labelIndexValueFunc() {
+        var ext = new TestExtension();
+        ext.setMetadata(new Metadata());
+        assertThat(LabelIndexSpecUtils.labelIndexValueFunc(ext)).isEmpty();
+
+        ext.getMetadata().setLabels(Map.of("key", "value", "key1", "value1"));
+        assertThat(LabelIndexSpecUtils.labelIndexValueFunc(ext)).containsExactlyInAnyOrder(
+            "key=value", "key1=value1");
+    }
+
+    static class TestExtension extends AbstractExtension {
+
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/PrimaryKeySpecUtilsTest.java b/application/src/test/java/run/halo/app/extension/index/PrimaryKeySpecUtilsTest.java
new file mode 100644
index 0000000..d182b3a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/PrimaryKeySpecUtilsTest.java
@@ -0,0 +1,46 @@
+package run.halo.app.extension.index;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.Set;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+import run.halo.app.extension.Metadata;
+
+/**
+ * Tests for {@link PrimaryKeySpecUtils}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+class PrimaryKeySpecUtilsTest {
+
+    @Test
+    void primaryKeyIndexSpec() {
+        var spec =
+            PrimaryKeySpecUtils.primaryKeyIndexSpec(FakeExtension.class);
+        assertThat(spec.getName()).isEqualTo("metadata.name");
+        assertThat(spec.getOrder()).isEqualTo(IndexSpec.OrderType.ASC);
+        assertThat(spec.isUnique()).isTrue();
+        assertThat(spec.getIndexFunc()).isNotNull();
+        assertThat(spec.getIndexFunc().getObjectType()).isEqualTo(FakeExtension.class);
+
+        var extension = new FakeExtension();
+        extension.setMetadata(new Metadata());
+        extension.getMetadata().setName("fake-name-1");
+
+        assertThat(spec.getIndexFunc().getValues(extension))
+            .isEqualTo(Set.of("fake-name-1"));
+    }
+
+    @Data
+    @EqualsAndHashCode(callSuper = true)
+    @GVK(group = "test", version = "v1", kind = "FakeExtension", plural = "fakes",
+        singular = "fake")
+    static class FakeExtension extends AbstractExtension {
+
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/query/AndTest.java b/application/src/test/java/run/halo/app/extension/index/query/AndTest.java
new file mode 100644
index 0000000..0c29a85
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/query/AndTest.java
@@ -0,0 +1,128 @@
+package run.halo.app.extension.index.query;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.mock;
+import static run.halo.app.extension.index.query.IndexViewDataSet.pileForIndexer;
+import static run.halo.app.extension.index.query.QueryFactory.and;
+import static run.halo.app.extension.index.query.QueryFactory.equal;
+import static run.halo.app.extension.index.query.QueryFactory.greaterThan;
+import static run.halo.app.extension.index.query.QueryFactory.or;
+
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.index.Indexer;
+
+/**
+ * Tests for the {@link And} query.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+public class AndTest {
+
+    @Test
+    void testMatches() {
+        var deptEntry = List.of(Map.entry("A", "guqing"),
+            Map.entry("A", "halo"),
+            Map.entry("B", "lisi"),
+            Map.entry("B", "zhangsan"),
+            Map.entry("C", "ryanwang"),
+            Map.entry("C", "johnniang")
+        );
+        var ageEntry = List.of(Map.entry("19", "halo"),
+            Map.entry("19", "guqing"),
+            Map.entry("18", "zhangsan"),
+            Map.entry("17", "lisi"),
+            Map.entry("17", "ryanwang"),
+            Map.entry("17", "johnniang")
+        );
+
+        var indexer = mock(Indexer.class);
+
+        pileForIndexer(indexer, QueryIndexViewImpl.PRIMARY_INDEX_NAME, List.of(
+            Map.entry("guqing", "guqing"),
+            Map.entry("halo", "halo"),
+            Map.entry("lisi", "lisi"),
+            Map.entry("zhangsan", "zhangsan"),
+            Map.entry("ryanwang", "ryanwang"),
+            Map.entry("johnniang", "johnniang")
+        ));
+
+        pileForIndexer(indexer, "dept", deptEntry);
+
+        pileForIndexer(indexer, "age", ageEntry);
+
+        var indexView = new QueryIndexViewImpl(indexer);
+        var query = and(equal("dept", "B"), equal("age", "18"));
+        var resultSet = query.matches(indexView);
+        assertThat(resultSet).containsExactly("zhangsan");
+
+        query = and(equal("dept", "C"), equal("age", "18"));
+        resultSet = query.matches(indexView);
+        assertThat(resultSet).isEmpty();
+
+        query = and(
+            // guqing, halo, lisi, zhangsan
+            or(equal("dept", "A"), equal("dept", "B")),
+            // guqing, halo, zhangsan
+            or(equal("age", "19"), equal("age", "18"))
+        );
+        resultSet = query.matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder("guqing", "halo", "zhangsan");
+
+        query = and(
+            // guqing, halo, lisi, zhangsan
+            or(equal("dept", "A"), equal("dept", "B")),
+            // guqing, halo, zhangsan
+            or(equal("age", "19"), equal("age", "18"))
+        );
+        resultSet = query.matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder("guqing", "halo", "zhangsan");
+
+        query = and(
+            // guqing, halo, lisi, zhangsan
+            or(equal("dept", "A"), equal("dept", "C")),
+            // guqing, halo, zhangsan
+            and(equal("age", "17"), equal("age", "17"))
+        );
+        resultSet = query.matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder("ryanwang", "johnniang");
+    }
+
+    @Test
+    void andMatch2() {
+        var indexView = IndexViewDataSet.createEmployeeIndexView();
+        var query = and(equal("lastName", "Fay"),
+            and(
+                equal("hireDate", "17"),
+                and(greaterThan("salary", "1000"),
+                    and(equal("managerId", "101"),
+                        equal("departmentId", "50")
+                    )
+                )
+            )
+        );
+        var resultSet = query.matches(indexView);
+        assertThat(resultSet).containsExactly("100");
+    }
+
+    @Test
+    void orAndMatch() {
+        var indexView = IndexViewDataSet.createEmployeeIndexView();
+        // test the case when the data matched by the query does not intersect with the data
+        // matched by the and query
+        // or(query, and(otherQuery1, otherQuery2))
+        var query = or(
+            // matched with id 101
+            and(equal("lastName", "Day"), equal("managerId", "102")),
+            // matched with id 100, 103
+            and(
+                equal("hireDate", "17"),
+                greaterThan("salary", "1800")
+            )
+        );
+        var resultSet = query.matches(indexView);
+        assertThat(resultSet).containsExactly("100", "101", "103");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/query/IndexViewDataSet.java b/application/src/test/java/run/halo/app/extension/index/query/IndexViewDataSet.java
new file mode 100644
index 0000000..5768ea8
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/query/IndexViewDataSet.java
@@ -0,0 +1,340 @@
+package run.halo.app.extension.index.query;
+
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+
+import java.util.Collection;
+import java.util.HashMap;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.TreeSet;
+import java.util.stream.Collectors;
+import run.halo.app.extension.index.IndexEntry;
+import run.halo.app.extension.index.Indexer;
+import run.halo.app.extension.index.KeyComparator;
+
+public class IndexViewDataSet {
+
+    /**
+     * Create a {@link QueryIndexView} for employee to test.
+     * 
+     * | id | firstName | lastName | email | hireDate | salary | managerId | departmentId |
+     * |----|-----------|----------|-------|----------|--------|-----------|--------------|
+     * | 100| Pat       | Fay      | p     | 17       | 2600   | 101       | 50           |
+     * | 101| Lee       | Day      | l     | 17       | 2400   | 102       | 40           |
+     * | 102| William   | Jay      | w     | 19       | 2200   | 102       | 50           |
+     * | 103| Mary      | Day      | p     | 17       | 2000   | 103       | 50           |
+     * | 104| John      | Fay      | j     | 17       | 1800   | 103       | 50           |
+     * | 105| Gon       | Fay      | p     | 18       | 1900   | 101       | 40           |
+     * 

+     *
+     * @return a {@link QueryIndexView} for employee to test
+     */
+    public static QueryIndexView createEmployeeIndexView() {
+        final var idEntry = List.of(
+            Map.entry("100", "100"),
+            Map.entry("101", "101"),
+            Map.entry("102", "102"),
+            Map.entry("103", "103"),
+            Map.entry("104", "104"),
+            Map.entry("105", "105")
+        );
+        final var firstNameEntry = List.of(
+            Map.entry("Pat", "100"),
+            Map.entry("Lee", "101"),
+            Map.entry("William", "102"),
+            Map.entry("Mary", "103"),
+            Map.entry("John", "104"),
+            Map.entry("Gon", "105")
+        );
+        final var lastNameEntry = List.of(
+            Map.entry("Fay", "100"),
+            Map.entry("Day", "101"),
+            Map.entry("Jay", "102"),
+            Map.entry("Day", "103"),
+            Map.entry("Fay", "104"),
+            Map.entry("Fay", "105")
+        );
+        final var emailEntry = List.of(
+            Map.entry("p", "100"),
+            Map.entry("l", "101"),
+            Map.entry("w", "102"),
+            Map.entry("p", "103"),
+            Map.entry("j", "104"),
+            Map.entry("p", "105")
+        );
+        final var hireDateEntry = List.of(
+            Map.entry("17", "100"),
+            Map.entry("17", "101"),
+            Map.entry("19", "102"),
+            Map.entry("17", "103"),
+            Map.entry("17", "104"),
+            Map.entry("18", "105")
+        );
+        final var salaryEntry = List.of(
+            Map.entry("2600", "100"),
+            Map.entry("2400", "101"),
+            Map.entry("2200", "102"),
+            Map.entry("2000", "103"),
+            Map.entry("1800", "104"),
+            Map.entry("1900", "105")
+        );
+        final var managerIdEntry = List.of(
+            Map.entry("101", "100"),
+            Map.entry("102", "101"),
+            Map.entry("102", "102"),
+            Map.entry("103", "103"),
+            Map.entry("103", "104"),
+            Map.entry("101", "105")
+        );
+        final var departmentIdEntry = List.of(
+            Map.entry("50", "100"),
+            Map.entry("40", "101"),
+            Map.entry("50", "102"),
+            Map.entry("50", "103"),
+            Map.entry("50", "104"),
+            Map.entry("40", "105")
+        );
+
+        var indexer = mock(Indexer.class);
+
+        pileForIndexer(indexer, QueryIndexViewImpl.PRIMARY_INDEX_NAME, idEntry);
+        pileForIndexer(indexer, "firstName", firstNameEntry);
+        pileForIndexer(indexer, "lastName", lastNameEntry);
+        pileForIndexer(indexer, "email", emailEntry);
+        pileForIndexer(indexer, "hireDate", hireDateEntry);
+        pileForIndexer(indexer, "salary", salaryEntry);
+        pileForIndexer(indexer, "managerId", managerIdEntry);
+        pileForIndexer(indexer, "departmentId", departmentIdEntry);
+
+        return new QueryIndexViewImpl(indexer);
+    }
+
+    /**
+     * Create a {@link QueryIndexView} for post to test.
+     * 
+     * | id  | title  | published | publishTime         | owner |
+     * |-----|--------|-----------|---------------------|-------|
+     * | 100 | title1 | true      | 2024-01-01T00:00:00 | jack  |
+     * | 101 | title2 | true      | 2024-01-02T00:00:00 | rose  |
+     * | 102 | title3 | false     | null                | smith |
+     * | 103 | title4 | false     | null                | peter |
+     * | 104 | title5 | false     | null                | john  |
+     * | 105 | title6 | true      | 2024-01-05 00:00:00 | tom   |
+     * | 106 | title7 | true      | 2024-01-05 13:00:00 | jerry |
+     * | 107 | title8 | true      | 2024-01-05 12:00:00 | jerry |
+     * | 108 | title9 | false     | null                | jerry |
+     * 

+     *
+     * @return a {@link QueryIndexView} for post to test
+     */
+    public static QueryIndexView createPostIndexViewWithNullCell() {
+        final var idEntry = List.of(
+            Map.entry("100", "100"),
+            Map.entry("101", "101"),
+            Map.entry("102", "102"),
+            Map.entry("103", "103"),
+            Map.entry("104", "104"),
+            Map.entry("105", "105"),
+            Map.entry("106", "106"),
+            Map.entry("107", "107"),
+            Map.entry("108", "108")
+        );
+        final var titleEntry = List.of(
+            Map.entry("title1", "100"),
+            Map.entry("title2", "101"),
+            Map.entry("title3", "102"),
+            Map.entry("title4", "103"),
+            Map.entry("title5", "104"),
+            Map.entry("title6", "105"),
+            Map.entry("title7", "106"),
+            Map.entry("title8", "107"),
+            Map.entry("title9", "108")
+        );
+        final var publishedEntry = List.of(
+            Map.entry("true", "100"),
+            Map.entry("true", "101"),
+            Map.entry("false", "102"),
+            Map.entry("false", "103"),
+            Map.entry("false", "104"),
+            Map.entry("true", "105"),
+            Map.entry("true", "106"),
+            Map.entry("true", "107"),
+            Map.entry("false", "108")
+        );
+        final var publishTimeEntry = List.of(
+            Map.entry("2024-01-01T00:00:00", "100"),
+            Map.entry("2024-01-02T00:00:00", "101"),
+            Map.entry("2024-01-05 00:00:00", "105"),
+            Map.entry("2024-01-05 13:00:00", "106"),
+            Map.entry("2024-01-05 12:00:00", "107")
+        );
+
+        final var ownerEntry = List.of(
+            Map.entry("jack", "100"),
+            Map.entry("rose", "101"),
+            Map.entry("smith", "102"),
+            Map.entry("peter", "103"),
+            Map.entry("john", "104"),
+            Map.entry("tom", "105"),
+            Map.entry("jerry", "106"),
+            Map.entry("jerry", "107"),
+            Map.entry("jerry", "108")
+        );
+
+        var indexer = mock(Indexer.class);
+        pileForIndexer(indexer, QueryIndexViewImpl.PRIMARY_INDEX_NAME, idEntry);
+        pileForIndexer(indexer, "title", titleEntry);
+        pileForIndexer(indexer, "published", publishedEntry);
+        pileForIndexer(indexer, "publishTime", publishTimeEntry);
+        pileForIndexer(indexer, "owner", ownerEntry);
+
+        return new QueryIndexViewImpl(indexer);
+    }
+
+    /**
+     * Creates a fake comment index view for below data.
+     * 
+     * | Name | Top   | Priority | Creation Time                    |
+     * | ---- | ----- | -------- | -------------------------------- |
+     * | 1    | True  | 0        | 2024-06-05 02:58:15.633165+00:00 |
+     * | 2    | True  | 1        | 2024-06-05 02:58:16.633165+00:00 |
+     * | 4    | True  | 2        | 2024-06-05 02:58:18.633165+00:00 |
+     * | 3    | True  | 2        | 2024-06-05 02:58:17.633165+00:00 |
+     * | 5    | True  | 3        | 2024-06-05 02:58:18.633165+00:00 |
+     * | 6    | True  | 3        | 2024-06-05 02:58:18.633165+00:00 |
+     * | 10   | False | 0        | 2024-06-05 02:58:17.633165+00:00 |
+     * | 9    | False | 0        | 2024-06-05 02:58:17.633165+00:00 |
+     * | 8    | False | 0        | 2024-06-05 02:58:16.633165+00:00 |
+     * | 7    | False | 0        | 2024-06-05 02:58:15.633165+00:00 |
+     * | 11   | False | 0        | 2024-06-05 02:58:14.633165+00:00 |
+     * | 12   | False | 1        | 2024-06-05 02:58:14.633165+00:00 |
+     * | 14   | False | 3        | 2024-06-05 02:58:17.633165+00:00 |
+     * | 13   | False | 3        | 2024-06-05 02:58:14.633165+00:00 |
+     * 

+     */
+    public static QueryIndexView createCommentIndexView() {
+        final var idEntry = List.of(
+            Map.entry("1", "1"),
+            Map.entry("2", "2"),
+            Map.entry("3", "3"),
+            Map.entry("4", "4"),
+            Map.entry("5", "5"),
+            Map.entry("6", "6"),
+            Map.entry("7", "7"),
+            Map.entry("8", "8"),
+            Map.entry("9", "9"),
+            Map.entry("10", "10"),
+            Map.entry("11", "11"),
+            Map.entry("12", "12"),
+            Map.entry("13", "13"),
+            Map.entry("14", "14")
+        );
+        final var creationTimeEntry = List.of(
+            Map.entry("2024-06-05 02:58:15.633165", "1"),
+            Map.entry("2024-06-05 02:58:16.633165", "2"),
+            Map.entry("2024-06-05 02:58:17.633165", "3"),
+            Map.entry("2024-06-05 02:58:18.633165", "4"),
+            Map.entry("2024-06-05 02:58:18.633165", "5"),
+            Map.entry("2024-06-05 02:58:18.633165", "6"),
+            Map.entry("2024-06-05 02:58:15.633165", "7"),
+            Map.entry("2024-06-05 02:58:16.633165", "8"),
+            Map.entry("2024-06-05 02:58:17.633165", "9"),
+            Map.entry("2024-06-05 02:58:17.633165", "10"),
+            Map.entry("2024-06-05 02:58:14.633165", "11"),
+            Map.entry("2024-06-05 02:58:14.633165", "12"),
+            Map.entry("2024-06-05 02:58:14.633165", "13"),
+            Map.entry("2024-06-05 02:58:17.633165", "14")
+        );
+        final var topEntry = List.of(
+            Map.entry("true", "1"),
+            Map.entry("true", "2"),
+            Map.entry("true", "3"),
+            Map.entry("true", "4"),
+            Map.entry("true", "5"),
+            Map.entry("true", "6"),
+            Map.entry("false", "7"),
+            Map.entry("false", "8"),
+            Map.entry("false", "9"),
+            Map.entry("false", "10"),
+            Map.entry("false", "11"),
+            Map.entry("false", "12"),
+            Map.entry("false", "13"),
+            Map.entry("false", "14")
+        );
+        final var priorityEntry = List.of(
+            Map.entry("0", "1"),
+            Map.entry("1", "2"),
+            Map.entry("2", "3"),
+            Map.entry("2", "4"),
+            Map.entry("3", "5"),
+            Map.entry("3", "6"),
+            Map.entry("0", "7"),
+            Map.entry("0", "8"),
+            Map.entry("0", "9"),
+            Map.entry("0", "10"),
+            Map.entry("0", "11"),
+            Map.entry("1", "12"),
+            Map.entry("3", "13"),
+            Map.entry("3", "14")
+        );
+
+        var indexer = mock(Indexer.class);
+        pileForIndexer(indexer, QueryIndexViewImpl.PRIMARY_INDEX_NAME, idEntry);
+        pileForIndexer(indexer, "spec.creationTime", creationTimeEntry);
+        pileForIndexer(indexer, "spec.top", topEntry);
+        pileForIndexer(indexer, "spec.priority", priorityEntry);
+
+        return new QueryIndexViewImpl(indexer);
+    }
+
+    public static void pileForIndexer(Indexer indexer, String propertyName,
+        Collection> entries) {
+        var indexEntry = mock(IndexEntry.class);
+        lenient().when(indexer.getIndexEntry(propertyName)).thenReturn(indexEntry);
+        var sortedEntries = sortEntries(entries);
+
+        lenient().when(indexEntry.entries()).thenReturn(sortedEntries);
+        lenient().when(indexEntry.getIdPositionMap()).thenReturn(idPositionMap(sortedEntries));
+
+        var indexedMap = toKeyObjectMap(sortedEntries);
+        lenient().when(indexEntry.indexedKeys()).thenReturn(new TreeSet<>(indexedMap.keySet()));
+        lenient().when(indexEntry.getObjectNamesBy(anyString())).thenAnswer(invocation -> {
+            var key = (String) invocation.getArgument(0);
+            return indexedMap.get(key);
+        });
+        lenient().when(indexEntry.entries()).thenReturn(entries);
+    }
+
+    public static List> sortEntries(
+        Collection> entries) {
+        return entries.stream()
+            .sorted((a, b) -> KeyComparator.INSTANCE.compare(a.getKey(), b.getKey()))
+            .toList();
+    }
+
+    public static Map idPositionMap(
+        Collection> sortedEntries) {
+        var asMap = toKeyObjectMap(sortedEntries);
+        int i = 0;
+        var idPositionMap = new HashMap();
+        for (var valueIdsEntry : asMap.entrySet()) {
+            var ids = valueIdsEntry.getValue();
+            for (String id : ids) {
+                idPositionMap.put(id, i);
+            }
+            i++;
+        }
+        return idPositionMap;
+    }
+
+    public static LinkedHashMap> toKeyObjectMap(
+        Collection> sortedEntries) {
+        return sortedEntries.stream()
+            .collect(Collectors.groupingBy(Map.Entry::getKey,
+                LinkedHashMap::new,
+                Collectors.mapping(Map.Entry::getValue, Collectors.toList())));
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/query/QueryFactoryTest.java b/application/src/test/java/run/halo/app/extension/index/query/QueryFactoryTest.java
new file mode 100644
index 0000000..8b10ce0
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/query/QueryFactoryTest.java
@@ -0,0 +1,310 @@
+package run.halo.app.extension.index.query;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static run.halo.app.extension.index.query.IndexViewDataSet.createEmployeeIndexView;
+import static run.halo.app.extension.index.query.QueryFactory.all;
+import static run.halo.app.extension.index.query.QueryFactory.and;
+import static run.halo.app.extension.index.query.QueryFactory.between;
+import static run.halo.app.extension.index.query.QueryFactory.contains;
+import static run.halo.app.extension.index.query.QueryFactory.endsWith;
+import static run.halo.app.extension.index.query.QueryFactory.equal;
+import static run.halo.app.extension.index.query.QueryFactory.equalOtherField;
+import static run.halo.app.extension.index.query.QueryFactory.getFieldNamesUsedInQuery;
+import static run.halo.app.extension.index.query.QueryFactory.greaterThan;
+import static run.halo.app.extension.index.query.QueryFactory.greaterThanOrEqual;
+import static run.halo.app.extension.index.query.QueryFactory.greaterThanOrEqualOtherField;
+import static run.halo.app.extension.index.query.QueryFactory.greaterThanOtherField;
+import static run.halo.app.extension.index.query.QueryFactory.in;
+import static run.halo.app.extension.index.query.QueryFactory.isNotNull;
+import static run.halo.app.extension.index.query.QueryFactory.isNull;
+import static run.halo.app.extension.index.query.QueryFactory.lessThan;
+import static run.halo.app.extension.index.query.QueryFactory.lessThanOrEqual;
+import static run.halo.app.extension.index.query.QueryFactory.lessThanOrEqualOtherField;
+import static run.halo.app.extension.index.query.QueryFactory.lessThanOtherField;
+import static run.halo.app.extension.index.query.QueryFactory.notEqual;
+import static run.halo.app.extension.index.query.QueryFactory.notEqualOtherField;
+import static run.halo.app.extension.index.query.QueryFactory.or;
+import static run.halo.app.extension.index.query.QueryFactory.startsWith;
+
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link QueryFactory}.
+ *
+ * @author guqing
+ * @since 2.12.0
+ */
+class QueryFactoryTest {
+
+    private final String id = QueryIndexViewImpl.PRIMARY_INDEX_NAME;
+
+    @Test
+    void allTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = all("firstName").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "102", "103", "104", "105"
+        );
+    }
+
+    @Test
+    void isNullTest() {
+        var indexView = IndexViewDataSet.createPostIndexViewWithNullCell();
+        var resultSet = isNull("publishTime").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "102", "103", "104", "108"
+        );
+    }
+
+    @Test
+    void isNotNullTest() {
+        var indexView = IndexViewDataSet.createPostIndexViewWithNullCell();
+        var resultSet = isNotNull("publishTime").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "105", "106", "107"
+        );
+    }
+
+    @Test
+    void equalTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = equal("lastName", "Fay").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "104", "105"
+        );
+    }
+
+    @Test
+    void equalOtherFieldTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = equalOtherField("managerId", id).matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "102", "103"
+        );
+    }
+
+    @Test
+    void notEqualTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = notEqual("lastName", "Fay").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "101", "102", "103"
+        );
+    }
+
+    @Test
+    void notEqualOtherFieldTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = notEqualOtherField("managerId", id).matches(indexView);
+        // 103 102 is equal
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "104", "105"
+        );
+    }
+
+    @Test
+    void lessThanTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = lessThan(id, "103").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "102"
+        );
+    }
+
+    @Test
+    void lessThanOtherFieldTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = lessThanOtherField(id, "managerId").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101"
+        );
+    }
+
+    @Test
+    void lessThanOrEqualTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = lessThanOrEqual(id, "103").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "102", "103"
+        );
+    }
+
+    @Test
+    void lessThanOrEqualOtherFieldTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet =
+            lessThanOrEqualOtherField(id, "managerId").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "102", "103"
+        );
+    }
+
+    @Test
+    void greaterThanTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = greaterThan(id, "103").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "104", "105"
+        );
+    }
+
+    @Test
+    void greaterThanOtherFieldTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = greaterThanOtherField(id, "managerId").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "104", "105"
+        );
+    }
+
+    @Test
+    void greaterThanOrEqualTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = greaterThanOrEqual(id, "103").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "103", "104", "105"
+        );
+    }
+
+    @Test
+    void greaterThanOrEqualOtherFieldTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet =
+            greaterThanOrEqualOtherField(id, "managerId").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "102", "103", "104", "105"
+        );
+    }
+
+    @Test
+    void inTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = in(id, "103", "104").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "103", "104"
+        );
+    }
+
+    @Test
+    void inTest2() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = in("lastName", "Fay").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "104", "105"
+        );
+    }
+
+    @Test
+    void betweenTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = between(id, "103", "105").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "103", "104", "105"
+        );
+
+        indexView = createEmployeeIndexView();
+        resultSet = between("salary", "2000", "2400").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "101", "102", "103"
+        );
+    }
+
+    @Test
+    void betweenLowerExclusive() {
+        var indexView = createEmployeeIndexView();
+        var resultSet =
+            QueryFactory.betweenLowerExclusive("salary", "2000", "2400").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "101", "102"
+        );
+    }
+
+    @Test
+    void betweenUpperExclusive() {
+        var indexView = createEmployeeIndexView();
+        var resultSet =
+            QueryFactory.betweenUpperExclusive("salary", "2000", "2400").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "102", "103"
+        );
+    }
+
+    @Test
+    void betweenExclusive() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = QueryFactory.betweenExclusive("salary", "2000", "2400").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "102"
+        );
+    }
+
+    @Test
+    void startsWithTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = startsWith("firstName", "W").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "102"
+        );
+    }
+
+    @Test
+    void endsWithTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = endsWith("firstName", "y").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "103"
+        );
+    }
+
+    @Test
+    void containsTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = contains("firstName", "i").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "102"
+        );
+        resultSet = contains("firstName", "N").matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "104", "105"
+        );
+    }
+
+    @Test
+    void notTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet =
+            QueryFactory.not(QueryFactory.contains("firstName", "i")).matches(indexView);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "103", "104", "105"
+        );
+    }
+
+    @Test
+    void getUsedFieldNamesTest() {
+        // single query
+        var query = equal("firstName", "W");
+        var fieldNames = getFieldNamesUsedInQuery(query);
+        assertThat(fieldNames).containsExactlyInAnyOrder("firstName");
+
+        // and composite query
+        query = and(
+            and(equal("firstName", "W"), equal("lastName", "Fay")),
+            or(equalOtherField(id, "userId"), lessThan("age", "123"))
+        );
+        fieldNames = getFieldNamesUsedInQuery(query);
+        assertThat(fieldNames).containsExactlyInAnyOrder("firstName", "lastName", id, "userId",
+            "age");
+
+        // or composite query
+        var complexQuery = or(
+            equal("field1", "value1"),
+            and(
+                equal("field2", "value2"),
+                equal("field3", "value3")
+            ),
+            equal("field4", "value4")
+        );
+        fieldNames = getFieldNamesUsedInQuery(complexQuery);
+        assertThat(fieldNames).containsExactlyInAnyOrder("field1", "field2", "field3", "field4");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/index/query/QueryIndexViewImplTest.java b/application/src/test/java/run/halo/app/extension/index/query/QueryIndexViewImplTest.java
new file mode 100644
index 0000000..b746295
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/index/query/QueryIndexViewImplTest.java
@@ -0,0 +1,301 @@
+package run.halo.app.extension.index.query;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+import static run.halo.app.extension.index.query.IndexViewDataSet.createCommentIndexView;
+import static run.halo.app.extension.index.query.IndexViewDataSet.createEmployeeIndexView;
+import static run.halo.app.extension.index.query.IndexViewDataSet.createPostIndexViewWithNullCell;
+import static run.halo.app.extension.index.query.IndexViewDataSet.pileForIndexer;
+import static run.halo.app.extension.index.query.QueryIndexViewImpl.PRIMARY_INDEX_NAME;
+
+import java.util.List;
+import java.util.Map;
+import java.util.TreeSet;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.data.domain.Sort;
+import run.halo.app.extension.index.IndexEntry;
+import run.halo.app.extension.index.Indexer;
+
+/**
+ * Tests for {@link QueryIndexViewImpl}.
+ *
+ * @author guqing
+ * @since 2.17.0
+ */
+class QueryIndexViewImplTest {
+    final String id = PRIMARY_INDEX_NAME;
+
+    @Test
+    void getAllIdsForFieldTest() {
+        var indexView = createPostIndexViewWithNullCell();
+        var resultSet = indexView.getIdsForField("title");
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "102", "103", "104", "105", "106", "107", "108"
+        );
+
+        resultSet = indexView.getIdsForField("publishTime");
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "105", "106", "107"
+        );
+    }
+
+    @Test
+    void findIdsForValueEqualTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = indexView.findMatchingIdsWithEqualValues("managerId", id);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "102", "103"
+        );
+    }
+
+    @Test
+    void findIdsForFieldValueGreaterThanTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = indexView.findMatchingIdsWithGreaterValues(id, "managerId", false);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "104", "105"
+        );
+
+        indexView = createEmployeeIndexView();
+        resultSet = indexView.findMatchingIdsWithGreaterValues(id, "managerId", true);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "103", "102", "104", "105"
+        );
+    }
+
+    @Test
+    void findIdsForFieldValueGreaterThanTest2() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = indexView.findMatchingIdsWithGreaterValues("managerId", id, false);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101"
+        );
+
+        indexView = createEmployeeIndexView();
+        resultSet = indexView.findMatchingIdsWithGreaterValues("managerId", id, true);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "102", "103"
+        );
+    }
+
+    @Test
+    void findIdsForFieldValueLessThanTest() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = indexView.findMatchingIdsWithSmallerValues(id, "managerId", false);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101"
+        );
+
+        indexView = createEmployeeIndexView();
+        resultSet = indexView.findMatchingIdsWithSmallerValues(id, "managerId", true);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "100", "101", "102", "103"
+        );
+    }
+
+    @Test
+    void findIdsForFieldValueLessThanTest2() {
+        var indexView = createEmployeeIndexView();
+        var resultSet = indexView.findMatchingIdsWithSmallerValues("managerId", id, false);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "104", "105"
+        );
+
+        indexView = createEmployeeIndexView();
+        resultSet = indexView.findMatchingIdsWithSmallerValues("managerId", id, true);
+        assertThat(resultSet).containsExactlyInAnyOrder(
+            "103", "102", "104", "105"
+        );
+    }
+
+    @Nested
+    @ExtendWith(MockitoExtension.class)
+    class SortTest {
+        @Mock
+        private Indexer indexer;
+
+        @Test
+        void testSortByUnsorted() {
+            var idEntry = mock(IndexEntry.class);
+            when(indexer.getIndexEntry(PRIMARY_INDEX_NAME))
+                .thenReturn(idEntry);
+            var indexView = new QueryIndexViewImpl(indexer);
+
+            var sort = Sort.unsorted();
+
+            var resultSet = new TreeSet<>(List.of("Item1", "Item2"));
+            List sortedList = indexView.sortBy(resultSet, sort);
+            assertThat(sortedList).isEqualTo(List.of("Item1", "Item2"));
+        }
+
+        @Test
+        void testSortBySortedAscending() {
+            pileForIndexer(indexer, "field1",
+                List.of(Map.entry("key2", "Item2"), Map.entry("key1", "Item1")));
+
+            pileForIndexer(indexer, PRIMARY_INDEX_NAME,
+                List.of(Map.entry("Item1", "Item1"), Map.entry("Item2", "Item2")));
+
+            var indexView = new QueryIndexViewImpl(indexer);
+
+            var sort = Sort.by(Sort.Order.asc("field1"));
+
+            List sortedList = indexView.sortBy(indexView.getAllIds(), sort);
+
+            assertThat(sortedList).containsSequence("Item1", "Item2");
+        }
+
+        @Test
+        void testSortBySortedDescending() {
+            pileForIndexer(indexer, "field1",
+                List.of(Map.entry("key1", "Item1"), Map.entry("key2", "Item2")));
+
+            pileForIndexer(indexer, PRIMARY_INDEX_NAME,
+                List.of(Map.entry("Item1", "Item1"), Map.entry("Item2", "Item2")));
+
+            var indexView = new QueryIndexViewImpl(indexer);
+
+            var sort = Sort.by(Sort.Order.desc("field1"));
+
+            var resultSet = new TreeSet<>(List.of("Item1", "Item2"));
+            List sortedList = indexView.sortBy(resultSet, sort);
+
+            assertThat(sortedList).containsExactly("Item2", "Item1");
+        }
+
+        @Test
+        void testSortByMultipleFields() {
+            pileForIndexer(indexer, "field1",
+                List.of(Map.entry("k3", "Item3"), Map.entry("k2", "Item2")));
+
+            pileForIndexer(indexer, "field2",
+                List.of(Map.entry("k1", "Item1"), Map.entry("k3", "Item3")));
+
+            pileForIndexer(indexer, id,
+                List.of(Map.entry("Item1", "Item1"), Map.entry("Item2", "Item2"),
+                    Map.entry("Item3", "Item3")));
+
+            var indexView = new QueryIndexViewImpl(indexer);
+
+            var sort = Sort.by(Sort.Order.asc("field1"), Sort.Order.desc("field2"));
+
+            var resultSet = new TreeSet<>(List.of("Item1", "Item2", "Item3"));
+            List sortedList = indexView.sortBy(resultSet, sort);
+
+            assertThat(sortedList).containsExactly("Item2", "Item3", "Item1");
+        }
+
+        @Test
+        void testSortByMultipleFields2() {
+            pileForIndexer(indexer, id, List.of());
+
+            pileForIndexer(indexer, "field1", List.of(Map.entry("John", "John"),
+                Map.entry("Bob", "Bob"),
+                Map.entry("Alice", "Alice")
+            ));
+            pileForIndexer(indexer, "field2", List.of(Map.entry("David", "David"),
+                Map.entry("Eva", "Eva"),
+                Map.entry("Frank", "Frank")
+            ));
+            pileForIndexer(indexer, "field3", List.of(Map.entry("George", "George"),
+                Map.entry("Helen", "Helen"),
+                Map.entry("Ivy", "Ivy")
+            ));
+
+            /*
+             * 
+             * Row Key | field1 | field2 | field3
+             * -------|-------|-------|-------
+             * John   | John  |       |
+             * Bob    | Bob   |       |
+             * Alice  | Alice |       |
+             * David  |       | David |
+             * Eva    |       | Eva   |
+             * Frank  |       | Frank |
+             * George |       |       | George
+             * Helen  |       |       | Helen
+             * Ivy    |       |       | Ivy
+             * 

+             */
+            var indexView = new QueryIndexViewImpl(indexer);
+            var sort = Sort.by(Sort.Order.desc("field1"), Sort.Order.asc("field2"),
+                Sort.Order.asc("field3"));
+
+            var resultSet = new TreeSet<>(
+                List.of("Bob", "John", "Eva", "Alice", "Ivy", "David", "Frank", "Helen", "George"));
+            List sortedList = indexView.sortBy(resultSet, sort);
+
+            assertThat(sortedList).containsSequence("David", "Eva", "Frank", "George", "Helen",
+                "Ivy", "John", "Bob", "Alice");
+        }
+
+        /**
+         * 
Result for the following data.

+         * 
+         *  | id | firstName | lastName | email | hireDate | salary | managerId | departmentId |
+         * |----|-----------|----------|-------|----------|--------|-----------|--------------|
+         * | 100| Pat       | Fay      | p     | 17       | 2600   | 101       | 50           |
+         * | 101| Lee       | Day      | l     | 17       | 2400   | 102       | 40           |
+         * | 103| Mary      | Day      | p     | 17       | 2000   | 103       | 50           |
+         * | 104| John      | Fay      | j     | 17       | 1800   | 103       | 50           |
+         * | 105| Gon       | Fay      | p     | 18       | 1900   | 101       | 40           |
+         * | 102| William   | Jay      | w     | 19       | 2200   | 102       | 50           |
+         * 

+         */
+        @Test
+        void sortByMultipleFieldsWithFirstSame() {
+            var indexView = createEmployeeIndexView();
+            var ids = indexView.getAllIds();
+            var result = indexView.sortBy(ids, Sort.by(Sort.Order.asc("hireDate"),
+                Sort.Order.asc("lastName"))
+            );
+            assertThat(result).containsSequence("101", "103", "100", "104", "105", "102");
+        }
+
+        /**
+         * 
Result for the following data.

+         * 
+         * | id  | title  | published | publishTime         | owner |
+         * |-----|--------|-----------|---------------------|-------|
+         * | 100 | title1 | true      | 2024-01-01T00:00:00 | jack  |
+         * | 101 | title2 | true      | 2024-01-02T00:00:00 | rose  |
+         * | 105 | title6 | true      | 2024-01-05 00:00:00 | tom   |
+         * | 107 | title8 | true      | 2024-01-05 12:00:00 | jerry |
+         * | 106 | title7 | true      | 2024-01-05 13:00:00 | jerry |
+         * | 108 | title9 | false     | null                | jerry |
+         * | 104 | title5 | false     | null                | john  |
+         * | 103 | title4 | false     | null                | peter |
+         * | 102 | title3 | false     | null                | smith |
+         * 

+         */
+        @Test
+        void sortByMultipleFieldsForPostDataSet() {
+            var indexView = createPostIndexViewWithNullCell();
+            var ids = indexView.getAllIds();
+            var result = indexView.sortBy(ids, Sort.by(Sort.Order.asc("publishTime"),
+                Sort.Order.desc("title"))
+            );
+            assertThat(result).containsSequence("100", "101", "105", "107", "106", "108", "104",
+                "103", "102");
+        }
+
+        @Test
+        void sortByMultipleFieldsForCommentDataSet() {
+            var indexView = createCommentIndexView();
+            var ids = indexView.getAllIds();
+            var sort = Sort.by(Sort.Order.desc("spec.top"),
+                Sort.Order.asc("spec.priority"),
+                Sort.Order.desc("spec.creationTime"),
+                Sort.Order.asc("metadata.name")
+            );
+            var result = indexView.sortBy(ids, sort);
+            assertThat(result).containsSequence("1", "2", "4", "3", "5", "6", "9", "10", "8", "7",
+                "11", "12", "14", "13");
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/router/ExtensionCompositeRouterFunctionTest.java b/application/src/test/java/run/halo/app/extension/router/ExtensionCompositeRouterFunctionTest.java
new file mode 100644
index 0000000..d5f9884
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/router/ExtensionCompositeRouterFunctionTest.java
@@ -0,0 +1,96 @@
+package run.halo.app.extension.router;
+
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.boot.context.event.ApplicationStartedEvent;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import org.springframework.web.reactive.function.server.HandlerStrategies;
+import org.springframework.web.reactive.function.server.ServerRequest;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Scheme;
+import run.halo.app.extension.SchemeManager;
+import run.halo.app.extension.SchemeWatcherManager;
+import run.halo.app.extension.SchemeWatcherManager.SchemeRegistered;
+import run.halo.app.extension.SchemeWatcherManager.SchemeUnregistered;
+
+@ExtendWith(MockitoExtension.class)
+class ExtensionCompositeRouterFunctionTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Mock
+    SchemeManager schemeManager;
+
+    @Mock
+    SchemeWatcherManager watcherManager;
+
+    @InjectMocks
+    ExtensionCompositeRouterFunction extensionRouterFunc;
+
+    @Test
+    void shouldRouteWhenSchemeRegistered() {
+        var exchange = MockServerWebExchange.from(
+            MockServerHttpRequest.get("/apis/fake.halo.run/v1alpha1/fakes").build());
+
+        var messageReaders = HandlerStrategies.withDefaults().messageReaders();
+        ServerRequest request = ServerRequest.create(exchange, messageReaders);
+
+        var handlerFunc = extensionRouterFunc.route(request).block();
+        assertNull(handlerFunc);
+
+        // trigger registering scheme
+        extensionRouterFunc.onChange(
+            new SchemeRegistered(Scheme.buildFromType(FakeExtension.class)));
+
+        handlerFunc = extensionRouterFunc.route(request).block();
+        assertNotNull(handlerFunc);
+    }
+
+    @Test
+    void shouldNotRouteWhenSchemeUnregistered() {
+        var exchange = MockServerWebExchange.from(
+            MockServerHttpRequest.get("/apis/fake.halo.run/v1alpha1/fakes").build());
+
+        var messageReaders = HandlerStrategies.withDefaults().messageReaders();
+
+        // trigger registering scheme
+        extensionRouterFunc.onChange(
+            new SchemeRegistered(Scheme.buildFromType(FakeExtension.class)));
+
+        ServerRequest request = ServerRequest.create(exchange, messageReaders);
+        var handlerFunc = extensionRouterFunc.route(request).block();
+        assertNotNull(handlerFunc);
+
+        // trigger registering scheme
+        extensionRouterFunc.onChange(
+            new SchemeUnregistered(Scheme.buildFromType(FakeExtension.class)));
+        handlerFunc = extensionRouterFunc.route(request).block();
+        assertNull(handlerFunc);
+    }
+
+    @Test
+    void shouldRegisterWatcherAfterPropertiesSet() {
+        extensionRouterFunc.afterPropertiesSet();
+        verify(watcherManager).register(eq(extensionRouterFunc));
+    }
+
+    @Test
+    void shouldBuildRouterFunctionsOnApplicationStarted() {
+        var applicationStartedEvent = mock(ApplicationStartedEvent.class);
+        extensionRouterFunc.onApplicationEvent(applicationStartedEvent);
+        verify(schemeManager).schemes();
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/extension/router/ExtensionCreateHandlerTest.java b/application/src/test/java/run/halo/app/extension/router/ExtensionCreateHandlerTest.java
new file mode 100644
index 0000000..b6d44d7
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/router/ExtensionCreateHandlerTest.java
@@ -0,0 +1,115 @@
+package run.halo.app.extension.router;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.argThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.doThrow;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.Objects;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
+import org.springframework.mock.web.reactive.function.server.MockServerRequest;
+import org.springframework.web.reactive.function.server.EntityResponse;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Scheme;
+import run.halo.app.extension.Unstructured;
+import run.halo.app.extension.exception.ExtensionConvertException;
+import run.halo.app.extension.exception.ExtensionNotFoundException;
+
+@ExtendWith(MockitoExtension.class)
+class ExtensionCreateHandlerTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Test
+    void shouldBuildPathPatternCorrectly() {
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var createHandler = new ExtensionCreateHandler(scheme, client);
+        var pathPattern = createHandler.pathPattern();
+        assertEquals("/apis/fake.halo.run/v1alpha1/fakes", pathPattern);
+    }
+
+    @Test
+    void shouldHandleCorrectly() {
+        final var fake = new FakeExtension();
+        var metadata = new Metadata();
+        metadata.setName("my-fake");
+        fake.setMetadata(metadata);
+
+        var unstructured = new Unstructured();
+        unstructured.setMetadata(metadata);
+        unstructured.setApiVersion("fake.halo.run/v1alpha1");
+        unstructured.setKind("Fake");
+
+        var serverRequest = MockServerRequest.builder()
+            .body(Mono.just(unstructured));
+        when(client.create(any(Unstructured.class))).thenReturn(Mono.just(unstructured));
+
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var getHandler = new ExtensionCreateHandler(scheme, client);
+        var responseMono = getHandler.handle(serverRequest);
+
+        StepVerifier.create(responseMono)
+            .consumeNextWith(response -> {
+                assertEquals(HttpStatus.CREATED, response.statusCode());
+                assertEquals("/apis/fake.halo.run/v1alpha1/fakes/my-fake",
+                    Objects.requireNonNull(response.headers().getLocation()).toString());
+                assertEquals(MediaType.APPLICATION_JSON, response.headers().getContentType());
+                assertTrue(response instanceof EntityResponse);
+                assertEquals(unstructured, ((EntityResponse) response).entity());
+            })
+            .verifyComplete();
+        verify(client, times(1)).create(eq(unstructured));
+    }
+
+    @Test
+    void shouldReturnErrorWhenNoBodyProvided() {
+        var serverRequest = MockServerRequest.builder()
+            .body(Mono.empty());
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var getHandler = new ExtensionCreateHandler(scheme, client);
+        var responseMono = getHandler.handle(serverRequest);
+        StepVerifier.create(responseMono)
+            .verifyError(ExtensionConvertException.class);
+    }
+
+    @Test
+    void shouldReturnErrorWhenExtensionNotFound() {
+        final var unstructured = new Unstructured();
+        var metadata = new Metadata();
+        metadata.setName("my-fake");
+        unstructured.setMetadata(metadata);
+        unstructured.setApiVersion("fake.halo.run/v1alpha1");
+        unstructured.setKind("Fake");
+
+        var serverRequest = MockServerRequest.builder()
+            .body(Mono.just(unstructured));
+        doThrow(ExtensionNotFoundException.class).when(client).create(any());
+
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var createHandler = new ExtensionCreateHandler(scheme, client);
+        var responseMono = createHandler.handle(serverRequest);
+
+        StepVerifier.create(responseMono)
+            .verifyError(ExtensionNotFoundException.class);
+        verify(client, times(1)).create(
+            argThat(extension -> Objects.equals("my-fake", extension.getMetadata().getName())));
+        verify(client, times(0)).fetch(same(FakeExtension.class), anyString());
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/router/ExtensionDeleteHandlerTest.java b/application/src/test/java/run/halo/app/extension/router/ExtensionDeleteHandlerTest.java
new file mode 100644
index 0000000..52fe0bb
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/router/ExtensionDeleteHandlerTest.java
@@ -0,0 +1,110 @@
+package run.halo.app.extension.router;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.extension.GroupVersionKind.fromExtension;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
+import org.springframework.mock.web.reactive.function.server.MockServerRequest;
+import org.springframework.web.reactive.function.server.EntityResponse;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Scheme;
+import run.halo.app.extension.Unstructured;
+import run.halo.app.extension.exception.ExtensionNotFoundException;
+
+@ExtendWith(MockitoExtension.class)
+class ExtensionDeleteHandlerTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Test
+    void shouldBuildPathPatternCorrectly() {
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var deleteHandler = new ExtensionDeleteHandler(scheme, client);
+        var pathPattern = deleteHandler.pathPattern();
+        assertEquals("/apis/fake.halo.run/v1alpha1/fakes/{name}", pathPattern);
+    }
+
+    @Test
+    void shouldHandleCorrectly() {
+        final var fake = new FakeExtension();
+        var metadata = new Metadata();
+        metadata.setName("my-fake");
+        fake.setMetadata(metadata);
+
+        var unstructured = new Unstructured();
+        unstructured.setMetadata(metadata);
+        unstructured.setApiVersion("fake.halo.run/v1alpha1");
+        unstructured.setKind("Fake");
+
+        var serverRequest = MockServerRequest.builder()
+            .pathVariable("name", "my-fake")
+            .body(Mono.just(unstructured));
+        when(client.get(eq(FakeExtension.class), eq("my-fake"))).thenReturn(Mono.just(fake));
+        when(client.delete(eq(fake))).thenReturn(Mono.just(fake));
+
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var deleteHandler = new ExtensionDeleteHandler(scheme, client);
+        var responseMono = deleteHandler.handle(serverRequest);
+
+        StepVerifier.create(responseMono)
+            .assertNext(response -> {
+                assertEquals(HttpStatus.OK, response.statusCode());
+                assertEquals(MediaType.APPLICATION_JSON, response.headers().getContentType());
+                assertTrue(response instanceof EntityResponse);
+                assertEquals(fake, ((EntityResponse) response).entity());
+            })
+            .verifyComplete();
+        verify(client, times(1)).get(eq(FakeExtension.class), eq("my-fake"));
+        verify(client, times(1)).delete(any());
+        verify(client, times(0)).update(any());
+    }
+
+    @Test
+    void shouldReturnErrorWhenNoNameProvided() {
+        var serverRequest = MockServerRequest.builder()
+            .body(Mono.empty());
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var deleteHandler = new ExtensionDeleteHandler(scheme, client);
+        assertThrows(IllegalArgumentException.class, () -> deleteHandler.handle(serverRequest));
+    }
+
+    @Test
+    void shouldReturnErrorWhenExtensionNotFound() {
+        var serverRequest = MockServerRequest.builder()
+            .pathVariable("name", "my-fake")
+            .build();
+        when(client.get(FakeExtension.class, "my-fake")).thenReturn(
+            Mono.error(
+                new ExtensionNotFoundException(fromExtension(FakeExtension.class), "my-fake")));
+
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var deleteHandler = new ExtensionDeleteHandler(scheme, client);
+        var responseMono = deleteHandler.handle(serverRequest);
+
+        StepVerifier.create(responseMono)
+            .verifyError(ExtensionNotFoundException.class);
+
+        verify(client, times(1)).get(same(FakeExtension.class), anyString());
+        verify(client, times(0)).update(any());
+        verify(client, times(0)).delete(any());
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/router/ExtensionGetHandlerTest.java b/application/src/test/java/run/halo/app/extension/router/ExtensionGetHandlerTest.java
new file mode 100644
index 0000000..8cc4e43
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/router/ExtensionGetHandlerTest.java
@@ -0,0 +1,76 @@
+package run.halo.app.extension.router;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+import static run.halo.app.extension.GroupVersionKind.fromExtension;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
+import org.springframework.mock.web.reactive.function.server.MockServerRequest;
+import org.springframework.web.reactive.function.server.EntityResponse;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Scheme;
+import run.halo.app.extension.exception.ExtensionNotFoundException;
+
+@ExtendWith(MockitoExtension.class)
+class ExtensionGetHandlerTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Test
+    void shouldBuildPathPatternCorrectly() {
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var getHandler = new ExtensionGetHandler(scheme, client);
+        var pathPattern = getHandler.pathPattern();
+        assertEquals("/apis/fake.halo.run/v1alpha1/fakes/{name}", pathPattern);
+    }
+
+    @Test
+    void shouldHandleCorrectly() {
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var getHandler = new ExtensionGetHandler(scheme, client);
+        var serverRequest = MockServerRequest.builder()
+            .pathVariable("name", "my-fake")
+            .build();
+        final var fake = new FakeExtension();
+        when(client.get(eq(FakeExtension.class), eq("my-fake"))).thenReturn(Mono.just(fake));
+
+        var responseMono = getHandler.handle(serverRequest);
+
+        StepVerifier.create(responseMono)
+            .consumeNextWith(response -> {
+                assertEquals(HttpStatus.OK, response.statusCode());
+                assertEquals(MediaType.APPLICATION_JSON, response.headers().getContentType());
+                assertTrue(response instanceof EntityResponse);
+                assertEquals(fake, ((EntityResponse) response).entity());
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldThrowExceptionWhenExtensionNotFound() {
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var getHandler = new ExtensionGetHandler(scheme, client);
+        var serverRequest = MockServerRequest.builder()
+            .pathVariable("name", "my-fake")
+            .build();
+        when(client.get(eq(FakeExtension.class), eq("my-fake"))).thenReturn(Mono.error(
+            new ExtensionNotFoundException(fromExtension(FakeExtension.class), "my-fake")));
+
+        Mono responseMono = getHandler.handle(serverRequest);
+        StepVerifier.create(responseMono)
+            .expectError(ExtensionNotFoundException.class)
+            .verify();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/router/ExtensionListHandlerTest.java b/application/src/test/java/run/halo/app/extension/router/ExtensionListHandlerTest.java
new file mode 100644
index 0000000..12014a3
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/router/ExtensionListHandlerTest.java
@@ -0,0 +1,69 @@
+package run.halo.app.extension.router;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.reactive.function.server.MockServerRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import org.springframework.web.reactive.function.server.EntityResponse;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Scheme;
+
+@ExtendWith(MockitoExtension.class)
+class ExtensionListHandlerTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Test
+    void shouldBuildPathPatternCorrectly() {
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var listHandler = new ExtensionListHandler(scheme, client);
+        var pathPattern = listHandler.pathPattern();
+        assertEquals("/apis/fake.halo.run/v1alpha1/fakes", pathPattern);
+    }
+
+    @Test
+    void shouldHandleCorrectly() {
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var listHandler = new ExtensionListHandler(scheme, client);
+        var exchange = MockServerWebExchange.from(MockServerHttpRequest.get("/fake")
+            .queryParam("sort", "metadata.name,desc"));
+        var serverRequest = MockServerRequest.builder().exchange(exchange).build();
+        final var fake01 = FakeExtension.createFake("fake01");
+        final var fake02 = FakeExtension.createFake("fake02");
+        var fakeListResult = new ListResult<>(0, 0, 2, List.of(fake01, fake02));
+        when(client.listBy(same(FakeExtension.class), any(ListOptions.class), any()))
+            .thenReturn(Mono.just(fakeListResult));
+
+        var responseMono = listHandler.handle(serverRequest);
+
+        StepVerifier.create(responseMono)
+            .consumeNextWith(response -> {
+                assertEquals(HttpStatus.OK, response.statusCode());
+                assertEquals(MediaType.APPLICATION_JSON, response.headers().getContentType());
+                assertTrue(response instanceof EntityResponse);
+                assertEquals(fakeListResult, ((EntityResponse) response).entity());
+            })
+            .verifyComplete();
+        verify(client).listBy(same(FakeExtension.class), any(ListOptions.class), any());
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/extension/router/ExtensionRouterFunctionFactoryTest.java b/application/src/test/java/run/halo/app/extension/router/ExtensionRouterFunctionFactoryTest.java
new file mode 100644
index 0000000..78a43b5
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/router/ExtensionRouterFunctionFactoryTest.java
@@ -0,0 +1,181 @@
+package run.halo.app.extension.router;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertInstanceOf;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import com.fasterxml.jackson.databind.node.JsonNodeFactory;
+import com.github.fge.jackson.jsonpointer.JsonPointer;
+import com.github.fge.jsonpatch.AddOperation;
+import com.github.fge.jsonpatch.JsonPatch;
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Spy;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpMethod;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
+import org.springframework.http.codec.HttpMessageReader;
+import org.springframework.http.converter.json.Jackson2ObjectMapperBuilder;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.HandlerFunction;
+import org.springframework.web.reactive.function.server.HandlerStrategies;
+import org.springframework.web.reactive.function.server.ServerRequest;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.JsonExtension;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Scheme;
+import run.halo.app.extension.router.ExtensionRouterFunctionFactory.CreateHandler;
+import run.halo.app.extension.router.ExtensionRouterFunctionFactory.GetHandler;
+import run.halo.app.extension.router.ExtensionRouterFunctionFactory.ListHandler;
+import run.halo.app.extension.router.ExtensionRouterFunctionFactory.UpdateHandler;
+
+@ExtendWith(MockitoExtension.class)
+class ExtensionRouterFunctionFactoryTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Spy
+    Scheme scheme = Scheme.buildFromType(FakeExtension.class);
+
+    @InjectMocks
+    ExtensionRouterFunctionFactory factory;
+
+    WebTestClient webClient;
+
+    @BeforeEach
+    void setUp() {
+        webClient = WebTestClient.bindToRouterFunction(factory.create()).build();
+    }
+
+    @Nested
+    class PatchTest {
+
+        @Test
+        void shouldResponse404IfMethodNotPatch() {
+            webClient.method(HttpMethod.POST)
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/my-fake")
+                .exchange()
+                .expectStatus().isNotFound();
+        }
+
+        @Test
+        void shouldResponse415IfMediaTypeIsInsufficient() {
+            webClient.method(HttpMethod.PATCH)
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/my-fake")
+                .exchange()
+                .expectStatus().isEqualTo(HttpStatus.UNSUPPORTED_MEDIA_TYPE);
+
+            webClient.method(HttpMethod.PATCH)
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/my-fake")
+                .header(HttpHeaders.CONTENT_TYPE, MediaType.APPLICATION_JSON.toString())
+                .exchange()
+                .expectStatus().isEqualTo(HttpStatus.UNSUPPORTED_MEDIA_TYPE);
+        }
+
+        @Test
+        void shouldResponseBadRequestIfNoPatchBody() {
+            webClient.method(HttpMethod.PATCH)
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/my-fake")
+                .header(HttpHeaders.CONTENT_TYPE, "application/json-patch+json")
+                .exchange()
+                .expectStatus().isBadRequest();
+        }
+
+        @Test
+        void shouldPatchCorrectly() {
+            var fake = new FakeExtension();
+            var metadata = new Metadata();
+            metadata.setName("my-fake");
+            fake.setMetadata(metadata);
+            var mapper = Jackson2ObjectMapperBuilder.json().build();
+            var jsonExt = mapper.convertValue(fake, JsonExtension.class);
+
+            when(client.getJsonExtension(scheme.groupVersionKind(), "my-fake"))
+                .thenReturn(Mono.just(jsonExt));
+
+            var status = new FakeExtension.FakeStatus();
+            status.setState("running");
+            fake.setStatus(status);
+            var updatedExt = mapper.convertValue(fake, JsonExtension.class);
+            when(client.update(any(JsonExtension.class))).thenReturn(Mono.just(updatedExt));
+
+            var stateNode = JsonNodeFactory.instance.textNode("running");
+            var jsonPatch = new JsonPatch(List.of(
+                new AddOperation(JsonPointer.of("status", "state"), stateNode)
+            ));
+            webClient.method(HttpMethod.PATCH)
+                .uri("/apis/fake.halo.run/v1alpha1/fakes/my-fake")
+                .header(HttpHeaders.CONTENT_TYPE, "application/json-patch+json")
+                .bodyValue(jsonPatch)
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(JsonExtension.class).isEqualTo(updatedExt);
+
+            verify(client).update(assertArg(ext -> {
+                var state = ext.getInternal().get("status").get("state")
+                    .asText();
+                assertEquals("running", state);
+            }));
+        }
+    }
+
+
+    @Test
+    void shouldCreateSuccessfully() {
+        var routerFunction = factory.create();
+
+        testCases().forEach(testCase -> {
+            List> messageReaders =
+                HandlerStrategies.withDefaults().messageReaders();
+            var request = ServerRequest.create(testCase.webExchange, messageReaders);
+            var handlerFunc = routerFunction.route(request).block();
+            assertInstanceOf(testCase.expectHandlerType, handlerFunc);
+        });
+    }
+
+    List testCases() {
+        var listWebExchange = MockServerWebExchange.from(
+            MockServerHttpRequest.get("/apis/fake.halo.run/v1alpha1/fakes").build());
+
+        var getWebExchange = MockServerWebExchange.from(
+            MockServerHttpRequest.get("/apis/fake.halo.run/v1alpha1/fakes/my-fake").build()
+        );
+
+        var createWebExchange = MockServerWebExchange.from(
+            MockServerHttpRequest.post("/apis/fake.halo.run/v1alpha1/fakes").body("{}")
+        );
+
+        var updateWebExchange = MockServerWebExchange.from(
+            MockServerHttpRequest.put("/apis/fake.halo.run/v1alpha1/fakes/my-fake").body("{}")
+        );
+
+        return List.of(
+            new TestCase(listWebExchange, ListHandler.class),
+            new TestCase(getWebExchange, GetHandler.class),
+            new TestCase(createWebExchange, CreateHandler.class),
+            new TestCase(updateWebExchange, UpdateHandler.class)
+        );
+    }
+
+    record TestCase(ServerWebExchange webExchange,
+                    Class> expectHandlerType) {
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/router/ExtensionUpdateHandlerTest.java b/application/src/test/java/run/halo/app/extension/router/ExtensionUpdateHandlerTest.java
new file mode 100644
index 0000000..b2e6752
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/router/ExtensionUpdateHandlerTest.java
@@ -0,0 +1,129 @@
+package run.halo.app.extension.router;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.argThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.doThrow;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.Objects;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
+import org.springframework.mock.web.reactive.function.server.MockServerRequest;
+import org.springframework.web.reactive.function.server.EntityResponse;
+import org.springframework.web.server.ServerWebInputException;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Scheme;
+import run.halo.app.extension.Unstructured;
+import run.halo.app.extension.exception.ExtensionNotFoundException;
+
+@ExtendWith(MockitoExtension.class)
+class ExtensionUpdateHandlerTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Test
+    void shouldBuildPathPatternCorrectly() {
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var updateHandler = new ExtensionUpdateHandler(scheme, client);
+        var pathPattern = updateHandler.pathPattern();
+        assertEquals("/apis/fake.halo.run/v1alpha1/fakes/{name}", pathPattern);
+    }
+
+    @Test
+    void shouldHandleCorrectly() {
+        final var fake = new FakeExtension();
+        var metadata = new Metadata();
+        metadata.setName("my-fake");
+        fake.setMetadata(metadata);
+
+        var unstructured = new Unstructured();
+        unstructured.setMetadata(metadata);
+        unstructured.setApiVersion("fake.halo.run/v1alpha1");
+        unstructured.setKind("Fake");
+
+        var serverRequest = MockServerRequest.builder()
+            .pathVariable("name", "my-fake")
+            .body(Mono.just(unstructured));
+        // when(client.fetch(eq(FakeExtension.class), eq("my-fake"))).thenReturn(Mono.just(fake));
+        when(client.update(eq(unstructured))).thenReturn(Mono.just(unstructured));
+
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var updateHandler = new ExtensionUpdateHandler(scheme, client);
+        var responseMono = updateHandler.handle(serverRequest);
+
+        StepVerifier.create(responseMono)
+            .assertNext(response -> {
+                assertEquals(HttpStatus.OK, response.statusCode());
+                assertEquals(MediaType.APPLICATION_JSON, response.headers().getContentType());
+                assertTrue(response instanceof EntityResponse);
+                assertEquals(unstructured, ((EntityResponse) response).entity());
+            })
+            .verifyComplete();
+        // verify(client, times(1)).fetch(eq(FakeExtension.class), eq("my-fake"));
+        verify(client, times(1)).update(eq(unstructured));
+    }
+
+    @Test
+    void shouldReturnErrorWhenNoBodyProvided() {
+        var serverRequest = MockServerRequest.builder()
+            .pathVariable("name", "my-fake")
+            .body(Mono.empty());
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var updateHandler = new ExtensionUpdateHandler(scheme, client);
+        var responseMono = updateHandler.handle(serverRequest);
+        StepVerifier.create(responseMono)
+            .verifyError(ServerWebInputException.class);
+    }
+
+    @Test
+    void shouldReturnErrorWhenNoNameProvided() {
+        var serverRequest = MockServerRequest.builder()
+            .body(Mono.empty());
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var updateHandler = new ExtensionUpdateHandler(scheme, client);
+        assertThrows(IllegalArgumentException.class, () -> updateHandler.handle(serverRequest));
+    }
+
+    @Test
+    void shouldReturnErrorWhenExtensionNotFound() {
+        final var unstructured = new Unstructured();
+        var metadata = new Metadata();
+        metadata.setName("my-fake");
+        unstructured.setMetadata(metadata);
+        unstructured.setApiVersion("fake.halo.run/v1alpha1");
+        unstructured.setKind("Fake");
+
+        var serverRequest = MockServerRequest.builder()
+            .pathVariable("name", "my-fake")
+            .body(Mono.just(unstructured));
+        doThrow(ExtensionNotFoundException.class).when(client).update(any());
+
+        var scheme = Scheme.buildFromType(FakeExtension.class);
+        var updateHandler = new ExtensionUpdateHandler(scheme, client);
+        var responseMono = updateHandler.handle(serverRequest);
+
+        StepVerifier.create(responseMono)
+            .verifyError(ExtensionNotFoundException.class);
+
+        verify(client, times(1)).update(
+            argThat(extension -> Objects.equals("my-fake", extension.getMetadata().getName())));
+        verify(client, times(0)).fetch(same(FakeExtension.class), anyString());
+    }
+}
diff --git a/application/src/test/java/run/halo/app/extension/router/PathPatternGeneratorTest.java b/application/src/test/java/run/halo/app/extension/router/PathPatternGeneratorTest.java
new file mode 100644
index 0000000..d2974a0
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/router/PathPatternGeneratorTest.java
@@ -0,0 +1,36 @@
+package run.halo.app.extension.router;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+import run.halo.app.extension.Scheme;
+import run.halo.app.extension.router.ExtensionRouterFunctionFactory.PathPatternGenerator;
+
+class PathPatternGeneratorTest {
+
+    @GVK(group = "fake.halo.run", version = "v1alpha1", kind = "Fake",
+        singular = "fake", plural = "fakes")
+    private static class GroupExtension extends AbstractExtension {
+    }
+
+    @GVK(group = "", version = "v1alpha1", kind = "Fake",
+        singular = "fake", plural = "fakes")
+    private static class GrouplessExtension extends AbstractExtension {
+    }
+
+    @Test
+    void buildGroupedExtensionPathPattern() {
+        var scheme = Scheme.buildFromType(GroupExtension.class);
+        var pathPattern = PathPatternGenerator.buildExtensionPathPattern(scheme);
+        assertEquals("/apis/fake.halo.run/v1alpha1/fakes", pathPattern);
+    }
+
+    @Test
+    void buildGrouplessExtensionPathPattern() {
+        var scheme = Scheme.buildFromType(GrouplessExtension.class);
+        var pathPattern = PathPatternGenerator.buildExtensionPathPattern(scheme);
+        assertEquals("/api/v1alpha1/fakes", pathPattern);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/extension/store/ReactiveExtensionStoreClientImplTest.java b/application/src/test/java/run/halo/app/extension/store/ReactiveExtensionStoreClientImplTest.java
new file mode 100644
index 0000000..5e7f13c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/extension/store/ReactiveExtensionStoreClientImplTest.java
@@ -0,0 +1,102 @@
+package run.halo.app.extension.store;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+
+@ExtendWith(MockitoExtension.class)
+class ReactiveExtensionStoreClientImplTest {
+
+    @Mock
+    ExtensionStoreRepository repository;
+
+    @InjectMocks
+    ReactiveExtensionStoreClientImpl client;
+
+    @Test
+    void listByNamePrefix() {
+        var expectedExtensions = List.of(
+            new ExtensionStore("/registry/posts/hello-world", "this is post".getBytes(), 1L),
+            new ExtensionStore("/registry/posts/hello-halo", "this is post".getBytes(), 1L)
+        );
+
+        when(repository.findAllByNameStartingWith("/registry/posts"))
+            .thenReturn(Flux.fromIterable(expectedExtensions));
+
+        var gotExtensions = client.listByNamePrefix("/registry/posts").collectList().block();
+        assertEquals(expectedExtensions, gotExtensions);
+    }
+
+    @Test
+    void fetchByName() {
+        var expectedExtension =
+            new ExtensionStore("/registry/posts/hello-world", "this is post".getBytes(), 1L);
+
+        when(repository.findById("/registry/posts/hello-halo"))
+            .thenReturn(Mono.just(expectedExtension));
+
+        var gotExtension = client.fetchByName("/registry/posts/hello-halo").blockOptional();
+        assertTrue(gotExtension.isPresent());
+        assertEquals(expectedExtension, gotExtension.get());
+    }
+
+    @Test
+    void create() {
+        var expectedExtension =
+            new ExtensionStore("/registry/posts/hello-halo", "hello halo".getBytes(), 2L);
+
+        when(repository.save(any()))
+            .thenReturn(Mono.just(expectedExtension));
+
+        var createdExtension =
+            client.create("/registry/posts/hello-halo", "hello halo".getBytes())
+                .block();
+
+        assertEquals(expectedExtension, createdExtension);
+    }
+
+    @Test
+    void update() {
+        var expectedExtension =
+            new ExtensionStore("/registry/posts/hello-halo", "hello halo".getBytes(), 2L);
+
+        when(repository.save(any())).thenReturn(Mono.just(expectedExtension));
+
+        var updatedExtension =
+            client.update("/registry/posts/hello-halo", 1L, "hello halo".getBytes())
+                .block();
+
+        assertEquals(expectedExtension, updatedExtension);
+    }
+
+    @Test
+    void shouldDoNotThrowExceptionWhenDeletingNonExistExt() {
+        when(repository.findById(anyString())).thenReturn(Mono.empty());
+
+        client.delete("/registry/posts/hello-halo", 1L).block();
+    }
+
+    @Test
+    void shouldDeleteSuccessfully() {
+        var expectedExtension =
+            new ExtensionStore("/registry/posts/hello-halo", "hello halo".getBytes(), 2L);
+
+        when(repository.findById(anyString())).thenReturn(Mono.just(expectedExtension));
+        when(repository.delete(any())).thenReturn(Mono.empty());
+
+        var deletedExtension = client.delete("/registry/posts/hello-halo", 2L).block();
+
+        assertEquals(expectedExtension, deletedExtension);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/ConditionListTest.java b/application/src/test/java/run/halo/app/infra/ConditionListTest.java
new file mode 100644
index 0000000..51717fd
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/ConditionListTest.java
@@ -0,0 +1,237 @@
+package run.halo.app.infra;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import java.time.Duration;
+import java.time.Instant;
+import java.util.Iterator;
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link ConditionList}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class ConditionListTest {
+
+    @Test
+    void add() {
+        ConditionList conditionList = new ConditionList();
+        conditionList.add(condition("type", "message", "reason", ConditionStatus.FALSE));
+        conditionList.add(condition("type", "message", "reason", ConditionStatus.FALSE));
+
+        assertThat(conditionList.size()).isEqualTo(1);
+        conditionList.add(condition("type", "message", "reason", ConditionStatus.TRUE));
+        assertThat(conditionList.size()).isEqualTo(2);
+    }
+
+    @Test
+    void addAndEvictFIFO() throws JSONException {
+        ConditionList conditionList = new ConditionList();
+        conditionList.addFirst(condition("type", "message", "reason", ConditionStatus.FALSE));
+        conditionList.addFirst(condition("type2", "message2", "reason2", ConditionStatus.FALSE));
+        conditionList.addFirst(condition("type3", "message3", "reason3", ConditionStatus.FALSE));
+
+        JSONAssert.assertEquals("""
+                [
+                    {
+                        "type": "type3",
+                        "status": "FALSE",
+                        "message": "message3",
+                        "reason": "reason3"
+                    },
+                    {
+                        "type": "type2",
+                        "status": "FALSE",
+                        "message": "message2",
+                        "reason": "reason2"
+                    },
+                    {
+                        "type": "type",
+                        "status": "FALSE",
+                        "message": "message",
+                        "reason": "reason"
+                    }
+                ]
+                """,
+            JsonUtils.objectToJson(conditionList),
+            true);
+        assertThat(conditionList.size()).isEqualTo(3);
+
+        conditionList.addAndEvictFIFO(
+            condition("type4", "message4", "reason4", ConditionStatus.FALSE), 1);
+
+        assertThat(conditionList.size()).isEqualTo(1);
+
+        // json serialize test.
+        JSONAssert.assertEquals("""
+                [
+                    {
+                        "type": "type4",
+                        "status": "FALSE",
+                        "message": "message4",
+                        "reason": "reason4"
+                    }
+                ]
+                """,
+            JsonUtils.objectToJson(conditionList), true);
+    }
+
+    @Test
+    void peek() {
+        ConditionList conditionList = new ConditionList();
+        conditionList.addFirst(condition("type", "message", "reason", ConditionStatus.FALSE));
+        Condition condition = condition("type2", "message2", "reason2", ConditionStatus.FALSE);
+        conditionList.addFirst(condition);
+
+        Condition peek = conditionList.peek();
+        assertThat(peek).isEqualTo(condition);
+    }
+
+    @Test
+    void removeLast() {
+        ConditionList conditionList = new ConditionList();
+        Condition condition = condition("type", "message", "reason", ConditionStatus.FALSE);
+        conditionList.addFirst(condition);
+
+        conditionList.addFirst(condition("type2", "message2", "reason2", ConditionStatus.FALSE));
+
+        assertThat(conditionList.size()).isEqualTo(2);
+        assertThat(conditionList.removeLast()).isEqualTo(condition);
+        assertThat(conditionList.size()).isEqualTo(1);
+    }
+
+    @Test
+    void test() {
+        ConditionList conditionList = new ConditionList();
+        conditionList.addAndEvictFIFO(
+            condition("type", "message", "reason", ConditionStatus.FALSE));
+        conditionList.addAndEvictFIFO(
+            condition("type2", "message2", "reason2", ConditionStatus.FALSE));
+
+        Iterator iterator = conditionList.iterator();
+        assertThat(iterator.next().getType()).isEqualTo("type2");
+        assertThat(iterator.next().getType()).isEqualTo("type");
+    }
+
+    @Test
+    void deserialization() {
+        String s = """
+            [{
+                "type": "type3",
+                "status": "FALSE",
+                "message": "message3",
+                "reason": "reason3"
+            },
+            {
+                "type": "type2",
+                "status": "FALSE",
+                "message": "message2",
+                "reason": "reason2"
+            },
+            {
+                "type": "type",
+                "status": "FALSE",
+                "message": "message",
+                "reason": "reason"
+            }]
+            """;
+        ConditionList conditions = JsonUtils.jsonToObject(s, ConditionList.class);
+        assertThat(conditions.peek().getType()).isEqualTo("type3");
+    }
+
+    @Test
+    void shouldNotAddIfTypeIsSame() {
+        var conditions = new ConditionList();
+        var condition = Condition.builder()
+            .type("type")
+            .status(ConditionStatus.TRUE)
+            .reason("reason")
+            .message("message")
+            .build();
+
+        var anotherCondition = Condition.builder()
+            .type("type")
+            .status(ConditionStatus.FALSE)
+            .reason("another reason")
+            .message("another message")
+            .build();
+
+        conditions.addAndEvictFIFO(condition);
+        conditions.addAndEvictFIFO(anotherCondition);
+
+        assertEquals(1, conditions.size());
+    }
+
+    @Test
+    void shouldNotUpdateLastTransitionTimeIfStatusNotChanged() {
+        var now = Instant.now();
+        var conditions = new ConditionList();
+        conditions.addAndEvictFIFO(
+            Condition.builder()
+                .type("type")
+                .status(ConditionStatus.TRUE)
+                .reason("reason")
+                .message("message")
+                .lastTransitionTime(now)
+                .build()
+        );
+
+        conditions.addAndEvictFIFO(
+            Condition.builder()
+                .type("type")
+                .status(ConditionStatus.TRUE)
+                .reason("reason")
+                .message("message")
+                .lastTransitionTime(now.plus(Duration.ofSeconds(1)))
+                .build()
+        );
+
+        assertEquals(1, conditions.size());
+        // make sure the last transition time was not modified.
+        assertEquals(now, conditions.peek().getLastTransitionTime());
+    }
+
+    @Test
+    void shouldUpdateLastTransitionTimeIfStatusChanged() {
+        var now = Instant.now();
+        var conditions = new ConditionList();
+        conditions.addAndEvictFIFO(
+            Condition.builder()
+                .type("type")
+                .status(ConditionStatus.TRUE)
+                .reason("reason")
+                .message("message")
+                .lastTransitionTime(now)
+                .build()
+        );
+
+        conditions.addAndEvictFIFO(
+            Condition.builder()
+                .type("type")
+                .status(ConditionStatus.FALSE)
+                .reason("reason")
+                .message("message")
+                .lastTransitionTime(now.plus(Duration.ofSeconds(1)))
+                .build()
+        );
+
+        assertEquals(1, conditions.size());
+        assertEquals(now.plus(Duration.ofSeconds(1)), conditions.peek().getLastTransitionTime());
+    }
+
+    private Condition condition(String type, String message, String reason,
+        ConditionStatus status) {
+        Condition condition = new Condition();
+        condition.setType(type);
+        condition.setMessage(message);
+        condition.setReason(reason);
+        condition.setStatus(status);
+        return condition;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/DefaultBackupRootGetterTest.java b/application/src/test/java/run/halo/app/infra/DefaultBackupRootGetterTest.java
new file mode 100644
index 0000000..bfba9f4
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/DefaultBackupRootGetterTest.java
@@ -0,0 +1,33 @@
+package run.halo.app.infra;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.nio.file.Path;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.infra.properties.HaloProperties;
+
+@ExtendWith(MockitoExtension.class)
+class DefaultBackupRootGetterTest {
+
+    @Mock
+    HaloProperties haloProperties;
+
+    @InjectMocks
+    DefaultBackupRootGetter backupRootGetter;
+
+    @Test
+    void shouldGetBackupRootFromWorkDir() {
+        when(haloProperties.getWorkDir()).thenReturn(Path.of("workdir"));
+        var backupRoot = this.backupRootGetter.get();
+        assertEquals(Path.of("workdir", "backups"), backupRoot);
+        verify(haloProperties).getWorkDir();
+    }
+
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/DefaultExternalLinkProcessorTest.java b/application/src/test/java/run/halo/app/infra/DefaultExternalLinkProcessorTest.java
new file mode 100644
index 0000000..257dbb2
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/DefaultExternalLinkProcessorTest.java
@@ -0,0 +1,49 @@
+package run.halo.app.infra;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.when;
+
+import java.net.MalformedURLException;
+import java.net.URI;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+
+/**
+ * Tests for {@link DefaultExternalLinkProcessor}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultExternalLinkProcessorTest {
+
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+
+    @InjectMocks
+    DefaultExternalLinkProcessor externalLinkProcessor;
+
+    @Test
+    void processWhenLinkIsEmpty() {
+        assertThat(externalLinkProcessor.processLink(null)).isNull();
+        assertThat(externalLinkProcessor.processLink("")).isEmpty();
+    }
+
+    @Test
+    void process() throws MalformedURLException {
+        when(externalUrlSupplier.getRaw()).thenReturn(null);
+        assertThat(externalLinkProcessor.processLink("/test")).isEqualTo("/test");
+
+        when(externalUrlSupplier.getRaw()).thenReturn(URI.create("https://halo.run").toURL());
+        assertThat(externalLinkProcessor.processLink("/test")).isEqualTo("https://halo.run/test");
+
+        assertThat(externalLinkProcessor.processLink("https://guqing.xyz/test"))
+            .isEqualTo("https://guqing.xyz/test");
+
+        when(externalUrlSupplier.getRaw()).thenReturn(URI.create("https://halo.run/").toURL());
+        assertThat(externalLinkProcessor.processLink("/test")).isEqualTo("https://halo.run/test");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/DefaultSystemVersionSupplierTest.java b/application/src/test/java/run/halo/app/infra/DefaultSystemVersionSupplierTest.java
new file mode 100644
index 0000000..6be7f0a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/DefaultSystemVersionSupplierTest.java
@@ -0,0 +1,65 @@
+package run.halo.app.infra;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.when;
+
+import com.github.zafarkhaja.semver.Version;
+import java.util.Properties;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.boot.info.BuildProperties;
+
+/**
+ * Tests for {@link DefaultSystemVersionSupplier}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+
+@ExtendWith(MockitoExtension.class)
+class DefaultSystemVersionSupplierTest {
+
+    @InjectMocks
+    private DefaultSystemVersionSupplier systemVersionSupplier;
+
+    @Mock
+    ObjectProvider buildPropertiesProvider;
+
+    @Test
+    void getWhenBuildPropertiesNotSet() {
+        Version version = systemVersionSupplier.get();
+        assertThat(version.toString()).isEqualTo("0.0.0");
+    }
+
+    @Test
+    void getWhenBuildPropertiesButVersionIsNull() {
+        Properties properties = new Properties();
+        BuildProperties buildProperties = new BuildProperties(properties);
+        when(buildPropertiesProvider.getIfUnique()).thenReturn(buildProperties);
+
+        Version version = systemVersionSupplier.get();
+        assertThat(version.toString()).isEqualTo("0.0.0");
+    }
+
+    @Test
+    void getWhenBuildPropertiesAndVersionNotEmpty() {
+        Properties properties = new Properties();
+        properties.put("version", "2.0.0");
+        BuildProperties buildProperties = new BuildProperties(properties);
+        when(buildPropertiesProvider.getIfUnique()).thenReturn(buildProperties);
+
+        Version version = systemVersionSupplier.get();
+        assertThat(version.toString()).isEqualTo("2.0.0");
+
+        properties.put("version", "2.0.0-SNAPSHOT");
+        buildProperties = new BuildProperties(properties);
+        when(buildPropertiesProvider.getIfUnique()).thenReturn(buildProperties);
+        version = systemVersionSupplier.get();
+        assertThat(version.toString()).isEqualTo("2.0.0-SNAPSHOT");
+        assertThat(version.getPreReleaseVersion()).isEqualTo("SNAPSHOT");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/ExtensionResourceInitializerTest.java b/application/src/test/java/run/halo/app/infra/ExtensionResourceInitializerTest.java
new file mode 100644
index 0000000..b082a18
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/ExtensionResourceInitializerTest.java
@@ -0,0 +1,173 @@
+package run.halo.app.infra;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Set;
+import org.json.JSONException;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.boot.context.event.ApplicationStartedEvent;
+import org.springframework.context.ApplicationEventPublisher;
+import org.springframework.util.FileSystemUtils;
+import reactor.core.publisher.Mono;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Unstructured;
+import run.halo.app.infra.properties.HaloProperties;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link ExtensionResourceInitializer}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ExtensionResourceInitializerTest {
+
+    @Mock
+    ReactiveExtensionClient extensionClient;
+    @Mock
+    HaloProperties haloProperties;
+    @Mock
+    ApplicationStartedEvent applicationStartedEvent;
+
+    @Mock
+    ApplicationEventPublisher eventPublisher;
+
+    @InjectMocks
+    ExtensionResourceInitializer extensionResourceInitializer;
+
+    List dirsToClean;
+
+    @BeforeEach
+    void setUp() throws IOException {
+        dirsToClean = new ArrayList<>(2);
+
+        Path tempDirectory = Files.createTempDirectory("extension-resource-initializer-test");
+        dirsToClean.add(tempDirectory);
+        Path multiDirectory =
+            Files.createDirectories(tempDirectory.resolve("a").resolve("b").resolve("c"));
+        Files.writeString(tempDirectory.resolve("hello.yml"), """
+                kind: FakeExtension
+                apiVersion: v1
+                metadata:
+                  name: fake-extension
+                spec:
+                  hello: world
+                """,
+            StandardCharsets.UTF_8);
+
+        Files.writeString(multiDirectory.getParent().resolve("fake-1.txt"), """
+                kind: FakeExtension
+                name: fake-extension
+                """,
+            StandardCharsets.UTF_8);
+        Files.writeString(multiDirectory.resolve("fake.yaml"), """
+                kind: FakeExtension
+                apiVersion: v1
+                metadata:
+                  name: fake-extension
+                spec:
+                  hello: world
+                """,
+            StandardCharsets.UTF_8);
+
+        // test file in directory
+        Path secondTempDir = Files.createTempDirectory("extension-resource-file-test");
+        dirsToClean.add(secondTempDir);
+        Path filePath = secondTempDir.resolve("good.yml");
+        Files.writeString(filePath, """
+                kind: FakeExtension
+                apiVersion: v1
+                metadata:
+                  name: config-file-is-ok
+                spec:
+                  key: value
+                """,
+            StandardCharsets.UTF_8);
+
+        when(haloProperties.getInitialExtensionLocations())
+            .thenReturn(Set.of("file:" + tempDirectory + "/**/*.yaml",
+                "file:" + tempDirectory + "/**/*.yml",
+                "file:" + filePath));
+    }
+
+    @AfterEach
+    void cleanUp() throws IOException {
+        if (dirsToClean != null) {
+            for (var dir : dirsToClean) {
+                FileSystemUtils.deleteRecursively(dir);
+            }
+        }
+    }
+
+    @Test
+    void onApplicationEvent() throws JSONException {
+        when(haloProperties.isRequiredExtensionDisabled()).thenReturn(true);
+        var argumentCaptor = ArgumentCaptor.forClass(Unstructured.class);
+
+        when(extensionClient.fetch(any(GroupVersionKind.class), any()))
+            .thenReturn(Mono.empty());
+        when(extensionClient.create(any())).thenReturn(Mono.empty());
+
+        extensionResourceInitializer.onApplicationEvent(applicationStartedEvent);
+
+        verify(extensionClient, times(3)).create(argumentCaptor.capture());
+
+        List values = argumentCaptor.getAllValues();
+        assertThat(values).isNotNull();
+        assertThat(values).hasSize(3);
+        JSONAssert.assertEquals("""
+            [
+                 {
+                     "kind": "FakeExtension",
+                     "apiVersion": "v1",
+                     "metadata": {
+                         "name": "config-file-is-ok"
+                     },
+                     "spec": {
+                         "key": "value"
+                     }
+                 },
+                 {
+                     "kind": "FakeExtension",
+                     "apiVersion": "v1",
+                     "metadata": {
+                         "name": "fake-extension"
+                     },
+                     "spec": {
+                         "hello": "world"
+                     }
+                 },
+                 {
+                     "kind": "FakeExtension",
+                     "apiVersion": "v1",
+                     "metadata": {
+                         "name": "fake-extension"
+                     },
+                     "spec": {
+                         "hello": "world"
+                     }
+                 }
+            ]
+            """, JsonUtils.objectToJson(values), false);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/HaloPropertiesExternalUrlSupplierTest.java b/application/src/test/java/run/halo/app/infra/HaloPropertiesExternalUrlSupplierTest.java
new file mode 100644
index 0000000..4fe085e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/HaloPropertiesExternalUrlSupplierTest.java
@@ -0,0 +1,119 @@
+package run.halo.app.infra;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.net.MalformedURLException;
+import java.net.URI;
+import java.net.URL;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.boot.autoconfigure.web.reactive.WebFluxProperties;
+import org.springframework.http.HttpRequest;
+import run.halo.app.infra.properties.HaloProperties;
+
+@ExtendWith(MockitoExtension.class)
+class HaloPropertiesExternalUrlSupplierTest {
+
+    @Mock
+    HaloProperties haloProperties;
+
+    @Mock
+    WebFluxProperties webFluxProperties;
+
+    @InjectMocks
+    HaloPropertiesExternalUrlSupplier externalUrl;
+
+    @Test
+    void getURIWhenUsingAbsolutePermalink() throws MalformedURLException {
+        var fakeUri = URI.create("https://halo.run/fake");
+        when(haloProperties.getExternalUrl()).thenReturn(fakeUri.toURL());
+        when(haloProperties.isUseAbsolutePermalink()).thenReturn(true);
+
+        assertEquals(fakeUri, externalUrl.get());
+    }
+
+    @Test
+    void getURIWhenBasePathSetAndNotUsingAbsolutePermalink() throws MalformedURLException {
+        when(webFluxProperties.getBasePath()).thenReturn("/blog");
+        when(haloProperties.isUseAbsolutePermalink()).thenReturn(false);
+
+        assertEquals(URI.create("/blog"), externalUrl.get());
+    }
+
+    @Test
+    void getURIWhenBasePathSetAndUsingAbsolutePermalink() throws MalformedURLException {
+        var fakeUri = URI.create("https://halo.run/fake");
+        when(haloProperties.getExternalUrl()).thenReturn(fakeUri.toURL());
+        lenient().when(webFluxProperties.getBasePath()).thenReturn("/blog");
+        when(haloProperties.isUseAbsolutePermalink()).thenReturn(true);
+
+        assertEquals(URI.create("https://halo.run/fake"), externalUrl.get());
+    }
+
+
+    @Test
+    void getURIWhenUsingRelativePermalink() throws MalformedURLException {
+        when(haloProperties.isUseAbsolutePermalink()).thenReturn(false);
+
+        assertEquals(URI.create("/"), externalUrl.get());
+    }
+
+    @Test
+    void getURLWhenExternalURLProvided() throws MalformedURLException {
+        var fakeUri = URI.create("https://halo.run/fake");
+        when(haloProperties.getExternalUrl()).thenReturn(fakeUri.toURL());
+        var mockRequest = mock(HttpRequest.class);
+        var url = externalUrl.getURL(mockRequest);
+        assertEquals(fakeUri.toURL(), url);
+    }
+
+    @Test
+    void getURLWhenExternalURLAbsent() throws MalformedURLException {
+        var fakeUri = URI.create("https://localhost/fake");
+        when(haloProperties.getExternalUrl()).thenReturn(null);
+        var mockRequest = mock(HttpRequest.class);
+        when(mockRequest.getURI()).thenReturn(fakeUri);
+        var url = externalUrl.getURL(mockRequest);
+        assertEquals(new URL("https://localhost/"), url);
+    }
+
+    @Test
+    void getURLWhenBasePathSetAndExternalURLProvided() throws MalformedURLException {
+        var fakeUri = URI.create("https://localhost/fake");
+        when(haloProperties.getExternalUrl()).thenReturn(fakeUri.toURL());
+        lenient().when(webFluxProperties.getBasePath()).thenReturn("/blog");
+        var mockRequest = mock(HttpRequest.class);
+        lenient().when(mockRequest.getURI()).thenReturn(fakeUri);
+        var url = externalUrl.getURL(mockRequest);
+        assertEquals(new URL("https://localhost/fake"), url);
+    }
+
+    @Test
+    void getURLWhenBasePathSetAndExternalURLAbsent() throws MalformedURLException {
+        var fakeUri = URI.create("https://localhost/fake");
+        when(haloProperties.getExternalUrl()).thenReturn(null);
+        when(webFluxProperties.getBasePath()).thenReturn("/blog");
+        var mockRequest = mock(HttpRequest.class);
+        when(mockRequest.getURI()).thenReturn(fakeUri);
+        var url = externalUrl.getURL(mockRequest);
+        assertEquals(new URL("https://localhost/blog"), url);
+    }
+
+    @Test
+    void getRaw() throws MalformedURLException {
+        var fakeUri = URI.create("http://localhost/fake");
+        when(haloProperties.getExternalUrl()).thenReturn(fakeUri.toURL());
+        assertEquals(fakeUri.toURL(), externalUrl.getRaw());
+
+        when(haloProperties.getExternalUrl()).thenReturn(null);
+        assertNull(externalUrl.getRaw());
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/InitializationStateGetterTest.java b/application/src/test/java/run/halo/app/infra/InitializationStateGetterTest.java
new file mode 100644
index 0000000..ab7bada
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/InitializationStateGetterTest.java
@@ -0,0 +1,84 @@
+package run.halo.app.infra;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.User;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+/**
+ * Tests for {@link InitializationStateGetter}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class InitializationStateGetterTest {
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private DefaultInitializationStateGetter initializationStateGetter;
+
+    @Test
+    void userInitialized() {
+        when(client.listBy(eq(User.class), any(), any(PageRequest.class)))
+            .thenReturn(Mono.empty());
+        initializationStateGetter.userInitialized()
+            .as(StepVerifier::create)
+            .expectNext(false)
+            .verifyComplete();
+
+        User user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName("fake-hidden-user");
+        user.getMetadata().setLabels(Map.of("halo.run/hidden-user", "true"));
+        user.setSpec(new User.UserSpec());
+        user.getSpec().setDisplayName("fake-hidden-user");
+        ListResult listResult = new ListResult<>(List.of(user));
+
+        when(client.listBy(eq(User.class), any(), any(PageRequest.class)))
+            .thenReturn(Mono.just(listResult));
+        initializationStateGetter.userInitialized()
+            .as(StepVerifier::create)
+            .expectNext(true)
+            .verifyComplete();
+    }
+
+    @Test
+    void dataInitialized() {
+        ConfigMap configMap = new ConfigMap();
+        configMap.setMetadata(new Metadata());
+        configMap.getMetadata().setName(SystemState.SYSTEM_STATES_CONFIGMAP);
+        configMap.setData(Map.of("states", "{\"isSetup\":true}"));
+        when(client.fetch(eq(ConfigMap.class), eq(SystemState.SYSTEM_STATES_CONFIGMAP)))
+            .thenReturn(Mono.just(configMap));
+        initializationStateGetter.dataInitialized()
+            .as(StepVerifier::create)
+            .expectNext(true)
+            .verifyComplete();
+
+        // call again
+        initializationStateGetter.dataInitialized()
+            .as(StepVerifier::create)
+            .expectNext(true)
+            .verifyComplete();
+        // execute only once
+        verify(client).fetch(eq(ConfigMap.class), eq(SystemState.SYSTEM_STATES_CONFIGMAP));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/ReactiveExtensionPaginatedOperatorImplTest.java b/application/src/test/java/run/halo/app/infra/ReactiveExtensionPaginatedOperatorImplTest.java
new file mode 100644
index 0000000..8f1dce7
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/ReactiveExtensionPaginatedOperatorImplTest.java
@@ -0,0 +1,107 @@
+package run.halo.app.infra;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import java.util.ArrayList;
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.data.domain.Sort;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.FakeExtension;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+@ExtendWith(MockitoExtension.class)
+class ReactiveExtensionPaginatedOperatorImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private ReactiveExtensionPaginatedOperatorImpl service;
+
+    @Nested
+    class ListTest {
+
+        @BeforeEach
+        void setUp() {
+            Instant now = Instant.now();
+            var items = new ArrayList<>();
+            // Generate 900 items
+            for (int j = 0; j < 9; j++) {
+                items.addAll(generateItems(100, now));
+            }
+            // mock new items during the process
+            Instant otherNow = now.plusSeconds(1000);
+            items.addAll(generateItems(90, otherNow));
+
+            when(client.listBy(any(), any(), any())).thenAnswer(invocation -> {
+                PageRequest pageRequest = invocation.getArgument(2);
+                int pageNumber = pageRequest.getPageNumber();
+                var list = ListResult.subList(items, pageNumber, pageRequest.getPageSize());
+                var result = new ListResult<>(pageNumber, pageRequest.getPageSize(),
+                    items.size(), list);
+                return Mono.just(result);
+            });
+        }
+
+        @Test
+        public void listTest() {
+            StepVerifier.create(service.list(FakeExtension.class, new ListOptions()))
+                .expectNextCount(900)
+                .verifyComplete();
+        }
+    }
+
+    @Test
+    void nextPageTest() {
+        var result = new ListResult(1, 10, 30, List.of());
+        var sort = Sort.by("metadata.creationTimestamp");
+        var nextPage = ReactiveExtensionPaginatedOperatorImpl.nextPage(result, sort);
+        assertThat(nextPage.getPageNumber()).isEqualTo(2);
+        assertThat(nextPage.getPageSize()).isEqualTo(10);
+        assertThat(nextPage.getSort()).isEqualTo(sort);
+    }
+
+    @Test
+    void shouldTakeNextTest() {
+        var now = Instant.now();
+        var item = new FakeExtension();
+        item.setMetadata(new Metadata());
+        item.getMetadata().setCreationTimestamp(now);
+        var result = ReactiveExtensionPaginatedOperatorImpl.shouldTakeNext(item, now);
+        assertThat(result).isTrue();
+
+        item.getMetadata().setCreationTimestamp(now.minusSeconds(1));
+        result = ReactiveExtensionPaginatedOperatorImpl.shouldTakeNext(item, now);
+        assertThat(result).isTrue();
+
+        item.getMetadata().setCreationTimestamp(now.plusSeconds(1));
+        result = ReactiveExtensionPaginatedOperatorImpl.shouldTakeNext(item, now);
+        assertThat(result).isFalse();
+    }
+
+    private List generateItems(int count, Instant creationTimestamp) {
+        List items = new ArrayList<>();
+        for (int i = 0; i < count; i++) {
+            var item = new FakeExtension();
+            item.setMetadata(new Metadata());
+            item.getMetadata().setCreationTimestamp(creationTimestamp);
+            items.add(item);
+        }
+        return items;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/SystemConfigurableEnvironmentFetcherTest.java b/application/src/test/java/run/halo/app/infra/SystemConfigurableEnvironmentFetcherTest.java
new file mode 100644
index 0000000..c50784a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/SystemConfigurableEnvironmentFetcherTest.java
@@ -0,0 +1,168 @@
+package run.halo.app.infra;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+
+import java.util.LinkedHashMap;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.skyscreamer.jsonassert.JSONAssert;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link SystemConfigurableEnvironmentFetcher}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SystemConfigurableEnvironmentFetcherTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @BeforeEach
+    void setUp() {
+        lenient().when(client.fetch(eq(ConfigMap.class), eq("system-default")))
+            .thenReturn(Mono.just(systemDefault()));
+        lenient().when(client.fetch(eq(ConfigMap.class), eq("system")))
+            .thenReturn(Mono.just(system()));
+    }
+
+    @Test
+    void getConfigMap() {
+        environmentFetcher.getConfigMap()
+            .as(StepVerifier::create)
+            .consumeNextWith(configMap -> {
+                assertThat(configMap.getMetadata().getName())
+                    .isEqualTo(SystemSetting.SYSTEM_CONFIG);
+                try {
+                    JSONAssert.assertEquals(expectedJson(),
+                        JsonUtils.objectToJson(configMap),
+                        true);
+                } catch (JSONException e) {
+                    throw new RuntimeException(e);
+                }
+            })
+            .verifyComplete();
+    }
+
+    String expectedJson() {
+        String routeRules =
+            "{\\\"categories\\\":\\\"topics\\\",\\\"archives\\\":\\\"archives-new\\\","
+                + "\\\"post\\\":\\\"/archives-new/{slug}\\\"}";
+        String fakeArray = "{\\\"select\\\":[{\\\"label\\\":\\\"Hello\\\","
+            + "\\\"value\\\":\\\"hello\\\"},{\\\"label\\\":\\\"Awesome\\\","
+            + "\\\"value\\\":\\\"awesome\\\"}]}";
+        return """
+            {
+                "data": {
+                    "routeRules": "%s",
+                    "seo": "{\\"blockSpiders\\":\\"true\\",\\"keywords\\":\\"Hello,Test,Fake\\"}",
+                    "fakeArray": "%s"
+                },
+                "apiVersion": "v1alpha1",
+                "kind": "ConfigMap",
+                "metadata": {
+                    "name": "system"
+                }
+            }
+            """.formatted(routeRules, fakeArray);
+    }
+
+    ConfigMap systemDefault() {
+        ConfigMap configMap = new ConfigMap();
+        configMap.setMetadata(new Metadata());
+        configMap.getMetadata().setName("system-default");
+        configMap.setData(new LinkedHashMap<>());
+        configMap.getData().put("routeRules", """
+            {
+                "categories": "categories",
+                "archives": "archives",
+                "post": "/archives/{slug}",
+                "tags": "tags"
+            }
+            """
+        );
+        configMap.getData().put("seo", """
+            {
+                "blockSpiders": "false",
+                "keywords": "Hello,Test,Fake"
+            }
+            """
+        );
+        configMap.getData().put("post", """
+            {
+                "pageSize": "10"
+            }
+            """
+        );
+        configMap.getData().put("fakeArray", """
+            {
+                "select": [{
+                    "label": "Hello",
+                    "value": "hello"
+                }, {
+                    "label": "Test",
+                    "value": "test"
+                }]
+            }
+            """
+        );
+        return configMap;
+    }
+
+    ConfigMap system() {
+        ConfigMap configMap = new ConfigMap();
+        configMap.setMetadata(new Metadata());
+        configMap.getMetadata().setName("system");
+        configMap.setData(new LinkedHashMap<>());
+        // will delete the tags key and replace some values
+        configMap.getData().put("routeRules", """
+            {
+                "categories": "topics",
+                "archives": "archives-new",
+                "post": "/archives-new/{slug}",
+                "tags": null
+            }
+            """
+        );
+        configMap.getData().put("seo", """
+            {
+                "blockSpiders": "true"
+            }
+            """
+        );
+
+        // deleted post group here
+        configMap.getData().put("post", null);
+
+        configMap.getData().put("fakeArray", """
+            {
+                "select": [{
+                    "label": "Hello",
+                    "value": "hello"
+                }, {
+                    "label": "Awesome",
+                    "value": "awesome"
+                }]
+            }
+            """
+        );
+        return configMap;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/SystemSettingTest.java b/application/src/test/java/run/halo/app/infra/SystemSettingTest.java
new file mode 100644
index 0000000..46f163f
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/SystemSettingTest.java
@@ -0,0 +1,60 @@
+package run.halo.app.infra;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.util.HashMap;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.infra.SystemSetting.Comment;
+import run.halo.app.infra.SystemSetting.ExtensionPointEnabled;
+import run.halo.app.infra.utils.JsonUtils;
+
+class SystemSettingTest {
+
+    @Nested
+    class ExtensionPointEnabledTest {
+
+        @Test
+        void deserializeTest() {
+            var json = """
+                    {
+                      "run.halo.app.search.post.PostSearchService": [
+                        "run.halo.app.search.post.LucenePostSearchService"
+                      ]
+                    }
+                """;
+
+            var enabled = JsonUtils.jsonToObject(json, ExtensionPointEnabled.class);
+            assertTrue(enabled.containsKey("run.halo.app.search.post.PostSearchService"));
+        }
+    }
+
+    @Test
+    void shouldGetConfigFromJson() {
+        var configMap = new ConfigMap();
+        configMap.putDataItem("comment", """
+            {"enable": true}
+            """);
+        var comment = SystemSetting.get(configMap, Comment.GROUP, Comment.class);
+        assertTrue(comment.getEnable());
+    }
+
+    @Test
+    void shouldGetNullIfKeyNotExist() {
+        var configMap = new ConfigMap();
+        configMap.setData(new HashMap<>());
+        String fake = SystemSetting.get(configMap, "fake-key", String.class);
+        assertNull(fake);
+    }
+
+    @Test
+    void shouldGetConfigViaConversionService() {
+        var configMap = new ConfigMap();
+        configMap.putDataItem("int", "100");
+        var integer = SystemSetting.get(configMap, "int", Integer.class);
+        assertEquals(100, integer);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/SystemStateTest.java b/application/src/test/java/run/halo/app/infra/SystemStateTest.java
new file mode 100644
index 0000000..cafce5c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/SystemStateTest.java
@@ -0,0 +1,51 @@
+package run.halo.app.infra;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.ConfigMap;
+
+/**
+ * Tests for {@link SystemState}.
+ *
+ * @author guqing
+ * @since 2.8.0
+ */
+class SystemStateTest {
+
+    @Test
+    void deserialize() {
+        ConfigMap configMap = new ConfigMap();
+        SystemState systemState = SystemState.deserialize(configMap);
+        assertThat(systemState).isNotNull();
+
+        configMap.setData(Map.of(SystemState.GROUP, "{\"isSetup\":true}"));
+        systemState = SystemState.deserialize(configMap);
+        assertThat(systemState.getIsSetup()).isTrue();
+    }
+
+    @Test
+    void update() {
+        SystemState newSystemState = new SystemState();
+        newSystemState.setIsSetup(true);
+
+        ConfigMap configMap = new ConfigMap();
+        SystemState.update(newSystemState, configMap);
+        assertThat(configMap.getData().get(SystemState.GROUP)).isEqualTo("{\"isSetup\":true}");
+
+        var data = new LinkedHashMap();
+        configMap.setData(data);
+        data.put(SystemState.GROUP, "{\"isSetup\":false}");
+        SystemState.update(newSystemState, configMap);
+        assertThat(configMap.getData().get(SystemState.GROUP)).isEqualTo("{\"isSetup\":true}");
+
+        data.clear();
+        data.put(SystemState.GROUP, "{\"isSetup\":true, \"foo\":\"bar\"}");
+        newSystemState.setIsSetup(false);
+        SystemState.update(newSystemState, configMap);
+        assertThat(configMap.getData().get(SystemState.GROUP))
+            .isEqualTo("{\"isSetup\":false,\"foo\":\"bar\"}");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/infra/ValidationUtilsTest.java b/application/src/test/java/run/halo/app/infra/ValidationUtilsTest.java
new file mode 100644
index 0000000..6fa0991
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/ValidationUtilsTest.java
@@ -0,0 +1,92 @@
+package run.halo.app.infra;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.HashMap;
+import org.apache.commons.lang3.StringUtils;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link ValidationUtils}.
+ *
+ * @author guqing
+ * @since 2.5.0
+ */
+class ValidationUtilsTest {
+
+    @Nested
+    class NameValidationTest {
+        @Test
+        void nullName() {
+            assertThat(ValidationUtils.validateName(null)).isFalse();
+        }
+
+        @Test
+        void emptyUsername() {
+            assertThat(ValidationUtils.validateName("")).isFalse();
+        }
+
+        @Test
+        void startWithIllegalCharacter() {
+            assertThat(ValidationUtils.validateName("-abc")).isFalse();
+        }
+
+        @Test
+        void endWithIllegalCharacter() {
+            assertThat(ValidationUtils.validateName("abc-")).isFalse();
+            assertThat(ValidationUtils.validateName("abcD")).isFalse();
+        }
+
+        @Test
+        void middleWithIllegalCharacter() {
+            assertThat(ValidationUtils.validateName("ab?c")).isFalse();
+        }
+
+        @Test
+        void moreThan63Characters() {
+            assertThat(ValidationUtils.validateName(StringUtils.repeat('a', 64))).isFalse();
+        }
+
+        @Test
+        void correctUsername() {
+            assertThat(ValidationUtils.validateName("abc")).isTrue();
+            assertThat(ValidationUtils.validateName("ab-c")).isTrue();
+            assertThat(ValidationUtils.validateName("1st")).isTrue();
+            assertThat(ValidationUtils.validateName("ast1")).isTrue();
+            assertThat(ValidationUtils.validateName("ast-1")).isTrue();
+        }
+    }
+
+    @Test
+    void validateEmailTest() {
+        var cases = new HashMap();
+        // Valid cases
+        cases.put("simple@example.com", true);
+        cases.put("very.common@example.com", true);
+        cases.put("disposable.style.email.with+symbol@example.com", true);
+        cases.put("other.email-with-hyphen@example.com", true);
+        cases.put("fully-qualified-domain@example.com", true);
+        cases.put("user.name+tag+sorting@example.com", true);
+        cases.put("x@example.com", true);
+        cases.put("example-indeed@strange-example.com", true);
+        cases.put("example@s.example", true);
+        cases.put("john.doe@example.com", true);
+        cases.put("a.little.lengthy.but.fine@dept.example.com", true);
+        cases.put("123ada@halo.co", true);
+        cases.put("23ad@halo.top", true);
+
+        // Invalid cases
+        cases.put("Abc.example.com", false);
+        cases.put("admin@mailserver1", false);
+        cases.put("\" \"@example.org", false);
+        cases.put("A@b@c@example.com", false);
+        cases.put("a\"b(c)d,e:f;gi[j\\k]l@example.com", false);
+        cases.put("just\"not\"right@example.com", false);
+        cases.put("this is\"not\\allowed@example.com", false);
+        cases.put("this\\ still\\\"not\\\\allowed@example.com", false);
+        cases.put("123456789012345678901234567890123456789012345", false);
+        cases.forEach((email, expected) -> assertThat(ValidationUtils.isValidEmail(email))
+            .isEqualTo(expected));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/exception/handlers/I18nExceptionTest.java b/application/src/test/java/run/halo/app/infra/exception/handlers/I18nExceptionTest.java
new file mode 100644
index 0000000..e217f3c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/exception/handlers/I18nExceptionTest.java
@@ -0,0 +1,209 @@
+package run.halo.app.infra.exception.handlers;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import java.util.Locale;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.context.TestConfiguration;
+import org.springframework.dao.ConcurrencyFailureException;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ProblemDetail;
+import org.springframework.http.ResponseEntity;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PutMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.ResponseStatus;
+import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.server.ResponseStatusException;
+
+@SpringBootTest
+@AutoConfigureWebTestClient
+class I18nExceptionTest {
+
+    @Autowired
+    WebTestClient webClient;
+
+    Locale currentLocale;
+
+    @BeforeEach
+    void setUp() {
+        currentLocale = Locale.getDefault();
+        Locale.setDefault(Locale.ENGLISH);
+    }
+
+    @AfterEach
+    void tearDown() {
+        Locale.setDefault(currentLocale);
+    }
+
+    @Test
+    void shouldBeOkForGreetingEndpoint() {
+        webClient.get().uri("/response-entity/greet")
+            .exchange()
+            .expectStatus().isOk()
+            .expectBody(String.class).isEqualTo("Hello Halo");
+    }
+
+    @Test
+    void shouldGetErrorIfErrorResponseThrow() {
+        webClient.get().uri("/response-entity/error-response")
+            .exchange()
+            .expectStatus().isBadRequest()
+            .expectBody(ProblemDetail.class)
+            .value(problemDetail -> {
+                assertEquals("Error Response", problemDetail.getTitle());
+                assertEquals("Message argument is {0}.", problemDetail.getDetail());
+            });
+    }
+
+
+    @Test
+    void shouldGetErrorIfErrorResponseThrowWithMessageCode() {
+        webClient.get().uri("/response-entity/error-response/with-message-code")
+            .exchange()
+            .expectStatus().isBadRequest()
+            .expectBody(ProblemDetail.class)
+            .value(problemDetail -> {
+                assertEquals("Error Response", problemDetail.getTitle());
+                assertEquals("Something went wrong, argument is fake-arg.",
+                    problemDetail.getDetail());
+            });
+    }
+
+    @Test
+    void shouldGetErrorIfErrorResponseThrowWithMessageCodeAndLocaleIsChinese() {
+        webClient.get().uri("/response-entity/error-response/with-message-code")
+            .header(HttpHeaders.ACCEPT_LANGUAGE, "zh-CN,zh")
+            .exchange()
+            .expectStatus().isBadRequest()
+            .expectBody(ProblemDetail.class)
+            .value(problemDetail -> {
+                assertEquals("发生错误", problemDetail.getTitle());
+                assertEquals("发生了一些错误，参数：fake-arg。",
+                    problemDetail.getDetail());
+            });
+
+    }
+
+    @Test
+    void shouldGetErrorIfThrowingResponseStatusException() {
+        webClient.get().uri("/response-entity/with-response-status-error")
+            .exchange()
+            .expectStatus().isEqualTo(HttpStatus.GONE)
+            .expectBody(ProblemDetail.class)
+            .value(problemDetail -> {
+                assertEquals("Gone", problemDetail.getTitle());
+                assertEquals("Something went wrong",
+                    problemDetail.getDetail());
+            });
+    }
+
+    @Test
+    void shouldGetErrorIfThrowingGeneralException() {
+        // problem reason will be a fixed prompt when internal server error occurred.
+        webClient.get().uri("/response-entity/general-error")
+            .exchange()
+            .expectStatus().isEqualTo(HttpStatus.INTERNAL_SERVER_ERROR)
+            .expectBody(ProblemDetail.class)
+            .value(problemDetail -> {
+                assertEquals("Internal Server Error", problemDetail.getTitle());
+                assertEquals("Something went wrong, please try again later.",
+                    problemDetail.getDetail());
+            });
+    }
+
+    @Test
+    void shouldGetConflictError() {
+        webClient.put().uri("/response-entity/conflict-error")
+            .header("X-XSRF-TOKEN", "fake-token")
+            .cookie("XSRF-TOKEN", "fake-token")
+            .exchange()
+            .expectStatus().isEqualTo(HttpStatus.CONFLICT)
+            .expectBody(ProblemDetail.class)
+            .value(problemDetail -> {
+                assertEquals("Conflict", problemDetail.getTitle());
+                assertEquals("Conflict detected.",
+                    problemDetail.getDetail());
+            });
+    }
+
+    @TestConfiguration
+    static class TestConfig {
+
+        @RestController
+        @RequestMapping("/response-entity")
+        static class ResponseEntityController {
+
+            @GetMapping("/greet")
+            ResponseEntity greet() {
+                return ResponseEntity.ok("Hello Halo");
+            }
+
+            @GetMapping("/error-response")
+            ResponseEntity throwErrorResponseException() {
+                throw new ErrorResponseException();
+            }
+
+            @GetMapping("/error-response/with-message-args")
+            ResponseEntity throwErrorResponseExceptionWithMessageArgs() {
+                throw new ErrorResponseException("Something went wrong.",
+                    null, new Object[] {"fake-arg"});
+            }
+
+            @GetMapping("/error-response/with-message-code")
+            ResponseEntity throwErrorResponseExceptionWithMessageCode() {
+                throw new ErrorResponseException("Something went wrong.",
+                    "error.somethingWentWrong", new Object[] {"fake-arg"});
+            }
+
+            @GetMapping("/with-response-status-error")
+            ResponseEntity throwWithResponseStatusException() {
+                throw new WithResponseStatusException();
+            }
+
+            @GetMapping("/general-error")
+            ResponseEntity throwGeneralException() {
+                throw new GeneralException("Something went wrong");
+            }
+
+            @PutMapping("/conflict-error")
+            ResponseEntity throwConflictException() {
+                throw new ConcurrencyFailureException("Conflict detected");
+            }
+        }
+    }
+
+    static class ErrorResponseException extends ResponseStatusException {
+
+        public ErrorResponseException() {
+            this("Something went wrong.");
+        }
+
+        public ErrorResponseException(String reason) {
+            this(reason, null, null);
+        }
+
+        public ErrorResponseException(String reason, String detailCode, Object[] detailArgs) {
+            super(HttpStatus.BAD_REQUEST, reason, null, detailCode, detailArgs);
+        }
+    }
+
+    @ResponseStatus(value = HttpStatus.GONE, reason = "Something went wrong")
+    static class WithResponseStatusException extends RuntimeException {
+
+    }
+
+    static class GeneralException extends RuntimeException {
+
+        public GeneralException(String message) {
+            super(message);
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/infra/utils/Base62UtilsTest.java b/application/src/test/java/run/halo/app/infra/utils/Base62UtilsTest.java
new file mode 100644
index 0000000..77619a9
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/utils/Base62UtilsTest.java
@@ -0,0 +1,47 @@
+package run.halo.app.infra.utils;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import io.seruco.encoding.base62.Base62;
+import java.util.HashMap;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link Base62}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class Base62UtilsTest {
+
+    @Test
+    void encode() {
+        getNaiveTestSet().forEach(
+            (str, encoded) -> assertThat(Base62Utils.encode(str)).isEqualTo(encoded));
+    }
+
+    @Test
+    void decodeToString() {
+        getNaiveTestSet().forEach(
+            (str, encoded) -> assertThat(Base62Utils.decodeToString(encoded)).isEqualTo(str));
+    }
+
+    public static Map getNaiveTestSet() {
+        Map testSet = new HashMap<>();
+
+        testSet.put("", "");
+        testSet.put("a", "1Z");
+        testSet.put("Hello", "5TP3P3v");
+        testSet.put("Hello world!", "T8dgcjRGuYUueWht");
+        testSet.put("Just a test", "7G0iTmJjQFG2t6K");
+        testSet.put("!!!!!!!!!!!!!!!!!", "4A7f43EVXQoS6Am897ZKbAn");
+        testSet.put("0123456789", "18XU2xYejWO9d3");
+        testSet.put("The quick brown fox jumps over the lazy dog",
+            "83UM8dOjD4xrzASgmqLOXTgTagvV1jPegUJ39mcYnwHwTlzpdfKXvpp4RL");
+        testSet.put("Sphinx of black quartz, judge my vow",
+            "1Ul5yQGNM8YFBp3sz19dYj1kTp95OW7jI8pTcTP5JhYjIaFmx");
+
+        return testSet;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/infra/utils/FileNameUtilsTest.java b/application/src/test/java/run/halo/app/infra/utils/FileNameUtilsTest.java
new file mode 100644
index 0000000..98b9c7f
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/utils/FileNameUtilsTest.java
@@ -0,0 +1,78 @@
+package run.halo.app.infra.utils;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static run.halo.app.infra.utils.FileNameUtils.randomFileName;
+import static run.halo.app.infra.utils.FileNameUtils.removeFileExtension;
+
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+
+class FileNameUtilsTest {
+
+    @Nested
+    class RemoveFileExtensionTest {
+
+        @Test
+        public void shouldNotRemoveExtIfNoExt() {
+            assertEquals("halo", removeFileExtension("halo", true));
+            assertEquals("halo", removeFileExtension("halo", false));
+        }
+
+        @Test
+        public void shouldRemoveExtIfHasOnlyOneExt() {
+            assertEquals("halo", removeFileExtension("halo.run", true));
+            assertEquals("halo", removeFileExtension("halo.run", false));
+        }
+
+        @Test
+        public void shouldNotRemoveExtIfDotfile() {
+            assertEquals(".halo", removeFileExtension(".halo", true));
+            assertEquals(".halo", removeFileExtension(".halo", false));
+        }
+
+        @Test
+        public void shouldRemoveExtIfDotfileHasOneExt() {
+            assertEquals(".halo", removeFileExtension(".halo.run", true));
+            assertEquals(".halo", removeFileExtension(".halo.run", false));
+        }
+
+        @Test
+        public void shouldRemoveExtIfHasTwoExt() {
+            assertEquals("halo", removeFileExtension("halo.tar.gz", true));
+            assertEquals("halo.tar", removeFileExtension("halo.tar.gz", false));
+        }
+
+        @Test
+        public void shouldRemoveExtIfDotfileHasTwoExt() {
+            assertEquals(".halo", removeFileExtension(".halo.tar.gz", true));
+            assertEquals(".halo.tar", removeFileExtension(".halo.tar.gz", false));
+        }
+
+        @Test
+        void shouldReturnNullIfFilenameIsNull() {
+            assertNull(removeFileExtension(null, true));
+            assertNull(removeFileExtension(null, false));
+        }
+    }
+
+    @Nested
+    class AppendRandomFileNameTest {
+        @Test
+        void normalFileName() {
+            String randomFileName = randomFileName("halo.run", 3);
+            assertEquals(12, randomFileName.length());
+            assertTrue(randomFileName.startsWith("halo-"));
+            assertTrue(randomFileName.endsWith(".run"));
+
+            randomFileName = randomFileName(".run", 3);
+            assertEquals(7, randomFileName.length());
+            assertTrue(randomFileName.endsWith(".run"));
+
+            randomFileName = randomFileName("halo", 3);
+            assertEquals(8, randomFileName.length());
+            assertTrue(randomFileName.startsWith("halo-"));
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/infra/utils/FileTypeDetectUtilsTest.java b/application/src/test/java/run/halo/app/infra/utils/FileTypeDetectUtilsTest.java
new file mode 100644
index 0000000..a69ee0c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/utils/FileTypeDetectUtilsTest.java
@@ -0,0 +1,45 @@
+package run.halo.app.infra.utils;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.io.IOException;
+import java.nio.file.Files;
+import org.apache.tika.mime.MimeTypeException;
+import org.junit.jupiter.api.Test;
+import org.springframework.util.ResourceUtils;
+
+/**
+ * Test for {@link FileTypeDetectUtils}.
+ *
+ * @author guqing
+ * @since 2.18.0
+ */
+class FileTypeDetectUtilsTest {
+
+    @Test
+    void detectMimeTypeTest() throws IOException {
+        var file = ResourceUtils.getFile("classpath:app.key");
+        String mimeType = FileTypeDetectUtils.detectMimeType(Files.newInputStream(file.toPath()));
+        assertThat(mimeType).isEqualTo("application/x-x509-key; format=pem");
+
+        file = ResourceUtils.getFile("classpath:console/index.html");
+        mimeType = FileTypeDetectUtils.detectMimeType(Files.newInputStream(file.toPath()));
+        assertThat(mimeType).isEqualTo("text/plain");
+
+        file = ResourceUtils.getFile("classpath:themes/test-theme.zip");
+        mimeType = FileTypeDetectUtils.detectMimeType(Files.newInputStream(file.toPath()));
+        assertThat(mimeType).isEqualTo("application/zip");
+    }
+
+    @Test
+    void detectFileExtensionTest() throws MimeTypeException {
+        var ext = FileTypeDetectUtils.detectFileExtension("application/x-x509-key; format=pem");
+        assertThat(ext).isEqualTo("");
+
+        ext = FileTypeDetectUtils.detectFileExtension("text/plain");
+        assertThat(ext).isEqualTo(".txt");
+
+        ext = FileTypeDetectUtils.detectFileExtension("application/zip");
+        assertThat(ext).isEqualTo(".zip");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/infra/utils/FileUtilsTest.java b/application/src/test/java/run/halo/app/infra/utils/FileUtilsTest.java
new file mode 100644
index 0000000..3365edc
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/utils/FileUtilsTest.java
@@ -0,0 +1,118 @@
+package run.halo.app.infra.utils;
+
+import static java.util.Objects.requireNonNull;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static run.halo.app.infra.utils.FileUtils.checkDirectoryTraversal;
+import static run.halo.app.infra.utils.FileUtils.deleteFileSilently;
+import static run.halo.app.infra.utils.FileUtils.jar;
+import static run.halo.app.infra.utils.FileUtils.unzip;
+import static run.halo.app.infra.utils.FileUtils.zip;
+
+import java.io.IOException;
+import java.net.URISyntaxException;
+import java.nio.file.Files;
+import java.nio.file.NoSuchFileException;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.util.zip.ZipInputStream;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.io.TempDir;
+import reactor.test.StepVerifier;
+import run.halo.app.infra.exception.AccessDeniedException;
+
+class FileUtilsTest {
+
+    @TempDir
+    Path tempDirectory;
+
+    @Nested
+    class DirectoryTraversalTest {
+
+        @Test
+        void traversalTestWhenSuccess() {
+            checkDirectoryTraversal("/etc/", "/etc/halo/halo/../test");
+            checkDirectoryTraversal("/etc/", "/etc/halo/../test");
+            checkDirectoryTraversal("/etc/", "/etc/test");
+        }
+
+        @Test
+        void traversalTestWhenFailure() {
+            assertThrows(AccessDeniedException.class,
+                () -> checkDirectoryTraversal("/etc/", "/etc/../tmp"));
+            assertThrows(AccessDeniedException.class,
+                () -> checkDirectoryTraversal("/etc/", "/../tmp"));
+            assertThrows(AccessDeniedException.class,
+                () -> checkDirectoryTraversal("/etc/", "/tmp"));
+        }
+
+    }
+
+    @Nested
+    class ZipTest {
+
+        @Test
+        void zipFolderAndUnzip() throws IOException, URISyntaxException {
+            var uri = requireNonNull(getClass().getClassLoader().getResource("folder-to-zip"))
+                .toURI();
+            var zipPath = tempDirectory.resolve("example.zip");
+            zip(Paths.get(uri), zipPath);
+
+            var unzipTarget = tempDirectory.resolve("example-folder");
+            try (var zis = new ZipInputStream(Files.newInputStream(zipPath))) {
+                unzip(zis, unzipTarget);
+            }
+
+            var lines = Files.readAllLines(unzipTarget.resolve("examplefile"));
+            assertEquals(1, lines.size());
+            assertEquals("Here is an example file.", lines.get(0));
+        }
+
+        @Test
+        void jarFolderAndUnzip() throws IOException, URISyntaxException {
+            var uri = requireNonNull(getClass().getClassLoader().getResource("folder-to-zip"))
+                .toURI();
+            var zipPath = tempDirectory.resolve("example.zip");
+            jar(Paths.get(uri), zipPath);
+
+            var unzipTarget = tempDirectory.resolve("example-folder");
+            try (var zis = new ZipInputStream(Files.newInputStream(zipPath))) {
+                unzip(zis, unzipTarget);
+            }
+            var lines = Files.readAllLines(unzipTarget.resolve("examplefile"));
+            assertEquals(1, lines.size());
+            assertEquals("Here is an example file.", lines.get(0));
+        }
+
+        @Test
+        void zipFolderIfNoSuchFolder() {
+            assertThrows(NoSuchFileException.class, () ->
+                zip(Paths.get("no-such-folder"), tempDirectory.resolve("example.zip")));
+        }
+
+        @Test
+        void jarFolderIfNoSuchFolder() {
+            assertThrows(NoSuchFileException.class, () ->
+                jar(Paths.get("no-such-folder"), tempDirectory.resolve("example.zip")));
+        }
+
+    }
+
+    @Test
+    void deleteFileSilentlyTest() throws IOException {
+        StepVerifier.create(deleteFileSilently(null))
+            .expectNext(false)
+            .verifyComplete();
+
+        StepVerifier.create(deleteFileSilently(tempDirectory))
+            .expectNext(false)
+            .verifyComplete();
+
+        StepVerifier.create(
+                deleteFileSilently(Files.createFile(tempDirectory.resolve("for-deleting"))))
+            .expectNext(true)
+            .verifyComplete();
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/utils/IpAddressUtilsTest.java b/application/src/test/java/run/halo/app/infra/utils/IpAddressUtilsTest.java
new file mode 100644
index 0000000..6975b77
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/utils/IpAddressUtilsTest.java
@@ -0,0 +1,64 @@
+package run.halo.app.infra.utils;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import java.net.InetSocketAddress;
+import org.junit.jupiter.api.Test;
+import org.springframework.http.HttpHeaders;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+
+class IpAddressUtilsTest {
+
+    @Test
+    void testGetIPAddressFromCloudflareProxy() {
+        var request = MockServerHttpRequest.get("/")
+            .header("CF-Connecting-IP", "127.0.0.1")
+            .build();
+        var expected = "127.0.0.1";
+        var actual = IpAddressUtils.getClientIp(request);
+        assertEquals(expected, actual);
+    }
+
+    @Test
+    void testGetIPAddressFromXRealIpHeader() {
+        var request = MockServerHttpRequest.get("/")
+            .header("X-Real-IP", "127.0.0.1")
+            .build();
+        var expected = "127.0.0.1";
+        var actual = IpAddressUtils.getClientIp(request);
+        assertEquals(expected, actual);
+    }
+
+    @Test
+    void testGetUnknownIPAddressWhenRemoteAddressIsNull() {
+        var request = MockServerHttpRequest.get("/").build();
+        var actual = IpAddressUtils.getClientIp(request);
+        assertEquals(IpAddressUtils.UNKNOWN, actual);
+    }
+
+    @Test
+    void testGetUnknownIPAddressWhenRemoteAddressIsUnresolved() {
+        var request = MockServerHttpRequest.get("/")
+            .remoteAddress(InetSocketAddress.createUnresolved("localhost", 8090))
+            .build();
+        var actual = IpAddressUtils.getClientIp(request);
+        assertEquals(IpAddressUtils.UNKNOWN, actual);
+    }
+
+    @Test
+    void testGetIPAddressWithMultipleHeaders() {
+        var headers = new HttpHeaders();
+        headers.add("X-Forwarded-For", "127.0.0.1, 127.0.1.1");
+        headers.add("Proxy-Client-IP", "127.0.0.2");
+        headers.add("CF-Connecting-IP", "127.0.0.2");
+        headers.add("WL-Proxy-Client-IP", "127.0.0.3");
+        headers.add("HTTP_CLIENT_IP", "127.0.0.4");
+        headers.add("HTTP_X_FORWARDED_FOR", "127.0.0.5");
+        var request = MockServerHttpRequest.get("/")
+            .headers(headers)
+            .build();
+        var expected = "127.0.0.1";
+        var actual = IpAddressUtils.getClientIp(request);
+        assertEquals(expected, actual);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/infra/utils/VersionUtilsTest.java b/application/src/test/java/run/halo/app/infra/utils/VersionUtilsTest.java
new file mode 100644
index 0000000..fa02a8a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/utils/VersionUtilsTest.java
@@ -0,0 +1,51 @@
+package run.halo.app.infra.utils;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link VersionUtils}.
+ *
+ * @author guqing
+ * @since 2.2.0
+ */
+class VersionUtilsTest {
+
+    @Test
+    void satisfiesRequires() {
+        // match all requires
+        String systemVersion = "0.0.0";
+        String requires = ">=2.2.0";
+        boolean result = VersionUtils.satisfiesRequires(systemVersion, requires);
+        assertThat(result).isTrue();
+
+        systemVersion = "2.0.0";
+        requires = "*";
+        result = VersionUtils.satisfiesRequires(systemVersion, requires);
+        assertThat(result).isTrue();
+
+        systemVersion = "2.0.0";
+        requires = "";
+        result = VersionUtils.satisfiesRequires(systemVersion, requires);
+        assertThat(result).isTrue();
+
+        // match exact version
+        systemVersion = "2.0.0";
+        requires = ">=2.0.0";
+        result = VersionUtils.satisfiesRequires(systemVersion, requires);
+        assertThat(result).isTrue();
+
+        systemVersion = "2.0.0";
+        requires = ">2.0.0";
+        result = VersionUtils.satisfiesRequires(systemVersion, requires);
+        assertThat(result).isFalse();
+
+        //an exact version x.y.z will implicitly mean the same as >=x.y.z
+        systemVersion = "2.1.0";
+        // means >=2.0.0
+        requires = "2.0.0";
+        result = VersionUtils.satisfiesRequires(systemVersion, requires);
+        assertThat(result).isTrue();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/infra/utils/YamlUnstructuredLoaderTest.java b/application/src/test/java/run/halo/app/infra/utils/YamlUnstructuredLoaderTest.java
new file mode 100644
index 0000000..5f09bf5
--- /dev/null
+++ b/application/src/test/java/run/halo/app/infra/utils/YamlUnstructuredLoaderTest.java
@@ -0,0 +1,116 @@
+package run.halo.app.infra.utils;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.List;
+import java.util.stream.Stream;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.core.io.Resource;
+import org.springframework.security.util.InMemoryResource;
+import run.halo.app.extension.Unstructured;
+
+/**
+ * Tests for {@link YamlUnstructuredLoader}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class YamlUnstructuredLoaderTest {
+
+    private List yamlResources;
+    private String notSpecYaml;
+
+    @BeforeEach
+    void setUp() {
+        String viewCategoriesRoleYaml = """
+            apiVersion: v1alpha1
+            kind: Fake
+            metadata:
+              name: test1
+            hello:
+              world: halo
+            """;
+
+        String multipleRoleYaml = """
+            apiVersion: v1alpha1
+            kind: Fake
+            metadata:
+              name: test2
+            hello:
+              world: haha
+            ---
+            apiVersion: v1alpha1
+            kind: Fake
+            metadata:
+              name: test2
+            hello:
+              world: bang
+            """;
+
+        notSpecYaml = """
+            server:
+              port: 8090
+            spring:
+              jackson:
+                date-format: yyyy-MM-dd HH:mm:ss
+            """;
+
+        yamlResources = Stream.of(viewCategoriesRoleYaml, multipleRoleYaml, notSpecYaml)
+            .map(InMemoryResource::new)
+            .toList();
+    }
+
+    @Test
+    void loadTest() {
+        Resource[] resources = yamlResources.toArray(Resource[]::new);
+        YamlUnstructuredLoader yamlUnstructuredLoader = new YamlUnstructuredLoader(resources);
+        List unstructuredList = yamlUnstructuredLoader.load();
+        assertThat(unstructuredList).isNotNull();
+        assertThat(unstructuredList).hasSize(3);
+
+        assertThat(JsonUtils.objectToJson(unstructuredList)).isEqualToIgnoringWhitespace("""
+            [
+                 {
+                     "apiVersion": "v1alpha1",
+                     "kind": "Fake",
+                     "metadata": {
+                         "name": "test1"
+                     },
+                     "hello": {
+                         "world": "halo"
+                     }
+                 },
+                 {
+                     "apiVersion": "v1alpha1",
+                     "kind": "Fake",
+                     "metadata": {
+                         "name": "test2"
+                     },
+                     "hello": {
+                         "world": "haha"
+                     }
+                 },
+                 {
+                     "apiVersion": "v1alpha1",
+                     "kind": "Fake",
+                     "metadata": {
+                         "name": "test2"
+                     },
+                     "hello": {
+                         "world": "bang"
+                     }
+                 }
+             ]
+            """);
+    }
+
+    @Test
+    void loadIgnore() {
+        InMemoryResource resource = new InMemoryResource(notSpecYaml);
+        YamlUnstructuredLoader yamlUnstructuredLoader = new YamlUnstructuredLoader(resource);
+        List unstructuredList = yamlUnstructuredLoader.load();
+        assertThat(unstructuredList).isEmpty();
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/metrics/MeterUtilsTest.java b/application/src/test/java/run/halo/app/metrics/MeterUtilsTest.java
new file mode 100644
index 0000000..8c83c68
--- /dev/null
+++ b/application/src/test/java/run/halo/app/metrics/MeterUtilsTest.java
@@ -0,0 +1,128 @@
+package run.halo.app.metrics;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import io.micrometer.core.instrument.Counter;
+import io.micrometer.core.instrument.Meter;
+import io.micrometer.core.instrument.MeterRegistry;
+import io.micrometer.core.instrument.search.RequiredSearch;
+import io.micrometer.core.instrument.simple.SimpleMeterRegistry;
+import org.junit.jupiter.api.Test;
+import run.halo.app.core.extension.content.Post;
+
+/**
+ * Tests for {@link MeterUtils}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class MeterUtilsTest {
+
+    @Test
+    void nameOf() {
+        String s = MeterUtils.nameOf(Post.class, "fake-post");
+        assertThat(s).isEqualTo("posts.content.halo.run/fake-post");
+    }
+
+    @Test
+    void testNameOf() {
+        String s = MeterUtils.nameOf("content.halo.run", "posts", "fake-post");
+        assertThat(s).isEqualTo("posts.content.halo.run/fake-post");
+    }
+
+    @Test
+    void visitCounter() {
+        MeterRegistry meterRegistry = new SimpleMeterRegistry();
+        MeterUtils.visitCounter(meterRegistry, "posts.content.halo.run/fake-post")
+            .increment();
+        RequiredSearch requiredSearch = meterRegistry.get("posts.content.halo.run/fake-post");
+        assertThat(requiredSearch.counter().count()).isEqualTo(1);
+        Meter.Id id = requiredSearch.counter().getId();
+        assertThat(id.getTag(MeterUtils.SCENE)).isEqualTo(MeterUtils.VISIT_SCENE);
+        assertThat(id.getTag(MeterUtils.METRICS_COMMON_TAG.getKey()))
+            .isEqualTo(MeterUtils.METRICS_COMMON_TAG.getValue());
+    }
+
+    @Test
+    void upvoteCounter() {
+        MeterRegistry meterRegistry = new SimpleMeterRegistry();
+        MeterUtils.upvoteCounter(meterRegistry, "posts.content.halo.run/fake-post")
+            .increment(2);
+        RequiredSearch requiredSearch = meterRegistry.get("posts.content.halo.run/fake-post");
+        assertThat(requiredSearch.counter().count()).isEqualTo(2);
+        Meter.Id id = requiredSearch.counter().getId();
+        assertThat(id.getTag(MeterUtils.SCENE)).isEqualTo(MeterUtils.UPVOTE_SCENE);
+        assertThat(id.getTag(MeterUtils.METRICS_COMMON_TAG.getKey()))
+            .isEqualTo(MeterUtils.METRICS_COMMON_TAG.getValue());
+    }
+
+    @Test
+    void totalCommentCounter() {
+        MeterRegistry meterRegistry = new SimpleMeterRegistry();
+        MeterUtils.totalCommentCounter(meterRegistry, "content.halo.run.posts.fake-post")
+            .increment(3);
+        RequiredSearch requiredSearch = meterRegistry.get("content.halo.run.posts.fake-post");
+        assertThat(requiredSearch.counter().count()).isEqualTo(3);
+        Meter.Id id = requiredSearch.counter().getId();
+        assertThat(id.getTag(MeterUtils.SCENE)).isEqualTo(MeterUtils.TOTAL_COMMENT_SCENE);
+        assertThat(id.getTag(MeterUtils.METRICS_COMMON_TAG.getKey()))
+            .isEqualTo(MeterUtils.METRICS_COMMON_TAG.getValue());
+    }
+
+    @Test
+    void approvedCommentCounter() {
+        MeterRegistry meterRegistry = new SimpleMeterRegistry();
+        MeterUtils.approvedCommentCounter(meterRegistry, "posts.content.halo.run/fake-post")
+            .increment(2);
+        RequiredSearch requiredSearch = meterRegistry.get("posts.content.halo.run/fake-post");
+        assertThat(requiredSearch.counter().count()).isEqualTo(2);
+        Meter.Id id = requiredSearch.counter().getId();
+        assertThat(id.getTag(MeterUtils.SCENE)).isEqualTo(MeterUtils.APPROVED_COMMENT_SCENE);
+        assertThat(id.getTag(MeterUtils.METRICS_COMMON_TAG.getKey()))
+            .isEqualTo(MeterUtils.METRICS_COMMON_TAG.getValue());
+    }
+
+    @Test
+    void isVisitCounter() {
+        MeterRegistry meterRegistry = new SimpleMeterRegistry();
+        Counter visitCounter =
+            MeterUtils.visitCounter(meterRegistry, "posts.content.halo.run/fake-post");
+        assertThat(MeterUtils.isVisitCounter(visitCounter)).isTrue();
+    }
+
+    @Test
+    void isUpvoteCounter() {
+        MeterRegistry meterRegistry = new SimpleMeterRegistry();
+        Counter upvoteCounter =
+            MeterUtils.upvoteCounter(meterRegistry, "posts.content.halo.run/fake-post");
+        assertThat(MeterUtils.isUpvoteCounter(upvoteCounter)).isTrue();
+        assertThat(MeterUtils.isVisitCounter(upvoteCounter)).isFalse();
+    }
+
+    @Test
+    void isDownvoteCounter() {
+        MeterRegistry meterRegistry = new SimpleMeterRegistry();
+        Counter downvoteCounter =
+            MeterUtils.downvoteCounter(meterRegistry, "posts.content.halo.run/fake-post");
+        assertThat(MeterUtils.isDownvoteCounter(downvoteCounter)).isTrue();
+        assertThat(MeterUtils.isVisitCounter(downvoteCounter)).isFalse();
+    }
+
+    @Test
+    void isTotalCommentCounter() {
+        MeterRegistry meterRegistry = new SimpleMeterRegistry();
+        Counter totalCommentCounter =
+            MeterUtils.totalCommentCounter(meterRegistry, "posts.content.halo.run/fake-post");
+        assertThat(MeterUtils.isTotalCommentCounter(totalCommentCounter)).isTrue();
+        assertThat(MeterUtils.isVisitCounter(totalCommentCounter)).isFalse();
+    }
+
+    @Test
+    void isApprovedCommentCounter() {
+        MeterRegistry meterRegistry = new SimpleMeterRegistry();
+        Counter approvedCommentCounter =
+            MeterUtils.approvedCommentCounter(meterRegistry, "posts.content.halo.run/fake-post");
+        assertThat(MeterUtils.isApprovedCommentCounter(approvedCommentCounter)).isTrue();
+        assertThat(MeterUtils.isVisitCounter(approvedCommentCounter)).isFalse();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/migration/BackupReconcilerTest.java b/application/src/test/java/run/halo/app/migration/BackupReconcilerTest.java
new file mode 100644
index 0000000..1a18604
--- /dev/null
+++ b/application/src/test/java/run/halo/app/migration/BackupReconcilerTest.java
@@ -0,0 +1,250 @@
+package run.halo.app.migration;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.doNothing;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.extension.ExtensionUtil.addFinalizers;
+
+import java.io.IOException;
+import java.time.Clock;
+import java.time.Duration;
+import java.time.Instant;
+import java.time.ZoneId;
+import java.util.Optional;
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Mockito;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.Exceptions;
+import reactor.core.publisher.Mono;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.controller.Reconciler;
+
+@ExtendWith(MockitoExtension.class)
+class BackupReconcilerTest {
+
+    @Mock
+    MigrationService migrationService;
+
+    @Mock
+    ExtensionClient client;
+
+    @InjectMocks
+    BackupReconciler reconciler;
+
+    @Test
+    void whenFreshBackupIsComing() {
+        var name = "fake-backup";
+        var backup = createPureBackup(name);
+        backup.getSpec().setFormat("zip");
+        when(client.fetch(Backup.class, name)).thenReturn(Optional.of(backup));
+        doNothing().when(client).update(backup);
+        when(migrationService.backup(backup)).thenReturn(Mono.fromRunnable(() -> {
+            var status = backup.getStatus();
+            status.setFilename("fake-backup-filename");
+            status.setSize(1024L);
+        }));
+
+        var result = reconciler.reconcile(new Reconciler.Request(name));
+
+        assertNotNull(result);
+        assertFalse(result.reEnqueue());
+
+        var status = backup.getStatus();
+        assertEquals(Backup.Phase.SUCCEEDED, status.getPhase());
+        assertNotNull(status.getStartTimestamp());
+        assertNotNull(status.getCompletionTimestamp());
+        assertEquals("fake-backup-filename", status.getFilename());
+        assertEquals(1024L, status.getSize());
+
+        // 1. query
+        // 2. pending -> running
+        // 3. running -> succeeded
+        verify(client, times(3)).fetch(Backup.class, name);
+        verify(client, times(3)).update(backup);
+        verify(migrationService).backup(backup);
+    }
+
+    @Test
+    void whenBackupDeleted() {
+        var name = "fake-deleted-backup";
+        var backup = createPureBackup(name);
+        backup.getMetadata().setDeletionTimestamp(Instant.now());
+        addFinalizers(backup.getMetadata(), Set.of(Constant.HOUSE_KEEPER_FINALIZER));
+
+        when(client.fetch(Backup.class, name)).thenReturn(Optional.of(backup));
+        when(migrationService.cleanup(backup)).thenReturn(Mono.empty());
+        doNothing().when(client).update(backup);
+
+        var result = reconciler.reconcile(new Reconciler.Request(name));
+
+        assertNotNull(result);
+        assertFalse(result.reEnqueue());
+
+        assertFalse(backup.getMetadata().getFinalizers().contains(Constant.HOUSE_KEEPER_FINALIZER));
+        verify(client).fetch(Backup.class, name);
+        verify(migrationService).cleanup(backup);
+        verify(client).update(backup);
+    }
+
+    @Test
+    void setPhaseToFailedIfPhaseIsRunning() {
+        var name = "fake-backup";
+        var backup = createPureBackup(name);
+        var status = backup.getStatus();
+        status.setPhase(Backup.Phase.RUNNING);
+
+        when(client.fetch(Backup.class, name)).thenReturn(Optional.of(backup));
+        doNothing().when(client).update(backup);
+
+        var result = reconciler.reconcile(new Reconciler.Request(name));
+        assertNotNull(result);
+        assertFalse(result.reEnqueue());
+
+        assertEquals(Backup.Phase.FAILED, status.getPhase());
+        assertEquals("UnexpectedExit", status.getFailureReason());
+        // 1. add finalizer
+        // 2. update status
+        verify(client, times(2)).fetch(Backup.class, name);
+        verify(client, times(2)).update(backup);
+    }
+
+    @Test
+    void shouldReQueueIfExpiresAtSetAndNotExpired() {
+        var now = Instant.now();
+        reconciler.setClock(Clock.fixed(now, ZoneId.systemDefault()));
+        var name = "fake-backup";
+        var backup = createPureBackup(name);
+        addFinalizers(backup.getMetadata(), Set.of(Constant.HOUSE_KEEPER_FINALIZER));
+        backup.getSpec().setExpiresAt(now.plus(Duration.ofSeconds(3)));
+        var status = backup.getStatus();
+        status.setPhase(Backup.Phase.SUCCEEDED);
+
+        when(client.fetch(Backup.class, name)).thenReturn(Optional.of(backup));
+
+        var result = reconciler.reconcile(new Reconciler.Request(name));
+        assertNotNull(result);
+        assertTrue(result.reEnqueue());
+        assertEquals(Duration.ofSeconds(3), result.retryAfter());
+
+        verify(client).fetch(Backup.class, name);
+        verify(client, never()).update(backup);
+        verify(client, never()).delete(backup);
+    }
+
+    @Test
+    void shouldDeleteIfExpiresAtSetAndExpired() {
+        var now = Instant.now();
+        reconciler.setClock(Clock.fixed(now, ZoneId.systemDefault()));
+        var name = "fake-backup";
+        var backup = createPureBackup(name);
+        addFinalizers(backup.getMetadata(), Set.of(Constant.HOUSE_KEEPER_FINALIZER));
+        backup.getSpec().setExpiresAt(now.minus(Duration.ofSeconds(3)));
+        var status = backup.getStatus();
+        status.setPhase(Backup.Phase.SUCCEEDED);
+
+        when(client.fetch(Backup.class, name)).thenReturn(Optional.of(backup));
+        doNothing().when(client).delete(backup);
+
+        var result = reconciler.reconcile(new Reconciler.Request(name));
+        assertNotNull(result);
+        assertFalse(result.reEnqueue());
+
+        verify(client).fetch(Backup.class, name);
+        verify(client, never()).update(backup);
+        verify(client).delete(backup);
+    }
+
+    @Test
+    void whenBackupInterrupted() {
+        var name = "fake-backup";
+        var backup = createPureBackup(name);
+        backup.getSpec().setFormat("zip");
+        when(client.fetch(Backup.class, name)).thenReturn(Optional.of(backup));
+        doNothing().when(client).update(backup);
+        when(migrationService.backup(backup)).thenReturn(
+            Mono.error(Exceptions.propagate(new InterruptedException())));
+
+        var result = reconciler.reconcile(new Reconciler.Request(name));
+
+        assertNotNull(result);
+        assertFalse(result.reEnqueue());
+
+        var status = backup.getStatus();
+        assertEquals(Backup.Phase.FAILED, status.getPhase());
+        assertNotNull(status.getStartTimestamp());
+        assertNull(status.getCompletionTimestamp());
+        assertEquals("Interrupted", status.getFailureReason());
+
+        // 1. query
+        // 2. pending -> running
+        // 3. running -> failed
+        verify(client, times(3)).fetch(Backup.class, name);
+        verify(client, times(3)).update(backup);
+        verify(migrationService).backup(backup);
+    }
+
+    @Test
+    void somethingWentWrongWhenBackup() {
+        var name = "fake-backup";
+        var backup = createPureBackup(name);
+        backup.getSpec().setFormat("zip");
+        when(client.fetch(Backup.class, name)).thenReturn(Optional.of(backup));
+        doNothing().when(client).update(backup);
+        when(migrationService.backup(backup))
+            .thenReturn(Mono.error(Exceptions.propagate(new IOException("File not found"))));
+
+        var result = reconciler.reconcile(new Reconciler.Request(name));
+
+        assertNotNull(result);
+        assertFalse(result.reEnqueue());
+
+        var status = backup.getStatus();
+        assertEquals(Backup.Phase.FAILED, status.getPhase());
+        assertNotNull(status.getStartTimestamp());
+        assertNull(status.getCompletionTimestamp());
+        assertEquals("SystemError", status.getFailureReason());
+
+        // 1. query
+        // 2. pending -> running
+        // 3. running -> failed
+        verify(client, times(3)).fetch(Backup.class, name);
+        verify(client, times(3)).update(backup);
+        verify(migrationService).backup(backup);
+    }
+
+    @Test
+    void whenBackupWasFailed() {
+        var name = "fake-backup";
+        var backup = createPureBackup(name);
+        backup.getStatus().setPhase(Backup.Phase.FAILED);
+
+        when(client.fetch(Backup.class, name)).thenReturn(Optional.of(backup));
+
+        var result = reconciler.reconcile(new Reconciler.Request(name));
+        assertNotNull(result);
+        assertFalse(result.reEnqueue());
+        Mockito.verify(migrationService, never()).backup(any(Backup.class));
+    }
+
+    Backup createPureBackup(String name) {
+        var metadata = new Metadata();
+        metadata.setName(name);
+        var backup = new Backup();
+        backup.setMetadata(metadata);
+        return backup;
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/migration/impl/MigrationServiceImplTest.java b/application/src/test/java/run/halo/app/migration/impl/MigrationServiceImplTest.java
new file mode 100644
index 0000000..e515e02
--- /dev/null
+++ b/application/src/test/java/run/halo/app/migration/impl/MigrationServiceImplTest.java
@@ -0,0 +1,294 @@
+package run.halo.app.migration.impl;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import com.fasterxml.jackson.core.type.TypeReference;
+import java.io.IOException;
+import java.net.URISyntaxException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.StandardOpenOption;
+import java.nio.file.attribute.FileTime;
+import java.time.Duration;
+import java.time.Instant;
+import java.util.List;
+import java.util.zip.ZipInputStream;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.core.io.buffer.DataBufferUtils;
+import org.springframework.core.io.buffer.DefaultDataBufferFactory;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.store.ExtensionStore;
+import run.halo.app.extension.store.ExtensionStoreRepository;
+import run.halo.app.infra.BackupRootGetter;
+import run.halo.app.infra.exception.NotFoundException;
+import run.halo.app.infra.properties.HaloProperties;
+import run.halo.app.infra.utils.FileUtils;
+import run.halo.app.migration.Backup;
+
+@ExtendWith(MockitoExtension.class)
+class MigrationServiceImplTest {
+
+    @Mock
+    ExtensionStoreRepository repository;
+
+    @Mock
+    HaloProperties haloProperties;
+
+    @Mock
+    BackupRootGetter backupRoot;
+
+    @InjectMocks
+    MigrationServiceImpl migrationService;
+
+    @TempDir
+    Path tempDir;
+
+    @Test
+    void backupTest() throws IOException {
+        Files.writeString(tempDir.resolve("fake-file"), "halo", StandardOpenOption.CREATE_NEW);
+        var extensionStores = List.of(
+            createExtensionStore("fake-extension-store", "fake-data")
+        );
+        when(repository.findAll()).thenReturn(Flux.fromIterable(extensionStores));
+        when(haloProperties.getWorkDir()).thenReturn(tempDir);
+        when(backupRoot.get()).thenReturn(tempDir.resolve("backups"));
+        var startTimestamp = Instant.now();
+        var backup = createRunningBackup("fake-backup", startTimestamp);
+        StepVerifier.create(migrationService.backup(backup))
+            .verifyComplete();
+
+        verify(repository).findAll();
+        // 1. backup workdir
+        // 2. package backup
+        verify(haloProperties).getWorkDir();
+        verify(backupRoot).get();
+
+        var status = backup.getStatus();
+        var datetimePart = migrationService.getDateTimeFormatter().format(startTimestamp);
+        assertEquals(datetimePart + "-fake-backup.zip", status.getFilename());
+        var backupFile = migrationService.getBackupsRoot()
+            .resolve(status.getFilename());
+        assertTrue(Files.exists(backupFile));
+        assertEquals(Files.size(backupFile), status.getSize());
+
+        var target = tempDir.resolve("target");
+        try (var zis = new ZipInputStream(
+            Files.newInputStream(backupFile, StandardOpenOption.READ))) {
+            FileUtils.unzip(zis, tempDir.resolve("target"));
+        }
+
+        var extensionsFile = target.resolve("extensions.data");
+        var workdir = target.resolve("workdir");
+        assertTrue(Files.exists(extensionsFile));
+        assertTrue(Files.exists(workdir));
+
+        var objectMapper = migrationService.getObjectMapper();
+        var gotExtensionStores = objectMapper.readValue(extensionsFile.toFile(),
+            new TypeReference>() {
+            });
+        assertEquals(gotExtensionStores, extensionStores);
+        assertEquals("halo", Files.readString(workdir.resolve("fake-file")));
+    }
+
+    @Test
+    void restoreTest() throws IOException, URISyntaxException {
+        var unpackedBackup =
+            getClass().getClassLoader().getResource("backups/backup-for-restoration");
+        assertNotNull(unpackedBackup);
+        var backupFile = tempDir.resolve("backups").resolve("fake-backup.zip");
+        Files.createDirectories(backupFile.getParent());
+        FileUtils.zip(Path.of(unpackedBackup.toURI()), backupFile);
+        var workdir = tempDir.resolve("workdir-for-restoration");
+        Files.createDirectory(workdir);
+
+
+        var expectStore = createExtensionStore("fake-extension-store", "fake-data");
+        expectStore.setVersion(null);
+
+        when(haloProperties.getWorkDir()).thenReturn(workdir);
+        when(repository.deleteAll(List.of(expectStore))).thenReturn(Mono.empty());
+        when(repository.saveAll(List.of(expectStore))).thenReturn(Flux.empty());
+
+        var content = DataBufferUtils.read(backupFile,
+            DefaultDataBufferFactory.sharedInstance,
+            2048,
+            StandardOpenOption.READ);
+        StepVerifier.create(migrationService.restore(content))
+            .verifyComplete();
+
+
+        verify(haloProperties).getWorkDir();
+        verify(repository).deleteAll(List.of(expectStore));
+        verify(repository).saveAll(List.of(expectStore));
+
+        // make sure the workdir is recovered.
+        var fakeFile = workdir.resolve("fake-file");
+        assertEquals("halo", Files.readString(fakeFile));
+    }
+
+    @Test
+    void cleanupBackupTest() throws IOException {
+        var backupFile = tempDir.resolve("workdir").resolve("backups").resolve("backup.zip");
+        Files.createDirectories(backupFile.getParent());
+        Files.createFile(backupFile);
+
+        when(backupRoot.get()).thenReturn(tempDir.resolve("workdir").resolve("backups"));
+        var backup = createSucceededBackup("fake-backup", "backup.zip");
+        StepVerifier.create(migrationService.cleanup(backup))
+            .verifyComplete();
+        verify(haloProperties, never()).getWorkDir();
+        verify(backupRoot).get();
+        assertTrue(Files.notExists(backupFile));
+    }
+
+    @Test
+    void cleanupBackupWithNoFilename() {
+        var backup = createSucceededBackup("fake-backup", null);
+        StepVerifier.create(migrationService.cleanup(backup))
+            .verifyComplete();
+        verify(haloProperties, never()).getWorkDir();
+        verify(backupRoot, never()).get();
+    }
+
+    @Test
+    void downloadBackupTest() throws IOException {
+        var backupFile = tempDir.resolve("workdir").resolve("backups").resolve("backup.zip");
+        Files.createDirectories(backupFile.getParent());
+        Files.writeString(backupFile, "this is a backup file.", StandardOpenOption.CREATE_NEW);
+        when(backupRoot.get()).thenReturn(tempDir.resolve("workdir").resolve("backups"));
+        var backup = createSucceededBackup("fake-backup", "backup.zip");
+
+        StepVerifier.create(migrationService.download(backup))
+            .assertNext(resource -> {
+                assertEquals("backup.zip", resource.getFilename());
+                try {
+                    var content = resource.getContentAsString(UTF_8);
+                    assertEquals("this is a backup file.", content);
+                } catch (IOException e) {
+                    throw new RuntimeException(e);
+                }
+            })
+            .verifyComplete();
+
+        verify(haloProperties, never()).getWorkDir();
+        verify(backupRoot).get();
+    }
+
+    @Test
+    void downloadBackupWhichDoesNotExist() {
+        var backup = createSucceededBackup("fake-backup", "backup.zip");
+        when(backupRoot.get()).thenReturn(tempDir.resolve("workdir").resolve("backups"));
+
+        StepVerifier.create(migrationService.download(backup))
+            .expectError(NotFoundException.class)
+            .verify();
+        verify(haloProperties, never()).getWorkDir();
+        verify(backupRoot).get();
+    }
+
+    @Test
+    void getBackupFilesTest() throws Exception {
+        var now = Instant.now();
+        var backup1 = tempDir.resolve("backup1.zip");
+        Files.writeString(backup1, "fake-content");
+        Files.setLastModifiedTime(backup1, FileTime.from(now));
+
+        var backup2 = tempDir.resolve("backup2.zip");
+        Files.writeString(backup2, "fake--content");
+        Files.setLastModifiedTime(
+            backup2,
+            FileTime.from(now.plus(Duration.ofSeconds(1)))
+        );
+
+        var backup3 = tempDir.resolve("backup3.not-a-zip");
+        Files.writeString(backup3, "fake-content");
+        Files.setLastModifiedTime(
+            backup3,
+            FileTime.from(now.plus(Duration.ofSeconds(2)))
+        );
+        when(backupRoot.get()).thenReturn(tempDir);
+
+        migrationService.afterPropertiesSet();
+        migrationService.getBackupFiles()
+            .as(StepVerifier::create)
+            .assertNext(backupFile -> {
+                assertEquals("backup2.zip", backupFile.getFilename());
+                assertEquals(13, backupFile.getSize());
+                assertEquals(now.plus(Duration.ofSeconds(1)), backupFile.getLastModifiedTime());
+            })
+            .assertNext(backupFile -> {
+                assertEquals("backup1.zip", backupFile.getFilename());
+                assertEquals(12, backupFile.getSize());
+                assertEquals(now, backupFile.getLastModifiedTime());
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void getBackupFileTest() throws Exception {
+        var now = Instant.now();
+        Files.writeString(tempDir.resolve("backup.zip"), "fake-content");
+        Files.setLastModifiedTime(tempDir.resolve("backup.zip"), FileTime.from(now));
+        when(backupRoot.get()).thenReturn(tempDir);
+
+        migrationService.afterPropertiesSet();
+        migrationService.getBackupFile("backup.zip")
+            .as(StepVerifier::create)
+            .assertNext(backupFile -> {
+                assertEquals("backup.zip", backupFile.getFilename());
+                assertEquals(12, backupFile.getSize());
+                assertEquals(now, backupFile.getLastModifiedTime());
+            })
+            .verifyComplete();
+
+        migrationService.getBackupFile("backup-not-exist.zip")
+            .as(StepVerifier::create)
+            .verifyComplete();
+    }
+
+    Backup createSucceededBackup(String name, String filename) {
+        var metadata = new Metadata();
+        metadata.setName(name);
+        var backup = new Backup();
+        backup.setMetadata(metadata);
+        var status = backup.getStatus();
+        status.setPhase(Backup.Phase.SUCCEEDED);
+        status.setCompletionTimestamp(Instant.now());
+        status.setFilename(filename);
+        status.setSize(1024L);
+        return backup;
+    }
+
+    Backup createRunningBackup(String name, Instant startTimestamp) {
+        var metadata = new Metadata();
+        metadata.setName(name);
+        var backup = new Backup();
+        backup.setMetadata(metadata);
+        var status = backup.getStatus();
+        status.setPhase(Backup.Phase.RUNNING);
+        status.setStartTimestamp(startTimestamp);
+        return backup;
+    }
+
+    ExtensionStore createExtensionStore(String name, String data) {
+        var store = new ExtensionStore();
+        store.setName(name);
+        store.setData(data.getBytes(UTF_8));
+        store.setVersion(1024L);
+        return store;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/DefaultNotificationCenterTest.java b/application/src/test/java/run/halo/app/notification/DefaultNotificationCenterTest.java
new file mode 100644
index 0000000..fdbb4cc
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/DefaultNotificationCenterTest.java
@@ -0,0 +1,325 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import java.util.Locale;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.notification.Notification;
+import run.halo.app.core.extension.notification.NotificationTemplate;
+import run.halo.app.core.extension.notification.NotifierDescriptor;
+import run.halo.app.core.extension.notification.Reason;
+import run.halo.app.core.extension.notification.ReasonType;
+import run.halo.app.core.extension.notification.Subscription;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+/**
+ * Tests for {@link DefaultNotificationCenter}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultNotificationCenterTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private ReasonNotificationTemplateSelector notificationTemplateSelector;
+
+    @Mock
+    private UserNotificationPreferenceService userNotificationPreferenceService;
+
+    @Mock
+    private NotificationTemplateRender notificationTemplateRender;
+
+    @Mock
+    private NotificationSender notificationSender;
+
+    @Mock
+    private RecipientResolver recipientResolver;
+
+    @Mock
+    private SubscriptionService subscriptionService;
+
+    @InjectMocks
+    private DefaultNotificationCenter notificationCenter;
+
+    @Test
+    public void testNotify() {
+        final Reason reason = new Reason();
+        final Reason.Spec spec = new Reason.Spec();
+        Reason.Subject subject = new Reason.Subject();
+        subject.setApiVersion("content.halo.run/v1alpha1");
+        subject.setKind("Comment");
+        subject.setName("comment-a");
+        spec.setSubject(subject);
+        spec.setReasonType("new-reply-on-comment");
+        spec.setAttributes(null);
+        reason.setSpec(spec);
+        reason.setMetadata(new Metadata());
+        reason.getMetadata().setName("reason-a");
+
+        var spyNotificationCenter = spy(notificationCenter);
+        var subscriber = new Subscriber(UserIdentity.anonymousWithEmail("A"), "fake-name");
+        when(recipientResolver.resolve(reason)).thenReturn(Flux.just(subscriber));
+
+        doReturn(Mono.empty()).when(spyNotificationCenter)
+            .dispatchNotification(eq(reason), any());
+
+        spyNotificationCenter.notify(reason).block();
+
+        verify(spyNotificationCenter).dispatchNotification(eq(reason), any());
+        verify(recipientResolver).resolve(eq(reason));
+    }
+
+    List createSubscriptions() {
+        Subscription subscription = new Subscription();
+        subscription.setMetadata(new Metadata());
+        subscription.getMetadata().setName("subscription-a");
+
+        subscription.setSpec(new Subscription.Spec());
+        subscription.getSpec().setSubscriber(new Subscription.Subscriber());
+        subscription.getSpec().getSubscriber().setName("anonymousUser#A");
+
+        var interestReason = new Subscription.InterestReason();
+        interestReason.setReasonType("new-reply-on-comment");
+        interestReason.setSubject(createNewReplyOnCommentSubject());
+        subscription.getSpec().setReason(interestReason);
+
+        return List.of(subscription);
+    }
+
+    Subscription.ReasonSubject createNewReplyOnCommentSubject() {
+        var reasonSubject = new Subscription.ReasonSubject();
+        reasonSubject.setApiVersion("content.halo.run/v1alpha1");
+        reasonSubject.setKind("Comment");
+        reasonSubject.setName("comment-a");
+        return reasonSubject;
+    }
+
+    @Test
+    public void testSubscribe() {
+        var spyNotificationCenter = spy(notificationCenter);
+        Subscription subscription = createSubscriptions().get(0);
+
+        var subscriber = subscription.getSpec().getSubscriber();
+
+        var reason = subscription.getSpec().getReason();
+
+        doReturn(Mono.empty())
+            .when(spyNotificationCenter).unsubscribe(eq(subscriber), eq(reason));
+
+        when(client.create(any(Subscription.class))).thenReturn(Mono.empty());
+
+        spyNotificationCenter.subscribe(subscriber, reason).block();
+
+        verify(client).create(any(Subscription.class));
+    }
+
+    @Test
+    public void testGetNotifiersBySubscriber() {
+        UserNotificationPreference preference = new UserNotificationPreference();
+        when(userNotificationPreferenceService.getByUser(any()))
+            .thenReturn(Mono.just(preference));
+
+        var reason = new Reason();
+        reason.setMetadata(new Metadata());
+        reason.getMetadata().setName("reason-a");
+        reason.setSpec(new Reason.Spec());
+        reason.getSpec().setReasonType("new-reply-on-comment");
+        var subscriber = new Subscriber(UserIdentity.anonymousWithEmail("A"), "fake-name");
+
+        notificationCenter.getNotifiersBySubscriber(subscriber, reason)
+            .collectList()
+            .as(StepVerifier::create)
+            .consumeNextWith(notifiers -> {
+                assertThat(notifiers).hasSize(1);
+                assertThat(notifiers.get(0)).isEqualTo("default-email-notifier");
+            })
+            .verifyComplete();
+
+        verify(userNotificationPreferenceService).getByUser(eq(subscriber.name()));
+    }
+
+    @Test
+    public void testDispatchNotification() {
+        var spyNotificationCenter = spy(notificationCenter);
+
+        doReturn(Flux.just("email-notifier"))
+            .when(spyNotificationCenter).getNotifiersBySubscriber(any(), any());
+
+        NotifierDescriptor notifierDescriptor = mock(NotifierDescriptor.class);
+        when(client.fetch(eq(NotifierDescriptor.class), eq("email-notifier")))
+            .thenReturn(Mono.just(notifierDescriptor));
+
+        var notificationElement = mock(DefaultNotificationCenter.NotificationElement.class);
+        doReturn(Mono.just(notificationElement))
+            .when(spyNotificationCenter).prepareNotificationElement(any(), any(), any());
+
+        doReturn(Mono.empty()).when(spyNotificationCenter).sendNotification(any());
+
+        var reason = new Reason();
+        reason.setMetadata(new Metadata());
+        reason.getMetadata().setName("reason-a");
+        reason.setSpec(new Reason.Spec());
+        reason.getSpec().setReasonType("new-reply-on-comment");
+
+        var subscription = createSubscriptions().get(0);
+        var subscriptionName = subscription.getMetadata().getName();
+        var subscriber =
+            new Subscriber(UserIdentity.of(subscription.getSpec().getSubscriber().getName()),
+                subscriptionName);
+        spyNotificationCenter.dispatchNotification(reason, subscriber).block();
+
+        verify(client).fetch(eq(NotifierDescriptor.class), eq("email-notifier"));
+        verify(spyNotificationCenter).sendNotification(any());
+        verify(spyNotificationCenter, times(0)).createNotification(any());
+    }
+
+    @Test
+    public void testPrepareNotificationElement() {
+        var spyNotificationCenter = spy(notificationCenter);
+
+        doReturn(Mono.just(Locale.getDefault()))
+            .when(spyNotificationCenter).getLocaleFromSubscriber(any());
+
+        var notificationContent = mock(DefaultNotificationCenter.NotificationContent.class);
+        doReturn(Mono.just(notificationContent))
+            .when(spyNotificationCenter).inferenceTemplate(any(), any(), any());
+
+        spyNotificationCenter.prepareNotificationElement(any(), any(), any())
+            .block();
+
+        verify(spyNotificationCenter).getLocaleFromSubscriber(any());
+        verify(spyNotificationCenter).inferenceTemplate(any(), any(), any());
+    }
+
+    @Test
+    public void testSendNotification() {
+        var spyNotificationCenter = spy(notificationCenter);
+
+        var context = mock(NotificationContext.class);
+        doReturn(Mono.just(context))
+            .when(spyNotificationCenter).notificationContextFrom(any());
+
+        when(notificationSender.sendNotification(eq("fake-notifier-ext"), any()))
+            .thenReturn(Mono.empty());
+
+        var element = mock(DefaultNotificationCenter.NotificationElement.class);
+        var mockDescriptor = mock(NotifierDescriptor.class);
+        when(element.descriptor()).thenReturn(mockDescriptor);
+        when(element.subscriber()).thenReturn(mock(Subscriber.class));
+        var notifierDescriptorSpec = mock(NotifierDescriptor.Spec.class);
+        when(mockDescriptor.getSpec()).thenReturn(notifierDescriptorSpec);
+        when(notifierDescriptorSpec.getNotifierExtName()).thenReturn("fake-notifier-ext");
+
+        spyNotificationCenter.sendNotification(element).block();
+
+        verify(spyNotificationCenter).notificationContextFrom(any());
+        verify(notificationSender).sendNotification(any(), any());
+    }
+
+    @Test
+    public void testCreateNotification() {
+        var element = mock(DefaultNotificationCenter.NotificationElement.class);
+        var subscription = createSubscriptions().get(0);
+        var user = mock(User.class);
+
+        var subscriptionName = subscription.getMetadata().getName();
+        var subscriber =
+            new Subscriber(UserIdentity.of(subscription.getSpec().getSubscriber().getName()),
+                subscriptionName);
+        when(client.fetch(eq(User.class), eq(subscriber.name()))).thenReturn(Mono.just(user));
+        when(element.subscriber()).thenReturn(subscriber);
+
+        when(client.create(any(Notification.class))).thenReturn(Mono.empty());
+
+        var reason = new Reason();
+        reason.setMetadata(new Metadata());
+        reason.getMetadata().setName("reason-a");
+        reason.setSpec(new Reason.Spec());
+        reason.getSpec().setReasonType("new-reply-on-comment");
+        when(element.reason()).thenReturn(reason);
+
+        notificationCenter.createNotification(element).block();
+
+        verify(client).fetch(eq(User.class), eq(subscriber.name()));
+        verify(client).create(any(Notification.class));
+    }
+
+    @Test
+    public void testInferenceTemplate() {
+        final var spyNotificationCenter = spy(notificationCenter);
+
+        final var reasonType = mock(ReasonType.class);
+
+        var reason = new Reason();
+        reason.setMetadata(new Metadata());
+        reason.getMetadata().setName("reason-a");
+        reason.setSpec(new Reason.Spec());
+        reason.getSpec().setReasonType("new-reply-on-comment");
+
+        var reasonTypeName = reason.getSpec().getReasonType();
+
+        doReturn(Mono.just(reasonType))
+            .when(spyNotificationCenter).getReasonType(eq(reasonTypeName));
+        doReturn(Mono.just("fake-unsubscribe-url"))
+            .when(spyNotificationCenter).getUnsubscribeUrl(anyString());
+
+        final var locale = Locale.CHINESE;
+
+        var template = new NotificationTemplate();
+        template.setMetadata(new Metadata());
+        template.getMetadata().setName("notification-template-a");
+        template.setSpec(new NotificationTemplate.Spec());
+        template.getSpec().setTemplate(new NotificationTemplate.Template());
+        template.getSpec().getTemplate().setRawBody("body");
+        template.getSpec().getTemplate().setHtmlBody("html-body");
+        template.getSpec().getTemplate().setTitle("title");
+        template.getSpec().setReasonSelector(new NotificationTemplate.ReasonSelector());
+        template.getSpec().getReasonSelector().setReasonType(reasonTypeName);
+        template.getSpec().getReasonSelector().setLanguage(locale.getLanguage());
+
+        when(notificationTemplateRender.render(anyString(), any()))
+            .thenReturn(Mono.empty());
+        when(notificationTemplateSelector.select(eq(reasonTypeName), any()))
+            .thenReturn(Mono.just(template));
+
+        var subscriber = new Subscriber(UserIdentity.anonymousWithEmail("A"), "fake-name");
+
+        spyNotificationCenter.inferenceTemplate(reason, subscriber, locale).block();
+
+        verify(spyNotificationCenter).getReasonType(eq(reasonTypeName));
+        verify(notificationTemplateSelector).select(eq(reasonTypeName), any());
+    }
+
+    @Test
+    void getLocaleFromSubscriberTest() {
+        var subscription = mock(Subscriber.class);
+
+        notificationCenter.getLocaleFromSubscriber(subscription)
+            .as(StepVerifier::create)
+            .expectNext(Locale.getDefault())
+            .verifyComplete();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/notification/DefaultNotificationReasonEmitterTest.java b/application/src/test/java/run/halo/app/notification/DefaultNotificationReasonEmitterTest.java
new file mode 100644
index 0000000..6bad6cb
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/DefaultNotificationReasonEmitterTest.java
@@ -0,0 +1,200 @@
+package run.halo.app.notification;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doAnswer;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.when;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.skyscreamer.jsonassert.JSONAssert;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.notification.Reason;
+import run.halo.app.core.extension.notification.ReasonType;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link DefaultNotificationReasonEmitter}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultNotificationReasonEmitterTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private DefaultNotificationReasonEmitter emitter;
+
+    @Test
+    void testEmitWhenReasonTypeNotFound() {
+        var reasonType = createReasonType();
+        when(client.fetch(eq(ReasonType.class), eq(reasonType.getMetadata().getName())))
+            .thenReturn(Mono.empty());
+        doEmmit(reasonType, reasonAttributes())
+            .as(StepVerifier::create)
+            .verifyErrorMessage("404 NOT_FOUND \"ReasonType [" + reasonType.getMetadata().getName()
+                + "] not found, do you forget to register it?\"");
+    }
+
+    @Test
+    void testEmitWhenMissingAttributeValue() {
+        var reasonType = createReasonType();
+        when(client.fetch(eq(ReasonType.class), eq(reasonType.getMetadata().getName())))
+            .thenReturn(Mono.just(reasonType));
+
+        var map = reasonAttributes();
+        map.put("commenter", null);
+        doEmmit(reasonType, map)
+            .as(StepVerifier::create)
+            .verifyErrorMessage("Reason property [commenter] is required.");
+    }
+
+    @Test
+    void testEmitWhenMissingOptionalAttribute() {
+        var reasonType = createReasonType();
+        when(client.fetch(eq(ReasonType.class), eq(reasonType.getMetadata().getName())))
+            .thenReturn(Mono.just(reasonType));
+
+        when(client.create(any(Reason.class))).thenReturn(Mono.empty());
+
+        var map = reasonAttributes();
+        map.put("postTitle", null);
+        doEmmit(reasonType, map)
+            .as(StepVerifier::create)
+            .verifyComplete();
+    }
+
+    @Test
+    void testCreateReasonOnEmit() {
+        var reasonType = createReasonType();
+        when(client.fetch(eq(ReasonType.class), eq(reasonType.getMetadata().getName())))
+            .thenReturn(Mono.just(reasonType));
+
+        when(client.create(any(Reason.class))).thenReturn(Mono.empty());
+
+        var spyEmitter = spy(emitter);
+        doAnswer(as -> {
+            var returnedValue = as.callRealMethod();
+            JSONAssert.assertEquals(createReasonJson(),
+                JsonUtils.objectToJson(returnedValue), true);
+            return returnedValue;
+        }).when(spyEmitter).createReason(any(), any());
+
+        spyEmitter.emit(reasonType.getMetadata().getName(),
+                builder -> builder.attributes(reasonAttributes())
+                    .subject(Reason.Subject.builder()
+                        .apiVersion("content.halo.run/v1alpha1")
+                        .kind("Post")
+                        .name("5152aea5-c2e8-4717-8bba-2263d46e19d5")
+                        .title("Hello Halo")
+                        .url("/archives/hello-halo")
+                        .build()
+                    )
+            )
+            .as(StepVerifier::create)
+            .verifyComplete();
+    }
+
+    Map reasonAttributes() {
+        var map = new LinkedHashMap();
+        map.put("postName", "5152aea5-c2e8-4717-8bba-2263d46e19d5");
+        map.put("postTitle", "Hello Halo");
+        map.put("commenter", "guqing");
+        map.put("commentName", "53a76c38-5df2-469d-ae1b-68f5ae21a398");
+        map.put("content", "测试评论");
+        return map;
+    }
+
+    private Mono doEmmit(ReasonType reasonType, Map map) {
+        return emitter.emit(reasonType.getMetadata().getName(), builder -> {
+            builder.attributes(map)
+                .subject(Reason.Subject.builder()
+                    .apiVersion("content.halo.run/v1alpha1")
+                    .kind("Post")
+                    .name("5152aea5-c2e8-4717-8bba-2263d46e19d5")
+                    .title("Hello Halo")
+                    .url("/archives/hello-halo")
+                    .build()
+                );
+        });
+    }
+
+    String createReasonJson() {
+        return """
+            {
+                "spec": {
+                    "reasonType": "new-comment-on-post",
+                    "subject": {
+                        "apiVersion": "content.halo.run/v1alpha1",
+                        "kind": "Post",
+                        "name": "5152aea5-c2e8-4717-8bba-2263d46e19d5",
+                        "title": "Hello Halo",
+                        "url": "/archives/hello-halo"
+                    },
+                    "attributes": {
+                        "postName": "5152aea5-c2e8-4717-8bba-2263d46e19d5",
+                        "postTitle": "Hello Halo",
+                        "commentName": "53a76c38-5df2-469d-ae1b-68f5ae21a398",
+                        "content": "测试评论",
+                        "commenter": "guqing"
+                    }
+                },
+                "apiVersion": "notification.halo.run/v1alpha1",
+                "kind": "Reason",
+                "metadata": {
+                    "generateName": "reason-"
+                }
+            }
+            """;
+    }
+
+    ReasonType createReasonType() {
+        return JsonUtils.jsonToObject("""
+            {
+                "apiVersion": "notification.halo.run/v1alpha1",
+                "kind": "ReasonType",
+                "metadata": {
+                    "name": "new-comment-on-post"
+                },
+                "spec": {
+                    "description": "当你的文章收到新评论时，触发事件",
+                    "displayName": "文章收到新评论",
+                    "properties": [
+                        {
+                            "name": "postName",
+                            "type": "string"
+                        },
+                        {
+                            "name": "postTitle",
+                            "type": "string",
+                            "optional": true
+                        },
+                        {
+                            "name": "commenter",
+                            "type": "string"
+                        },
+                        {
+                            "name": "commentName",
+                            "type": "string"
+                        },
+                        {
+                            "name": "content",
+                            "type": "string"
+                        }
+                    ]
+                }
+            }
+            """, ReasonType.class);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/notification/DefaultNotificationSenderTest.java b/application/src/test/java/run/halo/app/notification/DefaultNotificationSenderTest.java
new file mode 100644
index 0000000..3a26b83
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/DefaultNotificationSenderTest.java
@@ -0,0 +1,32 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.mock;
+
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link DefaultNotificationSender}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+class DefaultNotificationSenderTest {
+
+    @Nested
+    class QueueItemTest {
+
+        @Test
+        void equalsTest() {
+            var item1 =
+                new DefaultNotificationSender.QueueItem("1",
+                    mock(DefaultNotificationSender.SendNotificationTask.class), 0);
+            var item2 =
+                new DefaultNotificationSender.QueueItem("1",
+                    mock(DefaultNotificationSender.SendNotificationTask.class), 1);
+
+            assertThat(item1).isEqualTo(item2);
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/DefaultNotificationTemplateRenderTest.java b/application/src/test/java/run/halo/app/notification/DefaultNotificationTemplateRenderTest.java
new file mode 100644
index 0000000..e4d1033
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/DefaultNotificationTemplateRenderTest.java
@@ -0,0 +1,104 @@
+package run.halo.app.notification;
+
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.net.MalformedURLException;
+import java.net.URI;
+import java.util.Map;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.infra.ExternalUrlSupplier;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+
+/**
+ * Tests for {@link DefaultNotificationTemplateRender}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultNotificationTemplateRenderTest {
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+
+    @InjectMocks
+    DefaultNotificationTemplateRender templateRender;
+
+    @BeforeEach
+    void setUp() throws MalformedURLException {
+        var uri = URI.create("http://localhost:8090");
+        lenient().when(externalUrlSupplier.get()).thenReturn(uri);
+        lenient().when(externalUrlSupplier.getRaw()).thenReturn(uri.toURL());
+    }
+
+    @Test
+    void render() {
+        final String template = """
+            亲爱的博主
+
+              [(${replier})] 在评论“[(${isQuoteReply ? quoteContent : commentContent})]”中回复了您，
+              以下是回复的具体内容：
+              
+              [(${content})]
+
+            [(${site.title})]
+            [(${site.url})]
+            祝好！
+            查看原文：[(${commentSubjectUrl})]
+            """;
+        final var model = Map.of(
+            "replier", "guqing",
+            "isQuoteReply", true,
+            "quoteContent", "这是引用的内容",
+            "commentContent", "这是评论的内容",
+            "commentSubjectUrl", "/archives/1",
+            "content", "这是回复的内容"
+        );
+
+        var basic = new SystemSetting.Basic();
+        basic.setTitle("Halo");
+        basic.setLogo("https://halo.run/logo");
+        basic.setSubtitle("Halo");
+        when(environmentFetcher.fetch(eq(SystemSetting.Basic.GROUP), eq(SystemSetting.Basic.class)))
+            .thenReturn(Mono.just(basic));
+
+        templateRender.render(template, model)
+            .as(StepVerifier::create)
+            .consumeNextWith(render -> {
+                assertThat(render).isEqualTo("""
+                    亲爱的博主
+
+                      guqing 在评论“这是引用的内容”中回复了您，
+                      以下是回复的具体内容：
+                      
+                      这是回复的内容
+   
+                    Halo
+                    http://localhost:8090
+                    祝好！
+                    查看原文：/archives/1
+                    """);
+            })
+            .verifyComplete();
+
+        verify(environmentFetcher).fetch(eq(SystemSetting.Basic.GROUP),
+            eq(SystemSetting.Basic.class));
+        verify(externalUrlSupplier).getRaw();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/notification/DefaultNotifierConfigStoreTest.java b/application/src/test/java/run/halo/app/notification/DefaultNotifierConfigStoreTest.java
new file mode 100644
index 0000000..eded2ec
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/DefaultNotifierConfigStoreTest.java
@@ -0,0 +1,185 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.notification.DefaultNotifierConfigStore.RECEIVER_KEY;
+import static run.halo.app.notification.DefaultNotifierConfigStore.SECRET_NAME;
+import static run.halo.app.notification.DefaultNotifierConfigStore.SENDER_KEY;
+
+import com.fasterxml.jackson.databind.node.JsonNodeFactory;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.MetadataUtil;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Secret;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link DefaultNotifierConfigStore}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultNotifierConfigStoreTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    DefaultNotifierConfigStore notifierConfigStore;
+
+    @Test
+    void fetchReceiverConfigTest() {
+        var objectNode = mock(ObjectNode.class);
+        var spyNotifierConfigStore = spy(notifierConfigStore);
+
+        doReturn(Mono.just(objectNode)).when(spyNotifierConfigStore)
+            .fetchConfig(eq("fake-notifier"));
+        var receiverConfig = mock(ObjectNode.class);
+        when(objectNode.get(eq(RECEIVER_KEY))).thenReturn(receiverConfig);
+
+        spyNotifierConfigStore.fetchReceiverConfig("fake-notifier")
+            .as(StepVerifier::create)
+            .consumeNextWith(actual -> assertThat(actual).isEqualTo(receiverConfig))
+            .verifyComplete();
+        verify(objectNode).get(eq(RECEIVER_KEY));
+    }
+
+    @Test
+    void fetchSenderConfigTest() {
+        var objectNode = mock(ObjectNode.class);
+        var spyNotifierConfigStore = spy(notifierConfigStore);
+
+        doReturn(Mono.just(objectNode)).when(spyNotifierConfigStore)
+            .fetchConfig(eq("fake-notifier"));
+        var senderConfig = mock(ObjectNode.class);
+        when(objectNode.get(eq(DefaultNotifierConfigStore.SENDER_KEY))).thenReturn(senderConfig);
+
+        spyNotifierConfigStore.fetchSenderConfig("fake-notifier")
+            .as(StepVerifier::create)
+            .consumeNextWith(actual -> assertThat(actual).isEqualTo(senderConfig))
+            .verifyComplete();
+        verify(objectNode).get(eq(DefaultNotifierConfigStore.SENDER_KEY));
+    }
+
+    @Test
+    void fetchConfigWhenSecretNotFound() {
+        var spyNotifierConfigStore = spy(notifierConfigStore);
+
+        var objectNode = JsonNodeFactory.instance.objectNode();
+        doReturn(Mono.just(objectNode)).when(spyNotifierConfigStore)
+            .fetchConfig(eq("fake-notifier"));
+
+        spyNotifierConfigStore.fetchSenderConfig("fake-notifier")
+            .as(StepVerifier::create)
+            .consumeNextWith(actual -> assertThat(actual).isNotNull())
+            .verifyComplete();
+
+        spyNotifierConfigStore.fetchReceiverConfig("fake-notifier")
+            .as(StepVerifier::create)
+            .consumeNextWith(actual -> assertThat(actual).isNotNull())
+            .verifyComplete();
+    }
+
+    @Test
+    void saveReceiverConfigTest() {
+        var receiverConfig = mock(ObjectNode.class);
+        var spyNotifierConfigStore = spy(notifierConfigStore);
+
+        doReturn(Mono.empty()).when(spyNotifierConfigStore)
+            .saveConfig(eq("fake-notifier"), eq(RECEIVER_KEY), eq(receiverConfig));
+
+        spyNotifierConfigStore.saveReceiverConfig("fake-notifier", receiverConfig)
+            .as(StepVerifier::create)
+            .verifyComplete();
+
+        verify(spyNotifierConfigStore)
+            .saveConfig(eq("fake-notifier"), eq(RECEIVER_KEY), eq(receiverConfig));
+    }
+
+    @Test
+    void saveSenderConfigTest() {
+        var senderConfig = mock(ObjectNode.class);
+        var spyNotifierConfigStore = spy(notifierConfigStore);
+
+        doReturn(Mono.empty()).when(spyNotifierConfigStore)
+            .saveConfig(eq("fake-notifier"), eq(SENDER_KEY), eq(senderConfig));
+
+        spyNotifierConfigStore.saveSenderConfig("fake-notifier", senderConfig)
+            .as(StepVerifier::create)
+            .verifyComplete();
+
+        verify(spyNotifierConfigStore)
+            .saveConfig(eq("fake-notifier"), eq(SENDER_KEY), eq(senderConfig));
+
+    }
+
+    @Test
+    void saveConfigTest() {
+        when(client.fetch(eq(Secret.class), eq(SECRET_NAME))).thenReturn(Mono.empty());
+
+        when(client.create(any(Secret.class)))
+            .thenAnswer(answer -> Mono.just(answer.getArgument(0, Secret.class)));
+        when(client.update(any(Secret.class)))
+            .thenAnswer(answer -> Mono.just(answer.getArgument(0, Secret.class)));
+
+        var objectNode = JsonNodeFactory.instance.objectNode();
+        objectNode.put("k1", "v1");
+        notifierConfigStore.saveConfig("fake-notifier", "fake-key", objectNode)
+            .as(StepVerifier::create)
+            .verifyComplete();
+
+        verify(client).fetch(eq(Secret.class), eq(SECRET_NAME));
+        verify(client).create(assertArg(arg -> {
+            assertThat(arg).isInstanceOf(Secret.class);
+            var secret = (Secret) arg;
+            assertThat(secret.getMetadata().getName()).isEqualTo(SECRET_NAME);
+            assertThat(secret.getMetadata().getFinalizers())
+                .contains(MetadataUtil.SYSTEM_FINALIZER);
+            assertThat(secret.getStringData()).isNotNull();
+        }));
+        verify(client).update(assertArg(arg -> {
+            assertThat(arg).isInstanceOf(Secret.class);
+            var secret = (Secret) arg;
+            assertThat(secret.getStringData().get("fake-notifier.json"))
+                .isEqualTo("{\"fake-key\":{\"k1\":\"v1\"}}");
+        }));
+    }
+
+    @Test
+    void fetchConfigTest() {
+        String s = "{\"fake-key\":{\"k1\":\"v1\"}}";
+        var objectNode = JsonUtils.jsonToObject(s, ObjectNode.class);
+        var secret = new Secret();
+        secret.setStringData(Map.of("fake-notifier.json", s));
+        when(client.fetch(eq(Secret.class), eq(SECRET_NAME)))
+            .thenReturn(Mono.just(secret));
+        notifierConfigStore.fetchConfig("fake-notifier")
+            .as(StepVerifier::create)
+            .consumeNextWith(actual -> assertThat(actual).isEqualTo(objectNode))
+            .verifyComplete();
+    }
+
+    @Test
+    void resolveKeyTest() {
+        assertThat(notifierConfigStore.resolveKey("fake-notifier"))
+            .isEqualTo("fake-notifier.json");
+        assertThat(notifierConfigStore.resolveKey("other-notifier"))
+            .isEqualTo("other-notifier.json");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/DefaultSubscriberEmailResolverTest.java b/application/src/test/java/run/halo/app/notification/DefaultSubscriberEmailResolverTest.java
new file mode 100644
index 0000000..a222860
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/DefaultSubscriberEmailResolverTest.java
@@ -0,0 +1,70 @@
+package run.halo.app.notification;
+
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.notification.Subscription;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.AnonymousUserConst;
+
+/**
+ * Tests for {@link DefaultSubscriberEmailResolver}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultSubscriberEmailResolverTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    DefaultSubscriberEmailResolver subscriberEmailResolver;
+
+    @Test
+    void testResolve() {
+        var subscriber = new Subscription.Subscriber();
+        subscriber.setName(AnonymousUserConst.PRINCIPAL + "#test@example.com");
+        subscriberEmailResolver.resolve(subscriber)
+            .as(StepVerifier::create)
+            .expectNext("test@example.com")
+            .verifyComplete();
+
+        subscriber.setName(AnonymousUserConst.PRINCIPAL + "#");
+        subscriberEmailResolver.resolve(subscriber)
+            .as(StepVerifier::create)
+            .verifyErrorMessage("The subscriber does not have an email");
+
+        var user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName("fake-user");
+        user.setSpec(new User.UserSpec());
+        user.getSpec().setEmail("test@halo.run");
+        user.getSpec().setEmailVerified(false);
+        when(client.fetch(eq(User.class), eq("fake-user"))).thenReturn(Mono.just(user));
+
+        subscriber.setName("fake-user");
+        subscriberEmailResolver.resolve(subscriber)
+            .as(StepVerifier::create)
+            .verifyComplete();
+
+        user.getSpec().setEmailVerified(true);
+        when(client.fetch(eq(User.class), eq("fake-user"))).thenReturn(Mono.just(user));
+
+        subscriber.setName("fake-user");
+        subscriberEmailResolver.resolve(subscriber)
+            .as(StepVerifier::create)
+            .expectNext("test@halo.run")
+            .verifyComplete();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/notification/LanguageUtilsTest.java b/application/src/test/java/run/halo/app/notification/LanguageUtilsTest.java
new file mode 100644
index 0000000..1f52e38
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/LanguageUtilsTest.java
@@ -0,0 +1,47 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import java.util.List;
+import java.util.Locale;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link LanguageUtils}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+class LanguageUtilsTest {
+
+    @Test
+    void computeLangFromLocale() {
+        List languages = LanguageUtils.computeLangFromLocale(Locale.CHINA);
+        assertThat(languages).isEqualTo(List.of("default", "zh", "zh_CN"));
+
+        languages = LanguageUtils.computeLangFromLocale(Locale.CHINESE);
+        assertThat(languages).isEqualTo(List.of("default", "zh"));
+
+        languages = LanguageUtils.computeLangFromLocale(Locale.TAIWAN);
+        assertThat(languages).isEqualTo(List.of("default", "zh", "zh_TW"));
+
+        languages = LanguageUtils.computeLangFromLocale(Locale.ENGLISH);
+        assertThat(languages).isEqualTo(List.of("default", "en"));
+
+        languages = LanguageUtils.computeLangFromLocale(Locale.US);
+        assertThat(languages).isEqualTo(List.of("default", "en", "en_US"));
+
+        languages =
+            LanguageUtils.computeLangFromLocale(Locale.forLanguageTag("en-US-x-lvariant-POSIX"));
+        assertThat(languages).isEqualTo(List.of("default", "en", "en_US", "en_US-POSIX"));
+    }
+
+    @Test
+    void computeLangFromLocaleWhenLanguageIsEmpty() {
+        assertThatThrownBy(() -> {
+            LanguageUtils.computeLangFromLocale(Locale.forLanguageTag(""));
+        }).isInstanceOf(IllegalArgumentException.class)
+            .hasMessage("Locale \"\" cannot be used as it does not specify a language.");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/notification/NotificationContextTest.java b/application/src/test/java/run/halo/app/notification/NotificationContextTest.java
new file mode 100644
index 0000000..347cd5f
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/NotificationContextTest.java
@@ -0,0 +1,66 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import java.time.Instant;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link NotificationContext}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+class NotificationContextTest {
+
+    @Test
+    void constructTest() {
+        // Create a test message payload
+        NotificationContext.MessagePayload payload = new NotificationContext.MessagePayload();
+        payload.setTitle("Test Title");
+        payload.setRawBody("Test Body");
+        payload.setHtmlBody("Html body");
+
+        // Create a test subject
+        NotificationContext.Subject subject = NotificationContext.Subject.builder()
+            .apiVersion("v1")
+            .kind("test")
+            .name("test-name")
+            .title("Test Subject")
+            .url("https://example.com")
+            .build();
+
+        // Create a test message
+        NotificationContext.Message message = new NotificationContext.Message();
+        message.setPayload(payload);
+        message.setSubject(subject);
+        message.setRecipient("test-recipient");
+        message.setTimestamp(Instant.now());
+
+        // Create a test receiver config
+        ObjectMapper mapper = new ObjectMapper();
+        ObjectNode receiverConfig = mapper.createObjectNode();
+        receiverConfig.put("key", "value");
+
+        // Create a test sender config
+        ObjectNode senderConfig = mapper.createObjectNode();
+        senderConfig.put("key", "value");
+
+        // Create a test notification context
+        NotificationContext notificationContext = new NotificationContext();
+        notificationContext.setMessage(message);
+        notificationContext.setReceiverConfig(receiverConfig);
+        notificationContext.setSenderConfig(senderConfig);
+
+        // Test getter methods
+        assertThat(notificationContext.getMessage()).isNotNull();
+        assertThat(notificationContext.getMessage().getPayload()).isEqualTo(payload);
+        assertThat(notificationContext.getMessage().getSubject()).isEqualTo(subject);
+        assertThat("test-recipient").isEqualTo(notificationContext.getMessage().getRecipient());
+        assertThat(notificationContext.getMessage().getTimestamp()).isNotNull();
+        assertThat(notificationContext.getReceiverConfig()).isEqualTo(receiverConfig);
+        assertThat(notificationContext.getSenderConfig()).isEqualTo(senderConfig);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/NotificationTriggerTest.java b/application/src/test/java/run/halo/app/notification/NotificationTriggerTest.java
new file mode 100644
index 0000000..e9faaa2
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/NotificationTriggerTest.java
@@ -0,0 +1,58 @@
+package run.halo.app.notification;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.Optional;
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.notification.Reason;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.controller.Reconciler;
+
+/**
+ * Test for {@link NotificationTrigger}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class NotificationTriggerTest {
+
+    @Mock
+    private ExtensionClient client;
+
+    @Mock
+    private NotificationCenter notificationCenter;
+
+    @InjectMocks
+    private NotificationTrigger notificationTrigger;
+
+    @Test
+    void reconcile() {
+        var reason = mock(Reason.class);
+        var metadata = mock(Metadata.class);
+        when(reason.getMetadata()).thenReturn(metadata);
+        when(metadata.getDeletionTimestamp()).thenReturn(null);
+        when(metadata.getFinalizers()).thenReturn(Set.of());
+
+        when(client.fetch(eq(Reason.class), eq("fake-reason")))
+            .thenReturn(Optional.of(reason));
+
+        when(notificationCenter.notify(eq(reason))).thenReturn(Mono.empty());
+        notificationTrigger.reconcile(new Reconciler.Request("fake-reason"));
+
+        verify(notificationCenter).notify(eq(reason));
+        verify(metadata).setFinalizers(eq(Set.of(NotificationTrigger.TRIGGERED_FINALIZER)));
+        verify(client).update(any(Reason.class));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/ReasonNotificationTemplateSelectorImplTest.java b/application/src/test/java/run/halo/app/notification/ReasonNotificationTemplateSelectorImplTest.java
new file mode 100644
index 0000000..7332ab4
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/ReasonNotificationTemplateSelectorImplTest.java
@@ -0,0 +1,178 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import java.util.HashMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+import java.util.Optional;
+import java.util.stream.Stream;
+import lombok.NonNull;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.data.domain.Sort;
+import reactor.core.publisher.Flux;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.notification.NotificationTemplate;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link ReasonNotificationTemplateSelectorImpl}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ReasonNotificationTemplateSelectorImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    ReasonNotificationTemplateSelectorImpl templateSelector;
+
+    @Test
+    void select() {
+        when(client.listAll(eq(NotificationTemplate.class), any(), any(Sort.class)))
+            .thenReturn(Flux.fromIterable(templates()));
+        // language priority: zh_CN -> zh -> default
+        // if language is same, then compare creationTimestamp to get the latest one
+        templateSelector.select("new-comment-on-post", Locale.SIMPLIFIED_CHINESE)
+            .as(StepVerifier::create)
+            .consumeNextWith(template -> {
+                assertThat(template.getMetadata().getName()).isEqualTo("template-2");
+                assertThat(template.getSpec().getTemplate().getTitle()).isEqualTo("B");
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void lookupTemplateByLocaleTest() {
+        Map> map = new HashMap<>();
+        map.put("zh_CN", Optional.of(createNotificationTemplate("zh_CN-template")));
+        map.put("zh", Optional.of(createNotificationTemplate("zh-template")));
+        map.put("default", Optional.of(createNotificationTemplate("default-template")));
+
+        var sc = ReasonNotificationTemplateSelectorImpl
+            .lookupTemplateByLocale(Locale.SIMPLIFIED_CHINESE, map);
+        assertThat(sc).isNotNull();
+        assertThat(sc.getMetadata().getName()).isEqualTo("zh_CN-template");
+
+        var c = ReasonNotificationTemplateSelectorImpl
+            .lookupTemplateByLocale(Locale.CHINESE, map);
+        assertThat(c).isNotNull();
+        assertThat(c.getMetadata().getName()).isEqualTo("zh-template");
+
+        var e = ReasonNotificationTemplateSelectorImpl
+            .lookupTemplateByLocale(Locale.ENGLISH, map);
+        assertThat(e).isNotNull();
+        assertThat(e.getMetadata().getName()).isEqualTo("default-template");
+    }
+
+    @Test
+    void matchReasonTypeTest() {
+        var template = createNotificationTemplate("fake-template");
+        assertThat(ReasonNotificationTemplateSelectorImpl.matchReasonType("new-comment-on-post")
+            .test(template)).isTrue();
+
+        assertThat(ReasonNotificationTemplateSelectorImpl.matchReasonType("fake-reason-type")
+            .test(template)).isFalse();
+    }
+
+    @Test
+    void getLanguageKeyTest() {
+        final var languageKeyFunc = ReasonNotificationTemplateSelectorImpl.getLanguageKey();
+        var template = createNotificationTemplate("fake-template");
+        assertThat(languageKeyFunc.apply(template)).isEqualTo("zh_CN");
+
+        template.getSpec().getReasonSelector().setLanguage("");
+        template.getSpec().getReasonSelector().setReasonType("new-comment-on-post");
+        assertThat(languageKeyFunc.apply(template)).isEqualTo("default");
+    }
+
+    @NonNull
+    private static NotificationTemplate createNotificationTemplate(String name) {
+        var template = new NotificationTemplate();
+        template.setMetadata(new Metadata());
+        template.getMetadata().setName(name);
+        template.setSpec(new NotificationTemplate.Spec());
+        template.getSpec().setReasonSelector(new NotificationTemplate.ReasonSelector());
+        template.getSpec().getReasonSelector().setLanguage("zh_CN");
+        template.getSpec().getReasonSelector().setReasonType("new-comment-on-post");
+        return template;
+    }
+
+    List templates() {
+        return Stream.of("""
+                    {
+                        "apiVersion": "notification.halo.run/v1alpha1",
+                        "kind": "NotificationTemplate",
+                        "metadata": {
+                            "name": "template-1",
+                            "creationTimestamp": "2023-01-01T00:00:00Z"
+                        },
+                        "spec": {
+                            "reasonSelector": {
+                                "language": "zh",
+                                "reasonType": "new-comment-on-post"
+                            },
+                            "template": {
+                                "body": "",
+                                "title": "A"
+                            }
+                        }
+                    }
+                    """,
+                """
+                    {
+                        "apiVersion": "notification.halo.run/v1alpha1",
+                        "kind": "NotificationTemplate",
+                        "metadata": {
+                            "name": "template-2",
+                            "creationTimestamp": "2023-01-01T00:00:03Z"
+                        },
+                        "spec": {
+                            "reasonSelector": {
+                                "language": "zh_CN",
+                                "reasonType": "new-comment-on-post"
+                            },
+                            "template": {
+                                "body": "",
+                                "title": "B"
+                            }
+                        }
+                    }
+                    """,
+                """
+                    {
+                        "apiVersion": "notification.halo.run/v1alpha1",
+                        "kind": "NotificationTemplate",
+                        "metadata": {
+                            "name": "template-3",
+                            "creationTimestamp": "2023-01-01T00:00:00Z"
+                        },
+                        "spec": {
+                            "reasonSelector": {
+                                "language": "zh_CN",
+                                "reasonType": "new-comment-on-post"
+                            },
+                            "template": {
+                                "body": "",
+                                "title": "C"
+                            }
+                        }
+                    }
+                    """)
+            .map(json -> JsonUtils.jsonToObject(json, NotificationTemplate.class))
+            .toList();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/notification/ReasonPayloadTest.java b/application/src/test/java/run/halo/app/notification/ReasonPayloadTest.java
new file mode 100644
index 0000000..16590f7
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/ReasonPayloadTest.java
@@ -0,0 +1,45 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+
+import java.util.HashMap;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import run.halo.app.core.extension.notification.Reason;
+
+/**
+ * Tests for {@link ReasonPayload}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+class ReasonPayloadTest {
+
+    @Test
+    public void testReasonPayloadBuilder() {
+        Reason.Subject subject = Reason.Subject.builder()
+            .kind("Post")
+            .apiVersion("content.halo.run/v1alpha1")
+            .name("fake-post")
+            .title("Fake post title")
+            .url("https://halo.run/fake-post")
+            .build();
+        Map attributes = new HashMap<>();
+        attributes.put("key1", "value1");
+        attributes.put("key2", 2);
+        attributes.put("key3", "value3");
+
+        ReasonPayload reasonPayload = ReasonPayload.builder()
+            .subject(subject)
+            .attribute("key1", "value1")
+            .attribute("key2", 2)
+            .attributes(Map.of("key3", "value3"))
+            .build();
+
+        assertNotNull(reasonPayload);
+        assertThat(reasonPayload).isNotNull();
+        assertThat(reasonPayload.getSubject()).isEqualTo(subject);
+        assertThat(reasonPayload.getAttributes()).isEqualTo(attributes);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/RecipientResolverImplTest.java b/application/src/test/java/run/halo/app/notification/RecipientResolverImplTest.java
new file mode 100644
index 0000000..276019d
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/RecipientResolverImplTest.java
@@ -0,0 +1,180 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Flux;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.notification.Reason;
+import run.halo.app.core.extension.notification.Subscription;
+import run.halo.app.extension.Metadata;
+
+/**
+ * Tests for {@link RecipientResolverImpl}.
+ *
+ * @author guqing
+ * @since 2.15.0
+ */
+@ExtendWith(MockitoExtension.class)
+class RecipientResolverImplTest {
+
+    @Mock
+    private SubscriptionService subscriptionService;
+
+    @InjectMocks
+    private RecipientResolverImpl recipientResolver;
+
+    @Test
+    void testExpressionMatch() {
+        var subscriber1 = new Subscription.Subscriber();
+        subscriber1.setName("test");
+        final var subscription1 = createSubscription(subscriber1);
+        subscription1.getMetadata().setName("test-subscription");
+        subscription1.getSpec().getReason().setSubject(null);
+        subscription1.getSpec().getReason().setExpression("props.owner == 'test'");
+
+        var subscriber2 = new Subscription.Subscriber();
+        subscriber2.setName("guqing");
+        final var subscription2 = createSubscription(subscriber2);
+        subscription2.getMetadata().setName("guqing-subscription");
+        subscription2.getSpec().getReason().setSubject(null);
+        subscription2.getSpec().getReason().setExpression("props.owner == 'guqing'");
+
+        var reason = new Reason();
+        reason.setSpec(new Reason.Spec());
+        reason.getSpec().setReasonType("new-comment-on-post");
+        reason.getSpec().setSubject(new Reason.Subject());
+        reason.getSpec().getSubject().setApiVersion("content.halo.run/v1alpha1");
+        reason.getSpec().getSubject().setKind("Post");
+        reason.getSpec().getSubject().setName("fake-post");
+        var reasonAttributes = new ReasonAttributes();
+        reasonAttributes.put("owner", "guqing");
+        reason.getSpec().setAttributes(reasonAttributes);
+
+        when(subscriptionService.listByPerPage(anyString()))
+            .thenReturn(Flux.just(subscription1, subscription2));
+
+        recipientResolver.resolve(reason)
+            .as(StepVerifier::create)
+            .expectNext(new Subscriber(UserIdentity.of("guqing"), "guqing-subscription"))
+            .verifyComplete();
+
+        verify(subscriptionService).listByPerPage(anyString());
+    }
+
+    @Test
+    void testSubjectMatch() {
+        var subscriber = new Subscription.Subscriber();
+        subscriber.setName("test");
+        Subscription subscription = createSubscription(subscriber);
+
+        when(subscriptionService.listByPerPage(anyString()))
+            .thenReturn(Flux.just(subscription));
+
+        var reason = new Reason();
+        reason.setSpec(new Reason.Spec());
+        reason.getSpec().setReasonType("new-comment-on-post");
+        reason.getSpec().setSubject(new Reason.Subject());
+        reason.getSpec().getSubject().setApiVersion("content.halo.run/v1alpha1");
+        reason.getSpec().getSubject().setKind("Post");
+        reason.getSpec().getSubject().setName("fake-post");
+
+        recipientResolver.resolve(reason)
+            .as(StepVerifier::create)
+            .expectNext(new Subscriber(UserIdentity.of("test"), "fake-subscription"))
+            .verifyComplete();
+
+        verify(subscriptionService).listByPerPage(anyString());
+    }
+
+    @Test
+    void distinct() {
+        // same subscriber to different subscriptions
+        var subscriber = new Subscription.Subscriber();
+        subscriber.setName("test");
+
+        final var subscription1 = createSubscription(subscriber);
+        subscription1.getMetadata().setName("sub-1");
+
+        final var subscription2 = createSubscription(subscriber);
+        subscription2.getMetadata().setName("sub-2");
+        subscription2.getSpec().getReason().setSubject(null);
+        subscription2.getSpec().getReason().setExpression("props.owner == 'guqing'");
+
+        when(subscriptionService.listByPerPage(anyString()))
+            .thenReturn(Flux.just(subscription1, subscription2));
+
+        var reason = new Reason();
+        reason.setSpec(new Reason.Spec());
+        reason.getSpec().setReasonType("new-comment-on-post");
+        reason.getSpec().setSubject(new Reason.Subject());
+        reason.getSpec().getSubject().setApiVersion("content.halo.run/v1alpha1");
+        reason.getSpec().getSubject().setKind("Post");
+        reason.getSpec().getSubject().setName("fake-post");
+        var reasonAttributes = new ReasonAttributes();
+        reasonAttributes.put("owner", "guqing");
+        reason.getSpec().setAttributes(reasonAttributes);
+
+        recipientResolver.resolve(reason)
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+
+        verify(subscriptionService).listByPerPage(anyString());
+    }
+
+    @Test
+    void subjectMatchTest() {
+        var subscriber = new Subscription.Subscriber();
+        subscriber.setName("test");
+
+        final var subscription = createSubscription(subscriber);
+
+        // match all name subscription
+        var subject = new Reason.Subject();
+        subject.setApiVersion("content.halo.run/v1alpha1");
+        subject.setKind("Post");
+        subject.setName("fake-post");
+        assertThat(RecipientResolverImpl.subjectMatch(subscription, subject)).isTrue();
+
+        // different kind
+        subject = new Reason.Subject();
+        subject.setApiVersion("content.halo.run/v1alpha1");
+        subject.setKind("SinglePage");
+        subject.setName("fake-post");
+        assertThat(RecipientResolverImpl.subjectMatch(subscription, subject)).isFalse();
+
+        // special case
+        subscription.getSpec().getReason().getSubject().setName("other-post");
+        subject = new Reason.Subject();
+        subject.setApiVersion("content.halo.run/v1alpha1");
+        subject.setKind("Post");
+        subject.setName("fake-post");
+        assertThat(RecipientResolverImpl.subjectMatch(subscription, subject)).isFalse();
+        subject.setName("other-post");
+        assertThat(RecipientResolverImpl.subjectMatch(subscription, subject)).isTrue();
+    }
+
+    private static Subscription createSubscription(Subscription.Subscriber subscriber) {
+        Subscription subscription = new Subscription();
+        subscription.setMetadata(new Metadata());
+        subscription.getMetadata().setName("fake-subscription");
+        subscription.setSpec(new Subscription.Spec());
+        subscription.getSpec().setSubscriber(subscriber);
+
+        var interestReason = new Subscription.InterestReason();
+        interestReason.setReasonType("new-comment-on-post");
+        interestReason.setSubject(new Subscription.ReasonSubject());
+        interestReason.getSubject().setApiVersion("content.halo.run/v1alpha1");
+        interestReason.getSubject().setKind("Post");
+        subscription.getSpec().setReason(interestReason);
+        return subscription;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/notification/SubscriptionServiceImplTest.java b/application/src/test/java/run/halo/app/notification/SubscriptionServiceImplTest.java
new file mode 100644
index 0000000..07ffbc8
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/SubscriptionServiceImplTest.java
@@ -0,0 +1,74 @@
+package run.halo.app.notification;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.concurrent.atomic.AtomicLong;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.dao.OptimisticLockingFailureException;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.notification.Subscription;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+/**
+ * Tests for {@link SubscriptionServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.15.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SubscriptionServiceImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private SubscriptionServiceImpl subscriptionService;
+
+    @Test
+    void remove() {
+        var i = new AtomicLong(1L);
+        when(client.delete(any(Subscription.class))).thenAnswer(invocation -> {
+            var subscription = (Subscription) invocation.getArgument(0);
+            if (i.get() != subscription.getMetadata().getVersion()) {
+                return Mono.error(new OptimisticLockingFailureException("fake-exception"));
+            }
+            return Mono.just(subscription);
+        });
+
+        var subscription = new Subscription();
+        subscription.setMetadata(new Metadata());
+        subscription.getMetadata().setName("fake-subscription");
+        subscription.getMetadata().setVersion(0L);
+
+        when(client.fetch(eq(Subscription.class), eq("fake-subscription")))
+            .thenAnswer(invocation -> {
+                if (i.incrementAndGet() > 3) {
+                    subscription.getMetadata().setVersion(i.get());
+                } else {
+                    subscription.getMetadata().setVersion(i.get() - 1);
+                }
+                return Mono.just(subscription);
+            });
+
+        subscriptionService.remove(subscription)
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+
+        // give version=0, but the real version is 1
+        // give version=1, but the real version is 2
+        // give version=2, but the real version is 3
+        // give version=3, but the real version is 3 (delete success)
+        verify(client, times(3)).fetch(eq(Subscription.class), eq("fake-subscription"));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/SubscriptionServiceIntegrationTest.java b/application/src/test/java/run/halo/app/notification/SubscriptionServiceIntegrationTest.java
new file mode 100644
index 0000000..6a55506
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/SubscriptionServiceIntegrationTest.java
@@ -0,0 +1,171 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.atLeast;
+import static org.mockito.Mockito.verify;
+import static run.halo.app.extension.index.query.QueryFactory.isNull;
+
+import java.util.ArrayList;
+import java.util.List;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.SpyBean;
+import org.springframework.test.annotation.DirtiesContext;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.notification.Subscription;
+import run.halo.app.extension.Extension;
+import run.halo.app.extension.ExtensionStoreUtil;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.PageRequestImpl;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.SchemeManager;
+import run.halo.app.extension.index.IndexerFactory;
+import run.halo.app.extension.router.selector.FieldSelector;
+import run.halo.app.extension.store.ReactiveExtensionStoreClient;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Integration tests for {@link SubscriptionService}.
+ *
+ * @author guqing
+ * @since 2.15.0
+ */
+@DirtiesContext
+@SpringBootTest
+class SubscriptionServiceIntegrationTest {
+
+    @Autowired
+    private SchemeManager schemeManager;
+
+    @SpyBean
+    private ReactiveExtensionClient client;
+
+    @Autowired
+    private ReactiveExtensionStoreClient storeClient;
+
+    @Autowired
+    private IndexerFactory indexerFactory;
+
+    Mono deleteImmediately(Extension extension) {
+        var name = extension.getMetadata().getName();
+        var scheme = schemeManager.get(extension.getClass());
+        // un-index
+        var indexer = indexerFactory.getIndexer(extension.groupVersionKind());
+        indexer.unIndexRecord(extension.getMetadata().getName());
+
+        // delete from db
+        var storeName = ExtensionStoreUtil.buildStoreName(scheme, name);
+        return storeClient.delete(storeName, extension.getMetadata().getVersion())
+            .thenReturn(extension);
+    }
+
+    @Nested
+    class RemoveInitialBatchTest {
+        static int size = 310;
+        private final List storedSubscriptions = subscriptionsForStore();
+
+        @Autowired
+        private SubscriptionService subscriptionService;
+
+        @BeforeEach
+        void setUp() {
+            Flux.fromIterable(storedSubscriptions)
+                .flatMap(comment -> client.create(comment))
+                .as(StepVerifier::create)
+                .expectNextCount(storedSubscriptions.size())
+                .verifyComplete();
+        }
+
+        @AfterEach
+        void tearDown() {
+            Flux.fromIterable(storedSubscriptions)
+                .flatMap(SubscriptionServiceIntegrationTest.this::deleteImmediately)
+                .as(StepVerifier::create)
+                .expectNextCount(storedSubscriptions.size())
+                .verifyComplete();
+        }
+
+        private List subscriptionsForStore() {
+            List subscriptions = new ArrayList<>(size);
+            for (int i = 0; i < size; i++) {
+                var subscription = createSubscription();
+                subscription.getMetadata().setName("subscription-" + i);
+                subscriptions.add(subscription);
+            }
+            return subscriptions;
+        }
+
+        @Test
+        void removeTest() {
+            var subscriber = new Subscription.Subscriber();
+            subscriber.setName("admin");
+            var interestReason = new Subscription.InterestReason();
+            interestReason.setReasonType("new-comment-on-post");
+            var subject = new Subscription.ReasonSubject();
+            subject.setApiVersion("content.halo.run/v1alpha1");
+            subject.setKind("Post");
+            interestReason.setSubject(subject);
+
+            subscriptionService.remove(subscriber, interestReason).block();
+
+            verify(client, atLeast(size)).delete(any(Subscription.class));
+            assertCleanedUp();
+        }
+
+        @Test
+        void removeBySubscriberTest() {
+            var subscriber = new Subscription.Subscriber();
+            subscriber.setName("admin");
+
+            subscriptionService.remove(subscriber).block();
+            verify(client, atLeast(size)).delete(any(Subscription.class));
+            assertCleanedUp();
+        }
+
+        private void assertCleanedUp() {
+            var listOptions = new ListOptions();
+            listOptions.setFieldSelector(FieldSelector.of(isNull("metadata.deletionTimestamp")));
+            client.listBy(Subscription.class, listOptions, PageRequestImpl.ofSize(1))
+                .as(StepVerifier::create)
+                .consumeNextWith(result -> {
+                    assertThat(result.getTotal()).isEqualTo(0);
+                    assertThat(result.getItems()).isEmpty();
+                })
+                .verifyComplete();
+        }
+    }
+
+    Subscription createSubscription() {
+        return JsonUtils.jsonToObject("""
+            {
+                "spec": {
+                    "subscriber": {
+                        "name": "admin"
+                    },
+                    "unsubscribeToken": "423530c9-bec7-446e-b73b-dd98ac00ba2b",
+                    "reason": {
+                        "reasonType": "new-comment-on-post",
+                        "subject": {
+                            "name": "5152aea5-c2e8-4717-8bba-2263d46e19d5",
+                            "apiVersion": "content.halo.run/v1alpha1",
+                            "kind": "Post"
+                        }
+                    },
+                    "disabled": false
+                },
+                "apiVersion": "notification.halo.run/v1alpha1",
+                "kind": "Subscription",
+                "metadata": {
+                    "generateName": "subscription-"
+                }
+            }
+            """, Subscription.class);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/UserIdentityTest.java b/application/src/test/java/run/halo/app/notification/UserIdentityTest.java
new file mode 100644
index 0000000..8df7d90
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/UserIdentityTest.java
@@ -0,0 +1,21 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link UserIdentity}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+class UserIdentityTest {
+
+
+    @Test
+    void getEmailTest() {
+        var identity = UserIdentity.anonymousWithEmail("test@example.com");
+        assertThat(identity.getEmail().orElse(null)).isEqualTo("test@example.com");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/UserNotificationPreferenceServiceImplTest.java b/application/src/test/java/run/halo/app/notification/UserNotificationPreferenceServiceImplTest.java
new file mode 100644
index 0000000..62be0f3
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/UserNotificationPreferenceServiceImplTest.java
@@ -0,0 +1,139 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.Map;
+import java.util.Set;
+import org.json.JSONException;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.skyscreamer.jsonassert.JSONAssert;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link UserNotificationPreferenceServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class UserNotificationPreferenceServiceImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private UserNotificationPreferenceServiceImpl userNotificationPreferenceService;
+
+    @Test
+    void getByUser() {
+        var configMap = new ConfigMap();
+        configMap.setData(Map.of("notification",
+            "{\"reasonTypeNotifier\":{\"comment\":{\"notifiers\":[\"test-notifier\"]}}}"));
+        when(client.fetch(ConfigMap.class, "user-preferences-guqing"))
+            .thenReturn(Mono.just(configMap));
+        userNotificationPreferenceService.getByUser("guqing")
+            .as(StepVerifier::create)
+            .consumeNextWith(preference -> {
+                assertThat(preference.getReasonTypeNotifier()).isNotNull();
+                assertThat(preference.getReasonTypeNotifier().get("comment")).isNotNull();
+                assertThat(preference.getReasonTypeNotifier().get("comment").getNotifiers())
+                    .containsExactly("test-notifier");
+            })
+            .verifyComplete();
+
+        verify(client).fetch(ConfigMap.class, "user-preferences-guqing");
+    }
+
+    @Test
+    void getByUserWhenNotFound() {
+        when(client.fetch(ConfigMap.class, "user-preferences-guqing"))
+            .thenReturn(Mono.empty());
+        userNotificationPreferenceService.getByUser("guqing")
+            .as(StepVerifier::create)
+            .consumeNextWith(preference ->
+                assertThat(preference.getReasonTypeNotifier()).isNotNull()
+            )
+            .verifyComplete();
+
+        verify(client).fetch(ConfigMap.class, "user-preferences-guqing");
+    }
+
+    @Test
+    void getByUserWhenConfigDataNotFound() {
+        when(client.fetch(ConfigMap.class, "user-preferences-guqing"))
+            .thenReturn(Mono.just(new ConfigMap()));
+        userNotificationPreferenceService.getByUser("guqing")
+            .as(StepVerifier::create)
+            .consumeNextWith(preference ->
+                assertThat(preference.getReasonTypeNotifier()).isNotNull()
+            )
+            .verifyComplete();
+
+        verify(client).fetch(ConfigMap.class, "user-preferences-guqing");
+    }
+
+
+    @Nested
+    class UserNotificationPreferenceTest {
+
+        @Test
+        void getNotifiers() {
+            var preference = new UserNotificationPreference();
+            preference.getReasonTypeNotifier().put("comment", null);
+            // key doesn't exist
+            assertThat(preference.getReasonTypeNotifier().getNotifiers("comment"))
+                .containsExactly("default-email-notifier");
+
+            // key exists but the value is null
+            preference.getReasonTypeNotifier()
+                .put("comment", new UserNotificationPreference.NotifierSetting());
+            assertThat(preference.getReasonTypeNotifier().getNotifiers("comment")).isEmpty();
+
+            // key exists and the value is not null
+            preference.getReasonTypeNotifier().get("comment").setNotifiers(Set.of("test-notifier"));
+            assertThat(preference.getReasonTypeNotifier().getNotifiers("comment"))
+                .containsExactly("test-notifier");
+        }
+
+        @Test
+        void toJson() throws JSONException {
+            var preference = new UserNotificationPreference();
+            preference.getReasonTypeNotifier().put("comment",
+                new UserNotificationPreference.NotifierSetting());
+            preference.getReasonTypeNotifier().get("comment").setNotifiers(Set.of("test-notifier"));
+
+            JSONAssert.assertEquals("""
+                    {
+                      "reasonTypeNotifier": {
+                        "comment": {
+                            "notifiers": [
+                                "test-notifier"
+                            ]
+                        }
+                      }
+                    }
+                    """,
+                JsonUtils.objectToJson(preference),
+                true);
+        }
+    }
+
+    @Test
+    void buildUserPreferenceConfigMapName() {
+        var preferenceConfigMapName = UserNotificationPreferenceServiceImpl
+            .buildUserPreferenceConfigMapName("guqing");
+        assertEquals("user-preferences-guqing", preferenceConfigMapName);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/notification/UserNotificationPreferenceTest.java b/application/src/test/java/run/halo/app/notification/UserNotificationPreferenceTest.java
new file mode 100644
index 0000000..d8179ff
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/UserNotificationPreferenceTest.java
@@ -0,0 +1,43 @@
+package run.halo.app.notification;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.Test;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link UserNotificationPreference}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+class UserNotificationPreferenceTest {
+
+    @Test
+    void preferenceCreation() {
+        String s = """
+            {
+              "reasonTypeNotifier": {
+                "comment": {
+                  "notifiers": [
+                    "email-notifier",
+                    "sms-notifier"
+                  ]
+                },
+                "new-post": {
+                  "notifiers": [
+                    "email-notifier",
+                    "webhook-router-notifier"
+                  ]
+                }
+              }
+            }
+            """;
+        var preference = JsonUtils.jsonToObject(s, UserNotificationPreference.class);
+        assertThat(preference.getReasonTypeNotifier()).isNotNull();
+        assertThat(preference.getReasonTypeNotifier().get("comment").getNotifiers())
+            .containsExactlyInAnyOrder("email-notifier", "sms-notifier");
+        assertThat(preference.getReasonTypeNotifier().get("new-post").getNotifiers())
+            .containsExactlyInAnyOrder("email-notifier", "webhook-router-notifier");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/notification/endpoint/SubscriptionRouterTest.java b/application/src/test/java/run/halo/app/notification/endpoint/SubscriptionRouterTest.java
new file mode 100644
index 0000000..8bff1c1
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/endpoint/SubscriptionRouterTest.java
@@ -0,0 +1,46 @@
+package run.halo.app.notification.endpoint;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.when;
+
+import java.net.MalformedURLException;
+import java.net.URI;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.core.extension.notification.Subscription;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.ExternalUrlSupplier;
+
+/**
+ * Tests for {@link SubscriptionRouter}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SubscriptionRouterTest {
+
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+
+    @InjectMocks
+    SubscriptionRouter subscriptionRouter;
+
+    @Test
+    void getUnsubscribeUrlTest() throws MalformedURLException {
+        when(externalUrlSupplier.getRaw()).thenReturn(URI.create("https://halo.run").toURL());
+        var subscription = new Subscription();
+        subscription.setMetadata(new Metadata());
+        subscription.getMetadata().setName("fake-subscription");
+        subscription.setSpec(new Subscription.Spec());
+        subscription.getSpec().setUnsubscribeToken("fake-unsubscribe-token");
+
+        var url = subscriptionRouter.getUnsubscribeUrl(subscription);
+        assertThat(url).isEqualTo("https://halo.run/apis/api.notification.halo.run/v1alpha1"
+            + "/subscriptions/fake-subscription/unsubscribe"
+            + "?token=fake-unsubscribe-token");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/notification/endpoint/UserNotificationPreferencesEndpointTest.java b/application/src/test/java/run/halo/app/notification/endpoint/UserNotificationPreferencesEndpointTest.java
new file mode 100644
index 0000000..f5aa335
--- /dev/null
+++ b/application/src/test/java/run/halo/app/notification/endpoint/UserNotificationPreferencesEndpointTest.java
@@ -0,0 +1,71 @@
+package run.halo.app.notification.endpoint;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.notification.NotifierDescriptor;
+import run.halo.app.core.extension.notification.ReasonType;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.notification.UserNotificationPreferenceService;
+
+/**
+ * Tests for {@link UserNotificationPreferencesEndpoint}.
+ *
+ * @author guqing
+ * @since 2.10.0
+ */
+@ExtendWith(MockitoExtension.class)
+class UserNotificationPreferencesEndpointTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private UserNotificationPreferenceService userNotificationPreferenceService;
+
+    @InjectMocks
+    private UserNotificationPreferencesEndpoint userNotificationPreferencesEndpoint;
+
+    private WebTestClient webTestClient;
+
+    @BeforeEach
+    void setUp() {
+        webTestClient = WebTestClient
+            .bindToRouterFunction(userNotificationPreferencesEndpoint.endpoint())
+            .build();
+    }
+
+    @Test
+    void listNotificationPreferences() {
+        when(client.list(eq(ReasonType.class), eq(null), any())).thenReturn(Flux.empty());
+        when(client.list(eq(NotifierDescriptor.class), eq(null), any())).thenReturn(Flux.empty());
+        when(userNotificationPreferenceService.getByUser(any())).thenReturn(Mono.empty());
+        webTestClient.post()
+            .uri("/userspaces/{username}/notification-preferences", "guqing")
+            .exchange()
+            .expectStatus()
+            .isOk();
+    }
+
+    @Test
+    void saveNotificationPreferences() {
+        when(client.list(eq(ReasonType.class), eq(null), any())).thenReturn(Flux.empty());
+        when(client.list(eq(NotifierDescriptor.class), eq(null), any())).thenReturn(Flux.empty());
+        when(userNotificationPreferenceService.getByUser(any())).thenReturn(Mono.empty());
+        webTestClient.post()
+            .uri("/userspaces/{username}/notification-preferences", "guqing")
+            .exchange()
+            .expectStatus()
+            .isOk();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/DefaultDevelopmentPluginRepositoryTest.java b/application/src/test/java/run/halo/app/plugin/DefaultDevelopmentPluginRepositoryTest.java
new file mode 100644
index 0000000..1e04d81
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/DefaultDevelopmentPluginRepositoryTest.java
@@ -0,0 +1,43 @@
+package run.halo.app.plugin;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.io.TempDir;
+import org.pf4j.PluginRepository;
+
+/**
+ * Tests for {@link DefaultDevelopmentPluginRepository}.
+ *
+ * @author guqing
+ * @since 2.8.0
+ */
+class DefaultDevelopmentPluginRepositoryTest {
+
+    private PluginRepository developmentPluginRepository;
+
+    @TempDir
+    private Path tempDir;
+
+    @BeforeEach
+    void setUp() {
+        var repository = new DefaultDevelopmentPluginRepository();
+        repository.setFixedPaths(List.of(tempDir));
+        this.developmentPluginRepository = repository;
+    }
+
+    @Test
+    void deletePluginPath() {
+        boolean deleted = developmentPluginRepository.deletePluginPath(null);
+        assertThat(deleted).isFalse();
+
+        // deletePluginPath is a no-op
+        deleted = developmentPluginRepository.deletePluginPath(tempDir);
+        assertThat(deleted).isTrue();
+        assertThat(Files.exists(tempDir)).isTrue();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/plugin/DefaultPluginApplicationContextFactoryTest.java b/application/src/test/java/run/halo/app/plugin/DefaultPluginApplicationContextFactoryTest.java
new file mode 100644
index 0000000..0f37a59
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/DefaultPluginApplicationContextFactoryTest.java
@@ -0,0 +1,48 @@
+package run.halo.app.plugin;
+
+import static org.junit.jupiter.api.Assertions.assertInstanceOf;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.pf4j.PluginWrapper;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.SpyBean;
+import run.halo.app.search.SearchService;
+
+@SpringBootTest
+class DefaultPluginApplicationContextFactoryTest {
+
+    @SpyBean
+    SpringPluginManager pluginManager;
+
+    DefaultPluginApplicationContextFactory factory;
+
+    @BeforeEach
+    void setUp() {
+        factory = new DefaultPluginApplicationContextFactory(pluginManager);
+    }
+
+    @Test
+    void shouldCreateCorrectly() {
+        var pw = mock(PluginWrapper.class);
+        when(pw.getPluginClassLoader()).thenReturn(this.getClass().getClassLoader());
+        var sp = mock(SpringPlugin.class);
+        var pluginContext = new PluginContext.PluginContextBuilder()
+            .name("fake-plugin")
+            .version("1.0.0")
+            .build();
+        when(sp.getPluginContext()).thenReturn(pluginContext);
+        when(pw.getPlugin()).thenReturn(sp);
+        when(pluginManager.getPlugin("fake-plugin")).thenReturn(pw);
+        var context = factory.create("fake-plugin");
+
+        assertInstanceOf(PluginApplicationContext.class, context);
+        assertNotNull(context.getBeanProvider(SearchService.class).getIfUnique());
+        assertNotNull(context.getBeanProvider(PluginsRootGetter.class).getIfUnique());
+        // TODO Add more assertions here.
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/DefaultPluginRouterFunctionRegistryTest.java b/application/src/test/java/run/halo/app/plugin/DefaultPluginRouterFunctionRegistryTest.java
new file mode 100644
index 0000000..578c524
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/DefaultPluginRouterFunctionRegistryTest.java
@@ -0,0 +1,34 @@
+package run.halo.app.plugin;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.Mockito.mock;
+
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.invocation.InvocationOnMock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+
+/**
+ * Tests for {@link DefaultPluginRouterFunctionRegistry}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultPluginRouterFunctionRegistryTest {
+
+    @InjectMocks
+    DefaultPluginRouterFunctionRegistry routerFunctionRegistry;
+
+    @Test
+    void shouldRegisterRouterFunction() {
+        RouterFunction routerFunction = mock(InvocationOnMock::getMock);
+        routerFunctionRegistry.register(Set.of(routerFunction));
+        assertEquals(Set.of(routerFunction), routerFunctionRegistry.getRouterFunctions());
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/plugin/DefaultSettingFetcherTest.java b/application/src/test/java/run/halo/app/plugin/DefaultSettingFetcherTest.java
new file mode 100644
index 0000000..5e7f0d2
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/DefaultSettingFetcherTest.java
@@ -0,0 +1,218 @@
+package run.halo.app.plugin;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isA;
+import static org.mockito.Mockito.inOrder;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static run.halo.app.plugin.DefaultReactiveSettingFetcher.buildCacheKey;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.Spy;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.boot.test.mock.mockito.MockBean;
+import org.springframework.cache.Cache;
+import org.springframework.cache.CacheManager;
+import org.springframework.cache.concurrent.ConcurrentMapCache;
+import org.springframework.context.ApplicationContext;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.Plugin;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.controller.Reconciler;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link DefaultSettingFetcher}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class DefaultSettingFetcherTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private ExtensionClient blockingClient;
+
+    @Mock
+    private CacheManager cacheManager;
+
+    @MockBean
+    private final PluginContext pluginContext = PluginContext.builder()
+        .name("fake")
+        .configMapName("fake-config")
+        .build();
+
+    @Mock
+    private ApplicationContext applicationContext;
+
+    private DefaultReactiveSettingFetcher reactiveSettingFetcher;
+    private DefaultSettingFetcher settingFetcher;
+
+    @Spy
+    Cache cache = new ConcurrentMapCache(buildCacheKey(pluginContext.getName()));
+
+    @BeforeEach
+    void setUp() {
+        cache.invalidate();
+
+        this.reactiveSettingFetcher = new DefaultReactiveSettingFetcher(pluginContext, client,
+            blockingClient, cacheManager);
+        reactiveSettingFetcher.setApplicationContext(applicationContext);
+
+        settingFetcher = new DefaultSettingFetcher(reactiveSettingFetcher);
+
+        when(cacheManager.getCache(eq(cache.getName()))).thenReturn(cache);
+
+        ConfigMap configMap = buildConfigMap();
+        when(client.fetch(eq(ConfigMap.class), eq(pluginContext.getConfigMapName())))
+            .thenReturn(Mono.just(configMap));
+    }
+
+    @Test
+    void getValues() throws JSONException {
+        Map values = settingFetcher.getValues();
+
+        verify(client, times(1)).fetch(eq(ConfigMap.class), any());
+
+        assertThat(values).hasSize(2);
+        JSONAssert.assertEquals(getSns(), JsonUtils.objectToJson(values.get("sns")), true);
+
+        // The extensionClient will only be called once
+        Map callAgain = settingFetcher.getValues();
+        assertThat(callAgain).isNotNull();
+        verify(client, times(1)).fetch(eq(ConfigMap.class), any());
+    }
+
+    @Test
+    void getValuesWithUpdateCache() throws JSONException {
+        Map values = settingFetcher.getValues();
+
+        verify(client, times(1)).fetch(eq(ConfigMap.class), any());
+        JSONAssert.assertEquals(getSns(), JsonUtils.objectToJson(values.get("sns")), true);
+
+        ConfigMap configMap = buildConfigMap();
+        configMap.getData().put("sns", """
+            {
+                "email": "abc@example.com",
+                "github": "abc"
+            }
+            """);
+        when(blockingClient.fetch(eq(ConfigMap.class), eq(pluginContext.getConfigMapName())))
+            .thenReturn(Optional.of(configMap));
+        reactiveSettingFetcher.reconcile(new Reconciler.Request(pluginContext.getConfigMapName()));
+
+        // Make sure the method cache#put is called before the event is published
+        // to avoid the event listener to fetch the old value from the cache
+        var inOrder = inOrder(cache, applicationContext);
+        inOrder.verify(cache).put(eq("fake"), any());
+        inOrder.verify(applicationContext).publishEvent(isA(PluginConfigUpdatedEvent.class));
+
+        Map updatedValues = settingFetcher.getValues();
+        verify(client, times(1)).fetch(eq(ConfigMap.class), any());
+        assertThat(updatedValues).hasSize(2);
+        JSONAssert.assertEquals(configMap.getData().get("sns"),
+            JsonUtils.objectToJson(updatedValues.get("sns")), true);
+
+        // cleanup cache
+        reactiveSettingFetcher.destroy();
+
+        updatedValues = settingFetcher.getValues();
+        assertThat(updatedValues).hasSize(2);
+        verify(client, times(2)).fetch(eq(ConfigMap.class), any());
+    }
+
+    @Test
+    void getGroupForObject() throws JSONException {
+        Optional sns = settingFetcher.fetch("sns", Sns.class);
+        assertThat(sns.isEmpty()).isFalse();
+        JSONAssert.assertEquals(getSns(), JsonUtils.objectToJson(sns.get()), true);
+    }
+
+    @Test
+    void getGroup() {
+        JsonNode jsonNode = settingFetcher.get("basic");
+        assertThat(jsonNode).isNotNull();
+        assertThat(jsonNode.isObject()).isTrue();
+        assertThat(jsonNode.get("color").asText()).isEqualTo("red");
+        assertThat(jsonNode.get("width").asInt()).isEqualTo(100);
+
+        // missing key will return empty json node
+        JsonNode emptyNode = settingFetcher.get("basic1");
+        assertThat(emptyNode.isEmpty()).isTrue();
+    }
+
+    private ConfigMap buildConfigMap() {
+        ConfigMap configMap = new ConfigMap();
+        Metadata metadata = new Metadata();
+        metadata.setName("fake");
+        metadata.setLabels(Map.of("plugin.halo.run/plugin-name", "fake"));
+        configMap.setMetadata(metadata);
+        configMap.setKind("ConfigMap");
+        configMap.setApiVersion("v1alpha1");
+        var map = new HashMap();
+        map.put("sns", getSns());
+        map.put("basic", """
+            {
+                "color": "red",
+                "width": "100"
+            }
+            """);
+        configMap.setData(map);
+        return configMap;
+    }
+
+    private Plugin buildPlugin() {
+        Plugin plugin = new Plugin();
+        plugin.setKind("Plugin");
+        plugin.setApiVersion("plugin.halo.run/v1alpha1");
+
+        Metadata pluginMetadata = new Metadata();
+        pluginMetadata.setName("fakePlugin");
+        plugin.setMetadata(pluginMetadata);
+
+        Plugin.PluginSpec pluginSpec = new Plugin.PluginSpec();
+        pluginSpec.setConfigMapName("fakeConfigMap");
+        pluginSpec.setSettingName("fakeSetting");
+        plugin.setSpec(pluginSpec);
+        return plugin;
+    }
+
+    String getSns() {
+        return """
+            {
+                "email": "example@example.com",
+                "github": "example",
+                "instagram": "123",
+                "twitter": "halo-dev",
+                "user": {
+                "name": "guqing",
+                "age": "18"
+                },
+                "nums": [1, 2, 3]
+            }
+            """;
+    }
+
+    record Sns(String email, String github, String instagram, String twitter,
+               Map user, List nums) {
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/HaloPluginManagerTest.java b/application/src/test/java/run/halo/app/plugin/HaloPluginManagerTest.java
new file mode 100644
index 0000000..d6711e1
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/HaloPluginManagerTest.java
@@ -0,0 +1,63 @@
+package run.halo.app.plugin;
+
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.when;
+
+import com.github.zafarkhaja.semver.Version;
+import java.nio.file.Path;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.pf4j.RuntimeMode;
+import org.springframework.context.ApplicationContext;
+import run.halo.app.infra.SystemVersionSupplier;
+
+@ExtendWith(MockitoExtension.class)
+class HaloPluginManagerTest {
+
+    @Mock
+    PluginProperties pluginProperties;
+
+    @Mock
+    SystemVersionSupplier systemVersionSupplier;
+
+    @Mock
+    PluginsRootGetter pluginsRootGetter;
+
+    @Mock
+    ApplicationContext rootContext;
+
+    @InjectMocks
+    HaloPluginManager pluginManager;
+
+    @TempDir
+    Path tempDir;
+
+    @Test
+    void shouldGetDependentsWhilePluginsNotResolved() throws Exception {
+        when(pluginProperties.getRuntimeMode()).thenReturn(RuntimeMode.DEPLOYMENT);
+        when(systemVersionSupplier.get()).thenReturn(Version.of(1, 2, 3));
+        when(pluginsRootGetter.get()).thenReturn(tempDir);
+        pluginManager.afterPropertiesSet();
+        // if we don't invoke resolves
+        var dependents = pluginManager.getDependents("fake-plugin");
+        assertTrue(dependents.isEmpty());
+    }
+
+    @Test
+    void shouldGetDependentsWhilePluginsResolved() throws Exception {
+        when(pluginProperties.getRuntimeMode()).thenReturn(RuntimeMode.DEPLOYMENT);
+        when(systemVersionSupplier.get()).thenReturn(Version.of(1, 2, 3));
+        when(pluginsRootGetter.get()).thenReturn(tempDir);
+        pluginManager.afterPropertiesSet();
+        pluginManager.loadPlugins();
+        // if we don't invoke resolves
+        var dependents = pluginManager.getDependents("fake-plugin");
+        assertTrue(dependents.isEmpty());
+    }
+
+
+}
diff --git a/application/src/test/java/run/halo/app/plugin/PluginExtensionLoaderUtilsTest.java b/application/src/test/java/run/halo/app/plugin/PluginExtensionLoaderUtilsTest.java
new file mode 100644
index 0000000..416f849
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/PluginExtensionLoaderUtilsTest.java
@@ -0,0 +1,40 @@
+package run.halo.app.plugin;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static run.halo.app.plugin.PluginExtensionLoaderUtils.isSetting;
+import static run.halo.app.plugin.PluginExtensionLoaderUtils.lookupExtensions;
+
+import java.io.IOException;
+import java.net.URL;
+import java.net.URLClassLoader;
+import java.util.Arrays;
+import java.util.Objects;
+import org.junit.jupiter.api.Test;
+import org.springframework.core.io.DefaultResourceLoader;
+import run.halo.app.infra.utils.YamlUnstructuredLoader;
+
+class PluginExtensionLoaderUtilsTest {
+
+    @Test
+    void lookupExtensionsAndIsSettingTest() throws IOException {
+        var resourceLoader = new DefaultResourceLoader();
+        var rootResource = resourceLoader.getResource("classpath:plugin/plugin-0.0.1/");
+        var classLoader = new URLClassLoader(new URL[] {rootResource.getURL()}, null);
+        var resources = lookupExtensions(classLoader);
+        assertTrue(resources.length >= 1);
+        var settingResource = Arrays.stream(resources)
+            .filter(r -> Objects.equals("setting.yaml", r.getFilename()))
+            .findFirst()
+            .orElseThrow();
+
+        var loader = new YamlUnstructuredLoader(settingResource);
+        var unstructuredList = loader.load();
+        assertEquals(1, unstructuredList.size());
+        assertTrue(isSetting("fake-setting").test(unstructuredList.get(0)));
+        assertFalse(isSetting("non-fake-setting").test(unstructuredList.get(0)));
+        assertFalse(isSetting("").test(unstructuredList.get(0)));
+        assertFalse(isSetting(null).test(unstructuredList.get(0)));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/PluginRequestMappingHandlerMappingTest.java b/application/src/test/java/run/halo/app/plugin/PluginRequestMappingHandlerMappingTest.java
new file mode 100644
index 0000000..524bda5
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/PluginRequestMappingHandlerMappingTest.java
@@ -0,0 +1,309 @@
+package run.halo.app.plugin;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.mock;
+import static org.springframework.mock.http.server.reactive.MockServerHttpRequest.get;
+import static org.springframework.mock.http.server.reactive.MockServerHttpRequest.post;
+import static org.springframework.web.bind.annotation.RequestMethod.GET;
+import static org.springframework.web.bind.annotation.RequestMethod.HEAD;
+
+import java.lang.reflect.Method;
+import java.security.Principal;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.Collections;
+import java.util.List;
+import java.util.Set;
+import java.util.function.Consumer;
+import java.util.function.Predicate;
+import java.util.stream.Collectors;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.core.MethodIntrospector;
+import org.springframework.core.annotation.AnnotatedElementUtils;
+import org.springframework.http.HttpMethod;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import org.springframework.stereotype.Controller;
+import org.springframework.util.Assert;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestMethod;
+import org.springframework.web.bind.annotation.RestController;
+import org.springframework.web.context.support.StaticWebApplicationContext;
+import org.springframework.web.method.HandlerMethod;
+import org.springframework.web.reactive.result.method.RequestMappingInfo;
+import org.springframework.web.server.MethodNotAllowedException;
+import org.springframework.web.server.ServerWebExchange;
+import org.springframework.web.util.pattern.PathPatternParser;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+
+/**
+ * Tests for {@link PluginRequestMappingHandlerMapping}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class PluginRequestMappingHandlerMappingTest {
+
+    private final StaticWebApplicationContext wac = new StaticWebApplicationContext();
+
+    private PluginRequestMappingHandlerMapping handlerMapping;
+
+
+    @BeforeEach
+    public void setup() {
+        handlerMapping = new PluginRequestMappingHandlerMapping();
+        this.handlerMapping.setApplicationContext(wac);
+    }
+
+    @Test
+    public void shouldAddPathPrefixWhenExistingApiVersion() throws Exception {
+        Method method = UserController.class.getMethod("getUser");
+        RequestMappingInfo info =
+            this.handlerMapping.getPluginMappingForMethod("fakePlugin", method,
+                UserController.class);
+
+        assertThat(info).isNotNull();
+        assertThat(info.getPatternsCondition().getPatterns()).isEqualTo(
+            Collections.singleton(
+                new PathPatternParser().parse(
+                    "/apis/api.plugin.halo.run/v1alpha1/plugins/fakePlugin/user/{id}")));
+    }
+
+    @Test
+    public void shouldKeepRawWhenMissingApiVersion() throws Exception {
+        Method method = AppleMissingApiVersionController.class.getMethod("getName");
+        RequestMappingInfo info =
+            this.handlerMapping.getPluginMappingForMethod("fakePlugin", method,
+                AppleMissingApiVersionController.class);
+
+        assertThat(info.getPatternsCondition().getPatterns())
+            .isEqualTo(Collections.singleton(new PathPatternParser().parse("/apples")));
+    }
+
+    @Test
+    void registerHandlerMethods() {
+        assertThat(handlerMapping.getMappings("fakePlugin")).isEmpty();
+
+        UserController userController = mock(UserController.class);
+        handlerMapping.registerHandlerMethods("fakePlugin", userController);
+
+        List mappings = handlerMapping.getMappings("fakePlugin");
+        assertThat(mappings).hasSize(1);
+        assertThat(mappings.get(0).toString()).isEqualTo(
+            "{GET /apis/api.plugin.halo.run/v1alpha1/plugins/fakePlugin/user/{id}}");
+    }
+
+    @Test
+    void unregister() {
+        UserController userController = mock(UserController.class);
+        // register handler methods first
+        handlerMapping.registerHandlerMethods("fakePlugin", userController);
+        assertThat(handlerMapping.getMappings("fakePlugin")).hasSize(1);
+
+        // unregister
+        handlerMapping.unregister("fakePlugin");
+        assertThat(handlerMapping.getMappings("fakePlugin")).isEmpty();
+    }
+
+    @Test
+    public void getHandlerDirectMatch() {
+        // register handler methods first
+        handlerMapping.registerHandlerMethods("fakePlugin", new TestController());
+
+        // resolve an expected method from TestController
+        Method expected =
+            ResolvableMethod.on(TestController.class).annot(getMapping("/foo")).build();
+
+        // get handler by mock exchange
+        ServerWebExchange exchange =
+            MockServerWebExchange.from(
+                get("/apis/api.plugin.halo.run/v1alpha1/plugins/fakePlugin/foo"));
+        HandlerMethod hm = (HandlerMethod) this.handlerMapping.getHandler(exchange).block();
+
+        assertThat(hm).isNotNull();
+        assertThat(hm.getMethod()).isEqualTo(expected);
+    }
+
+    @Test
+    public void getHandlerBestMatch() {
+        // register handler methods first
+        handlerMapping.registerHandlerMethods("fakePlugin", new TestController());
+
+        Method expected =
+            ResolvableMethod.on(TestController.class).annot(getMapping("/foo").params("p")).build();
+
+        String requestPath = "/apis/api.plugin.halo.run/v1alpha1/plugins/fakePlugin/foo?p=anything";
+        ServerWebExchange exchange = MockServerWebExchange.from(get(requestPath));
+        HandlerMethod hm = (HandlerMethod) this.handlerMapping.getHandler(exchange).block();
+
+        assertThat(hm).isNotNull();
+        assertThat(hm.getMethod()).isEqualTo(expected);
+    }
+
+    @Test
+    public void getHandlerRootPathMatch() {
+        // register handler methods first
+        handlerMapping.registerHandlerMethods("fakePlugin", new TestController());
+        Method expected =
+            ResolvableMethod.on(TestController.class).annot(getMapping("")).build();
+
+        String requestPath = "/apis/api.plugin.halo.run/v1alpha1/plugins/fakePlugin";
+        ServerWebExchange exchange = MockServerWebExchange.from(get(requestPath));
+        HandlerMethod hm = (HandlerMethod) this.handlerMapping.getHandler(exchange).block();
+
+        assertThat(hm).isNotNull();
+        assertThat(hm.getMethod()).isEqualTo(expected);
+    }
+
+    @Test
+    public void getHandlerRequestMethodNotAllowed() {
+        // register handler methods first
+        handlerMapping.registerHandlerMethods("fakePlugin", new TestController());
+
+        String requestPath = "/apis/api.plugin.halo.run/v1alpha1/plugins/fakePlugin/bar";
+        ServerWebExchange exchange = MockServerWebExchange.from(post(requestPath));
+        Mono mono = this.handlerMapping.getHandler(exchange);
+
+        assertError(mono, MethodNotAllowedException.class,
+            ex -> assertThat(ex.getSupportedMethods()).isEqualTo(
+                Set.of(HttpMethod.GET, HttpMethod.HEAD)));
+    }
+
+    @Test
+    void buildPrefix() {
+        String s = handlerMapping.buildPrefix("fakePlugin", "v1");
+        assertThat(s).isEqualTo("/apis/api.plugin.halo.run/v1/plugins/fakePlugin");
+
+        s = handlerMapping.buildPrefix("fakePlugin", "fake.halo.run/v1alpha1");
+        assertThat(s).isEqualTo("/apis/fake.halo.run/v1alpha1");
+    }
+
+    @SuppressWarnings("unchecked")
+    private  void assertError(Mono mono, final Class exceptionClass,
+        final Consumer consumer) {
+        StepVerifier.create(mono)
+            .consumeErrorWith(error -> {
+                assertThat(error.getClass()).isEqualTo(exceptionClass);
+                consumer.accept((T) error);
+            })
+            .verify();
+    }
+
+    private RequestMappingPredicate getMapping(String... path) {
+        return new RequestMappingPredicate(path).method(GET).params();
+    }
+
+    public static class ResolvableMethod {
+        private final Class objectClass;
+        private final List> filters = new ArrayList<>(4);
+
+        public ResolvableMethod(Class objectClass) {
+            this.objectClass = objectClass;
+        }
+
+        public static ResolvableMethod on(Class objectClass) {
+            return new ResolvableMethod(objectClass);
+        }
+
+        public ResolvableMethod annot(Predicate predicate) {
+            filters.add(predicate);
+            return this;
+        }
+
+        public Method build() {
+            Set methods = MethodIntrospector.selectMethods(this.objectClass, this::isMatch);
+            Assert.state(!methods.isEmpty(), () -> "No matching method: " + this);
+            Assert.state(methods.size() == 1,
+                () -> "Multiple matching methods: " + this + formatMethods(methods));
+            return methods.iterator().next();
+        }
+
+        private String formatMethods(Set methods) {
+            return "\nMatched:\n" + methods.stream()
+                .map(Method::toGenericString).collect(Collectors.joining(",\n\t", "[\n\t", "\n]"));
+        }
+
+        private boolean isMatch(Method method) {
+            return this.filters.stream().allMatch(p -> p.test(method));
+        }
+    }
+
+    public static class RequestMappingPredicate implements Predicate {
+
+        private final String[] path;
+
+        private RequestMethod[] method = {};
+
+        private String[] params;
+
+
+        private RequestMappingPredicate(String... path) {
+            this.path = path;
+        }
+
+
+        public RequestMappingPredicate method(RequestMethod... methods) {
+            this.method = methods;
+            return this;
+        }
+
+        public RequestMappingPredicate params(String... params) {
+            this.params = params;
+            return this;
+        }
+
+        @Override
+        public boolean test(Method method) {
+            RequestMapping annot =
+                AnnotatedElementUtils.findMergedAnnotation(method, RequestMapping.class);
+            return annot != null
+                && Arrays.equals(this.path, annot.path())
+                && Arrays.equals(this.method, annot.method())
+                && (this.params == null || Arrays.equals(this.params, annot.params()));
+        }
+    }
+
+    @ApiVersion("v1alpha1")
+    @RestController
+    @RequestMapping("/user")
+    static class UserController {
+
+        @GetMapping("/{id}")
+        public Principal getUser() {
+            return mock(Principal.class);
+        }
+    }
+
+    @RestController
+    @RequestMapping("/apples")
+    static class AppleMissingApiVersionController {
+
+        @GetMapping
+        public String getName() {
+            return mock(String.class);
+        }
+    }
+
+    @ApiVersion("v1alpha1")
+    @Controller
+    @RequestMapping
+    static class TestController {
+        @GetMapping("/foo")
+        public void foo() {
+        }
+
+        @GetMapping(path = "/foo", params = "p")
+        public void fooParam() {
+        }
+
+        @RequestMapping(path = "/ba*", method = {GET, HEAD})
+        public void bar() {
+        }
+
+        @GetMapping("")
+        public void empty() {
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/PluginsRootGetterImplTest.java b/application/src/test/java/run/halo/app/plugin/PluginsRootGetterImplTest.java
new file mode 100644
index 0000000..68744cb
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/PluginsRootGetterImplTest.java
@@ -0,0 +1,30 @@
+package run.halo.app.plugin;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.Mockito.when;
+
+import java.nio.file.Paths;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.infra.properties.HaloProperties;
+
+@ExtendWith(MockitoExtension.class)
+class PluginsRootGetterImplTest {
+
+    @Mock
+    HaloProperties haloProperties;
+
+    @InjectMocks
+    PluginsRootGetterImpl pluginsRootGetter;
+
+    @Test
+    void shouldGetterPluginsRootCorrectly() {
+        var haloWorkDir = Paths.get("halo-work-dir");
+        when(haloProperties.getWorkDir()).thenReturn(haloWorkDir);
+        assertEquals(haloWorkDir.resolve("plugins"), pluginsRootGetter.get());
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/plugin/SharedApplicationContextFactoryTest.java b/application/src/test/java/run/halo/app/plugin/SharedApplicationContextFactoryTest.java
new file mode 100644
index 0000000..80518da
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/SharedApplicationContextFactoryTest.java
@@ -0,0 +1,29 @@
+package run.halo.app.plugin;
+
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.jdbc.AutoConfigureTestDatabase;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.context.ApplicationContext;
+
+/**
+ * Tests for {@link SharedApplicationContextFactory}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@SpringBootTest
+@AutoConfigureTestDatabase
+class SharedApplicationContextFactoryTest {
+
+    @Autowired
+    ApplicationContext applicationContext;
+
+    @Test
+    void createSharedApplicationContext() {
+        var sharedContext =  SharedApplicationContextFactory.create(applicationContext);
+        assertNotNull(sharedContext);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/SharedEventDispatcherTest.java b/application/src/test/java/run/halo/app/plugin/SharedEventDispatcherTest.java
new file mode 100644
index 0000000..53cc238
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/SharedEventDispatcherTest.java
@@ -0,0 +1,108 @@
+package run.halo.app.plugin;
+
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.mockito.Mockito.withSettings;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.pf4j.PluginManager;
+import org.pf4j.PluginWrapper;
+import org.springframework.context.ApplicationContext;
+import org.springframework.context.ApplicationEvent;
+import org.springframework.context.ApplicationEventPublisher;
+import org.springframework.context.Lifecycle;
+
+@ExtendWith(MockitoExtension.class)
+class SharedEventDispatcherTest {
+
+    @Mock
+    PluginManager pluginManager;
+
+    @Mock
+    ApplicationEventPublisher publisher;
+
+    @InjectMocks
+    SharedEventDispatcher dispatcher;
+
+    @Test
+    void shouldNotDispatchEventIfNotSharedEvent() {
+        dispatcher.onApplicationEvent(new FakeEvent(this));
+        verify(pluginManager, never()).getStartedPlugins();
+    }
+
+    @Test
+    void shouldDispatchEventToAllStartedPlugins() {
+        var pw = mock(PluginWrapper.class);
+        var plugin = mock(SpringPlugin.class);
+        var context =
+            mock(ApplicationContext.class, withSettings().extraInterfaces(Lifecycle.class));
+        when(((Lifecycle) context).isRunning()).thenReturn(true);
+        when(plugin.getApplicationContext()).thenReturn(context);
+        when(pw.getPlugin()).thenReturn(plugin);
+        when(pluginManager.getStartedPlugins()).thenReturn(List.of(pw));
+
+        var event = new FakeSharedEvent(this);
+        dispatcher.onApplicationEvent(event);
+
+        verify(context).publishEvent(new HaloSharedEventDelegator(dispatcher, event));
+    }
+
+    @Test
+    void shouldNotDispatchEventToAllStartedPluginsWhilePluginContextIsNotRunning() {
+        var pw = mock(PluginWrapper.class);
+        var plugin = mock(SpringPlugin.class);
+        var context =
+            mock(ApplicationContext.class, withSettings().extraInterfaces(Lifecycle.class));
+        when(((Lifecycle) context).isRunning()).thenReturn(false);
+        when(plugin.getApplicationContext()).thenReturn(context);
+        when(pw.getPlugin()).thenReturn(plugin);
+        when(pluginManager.getStartedPlugins()).thenReturn(List.of(pw));
+        var event = new FakeSharedEvent(this);
+        dispatcher.onApplicationEvent(event);
+        verify(context, never()).publishEvent(event);
+    }
+
+    @Test
+    void shouldNotDispatchEventToAllStartedPluginsWhilePluginContextIsNotLifecycle() {
+        var pw = mock(PluginWrapper.class);
+        var plugin = mock(SpringPlugin.class);
+        var context = mock(ApplicationContext.class);
+        when(plugin.getApplicationContext()).thenReturn(context);
+        when(pw.getPlugin()).thenReturn(plugin);
+        when(pluginManager.getStartedPlugins()).thenReturn(List.of(pw));
+        var event = new FakeSharedEvent(this);
+        dispatcher.onApplicationEvent(event);
+        verify(context, never()).publishEvent(event);
+    }
+
+    @Test
+    void shouldUnwrapPluginSharedEventAndRepublish() {
+        var event = new PluginSharedEventDelegator(this, new FakeSharedEvent(this));
+        dispatcher.onApplicationEvent(event);
+        verify(publisher).publishEvent(event.getDelegate());
+    }
+
+    class FakeEvent extends ApplicationEvent {
+
+        public FakeEvent(Object source) {
+            super(source);
+        }
+
+    }
+
+    @SharedEvent
+    class FakeSharedEvent extends ApplicationEvent {
+
+        public FakeSharedEvent(Object source) {
+            super(source);
+        }
+
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/SpringComponentsFinderTest.java b/application/src/test/java/run/halo/app/plugin/SpringComponentsFinderTest.java
new file mode 100644
index 0000000..11c86ad
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/SpringComponentsFinderTest.java
@@ -0,0 +1,95 @@
+package run.halo.app.plugin;
+
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.io.FileNotFoundException;
+import java.net.URL;
+import java.net.URLClassLoader;
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.pf4j.PluginManager;
+import org.pf4j.PluginState;
+import org.pf4j.PluginStateEvent;
+import org.pf4j.PluginWrapper;
+import org.springframework.util.ResourceUtils;
+
+/**
+ * Tests for {@link SpringComponentsFinder}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SpringComponentsFinderTest {
+
+    @Mock
+    private PluginManager pluginManager;
+
+    @InjectMocks
+    private SpringComponentsFinder finder;
+
+    @Test
+    void shouldNotInvokeReadClasspathStorages() {
+        assertThrows(UnsupportedOperationException.class,
+            () -> finder.readClasspathStorages()
+        );
+    }
+
+    @Test
+    void shouldNotInvokeReadPluginsStorages() {
+        assertThrows(UnsupportedOperationException.class,
+            () -> finder.readPluginsStorages()
+        );
+    }
+
+    @Test
+    void shouldPutEntryIfPluginCreated() throws FileNotFoundException {
+        var pluginWrapper = mockPluginWrapper();
+        when(pluginWrapper.getPluginState()).thenReturn(PluginState.CREATED);
+
+        var event = new PluginStateEvent(pluginManager, pluginWrapper, null);
+        finder.pluginStateChanged(event);
+
+        var classNames = finder.findClassNames("fake-plugin");
+        assertEquals(Set.of("run.halo.fake.FakePlugin"), classNames);
+    }
+
+    @Test
+    void shouldRemoveEntryIfPluginUnloaded() throws FileNotFoundException {
+        var pluginWrapper = mockPluginWrapper();
+        when(pluginWrapper.getPluginState()).thenReturn(PluginState.CREATED);
+
+        var event = new PluginStateEvent(pluginManager, pluginWrapper, null);
+        finder.pluginStateChanged(event);
+
+        var classNames = finder.findClassNames("fake-plugin");
+        assertFalse(classNames.isEmpty());
+
+        when(pluginWrapper.getPluginState()).thenReturn(PluginState.UNLOADED);
+        event = new PluginStateEvent(pluginManager, pluginWrapper, null);
+        finder.pluginStateChanged(event);
+
+        classNames = finder.findClassNames("fake-plugin");
+        assertTrue(classNames.isEmpty());
+    }
+
+    private PluginWrapper mockPluginWrapper() throws FileNotFoundException {
+        var pluginWrapper = mock(PluginWrapper.class);
+        when(pluginWrapper.getPluginId()).thenReturn("fake-plugin");
+
+        var pluginRootUrl = ResourceUtils.getURL("classpath:plugin/plugin-for-finder/");
+        var classLoader = new URLClassLoader(new URL[] {pluginRootUrl});
+        when(pluginWrapper.getPluginClassLoader()).thenReturn(classLoader);
+        return pluginWrapper;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/YamlPluginDescriptorFinderTest.java b/application/src/test/java/run/halo/app/plugin/YamlPluginDescriptorFinderTest.java
new file mode 100644
index 0000000..e47eabe
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/YamlPluginDescriptorFinderTest.java
@@ -0,0 +1,100 @@
+package run.halo.app.plugin;
+
+import static java.util.Objects.requireNonNull;
+import static org.assertj.core.api.AssertionsForInterfaceTypes.assertThat;
+
+import java.io.File;
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import org.json.JSONException;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.pf4j.PluginDescriptor;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.util.FileSystemUtils;
+import org.springframework.util.ResourceUtils;
+import run.halo.app.infra.utils.FileUtils;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link YamlPluginDescriptorFinder}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class YamlPluginDescriptorFinderTest {
+
+    private YamlPluginDescriptorFinder yamlPluginDescriptorFinder;
+
+    private File testFile;
+    private Path tempDirectory;
+
+    @BeforeEach
+    void setUp() throws IOException {
+        yamlPluginDescriptorFinder = new YamlPluginDescriptorFinder();
+        tempDirectory = Files.createTempDirectory("halo-plugin");
+        var plugin002Uri = requireNonNull(
+            ResourceUtils.getFile("classpath:plugin/plugin-0.0.2")).toURI();
+
+        Path targetJarPath = tempDirectory.resolve("plugin-0.0.2.jar");
+        FileUtils.jar(Paths.get(plugin002Uri), targetJarPath);
+        testFile = targetJarPath.toFile();
+    }
+
+    @AfterEach
+    void tearDown() throws IOException {
+        FileSystemUtils.deleteRecursively(tempDirectory);
+    }
+
+    @Test
+    void isApplicable() throws IOException {
+        // File not exists
+        boolean applicable =
+            yamlPluginDescriptorFinder.isApplicable(Path.of("/some/path/test.jar"));
+        assertThat(applicable).isFalse();
+
+        // jar file is applicable
+        Path tempJarFile = Files.createTempFile("test", ".jar");
+        Path tempZipFile = Files.createTempFile("test", ".zip");
+        try {
+            applicable =
+                yamlPluginDescriptorFinder.isApplicable(tempJarFile);
+            assertThat(applicable).isTrue();
+            // zip file is not applicable
+            applicable =
+                yamlPluginDescriptorFinder.isApplicable(tempZipFile);
+            assertThat(applicable).isFalse();
+
+            // directory is applicable
+            applicable =
+                yamlPluginDescriptorFinder.isApplicable(tempJarFile.getParent());
+            assertThat(applicable).isTrue();
+        } finally {
+            FileUtils.deleteRecursivelyAndSilently(tempJarFile);
+            FileUtils.deleteRecursivelyAndSilently(tempZipFile);
+        }
+    }
+
+    @Test
+    void find() throws JSONException {
+        PluginDescriptor pluginDescriptor = yamlPluginDescriptorFinder.find(testFile.toPath());
+        String actual = JsonUtils.objectToJson(pluginDescriptor);
+        JSONAssert.assertEquals("""
+                {
+                     "pluginId": "fake-plugin",
+                     "pluginDescription": "Fake description",
+                     "pluginClass": "run.halo.app.plugin.BasePlugin",
+                     "version": "0.0.2",
+                     "requires": ">=2.0.0",
+                     "provider": "johnniang",
+                     "dependencies": [],
+                     "license": "GPLv3"
+                 }
+                """,
+            actual,
+            false);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/YamlPluginFinderTest.java b/application/src/test/java/run/halo/app/plugin/YamlPluginFinderTest.java
new file mode 100644
index 0000000..a858f83
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/YamlPluginFinderTest.java
@@ -0,0 +1,174 @@
+package run.halo.app.plugin;
+
+import static java.util.Objects.requireNonNull;
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+import java.io.File;
+import java.io.FileNotFoundException;
+import java.io.IOException;
+import java.net.URISyntaxException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.pf4j.PluginRuntimeException;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.core.io.FileSystemResource;
+import org.springframework.core.io.Resource;
+import org.springframework.security.util.InMemoryResource;
+import org.springframework.util.FileCopyUtils;
+import org.springframework.util.FileSystemUtils;
+import org.springframework.util.ResourceUtils;
+import run.halo.app.core.extension.Plugin;
+import run.halo.app.extension.Unstructured;
+import run.halo.app.infra.utils.FileUtils;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link YamlPluginDescriptorFinder}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class YamlPluginFinderTest {
+    private YamlPluginFinder pluginFinder;
+
+    private File testFile;
+
+    @BeforeEach
+    void setUp() throws FileNotFoundException {
+        pluginFinder = new YamlPluginFinder();
+        testFile = ResourceUtils.getFile("classpath:plugin/plugin.yaml");
+    }
+
+    @Test
+    void find() throws IOException {
+        var tempDirectory = Files.createTempDirectory("halo-test-plugin");
+        try {
+            var directories =
+                Files.createDirectories(tempDirectory.resolve("build/resources/main"));
+            FileCopyUtils.copy(testFile, directories.resolve("plugin.yaml").toFile());
+
+            var plugin = pluginFinder.find(tempDirectory);
+            assertThat(plugin).isNotNull();
+            var status = plugin.getStatus();
+            assertEquals(Plugin.Phase.PENDING, status.getPhase());
+            assertEquals(tempDirectory.toUri(), status.getLoadLocation());
+        } finally {
+            FileUtils.deleteRecursivelyAndSilently(tempDirectory);
+        }
+    }
+
+    @Test
+    void findFromJar() throws IOException, URISyntaxException {
+        Path tempDirectory = Files.createTempDirectory("halo-plugin");
+        try {
+            var plugin002Uri = requireNonNull(
+                getClass().getClassLoader().getResource("plugin/plugin-0.0.2")).toURI();
+
+            Path targetJarPath = tempDirectory.resolve("plugin-0.0.2.jar");
+            FileUtils.jar(Paths.get(plugin002Uri), targetJarPath);
+            Plugin plugin = pluginFinder.find(targetJarPath);
+            assertThat(plugin).isNotNull();
+            assertThat(plugin.getMetadata().getName()).isEqualTo("fake-plugin");
+        } finally {
+            FileSystemUtils.deleteRecursively(tempDirectory);
+        }
+    }
+
+    @Test
+    void unstructuredToPluginTest() throws JSONException {
+        Plugin plugin = pluginFinder.unstructuredToPlugin(new FileSystemResource(testFile));
+        assertThat(plugin).isNotNull();
+        JSONAssert.assertEquals("""
+                  {
+                    "spec": {
+                        "displayName": "a name to show",
+                        "version": "0.0.1",
+                        "author": {
+                            "name": "guqing"
+                        },
+                        "logo": "https://guqing.xyz/avatar",
+                        "pluginDependencies": {
+                            "banana": "0.0.1"
+                        },
+                        "homepage": "https://github.com/guqing/halo-plugin-1",
+                        "description": "Tell me more about this plugin.",
+                        "license": [
+                            {
+                                "name": "MIT"
+                            }
+                        ],
+                        "requires": ">=2.0.0",
+                        "enabled": false
+                    },
+                    "apiVersion": "plugin.halo.run/v1alpha1",
+                    "kind": "Plugin",
+                    "metadata": {
+                        "name": "plugin-1"
+                    }
+                }
+                  """,
+            JsonUtils.objectToJson(plugin),
+            true);
+    }
+
+    @Test
+    void findFailedWhenFileNotFound() {
+        var test = Paths.get("");
+        assertThatThrownBy(() -> pluginFinder.find(test))
+            .isInstanceOf(PluginRuntimeException.class)
+            .hasMessage("Unable to find plugin descriptor file: plugin.yaml");
+    }
+
+    @Test
+    void acceptArrayObjectLicense() throws JSONException {
+        Resource pluginResource = new InMemoryResource("""
+            apiVersion: v1
+            kind: Plugin
+            metadata:
+              name: plugin-1
+            spec:
+              license:
+                - name: MIT
+                  url: https://exmple.com
+            """);
+        Plugin plugin = pluginFinder.unstructuredToPlugin(pluginResource);
+        assertThat(plugin.getSpec()).isNotNull();
+        JSONAssert.assertEquals("""
+            [{
+                "name": "MIT",
+                "url": "https://exmple.com"
+            }]
+            """, JsonUtils.objectToJson(plugin.getSpec().getLicense()), false);
+    }
+
+    @Test
+    void deserializeLicense() throws JSONException, JsonProcessingException {
+        String pluginJson = """
+            {
+                "apiVersion": "plugin.halo.run/v1alpha1",
+                "kind": "Plugin",
+                "metadata": {
+                    "name": "plugin-1"
+                },
+                "spec": {
+                    "license": [
+                        {
+                            "name": "MIT",
+                            "url": "https://exmple.com"
+                        }
+                    ]
+                }
+            }
+            """;
+        Plugin plugin = Unstructured.OBJECT_MAPPER.readValue(pluginJson, Plugin.class);
+        assertThat(plugin.getSpec()).isNotNull();
+        JSONAssert.assertEquals(pluginJson, JsonUtils.objectToJson(plugin), false);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/plugin/extensionpoint/DefaultExtensionGetterTest.java b/application/src/test/java/run/halo/app/plugin/extensionpoint/DefaultExtensionGetterTest.java
new file mode 100644
index 0000000..bab1b6e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/extensionpoint/DefaultExtensionGetterTest.java
@@ -0,0 +1,250 @@
+package run.halo.app.plugin.extensionpoint;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+import static run.halo.app.infra.SystemSetting.ExtensionPointEnabled.GROUP;
+
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.stream.Stream;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.pf4j.ExtensionPoint;
+import org.pf4j.PluginManager;
+import org.springframework.beans.factory.BeanFactory;
+import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.core.annotation.Order;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting.ExtensionPointEnabled;
+import run.halo.app.plugin.extensionpoint.ExtensionPointDefinition.ExtensionPointType;
+
+@ExtendWith(MockitoExtension.class)
+class DefaultExtensionGetterTest {
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @Mock
+    PluginManager pluginManager;
+
+    @Mock
+    SystemConfigurableEnvironmentFetcher configFetcher;
+
+    @Mock
+    BeanFactory beanFactory;
+
+    @InjectMocks
+    DefaultExtensionGetter getter;
+
+    @Test
+    void shouldGetExtensionBySingletonDefinitionWhenExtensionPointEnabledSet() {
+        // prepare extension point definition
+        when(client.listBy(same(ExtensionPointDefinition.class), any(ListOptions.class), any()))
+            .thenReturn(Mono.fromSupplier(() -> {
+                var epd = createExtensionPointDefinition("fake-extension-point",
+                    FakeExtensionPoint.class,
+                    ExtensionPointType.SINGLETON);
+                return new ListResult<>(List.of(epd));
+            }));
+
+        when(client.fetch(ExtensionDefinition.class, "fake-extension"))
+            .thenReturn(Mono.fromSupplier(() -> createExtensionDefinition(
+                "fake-extension",
+                FakeExtensionPointImpl.class,
+                "fake-extension-point")));
+
+        when(configFetcher.fetch(GROUP, ExtensionPointEnabled.class))
+            .thenReturn(Mono.fromSupplier(() -> {
+                var extensionPointEnabled = new ExtensionPointEnabled();
+                extensionPointEnabled.put("fake-extension-point",
+                    new LinkedHashSet<>(List.of("fake-extension")));
+                return extensionPointEnabled;
+            }));
+
+        @SuppressWarnings("unchecked")
+        ObjectProvider objectProvider = mock(ObjectProvider.class);
+        when(objectProvider.orderedStream())
+            .thenReturn(Stream.of(new FakeExtensionPointDefaultImpl()));
+        when(beanFactory.getBeanProvider(FakeExtensionPoint.class)).thenReturn(objectProvider);
+
+        var extensionImpl = new FakeExtensionPointImpl();
+        when(pluginManager.getExtensions(FakeExtensionPoint.class))
+            .thenReturn(List.of(extensionImpl));
+
+        getter.getEnabledExtensions(FakeExtensionPoint.class)
+            .as(StepVerifier::create)
+            .expectNext(extensionImpl)
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldGetDefaultSingletonDefinitionWhileExtensionPointEnabledNotSet() {
+        when(client.listBy(same(ExtensionPointDefinition.class), any(ListOptions.class), any()))
+            .thenReturn(Mono.fromSupplier(() -> {
+                var epd = createExtensionPointDefinition("fake-extension-point",
+                    FakeExtensionPoint.class,
+                    ExtensionPointType.SINGLETON);
+                return new ListResult<>(List.of(epd));
+            }));
+
+        when(configFetcher.fetch(GROUP, ExtensionPointEnabled.class))
+            .thenReturn(Mono.empty());
+
+        @SuppressWarnings("unchecked")
+        ObjectProvider objectProvider = mock(ObjectProvider.class);
+        var extensionDefaultImpl = new FakeExtensionPointDefaultImpl();
+        when(objectProvider.orderedStream())
+            .thenReturn(Stream.of(extensionDefaultImpl));
+        when(beanFactory.getBeanProvider(FakeExtensionPoint.class)).thenReturn(objectProvider);
+
+        when(pluginManager.getExtensions(FakeExtensionPoint.class))
+            .thenReturn(List.of());
+
+        getter.getEnabledExtensions(FakeExtensionPoint.class)
+            .as(StepVerifier::create)
+            .expectNext(extensionDefaultImpl)
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldGetMultiInstanceExtensionWhileExtensionPointEnabledSet() {
+        // prepare extension point definition
+        when(client.listBy(same(ExtensionPointDefinition.class), any(ListOptions.class), any()))
+            .thenReturn(Mono.fromSupplier(() -> {
+                var epd = createExtensionPointDefinition("fake-extension-point",
+                    FakeExtensionPoint.class,
+                    ExtensionPointType.MULTI_INSTANCE);
+                return new ListResult<>(List.of(epd));
+            }));
+
+        when(client.fetch(ExtensionDefinition.class, "fake-extension"))
+            .thenReturn(Mono.fromSupplier(() -> createExtensionDefinition(
+                "fake-extension",
+                FakeExtensionPointImpl.class,
+                "fake-extension-point")));
+
+        when(client.fetch(ExtensionDefinition.class, "default-fake-extension"))
+            .thenReturn(Mono.fromSupplier(() -> createExtensionDefinition(
+                "default-fake-extension",
+                FakeExtensionPointDefaultImpl.class,
+                "fake-extension-point")));
+
+        when(configFetcher.fetch(GROUP, ExtensionPointEnabled.class))
+            .thenReturn(Mono.fromSupplier(() -> {
+                var extensionPointEnabled = new ExtensionPointEnabled();
+                extensionPointEnabled.put("fake-extension-point",
+                    new LinkedHashSet<>(List.of("default-fake-extension", "fake-extension")));
+                return extensionPointEnabled;
+            }));
+
+        @SuppressWarnings("unchecked")
+        ObjectProvider objectProvider = mock(ObjectProvider.class);
+        var extensionDefaultImpl = new FakeExtensionPointDefaultImpl();
+        when(objectProvider.orderedStream())
+            .thenReturn(Stream.of(extensionDefaultImpl));
+        when(beanFactory.getBeanProvider(FakeExtensionPoint.class)).thenReturn(objectProvider);
+
+        var extensionImpl = new FakeExtensionPointImpl();
+        var anotherExtensionImpl = new FakeExtensionPoint() {
+        };
+        when(pluginManager.getExtensions(FakeExtensionPoint.class))
+            .thenReturn(List.of(extensionImpl, anotherExtensionImpl));
+
+        getter.getEnabledExtensions(FakeExtensionPoint.class)
+            .as(StepVerifier::create)
+            // should keep the order of enabled extensions
+            .expectNext(extensionDefaultImpl)
+            .expectNext(extensionImpl)
+            .verifyComplete();
+    }
+
+
+    @Test
+    void shouldGetMultiInstanceExtensionWhileExtensionPointEnabledNotSet() {
+        // prepare extension point definition
+        when(client.listBy(same(ExtensionPointDefinition.class), any(ListOptions.class), any()))
+            .thenReturn(Mono.fromSupplier(() -> {
+                var epd = createExtensionPointDefinition("fake-extension-point",
+                    FakeExtensionPoint.class,
+                    ExtensionPointType.MULTI_INSTANCE);
+                return new ListResult<>(List.of(epd));
+            }));
+
+        when(configFetcher.fetch(GROUP, ExtensionPointEnabled.class))
+            .thenReturn(Mono.empty());
+
+        @SuppressWarnings("unchecked")
+        ObjectProvider objectProvider = mock(ObjectProvider.class);
+        var extensionDefaultImpl = new FakeExtensionPointDefaultImpl();
+        when(objectProvider.orderedStream())
+            .thenReturn(Stream.of(extensionDefaultImpl));
+        when(beanFactory.getBeanProvider(FakeExtensionPoint.class)).thenReturn(objectProvider);
+
+        var extensionImpl = new FakeExtensionPointImpl();
+        var anotherExtensionImpl = new FakeExtensionPoint() {
+        };
+        when(pluginManager.getExtensions(FakeExtensionPoint.class))
+            .thenReturn(List.of(extensionImpl, anotherExtensionImpl));
+
+        getter.getEnabledExtensions(FakeExtensionPoint.class)
+            .as(StepVerifier::create)
+            // should keep the order according to @Order annotation
+            // order is 1
+            .expectNext(extensionImpl)
+            // order is 2
+            .expectNext(extensionDefaultImpl)
+            // order is not set
+            .expectNext(anotherExtensionImpl)
+            .verifyComplete();
+    }
+
+    interface FakeExtensionPoint extends ExtensionPoint {
+
+    }
+
+    @Order(1)
+    static class FakeExtensionPointImpl implements FakeExtensionPoint {
+    }
+
+    @Order(2)
+    static class FakeExtensionPointDefaultImpl implements FakeExtensionPoint {
+    }
+
+    ExtensionDefinition createExtensionDefinition(String name, Class clazz, String epdName) {
+        var ed = new ExtensionDefinition();
+        var metadata = new Metadata();
+        metadata.setName(name);
+        ed.setMetadata(metadata);
+        var spec = new ExtensionDefinition.ExtensionSpec();
+        spec.setClassName(clazz.getName());
+        spec.setExtensionPointName(epdName);
+        ed.setSpec(spec);
+        return ed;
+    }
+
+    ExtensionPointDefinition createExtensionPointDefinition(String name,
+        Class clazz,
+        ExtensionPointType type) {
+        var epd = new ExtensionPointDefinition();
+        var metadata = new Metadata();
+        metadata.setName(name);
+        epd.setMetadata(metadata);
+        var spec = new ExtensionPointDefinition.ExtensionPointSpec();
+        spec.setClassName(clazz.getName());
+        spec.setType(type);
+        epd.setSpec(spec);
+        return epd;
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/plugin/resources/BundleResourceUtilsTest.java b/application/src/test/java/run/halo/app/plugin/resources/BundleResourceUtilsTest.java
new file mode 100644
index 0000000..a69801c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/resources/BundleResourceUtilsTest.java
@@ -0,0 +1,67 @@
+package run.halo.app.plugin.resources;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+
+import java.net.MalformedURLException;
+import java.net.URL;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.Mockito;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.pf4j.PluginClassLoader;
+import org.pf4j.PluginWrapper;
+import org.springframework.core.io.Resource;
+import run.halo.app.infra.exception.AccessDeniedException;
+import run.halo.app.plugin.HaloPluginManager;
+
+/**
+ * Tests for {@link BundleResourceUtils}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class BundleResourceUtilsTest {
+
+    @Mock
+    private HaloPluginManager pluginManager;
+
+    @BeforeEach
+    void setUp() throws MalformedURLException {
+        PluginWrapper pluginWrapper = Mockito.mock(PluginWrapper.class);
+        PluginClassLoader pluginClassLoader = Mockito.mock(PluginClassLoader.class);
+        lenient().when(pluginWrapper.getPluginClassLoader()).thenReturn(pluginClassLoader);
+        lenient().when(pluginManager.getPlugin(eq("fake-plugin"))).thenReturn(pluginWrapper);
+
+        lenient().when(pluginClassLoader.getResource(eq("console/main.js"))).thenReturn(
+            new URL("file://console/main.js"));
+        lenient().when(pluginClassLoader.getResource(eq("console/style.css"))).thenReturn(
+            new URL("file://console/style.css"));
+    }
+
+    @Test
+    void getJsBundleResource() {
+        Resource jsBundleResource =
+            BundleResourceUtils.getJsBundleResource(pluginManager, "fake-plugin", "main.js");
+        assertThat(jsBundleResource).isNotNull();
+        assertThat(jsBundleResource.exists()).isTrue();
+
+        jsBundleResource =
+            BundleResourceUtils.getJsBundleResource(pluginManager, "fake-plugin", "test.js");
+        assertThat(jsBundleResource).isNull();
+
+        jsBundleResource =
+            BundleResourceUtils.getJsBundleResource(pluginManager, "nothing-plugin", "main.js");
+        assertThat(jsBundleResource).isNull();
+
+        assertThatThrownBy(() -> {
+            BundleResourceUtils.getJsBundleResource(pluginManager, "fake-plugin",
+                "../test/main.js");
+        }).isInstanceOf(AccessDeniedException.class);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionFactoryTest.java b/application/src/test/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionFactoryTest.java
new file mode 100644
index 0000000..8072c04
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionFactoryTest.java
@@ -0,0 +1,132 @@
+package run.halo.app.plugin.resources;
+
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.mockito.Mockito.when;
+
+import java.io.FileNotFoundException;
+import java.net.URL;
+import java.net.URLClassLoader;
+import java.time.Duration;
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.Assertions;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Mockito;
+import org.mockito.Spy;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.pf4j.PluginManager;
+import org.pf4j.PluginWrapper;
+import org.springframework.boot.autoconfigure.web.WebProperties;
+import org.springframework.context.ApplicationContext;
+import org.springframework.http.CacheControl;
+import org.springframework.http.HttpHeaders;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.util.ResourceUtils;
+import run.halo.app.core.extension.ReverseProxy;
+import run.halo.app.core.extension.ReverseProxy.FileReverseProxyProvider;
+import run.halo.app.core.extension.ReverseProxy.ReverseProxyRule;
+import run.halo.app.extension.Metadata;
+import run.halo.app.plugin.PluginConst;
+
+/**
+ * Tests for {@link ReverseProxyRouterFunctionFactory}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ReverseProxyRouterFunctionFactoryTest {
+
+    @Mock
+    private PluginManager pluginManager;
+
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Spy
+    WebProperties webProperties = new WebProperties();
+
+    @InjectMocks
+    private ReverseProxyRouterFunctionFactory factory;
+
+    @Test
+    void shouldProxyStaticResourceWithCacheControl() throws FileNotFoundException {
+        var cache = webProperties.getResources().getCache();
+        cache.setUseLastModified(true);
+        cache.getCachecontrol().setMaxAge(Duration.ofDays(7));
+
+        var routerFunction = factory.create(mockReverseProxy(), "fakeA");
+        assertNotNull(routerFunction);
+        var webClient = WebTestClient.bindToRouterFunction(routerFunction).build();
+
+        var pluginWrapper = Mockito.mock(PluginWrapper.class);
+        var pluginRoot = ResourceUtils.getURL("classpath:plugin/plugin-for-reverseproxy/");
+        var classLoader = new URLClassLoader(new URL[] {pluginRoot});
+        when(pluginWrapper.getPluginClassLoader()).thenReturn(classLoader);
+        when(pluginManager.getPlugin("fakeA")).thenReturn(pluginWrapper);
+
+        webClient.get().uri("/plugins/fakeA/assets/static/test.txt")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().cacheControl(CacheControl.maxAge(Duration.ofDays(7)))
+            .expectHeader().value(HttpHeaders.LAST_MODIFIED, Assertions::assertNotNull)
+            .expectBody(String.class).isEqualTo("Fake content.");
+    }
+
+    @Test
+    void shouldProxyStaticResourceWithoutLastModified() throws FileNotFoundException {
+        var cache = webProperties.getResources().getCache();
+        cache.setUseLastModified(false);
+        cache.getCachecontrol().setMaxAge(Duration.ofDays(7));
+
+        var routerFunction = factory.create(mockReverseProxy(), "fakeA");
+        assertNotNull(routerFunction);
+        var webClient = WebTestClient.bindToRouterFunction(routerFunction).build();
+
+        var pluginWrapper = Mockito.mock(PluginWrapper.class);
+        var pluginRoot = ResourceUtils.getURL("classpath:plugin/plugin-for-reverseproxy/");
+        var classLoader = new URLClassLoader(new URL[] {pluginRoot});
+        when(pluginWrapper.getPluginClassLoader()).thenReturn(classLoader);
+        when(pluginManager.getPlugin("fakeA")).thenReturn(pluginWrapper);
+
+        webClient.get().uri("/plugins/fakeA/assets/static/test.txt")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().cacheControl(CacheControl.maxAge(Duration.ofDays(7)))
+            .expectHeader().lastModified(-1)
+            .expectBody(String.class).isEqualTo("Fake content.");
+    }
+
+    @Test
+    void shouldReturnNotFoundIfResourceNotFound() throws FileNotFoundException {
+        var routerFunction = factory.create(mockReverseProxy(), "fakeA");
+        assertNotNull(routerFunction);
+        var webClient = WebTestClient.bindToRouterFunction(routerFunction).build();
+
+        var pluginWrapper = Mockito.mock(PluginWrapper.class);
+        var pluginRoot = ResourceUtils.getURL("classpath:plugin/plugin-for-reverseproxy/");
+        var classLoader = new URLClassLoader(new URL[] {pluginRoot});
+        when(pluginWrapper.getPluginClassLoader()).thenReturn(classLoader);
+        when(pluginManager.getPlugin("fakeA")).thenReturn(pluginWrapper);
+
+        webClient.get().uri("/plugins/fakeA/assets/static/non-existing-file.txt")
+            .exchange()
+            .expectHeader().cacheControl(CacheControl.empty())
+            .expectStatus().isNotFound();
+    }
+
+    private ReverseProxy mockReverseProxy() {
+        var reverseProxyRule = new ReverseProxyRule("/static/**",
+            new FileReverseProxyProvider("static", ""));
+        var reverseProxy = new ReverseProxy();
+        var metadata = new Metadata();
+        metadata.setLabels(
+            Map.of(PluginConst.PLUGIN_NAME_LABEL_NAME, "fakeA"));
+        reverseProxy.setMetadata(metadata);
+        reverseProxy.setRules(List.of(reverseProxyRule));
+        return reverseProxy;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionRegistryTest.java b/application/src/test/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionRegistryTest.java
new file mode 100644
index 0000000..4d9d007
--- /dev/null
+++ b/application/src/test/java/run/halo/app/plugin/resources/ReverseProxyRouterFunctionRegistryTest.java
@@ -0,0 +1,76 @@
+package run.halo.app.plugin.resources;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Mockito;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.ReverseProxy;
+import run.halo.app.extension.Metadata;
+import run.halo.app.plugin.PluginRouterFunctionRegistry;
+
+/**
+ * Tests for {@link ReverseProxyRouterFunctionRegistry}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ReverseProxyRouterFunctionRegistryTest {
+
+    @InjectMocks
+    ReverseProxyRouterFunctionRegistry registry;
+
+    @Mock
+    ReverseProxyRouterFunctionFactory reverseProxyRouterFunctionFactory;
+
+    @Mock
+    PluginRouterFunctionRegistry pluginRouterFunctionRegistry;
+
+    @Test
+    void register() {
+        ReverseProxy mock = getMockReverseProxy();
+        registry.register("fake-plugin", mock);
+
+        assertThat(registry.reverseProxySize("fake-plugin")).isEqualTo(1);
+
+        // repeat register a same reverse proxy
+        registry.register("fake-plugin", mock);
+
+        assertThat(registry.reverseProxySize("fake-plugin")).isEqualTo(1);
+
+        verify(reverseProxyRouterFunctionFactory, times(2)).create(any(), any());
+    }
+
+    @Test
+    void removeByKeyValue() {
+        ReverseProxy mock = getMockReverseProxy();
+        registry.register("fake-plugin", mock);
+
+        registry.remove("fake-plugin", "test-reverse-proxy");
+
+        assertThat(registry.reverseProxySize("fake-plugin")).isEqualTo(0);
+    }
+
+    private ReverseProxy getMockReverseProxy() {
+        ReverseProxy mock = Mockito.mock(ReverseProxy.class);
+        Metadata metadata = new Metadata();
+        metadata.setName("test-reverse-proxy");
+        when(mock.getMetadata()).thenReturn(metadata);
+        RouterFunction routerFunction = request -> Mono.empty();
+
+        when(reverseProxyRouterFunctionFactory.create(any(), any()))
+            .thenReturn(routerFunction);
+        return mock;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/search/HaloDocumentEventsListenerTest.java b/application/src/test/java/run/halo/app/search/HaloDocumentEventsListenerTest.java
new file mode 100644
index 0000000..8721fc8
--- /dev/null
+++ b/application/src/test/java/run/halo/app/search/HaloDocumentEventsListenerTest.java
@@ -0,0 +1,84 @@
+package run.halo.app.search;
+
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+import run.halo.app.search.event.HaloDocumentAddRequestEvent;
+import run.halo.app.search.event.HaloDocumentDeleteRequestEvent;
+import run.halo.app.search.event.HaloDocumentRebuildRequestEvent;
+
+@ExtendWith(MockitoExtension.class)
+class HaloDocumentEventsListenerTest {
+
+    @Mock
+    ExtensionGetter extensionGetter;
+
+    @InjectMocks
+    HaloDocumentEventsListener listener;
+
+    @Test
+    void shouldRebuildIndicesWhenReceivingRebuildRequestEvent() {
+        listener.setBufferSize(1);
+        var searchEngine = mock(SearchEngine.class);
+        when(searchEngine.available()).thenReturn(true);
+        when(extensionGetter.getEnabledExtension(SearchEngine.class))
+            .thenReturn(Mono.just(searchEngine));
+        var docsProvider = mock(HaloDocumentsProvider.class);
+
+        var docs = List.of(new HaloDocument(), new HaloDocument(), new HaloDocument());
+
+        when(docsProvider.fetchAll()).thenReturn(Flux.fromIterable(docs));
+        when(extensionGetter.getExtensions(HaloDocumentsProvider.class))
+            .thenReturn(Flux.just(docsProvider));
+        listener.onApplicationEvent(new HaloDocumentRebuildRequestEvent(this));
+        verify(searchEngine, times(3)).addOrUpdate(any());
+    }
+
+    @Test
+    void shouldAddDocsWhenReceivingAddRequestEvent() {
+        var searchEngine = mock(SearchEngine.class);
+        when(searchEngine.available()).thenReturn(true);
+        when(extensionGetter.getEnabledExtension(SearchEngine.class))
+            .thenReturn(Mono.just(searchEngine));
+        var docs = List.of(new HaloDocument());
+        listener.onApplicationEvent(new HaloDocumentAddRequestEvent(this, docs));
+        verify(searchEngine).addOrUpdate(docs);
+    }
+
+    @Test
+    void shouldDeleteDocsWhenReceivingDeleteRequestEvent() {
+        var searchEngine = mock(SearchEngine.class);
+        when(searchEngine.available()).thenReturn(true);
+        when(extensionGetter.getEnabledExtension(SearchEngine.class))
+            .thenReturn(Mono.just(searchEngine));
+        var docIds = List.of("1", "2", "3");
+        listener.onApplicationEvent(new HaloDocumentDeleteRequestEvent(this, docIds));
+        verify(searchEngine).deleteDocument(docIds);
+    }
+
+    @Test
+    void shouldFailWhenSearchEngineIsUnavailable() {
+        var searchEngine = mock(SearchEngine.class);
+        when(searchEngine.available()).thenReturn(false);
+        when(extensionGetter.getEnabledExtension(SearchEngine.class))
+            .thenReturn(Mono.just(searchEngine));
+        assertThrows(
+            SearchEngineUnavailableException.class,
+            () -> listener.onApplicationEvent(new HaloDocumentRebuildRequestEvent(this))
+        );
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/search/IndexEndpointTest.java b/application/src/test/java/run/halo/app/search/IndexEndpointTest.java
new file mode 100644
index 0000000..e77e190
--- /dev/null
+++ b/application/src/test/java/run/halo/app/search/IndexEndpointTest.java
@@ -0,0 +1,126 @@
+package run.halo.app.search;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.validation.Errors;
+import org.springframework.web.reactive.function.server.HandlerStrategies;
+import org.springframework.web.server.handler.ResponseStatusExceptionHandler;
+import reactor.core.publisher.Mono;
+import run.halo.app.infra.exception.RequestBodyValidationException;
+
+@ExtendWith(MockitoExtension.class)
+class IndexEndpointTest {
+
+    @Mock
+    SearchService searchService;
+
+    @InjectMocks
+    IndexEndpoint endpoint;
+
+    WebTestClient client;
+
+    @BeforeEach
+    void setUp() {
+        client = WebTestClient.bindToRouterFunction(endpoint.endpoint())
+            .handlerStrategies(HandlerStrategies.builder()
+                .exceptionHandler(new ResponseStatusExceptionHandler())
+                .build())
+            .build();
+    }
+
+    @Test
+    void shouldResponseBadRequestIfNotRequestBody() {
+        client.post().uri("/indices/-/search")
+            .exchange()
+            .expectStatus().isBadRequest();
+    }
+
+    @Test
+    void shouldResponseBadRequestIfRequestBodyValidationFailed() {
+        var option = new SearchOption();
+        var errors = mock(Errors.class);
+        when(searchService.search(any(SearchOption.class)))
+            .thenReturn(Mono.error(new RequestBodyValidationException(errors)));
+
+        client.post().uri("/indices/-/search")
+            .bodyValue(option)
+            .exchange()
+            .expectStatus().isBadRequest();
+    }
+
+    @Test
+    void shouldSearchCorrectly() {
+        var option = new SearchOption();
+        option.setKeyword("halo");
+        var searchResult = new SearchResult();
+        when(searchService.search(any(SearchOption.class))).thenReturn(Mono.just(searchResult));
+
+        client.post().uri("/indices/-/search")
+            .bodyValue(option)
+            .exchange()
+            .expectStatus().isOk()
+            .expectBody(SearchResult.class)
+            .isEqualTo(searchResult);
+
+        verify(searchService).search(assertArg(o -> {
+            assertEquals("halo", o.getKeyword());
+            // make sure the filters are overwritten
+            assertTrue(o.getFilterExposed());
+            assertTrue(o.getFilterPublished());
+            assertFalse(o.getFilterRecycled());
+        }));
+    }
+
+    @Test
+    void shouldBeCompatibleWithOldSearchApi() {
+        var searchResult = new SearchResult();
+        when(searchService.search(any(SearchOption.class)))
+            .thenReturn(Mono.just(searchResult));
+
+        client.get().uri(uriBuilder -> uriBuilder.path("/indices/post")
+                .queryParam("keyword", "halo")
+                .build())
+            .exchange()
+            .expectStatus().isOk()
+            .expectBody(SearchResult.class)
+            .isEqualTo(searchResult);
+
+        verify(searchService).search(assertArg(o -> {
+            assertEquals("halo", o.getKeyword());
+            // make sure the filters are overwritten
+            assertTrue(o.getFilterExposed());
+            assertTrue(o.getFilterPublished());
+            assertFalse(o.getFilterRecycled());
+        }));
+    }
+
+    @Test
+    void shouldFailWhenSearchEngineIsUnavailable() {
+        when(searchService.search(any(SearchOption.class)))
+            .thenReturn(Mono.error(new SearchEngineUnavailableException()));
+
+        client.post().uri("/indices/-/search")
+            .bodyValue(new SearchOption())
+            .exchange()
+            .expectStatus().is4xxClientError();
+    }
+
+    @Test
+    void ensureGroupVersionNotModified() {
+        assertEquals("api.halo.run/v1alpha1", endpoint.groupVersion().toString());
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/search/IndicesEndpointTest.java b/application/src/test/java/run/halo/app/search/IndicesEndpointTest.java
new file mode 100644
index 0000000..48f1ea2
--- /dev/null
+++ b/application/src/test/java/run/halo/app/search/IndicesEndpointTest.java
@@ -0,0 +1,52 @@
+package run.halo.app.search;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertInstanceOf;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.Mockito.verify;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.params.ParameterizedTest;
+import org.junit.jupiter.params.provider.ValueSource;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationEventPublisher;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import run.halo.app.search.event.HaloDocumentRebuildRequestEvent;
+
+@ExtendWith(MockitoExtension.class)
+class IndicesEndpointTest {
+
+    @Mock
+    ApplicationEventPublisher publisher;
+
+    @InjectMocks
+    IndicesEndpoint endpoint;
+
+    WebTestClient client;
+
+    @BeforeEach
+    void setUp() {
+        client = WebTestClient.bindToRouterFunction(endpoint.endpoint()).build();
+    }
+
+    @ParameterizedTest
+    @ValueSource(strings = {"/indices/-/rebuild", "/indices/post"})
+    void shouldRebuildIndices(String uri) {
+        client.post().uri(uri)
+            .exchange()
+            .expectStatus().isAccepted();
+        verify(publisher).publishEvent(assertArg(event -> {
+            assertInstanceOf(HaloDocumentRebuildRequestEvent.class, event);
+            assertEquals(endpoint, event.getSource());
+        }));
+    }
+
+    @Test
+    void ensureGroupVersionNotChanged() {
+        assertEquals("api.console.halo.run/v1alpha1", endpoint.groupVersion().toString());
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/search/SearchServiceImplTest.java b/application/src/test/java/run/halo/app/search/SearchServiceImplTest.java
new file mode 100644
index 0000000..53325fa
--- /dev/null
+++ b/application/src/test/java/run/halo/app/search/SearchServiceImplTest.java
@@ -0,0 +1,106 @@
+package run.halo.app.search;
+
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.validation.Errors;
+import org.springframework.validation.Validator;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.infra.exception.RequestBodyValidationException;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+
+@ExtendWith(MockitoExtension.class)
+class SearchServiceImplTest {
+
+    @Mock
+    Validator validator;
+
+    @Mock
+    ExtensionGetter extensionGetter;
+
+    @InjectMocks
+    SearchServiceImpl searchService;
+
+    @Test
+    void shouldThrowValidationErrorIfOptionIsInvalid() {
+        var option = new SearchOption();
+        option.setKeyword("halo");
+
+        var errors = mock(Errors.class);
+        when(errors.hasErrors()).thenReturn(true);
+        when(validator.validateObject(option)).thenReturn(errors);
+
+        searchService.search(option)
+            .as(StepVerifier::create)
+            .expectError(RequestBodyValidationException.class)
+            .verify();
+    }
+
+    @Test
+    void shouldThrowSearchEngineUnavailableExceptionIfNoSearchEngineFound() {
+        var option = new SearchOption();
+        option.setKeyword("halo");
+
+        var errors = mock(Errors.class);
+        when(errors.hasErrors()).thenReturn(false);
+        when(validator.validateObject(option)).thenReturn(errors);
+
+        when(extensionGetter.getEnabledExtension(SearchEngine.class)).thenReturn(Mono.empty());
+
+        searchService.search(option)
+            .as(StepVerifier::create)
+            .expectError(SearchEngineUnavailableException.class)
+            .verify();
+    }
+
+    @Test
+    void shouldThrowSearchEngineUnavailableExceptionIfNoSearchEngineAvailable() {
+        var option = new SearchOption();
+        option.setKeyword("halo");
+
+        var errors = mock(Errors.class);
+        when(errors.hasErrors()).thenReturn(false);
+        when(validator.validateObject(option)).thenReturn(errors);
+
+        when(extensionGetter.getEnabledExtension(SearchEngine.class))
+            .thenAnswer(invocation -> Mono.fromSupplier(() -> {
+                var searchEngine = mock(SearchEngine.class);
+                when(searchEngine.available()).thenReturn(false);
+                return searchEngine;
+            }));
+
+        searchService.search(option)
+            .as(StepVerifier::create)
+            .expectError(SearchEngineUnavailableException.class);
+    }
+
+    @Test
+    void shouldSearch() {
+        var option = new SearchOption();
+        option.setKeyword("halo");
+
+        var errors = mock(Errors.class);
+        when(errors.hasErrors()).thenReturn(false);
+        when(validator.validateObject(option)).thenReturn(errors);
+
+        var searchResult = mock(SearchResult.class);
+        when(extensionGetter.getEnabledExtension(SearchEngine.class))
+            .thenAnswer(invocation -> Mono.fromSupplier(() -> {
+                var searchEngine = mock(SearchEngine.class);
+                when(searchEngine.available()).thenReturn(true);
+                when(searchEngine.search(option)).thenReturn(searchResult);
+                return searchEngine;
+            }));
+
+        searchService.search(option)
+            .as(StepVerifier::create)
+            .expectNext(searchResult)
+            .verifyComplete();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/search/lucene/LuceneSearchEngineIntegrationTest.java b/application/src/test/java/run/halo/app/search/lucene/LuceneSearchEngineIntegrationTest.java
new file mode 100644
index 0000000..9437af0
--- /dev/null
+++ b/application/src/test/java/run/halo/app/search/lucene/LuceneSearchEngineIntegrationTest.java
@@ -0,0 +1,245 @@
+package run.halo.app.search.lucene;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static run.halo.app.core.extension.content.Post.VisibleEnum.PRIVATE;
+import static run.halo.app.core.extension.content.Post.VisibleEnum.PUBLIC;
+
+import java.time.Duration;
+import java.util.List;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.opentest4j.AssertionFailedError;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.dao.OptimisticLockingFailureException;
+import org.springframework.retry.support.RetryTemplateBuilder;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.annotation.DirtiesContext;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.test.StepVerifier;
+import reactor.util.retry.Retry;
+import run.halo.app.content.Content;
+import run.halo.app.content.ContentUpdateParam;
+import run.halo.app.content.PostRequest;
+import run.halo.app.content.PostService;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.AnonymousUserConst;
+import run.halo.app.search.SearchEngine;
+import run.halo.app.search.SearchOption;
+import run.halo.app.search.SearchResult;
+
+@DirtiesContext
+@SpringBootTest(properties = {
+    "halo.search-engine.lucene.enabled=true",
+    "halo.extension.controller.disabled=false"})
+@AutoConfigureWebTestClient
+public class LuceneSearchEngineIntegrationTest {
+
+    @Autowired
+    WebTestClient webClient;
+
+    @Autowired
+    PostService postService;
+
+    @Autowired
+    ReactiveExtensionClient client;
+
+    @Autowired
+    SearchEngine searchEngine;
+
+    @BeforeEach
+    @AfterEach
+    void cleanUp() {
+        searchEngine.deleteAll();
+    }
+
+    @Test
+    @WithMockUser(username = "admin", roles = AnonymousUserConst.Role)
+    void shouldSearchPostAfterPostPublished() {
+        var postName = "first-post";
+        assertNoResult(1);
+        createPost(postName);
+        assertHasResult(5);
+        unpublishPost(postName);
+        assertNoResult(5);
+        publishPost(postName);
+        assertHasResult(5);
+        privatePost(postName);
+        assertNoResult(5);
+        publicPost(postName);
+        assertHasResult(5);
+        recyclePost(postName);
+        assertNoResult(5);
+        recoverPost(postName);
+        assertHasResult(5);
+        deletePostPermanently(postName);
+        assertNoResult(5);
+    }
+
+    void assertHasResult(int maxAttempts) {
+        var retryTemplate = new RetryTemplateBuilder()
+            .exponentialBackoff(Duration.ofMillis(200), 2.0, Duration.ofSeconds(10))
+            .maxAttempts(maxAttempts)
+            .retryOn(AssertionFailedError.class)
+            .build();
+        var option = new SearchOption();
+        option.setKeyword("halo");
+        option.setHighlightPreTag("");
+        option.setHighlightPostTag("");
+        retryTemplate.execute(context -> {
+            webClient.post().uri("/apis/api.halo.run/v1alpha1/indices/-/search")
+                .bodyValue(option)
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(SearchResult.class).value(result -> {
+                    assertEquals(1, result.getTotal());
+                    assertEquals("halo", result.getKeyword());
+                    var hits = result.getHits();
+                    assertEquals(1, hits.size());
+                    var doc = hits.get(0);
+                    assertEquals("post.content.halo.run-first-post", doc.getId());
+                    assertEquals("post.content.halo.run", doc.getType());
+                    assertEquals("first halo post", doc.getTitle());
+                    assertNull(doc.getDescription());
+                    assertEquals("halo", doc.getContent());
+                });
+            return null;
+        });
+    }
+
+    void assertNoResult(int maxAttempts) {
+        var retryTemplate = new RetryTemplateBuilder()
+            .exponentialBackoff(Duration.ofMillis(200), 2.0, Duration.ofSeconds(10))
+            .maxAttempts(maxAttempts)
+            .retryOn(AssertionFailedError.class)
+            .build();
+
+        var option = new SearchOption();
+        option.setKeyword("halo");
+        option.setHighlightPreTag("");
+        option.setHighlightPostTag("");
+        option.setIncludeTagNames(List.of("search"));
+        option.setIncludeCategoryNames(List.of("halo"));
+        option.setIncludeOwnerNames(List.of("admin"));
+        retryTemplate.execute(context -> {
+            webClient.post().uri("/apis/api.halo.run/v1alpha1/indices/-/search")
+                .bodyValue(option)
+                .exchange()
+                .expectStatus().isOk()
+                .expectBody(SearchResult.class).value(result -> {
+                    assertEquals(0, result.getTotal());
+                    assertEquals("halo", result.getKeyword());
+                });
+            return null;
+        });
+    }
+
+    void deletePostPermanently(String postName) {
+        client.get(Post.class, postName)
+            .flatMap(client::delete)
+            .retryWhen(optimisticLockRetry())
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    void recoverPost(String postName) {
+        client.get(Post.class, postName)
+            .doOnNext(post -> post.getSpec().setDeleted(false))
+            .flatMap(client::update)
+            .retryWhen(optimisticLockRetry())
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    void recyclePost(String postName) {
+        client.get(Post.class, postName)
+            .doOnNext(post -> post.getSpec().setDeleted(true))
+            .flatMap(client::update)
+            .retryWhen(optimisticLockRetry())
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    void publicPost(String postName) {
+        client.get(Post.class, postName)
+            .doOnNext(post -> post.getSpec().setVisible(PUBLIC))
+            .flatMap(client::update)
+            .retryWhen(optimisticLockRetry())
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    void privatePost(String postName) {
+        client.get(Post.class, postName)
+            .doOnNext(post -> post.getSpec().setVisible(PRIVATE))
+            .flatMap(client::update)
+            .retryWhen(optimisticLockRetry())
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    void publishPost(String postName) {
+        client.get(Post.class, postName)
+            .flatMap(postService::publish)
+            .retryWhen(optimisticLockRetry())
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    void unpublishPost(String postName) {
+        client.get(Post.class, postName)
+            .flatMap(postService::unpublish)
+            .retryWhen(optimisticLockRetry())
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    void createPost(String postName) {
+        var post = new Post();
+        var metadata = new Metadata();
+        post.setMetadata(metadata);
+        metadata.setName(postName);
+        var spec = new Post.PostSpec();
+        post.setSpec(spec);
+        spec.setPublish(true);
+        spec.setOwner("admin");
+        spec.setTitle("first halo post");
+        spec.setVisible(PUBLIC);
+        spec.setAllowComment(true);
+        spec.setPinned(false);
+        spec.setPriority(0);
+        spec.setSlug("/first-post");
+        spec.setDeleted(false);
+        spec.setTags(List.of("search"));
+        spec.setCategories(List.of("halo"));
+        var excerpt = new Post.Excerpt();
+        excerpt.setRaw("first post description");
+        excerpt.setAutoGenerate(false);
+        spec.setExcerpt(excerpt);
+        var content = new Content("halo", "halo", "Markdown");
+        var contentParam = ContentUpdateParam.from(content);
+        var postRequest = new PostRequest(post, contentParam);
+        postService.draftPost(postRequest)
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    Retry optimisticLockRetry() {
+        return Retry.backoff(5, Duration.ofMillis(100))
+            .filter(OptimisticLockingFailureException.class::isInstance);
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/search/lucene/LuceneSearchEngineTest.java b/application/src/test/java/run/halo/app/search/lucene/LuceneSearchEngineTest.java
new file mode 100644
index 0000000..4e73d00
--- /dev/null
+++ b/application/src/test/java/run/halo/app/search/lucene/LuceneSearchEngineTest.java
@@ -0,0 +1,185 @@
+package run.halo.app.search.lucene;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertInstanceOf;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doThrow;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.io.IOException;
+import java.nio.file.Path;
+import java.time.Instant;
+import java.util.List;
+import java.util.Map;
+import org.apache.lucene.analysis.Analyzer;
+import org.apache.lucene.analysis.standard.StandardAnalyzer;
+import org.apache.lucene.document.Document;
+import org.apache.lucene.index.IndexWriter;
+import org.apache.lucene.index.StoredFields;
+import org.apache.lucene.search.IndexSearcher;
+import org.apache.lucene.search.Query;
+import org.apache.lucene.search.ScoreDoc;
+import org.apache.lucene.search.SearcherManager;
+import org.apache.lucene.search.Sort;
+import org.apache.lucene.search.TopFieldDocs;
+import org.apache.lucene.search.TotalHits;
+import org.apache.lucene.store.Directory;
+import org.assertj.core.util.Streams;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.search.HaloDocument;
+import run.halo.app.search.SearchOption;
+
+@ExtendWith(MockitoExtension.class)
+class LuceneSearchEngineTest {
+
+    @Mock
+    IndexWriter indexWriter;
+
+    @Mock
+    SearcherManager searcherManager;
+
+    @Mock
+    Directory directory;
+
+    @Mock
+    Analyzer analyzer;
+
+    LuceneSearchEngine searchEngine;
+
+    @TempDir
+    Path tempDir;
+
+    @BeforeEach
+    void setUp() throws Exception {
+        var searchEngine = new LuceneSearchEngine(tempDir);
+        searchEngine.setIndexWriter(indexWriter);
+        searchEngine.setDirectory(directory);
+        searchEngine.setSearcherManager(searcherManager);
+        searchEngine.setAnalyzer(analyzer);
+        this.searchEngine = searchEngine;
+    }
+
+
+    @Test
+    void shouldAddOrUpdateDocument() throws IOException {
+        var haloDoc = createFakeHaloDoc();
+        searchEngine.addOrUpdate(List.of(haloDoc));
+        verify(this.indexWriter).updateDocuments(any(Query.class), assertArg(docs -> {
+            var docList = Streams.stream(docs).toList();
+            assertEquals(1, docList.size());
+            var doc = docList.get(0);
+            assertInstanceOf(Document.class, doc);
+            var document = (Document) doc;
+            assertEquals("fake-id", document.get("id"));
+        }));
+        verify(this.searcherManager).maybeRefreshBlocking();
+        verify(this.indexWriter).commit();
+    }
+
+    @Test
+    void shouldDeleteDocument() throws IOException {
+        this.searchEngine.deleteDocument(List.of("fake-id"));
+        verify(this.indexWriter).deleteDocuments(any(Query.class));
+        verify(this.searcherManager).maybeRefreshBlocking();
+        verify(this.indexWriter).commit();
+    }
+
+    @Test
+    void shouldDeleteAll() throws IOException {
+        this.searchEngine.deleteAll();
+
+        verify(this.indexWriter).deleteAll();
+        verify(this.searcherManager).maybeRefreshBlocking();
+        verify(this.indexWriter).commit();
+    }
+
+    @Test
+    void shouldDestroy() throws Exception {
+        this.searchEngine.destroy();
+        verify(this.analyzer).close();
+        verify(this.searcherManager).close();
+        verify(this.indexWriter).close();
+        verify(this.directory).close();
+    }
+
+    @Test
+    void shouldAlwaysDestroyAllEvenErrorOccurred() throws Exception {
+        var analyzerCloseError = new IOException("analyzer close error");
+        doThrow(analyzerCloseError).when(this.analyzer).close();
+
+        var directoryCloseError = new IOException("directory close error");
+        doThrow(directoryCloseError).when(this.directory).close();
+        var e = assertThrows(IOException.class, () -> this.searchEngine.destroy());
+        assertEquals(analyzerCloseError, e);
+        assertEquals(directoryCloseError, e.getSuppressed()[0]);
+        verify(this.analyzer).close();
+        verify(this.searcherManager).close();
+        verify(this.indexWriter).close();
+        verify(this.directory).close();
+    }
+
+    @Test
+    void shouldSearch() throws IOException {
+        var searcher = mock(IndexSearcher.class);
+        when(this.searcherManager.acquire()).thenReturn(searcher);
+        this.searchEngine.setAnalyzer(new StandardAnalyzer());
+
+        var totalHits = new TotalHits(1234, TotalHits.Relation.EQUAL_TO);
+        var scoreDoc = new ScoreDoc(1, 1.0f);
+
+        var topFieldDocs = new TopFieldDocs(totalHits, new ScoreDoc[] {scoreDoc}, null);
+        when(searcher.search(any(Query.class), eq(123), any(Sort.class)))
+            .thenReturn(topFieldDocs);
+        var storedFields = mock(StoredFields.class);
+
+        var haloDoc = createFakeHaloDoc();
+        var doc = this.searchEngine.getHaloDocumentConverter().convert(haloDoc);
+        when(storedFields.document(1)).thenReturn(doc);
+        when(searcher.storedFields()).thenReturn(storedFields);
+
+        var option = new SearchOption();
+        option.setKeyword("fake");
+        option.setLimit(123);
+        option.setHighlightPreTag("");
+        option.setHighlightPostTag("");
+        var result = this.searchEngine.search(option);
+        assertEquals(1234, result.getTotal());
+        assertEquals("fake", result.getKeyword());
+        assertEquals(123, result.getLimit());
+        assertEquals(1, result.getHits().size());
+        var gotHaloDoc = result.getHits().get(0);
+        assertEquals("fake-id", gotHaloDoc.getId());
+        assertEquals("fake-title", gotHaloDoc.getTitle());
+        assertNull(gotHaloDoc.getDescription());
+        assertEquals("fake-content", gotHaloDoc.getContent());
+    }
+
+    HaloDocument createFakeHaloDoc() {
+        var haloDoc = new HaloDocument();
+        haloDoc.setId("fake-id");
+        haloDoc.setMetadataName("fake-name");
+        haloDoc.setTitle("fake-title");
+        haloDoc.setDescription(null);
+        haloDoc.setContent("fake-content");
+        haloDoc.setType("fake-type");
+        haloDoc.setOwnerName("fake-owner");
+        var now = Instant.now();
+        haloDoc.setCreationTimestamp(now);
+        haloDoc.setUpdateTimestamp(null);
+        haloDoc.setPermalink("/fake-permalink");
+        haloDoc.setAnnotations(Map.of("fake-anno-key", "fake-anno-value"));
+        return haloDoc;
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/search/post/PostEventsListenerTest.java b/application/src/test/java/run/halo/app/search/post/PostEventsListenerTest.java
new file mode 100644
index 0000000..7e8968b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/search/post/PostEventsListenerTest.java
@@ -0,0 +1,124 @@
+package run.halo.app.search.post;
+
+import static org.junit.jupiter.api.Assertions.assertInstanceOf;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.assertArg;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationEventPublisher;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.content.ContentWrapper;
+import run.halo.app.content.PostService;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.event.post.PostDeletedEvent;
+import run.halo.app.event.post.PostUpdatedEvent;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.search.event.HaloDocumentAddRequestEvent;
+import run.halo.app.search.event.HaloDocumentDeleteRequestEvent;
+
+@ExtendWith(MockitoExtension.class)
+class PostEventsListenerTest {
+
+    @Mock
+    ApplicationEventPublisher publisher;
+
+    @Mock
+    PostService postService;
+
+    @Mock
+    ReactiveExtensionClient client;
+
+    @InjectMocks
+    PostEventsListener listener;
+
+    @Nested
+    class PostUpdatedEventTest {
+
+        @Test
+        void shouldDoNothingIfPostIsDeleted() {
+            when(client.fetch(Post.class, "fake-post"))
+                .thenReturn(Mono.empty());
+            var event = new PostUpdatedEvent(this, "fake-post");
+            listener.onApplicationEvent(event)
+                .as(StepVerifier::create)
+                .verifyComplete();
+
+            verify(publisher, never()).publishEvent(any());
+        }
+
+        @Test
+        void shouldRequestDeleteWhilePostIsDeleting() {
+            var post = new Post();
+            var metadata = new Metadata();
+            metadata.setName("fake-post");
+            metadata.setDeletionTimestamp(Instant.now());
+            post.setMetadata(metadata);
+            when(client.fetch(Post.class, "fake-post"))
+                .thenReturn(Mono.just(post));
+            var event = new PostUpdatedEvent(this, "fake-post");
+            listener.onApplicationEvent(event)
+                .as(StepVerifier::create)
+                .verifyComplete();
+
+            verify(publisher).publishEvent(
+                assertArg(e -> assertInstanceOf(HaloDocumentDeleteRequestEvent.class, e))
+            );
+        }
+
+        @Test
+        void shouldRequestAddWhilePostIsNotDeleted() {
+            var post = new Post();
+            var metadata = new Metadata();
+            metadata.setName("fake-post");
+            post.setMetadata(metadata);
+            var spec = new Post.PostSpec();
+            post.setSpec(spec);
+            var status = new Post.PostStatus();
+            post.setStatus(status);
+            when(client.fetch(Post.class, "fake-post"))
+                .thenReturn(Mono.just(post));
+            var content = ContentWrapper.builder()
+                .content("fake-content")
+                .raw("fake-content")
+                .build();
+            when(postService.getReleaseContent(post)).thenReturn(Mono.just(content));
+            var event = new PostUpdatedEvent(this, "fake-post");
+            listener.onApplicationEvent(event)
+                .as(StepVerifier::create)
+                .verifyComplete();
+
+            verify(publisher).publishEvent(
+                assertArg(e -> assertInstanceOf(HaloDocumentAddRequestEvent.class, e))
+            );
+        }
+    }
+
+    @Nested
+    class PostDeleteEventTest {
+
+        @Test
+        void shouldRequestDelete() {
+            var post = new Post();
+            var metadata = new Metadata();
+            metadata.setName("fake-post");
+            post.setMetadata(metadata);
+            var event = new PostDeletedEvent(this, post);
+            listener.onApplicationEvent(event);
+
+            verify(publisher).publishEvent(
+                assertArg(e -> assertInstanceOf(HaloDocumentDeleteRequestEvent.class, e))
+            );
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/search/post/PostHaloDocumentsProviderTest.java b/application/src/test/java/run/halo/app/search/post/PostHaloDocumentsProviderTest.java
new file mode 100644
index 0000000..1f2771a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/search/post/PostHaloDocumentsProviderTest.java
@@ -0,0 +1,89 @@
+package run.halo.app.search.post;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.same;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.content.ContentWrapper;
+import run.halo.app.content.PostService;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.ReactiveExtensionPaginatedOperator;
+
+@ExtendWith(MockitoExtension.class)
+class PostHaloDocumentsProviderTest {
+
+    @Mock
+    PostService postService;
+
+    @Mock
+    ReactiveExtensionPaginatedOperator paginatedOperator;
+
+    @InjectMocks
+    PostHaloDocumentsProvider provider;
+
+    @Test
+    void ensureTypeNotModified() {
+        assertEquals("post.content.halo.run", provider.getType());
+    }
+
+    @Test
+    void shouldFetchAll() {
+        var post = createFakePost();
+        when(paginatedOperator.list(same(Post.class), any(ListOptions.class)))
+            .thenReturn(Flux.just(post));
+        var content = ContentWrapper.builder()
+            .content("fake-content")
+            .raw("fake-content")
+            .build();
+        when(postService.getReleaseContent(post)).thenReturn(Mono.just(content));
+        provider.fetchAll()
+            .as(StepVerifier::create)
+            .assertNext(doc -> {
+                assertEquals("post.content.halo.run", doc.getType());
+                assertEquals("fake-post", doc.getMetadataName());
+                assertEquals("post.content.halo.run-fake-post", doc.getId());
+                assertEquals("fake-content", doc.getContent());
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldFetchAllIfNoContent() {
+        var post = createFakePost();
+        when(paginatedOperator.list(same(Post.class), any(ListOptions.class)))
+            .thenReturn(Flux.just(post));
+        when(postService.getReleaseContent(post)).thenReturn(Mono.empty());
+        provider.fetchAll()
+            .as(StepVerifier::create)
+            .assertNext(doc -> {
+                assertEquals("post.content.halo.run", doc.getType());
+                assertEquals("fake-post", doc.getMetadataName());
+                assertEquals("post.content.halo.run-fake-post", doc.getId());
+                assertEquals("", doc.getContent());
+            })
+            .verifyComplete();
+    }
+
+    Post createFakePost() {
+        var post = new Post();
+        var metadata = new Metadata();
+        metadata.setName("fake-post");
+        post.setMetadata(metadata);
+        var spec = new Post.PostSpec();
+        var status = new Post.PostStatus();
+        post.setSpec(spec);
+        post.setStatus(status);
+        return post;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/AuthProviderServiceImplTest.java b/application/src/test/java/run/halo/app/security/AuthProviderServiceImplTest.java
new file mode 100644
index 0000000..6487ee3
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/AuthProviderServiceImplTest.java
@@ -0,0 +1,185 @@
+package run.halo.app.security;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.HashMap;
+import java.util.Set;
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.context.junit.jupiter.SpringExtension;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.AuthProvider;
+import run.halo.app.core.extension.UserConnection;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link AuthProviderServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.4.0
+ */
+@ExtendWith(SpringExtension.class)
+class AuthProviderServiceImplTest {
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private AuthProviderServiceImpl authProviderService;
+
+    @Test
+    void testEnable() {
+        // Create a test auth provider
+        AuthProvider authProvider = createAuthProvider("github");
+        when(client.get(eq(AuthProvider.class), eq("github"))).thenReturn(Mono.just(authProvider));
+
+        ArgumentCaptor captor = ArgumentCaptor.forClass(ConfigMap.class);
+        when(client.update(captor.capture())).thenReturn(Mono.empty());
+
+        ConfigMap configMap = new ConfigMap();
+        configMap.setData(new HashMap<>());
+        when(client.fetch(eq(ConfigMap.class), eq(SystemSetting.SYSTEM_CONFIG)))
+            .thenReturn(Mono.just(configMap));
+
+        AuthProvider local = createAuthProvider("local");
+        local.getMetadata().getLabels().put(AuthProvider.PRIVILEGED_LABEL, "true");
+        when(client.list(eq(AuthProvider.class), any(), any())).thenReturn(Flux.just(local));
+
+        // Call the method being tested
+        Mono result = authProviderService.enable("github");
+
+        assertEquals(authProvider, result.block());
+        ConfigMap value = captor.getValue();
+        String providerSettingStr = value.getData().get(SystemSetting.AuthProvider.GROUP);
+        Set enabled =
+            JsonUtils.jsonToObject(providerSettingStr, SystemSetting.AuthProvider.class)
+                .getEnabled();
+        assertThat(enabled).containsExactly("github");
+        // Verify the result
+        verify(client).get(AuthProvider.class, "github");
+        verify(client).fetch(eq(ConfigMap.class), eq(SystemSetting.SYSTEM_CONFIG));
+    }
+
+    @Test
+    void testDisable() {
+        // Create a test auth provider
+        AuthProvider authProvider = createAuthProvider("github");
+        when(client.get(eq(AuthProvider.class), eq("github"))).thenReturn(Mono.just(authProvider));
+
+        AuthProvider local = createAuthProvider("local");
+        local.getMetadata().getLabels().put(AuthProvider.PRIVILEGED_LABEL, "true");
+        when(client.list(eq(AuthProvider.class), any(), any())).thenReturn(Flux.just(local));
+
+        ArgumentCaptor captor = ArgumentCaptor.forClass(ConfigMap.class);
+        when(client.update(captor.capture())).thenReturn(Mono.empty());
+
+        ConfigMap configMap = new ConfigMap();
+        configMap.setData(new HashMap<>());
+        configMap.getData().put(SystemSetting.AuthProvider.GROUP, "{\"enabled\":[\"github\"]}");
+        when(client.fetch(eq(ConfigMap.class), eq(SystemSetting.SYSTEM_CONFIG)))
+            .thenReturn(Mono.just(configMap));
+
+        // Call the method being tested
+        Mono result = authProviderService.disable("github");
+
+        assertEquals(authProvider, result.block());
+        ConfigMap value = captor.getValue();
+        String providerSettingStr = value.getData().get(SystemSetting.AuthProvider.GROUP);
+        Set enabled =
+            JsonUtils.jsonToObject(providerSettingStr, SystemSetting.AuthProvider.class)
+                .getEnabled();
+        assertThat(enabled).isEmpty();
+        // Verify the result
+        verify(client).get(AuthProvider.class, "github");
+        verify(client).fetch(eq(ConfigMap.class), eq(SystemSetting.SYSTEM_CONFIG));
+    }
+
+
+    @Test
+    @WithMockUser(username = "admin")
+    void listAll() {
+        AuthProvider github = createAuthProvider("github");
+        github.getSpec().setBindingUrl("fake-binding-url");
+
+        AuthProvider gitlab = createAuthProvider("gitlab");
+        gitlab.getSpec().setBindingUrl("fake-binding-url");
+
+        AuthProvider gitee = createAuthProvider("gitee");
+
+        when(client.list(eq(AuthProvider.class), any(), any()))
+            .thenReturn(Flux.just(github, gitlab, gitee));
+        when(client.list(eq(UserConnection.class), any(), any())).thenReturn(Flux.empty());
+
+        ConfigMap configMap = new ConfigMap();
+        configMap.setData(new HashMap<>());
+        configMap.getData().put(SystemSetting.AuthProvider.GROUP, "{\"enabled\":[\"github\"]}");
+        when(client.fetch(eq(ConfigMap.class), eq(SystemSetting.SYSTEM_CONFIG)))
+            .thenReturn(Mono.just(configMap));
+
+        authProviderService.listAll()
+            .as(StepVerifier::create)
+            .consumeNextWith(result -> {
+                assertThat(result).hasSize(3);
+                try {
+                    JSONAssert.assertEquals("""
+                            [{
+                                "name": "github",
+                                "displayName": "github",
+                                "bindingUrl": "fake-binding-url",
+                                "enabled": true,
+                                "isBound": false,
+                                "supportsBinding": false,
+                                "privileged": false
+                            }, {
+                                "name": "gitlab",
+                                "displayName": "gitlab",
+                                "bindingUrl": "fake-binding-url",
+                                "enabled": false,
+                                "isBound": false,
+                                "supportsBinding": false,
+                                "privileged": false
+                            },{
+                                                        
+                                "name": "gitee",
+                                "displayName": "gitee",
+                                "enabled": false,
+                                "isBound": false,
+                                "supportsBinding": false,
+                                "privileged": false
+                            }]
+                            """,
+                        JsonUtils.objectToJson(result),
+                        true);
+                } catch (JSONException e) {
+                    throw new RuntimeException(e);
+                }
+            })
+            .verifyComplete();
+    }
+
+    AuthProvider createAuthProvider(String name) {
+        AuthProvider authProvider = new AuthProvider();
+        authProvider.setMetadata(new Metadata());
+        authProvider.getMetadata().setName(name);
+        authProvider.getMetadata().setLabels(new HashMap<>());
+        authProvider.setSpec(new AuthProvider.AuthProviderSpec());
+        authProvider.getSpec().setDisplayName(name);
+        return authProvider;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/DefaultServerAuthenticationEntryPointTest.java b/application/src/test/java/run/halo/app/security/DefaultServerAuthenticationEntryPointTest.java
new file mode 100644
index 0000000..f473bfc
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/DefaultServerAuthenticationEntryPointTest.java
@@ -0,0 +1,35 @@
+package run.halo.app.security;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.springframework.http.HttpHeaders.WWW_AUTHENTICATE;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import org.springframework.security.authentication.AuthenticationCredentialsNotFoundException;
+import reactor.test.StepVerifier;
+
+@ExtendWith(MockitoExtension.class)
+class DefaultServerAuthenticationEntryPointTest {
+
+    @InjectMocks
+    DefaultServerAuthenticationEntryPoint entryPoint;
+
+    @Test
+    void commence() {
+        var mockReq = MockServerHttpRequest.get("/protected")
+            .build();
+        var mockExchange = MockServerWebExchange.builder(mockReq)
+            .build();
+        var commenceMono = entryPoint.commence(mockExchange,
+            new AuthenticationCredentialsNotFoundException("Not Found"));
+        StepVerifier.create(commenceMono)
+            .verifyComplete();
+        var headers = mockExchange.getResponse().getHeaders();
+        assertEquals("FormLogin realm=\"console\"", headers.getFirst(WWW_AUTHENTICATE));
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/DefaultUserDetailServiceTest.java b/application/src/test/java/run/halo/app/security/DefaultUserDetailServiceTest.java
new file mode 100644
index 0000000..123f436
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/DefaultUserDetailServiceTest.java
@@ -0,0 +1,223 @@
+package run.halo.app.security;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertInstanceOf;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.security.core.authority.AuthorityUtils.authorityListToSet;
+
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.core.userdetails.User;
+import org.springframework.security.core.userdetails.UserDetails;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.core.extension.service.UserService;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.exception.UserNotFoundException;
+
+@ExtendWith(MockitoExtension.class)
+class DefaultUserDetailServiceTest {
+
+    @Mock
+    UserService userService;
+
+    @Mock
+    RoleService roleService;
+
+    @InjectMocks
+    DefaultUserDetailService userDetailService;
+
+    @Test
+    void shouldUpdatePasswordSuccessfully() {
+        var fakeUser = createFakeUserDetails();
+
+        var user = new run.halo.app.core.extension.User();
+
+        when(userService.updatePassword("faker", "new-fake-password")).thenReturn(
+            Mono.just(user)
+        );
+
+        var userDetailsMono = userDetailService.updatePassword(fakeUser, "new-fake-password");
+
+        StepVerifier.create(userDetailsMono)
+            .expectSubscription()
+            .assertNext(userDetails -> assertEquals("new-fake-password", userDetails.getPassword()))
+            .verifyComplete();
+
+        verify(userService, times(1)).updatePassword(eq("faker"), eq("new-fake-password"));
+    }
+
+    @Test
+    void shouldReturnErrorWhenFailedToUpdatePassword() {
+        var fakeUser = createFakeUserDetails();
+
+        var exception = new RuntimeException("failed to update password");
+        when(userService.updatePassword("faker", "new-fake-password")).thenReturn(
+            Mono.error(exception)
+        );
+
+        var userDetailsMono = userDetailService.updatePassword(fakeUser, "new-fake-password");
+
+        StepVerifier.create(userDetailsMono)
+            .expectSubscription()
+            .expectErrorMatches(throwable -> throwable == exception)
+            .verify();
+        verify(userService, times(1)).updatePassword(eq("faker"), eq("new-fake-password"));
+    }
+
+    @Test
+    void shouldFindUserDetailsByExistingUsername() {
+        var foundUser = createFakeUser();
+
+        when(userService.getUser("faker")).thenReturn(Mono.just(foundUser));
+        when(roleService.getRolesByUsername("faker")).thenReturn(Flux.just("fake-role"));
+
+        var userDetailsMono = userDetailService.findByUsername("faker");
+
+        StepVerifier.create(userDetailsMono)
+            .expectSubscription()
+            .assertNext(gotUser -> {
+                assertEquals(foundUser.getMetadata().getName(), gotUser.getUsername());
+                assertEquals(foundUser.getSpec().getPassword(), gotUser.getPassword());
+                assertEquals(
+                    Set.of("ROLE_fake-role", "ROLE_authenticated", "ROLE_anonymous"),
+                    authorityListToSet(gotUser.getAuthorities()));
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldFindHaloUserDetailsWith2faDisabledWhen2faNotEnabled() {
+        var fakeUser = createFakeUser();
+        when(userService.getUser("faker")).thenReturn(Mono.just(fakeUser));
+        when(roleService.getRolesByUsername("faker")).thenReturn(Flux.empty());
+        userDetailService.findByUsername("faker")
+            .as(StepVerifier::create)
+            .assertNext(userDetails -> {
+                assertInstanceOf(HaloUserDetails.class, userDetails);
+                assertFalse(((HaloUserDetails) userDetails).isTwoFactorAuthEnabled());
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldFindHaloUserDetailsWith2faDisabledWhen2faEnabledButNoTotpConfigured() {
+        var fakeUser = createFakeUser();
+        fakeUser.getSpec().setTwoFactorAuthEnabled(true);
+        when(userService.getUser("faker")).thenReturn(Mono.just(fakeUser));
+        when(roleService.getRolesByUsername("faker")).thenReturn(Flux.empty());
+        userDetailService.findByUsername("faker")
+            .as(StepVerifier::create)
+            .assertNext(userDetails -> {
+                assertInstanceOf(HaloUserDetails.class, userDetails);
+                assertFalse(((HaloUserDetails) userDetails).isTwoFactorAuthEnabled());
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldFindHaloUserDetailsWith2faEnabledWhen2faEnabledAndTotpConfigured() {
+        var fakeUser = createFakeUser();
+        fakeUser.getSpec().setTwoFactorAuthEnabled(true);
+        fakeUser.getSpec().setTotpEncryptedSecret("fake-totp-encrypted-secret");
+        when(userService.getUser("faker")).thenReturn(Mono.just(fakeUser));
+        when(roleService.getRolesByUsername("faker")).thenReturn(Flux.empty());
+        userDetailService.findByUsername("faker")
+            .as(StepVerifier::create)
+            .assertNext(userDetails -> {
+                assertInstanceOf(HaloUserDetails.class, userDetails);
+                assertTrue(((HaloUserDetails) userDetails).isTwoFactorAuthEnabled());
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldFindHaloUserDetailsWith2faDisabledWhen2faDisabledGlobally() {
+        userDetailService.setTwoFactorAuthDisabled(true);
+        var fakeUser = createFakeUser();
+        fakeUser.getSpec().setTwoFactorAuthEnabled(true);
+        fakeUser.getSpec().setTotpEncryptedSecret("fake-totp-encrypted-secret");
+        when(userService.getUser("faker")).thenReturn(Mono.just(fakeUser));
+        when(roleService.getRolesByUsername("faker")).thenReturn(Flux.empty());
+        userDetailService.findByUsername("faker")
+            .as(StepVerifier::create)
+            .assertNext(userDetails -> {
+                assertInstanceOf(HaloUserDetails.class, userDetails);
+                assertFalse(((HaloUserDetails) userDetails).isTwoFactorAuthEnabled());
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldFindUserDetailsByExistingUsernameButWithoutAnyRoles() {
+        var foundUser = createFakeUser();
+
+        when(userService.getUser("faker")).thenReturn(Mono.just(foundUser));
+        when(roleService.getRolesByUsername("faker")).thenReturn(Flux.empty());
+
+        StepVerifier.create(userDetailService.findByUsername("faker"))
+            .expectSubscription()
+            .assertNext(gotUser -> {
+                assertEquals(foundUser.getMetadata().getName(), gotUser.getUsername());
+                assertEquals(foundUser.getSpec().getPassword(), gotUser.getPassword());
+                assertEquals(
+                    Set.of("ROLE_anonymous", "ROLE_authenticated"),
+                    authorityListToSet(gotUser.getAuthorities()));
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldNotFindUserDetailsByNonExistingUsername() {
+        when(userService.getUser("non-existing-user")).thenReturn(
+            Mono.error(() -> new UserNotFoundException("non-existing-user")));
+
+        var userDetailsMono = userDetailService.findByUsername("non-existing-user");
+
+        StepVerifier.create(userDetailsMono)
+            .expectError(AuthenticationException.class)
+            .verify();
+    }
+
+    Role createRole(String roleName) {
+        var role = new Role();
+        role.setMetadata(new Metadata());
+        role.getMetadata().setName(roleName);
+        return role;
+    }
+
+    UserDetails createFakeUserDetails() {
+        return User.builder()
+            .username("faker")
+            .password("fake-password")
+            .roles("fake-role")
+            .build();
+    }
+
+    run.halo.app.core.extension.User createFakeUser() {
+        var metadata = new Metadata();
+        metadata.setName("faker");
+
+        var userSpec = new run.halo.app.core.extension.User.UserSpec();
+        userSpec.setPassword("fake-password");
+
+        var user = new run.halo.app.core.extension.User();
+        user.setMetadata(metadata);
+        user.setSpec(userSpec);
+        return user;
+
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/InitializeRedirectionWebFilterTest.java b/application/src/test/java/run/halo/app/security/InitializeRedirectionWebFilterTest.java
new file mode 100644
index 0000000..9d7a1d8
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/InitializeRedirectionWebFilterTest.java
@@ -0,0 +1,109 @@
+package run.halo.app.security;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.net.URI;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import org.springframework.security.web.server.ServerRedirectStrategy;
+import org.springframework.web.server.WebFilterChain;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.infra.InitializationStateGetter;
+
+/**
+ * Tests for {@link InitializeRedirectionWebFilter}.
+ *
+ * @author guqing
+ * @since 2.5.2
+ */
+@ExtendWith(MockitoExtension.class)
+class InitializeRedirectionWebFilterTest {
+
+    @Mock
+    private InitializationStateGetter initializationStateGetter;
+
+    @Mock
+    private ServerRedirectStrategy serverRedirectStrategy;
+
+    @InjectMocks
+    private InitializeRedirectionWebFilter filter;
+
+    @BeforeEach
+    void setUp() {
+        filter.setRedirectStrategy(serverRedirectStrategy);
+    }
+
+    @Test
+    void shouldRedirectWhenSystemNotInitialized() {
+        when(initializationStateGetter.userInitialized()).thenReturn(Mono.just(false));
+
+        WebFilterChain chain = mock(WebFilterChain.class);
+
+        MockServerHttpRequest request = MockServerHttpRequest.get("/").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+
+        when(serverRedirectStrategy.sendRedirect(any(), any())).thenReturn(Mono.empty().then());
+
+        Mono result = filter.filter(exchange, chain);
+
+        StepVerifier.create(result)
+            .expectNextCount(0)
+            .expectComplete()
+            .verify();
+
+        verify(serverRedirectStrategy).sendRedirect(eq(exchange), eq(URI.create("/console")));
+        verify(chain, never()).filter(eq(exchange));
+    }
+
+    @Test
+    void shouldNotRedirectWhenSystemInitialized() {
+        when(initializationStateGetter.userInitialized()).thenReturn(Mono.just(true));
+
+        WebFilterChain chain = mock(WebFilterChain.class);
+
+        MockServerHttpRequest request = MockServerHttpRequest.get("/").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+        when(chain.filter(any())).thenReturn(Mono.empty().then());
+        Mono result = filter.filter(exchange, chain);
+
+        StepVerifier.create(result)
+            .expectNextCount(0)
+            .expectComplete()
+            .verify();
+
+        verify(serverRedirectStrategy, never()).sendRedirect(eq(exchange),
+            eq(URI.create("/console")));
+        verify(chain).filter(eq(exchange));
+    }
+
+    @Test
+    void shouldNotRedirectWhenNotHomePage() {
+        WebFilterChain chain = mock(WebFilterChain.class);
+
+        MockServerHttpRequest request = MockServerHttpRequest.get("/test").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+        when(chain.filter(any())).thenReturn(Mono.empty().then());
+        Mono result = filter.filter(exchange, chain);
+
+        StepVerifier.create(result)
+            .expectNextCount(0)
+            .expectComplete()
+            .verify();
+
+        verify(serverRedirectStrategy, never()).sendRedirect(eq(exchange),
+            eq(URI.create("/console")));
+        verify(chain).filter(eq(exchange));
+    }
+}
diff --git a/application/src/test/java/run/halo/app/security/ResponseMap.java b/application/src/test/java/run/halo/app/security/ResponseMap.java
new file mode 100644
index 0000000..91c5b0b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/ResponseMap.java
@@ -0,0 +1,7 @@
+package run.halo.app.security;
+
+import java.util.HashMap;
+
+public class ResponseMap extends HashMap {
+
+}
diff --git a/application/src/test/java/run/halo/app/security/SuperAdminInitializerTest.java b/application/src/test/java/run/halo/app/security/SuperAdminInitializerTest.java
new file mode 100644
index 0000000..909bee4
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/SuperAdminInitializerTest.java
@@ -0,0 +1,62 @@
+package run.halo.app.security;
+
+import static org.mockito.ArgumentMatchers.argThat;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+
+import org.junit.jupiter.api.Disabled;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.jdbc.AutoConfigureTestDatabase;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.SpyBean;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.RoleBinding;
+import run.halo.app.core.extension.User;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+@Disabled
+@SpringBootTest(properties = {"halo.security.initializer.disabled=false",
+    "halo.security.initializer.super-admin-username=fake-admin",
+    "halo.security.initializer.super-admin-password=fake-password",
+    "halo.required-extension-disabled=true",
+    "halo.theme.initializer.disabled=true"})
+@AutoConfigureWebTestClient
+@AutoConfigureTestDatabase
+class SuperAdminInitializerTest {
+
+    @SpyBean
+    ReactiveExtensionClient client;
+
+    @Autowired
+    WebTestClient webClient;
+
+    @Autowired
+    PasswordEncoder encoder;
+
+    @Test
+    void checkSuperAdminInitialization() {
+        verify(client, times(1)).create(argThat(extension -> {
+            if (extension instanceof User user) {
+                return "fake-admin".equals(user.getMetadata().getName())
+                    && encoder.matches("fake-password", user.getSpec().getPassword());
+            }
+            return false;
+        }));
+        verify(client, times(1)).create(argThat(extension -> {
+            if (extension instanceof Role role) {
+                return "super-role".equals(role.getMetadata().getName());
+            }
+            return false;
+        }));
+        verify(client, times(1)).create(argThat(extension -> {
+            if (extension instanceof RoleBinding roleBinding) {
+                return "fake-admin-super-role-binding".equals(roleBinding.getMetadata().getName());
+            }
+            return false;
+        }));
+    }
+}
diff --git a/application/src/test/java/run/halo/app/security/authentication/WebExchangeMatchersTest.java b/application/src/test/java/run/halo/app/security/authentication/WebExchangeMatchersTest.java
new file mode 100644
index 0000000..5a74be4
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authentication/WebExchangeMatchersTest.java
@@ -0,0 +1,38 @@
+package run.halo.app.security.authentication;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.springframework.http.MediaType.ALL;
+import static org.springframework.http.MediaType.APPLICATION_JSON;
+import static org.springframework.http.MediaType.TEXT_HTML;
+import static run.halo.app.security.authentication.WebExchangeMatchers.ignoringMediaTypeAll;
+
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.springframework.http.MediaType;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import reactor.test.StepVerifier;
+
+class WebExchangeMatchersTest {
+
+    @Test
+    void shouldNotMatchMediaTypeAll() {
+        assertion(Set.of(APPLICATION_JSON), Set.of(APPLICATION_JSON, ALL), true);
+        assertion(Set.of(APPLICATION_JSON), Set.of(ALL), false);
+        assertion(Set.of(APPLICATION_JSON), Set.of(APPLICATION_JSON), true);
+        assertion(Set.of(APPLICATION_JSON), Set.of(APPLICATION_JSON, TEXT_HTML), true);
+    }
+
+    void assertion(Set matchingMediaTypes,
+        Set acceptMediaTypes,
+        boolean expectMatch) {
+        var matcher = ignoringMediaTypeAll(matchingMediaTypes.toArray(new MediaType[0]));
+        MockServerHttpRequest request = MockServerHttpRequest.get("/fake")
+            .accept(acceptMediaTypes.toArray(new MediaType[0]))
+            .build();
+        var webExchange = MockServerWebExchange.from(request);
+        StepVerifier.create(matcher.matches(webExchange))
+            .consumeNextWith(matchResult -> assertEquals(expectMatch, matchResult.isMatch()))
+            .verifyComplete();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/authentication/impl/RsaKeyServiceTest.java b/application/src/test/java/run/halo/app/security/authentication/impl/RsaKeyServiceTest.java
new file mode 100644
index 0000000..8d79920
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authentication/impl/RsaKeyServiceTest.java
@@ -0,0 +1,122 @@
+package run.halo.app.security.authentication.impl;
+
+import static com.nimbusds.jose.jwk.KeyOperation.SIGN;
+import static com.nimbusds.jose.jwk.KeyOperation.VERIFY;
+import static org.junit.jupiter.api.Assertions.assertArrayEquals;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import com.nimbusds.jose.JOSEException;
+import com.nimbusds.jose.JWSAlgorithm;
+import com.nimbusds.jose.jwk.KeyUse;
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.security.InvalidKeyException;
+import java.security.KeyFactory;
+import java.security.NoSuchAlgorithmException;
+import java.security.interfaces.RSAPrivateCrtKey;
+import java.security.interfaces.RSAPublicKey;
+import java.security.spec.InvalidKeySpecException;
+import java.security.spec.PKCS8EncodedKeySpec;
+import java.security.spec.X509EncodedKeySpec;
+import java.util.Set;
+import javax.crypto.BadPaddingException;
+import javax.crypto.Cipher;
+import javax.crypto.IllegalBlockSizeException;
+import javax.crypto.NoSuchPaddingException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.util.StringUtils;
+import reactor.core.Exceptions;
+import reactor.test.StepVerifier;
+import run.halo.app.security.authentication.login.InvalidEncryptedMessageException;
+
+@ExtendWith(MockitoExtension.class)
+class RsaKeyServiceTest {
+
+    RsaKeyService service;
+
+    @TempDir
+    Path tempDir;
+
+    @BeforeEach
+    void setUp() throws JOSEException {
+        service = new RsaKeyService(tempDir);
+        service.afterPropertiesSet();
+    }
+
+    @Test
+    void shouldGenerateKeyPair()
+        throws IOException, NoSuchAlgorithmException, InvalidKeySpecException {
+        byte[] privKeyBytes = Files.readAllBytes(tempDir.resolve("pat_id_rsa"));
+        byte[] pubKeyBytes = Files.readAllBytes(tempDir.resolve("pat_id_rsa.pub"));
+
+        var pubKeySpec = new X509EncodedKeySpec(pubKeyBytes);
+        var privKeySpec = new PKCS8EncodedKeySpec(privKeyBytes);
+        var keyFactory = KeyFactory.getInstance(RsaKeyService.ALGORITHM);
+        var privKey = (RSAPrivateCrtKey) keyFactory.generatePrivate(privKeySpec);
+        var pubKey = (RSAPublicKey) keyFactory.generatePublic(pubKeySpec);
+        assertEquals(privKey.getModulus(), pubKey.getModulus());
+        assertEquals(privKey.getPublicExponent(), pubKey.getPublicExponent());
+    }
+
+    @Test
+    void shouldReadPublicKey() throws IOException {
+        var realPubKeyBytes = Files.readAllBytes(tempDir.resolve("pat_id_rsa.pub"));
+
+        StepVerifier.create(service.readPublicKey())
+            .assertNext(bytes -> assertArrayEquals(realPubKeyBytes, bytes))
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldDecryptMessageCorrectly() {
+        final String message = "halo";
+
+        var mono = service.readPublicKey()
+            .map(pubKeyBytes -> {
+                var pubKeySpec = new X509EncodedKeySpec(pubKeyBytes);
+                try {
+                    var keyFactory = KeyFactory.getInstance(RsaKeyService.ALGORITHM);
+                    var pubKey = keyFactory.generatePublic(pubKeySpec);
+                    var cipher = Cipher.getInstance(RsaKeyService.TRANSFORMATION);
+                    cipher.init(Cipher.ENCRYPT_MODE, pubKey);
+                    return cipher.doFinal(message.getBytes());
+                } catch (NoSuchAlgorithmException | InvalidKeySpecException
+                         | NoSuchPaddingException | InvalidKeyException | IllegalBlockSizeException
+                         | BadPaddingException e) {
+                    throw Exceptions.propagate(e);
+                }
+            })
+            .flatMap(service::decrypt)
+            .map(String::new);
+
+        StepVerifier.create(mono)
+            .expectNext(message)
+            .verifyComplete();
+    }
+
+    @Test
+    void shouldFailToDecryptMessage() {
+        StepVerifier.create(service.decrypt("invalid-bytes".getBytes()))
+            .verifyError(InvalidEncryptedMessageException.class);
+    }
+
+    @Test
+    void shouldGetKeyIdFromJwk() {
+        assertTrue(StringUtils.hasText(service.getKeyId()));
+    }
+
+    @Test
+    void shouldGetJwk() {
+        var jwk = service.getJwk();
+        assertEquals("RSA", jwk.getKeyType().getValue());
+        assertEquals(JWSAlgorithm.RS256, jwk.getAlgorithm());
+        assertEquals(KeyUse.SIGNATURE, jwk.getKeyUse());
+        assertEquals(Set.of(SIGN, VERIFY), jwk.getKeyOperations());
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/authentication/login/LoginAuthenticationConverterTest.java b/application/src/test/java/run/halo/app/security/authentication/login/LoginAuthenticationConverterTest.java
new file mode 100644
index 0000000..a40207b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authentication/login/LoginAuthenticationConverterTest.java
@@ -0,0 +1,131 @@
+package run.halo.app.security.authentication.login;
+
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import io.github.resilience4j.ratelimiter.RateLimiter;
+import io.github.resilience4j.ratelimiter.RateLimiterConfig;
+import io.github.resilience4j.ratelimiter.RateLimiterRegistry;
+import java.time.Duration;
+import java.util.Base64;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.server.reactive.ServerHttpRequest;
+import org.springframework.security.authentication.BadCredentialsException;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.util.LinkedMultiValueMap;
+import org.springframework.util.MultiValueMap;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.infra.exception.RateLimitExceededException;
+import run.halo.app.security.authentication.CryptoService;
+
+@ExtendWith(MockitoExtension.class)
+class LoginAuthenticationConverterTest {
+
+    @Mock
+    ServerWebExchange exchange;
+
+    @Mock
+    CryptoService cryptoService;
+
+    @Mock
+    RateLimiterRegistry rateLimiterRegistry;
+
+    @InjectMocks
+    LoginAuthenticationConverter converter;
+
+    MultiValueMap formData;
+
+    @BeforeEach
+    void setUp() {
+        formData = new LinkedMultiValueMap<>();
+        lenient().when(exchange.getFormData()).thenReturn(Mono.just(formData));
+        var request = mock(ServerHttpRequest.class);
+        var headers = new HttpHeaders();
+
+        when(request.getHeaders()).thenReturn(headers);
+        when(exchange.getRequest()).thenReturn(request);
+        when(rateLimiterRegistry.rateLimiter("authentication-from-ip-unknown",
+            "authentication"))
+            .thenReturn(RateLimiter.ofDefaults("authentication"));
+    }
+
+    @Test
+    void shouldTriggerRateLimit() {
+        var username = "username";
+        var password = "password";
+
+        formData.add("username", username);
+        formData.add("password", Base64.getEncoder().encodeToString(password.getBytes()));
+        var rateLimiter = RateLimiter.of("authentication", RateLimiterConfig.custom()
+            .limitForPeriod(1)
+            .limitRefreshPeriod(Duration.ofSeconds(1))
+            .timeoutDuration(Duration.ofMillis(0))
+            .build());
+        assertTrue(rateLimiter.acquirePermission(1));
+        when(rateLimiterRegistry.rateLimiter("authentication-from-ip-unknown", "authentication"))
+            .thenReturn(rateLimiter);
+        StepVerifier.create(converter.convert(exchange))
+            .expectError(RateLimitExceededException.class)
+            .verify();
+
+        verify(cryptoService, never()).decrypt(password.getBytes());
+    }
+
+    @Test
+    void applyUsernameAndPasswordThenCreatesTokenSuccess() {
+        var username = "username";
+        var password = "password";
+        var decryptedPassword = "decrypted password";
+
+        formData.add("username", username);
+        formData.add("password", Base64.getEncoder().encodeToString(password.getBytes()));
+
+        when(cryptoService.decrypt(password.getBytes()))
+            .thenReturn(Mono.just(decryptedPassword.getBytes()));
+        StepVerifier.create(converter.convert(exchange))
+            .expectNext(new UsernamePasswordAuthenticationToken(username, decryptedPassword))
+            .verifyComplete();
+
+        verify(cryptoService).decrypt(password.getBytes());
+    }
+
+    @Test
+    void applyPasswordWithoutBase64FormatThenBadCredentialsException() {
+        var username = "username";
+        var password = "+invalid-base64-format-password";
+
+        formData.add("username", username);
+        formData.add("password", password);
+
+        StepVerifier.create(converter.convert(exchange))
+            .verifyError(BadCredentialsException.class);
+    }
+
+    @Test
+    void applyUsernameAndInvalidPasswordThenBadCredentialsException() {
+        var username = "username";
+        var password = "password";
+
+        formData.add("username", username);
+        formData.add("password", Base64.getEncoder().encodeToString(password.getBytes()));
+
+        when(cryptoService.decrypt(password.getBytes()))
+            .thenReturn(Mono.error(() -> new InvalidEncryptedMessageException("invalid message")));
+        StepVerifier.create(converter.convert(exchange))
+            .verifyError(BadCredentialsException.class);
+        verify(cryptoService).decrypt(password.getBytes());
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/authentication/login/PublicKeyRouteBuilderTest.java b/application/src/test/java/run/halo/app/security/authentication/login/PublicKeyRouteBuilderTest.java
new file mode 100644
index 0000000..bc7c861
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authentication/login/PublicKeyRouteBuilderTest.java
@@ -0,0 +1,52 @@
+package run.halo.app.security.authentication.login;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.Base64;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.security.authentication.CryptoService;
+
+@ExtendWith(MockitoExtension.class)
+class PublicKeyRouteBuilderTest {
+
+    WebTestClient webClient;
+
+    @Mock
+    CryptoService cryptoService;
+
+    @BeforeEach
+    void setUp() {
+        webClient = WebTestClient.bindToRouterFunction(
+            new PublicKeyRouteBuilder(cryptoService).build()
+        ).build();
+    }
+
+    @Test
+    void shouldReadPublicKey() {
+        var publicKeyStr = "public-key";
+        var encoder = Base64.getEncoder();
+        when(cryptoService.readPublicKey()).thenReturn(Mono.just(publicKeyStr.getBytes()));
+        webClient.get().uri("/login/public-key")
+            .exchange()
+            .expectStatus().isOk()
+            .expectBody(PublicKeyRouteBuilder.PublicKeyResponse.class)
+            .consumeWith(result -> {
+                var response = result.getResponseBody();
+                assertNotNull(response);
+                assertEquals(encoder.encodeToString(publicKeyStr.getBytes()),
+                    response.getBase64Format());
+            });
+
+        verify(cryptoService).readPublicKey();
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/security/authentication/pat/PatTest.java b/application/src/test/java/run/halo/app/security/authentication/pat/PatTest.java
new file mode 100644
index 0000000..42c5e83
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authentication/pat/PatTest.java
@@ -0,0 +1,40 @@
+package run.halo.app.security.authentication.pat;
+
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import run.halo.app.security.PersonalAccessToken;
+
+@SpringBootTest
+@AutoConfigureWebTestClient
+class PatTest {
+
+    @Autowired
+    WebTestClient webClient;
+
+    @Test
+    @WithMockUser(username = "faker", password = "${noop}password", roles = "super-role")
+    void generatePat() {
+        var requestPat = new PersonalAccessToken();
+        var spec = requestPat.getSpec();
+        spec.setRoles(List.of("super-role"));
+        spec.setName("Fake PAT");
+        webClient.post()
+            .uri("/apis/uc.api.security.halo.run/v1alpha1/personalaccesstokens")
+            .bodyValue(requestPat)
+            .exchange()
+            .expectStatus().isOk()
+            .expectBody(PersonalAccessToken.class)
+            .value(pat -> {
+                var annotations = pat.getMetadata().getAnnotations();
+                assertTrue(annotations.containsKey("security.halo.run/access-token"));
+            });
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/security/authentication/rememberme/PersistentTokenBasedRememberMeServicesTest.java b/application/src/test/java/run/halo/app/security/authentication/rememberme/PersistentTokenBasedRememberMeServicesTest.java
new file mode 100644
index 0000000..c016dd2
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authentication/rememberme/PersistentTokenBasedRememberMeServicesTest.java
@@ -0,0 +1,163 @@
+package run.halo.app.security.authentication.rememberme;
+
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.time.Duration;
+import java.time.Instant;
+import java.util.Date;
+import java.util.concurrent.atomic.AtomicReference;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.userdetails.ReactiveUserDetailsService;
+import org.springframework.security.web.authentication.rememberme.CookieTheftException;
+import org.springframework.security.web.authentication.rememberme.InvalidCookieException;
+import org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken;
+import org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException;
+import org.springframework.security.web.server.WebFilterExchange;
+import reactor.core.publisher.Mono;
+
+/**
+ * Tests for {@link PersistentTokenBasedRememberMeServices}.
+ *
+ * @author guqing
+ * @since 2.17.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PersistentTokenBasedRememberMeServicesTest {
+    @Mock
+    private CookieSignatureKeyResolver cookieSignatureKeyResolver;
+
+    @Mock
+    private ReactiveUserDetailsService userDetailsService;
+
+    @Mock
+    private RememberMeCookieResolver rememberMeCookieResolver;
+
+    @Mock
+    private PersistentRememberMeTokenRepository tokenRepository;
+
+    @InjectMocks
+    private PersistentTokenBasedRememberMeServices persistentTokenBasedRememberMeServices;
+
+    @Nested
+    class ProcessAutoLoginCookieTest {
+        @Test
+        void invalidCookieTest() {
+            var exchange = MockServerWebExchange.from(MockServerHttpRequest.get("/"));
+            assertThatThrownBy(() -> persistentTokenBasedRememberMeServices.processAutoLoginCookie(
+                new String[] {"test"},
+                exchange).block())
+                .isInstanceOf(InvalidCookieException.class)
+                .hasMessage("Cookie token did not contain 2 tokens, but contained '[test]'");
+        }
+
+        @Test
+        void noPersistentTokenFoundTest() {
+            var exchange = MockServerWebExchange.from(MockServerHttpRequest.get("/"));
+            when(tokenRepository.getTokenForSeries(eq("test-series")))
+                .thenReturn(Mono.empty());
+
+            assertThatThrownBy(() -> persistentTokenBasedRememberMeServices.processAutoLoginCookie(
+                new String[] {"test-series", "test"},
+                exchange).block()
+            ).isInstanceOf(RememberMeAuthenticationException.class)
+                .hasMessage("No persistent token found for series id: test-series");
+        }
+
+        @Test
+        void tokenMismatchTest() {
+            var exchange = MockServerWebExchange.from(MockServerHttpRequest.get("/"));
+            when(tokenRepository.getTokenForSeries(eq("fake-series")))
+                .thenReturn(Mono.just(
+                    new PersistentRememberMeToken("test", "fake-series", "other-token-value",
+                        new Date()))
+                );
+            when(tokenRepository.removeUserTokens(eq("test"))).thenReturn(Mono.empty());
+            assertThatThrownBy(() -> persistentTokenBasedRememberMeServices.processAutoLoginCookie(
+                new String[] {"fake-series", "token-value"},
+                exchange).block())
+                .isInstanceOf(CookieTheftException.class)
+                .hasMessage(
+                    "Invalid remember-me token (Series/token) mismatch. Implies previous cookie "
+                        + "theft attack.");
+        }
+
+        @Test
+        void rememberMeLoginExpiredTest() {
+            var exchange = MockServerWebExchange.from(MockServerHttpRequest.get("/"));
+            when(tokenRepository.getTokenForSeries(eq("fake-series")))
+                .thenReturn(Mono.just(
+                    new PersistentRememberMeToken("test", "fake-series", "token-value",
+                        new Date(Instant.now().minusSeconds(10).toEpochMilli())))
+                );
+            when(rememberMeCookieResolver.getCookieMaxAge()).thenReturn(Duration.ofSeconds(5));
+            assertThatThrownBy(() -> persistentTokenBasedRememberMeServices.processAutoLoginCookie(
+                new String[] {"fake-series", "token-value"},
+                exchange).block())
+                .isInstanceOf(RememberMeAuthenticationException.class)
+                .hasMessage("Remember-me login has expired");
+        }
+
+        @Test
+        void successfulTest() {
+            var exchange = MockServerWebExchange.from(MockServerHttpRequest.get("/"));
+            when(tokenRepository.getTokenForSeries(eq("fake-series")))
+                .thenReturn(Mono.just(
+                    new PersistentRememberMeToken("test", "fake-series", "token-value",
+                        new Date()))
+                );
+            when(rememberMeCookieResolver.getCookieMaxAge()).thenReturn(Duration.ofSeconds(5));
+
+            var generatedTokenValue = new AtomicReference();
+            when(tokenRepository.updateToken(eq("fake-series"), any(), any()))
+                .thenAnswer(invocation -> {
+                    var tokenValue = (String) invocation.getArgument(1);
+                    generatedTokenValue.compareAndSet(null, tokenValue);
+                    return Mono.empty();
+                });
+
+            when(userDetailsService.findByUsername(eq("test"))).thenReturn(Mono.empty());
+
+            persistentTokenBasedRememberMeServices.processAutoLoginCookie(
+                    new String[] {"fake-series", "token-value"}, exchange)
+                .block();
+
+            verify(rememberMeCookieResolver).setRememberMeCookie(eq(exchange),
+                eq(persistentTokenBasedRememberMeServices.encodeCookie(
+                    new String[] {"fake-series", generatedTokenValue.get()})));
+        }
+    }
+
+    @Test
+    void onLoginSuccessTest() {
+        var exchange = MockServerWebExchange.from(MockServerHttpRequest.get("/"));
+        var authentication = new UsernamePasswordAuthenticationToken("test", "test");
+
+        when(tokenRepository.createNewToken(any())).thenReturn(Mono.empty());
+        persistentTokenBasedRememberMeServices.onLoginSuccess(exchange, authentication).block();
+
+        verify(rememberMeCookieResolver).setRememberMeCookie(eq(exchange), any());
+    }
+
+    @Test
+    void onLogoutTest() {
+        var authentication = new UsernamePasswordAuthenticationToken("test", "test");
+
+        when(tokenRepository.removeUserTokens(eq("test"))).thenReturn(Mono.empty());
+
+        var filterExchange = mock(WebFilterExchange.class);
+        persistentTokenBasedRememberMeServices.onLogout(filterExchange, authentication).block();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/authentication/rememberme/RememberTokenCleanerTest.java b/application/src/test/java/run/halo/app/security/authentication/rememberme/RememberTokenCleanerTest.java
new file mode 100644
index 0000000..cf9d0a6
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authentication/rememberme/RememberTokenCleanerTest.java
@@ -0,0 +1,39 @@
+package run.halo.app.security.authentication.rememberme;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.spy;
+
+import java.time.Duration;
+import java.time.Instant;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mockito;
+import org.mockito.junit.jupiter.MockitoExtension;
+
+/**
+ * Test for {@link RememberTokenCleaner}.
+ *
+ * @author guqing
+ * @since 2.17.0
+ */
+@ExtendWith(MockitoExtension.class)
+class RememberTokenCleanerTest {
+    @InjectMocks
+    private RememberTokenCleaner rememberTokenCleaner;
+
+    @Test
+    void test() {
+        var spyRememberTokenCleaner = spy(rememberTokenCleaner);
+        Mockito.doReturn(Duration.ofSeconds(30)).when(spyRememberTokenCleaner).getTokenValidity();
+        var expiredTime = spyRememberTokenCleaner.getExpirationThreshold();
+
+        var creationTime = Instant.now().minus(Duration.ofSeconds(31));
+        // creationTime < expirationThreshold means it has expired
+        assertThat(creationTime).isBefore(expiredTime);
+
+        // not expired
+        creationTime = Instant.now().minus(Duration.ofSeconds(29));
+        assertThat(creationTime).isAfter(expiredTime);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/authentication/rememberme/TokenBasedRememberMeServicesTest.java b/application/src/test/java/run/halo/app/security/authentication/rememberme/TokenBasedRememberMeServicesTest.java
new file mode 100644
index 0000000..c179b85
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authentication/rememberme/TokenBasedRememberMeServicesTest.java
@@ -0,0 +1,85 @@
+package run.halo.app.security.authentication.rememberme;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.springframework.security.authentication.TestingAuthenticationToken;
+import org.springframework.security.core.userdetails.User;
+import org.springframework.test.context.junit.jupiter.SpringExtension;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+
+/**
+ * Tests for {@link TokenBasedRememberMeServices}.
+ *
+ * @author guqing
+ * @since 2.16.0
+ */
+@ExtendWith(SpringExtension.class)
+class TokenBasedRememberMeServicesTest {
+
+    @Mock
+    CookieSignatureKeyResolver cookieSignatureKeyResolver;
+
+    @InjectMocks
+    private TokenBasedRememberMeServices tokenBasedRememberMeServices;
+
+    @Test
+    void retrieveUserName() {
+        var authentication = new TestingAuthenticationToken("fake-user", "test");
+        var username = tokenBasedRememberMeServices.retrieveUserName(authentication);
+
+        var userDetails = new User("zhangsan", "test", List.of());
+        authentication = new TestingAuthenticationToken(userDetails, "test");
+        username = tokenBasedRememberMeServices.retrieveUserName(authentication);
+        assertThat(username).isEqualTo("zhangsan");
+    }
+
+    @Test
+    void makeTokenSignatureTest() {
+        when(cookieSignatureKeyResolver.resolveSigningKey()).thenReturn(Mono.just("fake-key"));
+        var expireMs = 1716435187323L;
+        tokenBasedRememberMeServices.makeTokenSignature(expireMs, "fake-user", "pwd-1",
+                TokenBasedRememberMeServices.DEFAULT_ALGORITHM)
+            .as(StepVerifier::create)
+            .expectNext("29f1c7ccbb489741392d27ba5c30f30d05c79ee66289b6d6da5b431bba99a0c7")
+            .verifyComplete();
+    }
+
+    @Test
+    void encodeCookieTest() {
+        var expireMs = 1716435187323L;
+        var cookieTokens = new String[] {"fake-user", Long.toString(expireMs),
+            TokenBasedRememberMeServices.DEFAULT_ALGORITHM,
+            "29f1c7ccbb489741392d27ba5c30f30d05c79ee66289b6d6da5b431bba99a0c7"};
+        var encode = tokenBasedRememberMeServices.encodeCookie(cookieTokens);
+        assertThat(encode)
+            .isEqualTo("ZmFrZS11c2VyOjE3MTY0MzUxODczMjM6U0hBLTI1NjoyOWYxYzdjY2JiNDg5NzQxMz"
+                + "kyZDI3YmE1YzMwZjMwZDA1Yzc5ZWU2NjI4OWI2ZDZkYTViNDMxYmJhOTlhMGM3");
+    }
+
+    @Test
+    void decodeCookieTest() {
+        var cookieValue = "YWRtaW46MTcxODk2NDE3NDgwODpTSEE"
+            + "tMjU2OmNkOTM0ZTAyZWQ4NGJmMzc1ZTA4MmE1OWU4YTA3NTNiMzA3ODg1MjZmYzA3Yjgy"
+            + "YzVmY2Y3YmJiYzdjYzRkNWU";
+        // 123 % 4 = 3, so we need to add 1 '=' to make it a multiple of 4 for
+        // spring-security/gh-15127
+        assertThat(cookieValue.length()).isEqualTo(123);
+        var cookie = tokenBasedRememberMeServices.decodeCookie(cookieValue);
+        assertThat(cookie).containsExactly("admin", "1718964174808", "SHA-256",
+            "cd934e02ed84bf375e082a59e8a0753b30788526fc07b82c5fcf7bbbc7cc4d5e");
+
+        cookieValue = "ZmFrZS11c2VyOjE3MTY0MzUxODczMjM6U0hBLTI1NjoyOWYxYzdjY2JiNDg5NzQxMz"
+            + "kyZDI3YmE1YzMwZjMwZDA1Yzc5ZWU2NjI4OWI2ZDZkYTViNDMxYmJhOTlhMGM3";
+        assertThat(cookieValue.length()).isEqualTo(128);
+        cookie = tokenBasedRememberMeServices.decodeCookie(cookieValue);
+        assertThat(cookie).containsExactly("fake-user", "1716435187323", "SHA-256",
+            "29f1c7ccbb489741392d27ba5c30f30d05c79ee66289b6d6da5b431bba99a0c7");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSettingsTest.java b/application/src/test/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSettingsTest.java
new file mode 100644
index 0000000..a46381e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authentication/twofactor/TwoFactorAuthSettingsTest.java
@@ -0,0 +1,41 @@
+package run.halo.app.security.authentication.twofactor;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.params.provider.Arguments.arguments;
+
+import java.util.stream.Stream;
+import org.junit.jupiter.params.ParameterizedTest;
+import org.junit.jupiter.params.provider.Arguments;
+import org.junit.jupiter.params.provider.MethodSource;
+
+class TwoFactorAuthSettingsTest {
+
+    @ParameterizedTest
+    @MethodSource("isAvailableCases")
+    void isAvailableTest(TwoFactorAuthSettings settings, boolean expectAvailable) {
+        assertEquals(expectAvailable, settings.isAvailable());
+    }
+
+    static Stream isAvailableCases() {
+        return Stream.of(
+            arguments(settings(false, true, true), false),
+            arguments(settings(false, false, false), false),
+            arguments(settings(false, false, true), false),
+            arguments(settings(false, true, false), false),
+            arguments(settings(true, true, true), true),
+            arguments(settings(true, false, false), false),
+            arguments(settings(true, false, true), true),
+            arguments(settings(true, true, false), false)
+        );
+    }
+
+    static TwoFactorAuthSettings settings(boolean enabled, boolean emailVerified,
+        boolean totpConfigured) {
+        var settings = new TwoFactorAuthSettings();
+        settings.setEnabled(enabled);
+        settings.setEmailVerified(emailVerified);
+        settings.setTotpConfigured(totpConfigured);
+        return settings;
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/authorization/AuthorityUtilsTest.java b/application/src/test/java/run/halo/app/security/authorization/AuthorityUtilsTest.java
new file mode 100644
index 0000000..f926643
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authorization/AuthorityUtilsTest.java
@@ -0,0 +1,47 @@
+package run.halo.app.security.authorization;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.mock;
+import static run.halo.app.security.authorization.AuthorityUtils.authoritiesToRoles;
+import static run.halo.app.security.authorization.AuthorityUtils.containsSuperRole;
+import static run.halo.app.security.authorization.AuthorityUtils.isRealUser;
+
+import java.util.List;
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.springframework.security.authentication.RememberMeAuthenticationToken;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+
+class AuthorityUtilsTest {
+
+    @Test
+    void authoritiesToRolesTest() {
+        var authorities = List.of(
+            new SimpleGrantedAuthority("ROLE_admin"),
+            new SimpleGrantedAuthority("ROLE_owner"),
+            new SimpleGrantedAuthority("ROLE_manager"),
+            new SimpleGrantedAuthority("faker"),
+            new SimpleGrantedAuthority("SCOPE_system:read")
+        );
+
+        var roles = authoritiesToRoles(authorities);
+
+        assertEquals(Set.of("admin", "owner", "manager", "faker", "system:read"), roles);
+    }
+
+    @Test
+    void containsSuperRoleTest() {
+        assertTrue(containsSuperRole(Set.of("super-role")));
+        assertTrue(containsSuperRole(Set.of("super-role", "admin")));
+        assertFalse(containsSuperRole(Set.of("admin")));
+    }
+
+    @Test
+    void shouldReturnTrueWhenAuthenticationIsRealUser() {
+        assertTrue(isRealUser(mock(UsernamePasswordAuthenticationToken.class)));
+        assertTrue(isRealUser(mock(RememberMeAuthenticationToken.class)));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/authorization/AuthorizationTest.java b/application/src/test/java/run/halo/app/security/authorization/AuthorizationTest.java
new file mode 100644
index 0000000..9ae0ef2
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authorization/AuthorizationTest.java
@@ -0,0 +1,151 @@
+package run.halo.app.security.authorization;
+
+import static org.mockito.ArgumentMatchers.anySet;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.security.test.web.reactive.server.SecurityMockServerConfigurers.csrf;
+import static org.springframework.web.reactive.function.server.RequestPredicates.GET;
+import static org.springframework.web.reactive.function.server.RequestPredicates.PUT;
+import static org.springframework.web.reactive.function.server.RequestPredicates.accept;
+import static org.springframework.web.reactive.function.server.RouterFunctions.route;
+
+import java.util.ArrayList;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.context.TestConfiguration;
+import org.springframework.boot.test.mock.mockito.MockBean;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Import;
+import org.springframework.http.MediaType;
+import org.springframework.lang.NonNull;
+import org.springframework.security.core.userdetails.ReactiveUserDetailsPasswordService;
+import org.springframework.security.core.userdetails.ReactiveUserDetailsService;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerRequest;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.Role.PolicyRule;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.AnonymousUserConst;
+
+@SpringBootTest
+@AutoConfigureWebTestClient
+@Import(AuthorizationTest.TestConfig.class)
+class AuthorizationTest {
+
+    @Autowired
+    WebTestClient webClient;
+
+    @MockBean
+    ReactiveUserDetailsService userDetailsService;
+
+    @MockBean
+    ReactiveUserDetailsPasswordService userDetailsPasswordService;
+
+    @MockBean
+    RoleService roleService;
+
+    @BeforeEach
+    void setUp() {
+        webClient = webClient.mutateWith(csrf());
+    }
+
+    @Test
+    void anonymousUserAccessProtectedApi() {
+        when(userDetailsService.findByUsername(eq(AnonymousUserConst.PRINCIPAL)))
+            .thenReturn(Mono.empty());
+        when(roleService.listDependenciesFlux(anySet())).thenReturn(Flux.empty());
+
+        webClient.get().uri("/apis/fake.halo.run/v1/posts").exchange().expectStatus()
+            .isUnauthorized();
+
+        verify(roleService).listDependenciesFlux(anySet());
+    }
+
+    @Test
+    void anonymousUserAccessAuthenticationFreeApi() {
+        when(userDetailsService.findByUsername(eq(AnonymousUserConst.PRINCIPAL)))
+            .thenReturn(Mono.empty());
+        Role role = new Role();
+        role.setMetadata(new Metadata());
+        role.getMetadata().setName(AnonymousUserConst.Role);
+        role.setRules(new ArrayList<>());
+        PolicyRule policyRule = new PolicyRule.Builder()
+            .apiGroups("fake.halo.run")
+            .verbs("list")
+            .resources("posts")
+            .build();
+        role.getRules().add(policyRule);
+        when(roleService.listDependenciesFlux(anySet())).thenReturn(Flux.just(role));
+        webClient.get().uri("/apis/fake.halo.run/v1/posts").exchange().expectStatus()
+            .isOk()
+            .expectBody(String.class).isEqualTo("returned posts");
+
+        verify(roleService).listDependenciesFlux(anySet());
+
+        webClient.get().uri("/apis/fake.halo.run/v1/posts/hello-halo").exchange()
+            .expectStatus()
+            .isUnauthorized();
+
+        verify(roleService, times(2)).listDependenciesFlux(anySet());
+    }
+
+    @Test
+    @WithMockUser(username = "user", roles = "post.read")
+    void authenticatedUserAccessAuthenticationFreeApi() {
+        Role role = new Role();
+        role.setMetadata(new Metadata());
+        role.getMetadata().setName(AnonymousUserConst.Role);
+        role.setRules(new ArrayList<>());
+        PolicyRule policyRule = new PolicyRule.Builder()
+            .apiGroups("fake.halo.run")
+            .verbs("list")
+            .resources("posts")
+            .build();
+        role.getRules().add(policyRule);
+
+        when(roleService.listDependenciesFlux(anySet())).thenReturn(Flux.just(role));
+
+        webClient.get().uri("/apis/fake.halo.run/v1/posts").exchange().expectStatus()
+            .isOk()
+            .expectBody(String.class).isEqualTo("returned posts");
+        verify(roleService).listDependenciesFlux(anySet());
+    }
+
+    @TestConfiguration
+    static class TestConfig {
+
+        @Bean
+        public RouterFunction postRoute() {
+            return route(
+                GET("/apis/fake.halo.run/v1/posts").and(accept(MediaType.APPLICATION_JSON)),
+                this::queryPosts).andRoute(
+                PUT("/apis/fake.halo.run/v1/posts/{name}").and(accept(MediaType.APPLICATION_JSON)),
+                this::updatePost);
+        }
+
+        @NonNull
+        Mono queryPosts(ServerRequest request) {
+            return ServerResponse.ok().contentType(MediaType.TEXT_PLAIN)
+                .bodyValue("returned posts");
+        }
+
+        @NonNull
+        Mono updatePost(ServerRequest request) {
+            var name = request.pathVariable("name");
+            return ServerResponse.ok().contentType(MediaType.TEXT_PLAIN)
+                .bodyValue("updated post " + name);
+        }
+
+    }
+}
diff --git a/application/src/test/java/run/halo/app/security/authorization/DefaultRuleResolverTest.java b/application/src/test/java/run/halo/app/security/authorization/DefaultRuleResolverTest.java
new file mode 100644
index 0000000..a311bac
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authorization/DefaultRuleResolverTest.java
@@ -0,0 +1,144 @@
+package run.halo.app.security.authorization;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.mock.http.server.reactive.MockServerHttpRequest.method;
+import static org.springframework.security.authentication.UsernamePasswordAuthenticationToken.authenticated;
+import static org.springframework.security.core.authority.AuthorityUtils.createAuthorityList;
+
+import java.util.List;
+import java.util.Set;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.core.userdetails.User;
+import reactor.core.publisher.Flux;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.Role;
+import run.halo.app.core.extension.Role.PolicyRule;
+import run.halo.app.core.extension.service.RoleService;
+import run.halo.app.extension.Metadata;
+
+@ExtendWith(MockitoExtension.class)
+class DefaultRuleResolverTest {
+
+    @Mock
+    RoleService roleService;
+
+    @InjectMocks
+    DefaultRuleResolver ruleResolver;
+
+    @Test
+    void visitRules() {
+        when(roleService.listDependenciesFlux(Set.of("ruleReadPost")))
+            .thenReturn(Flux.just(mockRole()));
+        var fakeUser = new User("admin", "123456", createAuthorityList("ruleReadPost"));
+        var authentication = authenticated(fakeUser, fakeUser.getPassword(),
+            fakeUser.getAuthorities());
+
+        var cases = getRequestResolveCases();
+        cases.forEach(requestResolveCase -> {
+            var httpMethod = HttpMethod.valueOf(requestResolveCase.method);
+            var request = method(httpMethod, requestResolveCase.url).build();
+            var requestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+            StepVerifier.create(ruleResolver.visitRules(authentication, requestInfo))
+                .assertNext(
+                    visitor -> assertEquals(requestResolveCase.expected, visitor.isAllowed()))
+                .verifyComplete();
+        });
+
+        verify(roleService, times(cases.size())).listDependenciesFlux(Set.of("ruleReadPost"));
+    }
+
+    @Test
+    void visitRulesForUserspaceScope() {
+        when(roleService.listDependenciesFlux(Set.of("ruleReadPost")))
+            .thenReturn(Flux.just(mockRole()));
+        var fakeUser = new User("admin", "123456", createAuthorityList("ruleReadPost"));
+        var authentication =
+            authenticated(fakeUser, fakeUser.getPassword(), fakeUser.getAuthorities());
+        var cases = List.of(
+            new RequestResolveCase("/api/v1/categories", "POST", true),
+            new RequestResolveCase("/api/v1/categories", "DELETE", true),
+            new RequestResolveCase("/api/v1/userspaces/bar/categories", "DELETE", false),
+            new RequestResolveCase("/api/v1/userspaces/admin/categories", "DELETE", true),
+            new RequestResolveCase("/api/v1/posts", "GET", true),
+
+            new RequestResolveCase("/api/v1/userspaces/foo/posts", "GET", false),
+            new RequestResolveCase("/api/v1/userspaces/admin/posts", "GET", true)
+        );
+        cases.forEach(requestResolveCase -> {
+            var httpMethod = HttpMethod.valueOf(requestResolveCase.method);
+            var request = method(httpMethod, requestResolveCase.url).build();
+            var requestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+            StepVerifier.create(ruleResolver.visitRules(authentication, requestInfo))
+                .assertNext(
+                    visitor -> assertEquals(requestResolveCase.expected, visitor.isAllowed()))
+                .verifyComplete();
+        });
+    }
+
+    Role mockRole() {
+        var role = new Role();
+        var rules = List.of(
+            new PolicyRule.Builder().apiGroups("").resources("posts").verbs("list", "get").build(),
+            new PolicyRule.Builder().apiGroups("").resources("categories").verbs("*").build(),
+            new PolicyRule.Builder().apiGroups("api.plugin.halo.run")
+                .resources("plugins/users")
+                .resourceNames("foo/bar").verbs("*").build(),
+            new PolicyRule.Builder().apiGroups("api.plugin.halo.run")
+                .resources("plugins/users")
+                .resourceNames("foo").verbs("*").build(),
+            new PolicyRule.Builder().nonResourceURLs("/healthy").verbs("get", "post", "head")
+                .build());
+        role.setRules(rules);
+        var metadata = new Metadata();
+        metadata.setName("ruleReadPost");
+        role.setMetadata(metadata);
+        return role;
+    }
+
+    List getRequestResolveCases() {
+        return List.of(new RequestResolveCase("/api/v1/tags", "GET", false),
+            new RequestResolveCase("/api/v1/tags/tagName", "GET", false),
+
+            new RequestResolveCase("/api/v1/categories/aName", "GET", true),
+            new RequestResolveCase("/api/v1//categories", "POST", true),
+            new RequestResolveCase("/api/v1/categories", "DELETE", true),
+            new RequestResolveCase("/api/v1/posts", "GET", true),
+            new RequestResolveCase("/api/v1/posts/aName", "GET", true),
+
+            new RequestResolveCase("/api/v1/posts", "DELETE", false),
+            new RequestResolveCase("/api/v1/posts/aName", "UPDATE", false),
+
+            // group resource url
+            new RequestResolveCase("/apis/group/v1/posts", "GET", false),
+
+            // plugin custom resource url
+            new RequestResolveCase("/apis/api.plugin.halo.run/v1alpha1/plugins/foo/users", "GET",
+                true),
+            new RequestResolveCase("/apis/api.plugin.halo.run/v1alpha1/plugins/foo/users/bar",
+                "GET", true),
+            new RequestResolveCase("/apis/api.plugin.halo.run/v1alpha1/plugins/foo/posts/bar",
+                "GET", false),
+
+            // non resource url
+            new RequestResolveCase("/healthy", "GET", true),
+            new RequestResolveCase("/healthy", "POST", true),
+            new RequestResolveCase("/healthy", "HEAD", true),
+            new RequestResolveCase("//healthy", "GET", false),
+            new RequestResolveCase("/healthy/name", "GET", false),
+            new RequestResolveCase("/healthy1", "GET", false),
+
+            new RequestResolveCase("//healthy//name", "GET", false),
+            new RequestResolveCase("/", "GET", false));
+    }
+
+    record RequestResolveCase(String url, String method, boolean expected) {
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/authorization/PolicyRuleTest.java b/application/src/test/java/run/halo/app/security/authorization/PolicyRuleTest.java
new file mode 100644
index 0000000..1f11328
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authorization/PolicyRuleTest.java
@@ -0,0 +1,89 @@
+package run.halo.app.security.authorization;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import run.halo.app.core.extension.Role;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link Role.PolicyRule}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class PolicyRuleTest {
+    private ObjectMapper objectMapper;
+
+    @BeforeEach
+    void setUp() {
+        objectMapper = JsonUtils.DEFAULT_JSON_MAPPER;
+    }
+
+    @Test
+    public void constructPolicyRule() throws JsonProcessingException, JSONException {
+        Role.PolicyRule policyRule = new Role.PolicyRule(null, null, null, null, null);
+        assertThat(policyRule).isNotNull();
+        JSONAssert.assertEquals("""
+            {
+                "apiGroups": [],
+                "resources": [],
+                "resourceNames": [],
+                "nonResourceURLs": [],
+                "verbs": []
+            }
+            """,
+            JsonUtils.objectToJson(policyRule),
+            true);
+
+        Role.PolicyRule policyByBuilder = new Role.PolicyRule.Builder().build();
+        JSONAssert.assertEquals("""
+            {
+                "apiGroups": [],
+                "resources": [],
+                "resourceNames": [],
+                "nonResourceURLs": [],
+                "verbs": []
+            }
+            """,
+            JsonUtils.objectToJson(policyByBuilder),
+            true);
+
+        Role.PolicyRule policyNonNull = new Role.PolicyRule.Builder()
+            .apiGroups("group")
+            .resources("resource-1", "resource-2")
+            .resourceNames("resourceName")
+            .nonResourceURLs("non resource url")
+            .verbs("verbs")
+            .build();
+
+        JsonNode expected = objectMapper.readTree("""
+            {
+                "apiGroups": [
+                    "group"
+                ],
+                "resources": [
+                    "resource-1",
+                    "resource-2"
+                ],
+                "resourceNames": [
+                    "resourceName"
+                ],
+                "nonResourceURLs": [
+                    "non resource url"
+                ],
+                "verbs": [
+                    "verbs"
+                ]
+            }
+            """);
+        JsonNode policyNonNullJson = objectMapper.valueToTree(policyNonNull);
+        assertThat(policyNonNullJson).isEqualTo(expected);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/authorization/RbacRequestEvaluationTest.java b/application/src/test/java/run/halo/app/security/authorization/RbacRequestEvaluationTest.java
new file mode 100644
index 0000000..efbfe06
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authorization/RbacRequestEvaluationTest.java
@@ -0,0 +1,47 @@
+package run.halo.app.security.authorization;
+
+import static org.assertj.core.api.AssertionsForClassTypes.assertThat;
+
+import org.junit.jupiter.api.Test;
+import run.halo.app.core.extension.Role;
+
+/**
+ * Tests for {@link RbacRequestEvaluation}.
+ *
+ * @author guqing
+ * @since 2.4.0
+ */
+class RbacRequestEvaluationTest {
+
+    @Test
+    void resourceNameMatches() {
+        RbacRequestEvaluation rbacRequestEvaluation = new RbacRequestEvaluation();
+        assertThat(matchResourceName(rbacRequestEvaluation, "", "fake/test")).isTrue();
+        assertThat(matchResourceName(rbacRequestEvaluation, "", "fake")).isTrue();
+        assertThat(matchResourceName(rbacRequestEvaluation, "", "")).isTrue();
+        assertThat(matchResourceName(rbacRequestEvaluation, "*", null)).isTrue();
+
+        assertThat(matchResourceName(rbacRequestEvaluation, "*/test", "fake/test")).isTrue();
+
+        assertThat(matchResourceName(rbacRequestEvaluation, "*/test", "hello/test")).isTrue();
+        assertThat(matchResourceName(rbacRequestEvaluation, "*/test", "hello/fake")).isFalse();
+
+        assertThat(matchResourceName(rbacRequestEvaluation, "test/*", "hello/fake")).isFalse();
+        assertThat(matchResourceName(rbacRequestEvaluation, "test/*", "test/fake")).isTrue();
+        assertThat(matchResourceName(rbacRequestEvaluation, "test/*", "test")).isTrue();
+        assertThat(matchResourceName(rbacRequestEvaluation, "test/*", "hello")).isFalse();
+
+        assertThat(matchResourceName(rbacRequestEvaluation, "*/*", "test/fake")).isTrue();
+        assertThat(matchResourceName(rbacRequestEvaluation, "*/*", "test")).isTrue();
+
+        assertThat(matchResourceName(rbacRequestEvaluation, "*", "test")).isTrue();
+        assertThat(matchResourceName(rbacRequestEvaluation, "*", "hello")).isTrue();
+    }
+
+    boolean matchResourceName(RbacRequestEvaluation rbacRequestEvaluation, String rule,
+        String requestedName) {
+        return rbacRequestEvaluation.resourceNameMatches(new Role.PolicyRule.Builder()
+            .resourceNames(rule)
+            .build(), requestedName);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/security/authorization/RequestInfoResolverTest.java b/application/src/test/java/run/halo/app/security/authorization/RequestInfoResolverTest.java
new file mode 100644
index 0000000..3e67d75
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/authorization/RequestInfoResolverTest.java
@@ -0,0 +1,304 @@
+package run.halo.app.security.authorization;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.springframework.mock.http.server.reactive.MockServerHttpRequest.method;
+
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.springframework.http.HttpMethod;
+
+/**
+ * Tests for {@link RequestInfoFactory}.
+ *
+ * @author guqing
+ * @see RequestInfo
+ * @since 2.0.0
+ */
+public class RequestInfoResolverTest {
+
+    @Test
+    void shouldResolveAsWatchRequestWhenRequestIsWebSocket() {
+        var request = method(HttpMethod.GET, "/apis/fake.halo.run/v1alpha1/fakes")
+            .header("Upgrade", "websocket")
+            .header("Connection", "Upgrade")
+            .build();
+        RequestInfo requestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+        assertThat(requestInfo).isNotNull();
+        assertThat(requestInfo.getVerb()).isEqualTo("watch");
+    }
+
+    @Test
+    void shouldNotResolveAsWatchRequestWhenRequestIsNotWebSocket() {
+        var request = method(HttpMethod.GET, "/apis/fake.halo.run/v1alpha1/fakes")
+            .header("Upgrade", "websocket")
+            .build();
+        RequestInfo requestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+        assertThat(requestInfo).isNotNull();
+        assertThat(requestInfo.getVerb()).isEqualTo("list");
+    }
+
+    @Test
+    public void requestInfoTest() {
+        for (SuccessCase successCase : getTestRequestInfos()) {
+            final var request = method(HttpMethod.valueOf(successCase.method), successCase.url)
+                .build();
+
+            RequestInfo requestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+
+            assertNotNull(requestInfo, successCase::toString);
+            assertEquals(successCase.expectedVerb, requestInfo.getVerb(), successCase::toString);
+            assertThat(requestInfo.getApiPrefix()).isEqualTo(successCase.expectedAPIPrefix);
+            assertThat(requestInfo.getApiGroup()).isEqualTo(successCase.expectedAPIGroup);
+            assertThat(requestInfo.getApiVersion()).isEqualTo(successCase.expectedAPIVersion);
+            assertThat(requestInfo.getResource()).isEqualTo(successCase.expectedResource);
+            assertThat(requestInfo.getSubresource()).isEqualTo(successCase.expectedSubresource);
+            assertThat(requestInfo.getName()).isEqualTo(successCase.expectedName);
+            assertThat(requestInfo.getParts()).isEqualTo(successCase.expectedParts);
+        }
+    }
+
+    @Test
+    public void nonApiRequestInfoTest() {
+        Map map = new HashMap<>();
+        map.put("simple groupless", new NonApiCase("/api/version/resource", true));
+        map.put("simple group",
+            new NonApiCase("/apis/group/version/resource/name/subresource", true));
+        map.put("more steps", new NonApiCase("/api/version/resource/name/subresource", true));
+        map.put("group list", new NonApiCase("/apis/batch/v1/job", true));
+        map.put("group get", new NonApiCase("/apis/batch/v1/job/foo", true));
+        map.put("group subresource", new NonApiCase("/apis/batch/v1/job/foo/scale", true));
+
+        // bad case
+        map.put("bad root", new NonApiCase("/not-api/version/resource", false));
+        map.put("group without enough steps", new NonApiCase("/apis/extensions/v1beta1", false));
+        map.put("group without enough steps 2", new NonApiCase("/apis/extensions/v1beta1/", false));
+        map.put("not enough steps", new NonApiCase("/api/version", false));
+        map.put("one step", new NonApiCase("/api", false));
+        map.put("zero step", new NonApiCase("/", false));
+        map.put("empty", new NonApiCase("", false));
+
+        map.forEach((k, v) -> {
+            var request = method(HttpMethod.GET, v.url).build();
+            RequestInfo requestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+            if (requestInfo.isResourceRequest() != v.expected) {
+                throw new RuntimeException(
+                    String.format("%s: expected %s, actual %s", k, v.expected,
+                        requestInfo.isResourceRequest()));
+            }
+        });
+    }
+
+    @Test
+    void pluginsScopedAndPluginManage() {
+        List testCases =
+            List.of(
+                new CustomSuccessCase("DELETE", "/apis/api.plugin.halo.run/v1/plugins/other/posts",
+                    "delete", "apis", "api.plugin.halo.run", "v1", "", "plugins", "posts", "", "",
+                    new String[] {"plugins", "other", "posts"}),
+
+                // api group identification
+                new CustomSuccessCase("POST",
+                    "/apis/api.plugin.halo.run/v1/plugins/other/posts/foo",
+                    "create", "apis",
+                    "api.plugin.halo.run", "v1", "", "plugins", "posts", "other", "foo",
+                    new String[] {"plugins", "other", "posts", "foo"}),
+
+                // api version identification
+                new CustomSuccessCase("POST",
+                    "/apis/api.plugin.halo.run/v1beta3/plugins/other/posts/bar", "create",
+                    "apis", "api.plugin.halo.run", "v1beta3", "", "plugins", "posts", "other",
+                    "bar",
+                    new String[] {"plugins", "other", "posts", "bar"}));
+
+        // 以 /apis 开头的 plugins 资源为 core 中管理插件使用的资源
+        for (CustomSuccessCase successCase : testCases) {
+            var request =
+                method(HttpMethod.valueOf(successCase.method),
+                    successCase.url).build();
+            RequestInfo requestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+            assertThat(requestInfo).isNotNull();
+            assertRequestInfoCase(successCase, requestInfo);
+        }
+
+        List pluginScopedCases =
+            List.of(
+                new CustomSuccessCase("DELETE", "/apis/api.plugin.halo.run/v1/plugins/other/posts",
+                    "delete", "apis", "api.plugin.halo.run", "v1", "", "plugins", "posts",
+                    "other", "", new String[] {"plugins", "other", "posts"}),
+
+                // api group identification
+                new CustomSuccessCase("POST",
+                    "/apis/api.plugin.halo.run/v1/plugins/other/posts/some-name", "create", "apis",
+                    "api.plugin.halo.run", "v1", "other", "plugins", "posts", "other", "some-name",
+                    new String[] {"plugins", "other", "posts", "some-name"}));
+
+        for (CustomSuccessCase pluginScopedCase : pluginScopedCases) {
+            var request =
+                method(HttpMethod.valueOf(pluginScopedCase.method),
+                    pluginScopedCase.url).build();
+            RequestInfo requestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+            assertThat(requestInfo).isNotNull();
+            assertRequestInfoCase(pluginScopedCase, requestInfo);
+        }
+    }
+
+    private void assertRequestInfoCase(CustomSuccessCase pluginScopedCase,
+        RequestInfo requestInfo) {
+        assertThat(requestInfo.getVerb()).isEqualTo(pluginScopedCase.expectedVerb);
+        assertThat(requestInfo.getParts()).isEqualTo(pluginScopedCase.expectedParts);
+        assertThat(requestInfo.getApiGroup()).isEqualTo(pluginScopedCase.expectedAPIGroup);
+        assertThat(requestInfo.getResource()).isEqualTo(pluginScopedCase.expectedResource);
+        assertThat(requestInfo.getSubresource())
+            .isEqualTo(pluginScopedCase.expectedSubresource());
+        assertThat(requestInfo.getSubName())
+            .isEqualTo(pluginScopedCase.expectedSubName());
+    }
+
+    @Test
+    public void errorCaseTest() {
+        List errorCases = List.of(new ErrorCases("no resource path", "/"),
+            new ErrorCases("just apiversion", "/api/version/"),
+            new ErrorCases("just prefix, group, version", "/apis/group/version/"),
+            new ErrorCases("apiversion with no resource", "/api/version/"),
+            new ErrorCases("bad prefix", "/badprefix/version/resource"),
+            new ErrorCases("missing api group", "/apis/version/resource"));
+        for (ErrorCases errorCase : errorCases) {
+            var request =
+                method(HttpMethod.GET, errorCase.url).build();
+            RequestInfo apiRequestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+            if (apiRequestInfo.isResourceRequest()) {
+                throw new RuntimeException(
+                    String.format("%s: expected non-resource request", errorCase.desc));
+            }
+        }
+
+        List postCases =
+            List.of(new ErrorCases("api resource has name and no subresource but post",
+                    "/api/version/themes/install"),
+                new ErrorCases("apis resource has name and no subresource but post",
+                    "/apis/api.halo.run/v1alpha1/themes/install"));
+        for (ErrorCases errorCase : postCases) {
+            var request =
+                method(HttpMethod.POST, errorCase.url).build();
+            RequestInfo apiRequestInfo = RequestInfoFactory.INSTANCE.newRequestInfo(request);
+            if (apiRequestInfo.isResourceRequest()) {
+                throw new RuntimeException(
+                    String.format("%s: expected non-resource request", errorCase.desc));
+            }
+        }
+    }
+
+    public record NonApiCase(String url, boolean expected) {
+    }
+
+    public record ErrorCases(String desc, String url) {
+    }
+
+
+    public record SuccessCase(String method, String url, String expectedVerb,
+                              String expectedAPIPrefix, String expectedAPIGroup,
+                              String expectedAPIVersion, String expectedNamespace,
+                              String expectedResource, String expectedSubresource,
+                              String expectedName, String[] expectedParts) {
+    }
+
+    public record CustomSuccessCase(String method, String url, String expectedVerb,
+                                    String expectedAPIPrefix, String expectedAPIGroup,
+                                    String expectedAPIVersion, String expectedNamespace,
+                                    String expectedResource, String expectedSubresource,
+                                    String expectedName, String expectedSubName,
+                                    String[] expectedParts) {
+    }
+
+    List getTestRequestInfos() {
+        String namespaceAll = "*";
+        return List.of(
+            new SuccessCase("GET", "/api/v1/namespaces", "list", "api", "", "v1", "", "namespaces",
+                "", "", new String[] {"namespaces"}),
+            new SuccessCase("GET", "/api/v1/namespaces/other", "get", "api", "", "v1", "other",
+                "namespaces", "", "other", new String[] {"namespaces", "other"}),
+
+            new SuccessCase("GET", "/api/v1/namespaces/other/posts", "list", "api", "", "v1",
+                "other", "posts", "", "", new String[] {"posts"}),
+            new SuccessCase("GET", "/api/v1/namespaces/other/posts/foo", "get", "api", "", "v1",
+                "other", "posts", "", "foo", new String[] {"posts", "foo"}),
+            new SuccessCase("HEAD", "/api/v1/namespaces/other/posts/foo", "get", "api", "", "v1",
+                "other", "posts", "", "foo", new String[] {"posts", "foo"}),
+            new SuccessCase("GET", "/api/v1/posts", "list", "api", "", "v1", namespaceAll, "posts",
+                "", "", new String[] {"posts"}),
+            new SuccessCase("HEAD", "/api/v1/posts", "list", "api", "", "v1", namespaceAll, "posts",
+                "", "", new String[] {"posts"}),
+            new SuccessCase("GET", "/api/v1/namespaces/other/posts/foo", "get", "api", "", "v1",
+                "other", "posts", "", "foo", new String[] {"posts", "foo"}),
+            new SuccessCase("GET", "/api/v1/namespaces/other/posts", "list", "api", "", "v1",
+                "other", "posts", "", "", new String[] {"posts"}),
+
+            // special verbs
+            new SuccessCase("GET", "/api/v1/proxy/namespaces/other/posts/foo", "proxy", "api", "",
+                "v1", "other", "posts", "", "foo", new String[] {"posts", "foo"}),
+            new SuccessCase("GET",
+                "/api/v1/proxy/namespaces/other/posts/foo/subpath/not/a/subresource", "proxy",
+                "api", "", "v1", "other", "posts", "", "foo",
+                new String[] {"posts", "foo", "subpath", "not", "a", "subresource"}),
+            new SuccessCase("GET", "/api/v1/watch/posts", "watch", "api", "", "v1", namespaceAll,
+                "posts", "", "", new String[] {"posts"}),
+            new SuccessCase("GET", "/api/v1/posts?watch=true", "watch", "api", "", "v1",
+                namespaceAll, "posts", "", "", new String[] {"posts"}),
+            new SuccessCase("GET", "/api/v1/posts?watch=false", "list", "api", "", "v1",
+                namespaceAll, "posts", "", "", new String[] {"posts"}),
+            new SuccessCase("GET", "/api/v1/watch/namespaces/other/posts", "watch", "api", "", "v1",
+                "other", "posts", "", "", new String[] {"posts"}),
+            new SuccessCase("GET", "/api/v1/namespaces/other/posts?watch=true", "watch", "api", "",
+                "v1", "other", "posts", "", "", new String[] {"posts"}),
+            new SuccessCase("GET", "/api/v1/namespaces/other/posts?watch=false", "list", "api", "",
+                "v1", "other", "posts", "", "", new String[] {"posts"}),
+
+            // subresource identification
+            new SuccessCase("GET", "/api/v1/namespaces/other/posts/foo/status", "get", "api", "",
+                "v1", "other", "posts", "status", "foo", new String[] {"posts", "foo", "status"}),
+            new SuccessCase("GET", "/api/v1/namespaces/other/posts/foo/proxy/subpath", "get", "api",
+                "", "v1", "other", "posts", "proxy", "foo",
+                new String[] {"posts", "foo", "proxy", "subpath"}),
+            new SuccessCase("PUT", "/api/v1/namespaces/other/finalize", "update", "api", "", "v1",
+                "other", "namespaces", "finalize", "other",
+                new String[] {"namespaces", "other", "finalize"}),
+            new SuccessCase("PUT", "/api/v1/namespaces/other/status", "update", "api", "", "v1",
+                "other", "namespaces", "status", "other",
+                new String[] {"namespaces", "other", "status"}),
+
+            // verb identification
+            new SuccessCase("PATCH", "/api/v1/namespaces/other/posts/foo", "patch", "api", "", "v1",
+                "other", "posts", "", "foo", new String[] {"posts", "foo"}),
+            new SuccessCase("DELETE", "/api/v1/namespaces/other/posts/foo", "delete", "api", "",
+                "v1", "other", "posts", "", "foo", new String[] {"posts", "foo"}),
+            new SuccessCase("POST", "/api/v1/namespaces/other/posts", "create", "api", "", "v1",
+                "other", "posts", "", "", new String[] {"posts"}),
+
+            // deletecollection verb identification
+            new SuccessCase("DELETE", "/api/v1/nodes?all=true", "deletecollection", "api", "", "v1",
+                "",
+                "nodes", "", "", new String[] {"nodes"}),
+            new SuccessCase("DELETE", "/api/v1/namespaces?all=false", "delete", "api", "",
+                "v1", "",
+                "namespaces", "", "", new String[] {"namespaces"}),
+            new SuccessCase("DELETE", "/api/v1/namespaces/other/posts?all=true", "deletecollection",
+                "api",
+                "", "v1", "other", "posts", "", "", new String[] {"posts"}),
+            new SuccessCase("DELETE", "/apis/extensions/v1/namespaces/other/posts?all=true",
+                "deletecollection", "apis", "extensions", "v1", "other", "posts", "", "",
+                new String[] {"posts"}),
+
+            // api group identification
+            new SuccessCase("POST", "/apis/extensions/v1/namespaces/other/posts", "create", "apis",
+                "extensions", "v1", "other", "posts", "", "", new String[] {"posts"}),
+
+            // api version identification
+            new SuccessCase("POST", "/apis/extensions/v1beta3/namespaces/other/posts", "create",
+                "apis", "extensions", "v1beta3", "other", "posts", "", "", new String[] {"posts"}));
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/security/device/DeviceServiceImplTest.java b/application/src/test/java/run/halo/app/security/device/DeviceServiceImplTest.java
new file mode 100644
index 0000000..58d82ca
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/device/DeviceServiceImplTest.java
@@ -0,0 +1,24 @@
+package run.halo.app.security.device;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link DeviceServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.17.0
+ */
+class DeviceServiceImplTest {
+
+    @Test
+    void deviceInfoParseTest() {
+        var info = DeviceServiceImpl.DeviceInfo.parse(
+            "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like "
+                + "Gecko) Chrome/126.0.0.0 Safari/537.36");
+        assertThat(info.os()).isEqualTo("Mac OS X 10.15.7");
+        assertThat(info.browser()).isEqualTo("Chrome 126.0");
+    }
+
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/security/jackson2/HaloSecurityJacksonModuleTest.java b/application/src/test/java/run/halo/app/security/jackson2/HaloSecurityJacksonModuleTest.java
new file mode 100644
index 0000000..55804bb
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/jackson2/HaloSecurityJacksonModuleTest.java
@@ -0,0 +1,66 @@
+package run.halo.app.security.jackson2;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import java.util.function.Function;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.http.converter.json.Jackson2ObjectMapperBuilder;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContext;
+import org.springframework.security.core.context.SecurityContextImpl;
+import org.springframework.security.core.userdetails.User;
+import org.springframework.security.jackson2.SecurityJackson2Modules;
+import run.halo.app.security.authentication.login.HaloUser;
+import run.halo.app.security.authentication.twofactor.TwoFactorAuthentication;
+
+class HaloSecurityJacksonModuleTest {
+
+    ObjectMapper objectMapper;
+
+    @BeforeEach
+    void setUp() {
+        this.objectMapper = Jackson2ObjectMapperBuilder.json()
+            .modules(SecurityJackson2Modules.getModules(this.getClass().getClassLoader()))
+            .modules(modules -> modules.add(new HaloSecurityJackson2Module()))
+            .indentOutput(true)
+            .build();
+    }
+
+    @Test
+    void codecHaloUserTest() throws JsonProcessingException {
+        codecAssert(haloUser -> UsernamePasswordAuthenticationToken.authenticated(haloUser,
+            haloUser.getPassword(),
+            haloUser.getAuthorities()));
+    }
+
+    @Test
+    void codecTwoFactorAuthenticationTokenTest() throws JsonProcessingException {
+        codecAssert(haloUser -> new TwoFactorAuthentication(
+            UsernamePasswordAuthenticationToken.authenticated(haloUser,
+                haloUser.getPassword(),
+                haloUser.getAuthorities())));
+    }
+
+    void codecAssert(Function authenticationConverter)
+        throws JsonProcessingException {
+        var userDetails = User.withUsername("faker")
+            .password("123456")
+            .authorities("ROLE_USER")
+            .build();
+        var haloUser = new HaloUser(userDetails, true, "fake-encrypted-secret");
+
+        var authentication = authenticationConverter.apply(haloUser);
+
+        var securityContext = new SecurityContextImpl(authentication);
+        var securityContextJson = objectMapper.writeValueAsString(securityContext);
+
+        var deserializedSecurityContext =
+            objectMapper.readValue(securityContextJson, SecurityContext.class);
+
+        assertEquals(deserializedSecurityContext, securityContext);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/security/session/InMemoryReactiveIndexedSessionRepositoryTest.java b/application/src/test/java/run/halo/app/security/session/InMemoryReactiveIndexedSessionRepositoryTest.java
new file mode 100644
index 0000000..d944af1
--- /dev/null
+++ b/application/src/test/java/run/halo/app/security/session/InMemoryReactiveIndexedSessionRepositoryTest.java
@@ -0,0 +1,107 @@
+package run.halo.app.security.session;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.springframework.session.ReactiveFindByIndexNameSessionRepository.PRINCIPAL_NAME_INDEX_NAME;
+
+import java.util.Set;
+import java.util.concurrent.ConcurrentHashMap;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import reactor.test.StepVerifier;
+
+/**
+ * Tests for {@link InMemoryReactiveIndexedSessionRepository}.
+ *
+ * @author guqing
+ * @since 2.15.0
+ */
+class InMemoryReactiveIndexedSessionRepositoryTest {
+    private InMemoryReactiveIndexedSessionRepository sessionRepository;
+
+    @BeforeEach
+    void setUp() {
+        sessionRepository = new InMemoryReactiveIndexedSessionRepository(new ConcurrentHashMap<>());
+    }
+
+    @Test
+    void principalNameIndexTest() {
+        sessionRepository.createSession()
+            .doOnNext(session -> {
+                session.setAttribute(PRINCIPAL_NAME_INDEX_NAME,
+                    "test");
+            })
+            .map(session -> sessionRepository.indexResolver.resolveIndexesFor(session))
+            .as(StepVerifier::create)
+            .consumeNextWith(map -> {
+                assertThat(map).containsEntry(
+                    PRINCIPAL_NAME_INDEX_NAME,
+                    "test");
+            });
+
+        sessionRepository.findByPrincipalName("test")
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+
+        sessionRepository.findByIndexNameAndIndexValue(
+                PRINCIPAL_NAME_INDEX_NAME, "test")
+            .as(StepVerifier::create)
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    @Test
+    void saveTest() {
+        var indexKey = createSession("fake-session-1", "test");
+
+        assertThat(sessionRepository.getSessionIdIndexMap()).hasSize(1);
+        assertThat(
+            sessionRepository.getSessionIdIndexMap().containsValue(Set.of(indexKey))).isTrue();
+
+        assertThat(sessionRepository.getIndexSessionIdMap()).hasSize(1);
+        assertThat(sessionRepository.getIndexSessionIdMap().containsKey(indexKey)).isTrue();
+        assertThat(sessionRepository.getIndexSessionIdMap().get(indexKey)).isEqualTo(
+            Set.of("fake-session-1"));
+    }
+
+    @Test
+    void saveToUpdateTest() {
+        // same session id will update the index
+        createSession("fake-session-1", "test");
+        var indexKey2 = createSession("fake-session-1", "test2");
+
+        assertThat(sessionRepository.getSessionIdIndexMap()).hasSize(1);
+        assertThat(
+            sessionRepository.getSessionIdIndexMap().containsValue(Set.of(indexKey2))).isTrue();
+
+        assertThat(sessionRepository.getIndexSessionIdMap()).hasSize(1);
+        assertThat(sessionRepository.getIndexSessionIdMap().containsKey(indexKey2)).isTrue();
+        assertThat(sessionRepository.getIndexSessionIdMap().get(indexKey2)).isEqualTo(
+            Set.of("fake-session-1"));
+    }
+
+    @Test
+    void deleteByIdTest() {
+        createSession("fake-session-2", "test1");
+        sessionRepository.deleteById("fake-session-2")
+            .as(StepVerifier::create)
+            .verifyComplete();
+        assertThat(sessionRepository.getSessionIdIndexMap()).isEmpty();
+        assertThat(sessionRepository.getIndexSessionIdMap()).isEmpty();
+    }
+
+    InMemoryReactiveIndexedSessionRepository.IndexKey createSession(String sessionId,
+        String principalName) {
+        var indexKey = new InMemoryReactiveIndexedSessionRepository.IndexKey(
+            PRINCIPAL_NAME_INDEX_NAME, principalName);
+        sessionRepository.createSession()
+            .doOnNext(session -> {
+                session.setAttribute(indexKey.attributeName(), indexKey.attributeValue());
+                session.setId(sessionId);
+            })
+            .flatMap(sessionRepository::save)
+            .as(StepVerifier::create)
+            .verifyComplete();
+        return indexKey;
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/ReactiveFinderExpressionParserTests.java b/application/src/test/java/run/halo/app/theme/ReactiveFinderExpressionParserTests.java
new file mode 100644
index 0000000..cd6f5bd
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/ReactiveFinderExpressionParserTests.java
@@ -0,0 +1,162 @@
+package run.halo.app.theme;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.node.ArrayNode;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import java.util.Map;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationContext;
+import org.thymeleaf.IEngineConfiguration;
+import org.thymeleaf.TemplateEngine;
+import org.thymeleaf.context.Context;
+import org.thymeleaf.spring6.dialect.SpringStandardDialect;
+import org.thymeleaf.spring6.expression.ThymeleafEvaluationContext;
+import org.thymeleaf.standard.expression.IStandardVariableExpressionEvaluator;
+import org.thymeleaf.templateresolver.StringTemplateResolver;
+import org.thymeleaf.templateresource.ITemplateResource;
+import org.thymeleaf.templateresource.StringTemplateResource;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.infra.utils.JsonUtils;
+import run.halo.app.theme.dialect.HaloProcessorDialect;
+
+/**
+ * Tests expression parser for reactive return value.
+ *
+ * @author guqing
+ * @see ReactivePropertyAccessor
+ * @see ReactiveSpelVariableExpressionEvaluator
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+public class ReactiveFinderExpressionParserTests {
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    private TemplateEngine templateEngine;
+
+    @BeforeEach
+    void setUp() {
+        HaloProcessorDialect haloProcessorDialect = new HaloProcessorDialect();
+        templateEngine = new TemplateEngine();
+        templateEngine.setDialects(Set.of(haloProcessorDialect, new SpringStandardDialect() {
+            @Override
+            public IStandardVariableExpressionEvaluator getVariableExpressionEvaluator() {
+                return new ReactiveSpelVariableExpressionEvaluator();
+            }
+        }));
+        templateEngine.addTemplateResolver(new TestTemplateResolver());
+        lenient().when(applicationContext.getBean(eq(SystemConfigurableEnvironmentFetcher.class)))
+            .thenReturn(environmentFetcher);
+        lenient().when(environmentFetcher.fetchComment())
+            .thenReturn(Mono.just(new SystemSetting.Comment()));
+    }
+
+    @Test
+    void javascriptInlineParser() {
+        Context context = getContext();
+        context.setVariable("target", new TestReactiveFinder());
+        context.setVariable("genericMap", Map.of("key", "value"));
+        String result = templateEngine.process("javascriptInline", context);
+        assertThat(result).isEqualTo("""
+            
value

+            
ruibaby

+            
guqing

+            
bar

+            
+            """);
+    }
+
+    static class TestReactiveFinder {
+        public Mono getName() {
+            return Mono.just("guqing");
+        }
+
+        public Flux names() {
+            return Flux.just("guqing", "johnniang", "ruibaby");
+        }
+
+        public Flux users() {
+            return Flux.just(
+                new TestUser("guqing"), new TestUser("ruibaby"), new TestUser("johnniang")
+            );
+        }
+
+        public Flux objectJsonNodeFlux() {
+            ObjectNode objectNode = JsonUtils.DEFAULT_JSON_MAPPER.createObjectNode();
+            objectNode.put("name", "guqing");
+            return Flux.just(objectNode);
+        }
+
+        public Mono> mapMono() {
+            return Mono.just(Map.of("foo", "bar"));
+        }
+
+        public Mono arrayNodeMono() {
+            ArrayNode arrayNode = JsonUtils.DEFAULT_JSON_MAPPER.createArrayNode();
+            arrayNode.add(arrayNode.objectNode().put("foo", "bar"));
+            return Mono.just(arrayNode);
+        }
+    }
+
+    record TestUser(String name) {
+    }
+
+    private Context getContext() {
+        Context context = new Context();
+        context.setVariable(
+            ThymeleafEvaluationContext.THYMELEAF_EVALUATION_CONTEXT_CONTEXT_VARIABLE_NAME,
+            new ThymeleafEvaluationContext(applicationContext, null));
+        return context;
+    }
+
+    static class TestTemplateResolver extends StringTemplateResolver {
+        @Override
+        protected ITemplateResource computeTemplateResource(IEngineConfiguration configuration,
+            String ownerTemplate, String template,
+            Map templateResolutionAttributes) {
+            return new StringTemplateResource("""
+                

+                

+                

+                

+                
+                 """);
+        }
+
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/SiteSettingVariablesAcquirerTest.java b/application/src/test/java/run/halo/app/theme/SiteSettingVariablesAcquirerTest.java
new file mode 100644
index 0000000..8fd8066
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/SiteSettingVariablesAcquirerTest.java
@@ -0,0 +1,62 @@
+package run.halo.app.theme;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.net.MalformedURLException;
+import java.net.URL;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.extension.ConfigMap;
+import run.halo.app.infra.ExternalUrlSupplier;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.theme.finders.vo.SiteSettingVo;
+
+/**
+ * Tests for {@link SiteSettingVariablesAcquirer}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+public class SiteSettingVariablesAcquirerTest {
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @InjectMocks
+    private SiteSettingVariablesAcquirer siteSettingVariablesAcquirer;
+
+    @Test
+    void acquireWhenExternalUrlSet() throws MalformedURLException {
+        var configMap = new ConfigMap();
+        configMap.setData(Map.of());
+
+        var url = new URL("https://halo.run");
+        when(externalUrlSupplier.getURL(any())).thenReturn(url);
+        when(environmentFetcher.getConfigMap()).thenReturn(Mono.just(configMap));
+
+        siteSettingVariablesAcquirer.acquire(mock(ServerWebExchange.class))
+            .as(StepVerifier::create)
+            .consumeNextWith(result -> {
+                assertThat(result).containsKey("site");
+                assertThat(result.get("site")).isInstanceOf(SiteSettingVo.class);
+                assertThat((SiteSettingVo) result.get("site"))
+                    .extracting(SiteSettingVo::getUrl)
+                    .isEqualTo(url);
+            })
+            .verifyComplete();
+        verify(externalUrlSupplier).getURL(any());
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/ThemeContextTest.java b/application/src/test/java/run/halo/app/theme/ThemeContextTest.java
new file mode 100644
index 0000000..1a0733d
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/ThemeContextTest.java
@@ -0,0 +1,35 @@
+package run.halo.app.theme;
+
+import java.nio.file.Path;
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link ThemeContext}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class ThemeContextTest {
+
+    @Test
+    void constructorBuilderTest() throws JSONException {
+        var path = Path.of("/tmp/themes/testTheme");
+        var testTheme = ThemeContext.builder()
+            .name("testTheme")
+            .path(path)
+            .active(true)
+            .build();
+        var got = JsonUtils.objectToJson(testTheme);
+        var expect = String.format("""
+                {
+                    "name": "testTheme",
+                    "path": "%s",
+                    "active": true
+                }
+                """, path.toUri());
+        JSONAssert.assertEquals(expect, got, false);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/ThemeLinkBuilderTest.java b/application/src/test/java/run/halo/app/theme/ThemeLinkBuilderTest.java
new file mode 100644
index 0000000..0b0a375
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/ThemeLinkBuilderTest.java
@@ -0,0 +1,133 @@
+package run.halo.app.theme;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.lenient;
+
+import java.net.URI;
+import java.net.URISyntaxException;
+import java.nio.file.Paths;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.infra.ExternalUrlSupplier;
+
+/**
+ * Tests for {@link ThemeLinkBuilder}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ThemeLinkBuilderTest {
+    @Mock
+    private ExternalUrlSupplier externalUrlSupplier;
+
+    @BeforeEach
+    void setUp() {
+        // Mock external url supplier
+        lenient().when(externalUrlSupplier.get()).thenReturn(URI.create(""));
+    }
+
+    @Test
+    void processTemplateLinkWithNoActive() {
+        ThemeLinkBuilder themeLinkBuilder =
+            new ThemeLinkBuilder(getTheme(false), externalUrlSupplier);
+
+        String link = "/post";
+        String processed = themeLinkBuilder.processLink(null, link);
+        assertThat(processed).isEqualTo("/post?preview-theme=test-theme");
+
+        processed = themeLinkBuilder.processLink(null, "/post?foo=bar");
+        assertThat(processed).isEqualTo("/post?foo=bar&preview-theme=test-theme");
+    }
+
+    @Test
+    void processTemplateLinkWithActive() {
+        ThemeLinkBuilder themeLinkBuilder =
+            new ThemeLinkBuilder(getTheme(true), externalUrlSupplier);
+
+        String link = "/post";
+        String processed = themeLinkBuilder.processLink(null, link);
+        assertThat(processed).isEqualTo("/post");
+    }
+
+    @Test
+    void processAssetsLink() {
+        // activated theme
+        ThemeLinkBuilder themeLinkBuilder =
+            new ThemeLinkBuilder(getTheme(true), externalUrlSupplier);
+
+        String link = "/assets/css/style.css";
+        String processed = themeLinkBuilder.processLink(null, link);
+        assertThat(processed).isEqualTo("/themes/test-theme/assets/css/style.css");
+
+        // preview theme
+        getTheme(false);
+        link = "/assets/js/main.js";
+        processed = themeLinkBuilder.processLink(null, link);
+        assertThat(processed).isEqualTo("/themes/test-theme/assets/js/main.js");
+    }
+
+    @Test
+    void processNullLink() {
+        ThemeLinkBuilder themeLinkBuilder =
+            new ThemeLinkBuilder(getTheme(false), externalUrlSupplier);
+
+        String link = null;
+        String processed = themeLinkBuilder.processLink(null, link);
+        assertThat(processed).isEqualTo(null);
+
+        // empty link
+        link = "";
+        processed = themeLinkBuilder.processLink(null, link);
+        assertThat(processed).isEqualTo("/?preview-theme=test-theme");
+    }
+
+    @Test
+    void processAbsoluteLink() {
+        ThemeLinkBuilder themeLinkBuilder =
+            new ThemeLinkBuilder(getTheme(false), externalUrlSupplier);
+        String link = "https://github.com/halo-dev";
+        String processed = themeLinkBuilder.processLink(null, link);
+        assertThat(processed).isEqualTo(link);
+
+        link = "http://example.com";
+        processed = themeLinkBuilder.processLink(null, link);
+        assertThat(processed).isEqualTo(link);
+    }
+
+    @Test
+    void linkInSite() throws URISyntaxException {
+        URI uri = new URI("");
+        // relative link is always in site
+        assertThat(ThemeLinkBuilder.linkInSite(uri, "/post")).isTrue();
+
+        // absolute link is not in site
+        assertThat(ThemeLinkBuilder.linkInSite(uri, "https://example.com")).isFalse();
+
+        uri = new URI("https://example.com");
+        // link in externalUrl is in site link
+        assertThat(ThemeLinkBuilder.linkInSite(uri, "http://example.com/hello/world")).isTrue();
+        // scheme is different but authority is same
+        assertThat(ThemeLinkBuilder.linkInSite(uri, "https://example.com/hello/world")).isTrue();
+
+        // scheme is same and authority is different
+        assertThat(ThemeLinkBuilder.linkInSite(uri, "http://halo.run/hello/world")).isFalse();
+        // scheme is different and authority is different
+        assertThat(ThemeLinkBuilder.linkInSite(uri, "https://halo.run/hello/world")).isFalse();
+
+        // port is different
+        uri = new URI("http://localhost:8090");
+        assertThat(ThemeLinkBuilder.linkInSite(uri, "http://localhost:3000")).isFalse();
+    }
+
+    private ThemeContext getTheme(boolean isActive) {
+        return ThemeContext.builder()
+            .name("test-theme")
+            .path(Paths.get("/themes/test-theme"))
+            .active(isActive)
+            .build();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/ThemeLocaleContextResolverTest.java b/application/src/test/java/run/halo/app/theme/ThemeLocaleContextResolverTest.java
new file mode 100644
index 0000000..8ab62e8
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/ThemeLocaleContextResolverTest.java
@@ -0,0 +1,193 @@
+package run.halo.app.theme;
+
+import static java.util.Locale.CANADA;
+import static java.util.Locale.CHINA;
+import static java.util.Locale.CHINESE;
+import static java.util.Locale.ENGLISH;
+import static java.util.Locale.GERMAN;
+import static java.util.Locale.GERMANY;
+import static java.util.Locale.JAPAN;
+import static java.util.Locale.JAPANESE;
+import static java.util.Locale.KOREA;
+import static java.util.Locale.UK;
+import static java.util.Locale.US;
+import static org.assertj.core.api.Assertions.assertThat;
+import static run.halo.app.theme.ThemeLocaleContextResolver.DEFAULT_PARAMETER_NAME;
+import static run.halo.app.theme.ThemeLocaleContextResolver.TIME_ZONE_COOKIE_NAME;
+
+import java.util.Arrays;
+import java.util.Collections;
+import java.util.Locale;
+import java.util.TimeZone;
+import org.junit.jupiter.api.Test;
+import org.springframework.context.i18n.TimeZoneAwareLocaleContext;
+import org.springframework.http.HttpCookie;
+import org.springframework.http.HttpHeaders;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import org.springframework.web.server.ServerWebExchange;
+
+/**
+ * Test for {@link ThemeLocaleContextResolver}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class ThemeLocaleContextResolverTest {
+    private final ThemeLocaleContextResolver resolver = new ThemeLocaleContextResolver();
+
+    @Test
+    public void resolveTimeZone() {
+        TimeZoneAwareLocaleContext localeContext =
+            (TimeZoneAwareLocaleContext) this.resolver.resolveLocaleContext(
+                exchangeTimeZone(CHINA));
+        assertThat(localeContext.getTimeZone()).isNotNull();
+        assertThat(localeContext.getTimeZone())
+            .isEqualTo(TimeZone.getTimeZone("America/Adak"));
+        assertThat(localeContext.getLocale()).isNotNull();
+        assertThat(localeContext.getLocale().getLanguage()).isEqualTo("en");
+    }
+
+    @Test
+    public void resolve() {
+        assertThat(this.resolver.resolveLocaleContext(exchange(CANADA)).getLocale())
+            .isEqualTo(CANADA);
+        assertThat(this.resolver.resolveLocaleContext(exchange(US, CANADA)).getLocale())
+            .isEqualTo(US);
+    }
+
+    @Test
+    public void resolveFromParam() {
+        assertThat(this.resolver.resolveLocaleContext(exchangeForParam("en")).getLocale())
+            .isEqualTo(ENGLISH);
+        assertThat(this.resolver.resolveLocaleContext(exchangeForParam("zh")).getLocale())
+            .isEqualTo(CHINESE);
+    }
+
+    @Test
+    public void resolvePreferredSupported() {
+        this.resolver.setSupportedLocales(Collections.singletonList(CANADA));
+        assertThat(this.resolver.resolveLocaleContext(exchange(US, CANADA)).getLocale()).isEqualTo(
+            CANADA);
+    }
+
+    @Test
+    public void resolvePreferredNotSupported() {
+        this.resolver.setSupportedLocales(Collections.singletonList(CANADA));
+        assertThat(this.resolver.resolveLocaleContext(exchange(US, UK)).getLocale()).isEqualTo(US);
+    }
+
+    @Test
+    public void resolvePreferredNotSupportedWithDefault() {
+        this.resolver.setSupportedLocales(Arrays.asList(US, JAPAN));
+        this.resolver.setDefaultLocale(JAPAN);
+        assertThat(this.resolver.resolveLocaleContext(exchange(KOREA)).getLocale()).isEqualTo(
+            JAPAN);
+    }
+
+    @Test
+    public void resolvePreferredAgainstLanguageOnly() {
+        this.resolver.setSupportedLocales(Collections.singletonList(ENGLISH));
+        assertThat(
+            this.resolver.resolveLocaleContext(exchange(GERMANY, US, UK)).getLocale()).isEqualTo(
+            ENGLISH);
+    }
+
+    @Test
+    public void resolvePreferredAgainstCountryIfPossible() {
+        this.resolver.setSupportedLocales(Arrays.asList(ENGLISH, UK));
+        assertThat(
+            this.resolver.resolveLocaleContext(exchange(GERMANY, US, UK)).getLocale()).isEqualTo(
+            UK);
+    }
+
+    @Test
+    public void resolvePreferredAgainstLanguageWithMultipleSupportedLocales() {
+        this.resolver.setSupportedLocales(Arrays.asList(GERMAN, US));
+        assertThat(
+            this.resolver.resolveLocaleContext(exchange(GERMANY, US, UK)).getLocale()).isEqualTo(
+            GERMAN);
+    }
+
+    @Test
+    public void resolveMissingAcceptLanguageHeader() {
+        MockServerHttpRequest request = MockServerHttpRequest.get("/").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+        assertThat(this.resolver.resolveLocaleContext(exchange).getLocale()).isNull();
+    }
+
+    @Test
+    public void resolveMissingAcceptLanguageHeaderWithDefault() {
+        this.resolver.setDefaultLocale(US);
+
+        MockServerHttpRequest request = MockServerHttpRequest.get("/").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+        assertThat(this.resolver.resolveLocaleContext(exchange).getLocale()).isEqualTo(US);
+    }
+
+    @Test
+    public void resolveEmptyAcceptLanguageHeader() {
+        MockServerHttpRequest request =
+            MockServerHttpRequest.get("/").header(HttpHeaders.ACCEPT_LANGUAGE, "").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+        assertThat(this.resolver.resolveLocaleContext(exchange).getLocale()).isNull();
+    }
+
+    @Test
+    public void resolveEmptyAcceptLanguageHeaderWithDefault() {
+        this.resolver.setDefaultLocale(US);
+
+        MockServerHttpRequest request =
+            MockServerHttpRequest.get("/").header(HttpHeaders.ACCEPT_LANGUAGE, "").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+        assertThat(this.resolver.resolveLocaleContext(exchange).getLocale()).isEqualTo(US);
+    }
+
+    @Test
+    public void resolveInvalidAcceptLanguageHeader() {
+        MockServerHttpRequest request =
+            MockServerHttpRequest.get("/").header(HttpHeaders.ACCEPT_LANGUAGE, "en_US").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+        assertThat(this.resolver.resolveLocaleContext(exchange).getLocale()).isNull();
+    }
+
+    @Test
+    public void resolveInvalidAcceptLanguageHeaderWithDefault() {
+        this.resolver.setDefaultLocale(US);
+
+        MockServerHttpRequest request =
+            MockServerHttpRequest.get("/").header(HttpHeaders.ACCEPT_LANGUAGE, "en_US").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+        assertThat(this.resolver.resolveLocaleContext(exchange).getLocale()).isEqualTo(US);
+    }
+
+    @Test
+    public void defaultLocale() {
+        this.resolver.setDefaultLocale(JAPANESE);
+        MockServerHttpRequest request = MockServerHttpRequest.get("/").build();
+        MockServerWebExchange exchange = MockServerWebExchange.from(request);
+        assertThat(this.resolver.resolveLocaleContext(exchange).getLocale()).isEqualTo(JAPANESE);
+
+        request = MockServerHttpRequest.get("/").acceptLanguageAsLocales(US).build();
+        exchange = MockServerWebExchange.from(request);
+        assertThat(this.resolver.resolveLocaleContext(exchange).getLocale()).isEqualTo(US);
+    }
+
+
+    private ServerWebExchange exchange(Locale... locales) {
+        return MockServerWebExchange.from(
+            MockServerHttpRequest.get("").acceptLanguageAsLocales(locales));
+    }
+
+    private ServerWebExchange exchangeTimeZone(Locale... locales) {
+        return MockServerWebExchange.from(
+            MockServerHttpRequest.get("").acceptLanguageAsLocales(locales)
+                .cookie(new HttpCookie(TIME_ZONE_COOKIE_NAME, "America/Adak"))
+                .cookie(new HttpCookie(DEFAULT_PARAMETER_NAME, "en")));
+    }
+
+    private ServerWebExchange exchangeForParam(String language) {
+        return MockServerWebExchange.from(
+            MockServerHttpRequest.get("/index?language=" + language));
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/ViewNameResolverTest.java b/application/src/test/java/run/halo/app/theme/ViewNameResolverTest.java
new file mode 100644
index 0000000..2c8c602
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/ViewNameResolverTest.java
@@ -0,0 +1,110 @@
+package run.halo.app.theme;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.when;
+
+import java.io.File;
+import java.io.IOException;
+import java.net.URI;
+import java.net.URISyntaxException;
+import java.nio.file.Files;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Mockito;
+import org.springframework.boot.autoconfigure.thymeleaf.ThymeleafProperties;
+import org.springframework.http.HttpMethod;
+import org.springframework.mock.web.reactive.function.server.MockServerRequest;
+import org.springframework.test.context.junit.jupiter.SpringExtension;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+
+/**
+ * Tests for {@link DefaultViewNameResolver}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(SpringExtension.class)
+class ViewNameResolverTest {
+
+    @Mock
+    private ThemeResolver themeResolver;
+
+    @Mock
+    private ThymeleafProperties thymeleafProperties;
+
+    @InjectMocks
+    private DefaultViewNameResolver viewNameResolver;
+
+    @TempDir
+    private File themePath;
+
+    @BeforeEach
+    void setUp() throws IOException {
+        when(thymeleafProperties.getSuffix()).thenReturn(ThymeleafProperties.DEFAULT_SUFFIX);
+
+        var templatesPath = themePath.toPath().resolve("templates");
+        if (!Files.exists(templatesPath)) {
+            Files.createDirectory(templatesPath);
+        }
+        Files.createFile(templatesPath.resolve("post_news.html"));
+        Files.createFile(templatesPath.resolve("post_docs.html"));
+
+        when(themeResolver.getTheme(any()))
+            .thenReturn(Mono.fromSupplier(() -> ThemeContext.builder()
+                .name("fake-theme")
+                .path(themePath.toPath())
+                .active(true)
+                .build())
+            );
+    }
+
+    @Test
+    void resolveViewNameOrDefault() throws URISyntaxException {
+        ServerWebExchange exchange = Mockito.mock(ServerWebExchange.class);
+        MockServerRequest request = MockServerRequest.builder()
+            .uri(new URI("/")).method(HttpMethod.GET)
+            .exchange(exchange)
+            .build();
+
+        viewNameResolver.resolveViewNameOrDefault(request, "post_news", "post")
+            .as(StepVerifier::create)
+            .expectNext("post_news")
+            .verifyComplete();
+
+        // post_docs.html
+        String viewName = "post_docs" + thymeleafProperties.getSuffix();
+        viewNameResolver.resolveViewNameOrDefault(request, viewName, "post")
+            .as(StepVerifier::create)
+            .expectNext(viewName)
+            .verifyComplete();
+
+        viewNameResolver.resolveViewNameOrDefault(request, "post_nothing", "post")
+            .as(StepVerifier::create)
+            .expectNext("post")
+            .verifyComplete();
+    }
+
+    @Test
+    void processName() {
+        var suffix = thymeleafProperties.getSuffix();
+        assertThat(viewNameResolver.computeResourceName("post_news"))
+            .isEqualTo("post_news" + suffix);
+        assertThat(
+            viewNameResolver.computeResourceName("post_news" + suffix))
+            .isEqualTo("post_news" + suffix);
+        assertThat(viewNameResolver.computeResourceName("post_news.test"))
+            .isEqualTo("post_news.test" + suffix);
+
+        assertThatThrownBy(() -> viewNameResolver.computeResourceName(null))
+            .isInstanceOf(IllegalArgumentException.class)
+            .hasMessage("Name must not be null");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/dialect/CommentElementTagProcessorTest.java b/application/src/test/java/run/halo/app/theme/dialect/CommentElementTagProcessorTest.java
new file mode 100644
index 0000000..2a0726b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/dialect/CommentElementTagProcessorTest.java
@@ -0,0 +1,144 @@
+package run.halo.app.theme.dialect;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.util.Map;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationContext;
+import org.thymeleaf.IEngineConfiguration;
+import org.thymeleaf.TemplateEngine;
+import org.thymeleaf.context.Context;
+import org.thymeleaf.context.ITemplateContext;
+import org.thymeleaf.model.IProcessableElementTag;
+import org.thymeleaf.processor.element.IElementTagStructureHandler;
+import org.thymeleaf.spring6.dialect.SpringStandardDialect;
+import org.thymeleaf.spring6.expression.ThymeleafEvaluationContext;
+import org.thymeleaf.templateresolver.StringTemplateResolver;
+import org.thymeleaf.templateresource.ITemplateResource;
+import org.thymeleaf.templateresource.StringTemplateResource;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+
+/**
+ * Tests for {@link CommentElementTagProcessor}.
+ *
+ * @author guqing
+ * @see ExtensionComponentsFinder
+ * @see HaloProcessorDialect
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class CommentElementTagProcessorTest {
+
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    private ExtensionGetter extensionGetter;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    private TemplateEngine templateEngine;
+
+    @BeforeEach
+    void setUp() {
+        HaloProcessorDialect haloProcessorDialect = new HaloProcessorDialect();
+        templateEngine = new TemplateEngine();
+        templateEngine.setDialects(Set.of(haloProcessorDialect, new SpringStandardDialect()));
+        templateEngine.addTemplateResolver(new TestTemplateResolver());
+        lenient().when(applicationContext.getBean(eq(ExtensionGetter.class)))
+            .thenReturn(extensionGetter);
+    }
+
+    @Test
+    void doProcess() {
+        Context context = getContext();
+
+        when(applicationContext.getBean(eq(SystemConfigurableEnvironmentFetcher.class)))
+            .thenReturn(environmentFetcher);
+        var commentSetting = mock(SystemSetting.Comment.class);
+        when(environmentFetcher.fetchComment())
+            .thenReturn(Mono.just(commentSetting));
+        when(commentSetting.getEnable()).thenReturn(true);
+
+        when(extensionGetter.getEnabledExtensions(eq(CommentWidget.class)))
+            .thenReturn(Flux.empty());
+        String result = templateEngine.process("commentWidget", context);
+        assertThat(result).isEqualTo("""
+            
+            
+              
+                
comment widget:

+               \s
+              
+            
+            """);
+
+        when(extensionGetter.getEnabledExtensions(eq(CommentWidget.class)))
+            .thenReturn(Flux.just(new DefaultCommentWidget()));
+        result = templateEngine.process("commentWidget", context);
+        assertThat(result).isEqualTo("""
+            
+            
+              
+                
comment widget:

+                
Comment in default widget

+              
+            
+            """);
+    }
+
+    static class DefaultCommentWidget implements CommentWidget {
+
+        @Override
+        public void render(ITemplateContext context, IProcessableElementTag tag,
+            IElementTagStructureHandler structureHandler) {
+            structureHandler.replaceWith("
Comment in default widget
", false);
+        }
+    }
+
+    private Context getContext() {
+        Context context = new Context();
+        context.setVariable(
+            ThymeleafEvaluationContext.THYMELEAF_EVALUATION_CONTEXT_CONTEXT_VARIABLE_NAME,
+            new ThymeleafEvaluationContext(applicationContext, null));
+        return context;
+    }
+
+    static class TestTemplateResolver extends StringTemplateResolver {
+        @Override
+        protected ITemplateResource computeTemplateResource(IEngineConfiguration configuration,
+            String ownerTemplate, String template,
+            Map templateResolutionAttributes) {
+            if (template.equals("commentWidget")) {
+                return new StringTemplateResource(commentWidget());
+            }
+            return null;
+        }
+
+        private String commentWidget() {
+            return """
+                
+                
+                  
+                    
comment widget:

+                    
+                  
+                
+                """;
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/dialect/CommentEnabledVariableProcessorTest.java b/application/src/test/java/run/halo/app/theme/dialect/CommentEnabledVariableProcessorTest.java
new file mode 100644
index 0000000..507b7d5
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/dialect/CommentEnabledVariableProcessorTest.java
@@ -0,0 +1,121 @@
+package run.halo.app.theme.dialect;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationContext;
+import org.thymeleaf.context.WebEngineContext;
+import org.thymeleaf.spring6.expression.ThymeleafEvaluationContext;
+import org.thymeleaf.web.IWebExchange;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+
+/**
+ * Tests for {@link CommentEnabledVariableProcessor}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(MockitoExtension.class)
+class CommentEnabledVariableProcessorTest {
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    private ExtensionGetter extensionGetter;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @BeforeEach
+    void setUp() {
+        lenient().when(applicationContext.getBean(eq(ExtensionGetter.class)))
+            .thenReturn(extensionGetter);
+    }
+
+    @Test
+    void getCommentWidget() {
+        when(applicationContext.getBean(eq(SystemConfigurableEnvironmentFetcher.class)))
+            .thenReturn(environmentFetcher);
+        SystemSetting.Comment commentSetting = mock(SystemSetting.Comment.class);
+        when(environmentFetcher.fetchComment())
+            .thenReturn(Mono.just(commentSetting));
+
+        CommentWidget commentWidget = mock(CommentWidget.class);
+        when(extensionGetter.getEnabledExtensions(CommentWidget.class))
+            .thenReturn(Flux.just(commentWidget));
+        WebEngineContext webContext = mock(WebEngineContext.class);
+        var evaluationContext = mock(ThymeleafEvaluationContext.class);
+        when(webContext.getVariable(
+            eq(ThymeleafEvaluationContext.THYMELEAF_EVALUATION_CONTEXT_CONTEXT_VARIABLE_NAME)))
+            .thenReturn(evaluationContext);
+        when(evaluationContext.getApplicationContext()).thenReturn(applicationContext);
+        IWebExchange webExchange = mock(IWebExchange.class);
+        when(webContext.getExchange()).thenReturn(webExchange);
+
+        // comment disabled
+        when(commentSetting.getEnable()).thenReturn(true);
+        assertThat(
+            CommentEnabledVariableProcessor.getCommentWidget(webContext).isPresent()).isTrue();
+
+        // comment enabled
+        when(commentSetting.getEnable()).thenReturn(false);
+        assertThat(
+            CommentEnabledVariableProcessor.getCommentWidget(webContext).isPresent()).isFalse();
+
+        // comment enabled and ENABLE_COMMENT_ATTRIBUTE is true
+        when(commentSetting.getEnable()).thenReturn(true);
+        when(webExchange.getAttributeValue(CommentWidget.ENABLE_COMMENT_ATTRIBUTE))
+            .thenReturn(true);
+        assertThat(
+            CommentEnabledVariableProcessor.getCommentWidget(webContext).isPresent()).isTrue();
+
+        // comment enabled and ENABLE_COMMENT_ATTRIBUTE is false
+        when(commentSetting.getEnable()).thenReturn(true);
+        when(webExchange.getAttributeValue(CommentWidget.ENABLE_COMMENT_ATTRIBUTE))
+            .thenReturn(false);
+        assertThat(
+            CommentEnabledVariableProcessor.getCommentWidget(webContext).isPresent()).isFalse();
+
+        // comment enabled and ENABLE_COMMENT_ATTRIBUTE is null
+        when(commentSetting.getEnable()).thenReturn(true);
+        when(webExchange.getAttributeValue(CommentWidget.ENABLE_COMMENT_ATTRIBUTE))
+            .thenReturn(null);
+        assertThat(
+            CommentEnabledVariableProcessor.getCommentWidget(webContext).isPresent()).isTrue();
+
+        // comment enabled and ENABLE_COMMENT_ATTRIBUTE is 'false'
+        when(commentSetting.getEnable()).thenReturn(true);
+        when(webExchange.getAttributeValue(CommentWidget.ENABLE_COMMENT_ATTRIBUTE))
+            .thenReturn("false");
+        assertThat(
+            CommentEnabledVariableProcessor.getCommentWidget(webContext).isPresent()).isFalse();
+    }
+
+    @Test
+    void populateAllowCommentAttribute() {
+        WebEngineContext webContext = mock(WebEngineContext.class);
+        IWebExchange webExchange = mock(IWebExchange.class);
+        when(webContext.getExchange()).thenReturn(webExchange);
+
+        CommentEnabledVariableProcessor.populateAllowCommentAttribute(webContext, true);
+        verify(webExchange).setAttributeValue(
+            eq(CommentEnabledVariableProcessor.COMMENT_ENABLED_MODEL_ATTRIBUTE), eq(true));
+
+        CommentEnabledVariableProcessor.populateAllowCommentAttribute(webContext, false);
+        verify(webExchange).setAttributeValue(
+            eq(CommentEnabledVariableProcessor.COMMENT_ENABLED_MODEL_ATTRIBUTE), eq(false));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessorIntegrationTest.java b/application/src/test/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessorIntegrationTest.java
new file mode 100644
index 0000000..2ab16d4
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessorIntegrationTest.java
@@ -0,0 +1,205 @@
+package run.halo.app.theme.dialect;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import org.jsoup.Jsoup;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.context.ApplicationContext;
+import org.springframework.core.annotation.AnnotationAwareOrderComparator;
+import org.thymeleaf.IEngineConfiguration;
+import org.thymeleaf.TemplateEngine;
+import org.thymeleaf.context.Context;
+import org.thymeleaf.spring6.dialect.SpringStandardDialect;
+import org.thymeleaf.spring6.expression.ThymeleafEvaluationContext;
+import org.thymeleaf.templateresolver.StringTemplateResolver;
+import org.thymeleaf.templateresource.ITemplateResource;
+import org.thymeleaf.templateresource.StringTemplateResource;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+import run.halo.app.theme.DefaultTemplateEnum;
+import run.halo.app.theme.finders.PostFinder;
+import run.halo.app.theme.finders.SinglePageFinder;
+import run.halo.app.theme.finders.vo.PostVo;
+import run.halo.app.theme.router.ModelConst;
+
+/**
+ * Integration tests for {@link ContentTemplateHeadProcessor}.
+ *
+ * @author guqing
+ * @see HaloProcessorDialect
+ * @see GlobalHeadInjectionProcessor
+ * @see ContentTemplateHeadProcessor
+ * @see TemplateHeadProcessor
+ * @see TemplateGlobalHeadProcessor
+ * @see TemplateFooterElementTagProcessor
+ * @since 2.7.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ContentTemplateHeadProcessorIntegrationTest {
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    private PostFinder postFinder;
+
+    @Mock
+    private SinglePageFinder singlePageFinder;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher fetcher;
+
+    @Mock
+    ExtensionGetter extensionGetter;
+
+    private TemplateEngine templateEngine;
+
+    @BeforeEach
+    void setUp() {
+        HaloProcessorDialect haloProcessorDialect = new HaloProcessorDialect();
+        templateEngine = new TemplateEngine();
+        templateEngine.setDialects(Set.of(haloProcessorDialect, new SpringStandardDialect()));
+        templateEngine.addTemplateResolver(new TestTemplateResolver());
+
+        Map map = new HashMap<>();
+        map.put("postTemplateHeadProcessor",
+            new ContentTemplateHeadProcessor(postFinder, singlePageFinder));
+        map.put("templateGlobalHeadProcessor", new TemplateGlobalHeadProcessor(fetcher));
+        map.put("seoProcessor", new GlobalSeoProcessor(fetcher));
+        map.put("duplicateMetaTagProcessor", new DuplicateMetaTagProcessor());
+        lenient().when(applicationContext.getBeansOfType(eq(TemplateHeadProcessor.class)))
+            .thenReturn(map);
+
+        SystemSetting.Seo seo = new SystemSetting.Seo();
+        seo.setKeywords("global keywords");
+        seo.setDescription("global description");
+        lenient().when(fetcher.fetch(eq(SystemSetting.Seo.GROUP), eq(SystemSetting.Seo.class)))
+            .thenReturn(Mono.just(seo));
+
+        SystemSetting.CodeInjection codeInjection = new SystemSetting.CodeInjection();
+        codeInjection.setGlobalHead(
+            "");
+        codeInjection.setContentHead(
+            "");
+        lenient().when(fetcher.fetch(eq(SystemSetting.CodeInjection.GROUP),
+            eq(SystemSetting.CodeInjection.class))).thenReturn(Mono.just(codeInjection));
+
+        lenient().when(fetcher.fetch(eq(SystemSetting.Seo.GROUP), eq(SystemSetting.Seo.class)))
+            .thenReturn(Mono.empty());
+
+        lenient().when(applicationContext.getBeanProvider(ExtensionGetter.class))
+                .thenAnswer(invocation -> {
+                    var objectProvider = mock(ObjectProvider.class);
+                    when(objectProvider.getIfUnique()).thenReturn(extensionGetter);
+                    return objectProvider;
+                });
+        lenient().when(extensionGetter.getExtensions(TemplateHeadProcessor.class)).thenReturn(
+            Flux.fromIterable(map.values()).sort(AnnotationAwareOrderComparator.INSTANCE)
+        );
+        lenient().when(applicationContext.getBean(eq(SystemConfigurableEnvironmentFetcher.class)))
+            .thenReturn(fetcher);
+        lenient().when(fetcher.fetchComment()).thenReturn(Mono.just(new SystemSetting.Comment()));
+    }
+
+
+    @Test
+    void overrideGlobalMetaTest() {
+        Context context = getContext();
+        context.setVariable("name", "fake-post");
+        // template id flag is used by TemplateGlobalHeadProcessor
+        context.setVariable(ModelConst.TEMPLATE_ID, DefaultTemplateEnum.POST.getValue());
+
+        List> htmlMetas = new ArrayList<>();
+        htmlMetas.add(mutableMetaMap("keyword", "postK1,postK2"));
+        htmlMetas.add(mutableMetaMap("description", "post-description"));
+        htmlMetas.add(mutableMetaMap("other", "post-other-meta"));
+        Post.PostSpec postSpec = new Post.PostSpec();
+        postSpec.setHtmlMetas(htmlMetas);
+        Metadata metadata = new Metadata();
+        metadata.setName("fake-post");
+        PostVo postVo = PostVo.builder().spec(postSpec).metadata(metadata).build();
+        when(postFinder.getByName(eq("fake-post"))).thenReturn(Mono.just(postVo));
+
+        String result = templateEngine.process("post", context);
+        /*
+          this test case shows:
+            1. global seo meta keywords and description is overridden by content head meta
+            2. global head meta is overridden by content head meta
+            3. but global head meta is not overridden by global seo meta
+         */
+        assertThat(Jsoup.parse(result).html()).isEqualTo("""
+            
+            
+             
+              
+              Post detail
+              
+              
+              
+             
+             
+              this is body
+             
+            """);
+    }
+
+    Map mutableMetaMap(String nameValue, String contentValue) {
+        Map map = new HashMap<>();
+        map.put("name", nameValue);
+        map.put("content", contentValue);
+        return map;
+    }
+
+    private Context getContext() {
+        Context context = new Context();
+        context.setVariable(
+            ThymeleafEvaluationContext.THYMELEAF_EVALUATION_CONTEXT_CONTEXT_VARIABLE_NAME,
+            new ThymeleafEvaluationContext(applicationContext, null));
+        return context;
+    }
+
+    static class TestTemplateResolver extends StringTemplateResolver {
+        @Override
+        protected ITemplateResource computeTemplateResource(IEngineConfiguration configuration,
+            String ownerTemplate, String template,
+            Map templateResolutionAttributes) {
+            if (template.equals("post")) {
+                return new StringTemplateResource(postTemplate());
+            }
+            return null;
+        }
+
+        private String postTemplate() {
+            return """
+                
+                
+                  
+                    
+                    Post detail
+                  
+                  
+                    this is body
+                  
+                
+                """;
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessorTest.java b/application/src/test/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessorTest.java
new file mode 100644
index 0000000..837e19b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/dialect/ContentTemplateHeadProcessorTest.java
@@ -0,0 +1,88 @@
+package run.halo.app.theme.dialect;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link ContentTemplateHeadProcessor}.
+ *
+ * @author guqing
+ * @since 2.5.0
+ */
+class ContentTemplateHeadProcessorTest {
+
+    @Nested
+    class ExcerptToMetaDescriptionTest {
+        @Test
+        void toMetaWhenExcerptIsNull() {
+            List> htmlMetas = new ArrayList<>();
+            htmlMetas.add(createMetaMap("keywords", "test"));
+            var result = ContentTemplateHeadProcessor.excerptToMetaDescriptionIfAbsent(htmlMetas,
+                null);
+            assertThat(result).hasSize(2);
+            assertThat(result.get(0)).containsEntry("name", "keywords");
+            assertThat(result.get(1)).containsEntry("name", "description")
+                .containsEntry("content", "");
+        }
+
+        @Test
+        void toMetaWhenWhenHtmlMetaIsNull() {
+            var result = ContentTemplateHeadProcessor.excerptToMetaDescriptionIfAbsent(null,
+                null);
+            assertThat(result).hasSize(1);
+            assertThat(result.get(0)).containsEntry("name", "description")
+                .containsEntry("content", "");
+        }
+
+        @Test
+        void toMetaWhenWhenExcerptNotEmpty() {
+            List> htmlMetas = new ArrayList<>();
+            htmlMetas.add(createMetaMap("keywords", "test"));
+            var result = ContentTemplateHeadProcessor.excerptToMetaDescriptionIfAbsent(htmlMetas,
+                "test excerpt");
+            assertThat(result).hasSize(2);
+            assertThat(result.get(0)).containsEntry("name", "keywords");
+            assertThat(result.get(1)).containsEntry("name", "description")
+                .containsEntry("content", "test excerpt");
+        }
+
+        @Test
+        void toMetaWhenWhenDescriptionExistsAndEmpty() {
+            List> htmlMetas = new ArrayList<>();
+            htmlMetas.add(createMetaMap("keywords", "test"));
+            htmlMetas.add(createMetaMap("description", ""));
+            var result = ContentTemplateHeadProcessor.excerptToMetaDescriptionIfAbsent(htmlMetas,
+                "test excerpt");
+            assertThat(result).hasSize(2);
+            assertThat(result.get(0)).containsEntry("name", "keywords");
+            assertThat(result.get(1)).containsEntry("name", "description")
+                .containsEntry("content", "test excerpt");
+        }
+
+        @Test
+        void toMetaWhenWhenDescriptionExistsAndNotEmpty() {
+            List> htmlMetas = new ArrayList<>();
+            htmlMetas.add(createMetaMap("keywords", "test"));
+            htmlMetas.add(createMetaMap("description", "test description"));
+            var result = ContentTemplateHeadProcessor.excerptToMetaDescriptionIfAbsent(htmlMetas,
+                "test excerpt");
+            assertThat(result).hasSize(2);
+            assertThat(result.get(0)).containsEntry("name", "keywords");
+            assertThat(result.get(1)).containsEntry("name", "description")
+                .containsEntry("content", "test description");
+        }
+
+        Map createMetaMap(String nameValue, String contentValue) {
+            Map metaMap = new HashMap<>();
+            metaMap.put("name", nameValue);
+            metaMap.put("content", contentValue);
+            return metaMap;
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/dialect/DuplicateMetaTagProcessorTest.java b/application/src/test/java/run/halo/app/theme/dialect/DuplicateMetaTagProcessorTest.java
new file mode 100644
index 0000000..d48e658
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/dialect/DuplicateMetaTagProcessorTest.java
@@ -0,0 +1,51 @@
+package run.halo.app.theme.dialect;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.regex.Matcher;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link DuplicateMetaTagProcessor}.
+ *
+ * @author guqing
+ * @since 2.8.0
+ */
+class DuplicateMetaTagProcessorTest {
+
+    @Test
+    void extractMetaTag() {
+        // normal
+        String text = "";
+        Matcher matcher = DuplicateMetaTagProcessor.META_PATTERN.matcher(text);
+        assertThat(matcher.find()).isTrue();
+        assertThat(matcher.group(1)).isEqualTo("description");
+
+        // name and content are not in the general order
+        text = "";
+        matcher = DuplicateMetaTagProcessor.META_PATTERN.matcher(text);
+        assertThat(matcher.find()).isTrue();
+        assertThat(matcher.group(1)).isEqualTo("keywords");
+
+        // no closing slash
+        text = "";
+        matcher = DuplicateMetaTagProcessor.META_PATTERN.matcher(text);
+        assertThat(matcher.find()).isTrue();
+        assertThat(matcher.group(1)).isEqualTo("keywords");
+
+        // multiple line breaks and other stuff
+        text = """
+            
+            
+            
+            """;
+        matcher = DuplicateMetaTagProcessor.META_PATTERN.matcher(text);
+        assertThat(matcher.find()).isTrue();
+        assertThat(matcher.group(1)).isEqualTo("description");
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/dialect/GeneratorMetaProcessorTest.java b/application/src/test/java/run/halo/app/theme/dialect/GeneratorMetaProcessorTest.java
new file mode 100644
index 0000000..a732d7a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/dialect/GeneratorMetaProcessorTest.java
@@ -0,0 +1,59 @@
+package run.halo.app.theme.dialect;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.when;
+
+import java.io.FileNotFoundException;
+import java.net.URISyntaxException;
+import java.nio.file.Path;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.mock.mockito.MockBean;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.util.ResourceUtils;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+import run.halo.app.infra.InitializationStateGetter;
+import run.halo.app.theme.ThemeContext;
+import run.halo.app.theme.ThemeResolver;
+
+@SpringBootTest
+@AutoConfigureWebTestClient
+class GeneratorMetaProcessorTest {
+
+    @Autowired
+    WebTestClient webClient;
+
+    @MockBean
+    InitializationStateGetter initializationStateGetter;
+
+    @MockBean
+    ThemeResolver themeResolver;
+
+    @BeforeEach
+    void setUp() throws FileNotFoundException, URISyntaxException {
+        when(initializationStateGetter.userInitialized()).thenReturn(Mono.just(true));
+        var themeContext = ThemeContext.builder()
+            .name("default")
+            .path(Path.of(ResourceUtils.getURL("classpath:themes/default").toURI()))
+            .active(true)
+            .build();
+        when(themeResolver.getTheme(any(ServerWebExchange.class)))
+            .thenReturn(Mono.just(themeContext));
+    }
+
+    @Test
+    void requestIndexPage() {
+        webClient.get().uri("/")
+            .exchange()
+            .expectStatus().isOk()
+            .expectBody()
+            .consumeWith(System.out::println)
+            .xpath("/html/head/meta[@name=\"generator\"][starts-with(@content, \"Halo \")]")
+            .exists();
+    }
+
+}
diff --git a/application/src/test/java/run/halo/app/theme/dialect/HaloProcessorDialectTest.java b/application/src/test/java/run/halo/app/theme/dialect/HaloProcessorDialectTest.java
new file mode 100644
index 0000000..c4c18af
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/dialect/HaloProcessorDialectTest.java
@@ -0,0 +1,442 @@
+package run.halo.app.theme.dialect;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import com.google.common.collect.ImmutableSortedMap;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.context.ApplicationContext;
+import org.springframework.core.annotation.AnnotationAwareOrderComparator;
+import org.thymeleaf.IEngineConfiguration;
+import org.thymeleaf.TemplateEngine;
+import org.thymeleaf.context.Context;
+import org.thymeleaf.spring6.dialect.SpringStandardDialect;
+import org.thymeleaf.spring6.expression.ThymeleafEvaluationContext;
+import org.thymeleaf.templateresolver.StringTemplateResolver;
+import org.thymeleaf.templateresource.ITemplateResource;
+import org.thymeleaf.templateresource.StringTemplateResource;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.infra.SystemSetting.CodeInjection;
+import run.halo.app.infra.SystemSetting.Seo;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+import run.halo.app.theme.DefaultTemplateEnum;
+import run.halo.app.theme.finders.PostFinder;
+import run.halo.app.theme.finders.SinglePageFinder;
+import run.halo.app.theme.finders.vo.PostVo;
+import run.halo.app.theme.finders.vo.UserVo;
+import run.halo.app.theme.router.ModelConst;
+
+/**
+ * Tests for {@link HaloProcessorDialect}.
+ *
+ * @author guqing
+ * @see HaloProcessorDialect
+ * @see GlobalHeadInjectionProcessor
+ * @see ContentTemplateHeadProcessor
+ * @see TemplateHeadProcessor
+ * @see TemplateGlobalHeadProcessor
+ * @see TemplateFooterElementTagProcessor
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class HaloProcessorDialectTest {
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    private PostFinder postFinder;
+
+    @Mock
+    private SinglePageFinder singlePageFinder;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher fetcher;
+
+    @Mock
+    ExtensionGetter extensionGetter;
+
+    private TemplateEngine templateEngine;
+
+    @BeforeEach
+    void setUp() {
+        HaloProcessorDialect haloProcessorDialect = new HaloProcessorDialect();
+        templateEngine = new TemplateEngine();
+        templateEngine.setDialects(Set.of(haloProcessorDialect, new SpringStandardDialect()));
+        templateEngine.addTemplateResolver(new TestTemplateResolver());
+
+        Map map = new HashMap<>();
+        map.put("postTemplateHeadProcessor",
+            new ContentTemplateHeadProcessor(postFinder, singlePageFinder));
+        map.put("templateGlobalHeadProcessor", new TemplateGlobalHeadProcessor(fetcher));
+        map.put("faviconHeadProcessor", new DefaultFaviconHeadProcessor(fetcher));
+        map.put("globalSeoProcessor", new GlobalSeoProcessor(fetcher));
+
+        CodeInjection codeInjection = new CodeInjection();
+        codeInjection.setContentHead("");
+        codeInjection.setGlobalHead("");
+        codeInjection.setFooter("
hello this is global footer.
");
+        lenient().when(fetcher.fetch(eq(CodeInjection.GROUP), eq(CodeInjection.class)))
+            .thenReturn(Mono.just(codeInjection));
+
+        lenient().when(applicationContext.getBean(eq(SystemConfigurableEnvironmentFetcher.class)))
+            .thenReturn(fetcher);
+        lenient().when(fetcher.fetch(eq(Seo.GROUP), eq(Seo.class)))
+            .thenReturn(Mono.empty());
+
+        lenient().when(applicationContext.getBeanProvider(ExtensionGetter.class))
+            .then(invocation -> {
+                @SuppressWarnings("unchecked")
+                ObjectProvider objectProvider = mock(ObjectProvider.class);
+                when(objectProvider.getIfUnique()).thenReturn(extensionGetter);
+                return objectProvider;
+            });
+        lenient().when(extensionGetter.getExtensions(TemplateHeadProcessor.class)).thenReturn(
+            Flux.fromIterable(map.values()).sort(AnnotationAwareOrderComparator.INSTANCE)
+        );
+
+        lenient().when(fetcher.fetchComment())
+            .thenReturn(Mono.just(new SystemSetting.Comment()));
+    }
+
+    @Test
+    void globalHeadAndFooterProcessors() {
+        SystemSetting.Basic basic = new SystemSetting.Basic();
+        basic.setFavicon("favicon.ico");
+        when(fetcher.fetch(eq(SystemSetting.Basic.GROUP),
+            eq(SystemSetting.Basic.class))).thenReturn(Mono.just(basic));
+
+        when(extensionGetter.getExtensions(TemplateFooterProcessor.class))
+            .thenReturn(Flux.empty());
+
+        Context context = getContext();
+
+        String result = templateEngine.process("index", context);
+        assertThat(result).isEqualTo("""
+            
+            
+              
+                
+                Index
+              
+            
+            
+              
+                
index

+            

+              
hello this is global footer.

+            

+                        
+              
+            
+            """);
+    }
+
+    @Test
+    void contentHeadAndFooterAndPostProcessors() {
+        Context context = getContext();
+        context.setVariable("name", "fake-post");
+        // template id flag is used by TemplateGlobalHeadProcessor
+        context.setVariable(ModelConst.TEMPLATE_ID, DefaultTemplateEnum.POST.getValue());
+
+        List> htmlMetas = new ArrayList<>();
+        htmlMetas.add(ImmutableSortedMap.of("name", "post-meta-V1", "content", "post-meta-V1"));
+        htmlMetas.add(ImmutableSortedMap.of("name", "post-meta-V2", "content", "post-meta-V2"));
+        Post.PostSpec postSpec = new Post.PostSpec();
+        postSpec.setHtmlMetas(htmlMetas);
+        Metadata metadata = new Metadata();
+        metadata.setName("fake-post");
+        PostVo postVo = PostVo.builder()
+            .spec(postSpec)
+            .metadata(metadata).build();
+        when(postFinder.getByName(eq("fake-post"))).thenReturn(Mono.just(postVo));
+
+        SystemSetting.Basic basic = new SystemSetting.Basic();
+        basic.setFavicon(null);
+        when(fetcher.fetch(eq(SystemSetting.Basic.GROUP),
+            eq(SystemSetting.Basic.class))).thenReturn(Mono.just(basic));
+
+        when(extensionGetter.getExtensions(TemplateFooterProcessor.class))
+            .thenReturn(Flux.empty());
+
+        String result = templateEngine.process("post", context);
+        assertThat(result).isEqualTo("""
+            
+            
+              
+                
+                Post
+              
+            
+            \
+            \
+            \
+            
+              
+                
post

+            

+              
hello this is global footer.

+            

+                       
+              
+            
+            """);
+    }
+
+    @Test
+    void blockSeo() {
+        final Context context = getContext();
+        Seo seo = new Seo();
+        seo.setBlockSpiders(true);
+        when(fetcher.fetch(eq(Seo.GROUP),
+            eq(Seo.class))).thenReturn(Mono.just(seo));
+        SystemSetting.Basic basic = new SystemSetting.Basic();
+        basic.setFavicon("favicon.ico");
+        when(fetcher.fetch(eq(SystemSetting.Basic.GROUP),
+            eq(SystemSetting.Basic.class))).thenReturn(Mono.just(basic));
+
+        String result = templateEngine.process("seo", context);
+        assertThat(result).isEqualTo("""
+            
+            
+              
+                
+                Seo Test
+              
+            
+            
+            
+              
+                seo setting test.
+              
+            
+            """);
+    }
+
+    @Test
+    void seoWithKeywordsAndDescription() {
+        final Context context = getContext();
+        Seo seo = new Seo();
+        seo.setKeywords("K1, K2, K3");
+        seo.setDescription("This is a description.");
+        when(fetcher.fetch(eq(Seo.GROUP),
+            eq(Seo.class))).thenReturn(Mono.just(seo));
+        SystemSetting.Basic basic = new SystemSetting.Basic();
+        basic.setFavicon("favicon.ico");
+        when(fetcher.fetch(eq(SystemSetting.Basic.GROUP),
+            eq(SystemSetting.Basic.class))).thenReturn(Mono.just(basic));
+
+        String result = templateEngine.process("seo", context);
+        assertThat(result).isEqualTo("""
+            
+            
+              
+                
+                Seo Test
+              
+            
+            
+            
+            
+              
+                seo setting test.
+              
+            
+            """);
+    }
+
+    @Nested
+    class AnnotationExpressionObjectFactoryTest {
+
+        @Test
+        void getWhenAnnotationsIsNull() {
+            Context context = getContext();
+            context.setVariable("user", createUser());
+
+            String result = templateEngine.process("annotationsGetExpression", context);
+            assertThat(result).isEqualTo("
\n");
+        }
+
+        @Test
+        void getWhenAnnotationsExists() {
+            Context context = getContext();
+            UserVo user = createUser();
+            user.getMetadata().setAnnotations(Map.of("background", "fake-background"));
+            context.setVariable("user", user);
+
+            String result = templateEngine.process("annotationsGetExpression", context);
+            assertThat(result).isEqualTo("
fake-background
\n");
+        }
+
+        @Test
+        void getOrDefaultWhenAnnotationsIsNull() {
+            Context context = getContext();
+            UserVo user = createUser();
+            user.getMetadata().setAnnotations(Map.of("background", "red"));
+            context.setVariable("user", user);
+
+            String result = templateEngine.process("annotationsGetOrDefaultExpression", context);
+            assertThat(result).isEqualTo("
red
\n");
+        }
+
+        @Test
+        void getOrDefaultWhenAnnotationsExists() {
+            Context context = getContext();
+            context.setVariable("user", createUser());
+
+            String result = templateEngine.process("annotationsGetOrDefaultExpression", context);
+            assertThat(result).isEqualTo("
default-value
\n");
+        }
+
+        @Test
+        void containsWhenAnnotationsIsNull() {
+            Context context = getContext();
+            context.setVariable("user", createUser());
+
+            String result = templateEngine.process("annotationsContainsExpression", context);
+            assertThat(result).isEqualTo("
false
\n");
+        }
+
+        @Test
+        void containsWhenAnnotationsIsNotNull() {
+            Context context = getContext();
+            UserVo user = createUser();
+            user.getMetadata().setAnnotations(Map.of("background", ""));
+            context.setVariable("user", user);
+
+            String result = templateEngine.process("annotationsContainsExpression", context);
+            assertThat(result).isEqualTo("
true
\n");
+        }
+
+        UserVo createUser() {
+            User user = new User();
+            user.setMetadata(new Metadata());
+            user.getMetadata().setName("fake-user");
+            user.setSpec(new User.UserSpec());
+            return UserVo.from(user);
+        }
+    }
+
+    private Context getContext() {
+        Context context = new Context();
+        context.setVariable(
+            ThymeleafEvaluationContext.THYMELEAF_EVALUATION_CONTEXT_CONTEXT_VARIABLE_NAME,
+            new ThymeleafEvaluationContext(applicationContext, null));
+        return context;
+    }
+
+    static class TestTemplateResolver extends StringTemplateResolver {
+        @Override
+        protected ITemplateResource computeTemplateResource(IEngineConfiguration configuration,
+            String ownerTemplate, String template,
+            Map templateResolutionAttributes) {
+            if (template.equals(DefaultTemplateEnum.INDEX.getValue())) {
+                return new StringTemplateResource(indexTemplate());
+            }
+
+            if (template.equals(DefaultTemplateEnum.POST.getValue())) {
+                return new StringTemplateResource(postTemplate());
+            }
+
+            if (template.equals("seo")) {
+                return new StringTemplateResource(seoTemplate());
+            }
+
+            if (template.equals("annotationsGetExpression")) {
+                return new StringTemplateResource(annotationsGetExpression());
+            }
+            if (template.equals("annotationsGetOrDefaultExpression")) {
+                return new StringTemplateResource(annotationsGetOrDefaultExpression());
+            }
+            if (template.equals("annotationsContainsExpression")) {
+                return new StringTemplateResource(annotationsContainsExpression());
+            }
+            return null;
+        }
+
+        private String indexTemplate() {
+            return commonTemplate().formatted("Index", """
+                
index

+                

+                  
+                

+                """);
+        }
+
+        private String postTemplate() {
+            return commonTemplate().formatted("Post", """
+                
post

+                

+                  
+                

+                """);
+        }
+
+        private String commonTemplate() {
+            return """
+                
+                
+                  
+                    
+                    %s
+                  
+                  
+                    %s
+                  
+                
+                """;
+        }
+
+        private String seoTemplate() {
+            return """
+                
+                
+                  
+                    
+                    Seo Test
+                  
+                  
+                    seo setting test.
+                  
+                
+                """;
+        }
+
+        private String annotationsGetExpression() {
+            return """
+                

+                """;
+        }
+
+        private String annotationsGetOrDefaultExpression() {
+            return """
+                

+                """;
+        }
+
+        private String annotationsContainsExpression() {
+            return """
+                

+                """;
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/dialect/LinkExpressionObjectDialectTest.java b/application/src/test/java/run/halo/app/theme/dialect/LinkExpressionObjectDialectTest.java
new file mode 100644
index 0000000..9abf682
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/dialect/LinkExpressionObjectDialectTest.java
@@ -0,0 +1,25 @@
+package run.halo.app.theme.dialect;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link LinkExpressionObjectDialect}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class LinkExpressionObjectDialectTest {
+
+    private final LinkExpressionObjectDialect linkExpressionObjectDialect =
+        new LinkExpressionObjectDialect();
+
+    @Test
+    void getExpressionObjectFactory() {
+        assertThat(linkExpressionObjectDialect.getName())
+            .isEqualTo("themeLink");
+        assertThat(linkExpressionObjectDialect.getExpressionObjectFactory())
+            .isInstanceOf(DefaultLinkExpressionFactory.class);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/dialect/TemplateFooterElementTagProcessorTest.java b/application/src/test/java/run/halo/app/theme/dialect/TemplateFooterElementTagProcessorTest.java
new file mode 100644
index 0000000..9fec46b
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/dialect/TemplateFooterElementTagProcessorTest.java
@@ -0,0 +1,136 @@
+package run.halo.app.theme.dialect;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.util.HashSet;
+import java.util.Map;
+import java.util.Set;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.context.ApplicationContext;
+import org.thymeleaf.IEngineConfiguration;
+import org.thymeleaf.TemplateEngine;
+import org.thymeleaf.context.Context;
+import org.thymeleaf.context.ITemplateContext;
+import org.thymeleaf.model.IModel;
+import org.thymeleaf.model.IProcessableElementTag;
+import org.thymeleaf.processor.IProcessor;
+import org.thymeleaf.processor.element.IElementTagStructureHandler;
+import org.thymeleaf.spring6.dialect.SpringStandardDialect;
+import org.thymeleaf.spring6.expression.ThymeleafEvaluationContext;
+import org.thymeleaf.templateresolver.StringTemplateResolver;
+import org.thymeleaf.templateresource.ITemplateResource;
+import org.thymeleaf.templateresource.StringTemplateResource;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+
+/**
+ * Tests for {@link TemplateFooterElementTagProcessor}.
+ *
+ * @author guqing
+ * @since 2.17.0
+ */
+@ExtendWith(MockitoExtension.class)
+class TemplateFooterElementTagProcessorTest {
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @Mock
+    ExtensionGetter extensionGetter;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher fetcher;
+
+    private TemplateEngine templateEngine;
+
+    @BeforeEach
+    void setUp() {
+        HaloProcessorDialect haloProcessorDialect = new MockHaloProcessorDialect();
+        templateEngine = new TemplateEngine();
+        templateEngine.setDialects(Set.of(haloProcessorDialect, new SpringStandardDialect()));
+        templateEngine.addTemplateResolver(new MockTemplateResolver());
+
+        SystemSetting.CodeInjection codeInjection = new SystemSetting.CodeInjection();
+        codeInjection.setFooter(
+            "
Powered by Halo
");
+        lenient().when(fetcher.fetch(eq(SystemSetting.CodeInjection.GROUP),
+            eq(SystemSetting.CodeInjection.class))).thenReturn(Mono.just(codeInjection));
+
+        lenient().when(applicationContext.getBeanProvider(ExtensionGetter.class))
+            .thenAnswer(invocation -> {
+                var objectProvider = mock(ObjectProvider.class);
+                when(objectProvider.getIfUnique()).thenReturn(extensionGetter);
+                return objectProvider;
+            });
+        lenient().when(applicationContext.getBean(eq(SystemConfigurableEnvironmentFetcher.class)))
+            .thenReturn(fetcher);
+    }
+
+    @Test
+    void footerProcessorTest() {
+        when(extensionGetter.getExtensions(TemplateFooterProcessor.class))
+            .thenReturn(Flux.just(new FakeFooterCodeInjection()));
+
+        String result = templateEngine.process("fake-template", getContext());
+        // footer injected code is not processable
+        assertThat(result).isEqualToIgnoringWhitespace("""
+            
Powered by Halo

+            
© 2024 guqing's blog

+            

+            """);
+    }
+
+    private Context getContext() {
+        Context context = new Context();
+        context.setVariable(
+            ThymeleafEvaluationContext.THYMELEAF_EVALUATION_CONTEXT_CONTEXT_VARIABLE_NAME,
+            new ThymeleafEvaluationContext(applicationContext, null));
+        return context;
+    }
+
+    static class MockTemplateResolver extends StringTemplateResolver {
+        @Override
+        protected ITemplateResource computeTemplateResource(IEngineConfiguration configuration,
+            String ownerTemplate, String template,
+            Map templateResolutionAttributes) {
+            return new StringTemplateResource("""
+                
+                """);
+        }
+    }
+
+    static class MockHaloProcessorDialect extends HaloProcessorDialect {
+        @Override
+        public Set getProcessors(String dialectPrefix) {
+            var processors = new HashSet();
+            processors.add(new TemplateFooterElementTagProcessor(dialectPrefix));
+            return processors;
+        }
+    }
+
+    static class FakeFooterCodeInjection implements TemplateFooterProcessor {
+
+        @Override
+        public Mono process(ITemplateContext context, IProcessableElementTag tag,
+            IElementTagStructureHandler structureHandler, IModel model) {
+            var factory = context.getModelFactory();
+            // regular footer text
+            var copyRight = factory.createText("
© 2024 guqing's blog
");
+            model.add(copyRight);
+            // variable footer text
+            model.add(factory.createText("
"));
+            return Mono.empty();
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/endpoint/CategoryQueryEndpointTest.java b/application/src/test/java/run/halo/app/theme/endpoint/CategoryQueryEndpointTest.java
new file mode 100644
index 0000000..9ba60c6
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/endpoint/CategoryQueryEndpointTest.java
@@ -0,0 +1,106 @@
+package run.halo.app.theme.endpoint;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.content.Category;
+import run.halo.app.extension.GroupVersion;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.theme.finders.PostPublicQueryService;
+import run.halo.app.theme.finders.vo.ListedPostVo;
+
+/**
+ * Tests for {@link CategoryQueryEndpoint}.
+ *
+ * @author guqing
+ * @since 2.5.0
+ */
+@ExtendWith(MockitoExtension.class)
+class CategoryQueryEndpointTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private PostPublicQueryService postPublicQueryService;
+    private CategoryQueryEndpoint endpoint;
+    private WebTestClient webTestClient;
+
+    @BeforeEach
+    void setUp() {
+        endpoint = new CategoryQueryEndpoint(client, postPublicQueryService);
+        RouterFunction routerFunction = endpoint.endpoint();
+        webTestClient = WebTestClient.bindToRouterFunction(routerFunction).build();
+    }
+
+    @Test
+    void listCategories() {
+        ListResult listResult = new ListResult<>(List.of());
+        when(client.listBy(eq(Category.class), any(ListOptions.class), any(PageRequest.class)))
+            .thenReturn(Mono.just(listResult));
+
+        webTestClient.get()
+            .uri("/categories?page=1&size=10")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.total").isEqualTo(listResult.getTotal())
+            .jsonPath("$.items").isArray();
+    }
+
+    @Test
+    void getByName() {
+        Category category = new Category();
+        category.setMetadata(new Metadata());
+        category.getMetadata().setName("test");
+        when(client.get(eq(Category.class), eq("test"))).thenReturn(Mono.just(category));
+
+        webTestClient.get()
+            .uri("/categories/test")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.metadata.name").isEqualTo(category.getMetadata().getName());
+    }
+
+    @Test
+    void listPostsByCategoryName() {
+        ListResult listResult = new ListResult<>(List.of());
+        when(postPublicQueryService.list(any(), any(PageRequest.class)))
+            .thenReturn(Mono.just(listResult));
+
+        webTestClient.get()
+            .uri("/categories/test/posts?page=1&size=10")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.total").isEqualTo(listResult.getTotal())
+            .jsonPath("$.items").isArray();
+    }
+
+    @Test
+    void groupVersion() {
+        GroupVersion groupVersion = endpoint.groupVersion();
+        assertThat(groupVersion.toString()).isEqualTo("api.content.halo.run/v1alpha1");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/endpoint/CommentFinderEndpointTest.java b/application/src/test/java/run/halo/app/theme/endpoint/CommentFinderEndpointTest.java
new file mode 100644
index 0000000..997b4d3
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/endpoint/CommentFinderEndpointTest.java
@@ -0,0 +1,208 @@
+package run.halo.app.theme.endpoint;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyInt;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import io.github.resilience4j.ratelimiter.RateLimiter;
+import io.github.resilience4j.ratelimiter.RateLimiterConfig;
+import io.github.resilience4j.ratelimiter.RateLimiterRegistry;
+import java.time.Duration;
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.comment.CommentRequest;
+import run.halo.app.content.comment.CommentService;
+import run.halo.app.content.comment.ReplyRequest;
+import run.halo.app.content.comment.ReplyService;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.core.extension.content.Reply;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.Ref;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.theme.finders.CommentFinder;
+import run.halo.app.theme.finders.CommentPublicQueryService;
+
+/**
+ * Tests for {@link CommentFinderEndpoint}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class CommentFinderEndpointTest {
+    @Mock
+    private CommentFinder commentFinder;
+
+    @Mock
+    private CommentPublicQueryService commentPublicQueryService;
+
+    @Mock
+    private CommentService commentService;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @Mock
+    private ReplyService replyService;
+
+    @Mock
+    private RateLimiterRegistry rateLimiterRegistry;
+
+    @InjectMocks
+    private CommentFinderEndpoint commentFinderEndpoint;
+
+    private WebTestClient webTestClient;
+
+    @BeforeEach
+    void setUp() {
+        lenient().when(environmentFetcher.fetchComment()).thenReturn(Mono.empty());
+        webTestClient = WebTestClient
+            .bindToRouterFunction(commentFinderEndpoint.endpoint())
+            .build();
+    }
+
+    @Test
+    void listComments() {
+        when(commentPublicQueryService.list(any(), any(PageRequest.class)))
+            .thenReturn(Mono.just(new ListResult<>(1, 10, 0, List.of())));
+
+        Ref ref = new Ref();
+        ref.setGroup("content.halo.run");
+        ref.setVersion("v1alpha1");
+        ref.setKind("Post");
+        ref.setName("test");
+        webTestClient.get()
+            .uri(uriBuilder -> uriBuilder.path("/comments")
+                .queryParam("group", ref.getGroup())
+                .queryParam("version", ref.getVersion())
+                .queryParam("kind", ref.getKind())
+                .queryParam("name", ref.getName())
+                .queryParam("page", 1)
+                .queryParam("size", 10)
+                .build())
+            .exchange()
+            .expectStatus()
+            .isOk();
+        ArgumentCaptor refCaptor = ArgumentCaptor.forClass(Ref.class);
+        verify(commentPublicQueryService, times(1))
+            .list(refCaptor.capture(), any(PageRequest.class));
+        Ref value = refCaptor.getValue();
+        assertThat(value).isEqualTo(ref);
+    }
+
+    @Test
+    void getComment() {
+        when(commentPublicQueryService.getByName(any()))
+            .thenReturn(null);
+
+        webTestClient.get()
+            .uri("/comments/test-comment")
+            .exchange()
+            .expectStatus()
+            .isOk();
+
+        verify(commentPublicQueryService, times(1)).getByName(eq("test-comment"));
+    }
+
+    @Test
+    void listCommentReplies() {
+        when(commentPublicQueryService.listReply(any(), anyInt(), anyInt()))
+            .thenReturn(Mono.just(new ListResult<>(2, 20, 0, List.of())));
+
+        webTestClient.get()
+            .uri(uriBuilder -> uriBuilder.path("/comments/test-comment/reply")
+                .queryParam("page", 2)
+                .queryParam("size", 20)
+                .build())
+            .exchange()
+            .expectStatus()
+            .isOk();
+
+        verify(commentPublicQueryService, times(1)).listReply(eq("test-comment"), eq(2), eq(20));
+    }
+
+    @Test
+    void createComment() {
+        when(commentService.create(any())).thenReturn(Mono.empty());
+
+        RateLimiterConfig config = RateLimiterConfig.custom()
+            .limitForPeriod(10)
+            .limitRefreshPeriod(Duration.ofSeconds(1))
+            .timeoutDuration(Duration.ofSeconds(10))
+            .build();
+        RateLimiter rateLimiter = RateLimiter.of("comment-creation-from-ip-" + "0:0:0:0:0:0:0:0",
+            config);
+        when(rateLimiterRegistry.rateLimiter(anyString(), anyString())).thenReturn(rateLimiter);
+
+        final CommentRequest commentRequest = new CommentRequest();
+        Ref ref = new Ref();
+        ref.setGroup("content.halo.run");
+        ref.setVersion("v1alpha1");
+        ref.setKind("Post");
+        ref.setName("test-post");
+        commentRequest.setSubjectRef(ref);
+        commentRequest.setContent("content");
+        commentRequest.setRaw("raw");
+        commentRequest.setAllowNotification(false);
+        webTestClient.post()
+            .uri("/comments")
+            .bodyValue(commentRequest)
+            .exchange()
+            .expectStatus()
+            .isOk();
+
+        ArgumentCaptor captor = ArgumentCaptor.forClass(Comment.class);
+        verify(commentService, times(1)).create(captor.capture());
+        Comment value = captor.getValue();
+        assertThat(value.getSpec().getIpAddress()).isNotNull();
+        assertThat(value.getSpec().getUserAgent()).isNotNull();
+        assertThat(value.getSpec().getSubjectRef()).isEqualTo(ref);
+    }
+
+    @Test
+    void createReply() {
+        when(replyService.create(any(), any())).thenReturn(Mono.empty());
+
+        final ReplyRequest replyRequest = new ReplyRequest();
+        replyRequest.setRaw("raw");
+        replyRequest.setContent("content");
+        replyRequest.setAllowNotification(true);
+
+        when(rateLimiterRegistry.rateLimiter("comment-creation-from-ip-127.0.0.1",
+            "comment-creation"))
+            .thenReturn(RateLimiter.ofDefaults("comment-creation"));
+
+        webTestClient.post()
+            .uri("/comments/test-comment/reply")
+            .header("X-Forwarded-For", "127.0.0.1")
+            .bodyValue(replyRequest)
+            .exchange()
+            .expectStatus()
+            .isOk();
+
+        ArgumentCaptor captor = ArgumentCaptor.forClass(Reply.class);
+        verify(replyService, times(1)).create(eq("test-comment"), captor.capture());
+        Reply value = captor.getValue();
+        assertThat(value.getSpec().getIpAddress()).isNotNull();
+        assertThat(value.getSpec().getUserAgent()).isNotNull();
+        assertThat(value.getSpec().getQuoteReply()).isNull();
+
+        verify(rateLimiterRegistry).rateLimiter("comment-creation-from-ip-127.0.0.1",
+            "comment-creation");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/endpoint/MenuQueryEndpointTest.java b/application/src/test/java/run/halo/app/theme/endpoint/MenuQueryEndpointTest.java
new file mode 100644
index 0000000..a6dbb50
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/endpoint/MenuQueryEndpointTest.java
@@ -0,0 +1,122 @@
+package run.halo.app.theme.endpoint;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import lombok.NonNull;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.Menu;
+import run.halo.app.core.extension.MenuItem;
+import run.halo.app.extension.GroupVersion;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.theme.finders.MenuFinder;
+import run.halo.app.theme.finders.vo.MenuItemVo;
+import run.halo.app.theme.finders.vo.MenuVo;
+
+/**
+ * Tests for {@link MenuQueryEndpoint}.
+ *
+ * @author guqing
+ * @since 2.5.0
+ */
+@ExtendWith(MockitoExtension.class)
+class MenuQueryEndpointTest {
+
+    @Mock
+    private MenuFinder menuFinder;
+
+    @Mock
+    private SystemConfigurableEnvironmentFetcher environmentFetcher;
+
+    @InjectMocks
+    private MenuQueryEndpoint endpoint;
+
+    private WebTestClient webClient;
+
+    @BeforeEach
+    void setUp() {
+        webClient = WebTestClient.bindToRouterFunction(endpoint.endpoint()).build();
+    }
+
+    @Test
+    void getPrimaryMenu() {
+        Metadata metadata = new Metadata();
+        metadata.setName("fake-primary");
+        MenuVo menuVo = MenuVo.builder()
+            .metadata(metadata)
+            .spec(new Menu.Spec())
+            .menuItems(List.of(MenuItemVo.from(createMenuItem("item1"))))
+            .build();
+        when(menuFinder.getByName(eq("fake-primary")))
+            .thenReturn(Mono.just(menuVo));
+
+        SystemSetting.Menu menuSetting = new SystemSetting.Menu();
+        menuSetting.setPrimary("fake-primary");
+        when(environmentFetcher.fetch(eq(SystemSetting.Menu.GROUP), eq(SystemSetting.Menu.class)))
+            .thenReturn(Mono.just(menuSetting));
+
+        webClient.get().uri("/menus/-")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.metadata.name").isEqualTo("fake-primary")
+            .jsonPath("$.menuItems[0].metadata.name").isEqualTo("item1");
+
+        verify(menuFinder).getByName(eq("fake-primary"));
+        verify(environmentFetcher).fetch(eq(SystemSetting.Menu.GROUP),
+            eq(SystemSetting.Menu.class));
+    }
+
+    @NonNull
+    private static MenuItem createMenuItem(String name) {
+        MenuItem menuItem = new MenuItem();
+        menuItem.setMetadata(new Metadata());
+        menuItem.getMetadata().setName(name);
+        menuItem.setSpec(new MenuItem.MenuItemSpec());
+        menuItem.getSpec().setDisplayName(name);
+        return menuItem;
+    }
+
+    @Test
+    void getMenuByName() {
+        Metadata metadata = new Metadata();
+        metadata.setName("test-menu");
+        MenuVo menuVo = MenuVo.builder()
+            .metadata(metadata)
+            .spec(new Menu.Spec())
+            .menuItems(List.of(MenuItemVo.from(createMenuItem("item2"))))
+            .build();
+        when(menuFinder.getByName(eq("test-menu")))
+            .thenReturn(Mono.just(menuVo));
+
+        webClient.get().uri("/menus/test-menu")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.metadata.name").isEqualTo("test-menu")
+            .jsonPath("$.menuItems[0].metadata.name").isEqualTo("item2");
+
+        verify(menuFinder).getByName(eq("test-menu"));
+    }
+
+    @Test
+    void groupVersion() {
+        GroupVersion groupVersion = endpoint.groupVersion();
+        assertThat(groupVersion.toString()).isEqualTo("api.halo.run/v1alpha1");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/endpoint/PluginQueryEndpointTest.java b/application/src/test/java/run/halo/app/theme/endpoint/PluginQueryEndpointTest.java
new file mode 100644
index 0000000..739b92c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/endpoint/PluginQueryEndpointTest.java
@@ -0,0 +1,55 @@
+package run.halo.app.theme.endpoint;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import run.halo.app.extension.GroupVersion;
+import run.halo.app.theme.finders.PluginFinder;
+
+/**
+ * Tests for {@link PluginQueryEndpoint}.
+ *
+ * @author guqing
+ * @since 2.5.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PluginQueryEndpointTest {
+
+    @Mock
+    private PluginFinder pluginFinder;
+
+    @InjectMocks
+    private PluginQueryEndpoint endpoint;
+
+    private WebTestClient webClient;
+
+    @BeforeEach
+    void setUp() {
+        webClient = WebTestClient.bindToRouterFunction(endpoint.endpoint()).build();
+    }
+
+    @Test
+    void available() {
+        when(pluginFinder.available("fake-plugin")).thenReturn(true);
+        webClient.get().uri("/plugins/fake-plugin/available")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$").isEqualTo(true);
+    }
+
+    @Test
+    void groupVersion() {
+        GroupVersion groupVersion = endpoint.groupVersion();
+        assertThat(groupVersion.toString()).isEqualTo("api.plugin.halo.run/v1alpha1");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/endpoint/PostQueryEndpointTest.java b/application/src/test/java/run/halo/app/theme/endpoint/PostQueryEndpointTest.java
new file mode 100644
index 0000000..f39f139
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/endpoint/PostQueryEndpointTest.java
@@ -0,0 +1,115 @@
+package run.halo.app.theme.endpoint;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.extension.GroupVersion;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.theme.finders.PostFinder;
+import run.halo.app.theme.finders.PostPublicQueryService;
+import run.halo.app.theme.finders.vo.ListedPostVo;
+import run.halo.app.theme.finders.vo.NavigationPostVo;
+import run.halo.app.theme.finders.vo.PostVo;
+
+/**
+ * Tests for {@link PostQueryEndpoint}.
+ *
+ * @author guqing
+ * @since 2.5.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PostQueryEndpointTest {
+
+    private WebTestClient webClient;
+
+    @Mock
+    private PostFinder postFinder;
+
+    @Mock
+    private PostPublicQueryService postPublicQueryService;
+
+    @InjectMocks
+    private PostQueryEndpoint endpoint;
+
+    @BeforeEach
+    public void setUp() {
+        webClient = WebTestClient.bindToRouterFunction(endpoint.endpoint())
+            .build();
+    }
+
+    @Test
+    public void listPosts() {
+        ListResult result = new ListResult<>(List.of());
+        when(postPublicQueryService.list(any(), any(PageRequest.class)))
+            .thenReturn(Mono.just(result));
+
+        webClient.get().uri("/posts")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.items").isArray();
+
+        verify(postPublicQueryService).list(any(), any(PageRequest.class));
+    }
+
+    @Test
+    public void getPostByName() {
+        Metadata metadata = new Metadata();
+        metadata.setName("test");
+        PostVo post = PostVo.builder()
+            .metadata(metadata)
+            .build();
+        when(postFinder.getByName(anyString())).thenReturn(Mono.just(post));
+
+        webClient.get().uri("/posts/{name}", "test")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.metadata.name").isEqualTo("test");
+
+        verify(postFinder).getByName(anyString());
+    }
+
+    @Test
+    public void testGetPostNavigationByName() {
+        Metadata metadata = new Metadata();
+        metadata.setName("test");
+        NavigationPostVo navigation = NavigationPostVo.builder()
+            .current(PostVo.builder().metadata(metadata).build())
+            .build();
+        when(postFinder.cursor(anyString()))
+            .thenReturn(Mono.just(navigation));
+
+        webClient.get().uri("/posts/{name}/navigation", "test")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.current.metadata.name").isEqualTo("test");
+
+        verify(postFinder).cursor(anyString());
+    }
+
+    @Test
+    void groupVersion() {
+        GroupVersion groupVersion = endpoint.groupVersion();
+        assertThat(groupVersion.toString()).isEqualTo("api.content.halo.run/v1alpha1");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/endpoint/PublicApiUtilsTest.java b/application/src/test/java/run/halo/app/theme/endpoint/PublicApiUtilsTest.java
new file mode 100644
index 0000000..56979ed
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/endpoint/PublicApiUtilsTest.java
@@ -0,0 +1,48 @@
+package run.halo.app.theme.endpoint;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import run.halo.app.extension.AbstractExtension;
+import run.halo.app.extension.GVK;
+import run.halo.app.extension.GroupVersion;
+
+/**
+ * Tests for {@link PublicApiUtils}.
+ *
+ * @author guqing
+ * @since 2.5.0
+ */
+class PublicApiUtilsTest {
+
+    @Test
+    void groupVersion() {
+        GroupVersion groupVersion = PublicApiUtils.groupVersion(new FakExtension());
+        assertThat(groupVersion.toString()).isEqualTo("api.halo.run/v1alpha1");
+
+        groupVersion = PublicApiUtils.groupVersion(new FakeGroupExtension());
+        assertThat(groupVersion.toString()).isEqualTo("api.fake.halo.run/v1");
+    }
+
+    @Test
+    void containsElement() {
+        assertThat(PublicApiUtils.containsElement(null, null)).isFalse();
+        assertThat(PublicApiUtils.containsElement(null, "test")).isFalse();
+        assertThat(PublicApiUtils.containsElement(List.of("test"), null)).isFalse();
+        assertThat(PublicApiUtils.containsElement(List.of("test"), "test")).isTrue();
+        assertThat(PublicApiUtils.containsElement(List.of("test"), "test1")).isFalse();
+    }
+
+    @GVK(group = "fake.halo.run", version = "v1", kind = "FakeGroupExtension", plural =
+        "fakegroupextensions", singular = "fakegroupextension")
+    static class FakeGroupExtension extends AbstractExtension {
+
+    }
+
+    @GVK(group = "", version = "v1alpha1", kind = "FakeExtension", plural =
+        "fakeextensions", singular = "fakeextension")
+    static class FakExtension extends AbstractExtension {
+
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/endpoint/PublicUserEndpointTest.java b/application/src/test/java/run/halo/app/theme/endpoint/PublicUserEndpointTest.java
new file mode 100644
index 0000000..8acdefc
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/endpoint/PublicUserEndpointTest.java
@@ -0,0 +1,92 @@
+package run.halo.app.theme.endpoint;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import io.github.resilience4j.ratelimiter.RateLimiter;
+import io.github.resilience4j.ratelimiter.RateLimiterRegistry;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.security.core.userdetails.ReactiveUserDetailsService;
+import org.springframework.security.web.server.context.ServerSecurityContextRepository;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.service.UserService;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+
+/**
+ * Tests for {@link PublicUserEndpoint}.
+ *
+ * @author guqing
+ * @since 2.4.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PublicUserEndpointTest {
+    @Mock
+    private UserService userService;
+    @Mock
+    private ServerSecurityContextRepository securityContextRepository;
+    @Mock
+    private ReactiveUserDetailsService reactiveUserDetailsService;
+    @Mock
+    SystemConfigurableEnvironmentFetcher environmentFetcher;
+    @Mock
+    RateLimiterRegistry rateLimiterRegistry;
+
+    @InjectMocks
+    private PublicUserEndpoint publicUserEndpoint;
+
+    private WebTestClient webClient;
+
+    @BeforeEach
+    void setUp() {
+        webClient = WebTestClient.bindToRouterFunction(publicUserEndpoint.endpoint())
+            .build();
+    }
+
+    @Test
+    void signUp() {
+        User user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName("fake-user");
+        user.setSpec(new User.UserSpec());
+        user.getSpec().setDisplayName("hello");
+        user.getSpec().setBio("bio");
+
+        when(userService.signUp(any(User.class), anyString())).thenReturn(Mono.just(user));
+        when(securityContextRepository.save(any(), any())).thenReturn(Mono.empty());
+        when(reactiveUserDetailsService.findByUsername(anyString())).thenReturn(Mono.just(
+            org.springframework.security.core.userdetails.User.withUsername("fake-user")
+                .password("123456")
+                .authorities("test-role")
+                .build()));
+        SystemSetting.User userSetting = mock(SystemSetting.User.class);
+        when(environmentFetcher.fetch(SystemSetting.User.GROUP, SystemSetting.User.class))
+            .thenReturn(Mono.just(userSetting));
+
+        when(rateLimiterRegistry.rateLimiter("signup-from-ip-127.0.0.1", "signup"))
+            .thenReturn(RateLimiter.ofDefaults("signup"));
+
+        webClient.post()
+            .uri("/users/-/signup")
+            .header("X-Forwarded-For", "127.0.0.1")
+            .bodyValue(new PublicUserEndpoint.SignUpRequest(user, "fake-password", ""))
+            .exchange()
+            .expectStatus().isOk();
+
+        verify(userService).signUp(any(User.class), anyString());
+        verify(securityContextRepository).save(any(), any());
+        verify(reactiveUserDetailsService).findByUsername(eq("fake-user"));
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/endpoint/SinglePageQueryEndpointTest.java b/application/src/test/java/run/halo/app/theme/endpoint/SinglePageQueryEndpointTest.java
new file mode 100644
index 0000000..d9d804a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/endpoint/SinglePageQueryEndpointTest.java
@@ -0,0 +1,106 @@
+package run.halo.app.theme.endpoint;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyInt;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.extension.GroupVersion;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.theme.finders.SinglePageFinder;
+import run.halo.app.theme.finders.vo.ListedSinglePageVo;
+import run.halo.app.theme.finders.vo.SinglePageVo;
+
+/**
+ * Tests for {@link SinglePageQueryEndpoint}.
+ *
+ * @author guqing
+ * @since 2.5.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SinglePageQueryEndpointTest {
+
+    @Mock
+    private SinglePageFinder singlePageFinder;
+
+    @InjectMocks
+    private SinglePageQueryEndpoint endpoint;
+
+    private WebTestClient webTestClient;
+
+    @BeforeEach
+    void setUp() {
+        webTestClient = WebTestClient.bindToRouterFunction(endpoint.endpoint()).build();
+    }
+
+    @Test
+    void listSinglePages() {
+        ListedSinglePageVo test = ListedSinglePageVo.builder()
+            .metadata(metadata("test"))
+            .spec(new SinglePage.SinglePageSpec())
+            .build();
+
+        ListResult pageResult = new ListResult<>(List.of(test));
+
+        when(singlePageFinder.list(anyInt(), anyInt(), any(), any()))
+            .thenReturn(Mono.just(pageResult));
+
+        webTestClient.get()
+            .uri("/singlepages?page=0&size=10")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.total").isEqualTo(1)
+            .jsonPath("$.items[0].metadata.name").isEqualTo("test");
+
+        verify(singlePageFinder).list(eq(0), eq(10), any(), any());
+    }
+
+    @Test
+    void getByName() {
+        SinglePageVo singlePage = SinglePageVo.builder()
+            .metadata(metadata("fake-page"))
+            .spec(new SinglePage.SinglePageSpec())
+            .build();
+
+        when(singlePageFinder.getByName(eq("fake-page")))
+            .thenReturn(Mono.just(singlePage));
+
+        webTestClient.get()
+            .uri("/singlepages/fake-page")
+            .exchange()
+            .expectStatus().isOk()
+            .expectHeader().contentType(MediaType.APPLICATION_JSON)
+            .expectBody()
+            .jsonPath("$.metadata.name").isEqualTo("fake-page");
+
+        verify(singlePageFinder).getByName("fake-page");
+    }
+
+    Metadata metadata(String name) {
+        Metadata metadata = new Metadata();
+        metadata.setName(name);
+        return metadata;
+    }
+
+    @Test
+    void groupVersion() {
+        GroupVersion groupVersion = endpoint.groupVersion();
+        assertThat(groupVersion.toString()).isEqualTo("api.content.halo.run/v1alpha1");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/engine/DefaultThemeTemplateAvailabilityProviderTest.java b/application/src/test/java/run/halo/app/theme/engine/DefaultThemeTemplateAvailabilityProviderTest.java
new file mode 100644
index 0000000..83ff3ff
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/engine/DefaultThemeTemplateAvailabilityProviderTest.java
@@ -0,0 +1,47 @@
+package run.halo.app.theme.engine;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.Mockito.when;
+
+import java.io.FileNotFoundException;
+import java.net.URISyntaxException;
+import java.nio.file.Path;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.boot.autoconfigure.thymeleaf.ThymeleafProperties;
+import org.springframework.util.ResourceUtils;
+import run.halo.app.theme.ThemeContext;
+
+@ExtendWith(MockitoExtension.class)
+class DefaultThemeTemplateAvailabilityProviderTest {
+
+    @InjectMocks
+    DefaultThemeTemplateAvailabilityProvider provider;
+
+    @Mock
+    ThymeleafProperties thymeleafProperties;
+
+    @Test
+    void templateAvailableTest() throws FileNotFoundException, URISyntaxException {
+        var themeUrl = ResourceUtils.getURL("classpath:themes/default");
+        var themePath = Path.of(themeUrl.toURI());
+
+        when(thymeleafProperties.getSuffix()).thenReturn(".html");
+        var themeContext = ThemeContext.builder()
+            .name("default")
+            .path(themePath)
+            .build();
+        boolean templateAvailable = provider.isTemplateAvailable(themeContext, "fake");
+        assertFalse(templateAvailable);
+
+        templateAvailable = provider.isTemplateAvailable(themeContext, "index");
+        assertTrue(templateAvailable);
+
+        templateAvailable = provider.isTemplateAvailable(themeContext, "timezone");
+        assertTrue(templateAvailable);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/engine/PluginClassloaderTemplateResolverTest.java b/application/src/test/java/run/halo/app/theme/engine/PluginClassloaderTemplateResolverTest.java
new file mode 100644
index 0000000..afc1c92
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/engine/PluginClassloaderTemplateResolverTest.java
@@ -0,0 +1,53 @@
+package run.halo.app.theme.engine;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import run.halo.app.plugin.HaloPluginManager;
+
+/**
+ * Tests for {@link PluginClassloaderTemplateResolver}.
+ *
+ * @author guqing
+ * @since 2.11.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PluginClassloaderTemplateResolverTest {
+
+    @Mock
+    private HaloPluginManager haloPluginManager;
+
+    @InjectMocks
+    private PluginClassloaderTemplateResolver templateResolver;
+
+    @Test
+    void matchPluginTemplateWhenOwnerTemplateMatch() {
+        var result =
+            templateResolver.matchPluginTemplate("plugin:fake-plugin:doc", "modules/layout");
+        assertThat(result.matches()).isTrue();
+        assertThat(result.pluginName()).isEqualTo("fake-plugin");
+        assertThat(result.templateName()).isEqualTo("modules/layout");
+        assertThat(result.ownerTemplateName()).isEqualTo("doc");
+    }
+
+    @Test
+    void matchPluginTemplateWhenDoesNotMatch() {
+        var result =
+            templateResolver.matchPluginTemplate("doc", "modules/layout");
+        assertThat(result.matches()).isFalse();
+    }
+
+    @Test
+    void matchPluginTemplateWhenTemplateMatch() {
+        var result =
+            templateResolver.matchPluginTemplate("doc", "plugin:fake-plugin:modules/layout");
+        assertThat(result.matches()).isTrue();
+        assertThat(result.pluginName()).isEqualTo("fake-plugin");
+        assertThat(result.templateName()).isEqualTo("modules/layout");
+        assertThat(result.ownerTemplateName()).isEqualTo("doc");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/finders/FinderRegistryTest.java b/application/src/test/java/run/halo/app/theme/finders/FinderRegistryTest.java
new file mode 100644
index 0000000..9dc9e8c
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/FinderRegistryTest.java
@@ -0,0 +1,68 @@
+package run.halo.app.theme.finders;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import java.util.Map;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.ApplicationContext;
+
+/**
+ * Tests for {@link FinderRegistry}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class FinderRegistryTest {
+
+    private DefaultFinderRegistry finderRegistry;
+    @Mock
+    private ApplicationContext applicationContext;
+
+    @BeforeEach
+    void setUp() {
+        finderRegistry = new DefaultFinderRegistry(applicationContext);
+    }
+
+    @Test
+    void registerFinder() {
+        assertThatThrownBy(() -> {
+            finderRegistry.putFinder(new Object());
+        }).isInstanceOf(IllegalStateException.class)
+            .hasMessage("Finder must be annotated with @Finder");
+
+        String s = finderRegistry.putFinder(new FakeFinder());
+        assertThat(s).isEqualTo("test");
+    }
+
+    @Test
+    void removeFinder() {
+        String s = finderRegistry.putFinder(new FakeFinder());
+        assertThat(s).isEqualTo("test");
+        Object test = finderRegistry.get("test");
+        assertThat(test).isNotNull();
+        finderRegistry.removeFinder(s);
+
+        test = finderRegistry.get("test");
+        assertThat(test).isNull();
+    }
+
+    @Test
+    void getFinders() {
+        assertThat(finderRegistry.getFinders()).hasSize(0);
+
+        finderRegistry.putFinder(new FakeFinder());
+        Map finders = finderRegistry.getFinders();
+        assertThat(finders).hasSize(1);
+    }
+
+    @Finder("test")
+    static class FakeFinder {
+
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/CategoryFinderImplTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/CategoryFinderImplTest.java
new file mode 100644
index 0000000..6f1bbb2
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/CategoryFinderImplTest.java
@@ -0,0 +1,570 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.when;
+
+import com.fasterxml.jackson.core.type.TypeReference;
+import java.io.IOException;
+import java.nio.file.Files;
+import java.time.Instant;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.function.Function;
+import java.util.stream.Collectors;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.data.domain.Sort;
+import org.springframework.util.ResourceUtils;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.CategoryService;
+import run.halo.app.core.extension.content.Category;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.utils.JsonUtils;
+import run.halo.app.theme.finders.vo.CategoryTreeVo;
+import run.halo.app.theme.finders.vo.CategoryVo;
+
+/**
+ * Tests for {@link CategoryFinderImpl}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class CategoryFinderImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private CategoryService categoryService;
+
+    private CategoryFinderImpl categoryFinder;
+
+    @BeforeEach
+    void setUp() {
+        categoryFinder = new CategoryFinderImpl(client, categoryService);
+        lenient().when(categoryService.isCategoryHidden(any())).thenReturn(Mono.just(false));
+    }
+
+    @Test
+    void getByName() throws JSONException {
+        when(client.fetch(eq(Category.class), eq("hello")))
+            .thenReturn(Mono.just(category()));
+        CategoryVo categoryVo = categoryFinder.getByName("hello").block();
+        categoryVo.getMetadata().setCreationTimestamp(null);
+        JSONAssert.assertEquals("""
+                {
+                     "metadata": {
+                         "name": "hello",
+                         "annotations": {
+                             "K1": "V1"
+                         }
+                     },
+                     "spec": {
+                         "displayName": "displayName-1",
+                         "slug": "slug-1",
+                         "description": "description-1",
+                         "cover": "cover-1",
+                         "template": "template-1",
+                         "priority": 0,
+                         "children": [
+                             "C1",
+                             "C2"
+                         ],
+                         "preventParentPostCascadeQuery": false,
+                         "hideFromList": false
+                     }
+                }
+                """,
+            JsonUtils.objectToJson(categoryVo),
+            true);
+    }
+
+    @Test
+    void list() {
+        ListResult categories = new ListResult<>(1, 10, 3,
+            categories().stream()
+                .sorted(CategoryFinderImpl.defaultComparator())
+                .toList());
+        when(client.listBy(eq(Category.class), any(ListOptions.class), any(PageRequest.class)))
+            .thenReturn(Mono.just(categories));
+        ListResult list = categoryFinder.list(1, 10).block();
+        assertThat(list.getItems()).hasSize(3);
+        assertThat(list.get().map(categoryVo -> categoryVo.getMetadata().getName()).toList())
+            .isEqualTo(List.of("c3", "c2", "hello"));
+    }
+
+    @Test
+    void listAsTree() {
+        when(client.listAll(eq(Category.class), any(ListOptions.class), any(Sort.class)))
+            .thenReturn(Flux.fromIterable(categoriesForTree()));
+        List treeVos = categoryFinder.listAsTree().collectList().block();
+        assertThat(treeVos).hasSize(1);
+    }
+
+    @Test
+    void listSubTreeByName() {
+        when(client.listAll(eq(Category.class), any(ListOptions.class), any(Sort.class)))
+            .thenReturn(Flux.fromIterable(categoriesForTree()));
+        List treeVos = categoryFinder.listAsTree("E").collectList().block();
+        assertThat(treeVos.get(0).getMetadata().getName()).isEqualTo("E");
+        assertThat(treeVos.get(0).getChildren()).hasSize(2);
+        assertThat(treeVos.get(0).getChildren().get(0).getMetadata().getName()).isEqualTo("A");
+        assertThat(treeVos.get(0).getChildren().get(1).getMetadata().getName()).isEqualTo("C");
+    }
+
+    /**
+     * Test for {@link CategoryFinderImpl#listAsTree()}.
+     *
+     * @see Fix #2532
+     */
+    @Test
+    void listAsTreeMore() {
+        when(client.listAll(eq(Category.class), any(ListOptions.class), any(Sort.class)))
+            .thenReturn(Flux.fromIterable(moreCategories()));
+        List treeVos = categoryFinder.listAsTree().collectList().block();
+        String s = visualizeTree(treeVos);
+        assertThat(s).isEqualTo("""
+            全部 (7)
+            ├── FIT2CLOUD (4)
+            │   ├── DataEase (0)
+            │   ├── Halo (2)
+            │   ├── MeterSphere (0)
+            │   └── JumpServer (0)
+            └── 默认分类 (3)
+            """);
+    }
+
+    @Nested
+    class CategoryPostCountTest {
+
+        /**
+         * 
Structure below.

+         * 
+         * 全部 (35)
+         * ├── FIT2CLOUD (15)
+         * │   ├── DataEase (10)
+         * │   │   ├── SubNode1 (4)
+         * │   │   │   ├── Leaf1 (2)
+         * │   │   │   ├── Leaf2 (2)
+         * │   │   ├── SubNode2 (6)  (independent)
+         * │   │       ├── IndependentChild1 (3)
+         * │   │       ├── IndependentChild2 (3)
+         * │   ├── IndependentNode (5)  (independent)
+         * │       ├── IndependentChild3 (2)
+         * │       ├── IndependentChild4 (3)
+         * ├── AnotherRootChild (20)
+         * │   ├── Child1 (8)
+         * │   │   ├── SubChild1 (3)
+         * │   │   │   ├── DeepNode1 (1)
+         * │   │   │   ├── DeepNode2 (1)
+         * │   │   │   │   ├── DeeperNode (1)
+         * │   │   ├── SubChild2 (5)
+         * │   │       ├── DeepNode3 (2)  (independent)
+         * │   │           ├── DeepNode4 (1)
+         * │   │           ├── DeepNode5 (1)
+         * │   ├── Child2 (12)
+         * │       ├── IndependentSubNode (12)  (independent)
+         * │           ├── SubNode3 (6)
+         * │           ├── SubNode4 (6)
+         * 

+         */
+        private List categories;
+
+        @BeforeEach
+        void setUp() throws IOException {
+            var file = ResourceUtils.getFile("classpath:categories/independent-post-count.json");
+            var json = Files.readString(file.toPath());
+            categories = JsonUtils.jsonToObject(json, new TypeReference<>() {
+            });
+        }
+
+        @Test
+        void computePostCountFromTree() {
+            when(client.listAll(eq(Category.class), any(ListOptions.class), any(Sort.class)))
+                .thenReturn(Flux.fromIterable(categories));
+            var treeVos = categoryFinder.listAsTree("全部")
+                .collectList().block();
+            assertThat(treeVos).hasSize(1);
+            String s = visualizeTree(treeVos.get(0).getChildren());
+            assertThat(s).isEqualTo("""
+                全部 (84)
+                ├── AnotherRootChild (51)
+                │   ├── Child1 (19)
+                │   │   ├── SubChild1 (6)
+                │   │   │   ├── DeepNode1 (1)
+                │   │   │   └── DeepNode2 (2)
+                │   │   │       └── DeeperNode (1)
+                │   │   └── SubChild2 (5)
+                │   │       └── DeepNode3 (4) (Independent)
+                │   │           ├── DeepNode4 (1)
+                │   │           └── DeepNode5 (1)
+                │   └── Child2 (12)
+                │       └── IndependentSubNode (24) (Independent)
+                │           ├── SubNode3 (6)
+                │           └── SubNode4 (6)
+                └── FIT2CLOUD (33)
+                    ├── DataEase (18)
+                    │   ├── SubNode1 (8)
+                    │   │   ├── Leaf1 (2)
+                    │   │   └── Leaf2 (2)
+                    │   └── SubNode2 (12) (Independent)
+                    │       ├── IndependentChild1 (3)
+                    │       └── IndependentChild2 (3)
+                    └── IndependentNode (10) (Independent)
+                        ├── IndependentChild3 (2)
+                        └── IndependentChild4 (3)
+                """);
+        }
+
+        @Test
+        void getBreadcrumbsTest() {
+            when(client.listAll(eq(Category.class), any(ListOptions.class), any(Sort.class)))
+                .thenReturn(Flux.fromIterable(categories));
+            // first level
+            var breadcrumbs = categoryFinder.getBreadcrumbs("全部").collectList().block();
+            assertThat(toNames(breadcrumbs)).containsSequence("全部");
+
+            // second level
+            breadcrumbs = categoryFinder.getBreadcrumbs("AnotherRootChild").collectList().block();
+            assertThat(toNames(breadcrumbs)).containsSequence("全部", "AnotherRootChild");
+
+            // more levels
+            breadcrumbs = categoryFinder.getBreadcrumbs("DeepNode5").collectList().block();
+            assertThat(toNames(breadcrumbs)).containsSequence("全部", "AnotherRootChild", "Child1",
+                "SubChild2", "DeepNode3", "DeepNode5");
+
+            breadcrumbs = categoryFinder.getBreadcrumbs("IndependentChild4").collectList().block();
+            assertThat(toNames(breadcrumbs)).containsSequence("全部", "FIT2CLOUD",
+                "IndependentNode",
+                "IndependentChild4");
+
+            breadcrumbs = categoryFinder.getBreadcrumbs("SubNode4").collectList().block();
+            assertThat(toNames(breadcrumbs)).containsSequence("全部", "AnotherRootChild", "Child2",
+                "IndependentSubNode", "SubNode4");
+
+            // not exist
+            breadcrumbs = categoryFinder.getBreadcrumbs("not-exist").collectList().block();
+            assertThat(toNames(breadcrumbs)).isEmpty();
+        }
+
+        @Test
+        void getBreadcrumbsForHiddenTest() {
+            Map categoryMap = categories.stream()
+                .collect(
+                    Collectors.toMap(item -> item.getMetadata().getName(), Function.identity()));
+            var category = categoryMap.get("IndependentNode");
+            category.getSpec().setHideFromList(true);
+            when(client.listAll(eq(Category.class), any(ListOptions.class), any(Sort.class)))
+                .thenReturn(Flux.fromIterable(categoryMap.values()));
+
+            when(categoryService.isCategoryHidden(eq("IndependentChild4")))
+                .thenReturn(Mono.just(true));
+
+            var breadcrumbs = categoryFinder.getBreadcrumbs("IndependentChild4")
+                .collectList().block();
+            assertThat(toNames(breadcrumbs)).containsSequence("全部", "FIT2CLOUD",
+                "IndependentNode",
+                "IndependentChild4");
+        }
+
+        static List toNames(List categories) {
+            if (categories == null) {
+                return List.of();
+            }
+            return categories.stream()
+                .map(category -> category.getMetadata().getName())
+                .toList();
+        }
+    }
+
+    private List categoriesForTree() {
+        /*
+         *  D
+         *  ├── E
+         *  │   ├── A
+         *  │   │   └── B
+         *  │   └── C
+         *  └── G
+         *  ├── F
+         *      └── H
+         */
+        Category d = category();
+        d.getMetadata().setName("D");
+        d.getSpec().setChildren(List.of("E", "G", "F"));
+
+        Category e = category();
+        e.getMetadata().setName("E");
+        e.getSpec().setChildren(List.of("A", "C"));
+
+        Category a = category();
+        a.getMetadata().setName("A");
+        a.getSpec().setChildren(List.of("B"));
+
+        Category b = category();
+        b.getMetadata().setName("B");
+        b.getSpec().setChildren(null);
+
+        Category c = category();
+        c.getMetadata().setName("C");
+        c.getSpec().setChildren(null);
+
+        Category g = category();
+        g.getMetadata().setName("G");
+        g.getSpec().setChildren(null);
+
+        Category f = category();
+        f.getMetadata().setName("F");
+        f.getSpec().setChildren(List.of("H"));
+
+        Category h = category();
+        h.getMetadata().setName("H");
+        h.getSpec().setChildren(null);
+        return List.of(d, e, a, b, c, g, f, h);
+    }
+
+    /**
+     * Visualize a tree.
+     */
+    String visualizeTree(List categoryTreeVos) {
+        Category.CategorySpec categorySpec = new Category.CategorySpec();
+        categorySpec.setSlug("/");
+        categorySpec.setDisplayName("全部");
+        Integer postCount = categoryTreeVos.stream()
+            .map(CategoryTreeVo::getPostCount)
+            .filter(Objects::nonNull)
+            .reduce(Integer::sum)
+            .orElse(0);
+        CategoryTreeVo root = CategoryTreeVo.builder()
+            .spec(categorySpec)
+            .postCount(postCount)
+            .children(categoryTreeVos)
+            .metadata(new Metadata())
+            .build();
+        StringBuilder stringBuilder = new StringBuilder();
+        root.print(stringBuilder, "", "");
+        return stringBuilder.toString();
+    }
+
+    private List categories() {
+        Category category2 = JsonUtils.deepCopy(category());
+        category2.getMetadata().setName("c2");
+        category2.getSpec().setPriority(2);
+
+        Category category3 = JsonUtils.deepCopy(category());
+        category3.getMetadata().setName("c3");
+        category3.getMetadata().setCreationTimestamp(Instant.now().plusSeconds(20));
+        category3.getSpec().setPriority(2);
+        return List.of(category2, category(), category3);
+    }
+
+    private Category category() {
+        final Category category = new Category();
+
+        Metadata metadata = new Metadata();
+        metadata.setName("hello");
+        metadata.setAnnotations(Map.of("K1", "V1"));
+        metadata.setCreationTimestamp(Instant.now());
+        category.setMetadata(metadata);
+
+        Category.CategorySpec categorySpec = new Category.CategorySpec();
+        categorySpec.setSlug("slug-1");
+        categorySpec.setDisplayName("displayName-1");
+        categorySpec.setCover("cover-1");
+        categorySpec.setDescription("description-1");
+        categorySpec.setTemplate("template-1");
+        categorySpec.setPriority(0);
+        categorySpec.setChildren(List.of("C1", "C2"));
+        category.setSpec(categorySpec);
+        return category;
+    }
+
+    private List moreCategories() {
+        // see also https://github.com/halo-dev/halo/issues/2643
+        String s = """
+            [
+               {
+                  "spec":{
+                     "displayName":"默认分类",
+                     "slug":"default",
+                     "description":"这是你的默认分类，如不需要，删除即可。",
+                     "cover":"",
+                     "template":"",
+                     "priority":1,
+                     "children":[
+                     ]
+                  },
+                  "status":{
+                     "permalink":"/categories/default",
+                     "postCount":3,
+                     "visiblePostCount":3
+                  },
+                  "apiVersion":"content.halo.run/v1alpha1",
+                  "kind":"Category",
+                  "metadata":{
+                     "name":"76514a40-6ef1-4ed9-b58a-e26945bde3ca",
+                     "version":16,
+                     "creationTimestamp":"2022-10-08T06:17:47.589181Z"
+                  }
+               },
+               {
+                  "spec":{
+                     "displayName":"MeterSphere",
+                     "slug":"metersphere",
+                     "description":"",
+                     "cover":"",
+                     "template":"",
+                     "priority":2,
+                     "children":[
+                     ]
+                  },
+                  "status":{
+                     "permalink":"/categories/metersphere",
+                     "postCount":0,
+                     "visiblePostCount":0
+                  },
+                  "apiVersion":"content.halo.run/v1alpha1",
+                  "kind":"Category",
+                  "metadata":{
+                     "finalizers":[
+                        "category-protection"
+                     ],
+                     "name":"acf09686-d5a7-4227-ba8c-3aeff063f12f",
+                     "version":13,
+                     "creationTimestamp":"2022-10-08T06:32:36.650974Z"
+                  }
+               },
+               {
+                  "spec":{
+                     "displayName":"DataEase",
+                     "slug":"dataease",
+                     "description":"",
+                     "cover":"",
+                     "template":"",
+                     "priority":0,
+                     "children":[
+                     ]
+                  },
+                  "status":{
+                     "permalink":"/categories/dataease",
+                     "postCount":0,
+                     "visiblePostCount":0
+                  },
+                  "apiVersion":"content.halo.run/v1alpha1",
+                  "kind":"Category",
+                  "metadata":{
+                     "finalizers":[
+                        "category-protection"
+                     ],
+                     "name":"bd95f914-22fc-4de5-afcc-a9ffba2f6401",
+                     "version":13,
+                     "creationTimestamp":"2022-10-08T06:32:53.353838Z"
+                  }
+               },
+               {
+                  "spec":{
+                     "displayName":"FIT2CLOUD",
+                     "slug":"fit2cloud",
+                     "description":"",
+                     "cover":"",
+                     "template":"",
+                     "priority":0,
+                     "children":[
+                        "bd95f914-22fc-4de5-afcc-a9ffba2f6401",
+                        "e1150fd9-4512-453c-9186-f8de9c156c3d",
+                        "acf09686-d5a7-4227-ba8c-3aeff063f12f",
+                        "ed064d5e-2b6f-4123-8114-78d0c6f2c4e2",
+                        "non-existent-children-name"
+                     ]
+                  },
+                  "status":{
+                     "permalink":"/categories/fit2cloud",
+                     "postCount":2,
+                     "visiblePostCount":2
+                  },
+                  "apiVersion":"content.halo.run/v1alpha1",
+                  "kind":"Category",
+                  "metadata":{
+                     "finalizers":[
+                        "category-protection"
+                     ],
+                     "name":"c25c17ae-4a7b-43c5-a424-76950b9622cd",
+                     "version":14,
+                     "creationTimestamp":"2022-10-08T06:32:27.802025Z"
+                  }
+               },
+               {
+                  "spec":{
+                     "displayName":"Halo",
+                     "slug":"halo",
+                     "description":"",
+                     "cover":"",
+                     "template":"",
+                     "priority":1,
+                     "children":[
+                     ]
+                  },
+                  "status":{
+                     "permalink":"/categories/halo",
+                     "postCount":2,
+                     "visiblePostCount":2
+                  },
+                  "apiVersion":"content.halo.run/v1alpha1",
+                  "kind":"Category",
+                  "metadata":{
+                     "finalizers":[
+                        "category-protection"
+                     ],
+                     "name":"e1150fd9-4512-453c-9186-f8de9c156c3d",
+                     "version":15,
+                     "creationTimestamp":"2022-10-08T06:32:42.991788Z"
+                  }
+               },
+               {
+                  "spec":{
+                     "displayName":"JumpServer",
+                     "slug":"jumpserver",
+                     "description":"",
+                     "cover":"",
+                     "template":"",
+                     "priority":3,
+                     "children":[
+                     ]
+                  },
+                  "status":{
+                     "permalink":"/categories/jumpserver",
+                     "postCount":0,
+                     "visiblePostCount":0
+                  },
+                  "apiVersion":"content.halo.run/v1alpha1",
+                  "kind":"Category",
+                  "metadata":{
+                     "finalizers":[
+                        "category-protection"
+                     ],
+                     "name":"ed064d5e-2b6f-4123-8114-78d0c6f2c4e2",
+                     "version":13,
+                     "creationTimestamp":"2022-10-08T06:33:00.557435Z"
+                  }
+               }
+            ]
+            """;
+        return JsonUtils.jsonToObject(s, new TypeReference<>() {
+        });
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceImplTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceImplTest.java
new file mode 100644
index 0000000..f1c8833
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceImplTest.java
@@ -0,0 +1,233 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import java.util.HashMap;
+import java.util.List;
+import java.util.function.Predicate;
+import java.util.stream.Stream;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.stubbing.Answer;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.test.context.junit.jupiter.SpringExtension;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.Counter;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.service.UserService;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Ref;
+import run.halo.app.infra.AnonymousUserConst;
+import run.halo.app.infra.utils.JsonUtils;
+import run.halo.app.metrics.CounterService;
+
+/**
+ * Tests for {@link CommentFinderImpl}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(SpringExtension.class)
+class CommentPublicQueryServiceImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+    @Mock
+    private UserService userService;
+
+    @Mock
+    private CounterService counterService;
+
+    @InjectMocks
+    private CommentPublicQueryServiceImpl commentPublicQueryService;
+
+    @BeforeEach
+    void setUp() {
+        User ghost = createUser();
+        ghost.getMetadata().setName("ghost");
+        when(userService.getUserOrGhost(eq("ghost"))).thenReturn(Mono.just(ghost));
+        when(userService.getUserOrGhost(eq("fake-user"))).thenReturn(Mono.just(createUser()));
+    }
+
+    @Nested
+    class ListCommentTest {
+        @Test
+        void desensitizeComment() throws JSONException {
+            var commentOwner = new Comment.CommentOwner();
+            commentOwner.setName("fake-user");
+            commentOwner.setDisplayName("Fake User");
+            commentOwner.setAnnotations(new HashMap<>() {
+                {
+                    put(Comment.CommentOwner.KIND_EMAIL, "mail@halo.run");
+                }
+            });
+            var comment = commentForCompare("1", null, true, 0);
+            comment.getSpec().setIpAddress("127.0.0.1");
+            comment.getSpec().setOwner(commentOwner);
+
+            Counter counter = new Counter();
+            counter.setUpvote(0);
+            when(counterService.getByName(any())).thenReturn(Mono.just(counter));
+
+            var result = commentPublicQueryService.toCommentVo(comment).block();
+            result.getMetadata().setCreationTimestamp(null);
+            result.getSpec().setCreationTime(null);
+            JSONAssert.assertEquals("""
+                    {
+                         "metadata":{
+                             "name":"1"
+                         },
+                         "spec":{
+                             "owner":{
+                                 "name":"",
+                                 "displayName":"Fake User",
+                                 "annotations":{
+                     
+                                 }
+                             },
+                             "ipAddress":"",
+                             "priority":0,
+                             "top":true
+                         },
+                         "owner":{
+                             "kind":"User",
+                             "displayName":"fake-display-name"
+                         },
+                         "stats":{
+                             "upvote":0
+                         }
+                     }
+                    """,
+                JsonUtils.objectToJson(result),
+                true);
+        }
+
+        Comment commentForCompare(String name, Instant creationTime, boolean top, int priority) {
+            Comment comment = new Comment();
+            comment.setMetadata(new Metadata());
+            comment.getMetadata().setName(name);
+            comment.getMetadata().setCreationTimestamp(Instant.now());
+            comment.setSpec(new Comment.CommentSpec());
+            comment.getSpec().setCreationTime(creationTime);
+            comment.getSpec().setTop(top);
+            comment.getSpec().setPriority(priority);
+            return comment;
+        }
+
+        @SuppressWarnings("unchecked")
+        private void mockWhenListComment() {
+            // Mock
+            Comment commentNotApproved = createComment();
+            commentNotApproved.getMetadata().setName("comment-not-approved");
+            commentNotApproved.getSpec().setApproved(false);
+
+            Comment commentApproved = createComment();
+            commentApproved.getMetadata().setName("comment-approved");
+            commentApproved.getSpec().setApproved(true);
+
+            Comment notApprovedWithAnonymous = createComment();
+            notApprovedWithAnonymous.getMetadata().setName("comment-not-approved-anonymous");
+            notApprovedWithAnonymous.getSpec().setApproved(false);
+            notApprovedWithAnonymous.getSpec().getOwner().setName(AnonymousUserConst.PRINCIPAL);
+
+            Comment commentApprovedButAnotherOwner = createComment();
+            commentApprovedButAnotherOwner.getMetadata()
+                .setName("comment-approved-but-another-owner");
+            commentApprovedButAnotherOwner.getSpec().setApproved(true);
+            commentApprovedButAnotherOwner.getSpec().getOwner().setName("another");
+
+            Comment commentNotApprovedAndAnotherOwner = createComment();
+            commentNotApprovedAndAnotherOwner.getMetadata()
+                .setName("comment-not-approved-and-another");
+            commentNotApprovedAndAnotherOwner.getSpec().setApproved(false);
+            commentNotApprovedAndAnotherOwner.getSpec().getOwner().setName("another");
+
+            Comment notApprovedAndAnotherRef = createComment();
+            notApprovedAndAnotherRef.getMetadata()
+                .setName("comment-not-approved-and-another-ref");
+            notApprovedAndAnotherRef.getSpec().setApproved(false);
+            Ref anotherRef =
+                Ref.of("another-fake-post", GroupVersionKind.fromExtension(Post.class));
+            notApprovedAndAnotherRef.getSpec().setSubjectRef(anotherRef);
+
+            when(client.list(eq(Comment.class), any(),
+                any(),
+                eq(1),
+                eq(10))
+            ).thenAnswer((Answer>>) invocation -> {
+                Predicate predicate =
+                    invocation.getArgument(1, Predicate.class);
+                List comments = Stream.of(
+                    commentNotApproved,
+                    commentApproved,
+                    commentApprovedButAnotherOwner,
+                    commentNotApprovedAndAnotherOwner,
+                    notApprovedWithAnonymous,
+                    notApprovedAndAnotherRef
+                ).filter(predicate).toList();
+                return Mono.just(new ListResult<>(1, 10, comments.size(), comments));
+            });
+
+            extractedUser();
+            when(client.fetch(eq(User.class), any())).thenReturn(Mono.just(createUser()));
+
+            Counter counter = new Counter();
+            counter.setUpvote(9);
+            when(counterService.getByName(any())).thenReturn(Mono.just(counter));
+        }
+
+        Comment createComment() {
+            Comment comment = new Comment();
+            comment.setMetadata(new Metadata());
+            comment.getMetadata().setName("fake-comment");
+            comment.setSpec(new Comment.CommentSpec());
+            comment.setStatus(new Comment.CommentStatus());
+
+            comment.getSpec().setRaw("fake-raw");
+            comment.getSpec().setContent("fake-content");
+            comment.getSpec().setHidden(false);
+            comment.getSpec()
+                .setSubjectRef(Ref.of("fake-post", GroupVersionKind.fromExtension(Post.class)));
+            Comment.CommentOwner commentOwner = new Comment.CommentOwner();
+            commentOwner.setKind(User.KIND);
+            commentOwner.setName("fake-user");
+            commentOwner.setDisplayName("fake-display-name");
+            comment.getSpec().setOwner(commentOwner);
+            return comment;
+        }
+    }
+
+    private void extractedUser() {
+        User another = createUser();
+        another.getMetadata().setName("another");
+        when(userService.getUserOrGhost(eq("another"))).thenReturn(Mono.just(another));
+
+        User ghost = createUser();
+        ghost.getMetadata().setName("ghost");
+        when(userService.getUserOrGhost(eq("ghost"))).thenReturn(Mono.just(ghost));
+        when(userService.getUserOrGhost(eq("fake-user"))).thenReturn(Mono.just(createUser()));
+        when(userService.getUserOrGhost(any())).thenReturn(Mono.just(ghost));
+    }
+
+    User createUser() {
+        User user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName("fake-user");
+        user.setSpec(new User.UserSpec());
+        user.getSpec().setDisplayName("fake-display-name");
+        return user;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceIntegrationTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceIntegrationTest.java
new file mode 100644
index 0000000..463e5b0
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/CommentPublicQueryServiceIntegrationTest.java
@@ -0,0 +1,510 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import java.time.Instant;
+import java.util.HashMap;
+import java.util.List;
+import java.util.stream.Collectors;
+import org.json.JSONException;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.annotation.DirtiesContext;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.User;
+import run.halo.app.core.extension.content.Comment;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.Reply;
+import run.halo.app.extension.Extension;
+import run.halo.app.extension.ExtensionStoreUtil;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.extension.Ref;
+import run.halo.app.extension.SchemeManager;
+import run.halo.app.extension.index.IndexerFactory;
+import run.halo.app.extension.store.ReactiveExtensionStoreClient;
+import run.halo.app.infra.AnonymousUserConst;
+import run.halo.app.infra.utils.JsonUtils;
+
+@DirtiesContext
+@SpringBootTest
+class CommentPublicQueryServiceIntegrationTest {
+
+    @Autowired
+    private SchemeManager schemeManager;
+
+    @Autowired
+    private ReactiveExtensionClient client;
+
+    @Autowired
+    private ReactiveExtensionStoreClient storeClient;
+
+    @Autowired
+    private IndexerFactory indexerFactory;
+
+    Mono deleteImmediately(Extension extension) {
+        var name = extension.getMetadata().getName();
+        var scheme = schemeManager.get(extension.getClass());
+        // un-index
+        var indexer = indexerFactory.getIndexer(extension.groupVersionKind());
+        indexer.unIndexRecord(extension.getMetadata().getName());
+
+        // delete from db
+        var storeName = ExtensionStoreUtil.buildStoreName(scheme, name);
+        return storeClient.delete(storeName, extension.getMetadata().getVersion())
+            .thenReturn(extension);
+    }
+
+    @Nested
+    class CommentListTest {
+        private final List storedComments = commentsForStore();
+
+        @Autowired
+        private CommentPublicQueryServiceImpl commentPublicQueryService;
+
+        @BeforeEach
+        void setUp() {
+            Flux.fromIterable(storedComments)
+                .flatMap(comment -> client.create(comment))
+                .as(StepVerifier::create)
+                .expectNextCount(storedComments.size())
+                .verifyComplete();
+        }
+
+        @AfterEach
+        void tearDown() {
+            Flux.fromIterable(storedComments)
+                .flatMap(CommentPublicQueryServiceIntegrationTest.this::deleteImmediately)
+                .as(StepVerifier::create)
+                .expectNextCount(storedComments.size())
+                .verifyComplete();
+        }
+
+        @Test
+        void listWhenUserNotLogin() {
+            Ref ref = Ref.of("fake-post", GroupVersionKind.fromExtension(Post.class));
+            commentPublicQueryService.list(ref, 1, 10)
+                .as(StepVerifier::create)
+                .consumeNextWith(listResult -> {
+                    assertThat(listResult.getTotal()).isEqualTo(2);
+                    assertThat(listResult.getItems().size()).isEqualTo(2);
+                    assertThat(listResult.getItems().get(0).getMetadata().getName())
+                        .isEqualTo("comment-approved");
+                })
+                .verifyComplete();
+        }
+
+        @Test
+        @WithMockUser(username = AnonymousUserConst.PRINCIPAL)
+        void listWhenUserIsAnonymous() {
+            Ref ref = Ref.of("fake-post", GroupVersionKind.fromExtension(Post.class));
+            commentPublicQueryService.list(ref, 1, 10)
+                .as(StepVerifier::create)
+                .consumeNextWith(listResult -> {
+                    assertThat(listResult.getTotal()).isEqualTo(2);
+                    assertThat(listResult.getItems().size()).isEqualTo(2);
+                    assertThat(listResult.getItems().get(0).getMetadata().getName())
+                        .isEqualTo("comment-approved");
+                })
+                .verifyComplete();
+        }
+
+        @Test
+        @WithMockUser(username = "fake-user")
+        void listWhenUserLoggedIn() {
+            Ref ref = Ref.of("fake-post", GroupVersionKind.fromExtension(Post.class));
+            commentPublicQueryService.list(ref, 1, 10)
+                .as(StepVerifier::create)
+                .consumeNextWith(listResult -> {
+                    assertThat(listResult.getTotal()).isEqualTo(3);
+                    assertThat(listResult.getItems().size()).isEqualTo(3);
+                    assertThat(listResult.getItems().get(0).getMetadata().getName())
+                        .isEqualTo("comment-approved");
+                    assertThat(listResult.getItems().get(1).getMetadata().getName())
+                        .isEqualTo("comment-approved-but-another-owner");
+                    assertThat(listResult.getItems().get(2).getMetadata().getName())
+                        .isEqualTo("comment-not-approved");
+                })
+                .verifyComplete();
+        }
+
+        List commentsForStore() {
+            // Mock
+            Comment commentNotApproved = fakeComment();
+            commentNotApproved.getMetadata().setName("comment-not-approved");
+            commentNotApproved.getSpec().setApproved(false);
+
+            Comment commentApproved = fakeComment();
+            commentApproved.getMetadata().setName("comment-approved");
+            commentApproved.getSpec().setApproved(true);
+
+            Comment notApprovedWithAnonymous = fakeComment();
+            notApprovedWithAnonymous.getMetadata().setName("comment-not-approved-anonymous");
+            notApprovedWithAnonymous.getSpec().setApproved(false);
+            notApprovedWithAnonymous.getSpec().getOwner().setName(AnonymousUserConst.PRINCIPAL);
+
+            Comment commentApprovedButAnotherOwner = fakeComment();
+            commentApprovedButAnotherOwner.getMetadata()
+                .setName("comment-approved-but-another-owner");
+            commentApprovedButAnotherOwner.getSpec().setApproved(true);
+            commentApprovedButAnotherOwner.getSpec().getOwner().setName("another");
+
+            Comment commentNotApprovedAndAnotherOwner = fakeComment();
+            commentNotApprovedAndAnotherOwner.getMetadata()
+                .setName("comment-not-approved-and-another");
+            commentNotApprovedAndAnotherOwner.getSpec().setApproved(false);
+            commentNotApprovedAndAnotherOwner.getSpec().getOwner().setName("another");
+
+            Comment notApprovedAndAnotherRef = fakeComment();
+            notApprovedAndAnotherRef.getMetadata()
+                .setName("comment-not-approved-and-another-ref");
+            notApprovedAndAnotherRef.getSpec().setApproved(false);
+            Ref anotherRef =
+                Ref.of("another-fake-post", GroupVersionKind.fromExtension(Post.class));
+            notApprovedAndAnotherRef.getSpec().setSubjectRef(anotherRef);
+
+            return List.of(
+                commentNotApproved,
+                commentApproved,
+                commentApprovedButAnotherOwner,
+                commentNotApprovedAndAnotherOwner,
+                notApprovedWithAnonymous,
+                notApprovedAndAnotherRef
+            );
+        }
+
+        Comment fakeComment() {
+            Comment comment = createComment();
+            comment.getMetadata().setDeletionTimestamp(null);
+            comment.getMetadata().setName("fake-comment");
+
+            comment.getSpec().setRaw("fake-raw");
+            comment.getSpec().setContent("fake-content");
+            comment.getSpec().setHidden(false);
+            comment.getSpec()
+                .setSubjectRef(Ref.of("fake-post", GroupVersionKind.fromExtension(Post.class)));
+            Comment.CommentOwner commentOwner = new Comment.CommentOwner();
+            commentOwner.setKind(User.KIND);
+            commentOwner.setName("fake-user");
+            commentOwner.setDisplayName("fake-display-name");
+            comment.getSpec().setOwner(commentOwner);
+            return comment;
+        }
+    }
+
+    @Nested
+    class CommentDefaultSortTest {
+        private final List commentList = createCommentList();
+
+        @BeforeEach
+        void setUp() {
+            Flux.fromIterable(commentList)
+                .flatMap(comment -> client.create(comment))
+                .as(StepVerifier::create)
+                .expectNextCount(commentList.size())
+                .verifyComplete();
+        }
+
+        @AfterEach
+        void tearDown() {
+            Flux.fromIterable(commentList)
+                .flatMap(CommentPublicQueryServiceIntegrationTest.this::deleteImmediately)
+                .as(StepVerifier::create)
+                .expectNextCount(commentList.size())
+                .verifyComplete();
+        }
+
+        @Test
+        void sortTest() {
+            var comments =
+                client.listAll(Comment.class, new ListOptions(),
+                        CommentPublicQueryServiceImpl.defaultCommentSort())
+                    .collectList()
+                    .block();
+            assertThat(comments).isNotNull();
+
+            var result = comments.stream()
+                .map(comment -> comment.getMetadata().getName())
+                .collect(Collectors.joining(", "));
+            assertThat(result).isEqualTo("1, 2, 4, 3, 5, 6, 9, 10, 14, 8, 7, 11, 12, 13");
+        }
+
+        List createCommentList() {
+            // 1, now + 1s, top, 0
+            // 2, now + 2s, top, 1
+            // 3, now + 3s, top, 2
+            // 4, now + 4s, top, 2
+            // 5, now + 4s, top, 3
+            // 6, now + 1s, no, 0
+            // 7, now + 2s, no, 0
+            // 8, now + 3s, no, 0
+            // 9, now + 3s, no, 0
+            // 10, null, no, 0
+            // 11, null, no, 1
+            // 12, null, no, 3
+            // 13, now + 3s, no, 3
+            Instant now = Instant.now();
+            var comment1 = commentForCompare("1", now.plusSeconds(1), true, 0);
+            var comment2 = commentForCompare("2", now.plusSeconds(2), true, 1);
+            var comment3 = commentForCompare("3", now.plusSeconds(3), true, 2);
+            var comment4 = commentForCompare("4", now.plusSeconds(4), true, 2);
+            var comment5 = commentForCompare("5", now.plusSeconds(4), true, 3);
+            var comment6 = commentForCompare("6", now.plusSeconds(4), true, 3);
+            var comment7 = commentForCompare("7", now.plusSeconds(1), false, 0);
+            var comment8 = commentForCompare("8", now.plusSeconds(2), false, 0);
+            var comment9 = commentForCompare("9", now.plusSeconds(3), false, 0);
+            var comment10 = commentForCompare("10", now.plusSeconds(3), false, 0);
+            var comment11 = commentForCompare("11", now, false, 0);
+            var comment12 = commentForCompare("12", now, false, 1);
+            var comment13 = commentForCompare("13", now, false, 3);
+            var comment14 = commentForCompare("14", now.plusSeconds(3), false, 3);
+
+            return List.of(comment1, comment2, comment3, comment4, comment5, comment6, comment7,
+                comment8, comment9, comment10, comment11, comment12, comment13, comment14);
+        }
+
+        Comment commentForCompare(String name, Instant creationTime, boolean top, int priority) {
+            var comment = createComment();
+            comment.getMetadata().setName(name);
+            comment.getMetadata().setCreationTimestamp(creationTime);
+            comment.getSpec().setCreationTime(creationTime);
+            comment.getSpec().setTop(top);
+            comment.getSpec().setPriority(priority);
+            return comment;
+        }
+    }
+
+    @Nested
+    class ListReplyTest {
+        private final List storedReplies = mockRelies();
+        @Autowired
+        private CommentPublicQueryServiceImpl commentPublicQueryService;
+
+        @BeforeEach
+        void setUp() {
+            Flux.fromIterable(storedReplies)
+                .flatMap(reply -> client.create(reply))
+                .as(StepVerifier::create)
+                .expectNextCount(storedReplies.size())
+                .verifyComplete();
+        }
+
+        @AfterEach
+        void tearDown() {
+            Flux.fromIterable(storedReplies)
+                .flatMap(CommentPublicQueryServiceIntegrationTest.this::deleteImmediately)
+                .as(StepVerifier::create)
+                .expectNextCount(storedReplies.size())
+                .verifyComplete();
+        }
+
+        @Test
+        void listWhenUserNotLogin() {
+            commentPublicQueryService.listReply("fake-comment", 1, 10)
+                .as(StepVerifier::create)
+                .consumeNextWith(listResult -> {
+                    assertThat(listResult.getTotal()).isEqualTo(2);
+                    assertThat(listResult.getItems().size()).isEqualTo(2);
+                    assertThat(listResult.getItems().get(0).getMetadata().getName())
+                        .isEqualTo("reply-approved");
+                })
+                .verifyComplete();
+        }
+
+        @Test
+        @WithMockUser(username = AnonymousUserConst.PRINCIPAL)
+        void listWhenUserIsAnonymous() {
+            commentPublicQueryService.listReply("fake-comment", 1, 10)
+                .as(StepVerifier::create)
+                .consumeNextWith(listResult -> {
+                    assertThat(listResult.getTotal()).isEqualTo(2);
+                    assertThat(listResult.getItems().size()).isEqualTo(2);
+                    assertThat(listResult.getItems().get(0).getMetadata().getName())
+                        .isEqualTo("reply-approved");
+                })
+                .verifyComplete();
+        }
+
+        @Test
+        @WithMockUser(username = "fake-user")
+        void listWhenUserLoggedIn() {
+            commentPublicQueryService.listReply("fake-comment", 1, 10)
+                .as(StepVerifier::create)
+                .consumeNextWith(listResult -> {
+                    assertThat(listResult.getTotal()).isEqualTo(3);
+                    assertThat(listResult.getItems().size()).isEqualTo(3);
+                    assertThat(listResult.getItems().get(0).getMetadata().getName())
+                        .isEqualTo("reply-approved");
+                    assertThat(listResult.getItems().get(1).getMetadata().getName())
+                        .isEqualTo("reply-approved-but-another-owner");
+                    assertThat(listResult.getItems().get(2).getMetadata().getName())
+                        .isEqualTo("reply-not-approved");
+                })
+                .verifyComplete();
+        }
+
+        @Test
+        void desensitizeReply() throws JSONException {
+            var reply = createReply();
+            reply.getSpec().getOwner()
+                .setAnnotations(new HashMap<>() {
+                    {
+                        put(Comment.CommentOwner.KIND_EMAIL, "mail@halo.run");
+                    }
+                });
+            reply.getSpec().setIpAddress("127.0.0.1");
+
+            var result = commentPublicQueryService.toReplyVo(reply).block();
+            result.getMetadata().setCreationTimestamp(null);
+            var jsonObject = JsonUtils.jsonToObject(fakeReplyJson(), JsonNode.class);
+            ((ObjectNode) jsonObject.get("owner"))
+                .put("displayName", "已删除用户");
+            JSONAssert.assertEquals(jsonObject.toString(),
+                JsonUtils.objectToJson(result),
+                true);
+        }
+
+        String fakeReplyJson() {
+            return """
+                    {
+                        "metadata":{
+                            "name":"fake-reply"
+                        },
+                        "spec":{
+                            "raw":"fake-raw",
+                            "content":"fake-content",
+                            "owner":{
+                                "kind":"User",
+                                "name":"",
+                                "displayName":"fake-display-name",
+                                "annotations":{
+                                    "email-hash": "4249f4df72b475e7894fabed1c5888cf"
+                                }
+                            },
+                            "creationTime": "2024-03-11T06:23:42.923294424Z",
+                            "ipAddress":"",
+                            "hidden": false,
+                            "allowNotification": false,
+                            "top": false,
+                            "priority": 0,
+                            "commentName":"fake-comment"
+                        },
+                        "owner":{
+                            "kind":"User",
+                            "displayName":"fake-display-name"
+                        },
+                        "stats":{
+                            "upvote":0
+                        }
+                    }
+                """;
+        }
+
+        private List mockRelies() {
+            // Mock
+            Reply notApproved = createReply();
+            notApproved.getMetadata().setName("reply-not-approved");
+            notApproved.getSpec().setApproved(false);
+
+            Reply approved = createReply();
+            approved.getMetadata().setName("reply-approved");
+            approved.getSpec().setApproved(true);
+
+            Reply notApprovedWithAnonymous = createReply();
+            notApprovedWithAnonymous.getMetadata().setName("reply-not-approved-anonymous");
+            notApprovedWithAnonymous.getSpec().setApproved(false);
+            notApprovedWithAnonymous.getSpec().getOwner().setName(AnonymousUserConst.PRINCIPAL);
+
+            Reply approvedButAnotherOwner = createReply();
+            approvedButAnotherOwner.getMetadata()
+                .setName("reply-approved-but-another-owner");
+            approvedButAnotherOwner.getSpec().setApproved(true);
+            approvedButAnotherOwner.getSpec().getOwner().setName("another");
+
+            Reply notApprovedAndAnotherOwner = createReply();
+            notApprovedAndAnotherOwner.getMetadata()
+                .setName("reply-not-approved-and-another");
+            notApprovedAndAnotherOwner.getSpec().setApproved(false);
+            notApprovedAndAnotherOwner.getSpec().getOwner().setName("another");
+
+            Reply notApprovedAndAnotherCommentName = createReply();
+            notApprovedAndAnotherCommentName.getMetadata()
+                .setName("reply-approved-and-another-comment-name");
+            notApprovedAndAnotherCommentName.getSpec().setApproved(false);
+            notApprovedAndAnotherCommentName.getSpec().setCommentName("another-fake-comment");
+
+            return List.of(
+                notApproved,
+                approved,
+                approvedButAnotherOwner,
+                notApprovedAndAnotherOwner,
+                notApprovedWithAnonymous,
+                notApprovedAndAnotherCommentName
+            );
+        }
+
+        Reply createReply() {
+            var reply = JsonUtils.jsonToObject(fakeReplyJson(), Reply.class);
+            reply.getMetadata().setName("fake-reply");
+
+            reply.getSpec().setRaw("fake-raw");
+            reply.getSpec().setContent("fake-content");
+            reply.getSpec().setHidden(false);
+            reply.getSpec().setCommentName("fake-comment");
+            Comment.CommentOwner commentOwner = new Comment.CommentOwner();
+            commentOwner.setKind(User.KIND);
+            commentOwner.setName("fake-user");
+            commentOwner.setDisplayName("fake-display-name");
+            reply.getSpec().setOwner(commentOwner);
+            return reply;
+        }
+    }
+
+    Comment createComment() {
+        return JsonUtils.jsonToObject("""
+              {
+                "spec": {
+                    "raw": "fake-raw",
+                    "content": "fake-content",
+                    "owner": {
+                        "kind": "User",
+                        "name": "fake-user"
+                    },
+                    "userAgent": "",
+                    "ipAddress": "",
+                    "approvedTime": "2024-02-28T09:15:16.095Z",
+                    "creationTime": "2024-02-28T06:23:42.923294424Z",
+                    "priority": 0,
+                    "top": false,
+                    "allowNotification": false,
+                    "approved": true,
+                    "hidden": false,
+                    "subjectRef": {
+                        "group": "content.halo.run",
+                        "version": "v1alpha1",
+                        "kind": "SinglePage",
+                        "name": "67"
+                    },
+                    "lastReadTime": "2024-02-29T03:39:04.230Z"
+                },
+                "apiVersion": "content.halo.run/v1alpha1",
+                "kind": "Comment",
+                "metadata": {
+                    "name": "fake-comment",
+                    "creationTimestamp": "2024-02-28T06:23:42.923439037Z"
+                }
+            }
+            """, Comment.class);
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/MenuFinderImplTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/MenuFinderImplTest.java
new file mode 100644
index 0000000..58f8a37
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/MenuFinderImplTest.java
@@ -0,0 +1,135 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+
+import java.util.Collections;
+import java.util.LinkedHashSet;
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Mockito;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Flux;
+import reactor.util.function.Tuple2;
+import reactor.util.function.Tuples;
+import run.halo.app.core.extension.Menu;
+import run.halo.app.core.extension.MenuItem;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.theme.finders.vo.MenuVo;
+
+/**
+ * Tests for {@link MenuFinderImpl}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class MenuFinderImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @InjectMocks
+    private MenuFinderImpl menuFinder;
+
+    @Test
+    void listAsTree() {
+        Tuple2, List> tuple = testTree();
+        Mockito.when(client.list(eq(Menu.class), eq(null), eq(null)))
+            .thenReturn(Flux.fromIterable(tuple.getT1()));
+        Mockito.when(client.list(eq(MenuItem.class), eq(null), any()))
+            .thenReturn(Flux.fromIterable(tuple.getT2()));
+
+        List menuVos = menuFinder.listAsTree().collectList().block();
+        assertThat(visualizeTree(menuVos)).isEqualTo("""
+            D
+            └── E
+                ├── A
+                │   └── B
+                └── C
+            X
+            └── G
+            Y
+            └── F
+                └── H
+            """);
+    }
+
+    /**
+     * Visualize a tree.
+     */
+    String visualizeTree(List menuVos) {
+        StringBuilder stringBuilder = new StringBuilder();
+        for (MenuVo menuVo : menuVos) {
+            menuVo.print(stringBuilder);
+        }
+        return stringBuilder.toString();
+    }
+
+    Tuple2, List> testTree() {
+        /*
+         *  D
+         *  ├── E
+         *  │   ├── A
+         *  │   │   └── B
+         *  │   └── C
+         *  X── G
+         *  Y── F
+         *      └── H
+         */
+        Menu menuD = menu("D", of("E"));
+        Menu menuX = menu("X", of("G"));
+        Menu menuY = menu("Y", of("F"));
+
+        MenuItem itemE = menuItem("E", of("A", "C", "non-existent-children-name"));
+        MenuItem itemG = menuItem("G", null);
+        MenuItem itemF = menuItem("F", of("H"));
+        MenuItem itemA = menuItem("A", of("B"));
+        MenuItem itemB = menuItem("B", null);
+        MenuItem itemC = menuItem("C", null);
+        MenuItem itemH = menuItem("H", null);
+        return Tuples.of(List.of(menuD, menuX, menuY),
+            List.of(itemE, itemG, itemF, itemA, itemB, itemC, itemH));
+    }
+
+    LinkedHashSet of(String... names) {
+        LinkedHashSet list = new LinkedHashSet<>();
+        Collections.addAll(list, names);
+        return list;
+    }
+
+    Menu menu(String name, LinkedHashSet menuItemNames) {
+        Menu menu = new Menu();
+        Metadata metadata = new Metadata();
+        metadata.setName(name);
+        menu.setMetadata(metadata);
+
+        Menu.Spec spec = new Menu.Spec();
+        spec.setDisplayName(name);
+        spec.setMenuItems(menuItemNames);
+        menu.setSpec(spec);
+        return menu;
+    }
+
+    MenuItem menuItem(String name, LinkedHashSet childrenNames) {
+        MenuItem menuItem = new MenuItem();
+        Metadata metadata = new Metadata();
+        metadata.setName(name);
+        menuItem.setMetadata(metadata);
+
+        MenuItem.MenuItemSpec spec = new MenuItem.MenuItemSpec();
+        spec.setPriority(0);
+        spec.setDisplayName(name);
+        spec.setChildren(childrenNames);
+        menuItem.setSpec(spec);
+
+        MenuItem.MenuItemStatus status = new MenuItem.MenuItemStatus();
+        menuItem.setStatus(status);
+        return menuItem;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/PluginFinderImplTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/PluginFinderImplTest.java
new file mode 100644
index 0000000..4ae4cec
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/PluginFinderImplTest.java
@@ -0,0 +1,89 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Mockito;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.pf4j.DefaultVersionManager;
+import org.pf4j.PluginDescriptor;
+import org.pf4j.PluginState;
+import org.pf4j.PluginWrapper;
+import run.halo.app.plugin.HaloPluginManager;
+
+/**
+ * Tests for {@link PluginFinderImpl}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PluginFinderImplTest {
+    @Mock
+    private HaloPluginManager haloPluginManager;
+
+    @InjectMocks
+    private PluginFinderImpl pluginFinder;
+
+    @Test
+    void available() {
+        assertThat(pluginFinder.available(null)).isFalse();
+
+        boolean available = pluginFinder.available("fake-plugin");
+        assertThat(available).isFalse();
+
+        PluginWrapper mockPluginWrapper = Mockito.mock(PluginWrapper.class);
+        when(haloPluginManager.getPlugin(eq("fake-plugin")))
+            .thenReturn(mockPluginWrapper);
+
+        when(mockPluginWrapper.getPluginState()).thenReturn(PluginState.RESOLVED);
+        available = pluginFinder.available("fake-plugin");
+        assertThat(available).isFalse();
+
+        when(mockPluginWrapper.getPluginState()).thenReturn(PluginState.STARTED);
+        available = pluginFinder.available("fake-plugin");
+        assertThat(available).isTrue();
+    }
+
+    @Test
+    void availableWithVersionTest() {
+        when(haloPluginManager.getVersionManager()).thenReturn(new DefaultVersionManager());
+
+        assertThatThrownBy(() -> pluginFinder.available("fake-plugin", null))
+            .isInstanceOf(IllegalArgumentException.class);
+
+        boolean available = pluginFinder.available("fake-plugin", "1.0.0");
+        assertThat(available).isFalse();
+
+        PluginWrapper mockPluginWrapper = Mockito.mock(PluginWrapper.class);
+        when(haloPluginManager.getPlugin(eq("fake-plugin")))
+            .thenReturn(mockPluginWrapper);
+
+        when(mockPluginWrapper.getPluginState()).thenReturn(PluginState.STARTED);
+        var descriptor = mock(PluginDescriptor.class);
+        when(mockPluginWrapper.getDescriptor()).thenReturn(descriptor);
+        when(descriptor.getVersion()).thenReturn("1.0.0");
+
+        available = pluginFinder.available("fake-plugin", "1.0.0");
+        assertThat(available).isTrue();
+
+        available = pluginFinder.available("fake-plugin", ">=1.0.0");
+        assertThat(available).isTrue();
+
+        available = pluginFinder.available("fake-plugin", "<2.0.0");
+        assertThat(available).isTrue();
+
+        available = pluginFinder.available("fake-plugin", "2.0.0");
+        assertThat(available).isFalse();
+
+        available = pluginFinder.available("fake-plugin", "<1.0.0");
+        assertThat(available).isFalse();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/PostFinderImplTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/PostFinderImplTest.java
new file mode 100644
index 0000000..405d5b6
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/PostFinderImplTest.java
@@ -0,0 +1,217 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.function.Predicate;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.PostService;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.metrics.CounterService;
+import run.halo.app.theme.finders.CategoryFinder;
+import run.halo.app.theme.finders.ContributorFinder;
+import run.halo.app.theme.finders.PostPublicQueryService;
+import run.halo.app.theme.finders.TagFinder;
+import run.halo.app.theme.finders.vo.ListedPostVo;
+import run.halo.app.theme.finders.vo.PostArchiveVo;
+import run.halo.app.theme.finders.vo.PostArchiveYearMonthVo;
+import run.halo.app.theme.router.DefaultQueryPostPredicateResolver;
+
+/**
+ * Tests for {@link PostFinderImpl}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PostFinderImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private CounterService counterService;
+
+    @Mock
+    private PostService postService;
+
+    @Mock
+    private CategoryFinder categoryFinder;
+
+    @Mock
+    private TagFinder tagFinder;
+
+    @Mock
+    private ContributorFinder contributorFinder;
+
+    @Mock
+    private PostPublicQueryService publicQueryService;
+
+    @InjectMocks
+    private PostFinderImpl postFinder;
+
+    @Test
+    void predicate() {
+        Predicate predicate = new DefaultQueryPostPredicateResolver().getPredicate().block();
+        assertThat(predicate).isNotNull();
+
+        List strings = posts().stream().filter(predicate)
+            .map(post -> post.getMetadata().getName())
+            .toList();
+        assertThat(strings).isEqualTo(List.of("post-1", "post-2", "post-6"));
+    }
+
+    @Test
+    void archives() {
+        List listedPostVos = postsForArchives().stream()
+            .map(ListedPostVo::from)
+            .toList();
+        ListResult listResult = new ListResult<>(1, 10, 3, listedPostVos);
+        when(publicQueryService.list(any(), any(PageRequest.class)))
+            .thenReturn(Mono.just(listResult));
+
+        ListResult archives = postFinder.archives(1, 10).block();
+        assertThat(archives).isNotNull();
+
+        List items = archives.getItems();
+        assertThat(items.size()).isEqualTo(2);
+        assertThat(items.get(0).getYear()).isEqualTo("2022");
+        assertThat(items.get(0).getMonths().size()).isEqualTo(1);
+        List months = items.get(0).getMonths();
+        assertThat(months.get(0).getMonth()).isEqualTo("12");
+        assertThat(months.get(0).getPosts()).hasSize(2);
+
+        assertThat(items.get(1).getYear()).isEqualTo("2021");
+        assertThat(items.get(1).getMonths()).hasSize(1);
+        assertThat(items.get(1).getMonths().get(0).getMonth()).isEqualTo("01");
+    }
+
+    @Test
+    void postPreviousNextPair() {
+        List postNames = new ArrayList<>();
+        for (int i = 0; i < 10; i++) {
+            postNames.add("post-" + i);
+        }
+
+        // post-0, post-1, post-2
+        var previousNextPair = PostFinderImpl.findPostNavigation(postNames, "post-0");
+        assertThat(previousNextPair.prev()).isNull();
+        assertThat(previousNextPair.next()).isEqualTo("post-1");
+
+        previousNextPair = PostFinderImpl.findPostNavigation(postNames, "post-1");
+        assertThat(previousNextPair.prev()).isEqualTo("post-0");
+        assertThat(previousNextPair.next()).isEqualTo("post-2");
+
+        // post-1, post-2, post-3
+        previousNextPair = PostFinderImpl.findPostNavigation(postNames, "post-2");
+        assertThat(previousNextPair.prev()).isEqualTo("post-1");
+        assertThat(previousNextPair.next()).isEqualTo("post-3");
+
+        // post-7, post-8, post-9
+        previousNextPair = PostFinderImpl.findPostNavigation(postNames, "post-8");
+        assertThat(previousNextPair.prev()).isEqualTo("post-7");
+        assertThat(previousNextPair.next()).isEqualTo("post-9");
+
+        previousNextPair = PostFinderImpl.findPostNavigation(postNames, "post-9");
+        assertThat(previousNextPair.prev()).isEqualTo("post-8");
+        assertThat(previousNextPair.next()).isNull();
+    }
+
+    List postsForArchives() {
+        Post post1 = post(1);
+        post1.getSpec().setPublish(true);
+        post1.getSpec().setPublishTime(Instant.parse("2021-01-01T00:00:00Z"));
+        post1.getMetadata().setCreationTimestamp(Instant.now());
+
+        Post post2 = post(2);
+        post2.getSpec().setPublish(true);
+        post2.getSpec().setPublishTime(Instant.parse("2022-12-01T00:00:00Z"));
+        post2.getMetadata().setCreationTimestamp(Instant.now());
+
+        Post post3 = post(3);
+        post3.getSpec().setPublish(true);
+        post3.getSpec().setPublishTime(Instant.parse("2022-12-03T00:00:00Z"));
+        post3.getMetadata().setCreationTimestamp(Instant.now());
+        return List.of(post1, post2, post3);
+    }
+
+    List posts() {
+        // 置顶的排前面按 priority 排序
+        // 再根据发布时间排序
+        // 相同再根据名称排序
+        // 6, 2, 1, 5, 4, 3
+        Post post1 = post(1);
+        post1.getSpec().setPinned(false);
+        post1.getSpec().setPublishTime(Instant.now().plusSeconds(20));
+
+        Post post2 = post(2);
+        post2.getSpec().setPinned(true);
+        post2.getSpec().setPriority(2);
+        post2.getSpec().setPublishTime(Instant.now());
+
+        Post post3 = post(3);
+        post3.getSpec().setDeleted(true);
+        post3.getSpec().setPublishTime(Instant.now());
+
+        Post post4 = post(4);
+        post4.getSpec().setVisible(Post.VisibleEnum.PRIVATE);
+        post4.getSpec().setPublishTime(Instant.now());
+
+        Post post5 = post(5);
+        post5.getSpec().setPublish(false);
+        post5.getMetadata().getLabels().clear();
+        post5.getSpec().setPublishTime(Instant.now());
+
+        Post post6 = post(6);
+        post6.getSpec().setPinned(true);
+        post6.getSpec().setPriority(3);
+        post6.getSpec().setPublishTime(Instant.now());
+
+        return List.of(post1, post2, post3, post4, post5, post6);
+    }
+
+    Post post(int i) {
+        final Post post = new Post();
+        Metadata metadata = new Metadata();
+        metadata.setName("post-" + i);
+        metadata.setCreationTimestamp(Instant.now());
+        metadata.setAnnotations(Map.of("K1", "V1"));
+        metadata.setLabels(new HashMap<>());
+        metadata.getLabels().put(Post.PUBLISHED_LABEL, "true");
+        post.setMetadata(metadata);
+
+        Post.PostSpec postSpec = new Post.PostSpec();
+        postSpec.setDeleted(false);
+        postSpec.setAllowComment(true);
+        postSpec.setPublishTime(Instant.now());
+        postSpec.setPinned(false);
+        postSpec.setPriority(0);
+        postSpec.setPublish(true);
+        postSpec.setVisible(Post.VisibleEnum.PUBLIC);
+        postSpec.setTitle("title-" + i);
+        postSpec.setSlug("slug-" + i);
+        post.setSpec(postSpec);
+
+        Post.PostStatus postStatus = new Post.PostStatus();
+        postStatus.setPermalink("/post-" + i);
+        postStatus.setContributors(List.of("contributor-1", "contributor-2"));
+        postStatus.setExcerpt("hello world!");
+        post.setStatus(postStatus);
+        return post;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/PostPublicQueryServiceImplTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/PostPublicQueryServiceImplTest.java
new file mode 100644
index 0000000..17cd0c4
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/PostPublicQueryServiceImplTest.java
@@ -0,0 +1,79 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.content.ContentWrapper;
+import run.halo.app.content.TestPost;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+import run.halo.app.theme.ReactivePostContentHandler;
+
+/**
+ * Tests for {@link PostPublicQueryServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.7.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PostPublicQueryServiceImplTest {
+
+    @Mock
+    private ExtensionGetter extensionGetter;
+
+    @InjectMocks
+    private PostPublicQueryServiceImpl postPublicQueryService;
+
+    @Test
+    void extendPostContent() {
+        when(extensionGetter.getEnabledExtensions(
+            eq(ReactivePostContentHandler.class))).thenReturn(
+            Flux.just(new PostContentHandlerB(), new PostContentHandlerA(),
+                new PostContentHandlerC()));
+        Post post = TestPost.postV1();
+        post.getMetadata().setName("fake-post");
+        ContentWrapper contentWrapper =
+            ContentWrapper.builder().content("fake-content").raw("fake-raw").rawType("markdown")
+                .build();
+        postPublicQueryService.extendPostContent(post, contentWrapper)
+            .as(StepVerifier::create).consumeNextWith(contentVo -> {
+                assertThat(contentVo.getContent()).isEqualTo("fake-content-B-A-C");
+            }).verifyComplete();
+    }
+
+    static class PostContentHandlerA implements ReactivePostContentHandler {
+
+        @Override
+        public Mono handle(PostContentContext postContent) {
+            postContent.setContent(postContent.getContent() + "-A");
+            return Mono.just(postContent);
+        }
+    }
+
+    static class PostContentHandlerB implements ReactivePostContentHandler {
+
+        @Override
+        public Mono handle(PostContentContext postContent) {
+            postContent.setContent(postContent.getContent() + "-B");
+            return Mono.just(postContent);
+        }
+    }
+
+    static class PostContentHandlerC implements ReactivePostContentHandler {
+
+        @Override
+        public Mono handle(PostContentContext postContent) {
+            postContent.setContent(postContent.getContent() + "-C");
+            return Mono.just(postContent);
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/SinglePageConversionServiceImplTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/SinglePageConversionServiceImplTest.java
new file mode 100644
index 0000000..435ea1e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/SinglePageConversionServiceImplTest.java
@@ -0,0 +1,91 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.lang.NonNull;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.content.ContentWrapper;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.extension.Metadata;
+import run.halo.app.plugin.extensionpoint.ExtensionGetter;
+import run.halo.app.theme.ReactiveSinglePageContentHandler;
+
+/**
+ * Tests for {@link SinglePageConversionServiceImpl}.
+ *
+ * @author guqing
+ * @since 2.7.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SinglePageConversionServiceImplTest {
+
+    @Mock
+    private ExtensionGetter extensionGetter;
+
+    @InjectMocks
+    private SinglePageConversionServiceImpl pageConversionService;
+
+    @Test
+    void extendPageContent() {
+        when(extensionGetter.getEnabledExtensions(
+            eq(ReactiveSinglePageContentHandler.class)))
+            .thenReturn(
+                Flux.just(new PageContentHandlerB(),
+                    new PageContentHandlerA(),
+                    new PageContentHandlerC())
+            );
+        ContentWrapper contentWrapper = ContentWrapper.builder()
+            .content("fake-content")
+            .raw("fake-raw")
+            .rawType("markdown")
+            .build();
+        SinglePage singlePage = new SinglePage();
+        singlePage.setMetadata(new Metadata());
+        singlePage.getMetadata().setName("fake-page");
+        pageConversionService.extendPageContent(singlePage, contentWrapper)
+            .as(StepVerifier::create)
+            .consumeNextWith(contentVo -> {
+                assertThat(contentVo.getContent()).isEqualTo("fake-content-B-A-C");
+            })
+            .verifyComplete();
+    }
+
+    static class PageContentHandlerA implements ReactiveSinglePageContentHandler {
+
+        @Override
+        public Mono handle(
+            @NonNull SinglePageContentContext pageContent) {
+            pageContent.setContent(pageContent.getContent() + "-A");
+            return Mono.just(pageContent);
+        }
+    }
+
+    static class PageContentHandlerB implements ReactiveSinglePageContentHandler {
+
+        @Override
+        public Mono handle(
+            @NonNull SinglePageContentContext pageContent) {
+            pageContent.setContent(pageContent.getContent() + "-B");
+            return Mono.just(pageContent);
+        }
+    }
+
+    static class PageContentHandlerC implements ReactiveSinglePageContentHandler {
+
+        @Override
+        public Mono handle(
+            @NonNull SinglePageContentContext pageContent) {
+            pageContent.setContent(pageContent.getContent() + "-C");
+            return Mono.just(pageContent);
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/SinglePageFinderImplTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/SinglePageFinderImplTest.java
new file mode 100644
index 0000000..1751686
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/SinglePageFinderImplTest.java
@@ -0,0 +1,70 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.theme.finders.SinglePageConversionService;
+import run.halo.app.theme.finders.vo.SinglePageVo;
+
+/**
+ * Tests for {@link SinglePageFinderImpl}.
+ *
+ * @author guqing
+ * @since 2.0.1
+ */
+@ExtendWith(MockitoExtension.class)
+class SinglePageFinderImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private SinglePageConversionService singlePageConversionService;
+
+    @InjectMocks
+    private SinglePageFinderImpl singlePageFinder;
+
+    @Test
+    void getByName() {
+        // fix gh-2992
+        String fakePageName = "fake-page";
+        SinglePage singlePage = new SinglePage();
+        singlePage.setMetadata(new Metadata());
+        singlePage.getMetadata().setName(fakePageName);
+        singlePage.getMetadata().setLabels(Map.of(SinglePage.PUBLISHED_LABEL, "true"));
+        singlePage.setSpec(new SinglePage.SinglePageSpec());
+        singlePage.getSpec().setOwner("fake-owner");
+        singlePage.getSpec().setReleaseSnapshot("fake-release");
+        singlePage.getSpec().setPublish(true);
+        singlePage.getSpec().setDeleted(false);
+        singlePage.getSpec().setVisible(Post.VisibleEnum.PUBLIC);
+        singlePage.setStatus(new SinglePage.SinglePageStatus());
+        when(client.get(eq(SinglePage.class), eq(fakePageName)))
+            .thenReturn(Mono.just(singlePage));
+
+        when(singlePageConversionService.convertToVo(eq(singlePage)))
+            .thenReturn(Mono.just(mock(SinglePageVo.class)));
+
+        singlePageFinder.getByName(fakePageName)
+            .as(StepVerifier::create)
+            .consumeNextWith(page -> assertThat(page).isNotNull())
+            .verifyComplete();
+
+        verify(client).get(SinglePage.class, fakePageName);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/finders/impl/TagFinderImplTest.java b/application/src/test/java/run/halo/app/theme/finders/impl/TagFinderImplTest.java
new file mode 100644
index 0000000..8008174
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/impl/TagFinderImplTest.java
@@ -0,0 +1,129 @@
+package run.halo.app.theme.finders.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import java.time.Instant;
+import java.util.List;
+import java.util.Map;
+import java.util.stream.Collectors;
+import org.json.JSONException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.skyscreamer.jsonassert.JSONAssert;
+import org.springframework.data.domain.Sort;
+import reactor.core.publisher.Flux;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.content.Tag;
+import run.halo.app.extension.ListOptions;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.utils.JsonUtils;
+import run.halo.app.theme.finders.vo.TagVo;
+
+/**
+ * Tests for {@link TagFinderImpl}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class TagFinderImplTest {
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    private TagFinderImpl tagFinder;
+
+    @BeforeEach
+    void setUp() {
+        tagFinder = new TagFinderImpl(client);
+    }
+
+    @Test
+    void getByName() throws JSONException {
+        when(client.fetch(eq(Tag.class), eq("t1")))
+            .thenReturn(Mono.just(tag(1)));
+        TagVo tagVo = tagFinder.getByName("t1").block();
+        tagVo.getMetadata().setCreationTimestamp(null);
+        JSONAssert.assertEquals("""
+                {
+                     "metadata": {
+                         "name": "t1",
+                         "annotations": {
+                             "K1": "V1"
+                         }
+                     },
+                     "spec": {
+                         "displayName": "displayName-1",
+                         "slug": "slug-1",
+                         "color": "color-1",
+                         "cover": "cover-1"
+                     },
+                     "status": {
+                         "permalink": "permalink-1",
+                         "postCount": 2,
+                         "visiblePostCount": 1
+                     },
+                     "postCount": 1
+                }
+                """,
+            JsonUtils.objectToJson(tagVo),
+            true);
+    }
+
+    @Test
+    void listAll() {
+        when(client.listAll(eq(Tag.class), any(ListOptions.class), any(Sort.class)))
+            .thenReturn(Flux.fromIterable(
+                    tags().stream().sorted(TagFinderImpl.DEFAULT_COMPARATOR.reversed()).toList()
+                )
+            );
+        List tags = tagFinder.listAll().collectList().block();
+        assertThat(tags).hasSize(3);
+        assertThat(tags.stream()
+            .map(tag -> tag.getMetadata().getName())
+            .collect(Collectors.toList()))
+            .isEqualTo(List.of("t3", "t2", "t1"));
+    }
+
+    List tags() {
+        Tag tag1 = tag(1);
+
+        Tag tag2 = tag(2);
+        tag2.getMetadata().setCreationTimestamp(Instant.now().plusSeconds(1));
+
+        Tag tag3 = tag(3);
+        tag3.getMetadata().setCreationTimestamp(Instant.now().plusSeconds(2));
+        // sorted: 3, 2, 1
+        return List.of(tag2, tag1, tag3);
+    }
+
+    Tag tag(int i) {
+        final Tag tag = new Tag();
+        Metadata metadata = new Metadata();
+        metadata.setName("t" + i);
+        metadata.setAnnotations(Map.of("K1", "V1"));
+        metadata.setCreationTimestamp(Instant.now());
+        tag.setMetadata(metadata);
+
+        Tag.TagSpec tagSpec = new Tag.TagSpec();
+        tagSpec.setDisplayName("displayName-" + i);
+        tagSpec.setSlug("slug-" + i);
+        tagSpec.setColor("color-" + i);
+        tagSpec.setCover("cover-" + i);
+        tag.setSpec(tagSpec);
+
+        Tag.TagStatus tagStatus = new Tag.TagStatus();
+        tagStatus.setPermalink("permalink-" + i);
+        tagStatus.setPostCount(2);
+        tagStatus.setVisiblePostCount(1);
+        tag.setStatus(tagStatus);
+        return tag;
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/finders/vo/UserVoTest.java b/application/src/test/java/run/halo/app/theme/finders/vo/UserVoTest.java
new file mode 100644
index 0000000..95016f0
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/finders/vo/UserVoTest.java
@@ -0,0 +1,85 @@
+package run.halo.app.theme.finders.vo;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.time.Instant;
+import java.util.List;
+import org.json.JSONException;
+import org.junit.jupiter.api.Test;
+import org.skyscreamer.jsonassert.JSONAssert;
+import run.halo.app.core.extension.User;
+import run.halo.app.extension.Metadata;
+import run.halo.app.infra.utils.JsonUtils;
+
+/**
+ * Tests for {@link UserVo}.
+ *
+ * @author guqing
+ * @since 2.0.1
+ */
+class UserVoTest {
+
+    @Test
+    void from() throws JSONException {
+        User user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName("fake-user");
+        user.setSpec(new User.UserSpec());
+        user.getSpec().setPassword("123456");
+        user.getSpec().setEmail("example@example.com");
+        user.getSpec().setAvatar("avatar");
+        user.getSpec().setDisplayName("fake-user-display-name");
+        user.getSpec().setBio("user bio");
+        user.getSpec().setDisabled(false);
+        user.getSpec().setPhone("123456789");
+        user.getSpec().setRegisteredAt(Instant.parse("2022-01-01T00:00:00.00Z"));
+        user.getSpec().setLoginHistoryLimit(5);
+        user.getSpec().setTwoFactorAuthEnabled(false);
+
+        user.setStatus(new User.UserStatus());
+        user.getStatus().setLastLoginAt(Instant.parse("2022-01-02T00:00:00.00Z"));
+        User.LoginHistory loginHistory = new User.LoginHistory();
+        loginHistory.setLoginAt(Instant.parse("2022-01-02T00:00:00.00Z"));
+        loginHistory.setReason("login reason");
+        loginHistory.setUserAgent("user agent");
+        user.getStatus().setLoginHistories(List.of(loginHistory));
+
+        UserVo userVo = UserVo.from(user);
+        JSONAssert.assertEquals("""
+                {
+                    "metadata": {
+                        "name": "fake-user"
+                    },
+                    "spec": {
+                        "displayName": "fake-user-display-name",
+                        "avatar": "avatar",
+                        "email": "example@example.com",
+                        "emailVerified": false,
+                        "phone": "123456789",
+                        "password": "[PROTECTED]",
+                        "bio": "user bio",
+                        "registeredAt": "2022-01-01T00:00:00Z",
+                        "twoFactorAuthEnabled": false,
+                        "disabled": false,
+                        "loginHistoryLimit": 5
+                    },
+                    "status": {
+                        "loginHistories": []
+                    }
+                }
+                """,
+            JsonUtils.objectToJson(userVo),
+            true);
+    }
+
+    @Test
+    void fromWhenStatusIsNull() {
+        User user = new User();
+        user.setMetadata(new Metadata());
+        user.getMetadata().setName("fake-user");
+        user.setSpec(new User.UserSpec());
+        UserVo userVo = UserVo.from(user);
+
+        assertThat(userVo).isNotNull();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/message/ThemeMessageResolutionUtilsTest.java b/application/src/test/java/run/halo/app/theme/message/ThemeMessageResolutionUtilsTest.java
new file mode 100644
index 0000000..924f1ed
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/message/ThemeMessageResolutionUtilsTest.java
@@ -0,0 +1,59 @@
+package run.halo.app.theme.message;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.io.FileNotFoundException;
+import java.net.URISyntaxException;
+import java.net.URL;
+import java.nio.file.Path;
+import java.util.Locale;
+import java.util.Map;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.util.ResourceUtils;
+import run.halo.app.theme.ThemeContext;
+
+/**
+ * @author guqing
+ * @since 2.0.0
+ */
+class ThemeMessageResolutionUtilsTest {
+    private URL defaultThemeUrl;
+
+    @BeforeEach
+    void setUp() throws FileNotFoundException {
+        defaultThemeUrl = ResourceUtils.getURL("classpath:themes/default");
+    }
+
+    @Test
+    void resolveMessagesForTemplateForDefault() throws URISyntaxException {
+        Map properties =
+            ThemeMessageResolutionUtils.resolveMessagesForTemplate(Locale.CHINESE, getTheme());
+        assertThat(properties).hasSize(1);
+        assertThat(properties).containsEntry("index.welcome", "欢迎来到首页");
+    }
+
+    @Test
+    void resolveMessagesForTemplateForEnglish() throws URISyntaxException {
+        Map properties =
+            ThemeMessageResolutionUtils.resolveMessagesForTemplate(Locale.ENGLISH, getTheme());
+        assertThat(properties).hasSize(1);
+        assertThat(properties).containsEntry("index.welcome", "Welcome to the index");
+    }
+
+    @Test
+    void messageFormat() {
+        String s =
+            ThemeMessageResolutionUtils.formatMessage(Locale.ENGLISH, "Welcome {0} to the index",
+                new Object[] {"Halo"});
+        assertThat(s).isEqualTo("Welcome Halo to the index");
+    }
+
+    ThemeContext getTheme() throws URISyntaxException {
+        return ThemeContext.builder()
+            .name("default")
+            .path(Path.of(defaultThemeUrl.toURI()))
+            .active(true)
+            .build();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/message/ThemeMessageResolverIntegrationTest.java b/application/src/test/java/run/halo/app/theme/message/ThemeMessageResolverIntegrationTest.java
new file mode 100644
index 0000000..6948c4e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/message/ThemeMessageResolverIntegrationTest.java
@@ -0,0 +1,157 @@
+package run.halo.app.theme.message;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.when;
+
+import java.io.FileNotFoundException;
+import java.net.URISyntaxException;
+import java.net.URL;
+import java.nio.file.Path;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.reactive.AutoConfigureWebTestClient;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.context.TestConfiguration;
+import org.springframework.boot.test.mock.mockito.SpyBean;
+import org.springframework.context.annotation.Bean;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.util.ResourceUtils;
+import org.springframework.web.reactive.function.server.RequestPredicates;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.RouterFunctions;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+import run.halo.app.infra.InitializationStateGetter;
+import run.halo.app.theme.ThemeContext;
+import run.halo.app.theme.ThemeResolver;
+
+/**
+ * Tests for {@link ThemeMessageResolver}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@SpringBootTest
+@AutoConfigureWebTestClient
+public class ThemeMessageResolverIntegrationTest {
+
+    @SpyBean
+    private ThemeResolver themeResolver;
+
+    private URL defaultThemeUrl;
+
+    private URL otherThemeUrl;
+
+    @SpyBean
+    private InitializationStateGetter initializationStateGetter;
+
+    @Autowired
+    private WebTestClient webTestClient;
+
+    @BeforeEach
+    void setUp() throws FileNotFoundException, URISyntaxException {
+        when(initializationStateGetter.userInitialized()).thenReturn(Mono.just(true));
+        defaultThemeUrl = ResourceUtils.getURL("classpath:themes/default");
+        otherThemeUrl = ResourceUtils.getURL("classpath:themes/other");
+
+        when(themeResolver.getTheme(any(ServerWebExchange.class)))
+            .thenReturn(Mono.just(createDefaultContext()));
+    }
+
+    @Test
+    void messageResolverWhenDefaultTheme() {
+        webTestClient.get()
+            .uri("/?language=zh")
+            .exchange()
+            .expectStatus()
+            .isOk()
+            .expectBody()
+            .xpath("/html/body/div[1]").isEqualTo("zh")
+            .xpath("/html/body/div[2]").isEqualTo("欢迎来到首页");
+    }
+
+    @Test
+    void messageResolverForEnLanguageWhenDefaultTheme() {
+        webTestClient.get()
+            .uri("/?language=en")
+            .exchange()
+            .expectStatus()
+            .isOk()
+            .expectBody()
+            .xpath("/html/body/div[1]").isEqualTo("en")
+            .xpath("/html/body/div[2]").isEqualTo("Welcome to the index");
+    }
+
+    @Test
+    void shouldUseDefaultWhenLanguageNotSupport() {
+        webTestClient.get()
+            .uri("/index?language=foo")
+            .exchange()
+            .expectStatus()
+            .isOk()
+            .expectBody()
+            .xpath("/html/body/div[1]").isEqualTo("foo")
+            .xpath("/html/body/div[2]").isEqualTo("欢迎来到首页");
+    }
+
+    @Test
+    void switchTheme() throws URISyntaxException {
+        webTestClient.get()
+            .uri("/index?language=zh")
+            .exchange()
+            .expectStatus()
+            .isOk()
+            .expectBody()
+            .xpath("/html/head/title").isEqualTo("Title")
+            .xpath("/html/body/div[1]").isEqualTo("zh")
+            .xpath("/html/body/div[2]").isEqualTo("欢迎来到首页")
+        ;
+
+        // For other theme
+        when(themeResolver.getTheme(any(ServerWebExchange.class)))
+            .thenReturn(Mono.just(createOtherContext()));
+        webTestClient.get()
+            .uri("/index?language=zh")
+            .exchange()
+            .expectBody()
+            .xpath("/html/head/title").isEqualTo("Other theme title")
+            .xpath("/html/body/p").isEqualTo("Other 首页");
+
+        webTestClient.get()
+            .uri("/index?language=en")
+            .exchange()
+            .expectBody()
+            .xpath("/html/head/title").isEqualTo("Other theme title")
+            .xpath("/html/body/p").isEqualTo("other index");
+    }
+
+    ThemeContext createDefaultContext() throws URISyntaxException {
+        return ThemeContext.builder()
+            .name("default")
+            .path(Path.of(defaultThemeUrl.toURI()))
+            .active(true)
+            .build();
+    }
+
+    ThemeContext createOtherContext() throws URISyntaxException {
+        return ThemeContext.builder()
+            .name("other")
+            .path(Path.of(otherThemeUrl.toURI()))
+            .active(false)
+            .build();
+    }
+
+    @TestConfiguration
+    static class MessageResolverConfig {
+        @Bean
+        RouterFunction routeTestIndex() {
+            return RouterFunctions
+                .route(RequestPredicates.GET("/").or(RequestPredicates.GET("/index"))
+                        .and(RequestPredicates.accept(MediaType.TEXT_HTML)),
+                    request -> ServerResponse.ok().render("index"));
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/router/EmptyView.java b/application/src/test/java/run/halo/app/theme/router/EmptyView.java
new file mode 100644
index 0000000..ba4a0bf
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/EmptyView.java
@@ -0,0 +1,24 @@
+package run.halo.app.theme.router;
+
+import java.util.Map;
+import org.springframework.http.MediaType;
+import org.springframework.web.server.ServerWebExchange;
+import org.thymeleaf.spring6.view.reactive.ThymeleafReactiveView;
+import reactor.core.publisher.Mono;
+
+/**
+ * Empty view for test.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+public class EmptyView extends ThymeleafReactiveView {
+    public EmptyView() {
+    }
+
+    @Override
+    public Mono render(Map model, MediaType contentType,
+        ServerWebExchange exchange) {
+        return Mono.empty();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/router/PageUrlUtilsTest.java b/application/src/test/java/run/halo/app/theme/router/PageUrlUtilsTest.java
new file mode 100644
index 0000000..281a320
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/PageUrlUtilsTest.java
@@ -0,0 +1,63 @@
+package run.halo.app.theme.router;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import org.junit.jupiter.api.Test;
+
+/**
+ * Tests for {@link PageUrlUtils}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class PageUrlUtilsTest {
+    static String s = "/tags";
+    static String s1 = "/tags/page/1";
+    static String s2 = "/tags/page/2";
+    static String s3 = "/tags/y/m/page/2";
+    static String s4 = "/tags/y/m";
+    static String s5 = "/tags/y/m/page/3";
+
+    @Test
+    void nextPageUrl() {
+        long totalPage = 10;
+        assertThat(PageUrlUtils.nextPageUrl(s, totalPage))
+            .isEqualTo("/tags/page/2");
+        assertThat(PageUrlUtils.nextPageUrl(s2, totalPage))
+            .isEqualTo("/tags/page/3");
+        assertThat(PageUrlUtils.nextPageUrl(s3, totalPage))
+            .isEqualTo("/tags/y/m/page/3");
+        assertThat(PageUrlUtils.nextPageUrl(s4, totalPage))
+            .isEqualTo("/tags/y/m/page/2");
+        assertThat(PageUrlUtils.nextPageUrl(s5, totalPage))
+            .isEqualTo("/tags/y/m/page/4");
+
+        // The number of pages does not exceed the total number of pages
+        totalPage = 1;
+        assertThat(PageUrlUtils.nextPageUrl("/tags/page/1", totalPage))
+            .isEqualTo("/tags/page/1");
+
+        totalPage = 0;
+        assertThat(PageUrlUtils.nextPageUrl("/tags", totalPage))
+            .isEqualTo("/tags/page/1");
+    }
+
+    @Test
+    void prevPageUrl() {
+        assertThat(PageUrlUtils.prevPageUrl(s))
+            .isEqualTo("/tags");
+        assertThat(PageUrlUtils.prevPageUrl(s1))
+            .isEqualTo("/tags");
+        assertThat(PageUrlUtils.prevPageUrl(s2))
+            .isEqualTo("/tags");
+        assertThat(PageUrlUtils.prevPageUrl(s3))
+            .isEqualTo("/tags/y/m");
+        assertThat(PageUrlUtils.prevPageUrl(s4))
+            .isEqualTo("/tags/y/m");
+        assertThat(PageUrlUtils.prevPageUrl(s5))
+            .isEqualTo("/tags/y/m/page/2");
+
+        assertThat(PageUrlUtils.prevPageUrl("/page/2"))
+            .isEqualTo("/");
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/router/PreviewRouterFunctionTest.java b/application/src/test/java/run/halo/app/theme/router/PreviewRouterFunctionTest.java
new file mode 100644
index 0000000..683401a
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/PreviewRouterFunctionTest.java
@@ -0,0 +1,175 @@
+package run.halo.app.theme.router;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import java.util.Map;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.springframework.http.MediaType;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.context.junit.jupiter.SpringExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.HandlerStrategies;
+import org.springframework.web.reactive.function.server.ServerRequest;
+import org.springframework.web.reactive.result.view.ViewResolver;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.PostService;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.infra.AnonymousUserConst;
+import run.halo.app.theme.ViewNameResolver;
+import run.halo.app.theme.finders.PostPublicQueryService;
+import run.halo.app.theme.finders.SinglePageConversionService;
+import run.halo.app.theme.finders.vo.ContributorVo;
+import run.halo.app.theme.finders.vo.PostVo;
+import run.halo.app.theme.finders.vo.SinglePageVo;
+
+/**
+ * Tests for {@link PreviewRouterFunction}.
+ *
+ * @author guqing
+ * @since 2.6.x
+ */
+@ExtendWith(SpringExtension.class)
+class PreviewRouterFunctionTest {
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private PostPublicQueryService postPublicQueryService;
+
+    @Mock
+    private ViewNameResolver viewNameResolver;
+
+    @Mock
+    private ViewResolver viewResolver;
+
+    @Mock
+    private PostService postService;
+
+    @Mock
+    private SinglePageConversionService singlePageConversionService;
+
+    @InjectMocks
+    private PreviewRouterFunction previewRouterFunction;
+
+    private WebTestClient webTestClient;
+
+    @BeforeEach
+    public void setUp() {
+        webTestClient = WebTestClient.bindToRouterFunction(previewRouterFunction.previewRouter())
+            .handlerStrategies(HandlerStrategies.builder()
+                .viewResolver(viewResolver)
+                .build())
+            .build();
+
+        when(viewResolver.resolveViewName(any(), any()))
+            .thenReturn(Mono.just(new EmptyView() {
+                @Override
+                public Mono render(Map model, MediaType contentType,
+                    ServerWebExchange exchange) {
+                    return super.render(model, contentType, exchange);
+                }
+            }));
+    }
+
+    @Test
+    @WithMockUser(username = "testuser")
+    public void previewPost() {
+        Post post = new Post();
+        post.setMetadata(new Metadata());
+        post.getMetadata().setName("post1");
+        post.setSpec(new Post.PostSpec());
+        post.getSpec().setOwner("testuser");
+        post.getSpec().setHeadSnapshot("snapshot1");
+        post.getSpec().setBaseSnapshot("snapshot2");
+        post.getSpec().setTemplate("postTemplate");
+        when(client.fetch(eq(Post.class), eq("post1"))).thenReturn(Mono.just(post));
+
+        PostVo postVo = PostVo.from(post);
+        postVo.setContributors(contributorVos());
+        when(postPublicQueryService.convertToVo(eq(post), eq(post.getSpec().getHeadSnapshot())))
+            .thenReturn(Mono.just(postVo));
+
+        when(viewNameResolver.resolveViewNameOrDefault(any(ServerRequest.class),
+            eq("postTemplate"), eq("post"))).thenReturn(Mono.just("postView"));
+
+        webTestClient.get().uri("/preview/posts/post1")
+            .exchange()
+            .expectStatus().isOk();
+
+        verify(viewResolver).resolveViewName(any(), any());
+        verify(postPublicQueryService).convertToVo(eq(post), eq(post.getSpec().getHeadSnapshot()));
+        verify(client).fetch(eq(Post.class), eq("post1"));
+    }
+
+    @Test
+    public void previewPostWhenUnAuthenticated() {
+        webTestClient.get().uri("/preview/posts/post1")
+            .exchange()
+            .expectStatus().isEqualTo(404);
+    }
+
+    @Test
+    @WithMockUser(username = "testuser")
+    public void previewSinglePage() {
+        SinglePage singlePage = new SinglePage();
+        singlePage.setMetadata(new Metadata());
+        singlePage.getMetadata().setName("page1");
+        singlePage.setSpec(new SinglePage.SinglePageSpec());
+        singlePage.getSpec().setOwner("testuser");
+        singlePage.getSpec().setHeadSnapshot("snapshot1");
+        singlePage.getSpec().setTemplate("pageTemplate");
+        when(client.fetch(SinglePage.class, "page1")).thenReturn(Mono.just(singlePage));
+
+        SinglePageVo singlePageVo = SinglePageVo.from(singlePage);
+        singlePageVo.setContributors(contributorVos());
+        when(singlePageConversionService.convertToVo(singlePage, "snapshot1"))
+            .thenReturn(Mono.just(singlePageVo));
+
+        when(viewNameResolver.resolveViewNameOrDefault(any(ServerRequest.class),
+            eq("pageTemplate"), eq("page"))).thenReturn(Mono.just("pageView"));
+
+        webTestClient.get().uri("/preview/singlepages/page1")
+            .exchange()
+            .expectStatus().isOk();
+
+        verify(viewResolver).resolveViewName(any(), any());
+        verify(client).fetch(eq(SinglePage.class), eq("page1"));
+    }
+
+    @Test
+    public void previewSinglePageWhenUnAuthenticated() {
+        webTestClient.get().uri("/preview/singlepages/page1")
+            .exchange()
+            .expectStatus().isEqualTo(404);
+    }
+
+    @Test
+    @WithMockUser(username = AnonymousUserConst.PRINCIPAL)
+    public void previewWithAnonymousUser() {
+        webTestClient.get().uri("/preview/singlepages/page1")
+            .exchange()
+            .expectStatus().isEqualTo(404);
+    }
+
+    List contributorVos() {
+        ContributorVo contributorA = ContributorVo.builder()
+            .name("fake-user")
+            .build();
+        ContributorVo contributorB = ContributorVo.builder()
+            .name("testuser")
+            .build();
+        return List.of(contributorA, contributorB);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/router/ReactiveQueryPostPredicateResolverTest.java b/application/src/test/java/run/halo/app/theme/router/ReactiveQueryPostPredicateResolverTest.java
new file mode 100644
index 0000000..6e675f7
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/ReactiveQueryPostPredicateResolverTest.java
@@ -0,0 +1,87 @@
+package run.halo.app.theme.router;
+
+import static org.assertj.core.api.AssertionsForInterfaceTypes.assertThat;
+
+import java.util.Map;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.context.junit.jupiter.SpringExtension;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.Metadata;
+
+/**
+ * Tests for {@link ReactiveQueryPostPredicateResolver}.
+ *
+ * @author guqing
+ * @since 2.9.0
+ */
+@ExtendWith(SpringExtension.class)
+class ReactiveQueryPostPredicateResolverTest {
+
+    private ReactiveQueryPostPredicateResolver postPredicateResolver;
+
+    @BeforeEach
+    void setUp() {
+        postPredicateResolver = new DefaultQueryPostPredicateResolver();
+    }
+
+    @Test
+    void getPredicateWithoutAuth() {
+        postPredicateResolver.getPredicate()
+            .as(StepVerifier::create)
+            .consumeNextWith(predicate -> {
+                Post post = new Post();
+                post.setMetadata(new Metadata());
+                post.getMetadata().setName("fake-post");
+
+                post.setSpec(new Post.PostSpec());
+                post.getSpec().setDeleted(false);
+                post.getMetadata().setLabels(Map.of(Post.PUBLISHED_LABEL, "true"));
+                post.getSpec().setVisible(Post.VisibleEnum.PRIVATE);
+                assertThat(predicate.test(post)).isFalse();
+
+                post.getSpec().setVisible(Post.VisibleEnum.PUBLIC);
+                assertThat(predicate.test(post)).isTrue();
+
+                post.getMetadata().setLabels(Map.of(Post.PUBLISHED_LABEL, "false"));
+                assertThat(predicate.test(post)).isFalse();
+            })
+            .verifyComplete();
+    }
+
+    @Test
+    @WithMockUser(username = "halo")
+    void getPredicateWithAuth() {
+        postPredicateResolver.getPredicate()
+            .as(StepVerifier::create)
+            .consumeNextWith(predicate -> {
+                Post post = new Post();
+                post.setMetadata(new Metadata());
+                post.getMetadata().setName("fake-post");
+
+                post.setSpec(new Post.PostSpec());
+                post.getSpec().setDeleted(false);
+                post.getSpec().setOwner("halo");
+                post.getMetadata().setLabels(Map.of(Post.PUBLISHED_LABEL, "true"));
+                post.getSpec().setVisible(Post.VisibleEnum.PRIVATE);
+                assertThat(predicate.test(post)).isTrue();
+
+                post.getSpec().setOwner("guqing");
+                assertThat(predicate.test(post)).isFalse();
+
+                post.getSpec().setOwner("halo");
+                post.getSpec().setVisible(Post.VisibleEnum.PUBLIC);
+                assertThat(predicate.test(post)).isTrue();
+
+                post.getSpec().setDeleted(true);
+                assertThat(predicate.test(post)).isFalse();
+
+                post.getSpec().setVisible(Post.VisibleEnum.INTERNAL);
+                assertThat(predicate.test(post)).isFalse();
+            })
+            .verifyComplete();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/router/SinglePageRouteTest.java b/application/src/test/java/run/halo/app/theme/router/SinglePageRouteTest.java
new file mode 100644
index 0000000..db8e55e
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/SinglePageRouteTest.java
@@ -0,0 +1,257 @@
+package run.halo.app.theme.router;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+import java.net.URI;
+import java.time.Instant;
+import java.util.HashMap;
+import java.util.Locale;
+import java.util.Map;
+import java.util.Optional;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.Mockito;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.i18n.SimpleLocaleContext;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpMethod;
+import org.springframework.http.MediaType;
+import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
+import org.springframework.mock.web.reactive.function.server.MockServerRequest;
+import org.springframework.mock.web.server.MockServerWebExchange;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.HandlerFunction;
+import org.springframework.web.reactive.function.server.HandlerStrategies;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.RouterFunctions;
+import org.springframework.web.reactive.function.server.ServerRequest;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import org.springframework.web.reactive.result.view.ViewResolver;
+import org.springframework.web.server.ServerWebExchange;
+import org.springframework.web.server.i18n.LocaleContextResolver;
+import org.springframework.web.util.UriUtils;
+import reactor.core.publisher.Mono;
+import reactor.test.StepVerifier;
+import run.halo.app.core.extension.content.SinglePage;
+import run.halo.app.extension.ExtensionClient;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.controller.Reconciler;
+import run.halo.app.theme.DefaultTemplateEnum;
+import run.halo.app.theme.ViewNameResolver;
+import run.halo.app.theme.finders.SinglePageFinder;
+import run.halo.app.theme.finders.vo.SinglePageVo;
+import run.halo.app.theme.router.SinglePageRoute.NameSlugPair;
+
+/**
+ * Tests for {@link SinglePageRoute}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class SinglePageRouteTest {
+
+    @Mock
+    ViewNameResolver viewNameResolver;
+
+    @Mock
+    SinglePageFinder singlePageFinder;
+
+    @Mock
+    ViewResolver viewResolver;
+
+    @Mock
+    ExtensionClient client;
+
+    @Mock
+    LocaleContextResolver localeContextResolver;
+
+    @Mock
+    TitleVisibilityIdentifyCalculator titleVisibilityIdentifyCalculator;
+
+    @InjectMocks
+    SinglePageRoute singlePageRoute;
+
+    @Test
+    void handlerFunction() {
+        // fix gh-3448
+        when(viewNameResolver.resolveViewNameOrDefault(any(ServerRequest.class), any(), any()))
+            .thenReturn(Mono.just(DefaultTemplateEnum.POST.getValue()));
+
+        String pageName = "fake-page";
+        when(viewResolver.resolveViewName(any(), any()))
+            .thenReturn(Mono.just(new EmptyView() {
+                @Override
+                public Mono render(Map model, MediaType contentType,
+                    ServerWebExchange exchange) {
+                    assertThat(model).containsKey(ModelConst.TEMPLATE_ID);
+                    assertThat(model.get(ModelConst.TEMPLATE_ID))
+                        .isEqualTo(DefaultTemplateEnum.SINGLE_PAGE.getValue());
+                    assertThat(model.get("name"))
+                        .isEqualTo(pageName);
+                    assertThat(model.get("plural")).isEqualTo("singlepages");
+                    assertThat(model.get("singlePage")).isNotNull();
+                    assertThat(model.get("groupVersionKind"))
+                        .isEqualTo(GroupVersionKind.fromExtension(SinglePage.class));
+                    return super.render(model, contentType, exchange);
+                }
+            }));
+
+        SinglePage singlePage = new SinglePage();
+        singlePage.setMetadata(new Metadata());
+        singlePage.getMetadata().setName(pageName);
+        singlePage.setSpec(new SinglePage.SinglePageSpec());
+        when(singlePageFinder.getByName(eq(pageName)))
+            .thenReturn(Mono.just(SinglePageVo.from(singlePage)));
+
+        HandlerFunction handlerFunction =
+            singlePageRoute.handlerFunction(pageName);
+        RouterFunction routerFunction =
+            RouterFunctions.route().GET("/archives/{name}", handlerFunction).build();
+
+        WebTestClient webTestClient = WebTestClient.bindToRouterFunction(routerFunction)
+            .handlerStrategies(HandlerStrategies.builder()
+                .viewResolver(viewResolver)
+                .build())
+            .build();
+
+        when(localeContextResolver.resolveLocaleContext(any()))
+            .thenReturn(new SimpleLocaleContext(Locale.getDefault()));
+        webTestClient.get()
+            .uri("/archives/fake-name")
+            .exchange()
+            .expectStatus().isOk();
+    }
+
+    @Test
+    void shouldNotThrowErrorIfSlugNameContainsSpecialChars() {
+        var specialChars = "/with-special-chars-{}-[]-{{}}-{[]}-[{}]";
+        var specialCharsUri =
+            URI.create(UriUtils.encodePath(specialChars, UTF_8));
+        var mockHttpRequest = MockServerHttpRequest.get(specialCharsUri.toString())
+            .accept(MediaType.TEXT_HTML)
+            .build();
+        var mockExchange = MockServerWebExchange.from(mockHttpRequest);
+        var request = MockServerRequest.builder()
+            .exchange(mockExchange)
+            .uri(specialCharsUri)
+            .method(HttpMethod.GET)
+            .header(HttpHeaders.ACCEPT, MediaType.TEXT_HTML_VALUE)
+            .build();
+        var nameSlugPair = new NameSlugPair("fake-single-page", specialChars);
+        singlePageRoute.setQuickRouteMap(Map.of(nameSlugPair, r -> ServerResponse.ok().build()));
+        StepVerifier.create(singlePageRoute.route(request))
+            .expectNextCount(1)
+            .verifyComplete();
+    }
+
+    @Nested
+    class SinglePageReconcilerTest {
+
+        @Test
+        void shouldRemoveRouteIfSinglePageUnpublished() {
+            var name = "fake-single-page";
+            var page = newSinglePage(name, false);
+            when(client.fetch(SinglePage.class, name)).thenReturn(
+                Optional.of(page));
+
+            var routeMap = Mockito.>>mock(
+                invocation -> new HashMap>());
+            singlePageRoute.setQuickRouteMap(routeMap);
+            var result = singlePageRoute.reconcile(new Reconciler.Request(name));
+            assertNotNull(result);
+            assertFalse(result.reEnqueue());
+            verify(client).fetch(SinglePage.class, name);
+            verify(routeMap).remove(NameSlugPair.from(page));
+        }
+
+        @Test
+        void shouldAddRouteIfSinglePagePublished() {
+            var name = "fake-single-page";
+            var page = newSinglePage(name, true);
+            when(client.fetch(SinglePage.class, name)).thenReturn(
+                Optional.of(page));
+
+            var routeMap = Mockito.>>mock(
+                invocation -> new HashMap>());
+            singlePageRoute.setQuickRouteMap(routeMap);
+            var result = singlePageRoute.reconcile(new Reconciler.Request(name));
+            assertNotNull(result);
+            assertFalse(result.reEnqueue());
+            verify(client).fetch(SinglePage.class, name);
+            verify(routeMap).put(eq(NameSlugPair.from(page)), any());
+        }
+
+        @Test
+        void shouldRemoveRouteIfSinglePageDeleted() {
+            var name = "fake-single-page";
+            var page = newDeletedSinglePage(name);
+            when(client.fetch(SinglePage.class, name)).thenReturn(
+                Optional.of(page));
+
+            var routeMap = Mockito.>>mock(
+                invocation -> new HashMap>());
+            singlePageRoute.setQuickRouteMap(routeMap);
+            var result = singlePageRoute.reconcile(new Reconciler.Request(name));
+            assertNotNull(result);
+            assertFalse(result.reEnqueue());
+            verify(client).fetch(SinglePage.class, name);
+            verify(routeMap).remove(NameSlugPair.from(page));
+        }
+
+        @Test
+        void shouldRemoveRouteIfSinglePageRecycled() {
+            var name = "fake-single-page";
+            var page = newRecycledSinglePage(name);
+            when(client.fetch(SinglePage.class, name)).thenReturn(
+                Optional.of(page));
+
+            var routeMap = Mockito.>>mock(
+                invocation -> new HashMap>());
+            singlePageRoute.setQuickRouteMap(routeMap);
+            var result = singlePageRoute.reconcile(new Reconciler.Request(name));
+            assertNotNull(result);
+            assertFalse(result.reEnqueue());
+            verify(client).fetch(SinglePage.class, name);
+            verify(routeMap).remove(NameSlugPair.from(page));
+        }
+
+
+        SinglePage newSinglePage(String name, boolean published) {
+            var metadata = new Metadata();
+            metadata.setName(name);
+            var page = new SinglePage();
+            page.setMetadata(metadata);
+            var spec = new SinglePage.SinglePageSpec();
+            spec.setSlug("/fake-slug");
+            page.setSpec(spec);
+            var status = new SinglePage.SinglePageStatus();
+            page.setStatus(status);
+            SinglePage.changePublishedState(page, published);
+            return page;
+        }
+
+        SinglePage newDeletedSinglePage(String name) {
+            var page = newSinglePage(name, true);
+            page.getMetadata().setDeletionTimestamp(Instant.now());
+            return page;
+        }
+
+        SinglePage newRecycledSinglePage(String name) {
+            var page = newSinglePage(name, true);
+            page.getSpec().setDeleted(true);
+            return page;
+        }
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/router/factories/ArchiveRouteFactoryTest.java b/application/src/test/java/run/halo/app/theme/router/factories/ArchiveRouteFactoryTest.java
new file mode 100644
index 0000000..81d99e1
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/factories/ArchiveRouteFactoryTest.java
@@ -0,0 +1,66 @@
+package run.halo.app.theme.router.factories;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.http.HttpStatus;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import run.halo.app.theme.finders.PostFinder;
+
+/**
+ * Tests for {@link ArchiveRouteFactory}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class ArchiveRouteFactoryTest extends RouteFactoryTestSuite {
+    @Mock
+    private PostFinder postFinder;
+
+    @InjectMocks
+    private ArchiveRouteFactory archiveRouteFactory;
+
+    @Test
+    void create() {
+        String prefix = "/new-archives";
+        RouterFunction routerFunction = archiveRouteFactory.create(prefix);
+        WebTestClient client = getWebTestClient(routerFunction);
+
+        client.get()
+            .uri(prefix)
+            .exchange()
+            .expectStatus().isOk();
+
+        client.get()
+            .uri(prefix + "/page/1")
+            .exchange()
+            .expectStatus().isOk();
+
+        client.get()
+            .uri(prefix + "/2022/09")
+            .exchange()
+            .expectStatus().isOk();
+
+        client.get()
+            .uri(prefix + "/2022/08/page/1")
+            .exchange()
+            .expectStatus().isOk();
+
+        client.get()
+            .uri(prefix + "/2022/8/page/1")
+            .exchange()
+            .expectStatus()
+            .isEqualTo(HttpStatus.NOT_FOUND);
+
+        client.get()
+            .uri("/nothing")
+            .exchange()
+            .expectStatus()
+            .isEqualTo(HttpStatus.NOT_FOUND);
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/router/factories/AuthorPostsRouteFactoryTest.java b/application/src/test/java/run/halo/app/theme/router/factories/AuthorPostsRouteFactoryTest.java
new file mode 100644
index 0000000..c308ef8
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/factories/AuthorPostsRouteFactoryTest.java
@@ -0,0 +1,43 @@
+package run.halo.app.theme.router.factories;
+
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.User;
+import run.halo.app.extension.ReactiveExtensionClient;
+
+/**
+ * Tests for {@link AuthorPostsRouteFactory}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class AuthorPostsRouteFactoryTest extends RouteFactoryTestSuite {
+    @Mock
+    ReactiveExtensionClient client;
+    @InjectMocks
+    AuthorPostsRouteFactory authorPostsRouteFactory;
+
+    @Test
+    void create() {
+        RouterFunction routerFunction = authorPostsRouteFactory.create(null);
+        WebTestClient webClient = getWebTestClient(routerFunction);
+
+        when(client.fetch(eq(User.class), eq("fake-user")))
+            .thenReturn(Mono.just(new User()));
+        webClient.get()
+            .uri("/authors/fake-user")
+            .exchange()
+            .expectStatus().isOk();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/router/factories/CategoriesRouteFactoryTest.java b/application/src/test/java/run/halo/app/theme/router/factories/CategoriesRouteFactoryTest.java
new file mode 100644
index 0000000..8b2066d
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/factories/CategoriesRouteFactoryTest.java
@@ -0,0 +1,41 @@
+package run.halo.app.theme.router.factories;
+
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import reactor.core.publisher.Flux;
+import run.halo.app.theme.finders.CategoryFinder;
+
+/**
+ * Tests for {@link CategoriesRouteFactory}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+class CategoriesRouteFactoryTest extends RouteFactoryTestSuite {
+
+    @Mock
+    private CategoryFinder categoryFinder;
+
+    @InjectMocks
+    private CategoriesRouteFactory categoriesRouteFactory;
+
+    @Test
+    void create() {
+        String prefix = "/topics";
+        RouterFunction routerFunction = categoriesRouteFactory.create(prefix);
+        WebTestClient webClient = getWebTestClient(routerFunction);
+
+        when(categoryFinder.listAsTree())
+            .thenReturn(Flux.empty());
+        webClient.get()
+            .uri(prefix)
+            .exchange()
+            .expectStatus().isOk();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/router/factories/IndexRouteFactoryTest.java b/application/src/test/java/run/halo/app/theme/router/factories/IndexRouteFactoryTest.java
new file mode 100644
index 0000000..a7983d0
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/factories/IndexRouteFactoryTest.java
@@ -0,0 +1,42 @@
+package run.halo.app.theme.router.factories;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import run.halo.app.theme.finders.PostFinder;
+
+/**
+ * Tests for {@link IndexRouteFactory}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class IndexRouteFactoryTest extends RouteFactoryTestSuite {
+    @Mock
+    private PostFinder postFinder;
+
+    @InjectMocks
+    private IndexRouteFactory indexRouteFactory;
+
+    @Test
+    void create() {
+        RouterFunction routerFunction = indexRouteFactory.create("/");
+        WebTestClient webTestClient = getWebTestClient(routerFunction);
+
+        webTestClient.get()
+            .uri("/")
+            .exchange()
+            .expectStatus().isOk();
+
+        webTestClient.get()
+            .uri("/page/1")
+            .exchange()
+            .expectStatus().isOk();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/router/factories/PostRouteFactoryTest.java b/application/src/test/java/run/halo/app/theme/router/factories/PostRouteFactoryTest.java
new file mode 100644
index 0000000..21ecdf8
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/factories/PostRouteFactoryTest.java
@@ -0,0 +1,113 @@
+package run.halo.app.theme.router.factories;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import java.util.Locale;
+import java.util.Map;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.context.i18n.SimpleLocaleContext;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerRequest;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import org.springframework.web.server.ServerWebExchange;
+import org.springframework.web.server.i18n.LocaleContextResolver;
+import reactor.core.publisher.Mono;
+import run.halo.app.content.TestPost;
+import run.halo.app.core.extension.content.Post;
+import run.halo.app.extension.GroupVersionKind;
+import run.halo.app.extension.MetadataUtil;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.theme.DefaultTemplateEnum;
+import run.halo.app.theme.ViewNameResolver;
+import run.halo.app.theme.finders.PostFinder;
+import run.halo.app.theme.finders.vo.PostVo;
+import run.halo.app.theme.router.DefaultQueryPostPredicateResolver;
+import run.halo.app.theme.router.EmptyView;
+import run.halo.app.theme.router.ModelConst;
+import run.halo.app.theme.router.ReactiveQueryPostPredicateResolver;
+import run.halo.app.theme.router.TitleVisibilityIdentifyCalculator;
+
+/**
+ * Tests for {@link PostRouteFactory}.
+ *
+ * @author guqing
+ * @since 2.3.0
+ */
+@ExtendWith(MockitoExtension.class)
+class PostRouteFactoryTest extends RouteFactoryTestSuite {
+
+    @Mock
+    private PostFinder postFinder;
+
+    @Mock
+    private ViewNameResolver viewNameResolver;
+
+    @Mock
+    private ReactiveExtensionClient client;
+
+    @Mock
+    private ReactiveQueryPostPredicateResolver predicateResolver;
+
+    @Mock
+    private LocaleContextResolver localeContextResolver;
+
+    @Mock
+    private TitleVisibilityIdentifyCalculator titleVisibilityIdentifyCalculator;
+
+    @InjectMocks
+    private PostRouteFactory postRouteFactory;
+
+    @Test
+    void create() {
+        Post post = TestPost.postV1();
+        Map labels = MetadataUtil.nullSafeLabels(post);
+        labels.put(Post.PUBLISHED_LABEL, "true");
+        post.getMetadata().setName("fake-name");
+        post.getSpec().setDeleted(false);
+        post.getSpec().setVisible(Post.VisibleEnum.PUBLIC);
+        when(postFinder.getByName(eq("fake-name"))).thenReturn(Mono.just(PostVo.from(post)));
+
+        when(client.fetch(eq(Post.class), eq("fake-name"))).thenReturn(Mono.just(post));
+
+        when(viewNameResolver.resolveViewNameOrDefault(any(ServerRequest.class), any(), any()))
+            .thenReturn(Mono.just(DefaultTemplateEnum.POST.getValue()));
+        when(predicateResolver.getPredicate())
+            .thenReturn(new DefaultQueryPostPredicateResolver().getPredicate());
+
+        RouterFunction routerFunction = postRouteFactory.create("/archives/{name}");
+        WebTestClient webTestClient = getWebTestClient(routerFunction);
+
+        when(localeContextResolver.resolveLocaleContext(any()))
+            .thenReturn(new SimpleLocaleContext(Locale.getDefault()));
+        when(viewResolver.resolveViewName(any(), any()))
+            .thenReturn(Mono.just(new EmptyView() {
+                @Override
+                public Mono render(Map model, MediaType contentType,
+                    ServerWebExchange exchange) {
+                    assertThat(model).containsKey(ModelConst.TEMPLATE_ID);
+                    assertThat(model.get(ModelConst.TEMPLATE_ID))
+                        .isEqualTo(DefaultTemplateEnum.POST.getValue());
+                    assertThat(model.get("name"))
+                        .isEqualTo(post.getMetadata().getName());
+                    assertThat(model.get("plural")).isEqualTo("posts");
+                    assertThat(model.get("post")).isNotNull();
+                    assertThat(model.get("groupVersionKind"))
+                        .isEqualTo(GroupVersionKind.fromExtension(Post.class));
+                    return super.render(model, contentType, exchange);
+                }
+            }));
+        webTestClient.get()
+            .uri("/archives/fake-name")
+            .exchange()
+            .expectStatus().isOk();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/router/factories/RouteFactoryTest.java b/application/src/test/java/run/halo/app/theme/router/factories/RouteFactoryTest.java
new file mode 100644
index 0000000..e624ad3
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/factories/RouteFactoryTest.java
@@ -0,0 +1,60 @@
+package run.halo.app.theme.router.factories;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.when;
+
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import reactor.core.publisher.Mono;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.theme.router.ModelConst;
+
+/**
+ * Tests for {@link RouteFactory}.
+ *
+ * @author guqing
+ * @since 2.3.0
+ */
+@ExtendWith(MockitoExtension.class)
+class RouteFactoryTest extends RouteFactoryTestSuite {
+
+    @Test
+    void configuredPageSize() {
+        SystemSetting.Post post = new SystemSetting.Post();
+        post.setPostPageSize(1);
+        post.setArchivePageSize(2);
+        post.setCategoryPageSize(3);
+        post.setTagPageSize(null);
+        when(environmentFetcher.fetchPost()).thenReturn(Mono.just(post));
+
+        TestRouteFactory routeFactory = new TestRouteFactory();
+        assertThat(
+            routeFactory.configuredPageSize(environmentFetcher, SystemSetting.Post::getTagPageSize)
+                .block()).isEqualTo(ModelConst.DEFAULT_PAGE_SIZE);
+
+        assertThat(
+            routeFactory.configuredPageSize(environmentFetcher, SystemSetting.Post::getPostPageSize)
+                .block()).isEqualTo(post.getPostPageSize());
+
+        assertThat(
+            routeFactory.configuredPageSize(environmentFetcher,
+                SystemSetting.Post::getCategoryPageSize).block())
+            .isEqualTo(post.getCategoryPageSize());
+
+        assertThat(
+            routeFactory.configuredPageSize(environmentFetcher,
+                SystemSetting.Post::getArchivePageSize).block())
+            .isEqualTo(post.getArchivePageSize());
+    }
+
+    static class TestRouteFactory implements RouteFactory {
+
+        @Override
+        public RouterFunction create(String pattern) {
+            return null;
+        }
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/java/run/halo/app/theme/router/factories/RouteFactoryTestSuite.java b/application/src/test/java/run/halo/app/theme/router/factories/RouteFactoryTestSuite.java
new file mode 100644
index 0000000..a08dabf
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/factories/RouteFactoryTestSuite.java
@@ -0,0 +1,66 @@
+package run.halo.app.theme.router.factories;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+
+import java.net.URISyntaxException;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import org.springframework.web.reactive.function.server.HandlerStrategies;
+import org.springframework.web.reactive.function.server.RouterFunction;
+import org.springframework.web.reactive.function.server.ServerResponse;
+import org.springframework.web.reactive.result.view.ViewResolver;
+import reactor.core.publisher.Mono;
+import run.halo.app.infra.SystemConfigurableEnvironmentFetcher;
+import run.halo.app.infra.SystemSetting;
+import run.halo.app.theme.router.EmptyView;
+
+/**
+ * Abstract test for {@link RouteFactory}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+abstract class RouteFactoryTestSuite {
+    @Mock
+    protected SystemConfigurableEnvironmentFetcher environmentFetcher;
+    @Mock
+    protected ViewResolver viewResolver;
+
+    @BeforeEach
+    final void setUpParent() throws URISyntaxException {
+        lenient().when(environmentFetcher.fetchPost())
+            .thenReturn(Mono.just(new SystemSetting.Post()));
+        lenient().when(environmentFetcher.fetch(eq(SystemSetting.ThemeRouteRules.GROUP),
+            eq(SystemSetting.ThemeRouteRules.class))).thenReturn(Mono.just(getThemeRouteRules()));
+        lenient().when(viewResolver.resolveViewName(any(), any()))
+            .thenReturn(Mono.just(new EmptyView()));
+        setUp();
+    }
+
+    public void setUp() {
+
+    }
+
+    public SystemSetting.ThemeRouteRules getThemeRouteRules() {
+        SystemSetting.ThemeRouteRules themeRouteRules = new SystemSetting.ThemeRouteRules();
+        themeRouteRules.setArchives("archives");
+        themeRouteRules.setPost("/archives/{slug}");
+        themeRouteRules.setTags("tags");
+        themeRouteRules.setCategories("categories");
+        return themeRouteRules;
+    }
+
+    public WebTestClient getWebTestClient(RouterFunction routeFunction) {
+        return WebTestClient.bindToRouterFunction(routeFunction)
+            .handlerStrategies(HandlerStrategies.builder()
+                .viewResolver(viewResolver)
+                .build())
+            .build();
+    }
+}
diff --git a/application/src/test/java/run/halo/app/theme/router/factories/TagPostRouteFactoryTest.java b/application/src/test/java/run/halo/app/theme/router/factories/TagPostRouteFactoryTest.java
new file mode 100644
index 0000000..c0b1cd4
--- /dev/null
+++ b/application/src/test/java/run/halo/app/theme/router/factories/TagPostRouteFactoryTest.java
@@ -0,0 +1,72 @@
+package run.halo.app.theme.router.factories;
+
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+
+import java.util.List;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.test.web.reactive.server.WebTestClient;
+import reactor.core.publisher.Mono;
+import run.halo.app.core.extension.content.Tag;
+import run.halo.app.extension.ListResult;
+import run.halo.app.extension.Metadata;
+import run.halo.app.extension.PageRequest;
+import run.halo.app.extension.ReactiveExtensionClient;
+import run.halo.app.theme.finders.PostFinder;
+import run.halo.app.theme.finders.TagFinder;
+import run.halo.app.theme.finders.vo.TagVo;
+
+/**
+ * Tests for @link TagPostRouteFactory}.
+ *
+ * @author guqing
+ * @since 2.0.0
+ */
+@ExtendWith(MockitoExtension.class)
+class TagPostRouteFactoryTest extends RouteFactoryTestSuite {
+    @Mock
+    private ReactiveExtensionClient client;
+    @Mock
+    private TagFinder tagFinder;
+    @Mock
+    private PostFinder postFinder;
+
+    @InjectMocks
+    TagPostRouteFactory tagPostRouteFactory;
+
+    @Test
+    void create() {
+        when(client.listBy(eq(Tag.class), any(), any(PageRequest.class)))
+            .thenReturn(Mono.just(ListResult.emptyResult()));
+        WebTestClient webTestClient = getWebTestClient(tagPostRouteFactory.create("/new-tags"));
+
+        webTestClient.get()
+            .uri("/new-tags/tag-slug-1")
+            .exchange()
+            .expectStatus().isNotFound();
+
+        Tag tag = new Tag();
+        tag.setMetadata(new Metadata());
+        tag.getMetadata().setName("fake-tag-name");
+        tag.setSpec(new Tag.TagSpec());
+        tag.getSpec().setSlug("tag-slug-2");
+        when(client.listBy(eq(Tag.class), any(), any(PageRequest.class)))
+            .thenReturn(Mono.just(new ListResult<>(List.of(tag))));
+        when(tagFinder.getByName(eq(tag.getMetadata().getName())))
+            .thenReturn(Mono.just(TagVo.from(tag)));
+        webTestClient.get()
+            .uri("/new-tags/tag-slug-2")
+            .exchange()
+            .expectStatus().isOk();
+
+        webTestClient.get()
+            .uri("/new-tags/tag-slug-2/page/1")
+            .exchange()
+            .expectStatus().isOk();
+    }
+}
\ No newline at end of file
diff --git a/application/src/test/resources/apiToken.salt b/application/src/test/resources/apiToken.salt
new file mode 100644
index 0000000..206ee96
--- /dev/null
+++ b/application/src/test/resources/apiToken.salt
@@ -0,0 +1 @@
+bySwF9ZxJ2JpQYs830+eA3Fw6O7F/ULDvyYGEPaZKwY=
\ No newline at end of file
diff --git a/application/src/test/resources/app.key b/application/src/test/resources/app.key
new file mode 100644
index 0000000..5bbada6
--- /dev/null
+++ b/application/src/test/resources/app.key
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
\ No newline at end of file
diff --git a/application/src/test/resources/app.pub b/application/src/test/resources/app.pub
new file mode 100644
index 0000000..d1af67b
--- /dev/null
+++ b/application/src/test/resources/app.pub
@@ -0,0 +1,9 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo5w2NStZazqyhE3ynw5
+VRlWzwosvkw5k2l4OElo3R1KV36m1zJEl/49nSfxAqm/xbbL1cYksEYnhtzFgylp
+TUc9AtECq7KA2G3Ly3+vLnOy+XihWYbtAJFz+E+QSG3TFx/FdPuXvukfp3h2oRYT
+MmomKB1azzK1tiZ/YliF7jUw6YPVRYXozeIxtcEKiLtabinhmD0L7XzTuRH+XEHR
+BQrxX7g0LzYS4CNX+/fKmOhFRX0aNktyywrrd8Hw80WYlDeCs/KmM+Nmb/exktYF
+v5X3BLJgQKaL/cYiGlM1BAjd+V22WDCuWOIH4QLHmfrZY/mGqxIj4wLS9ST1HoQp
+kQIDAQAB
+-----END PUBLIC KEY-----
\ No newline at end of file
diff --git a/application/src/test/resources/application.yaml b/application/src/test/resources/application.yaml
new file mode 100644
index 0000000..3598500
--- /dev/null
+++ b/application/src/test/resources/application.yaml
@@ -0,0 +1,40 @@
+server:
+  port: 8090
+spring:
+  output:
+    ansi:
+      enabled: detect
+  r2dbc:
+    name: halo-test
+    generate-unique-name: true
+  sql:
+    init:
+      mode: always
+      platform: h2
+  messages:
+    basename: config.i18n.messages
+
+halo:
+  work-dir: ${user.home}/halo-next-test
+  external-url: "http://${server.address:localhost}:${server.port}"
+  security:
+    initializer:
+      disabled: true
+    oauth2:
+      jwt:
+        public-key-location: classpath:app.pub
+        private-key-location: classpath:app.key
+  extension:
+    controller:
+      disabled: true
+  search-engine:
+    lucene:
+      enabled: false
+
+springdoc:
+  api-docs:
+    enabled: false
+logging:
+  level:
+    run.halo.app: debug
+    org.springframework.r2dbc: DEBUG
diff --git a/application/src/test/resources/backups/backup-for-restoration/extensions.data b/application/src/test/resources/backups/backup-for-restoration/extensions.data
new file mode 100644
index 0000000..cf80e9e
--- /dev/null
+++ b/application/src/test/resources/backups/backup-for-restoration/extensions.data
@@ -0,0 +1 @@
+[{"name":"fake-extension-store","data":"ZmFrZS1kYXRh","version":1024}]
\ No newline at end of file
diff --git a/application/src/test/resources/backups/backup-for-restoration/workdir/fake-file b/application/src/test/resources/backups/backup-for-restoration/workdir/fake-file
new file mode 100644
index 0000000..0176184
--- /dev/null
+++ b/application/src/test/resources/backups/backup-for-restoration/workdir/fake-file
@@ -0,0 +1 @@
+halo
\ No newline at end of file
diff --git a/application/src/test/resources/categories/independent-post-count.json b/application/src/test/resources/categories/independent-post-count.json
new file mode 100644
index 0000000..f4fce09
--- /dev/null
+++ b/application/src/test/resources/categories/independent-post-count.json
@@ -0,0 +1,422 @@
+[
+    {
+        "spec": {
+            "displayName": "全部",
+            "children": ["FIT2CLOUD", "AnotherRootChild"]
+        },
+        "status": {
+            "visiblePostCount": 35
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "全部",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "FIT2CLOUD",
+            "children": ["DataEase", "IndependentNode"]
+        },
+        "status": {
+            "visiblePostCount": 15
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "FIT2CLOUD",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "DataEase",
+            "children": ["SubNode1", "SubNode2"]
+        },
+        "status": {
+            "visiblePostCount": 10
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "DataEase",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "SubNode1",
+            "children": ["Leaf1", "Leaf2"]
+        },
+        "status": {
+            "visiblePostCount": 4
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "SubNode1",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "Leaf1",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 2
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "Leaf1",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "Leaf2",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 2
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "Leaf2",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "SubNode2",
+            "preventParentPostCascadeQuery": true,
+            "children": ["IndependentChild1", "IndependentChild2"]
+        },
+        "status": {
+            "visiblePostCount": 6
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "SubNode2",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "IndependentChild1",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 3
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "IndependentChild1",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "IndependentChild2",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 3
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "IndependentChild2",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "IndependentNode",
+            "preventParentPostCascadeQuery": true,
+            "children": ["IndependentChild3", "IndependentChild4"]
+        },
+        "status": {
+            "visiblePostCount": 5
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "IndependentNode",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "IndependentChild3",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 2
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "IndependentChild3",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "IndependentChild4",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 3
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "IndependentChild4",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "AnotherRootChild",
+            "children": ["Child1", "Child2"]
+        },
+        "status": {
+            "visiblePostCount": 20
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "AnotherRootChild",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "Child1",
+            "children": ["SubChild1", "SubChild2"]
+        },
+        "status": {
+            "visiblePostCount": 8
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "Child1",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "SubChild1",
+            "children": ["DeepNode1", "DeepNode2"]
+        },
+        "status": {
+            "visiblePostCount": 3
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "SubChild1",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "DeepNode1",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 1
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "DeepNode1",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "DeepNode2",
+            "children": ["DeeperNode"]
+        },
+        "status": {
+            "visiblePostCount": 1
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "DeepNode2",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "DeeperNode",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 1
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "DeeperNode",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "SubChild2",
+            "children": ["DeepNode3"]
+        },
+        "status": {
+            "visiblePostCount": 5
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "SubChild2",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "DeepNode3",
+            "preventParentPostCascadeQuery": true,
+            "children": ["DeepNode4", "DeepNode5"]
+        },
+        "status": {
+            "visiblePostCount": 2
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "DeepNode3",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "DeepNode4",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 1
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "DeepNode4",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "DeepNode5",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 1
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "DeepNode5",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "Child2",
+            "children": ["IndependentSubNode"]
+        },
+        "status": {
+            "visiblePostCount": 12
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "Child2",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "IndependentSubNode",
+            "preventParentPostCascadeQuery": true,
+            "children": ["SubNode3", "SubNode4"]
+        },
+        "status": {
+            "visiblePostCount": 12
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "IndependentSubNode",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "SubNode3",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 6
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "SubNode3",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    },
+    {
+        "spec": {
+            "displayName": "SubNode4",
+            "children": []
+        },
+        "status": {
+            "visiblePostCount": 6
+        },
+        "apiVersion": "content.halo.run/v1alpha1",
+        "kind": "Category",
+        "metadata": {
+            "name": "SubNode4",
+            "version": 0,
+            "creationTimestamp": "2024-06-14T06:17:47.589181Z"
+        }
+    }
+]
diff --git a/application/src/test/resources/config/i18n/messages.properties b/application/src/test/resources/config/i18n/messages.properties
new file mode 100644
index 0000000..c2ef729
--- /dev/null
+++ b/application/src/test/resources/config/i18n/messages.properties
@@ -0,0 +1,9 @@
+problemDetail.title.run.halo.app.infra.exception.handlers.I18nExceptionTest$ErrorResponseException=Error Response
+problemDetail.internalServerError=Something went wrong, please try again later.
+
+problemDetail.run.halo.app.infra.exception.handlers.I18nExceptionTest$ErrorResponseException=Message argument is {0}.
+error.somethingWentWrong=Something went wrong, argument is {0}.
+problemDetail.title.internalServerError=Internal Server Error
+
+problemDetail.title.conflict=Conflict
+problemDetail.conflict=Conflict detected.
diff --git a/application/src/test/resources/config/i18n/messages_zh.properties b/application/src/test/resources/config/i18n/messages_zh.properties
new file mode 100644
index 0000000..c79351d
--- /dev/null
+++ b/application/src/test/resources/config/i18n/messages_zh.properties
@@ -0,0 +1,3 @@
+problemDetail.title.run.halo.app.infra.exception.handlers.I18nExceptionTest$ErrorResponseException=发生错误
+problemDetail.run.halo.app.infra.exception.handlers.I18nExceptionTest$ErrorResponseException=参数：{0}。
+error.somethingWentWrong=发生了一些错误，参数：{0}。
diff --git a/application/src/test/resources/console/assets/fake.txt b/application/src/test/resources/console/assets/fake.txt
new file mode 100644
index 0000000..2ae6365
--- /dev/null
+++ b/application/src/test/resources/console/assets/fake.txt
@@ -0,0 +1 @@
+fake.
diff --git a/application/src/test/resources/console/index.html b/application/src/test/resources/console/index.html
new file mode 100644
index 0000000..f4d6c3d
--- /dev/null
+++ b/application/src/test/resources/console/index.html
@@ -0,0 +1 @@
+console index
diff --git a/application/src/test/resources/folder-to-zip/examplefile b/application/src/test/resources/folder-to-zip/examplefile
new file mode 100644
index 0000000..bd82b20
--- /dev/null
+++ b/application/src/test/resources/folder-to-zip/examplefile
@@ -0,0 +1 @@
+Here is an example file.
diff --git a/application/src/test/resources/plugin/plugin-0.0.1/extensions/reverseProxy.yaml b/application/src/test/resources/plugin/plugin-0.0.1/extensions/reverseProxy.yaml
new file mode 100644
index 0000000..1114137
--- /dev/null
+++ b/application/src/test/resources/plugin/plugin-0.0.1/extensions/reverseProxy.yaml
@@ -0,0 +1,13 @@
+apiVersion: plugin.halo.run/v1alpha1
+kind: ReverseProxy
+metadata:
+  name: reverse-proxy-template
+  labels:
+    plugin.halo.run/pluginName: io.github.guqing.apples
+rules:
+  - path: /static/**
+    file:
+      directory: static
+  - path: /admin/**
+    file:
+      directory: admin
diff --git a/application/src/test/resources/plugin/plugin-0.0.1/extensions/roles.yaml b/application/src/test/resources/plugin/plugin-0.0.1/extensions/roles.yaml
new file mode 100644
index 0000000..bee3de4
--- /dev/null
+++ b/application/src/test/resources/plugin/plugin-0.0.1/extensions/roles.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1alpha1
+kind: Role
+metadata:
+  name: role-template-view-apples
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    halo.run/module: "Apples Management"
+    halo.run/alias-name: "Apples View"
+rules:
+  - apiGroups: [ "apples.guqing.github.com" ]
+    resources: [ "apples" ]
+    verbs: [ "get", "list" ]
diff --git a/application/src/test/resources/plugin/plugin-0.0.1/extensions/setting.yaml b/application/src/test/resources/plugin/plugin-0.0.1/extensions/setting.yaml
new file mode 100644
index 0000000..d2bf76b
--- /dev/null
+++ b/application/src/test/resources/plugin/plugin-0.0.1/extensions/setting.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1alpha1
+kind: Setting
+metadata:
+  name: fake-setting
+spec:
+  forms: [ ]
\ No newline at end of file
diff --git a/application/src/test/resources/plugin/plugin-0.0.1/extensions/test.yml b/application/src/test/resources/plugin/plugin-0.0.1/extensions/test.yml
new file mode 100644
index 0000000..1114137
--- /dev/null
+++ b/application/src/test/resources/plugin/plugin-0.0.1/extensions/test.yml
@@ -0,0 +1,13 @@
+apiVersion: plugin.halo.run/v1alpha1
+kind: ReverseProxy
+metadata:
+  name: reverse-proxy-template
+  labels:
+    plugin.halo.run/pluginName: io.github.guqing.apples
+rules:
+  - path: /static/**
+    file:
+      directory: static
+  - path: /admin/**
+    file:
+      directory: admin
diff --git a/application/src/test/resources/plugin/plugin-0.0.1/plugin.yaml b/application/src/test/resources/plugin/plugin-0.0.1/plugin.yaml
new file mode 100644
index 0000000..6bed586
--- /dev/null
+++ b/application/src/test/resources/plugin/plugin-0.0.1/plugin.yaml
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Plugin
+metadata:
+  name: plugin-1
+spec:
+  # 'version' is a valid semantic version string (see semver.org).
+  version: 0.0.1
+  requires: ">=2.0.0"
+  author:
+    name: guqing
+  logo: https://guqing.xyz/avatar
+  pluginDependencies:
+    "banana": "0.0.1"
+  homepage: https://github.com/guqing/halo-plugin-1
+  displayName: "a name to show"
+  description: "Tell me more about this plugin."
+  license:
+    - name: MIT
\ No newline at end of file
diff --git a/application/src/test/resources/plugin/plugin-0.0.2/plugin.yaml b/application/src/test/resources/plugin/plugin-0.0.2/plugin.yaml
new file mode 100644
index 0000000..de1ac60
--- /dev/null
+++ b/application/src/test/resources/plugin/plugin-0.0.2/plugin.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Plugin
+metadata:
+  name: fake-plugin
+spec:
+  # 'version' is a valid semantic version string (see semver.org).
+  version: 0.0.2
+  requires: ">=2.0.0"
+  author:
+    name: johnniang
+  logo: https://halo.run/avatar
+  homepage: https://github.com/halo-sigs/halo-plugin-1
+  displayName: "Fake Display Name"
+  description: "Fake description"
+  license:
+    - name: GPLv3
diff --git a/application/src/test/resources/plugin/plugin-for-finder/META-INF/plugin-components.idx b/application/src/test/resources/plugin/plugin-for-finder/META-INF/plugin-components.idx
new file mode 100644
index 0000000..a40f507
--- /dev/null
+++ b/application/src/test/resources/plugin/plugin-for-finder/META-INF/plugin-components.idx
@@ -0,0 +1,2 @@
+# Generated by Halo
+run.halo.fake.FakePlugin
diff --git a/application/src/test/resources/plugin/plugin-for-reverseproxy/static/test.txt b/application/src/test/resources/plugin/plugin-for-reverseproxy/static/test.txt
new file mode 100644
index 0000000..24756a8
--- /dev/null
+++ b/application/src/test/resources/plugin/plugin-for-reverseproxy/static/test.txt
@@ -0,0 +1 @@
+Fake content.
\ No newline at end of file
diff --git a/application/src/test/resources/plugin/plugin.yaml b/application/src/test/resources/plugin/plugin.yaml
new file mode 100644
index 0000000..6bed586
--- /dev/null
+++ b/application/src/test/resources/plugin/plugin.yaml
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: Plugin
+metadata:
+  name: plugin-1
+spec:
+  # 'version' is a valid semantic version string (see semver.org).
+  version: 0.0.1
+  requires: ">=2.0.0"
+  author:
+    name: guqing
+  logo: https://guqing.xyz/avatar
+  pluginDependencies:
+    "banana": "0.0.1"
+  homepage: https://github.com/guqing/halo-plugin-1
+  displayName: "a name to show"
+  description: "Tell me more about this plugin."
+  license:
+    - name: MIT
\ No newline at end of file
diff --git a/application/src/test/resources/presets/plugins/fake-plugin.jar b/application/src/test/resources/presets/plugins/fake-plugin.jar
new file mode 100644
index 0000000000000000000000000000000000000000..0acfb0723d44fd8f6599ce9d7d1293a9b86dd566
GIT binary patch
literal 698
zcmWIWW@Zs#;Nak3SkMp|#()Gk8CV#6T|*poJ^kGD|D9rBU}gyLX6FE@V1gk+5d)sq@Bg@7OYpTV+ne0YBHYBfaP|$~Y@y;@p+{SU{?A*o
zQ#j}1_qaFTdm8U+a#b%+v^7aDTikYei$vL3A5M3l719jt#+g5k7;jy;N+?6)6z`ks
zR*C#N4I3UEQRX=NLWsXW&@m__{Xtkq*NlyyF5X#bleAauMdr*A)JXf^rfliuqI!CZ@WpL_HqG$y7!J5OM9-d`U^-oKSR>bq-J
z96UdJuc%p2{MMxE6ZhSw89Y3Hdt3hZIs6R%qK=8G*FB6}_%c@q=>88V^s$*Byz1g@
z?;q1IzplFfhY1v6bM<0(e+7m`BO@rZ7@0&EP~#gGnV|Sa1@H(2#Xh=L32Y%FfafBO32Zw

literal 0
HcmV?d00001

diff --git a/application/src/test/resources/themes/default/i18n/default.properties b/application/src/test/resources/themes/default/i18n/default.properties
new file mode 100644
index 0000000..0321c81
--- /dev/null
+++ b/application/src/test/resources/themes/default/i18n/default.properties
@@ -0,0 +1 @@
+index.welcome=\u6B22\u8FCE\u6765\u5230\u9996\u9875
\ No newline at end of file
diff --git a/application/src/test/resources/themes/default/i18n/en.properties b/application/src/test/resources/themes/default/i18n/en.properties
new file mode 100644
index 0000000..1e6ec93
--- /dev/null
+++ b/application/src/test/resources/themes/default/i18n/en.properties
@@ -0,0 +1 @@
+index.welcome=Welcome to the index
\ No newline at end of file
diff --git a/application/src/test/resources/themes/default/templates/index.html b/application/src/test/resources/themes/default/templates/index.html
new file mode 100644
index 0000000..7d38411
--- /dev/null
+++ b/application/src/test/resources/themes/default/templates/index.html
@@ -0,0 +1,12 @@
+
+
+
+    
+    Title
+
+
+index
+

+

+
+
diff --git a/application/src/test/resources/themes/default/templates/timezone.html b/application/src/test/resources/themes/default/templates/timezone.html
new file mode 100644
index 0000000..d37df4e
--- /dev/null
+++ b/application/src/test/resources/themes/default/templates/timezone.html
@@ -0,0 +1 @@
+

diff --git a/application/src/test/resources/themes/default/theme.yaml b/application/src/test/resources/themes/default/theme.yaml
new file mode 100644
index 0000000..00263a8
--- /dev/null
+++ b/application/src/test/resources/themes/default/theme.yaml
@@ -0,0 +1,15 @@
+apiVersion: theme.halo.run/v1alpha1
+kind: Theme
+metadata:
+  name: default
+spec:
+  displayName: Default
+  author:
+    name: halo-dev
+    website: https://halo.run
+  description: Default theme for Halo 2.0
+  logo: https://halo.run/logo
+  website: https://github.com/halo-sigs/theme-default
+  repo: https://github.com/halo-sigs/theme-default.git
+  version: 1.0.0
+  require: 2.0.0
diff --git a/application/src/test/resources/themes/invalid-missing-manifest/i18n/default.properties b/application/src/test/resources/themes/invalid-missing-manifest/i18n/default.properties
new file mode 100644
index 0000000..0321c81
--- /dev/null
+++ b/application/src/test/resources/themes/invalid-missing-manifest/i18n/default.properties
@@ -0,0 +1 @@
+index.welcome=\u6B22\u8FCE\u6765\u5230\u9996\u9875
\ No newline at end of file
diff --git a/application/src/test/resources/themes/invalid-missing-manifest/i18n/en.properties b/application/src/test/resources/themes/invalid-missing-manifest/i18n/en.properties
new file mode 100644
index 0000000..1e6ec93
--- /dev/null
+++ b/application/src/test/resources/themes/invalid-missing-manifest/i18n/en.properties
@@ -0,0 +1 @@
+index.welcome=Welcome to the index
\ No newline at end of file
diff --git a/application/src/test/resources/themes/invalid-missing-manifest/templates/index.html b/application/src/test/resources/themes/invalid-missing-manifest/templates/index.html
new file mode 100644
index 0000000..441ad47
--- /dev/null
+++ b/application/src/test/resources/themes/invalid-missing-manifest/templates/index.html
@@ -0,0 +1,12 @@
+
+
+
+    
+    Title
+
+
+index
+

+

+
+
diff --git a/application/src/test/resources/themes/invalid-missing-manifest/templates/timezone.html b/application/src/test/resources/themes/invalid-missing-manifest/templates/timezone.html
new file mode 100644
index 0000000..d37df4e
--- /dev/null
+++ b/application/src/test/resources/themes/invalid-missing-manifest/templates/timezone.html
@@ -0,0 +1 @@
+

diff --git a/application/src/test/resources/themes/other/i18n/default.properties b/application/src/test/resources/themes/other/i18n/default.properties
new file mode 100644
index 0000000..7faa99e
--- /dev/null
+++ b/application/src/test/resources/themes/other/i18n/default.properties
@@ -0,0 +1 @@
+index.welcome=Other \u9996\u9875
\ No newline at end of file
diff --git a/application/src/test/resources/themes/other/i18n/en.properties b/application/src/test/resources/themes/other/i18n/en.properties
new file mode 100644
index 0000000..82b9a28
--- /dev/null
+++ b/application/src/test/resources/themes/other/i18n/en.properties
@@ -0,0 +1 @@
+index.welcome=other index
\ No newline at end of file
diff --git a/application/src/test/resources/themes/other/templates/index.html b/application/src/test/resources/themes/other/templates/index.html
new file mode 100644
index 0000000..2ecf09e
--- /dev/null
+++ b/application/src/test/resources/themes/other/templates/index.html
@@ -0,0 +1,10 @@
+
+
+
+    
+    Other theme title
+
+
+

+
+
diff --git a/application/src/test/resources/themes/other/theme.yaml b/application/src/test/resources/themes/other/theme.yaml
new file mode 100644
index 0000000..1347631
--- /dev/null
+++ b/application/src/test/resources/themes/other/theme.yaml
@@ -0,0 +1,15 @@
+apiVersion: theme.halo.run/v1alpha1
+kind: Theme
+metadata:
+  name: default
+spec:
+  displayName: Default
+  author:
+    name: halo-dev
+    website: https://halo.run
+  description: Default theme for Halo 2.0
+  logo: https://halo.run/logo
+  website: https://github.com/halo-sigs/theme-default
+  repo: https://github.com/halo-sigs/theme-default.git
+  version: 1.0.1
+  require: 2.0.0
diff --git a/application/src/test/resources/themes/test-theme.zip b/application/src/test/resources/themes/test-theme.zip
new file mode 100644
index 0000000000000000000000000000000000000000..7fb443d7c7b167783a6673c4dd2f1e541d7d7421
GIT binary patch
literal 1052
zcmWIWW@Zs#00DynmQXMQN^mpiGL)nim*|#cq~@mThlcPnuui!g&UA8-r+o65n!!5}b!8E$GNP^~DcsbI79Did>az~(!+zaql?C5=-j
zY%DsgAmCEH?@^sY!pfA?0#t$g8>*a*`N
zOIw$?%BN_pzUB7i;vVIjE=9FdMka4+o|B9iN8;TKQ7j}*ZmY
ze_<=sy6f}K^yTh6rKvMlcGK+5uZ}kVl%1#1R<5*3$#mP>c-f~5^Sw*-^{&1?uJ?x_
zz?+>zgY*DG_EcEcqb^u_%KA#8e=;q%jQDVB!-a
z%nFcMm~o{55(a~}jy=G5MRI!yJY>P?9Z$@`tN{4}6kW(cCy(NbH@K`IKJo&*S=m4i
NW&uKwi>sJGJOBs}Cd&W-

literal 0
HcmV?d00001

diff --git a/build.gradle b/build.gradle
new file mode 100644
index 0000000..60e0273
--- /dev/null
+++ b/build.gradle
@@ -0,0 +1,10 @@
+plugins {
+    id 'org.springframework.boot' version '3.3.1' apply false
+    id 'io.spring.dependency-management' version '1.1.5' apply false
+    id "com.gorylenko.gradle-git-properties" version "2.4.1" apply false
+    id "de.undercouch.download" version "5.6.0" apply false
+    id "io.freefair.lombok" version "8.6" apply false
+    id 'org.gradle.crypto.checksum' version '1.4.0' apply false
+    id "com.github.node-gradle.node" version "7.0.2" apply false
+    id "org.springdoc.openapi-gradle-plugin" version "1.9.0" apply false
+}
diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
new file mode 100644
index 0000000..6784052
--- /dev/null
+++ b/buildSrc/build.gradle
@@ -0,0 +1,3 @@
+plugins {
+    id 'groovy-gradle-plugin'
+}
diff --git a/buildSrc/src/main/groovy/halo.publish.gradle b/buildSrc/src/main/groovy/halo.publish.gradle
new file mode 100644
index 0000000..ce1932f
--- /dev/null
+++ b/buildSrc/src/main/groovy/halo.publish.gradle
@@ -0,0 +1,56 @@
+plugins {
+    id 'maven-publish'
+}
+
+publishing {
+    publications {
+        def pubName = "${archivesBaseName}"
+        pluginManager.withPlugin('java-platform') {
+            pubName = pubName + 'Pom'
+        }
+        pluginManager.withPlugin('java') {
+            pubName = pubName + 'Library'
+        }
+        "${pubName}"(MavenPublication) {
+            pluginManager.withPlugin('java-platform') {
+                from components.javaPlatform
+            }
+            pluginManager.withPlugin('java') {
+                from components.java
+            }
+            pom {
+                licenses {
+                    license {
+                        name = 'The GNU General Public License v3.0'
+                        url = 'https://www.gnu.org/licenses/gpl-3.0.en.html'
+                    }
+                }
+                developers {
+                    developer {
+                        id = 'johnniang'
+                        name = 'JohnNiang'
+                        email = 'johnniang@foxmil.com'
+                    }
+                }
+                scm {
+                    connection = 'scm:git:https://github.com/halo-dev/halo.git'
+                    developerConnection = 'scm:git:ssh://git@github.com:halo-dev/halo.git'
+                    url = 'https://github.com/halo-dev/halo'
+                }
+            }
+        }
+    }
+
+    repositories {
+        mavenLocal()
+        if (project.hasProperty("release")) {
+            maven {
+                name = 'ossrh'
+                def releasesRepoUrl = 'https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/'
+                def snapshotsRepoUrl = 'https://s01.oss.sonatype.org/content/repositories/snapshots/'
+                url = version.endsWith('-SNAPSHOT') ? snapshotsRepoUrl : releasesRepoUrl
+                credentials(PasswordCredentials)
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/config/checkstyle/checkstyle.xml b/config/checkstyle/checkstyle.xml
new file mode 100644
index 0000000..0b01c59
--- /dev/null
+++ b/config/checkstyle/checkstyle.xml
@@ -0,0 +1,365 @@
+
+
+
+
+
+
+    
+
+    
+
+    
+    
+    
+    
+        
+    
+    
+    
+        
+        
+    
+
+    
+    
+    
+        
+    
+
+    
+        
+        
+        
+    
+
+    
+        
+        
+        
+            
+            
+            
+        
+        
+            
+            
+            
+        
+        
+        
+        
+        
+            
+        
+        
+            
+            
+        
+        
+            
+        
+        
+            
+        
+        
+            
+            
+        
+        
+            
+            
+            
+        
+        
+            
+            
+            
+        
+        
+            
+        
+        
+            
+            
+            
+            
+            
+            
+            
+            
+            
+        
+        
+        
+        
+        
+        
+        
+        
+        
+            
+            
+        
+        
+            
+            
+            
+        
+        
+            
+            
+            
+        
+        
+            
+            
+            
+            
+        
+        
+            
+            
+            
+            
+        
+        
+            
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+        
+        
+        
+            
+            
+            
+            
+        
+        
+            
+            
+            
+            
+            
+            
+        
+        
+            
+            
+            
+            
+        
+        
+        
+            
+        
+        
+            
+            
+            
+            
+        
+        
+            
+        
+        
+            
+            
+        
+        
+            
+        
+        
+            
+            
+        
+        
+            
+            
+        
+        
+            
+            
+            
+        
+        
+        
+        
+            
+        
+        
+            
+            
+        
+        
+            
+        
+        
+        
+            
+            
+        
+        
+        
+            
+            
+            
+            
+        
+        
+            
+            
+            
+            
+            
+        
+        
+            
+            
+        
+        
+            
+        
+        
+            
+        
+        
+            
+        
+        
+        
+            
+            
+        
+    
+
diff --git a/docs/authentication/README.md b/docs/authentication/README.md
new file mode 100644
index 0000000..c4ef7b5
--- /dev/null
+++ b/docs/authentication/README.md
@@ -0,0 +1,228 @@
+# Halo 认证方式
+
+目前 Halo 支持的认证方式有：
+
+- 基本认证（Basic Auth）
+- 表单登录（Form Login）
+
+计划支持的认证方式有：
+
+- [个人令牌认证（Personal Access Token）](https://github.com/halo-dev/halo/issues/1309)
+- [OAuth2](https://oauth.net/2/)
+
+## 基本认证
+
+这是最简单的一种认证方式，通过简单设置 HTTP 请求头 `Authorization: Basic xxxyyyzzz==` 即可实现认证，访问 Halo API，例如：
+
+```bash
+╰─❯ curl -u "admin:P@88w0rd" -H "Accept: application/json" http://localhost:8090/api/v1alpha1/users
+
+或者
+╰─❯ echo -n "admin:P@88w0rd" | base64
+YWRtaW46UEA4OHcwcmQ=
+╰─❯ curl -H "Authorization: Basic YWRtaW46UEA4OHcwcmQ=" -H "Accept: application/json" http://localhost:8090/api/v1alpha1/users
+```
+
+## 表单认证
+
+这是一种比较常用的认证方式，只需提供用户名和密码以及 `CSRF 令牌`（用于防止重复提交和跨站请求伪造）。
+
+- 表单参数
+
+  | 参数名     | 类型   | 说明                                  |
+                                                                                                            | ---------- | ------ | ------------------------------------- |
+  | username   | form   | 用户名                                |
+  | password   | form   | 密码                                  |
+  | _csrf      | form   | `CSRF` 令牌。由客户端随机生成。       |
+  | XSRF-TOKEN | cookie | 跨站请求伪造令牌，和 `_csrf` 的值一致 |
+
+- HTTP 200 响应
+
+  仅在请求头 `Accept` 中包含 `application/json` 时发生，响应示例如下所示：
+
+    ```bash
+    ╰─❯ curl 'http://localhost:8090/login' \
+      -H 'Accept: application/json' \
+      -H 'Cookie: XSRF-TOKEN=1ff67e0c-6f2c-4cf9-afb5-81bc1015b8e5' \
+      -H 'Content-Type: application/x-www-form-urlencoded' \
+      --data-raw '_csrf=1ff67e0c-6f2c-4cf9-afb5-81bc1015b8e5&username=admin&password=P@88w0rd'
+    ```
+
+    ```bash
+    < HTTP/1.1 200 OK
+    < Vary: Origin
+    < Vary: Access-Control-Request-Method
+    < Vary: Access-Control-Request-Headers
+    < Content-Type: application/json
+    < Content-Length: 161
+    < Cache-Control: no-cache, no-store, max-age=0, must-revalidate
+    < Pragma: no-cache
+    < Expires: 0
+    < X-Content-Type-Options: nosniff
+    < X-Frame-Options: DENY
+    < X-XSS-Protection: 1 ; mode=block
+    < Referrer-Policy: no-referrer
+    < Set-Cookie: SESSION=d04db9f7-d2a6-4b7c-9845-ef790eb4a980; Path=/; HttpOnly; SameSite=Lax
+    ```
+
+    ```json
+    {
+      "username": "admin",
+      "authorities": [
+        {
+          "authority": "ROLE_super-role"
+        }
+      ],
+      "accountNonExpired": true,
+      "accountNonLocked": true,
+      "credentialsNonExpired": true,
+      "enabled": true
+    }
+    ```
+
+- HTTP 302 响应
+
+  仅在请求头 `Accept` 中不包含 `application/json`才会发生，响应示例如下所示：
+
+  ```bash
+  ╰─❯ curl 'http://localhost:8090/login' \
+    -H 'Accept: */*' \
+    -H 'Cookie: XSRF-TOKEN=1ff67e0c-6f2c-4cf9-afb5-81bc1015b8e5' \
+    -H 'Content-Type: application/x-www-form-urlencoded' \
+    --data-raw '_csrf=1ff67e0c-6f2c-4cf9-afb5-81bc1015b8e5&username=admin&password=P@88w0rd'
+  ```
+
+  ```bash
+  < HTTP/1.1 302 Found
+  < Vary: Origin
+  < Vary: Access-Control-Request-Method
+  < Vary: Access-Control-Request-Headers
+  < Location: /console/
+  < Cache-Control: no-cache, no-store, max-age=0, must-revalidate
+  < Pragma: no-cache
+  < Expires: 0
+  < X-Content-Type-Options: nosniff
+  < X-Frame-Options: DENY
+  < X-XSS-Protection: 1 ; mode=block
+  < Referrer-Policy: no-referrer
+  < Set-Cookie: SESSION=9ce6ad3f-7eba-4de5-abca-650b4721c7ac; Path=/; HttpOnly; SameSite=Lax
+  < content-length: 0
+  ```
+
+未来计划支持“记住我（Remember Me）”功能。
+
+## Personal Access Token
+
+### 背景
+
+Halo 是一款现代化的开源 CMS / 建站系统，为了便于开发者和用户利用 API 访问网站数据，Halo 支持了 Personal Access Token（以下简称
+PAT）功能。
+用户可以在 Halo 的后台生成 PAT，它是一个随机字符串，用于在 API 请求头里提供验证身份用。Halo 后端在接收请求时会校验 PAT
+的值，如果匹配就会允许访问相应的 API 数据。
+这种 PAT 机制避免了直接使用用户名密码的安全隐患，开发者可以为每个 PAT 设置访问范围、过期时间等。同时使用随机 PAT
+也增加了安全性。这为开发 Halo 插件和应用提供了更安全简便的认证方式。
+相比直接暴露服务端 API，这种 PAT 机制也更标准化和安全可控。Halo 在参考业内主流做法的基础上，引入了 PAT，以便于生态系统的开放与丰富。
+
+### 设计
+
+PAT 以 `pat_` 开头，剩余部分为随机字符串，随机字符串可以是 [JWT](https://datatracker.ietf.org/doc/html/rfc7519)、UUID
+或其他经过加密的随机字符串。目前，Halo 的实现是 `pat_` + `JWT` 的形式，例如：
+
+```text
+pat_eyJraWQiOiJabUNtcWhJX2FuaFlWQW5aRlVTS0lOckxXRFhqaEp1Nk9ZRGRtcW13Rno4IiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiJhZG1pbiIsInJvbGVzIjpbInN1cGVyLXJvbGUiXSwicGF0X25hbWUiOiJwYXQtYWRtaW4tSVdvbFEiLCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjgwOTAvIiwiZXhwIjoxNjk0NjcyMDc5LCJpYXQiOjE2OTQ1ODU3MjAsImp0aSI6IjE3ZWFkNzlkLTRkMjctYjg4NS02YjAzLTM4Y2JlYzQxMmFlMyJ9.xiq36NZIM3_ynBx-l0scGdfX-89aJi6uV7HJz_kNnuT78CFmxD-XTpncK1E-hqPdQSrSwyG4gT1pVO17UmUCoyoAkZKKKVk_seFwxdbygIueo2UJA5kVw1Naf_6iLtNkAXxAiYUpd8ihIwvVedhmOMQ9UUfd4QKZDR1XnTW4EAteWBi7b0pWqSa4h5lv7TpmAECY_KDAGrBRGGhc9AxsrGYPNZo68n2QGJ5BjH29vfdQaZz4vwsgKxG1WJ9Y7c8cQI9JN8EyQD_n560NWAaoFnRi1qL3nexvhjq8EVyGVyM48aKA02UcyvI9cxZFk6ZgnzmUsMjyA6ZL7wuexkujVqmc3iO5plBDCjW7oMe1zPQq-gEJXJU6gdr_SHcGG1BjamoekCkOeNT3CPzA_-5j3AVlj7FTFQkbn_h-kV07mfNO45BVVKsMb08HrN6iEk7TOX7SxN0s2gFc3xYVcXBMveLtftOfXs04SvSFCfTDeJH_Jy-3lYb_GLOji7xSc6FgRbuAwmzHLlsgBT4NJhR_0dZ-jNsCDIQCIC3iDc0qbcNTJYYocT77YaQzIkleFIXyPiV0RsNPmSTEDGiDlctsZ-AmcGCDQ-UmW8SIFBrA93OHncvb47o0-uBwZLdF_we4S90hJlNiAPVhhrBMtCoTJotyrODMEzwbLIukvewFXp8
+```
+
+示例 Token 中 JWT 部分所对应的 Header 如下：
+
+```json
+{
+  "kid": "ZmCmqhI_anhYVAnZFUSKINrLWDXjhJu6OYDdmqmwFz8",
+  "alg": "RS256"
+}
+```
+
+Payload 如下：
+
+```json
+{
+  "sub": "admin",
+  "roles": [
+    "super-role"
+  ],
+  "pat_name": "pat-admin-IWolQ",
+  "iss": "http://localhost:8090/",
+  "exp": 1694672079,
+  "iat": 1694585720,
+  "jti": "17ead79d-4d27-b885-6b03-38cbec412ae3"
+}
+```
+
+### 使用方式
+
+#### 生成 PAT
+
+Halo 专门提供了生成 PAT 的端口：`/apis/api.console.security.halo.run/v1alpha1/users/-/personalaccesstokens`。创建 PAT
+请求示例如下：
+
+```shell
+curl -u admin:admin -X 'POST' \
+  'http://localhost:8090/apis/api.console.security.halo.run/v1alpha1/users/-/personalaccesstokens' \
+  -H 'accept: application/json' \
+  -H 'Content-Type: application/json' \
+  -d '{
+  "spec": {
+    "name": "My PAT",
+    "description": "This is my first PAT.",
+    "expiresAt": "2023-09-15T02:42:35.136Z"
+    "roles": [""]
+  }
+}'
+```
+
+```json
+{
+  "spec": {
+    "description": "This is my first PAT.",
+    "expiresAt": "2023-09-16T02:42:35.136Z",
+    "roles": [],
+    "username": "admin",
+    "revoked": false,
+    "tokenId": "0b897d9c-56d7-5541-2662-110b70e3f9fd"
+  },
+  "apiVersion": "security.halo.run/v1alpha1",
+  "kind": "PersonalAccessToken",
+  "metadata": {
+    "generateName": "pat-admin-",
+    "name": "pat-admin-lobkm",
+    "annotations": {
+      "security.halo.run/access-token": "pat_eyJraWQiOiJabUNtcWhJX2FuaFlWQW5aRlVTS0lOckxXRFhqaEp1Nk9ZRGRtcW13Rno4IiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiJhZG1pbiIsInJvbGVzIjpbXSwicGF0X25hbWUiOiJwYXQtYWRtaW4tbG9ia20iLCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjgwOTAvIiwiZXhwIjoxNjk0ODMyMTU1LCJpYXQiOjE2OTQ3NDcyOTgsImp0aSI6IjBiODk3ZDljLTU2ZDctNTU0MS0yNjYyLTExMGI3MGUzZjlmZCJ9.UVFYzKmz3bUk7fV6xh_CpuNJA-BR8bci-DIJ7o0fk-hayHXFHr_-7HMrVn7iZcphryqmk0RLv7Zsu_AjY9Qn9iCYybBJBycU0tUJzhDexRtj1ViJtlsraoYxLNSYpJK1hcPngeJuiMa9FZrYGp0k_7GX1NddoXLUBI9orN9DbdKmmJXtvigaxPCp52Mu7fBtVsTmO5fk_y2CglqRl_tkLRpFSgUbERKOqKItctDFRg-WUALBYEpXbhZIXBMuTCsJwhniBMpc1Uu_a1Dqa3K5hDgfHTeUADY2BuhEdYJCODPCzmdfWMNqxYSKQT5JFYoDv-ed6cRqNjKeNvd1IPT3RDkVt_fbo8KPrzvkgIjIzni-Wlwe-pXXQbj_n8iax-jkeK526iu8q2CLptxYxLGD0j8htKZramrov4UkK_eIsotEZZfqig9sYVU5_b442WhOWatdB_pbKj7h-YK1Cb2ueg5kl73bcbBu63b8edJZClp6xr72az343SfBZdwrT_JJ5HR0hJmckAMR_U4qvGWrJ-dobXDgY9Oz-qObfiyglzn0Wrz4HRPlmqDFr2o6TMV7UVjQiV77tDzaNbaXVevXGPS5MaZr313dia7XLpIV3QopXma7rDR6Xnqg7ftDQb5vAvsjwN-JsVabAsdFeCo6ejE1slAD9ZQrD88kgfAIuX4"
+    },
+    "version": 0,
+    "creationTimestamp": "2023-09-15T03:08:18.875350Z"
+  }
+}
+```
+
+请求体说明如下表所示：
+
+| 属性名         | 描述                                                                                                 |
+|-------------|----------------------------------------------------------------------------------------------------|
+| name        | PAT 名称。必填。                                                                                         |
+| description | PAT 描述。非必填。                                                                                        |
+| expiresAt   | PAT 过期时间，一旦创建不可修改，或修改无效。如果不填写，则表示 PAT 无过期时间。                                                       |
+| roles       | 授权给 PAT 的角色，必须包含在当前用户所拥有的角色内。如果设置为 `null` 或者 `[]`，则表示当前 PAT 仅会拥有 `anonymous` 和 `authenticated` 角色。 |
+
+响应体说明如下所示：
+
+| 属性路径                                                | 描述                                           |
+|-----------------------------------------------------|----------------------------------------------|
+| security.halo.run/access-token | 生成好的 PAT。需要注意的是，这个 PAT 不会保存在数据库中，所以仅有一次保存机会。 |
+
+#### 使用 PAT
+
+向 Halo 发送请求时，携带 Header：`Authorization: Bearer $PAT` 即可。示例如下：
+
+```shell
+curl http://localhost:8090/apis/api.console.halo.run/v1alpha1/users/- \
+  -H "Authorization: Bearer pat_eyJraWQiOiJabUNtcWhJX2FuaFlWQW5aRlVTS0lOckxXRFhqaEp1Nk9ZRGRtcW13Rno4IiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiJhZG1pbiIsInJvbGVzIjpbXSwicGF0X25hbWUiOiJwYXQtYWRtaW4tbG9ia20iLCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjgwOTAvIiwiZXhwIjoxNjk0ODMyMTU1LCJpYXQiOjE2OTQ3NDcyOTgsImp0aSI6IjBiODk3ZDljLTU2ZDctNTU0MS0yNjYyLTExMGI3MGUzZjlmZCJ9.UVFYzKmz3bUk7fV6xh_CpuNJA-BR8bci-DIJ7o0fk-hayHXFHr_-7HMrVn7iZcphryqmk0RLv7Zsu_AjY9Qn9iCYybBJBycU0tUJzhDexRtj1ViJtlsraoYxLNSYpJK1hcPngeJuiMa9FZrYGp0k_7GX1NddoXLUBI9orN9DbdKmmJXtvigaxPCp52Mu7fBtVsTmO5fk_y2CglqRl_tkLRpFSgUbERKOqKItctDFRg-WUALBYEpXbhZIXBMuTCsJwhniBMpc1Uu_a1Dqa3K5hDgfHTeUADY2BuhEdYJCODPCzmdfWMNqxYSKQT5JFYoDv-ed6cRqNjKeNvd1IPT3RDkVt_fbo8KPrzvkgIjIzni-Wlwe-pXXQbj_n8iax-jkeK526iu8q2CLptxYxLGD0j8htKZramrov4UkK_eIsotEZZfqig9sYVU5_b442WhOWatdB_pbKj7h-YK1Cb2ueg5kl73bcbBu63b8edJZClp6xr72az343SfBZdwrT_JJ5HR0hJmckAMR_U4qvGWrJ-dobXDgY9Oz-qObfiyglzn0Wrz4HRPlmqDFr2o6TMV7UVjQiV77tDzaNbaXVevXGPS5MaZr313dia7XLpIV3QopXma7rDR6Xnqg7ftDQb5vAvsjwN-JsVabAsdFeCo6ejE1slAD9ZQrD88kgfAIuX4"
+```
diff --git a/docs/backup-and-restore.md b/docs/backup-and-restore.md
new file mode 100644
index 0000000..782f393
--- /dev/null
+++ b/docs/backup-and-restore.md
@@ -0,0 +1,240 @@
+# 备份和恢复 Proposal
+
+## Motivation
+
+目前，Halo 2.x 支持多种数据库：H2、MySQL、MariaDB、Microsoft SQL Server、Oracle 和
+PostgreSQL，虽然数据库有备份和恢复的功能，但是仍然缺少应用级别的备份和恢复功能。Halo
+的数据不仅限于数据库中的数据，还包含工作目录下的数据，例如主题、插件和日志等。
+
+## Goals
+
+- 全站备份，包括数据库中的数据和工作目录的数据。
+- 全站恢复，包括恢复数据库中的数据和工作目录的数据。
+- 用户可控制备份文件存储的时间。
+- 对于工作目录的数据，用户可选择性备份和恢复。
+- 用户可指定备份权限到任意用户。
+
+## Non-Goals
+
+- 仅备份部分自定义资源。
+- 仅备份和恢复文章 Markdown。
+- 定时备份。
+- 加密备份文件。
+- 备份文件自动上传至对象存储。
+
+## Use Cases
+
+- 从某种数据库（例如：H2）迁移至另外的数据库（例如：MySQL），不会因为 SQL 的兼容性而影响迁移。
+- 定时完整备份 Halo，并存储至对象存储，一旦发生意外可随时恢复。
+
+## Requirements
+
+- 仅支持 2.8.x 及以上的 Halo。
+- 恢复的数据的 creationTimestamp 可能会被当前时间覆盖。
+
+## Draft
+
+恢复数据之前需要完整备份当前 Halo，以便恢复过程中发生错误导致无法回滚。
+
+备份文件将存储在 `${halo.work-dir}/backups/halo-full-backup-2023.07.03-17:52:59.zip`。
+
+备份整站可能需要大量的时间，所以我们需要创建自定义模型（Backup）用于保存用户创建备份的请求，并异步执行备份操作，最终将结果反馈至自定义模型数据中。
+
+Backup 模型样例如下：
+
+- 备份成功样例
+
+```yaml
+apiVersion: migration.halo.run/v1alpha1
+kind: Backup
+metadata:
+  name: halo-full-backup-xyz
+  creationTimestamp: 2023.07.04-10:25:30
+spec:
+  format: zip
+  autoDeleteWhen: 2023.07.10-00:00:00Z
+status:
+  phase: Succeeded
+  startTimestamp: 2023.07.04-10:25:31
+  completionTimestamp: 2023.07.04-10:26:30
+  filename: halo-full-backup-2023-07-04-10-25-30.zip
+  size: 1024 # data unit: bytes
+```
+
+- 备份失败样例
+
+```yaml
+apiVersion: migration.halo.run/v1alpha1
+kind: Backup
+metadata:
+  name: halo-full-backup-xyz
+  creationTimestamp: 2023.07.04-10:25:30
+spec:
+  compressionFormat: zip | 7z | tar | tar.gz # 压缩格式
+status:
+  startTimestamp: 2023.07.04-10:25:31
+  # Pending: 刚刚创建好 Backup 资源，等待 Reconciler reconcile。
+  # Running: Reconciler 正在备份 Halo。
+  # Succeeded: Reconciler 成功执行备份 Halo 操作。
+  # Failed: 备份 Halo 失败。
+  phase: Failed
+  failureReason: DatabaseConnectionReset | UnsupportedCompression # 机器可识别的信息
+  failureMessage: The database connection reset. # 人类可阅读的信息
+```
+
+同时，BackupReconciler 将负责备份操作，并更新 Backup 数据。
+
+请求示例如下：
+
+```text
+POST /apis/migration.halo.run/v1alpha1/backups
+Content-Type: application/json
+```
+
+### 备份
+
+准备好所有的备份内容后，需要计算摘要并保存，以便后期恢复校验备份文件完整性使用。
+
+#### 数据库备份和恢复
+
+因为 Halo 的 [Extension 设计](https://github.com/halo-dev/rfcs/tree/main/extension)，所以 Halo 的在数据库中的数据备份相对比较简单，只需要简单备份
+ExtensionStore 即可。恢复同理。
+
+#### 工作目录备份和恢复
+
+Halo 工作目录样例如下所示：
+
+```text
+├── application.yaml
+├── attachments
+│   └── upload
+│       └── image_2023-06-09_16-24-41.png
+├── db
+│   └── halo-next.mv.db
+├── indices
+│   └── posts
+│       ├── _a.cfe
+│       ├── _a.cfs
+│       ├── _a.si
+│       ├── segments_h
+│       └── write.lock
+├── keys
+│   ├── id_rsa
+│   └── id_rsa.pub
+├── logs
+│   ├── halo.log
+│   ├── halo.log.2023-06-01.0.gz
+│   ├── halo.log.2023-06-02.0.gz
+│   ├── halo.log.2023-06-05.0.gz
+│   └── halo.log.2023-06-26.0.gz
+├── plugins
+│   ├── PluginCommentWidget-1.5.0.jar
+│   ├── PluginFeed-1.1.1.jar
+│   ├── PluginSearchWidget-1.0.0.jar
+│   ├── PluginSitemap-1.0.2.jar
+│   └── configs
+└── themes
+    ├── theme-earth
+    │   ├── README.md
+    │   ├── settings.yaml
+    │   ├── templates
+    │   │   ├── archives.html
+    │   │   ├── assets
+    │   │   │   ├── dist
+    │   │   │   │   ├── main.iife.js
+    │   │   │   │   └── style.css
+    │   │   │   └── images
+    │   │   │       ├── default-avatar.svg
+    │   │   │       └── default-background.png
+    │   │   ├── author.html
+    │   │   ├── category.html
+    │   │   ├── error
+    │   │   │   └── error.html
+    │   │   ├── index.html
+    │   │   ├── links.html
+    │   │   ├── modules
+    │   │   │   ├── category-filter.html
+    │   │   │   ├── category-tree.html
+    │   │   │   ├── featured-post-card.html
+    │   │   │   ├── footer.html
+    │   │   │   ├── header.html
+    │   │   │   ├── hero.html
+    │   │   │   ├── layout.html
+    │   │   │   ├── post-card.html
+    │   │   │   ├── sidebar.html
+    │   │   │   ├── tag-filter.html
+    │   │   │   └── widgets
+    │   │   │       ├── categories.html
+    │   │   │       ├── latest-comments.html
+    │   │   │       ├── popular-posts.html
+    │   │   │       ├── profile.html
+    │   │   │       └── tags.html
+    │   │   ├── page.html
+    │   │   ├── post.html
+    │   │   ├── tag.html
+    │   │   └── tags.html
+    │   └── theme.yaml
+```
+
+备份时需要过滤 `db`、backups` 和 `indices` 目录。
+
+#### 备份文件结构
+
+备份文件主要包含自定义资源（`extensions.data`）和工作目录（`workdir.data`）的数据。
+
+- `extensions.data`
+
+前期可考虑使用 JSON 来存储所有的 ExtensionStore 数据。
+
+- `workdir.data`
+
+对工作目录进行 `ZIP` 压缩。
+
+- config.yaml（备份配置）
+
+主要用于描述 `extensions.data` 和 `workdir.data` 压缩格式，后续可扩展备份与恢复相关的配置。例如：
+
+```yaml
+compressions:
+  extensions: json | others
+  workdir: zip | others
+```
+
+前期可不实现该功能。
+
+### 恢复
+
+用户通过上传备份文件的方式进行恢复。当且仅当博客未初始化阶段才能进行恢复操作，否则可能会造成数据不一致。
+
+请求示例如下：
+
+```text
+POST /apis/migration.halo.run/v1alpha1/restorations
+Content-Type: multipart/form-data; boundary="boundary"
+
+'''
+--boundary
+Content-Disposition: form-data; name="backupfile"; filename="halo-full-backup.zip"
+Content-Type: application/zip
+'''
+```
+
+恢复步骤如下：
+
+1. 解压缩备份文件。
+2. 校验备份文件的完整性。
+2. 恢复所有 ExtensionStore。
+3. 覆盖当前工作目录。
+4. 备份完成。
+
+> 需要注意内存占用问题。
+
+## TBDs
+
+- 数据备份期间可能会存在数据的创建、更新和删除。
+
+我们将忽略这些数据变化。
+
+- 是否支持在初始化博客后恢复数据？
+
+支持。不过可能会覆盖掉已有的数据。
diff --git a/docs/cache/page.md b/docs/cache/page.md
new file mode 100644
index 0000000..4bd8697
--- /dev/null
+++ b/docs/cache/page.md
@@ -0,0 +1,33 @@
+# 缓存
+
+缓存在各个领域用得非常广泛，例如 CPU 的三级缓存，可加速从主内存中获取数据到处理器。Halo 的主要应用以博客为主，页面更新不会特别频繁，大多数情况下，实时渲染的结果都是没有变化的。如果能够缓存这些不经常变更的页面，可减少数据库访问，加快访问速度。
+
+Halo 采用由 Spring 框架提供的 Caching 作为缓存框架。该缓存框架面对各种缓存实现，提供了统一的访问入口，后续更换缓存仅需修改少量代码和配置。
+
+Halo 默认提供了 CacheProperties 用于启用/禁用缓存，示例如下：
+
+```yaml
+halo:
+  caches:
+    page:
+      disabled: true
+    others:
+      disabled: false
+```
+
+# 页面缓存
+
+页面缓存包括缓存响应体、响应头和响应状态。页面缓存规则如下：
+
+1. 仅缓存模板引擎所渲染的页面。
+2. 仅缓存 `Content-Type` 为 `text/html` 的页面。
+3. 仅缓存响应状态为 `HTTP 200（OK）`。
+4. 请求访问为 `GET`。
+
+缓存详情见下表：
+
+| 术语   | 值              |
+|------|----------------|
+| 名称   | `page`         |
+| 失效时间 | 距最近一次访问 `1` 小时 |
+| 缓存数量 | `10,000` 个     |
diff --git a/docs/developer-guide/custom-endpoint.md b/docs/developer-guide/custom-endpoint.md
new file mode 100644
index 0000000..80a0a8b
--- /dev/null
+++ b/docs/developer-guide/custom-endpoint.md
@@ -0,0 +1,50 @@
+# 系统自定义 API
+
+系统自定义 API 是一组特殊的 API，因为自定义模型 API 无法满足要求，需要开发者自己实现。
+
+但是系统自定义 API 有一个统一的前缀：`/apis/api.console.halo.run/v1alpha1/`，剩余的部分可随意定义。
+
+## 如何在系统中创建一个系统自定义 API
+
+1. 实现 `run.halo.app.core.extension.endpoint.CustomEndpoint` 接口
+2. 将实现类设置为 Spring Bean
+
+关于用户的自定义 API 实现类如下：
+
+```java
+
+@Component
+public class UserEndpoint implements CustomEndpoint {
+
+    private final ExtensionClient client;
+
+    public UserEndpoint(ExtensionClient client) {
+        this.client = client;
+    }
+
+    Mono me(ServerRequest request) {
+        return ReactiveSecurityContextHolder.getContext()
+                .map(ctx -> {
+                    var name = ctx.getAuthentication().getName();
+                    return client.fetch(User.class, name)
+                            .orElseThrow(() -> new ExtensionNotFoundException(name));
+                })
+                .flatMap(user -> ServerResponse.ok()
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .bodyValue(user));
+    }
+
+    @Override
+    public RouterFunction endpoint() {
+        return SpringdocRouteBuilder.route()
+                .GET("/users/-", this::me, builder -> builder.operationId("GetCurrentUserDetail")
+                        .description("Get current user detail")
+                        .tag("api.console.halo.run/v1alpha1/User")
+                        .response(responseBuilder().implementation(User.class)))
+                // 这里可添加其他自定义 API
+                .build();
+    }
+}
+```
+
+这样我们就可以启动 Halo，访问 Swagger UI 文档地址，并进行测试。
diff --git a/docs/developer-guide/plugin-configuration-properties.md b/docs/developer-guide/plugin-configuration-properties.md
new file mode 100644
index 0000000..cf68554
--- /dev/null
+++ b/docs/developer-guide/plugin-configuration-properties.md
@@ -0,0 +1,78 @@
+# 插件外部配置
+
+插件外部配置功能允许用户在特定目录添加插件相关的配置，插件启动的时候能够自动读取到该配置。
+
+## 配置优先级
+
+> 优先级从上到下由高到低。
+
+1. `${halo.work-dir}/plugins/configs/${plugin-id}.{yaml|yml}`
+2. `classpath:/config.{yaml|yml}`
+
+插件开发者可在 `Class Path` 下 添加 `config.{yaml|yml}` 作为默认配置。当 `.yaml` 和 `.yml` 同时出现时，以 `.yml` 的配置将会被忽略。
+
+## 插件中定义配置并使用
+
+- `src/main/java/my/plugin/MyPluginProperties.java`
+
+    ```java
+    @Data
+    @ConfigurationProperties
+    public class MyPluginProperties {
+    
+        private String encryptKey;
+    
+        private String certPath;
+    }
+    ```
+
+- `src/main/java/my/plugin/MyPluginConfiguration.java`
+
+    ```java
+    @EnableConfigurationProperties(MyPluginProperties.class)
+    @Configuration
+    public class MyPluginConfiguration {
+        
+    }
+    ```
+
+- `src/main/java/my/plugin/MyPlugin.java`
+
+    ```java
+    @Component
+    @Slf4j
+    public class MyPlugin extends BasePlugin {
+    
+        private final MyPluginProperties storeProperties;
+    
+        public MyPlugin(PluginWrapper wrapper, MyPluginProperties storeProperties) {
+            super(wrapper);
+            this.storeProperties = storeProperties;
+        }
+    
+        @Override
+        public void start() {
+            log.info("My plugin properties: {}", storeProperties);
+        }
+    }
+    ```
+
+- `src/main/resources/config.yaml`
+
+    ```yaml
+    encryptKey: encrytkey==
+    certPath: /path/to/cert
+    ```
+
+## 插件使用者配置
+
+- `${halo.work-dir}/plugins/configs/${plugin-id}.{yaml|yml}`
+
+    ```yaml
+    encryptKey: override encrytkey==
+    certPath: /another/path/to/cert
+    ```
+
+## 可能存在的问题
+
+- 增加未来实现"集群"架构的难度。
diff --git a/docs/email-verification/README.md b/docs/email-verification/README.md
new file mode 100644
index 0000000..d58b9b9
--- /dev/null
+++ b/docs/email-verification/README.md
@@ -0,0 +1,129 @@
+## 背景
+
+在 Halo 中，邮箱作为用户主要的身份识别和通信方式，不仅有助于确保用户提供的邮箱地址的有效性和所有权，还对于减少滥用行为、提高账户安全性以及确保用户可以接收重要通知（如密码重置、注册新账户、确认重要操作等）至关重要。
+
+邮箱验证是用户管理过程中的一个关键组成部分，可以帮助维护了一个健康、可靠的用户基础，并且为系统管理员提供了一个额外的安全和管理手段，因此实现一个高效、安全且用户友好的邮箱验证功能至关重要。
+
+## 需求
+
+1. **用户注册验证**：确保新用户在注册过程中提供有效的邮箱地址。邮箱验证作为新用户激活其账户的必要步骤，有助于减少虚假账户和提升用户的整体质量。
+2. **密码重置和安全操作**：在用户忘记密码或需要重置密码时，向已验证的邮箱地址发送密码重置链接来确保安全性。
+3. **用户通知**：验证邮箱地址有助于确保用户可以接收到重要通知，如文章被评论、有新回复等。
+
+## 目标
+
+- 支持用户在修改邮箱后支持重新进行邮箱验证。
+- 允许用户在未收到邮件或邮件过期时重新请求发送验证邮件。
+- 避免邮件通知被滥用，如频繁发送验证邮件，需要添加限制。
+- 验证码过期机制，以确保验证邮件的有效性和安全性。
+
+## 非目标
+
+- 不考虑用户多邮箱地址的验证。
+
+## 方案
+
+### EmailVerificationManager
+
+通过使用 guava 提供的 Cache 来实现一个 EmailVerificationManager 来管理邮箱验证的缓存。
+
+```java
+class EmailVerificationManager {
+  private final Cache emailVerificationCodeCache =
+          CacheBuilder.newBuilder()
+                  .expireAfterWrite(CODE_EXPIRATION_MINUTES, TimeUnit.MINUTES)
+                  .maximumSize(10000)
+                  .build();
+
+  private final Cache blackListCache = CacheBuilder.newBuilder()
+          .expireAfterWrite(Duration.ofHours(1))
+          .maximumSize(1000)
+          .build();
+
+  record UsernameEmail(String username, String email) {
+  }
+
+  @Data
+  @Accessors(chain = true)
+  static class Verification {
+    private String code;
+    private AtomicInteger attempts;
+  }
+}
+```
+
+当用户请求发送验证邮件时，会生成一个随机的验证码，并将其存储在缓存中，默认有效期为 10 分钟，当十分钟内用户未验证成功，验证码会自动过期被缓存清除。
+
+用户可以在十分钟内重新请求发送验证邮件，此时会生成一个新的验证码有效期依然为 10 分钟。但会限制用户发送频率，同一个用户的邮箱发送验证邮件的时间间隔不得小于
+1 分钟，以防止滥用。
+
+当用户请求验证邮箱时，会从缓存中获取验证码，如果验证码不存在或已过期，会提示验证码无效或已过期，如果验证码存在且未过期，会进行验证码的比对，如果验证码不正确，会提示验证码无效，如果验证码正确，会将用户邮箱地址标记为已验证，并从缓存中清除验证码。
+
+如果用户反复使用 code 验证邮箱，会记录失败次数，如果达到了默认的最大尝试次数（默认为 5 次），将被加入黑名单，需要 1
+小时后才能重新验证邮件。
+
+根据上述规则：
+
+- 每个验证码有10分钟的有效期。
+- 在这10分钟内，如果失败次数超过5次，用户会被加入黑名单，禁止验证1小时。
+- 如果在10分钟内尝试了5次且失败，然后请求重新发送验证码，可以再次尝试5次。
+
+那么：
+
+- 在不触发黑名单的情况下，每10分钟可以尝试5次。
+- 一小时内，可以尝试 (60/10) * 5 = 30 次，前提是每10分钟都请求一次新的验证码。
+- 但是，如果在任何10分钟内尝试超过5次，则会被禁止1小时。
+
+因此，为了最大化尝试次数而不触发黑名单，每小时可以尝试 30 次，预计一天内（24h）最多可以尝试 720 次验证码。
+验证码的组成为随机的 6 为数字，可能组合总数：一个 6 位数字的验证码可以从 000000 到 999999，总共有 10 6 种可能的组合。
+10 6 / 720 = 1388，因此，预计最坏情况下需要 1388 天可以破解验证码。这个时间足够长，可以认为非常安全的。
+
+### 提供 APIs 用于处理验证请求
+
+- `POST /apis/v1alpha1/users/-/send-verification-email`：用于请求发送验证邮件来验证邮箱地址。
+- `POST /apis/v1alpha1/users/-/verify-email`：用于根据邮箱验证码来验证邮箱地址。
+
+以上两个 APIs 认证用户都可以访问，但会对请求进行限制，请求间隔不得小于 1 分钟，以防止滥用。
+
+并且会在用户个人资料 API 中添加 emailVerified 字段，用于标识用户邮箱是否已验证。
+
+### 验证码邮件通知
+
+只会通过用户请求验证的邮箱地址发送验证邮件，并且提供了以下变量用户自定义通知模板：
+
+- **username**: 请求验证邮件地址的用户名。
+- **code**: 验证码。
+- **expirationAtMinutes**: 验证码过期时间（分钟）。
+
+验证邮件默认模板示例内容如下:
+
+```markdown
+guqing 你好：
+
+使用下面的动态验证码（OTP）验证您的电子邮件地址。
+
+277436
+
+动态验证码的有效期为 10 分钟。如果您没有尝试验证您的电子邮件地址，请忽略此电子邮件。
+
+guqing's blog
+```
+
+### 安全和异常处理
+
+- 确保所有敏感数据安全传输，当验证码不正确或过期时，只应该提示一个通用的错误信息防止用户猜测或爆破验证码。
+- 异常提示多语言支持。
+
+## 结论
+
+通过实施上述方案，考虑到了以下情况：
+
+1. 新邮箱验证请求
+2. 用户邮箱地址更新
+3. 用户请求重新发送验证邮件
+4. 邮件发送失败
+5. 验证码有效期
+6. 发送频率限制
+7. 验证状态的指示和反馈
+
+我们将能够提供一个安全、可靠且用户友好的邮箱验证功能。
diff --git a/docs/extension-points/authentication.md b/docs/extension-points/authentication.md
new file mode 100644
index 0000000..a97db1b
--- /dev/null
+++ b/docs/extension-points/authentication.md
@@ -0,0 +1,118 @@
+# Halo 认证扩展点
+
+此前，Halo 提供了 AdditionalWebFilter 作为扩展点供插件扩展认证相关的功能。但是近期我们明确了 AdditionalWebFilter
+的使用用途，故不再作为认证的扩展点。
+
+目前，Halo 提供了三种认证扩展点：表单登录认证、普通认证和匿名认证。
+
+## 表单登录（FormLogin）
+
+示例如下：
+
+```java
+import org.springframework.stereotype.Component;
+import org.springframework.web.server.ServerWebExchange;
+import org.springframework.web.server.WebFilterChain;
+import reactor.core.publisher.Mono;
+import run.halo.app.security.FormLoginSecurityWebFilter;
+
+@Component
+public class MyFormLoginSecurityWebFilter implements FormLoginSecurityWebFilter {
+
+  @Override
+  public Mono filter(ServerWebExchange exchange, WebFilterChain chain) {
+    // Do your logic here
+    return chain.filter(exchange);
+  }
+}
+
+```
+
+## 普通认证（Authentication）
+
+示例如下：
+
+```java
+import org.springframework.stereotype.Component;
+import org.springframework.web.server.ServerWebExchange;
+import org.springframework.web.server.WebFilterChain;
+import reactor.core.publisher.Mono;
+import run.halo.app.security.AuthenticationSecurityWebFilter;
+
+@Component
+public class MyAuthenticationSecurityWebFilter implements AuthenticationSecurityWebFilter {
+
+  @Override
+  public Mono filter(ServerWebExchange exchange, WebFilterChain chain) {
+    // Do your logic here
+    return chain.filter(exchange);
+  }
+}
+```
+
+## 匿名认证（Anonymous Authentication
+
+示例如下：
+
+```java
+import org.springframework.stereotype.Component;
+import org.springframework.web.server.ServerWebExchange;
+import org.springframework.web.server.WebFilterChain;
+import reactor.core.publisher.Mono;
+import run.halo.app.security.AnonymousAuthenticationSecurityWebFilter;
+
+@Component
+public class MyAnonymousAuthenticationSecurityWebFilter
+        implements AnonymousAuthenticationSecurityWebFilter {
+
+  @Override
+  public Mono filter(ServerWebExchange exchange, WebFilterChain chain) {
+    // Do your logic here
+    return chain.filter(exchange);
+  }
+}
+```
+
+## 前置过滤器（BeforeSecurityWebFilter）
+
+主要用于在进行认证之前的一些处理。需要注意的是，当前过滤器中无法直接通过 ReactiveSecurityContextHolder 获取
+SecurityContext。示例如下：
+
+```java
+public class MyBeforeSecurityWebFilter implements BeforeSecurityWebFilter {
+
+  @Override
+  public Mono filter(ServerWebExchange exchange, WebFilterChain chain) {
+    // Do your logic here
+    return chain.filter(exchange);
+  }
+}
+```
+
+## 后置过滤器（AfterSecurityWebFilter）
+
+主要用于进行认证之后的一些处理。在当前过滤器中，可以通过 ReactiveSecurityContextHolder 获取 SecurityContext。示例如下：
+
+```java
+public class MyAfterSecurityWebFilter implements AfterSecurityWebFilter {
+
+  @Override
+  public Mono filter(ServerWebExchange exchange, WebFilterChain chain) {
+    return ReactiveSecurityContextHolder.getContext()
+            .switchIfEmpty(Mono.defer(() -> {
+              // do something...
+              return chain.filter(exchange).then(Mono.empty());
+            }))
+            .flatMap(securityContext -> {
+              // do something...
+              return chain.filter(exchange);
+            });
+  }
+}
+```
+
+---
+
+我们在实现扩展点的时候需要注意：如果当前请求不满足认证条件，请一定要调用 `chain.filter(exchange)`，给其他 filter 留下机会。
+
+后续会根据需求实现其他认证相关的扩展点。
\ No newline at end of file
diff --git a/docs/extension-points/content.md b/docs/extension-points/content.md
new file mode 100644
index 0000000..31b5787
--- /dev/null
+++ b/docs/extension-points/content.md
@@ -0,0 +1,107 @@
+# 内容扩展点
+
+## 文章内容扩展点
+
+文章内容扩展点用于在主题端文章内容渲染之前对文章内容进行修改，比如添加广告、添加版权声明、插入脚本等。
+
+## 使用方式
+
+在插件中通过实现 `run.halo.app.theme.ReactivePostContentHandler` 接口来实现文章内容扩展。
+
+以下是一个扩展文章内容支持 Katex 的示例：
+
+```javascript
+String katexScript="""
+    
+    
+    
+    
+    """;
+```
+
+然后在 `handle` 方法中将 Katex 的脚本字符串插入到内容前面：
+
+```java
+
+@Component
+public class KatexPostContentHandler implements ReactivePostContentHandler {
+
+    @Override
+    public Mono handle(PostContentContext postContent) {
+        postContent.setContent(katexScript + "\n" + postContent.getContent());
+        return Mono.just(postContent);
+    }
+}
+```
+
+定义了扩展点实现（扩展），还需要在插件的 `resources/extensions` 目录下添加对扩展的声明：
+
+```yaml
+# resources/extensions/extension-definitions.yml
+apiVersion: plugin.halo.run/v1alpha1
+kind: ExtensionDefinition
+metadata:
+  name: ext-def-katex-post-content
+spec:
+  className: run.halo.katex.KatexPostContentHandler
+  # 文章内容扩展点的名称，固定值
+  extensionPointName: reactive-post-content-handler
+  displayName: "KatexPostContentHandler"
+  description: "Katex support for post content."
+```
+
+## 自定义页面内容扩展点
+
+自定义页面（SinglePage）内容扩展点用于在主题端自定义页面内容渲染之前对内容进行修改，比如添加广告、添加版权声明、插入脚本等。
+
+## 使用方式
+
+在插件中通过实现 `run.halo.app.theme.ReactiveSinglePageContentHandler` 接口来实现内容扩展。
+
+以下是一个扩展内容支持 Katex 的示例：
+
+```java
+
+@Component
+public class KatexSinglePageContentHandler implements ReactiveSinglePageContentHandler {
+
+    @Override
+    public Mono handle(SinglePageContentContext pageContent) {
+
+        String katexScript = ""; // 参考文章内容扩展点的示例脚本块
+        pageContent.setContent(katexScript + "\n" + pageContent.getContent());
+        return Mono.just(pageContent);
+    }
+}
+```
+
+在插件的 `resources/extensions` 目录下添加对自定义页面内容扩展的声明：
+
+```yaml
+# resources/extensions/extension-definitions.yml
+apiVersion: plugin.halo.run/v1alpha1
+kind: ExtensionDefinition
+metadata:
+  name: ext-def-katex-singlepage-content
+spec:
+  className: run.halo.katex.KatexSinglePageContentHandler
+  # 自定义页面内容扩展点的名称，固定值
+  extensionPointName: reactive-post-content-handler
+  displayName: "KatexSinglePageContentHandler"
+  description: "Katex support for single page content."
+```
diff --git a/docs/extension-points/search-engine.md b/docs/extension-points/search-engine.md
new file mode 100644
index 0000000..c42cd29
--- /dev/null
+++ b/docs/extension-points/search-engine.md
@@ -0,0 +1,64 @@
+# 搜索引擎扩展点
+
+随着 Halo 的不断发展，搜索引擎模块也逐渐完善。搜索引擎模块是 Halo 的核心模块之一，它负责为 Halo
+提供全文搜索功能。搜索引擎模块目前仅支持本地全文搜索引擎 [Lucene](https://lucene.apache.org/)，其他搜索引擎的支持，如
+Solr、MeiliSearch 或 ElasticSearch，需要通过插件来实现。
+
+搜索引擎模块包含两个扩展点，分别是搜索引擎扩展和搜索文档扩展。搜索引擎扩展主要负责索引文档的添加、更新、删除和重建，搜索文档扩展则主要用于扩展文档类型，不仅限于文章类型。
+
+从 Halo 2.17 开始，Halo 利用事件机制收集来自核心和插件中所发布的文档，其中也包含了文档类型用于区分。所以插件中可以通过发布事件的方式来控制文档的添加、更新、删除和重建，重建操作所需要的数据则由搜索文档扩展提供。
+
+## 搜索引擎扩展（`run.halo.app.search.SearchEngine`）
+
+如果插件想要扩展搜索引擎，如 Solr、MeiliSearch 或者 ElasticSearch，可以通过实现 `SearchEngine` 接口来实现。
+
+具体实现可参考 Halo 的 Lucene 搜索引擎实现：`run.halo.app.search.LuceneSearchEngine`。
+
+## 搜索文档扩展（`run.halo.app.search.HaloDocumentsProvider`）
+
+如果插件想要扩展搜索文档类型，可以通过实现 `HaloDocumentsProvider` 接口来实现。具体实现可参考 Halo
+的默认实现：`run.halo.app.search.post.PostHaloDocumentsProvider`。
+
+- 添加文档示例如下所示
+
+  ```java
+  class HaloDocumentAddExample {
+
+    private final ApplicationEventPublisher eventPublisher;
+
+    void addDocuments() {
+      // concrete Halo documents
+      List documents = ...;
+      eventPublisher.publishEvent(new HaloDocumentAddRequestEvent(this, documents));
+    }
+  }
+  ```
+
+- 删除文档示例如下所示
+
+  ```java
+  class HaloDocumentDeleteExample {
+
+    private final ApplicationEventPublisher eventPublisher;
+
+    void deleteDocuments() {
+      Set docIds = ...;
+      eventPublisher.publishEvent(new HaloDocumentDeleteRequestEvent(this, docIds));
+    }
+  }
+  ```
+
+- 重建索引示例如下所示：
+
+  ```java
+  class HaloDocumentRebuildExample {
+
+    private final ApplicationEventPublisher eventPublisher;
+
+    void rebuildDocument() {
+      eventPublisher.publishEvent(new HaloDocumentRebuildRequestEvent(this));
+    }
+
+  }
+  ```
+  
\ No newline at end of file
diff --git a/docs/full-text-search/README.md b/docs/full-text-search/README.md
new file mode 100644
index 0000000..447d144
--- /dev/null
+++ b/docs/full-text-search/README.md
@@ -0,0 +1,356 @@
+# 在 Halo 中实践全文搜索
+
+主题端需全文搜索接口用于模糊搜索文章，且对效率要求极高。已经有对应的 Issue
+提出，可参考：。
+
+实现全文搜索的本地方案最好的就是 Apache 旗下开源的 [Lucene](https://lucene.apache.org/)
+，不过 [Hibernate Search](https://hibernate.org/search/) 也基于 Lucene 实现了全文搜索。Halo 2.0 的自定义模型并不是直接在
+Hibernate 上构建的，也就是说 Hibernate 在 Halo 2.0 只是一个可选项，故我们最终可能并不会采用 Hibernate Search，即使它有很多优势。
+
+Halo 也可以学习 Hibernate 适配多种搜索引擎，如 Lucene、ElasticSearch、MeiliSearch 等。默认实现为 Lucene，对于用户来说，这种实现方式部署成本最低。
+
+## 搜索接口设计
+
+### 搜索参数
+
+字段如下所示：
+
+- keyword: string. 关键字
+- sort: string[]. 搜索字段和排序方式
+- offset: number. 本次查询结果偏移数
+- limit: number. 本次查询的结果最大条数
+
+例如：
+
+```bash
+http://localhost:8090/apis/api.halo.run/v1alpha1/posts?keyword=halo&sort=title.asc&sort=publishTimestamp,desc&offset=20&limit=10
+```
+
+### 搜索结果
+
+```yaml
+hits:
+  - name: halo01
+    title: Halo 01
+    permalink: /posts/halo01
+    categories:
+      - a
+      - b
+    tags:
+      - c
+      - d
+  - name: halo02
+    title: Halo 02
+    permalink: /posts/halo02
+    categories:
+      - a
+      - b
+    tags:
+      - c
+      - d
+query: "halo"
+total: 100
+limit: 20
+offset: 10
+processingTimeMills: 2
+```
+
+#### 搜索结果分页问题
+
+目前，大多数搜索引擎为了性能问题，并没有直接提供分页功能，或者不推荐分页。
+
+请参考：
+
+- 
+- 
+- 
+- 
+
+综合以上讨论，我们暂定不支持分页。不过允许设置单次查询的记录数（limit <= max_limit）。
+
+#### 中文搜索优化
+
+Lucene 默认的分析器，对中文的分词不够友好，我们需要借助外部依赖或者外部整理好的词库帮助我们更好的对中文句子分词，以便优化中文搜索结果。
+
+以下是关于中文分析器的 Java 库：
+
+- 
+- 
+- 
+- 
+- 
+
+### 搜索引擎样例
+
+#### MeiliSearch
+
+```bash
+curl 'http://localhost:7700/indexes/movies/search' \
+  -H 'Accept: */*' \
+  -H 'Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6,zh-TW;q=0.5' \
+  -H 'Authorization: Bearer MASTER_KEY' \
+  -H 'Connection: keep-alive' \
+  -H 'Content-Type: application/json' \
+  -H 'Cookie: logged_in=yes; adminer_permanent=; XSRF-TOKEN=75995791-980a-4f3e-81fb-2e199d8f3934' \
+  -H 'Origin: http://localhost:7700' \
+  -H 'Referer: http://localhost:7700/' \
+  -H 'Sec-Fetch-Dest: empty' \
+  -H 'Sec-Fetch-Mode: cors' \
+  -H 'Sec-Fetch-Site: same-origin' \
+  -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.26' \
+  -H 'X-Meilisearch-Client: Meilisearch mini-dashboard (v0.2.2) ; Meilisearch instant-meilisearch (v0.8.2) ; Meilisearch JavaScript (v0.27.0)' \
+  -H 'sec-ch-ua: "Microsoft Edge";v="107", "Chromium";v="107", "Not=A?Brand";v="24"' \
+  -H 'sec-ch-ua-mobile: ?0' \
+  -H 'sec-ch-ua-platform: "Windows"' \
+  --data-raw '{"q":"halo","attributesToHighlight":["*"],"highlightPreTag":"","highlightPostTag":"","limit":21}' \
+  --compressed
+```
+
+```json
+{
+    "hits": [
+        {
+            "id": 108761,
+            "title": "I Am... Yours: An Intimate Performance at Wynn Las Vegas",
+            "overview": "Filmed at the Encore Theater at Wynn Las Vegas, this extraordinary concert features performances of over 30 songs from Beyoncé’s three multi-platinum solo releases, Destiny’s Child catalog and a few surprises. This amazing concert includes the #1 hits, “Single Ladies (Put A Ring On It),” “If I Were A Boy,” “Halo,” “Sweet Dreams” and showcases a gut-wrenching performance of “That’s Why You’re Beautiful.”  Included on \"I AM... YOURS An Intimate Performance At Wynn Las Vegas,\" is a biographical storytelling woven between many songs and exclusive behind-the-scenes footage.",
+            "genres": ["Music", "Documentary"],
+            "poster": "https://image.tmdb.org/t/p/w500/j8n1XQNfw874Ka7SS3HQLCVNBxb.jpg",
+            "release_date": 1258934400,
+            "_formatted": {
+                "id": "108761",
+                "title": "I Am... Yours: An Intimate Performance at Wynn Las Vegas",
+                "overview": "Filmed at the Encore Theater at Wynn Las Vegas, this extraordinary concert features performances of over 30 songs from Beyoncé’s three multi-platinum solo releases, Destiny’s Child catalog and a few surprises. This amazing concert includes the #1 hits, “Single Ladies (Put A Ring On It),” “If I Were A Boy,” “Halo,” “Sweet Dreams” and showcases a gut-wrenching performance of “That’s Why You’re Beautiful.”  Included on \"I AM... YOURS An Intimate Performance At Wynn Las Vegas,\" is a biographical storytelling woven between many songs and exclusive behind-the-scenes footage.",
+                "genres": ["Music", "Documentary"],
+                "poster": "https://image.tmdb.org/t/p/w500/j8n1XQNfw874Ka7SS3HQLCVNBxb.jpg",
+                "release_date": "1258934400"
+            }
+        }
+    ],
+    "estimatedTotalHits": 10,
+    "query": "halo",
+    "limit": 21,
+    "offset": 0,
+    "processingTimeMs": 2
+}
+```
+
+![MeiliSearch UI](./meilisearch.jpg)
+
+#### Algolia
+
+```bash
+curl 'https://og53ly1oqh-dsn.algolia.net/1/indexes/*/queries?x-algolia-agent=Algolia%20for%20JavaScript%20(4.14.2)%3B%20Browser%20(lite)%3B%20docsearch%20(3.2.1)%3B%20docsearch-react%20(3.2.1)%3B%20docusaurus%20(2.1.0)&x-algolia-api-key=739f2a55c6d13d93af146c22a4885669&x-algolia-application-id=OG53LY1OQH' \
+  -H 'Accept: */*' \
+  -H 'Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6,zh-TW;q=0.5' \
+  -H 'Connection: keep-alive' \
+  -H 'Origin: https://docs.halo.run' \
+  -H 'Referer: https://docs.halo.run/' \
+  -H 'Sec-Fetch-Dest: empty' \
+  -H 'Sec-Fetch-Mode: cors' \
+  -H 'Sec-Fetch-Site: cross-site' \
+  -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.26' \
+  -H 'content-type: application/x-www-form-urlencoded' \
+  -H 'sec-ch-ua: "Microsoft Edge";v="107", "Chromium";v="107", "Not=A?Brand";v="24"' \
+  -H 'sec-ch-ua-mobile: ?0' \
+  -H 'sec-ch-ua-platform: "Windows"' \
+  --data-raw '{"requests":[{"query":"halo","indexName":"docs","params":"attributesToRetrieve=%5B%22hierarchy.lvl0%22%2C%22hierarchy.lvl1%22%2C%22hierarchy.lvl2%22%2C%22hierarchy.lvl3%22%2C%22hierarchy.lvl4%22%2C%22hierarchy.lvl5%22%2C%22hierarchy.lvl6%22%2C%22content%22%2C%22type%22%2C%22url%22%5D&attributesToSnippet=%5B%22hierarchy.lvl1%3A5%22%2C%22hierarchy.lvl2%3A5%22%2C%22hierarchy.lvl3%3A5%22%2C%22hierarchy.lvl4%3A5%22%2C%22hierarchy.lvl5%3A5%22%2C%22hierarchy.lvl6%3A5%22%2C%22content%3A5%22%5D&snippetEllipsisText=%E2%80%A6&highlightPreTag=%3Cmark%3E&highlightPostTag=%3C%2Fmark%3E&hitsPerPage=20&facetFilters=%5B%22language%3Azh-Hans%22%2C%5B%22docusaurus_tag%3Adefault%22%2C%22docusaurus_tag%3Adocs-default-1.6%22%5D%5D"}]}' \
+  --compressed
+```
+
+```json
+{
+    "results": [
+        {
+            "hits": [
+                {
+                    "content": null,
+                    "hierarchy": {
+                        "lvl0": "Documentation",
+                        "lvl1": "使用 Docker Compose 部署 Halo",
+                        "lvl2": "更新容器组 ​",
+                        "lvl3": null,
+                        "lvl4": null,
+                        "lvl5": null,
+                        "lvl6": null
+                    },
+                    "type": "lvl2",
+                    "url": "https://docs.halo.run/getting-started/install/other/docker-compose/#更新容器组",
+                    "objectID": "4ccfa93009143feb6e423274a4944496267beea8",
+                    "_snippetResult": {
+                        "hierarchy": {
+                            "lvl1": {
+                                "value": "… Docker Compose 部署 Halo",
+                                "matchLevel": "full"
+                            },
+                            "lvl2": {
+                                "value": "更新容器组 ​",
+                                "matchLevel": "none"
+                            }
+                        }
+                    },
+                    "_highlightResult": {
+                        "hierarchy": {
+                            "lvl0": {
+                                "value": "Documentation",
+                                "matchLevel": "none",
+                                "matchedWords": []
+                            },
+                            "lvl1": {
+                                "value": "使用 Docker Compose 部署 Halo",
+                                "matchLevel": "full",
+                                "fullyHighlighted": false,
+                                "matchedWords": ["halo"]
+                            },
+                            "lvl2": {
+                                "value": "更新容器组 ​",
+                                "matchLevel": "none",
+                                "matchedWords": []
+                            }
+                        },
+                        "hierarchy_camel": [
+                            {
+                                "lvl0": {
+                                    "value": "Documentation",
+                                    "matchLevel": "none",
+                                    "matchedWords": []
+                                },
+                                "lvl1": {
+                                    "value": "使用 Docker Compose 部署 Halo",
+                                    "matchLevel": "full",
+                                    "fullyHighlighted": false,
+                                    "matchedWords": ["halo"]
+                                },
+                                "lvl2": {
+                                    "value": "更新容器组 ​",
+                                    "matchLevel": "none",
+                                    "matchedWords": []
+                                }
+                            }
+                        ]
+                    }
+                }
+            ],
+            "nbHits": 113,
+            "page": 0,
+            "nbPages": 6,
+            "hitsPerPage": 20,
+            "exhaustiveNbHits": true,
+            "exhaustiveTypo": true,
+            "exhaustive": {
+                "nbHits": true,
+                "typo": true
+            },
+            "query": "halo",
+            "params": "query=halo&attributesToRetrieve=%5B%22hierarchy.lvl0%22%2C%22hierarchy.lvl1%22%2C%22hierarchy.lvl2%22%2C%22hierarchy.lvl3%22%2C%22hierarchy.lvl4%22%2C%22hierarchy.lvl5%22%2C%22hierarchy.lvl6%22%2C%22content%22%2C%22type%22%2C%22url%22%5D&attributesToSnippet=%5B%22hierarchy.lvl1%3A5%22%2C%22hierarchy.lvl2%3A5%22%2C%22hierarchy.lvl3%3A5%22%2C%22hierarchy.lvl4%3A5%22%2C%22hierarchy.lvl5%3A5%22%2C%22hierarchy.lvl6%3A5%22%2C%22content%3A5%22%5D&snippetEllipsisText=%E2%80%A6&highlightPreTag=%3Cmark%3E&highlightPostTag=%3C%2Fmark%3E&hitsPerPage=20&facetFilters=%5B%22language%3Azh-Hans%22%2C%5B%22docusaurus_tag%3Adefault%22%2C%22docusaurus_tag%3Adocs-default-1.6%22%5D%5D",
+            "index": "docs",
+            "renderingContent": {},
+            "processingTimeMS": 1,
+            "processingTimingsMS": {
+                "total": 1
+            }
+        }
+    ]
+}
+```
+
+![Algolia UI](./algolia.png)
+
+#### Wiki
+
+```bash
+curl 'https://wiki.fit2cloud.com/rest/api/search?cql=siteSearch%20~%20%22halo%22%20AND%20type%20in%20(%22space%22%2C%22user%22%2C%22com.atlassian.confluence.extra.team-calendars%3Acalendar-content-type%22%2C%22attachment%22%2C%22page%22%2C%22com.atlassian.confluence.extra.team-calendars%3Aspace-calendars-view-content-type%22%2C%22blogpost%22)&start=20&limit=20&excerpt=highlight&expand=space.icon&includeArchivedSpaces=false&src=next.ui.search' \
+  -H 'authority: wiki.fit2cloud.com' \
+  -H 'accept: */*' \
+  -H 'accept-language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6,zh-TW;q=0.5' \
+  -H 'cache-control: no-cache, no-store, must-revalidate' \
+  -H 'cookie: _ga=GA1.2.1720479041.1657188862; seraph.confluence=89915546%3A6fc1394f8d537ffa08fb679e6e4dd64993448051; mywork.tab.tasks=false; JSESSIONID=5347D8618AC5883DE9B702E77152170D' \
+  -H 'expires: 0' \
+  -H 'pragma: no-cache' \
+  -H 'referer: https://wiki.fit2cloud.com/' \
+  -H 'sec-ch-ua: "Microsoft Edge";v="107", "Chromium";v="107", "Not=A?Brand";v="24"' \
+  -H 'sec-ch-ua-mobile: ?0' \
+  -H 'sec-ch-ua-platform: "Windows"' \
+  -H 'sec-fetch-dest: empty' \
+  -H 'sec-fetch-mode: cors' \
+  -H 'sec-fetch-site: same-origin' \
+  -H 'user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.26' \
+  --compressed
+```
+
+```json
+{
+    "results": [
+        {
+            "content": {
+                "id": "76722",
+                "type": "page",
+                "status": "current",
+                "title": "2.3 测试 - 接口",
+                "restrictions": {},
+                "_links": {
+                    "webui": "/pages/viewpage.action?pageId=721",
+                    "tinyui": "/x/8K_SB",
+                    "self": "https://wiki.halo.run/rest/api/content/76720"
+                },
+                "_expandable": {
+                    "container": "",
+                    "metadata": "",
+                    "extensions": "",
+                    "operations": "",
+                    "children": "",
+                    "history": "/rest/api/content/7670/history",
+                    "ancestors": "",
+                    "body": "",
+                    "version": "",
+                    "descendants": "",
+                    "space": "/rest/api/space/IT"
+                }
+            },
+            "title": "2.3 接口 - 接口",
+            "excerpt": "另存为新用例",
+            "url": "/pages/viewpage.action?pageId=7672",
+            "resultGlobalContainer": {
+                "title": "IT 客户",
+                "displayUrl": "/display/IT"
+            },
+            "entityType": "content",
+            "iconCssClass": "aui-icon content-type-page",
+            "lastModified": "2022-05-11T22:40:53.000+08:00",
+            "friendlyLastModified": "五月 11, 2022",
+            "timestamp": 1652280053000
+        }
+    ],
+    "start": 20,
+    "limit": 20,
+    "size": 20,
+    "totalSize": 70,
+    "cqlQuery": "siteSearch ~ \"halo\" AND type in (\"space\",\"user\",\"com.atlassian.confluence.extra.team-calendars:calendar-content-type\",\"attachment\",\"page\",\"com.atlassian.confluence.extra.team-calendars:space-calendars-view-content-type\",\"blogpost\")",
+    "searchDuration": 36,
+    "_links": {
+        "base": "https://wiki.halo.run",
+        "context": ""
+    }
+}
+```
+
+### FAQ
+
+#### 是否需要统一参数和响应体结构？
+
+以下是关于统一参数和响应体结构的优缺点分析：
+
+优点：
+
+- 主题端搜索结果 UI 更加一致，不会因为使用不同搜索引擎导致 UI 上的变动
+
+缺点：
+
+- 无法完全发挥出对应的搜索引擎的实力。比如某个搜索引擎有很实用的功能，而某些搜索引擎没有。
+- Halo Core 需要适配不同的搜索引擎，比较繁琐
+
+#### 是否需要提供扩展点集成其他搜索引擎？
+
+既然 Lucene 非常强大，且暂时已经能够满足我们的要求，我们为什么还需要集成其他搜索引擎呢？
+
+- Lucene 目前是作为 Halo 的依赖使用的，也就意味着只支持 Halo 单实例部署，阻碍未来 Halo 无状态化的趋势。
+- 相反，其他搜索引擎（例如 Solr、MeiliSearch、ElasticSearch 等）都可以独立部署，Halo 只需要利用对应的 SDK 和搜索引擎沟通即可，无论 Halo 是否是多实例部署。
diff --git a/docs/full-text-search/algolia.png b/docs/full-text-search/algolia.png
new file mode 100644
index 0000000000000000000000000000000000000000..d16964292b37d82c79f79ac6c9208853c46a60a3
GIT binary patch
literal 35691
zcmb@t1yqz#xHbwXC`c$smx46Xor;09(%s$NFm#7>g9;4NDGc3R(p^&0-7$BM=brW7
zv+jTYb<;-Y@jCtT+}12?i1p5|+fL_wqm$2MF*Q)=cuJT;1
zUjOZv^6*042l!u}B5#GzXCR>?qihMM45Tkn#u4Mn)1pf}wuO{P4N4ECpJcj9SZ7_h
zEg49s-zJ8JfPaep_OM4UsHmt$=NZ@#R~~+Ac?I6$`k=&tcb||jq`^BXWcvU5Vev~@
z{nXh$iTCf{rxLcak?d-oVM}93AlgY!7-kG6$=oJO#>SSspF$%t(n%vSf-C;SefBJ-
z%P4*wJDb@hImnmQ@6s=pwRD`9Z$f}g2|pfF=M_gQTdS3OGn+Ij?Xzdk%orEvSJ_W@zhrzT+cybwNG>EQ;e5rOG
z?C9WXAnxFzzaiBng0a(QMfN?)s|$eo_~whLwmls4?|v9jft*Tlm^{75Gf%@J)MTHG
z9;Ej}nGSJhGHc8S(kE}|IoQesc43;iy6kKb6`$AH8x!c-|75ilN|{z9Bql1~3}TGg
z23_bUFMc&l)vZ+HyBUc4JDDpS^GuH@F=*!_A!sWfXUrfrBd&X+STN;cwKTp?hzQLU
z^9d1!jWz?No%yp=O9H7g4fdMp?8dpVMn^T6uywS|E~JWiFtohr-0p%k
z#&?LM^w>bVU#9THE%-q?8X;u4;(kk{)BanI-bOU>*h)|oJDqrA^4cyJCCZ%;x&UY-N+%alhOX)6Ej^l%ls_V4Oug5~!b55kc!7
zUjE1qw1RYR`9%e4_hM@NLotd%;FAgaCw5spL!TkTv2C%4wZhOz{3$2usKqJm=7jw(
z>2#C)%L6e;&y&Fb-lKfhMJxgO8(&1)d4=@f_>k|%0|l>4YHF~|@+#Hs!ajAM82Su0
znyf5)`gPxVqcMDNLpsHb{BEL(Dg4d=#?!Q^N0E!@lvPx63m2Pq!;=W7J^4Oxi)OElt71~I0i-7*5eax;TxR;QgSHEvzM9a_;XR;V~Ux`
zDqo8FC%N2r9q%fBEWJw!C!=wpEzzytaV8Dqi26cJ6o-NPesu
z25xtJ)0typc(X)0Uh@da?J7_@>*#f0U?5;Q+@x@<
zG?(8cR)y|bqIA4j2OF%L^DFN{9^(|B!~Xoi-MEECyuGXA-TK!X>_Hy3+~@0dU^bD2
zCcIRO+hXO0e-l|-O(iA8P1=LY4NE45{*g>Cn`j8ry*QS!2qD&svZ|(RQ(DdxNTfUm
zhDXOsOr9HQl!;%{D@wagyf3eCCcF$&HEz^1x*>zLQsz!LO67Bwp1csZNCl5j
z!HY5%9RWADz+WWMU`iS@AuBYqT{SDEkj9*@)%%O);pv2mG(qd;;?R$iwy9RSsVQ{{
z>7%$Mkq2sK7$rQ`R!h;8qj749jY&o`9y^XvW|W?hh2vOn+&}U(mo9zWNi27w@RyTW
z0iAQQoM{R#-^@}r_^`Qr^6Fr*`$F`!!Sq*=)7{CYt`nQ-hU`iF(vZW?LqbkSoSV#s
z>$5VLq@(qt?EJM?%o>%MB8>u5u2vwO@Kihhn6n;#dr@P%r7q^@Pc&ZR(Y_cD<}$|fWq#dnMG4Ob?;y^PUwB$NYOa
zP3oa^R8-y*fza%i%x^idr1^7ca-MHKI}oZewp!AbZo*>0Axs-oHj^A6R8+4C!{Rea
zs^Bf|JNRWW7xp@|emW^rY28tyFOy4BEB92mN$S_;a6eNK$3Oy((z?pwhk#)FiB1z0
z4-v2&&g5jNo;s9Udg!TUy2sqEn{_yQBXs=1msbVxS+OT-WrkQ!5{r(SOUxu$z&=QE
zAi%{X>sY!M7}d!=l8IYiTbrm``e|hO{N>BHMRyJsxvOAntJbiWk2=n`R_{q8>xv(1
zb5uI;-&DO#fbN*r4MVlDzyb}sJXL*6+o7bH3n{|d-&?Am22rJ~|q*cKl
z-AdhlVf~Tv?<*8>Jw0|Ch)~|>nJk5;SRg}LL28Lty6mGy4@Z5l*(4SlOT}y@=4-nt
zn+nndq!t^achfz0d6+=FuB~lU+V9aqjPhxF>o1O0+mw)_@xWY>aP?#0y%{buwP|~C`L!+UZOwd3tt8{oUuA{L13J3KSwLSDkRd-#hgL7-U+E;aEblPGxa-K
zDylR4Lvz@h!p*4XAQl6=*ut%(XKE9_du>xBgQGGzVH=COY2#ov^}Kb;ai2)eQu@_V
z@hXXDU%n@`>s6SNogI2!#&lAk)KrC)iDYD>jEHQWe;gY5Fk%xUcIx(A2FP$Yu&~!)
zjpG~5(uMv$bk2i5STt8Qc4nD#h9V&Krwpa3WiPG(s4;1BN%%qMz_=B2|6>1X{255Q
zg|b=AkP|Anh^&*>Q=2O*RL=tSumcBMn`oQtUjHlTA;y#NJA9fYYSjXPgFKzV(g}wZ
z+}SEakV2SMD}umO71}E;v=XprNr6pH)%K3D0n$1{SLu3HC+VfGWEQrE_x}A_&u1-F
zjH>mPm>)A}v_8EH!B>=a99#uX#s0$s_J!@7$-R1=mT_+`*y#5XFYv7BPDArv30?Y)v?U563urRDJp6)iJ3TM1Ks1m@_@@k
zP4@+z%Z*?f#9TO$;uRKg@n=L~MD73(5Uj7#x9?N9;<+@JP*I;BH1RFfNf+gSTDHv!
zTU%DWzh4kypskK;()laf#1ue+>|VR1GIrKDtSjRC?)(nH_Qy5+(_gb%m%QPb7dH`>
zWru5y0z|_0L^|Hh$sjD-P))LSAzd0y3U=#=s2$jyH@}I)F43JB?_PT%+1e^wQg>+y
z`B}HT8+Z41cQ1PLG7kc*wYfjQQ9hmiaZo
zvlxSLcDrK@<11dq-P66J_mzuq~AZdD5^7C&D`Q
zJIhqdhzNYlvrO$fl#;ip+cuU9kqKkvWn_(I7z#K`_Rp
zf(k?OT#8T*O~Rr27GdELRwD?ufB^f$7uHr`QlOhXUkY4Y$qY0ctw$|*By>p#7BOa9
z5Og6XPEyuPLP1j*frP1^@jUXUR%fsNU}95kDkg)Q+(Md~dc6TYdr#u0-24AtXZT-=
z5dYgBR@2r>9t&OPLRDM~vtRp_e`&mu64Piamf;Aa7Qc6gTFr<#pKi@hh-}+Ne*~#A
zc`64V%1P~hWZbXaKs=Sn`8rTqLSx_xQu3m6AwJvGv$meVb}H58l1KQkT!}&_e%L1W
zgQW{T?<^6ZU^(Zh&^AS=jI9kCooh2iL>jwBlb)qBm4dUgk$hfuUaY)k@?f+zUv5)(
zH@30l?(#>H48*!9#i2pNiaK2OIwK2JICFI$MUUdpU0E)jGbvPzU5z{-QXazG?+n;)
z45>tc^)6KUF?hHf1_mQ=i{J|8C5)FA4w_aFLUb1mOx
zvxNSvk$82sCp(ZuvgnymiY}17IF56m~U9D2YTrS%N*2BL#6+YLwD;I*@ddT(4uK-OthORax8BX
zHjf=tEl_-;xfi;=wKO0b;-)-+&%G)_?uR>{%^LVumBSpR+RL@lI#aP`fLy
zP<)4<(>%-!uk+1O$(3eYMcjJzYI3YCTBQc1xQ4l?)h{aEn7x>HmpM+PX!Q;-rY$Lo
z*Osl>dyfu7@Ceq6SHth#+`DJWXm+QOb*E*Ba|rUJcQi~0r6xNq8wQ3pm^g06Vc!wi
zIIvS2aElthTZ*E-dPVj4vA)>tC-1G%Xg>L?MlL_Wx#+c|p$Eyjh_9hmjur|w{rIzX
zH4n4ltXlmUcB1(L{3EO2qZ;gD
zbFVHi2~
z8a3cG4KCQf_{N6|tF%!0^QX??o#XSb!#4bHK0UYlIP)@!zOCKQ2OKE@dZ&@$R6=!3
zNu3=iA6^kCx_G+f-^RxbIa_FC?sEH3*cJbsUSWp550>AR+~`(ZvQsXx;!kfyT+Zj6
zntqYX*Qogop$uFLL@3z%2xfH1+oFj-O-gD1s9Tnu>mrGX#AL@K__^)gPfd$-
z)r!}ybjS|&h{hIjgHA=XzIs9+Ew5QF%Zo7CFJB(c_{K`he-m?UL8ANohXutCiI-+v
zr-Ab^2D$XMD{fvq99_--FNFSUi5UR)c+c??YJr>RGupFnN>GF6JNLugDbgH2UftY@EHD8u=eDhqGEuNf}
zcK7*!mgT%aH2RgbKu~pF=`Z}efZ#ul2Y*UL2`Z_$6XLbP-5}zO0o`mUmsAeVm`3Gi
zGWnwEp6rMY!T$23i(%XB-p9Qsd_xg>lgLiDv%FPdPK3n5W4vc*FiKmUP={ozzPmiz
zev`7rO`&5)ve)7zTIS77Iwn8UbV5jLxUuR;YpZN|cc1`rxOtw$gRyA-om#skcWddT
z&W{$Pi@RKjCiPVeHzf%a3qvb$J+`X>J5{v!%GU@k}nMjn32j=9j2|0n--IR;$(vku5!|8J{!W#s$F
z<2kU7&e-*xo?fP(N3eaZ*^z9idRmeM&>J!fgn)%02efcrNjYwH#D)zoDgiP0`-bDg~0H=i+>lPfSNh|Q_*#BqBZ*=L}LnZm=9qh^6)
z2%gExtZ1@cz%A|iSM+|0CoO>`L(uLhIh^mR<2xVOIU4a!xPrFHUY)3`^YQy1**{3u
z(nV6#)aIR*{9n=KT`n;}*Z>FTjo{RqhK4j`2fK^#l%f!BN294y~mT5f7R_iA1d7<1kQIQ+#Y
zP{^VLkc|vAs-WfJ;@2uO3*5A7TJmxQhbc`beyw^(s^)KBuS8i5M
zZuQ`&?U2oe=K;L#_JV~EVu&{%gRm0FlK<#a%~WysigG`CXo+njt#tR}QGut;z=v#e
zA(df@gLI=a*5=IiakDYCDp!Whbm1R*X!9XpreJ%Cb`7U}iWF{tMF?&ilAY1f
zBZ!5=fGGmEJMcP0&&zTS6IFb>F1di1VK4wD89lTDMAUNSQ1h^zZA}pSR7LEz3*nXq
zCC3(q=@F&#-#TvGRrvt^=g%pg9yMWZbdlNEzS;k^(F4pQ!p_bjOOwqC5n^55}KJ`U%J*@hZtD=1Xzn;h+Bl7Ob
zM=~@tu5ezU+?~tna-$x8MNc2{?b{1?=L2nnK(oA-`&N$c3zf|QiW!x
zP?-^Wc%`$#UzSd@a(jtF7NKz?dV&baZkwLrvc>5eX|b+(MocW>EQ`&O6dp0ae1FmbLC3J?I4Xy%I`X9m?2%JI
zj?HL=@7c%&t4!9nms~CX7zSYz_gunn=+x9^V8Z(to3CFxog76(&r|@ePI<@s`j5U^
zohMCPmbY&|D|vqir|fDran{kmiGu5PsQ4#SQk<5O_yt3g&BLwWF{U#mERyLg%8h}7
zbM3IOFxUNDmC(?rjlFyYSG&F)=?tEQr3PW+)1Mf~MV^7Zgk3?H6g`i|@^BR=FBJEF
z30d#Y!@dggvJ{;skH?~5EaXb>J7c^hV3K>qvUxIIj2U66^!)<;MJ|1`AP>u{#+(pH
zm2jr@_mPIohN%4BoyQf^uzUjHFCc>&3g|yja2WflVDHPURqZ!E?j`Mg{H4xm52Zy5
zPBJWvBQy}JlQhQDgtau7AwI>D0rR?rKck>f-g83)l*hp}p_YKl4;U=CQwLKz*kn&jm@t3<-S;we7#;5gJ
zXHvFXnP&1yRq30-dXlZ~`0C}~mODDab#@Q9Gkj+sbbai`622pIl_FGczzzJ5grN(q
zSy|`jYlp)Dc(BTLB&52a_eU3^-n!PavOwOJDEk1H2n`{NJk9fXK+n9>e|4Jea$7h=
zVlIjO?ORz080qPr1Bz^3T+W)-`|kH6KR%?xlgkc2i;4M3NXg}W`}Q>_M=RadbJ)CH
z-d!Dy(v!;{L_WLeo92q0=dl$YyuG~)5$c|1fvZwdIEs0Ge(3=L4^;#g{qxp65zDpU
z5>a}n?Wp*iT(Fw1`I`?Ng~xCBeP&}m64_LpQtrv+brOmdgDy9wY+2f|pFe-94|oWATV=fvro~Xt
zKu`bE-bl+*6O$0WPPLfKlYt|8PpP71$MCYXwWG%DUHAFkRkIzW+x*vcbm>kb7O~LR
zVA}b;ES?i9O4~AUB2?Qf^(H;*I{(jF0Dcqf&82ARqA?0-td*7G=86{vgj1at`ikLE
z12S@d)-#%w+$=Z0ev%ZT;Mp`0Q+wRc{6uZfuPxL;k&+7ND?QMbhXXo?PfDAwch$vCps27`m}OK`
z!dLGzAy?emu2n_eEA)S<
zEI9YX;gZTp<5zbk$wH8e{N%||<{;83M)-Q4G5z^hwx!!SH
z^mVl0P0@;K5y2w-uR_<7H%@suJ2<~!7*p(+u;p8anMM=Vu|>D6$zlz=``S&U!;y&L
zvHGY&1JUoc%@bL9qfn91sXB%sJP_1I(ltV)|c31
z4y2;DT2EaMUFTs7){;_E3{Lg7wUVyJqj#W$fje`0l^y6@&y(UuIZC|iB`9w%Eb(s8`RQUm&*Taj-Agbuvq8<8Vb|
zz_i=^{O`&7M0GF#pHbE~qZPISma4_d%!w^Z_vkpH{tNpp#=i_IuS87#Lj!B6&yZ94
zhyT_>#^Zf^N54@cY9shDxOXU^hhfPKOC?@As80)PJh;1&N@G0o>Aw)Dr<
zOl@$FC_9-rZW30ut1cU&Wax}(65@Ua(PpW-@qv-FJ<^dHdK?WG@`}6WVad0d55i_n5bxM*lK3^JzKFr}rL37B{Us9&R&R`ga1F>4f1vpA??^&Lnt07@E(U^rp;O|671y7oBcst@0`=?GhF}J7OLT4vivcLr6f&
zquPiukN%80{Ew*04*cKO8bQ@T>hmO+YK12`zZ)ty#Z;q|pu3~l)cb4%!7`AkEMY@f
z1syrU$kA!drrdy_aJPmaVq0~*h)KHE4Yi~5J;(LDg1M0O>g1~pR&}gzk_h3J3kK{H
z^M1nE=l`e-J6XB!R{sG3@@1ji;7hJz&0j%z0A#{Nu81-OoRD5{GKJUgdwgA6dk(jI
zhlaEE9o?nU<3fAiYx!A)gT1-ay+pL=z&GDJQlnk0;#;pJkb1i!D4bxyAhzUf#4U9T
z`c@vxgoX+-24(`lehBdzCa>*pdT{tQE2hdZ;Ii2TFcjvV`OZ_k
zq3!%4M5l6-ZUae6
zn$gj^ty8|H^5Y!Rjn;GqJ9xY~~&Q4yaENuo5s}A?XB5(L2zG^6lr(nxa}Hp8q_p87;Qqn}X6qfpVhCXFz!VQA7SRNDRa85K1(n@pV9
zK|^=ylJ`Y3u=eFCL1<#&Jkgu}x)|(11PES1SCFyJ#80q(Q@uVU{Q<*{(b?W
zdDLNmqbx9~qUR3cQqz6?Y#xO9Vx|Diva0j*4cop7xRSeQ-~K72kwG+$umUVmuO
zz)UxjgoT@THwoIus-n}{3H}?H%^1}#!IKMTviBhqU4;_OC*$V{?`PA~mwxE?9N#f}
zdT9Z1z$1_XdTk4;UNYv(rPAZcJ>mtMd&(qi^>EtN+Ynds?AY}RO;1oHrGan8@tE0MYS
z1Tq(N_?9b`frbyuZa+AY
zq~cmClQvmpIpG&_Xe)BFrUk!&SWkc2j3U1+-1O|@{rYHD{>6atCa9dkSMH@DTvvK5
zZQ(GM99xwr>M+*pko0-YPUYvDgqlkF;HQO=6yF~yPyMnB`ctLaYpaBc%|VIXyzl$>0b|WNl*%Rdk=nu@Uz1_}Oe~Gb_Td{yArTSFrwYMG
zC#>PUeM81u75I(^lYz>`j4H#R``co^`MzWgRSPvdPeg_-=AiNEg@23d_4K0^H6A8i`+3Rh=kRZ@xXA+<=y|i?%n@wC?}$3=_7VMGaID
z5CI8TO=r;f7QWCEKed|nq#!o#R3LfLChPp
zF3%I}F_AZ0%{g~za)tf<`3dfUNc2D^JKNVg-um4n+)cUU{~E#q}g
zQh*i@2p)KUvb5x)BU>t*b!dXGU=pyXx5Y(^O1rAkBf5-)x8LaR=O;$t=}6^|cDi|O
zQCd*;2vJbv@jThQ*St_b@zRrX^G4ExUd#6W6MTv=x-o?G-dpBZ7VA=;VnWbQHYcpe
zKMk;R&&0ZfwENpo-%(voKSi;f?7*zWWx7mEhl0~{Wb@D=NO&|rYrflZH#;AE0`tD=gA~*l-}mudaT!A
z|CE%8KI3!U@uhyNWPp9jY5w@bhYv+}cXH5X__GJsXSwfg`o@9)^f~+9@=821e++uE
zFz*INC%~%>iA-$-gKFj4X?adT&=!>=j86fPC*2~RakTNTC$S0q_-M3-38Cw~41sF(Uu-k+9~YRXYKf)a+u*@FB5&6Igu);
zr{Yk^R!+ujZ_(#&S=9qD9W}5MLl(3y&k8k@|ExODbZU9%TBeGHnQbO1UEL*6u1A!d
ztjerx=}hlb+uPSmN6kbS-QDrN6@f|3yIWfH*~?U!r;7
z`6nV~O;~!YLunfd%K;w3Y4sh~mxTN;D!u=Y-a{*r>i|^a{Ujhe%sWcQuJe54&ZvlL
zZL_CAddrT}N3QdqdD14P5wo4@I!}vzqi2zT7)AEicI)<4o-|8HcUK|X%Ikz$8HImk
z-e#Y{4_S8NtiyW7VZ*VUzZU-CdF+FxC>e+1t|!t>q@VQ>Ep#pS6UjW~1}*0_CL+fC
zg?vT$Uk$PNlmAAU@PDO#|5;#c8SH_?&A?(;Zg?eNe~e)+RN|53eEN5^B=jTVaf9wu
zU@fROc#?-oc%V@50#AX*TE^V(8G@6P|5Q^+wm-oL2@f?qt<4*Eo$o4^7|^LAd6V$Z
zEwLRGV4Fx}eZ}yPhZz89HkP#X8s$(W>v?LN!gCZbbE3MlGLILvG03z{i
zX@)Ev-RX9#4v-UlyuH{kSHG67+@N|-;3ok|`R6+k9VZNoCs&>uDg$?RA|4k|{Yo`r
zzHgKlOJ0I{dU}!03mgAe0^xy2aUBic*(t3J`~CYVRMst1HbbDyeu4z(D{0I2-%Wt%
z%xS6%!Nqeq>^0#8`cfLQtLG?ZM6Ky_a6nu@N(3&f)jM3w1YIlU*jP+QM&S3nH#H|M
z8=U|yvaaH~KWfP8pYoQ{*W($J;|tc-V|Th%161w9e}(W>ea~^p2ArleJMD@!ViPjj
zcWs(CeS`1Yr$-16qjySMjVpO(RJSc4>H=^#eGZKp8je2^W3Z!xsn4H3_XI_z+13jO
zd$>lj{D)n!R^CnLF!y@(?|A+LBvx6s4B!}~^BzlQdTc4Rkd}yC{#CH9H_{Ab{Bq@k
z$_8m=y)W%ofdW})I=Kc!1lBHqYIf`~mb0mAS*Z_Dc!GIp>lb8~7Q1gCy_wv9Fc)1d
z1ayY4GUH^)#IhE5?yDTNT{jr&Tz3Az7i%}u-H5~|tNvel81SW<
z=+d@_i+$9e^Qnk_wgJ>QI1G5k_31X|8}*OpdK3~9mOM-d(d~m&V#R*+8Ni-GP_qil
zPR2zqxB+g>0Z{TCy3F!y+s`1>jEuO4vY}oas}4=6cdr2x!2G+E1f)u>ty`eV8IG=P
z!tQ4aiM&>>U<(u*p1euX#-1OIjR_X&oHt75y2rkI3Bny0XH2l@>~65n^K!3ltUY66
zW7VoHX&{ZRj)7&4Wkp4nBB@8B8$)Sw-rmSovt->c(vsDj@BZwV?T}(1afjWRnGIxI
z;GtX1*~5ivDvfq{7F~C=KMfZ`h8x<&!X0b1wba@f@8U~d-X!#kMdX&XJe}p?Gg4xg_OtZgg>?NYC2f28
zeB{+m8dR(ew%hnCB*Iz8+M)$)$3!CHJCkn}z)Bg9vgYYXt3J+7U
z1Yde;&bZxlG69!u)h!PZR8&-$>J;9F1V}xv4ha@vKJ;xVG)ui
zuL}k5lH-GS!I;3Ag4!Phi1VGr$0gr(WP1v&I*0(!`3?>1n}*7PDn>ZQm1&oW=0y!t
zt>Lbzw#TZKw!0CdoY46TAe1AQ*6XfNiDVuT*DMM}`98Qlx|^qDU|~6rb~{*9%!FJ^
z*xTE?USB1JKF0Y634iPGfIQ=!%vm^lgCPF3N!m2D0;x55vMZeorJTT1yXU@#GK%Un
zwXHpg1)Hy0UbXmGor2fJTC*pElu+42+FSxTa9^I*MKJJ1cmf@6(uv!)GTO)Lg5Ng}
zms{6HiltH-A%g7&c$ZTBL!OPSF|}KQwH9Nn(!$;kTNA0zqaQqr`IsmAGVPO{9eZVS
zhE$EU)@8So3LY-5Sn&BCP-5NgB5P*KInk5)JNqUqU^h{7MBa5S?(8pLQuv%!VIl$P
z+s)(pk>lQI%FewrDzJcecgc()f=N$4My~C04!5vjmcVxPX@yStfcz2?5rWh(7Qn3(
zjWSc^#>Avjj9@$Z)4g;kwsV84$z_}D8?2Xs$amM5(ZY9Cdg)w_Y!uPK;QeuT)=us1
zXt>!#1u9{>Xe>wuv2k%4E4Ps5ee>(Hqo8F3oRkwfD{4lrubx5;35!@RV7kX>v9Xvc
z->6wixtwm^n$3-aZyxSc;A;wPPysr=eRl%e*zR}RJ?cd$$~*i^O7&tTw|+h#fFSDy
zfR{SAxBVm_mv}7j+cZlvzI*p>?yj^x_~VJ}LFHX3@4CtHZq!81^K~VGrNmoi0%PcJ
zCgz~L`Yf@s&aRN@>RW>aA@5df=;qf1HXX5m3?Now0!r@*9$QdWy-xS$TO{
z$%=R}k{vkL-|2LBDK^V9GBd}2UDgFzOT}XV_>2KT0k)bu51LgoWFL);j2LdNE!)@L
z9&~qhfszX4Lj1fj-$Cp4m9hsC%=gg8PcE9V(XqQ$kCvV5K`*$Mo#aH%
z44wBR^}vSXSpUUayBo`{c|KLXJDnm8qUK^AZX37*iU?NOnRqKGg`+ms0Ztw^e1}%S=>d`*8IbHlri2x`%j1%r}1|J|1?t
zF?WEDg|)JV_XzL#T8`6>@~-5J%-grVqPx3tQgj?te#w7LK^@E$D(db`eT_V4`7pmp
zr0!T^u@HQ;Q0Vr+1Mod^;ElW&7iT|Cf2PUd>=?M(F7}RzIj&T;KA_rhXEHEF$5RI0
z)M&NCRr>n=ex@MAF~pMeS|<7V!m(buYYP4GBbV(Jz1cj6&Ot>~rn0f>xX}n5Vg#
zgSEDk;o_73m4nv3{MfIUr<%}M;V%Qtw0^sP?|rP8UlEVM!>Q&`S|FU6P7cRfFd|5{
zk&4!EV)2}9{eraD3AuIC9t#Ht2Ls4DF>vWWp?R6PIXTyGf0tU#BCQKLsib1vAs12G
zv0|6QF~2~B(4_v$JalYpZ9GnHEn1ZKaPkyqx|}mK3!*kqPw6QQ_x3WK<3S*)-?nup^uGFB;E
z2?L*9F
z%ZH{*EWVeQtCxS{;N>m{BA^pC7I59O)TJHa#oT@s`|~RU*lFL+9n(5U#k3$*hvzF~
zZeC^zUjirjQg5h85+dV%yV64VGuJW6WkNe-VhDt5)29XHy>hL0*?cdV6Ge|lYfZ+e
zz%v1ydMEmc#s}Z!RMXD^6+(Z54^^)~n-3@uLiWj{6=^$abRS>IQ&V$QCCbAV
zjOot2Wd+EaqYR?658E?_(6Ib=0+il$DCD`(QuL>-Tt(5f)Kls2|7kTA+}(myhOazLUi6(&TBT;IwZp34
z&AQuMonMRycOrG|$2?>7FWp1w3x$*_FVv;nJwxFAgH6F=J`;*g{z#>^K=%EbX=Sq^
zFF~}g9ygmL7Uq-1(HOnu8-ubscoGk-tam>%Jjl#l$6Xo++U?)H+O_Abpsp^NKNr}q
z)W#XN-@VRQZ1~MDyZNMVZ%v$wwf5T#5rlDrb|zRwYY4b4zw-xv4?HQx
zxv&f5K_NDNa_5if9Lu&i?*I#pVpr?j>0!K3{|_pP%(a7o5D-53m;cK7#rZI8B5KgM
zb$zB!TaL`iZ|S$*Qh=RfxgLl^|>ihp$3lPyMCb1ASl7)Xe5>SxRrBpB7RT#5OD+nXf|<{9&&=q-eEqZr%1oww+50hW80Sb!
z)1P8|_ask6y?;%MDfe323!#m)YMGkU=neP5yCh5`y)PPV@dS*JQdVmvTWg*CQ8#6L@SNV
zfYsDYT`e?dOU&NSPRUf()(qM2jhC;kHO(5^S*K~!SwSRLX<4v!4I(02dtS6yqWMn0
zdWiBw!jv@9cw@lL8>YK0n77
z`|>TMr*Um`E#X!
zAcT~}#^ZY3J@_2xL)8&t2yFmAefn7uIhl4=pl;*4`+MiFDG#ck`ujag*+@P&H8ZptkXz3fq`#&?M~
zfmE-aGqnBzvGfcpwX940$;%hdnV2KTKU_}jZq)C_0-5cHW~3qwLq-D{EkiM~IyC+%
z3cYRpcMHZ%Lok^?-p0vO83sIijHZ`5N^;IArUY%!rlHddq(P!*JZ;Ifz(hF6T(86)
z!yK_b1X3XRFo^F{RWzW|5)&61rs~181pNQq{K?CQ^DN|0Vl=8owX4J>jJSBVc3hUb
zRICKVUF2RQm9%2^KTBI;hv3ty=2oyBP>Um$O8T*{tzr7~!EO<<_QYcSL=+FF|i$zT>kL>P$v{r{h_;pdB(T>2+y
zh@bsn=0m-pKXVavC$>tOI~o|%c?;_OkaU;sAGltp!0~J5v%FVMTu)b=7<8oas&XE(
z-tW1vS%C0o&-bPzr6i9h(f(st&@US!!BZ;--lrUht`;7shi1Y5=o}TBG)1u+84Yom3~{YA
zk{_&swuP;=>e~!iPj=v!z$3=%QarpwZ=Gir4hyh@Vb1
z&vH1sK^9U=Ku3+-UKh0A#Lndd7Daw))KX1Gs|NYtWg(v6QKj2OOZIy?2nd#@n~dgO
zSI?Vs%9izWXQAsu0cLeJoMEp6n%hC%CO@+=sIIgc@%@#FsC{B&F&lDA<#2PrBT5h4
zVbPmGn6(fhc%yt7x>CbP2F?-%qw6DIXy0AtoWS~&LLliiU2eB@6Ap({kr{krOBq$g
zaZN0{FneT&@V=uvHJ6rbQ&^rp)%{IOjUB9%JlJE-&SL9#q0ksqrqzE(Byh>b8;{AR
znR^f4K6EvCcilCY4D5~llEN0p+i`xRmR;gFdw1_L0>WsSI?4UBev|a>mu7#~6RD>i
zub5~3y-$f>CYxDbyG$-UfK0b2%H=Ca$iHBlTz}hxxoZDAt4g-Ont$$O*qd{!_QR8n
z?<*bX16jO}G7O*i^5+i@7D24X4_0ucgb
zmGx$5BAg`zbe<}QyIaBxNg3M=zTy+MlS^35W?+15FYWmMiu)Gmh0)z5n3pdYJBLWF
z|BlH%Bp~>cosH$6>W|pZXq%wvDRmE9B&2UoP#Zr!ZEhM5LFP=ipGjHd7+@`EDJfC*
zJnOh|%`q3KcIGm0x%g1ToaR&eVVz;BziVnK8h%y0`MKFe6tNNg2{YT1D>y6{Zd36}
zD7;Lyx-bw&9TxV3u@|1sp0Cf(HQP#AGFuSAp>p*;{Zvb$wg|;H$#@}jb9lcqZEw)E
zu#uQTsr{YO*x~88(dQSV`*cdb{*D9}@uxNf243!zdhxH?85i)Bw;^(;E2cCO$Q&=M
zcVn%rzwmF{+!UR->ei=l%E1;tM
zx_5^jdMHULX(T12VFaZ?S~^6!OBy5;Bve4UQ@XoTKw3f?k&^C)d*=6j{~Q0i)?K$)
zi^cHHJLf&I&p!Kk_H)j>E!J=Pq^Q#`
z+^`r*h&|^~0;Rg{R@ZoR?2cy?vJo@-jzsQmIkci0cu1+cSthllVP&$Y1|vgY^r!Bn
zMOf;8x5vgMR1ocJ>*^MgbkK-Mp@b>!=%qoZ4tJ*k$KWzhAOj3`|sKHeEaVa|z>br7+z
zpPJ6kVEy=(iUXnb&R!vTdHL3#e)UXnR7Zm1S%;(6myb(!H8!{tIDv!gQ+yKWdMF2Zi(Z*T06@m$?c{|PR#2i!;!
z-sF;Zr|w;LZ0?)1C=hf|t9urIXeG+DDUDK%q4%1wXy6coM-?S1nj
zO^BSt4Bh`;KvT2)Zt>4vk#wLWOuO-#+hktH;(pK}4W%86!MD}V;_S?4j2~Blbf`CO
zkNPdPnB$i4aIOB2w?8Orci<{2G*e4Wo!<=Oh`kSIP>K$khD01!)I_LT9o91Z9sn!4
zbT&ZCbJcFaot|`Dgr8@$W$1AkK6iRaXHP-7bj$AqCyAn#_&CfiX4&L}*7O(OZ1xZ4
z(}j5~*1(=)3*$>d_8BU1cZzE~>KDK?nv2P7v^Zp5nji_-{tAIdQ*KX}w)d8}ZEhcD
zf8Xx7{22do)5&ZowJyW!Mn{oK;=zmP^qx{L(yv^JCcQx})`3Uuqx!q~>q}Ge_laq{Aemox-%n$sp3rV38iLI|c}^B4fAN
zxYyK;(rNOObq^=B@1E@PhAlWjmXGl>Mq{X|!&|6X3Xvc2lFdSsVd3wXX>L(`%J&~p
zNmyy7i`#Fve-3@}_MkP6g`Kq%oO_d1dIz1F_f#0a^S$+ZY{*Si$C3J;V}ELOv|^%w
zTH*oVdocpKU-Tu9I#!Z<%r}k-4bSk%W`066Ca8kMeDnD7@an69<>vy9hR@S#H>hTYC9h{tb5P*#miTQ;dAzh$*%fzUG0Z48|7X-guv#Emois@Ko$}Z
z;*xK+c7!%e#^n72c;KS$`CyD$i$s<_k;SsHkgRr
z-1#fz;Xt#e(+V?VAKf9o74DNXQl78Eh!oW|cOW)9nikqBQ)gfpB8frNYvlF!b3_>ivJ{ns
z8=j0zTF&&Fk%Er?Cme4#Zt*Kz4{a6ezahVfN|##w_TX`v1QDYQ*zamGH@VttI`aO7
zQ*i|*_PSzMPqfIWQ!YkT-t-^W9pD>ib|k{(CIvGqn~C$2IomgAB+X^W^&8RYP|?wm
zApzhHuss`i>JWw9&8@9xr}c?x)iEUB$R1CfO2)V>wK^K&JfbKmQ`
z^44Yu$?L{aS1IHA)`<$yZuE|U&l~fnw*`9uqiEXKd3RJv*xYJP`eq~{7&wIAk#9342pE#cnxc4;g{D`+U*T?OoK@F3}@dcaIE=gFX>Qhcv`!bPb97UDb!3KcvC|G|tkor-3
z3^n*-HnJ+oP6S(pf|`I?8Q}=cRE2Sg-Qxzs`^{`k6Z52>Qaz`&%qXmU?9cH%NTW*I
zMN!Eb^n7yNZpU~})fYBJ_OHWzb0X&*`*m#kBx||D8c1OaE)_eRLTL^ln9V6^!M2Y_
z*VJ@LV!8UC1BS^bbkcu!%R6I{%l-_c&h2()&sP;s))J@LYBXc_^_>cC3eCr
zu9(2Q2t^SCYxjRe_WudJ{U>NQfdyiVF(}f?>tM))gyC8638Y8F
z&$XlRQw>_Ul`t{Ufmo7$ATl5z3(69XY@nI3H5FiIbD?tgOx>{T3lU5e6`~me3!u<~
zeI-;wHqJ%V!kIBRj*-4aJ3Q-o<7(+K7LhT&VI4ds082)eMeSV=0yk6enM6iEfJ?Gy
z=}=@+H`oX|F*f}HA7#;gq$wxQTox!NZxis9l`$BCHE+L}1hz?4gLgM$p2>%OB6v|V3dtxKMTsxvd5q}OPf)t$aeiVFF9;-$s^R1JqX!AEUl)I|
z3SDvE!jVVBg^z<_j!mv0GW~G!W=+qJT~VzQN1@(zaWx*%_0bB`#-VE;hV~QMu!xG)
zUg^kdA+B5MVA8>&B4Vh+zQ-zhMlcDXWyw?Lp#+8)q-Tz!Mwum73Kyg{Z
z?Ns^?M^LowgM$d$$C%Mj5Px4j_;<+3%?Ztn$G_O7!?n&%Ze
z3kwSbvNPuoQIR-q`~CHLg3E_GTD+Na&1Nh1YwU7Q+bv$6QZnyOABd1oUsr7@WBQ)FF-Rd+gA(LiIzk6PJyj~cdR&I_KoJ&5at6{J3+xaO)(`Q2|
zu)-{HonOB}?Xx2XkyKLR7r)->E58f8K8W|flfl8kS^l+Q1Rv_g9ImV=yFJ+Ve>dWH
z#iN)kfL3NV6YRplaWN=yPhaZlwjwgp%Drg@=6U019_~nbP+L4miX#dH0n+#VZ=U#U
zCzh?AY*h_cI@taSEv$&s@fsxDXoyU%GhSWi7+&?L+mD!Qz16jnlUtmX{8zL11`t^G
zW+B?J7gW{c)PVi)*yx76_4LOyPhRnlSL;6#nVRcXeGz5%mDp$}?3nxA(zJEO-~U!g
zXaCGogh6O<*9CQ=7|dw3l|
zFemZ6p#b&BbZNIvJhT0)rjI3l`+gfjP2PK95?54!pE#I#gpUltdngp1joasRb@D2|
zlh5}`S+tX~n~0b`x+h@;5kH+n(`
zeobbly(4LdF?=ote(G^omE$alRN>DF>mCeFq5JT>*&%`?e7ZRMwtxV_d!+>(k2EI^
zuWO%xGf2q&-AtMN1oo-l#%^wLv9Ppzv>gkQM>_z{sD6Gi>IIGAdw_*k8unX)+b(;x
z0b4{I!O9Nu0Xr|iK$0*)-kx2?9{|?p_oYP}`E(?L<@&|L-J_%aGN@tEdBdrWpu31B
z-IZFq0qZdOcDHHy(y0OV&p#pve
znrNbrcNH@wH_2h)efP_ONvzJYLzFM&Y2fAYy7BhZ&bq0#EYG9AJ=LVRTqS%jV&XJ*0sUMgFsv}Gp3=x
zr{gJjj6>BqMJDt@FJ(w(CMUzo(%#ZUYbf*DJAP@?UW
z>hJm93osG=4mw@P)U`rOl8szCC$sTO26aq;`^@SvF{TI}i7M+^OjEd+>>>KcIM~uZ
z#I&-r#%t0Zj2DX>-T*$Us)gL4MzAZ}`fY(VMOs=T4wm%nZBF3>v8zw~FJkJ-Vg9!@
zTo$6kijz!Q2yzlVIuNrRc#iH!gUTTewimZ{>2B0qk4w9!a-(~=__mcd$`C}N{qqCf
zg-BBC{dVk{Uly3raW?V#oZEe-|8Q-V-7Z`=qV_*4W2c^}Cw79XlRCH!pqlK$NAn=^UVK+?^d0#Qz
ztBrpa#I6E7#VVpgY05<(8py%H?V*AGRvKbWqre-e5r-i9axCg!MC`|x3ykshqjd{t
z@mrpFV9f{d7H=VnI{m+1+n8uz4V2pi(z%Ql_
z-PCPG6`RYP}PxiNSE&L97W2p!$zkK@Rr`m4aZRS@2bP)Af
z8mQk8urGNw7$N{^m$RI1-k(>uJB@Z+{h-HIu4!FyJ5{egrMK|io~;3yIV
z8bfze7vwUT#~u!nW{j@(-ul-InDh5fjn9VqVyG~PwfXIaM*tr&qv?@cbqXrB8K}wf!%Nf{q=cN13KIjg#Wuz&si^FtVGb-;e*M7rp#W
zQNK_cG02%9BDQ^I&7_g}2Ck`3I@eqGSM^^UiSg|$i88nDQ;$ZXueR>XVY^J#&t_0;
z?0Z_DX^|zXi;%lmGxup`f)-LG{D{9aJ9fyki6n7lXiz)l|?U+
z3WoOM$peIXF|HnMygDU(a}sy2_=*H86vx(wog#qH0UHGZMg@=@*=ul0FdPub+%_JA
zX3kDIII~GQ$OYhcpTFD3tFG$oepdtjc?P|Bd|{c7Dn4?g8gmCPHQ#Z<=};JZ3;~jJ
zIjeIWv)vJL#K}+QGFG&zsESgU2J`}n6G@)*3yNXMX}-s=1c*3F>^9FaxV_gIg5l_U
z1}#*O6nhCoe~F^!L7QyYQ&%?Eof}+54@VcQjErhu3qWje)JqY3%lN`a%vHAKakpZl
zCS=OGsm$hLR77c8r+^A`0=(&C1JUimIj~N;J~A~%=GBUW6jc(lFXY}=XtyvLety7P
zTw3F#NdhH*K2Wq1I?gz~u-%oC7=z#e0^CT9ScsorCJ>%n-po{7!}3&0LraUAg`+^E
z^MNb@;MKuv3nZGN(TR44h~pp@IeCO*7bSS;!B=j`Tr)+83RCvk`zT9&-9tB0LdC-
zfy5}J9ZM-}1?z)WGGUKar74D8y1jLz-f-z_4n?P$#i)h%s$!*tU{Gx5b>I8>LmKl;
zy1p8`y=aXS!nFpIJqz%ftT}(3^?;G_tBQ0f&Q};XbCAxK7u`7ygweYx4eFW<2t=zD
zhX2eRd>xB+v4(EdYq
z)|tkPds)g8jq{l#nE+OkEEMSx6`X~*TVcc>CG*o~r>;C!0CEVR6a|Hk2aT}7B-{-B
zIkkvZr|?g<@3Y%we%mFX>jIk6WTw@b7h7&P24rt6CkN2V^I@C0s8O};(twKFQOItY6^twA<1c6tHaI~Hk93#&XD
zhq}F4`|lEqkRk*-%J(=Y7J!TZHdJD|=L}EQYC1u_Fbk`lZ)|ET($7Dj;~!ruEguFt
z-|pc;fEE0u%&d1Ct{{gIC5ZCj@Ru5v!p6a!n|}{8tBOeT!0z^CP^@$V0Zf$`N#2R>zpswNbvzy!^Nm5vdjm4t9y+Hjp$^yA*SEY>+9d%|Vh
zNN3A#?0l^7APoi$Ruhu=e?SL-q-dcVJ`mhs~>Yy=+9E{nv2(e;KR)e||I5U>k)tYre+Nx-T<3
zzXC{HSDd%x%FfSD&5mmq$jG4U)h!J*>gBfmJF#V{qAt{K-Vy`#5q8_&*UL1}-*-*%
zLVf0C>DzauAuSkDt3MjFM9bF&AZeyF-0eF_wji3(L
zqK^j`0Q|v;6HL7&W^L}dMa2EyT1d;Gx??%cD=f0lICsY#7`=9grtgm=~
zsXg5*4FY`f@9Iq2u|7Lh)cy4tZPmr#P!@ZR}6||+F>;w
z9B#ijJ8RLy&y7c|`YU1sSwofckpOj|Q*XwH50
zPvWs$-}xfOdu}spe$WU&Q40S^6zaFKsl`(N4mAU#`sFN@%za}@x&LjkG@md4ijk%j
zad{+z>s@*}%NneU*UPGE@ri@EtC`nYPq+Kf6BOy_Yq41?TLUM
zZ9!L`Q9q6P^@Q1EDf797QT(iMs+pygox-b*3ZtclYi_N_Mgd)Y!wfC<@1wv2vRD2z
z)UWC`*ajZI)z=hqReI)NE>}%9Fsr|3
ze!;+`TuKcQDc4P+=c4DGBj!6qYP$GJR`4Vy#U~MtPjR}qjf0;-Lx4Q#(t(zkx3nLL
zXaTAgdEcLx(H=5x$|c_FW3IX#7e}03lu!C3Pc!>+o-sJWvDY_(QUsk;m#b@+Rno}F
ze_+j3sppT}>gW=U?RQ|fQ~_Uc-y=Dr2zntFUhUM6G8db#=E(L;bR%4GSM3wCpae~8_#?3Cui
z8cGo$c#^Nw-T!1`?58uU9dvVdyAN39O0C{H6RzxH?eVk6NrGZ~o_dV~>b5;hbC6?O
zgdODFDd>PTy|7Q4Nz*a(nXUHX{46VZ7s8-doUciW4I3ENco5SAV_z=}7>CG4b6pt?
zh#royp7F@D@>p}`a
z(EKwE8{FvV?+{$2GJj283DvJjdN3#Qr{RX+o)u`|OUBAx5JVk*L?)M5{pDqV2+HB~htC*$eV%T5($>1t+7
zPqF4)!p%6&kL$5m!@Yr}E>8A*CUHFj*cryuynyYTeap`%04V?^j1n+O;@NPEwLU}v
z4pTO3dTOCqH0&vMZQWc>(EB$|0YbZl)z|TZQbv0E0iy5U;NL0d*B8K|OZ4K7YC5zM
zLfPDZ_ev+_t%FnTSi(PIRk)0pPzifsNxF`IU!izpj*$yy#^I8e~s44>7Y!m#C
zE0yD@;22A+)gt57>&mk3M_FTGfnk=!zvGz+#x^@Sg%BTk{GYhYe?=AlAyfH(eseUm
z5~!5aS8~C4xkSX;48ri
zq6^KVLQ(&LN3Y2-!ME~ATNlaJS;&SdBPq+?)%_-^BRDUG4LmPaOQwG>{D~3~HxesDPQ)*sz9)!^
z)zD`>`yicD@Q5xGO3=@(l}Dh8QS)mju%FWi)8t`LIl89;s|j2(6bZA*Tlsk>$+Lf+
z@R&~eM?GUxBPxqpC+f~q6y{N!ENxC3v%}}&%>G2P6O7yCR8p`^ia3C^2h%MR|yQf#}1XWYWo+K_Za)W
zp@2d*y#%@+cO~y5#8Ce?(a!6(%RS96YMp!~$)|?9N}eGw7+msYvBZm_&(=>yb|c5$
z0RHdnh$2Bzot~I?`5XfV4K*fP`Ocw*t^$WoXaFIWD7B!gK~PpiD_6sR`wYcHz|`hc
zx6U^<`N9g{9q};2SX)2w`pJY{w8>+hoSkMj&AlI2-V71cX|ByQIk|IJY0^XoXn3ygQL5A(f@M?E=Eqz|&^P_=tZ6OR0C
zVKBR$vTD#cGikWqQlkcV{h%t_HJL-U0%JF0I~O)br+#=$^Af4d)-$22vN)
z=rm(#_#yfQP*S4c*E+i&un}d`j3P+^(1p{2nkv5BD|Gl5s5!!WIz*$V9yN7
zvc{la+t2G_Ky=#N(ICquyQc~2B51z8eu#W7$l;Pl*MQXP!zO%_-NIbQCW9bbE897>
zYN3@2v$-axL1odm_o=Vyl4sWc+{#)MRa^@#&4zZ-@S7gq=>Ak}W?dsopV?4L)oT}S
z0|;`Q+DOKe73BYOUG|UzX>0dp-fPxzz(Ecvz%6RYr;hr3sb${No_o9{op6potnG7c
zciKS$8gEOwEdcT}K+hric0at{%-+hbt2K!Epgl=1Rp9*O>fpNWZ~5Od85WMS-yX>x
z?fdu)c25rV30~S0N@#-z{aX+qd2%d~YMU+W1Q$~9t#sfj
z+InV|ikv3)TP13@hP;~Qhu9OlsHNyH8YV*iV^|6h$Aj$WP#NQ+Zl|EdXuH#JM%Me4
zIg<$l-^8)MBlR7M5S>g4Z2%On5na>`WB{*FY=yrqs$`Z2PJN7D8Rt_hZpDN{P*9Nc
zuj+|%a}6U($WZ74Ts9;^A>6gjIL(XiBKDc}hJx7;nP2sf7H{%WkeI53W&$Ervl}eAvRj
z*#CNWs=jZll~lhm^z^*cv6H~~mY2GyBpVw5)R*fwzV$vEgHw_RW|8fU-T{+5n(>1V
zwc@PyGf%ej2}NdRH!zy1*<-~jIA<5)`_C5I&+xMr{M4C{HA$x4=FhBpyTweFxHp(N
zUYE~RU)62~9PhW`q=-4#4K8jR^|Y^Uqfeg|#htek5ALB?_^*({+o6;*2L7n4_J!TW
zi7}}#f~GGu&9Z(R9Rq9FDb)`5=s?etQrQ{1M>GBp7q|+f3;36VVg}}{70aKk`Tvyb
z&)!0xnpgpQrn)I0Peq(20dz0~Cdp!J+;>d_pU{LLi}{KxChJGqiJWC+HRCWV3j(ZDH9Gby66BB(
z1Yt#tlFm5>du40-4*nn4-8u=^-SZCylRhVbmOb2>xse~xxz3idZ$IiNxshmb8U+Bs
z4zbt#+uxZ@W57B>dzm0p9`KzFk31~(-&|fm&jQ3T#;ba6PJ>%X;X*a)DSZGVc2@VV
zBJ@PAuI?xh1atSi&N~zL-`aqWyY}f;%aC}Qd){+9
zCcN6S%M!aCG3d=j)0E%%<=vp9FI>__*x`11ng&;K>27K3{BW1cg8Ik8PeQxwk}`=q
zA@6jx^?kNhjpq#9zvAdwf0xbjcAD&zN+7eM=Ba#(is}js0BQYBxQeT%w{r)vk@J}Z
z12|u|k6MT1JS0wTC*G})Q%Jv?=#2CCZ*&HLP;wQ_X2}~r
zm7{DNI9Hg-a8?A%+O~ZhXYY3F^Z>wqFqAArl^?Jf`Xt|-H&2Or|Aw;JvEm`%O_%e_
zZkVkLi(ptGss7%8c2)K;_}wN$+tB&iBj$d(Z~x=9;N8^ORRl>M7*s&InoZh$EVo?5
zVJ^nij@Q4XTV@`4<$wRzqvR8}M;-~GU)5L=-1u~N%DF)+Deos_={|jI)VZ4A?V&mQ
z&mA!`BgXKW+aODwt15{w&hz9*Eq+#aA(6+xmFe_tg0=t7q`HxRhW+C1rmaUi&+i7C
zU35?E1QSQGc4nWci@V%=pFq~+_CZEd*8B0vx%VIAXMsS33NpstI_}%lbN8$fG^_2`
z0UrGMQ+x8JER%DI=$srLU7^S6^@g=;L?gpN=L?C|M}NXrxpUw6jQcr@mAcA@w;)y;
z1kYLDKh-pwYlHX~cowI|OJu;}I+=NeX4~+cC7jdPLLionp@*7ln>#z5pUv_KcyWqf
z)er;sm4y?~J)lSWx`Y!qZZNkmqzhyM9FKN9H|hp~axSIqt&oHWb7RL$`lGXr9|)a-
zwh7xwz0*BSsSH?an*K&Z0@R(XZQ9-y4)Dl5!-6b#e|v!XEEDuQka(R@J^ea;rj%%j
z7D97R@AqT8S$DgQ)Ts7O-$P|Duzwq=nTI6Jvu4UKDiw8Bc)aX<4`V95$U%XoFkn;D
zzR01f)^7j!TVHluem9nyK-j|DB8NKU3EAjXii-Bv(LxpMkMoBOr9H~lU1fj?l3NQdTAz*
z5!<52H4-yL6vr{!&aWVcfAF;S|R557X4$zYVT{p&p)L#L#KWjVxj5>8+Cp
zSfX(p80VjyawkO{XH{SPmcL*}0gue~i1BvucDb0`(z4h8j$++Js}Hr`IUT@%n=y
zwe@>tGb2<$bpwQ*K)ppO$k2Yb=6My1S-*YOGtA`^aOyBc{U>#ov=P|)<3tHS{BLoE
zHt3#-%7&S2T4rlb3e7?v8^sE>GaOxJnF(4LY74>|AnYv%
zd}fTFH)B@E$A?~rM)aE5GtSt`dcHVUvR9;_h!ulN#EYIWx%Gf!wKQT$t~gja3CH@F&Xn
z!D6zaFBNPkYjB!bYY@)EIbO7mtryk(&Gjr_JK5w<&$I|P=WjLZtwJwdJO5r0oN
z?De0@Vc1Kn_H2EXj8z0s)KqqNL_VKQX%Q~ST*5$s4ubORg6~0ydjW|K0y>o|+sdLp
zPx6(!$7QNgHUz<13I>4JwL%b)ht-wXYp0oS_(>j=SlEdwy`kfMG`4v@LWI8%8L7AJ
zoFpnllD?D_zv&XKr(JvdCY#^BKka-o>~xHM#F;0z_iy<2If{y}kZ>srPsB{ncP4_|R-AR$PWNaryrks3Fo2C+&n;JDXky_7kzgH+mpy%(m+2Udu
zd8i!maOu6~Q1|~X{FRkoD|bhi>@z^UZ~j*Bf94Xbd*a9H{y0k3P`t84+U}tN3;Ut4
z*&D(>x*qw*)9b*qe{20>RwPnk7G~NTCO5*cw4n-9MJ@yBxa}>zO
z^&y1Z7t$Ty#Xg|$Qqx2;7T9QW2wDNP(H3ebaLT}-tNW)&ymCPf+HXE^La9Wj#Z<1>
zH_yf;?>y%AuHW2NyHQ}yr4k`h7`ZA#HgwBvaTW5
z0^i<{51WQs7)fawWNTi!o?aZ>i(W#IJ3c*m+;L}LacFNU_l;t8LRKrW9
z>UVs#ox10OlqKAgu8UZrF=ARCX$En~#SLEt?5gs}%DcWiJTTobzH4}CnKT-@ME6fx!w;u^Vfj=jo
zqY}|#8Pv(zG(%#InZq$oI3p_Q&Y2x?bFo)%NjIJIPHjbSQb!l@<85z7z8Ywn;GWc$
zIV)^TrsLfo=9)(Phd(sqOS)|{y4Blk#4{Mnw8G+33d*vC$^VHWmzBs9EL*}OBrMFz
ztmFDHJnVQz;=JtqZ7TlZ^NmO~Mh0RT8E(srswaGp=N@yqGuC+KoIOdJ|F948-L%4b
zXEoxXGevWM@ntYR;`dFuWE(6Z$H0)2^57F_SlDPcssuQO3-Kv~xmg9WQbuin&BAbt
zn~()xCbEr1>~_%_z>n+L@Ow^F?V6m!zWbbrU_obn_=jJOZs}bAds6?TtBX8Es(F3Y
z=_0UMvrgfKoD*GA(r|X!Nc1Oy;kVfnwsRBwBr-D85i~}4bvBOiA<@Az0)m40M#*Ka
zjCF{*>i$#L#tNTZg)ttnXZ#*a2Mx@j`w4`R9MMrWNxWke$<_8scV~i0uW=O#17KJT
zirdN_LTbcF07DI6*?`l`9VFgKp{NZ=`S<@?wbSRsW$XzlC}s)iTOHnF%m2*x#csXf
z_D@~n2m8l{Do5>mV}C@9TBlxcE9OM>3p7wlhxE7Vy|Pax?M$M{ul|W0ukcJp1{3Fz
z=!e8O!gJ0{D>kr86nyuz*PnsLvDXZ9KU}W+9RSOVTi0QpsPhV0{Rllo!+Ehj3u>XL
zI0j=wlDm%5KqqEAf7SM4R<TVu6Pjb>rYspl$Q!(5
z;gX#=$=qFu4w+KmM!uxr2<{wAsLmv#48bS*bI}+cZaEX&;4e({b*ZYE)>v0Q;tAS9
z%ZQWREEy8ivW^ExSPJ9JVGUvrXz5=uH{lpK6MoV%mkXOO!~XOsue;+>9|0CfYe5ki
z1RtyroS(ZwWDQFNfS2b#O^b7r#+$&&!BymSex#1Z?
z=3tM4T|v>Dg8_Ly%WwiCn%2~3A$^YcRt07H@j=o=U0P>mqs+pC>)W@dlY)*bzx$xP
ze1O3oV*!LiV;zh7fMN3z0^h)ICV11F@y&ii4ly*G_o
z61UO>rlwkNlxUkD#)srQOqqV)w9t-Ep){>X8SQ!yR39>K4dSM(nK;zsx3KHaogF@`w)nyWOVQ59tge_RYDGk`#_k>#YNG+=mV
z9nrykQV-Lzg58#*s9Xw<2?I18A`Q6mTKpI!(%aE!ipwvd7|etALdKpaLEu>^J>;QAAvXi4ku@*0-$u0|I&f(&)A%GlT6=l^AKkwf)efNtd;6ryZWsJ{H`CNok-9=u2s
zdhoYB06(+|DwBlXu3IMYY;i!AOK~PT_>)ONA@%V(0e22|2%}*=u_U_hroaLV`)G<8
z_JH4ocVv#8O(7oAL){8wBNf=2*OX97?ws&;~+%mi>5v=
zEPT%mQ_Cp)eDDYrf}2!`^ad6vSuG|ogc9rx|3v-JYg`Zh;-wXxG5X53oTvn02NI2|
z3hR6!q|@)B6YWsK%)37Wf5DH)D-)xU4KhMjFBYaiPPX|MC45j7M(IBPc{&I3({c`p
z;eK8*EP!~*3~UZ>r2f@n9KesqdXxhkc;Tx+xr##B!a}$-a!eM>=gWlR3Ps+&rZ0In
zoP=;m`K{PIki449hN6uYXP{bwjVLpGFg$ihv3$g&nMDYb_j=%VLy$7&`^>`2%jY~p
zkYLr!E&EMKMib8zCEVXzu(3;qg^Se@Juxwm`XWv()*Cy6%mmt_%XQUK($09J8Z1q_
zEG5@4eW^A*h_x&Oz1{UISYvc#AG3206)SigflnldLo?fSGuDU9-RS)YUzDZ9Rf@!<
zppmkX&`Ns-%^=!#I#yMhV1TV<)U56o%^bR5^P;;e27@Rgnrbi-9ZXD6jyO0N%i$Fx
zR?K1#6S7z;)W&|3r!3@ZZft>O0w|(cYtzR^lPG2Xm+Ojr*zx
zM<$f)i=bERt9hPv1wiKEJBd4=#ve&*PMToP{1vkukp6keb$%zam
zMm8ciTJWvzOfjJ
z@eylN)Nf+1Wu-5N%a@5|H|;i43x^V@yt|LMNX@38ii*!+7(o#qSPK<&17kGu=qYz{wreIYh
zCCLQjaE;^Wo}1^t#U2yO$h3|SG}nAi5>k+&8V2{)SMe9o#l@HJeH-wV+H%;&-<0I(xLtAsMpw&bkg;*j0@1TP%#2Zgq}T6Dkw*;8ox6
z&IGwdSxWVmv>9rGZ`};3uYzNN<5k5+Uc}Of4ofR@lnsH()HxK=d;O3{!V#?37ZMbe=F8W+Nr(WJ`H>Rd{KBr}nj
zzaW=aoA1qW^d#b2d0b=@rlHt}wEA>05Ewj@F5M*6GVd!S{ACtPyb@tk*|cta{`J+u
z8|BS`HPf1uF98ANOtjo21+Y)ym~Cg-tq2
z&{V=h!8aLsbcmF)i`A~DiFzSCwo=&p^Lu@|?fFe>R|{w(8Y^P3wJS!a(<{_c88!a7a5>
z<(sDL!;Z53mNcP_ky?er#-NRoFCXFY@;0iR_B(gnoU=Gp$3O7|EG*w-(Nf^NS06O_
zAV6`FLq%nGpT+ATfKfvin|0Wwa9u1avE`rP%1f=>?lZc4lA~mA){%$KvwV~##Z{o1
zmioJ~|Ho-~uhGMdu9s%>&jSog25HI7ex5ZE|EO+Q(iG?dbL~+l60{7egy$eoBcSaj
zo?4sW-=_SD(vBAT?%?S4=}^g(s=Nib!lwFC
zS>^zHtVmzA*GCPX_l~2_T3#`1G)jKZqFy`2@}pw4Nk81`tvGg3u*Dm>aMeLU)~aji
zW~wV6QszA>8EWtt+&Qt?p}{C_9$`FV`sbtXSj2)Cd}D)%n?-2eq#zzX=4?Rd+;5EZ|N!
zOm4E_(~t_z6S3%Sy)0dWM&E_|D%Z^)HUBD6q{@8VnBPfAzpt3SBQ)>p
zpv#%GRl6wv7@rg{CQ!%WY5zQ1$GAlIk6mNiYdpG=35lmRF{Xhvg@S7hZ;6X0MFyze
zt=T4O7prmP?f+26eLnEw1)0s0NNQ5=7e8-!_4FM593}HB6AkL*s#vrRc|CB1!&{av
zTd|*&_OEVG^%gxv{fNEeE1q#j+a$)Ocl@ga?fH_!J6h-x3tOC(b!-Klu#B^On5OKQ
zxWd)hpD#JLj|dZgsz}@)(b9Y(cOoG-Q>`Gb{QT6Lwv0DS$Ezf4(WzNU;fy2XBlbLPATgAPrp^uH}B&->}zihkabdKJ!V9IuSSkI-$%r_
z*Ou1o5{7Tz=)8?}yH|%N)hIN>VZPXyR@C>ya@T2ZAb(yh8m=w;uxqMKH<)-WW_p9w
z#NM$AZ$Q+UwF1if*;Kxk{KGr5L&GnL0?|LN{K}2P6B$zIZC;MKHD7;$GD*R}$fqSU
z;E-ywF{@_l*XFQs($Mjr0Gm91eKlpSB@g~9ZZX`q-C+>E+H$(;M_Im35<
zvD)2!>f4j{Y(wUMiV2Qiw@I_R)>NZy-RN@P7l}|o6dt@!6UL7TD)f$aKIq>M4EDYt
YZT8(CO!Q(khJYVA8D;5GxbeIH0%>Ey`Tzg`

literal 0
HcmV?d00001

diff --git a/docs/full-text-search/meilisearch.jpg b/docs/full-text-search/meilisearch.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..f594677718bca2563b753d965deea3ace922000b
GIT binary patch
literal 91333
zcmdSA1z26pmMD1egrFg~y9IYAXmEnN1n1xy+#$HTyE_MW2=4Cg9$b?l$^CQx+ubj(
zyJz~%%-(!e>r~aQwQ5z>vMRpMeP070iHnGd0KmY&06Nbv;QJ!L7XbP5fqH&mV4z`O
zU|+s?@e&ph_SN%?h=zcK@cf7N1_R|a3dS2^91IK`VoD+cB1(q0Zy9*Gct3nF2m8O<
z!S_x8@(YM|$V><@A^>+f44dS65KZ-hE9;TB)G`YcW3h_XMa}`D{qM|6s$_fhl
zFJ`f_h426HZAPvz;P2g13lu2@yTgTb<}EjouhaOkM!8}$_Aa*tT?G(6BbX8
znE(L5DIT9@VO`o+Q@Y3q^4gV8`}o9GK6s(VdE1ieDv@w}@hxol%U6!pN$u1d5YPVZ
zichbpQex3W7J?1bQOGc{==k!ASDI_P6F&gbEXw}2ZHzbK(|3U5nwHzuML8nlS$HKb
zyX*d?)bOKc8xpM2V!*3q7Vg7wK?yAdr=@uPsr3ivYC-0IHz@ERKWcML@d=z&F=Y?1
zy%wtn&&Tcf*wRYbt_0xj4-RL={`@G{ys>~Nd=*g*KyHE5inXv%59fabye^O6@V+YzyU^Yliuj;Xku
zPKR#bCsK@ae(6fwxp&Yg|vC-tGLN>OYqf)_Z&~+H+#dkSu+5
z;rZhmNag{%yN4B4nap;bOWl6s8q8M7W|D&(0!r#UO9t2fG
zn;XN(5E7zCjM3Nge;gpSR_NDoMAtNs@cbuPnG!$~NzmMIR-uXPKTH1z$z{dVs}{CM
zFrR*L&%LT$``s9-PE8*7wjV4M@^{hy7BHE3bYqIDUHT`dURl)CJ@S`CaVEZl}O&cpdU5e16)`udc|UjsHO$JcQeJL!;3oo;3*f
zu#fS;d1A4_?B5d3V!dj3;Wo3Z_`3ppvGi?kG$s*4Mz|NZ&#Jrm=K87a(a!du`kUCo
zY>hi0f|5q%&S+J<*gP@E+HhJmC)zP^@$w{qGJ5hPIyhy#yJNkL-*z&kRjPh)vgdxp
zalv{kdaW@{Pb=JV|IR(Tu7;&i-P!ve2*Gk22}vB{jDeCbFhd65#(vZB4`8b5fi3x@
z_MqT*1=_NSA$P(LM!KqBI8O4S?w*MaS@T>w&4&XKY%L@kHaL@KNShiT7-(9`Nw&jQ
zHlwD(TTNZpFYH~+&)J_~oDciYot2ztDm)WLnNgd*EXurGLVVH3m1zEwlkQ_mN2V}2c?Z4DNAE9#ixI8fR
zSRWfkB3w=-&hsj6G@@Qu3tzwE+lJW2h}J>Goek0^VHi
zB&>B7Zsp})!+Hb4L8BG!*~6+S86;PMCb@my
zAG+K8=~SrYYQ-bR*_{1J%%$-TdVPQ1^&xMD?YcS6k@IxL9H#K7{OvGZUUQu=kJna<
z%~cpza{RQ(HYQ8Df_2KZWf8ZJMT_*p?UW1GP)>1UIbUCIK6kQd3(s)R&NXIp{&Wf4
zvl#f}^1I94PK(@By|8b{*j{qf;VkJNv~bXj#-k(MPfAqX=VgN+pG{5G
z96KVyYMO48J0vIMAZ43#aMVzxE_V?#q3|v)*Z~e91)zRiyn6=
z4`spmb~ya?JD^ysuGa;f+9w(Jqz!XPlCUt!AON{6qi7--F_yt#Q%{sBGNyt!_2ELt8DRPFr^~r^ALgfOg`%
zGHmX#ty10QSz6$3s!x>IO>CNuX#Nhci;v!XvNlTScZ{3C=eq3vbQE4t+*{`+oeweW
zf;GaGaOK;)Qm*mk{N6d(cChe3=zL_so(?9u9w|bz9nKhDg09-B_0Xco^Di>M%xB{C
z`a>cy#zeR4f}BqyH{%Ry65@{^uZ6=UH$UF@r>PfgUY*u6guE^yQMaT?i^010rwgjG)R+1T`yEgPw-6koid-T
z+CNGuN^anuc6>hVjZswUD39jc7S>)4y9cLn{{y*pqXZ#`
zkg$_novm8ZMg*J4mkllU5p{zLb+)On^d?5{0+JlH;JdjM8IQ
z%pfxs$zcD|=dgi=xPS%2#1rUw>(0)dOH?oS_Ltfe`#22codD(Wc4<&(jvl<6e=kz@
z*2$E~$m-ho{m}t^9uz}uj?4G+Z&&c?WU8DD@ioeJWBTq%0|yVT=NQ_k%55u~ogUjV
zbI))n;Z~dtBx7=XsSEKH=PNeku
zNVqr}%4t%L3!E%JOut=UcawUHj=x{OIkfvgZB}nP_eUYsKbr1#)6SF<)0IvM*TgYD
z+hoaTzP~jtqMi%lsChJR~)-Ff+Y^!zfNs@3Tu+c%t;T8NEtcZ-4!*g$%+1wccUK8#cg~GE4mI;FWux$GsR+w8Nf#P`m?&J^{DylJ&C~h
zR})bMd)2wN=hnq^1Md|U<0D89F$Yvv2}ukVFf+gk4X!QOmd&UC=~&P-P7FCQL=j`X
zc+5I$vpVDcC|pjCW-=lm77T>HqN5xJYFs-%Zu#FG^&Cwsb2*j)1q6-{!>X6+Pk|Rs
z=N2O7PIqFO`3W=q<{)=h>}akAt7Yp;jVY4V>LciXsvZLJ>4CK)wb5jI9zbB&{=~(H
z)b@?Myk2ad2G!xcYcVI95#JO?jsr6{#KioTN*-=D-G;h0bhhjTx@iB110ikHeQJXB
z2cb&WQ9F)htqSW;O|dEIViocJg9`{;knw8Q$)?t`8@z@L_6V
zO>s;TtPOF8w!+F|GY1@jTn=ZBtkT?CS_AzAyEQyiyOWLFisyF@4lE>0$)&l>jmPSG
zmfRLjhBkXMyZcTnj#<}FIy3EmO&^kN5^A5h__19#+=#|qeFN{L;>Y5#4j^*fkohps
zmgf=2HnGvvlHUF>o1xWw>X2>Y&E*Ooz9~#it+wjI#3ikz$153$>X0~>&&PLLKG6p(
zc@3XWiXBxqNp?OWqz9gSbUF-9iilZ^43ACOA24=$c*gwa3GF#6mpxn3;|0Yl&0qoZ
zj_(s0=X%Y*B%IHeI@qQe?Q7glET>Ge^M>BF9lW(($eY2#v6c{cZ)%2VKPXli%(>7J
zEgRisA;Fut@6;MSe+{8dQB**cQRH0&``^t9RsOuac-FP%*KT_@X-(|E8dMETlE$ry
zo8@6ynh-gI_g%kt7f;+CbK^LlomIIQFbcC;k7u?}T-3`+v{DaQo*WF?PJ3kXP`T2G
zS3kM;Dowdm$~W7pd3%Zj*Dwiks22FO>>JZLtj9&mbeJUQGMn$DXkOSC!IVbpDV6VpU%Fp`;G!Z{*Sa^oiZ&jtRk6#V-2XKjf-
zn$CaA%ajQ+cscaAAvP=pe^C06RB6v*LpCFkTjhTr|K(eFZ@eQOj|I2G@pSWi8En7X
z%v4d*j@xJRd3^?T_4IP*6T$KuH~N{qqJqC41N?9N*Z<%gf>Q3!azXm>JK$0#&G$n;i?;*WgPGUoy;a#
zvt-zbH$LmAe|xbt+vYAzM#|r4udFTX$W7~PX4Beyu`n}jX(4vHKZvX>*ZLj*5B9;3
z&)BL(++}~g>J=*nb6VcB<+SNLC8o}up4_rEKXHOe0932d<-5>#_O~9h7
za~^DNoU-K;IGEKcd+qDdE}^02GE--^x?vF;VOQhes~ZVo_edD2&0jj)UqpQF7}ryA
z)T>B73sTZdI38r%x@*u_nX}saqgQ+(xNW)AmaP9clE1I=I68bUmQFV;!6y;0W4OCd
z)f_PF-n2Txoo+eJDdOsaSi=yGyw5{Sxs9TEO*{Z{Grex^qRT-{bfcRJ+WQ}WmkD?jZ_xAv=B?7YnQt0TZ4r}dw$o}mwl|A9|#?;s?uTKGB+
znNs&(60W;(v>4cNn*W6(FIVv=4ifwwFF1s@e7>njbb+Q`Hvh<=0&hzyM8bYh$k=lu
z7$zghEsj(fMXSwvrz`Za6liQ7)J}0x>1Q?eFVCNL8voy0V%XQsn95s;=&xcaAHQfx
zt;`2m{fwai%|hR6#TwD?PlFi=aRk{zq>Qpd{3qqgCJ8h%(%-Q_p(>)jQTXsdSopu2
zQSoEdpX>d*5YsD$?H34RIbN;kTdEiPnewV`Ae574Gm@_x6UmN8>k{@%%S5{!x77@&mxm1E#+N*frfhS$zxbzdr3f
zR&Shr_jd1-Gbh}Ww*C6e?e%KrUH3j;mtpu}r_ASl%fsDscHY&*tJ}@DOF)KM$*qw#
z6}PT#x2E_QlK*MLO?)B)+)s<}tBjO;mg~jc#jc~~ZnDYYN@6Y%6X*S`b;pBt_$&7(7GOrF&goAU;2-Fxe&plc7r
z8w4%c2;ZvyT~w|@`dr(LUyKCno;CZrlI?Vorp<>NJdnSAoMto+l=1*slLCoM(C4I=u5x+F10v^!boPHJpr5NblX7QtEezFK#@%8V}c((Dm-|
zn&`J@&n_D4&37HHFKd^15cj?V;y73NijT^QHv_)|(94hZwbR^QeK|bd;8<)p0FE}a
z!ChIOG-&fi-1Ew0Iw5k6_dH&NURx4eKaS2?TAzIfSdIE3LDf+Z{K5}KMOj`|pqfcs
zOrW8>B>fS43}t=?(~Uy))A?WL48I!wX}u7obGbp>7Ed29r*}S7mmiAm7_sEfEY+So
zG3X8kdufjn|G)6
zYK!x6G=-eYy%(>3HPOBIE;4<>!}6;P@XD3IFsSH1y5LbSnJX6*=O_N-riPz56-Dls
zUs}QVM<(tkjM{0SjOqN>-H=#1{
z&#;uCI?QiA%zND3DVID)EPsy5C_KgYy8*|)3T!6%pC+Yw#5bw7H?4Pf-+vrX_(#ZF
zKx+KcisRJc_I7H@)$!euGIHO#V8snxu~eV7@)
zJbY0)vQc$LuhmdqxO4CB!$#W{?jlWcu`&~7b0;G@YcRFRaVlSCzn%Qe&wi8!cPW10
z<5SqvZjk>K86D|t;@A(5ZCen;{3ak#|(Bi9W3iN4Jbn*jj$=RsG{^VOMv
zO}eAm&L_|rG;Uv7DxExf98F`CJS`Oy)1}PdN>kU~ljVUnpNmodL+U6?+vZZ^laEaF
z?eXom;Mlv}`prw8#i-EjIJSXZSGL9Nb#~h5fcx)&w5P!9aJUa;!QMZlxYbH%Cdiks~I4te*Ku;FxV=G|WI(2wdJ4J5;*+
z=6YDyHbU5Vag9q$T)5k8`{==7RIIt3I#17W^n3mId|u~a8*0JXi6|9y>~yxU6z6{W
zMeje4+T?0VAvvVW)!NWpcb8p*4=nc*Xh&1Nxje-u?moO<)y8M^yi(E5y-h>Ri}pFb
zXpOu_*;>u#wVb&64)AZ?zDU#b;3DBUjlNIk^Lrw?;M2Kl-9uoiIH%Zbb`aF
z8+=lFM2i7-)!_$|xhucRq|WTxyV4eP_1RxKovirgNV9z-aCG&xrRmI#JVVIPc(UEx*(N%5_e4_%uZk{I)4F4J?v*Uj=ck;?
zZHcD5y-p_1lHEKv%uW;$v8PeOzAV17c(#uJ6y$lY|=&F1r=g(&)mSrvI>Gv>DZ)*@e
zkc3U_vB^q?sUwW|e}D80{A9
z?>-;o*
z7(c+fX<-uS4`7rMEMUL4*czJ;bbQ3xG$v(V65A@jvzwP_J~!^N*o>A>wGG_L8l?0Z
zTD^zy_;7l~G;A-zmb1n+W~&*QPMODxf!!M|VlWK@7F6`GqS@y`Cko+m$LydjYwLKf
zP(WF`Z4q@O#lO-QE1g}&d|=o58179qJ{JsPq>#KlccfgEP&nTTtIPs7lKg_vc$bKJ*I2GI&xI0S~eX~x#&E6
zj?#Ak@Y|XiU4oJG
z1mD7UKs|>ClPncb(|*ZCX_;!o*xGS>gnc7v?~N8!JV*EYSlitX){T!hi%D+cp%#%a
z_dqTH@lo=gqFk
znh%VhFONA92o;ee#cpkV2h5vbb>&pZ@2eP-sCF{R*s!Q9tkQARYRSDksRoD`;Br2KQW{MzsET4J`(57cheX
z;r)gxT_;a&O5S?-P*Hiwv0rXnYZK(jFUsaYh~lM1gNqezyas}fY>fZLf4WsDsi>>l
zmoEn_`PSvlNy_9fnK>WW@u|rHekATxdOSgljiWjNh8bWC(C1wAV63oX_M+c^SB}YA
zkB?L+=aS0uY7I9+h9=~5jVKhjA;Y^6=(TZf#nR+#JgS*Zf2X|4ki8m2Z*x|rtTA4k
z2=E#Th$*&=xKU~e_8m~6lfXYf0!4N7B>uHe
zW2_8MMDHq1ItH$-L1FJE>xHegXx4W?5No^dP;=9btI~r!+oPg%kc0VcLB}pg2(9Om
zO)tn%D6?(N*Q^H^vXg<%sa(}5`?>2I%xE+n0sWKNF7!+54j34Kh(r%XyzsaDC@f)g
z48$i7wP+li%@DQ*uCY0G|L`O?)+FIbUmDymQz|luas|VB=4y(KQEU%Fs1hm75}W@$=LP)d1%7!`3O8Z
za0z{brH-ZeE7r>4GxRh=*G>IUqWyVx?aOVbJKQh8&*B+STARN0vw(jFZq%CH>!8c=
zN;`^si>*w*E-Ya+JO91lp!shFrf1JBo(mkxq04cKpFg2`E@*r%uqcNva@I(#yqDaa
zB2HYVX5?aYPpgxVYu2)2x>#KOfv<(;5Y$C7;)cR>RM&FtKjXbt_I
z*n9fbM`>Hi68O}M=2CTswgy;P{ra@men`Zx`TNM}Il17joJI>onWQd*QdjlqiKn!#
zli1+Vgnh3Ru1z!aewkf!G
zZc-~UEkWC<@nBq?5arFp8D^TmU%r;X7V{S^8Nf;6OS0T2ejb%!{66A|A~Z?|eOGpP
z6i!I4i&z>zEdf;x$TSw$Y$H)*m!mq$0DJe%F@_goqQLb~QOsKus#qRf8S^sV`w!B0
z0tTG1q0qKlnLEjcxnt!=YF|qDN7+a;#$StY$0P8_{ajCv4-XBz$5P!g(V08x{n@qJ
z+^CjAIeIqZj5hF#~7a+O}QTKCZ?zYt$RgHJ3~VCyC>o?
zse;4#K*Hq+u82LRZ>OizY$+#`X*hG=qy$ZG9p8tRwpo5K^SwYWQk<#B%fqT+v
zjEGQW)Q$kq=UhB*>lG52h0D0q{f61FW=Ib?r5w#Xv%+c+N1meMMIAAP=h{1gXc+uN
zfl&H)Ax%o9asEAEoS|%zA=6n#RY=*ABA5n2(@Z#QBW^z#KB={e@hR<<$_V9%Uh?Z4
zj)W8e16dJLtrZGeQRX{SJd?JZFgF2?wAYslEvpt{a=GH;W$A?QH!*B0va4=_ZrkuT
zaih(dt>^v^1K6h&mj4Fy`XYNF^+fVxYR?kC12mPJj&cf|u9b?)8~v~XUZ@2uL&@js
zxdv|K4Nj3y){srozU+h}m#>jLXQ;yvQqx6CHejjlQwRHSp*O3sQ;
zmxt7)AlOekY;JnmGU;lxP-GTV8jaP^`(`$^>duS}Y%XB~ALEi7g#t!hXyv&1s|;yq
z0WCX6ecsV@4SS^7E>)#n1^iP*?y->s(h=mS4f)5o`2`2cTiDV>aO8!8H4T0UI9=w(
z%v@Ubnrm_E0x8Lllm1fzP6YK)IxhLNTh^vErW76Q&(;!ceknXTv`P#3X+e2@}-mN!iyI<-ec>k~JvQ3Yucy%2409E!Nnk$?2AbwD~vn(yi)_)Bo!
z52UUd02MRUYT2m;DpeFXVCpTU%D=F*Ulba;zg#9to`9`Ad2f(f*)QtM5i_KL`o0N4
zGzF``DewL;Y1S?Y7F3Bu?Cn{izigaF)ieCVcrY7!x#5EW=N~8w?gzpCE(8T0qgdS^
z0xrVXLIABSWjHk58&u5@1gFD@MXEOU85V3Q!%85PAsVJ%ZHa!6*@qmw>!5ETpfx;nV5<=%H9Y=m(&@3%zp233E
zuS+r3N+E@GO3c)a!(ITE0KO_e$n@Gq__3{!`3|WZ-C{eyNl`jj0+>}hU@g}|$sxfj
z-k4aa)Z{7OL=Y~u&!=_wyeIdbJ{qv4Spj{LEd3B8LLbUbj9T37OZl4A^!$tIkhm@3
zk3FLOq2@Ss8!HsJFubibU%SqYT(Cm)NqmMC%o+lLYR8L_IH;x4zLPye(AS5e#k0dI
zMyqFM4cV4IN{Ed2p$XRhJp*Lgmojs|x%CFvWTgl-7o~cavM`EiAFMjPIPvQt=~?(k
zuOkO(D42=_1Xw+09Nf>0Ws7xHvM!p@Udq+TRvnDRRCY3CpgLx7xP)8kdDbOz@0Muu
z&QH|y3|7L&mSXKh*L7@wa{WcCv=>TwTIyCYc%3@z;v{f0wJB1^;XzHt2!t?|b1>lL
zCJ9y)3TQCwUOYuR-F^H4FQF9|KQxjv|7cIdKMamTg1M7&?`z9VydTTex)hpkGmZNN
zLNz&u3U$F}kz2N4)r6&H38ls%CAy&ALdhq|jfn9JOE(S*)rf1UeYLmwdkiS|AtD29
zUxAqz$(Y?CLfJrSHKppeXcgT=cd+5fculJDafm_2PPTaKp{qKzWfuJ%chGrtA8Rq9
zwt9{yBV$SRN)2^jxClz;Qd?8DAE=n1MZO_ZfqGRS94#t4^Kd0`5`d1bH1pA}0byzJd57``I24joG+D(o}}jMwUdq1fxDlEWE?hCz;Z
z*1IyZ1I@j*IhKiM7*Bk~_Q4<7;*)_l91n`?GKcPkh~N-Ja1}9PQrE?zE=hepOUG@z
z9e=wxknpmCoqi|X?ot{t0sg+kK9-(~|D8f&D81$UQHL@*{fpF$(#IQYw}^yUcO{q%
zMUDu9cI->!UD}AGS*;Z?baJaUYHV0#&M{P_~GlMK3vHDZ=;{V2V6-QxKMVG;>@N
zc#4`cHOYbQcK~XzBnQKRD+r&JbA>z!3!9;B`fut9n0YHOh)cn7H<
zg!^O0#4TAmjp#6}_B&^gHAR&O$h+ioT5m34bD#R8$P|Ak+mt
zgE7Zapm~a|UnvS&%7#*nq?&D@Kn?_>Lk5klpvHS5rk5aE)(#kuqLV?r7dfNPwL}@h
zcK{No6X!kAQm4INU5QT9mPhk>mjakVbP4?W$YOn!~~Iik^ci3v;h#e
zl%}GayjlLWQWHkyWCu_P9L(-apjbnFft00VL*6vNg^cYDH3S9*2kxL6dDh2|N)>9m
zF2(9~`mdGhtr!@%VwL0MZ9S!n)=Z94jG)TQtHZ3Zw^?r9d%sw6%Kxb$@6EMNt1KBe
zyo5eWccI$E+8`*CO(}bqRa_H(fY^SvvF?x6K{chvYWa2*jr&Jxb;21r+BICgokB-p_R$v@b)LxA^ZvpD(w>>W{bICLW6~z;bsJcNeYfa2ECrJ1p(s72CrVs8)DyNEQGcTNe}HVFGsCCcbK090c8vXzs`J700T9XVYWDQ#nse<(q@F}bK=-jh+P
z=+P>LoQQWn7UyokLYriE+8oR99T{%{$LxY$Hie>XDL6^=r6Nl$96uYRrh%B<`+P>9
z1MtCYp#K)t6sVlFgFfvLL!+z!2kX$GN{vZ3+Mnk$kfnS9*?(JX)SMNECPAbrr@bBH
zGv!I8-x9cia&$PN-RHZ!>B2WlA94JyXX?Ef-kru(RzP`{y5xiTcE5YL`{BkI`C)&n
zExdJ$*6`Wob=pPHNx7wxnW4ug6&()Ow57fNd`t7b^CglW5`=EA5ea1tcbk)dC)zQW
z5s9&n!+3y&NJJuJ2r(pO4O(v%A(s0-4<+R=B9c;p9!VlH#R~wr90K`ka+ab2oONHa
zNuXr716l$9Ybz!`)FO=
zUdPB30zmbEbv1CN_UQY}foR|XDE`8xezpCZ)JkMxeTSzUe3o%CNS9PK8pwKgc`d{GF@o{}$DvQ@XVtj;O~la_4B<600srPmy@q;Q!Y*_m1tv}+wP)B;
z!|qS9;%qK`TIHNaiWCIv;99KEnP;KHEAm6fDp~6EFtlUHs?E?3ZF(|XNm^TFh+PNK
zv4Owb?;*dICf79YnXo?MMy9QwNEx~zc-POQ>h_+9b}ejL)O&+KH-ySb7RAd%P*0RJ
zA3xkQDFm^1{-#V8%2am4ifh{hT!pXCZN~m>{Q|Z>)h;^|)5IXSuCPdu*(TTK!DrIY
z`tN{-hJkiqcS3bgW9FO1Z|WPm<_qJF50PH6SwSy)E{EEr(1fJ12ks7@_8D8ZX355)GMblcpV9*Se0i67*Vr4QsV3|jm4
zqQgR_8)r#{yY;Nu$ZFg-Np}*X+Ka|{_+FMO
z)U?4S66_~!kQ~T$tr+oGW~}j|!QbLNAU!d$2EZ{$(H59UgwgOs6^HkGbZ}&!^ON)P
z1dh01D?mhIUKc3`L`WmY&e}@ERq=vJ)Mo48VejCUc#K7J%zN2K4vX5*5Fp0$@8C6!JD*ahSFsVhM^n{K=WcAd?
zjbAW?_Gb`*wU?^D2o|D>DG#Yw67pS;0@BdC56pb2Aohkg?xV&MQX_mer!j0y_rrBu
zBlN%`#wk44A;sZ=HUOd?uGeE9fSL(Vruz>*TcsH5NpFGG#uSyl?~Ik0mSKO!05gbs
zkfE|Tu!Xb40Ew}`%xfR4r6lm5cDqnML)ktvDntZ>51Ai?H}Kh7he-PAb>`woE#eLjkSdj8K_c04IJMqEe?$%5G}p)=)L^LiO57qUg)Gv%sh5b`F-
zoR(T+IDzQph>dbB+4?J0X|i=31C23~NE}&$t>8I0^p|QgOFL1JM9)0gJ!uon}5-NLjSvaBY&Ywo~v*tIkmMpe!!TH3g
zRGD`6Ol?W)`U`gU_l&8Ep`F(2EkJrQMmxiD9R{m+!|dRwM`X0Gf7;rx*TZ!$*ZWKI
zA(!YC4j41y(tg=rX{pcl*8s?c>4^dbEKh-vPt%xOE4YxF{U=B`B
z`x=c{PQqpgkQ$8G@o{Hjo}FF#MfG{H*@i|D{c`maBP#1LTYeS0fL^(=O%F9I0#k!3
z)@MwQmmyq$Rf4mwon*o_fV1kedHRC)-Lnf&S5
zK5>>iE+%lS%P`v*C#I7N4zm?joio1iBc8fqzIC(OVad#b)_VUlh{-2aynMaw7nP<@
zz+setq{b#D!)-HmA$7IbZr}1*37GUEMUqUp%NQ^6b*Sv*IK!8pR$I-cysvO1i{@7Ry?#k1je!2b7HosY?m+
zDQyp~Qj@qcYxwkqjVDxZZlAp)whUdk?6uCDg^F2pmn|w5T5GhpguZ;<3CP!L3G&49gJtKvWF&ff*cz?*JRLhD!Eb2oTGSG$eBU#mEmahjRHG;IVLx
zwW+6W*o+G0f{DPX`LWZd2HSmt-ei@oj3P`IITWp)q!$$mpVAIiiGwzB=RQIfmD>8_
zxWk6B$v5huuoLxa+0|u$cfhOnCN2czjGB@U`PXVeb<9Tzc0(y1
zenswMUHP_(Xl*K5x5*!&DTnRXk3+Ii4W#0At)6BIzp`uEFMpmWIM(kO^E2l^^s5p=
zDrByVaFO3@>E2FzEvuUpup*UrttKQ@p-2|TieMwZ&odH8TAj~8EKYh*v@7jza7A2!%qZX^Rt3t6l3ZNCPQOA8f~R;sx?&r64h>!{l+%Q$
z@ltD?FId0ce5Ll)iow3!b<%S7SX9ua;C${&_C_I}O20^{%n;F>(KJl!8ZJiQa|AW=
zCKISx5*isMEKk>%(**eBKw~i&{EoyyU^ZF9Adg+g&+%mwwGk2TL8@{*K*Y^gU;>OV
z8zDmO?yW%+vG+{NwpRtM*+xy3NZ2`(uW55*!gNcM`sOv|^q_X~$2FSOpf=@lzAKn1
zD5+6YL44?U1R;!y9S$YBP>Y@R@{-+kFOY%{;<;IuV-7~<*_qLXVh~<~%0cCw6E>?s
zd6Q)Yn;3YorE;^-;WbauruBV$*QZpZWIR0<{xaEqxXk_3;GcIZI<~{q;G(xl
zjlY?+HXb-4>3g#i3YXTQctwPgB{zBKFE}*rlk{BfXuOMhv6j#w$xmvUjEMKmw1b8l
zDFdoWdcN=37>v#`M2*l
zSMQeyl?NxmW>gA0yEh8zr!J0Ov;ph-i&@
z;5n?T*Izlo5g9^dUfC*XWBkqFAHnONBEgb^p29}Iu#qavcsEQ6f2i*AmjUelLji7^
zG}3R8;!(xSktb6rTo@Ry{PpddAL7K4)I02hY&UhZ^E(8wb7A8Z-R54qO`MqFRN^H2
zj!ts0sQP5vp+fqh3(84f*ZenKG*_av_hW`MipGFWb*8ThrmxL7LLZ&`e#&1X+V
zjy&7}eO;hX`RUvXHQOof;sp$SsU;u-egFmv_z6nSZTujAB>e$s`K@jok$d&Qw5c>t
znrBeukjnFTgCR!!uEb#EGuPySuyka{ZU6Eaf17Giv`?N3O0v}mieP{IV`IrLW%2{r
z&KvINxKJ7F@W`|e{n<|b_ZMB|5%Xw0CZ%r~DZT?9$O4k;(0Yb!Ri!5+qh#<(fBLBM
zlSMaf&51i7a!YtVzj%?k&20IP6QWUAXM3&FI+~O>_=NGap*xSQp*!mL|4?2(@NGl-
zl~AcE*cwG~Fk8RrjURXI@(}wuQRMs6F0D&<9|kzs$Qb2?OT+21?)<++{X{6~QTF`p
zR+=rWpD7X27dD(}Lf?D;;2rECI)ZMC*b?$AHX4f$Z9#Mn*c{izsU-Y&*|NbEgVR(E
z9hcd4koV=&Q(g$BbfvbCY@dEj)NcI+MhxM^k
zfj#NN4P{ZUys?k}d5V||_KH%&n5JPLne|$lVNdAo4Y3v`>!zK6yT7G3*JC|q7JyrO&)u^!jTQFLuJ5DqBm(b+Z44)fe#VDR|mO(SF9w
z_edK|soOyOLMMctJt*F45J6b_*CdzWA#`M#6v#Zz?72PODKSaf84kZ$-CuzV$?t$4
zlcYlJbj*kz?2$Wjs>VV#Q>+&;riRm#*t374Mf1L482trGP(gbybWv&L78UctUCcdU
z-8Ge@u8D1ArcbuD)>~SdBemK_kPpcMe!}&cz~{$?m121y#Cxf1TdYs9g*vo}?VVGh
z8B9>7>ft@8hAfHV&r8V3&$CemN;lEOuekl?U8xp)FNw*qH10Zi5)EAE1so7zwc@89#psnB6G)u>uoLAxdBSY=>g|{J
zpSQ8;ca>wGeN!y=d21K-lHKA|(YK*$iP**Bfo_OZiW_V>po{rQmxe~q3mPRWd!Xj<)s@BITfUf{h7g*{+tZ&Y=zt-vFejyjKIZm5
z4)_C{{nkJY+EKb~X3iaV^-|*_A?y|N9;-ObD|Kb|B>h4DrKDa^j@sjv!DFWTxGjzt
za?{;AUo>p|DlUewDrPf*SUNJ^#{DHTOPXXo#L*y;E2E#PE?INe!!m_yV_9LqS=LLt@
zUKaS@0S^E0KQ1+v$yFORj|ZHF>6ODOY6n@({j#Utm}<^7+viM@;6?_Si`(qJT)>_@
zkaMRuP%IQX*I6oB3XI?7$^Q$K9fFfmnL5Cj2xgSQgs1&)<;8
zNI7adLMlHYh=Kh|t5cI;Lmue$VI*YIwEa6^KvB6iPoB!hEN9HkepHWB8e+pw2_1mo
zGE=YHxfkp5;@JsPTQD@Y;@OW?J7Yk>BvyV6A(724QVqrR)z8Jjqlx6cR2Oh6U1;)|
zI2$)i^BD6n3@o_{95h#RR8WCE2Bf^B#|JpM(44t^uJwtWK>lJI{K_a0D9
zJ>UN5NdW=`2tD+K-U+=ZkWfRD(2Jl15b06{MKpoXixjCMRgo?zC?HB`0*Xo(QIR4_
zl_H1&>WkmsefR$F`v2E^@4of!`)6fk=ggWpXU?2`WS?`j
z_3qeJmdc}jy|nEh-jB6=hCMo3-%Goh$9{de*C!qG`iz)GT0!#o;_{+edq;GJqT+u}
zNDx*$gZ`VthL(dXx+6M)mgApJ5E70~4k8X-x!@D6>L*X=Cc!^VlKM-81M+Gx99
zLBnV3e?6Ji;X@I4qyjNJtM4-OqfqL%P!6zC(zE3TO%ss%r;=xvq>z5nT0?~c>R%(i
zI(1SvI4!pr7MAPzGva1anAYMNh&+XiZ7p{nMZV2s9N3Jx_)XgcQOEn>-A7V7=lku0
zh)qG@*TkCE)9F`sNq+#DDVEmn4@St>hncR+BNxwdq1Me|&E0$E)106NmSnwcZOWo4TrbC+5a)<9`!u
zEPiK}^|Q~W`{`}!*BzfXKalz5w8Ve5!}=3p`)S@+)wOQUaaB;(^#rxD$THDx?(x{^
zSf|B9>-N`m$6o)+?dsHFz1Gb?{^a>Jhab~^u{_w!y$
zrK3LLD|3!HuW4u+R%rlOqnh=EHI)!uA6rKED$u5{ZvVFFEeCz06
zG^hdd%R~JXzoCJ_#Wt(f^w7Bkt=v$l)N^vWk77CfTzw8=xhogH>YkxZNSCk3GjctZ
zS*TfHR_{;;;zL~9{MiT07E8Wi97riJim80q52aDRs9%48zd-cTS;jrS9YeoS&Cd>w
zOu;B&tKlNaI{(S<6jQWSgcM`HsCHKK8Rk8H_dme3zpN->r(T8d*%wBAdG1L%CKAFX
zd%0njjEz>X7XRGZ%JD{L%F3zFbn~wb?tDDhUxf^vxwm0b&R2hg7_9rN1Npgk$I4X;
zLKx?G#)qk-Th*(lUe#yE{91Z>H`x*f9q@1A_Z?%L)Dj&!wOS1L2
z`cvnx{%~A!dmr*bxZh%KUcXs5ueK>-q9BGrqU!pKfE4kpM*aiA%c#$VOEEfx`Ec1$
zwabMiuYOPZ+}sx5;LOxYF#ky``2%#G^Ih^>G}9w|c^!)%KJ!)fAk?x}`>_4iINXrBYwgt9g%>8=1h=8;5{+q>3*A;RT@7JkwkkpkNY2
z!i!ad;`+wZm5Jtffjakkx0;7b@ld0XmO&XT#_1P>=y=rMwsJ$%>#NVxTrrhzLs5LH
z`DP;lomLDv&n#yp=moxpmNH4HA$xKS0{G|Bu*Qv1cyM{hKV`A=l`1w*{_*1Er4M?0
zR$czb0RzyVA$)li(|AEWv*T&Q$;`Zr%eRl_j07D-3k$0`HA;$0>>l;rwY?;0ms+#;
zO+st23whq)_Er6B?usn^g-#C@+fBK{J-rR4RmRsTXoseUGpe(H{Vw*DGgR?*(a)`B
zs4$f_%^XM^o7epi>8vsFUT!2#mGrU0ZKep(*1C8h@CuD1(GJPxlIAhLdrsw(WZXqgCBFUL1l+n|=SDLGpfCm!7Y7Q$K|YMCi#%~FQDPmKfh`mq1AZS%!oaA
zFPg*M{W81&XZD!zcuk$yAN>^Y$9
z+U9Q_eTc9$ztlz{%jCfVg4^4Vc{(1B2rix=sHjk6_5GaeIo$jfUePxWN8bj-
z))=zi2+zD~04A?PhF1CL>^$v^_rW2?T$gZfw@lTop5MZsQQ_Ph<;|?B-ZngSd1r%D
z?PhjZ&8JIOxL3Fy|Nhbvv8s5zBo&{LUEZ!)$`oX``5;yEczq
z^2JTVf;2T2r|tYc3{7W!DV1P4HKp7IJEN5HmYAy&ZXj~T^&1n{dMwcJ@l&Y6Ca#*ocT~3B!zjX
zJ7ZNv(9Tp&{Q1)VR^6kcyK5y9w=c>G%8N=={=>6M5;hsD5gbJJUHM$6);Tu_E_stQ
zH}hQC^==wW6eoUAW%iYUJv2mL+^_S_n?Vzd=15$NYtvl6wh(%K46`W1{bdyns#62
zS65gckmgb|7rQK9sRClM&;0aVxkGBwZe-i3+;;2eALH+?j^n4_MfQijRU@$7);b3V
zL+OsC%TJC8Plj)k>U6cf{o8|j?6BODW;$@z=CBfOCi8|K`HH7I=;C~h)^f{g{s6Q{O+^F%27|zKV0y^keH{KqbFu?y<-akS#87f}3zkqZw!MS#=vfFU
zC;fXsrph1SyK)Z#!G?O@bGc71?)*l%88}YxmL(!k|3?_&nfnhHHN_PJ9!oG5UQ`Ww
zdW^h!Lp#{5BW(Faf#QEv4Ey&bCdIBMHj5<@_Mr?<%36DS)51>kGRdv&*(3
z)~~z^=~v$7*S=ak3~fm=_yc5z=N_{11ieX_Tyk%Z+;|-fyUeVoZ3-%4C>O}RO5!GlG=#UOJw-8It~TD4N&ttk33h4=1qzSOL}J=keO-gkCm>NL
zkhUPx-D?8Daiv<3f=R(br!;5fSPC*()AYukYe_45J-Aee6*@b+)Dxp!*N1lw^@BWS
z*+g_^^G?Z0d{b#^;tSudTb&@&E=@C!)A9YhbxGuY(}1N3gC%O)fWGMj_?xTr{Vk{Y
zal~t^8I{bGMC`N<>Bq231;4pXoh8}p<}aVM!SudX1o@m0gW+?oWehpao&G-OUF0LPJ1GW8$0%?R7d;d$J<#0g`Db9q9(fzU-&p^|W3qnTjx|qhpL5D!`&<^U
znu3FZ5#a>imcZ#{E^)K)8*cOf*qNyx3BW2vMxxx4WD
zm!lwfABGJD=m#5`ZZod)?d8YxJ?yrg_8VwAjtG;TQCMhSldwq&ql0~y|G3LVd3#*O
zs$YJc)_R{9NIm3#bnhj!A_@Bx^#{Po*8QhXjbNbHCvJy-KK85{dZx60Sd-R*=_SR~
z0lDf_f0SC&ayESqe#-rHy4VXpR!sOYlXPY3f91PuW6brx`ab`U)1)o@Z6vIOut7tA
zV|l!wX@(w0KSbUq`pvc9^bo6y2n?tYi(qYGM_@(3cu>)VUKS$IAi3>X3I7#o_i$7RUI!yq75-vro8y@#ooQy}
zFdNNl;S$N?(bk|7JNF0Z_l0gZIJbBXr18lAcZrl;y#813D`{+Bll0MjG}bxh)5|xk
zEwlRimktdN%F1aX{-CUqCdB?FmJZ79(T=_yl-<#f*8fu0^~>ex_1OO;w2xj-{VVYe
zO(-9|p7@s-7wP&Hdi45@NS7#B=la(~K}sJ08S5nuc`UY*0h*4H?at8)m}DBjZeef!
z0YLpD2;Gn?;X<Y?4rr%XV?r0km6^7yH($|X2H*|K{P_^?Rc
zOJc^P-QPNs^$=J!?a-CHcDFE0>+vE;AtkcQ8|)GneXX2ltE31F
zOMpL@n9|+qMoZ_Y@Fp9RV=aD=SGjcEmpvHyG(Jb*i-w5Wp>Y_j7%1?vVazT+$8g2U
z?{ea>2lmLbgAId#X>+ki6PmMGds|0KV<|j?R%6LnBbY!{pRPn_%*ShAeFVv9an1Jh
zUFphsEf@nGmm9@+z%um4!I|U#(wp@knU!*pVOLF0AyzF|aRVU;RKlnmPx14I@3A!%
zOyWTldo+VhY`7iKlAn;Mi$0(+L+eLm@!{K1z1sb)C|YgIuNsF4m5&w0
z4%viaLIm-rw8`wb5?oW<`OUln92K7drx2DXc}nN=#OdTi=O$ld9SOvy`=uKVd@>Sn
zQtO>1)NEoP1QYJ;crH@BNNmBEB&%8`Bx`IA`E~jNs)z?beTe$F+VZG;Y=W5Z9{$tOp?E0`W
zk~LLoo^zY=Clu9Z9lA9{G4xFwW2qD{(ntq9}3+%c6=<1`6iP&Y``BeqM>BTv%Zr6c`0x+0n*BRQ0JLMhwcV2sy>aQz>DRN17N5DA0@&ciGM%&l1Db=+vp}vaEveHHjvq*%IL>vv#&{f;=l?#tu
zvE>Uiq9Q~!&@cH@IE&Vhlp(9^c?0e|u#!L@nP-%(@M8Z^v;VsBiKQ8be(={xm2U`C
z2E){3uWOI^g>JK=R$(a!jxPB=$aSP2xuXBw&n@k{n*>YUn|+glOKsW7X4f4QI6{`M
z@>yB=1IExBAzlay25LRT-8TjGE&Cn^SA4bxWzqC}eA09q`|{*xus9#hc2^cZPEW@Y
z@8s_>J~cl1&^7u()9-8lVxQb0&F{RCBxT2;qIsN2gzm%X$o^Y^|~P;xLxnA;~yz
za=6D$3+FQ)&Ze!G#bqnG9D5qdIa@NvObRItv|$IvWr=HPm!qp}f!hOuJmux58O$qS
zNk|qBD#42$gn)A>{{2xRJrn8*ke8tMdJHeGyn`kt$v{of=X%E(JZm=w2w}M9nx=TT
zwukKC3rlUVz8>O&;f6nE7~jG?1s3J!bQ7yi;?u77=$${=la6e!q6N_;IRQmlax?zY
zAY~_G!yBG5{ktOLD(}y_G#cT;X$tK}y+ZhW@y8a(;e8XBsudrPFA!u&Y;H-bwfm4-
zxyUj=MbVM0UN_m;Fh1f0n^8`7hA`I$V83CQ*(c$Q;LkEwGyRpP0=D3q$bH^IR(eQ8
zCJ36$XI#^t=P*-t_`ex{f&iOM$%0=z3#-YM3Zem`u
zr{tRZWMloANWvUL
zH(YzW{Y&8S2E`aQilobeg!3YTl|DTaEGrvB%)%ZfdlK2Rb5^LZ#}aHF426CM^USR%+td)A4(0(=aVah(#-Xhi?Nt2@Yd%59CBE+{bn
zlblI|6dA2VY($ZMIX*7S(WMJJiSCV^H&Y6u*$qi8#(Bb{-Y~m#y0*&?@7Thm(MD8b
zE?>W%9OF>A4K#-1s~g0kcoH>vyF|3huvxFHy}yJyoCi>wrV{1|b!103>Zo#m{~J&q
zJz&8UnS6+35^hP>3~kySgdr+VS`aT{$@Jh>P~(W4vM-5087RkzVQZJxC`FXXR(lufizP8AuC7*D7UDh-irz
zz7q9=BJIrR47@P87M6*{-njhI*2;njdW{sXYY=(jN?~8_&gE!Uk4#R+4j4Ctw~*nI
zyHBW2Uy}>_Q`iHf7AsqPrXFn|-RWfCy8haDh0!o>W(FElP5^_Z=beSBz89*&c%vcc
zk}JG`JU?VYQL$OlCk@gv&Bg?RX`64Vm^HM{>g#^@RvAzF5a$x8O+cKNo|G6
zGv(R&1$#&9f8Xru6RPP2Y+^7Nk_*lF_7>$5DL8o+`ZPP)W$@ffTydi)OjHpXDwv@A
zvHL)k)mZc6JCd6b<%IFLuy~(sdo(9I73m}9a>KX%^p(()z2&MOXk&ULD6j{#3YF#5
z_&`c(^&!&q=LWt}6PD5jLOQkA6X
zlA$aJbYp2I*p*6_k61-|Q?ky(SCb=%)G<&Ug~~jKXP!c;ufujWWj<~PzMlc2r+)Gy>S!E(~Mv|Ah9Alpnc6pgIH0R
z9KA>I6QkokED_grSFSoy%$Mp6F}e^1d$~{1o_u~kk>wz1e=^{_@}0Nh=IhBEr?bQ%
z&ZdeC5dsn%KqY3a&QMkPi&}JRn*4X^!bQ3;{PAc5wirQ6AUv_T>Oh7jjUE^^{WT~Mmu`T#ZKYg60Nqb#pYQO9OUP1NKp@e`uVcU|ls^~t
zI^wa=E$&HP4rexY6_5$z-Q5SQ)_p7S-cJa2c(YlcP@T(4-G
z@^iW*KVLQxX4S62dayo=#D~>r9hF_nP*=pJS?~HjPzp%|WMav27lO=MDRh*KuR7F{
zW^z;mRh}%6%=O!G5YkZNn|e8G_>yO8*f+N{S+1z$S@138sE&NJk{3q)X^JQePM7AQ
zxOLmb>k>g$u{y;y@*yKFBoQvHYvraTIc|O8Ma6ySdW|!s`_;4jSLm#AmB3#3rct2WZ?-?4tCj+
zTTte+GIfbP{;qh@!+vNJ%K#
z`*94p_M~%|nZf7)2oaXTSqrNnaJ1zDsRo;!
zZZR`DkCnKy$GACV2TrwDOK7;sZ4A@{EmUXFqeLPNFoG8sSu$SV^>9uEVSCVh)Dk4I
zHdLczd>NG{JK|uI$WJ!HQbkY7zI*og*=6IfUP9MC*~kz`R%HL~yNGr$p$VxXSK9Eq-^@w~6{;8aV7U`?j%3|f7m%!cQ$AP7{
z4bZSf=oI=Gwf*|vOFLW(Dt$HOk*RL&O{BWwgU1O;LF9@
z>hesIT|^O568Z={%~pqONO=~rOcC|M$B6Mlp{od8rpSm4tX`bT4*Khv>;x*vr3Na&
zPv&V;o9CJd<&&@Rz&HLt^N#BGo5ByLYe!_PjMKsgJ!dBsNq--J$PGnsZp6Te{=49m{&N~79
zcZ0Qlim>;+k2x*`U{HNBStl+Mx(4fcGv5%De{*FJr8Rn`;a?bpIf1laKxLmVWt2;>
z{EXOqM>6dh6#P5=U&3<)W?!}!oC$5vxJhP~HYC}ixXb6&Llj)siz2f~2#^7zC@Zco
zn%>w81Bg0%Ptapj_`x2Lh5X96{Du*%pa;Zfllm}-SE$Pqby%&rkf`MwEYE}`Ob;AvO-N7cGOIpsNAhRal)pzIojy0Z_sQ}
zXDtP(2-ZqgP~S_SnB&K%ZT4MhLFmD6S{GxA4Idr5K_Oo^a0_|&zR2^1sFSg@I(X(Z
zwmBA;FQ6=qhD95`Tmw#luxwFNa(Tmdf(lt}PrXLaKX=YzuvewO=|*n@apH%p#QPG4
zfp-7&yyrIHqdRf}zf)Xq@~yaGru_8q7II3K267(DkwNUN4waU|`%1|(GK7}T^Clp6
zVzC~J7+(rf&fF1?mv9`wF2%VhPqxQCH8OXV)=s0Fw+IKZOFNFW(WS1rX&IG(^x`oL
z%8yn^;dj{OI)UK_It*?P&M#d|VhlcWyQ^1lh~YMW<(VfB)&-h-ocWT?ER2|UufzOf
zd%fx8`9~_A&xjd(emN0(`AQ{mh+%tm9xe!_MU7E8E6aCF#Ymzw6UDUxl&8%P%CUhg
zlhO*kU_r%CSi7Ov$z!Y{rOKFznLIATKluDd=3k}qJr!^PD<<6{xt9!JnaVxqebxeG
zX=ykZglA|^mZ{3!U64(t$G5^SG3XQaVu=7*EF?00QA=T^9ZT*rx;YI9Clff%8^CJ{
zIpOZ2d7!%ug4B=-5L7e7mQELX3y1_#srSvN-@-t}QH4ZtT)^=Sq+5KTQ38p>P{&aWny=OZ!Ml$l-Nc8>gP#?s$QnvK
zE!4)+!}c|km_R`gV^}#LWCM=(7bIj!HFLEJM;>Ykwtp5BUjMjc9FF}iyj$V(>VE%M
z8chazZ-o}w%DR@kAC&}!NFMf@TtDU#@33VkG^a|gabj|9?gEr)AvVN0sTg~aC13|E
zH0n6f@4*dVISpJ}brDjWL#Ipc=gVa#0yphtz3Dj^@e*L%yM9IC8(!`o3?`pfCr(1O
zO#PI@NV#)rbX7Yx0Eefxu#XBE276IBjtQK8-O3L+R
z2GnA^bTs^+^bhcUL|b3#?hUHfvRs97A48uQc^SDx>0S7$`}2S4V)?&MJS&O$q(Asj
zFH$Lfz7H#wen(a5!6(EHtCq(};jMoRm`i&-{XM*ZSNm$XR_5o!>BXN9=+ePf9-eHciH%{V~%V4z|Gk3{7j(k!A2
zd%H+&=pYrD%7B7PmfTqfny_A^ZMVDK2cP6I~
zSAPJb$PYh9S|9=v*>yDBDJkOqEvEkp7NHO8?1M-@);Wh29n$qVAq&c+Eg=in)>pcl
z%WBi!&I;CmYLCNBL5WB$_#ky@UUly1_~KQoUPty~p0B!>a9z0`ze|WiXUhVw#K|tR
zcsyk>aG?Ms_VQ~|-3Pxv6Ni8NI!W)DHJ_FepR1Tvi28N*^%jj!+ff+Cw)Bn-u6(oL
zgxTo1Wc0i(^T=xQ=5bu;cKG|F-T&kw{x7?q72UdNmRH`TcPs^jRE25=uJ0iLeB
z)C$uQyf*wb_MZw|wGM1~WoE*T*`y?non*g_%^JDFCKgX#{#yYgiMytJvQ;9lurNXB
z282sc0jsx#7?5#47S(w>L~cB%{Gz+2MzPbeGwFH`s)X(b*+ak=ybemKm9GBfHH$k6
z&5e>pg`n_H>Bd@{vII*tlS8;vcG+7|DqC_K2j4k#DHX1#*nRMzjz!E3^4{axdR8M_
zm(YzCY1R`s&CW*+3e&aa6q$!RPvgN2&<4Uf&1Fh71}ArcD3W3DqS>%W
za>Hck2$Aye&A8%9gYnw|Bi<4ciis5IVM&&bJkBAX*I20Q0irNOs{)ar^F|O)uz??B
z6nC?{Y3GASfy-&3dR|`(vE305B1?j|?>Rnjceo#M+zNDRG(HzSo&*E1EF3CgoheUq
z;1#J(LJ`U~IS8neO&4uDm-`Ut>fd(&bsYVS(Cc>GSulv#^GEgL{ZST@bcF^`%UAoY
zP>&L)!bt?m$@v5w#RP5v#CkljlWGM;(MuAd2E~HYtv2{#%MC{~dkeRT{+xz%RQh$@
zKR~x=AS*1{s)Hi
zeWRDp1+B2DBs?Xt=nna?^MHb|8GL0@(VeeWZY5D5#zs(8tW74?#FZK%a6b7s8Rkz=
z&AwZx^Puqr!q}fcC)cqKjxj2Bq+el6Z^5!B64-8&Yof-^_3jF`ow;(yrln~L^x3uP
z5%x*vJyb6B)eDa}BT2&V_;F^%5H=T}p=A5)XQ+yg(<%a5-vQtMsYV<&uzy-!01yK}
zR~{0gA_IixKk53M#qP#~2c|R<*qLa)$X1CZk=r7%sOyMZ-#td5fG!H~;B{8wbv~BQ
zgr2aXM>Tnfn2|RT;+`XHV2uFgo1m)~mTaBB+N7|PnjN#|z;9}zNJAxIQviHk4HyVO
zUGM}1PBZNnO%8*C1y9ov-wsNff!zJ5lC_Pc9#bzO=%zhF-QK}IzR@YHK+!4mPg^6$$w|9wL56ukT-du~A04
zmixWT``4ql`hMT7-^b=2hy4Ie(ITj4j;!C&
zMB$P3TbgM9*U^t7>kn+LzebOY0I8@!?k5Z4(P`A1lZoG;hAh|>SSl+M<*}iC_-zJk
zzp`?!c%{qJ<^*XOh~8+c$)T?@lIT&|+s{Z&_`GsJ&BOB*el)5JULo~lSI9Mq%{L&z
z_Q(hpHsTXB*JB_MubmUcViST8y3%~BWO}hqNU{UmbBho-M35S*KvM9rYr^b6Ye>COL(
z-tm7V_0Y`NB0p-AhU<+3(m_hmt&QP^pGxnINFzKL*N7m0X`w5hE8NQ&ozsNVeky8vC0+no^OFb6~(H
z(?-`}Tz6yu#)8%U0LdH0S*rj*ke&8PfZ=jz{liTy$1@52{HALeZVk3l9T^qUu1d=9
zE@hck^r@Q?)n_@F_cbsa#Z+|GTy5Ulq>a3FEEpT4D9n^bTQk`b^9LBP)U*D4sq}o&
zf6LF8e>LlGS=s`0sj1hGvh~G%)O^RPOfvZY`-I5vFxYkjK3mi%g+u(mNf@X7Peg~`
z2B6R=^DO;K1@De3f4}~q&-Dj5zgV^*wWIf7|6{~2(+~Qz84s~&@AqoT&59%HHPv-}
z>jQ(6hx!rvyLv0Q?|Q3;Wt~^=el5$n_F&igy8@$b_IoT2ek~mH8#|Y1vaM`HC*(oC
zaFy?*My41``bp9BnNwLLGoz3~HIGEGWxk}!cav`aL1`GpgM5#w%*~Xumj-(G=V#xJ
zcwU6^l#`nsU&D%JBW*Wt`$b*k+19T?h6NmJ+~>wlS2ZgL_C6*K&yQk(SHnfM+1y;a
zF!dK*@0lA|>l7K34Tp|@KQ*us_f|rrfe#CIKsbaTUF^FQLys1$X?cODsYdth=mZ0A
z>Z;l&{`i8+*GVJycMq`&A)wV?*uLDe3+BP`UX~di2f9S>S1r=?(9p$XRSse_Ume()
z&X5V+vnp@!gUjyQ;a^~KP3faXe5IP8F>;6Q1|O^t12u1#v2e}YW@uzF^=Ic0PWkcc
z%73sI{wr*vR2tRcnw+}^`y%+}xkcx<<1m9HXGX1BCwLE(3Hdh8mMqMwMRN}P)+!%j
zP1@!XS45bQB2S8%{u1x|(WQN@6(jl`^!kFsCX@VwC`R!wDU_77M0Pf2pGxMFr%zfJ
zK;2Q~zHf&=A&$?3IM0FQsRPveueOKkpGaVx8Nz;ZF+FP5iA=+G*25xJP#3q^&pSd{
zdfiM$=>-hgMD6|Pn<|Qf(I`v|YO}sNiLlA{WOalyYN`_%0q$$Z)MK9J)*=vJD|mX1
z0W;lM%T)G&L$f5wu7*x2sk{($FKWJzWTmB8#qn7*znq_{>Sv`0<-|WA32`iVJ&z^itWraQPU;$rYUI
zP~&5OjZ@^uU!g91Q6y`}=PS~MjgMFlu75K4-^gM3PgIIW!|B>AYL_Y4i;JLh*Z72T
z&`^0>2S7q@GObz(W)CBsNG5>1vvzo%l`CcqxdY0oMNwq%T?olW08~nzA2fR2Od3-Fqs9c!3I@Q`WVcobpnC1&mijI
zbx&(VrPnpzT?fFjys|fryCnyn_Cr6)39FGLZn0BUk*WR@
z{eCP@g3y};fFU%bof8DSo4;DY8mxg>&xWdNpR78_PnTA33{=cr!}!}j@GH%p-@6HT
z!Zb(mx`!j>2{bdX(*5UV)lO=`11BD}tDthx+-ex@I{c(Ru#!KnFseNcy{AqQ2OQ-C
zd|Bu)W=SDVFiAqT0-+zvF~k;Fc;NxVQ^yvv1=v3T;@y;Frw*N)&Gmy_*hBSlSLbBp
zTft0--t6&eLp$-&?jGNm#HZ=?BwP2&Z)bZ!h
znKbnZuo>u;?zz9*^+vfP)jC{!-__to|EE|9x#iRT4-9t;<*;11
zhH3OzPcTU`c!Do8FouC%yBW1`(%fP))&lTHyv+!dJdy6_n~%-0VrKIXio&01b4de3+bG?j))
ze9_vOr~P^8AkcK9Re5w57=sjd3->=^55Pfium>@Tdy<$WU+$-c7qtzuotJ!WO*D!S
zNa}6Vs9SarugRiK9X(btU-MYR^Z_o8xJXuo@o&?#DF_w)qQ?Y`000<^sLq+~zZURw
z%U2x=GYh&z5iTevxtGf9NT8iPD4H
zX|C)vC_V0emWtPuFyMtW+O~aWt}$8Bi3jtMvhUdC-D{0fac7gE{B<&1+8#+_A~uc=7`9Q|rwa?j{eF-{Em_dy
z2yn{YDKycEo=c<^Zuy>9(Ec2+K>7y!K(u2Ywxrc)fchBWU}tzx=bT6h2QdOOuXoDU
zskoJl`S>Y;kUxM(VqfkVdxSJ>zGF&&Rm;9wg|FyjZ!wo-M7s@Mj;fQ?k+Yn7Rpjim
z77my+;g-D_o>dOILE(AMSiKgQwHpjoh)p*9tWAt1^s3VtMpPv*`(~C?h&2GVGIbAS
z=^6u6Kmk^xx@X_Qr<&y>Z@R$ceEL*{oS%A$;-Fu5l?klL)fEuJXF?|>)p>)$EK0Hv
z8me(dbqc(=4_XnxpT1+3HgVVV(?oE9-*Ux&_xF}qHsHcViU7rR;LEo6&
z{TkQbbsEjEDi|46C;&Sw^?-((pI>CX*C0A%p80&1Yp$~X1lCfTdNvb2!Ug_D*EShP
zD*MS-YsE*-D@03I`+i6IoOQltLv>h45H$$RleL2hq15>f#<_7O1l(ri
zvWDUfi+;pjlOeSCN?*qVP2quMXX9I#E6$91z~I+72VS{Ieau#AoBRVv+eB~nSMR)A
z*#0!Rn=D`3h%W%&)G`1iM=g9zx?+VB^l3r1t65T0Tk_S|l?hCwlUFL9iX^?+sni9$
z^CINCJmLGGoOwNvSv$q_5lbv$p2S}@2MKWTC!5i>^@jL9Q|1oD-oAmn)(;|%wX=?L
z6g*lXJ3p5wScE4^t3T*3Z)Rv5C<1Ig=q`ki<4|P7&Uw;lEz`RDE|Yz{>-QXA|Zh*CW6JgGl(A89L%Jh76M@0
zwC&I3VW@n$XJ0Y!`4oyly!V5hU7ugl;P&BfO{N~EbfnTru|NroIM4uaI;zQPLQ?(!
z;5vGvn8MN%zf*5wT8$n}$OO!wS<8_T;)}*JfaI$h2!yS|Uj41r8G<=D_m_Hap1o-$
zNri8)CoGje&lKc=lL~?*-a21#vq{R1HMF=#xS{{_gC~#EuG-N3BD#hsIY3t9v)35&
z4Kr82pB%@`lirl>P|V&j2LISp)C&4)$TUeg5nL6wv~jxCF+Lua`;gsc7`AaV4RFsvWs~2uXpEI1^mXP*IWU4GibV-p%j`g~~`iS)5
zzHmPGc{uumO|XI^e87hj5kKvpGHs#~&6u5(oTN%?Jq^m|hkIaIZ5!Ap$fN;=azzjh
zRlS@XdWv!ZXWJthFKDj~aL@^~sE=A>%l#Okr%~J>^)vZy5&7j;1xjlisoS4+tRa*@fh1#2qBgKdjt%cwrCad
zXf2=n=F(Z)>9u=WIxS_8iF}Qvk#unLMr5k_t=YqZj}G;JfQ9FS_l8#te|@Y=$+*+B
z!P5vVlRgT~J<;LUSKXkk@O-JnS~cZ!=*d@7Mg8BjO3!nSEdFm#I`_TQ<6~nd=l@6b
zdO9&8u>Z*5|G_@8zOZ|sGbKzqNRei}QvAITi>S<8-NO~)Zo
zODOi6h`ffyqo-qz?KeK|Ms{2q)!35m2Ca^*{=J2{bp48_*R0EI?v5Sa8w}J}S*dao
zZHYZH_rtSKWDi9#@2)-Z{H523wCGGaq&q)Ot?ABq9($jlY8)`DR&MYp@>O~i&oFnX
zPcc8AQ%A$oDcdOe?AX(SDQB)dqsrT5Qgr7yop2`dhiulfx@S*Mw*#}Z$cXo7=7|>F
z8asj7^8|fIO%QrLU{+PAqth4USojI`A?%LhGc2&JyyXuwaeX9QC9cNcEQ=)^9
z`lc;qqFVG|g>t#+@p|7#oFIYjj|w|pp3uxj+EYg~(LxD9NX({LdV5O`tjV<*xHF;(
z$qS#1^4oe4Y-l9~E+NVL-vEZRmpb~MfQv+i3R^e#>
zoN)h9Ivya5^z-tlNDoq>ZmtLE5x2VzvRfHl#Yailw=xv2amCF-UN5Q@6Ae@+uRH7b
z%vccqsQQ}Zxc8YE3E?IhVf(_ig2{|d!gWSf=>q@CBr9ijM3r~|uH5>@vrz-KC`%u<
z(6Ii#@AbB>pwLo|Vgf^-7~y_hJ%@+44qw>YTo$PpuxzS^tBH3oOK8!gGRhjQOcC5D
zvk2)oxep)Jis#GTVV5&`JLH=dnEn}DOTQ#^rx8{XDk?iTG9D7{-@EkBJLDSTI}wYk
zmkqr{)D9dyd<%u_yjD0DeA_A#(h+?4MS$k|A&lizh!KA06JEHR8p^=`cSYqc$%Cnc
z|LvQ0wNNJZko-IKyGud7&4&kQEl)YD5KQBaoxDL^7%8)`!}N*jMe?{rnp7EbIJFJu
z=l+tDR8s$-|C+e?_a8zq`oEkJ8N}kBh}P|;*gmBgYzxB1NR!IuAcE(cnc%l~mSeJB
zx0L+P>^NdKW2OkXtaWkCo{XEmzwDD0|4ntYSRTC0u>-N8|~
z8Y)|)UGv5}u=*oPlp4d@%7kzGE?Nky-u?!7I=o43=%&#SCS=uZmLiHO(86Rd#+|g@
zr1S9|BV}J!PdI!DXpi)uAm;4!QB5ljMUX7w>)});jc9>w_?dkS(?I&_8_Vw>Ew?$7#sU={+`XvX?d#
zL9;y}Q$<%k95(98Mi(79Ho~y+T>qJ%
zq3%qB6xu=ljtE_)7YVnC3gQf9
zBn^9*!;+ki$=rc(Gsp2Dr>FR<%ll`AU;E6chnnKVTgEp(KYdL5Z&G}1l&35yulj)D
z#`ElJ%E3qt(T-Qh7JnaH$q9f$q2m3pr$kr6UBIH;2&mC=b#3uf0lEScL@mkbM2syV
zaRV5jfjLRFlnX_qF%CE0z$`S1gHs
zzQHh@=9q}oLhob2*0+;hX;(4ay@qNfGSeeWfg)K*aX3$FDV<&wG|US*-hLrAK32Lx
zmqk!@liPdF&k}ccR&S(rVV|%{>3r+%*|ncnepPKJc=$dnj0K)Dg9RQ-1Gfw(hi7iY
zGM4htfbA{n`>bBC;DxU5-}f7@tD=19M9fWL4(24(j}SKs7&ZSQZ}D;Tlr4GZwNgAPTg=y2@7Lf`8
zE*-F_6)Vh9XPGRSuaq7%mz%x^txgDtKL7Iq5(t!~uRwEDRfPI@iJuuF3|
zjb+&EZ6V5T!Wg{89Zza)J0vA1!>y8+(Nl77o>k!MO2Mg0iS#O|gTYrf89Z>Xq885`
zQO~JfZ72RPwY7iUs2wL;Li$m@Z%k;vv+Z~^P%7BmI+;QM0)S3~1MwL?$L_}>XhCJ#
zGPt|CxgQS@zHL3T?lY8Ri(3fT0zMi{UGo3XGm#66p`VUu(Hdq+zeva>O)6!{Ctoy)
zw}|3&iKcfW!Sh;O;Vlt=w8-+58?_RyFti~8li
zY=PtkXucV~MUcwa2@BH*{H(**qq7?=jYVsyjWywN!s?@b-e6~~5oy>7E3~9O>Z}s~
zS)x09Om6Nm%e0ZjB(rk%V@BT1(iIbP_PSxSpI@kKyGUZML1dM75_Y~5sFtGXumy0D
z`H7{#W6n5Zu7y9~E7xZrLg(20UW7C4GdM!GYw8d-^z`meS5}cDo_K5FzjEKE4mZwy
z?NRC^=b3r8C>w-}B@sgzIpt${$RUWgZCGVkLblW_x}$Pr6ENbFb&hs6-D7(z7*gpN
z43jH1b)*nus#tB%8P!?rD$w&vCU*0tu*E0lCGmATS^a#h*QKmJ^f%y`>Ur%Mlj@Q8
z;gk5a?RCfVS%_uIOQ|@NUL8{TjIli>jOQ${_+NMM-TZ0&Hgl=U3f3@E+^rDdz#2zQ
zRnR1<$^(j>L>Q$;$CqW@+-m>iv<))RcjHOdIy#8QH7)jf&d@-
zYnO@V({HupggZ*xmQsAxkXQ*k`6V0-{O+u8OYb;4%JU1$2+*9e@JJDSX^U?@Qv_L$
zC+6x;YMay%?jqjNd`a1WJjvwFNdj`kcaCq=I)7AjU~|CHE>_g_O!hn!)g50ldYU>~
zG*h=WgiO@lA=*6>X1BBKAXw1z=o)uUV*xGU;ggh-I4q&WlvxzhB(Zv`Hni2P(iY~!
zFsh?E%kE5oM1xwzeI5jE*Ig>DqcAD1PZ*J1RY|tDZ2{tslHT_zyD?&IVd-R48Ycrv
zHfUQ-SmJN)Lx#T{25wvHsIs`tx~UC=HzZ!n6ADXyK*g7RBvuC3YdS^f(PPZC_P}2v
zLcN4pA7k6K%H)!xDty0}FSB$5_pwzC0G)O_5i4InSQL0j0`m$3Gb@frFSA)TsE91A
zyX?^T&e~D&&EX*?
zJ!I*JOkF(+#Dd7ltINJJCvcsS-nw#nz%mL7^rk;rQ;O{dN(94H?TA45?-9RQ%(u;h66;U-N!~oBl8)brt`W5
zIO&T$25
z;*&bA8n(q=QCj=8dnbnn-58;jGWE(s_ql|b;VPWYr#!G^qn{H+L@Jglxi56*|nBENT&~m*ZOmv<*05qP$5eeDzPO
z0;~0#RxB!C33=b3e~Gd_j&oq$`t>#zQKvX-Ef>B~cIurZ>g0J|{{1k`
z5?+k`LQA?8W#ocrRWeEWHv)38tel8AuH)$geT15#1$SvyPp!BT7?~rZvv0$7WmnvK
z4&RGf5bJQDd7?{H+VLcd37NpT2m_>lWZ3X|S34UV$h-_hP&;%r&KI6)++z%7f^Lck
zZfRs?x0&?<6f|FD{oiyNwqf>dzu%1b~<-7UgO%50$t!BspoeSTUC`s
z4|2&4bO;j!6~S`}I1afiox-A`9GZO9vKj8;7OoJQA`qQxEK`h>Ku^`H7~MS?)!D8V_mFly68*7RQy=kdVf7|d%5~DZF(>=#u^>ftk
zs4I!@h}=Ce3OeST4*90j##oC2m(T#c<2^tNSgV=M7sxqekGYUSt$=%Lor1K@S{W#M
z%_h3}C8vqW8-9%E`5Lp>GJ6^Q08uHdNk^vB^QcBLscP@&J*c5pE-{cDw7nnR<;a`a
zm|L6kNNZMXh^aH1o%11|OU_!WL8&paIp;&ajR~*%x-0TKY6LxfLLW_h3TNzhX$K3_
zTt-!CM?ep9GNV4ijb5q`2rWMeQz;zyPrVL5cHO7zn*!&9FdTGpa!sW^c|GsLthN-^
zauo1P%_(XKH(!+kfAN?56URGuN#-H6c&8WxppzB=P8eJ^;PqE0X;IR?R<$m*ps)?^s(lSd
zRmwhU^cVN(z!`p!=Fxp(1D&znYX`8xlYbpooS#CT;P`^FB6asthg&PrjhYEsqiv{J
zVBeOa-i401GVn_3WctW8iWT+6)+Tq2ieXU2q$rG4f6Bd%#;Q#2Ervf9Z|(YZZM~|z
zxKW7alV!U2X91m@m2{pYCXOeu+HB&S6aJY+wRtLR;GU)EhYG{H4f=FF$!E`$wAp|<
zhGnOKgo9Lm1aE;Sqfdn5al8`Z=yR;SI+*m7X3b3+q>fU!!aZ6>mZ)}Wob_H)WYJye
zxm9o?NuEeSNw|jvFH($*^xGwDaDRRiq2&;)7v!b5(Xe0fu=Z)GB6b3=;kmInR-;}y
z3RiSMh$4a6+O~Bh>hp7IRG#se{r5u&t9fRH&QnPzp~L%xqGFM6ntl89?`77m344y=
z40{TAy6_P<=7nj_X*LgL7k)%J=(Fnfc;#p<6aHZ6H8+x}iX~0&C02->4-8w^1Ug
z18?c*sT}_3F{<-I>8%$Q`%Zv-lkRg5=2&MYxp%&c)&lnY+ar2RUwjsn;t%I{UuVcYk=|=r830Mdw?A)l#+jp-MpTWyD!Go@UwP
z%g8nhD_HM~FiS5_p#_ik+>fR+m?5sM2;Eb>&i443V*~49&M`yjCzUby&`f^J!=-nz
z%O9NDJSka%Gwme9~&V>Ve*bPHSlFb$z6)NG^OW0}=MU*9K2M0~C3FiZX
z${$>4&+D@jrf2K?s|hVMtPiT~^6}T%6EdC|1}j-e7`p%wIChR@{gL&OIvpu~uuREtIDhmUc*B_N8dDDyq8~
zDreMW4Yi|=>S1GI$r_E!&Hv@UFvChIGXJi)RwC;nN5#ycx)W5>h4My+ql0=VdhXYK
z2+z5xzW$LC6+?Dc2WO5WJqO6<6SvW?vrPQf;bDlE)G2pvGUC_$z&fneZo`_u5AuM!2t+xb}U4R)?E+^xMYwK-@aSki^04CLzlb2dK6*<=#;
zSgsK}dk&YN9%K`JpvXKHG+ttD7%&I81jW
z$IaGMtpUoE5XtaZMrCRaDR05-o`k|vM^5u)D*dfJZ0-}&lx(74`1KP~)Q#!2G+1Sn
z^8d8I<@UAb#5|m_VU3$)UIf|x#fu=cC}po=)Sp28K1+Uj!&j-Y?k;Mjt>G^@`4&=N
zuDB1>dy895&_ensO|*4AeY7wmn<+5{OcAnF_+EOvW(NLulk*l)6DAo3nPEuOCA-xr
zDjTRKpY(#S7|DCf>rc^$@xXUz_mL9%7v9vrDp*aDSc*bVw@MuLdYk1CnI;xtO?0>$
z_!g+wcdc!5xgRWYK-ViKjXJQomQG%E`Q@7E^0ZfySd%!gro@GPIguwAS+-ZxzS(OD
zst|NzhlnX+>!y06Ha5Ia?=|DRfuL3cA8<0e`rz5Z)LK@e*%|Mh|hoSYDhPb#dY9Trh0P
zxU?KqBNJ7?EH|gI@;}y+uGA2_^}w+d;j-M}$z)Ycm@^1kAa!>18-OKe>1WgR$huVH
z^}HvRE;`reRszpFP_nipk?*~0fqY98BNp?wqm$kcIKI;JXIL|0Ag848o3{!4+?#U_@?hszqVQDLs{H$!&m|+zNX(wgRR8{6zw6V`8-|pK$
zVu4{e)~$*&$Ip``J%bokDt=SyHuTNP#X1@EO$T*YzQuM!3Y4nU`EHiv#mKEan6%Ue
zdfL?@cKy&GwC-&{@*e)HLHJ6A3I!Rl*D7`1Hr--omIoR8irt3#VUDFxrcqN<<%g|+
z5o+`=xJ@7`cI3Ia;rat8I>*4`F2hHnZni?Xg(J((!pO8|{5_Wy)x82(r|`|z_`i?_
z`2=F^S$Z_*Rb|Y{m+PzjeGY{c;xZp;vDyqT(C2U1a29xiNXn_WM39?HLrdQHF|*C2
zWh~gPyD0~#V8-gzSZ61TKWA`b=6;jpz(lKKF_GcFjaYox=rc^4>gX1F};^sdIxQF)K+eh@bifR
zTqC&R_M>%?e`cs8L?fx?Sh&D3D#6ekpSE+h%M66?J^P5Xz{KY@r)P^(T$l)rV_wCR
z80O{@vFWk=vFK2X3Ey%uC^jYm-_2%}mQX`!QPff!Tws_jX8yYT8f{TnZKr$rk6M_X
zd*52t;^$ip~m6p=+s*
z3G?nEfjHZ0JY)u~!fTB{5CNt%@2^UaOC`xprx$N7x{G39`+-8ScDk_}yGRIjNxh
zblR^nbxrS($xBM48q*x2vO{xgsjw0DN%{2ZrxzYsBv!zbE<%(~9tGH6tp)14|rcK$&(L&%cxaV%e_i_(e#EenI
zg+%}y$SH?6%|`9hpW?%ApXjzMnluJ%LocB2=tYKXB@KIdNqYh_7gmR<_}ihc->jzD7)4Yjuw(%~k`{6Yo~#SQ9n#
z#N4n!hYfe5wCQENv&PMHANkoZVa@yQ=J=00(prxNftN=I*%C65C5mKInY%03C
z*6=B3_znlwX_mxghN51_B6mPD@o66@3{vSBO3cxyBukrD9?1GY+AyL?wr?{|%t+fd
zYNlx+MbjcrOT$WvJ`7KId~)@EQ_bW9XmT+QeJ0l2U&VxtDE1gIKIKERe$B;GxZiRc
zT-SIx7c)IFgLQ^(APudwda;
z^AU<%D0nzvTlG$P3h&61;sUG*tKrb)p(UE8X)g|(05ld9pY-rrHr4O5KCJgdKWBr9wV+Fq*va_F@IkiqN|_*Bo~HD*aPiH5fiZx$9N)UT4~2(bVI!TIsC4HKGI
z=}f-EY&i?IlEAG}U=RYTNsCwLoAjPwBt)PW1OzDW()l7^)Ye!QQ8q1kv0awW?a`~v
zWKvqRP9Zbv)p!NZ^_nAfr}RuQnoY&qbz8iqlOZ`5Z;3wnO`^eT2zIkL?1PShZ)hQV
zDRYlx28}LfG1BWs!p>q&2lLKe#{edJI)N&pnuBZsjMv33U4pc7<$=JId;$M&m1T*pXJsK7BzmE3kt9SSIi)o4sztg|W`
zzm4h|9i_y*m{jcIf{L`5rUd_q%d|`y92gmL;nAUZYG!ac7(va`(=#$kS#zm^!?ABkNoDsJ0?-!8%Nj;}O|m#QCP&(ZCKN^Cs*3C68Op_JHrtITL*Os6PAMfr_*u<>l1
zB_C9!!tH+r3>~rc7D5;2Jt@OAeZ-5pu6y*@jVYLokVKt}^cYf9Y1dabid%ClrEAQP
zeXCKx<>z+@hUk~pxu#j4r;Ndf}E=S8bQcH=FpES6gOgd_A&7=}-TDB~luNDR!3K99_
zpdMF-z`jAnM7|5^M*nqoIR@fjrp~3Nn^_w;GXp$pgPOKJkdmeslzz?FZel-81?k@V?+B|?=tuOQ+cb`LpF@>sh(8K=qzAD$mL3wZSB7ic66KggqWcpX^+_s}
zpuUFa^^O$=!>f;oMa#_1t==-_T1|g7Sm&SPx@c#z_bH@_&Mfl=4Pz8GoMDr5$r@=RxaHPPm6na7Ji_^=+<6*c*`F}=vZ8l6Prl_{DPE8
z$i=96L3D-8&dl2D=H5XPS2lmeF}Wfeb`_T-c8&jmbl6Tf+;;kI>I36@&-o^yZ_;ZL
zgq0Hrn{e%iTHLBTA`7{$A&Qm!A76NM8~m-5qTLD`!pN=`7+G)QPXVq*`}$?@_7x&&39sT_
zk-X((Azmf5=Xqv11ctL3}mLRPdJGK`#0#QzDVAi|D3;vLiuER77!
zdEekhAyZCm#rfCSgrBcc$k*47#U8V8VdEiM`HNR{JuClFKhcu7PnMY=nvwOO30!p*
z{kyn!&ntGgxyDfv2Fh^H0r0VSTi2R=U(WyNu<*YZ(~D*LFX5GL9aS^P
z4wWL3L`SwNBiD7LTBG2yKv9A)DAVan`VLqA#f4!#iJ+G16WY;a1+g0L9$HJ_o9=|X
z-8Ymy7ofHAr?tD}D96dPF`1DgW3s)uedH&lsSH>vZNPO#%lkmrE18Y}9I
zDYHB-#m?H&hFBzUzq^c|{Wz
z9LSIBuiS^MafavzKNfSuK1kHdahB@p4`1_>u!>jrtx1NRv@vVnTUDrTLkf6(cK6f^)$f*!cPEP}i
zW{7?5NPzjS%uFa_hWOai`Y2%!yc`~JKogAvyyplZ`qQ#j@_{}xvrU}j&(#dRnF98#
z>4;pq_Tl?%?YoW9I%C=@FWbKXD_G*@S?p7;<@KD~mhCmQkS)>5qq&A2K;hVrKl6dL
zcB}Q^TLwWQT^;0IodJcg;232C*D=j==0qISN=^4^b?Jq@2Y7ChXXAebI5dndEp%k^
z$N$WAHLPKj6BD|)xj7e}+YV@-#aF(a?5O=W0`~rg=;DGuzPXbz<%oHEm2&+BwBm_)
z+I-Zo0}vtg-f}tF7IGuhb+hRTk%V6T`23Y5_>b#6v7)U1m~)<5M{)J9IhZXX9fciL
zA-D9B5(}b)14N)K++sSo*r;5G6dGb0(k$Z6krn+us|Yiq&SFb(?lS&3yU)1z7wNGy
zPpS2Xi^L9Vch3!MC#w06ysW_dbm!D4cxVzmTll6
zXLO#&v6n|OupO^RW%?jUd9u>?WXiM|;6GHGCG5B~Tyw*_KnO)YOn%{yiK{MVR|-BE
z8?B`FcqL@(!v3P%m(4MTK-^qV8Og$hme9YCnPpt^W_6L9{xdqCV|Bno)Y!%TFf5@G
zV%q_=nLF8GXGvi?*Ex)?t{kJRc863IuNtfJ!
z`XDKo@}C)NjadaB3>uPNA6lAV5?qq?Hn6l$Zg8>#Ygi*zw>R`nB&>%zcGGWYCHW-`
zJj=cAd5UHTAmgPd6Sp&OQQhN^EAVL{;1I~K(jxr6Jlx}a5qa<&sV@nzpZSYFGSAto
zTmA6-Mx%L&!sR<6Eu0*mD(&cGHvjn|7urz^1n5vs9Ka)8119CNwfni#+bzCqve`;|~Xsr^{+c$IR`Ws&D6~vp&>9Yq)zdpm<
zEzg>5w{HT%2NOOWO+7KdQ95A8!`;Nmn5&Ag7X4EB)V$OZRlwEn
z;A53z?$Jjo3fJQ9c_qy$Ur#`VIr1Pn$P}C#Kah2nBSEVW~mZaNLyt#qR
zb7X>}INtVa3I*L~EXuiA<6n=xa-!HMv~<27x*$MsTtL>v2Y4lvmu9{Ph0CsBVInwhr#z##1&iF9tI3h!
z9PVF^;iQi8mUZx@?X23keBTlo;?^Pyy?ON;lpzyaFee#k#~v{Ilt}z`iNdKU?^!9?kuO$yTiM!4_Z@(OZZeNq==bj$?zkiL^Jc5OP
zoo(>nFezZ0OGO~UJPgQ%%7f@vsOm6B_N^m6&okN}`G5CI$?(x2iKij~oXdamiQH{z
zZjI)A8F5R)Yzq4sFLCHmn#6N_wNjm6sZ=P(q1f6UL-Ub_s~_B!LDr}&*{!skz@NZm
zSp!jmQQkW2c9=>V=aw${rXclw@HVht+&-{200JXl(|WCBH8@n)z!|Bl$i)OruF9i;{=C|)q4S1teTpmoLA``-@S&a@?@hQmv4Is(=3
z?Jwt;s)q$MaF`8D7=S0lzipX27nyzEPhatJc0J#z*~U#@zWvO|JN)1Gtv@ad@v}eR
zk?%QataY`Am8|sS#wNKRly=aftR2|%cE|#ey^F8u+=!^TaJraptfq7#zyx(_7TYjHGP*?_LkS4YH3uW1n{nEESL*c`~w^
zaaE~LcNrxhdN&AyH0z6k!<-oaCENTTHOWoLGQ}vKknTI2S)hH9b2ez%TTf~!6Vt?G
z&6=GE2;@`Rc4z4B}_ptnr)o7U&^N_C&5imoH=t!w79hxFSZrT=?A
zcm-~Ry>2e@r^}D!ZLd@svw9aSi|q8j0qsTyFIeg~cYksS{{7PqlevENJjQ;Nm2p#-M~J7XkNduq?mVf1FmRo*~M>k@`K&cgd&
z)xUhx9UBLBZlf+i8|PfRYq?n2zH
zB7{0C<(kcF(s&MdF}#A3HMOv0k&;~1aa6QJQ?Tx5H2On}21)LY=jOgAUbYv8Zx$=Q
z4p%I*e!V9v206g8IZ=c80Nmez^r-e<(7jSoX>Fv?r+<7j$G-t+ln9)f)k)wY<2n8I
z)3uDbn!AYZ8YKH9d0U%HOOSTtQN|LMNmJ{E_>n~&663U<;`w|+XcoT=@%1pI%y#?q
z7n$Eh7JC#(WBoTkL-kXOvU#gA`|-W~+`H7qdsn$!FQ5e2@-h`=^SktiqwxA^Jyy~{
zJ>kfVE((_4fZNN5KZ{NE6OF&;U_up?nTjM9`mU&meZtn=?~@Qz`RgY8=jIAV91FZW
zal7OBS$c4$eX)E{tDsTh=*I=)z7MR-rAMSZv(_!~_1A)b3>sV0i-h5j8UERZY?wpL
z@5R3XzWVrP;c*K&@)bH~gY?-@#2|WTGk^3|j5ocW6mAcEbErR(LKdnG2j#ro?bZJs
zVC?^w)t$BRx4HN_0=64Cq6&YA;K5%Ho5yso=2qbq4t#PjT|oG-3<0^4ZmK2m53|J
z)FQCruaMk6$187~@n@BB7S)U-IT|GMfwC3lRb)))XDTE*K**KUx@p@AMDeG5WQe<_
zt(y%%4Fuh3HsVUX;I>yf=C*YppCkvpeWh5a@$p3lUdV0z}HnGWuRBoimIzCLPSx#!XQhvQ^e)->c9XgBJO
zmdt0^>#_>vC_WN!5QxRqn=Lc6`U^|BQLJhz3-|}q{qe?l2e@NHgfSaAtf#VAJTgkh
zM^Ym^z;CkhN)~_&Ahp9c*vR&hze{>u{Siznw>C;;Zk*CHcC|2;{QAuMks4L
z?Z|A&e8h|$Si^3FF%cV0-Yme?17&DXjx0tRF
zGJ@D!YSV&V%B+nGdd?(M9Je4Y)93odi(%cl{J-w7Klx)q=SE2F)j}}<(8w-&+WJbO
z<(qfYS_E1LluWz}j2-aPa~!BEswguy-qM=usjFqB789XjA@s6G1`YD+WdoInx}2~plO$00Q6W99M>u1i(U
zmtvZ<8k%xV=O1**1p411$bf^ERmnF?{PtP(Ne%4XP82ov0p5BhG{s_iw%RBXlN3_p
zCR=;B38DSf-Yfg=Hym8^r@6Q!FtHE0;
zEK}7a36QW8$PojHa|Eop$4(})Md^;C+L;c+OK3(P
z?mAXj#j9s1e+P2I4leECfYRD?2MkWaJL3_5IzZsEUwq2lzIJ#{6HNPo(=GTme)*B}
zFsI~X5(YBowLM$2;*ak$?>j6I993V;Z=^o3*?g&u{RP$t&lMKY
zvA6}tEY%DzDuOt3a`qwhE%V3=TQv^gE2yJog`MYJIScm4K-8rGcU47!Qfpzx!c`3}
zvW;z?|Chl7R832f!UmO2cetX?WmoL)cwSO3W)_s+tZnS_87_WpMj3OP4jOe;boH|%G(WoKv#5rt-F0IviR
zQ#NE6lgJeW(}a+dIg7
ziH4+0FdU&CrXenE9XtN~2gW`dr+j~(oewU=m0lC5syD85eTb7y%aUKN3rEU>$W=(<
z1Uax%v4ab5qP=u^Kh<3UDxs>fM8_YBSgz4r>=P+6usPma-nmnjBFp+kX2|xAiVIljZjWPJYavN4YK+YR;;+#k@3rOmPz@3%zpGMi
zF%G-}FFTkV&VQ_D^7~vq=-NGEISKusU!BkQu8&k!>K*ObO({AVDQMt*`Ct*DM}Svk
zG*MN?CX%jfBV>UN+WmkA&<`-mawJVWi3Sh
zCqSIf8Yv%h>@LmTyNTV^DS#DSn2A#I>(?&B?RCAM3?KDZfj>i3W~eS!e(dq|)QL13
zF)Iv)W*XV(ayj>Y1a^l3#SB!qd3!@6+$72DE&u9L*`;vNg58Phqc-H~$lNypA3yw1
z*L70Xt<%T~t?p_0q$NO)fr$^ESE^~ntkvn`VH!mHV$sL^3I9g;v{Z%y5w;8(;+x=E
zo!Eo1v9R9~8ud{lt5HIBvDlz1r@;)#PuJRke|f4|yqCT=)P_|WxV4LxYYytnRKW2<
zW!{|#CT9|$Sckm524UWD7gUy*T|5#cx5o;CbXpJUTntyewu>#Lm3j|thlza52PyiF
z2q&1T4J2eXRo`d`cV@^LGu6NqS+fn;7a874UU9XsAr|tK%`Wt3`6)^kHhOzYI&L@c
zcdcFVeMpP)%c?OzDXiaPsPHsNgRH+*Ibg0-i$mrL(Dma2-PT~Z+yqXZNMiJ$c-5Jd
z0S|&^-g%*ws2r-iEdSubS=w27wViUe@`Fvg?;gr>8ONV(
z<(z7AqPnr@qQY$@g(d@D@5|U__(bIz^|fNKPi=)6XTV8W7OdY0^@|
zZt9ngS@?T?dW@ZiDCUQ#zkozlZl2|-%(9lcqtT5N(y*!84s$E9u*wsV^%t6AGA10u
z8rG_u0`!|)=OjZu{|mw4>8PdLx+p<**fum2UkUVEi}i}TJx&9n4o;R19c&ZHT6)|Z
z*aOQB3i?9b@8+DyXm&ll3*oB}@|xESkXlqgZg^dZI(X2o#CKo4wY-(dH#7fA=W{1j
zCz~m*H)osOCk%@!o+Z%)lw&X1Jpg$$VtLU*lR{k$ZHI4Yf2hca|qX$~^JXg_s~{U(UNRuD~zapXUsX+rli&7~+ot{Sp#!UJzad9KNDjQiDwF8nt!lB_Ot_1`C!hG>Bs^-(a|@
zVH^#;?_M*Eu*)p86_mJ_tSW}}sXv>&9SyKY{Y$rp=jI?#QqobbewV*b`rjCUVBwHq
z5dL)!>^}@ZlA80_)DrF=8oytLacP(pT@1K|rv4iP5cY4tiPxeSGctNlf&f1hUX8j9A#0l~7A`OzX4+?2@(0ZjKYqx8z
zhDx!ske!nCvUt%Zo>Q~bRl&F2>@4f!^f^P+=I{=mz#A;k*Gj0Zg^{qsvoHNMIlhi6=^*5qLwf)8c(UcwW
zY_&0&>!R!Dh%1!UgU>Buy>JL;q6$7(t#xMmzd2AuE
zVe@RaFiS~U#hzYZO}*yTzyHgYaF~*HmWyfjQxd!5Y>}tOtg&_xh1x7JZLmK<{OLXn~kS?FrXLQ)?ZiUWJrW8uMdI_Ex_7a8`|6I|B
za~lbCHn_WsZ)aPlA<~;Tbl*4PHo41iVvtP2Circ_s^Q**YrkwAOd5*>&D6?;Eo14iim|ebE;ex
zK~Sd*?s+EkLWH6mb<@+o?E+|jAq3XBF=>*i@IXAM2aVp)PwqEu<}?ny@cg>@BXlfhN3SH5_J<2S?XlE@qea-(X!}K9
zaE6YiGq{0c6z%*BOx&E#4}!EqMm~4_9?Kw
znR)I6{zRo~t9UvXYI|aT_F|8G&};pPzC1W1AMFBQynBE1^zy-nagmY#o*s^Fx@SBt
z$8MP%E>bYrhBOls0r%Fwmhf2r%RbsD44UNRbZ*@8p=1@AwQ~$I(u_c;hEK>=$Lh`d
zpc3T7ZfcFwO&on-E*QbtU+yG;t!x}t|0g`|mt|PKhBcL5HJR&iqB~I3Xvr;t3eX7F
z>My@brNLOp@M7U0Y{V@;b`1ejE7C`N)Lee1JmtN$m(%SPDEBhoq?|^3{Y}Zq2XhPg
z<7vGqqSly*5=6IZy{h{uHN?*A`ur>u=lb#AfHz-QjD_zeq3076%K9)79M%NceftA_
z_#Mx`RK1jAY3UQUSF5&DanjfT{HlBLwTH0GvJvc_p^=&4SzoXFwz}3|V!pI0MX_r&1?7MKmwQ{52ZgxM!-TKO15CC~PWuqHT+`Z4v6WjtFl2E%`5}T$LSu#q8vA)))>#%$E+S={@0=@9z9s
za9nsJ0Pe?>-NUt?i}eXV7V5Gl0S{Cm=U4@c7VVZV0EX#0MSy+Sx+W
zz2;G3aUik9X)w2Y!Ti@?&>8OC#cLV!J7*{WK(Mnc#Zy<=ax@i5F(g0LpOA!(#kRMK
ztkM4$14|w<6Fv>iPsE~EN87O+_oa0ENsT(~S^JC1TH+-mSN8X56vO}k)a5yb6tDk>ySI#L
zt83SVLr5S<&;*BuAcc?wciIMb8YD=N1}$E^Kn;SsJG8jFYl}M+FWTazE!5qf!@KwU
z^w~eok2AjWWAE=I8DovP)>vz-HM8cN_q^`wy5?ViPi9oW7AZj)V3TOku-z$);=_>k
z$rFC*x{jao6F)u}4s%u>2TRaTW-^MHY2^s&L5qPc?UuJIWjfi&(orsD8hbKC8Xca$
z05*=`VK)lZ7`4piI-H%~zP#L9S}up@UvEGEA(yoHI62-I7&J)eHtzfoJeJ)b|FWcQ
zW~uro6RP6nZv~nQ`Cn2>s6~}abB5H4!;dMvYqNBuE6IC>S0-Ovn_a_WV{#$`WcQBN
z@3d>*S<2D%%AWKSAW4KC}FfGqd
z#t$E`<6|C?*{S4D+)vU1Z~&-jTBNse2Qh_wn^&dAZcH@%9Ii{1Tdz@L%#{`yd#GX7
z3DxAiqZM3dA3U8^6Gs2cL1BoVr@pgr_JgKGyN&pVjNfHM4uHWO?T$>%Wg$srSB?R#
z2$QP9=5q=CL&zi1yZd1bJnQx?3X@T*?|d{bCpMnBDx}hS*LCXcYGrqA8CHvwrhX2S
zwSOZUI3Ma0Eb$FnIcvds?Jt0Io~dfCU{e!{l8;N2tc|G~da4V^XmZe)#UjQs(}xaHHNdwJRK%J~m+hb)f&
z0?5dG`Pcr(zCV}Of2c9NOT6Cw8vQCOvqL{%Lbj0cd#Vd-OX7;M^r4!j(q#GPfT{7M
z)#n<@yvY;mF8&v3wUPS569QKI=1j?KG@)bADwilG)9JU5b9@2k8Pj_#pYJY2syMEH
z;ho?qde8i(fSviqXj?l+vqjr2?pp$t{Hz9wIwXtE(YQ3L#cVpMBd!jJJX&rU~!{6!3_I8x3$=l8pOcn
zp%5*4!)q3(`ZZ*UC<8tVymHLM&SA~lU9rGKRbES1cV$6a#Bco8S}y<5$aU*gd+)EB
zBlHx^Ef=;19<=i_a(uot;gkLdH$n#7)lrUBTUg@_U+3vlIvP)Nc2E&nk?5dt6o1b@tK?j5u60gT
zO(f%sR~rnT4l)e@M^d(arTqIIeK!WbkKsFRWDMKT3;$-xHmkyp8L+oDMON3oHmpa0
zDUDL?SoLgN_;$ydOSr^vnq1QYk`z{oGw-?KaEVU5fvkf*Y1%v;8E?fK$Oal}VG(Cu
zVb{1J4-hojefnVZ)91_o{^Le8I(#*rh#GR!P=gG1B@>v0Te)(m-Ga15qp@y#n0X3m
zG|H4t*D}UZ+RF$&#xg2nJ6if=Mfl^^@(sfQx&N-sAo%8`zbnfJt?+c^r^4_Zn&-W#
zLdjm+m#7}xIB^!>2!rH@gzq|}LUF|k%6;#DSO`wPoUVSWihmRn#r0^*Qa6Jchv`y;~sF@AP0o4s&F5%y?~)xxvNn-^clCNt^@&5VLnP
z#boSN>}~Hiz2ClyKnVdtElgS6aLhVH*${^j=Z0Tv|8c=pjZgCQR`UK|fV#O!;JN_t
z32J{l$!Q>pZ*Z8FJZZSBV?eU!Z01IG^-+tN_Jq14_kZm7%
zHv7U}9)W?u#C)242=+H?|=O3+GE|FVkH74IDx#Nrt
zIOcFd`6H=%vD=0+9CWV|Ujp?m5%r0B-#b?pQ9_Z})-zN|aJzn$C9FNMa1U8NoC7s>
z?o+E&Q|h#W&4*s)^pxLIR2xk-dZpVg$zK*X6_yAR!9c-bi2=^Co$1jx!1)}#)t^?|
zg+dnhOwIJ|63uOEGU-aO(I*v$Id$Dl@;Dz1ol|S>Cc!>1UPhJ4wPnEA#oBCp^6HN0
zl9etE6MGOH9gyi$X&>DBSC7@@E3(+LYKz;7cSun)`eC~tVp7x%opYRRz11!H3oGEb
zc&KB7wYS7vFM!x6f6w(#!eBn>{oc
zNuB|+?X{auB|*P08(3DuoCh>VEj0{0k)9Fr1ozcxH_ge!h3x7!h|2zE`A%5)uSJpe
zZ_VdfYMi}SXJun?3JMt6ir-FMYAqD+7;puv
zZT7gvWdk90nJZlGHYGb4a05$5X`r=nYN&_A=z;60TX}M9f`|=zXXcP#!4Us(uFr=}
zz!l@#kxU3nethC+AR*HsdEKJ77`33y+WL^CbL6qnrkd;6PzZ-e65_>P7|GUOxx9A7
z%5T$nY~k0{e_9)IQWSS8@eVPlRuS4-sCVDZtyZTzMubwpp!`ZpEYPO07!#YGYRNB?
z%kmvZY0BTb7XV$Mje04=E`w7N*9O*B3^vpOB%VUCd>pj#J8&*HTIHLHIJV-Fc|0I|
zHn(MxAc4BGIBqk+DvSCPl`*
zB>SMtUSeyOkm=5D4Jju5+zXNpv_$b#u^|!lBN1Hd0JHEy!*V({PsX`LC%w37t6Si)CFvyrSqm;0qCs34LdS-VW2rV4T20ktCJ{hfSU7eHif3dPSo3xp6xR-pL
z+bp;-c?E7^ju%YQ-JK1*<{up
zoq8}>a%&ld-ewDkh;~n4h%e)*{?%0N^N~b`_JT_{qgpa~X#}%yHg2&)#%o4xhh-St
zJH_L;>z6zn_S|kjE2(YNVrVj2ZM|y4Xt7vQh5TuH;+QGfn*N6FYN;uiaKB)H1A1od
z%g}mmNyBJ-lioLP>1Gs*hiZ?RKH#T-`t_yNOaw0j?Ow(wsure&+md@b$hY;qb(ER)
zHR{<{TwAjTnH2X`y@m9;VQ7BN@VdCHY4(WkS*DVDmBSv&iQchhozahKPVbaJf+t#D
zE2k8G*r%}+edYXui>XlRi9E_Zt^JHR^Ibb5_5>AR2)7AVi}|+5kQXBLsoYht7c-Ug
zB&Njb4VrKDvHOGjZF=Fe`?ZBOsUFmW3H1is^eB_cO>y!Eh{K7Pp}h|~0iM~%Z`6De
zDOBRUO3`v~ka?3)-$DY7ZY~in5i;db#DPOokZ*BydspBie)Vp?bs6YrWjE&cCR6UK
zGdB>OicY1pn-=it!3ou2uJFCUT&xq2P`cSM%qPQ-?$fxKx9PNM()5Dcc9N?cxF+R~
zDOXtUi|^8i_QH5ZSa!|i|j^*8pwuty>rL4cP&OWDs@^f@CJrbf@^w&W&GXz`1oV%@MqLs
z?sB`V;t+H$Dp@}&pI(Bf151uRGnJFREv-La8M_r~Q^1m0k-N<%H#TNP!}$*CR_#_>
zm+l!(A);!JGmU`sn`}7)OJ8_3ht16)=GVnq!cejha
zkQKjyFnp=AE@VAUby49%jxZBJnQ;j`xg9wnbBcT;+GW+59M$(G8C=kr(zO*&pujNNX$P^s&;3`
z52=u4EyyP9O@zZkHXcgDtKrc?4^|fACzr{4k+Pu79YI=hK$7YT;30>V()@3CQHHl0
zpyNh}Jrsv3D1ZGY&^vCl+I+r19`qGg<-?jq+QVtvpJwP$E^|A(V09zPb(%%U>h}{D
zxZ0~V;N?wZ>#f28KDFhG88i>UjTzp4A7c+!KJf2dVntW7#X7X{MA=Tb0ImaTZ5*NU
z-i^B}@#BX)1O{gb{ft!16xgh=wH2w>UE$^8m)Lq95p>;uE<&Kx!$vU~k6yBlUPRMw
z5e_1o!DInx6;u|D#`+_0tiY)5?Z=u(TUJb4=#~&X+Lw_g(zd9U>UCCT{t)P7-AygR
zsoNl*;-Kc;j<)@G+Mawf&-_*5lDo$vGWF&rvSq;0EU0!ErK!#658OPePGxE|?w|{%qXcE!9wBP>Iub`iv9u}
zH~?zxjHT&}Wg7fNehBCER)-oqTu=xsuQynS1PF0GlqYfbTOgOmra3G{F*aa
z-O6U|k%H4IhA`A$ZoZ|JO@(#so9U(W?4mAc;KxB3;Q~Ret75u?gh(1Y>82*NZ>FU~
zUiIpHU)c+T420md`KR$hEH9rq2QYbzBW1QJ(tL08bG=Z)Eye@ew0r-Ah-;{*4zsDs
zW4dS^aqEaxcU1D%^c=N{!aeOl!4MIHyc;g|>C_5fu=yKlyZpnF4XBw|tR-Qd{lYw#
zxlJgy1naX=zufEG2?Vy?^g5H1)9eESU32=!8DGM=t{`KHEmavi#?R)Tfc%KdBe(uc
zM@EHwM-`965@}2*oa@U}2i*!C%Z%rXJ=Md@`lSc8l-gBHkzXohM~JM$_N=gv&GGt%
zG_bH2AuanhY44L_GDa56zqJ!!|ppuL_n_hoU{T
z+_BBs&vgpQSLi6AYcP6CmBBE)J&%IWbwP#`GyZvGC9geBom$d9pRn3xZ>yCqmCPaT
z#UL*uz}Nkd7tv5yE9mn~2b0M4oJ%|Bt9z7eoP~Ay>v80+h_%7hx2PWm-?bRffb;|)
z?#cR%$~s~CET!(29wQ30TcOlUpIj^nV%TlYE)yU;oJjYo_%=$tK-9`Ec_;$hGf0wW
zFRTjU@rJD_fVi4nW8)2O-Fdq;d=_HHh7ae>(+Mk~y=#48&lTXMZ%hfvp&N5v4nruj
zCGIXxpquHXtYvnw;h;GdFx1Sn2)nmSu}8&NfStnfl&aN4_OhuPXNP?$Rzayt6(nfD
zG&BY21D*QW#+<2X5n0=*Y_cBV*K1)+3+_|(bfi;}ClPn&G3t}Oq
z0VBFw_4dXp%}jcME^>acZ)B@S5ceY{mRMO7aGxbDrOrSt%%jQ(e~9gLAEG39n~rMz
z?tXG~)3RCxk{Bh1PYW`Kln&7)J1OA)6^uZ&tORD@`b-pN52WZR&l5#3
z6NEKWUva?Y#}^M8NWjygqkuc(_waM3Pf8(Z#$k!!@4I}>8`;&(t8(4VDL?d4&gPX0
z0jTKIpLX}?0!4%9)e;Zfyj=0e(jMDH3R05nPbEaWRBV3674?gPrl6WEof|@a+e>U(
zhVOhbE=>_o?T2W*X?wM(<=S4nes4(=G(Y_9voalw?TT`qk3^<^`$H)jkgfU4xmzA|
zFu#RHTAq^FfjQOMBUCNsh`x@>g$fm&zUzKNkjZ%k#U=0rvB+`jVnrC~mgnX)vP$k4
zV?5W3mDtC~4!OhhPWl5)p|O=1vEN^bb-DzjTsI$a8-lT|@a-&~_&Nu=nx^aMzBQ-Y
zIvQ`yvo)>UY$s$7X)SL42bP!OxP6o4kZUlZ_m0+7wOklp;}C5}XVBW%gTPB(V9OTM
z(D$9=T$S$TYc?ARX*f{%PO0yblIG~02lf?aA@%e5q=wUdFEz1Dls<%UgqTIT&N
zW6}l1k~X6I3nPDcF
z)JU$r2-y=3jA@y)c3$4cE)d>{as?s4N9Avw<38r(q>+wr(_^x1qM-w=oXUc(p~H#Zh~K#*?~h
zq93b&V_W%Gf={6%-=<6zcQ`O%Lro7)54C$IUm325SA!DNt5v3R98LtSTw!y_#V!Bg
zdeyk?yB6@TS);~bS>6H`X1^}Be2(Nl;G5`vO{wbjf(c_KRtO+VdeS7jg}ELf
zR!KHRV(m<-V_Rdm(c#igtR;K41`p+|$}{8<
z>epxE&<^z$s`El$wuoPi#nOb{-9#_N*ET9&oZIp0FvM}tGx1XB(!nqs6D!qFxU*n48`7Y=`Vu+J_X7k#^(`;$nwm<(W5KG(JuP}OY70t=@acJ<
zDXAb$euR-^q^87^WZ`1r*5ulDmkSU&(u~Z|j?=HJa{DYS%uFpjv1u#y9&7cv4SNWbGIsDGsg(UTN|h)*MpU-)Xas5QF3!><5z!~?wL|Npw)w5L=8wuwwq##1
zSZpt8%(Wb8*}o0zq;E6eJqE2w3$JDF+>{)#gu90UYuiCgL+f|7NI#2W!xF+Ugav*R
z8w$11aC*9De`24BAvwwUWvL0%2AQzJkZG>B;J_rWw0PA6me@H}dvxpAF>m~=zWopt
zlllDoOwFj&cONUxZ*tGaiNkK|y>AyUq~NQ^UA%%{39{)pYlyq9B<$N8i4`6eo{M~w
zE^{(K3I~J7s1xmKhe}|3RUEnpk6=*ejU%U)lLd1R8Yrt=&y@Zp1dZo#d^<{rP)vnL
z(Ly{};v23-EpdoY)`c-hwBPP1B
zE9v_coNKvwjMc0~bXg)iG9g_7B4Wd(1R_W&Y=I3%=LS}2^iTI)@ZcC$HoS)gyIcEm
z7~Y7@vrfOO^u=vlu0|4hpwnBZXX_Wg{LGmQ^=(q>=fC_@ie1OqYBh8Iu;n(LF>;W
z@pxW)tCU<=!lFav!fx(n!$k``m&dUGGfp{+YiD{glyKE*8zEg{pHaOsKq!4a79J~$
zKoKqQckq40km=eKv#JMgxZ_@`a$jzqCyLpUbc^l9H!i%L{pAuN#vQXi6-Q{!oF28*
zL-11^tS~Vf+8tOJ{fN*!OCrjK59U1X2%HyNrQ(lb63D-=E|31
zaxQVv&Fu{Q46oGwnAF7-rj>(vS2ND@S!K^>2RLIP1D>sc7inT5&?tKi
z?sNr*QMw>`T7D4F-7N#O3K@y`aUJZ51$le-5Gy^nl2Ec5+)$1UCWQ5{m9crla55!T
zY<_tVFE)!>h|#Pq;7FcG=d79s_sDY)oqA58T5=t<8=C%*RNj7=%(LzmIh~-v4Y$%l
zRn1GvB*z{2UV&C(17!IWtsl$^v3&d7*fSPdq1Sj+m*q*Wum!l5Zo6hWBg<&fA~EYY
zFu;c<^-&Uci#GymwwP7o9@Vb36aD@#fD+yP>-g$PI&r@c=pozS^C$?NOK_aiN?8A2
zfY~zRe}f;T2$+c?a{@-g3WGP1Xzj>eTU{`{D+K&0>yNv6=TCA)`w0296W)mwzGlhL
zES)R5n73Mdm?TRmlVCXZ;LrCEi0m_QnKU$HS{E~z%cd@^1KoyOovMTMNnnGbOs4u~
za`1CD#}r^~3svna%fm@ivJo-AUFMZUhuX9W=lAlCSeR=<*Z0BqVBm=mjlXFw%Vvl_
ztJNcATD7%un@9B*vy!Bz=9v|Ql(|&1s@dJH=}-jfQ_0Y0VOqcB_he7`)>XJazm;|4
z@tp6rq1Y5Xx|?=aT{^i;b4I~LeSR%7AK<SL+^TQ>kShe5dgo5g^L!ATN>399MeYCl
zTEN|Gz)4&UqwjvE8?btjRR69LrdDXzfqM2J|DZ=z9uV7>xIm+ajHo@%b{R}kgx+w;
zYv~o?HRih!K~b>6VQR9Zl})O11>LXrAfdv88m>{pM84>sX~X+jnGMcD=(MK#Uf(O`
z);0K5zcbZ2eKznfv_ph##H#DLKUcy#&0wTZ*FWvcNN=cdM1Wo*Q8zU8Jp3EPK`#mG
zt|?Vle@rr~Wy}|{ADl*>?B;xPMM92UGc7NY@RMoS%W|UF<|KPAw%IDDcH!mR1CiSZ
zgvoMcg(lZnh6x=7yL$VK3g`3QhJ<8e3}n;VA8=0^lJN!
zwwWXY1zQX2+41Na8
z8Y(fH@}>FU0`f?A>BcRckKkp@Bm>$n^n0k1S$n=qt1cDulJ1(>HJqk-u!wAkaCQfk
z*$Sd9?Ba8g1=Of~gof8*SfGem|EiBcaG7geH|e{!5!Tw)m}A(W3jE!}_(VO-wDF7XLY)F)edTVWrfZ%S0*J|h%FQKnYEOG
znV0#Fn~Qu+LkoZE^B~
z05ZKtfcvt_j(7&y*8_i=9;-xxG&ZgHZEN}@q`Pr2iHWG|Pl@JrF;8F+axt4{i+ySt
zExV#=(+P4irWdx%Kjr>>T_?;~=THkAPEQd=iTg#Hc$~fRee_>n_uNB)-5h&5yy4XR
zb)zFUJ-el?Rq+>paDg|RmU^)o=#>GIpxZAU_8wVLbbw2&x&X}8@di6Jg(F+;IYZ5k
zXV>Z?#EdQ>K1o79SL78d+c8bOjGer6@mnk4Os{d0y%(zm@}2tIoa>`j+ck=`NJ2y=
zs`kW1ACEMI2*a(#?*KIUmEWr%Xe8v&^Md8V
zIaPU#*qz`M+PV0ghU6hc7k_y3lIT$;rDS3tdGQs6r)+K4O8Qq`VX2h8JA0??#kj(Q
zvubke3kOy!--Gx__OURbDe=8jg{KuTxj>N1|fcYB994sD;(&{X8#g{3yX0IBR!Xt%xX)WqZ5MK1qx6
zjd=_c)9zxtDle040A-CBz)S(gn^g<6ur^>|&=!)uY;pqLsB8H)%{9YSg*n{OsFwzq
zc6c#>ZvFm~DMRQwnCGGrpq8!vH1+k82J+8kGGD77Yw2yylrc5>1mAxOqbp^uWLi#R
z1V&m`FlTm3%C8Ia$;Tu(Ec6ER9Lh&U)HWU{I(R(U(Pq`}uF9TeSA|biN!su~J(Y3(
z_EN66ohe?9Hrn}hMeVEE7`FkA!Q!wtC_67sToTk9rd{ooAJ^`7?nUzUYPMPeqh_+z
zf;SI|e2bjd%H^;2Y0a8XBy+6#_F15UB>F)0^3|fGYKTg>Vu#c6JXS(hh-D#Ioy|lJ
zK+CnA#p0RXY!}z=&W*G9aZS(N>LPpZ<>`-WqWC6^2RS*mupp(AY7S})C1@RBXP-t&
zTAGsilXq-u#>@LxKCb=~AJ08W>vZl8V_gh4**~S-!=u|19O;+aFb*2$
zwnx~)c(*nJ+>@CG7{sE||
zA1N)H68t2OOoJ^tYKooX2laWCu{5blNpp91bhCs^s9}qRW!GTM-i{^5cA$oJ@tvqo
z;eIC^dDBD_8w<;qlo688lA1Mc`UftIc+U$5D3|qG)ZD_ke-hSQifXkfky8|Rf
z%H3_NFT8M8?e+thUHLRgqT?+FoA_Ez
zH6oL!+NVEN7{>OA<~?}7hSEFG>*HPTad?yga=7e@=*D*o3Y)PbrzlZH^a?K_!*AiN
zac(vCmwmi^nH9LmnX~~@E)a652gaw1*~nnrROW`aI&u-^U{95Bq$v+B9=Hh*_436F
za8;8qOto-OE7Nd_sAdsU=U_t0^*s(-x^})RPKJD1FuOSEcN!5ct0e(hI<+b;w3mbD
ze4i#JG=4NSQ!o*X3h8qeYR)iwNMW;3-SpzD|7FURm;dzi-1Q>1#}pCC>Nyr=<;L}e
zlkAe5W;E+9nRwX>Y@|ptgQw9#&s%cYFoR$Gv%}{QmIH9TL|tr})M=+%TKa}IC+S^{
zXk?D5E0-HX^;cy0jL?kVj1NwOI+~@Cty^KEm_p3q0#3DJohl#EsYkT~1jaXd<)m%P
zX?#53u@H@2nr3$0R9?yPgwP_OY$Q<$86t9zCzn5T*2}l^J>GStl{10&L;w@vzi^rK
zJl=TwETSG?*FAPCy;bFSwH^S!&$hzNqjn`gF#u-rRx}1LiSKs4uE{Q=+r0cX+|g6r|6>akc1D$jkDR63Ori^{Na8rBZbp9c4D&52$SqL0oOb
zebb1cI@)#}vxThOm8C2gO^CI2WPgn+eo30@do64UGWa^pdY`_pbW8G@#@olX@Z&xb
znGEBq*l38wVPZ0k*|k+wArH_sa-J26q@UO7!)>|Pulc~(tP7_)rS83W%4j6a9zerMjy{So6+&A;SXnj)Uzd
zCwG~PoVDHXMY$*+OGS7!%lG^G(a5zi9)l#yS^<$)*lIJX(qcRxt6h*4v+ZY096SqE0W(RT;_C1MtKb(|C&R}p!?hx?)TQ8`ia-=p^a2%Zdsza
zVU=c3pOP+5qq8EUi4qy#E!lkNpUE*%%-;eaHj^=P0{mQBi;2w(arff-{+u7(zE-1_
zm2IPIrB7v1{uEj1BteF08f#mP>QUuJFPs~A05qshji%xfoei|oLH0%y3iRbnYK6!5
zM(h4ugd8WCURt4^HIg}6W`9XHIj>zRDk?9SU+8)|u`6onp3OR4<7ygNR;RTkvfCoj
zIE!9CRtRETZwjySYiN!>)Bon3{@c3zQT7Y*qjRO&|J#Ms-bu!PnlU7Y5@Zv?>Mq3U
zl)7T05n-PT%Y^(a<-4H(2*>%4Azz$R7&+A~>Z{}C!3T7o={d9*735%XS%{{6!#^+A
z^!H@}7mTokDIhlzbh>_V7Yk0OUx;?_IUG-4^Dt(1_Jop1iNSwsPT
zS+a1XE0)t;lC}Bf_8XKH$~_jz-c8Y|&~7}K9!?yqBT|`KwWRtGs8&uilSCRTfT99=
zPdS<)i_}ALZt6AX%dokQUIJ}?QIzIo3a?PW46uBB!m7kDbI4|q&420yPI%(6OVPdS
zUu19&xsQw;#%3o6ui0gYX&z(85gmgSNE889hD~(@%CD!37kRf
zG#mP3W9RM_L260A*!h%Z$*ZGPGCJWEZIP&l%rRY;HQYr~s~wzJ*@VD}(D7yB)SU4m
z2r}q$a68pTly0bb(Dx%9Fq)ouo>q?>=P+zNK<766$s&{~Qq~=ow)ly^D_d!4#bh7L
zuJiF
zCK8`m$Rg)`fHrZL=zeRU)wnZKWYassuG1wFT4A?#IN$0;Q~!XN#**gEo29
zL|d7K_hGNxJ$&wZjTq|BHhP$0?^VjAWKng4s%pe
zCU)(%W^p@gH7PCV1!Y885^^xEp;SoANROYgGW`M&>0%mhyQtb*O-UD!ee4sy7#&DY
z6!ZQh$Q)SUD)kqD3ts{rmIU7pi`LSD`Q8?q<6-f==$IB$EEQpVQ-(()DagBnzNIdp
zQvfifCpEKL1_&NlS3|xFn9P9^O=x&2%wch@8Th7JYlpXyu6!3zv*V_oq*@~Z`!ELd
zL%h^5Z=?`0hgcW()xI1k(H75&u(nxeuJ&8tAD%O}r#0Is2PucmHTw^y
z==I=F*ri|+ebKSPo2mBZx5v8M%gPG#M6j+&3PM$;O82fs<(G=9ZecggqHWuIwS`J
z8CQ}?IeP~N;07CRVvkS6)SX_Z59xLrMy`(w%;xl67#O}`n0ZanjDjViqo;FG
z+%iphVD<666tFZVlGRt|ALDy4y4t*X
zvt_e-u{lH4+uk)@oTXIPF1~fC(0jKa^ox?yyMq+zn5&h337ua9AzS-1xDCC?~K+m&4i><76f}hR(GK!}vC*9f{#fTKW7qLrbr8AMmoLh&7455=4
zRjo}^*V_1%>iS21Q2+h<{5p4C@+G@OMc+&P3y|?M=I4XMD~Epp`2PZ2{Kok0%H+MN
z-|D}wzQ6GP|Kxbu1xssi8NMc!$z@s#HwY&>UQ%ZKWbthQhf}Qs09-FL{~g7rY^1MK
z`W@Zwvbu&@vzQ6YdcWiR|9HXD)|tKM@0jaK{y#O*B*~n^lEpt^-j-kEZ`s)13U?kY
zjT6Q9Ya*oY#;FcB+t`pEb$Q95E^n6w_r$b=(&Q4@Y>cv>o?9SUa0tm8aN9cp#`RG0
znMbS~;rIq^+h0!aQ_X$S*kU9YN?Oar_
z*RQ6(=P`F@Eh^33{{pyD7OCuc&dmDOJKV%B>c{(cPpT#BAmit~7|L#0wL2N3`A}ewe1UIgAkc6{;6yrG0kyZ;0<()qgaDbCK5%skx{Y)0f{b
zu712)ck;ku@p4n?oogE3AI5#U!}|Z<-3WfYfydYXr8AMdfAG)K{#(-K>Bw6ad#-c~
z>WZ=7e>#p?0PZh6JL;UdMXj?2Qn|%K+dSQ4NDg6jEzsB$UX+V#H!St~A74qz=Nk%4&I+fJ=XFh#zCi>to$o7%2
zAx1a#P_JmLn*ysgc&PDP==9gWnd>=UAK?NBPYz;7^xQJNgaUB}2%Y6_Ti@F&!yF8+ylqELpX36>H9_k8C*-pk_N!MfWV+
z4n*i;&xKZ}w5}&NB7H+{Z??2MuLAYMEQmiVSfU)=aSM9QY_wNy{1G`0{%%?bu-99$
z02Uf(aE95gs)1fn+W`!jw%Hc_$
z0`e;=sB$FyaxS>>;ujppf1n2KV1Liop6
zg+@g>4mGw#V_V&t-d*|!(DeVsg}A|6zTsR)=c#@pEf>1)cYr#=gbfl3I_C5l${s}r$Qnk|cmr6Qh7YW}Gwz}c%I#km4D7j>l-rD!)gg)bld;U=ZR8pKs
zV=+o%?|9wH#dmD%@sc&v>qS@P(}Mr54GGxy56j>Echt;>WL1v3#iS2i9&-7tl!(Ds
zVcPL~E|JV6+5RI7MgGY0e_&#Qk{2^XJu1pE40Blg+NWKeYc2
zf?o5kZw*Gaw(~O5xjH&BTwF<0ZYcW7
zBHH}EIp)ukbH1KWR9JaF6Ymvx
zij>cBMzL{fQVfNWD5_Cy43y=8`t809@61QYJ!^vKo=~ty`@^((Dz%U!g?ftLN5d3u
zXj^8Bn@*b?sf(kBgIYisTQvEc2`!bsrK>Jao};%l3w^oC(tq-{=NCw*UBH@S|51^!
z4k@RenWlk_%MD$?lI!i3RaRu?V?}d)3pTnnKkrNL%KdQ%KZ9awnJM_@BFBUd5Q`4k
z_@H+rMqCmvk`Q=l=1U|5)=O4Y=7fhqMPmExLzYe|#a>D%b(wF;5gvTzlHdURD*HP`
zxykURB5Cq@c(&C36dJ5Irt8Uu&|2uF?-pwNckL!c2?v~EVh|cNGe}L`V
zemp(+0$+H`v?DpM&@$@Sd^p{nkoz*u0E=bFDvl|qW@17fE^G)d^_w5RqI+U$dAK{R
z;8DgH-vOEu$gDs}G$7pq3h_t~=DFlxpHBY1MUXRF+uZ+1S>b=`9aAZA)c*wzYo?D;
zi#7aQ87{}nZ)}|c@Zh0UB_L+Opn3z1M6pD<2u4RLa6yuRRtJV(DZT4i1Z`r)htT7{zQ7+yJ3pA>261L9k
z+6#gMGJ^rt8QbXtH1VraC*bevwE3WY9oRYyC(MX`;Q8Lg8@R9Z8{g9~EmsBVdW;UC_?{IiAR
zVFg=Uk%~bXzz!N|Y&2!P)A*hBY6(wZvR-Oi_=jT18yOlbA9SLH>{XVC9cnG5+ItT0
z&EmNu{rk3%Y!RP0AFxpeRr6nf&W@kqo^w&Pg1e{i`fzu*IxPTHFHasSFPgp3(El^zXNlIo)HK6I0e{xpBc;bbU+Lw|Dom
zba0LYb*O_qPq7*Mu<29Ncd^lXoDYS0A-~ml_TQ?+)d6}kX|imdGt0di?|M9><1SDG
z&H@Z})||_Sn7iTZm=CD0YCjy(+KRkY?lDjf@#>yW-&b4dqP5*YTp@5C8I)*nF+z}Q
z#%DxJWOY#A42}k~9cU;8kUva|lE>X!l5<&TNToEB^h_t8D7*87PNb!C`Q$dhNX+%M
zHULSpy!`8)e6E#jE$PDDolgnVu^98(9p?ud2PUdD4gMk5ilAzl1d`(ojEC#_kQmOh
ztfZeDNg57%_BTZi4*(R0$2D8T>FUD?Sr7d@)2i`k*M1l^St;#ZFqRiHx^jeYz+_m+
zMK;7ysmD@FjB%+lp8A+o2|ARQhC^E4n8_2D!xo)Hx?z+!D1=5#md%-U(lVgej3@Jw
zagZ-{19ug^PHDl0mZ5mj@5{y1r>dSEl*Y7Mu2)R|)#IPJv_B-ii?3~HaxE3m%~t)KZFhtGZa0<&zsprFlSuP|$@O25Z|
z*WsWodes{w)a6TCqgj=W<)m2@!MGzO>}`oAr+0Z=Ecyywp9@-=c5*7xQ#tNsrbd(s
z*3j<)MM|I7|8B*k8yYfq9^Bq!0?9tK^8{A;hu
zwW0!$5VjTDaH@8+o{lvP94-Z75e-aAGrFPkemvsFtazJrnaMk|0Z1V;g=lpRf)x6&
zf-5)w+=e#WlK7v@LcRwtOa1ElRdepPz!Nw+-ZTGFt4p#fyCG9*RDU6_mTVK|+&m%T
zVa(;qQQb_H{U7{EhP9)tPzz^IajU7n0IFj4#QAGKu;WKjq0b`!rQE-NmUF)JTwjdv
z>zp*q@q`(p!n8wBuCAA`e-uoA#=+ht&v+l2QjR
z?mphgEEuzXJaMViLV^`e@?@SH?n{3cz(dH9$SjW>tR00(cCdbigq@HZA_{;48I9RF-G3#5*GPT2-8XtL0{#O_flZ4{&-eG-=lARbzZ|a1zp`0-oVt^_b42iTO5-PetMMJ0+wz5=HMVlP`?KV`fj9r8kJ<
z9+Qe&30rE>jFu2V8*KBrV)r@ZI(;6X{v&Kr;@Wau=;0{#CQ8Z1#eEXb_|yt1L=-{k&1vxDrXUW8CE!OM5|S
zF~6GG#l>8}EW)*_uMEZfaM*`VCIFf-d2xK7O{_nCug${Whnv>%rJJ-1u3pi^>Xm9)
zu&2W{q`JWS)J0Qzs*bh9>K$HUQ?Jb9!K{`i|8RynLbW>6lWe!)U6d(;uL_7H?*f^A
z&TtyrMgoXpd;eA2gK7FWk7!Xa8Hc2#ntb_%9LwCS(W3@ouam{vQ8ril$BL^VHe4(c
zn#GscX#+mD
zOG5-(TzFqsld~X30-QaOkMlF*%J-Xz7GMWbE6f+IU8b@BJ=fZlm=WN(M0of
z+Aa)V;G@ircq}`2kmmSld7jwcWM%UTX(OO8KFw!x>#4*>v}My^(%5q
zd;pp2^Wc|i^YYse^X}Dc*ZH3=K!MJ96-$Sog1;^&OE3QgxT~(e(l0gd57W3M5a`tf
zn%B5UA3syzBq(}&zW`%N3=nyOx$2mNZ;~T05j)&MrpAg18INAA=2qPy_9IKxtoVv?
z2zBEjtCO2WN`poEq~)4Z2KwRB#_vJ?bD{ZHYw}+TAM)~*fKKi6;=`YiO^;e?Tq&hz
zlxU@==JD;yF!T%M8`|SUC3QdCp_+V-5Py*X5C&O1ue>GPvbjHdFOsH${eLI-i6&I`
zG!Z+1y3$(6ys+J!US$>4ms&C=?B~l8svfBL+Xr<%I>JMS9DVQgwoLTM%{=Vt{-2aY
zwNZBo$1cor#+qlhr`J%9oC&k!W+wK6({#8>;-3DtYS!0H8Sf{xLVCad9Fx#%7T(om
z|Lo6ar~Q2JdRxe5wrn25uUE5gND!FBA
zD|&gXu*%-D%%U!q(Cc?12v50@Qxka)DJ9B|YpQe1wi2vBCz!|ec@94vjVAHdOP3@e
zbG*a)!5jlStq?RA0a2cKfiixVSf#t8D?h6XoO@!qRHKGTz3{Db}flqlL*oyg}-
z9OUwy&Je>IbTdwjkDo2%EjWb+-?77l+?fy1hnPI@9y67)aCE(ezneuHP*A6UV~OjM
zW@^j)$~+wzOjjl@?UzF~UEZkM{c6k5cA)h}+}7>1@y7S#fB61^rhoF%NF&zdNT@B#
z4k0~v?>Bl1y?C23c|7ta8~>D4z?0pY!G4Cxm@axVKOr6a9$IzYszYek-QnKifz|CC
zt>#bw(Z3Gpfv%1%s8hX?OWUOlF&DCP8hTF|YPy7O5jksa{PM#8K}1jMiPE`xbSN*M
zTFb{r3_bi`hfZU39esxcl|G3IqP}Gh2Xt5p5Jz|7^wdwY>En?so!nIP%ma;YZU%f6
zA2;){&vGQ|<8W1)(5p~e3Oe{R^&jT6m`go|n7;tETV0-Bjp(zXm{;VVuJfAZ-kx9B
zNO`E8z7SGl&HUmy;fcfcYWOLoxu=NTf=1tVy+hva_(~$@W(s}Yn@0l`HJdYJ
z5Am;OFL>?dSLW;By2fN4bR&gKM4?7)=BOssR2N(Rj#L1Tt^h^NY2qY)7>#r?d4tuup&n
z`RFgvn^8%ewaLkLl4%?E(bY}9U;XoaZZ^N{prZ5u(CKv2wE_qd1}eQM-h$arHp{6z
z=MX|?kgT)Kt3cVJpR&F`U%xloaj0Mj(wCznW6x_*N&YUWMKn#`=R%Fo(Jilp55A2U
zkaxuU|S+oJ;c1(p$ntSH+DQgTdI1
zT1h}4m#mkvh~i6S!OqRtVi56Qf0&I?pGjCTfDid4Jc#32NWCJuR3I}z(5OfG$d{_d
z`*Hbas=Z7de#z72>HYY_if&yw3(^WdBQE8`deds%96|JdGAX$Hzh9WW_~)B4yjcRO
zUNI`8e$J$!%3QM{)tt3K8tqy4f9=++q4vs@JoXgFrK&QxBRxs-a)cT;4V7^F#3<+;
zTUo*(_(ZeRxcH#rj(-?~X8shD{(;+%IjtJRdW-DOVJ3B1YG|aSav5mUT58$=d5rkw
z0**0AEinpxWRBKPjsXQNa$$Z26+FGJKdy-|hVqBvkALvc2{}laa!HxG{RP0I1THk%
zEZYCvMIs;lp`m+RFQ}XOKOUkFw0=w;@H_a6&RK+1ZuK=xFx=ft(TBXcW6tOi5nBIYCYeIBA~9jXyK$N+#|0>v?b#-%r$x)`|)N-Et(*2Xg3g^Sk6MM!3T
zKhVs5CaXfjk;p_g3Ih18eLAQ9%Ek12k&w5L8M4yl)?p?4#Q02B9P*CZn)pP&zHh(e
z^53|8s_IIf9h2{mVvK|1piGOT3jnJ0SH2=mGIvMr6BZr)42ZU5`E@Th0#=~^>E>y+
z-?gFlN@TAJfJ_jJlqceEQ_(m)e^*9>W+uZ%K~DUs7^Gm1Jm=ZFv>X@*WxCSt-8d_~#@dYzym;wN
zLuN>y6-GL@O8DDuxev7+89OJ`l@WWsX96wk8D0qk4MOFW)ELM%Ry?z&Uv`J1jG0KA
zSpHce+uC{PUGgSaZ4}8gyN|CYW&e(yl#J~yiWMV;x^OCqoleq@!T2BCT!Gu41(-~c
z`2{LQywu71Z0FDRbNjcX1cT|~E%2MP4O6lo(1NS7=f-z
z7vVkU=I>*x;9y=mW0l}<<~CNd370_f*G(B2D}ZzJMaVGPq1Z}whZCnv!hI{WOlrY&
z0WxuMVGs_%x3YhpW14kNUHE*n`Eilkj&hx&sz=Ie{|j@R`=hSOup)?K;qoS5rje{g
z;kE11;Lb2HmGGub)DUUqbwfseFrNP};Mw;Cos_S?KK;oE#Z4=h;uI5RettSAJh0ke
z`BPe?Wuibmnxo~M&5o{Zr(fqH*3z~tpn6~FjKxP%)A8TOoaScqEn1hrj8{Cm;dA0|ZMex3Bkm?yhg;voo>!2hW
z#bwgj19PT|E5UfL*BkPUiK;(q6wMMi3?)5OOp6S>)8Q}Hx5@4|(9;cXM5?O0L97IU
zgSyRKJk%;bjl7VU`11xO-x5%fLv!V)bLDVinWt5_j$8C!{Ms<(%3ZM
zRGr!p(&0fM(YD*k+Fm+CKMANChX~Stas)vXFA9_=brBGDA~hq&`t`5LfH>75;4s>!
zoH!@@wffWLFi%^)7!ke*@=P81EQu!%MtAl9{G1F(u&uA|9-5fmqXSW<^APd%Gr?}-
z%;gG7w!hMv8;<+xk2I$4jrDBmuvTsc2v+$(l(u;N0V@oK1w}(j8{pgBe#FCc{t9oV
zW(~*o4vFZ0W>(9^mrfU*r%j{`5hRj(d&wU$#a%AaNA4~)Dn>e}Bv#pvQ`$oI`CQR$
zEJ(ajKQ%@iP{5r!96J`K%HNW<1eRJ*cQhKe9o34V@!@XIlv}C5vwMH$^r@yqB2X96
zx7W;UfT0hz)dHf0#ItqlEEfET^Px98u#EceU6;)Tx~$l;rO4JDc@?0|BH|2+r7lc?
z5T6o#;_fA-BR{yzZPbr!n`JA+L*ZSLnNoIklE`q8_FP-xEmnYQ#nMq
z*$wTW$DG=Vrm9TQkut>Y2mBt(q#qc_ixA0=dso}ITi*#B{uoP&+Yw|%D(Y)FslT2V
zpd=NA@wc+eSe&I(i!V)mQ*9I$$)`0!Xl3HQV`GIKxZ7!q2iUc+_QbnI2~-k}YW5za
z!O)@d`NI2jp@HhJHyEX)3XJDB@`^6VQc>IqliE)Z_ZM}kyb{iw2kyMRjWqHg9y47Q
z1b0d|!S(UXHfxl%?W9E19!JjkE$Q-Efx8K@#lLyQQ;X$)&i=@~&e3x(ctfRh?ETdF
zR!wlmi0Ec9z{!ScNCPXqG*(prCTz;#Bb!0GUuu2=P|G<-BAUQ6-3ES#i`0ep**TDA
zkpQ&$V`|0~;*1^&`(-BM0s*E}aGPY?WBhGMnb2rC+%?X8~F
zcR8l63{s1uJS2e_SGjWcq}O^M-XBp=786r7@3IQfiq5%P-PA5SO^b2&WBYn~q1qP`
zV${$y3EFl6cR&^v<}5UAoZX*@6ZNjqg-_Dzuw>6mr)xTKKSfP!Ls&ghXKt)YjvI$U
z8B^Ndn2ed1s~&rOVfpi{LE-@*SPHruI}{N%i6N3z*9t&^#MvpAqpWf)(#8#1RJVhM
z;HO;RbhxG8=YzuYX~^iq*zG5QQ2EdQTJe3;DvzAI6w9~0lUJFv>>0J3Yr>ljf4mpN
zzpwjPCE2Kbj*30(OD0wvM!k5Mk;7NI1Yy6ONOm8t|3i(W+_w<&AtGI9Ut65qZ)bk>
zKK+6wi|;j_Jx&+nQ~!K*bBmLLoRr^a=ldLoH6?h@nEQ|XYQlWkkqdX9k>mRS6gd33
z4tu&Vz^=wK-W}og&QxDZh*fsql^onKzR%=AQNJ~Jq4|4GS
zUlh;D+b1H1-(EwvB;|^2Q6-KbesQELb+@uZ;@KS3J~%0Bey7>st}FA)j1ka5AyM?K
zJ9-_0wmqbay;VQd7Z&FvzXL!Kw_unMN3J|~xy*MM68hE<+ZKRCn?bnxKq?9J;0bJdz0E{s!bI&E^|$7XU)D1+;;sJzSj^v@
z<@{H(**m)W8EKI}gzpa=;;y
z1Ud>zb|X&hVlasxg}3e>%{E&C(y=Bv<<%52cTzGACXG1vBdf$>R<++j|6GoEg{i8t>@*p}&p4
z%nu+Z9Wv@m`8X`!^Y!a<2SLqu
z^YPPh`hxE_gSjAkR7Pr)xPfj#wZlL{<}UmAf0vN_
zZ0havOP@Q$jULJixuMQ1o70PM>jmHI;zomByE0Nlvs9!e*jQ10Xa8;~_A2fNV(5Y7
z<-XPikPm8KqxuQDLR0wN^^y^`A@G7{Nd5m9&1y2BzD;tj6&e^(K*^$wq6_`UzX8m4ik
zy{op&a&x{}F-UA383g_5K
z9u!~KEKQ_bSK&o4$s99-Qu@DWH$Ym4u;D$PW
zBswfblg##I3bhtnQ^i}X1YNi|*0g63OB9Y;Q8T+<895bI805*@Khrh<0F)I_9iVw4
zq)etlb+?x9#eByXR{T(%AhdzKd{OFHg})>x>IS`+cktsw1e+Wz2Xc&H7T48|AL+
zWuae>Y_nXUfnXD8<1p)UOJ3p@t{R>#Gc;>53s70+!Hp+m
z)eGmSd*Poulz-39MppOvdMKsyvh!J3aoBIJ5#s-e-KY(UcgJIp0@Bq@EB7V;0v?*>
zg9=9E^A$8#B&SS5b8rt;Xb%;D!tj*dzW~!-B5~3Sv9smR-4SDz7Hn_lhxQ$XZnQh)
zs^{x$K^zsJFTI6ALAZNveR7tWsEV}S<%Q+ehf@q2EVExoRsW1=7;zvzlMU
z^RjC(Pj9J9G<1l8^n-D#ePC+A*RKG#yKBe7w6rIOjwPanKNyMc;&W$ST@Vj5Wm*Nd
z$0($fpHBfT9OXR_W#xupB@zLT$i8Wue`cl)_UN(LFVdgbee#7Mct-RT{&XthN)-1u
z%XPD-g%z?h3NTw{k#+pQ1XZqY0fZRUU7<1t6I&_0p&(X!oBs45WOx56dVj5A5;?HxBx8Mt|3o`L-;|HC#-{Euy#+RNsWw6%Ji
z55UBe9p!WtQK-k0&#mk$euM3#?EQUjFT3xX0J+<%W!--P7e6xxvPKx%4^ng8
zj}pR9&MESuW>aBVY^8Y?g1%Ko(@~Ln*?~3wLD5!k*-YKary95C)1GyTs@*1y)=W;B
zO)n{LHMSfHxSZG8)ZX_&cbpPY;?Cpuu
zx9U^%@~sx-`<~$w=M-6g0So>w%4*#V^R9JO4&SIRe+d#X`3tZf>7tGi8M$}x=*|UpQHO-n5@P}b*Z%_Y
z_u&9XP_rqkl9FI~MIwNz&5$qAfjQP-n;0&Vxd7>6Qa5-9EQ7DV%k4l<42Yaz@}AdIYb-GA4U8Qa?1a#dW4q@Uj*J}<+ySF5qQiqEX(sP
zXZX{L!k}0)y{D$Jw-%;3*{{=h?p6{bSz~sZ@6BBKKe_ifH$lSB%%$*C3sL|eVNBk=
ziUUY+{;XWMEgWP)<<;_sNuL%)>&OtbY{1uayUF#DTG0VS8p*pE0PiR&d3~xBnKkmz
zFh@0;Bfim>&TnYIaP{i@kRcU33YLmlklJ2bgSU0
zUnxejgDA<6pE<=uBPk??t`Yi)mvW
z>CO6R-m|?4dfweGD<`33KspuS>C<>VqS39??a0+NL}4)1u3G87Y?rd!{?VdZ)4pN-
z>mN&xJ_uE7U%RsA(;CyMm5~e9--xRE$(qeWbI!#UEV7`L2PDt=T(?lc{Z5soMOb~J
zSQqOqz=jg*OndBemwWcUOgeD(B4NQR^*0}c
zh%u*D;yLMLMU_OnPy~13v@L#$rK5;SeRev4#XPNU)SH@QG{29uo+A57?U8_dnrrH0
zZVDW{>18G1g@RC^c61AQ?F{RdeK3<3X$9qfxN)~>{3~i%>D^7F3cpV`9<*$t@}y*h
zR0(ZpIyGwrW*>i+iZ(1I-3+bU4@}a-E(ty<#MnOGK)=aSHW>q4FOrjFQ=CATuB=ng
z!FLT?RT;!mdj(=9$rduHLOuM3_@+at#0%-|HpE>f6=mt~+6S?tm}k3`D$pKI&2>Ko
zqXfQ<)*PhuPVq+WKMrSC3wmUpGGM)TlyT+syXtyGIZNNQFsL%LM!JGmDgL59gOS9P
z%15jhnUVQ;BfdhGuf*8J+%MsUh^EKbeT^6mtk@H&ViD?glE-E|TkS~nn;ezw0BD)<
zx{KB??k|B#=8%0*x`c#JM$Sx&ISqrA!|Z4#|5Puvt%gN(CAnjjj+d3tVK7&An_)6vW9CesQedr9ODqhw+71Ex-Ud
z4n7(E%pP^UKJ_32gqXxua$o%_Y5@
zB-|cHMye+2XUioE=^T`3g@$%92>NK8_#w=1xESqlzJ6x4!FTk2DN1U0v#en7o18)q
zV~pX|ma;p9<5?`=m>s}LF1c)D{E{yC^M=<
zG}0VaEQrYC+517}qRtc954Y@}a=Xoc?xD0x{8<~voy75ijKkiNp9%0|PW+t&tW_t~
z@MS>G`aoUkxqa2;$2J<4Thqeac1)N3IcFTX*CbE3vRUMrC6+D-w!#bR
zWCE5hUf-bCr@h^guiBmQx|b$5_C_4%AUhWmfOa<2R40-9F87(M3ijbkjJqzg#9mclmRv*^?
zs#8+iu&5J`$9!45mPLm8t9u0(BYzykLh=HyDC1X_m#X)LFO
z$pIn-kR6LyVtDzzkl0xZRHp+J>dxI#2|Ou1r-^~)FPuOFRSn3M$7xM`<}&~gL};|)
zMFfF#J>0s~?R9F2+s$J-`Ks(!zJ;0lox_e;rtoTb&9#(Z5vH}m-5?ykTHz%jg
zSUR_vorRIHxe(0h?t
zb-cSbK-l}3pZ+&ggcPA4y#_opi18@VI0Dzj6kY}z@NKtql8tjSJTu|}-k|u|{VXe@
z_u&adZs>)(UIVF%A1^qQ)k#cvo>wk6&zBo#6vTYM|7H7eq8f%<*!Je3x0=g=17f;9
zkCAMgmq?$#BL(wAhn-^^%0nxYM>FlfL_2MEpAhyh7K>MS-K~5Wx3TL*Ai*DELgGoJf&GJ;*
z);Ws{6tvd~9hZYCS(xW98wry-@>y`fy3qB|+u895vPJD&CQ$>{dKk@=S}Zcefn>drg3
zIngqL&{lxbh5Z=J?B#PpBPPS%W^9*h^E)FZ0~WOo03m|XAE#dA5*Z$MYF3rNC&Sq<
zlOO%*zf)~m^~rd~j~dVwmCN15NE>kU2|EpyY}vxzgEEjQMNZd?rxn%
zLrHzx4(D5rmwabkfDhw~X#-eno9d5~^HufJ8_8rRT(o*=qsZSTMGxx2DZab|p=;oBFAW{ZHK+D2i5cFZC8)aJJyXg#`xzS_f^a958f{|lo0>21lcO4J(Ybp3a%$q!12IF)@d#kO1
z=KSz3S$!|f9BoDl;!Pj2GRzzG!mphV@BKK74^?xTEzaOu+C`UK-F)8jsqe`L=b`}w
zcvLs(!Hz1;O*fKdNFs@J&4qSrXL5rkSjFQCEjlk}rtv(QMI5f1NLD|;U{`3b$%s?Q3#O~}
zIQ2zzrbAvkbId8f31jx4Tx(kaRn{|Cv*ft`ZU?1cI44EVnOA69hv(u2V;wvRVsfxwvohMrCVzKwQiULpm5GGI|KYiytxv*!vBcG
zJb#f4pkP8`PMsxxq#62@i+w^IRCc$nPGZ%LWxM?F7jj@Io=GX=Ep=30+X)Eu3=e%_
z&Vg1<_K}r%p=ZHsO5uG!Fk-DygG^6uF+B!(mhyxMIewhTD=PZx#pmOlrL%-UMTvWF(O3#gC-+6M-%KYt
zr220Dd^%#F;>7LEJt_M64GHo-{H`}EvSzHMcKYcLy`-tq@06krB~LDE0)JD|nyZ`q
zNxoa^tEJKCsquA8B6(D*fI{D%5?V;uTI6fh5BaL!uE;J2c3Y*&Rd2x`NfSHHY2+8Z
zF(s*!qT@xwMq=%`loo9rk;uGcK&%Ge@R*0R_$;;oQg`-iFdr`f+31dmb(GbDoU1+t
z0EdA@O6vM@9Py;I^Y|e^@G=c($?NPvP|uijI-ocj_7;$BtU6s)oeW&73zGZvgm>k*z~9R30gl%2{sQi7hM>onVD>
zYL$=~zTjRAB3OQ_bIkp^Qad~d_L@$vS0pBg1lP@@(S1$4Vu7&SqD6)1W>UOx3}M3t
z3TcrFyrtVafI)0GYBz}FnlyDflK^#+7=|8U3G2;
zubuzr9Ne#+$dSt5Ni6=lm)Zj-U%{FyTnWzPAzP_-q@XpU#RE8|`l2`S09Y$5L3RR!
z==S~)lM%7hsH&YVgAE&|fH}IZ-Lc^KLW?ho(y{(CMb`r7ULhIM_hwA3Hkl#52|zXR
z8#t69Yvs^>z)XXfY0OOdfp5b~;9Y%(l>p)f-*#JWn1k$N40ir|^CQESB-;?(2OI*L
zf+;2W4(4G6ZnO<^e7a43Ghe>awhWj4zAURZbPpVV{TE<(qY}=f^Jg2l9_zhsP&`fJ
zlit?ql^&LE?@ny&%h|_DgjHozPdv~l-(22`yi)pd?I#fnDEY3?ravCfJxOdR!Q#TiWA$dbF8AM7lVwHk72SWLv{)?Fw613;!43W`kt

literal 0
HcmV?d00001

diff --git a/docs/index/README.md b/docs/index/README.md
new file mode 100644
index 0000000..0a49372
--- /dev/null
+++ b/docs/index/README.md
@@ -0,0 +1,316 @@
+# 索引机制 RFC
+
+## 背景
+
+目前 Halo 使用 Extension 机制来存储和获取数据以便支持更好的扩展性，所以设计之初就存在查询数据时会将对应 Extension 的所有数据查询到内存中处理的问题，这会导致当分页查询和条件查询时也会有大批量无效数据被加载到内存中，随着 Halo 用户的数据量的增长，如果没有一个方案来解决这样的数据查询问题会对 Halo 用户的服务器内存资源有较高的要求，因此本篇提出使用索引机制来解决数据查询问题，以便提高查询效率和减少内存开销。
+
+## 目标
+
+- **提高查询效率**：加快数据检索速度。通过使用索引，数据库可以快速定位到数据行的位置，从而减少必须读取的数据量。
+- **减少网络和内存开销：** 没有索引前查询数据会将 Extension 的所有数据都传输到应用对网络和内存开销都很大，通过索引定位确切的数据来减少不必要的消耗。
+- **优化排序操作**：通过索引加速排序操作，因此需要索引本身有序。
+- **索引存储可扩展**：索引虽然能提高查询效率，但它会占用额外的存储空间，如果过大可以考虑在磁盘上读写等方式来减少对内存的占用。
+
+## 非目标
+
+- 索引的持久化存储，前期只考虑在内存中存储索引，如果后续索引过大可以考虑在磁盘上读写等方式来减少对内存的占用。
+- 索引的自动维护，索引的维护需要考虑到索引的数据是否改变，如果改变则需要更新索引，这个改变的判断不好界定，所以先不考虑索引的自动维护。
+- 索引的前置验证，比如在启动时验证索引的完整性和正确性，但目前每次启动都会重新构建索引，所以先不考虑索引的前置验证。
+- 多线程构建索引，目前索引的构建是单线程的，如果后续索引过大可以考虑多线程构建索引。
+
+## 方案
+
+索引是一种存储数据结构，可提供对数据集中字段的高效查找。索引将 Extension 中的字段映射到 Extension 的名称，以便在查询特定字段时不需要完整的扫描。
+
+### 索引结构
+
+每个 Extension 声明的索引都会被创建为一个 keySpace 与索引信息的映射，
+类如对附件分组的一个对名称的索引示例如下：
+
+```javascript
+{
+ "/registry/storage.halo.run/groups": [{
+  name: "specName",
+  spec: {
+    // a function that returns the value of the index key
+    indexFunc: function(doc) {
+      return doc.spec.name;
+    },
+    order: 'asc',
+    unique: false
+  },
+  v: 1,
+  ready: false
+ },
+ {
+  name: "metadata.labels",
+  spec: {
+    indexFunc: function(doc) {
+       var labels = obj.getMetadata().getLabels();
+        if (labels == null) {
+          return Set.of();
+        }
+        return labels.entrySet()
+          .stream()
+          .map(entry -> entry.getKey() + "=" + entry.getValue())
+          .collect(Collectors.toSet());
+    },
+    order: 'asc',
+    unique: false
+  },
+  v: 1,
+  ready: true,
+ }]
+}
+```
+
+- `name: specName` 表示索引的名称，每个 Extension 声明的索引名称不能重复，通常为字段路径如 `metadata.name`。
+- `spec.indexFunc` 用于生成索引键，索引键是一个字符串数组，每个字符串都是一个索引键值，索引键值是一个字符串。
+- `spec.order` 用于记录索引键的排序方式，可选值为 `asc` 或 `desc`，`asc` 表示升序，`desc` 表示降序。
+- `spec.unique` 用于标识是否为唯一索引以在添加索引时进行唯一性检查。
+- `v` 用于记录索引结构的版本以防止后续为优化导致索引结构改变时便于检查重建索引。
+- `ready` 用于记录该索引是否构建完成，当开始构建该索引键索引记录时为 false，如果构建完成则修改为 true，如果因为断电等导致索引构建不完整则 ready 会是 false，下次启动时需要重新开始构建。
+
+对于每个 Extension 都有一个默认的唯一索引 `metadata.name` 其 entries 与 Extension 每一条记录唯一对应。
+
+### 索引构建
+
+索引是通过对 Extension 数据执行完整扫描来构建的。
+
+1. **针对特定 Extension 数据集的操作**: 当构建索引时，操作是针对特定的 Extension 数据进行的。将 `ready` 置为 `false`
+2. **扫描 Extension 数据集**: 构建索引的关键步骤是扫描 Extension 数据集中的每一条记录。这个扫描过程并不是基于数据库中所有数据的顺序，而是专注于该 Extension 数据集内的数据。当构建索引时会锁定对该 Extension 的写操作。
+3. **生成索引键（KeyString键）**:对于 Extension 数据集中的每个 Extension，会根据其索引字段生成 KeyString 键。String 为 Extension 的 `metadata.name` 用于定位 Extension 在数据库中的位置。
+4. **排序和插入操作**: 生成的键会被插入到一个外部排序器中，以确保它们的顺序。排序后，这些键按顺序批量加载到索引中。
+5. 释放对该 Extension 写操作的锁定完成了索引构建。
+
+对于后续 Extension 和索引的更新需要在同一个事务中以确保一致性。
+
+```json
+{
+  "metadata.name": {
+    "group-1": []
+  },
+  "specName": {
+    "zhangsan": [
+        "metadata-name-1"
+    ],
+    "lisi": [
+        "metadata-name-2"
+    ]
+  },
+  "halo.run/hidden": {
+    "true": [
+        "metadata-name-3"
+    ],
+    "false": [
+        "metadata-name-4"
+    ]
+  }
+}
+```
+
+### 索引前置验证
+
+1. 每次启动后先检查索引是否 ready
+2. `metadata.name` 索引条目的数量始终与数据库中记录的 Extension 数量一致
+3. 如果排序顺序为升序，则索引条目按递增顺序排列。
+4. 如果排序顺序为降序，则索引条目按降序排列。
+5. 每个索引的索引条目数量不超过数据库中记录的对应 Extension 数量。
+
+### 索引在 Extension 的声明
+
+手动注册索引
+
+```java
+public class IndexSpec {
+    private String name;
+
+    private IndexAttribute indexFunc;
+
+    private OrderType order;
+
+    private boolean unique;
+
+    public enum OrderType {
+        ASC,
+        DESC
+    }
+
+    // Getters and other methods...
+}
+
+IndexSpecs indexSpecs = indexSpecRegistry.indexFor(Person.class);
+indexSpecs.add(new IndexSpec()
+    .setName("spec.name")
+    .setOrder(IndexSpec.OrderType.DESC)
+    .setIndexFunc(IndexAttributeFactory.simpleAttribute(Person.class,
+        e -> e.getSpec().getName())
+    )
+    .setUnique(false));
+```
+
+用于普通索引的注解
+
+```java
+@Retention(RetentionPolicy.RUNTIME)
+@Target({ElementType.TYPE, ElementType.ANNOTATION_TYPE}) // 用于类和注解的注解
+public @interface Index {
+  String name(); // 索引名称
+  String field(); // 需要索引的字段
+}
+```
+
+Indexes 注解用于声明多个索引
+
+```java
+@Retention(RetentionPolicy.RUNTIME)
+@Target(ElementType.TYPE)
+public @interface Indexes {
+    Index[] value() default {};  // Index注解数组
+}
+```
+
+```java
+@Data
+@Indexes({
+  @Index(name = "specName", field = "spec.name"),
+  @Index(name = "creationTimestamp", field = "metadata.creationTimestamp"),
+})
+@EqualsAndHashCode(callSuper = true)
+@ToString(callSuper = true)
+@GVK(group = "my-plugin.guqing.io",
+        version = "v1alpha1",
+        kind = "Person",
+        plural = "persons",
+        singular = "person")
+public class Person extends Extension {
+
+    @Schema(description = "The description on name field", maxLength = 100)
+    private String name;
+
+    @Schema(description = "The description on age field", maximum = "150", minimum = "0")
+    private Integer age;
+
+    @Schema(description = "The description on gender field")
+    private Gender gender;
+
+    public enum Gender {
+        MALE, FEMALE,
+    }
+}
+```
+
+不论是手动注册索引还是通过注解注册索引都由 IndexSpecRegistry 管理。
+
+```java
+public interface IndexSpecRegistry {
+    /**
+     * 
Create a new {@link IndexSpecs} for the given {@link Extension} type.

+     * 
The returned {@link IndexSpecs} is always includes some default {@link IndexSpec} that
+     * does not need to be registered again:

+     * 
    
+     *     
  • {@link Metadata#getName()} for unique primary index spec named metadata_name
    • 
+     *     
  • {@link Metadata#getCreationTimestamp()} for creation_timestamp index spec
    • 
+     *     
  • {@link Metadata#getDeletionTimestamp()} for deletion_timestamp index spec
    • 
+     *     
  • {@link Metadata#getLabels()} for labels index spec
    • 
+     * 

+     *
+     * @param extensionType must not be {@literal null}.
+     * @param  the extension type
+     * @return the {@link IndexSpecs} for the given {@link Extension} type.
+     */
+     IndexSpecs indexFor(Class extensionType);
+
+    /**
+     * Get {@link IndexSpecs} for the given {@link Extension} type registered before.
+     *
+     * @param extensionType must not be {@literal null}.
+     * @param  the extension type
+     * @return the {@link IndexSpecs} for the given {@link Extension} type.
+     * @throws IllegalArgumentException if no {@link IndexSpecs} found for the given
+     *                                  {@link Extension} type.
+     */
+     IndexSpecs getIndexSpecs(Class extensionType);
+
+    boolean contains(Class extensionType);
+
+    void removeIndexSpecs(Class extensionType);
+
+    /**
+     * Get key space for an extension type.
+     *
+     * @param scheme is a scheme of an Extension.
+     * @return key space(never null)
+     */
+    @NonNull
+    String getKeySpace(Scheme scheme);
+}
+```
+
+对于添加了索引的 Extension 可以使用 `IndexedQueryEngine` 来查询数据：
+
+```java
+public interface IndexedQueryEngine {
+   /**
+     * Page retrieve the object records by the given {@link GroupVersionKind} and
+     * {@link ListOptions}.
+     *
+     * @param type the type of the object must exist in
+     * {@link run.halo.app.extension.SchemeManager}.
+     * @param options the list options to use for retrieving the object records.
+     * @param page which page to retrieve and how large the page should be.
+     * @return a collection of {@link Metadata#getName()} for the given page.
+     */
+    ListResult retrieve(GroupVersionKind type, ListOptions options, PageRequest page);
+
+    /**
+     * Retrieve all the object records by the given {@link GroupVersionKind} and
+     * {@link ListOptions}.
+     *
+     * @param type the type of the object must exist in {@link run.halo.app.extension.SchemeManager}
+     * @param options the list options to use for retrieving the object records
+     * @return a collection of {@link Metadata#getName()}
+     */
+    List retrieveAll(GroupVersionKind type, ListOptions options);
+}
+```
+
+但为了简便起见，会在 ReactiveExtensionClient 中提供一个 `listBy` 方法来查询数据：
+
+```java
+public interface ReactiveExtensionClient {
+  //...
+   Mono> listBy(Class type, ListOptions options,
+        PageRequest pageable);
+}
+```
+
+其中 `ListOptions` 包含两部分，`LabelSelector` 和 `FieldSelector`，一个常见的手动构建的 `ListOptions` 示例：
+
+```java
+var listOptions = new ListOptions();
+listOptions.setLabelSelector(LabelSelector.builder()
+  .eq("key1", "value1").build());
+listOptions.setFieldSelector(FieldSelector.builder()
+  .eq("slug", "slug1").build());
+```
+
+为了兼容以前的写法，对于 APIs 中可以继续使用 `run.halo.app.extension.router.IListRequest`，然后使用工具类转换即可得到 `ListOptions` 和 `PageRequest`。
+
+```java
+class QueryListRequest implements IListRequest {
+    public ListOptions toListOptions() {
+        return labelAndFieldSelectorToListOptions(getLabelSelector(), getFieldSelector());
+    }
+
+    public PageRequest toPageRequest() {
+        return PageRequestImpl.of(getPage(), getSize(), getSort());
+    }
+}
+```
+
+### Reconciler
+
+对于 Reconciler 来说，之前每次由 DefaultController 启动对于需要 `syncAllOnStart` 的 Reconciler 都是获取所有对应的 Extension 数据，然后再进行 Reconcile，这样会导致每次都将所有的 Extension 数据加载到内存中，随着数据量的增加导致内存占用过大，当有了索引后只获取所有 Extension 的 `metadata.name` 来触发 reconcile 即可。
+
+GcReconciler 也从索引中获取 `metadata.deletionTimestamp` 不为空的 Extension 的 `metadata.name` 来触发 reconcile 以减少全量加载数据的操作。
diff --git a/docs/notification/README.md b/docs/notification/README.md
new file mode 100644
index 0000000..1408ac1
--- /dev/null
+++ b/docs/notification/README.md
@@ -0,0 +1,366 @@
+## 背景
+
+在 Halo 系统中，具有用户协作属性，如当用户发布文章后被访客评论而访客希望在作者回复评论时被提醒以此完成进一步互动，而在没有通知功能的情况下无法满足诸如以下描述的使用场景：
+
+1. 访客只能在评论后一段时间内访问被评论的文章查看是否被回复。
+2. Halo 的用户注册功能无法让用户验证邮箱地址让恶意注册变的更容易。
+
+在这些场景下，为了让用户收到通知或验证消息以及管理和处理这些通知，我们需要设计一个通知功能，以实现根据用户的订阅和偏好推送通知并管理通知。
+
+## 已有需求
+
+- 访客评论文章后希望收到被回复的通知，而文章作者也希望收到文章被评论的通知。
+- 用户注册功能希望验证注册者填写的邮箱实现一个邮箱只能注册一个账号，防止占用别人邮箱，在一定程度上减少恶意注册问题。
+- 关于应用市场插件，管理员希望在用户下单后能收到新订单通知。
+- 付费订阅插件场景，希望给付费订阅用户推送付费文章的浏览链接。
+
+## 目标
+
+设计一个通知功能，可以根据以下目标，实现订阅和推送通知：
+
+- 支持扩展多种通知方式，例如邮件、短信、Slack 等。
+- 支持通知条件并可扩展，例如 Halo
+  有新文章发布事件如果用户订阅了新文章发布事件但付费订阅插件决定了此文章只有付费用户才可收到通知、按照付费等级不同决定是否发送新文章通知给对应用户等需要通过实现通知条件的扩展点来满足对应需求。
+- 支持定制化选项，例如是否开启通知、通知时段等。
+- 支持通知流程，例如通知的发送、接收、查看、标记等。
+- 通知内容支持多语言。
+- 事件类型可扩展，插件可能需要定义自己的事件以通知到订阅事件的用户，如应用市场插件。
+
+## 非目标
+
+- Halo 只会实现站内消息和邮件通知，更多通知方式需要插件去扩展。
+- 定时通知、通知频率或摘要通知功能属于非必要功能，可由插件去扩展。
+- 多语言支持，目前只会支持中文和英文两种，更多语言支持不是此阶段的目标。
+- 可定制的通知模板：通知默认模板由事件定义者提供，如需修改可考虑使用特定的 Notifier 去适配事件。
+
+## 方案
+
+为了实现上述目标，我们设计了以下方案：
+
+### 通知数据模型
+
+#### 通知事件类别和事件
+
+首先通过定义事件来声明此通知事件包含的数据和发送此事件时默认使用的模板。
+
+`ReasonType` 是一个自定义模型，用于定义事件类别，一个事件类别由多个事件表示。
+
+```yaml
+apiVersion: notification.halo.run/v1alpha1
+kind: ReasonType
+metadata:
+  name: comment
+spec:
+  displayName: "Comment Received"
+  description: "The user has received a comment on an post."
+  properties:
+    - name: postName
+      type: string
+      description: "The name of the post."
+      optional: false
+    - name: postTitle
+      type: string
+      optional: true
+    - name: commenter
+      type: string
+      description: "The email address of the user who has left the comment."
+      optional: false
+    - name: comment
+      type: string
+      description: "The content of the comment."
+      optional: false
+```
+
+`Reason` 是一个自定义模型，用于定义通知原因，它属于 `ReasonType` 的实例。
+
+当有事件触发时，创建 `Reason` 资源来触发通知，如当文章收到一个新评论时：
+
+```yaml
+apiVersion: notification.halo.run/v1alpha1
+kind: Reason
+metadata:
+  name: comment-axgu
+spec:
+  # a name of ReasonType
+  reasonType: comment
+  author: 'guqing'
+  subject:
+    apiVersion: 'content.halo.run/v1alpha1'
+    kind: Post
+    name: 'post-axgu'
+    title: 'Hello World'
+    url: 'https://guqing.xyz/archives/1'
+  attributes:
+    postName: "post-fadp"
+    commenter: "guqing"
+    comment: "Hello! This is your first notification."
+```
+
+#### Subscription
+
+`Subscription` 自定义模型，定义了特定事件时与要被通知的订阅者之间的关系, 其中 `subscriber`
+表示订阅者用户, `unsubscribeToken` 表示退订时的身份验证 token, `reason` 订阅者感兴趣的事件。
+
+用户可以通过 `Subscription` 来订阅自己感兴趣的事件，当事件触发时会收到通知：
+
+```yaml
+apiVersion: notification.halo.run/v1alpha1
+kind: Subscription
+metadata:
+  name: user-a-sub
+spec:
+  subscriber:
+    name: guqing
+  unsubscribeToken: xxxxxxxxxxxx
+  reason:
+    reasonType: new-comment-on-post
+    subject:
+      apiVersion: content.halo.run/v1alpha1
+      kind: Post
+      name: 'post-axgu'
+    # expression: 'props.owner == "guqing"'
+```
+
+- `spec.reason.subject`：用于根据事件的主体的匹配感兴趣的事件，如果不指定 name 则表示匹配主体与 kind 和 apiVersion
+  相同的一类事件。
+- `spec.expression`：根据表达式匹配感兴趣的事件，例如 `props.owner == "guqing"` 表示只有当事件的属性（reason attributes）的
+  owner 等于 guqing 时才会触发通知。表达式符合 SpEL
+  表达式语法，但结果只能是布尔值。参考：[增强 Subscription 模型以支持表达式匹配](https://github.com/halo-dev/halo/issues/5632)
+
+> 当 `spec.expression` 和 `spec.reason.subject` 同时存在时，以 `spec.reason.subject` 的结果为准，不建议同时使用。
+
+订阅退订链接 API
+规则：`/apis/api.notification.halo.run/v1alpha1/subscriptions/{name}/unsubscribe?token={unsubscribeToken}`。
+
+#### 用户通知偏好设置
+
+通过在用户偏好设置的 ConfigMap 中存储一个 `notification` key 用于保存事件类型与通知方式的关系设置，当用户订阅了如 '
+new-comment-on-post' 事件时会获取对应的通知方式来给用户发送通知。
+
+```yaml
+apiVersion: v1alpha1
+kind: ConfigMap
+metadata:
+  name: user-preferences-guqing
+data:
+  notification: |
+    {
+      reasonTypeNotification: {
+        'new-comment-on-post': {
+          enabled: true,
+          notifiers: [
+            email-notifier,
+            sms-notifier
+          ]
+        },
+        new-post: {
+          enabled: true,
+          notifiers: [
+            email-notifier,
+            webhook-router-notifier
+          ]
+        }
+      },
+    }
+```
+
+#### Notification 站内通知
+
+当用户订阅到事件后会创建 `Notification`, 它与通知方式（notifier）无关，`recipient` 为用户名，类似站内通知，如用户 `guqing`
+订阅了评论事件那么当监听到评论事件时会创建一条记录可以在个人中心的通知列表看到一条通知消息。
+
+```yaml
+apiVersion: notification.halo.run/v1alpha1
+kind: Notification
+metadata:
+  name: notification-abc
+spec:
+  # username
+  recipient: "guqing"
+  reason: 'comment-axgu'
+  title: 'notification-title'
+  rawContent: 'notification-raw-body'
+  htmlContent: 'notification-html'
+  unread: true
+  lastReadAt: '2023-08-04T17:01:45Z'
+```
+
+个人中心通知自定义 APIs:
+
+1. 获取个人中心获取用户通知列表的 APIs 规则：
+   `GET /apis/api.notification.halo.run/v1alpha1/userspaces/{username}/notifications`
+2. 将通知标记为已读：`PUT /apis/api.notification.halo.run/v1alpha1/userspaces/{username}/notifications/mark-as-read`
+3.
+
+批量将通知标记为已读：`PUT /apis/api.notification.halo.run/v1alpha1/userspaces/{username}/notifications/mark-specified-as-read`
+
+#### 通知模板
+
+`NotificationTemplate` 自定义模型用于定义事件的通知模板，当事件触发时会根据事件的通知模板来渲染通知内容。
+它通过定义 `reasonSelector` 来引用事件类别，当事件触发时会根据用户的语言偏好和触发事件的类别来选择一个最佳的通知模板。
+选择通知模板的规则为：
+
+1. 根据用户设置的语言，选择从通知模板中定义的 `spec.reasonSelector.language` 的值从更具体到不太具体的顺序（例如，gl_ES 的值将比
+   gl 的值具有更高的优先级）。
+2. 当通过语言成功匹配到模板时，匹配到的结果可能不止一个，如 `language` 为 `zh_CN`
+   的模板有三个那么会根据 `NotificationTemplate` 的 `metadata.creationTimestamp` 字段来选择一个最新的模板。
+
+这样的规则有助于用户可以个性化定制某些事件的模板内容。
+
+模板语法使用 ThymeleafEngine 渲染，纯文本模板使用 `textual`
+模板模式，语法参考: [usingthymeleaf.html#textual-syntax](https://www.thymeleaf.org/doc/tutorials/3.1/usingthymeleaf.html#textual-syntax)
+
+`HTML`
+则使用标准表达式语法在标签属性中取值，语法参考：[standard-expression-syntax](https://www.thymeleaf.org/doc/tutorials/3.1/usingthymeleaf.html#standard-expression-syntax)
+
+在通知中心渲染模板时会在 `ReasonAttributes` 中提供额外属性包括：
+
+- site.title: 站点标题
+- site.subtitle: 站点副标题
+- site.logo: 站点 LOGO
+- site.url: 站点访问地址
+- subscriber.id: 如果是用户则为用户名, 如果是匿名用户则为 `annoymousUser#email`
+- subscriber.displayName: 邮箱地址或`@username`
+- unsubscribeUrl: 退订链接，用于取消订阅
+
+因此，任何模板都可以使用这几个属性，但事件定义者需要注意避免使用这些保留属性。
+
+```yaml
+apiVersion: notification.halo.run/v1alpha1
+kind: NotificationTemplate
+metadata:
+  name: template-new-comment-on-post
+spec:
+  reasonSelector:
+    reasonType: new-comment-on-post
+    language: zh_CN
+  template:
+    title: "你的文章 [(${postTitle})] 收到了一条新评论"
+    body: |
+      [(${commenter})] 评论了你的文章 [(${postTitle})]，内容如下：
+      [(${comment})]
+```
+
+#### 通知器声明及扩展
+
+`NotifierDescriptor` 自定义模型用于声明通知器，通过它来描述通知器的名称、描述和关联的 `ExtensionDefinition`
+名称，让用户可以在用户界面知道通知器是什么以及它可以做什么,
+还让 NotificationCenter 知道如何加载通知器和准备通知器需要的设置以发送通知。
+
+```yaml
+apiVersion: notification.halo.run/v1alpha1
+kind: NotifierDescriptor
+metadata:
+  name: email-notifier
+spec:
+  displayName: '邮件通知器'
+  description: '支持通过邮件的方式发送通知。'
+  notifierExtName: '通知对应的扩展名称'
+  senderSettingRef:
+    name: 'email-notifier'
+    group: 'sender'
+  receiverSettingRef:
+    name: 'email-notifier'
+    group: 'receiver'
+```
+
+通知器声明了 senderSettingRef 和 receiverSettingRef 后，对应用户端可以通过以下 APIs 获取和保存配置：
+
+管理员获取和保存通知器发送配置的 APIs:
+
+1. 获取通知器发送方配置：`GET /apis/api.console.halo.run/v1alpha1/notifiers/{name}/sender-config`
+2. 保存通知器发送方配置：`POST /apis/api.console.halo.run/v1alpha1/notifiers/{name}/sender-config`
+
+个人中心用户获取和保存对应通知器接收消息配置的 APIs:
+
+1. 获取通知器接收消息配置：`GET /apis/api.notification.halo.run/v1alpha1/notifiers/{name}/receiver-config`
+2. 获取通知器接收消息配置：`POST /apis/api.notification.halo.run/v1alpha1/notifiers/{name}/receiver-config`
+
+通知器扩展点用于实现发送通知的方式：
+
+```java
+public interface ReactiveNotifier extends ExtensionPoint {
+
+  /**
+   * Notify user.
+   *
+   * @param context notification context must not be null
+   */
+  Mono notify(NotificationContext context);
+}
+
+@Data
+public class NotificationContext {
+  private Message message;
+
+  private ObjectNode receiverConfig;
+
+  private ObjectNode senderConfig;
+
+  @Data
+  static class Message {
+    private MessagePayload payload;
+
+    private Subject subject;
+
+    private String recipient;
+
+    private Instant timestamp;
+  }
+
+  @Data
+  public static class Subject {
+    private String apiVersion;
+    private String kind;
+    private String name;
+    private String title;
+    private String url;
+  }
+
+  @Data
+  static class MessagePayload {
+    private String title;
+
+    private String rawBody;
+
+    private String htmlBody;
+
+    private ReasonAttributes attributes;
+  }
+}
+```
+
+通知数据结构交互图
+
+![Notification datastructures interaction](./image-knhw.png)
+
+通知功能 UI 设计
+![notification-ui.png](notification-ui.png)
+
+### 通知模块功能
+
+- 发送通知：当触发通知事件时，系统会根据 subscriber 的偏好设置获取到事件对应的通知方式再根据偏好设置自动发送通知。
+- 接收通知：用户可以选择接收通知的方式，例如邮件、短信、自定义路由通知等。
+- 查看通知：用户可以在 Halo 中查看所有的通知，包括已读和未读的通知。
+- 标记通知：用户可以标记通知为已读或未读状态，以便更好地管理和处理通知。
+
+### 通知管理列表条件筛选
+
+我们支持以下通知条件筛选策略：
+
+- 按事件类型：列出特定类型的事件通知，例如新文章，新评论、状态更新等。
+- 按已读状态：根据通知是否已读列出，方便用户查看未读通知。
+- 按关键词：列出通知中包含特定关键词的事件通知，例如包含用户名称、标题等关键词的通知。
+- 按时间：列出在特定时间段内发生的事件通知，例如最近一周、最近一个月等时间段内的通知。
+
+### 定制化选项
+
+如果后续有足够的使用场景，可以考虑支持以下定制化选项：
+
+- 通知时间段：用户可以设置通知的时间段，例如只在工作时间内推送通知。
+- 通知频率：用户可以设置通知的频率，例如每天、每周、每月等。
+- 摘要通知：用户可以设置接收每周摘要，总结一周内的通知合并为一条通知并通过如邮件等方式接收。
+
+## 结论
+
+通过以上方案和实现，我们设计了一个通知功能，可以根据用户的需求和偏好，自动筛选和推送通知。同时，为了支持更多的事件类型、通知方式和通知条件筛选策略，系统具有良好的可扩展性。
diff --git a/docs/notification/image-knhw.png b/docs/notification/image-knhw.png
new file mode 100644
index 0000000000000000000000000000000000000000..821c5d84a6c222ceaa7566349a7a652fa43836af
GIT binary patch
literal 69390
zcmZ^}WmFtZ6DT|^?gWCny99SOxDz}C3$VDmTkzm+0hRO*xufrnwr|&++12(
zT6lQ4wY9a2i%UU4L4SY$+S*z|LIN)@uauP3j~_qk>+8+T%nlC^dwP0IOiZSxriO-w
z93357T3RYAE8X4QcXxOF{QUIv^rWSwySlmz3=EW%l-|92*VNRct*t#VF;P=fBQGys
zTwJ`oy!`d+*Q~6p+}vC{J3DW0@8smE+8XB6iva*GR1qcLUXlTgH
z%-q)2CLkcd&CQL5h87SIKuJkCGc!X#KoA-lii3m0%F0S@VLS{VV9zSazSZ$rJesM+
z?xMj%`rWMV)I*qsve(IDE=`w|HPjT!2{+6C>j;s%KcE=;g6vXz^GiVKrQSX@J_6uUUwzRY)`M1n?iS8e@kVwW*BIzQv)bV4nBgA*BXy6zVltJV>>cyFtgk>&R+JjhTw&3JVP1g0=TC%f$LISmCaDK`w#YHpY@0S5
zk9Bfe_c@*%wN*|7p{z8?k_vs;RGb*^(tm5uqHw#4SkLMWYQ(R+V!$(ectLS*
z)W(M$IAM+d49fVYo}cR)_QpDAk+vMzr6==5rf}C{&b|z#Yfiv<`9vj`xV~6)J%~B@
zDhh5cou$26axTPP4$7ZARPTRxAPm(zLp~yuY-=Y602z?%iu_9~i#oUN1&Pw6+979z
zdjYJ5@5T%op>AW#rhNVLjVw`Fu^IRwrVX|tzf!=Mv|6Rp2pm@DCShxYE`47j0tM`-
z=jZ3ZQ4WC2RCh{A7OY^ZCrgJ=5Cwv%FvFfzp2`EOU`ZS5v4$mHqqW=Eg3wG38WPHr
z{v%}zVMdH6zDYjMQjqQf&;-s^RonhtOEzO6~;K-GWTo*w`3Ak%Tn6e|-Pl=N3
zjWI~eyAy*ovcWP+a4(f^*Wshp
z;t`)FbHiJ>q?usaVzTm>@IVnbnMdO2U-Yr`-BzW2n=IiV!2_(P#L9$r(1bKEfTmVHZl^Yqn55l?-~G$u7Qd-i_0++U~qqrV`#ui(ezi&A49GW&);WTKd<;**}8=SZp9D3+S|bj@R-
z9=Sf-q)n~xXW5JqRW9!(8>7ahF)Q$#f4kq)MV(3Yt%or#f9~;(?l;%m5zCAbMTicE
z{I~RBA0vMkDZ+fe6xyCRZ0$?8R^6!v2SF2-fP?KzJ(o8m3|4c0%1p2Q2>W(Yg#O|Z
zIca@oc1RN#;g*%9RyEghn3-^d-HZw;>qbQH$wVhkyw&)!gQXH3y_&8yzA)d0E4wT&
zv_z^yc%L`2qxHJ)@VcyQ&9u_Qbiyj8_hZd_q_B+i3GWW#AtH=(AMxBj`L6EzY>iX<
zPR&O7B@a&K>kon$%G*SUR)2-vK|h~
zme|YWU%tGsystg)k&}*&P8b$P;BpGj7dSO@HYB3^x}|gnh%sI1=Lz1(!x1=oINxc9
zKQpdDM&HT~6rliO+*kOE7-CCRc&|jbeFUzyLMh#}L`
zx#@Xh^M~UUJ^=GZqS1o}oB&}Vq9suCDI=QVj{%}eVb~5pA}za}b$|}Vq&(pV9PT-D
zqA9kF5lnrSp4dtmDYe&ro+(7Ww`8OJ{5I9^pw9g=oQk>pzap~B!
z;e$(sTGUa49@lGJL9fYhoCMCS`8+5bwxt8p+F{bs%VTK|k&1GM?*B$hs%Vz{E6eYQ
zMS@}xm{-e2YeRec`F=4y&WGP?28Q8DZE5k?78{-gpN
z#N&~B_1OxJNW50s7BHQCWPgBUpD~}?r}(t=NI0rJREIJHc>?#F1A6uaUOP9#B)PPd{$k$5n6I{zLsSXDDPqq+>GZkyq!vcXpHoZ
zBzf_7VD-@4yb&8LxHm-rhgNpnsF>&$6u9GS2z)pB@hRz0x7v;`V*-!t!Gfx@gJ3VG
ziX0b-%)f|Q&*jAS*qCH8dg=H)=4l4pyKtDmd0@WKJN0`um4U)14qcFdAU<5iiOOn%}0V2!f)BGMn^5pQSH$3&EYt1qe0`q@T%_t$zf5
zE@qE?Lqod8Rve`PTA{H9^6eu7WDmCSYI$Y)kI%rW6~>kCYoSDk
zg(gDhJYf>?!%@A$+@w|uXUBL4BrheZN6tE%qDT!;Ji5R~yE-HCq<{{LD;)E`H*P-}
zU^y$TOosAykz$RD(HyfGIGMk3R^9cd-T4=&)HXK`i=6H)Q|7$$2Y&sh_g|yZ%v(@<
zwGv|TK_2*$AOuGQdrO2JP`B6R5%-)(qO@^eq+{QRAs}#BEQ*;A$~;0~`SW8@RW+wP1RVoekprVW;|Rp$j`i$Bu~>1~P^Ft!#=DqK?by}m
zsoU|PMH!3HvqT5~Fo0Y3mXyaxdv=cIwL>Gd31^u5hAyuepIB|($g$`
zxhYhk?d^;{=$nurGn#7}%4p$&=}mD+J>y>8GleF!M6ft&5Qp0R!U*_q-R2Ze(Mwo#
zV)R9xGv0nbiF>MtIg~0%zh?dehjGfI&!5xV5lAC7O9lE>z0U{KPC}d5-l;5(@Om_7
z-d~OH^-HzUXk|@Qi*ux|S@gPF!OqNM4`8xfsUN%~SR8eqy3qBj5aLM6>1(vD2PNV&
zpn)98m5@6RsD@(C$FIpB!aAt;CJT@jKZ-*YI^wGeaIVPjrx0mn^ApniI=EodrpSwo
zd25TPE6m17`N@6rpuJ@ATKf|_wVmVC1SZ>TFr#D-19Nt$7k@JXd&}PQ8ah9}Kn7D$
zizF`Z2YBaQAoe!Ny0^KC8|E9awM~%e~80#zd&Q>yub({KoPZ~a7@MQ
z+O`7=@xh$C`4W`~Y6p-OX_!ev^OJgf%qR{K1Aok*!F`t*>W5k+#lYWR^b`v|?JK-Y
z1q*Sp!RM>BrgcH;(&JCLgjYV&v&l6>k|A^pi0dhT;=tr%HkuZ(9`O_)%IDwjsci}>
zfBcVqync
zi&p)78+_aVs9Juf)R$C>g7kMJc^bsAr4xH1UG^!L_L(!|IpD+l+=M=s-0yNk+(d2d
zc3URUD520d3vDe6YRIAzGF^;@#6s=u$RT0tQMwnrJ`3m?MQhc`%VTK#X*qABsgG7{
z-KXA>^qsrsBe9gG{i$Plt*lZgUH;KAV$sg<*7g3mKwgnfx9sN%DW!O)xA#dN#Yq5OjD{zaWfRNifV8+Kx~jV;QP`xBUv>Hr*K|{GJe)GKOlK(teL_uj#p=`)|R9
zplfsA-^}H3pO-G)HHFVNTokfp1-dqGt(qARHDCnrJ!ZS8ck36RBI|r!5j8->QASztZeABP#RFzYAFmTs>J8|^^Qi>KMvHk9fh5dRiVEU|0+k6#m778^O_q>d#*;e3vS~)L
z>xE&uk!)raBKmzgQH6dOwW2L#{`c8=Z)JOv75XE>ys5sue5`7yskB_h$ykJPc7ApM_zoHD^CXsFMD!pm=M0n5rh8tt%(qvxWzN@Kt}A3aDKzNS7j!
zf@YTX)Z7k^L2$uf;tF65In8Ve!w4=`J?HJILh}A#Ud0$t!6Ve;cqavn%HX_#seAD{
znVlC%vLM-W`?6w2vKQbXmG?tFG$EF<3#zWP2i1KWOOvW#RvyFe}Ym*
zWUiq%706Y$oSEC}L>ysuaJ=%Halw@aPLGLDbG}ZB85DQusQr={F(tw*>-}1iikYtRKUlTo$6jbm#OO}b!
z<1_KNhLF3YVx(W^nvijXQ0Cml|@L$CofH1CxRm2~royA{&9TqMNnC*i~{3WEY}
zojBk!$(*fJvKy*iochHV0m(RJNGmB1^&#n3JmEWD!HLu3y)VV)QU-Ok-u!hhWkztU%N0zHsfTxk|T1(ml
zqil(AxB_x*xUSn>M>z0_+|oeRo1DB**1pI|7p%EbMUwy-)jPhWqq`s$sKjwCvJ-?O
z)Psp>6U2qY{=?P3A=w->tfz#B29tkTL0XDkKD74l?J)VL
z+ZCzQ$!$^0E8J*uRz80lYa+RA9D!pj+{x*nU}Ve;p?XF*=cxdwwfZ-5L(C>;t0lN{
zMd#q^y%jmA{@4*YoWHF&j9$(A)!wbu4Lo?pK~HEe6^k6WY|ihG%sI5*OLCwbi}x#!
z?YfM-Bn=lQ=6`f}feuPL5@&ue+oGsX_mh(n4{Z3P=*@mCG(shRlVdm$`)nY2Wapt!|zxRyhHob>#gv`G@}(C&5x
zVg6&>72ah)-KT7~I6^(3sEI^`3^#qPbLJLb+guLpC34e`SoQ^@R#?TV3FALHL2jww
zNAUwflC=Y>8SgT=U|yr75pJ0}WBS{WGz}tl&y`9iRQ)K#$&3$(qcVt6$>#1)k
z_CCa731Mvenk!eJDM}p?Ds>>ErkBfxFLy2=6j2ZG8s@gy72*SkX9
zf4EbULxc{F5JK<`WF5o?i+N<2)Tj{Wx$iVW#fJtaZ|7q`Pp@g~g=th`SZnEMVp-R-
zj#d`L_6oC)W#EbNTWplH#5qUp`T|+w4j}Gq0T^4nb
z$sG4w7#`@fkCV9nqvMTmlo~IFd8NYVPclF#w{0T)Yk|PSZ)!#$ZkyUtN{3ytM+z~|
zN|-{7QRvMam2X@rbL!)2+xFrzm{}hQf=a&~D~9PYGI{~`Kjg_u12&=$Y9ENXq7J>e
zTVmTiNcGS9KyR2zc-<1JUWGQ8-iC8Uz^C$GD(|jDl!$)*=}mOU2a4x6$eQmpa;%Fh
zb-Hr=sHnG#^6>Ea@zq{cwk15fDf%3O=Z3K3D8?~7!c;d3#F@ym$WkQY(uPj{6N3S9
zg}K1uxBBR47<_8j9FBIl{1d<}s
z^X9*(qAhf!HZ!D4{oPk%l5n4;R|}zg2xEItclGfOnIG<3LYFc_oh%^r#3fB}?<1b^
zt^Auu2f5@gN+@h`@K7I~EK|hbKKm+(?SYuA%JqB(!mR%eUyM}NDq{_oj*0+hzJhZe
zm9qNwoZrPyub+nvpY+Ilrp^BJ1Pl?@W3M`UYh@{f5+(Z|l}LR0nauYHuP?kqB}0F@
z{*Oulp^Y`$f2G0IeW-~}3npRxDcq-h@H(LGKPW^mQWz8dZDcdr8uzN~)>!x*RIax$
z4g_D&2cOb-4Z~PqbZ#%(V{Ujt9a(`9(b1s57s!8Ah0XL4)@DC$eKVXI@g7Dm{BtZP
z9mds@$A4U9*sTnr$wm0!_0I|D33+a(z=87nKJjN(nl%R;)7x$jN8;Mzk9kpV(QE%1
z@Eto}cba|OM18rO)cMcmi$Y>u0%82jKt;+EXkeB{ufuELpm<`QPqriZSJ#WZ8oUB(
z4n5h(p`WU@bZ-fBps*=;8yp2;?eOgTP$loi_nc(ra*%42m%nY&{Zd{H7ibAQ=c*fd
zbs61<9YiW6f_iRwf(r4WU7m=4yWbof3=c~Z#^6SIQ5@^l>M1>@Z8{QQ3lLf
zrv7P#K|;>|gN^vSEn&zMr3v*XF)YFLfgoz1i`m>C6Z?D5P0PNPGxIqXXwn6Lh!@7N
zJO4&Q_zuNFv*HecjqUf#i@jn#V^yswu*D0mNg!u1K{S5(#4D1A6n_DxACs7?Z
z`Y?UpT25
zKScEg(^l`i>9(eMLDNyRuhxj@!Q$TH^hefxo4%Jvse_w-ir}$30+`5O|3wd#|9KjO
zfK4-9+J@vo^r!^!0tVzstHqOrG7@dh%S9^VPRzlbo
zJ@=#?f}NlNDFN4CleQyPwnbckA)+Ta#fzaJ8bFcv%9wU2vYi!BtUGK<+Rj_qu44g)
zW&`OMNEhNy43U!#-^Bj7#5$5d0H>62APij&c5niUZt)5C;?Bp`pb!RnkZAIg5s94O^pO7?G;i$+U(Mbza0svCjEj)<=*JQGVIGkZX5)Xi&
zKLlQ28KVPrzit(1m6ie#z!`$quYAW@R6t2KlYwL9KlMFz4k^>h8ch-m2AJV)fGm0!
z`>y;lx-piQRUtThRXyXO5Z4O~Htdk+=nI+a66nf`Psz%P>rKbA3L+%!XRO(n==Q3p
zH4s^pzPkdNZF-lM
zHbgadx6(UhbH)MzoX@AlI7IJn03=!eiIR?#QI7?-{f-}{BRx;i0Q~rW+Ji3Lc&H&p
zf$Hk+;x(wCAo$lx72B}4Bm-;WS_zg8nE7-pP`dCimd~H`G;2u&`X4)U)E!EW8>VX&
zKaF0!JZ53e2Qt;4a^Zaq|LH;YnNg1s0WG&O`S;bqXL11T&o}X~{rlnn?!GrT@Kjpb
zP5|H^L;*Wk-_tYaiIHg>JbjI1vOC7!AY;=6An*2kZ|0&T1JD*el{EeKXmuk%0lG6X
z6R^IY(?k*?$ZjaJk*a>>n}(OV
zh@>7?oqqFP7@0;CvDE5JRAfKn28D(##@}{&UBHV$f&_>j&WF^F-w9+Gv)TeQqPnH_
zJhgS)A}GLDoy>7;rkS&1^4WQWXg#_fp3`0~;~~R00A8hcf`|FpDZYr3-U0xgArjTu
zQ__h{$^RLH^O5Ocvu3sP1F4c$=F0?NRrHs=!};uMJg0t2rycN7Z@gbC^^X_#kJp6n
z#rXgpF-%4!M&+wDM)ld(HB#h2R;9FRN`0E(o%Tb`G28kXFIAVJVoS=*clj49zVtu!
z?~lU}LWFAHoDsU{>8sx1pH7jtS+gtXQx89$vX8{~-aezmLdRC0lYZQY(0_tBvz?s)nVn)7iwq{-PFME?K
zu6BRds~Xb$y!KnUPBYDWi$ceFI+2D;ziFLo)-b
zzyA*R$SwZcJs3IgoSpMt(Oty``S_onI$ei7&Kxjzk|ODP>o_-4h!Lc%_>Z^~*3sY?
z>fuF(aX2igH!s<7Hi_l=x$CeIR=c-6>q(kYV%d2QfgRrk;;hW|O|e9;#8%SyENwOV
zaM)m0F>PRPk(L-A;FjgZ-H!bADof@8c&G(&$_$=vf4N$_eE3*{-1SeS{OHT7BcYh_
zQd6Fl)cwnyN5BHhDcS$sJ-%H3(Pyp$WT_CAJHof#zrW*o)EfbS-FVAv)R8wph_8jg
z?rED)
z{=(>}F$LeQcU8|NATy-YM+VU1D~m6od`!(sWm%lLj4bNGBIU*3zu)C%H4JVPOsZ-Lu0DN6a&D^VAn5}
zXof#h84%cCtp0CIsr^(AT>fy&mE5VwT=>mS`E7BnDO|>k4vnI^w*MdzxW!c?-DO3G
z$yRKPPX}!5N{p3S%+s93tr*vz0S?36$g4#QGu;nC<=OJOd<%QZi)ZwnDTj*X?jKjC
zu8Y6h2_U?0QV3!aXs4}E%(*-I_p7*6zABsYwwOLs$M!C;?8Rw1_8=!3U*7|kWTy)s
ze8Uf;4<^uqY##(|Rz`rCV;JTbioO3a{Fy3x3MyJ_Y!xay8BgPPJ(AE3kcEc6d_AV$
zPp^*nv)7hkH|AKpb1s}Puyr0$1~uuQJLLq()TNGAEmA`_jz
z#^I7RA>%eY{l~VG)r9ew$&5s*5}7akNKQwtn#A%@og!ui)!y=Xxb
zFv&0LhpHb-Kg)GzN)qdtukb0Y>|8wsiE@Afw~+~-n2txw+r>HyB$L?oyM4}m<@6^z
zLG2=@49jik9*pPjisyavm+p~Nh`Y213l^~3=_~rXcAC~2PnkWv8$G|ieYN-7Mc6@v
z>Uk!%0jgiWvPZZhk$4;cMfZ2e9J$%Mc|WY~AT%3$_29O2^Py-^YUe}Rz)DQ-^yRJ^
z^mJZAV1-bdqN{E!SjYFUt=sPE>AkCgeKW{-@5yn~c1h@imdB>FcFJ)X<$$_V;`OAE
zIwRw1PCE~-M}?e*owk?jLWLsP{7L%ePq9y2SL|1w@QSt&ahX$ch3IDKmHczs_QRSHC@p#T
zHGQhx0@mx9mPdiiqLrV+sVHDCe%?k6E8;2vp%q;
zeL*~!dsMb97>P(E-Mm8XS+0`_uP~c~sbRVo;>n8qipe@h|MJgvtnI^^d<{!bA-Oy3T9Oq{Q2t8
zwZDVD>f%no$8`e;w;bTKstOjU&Nd@BuE!H}xC&zLb>C-I<#HRq#h|)W?FQk}&RP@@
zJU~jD{~Qm@3#xQQ#Ey|2``AZaeLP5-3CT?tu%TY~-Kzz5PICQahOOZ%LN)CWAu%0-
zQiQ_Ui~C07TKx<#mr&2*{Fi~<)QTOQj9~v$o~#qs
z#%Jgl8=LB{8yH^XV~u??n^fz1z2UQLft3U|b%`Zuw!)a_#oGx`Yad6_mzk`?
zHVX8IvsqH+CV*2z80H{Vl)c%~Ln_1J@{laC|pyXtM_Jy1iO`aR6Z
zV6)nnQh8g(sJ-F;h0g?3(%_VHmafmS%iLLR89U+Ur)Nc6TR~S%dU`90{>!3{P$7p6
zKf^GkHl8!RFK=n)AhMtj(T%PbzICgH6%owA2#_gFZ_yS~Wdj7Hs=`Ko
z8%<|}p5A_w-bevq2IKu(L{V<$GPLtsgM|VP=GTXX8$uPao!13WQbD+v=niMQ^&0?B
z`Pv^H$nd5IsfuoXlZE-b3O$1c6(t+m@H<;v@gDa06(zo_PdD`N5t~tr_W``ru*6iW
zJ>&ro{Y`kI#CiRN#}*+v$*-PIGzFHZT5vSi=LlW&?V>rSd|l@3Pw?KLf*pG5v(4n3
z1$!ZG^UcY$FDViIXDt0hRBsGT2a2quN*U4iDECR#&Zh=6I}fqd%`&xHkNdx!PZO7
zKZs<-(U7fy@wbJ=zEg_Zj2mYrc<|}TMVKTh(OBihpfh&4)#zkTOrF)WoKT@YvRS80
zr=M@Yth%|ajW1u~leP60I)pzAk~3y>vhh0~{YKe$4kEoLIrRl!l8;&Zw679R`k!9g
z#JCaI5W(#}OB}VA*{I>yZS4LJ|J$bW2+N&=9oM~voxS;7|GB8*5BwL)lvsa=u~Cn1
zuA{|1To4wGSJ6>_`d>s6JrXdnAVeNf>c2u~9Yn*|}
z_sCos6()AgcB%*u1#%IhH`675IApmgOI(r8&0J3zn9@rP>jrx6D6E_ERSBJLM*dt`
z9^Em_2wyihQRan6WG-NyP-T4fy*)PWRN)()vsa8g`Ao##_ItEP+q%tjQ8=c!d?%OF
zl!!fIWC;~fz%w@zZ_}83o9KJ~{+AgM6U(CRbM&U;6JZy>d)J+oU?RS==JY^!!x
zLH!sQGOK-{G;;H&Jz)9n
z6GXrCH+DGQWr7X5#psx5QVA}fAq3dO{lX={0e${Kck${;rGl|o2S+;ESHcTWbTBQdY>aPs!S6J~L=z$p
zur^27lv$fSextn^@KTZDsdP%q>c+B-dS6+3qHTk#L$FD{ov!5#U!qKqNdCYd>--eZ
z|0Ef8r+xaCaMt=y*d5ANvsP)a_F}iscrP{H%&N8!O_IpYQxBPX?oS~VC=14~G$(r*Ct1EBy}VSDLJi*}*bXSU
zydKw1pDIH8V0oZ6ckHjhZfT#oym|8t96ZfvO$c#hN>Nrz--g=Vlm8sXcTVL(GmYl2?=c{GNHER#oJDAkl
zd*%_s_DGy*Np$ksAwwy~6hPE7<#j_XPIHX!3HnD13l(dE8W|1ZZp;3y9UshLP@QBR
zX5SffXCcN7tx6GKAx3PG({poqU#x|u(f5z_Cq|mGpXxsY<79!!;7`gTaqI6+s6Z><
zsI*-@*}^8P3lS9Zu(o0*7*;Uz=rDaWSpSPU=0;Q%j<~Ca}6*6@*;5G-iechRzJroeFoGOhW0_^2GKC*)EYHwTUDy
zf$5pfG9VPE9jiyiErgyV`+Zu_RVhQ*C$9>XKmYeSm;qJ^Z$Z98AwFO|BzG%(6i)N2
zp_h4J4#incmVz2#F$S`z{X|_ne++$&thJbmjYuYTr;%eRW(wei_{6e8l__UWt5`m9
ziUc#kOfe#a0gbOb$^E@fg)r==!JIKRhjbH|YLyg*$D56@UwAe>42UG>5WV)**hj*B
zpK^kB;ZhQp_vsLRhn(MI1ggDcn)T^M16i6Zkcyp8*_G`th6yq)lQBxlD`H2uLp0jp
z#G?Ez7k73clIXwL;KxBk;MJm}8J*0oTEacg?%&=Ee%Jtm#Yw1qtSaK&>up(BP+%g#
zMw0de4W&}t@njPO;29i4OvpYB8k~;2vc!fPZ|8T?FEfl#v37;KPuy%5oP(!b@
z*j#!kc#jOVBJ
z3_HbD>?=Cr4;QjMzcd9G>;~(hX9jhvX|Slu?nce5VZ#f&L+MXf7}El4w{nt+J-$t3
zTTOye$1Q5TysQUvgVwE^5$$8oYkY@232EO~|{LQ?!*RKLOzH2qH
zeS>tG-m5-jMY&Dlt$`0T5RcL2l)e|>Ug66tr_x0Y>c;7sw%{&W12l$Su+ufB|iV4=0K5uj_cQqP+!WV(RMA_Y8#@3!oes$dRa#M%_UMHkv?2w&r
z$f9f)Cqjs9*Ye8CzkN+*KPyE-O)xx;vcYpoRP7`-BMg`7?wB|NC}ev2Oy%uB)$1#f%iMhZkZ=(cH2
zW8Tg=(qm?^
zhO;_}KNCwF=c-=;jsHQ^MTb*-gdloGqpfzyi$(Va_ru0Bk2W`ocq|{q^Yx8f!kJ;5
z6EV2gqRXuB3}bc<=D6Y_sS(Tzu;bTY0rGxVVMi!fs>q9{!Cou%zv{r3y6JvL?u@G}
zvekFEGRX*zyUJen^qPjElB159i>8NuXS21O_)$5HKe$|fAVbpCn^d2N!Qq|TV@{Pf
z2^s$e{0~oqOm?u+<*s=C9aY*w|9m3t6B#bG;q1uN=%Wi^PDyASS$fQ-zhttxs6EW<
zT|7`{4hZZoP2{O{vudSt{9!N>O=YVayHz4=TKUl2c1KulC`!#8YBasOA}VTBjhOsi
zT&&XHMsu!If(`*bS_My;Gm;y9ar|pzPaW!umiOb&Igzb!(#k&eH|*{9Ihv^!dByld
z$!Ig9>7K+C8#;pC*_*f?lo2|*7Ny3RCC>=JoC`TFPN>gZ3{rkmWAb-xm17lJRdHM(E00yb+j4W;|E1rHh2$2alCq&H;x2d5TFYWczWC7a
ztN9(#LX_5JS-aAOmFH5|QNU?71NZC_Huuo@vowVjt1Wa*+JO0{{61YhX|z8!>rHv<
zTi&+Q(g1p2J;RWZz0Y`j@7Ri=K^P4Q5t^5!Ml{@st1KDGsbUu=4EWg`p0ey&?rm;i
zQWG?uu)|bvwRGuyYGR6z0>Up+dv2ABYGAf=C8@G3)VGP*+9&VQ%Kb?Sb#cxi2oVbxqMP^ZbRSad6$cOVo%~%yP7p@!Sq-
zUCrT!Uc5W7cC@npVN;PLa^sXyjt1Rq%^S%;PS8LH37N3Xm15$>hDn8%tzo2L97*&R
z_rWb354E~vI$gPM#{`r~K>Xy~iotV>kKRN6v7^L3MbET4jC5jD%vUe1O^uN&b)0k}
zcGGiNj?9~h9yAnp@|i!>Z^B!G6}|U<;^3!xiw`vK+N9n%u6Oi!l#diRj;jLayldYd
zK@xA6Jul^4l=%S7gw!9$dw@cCzrFm44vmjiltip4I9!Y}eVG=+Wk3k8ZLRcv8~XN~
zKoew7F!iMydNG{wG5QQV@zL!NpL#g8K|GyDM;sm&8Dqi3Z)@x}C+j51>mr+eeXKCrp0ZQ}-`2@?$oc
zEY)5@4qjm_L9)I-HsXO~9+d}eY1UdLTqU3>@h=3I;)e0MsXe(3p@t#_nI9kgM@g0y
zCF5(m`}TVWB++6i;eilESp*tV`p=A^SKR$j<9Jc2#SGw&%8Uj;qn@P#I-xqlF!$HV9owhgCV^3{@bS)tJ7o=wO=X6i;Y5
zxLzRlq4;m;30@{jFTqPgK@*~5{c-qb(E4{U(TqN=e9RZm<)di#_CL69$v?9NCh);S6Sf#5L{GEq~hK}}<1GaTg%J|~<
zpDdc>K>dlDA)<6Yj6E8&wQ4`?c<(sUFJ&vJgx4*R6|EVppd_C~9j3$S(w!Vk4vz*dUdKU{9VfGK33pDlFP@uy3cIM_Y($}c}_=B#xPPILbkaI+Xd
z22tL}+hMdll)@BUk4;IE-iruufx9#6!_ql;sad4?nCmS9Uf~K20x=!VkSNCA0UnNF
z<9luH2E?ahA1L>b)silL2-)#xUMH#wLDO4FSmeeV58m&I2lJuNUgEGscur$EWej0G
zjuU@Ph*(GRQiIZS;rIF*?zu3
zOAO-UOTDA_J;Kqf1GfPZjE4Onago~DV;pCoc?bfh=O`=V0@m$9{U3@k#b9d*s1MPq
zk`-^>6wc-jDBR!MwjAUu{_UBh@yy~9a6`@e)G1X7u`Fpv%Rdg*3y&abzGE>%P=uHf
zo1vTtuNEFF<3#mYeLG_2gt>2;N8Jf#9%-tw*wxKlH8vhaecq`r!1cSMXVzbtlH($a
zr}AjH@VCsQ3|bl(9LY1PZAVtgX9}<)+cWDU&T@RBJpu=dQSI?mD%ONE`u{Q{K|Raf
zTnKv|ZB$H-8j&?8Y1Q2B;n*ZC2RHgK6wjZ}MBi`T-BX`9DG=Kh
zaC)2BeUvgmednPD)J)4Tx5F9{pZ*{LOCV0i;3ht?V`A~ibfa%+CnkBa@}WNB&_qR3
zPs0aTFD7b!cY7x_`Jv3ri`x%rm*MpNqYi?02?``8>yrDehfS2uBpa);zxpj5x*0AF
zPnm8tcOOrw*mC-umLe11mYYg^%
zL(s`))VI$x1VG@ToMv^a67vwPc4&GUr41Y}P`Zur(Amg#i^nnDOuO4#
zRAk7&n<(}8@G68VklyU$8Enq*XndQ%nFbvyx0*VN|1S7Kz92vlwxas|)K{@?k(Ly6
zoqy`5g+ItM(c31eiO%_;H_LVtGc}!zTSSDL_H}0Vjsl0e7iCxG*f?{W_
z`Znj-972h#QIqjHd5<#rZALcc_Q{>v
zUhYCd#U!d$avC2o4wk4uo`B@jTiSyx)30b_S6F~_y+L(u-h0Ljd}`w&bT^E`sauPEdud?HD1L#P_Do6m112Z8Z?iv{d-
zfs=d#c`0DF3em^s#&+8_w_;)d5bC7|%I*uLD;V`UsVN0$rHM@^bXBOR8xKk8|6zr&
zfmoc5cE6+We+C7)zz}>QG)BQPTA?O*;Mu!f1FDbsh#z+I29hh@0497ewqV!r9~+nV
zz#SHMBJ^8>kkPYao>fPEs5P-ui`k>mHgLZL8WZSXhOJy{YLS{c`}z(!IZ^es^_my{
zc;F~Anf6|;qBQ=?cL}q7V-*CR1g9nhh6pZ=O=D>rt`KVN>w!J#IPtqiK
ze?e*p!tvWENZ&HqT)TBZ?>25c8|mVT28S$Q&#N+9fp^alKSz1)!OX
z`e=B@{es;OG70!#Q{09hQi?h#TC!9jJ6Eqrp>`-_q|BCo!N+57_CUwv_0w3~KMF4m
z{Rb@)!x199_+cV6$~l4^BVRKL3L+<#-wsjY>|Y$;)b^Ly9{A<7a%HQQiOSW(82G)(
zG+$FwQ#DPys!gwk-Wwvq2nNQ;(~)!I(4Wi
z#-(fMcdGtbJB}h0$o`PVdIo=-bBcE8tAa0Fjz_yB6Ian><-?e%tkjn5XB(McUhM&L
zA#VhHq4wLTIIK2Ei({u8w0u9rVJ4T}wC7e(?@QS`)T=h!YW6&FvE_-}m*>zN@ZJa_
zCHwNkwh)N2?M%4S>Q!0aK)nfoZg-oh6%6w$MVi0v(K(kPYXU{ZVMpc>&v6{uKw
zAvP{g(QU*%AjhAVajl;5|FLw{adGrc|KM)cI``6uWCX>u;Hap48e4~v#Oc?~c3XS;{Lf!rhutW;l@nJebVCi0&
zoCL|;I@Wq>4d^{F`Wc#l
z*e=Z`1rgsXlh%SPXREvovczNBJ0IxEW2bYw9@ue*y_wow#
z2Kf-l>>3!wFF>suG*7l#3lx9)3ab4btqw%X0eb;yC4du3J;T_!Df2&7SGKYbg8be+
z_=C@{3yq0ks}Q72jhH#?R6vd4QDulI!woX
z#G-Yiw&ox&UMS>43>))&IuwIU;YJ|K-#^`>hnwa>99%{Oh2^baUS5WtQM}}{RC^yR
z=~ySD%^LB`kyBB`|8YThiZ0m3bj0R+1Z-C6`bs)qM8M}+aWc(B?T4i4_%6$p+Xls2
zLEh)k&z5=v^AKH|HqbwECw!L!bi$-Z-a4)UJp=4`p&7Raqb*d~&|GvG+ZFIjj(yu3
zQSXrsg2>(icW-B6YZ>SWu74853}F61pIWr({(Z4`Y@sS{UsJV+6WaqBbV+@G-pS^~
zj6;mg0I{k^7n_c@oN1Q-&C
zplTY0uZuRkcp;-R)+9PUmJBmz-BhvN{Ya;sabFT+h2K!r)hm4no^ODcWtjpJxi?7k
zg0vvPK}4ZIH0<8ro+06C9Yp_8W1Tu@!)G!thKph{C3dF+{4G*te?{5HBEta~sB%3Z
zdOI{81Ac{9Sdrx5`B!WM6&6`Q%4P_=`HS5nzK2vh+QXM{Wb4;s-gTl@@DLATi)gAq
z)sNSPk7G9)b`6t8uUCzW_w6C~Faom7aNn;6=k$@{{}QIOKR^U)-ydmYIFnyI8si-P
zLN$_e0M;CNSaNG7`D-Ywj!FeR_JQ9gigl{y#u32`+#{}=?9TpY3O9G^L!D}Is26$d
zPOz^Dx$P{6N$*kebi8fQ#g}(bOx#1Vu%~WSTFga6-)K)V4__`q*JqQ^Qu|u$SXOaS
zXog3co9ijR-DrgNhe^-)csosgl&B`51lD_DVd(;lDA48>o8GUGi6{^?=up6}1Bj!G
z%6IJis+sAV3Qlj)EUhtfCjf7yoc^%?*;3%*
zlMyWGr+xq7T4wv<7Q3Y2JtM4Z6>Q1KJ_WCQP~S>`vpK_EcC9#i(-mZZ$Ws6Nj%B5r82(D429F{{^;-W;DJu%C`f6wQu&&<
zMKy(a2?w87dGUb4n4S&zLVIroDXsC8bo{ge!7Yy`~}cx_yDnU0Sqg9V28=Y`9Uynv5;_E#TRaUpPInD+$S`b&=zrKT00rm
zd7b!@;3|lQCrpPKynSR8mmWbq1cg#L^60*ka{VA`6*&g-1cMeaeEH1!R{(dk^{F;pz-v)_PkV^swRgjEswEVN_7h>XF
zy&jdgkcT~>+ZJ&sA`b!$W9pJJDp`np_7k9Re08y+$#M+Itc13%A2>N9}98N+&)LnP_q&Qglyj&u|EYUrYO)%u|o?G^>3T4ke|qU
zHxwcCxnoP)F>C_LdCcK?HxEy3?)qjk&j*>T%3vGh58{$*6{Cp
zC`0(cMBDe_XCVLT#@RHGV5YG9-YF;{Bp3fsj-8wIbE1`g3OJ|+ca#&+v72C2%uBi#
z&BN@E`7Kv5@47>uTi#o&y~^JU>b^8e#Cg|Uq#q6CrR5d}xNT_M;)r%x!5u*HrPWoo
zWVpm=(NGC13akR~M`N1h34<}f)Cl=)Rs`ilk7+%yCigE~s)6tT2|j-<1DYC;^7)=)
zNI!Yw9E6^LVNMI>x8}y*Dx!c?(EVWAg?WyiD`yO##
zIxy3a(S62V@WvU!i*ewYoOZPOGfOJX5+&V1pGSm4=jOvExJi2R74%og5W}M<&k*Cb
ztIQ77uVxp~edlW>+~RFDLiPzk2K;)>XZ=`h)=#qaG=oXJGWh@{umnvE*Vot@R1YU1
zt&ka-MpQKkc^;<`P>*(eI=6tn9^>13k|0WWB;lb*y5-0>a8}FBjYaARUI?Iq2#!Nm
z0DvKX?f?>=oB*`6lW-}HQ?*Dy6Xy7>sB9w&(TosuzqaMWUuK~29T)w?^jkz&`TIFX
z##FuLn6D~O5!f#y^kL6b`E1nLr!=JU6GxISgw_~6l{pfUdfu#+g
zuffoHW;K#Nqgp+|Aq%@81Ang+lj&6jh6pDlCpyon7F;n|pc&Y<>V(}yWO?u4CkY#f
zO@R|JRRj%H^jNzh_NY9LlxhVC`bQg_(Zvk#FLCi{py8jYu!n`hQWsl6qzz9gsB)9Z
zaiZIs-=n3pel`!cmkApIUDM>oho_q*?coMGZ#^Z1hvV}dA~!Zk;UJyzMP^Xc?Z-A|
zxV=%JyePG8skHV>=T0tK#3JhL=x9_yyXTw?L@M|B#12wyxF@HK&`y?+^7o1?TZ|&k
z14*v9jPh_U3NrgT&Rg;(J;H&sQiz}zh<7MO1=pr)uV}yl6iVYgY#nj&C=_R)_HyXd
zH-SYe2+ZSWBei3gNfUu-j#`u00ewz-lveZq`-lGga#G=-Y3%U
zV6M1WdO|25Jj^Ly>=bbd6oi`4&W&i&ObSycrh|iUJv)GT#ZEMCWKE)?=H~C9eZ#}U
zNH+`h0~8dL8onZ-L`AXUs&_{buuxqd^LN~Y^|p0q&7+;%IiW-FuC{l~`LROBmbTo`
zXtPn*X%SW)s0)7i;J|)`pu!XK5=S)QA%nK^lzCGa5iqaSz>rQ{Dg%CP9Cz3S$2Qba
z{V&gw75YIn94${1!J&+>keH=aAcVLYLBGxh`r}DRrK}?pEli=u7dW1%7M1}Flwpkl
z$GcmbAU(wuHSyKi!HbMeceFYU7SKUY2tHqrpn3p^WSCDtsmdH`f$_9wPpnvPCbY+j
znf%5O5Ebo^KRcp`#U#(YUPJtu9Yl&@esl%2xj9M6fxJS3!V!<0&ahSNx?L}=euvUn
zja?DZZ}$ZydD}H**coz@?KLc%#
z#TqYB!3Ij&qqP1ZFH6YIGgL}ZV)f?i4f&f2?`ep2c63EKk09LV&TC7n$ge2g^d6eu
zSL6%9kMjtL0r*&a5mCi0E$#~5Lh!@LQfCVOr0N>DF)Bug+uC;noSG2qWWJM%7D|03`3K&HMm$+YH657~{~V=P&3
z|0IJz)@HNVrDGS{3|<)fL#0OhAdk;4(991uM#}m0$xh)LV%kw1U^}UK)N-Z{80eh0
ztPmstZD%~z)Pvbqr~w6b!oy`F5|Q#w{Svgbe=qr!>n9pLgja%AYW6{v8DRbNFJy&Byg{yYwt`#
zk4^~}Ap7l1^8@dC`&XG2)U1$1i^mZA@dlj3f6EiXsD;%ZFSQ)aWZ5KpQ9UYF&-VZO
zmh!@!IW@D7N~fD9_{b?|s?6i2<@mooXI8dQ*fRdixT|auc6tY!(C61PRCEP!?UE->
z_imSe>t4EemEWx4koQ)XX2r$ENPHnl0qW}#C+ispA_AWH7Tb$
z*H#-3G7bS|OlpW#YjAsT`?XDSDce7^d8P_Kf!(;V0%j)Qi`b(yp~6#eD3`*UdjBwM
zW^f|*{`uQ8*_$zhyldmf`sORTCCpN%OuL)ac#clcBu)BU>-}LGv^!f)>G#?@B$5tJ
z_e$GgXwS;tqPLA=8b!XiNVM6~Kec9ladd*MJiOo8*rAcSAbilG62mfram)TRvP3=9ccp1vVek@+~Kk%?zvAa!$1fdxr@#&qje=YEfSX9vKPEqaa
z!|s~nb(rBjj;lNiWu5*Q1*g&yQ%3i|XyW|M%2)Dv^E#6(7x7)bjByoHxUzv6NE1Ne
z$z9K@0>dP;;b48u+lzi*wsxL`plmWfmEC>7I22L_iZmvMYa7(~8671ps1*}qLq5!g
zy2eI<>~JO4Trt){a-)G^ixz$9Oc^rET5ho{z~mKOzmNPVc=gigxH{PNDNs-dITV}n
zJJJnyu)Z)7AELb2;;(_@?Z@++X-wn~ZBdE>3%)(LMyAWTKd>)B^u$YAdj|7>Zb7l1
zFaZ&j+K8%zK8yovVZfxd5}2;F8MPTL-hZ)McCI6^IZev7ofo_>6E&mezjlU+eX{E4
z_T?mjQdz10$_$l#s|dY0=P2`=SA%&9plzO)A)@kptb;lIlEq|wCfCcVTOEJ;D-6kDON0fi&XIxVB8
zb-`nyWwgxm(4VTK<5M#9R2hKH%WHi(m?OgHhqX0sjW9>0kiCQ%CM3Bs&3
z{s?sW3S*7?EK2hysL+nb;#3yC=bOzV3RhOTk?r#So%dU?B%GaB(l%wd=O&hq*4Qzv
zft)ApU%FmO#idsgb9}<_wL~H|qh%s-Lu?F`Of}q^jAbAO4VqqoPJ@>mMF8j?g*iAi
zDI_{U&2ia@MuuVCm#${{mBSeqC|hBc=9C}}rUn33*lSC%x1@16vU98;S@ka6Q<979
z4Z&w|D|@WA)Cwk7T1^M6zyGKOKco11MPe+3pYG7LBc?}A*4MPN8J{x#G5#lgF7p9R
ze53sg&DSf|9^s!?nU$fmS{*%~rb#n{%Pp!3ZIw{uIV~MuZEWZ&s4Puu
zIrB)4k^^gHdFUe_hMcW{Yj1CxrdIl|hx#};!9u598VYy=ssp=%7
zW=nizGdS$&17V#rl&q%G%C(PoRSdyWXhZ<99KQCtvWd}`Jn
z3~SX-_}Mtu2lRe`x5?!&xGtYCjK^6)#)^K;E`n=26D$CmX>k%jcRo+T^g2e|F0gdkorV%B>Cv^(9Q6Hi?%Ud^Xfdhp2#|aDu8NOH8<)Z
z)h|i(rG?smSDYsLE}IqCqwitae;3cXd!qi{3#qaM(r|5RG4x6(C}>!15S9@pI+o}t
zJX|vdl()Amh_z9Z~X
zfV4))=u;WL85D+BhkIlbpiPWLiLe>{;r3L2+N#mZiM>?a5hB)~AlGt6LA0qUe7Ww(
zl0ZQ$h6}01x#xn*+ja5yl2eJr*@a-q@grrGKVx^`t0ufFgC#mX)Tu6Me}}H}3zG-U
z*bh23W|4y%j0r{nmPB2|a5(XZPmUii)putF}Zum-(QcXqHjNQhQss0GfB2^
z!5Q`CL)|+IDu$zB8Pxfe#xZN|8jjHO<+y&PFP5cP?|BN2#D3@>$lf-1om5VNQ{5{a
zIjQR`LdHe?Geh2oEUFir$$Dm+`wsGG7g$%mOWObJX~3du1n{L*%A`x9?k*PaVAq&mOWl@_$UB!
zKe%AxLv@7k^(BWsnZ%=yA=czKYkA%p?~Q!&^trwwTL3VGu_yKC5$KV(S5FxRHp+$#
z^90x3yHaRsxzsVwoK>m%qVK20g6k6*l|e3->Sn$++%FRj5!AZ%{~Ugw85;%~@0hDl
z2|&o&_Z$5+`ol#=V|#dbch|V~Gpmy$L5z;h(XDA+qbAGR;z`=r(b1>^-EUjIl{5S1
z?D4_f`X$@F_T75k0&JwKTz8Y!ywkJPV$(Mtth(V%cY-Zg_$a0*ZBE;ZKd}=f
z98{hS*mZHWv8KoOSB!XiH{NVl>#d5~GETc}$_7&-FaOOLCX|Z{x^ne)c?l}3)XMkm
zETVf})?h6w}pIkq)_zx$No-zlBm}=+LSCN
zPVtvb-^L?`y|#M8-4YFXVx?{K(qrYjoS;tQ?~-w5(ZiLstngdvBUoAte{ic?0xS0R
z)2f2OHWLy#L2x7~qa`k30sY&q5(T31y!StUh+Yo{d@*@%BQez7X_(XMFx+W^{ZerJ
z%!E&(X|aD3Kn78#n`q&z<-oqgULj+G^dF)jLej8x+)SD;1b_8hrM5>o8o|<|I0ZRH
z9?f|WP&3T#|9(>Bj#i>s>Mpw30hU!%^`#|v6bC7ukpOzuso
zuyR&yKoM!GmxiaC
zf(!iCgpifXyktGS}og3!4J(DjdzN
z!D>klJzl8BC+jVz?+8fxtdkB)SZQ0B6wos=rVK<3f=|6{P0XYb*2ZcK{s;{R&N;1pHUQ&oc+)xcOuQhUxK~yJL
zaVaKyI35{B(ay#j{280Bh6Xa0qz(V18wd1)8R;o+(W9g!AC6NJ)zfbHdtWg8I;^&a
z3AjsLk^{?uHi-Kjlye%RDRqtqip@AzW`KVCWo=(|j=lXGqtzXWZ5ZCl0gLSVfl$k#
ziU?{_>Wm76P|+4YUmN(slHWk7W$-%A`3G_08=fBmI=6XVUfcM|cY6}sceV5+-|(_U
z4xGfH9el-=HjvWJ?*12bSc&CnFn;Ne$F-WQQ~2<>WWV9?ZMrH6HBPWIfkthC8jR28-~x=HxT#m55cd8
z$H8tCI@nYg&A8pi*wy|%Z!
zAqHt6?@j~`D;vnHsF|k*q*fPQp@Q`AcB6ki^6e8Uu4V)6HY)=%3GWJ_
z_W?#cI~pTC!9Vdd7P&*D4llQ?A^7=U1<+|8N2*X%w{qolz~@`}DG^`Z^spbnL0m8t`)`?(Z6|Q5$MS<*BAAzmO9YfQnrnjBPGm^kSGDwDH
zWgVUoAV|@_Otbomf9SL&X|3%uir>ghfz?opC%<`Vl%$7&nr=DhEi!VA4xZcjuY;2E
zKC6u+_Ig2dQ1b*&B1`MRjID0=5bN|sYfym?+_V+!280QH%ObrI?wIRj7|oiSK{p-o
zl4n{k!lucq6E_0JQ=|dVjp4#SYu(r|0X^p
zdcXA5nWSfhL%*f7#}4g1jHJZT=kl>(R&5RVCrY@H9qsBqSUbr0R@c8r!?a
z1Q~>8%)l*r@nP;iW?;tgEv2lm3qh^DOTxUd^D~zTm(+{-;A18Dd4{{R#KlOfR1_fN
zlbpe)pPqQ`AFfx#HXF|&x6zrt5GTOyRyq`;cxH%nNOO~=L$a#|;nw+jj
zY3$e%eA~XUq74f~wvxL?K|}c(i+--uvGz8ve9i1E{?Xr>wO6^IypnB*DP2puYpB0K
zx{rv1(cu?@!lZ1xSO8BRJRBCE1sgo%;{>mq!Xqd6wg1?nWd42fyUMvm7~&>})_~f`
zZ<$0Xg~}vm
zaRml^pX~5wv&(?>v06C@re4fuO8RWJ}$Zad@L&ITOjC@j#*Yk<`%1
zMLaN(bVFmwcHp9o&ceRt8R+@yX+5?F`&Mlv8Gu6oTj)b$YZOrcJ@dPmDzn$HAS5`y
zuV1f|LDc$o8xE&{?|O1@qfgRs*|5Z&a?s~4gfTkkGSZd~A&99GD8x?O9^#Bl))!ES
z0+DuON`Xs_Wt4r-rylcnyTMGY=XrL)tbdTdA2A#qiUk6UJ*ce3oNhg70?#4FF5
zpf*)6Vk{xteJ=w6y0T+>z}e1p(BRO_qSiey
zK^Z|6LJh%e(7-kglW7RC0HSdHBo3^lFMxqgI(Q@F7A(K8-k+IR9mpd4)yeLs@H=d0
zz~)*Y2O4`yKOkWPn&+F?85e0$M6SYR9&Gj
z)lC&rOaQEGy7=7MT-=*n2Nd^&H=?1<33F9dqBNDog3S^qNeJx&oo-QldXl4`HT!=1
zL+pr|>6%hLwTUXV)U>oGt5wxk%VKdX6qyi3Y7Mh;&?Z#PSGSywNIO$~D*#R|`Dul)
zaMy+*F<_W#NK(U7KC0_uf)WHG(Z)mmEAChQ!rVh7t72%0O#hJ`
z!0G-+7Do?UqQ7Tr(hwlx;R)3h_~i|?j`dYTRA;&`)s-r^`%$8nddBI|QT(ZvIPU)W
zIdAIx+^STgvrV4KrZMkx<+7NFee1=GTGT+)kAwZ2hwW{T?0gD}J>t0Sy1G`K9)Vb8
z4!#FmavL>+(vZsE-!y?q9~$cISu_Rizr}>!^5xIszZUPSUKcfVP*ZxgatKNwCU_@%
z{6!h`ZtN@$&Iz?`8@)8Q`8CaK7u)`I_7>GWX1#`xg75N>X7**}^=`6jZ1&xU@s0bYi-%4O~^
z6?xf4hS>)(3l%$|q(3&N*Kg>j2sY1D+C-zzFNjh^CtKbahznGS`rEJ0eZKf4ljSM6
zP>J9NaWPp0f5C#tOvs!_`*Nx+nk3lW3RaZP-h7;F+hF6nMou|06Duzedt9ANeVFZ;
zO}KC0k2*}h7!$z{+-NGwX$}fCOVp(2b}A-eg8dmaF$OxACvGY*jLwdPoPGTdn82Pi~hgd)ruw
zSq>(0ct~z^9qo;5`Wx#pkxWfIOH{sS;pDjMlX${Y$?`7fidn33_9sA78B1zbKYh9Y
zeNWtZ4|q4il~@>mM9Rn25{Lz~jl*>?)8>SLf72F#w0X$^h#
zPhRu*9Nt=SC7~CM~DHXR+MK
zy~5At{F(htc+0<1dEHmsm(0g1SYFqV#d9j98-2sxFleR;BDs2FHu_$Voi^nD-BqPZ7&^22D%T;XSpv{9w7HD#w|
zR}H>0NDC{Q`j-ZdYbr&?c}ItmmkNhtcWvcmQpdX{T#vN?Jno>cWs2`3EHP8=NB%%>
z1<7~~4kb|tIYo=S#aa9ElQzpu+I}rn2+Oc8C1FndeUEEY)OeA|;vyY;9$$s`LmqaL
z1g99USH}LFy|{CO|B0{XM1#Nx&#UC>&D2$xwpeW(v%9KxjaiFtersf=yR@G=Yel@U
zXH%9
z6tGPk%ctPZd2c_VPJ(UHWlY7HfSXmNa;kklGrD<)|<#a
zIYi80BHmV)V;yQHt33R8T=?|?`w-LsPbO}}_*ubA$?x3qr2Toc;esyKY+RcKLhR6-
z9o`+PZ;B3-YhEGCRqb9A{x#AeE8HVS2vu!8G3};PKu-_|tu<&~;R$elds+Jga*^OX
zFnMq8cvYk~W~o|BUL4je!FQcC6HXqWdBXvWnRI)d0=v`*n5rN(bp#m)HGbo^Da`Th
z-r6D_jSV>(Mle2AC-fem~@q%P$^SXiYvrhzs+j=VPjv>c6_<#msJytD>G
zc@M+U0?%X+s{i>+y4?#URX46d^(E6RPsFy7m?W2TMiRtHb`||l5IxdL_&FgiVn{QW
z!b%uTOu(nFfy9|718=~S1URD#uDXNX#XVh2i338pl?5){pOc`$Y+`6FsXXS7)l~|6
zxW?fqbBAdqT+Nj+YIcP*`V5h3?l28j26t&*;E6giGe^p`9gY
z-SY!dD+7P3gPzl)2MI>WAFdN>31G+5gdFWkySqxsl^~SjRVikWV(<;Er;L>ZB3h*G
zd9pw@xjvUP;$qpZRP~yJ`+R_c{B4=y@+wGtUL(B!WV5?n`(oc(c
z8_D+u;2T6sTKUo56pzt#^Zrqk9))xxC9ae2*Ngka*W0HkWlE^>#iXapyoXIuc|5%D
z|2oH0IkX8Er=ujL?+8Ic6Q;3mfKNUTsjoajHCF+tex9+Gjlo*q8+z_mL(YHckaadm
zHV8B>`9#YdedWbk*jm)sTkZ@ALf_O$77Z;}ko6RvI{i}Aw!1Ww4rTov)Zl$!WM^SU
zFjN1){u-_5`
zw4_K2g|k^5Ehq~3?+hS>m>}>1!pc|%#=t}aWr`{{d{@09fcMi83^l%{f_|TPoMP`#
z%E69vM(mn#-M8!9fcP+)zc2I)XtPB%Le6Ji%-~SAZJ%Q~lPx?k^uFH3Q<2w6#|amY
ze-M_n@qv1DEb|E#?{@u5Z~D^-TymV8028GZggh9}md7U~`zlqn#*=^tFftPj@*izr
zf*PH0mXNI$VG{yFm{-MCVe8RG3(+&Q(B1;;SPf8$2Vt9iOyYM&tT>Q?Uy}qB91d~_
zQEZWW%^$}p6FHgQp^+LFE35S}O^oorF`)6)K@_>Rf^gcxJV243mncbZ9AA1u1(37P
zn#6|GGNG~4v4HgshnPfp!pA|-xc{3bMBy6FmJ>n5@dI`?#?fQS3iiWAr4zf#Kqx4n`(wU4gf4Z5&N(Zh#-%0O@P27DK3EAmEx#bUG
z!IhbiQ^rEQRY!=dr%ado{&fi!9YojegJ9@ocy09H1TJ$2+^GOxEGbm>ro-2iz)WBepZo3@p7D{Rq4cCp~nh
z%XWO(cnMZTX+RcX1|B-W_IsUv%xyHEfzvpZ!E#P&vJ%t6dN#fa4Q9g@^{Q&<21%7uv85(RYPXV%D?SPQrA&~wT7
zj#L;%@t{uPFE?FHT~nl$x#MKo%)T}Gf?-tfc{H)PV|g5{D8o~qOokz%}q8j^m5nnfM@Y<|d*9}7H5zczYK?CLNrBKWtTVGGt^Pit3*5-4Mc
z=?kzc2%7CzqID!
zfq%i|M0NZV_$8?LJ@QInz7W*$Kn8kU2s;ES!re1wks>%D`9XCeN+h5{aMjnl_cuLj
zBP^BCeKGFT0~4!Bit>6gdFkANjwrMYxjn>s!jp|+ZW|;zm*lz{gz8?%TjCE|LhdxZ
z+-Y$aii}5y6#fl%T@U`7`Fx6q&nVzZ0nv}#DeF<1W5gmGb}84zoz;riE+pfq%p_`t+h>j=99@5$Uw&VhYg>%
zd2FyP+K>H3E%xU}<$z$~UvWy%IihI_Te)jDNR~lZCC+)LuxwB
zY(>+)M2`;>xJlwXXM?eF$=VPn3xVumx>7jog4250SlBkij})09j3x{t>UIQ`KqZTF
zTj6Tl89T1hgvsv_rr-6!EeXq(RO5^QLF4tGSv<(u^+w2F%#q0MjLCX0DSAW7vH^P$
z)s=5$IN|&%=x{>w)~qEr-<~QljEv~kaWt3h;o7gSGvoHT!?_8WT4rZXYdiYS^aV8-OM}1%VgbN)r?35~CjAA_JuUF}
z9%eZCHDZec6s70pKd^BA*EJ9_R6Q)bwy{EN8p+lTIn!vyLZY(z46M2+v`%7WF4|sKbrP1j4AnqG9;KEonnR!u-yHR6}@;e*Z
zPYv5+49x>cUQamf12&r$m?=wcby(H`E;VB~KsbTzBJx_zQYMXLRex0WpWOByl7Jwm
z{fWmXwm2;+VBt~9S0@-la)t3!1FdE7Uqvxt%-d|H<}hSGOvWTE3avy5^88
zATg6vx=-ElU7_C`@GrLgng1BYKT|&IQX(JU#3}9X2_a-3sX?on`$Y_fDb|__>vr>w
z#s`?@6lFNL*wj!ZG50NvD=XFf&x8&K`+F-N)nf~nJxHOAFa5{x^f)*%zZ5=iN->Jp
zB&V+49n{-duDk(R)ZsG*rbVP|F_5TpQgt2Eh#SflZBI}6TAGs*#XX2K;n5t{PFXgE
zZ3|-RKL!VB_47?R$@z!PTn1p7dWxV8Pw`=bxs2$INEjp=PFcC6O$;cgtq
zfj&bM?gCmrX%0}(zqB(!CkboV;f3gwFw_|v;&X`wP~TyuW()-gVZPB8!mlG;NW9WoOP||`Zq{J$*sc;Nd&D$k@wd3+KH-Ez
zxW}9Y#i;;<4A*qXNZR}UCo3pInQ;{Bq^rZG9Rad`m5aFFHejAqaCCN{Zi_n{m^A#W
z8o6wdb*XuLL(TeZZI;Y~L-*mSi=aP6?*fgfqJSkGJ(zL>YJp;I$|tM2`~-0*!aD-wZ!_z#{>zf1OX
zOrx|zvKQTnvinc_xEQ81Q<1ZuE&F{pS+9bMrH2>6=fF($R{rHJo)0>47pz=&K^S~a
zIET8_4CjLGp>k3^
zUGD|iFW{upR}HhVu`&j=hLx_ys`GQMI*v^j|74ES1G5>;U5lSoBz=5nbAp^R79W>N
zTO)`2C+gmHuO%2yVl)=LJm?7p$VyK}GKo&lm=EtK;4YsC$4r^gWehwXUV+>T7_maO()*!B;eY-o_ue|rAwPiL
z-UfS${MKUp|H!nShwhn_Uv^>
z{VT1GsBqRFz?w=7d402m-2aGSeDx~^qnjzm^^r!VUkko?o#io^`N=m|YhrbT*Y-5s
zB4XdRjNO3TPk7~x;dHRuu|j#eUW131ar0YiO`#p)l;3RsC3k-YZM9OZYxr&>e_0dB
zU1T5$dJQY2+?-MJ?ABzmb-8~X)fbP>I6P@W2-+>-DE*Hg6k~s@ZMD{AK;x8I6B|!l
z>`37A6Wy~IbTt||+aR>~J%wM9Vh^V;*LWZ8na!cn972#uJjWn#vPNH^u=o1KwZW|1
zF(7<*c8t&wyN^Avn*r9-nQ(+JYsYJ?W};$`PcP`?lI+YPb$2slfel7rllwrWa39Fe
z`A=$|%u*>RU#4YLoojmoHYp=-v)cc^-K@r*^InhrRe#?&PYvXEh!fL#nG(~5y`0b8
zrLek$!rw!FI*8*Pu;q?~q7GU;F?<4>;7|6`5TH3dz1_el(pbEDZ)+ddV}ck(srx+A
z{7Tfg@g5#+sn7u3|E%pfM;oeV+_7PLA2vGSdQrBFGLRN<=5N=5s3jhNH{wB6fE`$&
zV$?2@t_HY|>5UY8;-`R!pk8^A$V`4I_kzE5-
z4L(lMD7oNrV$bx=7RkQnNWr2Sls30?cXf2rpu3_GdhbhRws$F{i!yE*^|{KQAzv+4
zYJkM05`#w1Y6_-RY_fZ^HpNSPqz{K}NdL#uSH`vRJzocRcP&n_;tnN9ad(&EQrsyL
zthl?TXelnm-JJjhibJs=#a*9#|G(#D_Ql=(oIQ7ECU@qXfffYAR5nS}xgt%V!~4E8
z_2>sU*~Ha%BcNMCU=x~j8fhD{?7I}DNw^sKZV_OL@(3VikZ{$N(ofad@SQqd*&2lN
zRZGam3g$z@jSg{#r<(5josd*(L7kB!8|Mqh)MR@@4J41$LQ(k!B<
z`etcHgfS14klI1aI+r1L-2`@%=48>eFzu7ccQ8f-{6NdP6?DXMiM1!u1El@R>$+^AIbkQTLxWQGr!i{L
zh|Do&trSt&H6^+On0Nt}Jf3j!EgkI-sVBPlk$-qV34OmSert|7mn)d2{<4BKc*7kU
zAw`P#;Sv#_De~}FUmv}Kkc%qP`a_}B&fuP899*
zFoVI`z;vb3s8@cl-=Gywo1>~Kj|YsHFEPTT&M;F%
z9N}nb!CjutH=$VN{wl-y*JfQZprDkDJwVdEDTIuJ07?L0$)^06>H^qJQ!2s?p%QWK
zRBtNe9#0vNfGo+B+*CREPilDFy2w+lo^>M*gvg)5%l`o-z`pazQoz+?RG9lKd1`XV
zkEbJM83#(>zZ*d`KXBXKc(Vo6D#}Q@sOPP8*5Rei39L4XJ%c1pe-IK*V3+MZX&Q5j
zE`^`OXDePJ_d%t&6h0rI&X_r~OChAD6+#w&L3w;G9wPiA0@30T52d=y^1w3B%=!zB
z#I(1am5S_p6{Av*^lHIr>Pk>w2{dB{SUoMIs-_17fplTCWvn3CgcCC+XmL0E>wvZT
z8BsC{X26=QjGt6=a0{v-uv@^qPN0BxKEP?&SYI8yvttf^kcxKtn7XV7vC8?iDp^~1
znk_NY*n{brpGEC@Oa{dO2)<#7=S&CV;MThv3wW%xxSzO%zx;gF3b(wi+!TE~e-9%|
zjJ7lvVzg1LJbGk@P<2A96PWR{6fi!^scvyeZj2iIgb1_3n$E%*Kf}J}Chg)k=j~*M
zm7b$Ir`=qPblixknrt!~nAecN`Syc66Tr1p#FU#4h@BLQ?rPNX$Kpfl#1#iD%;@~?
zF^{@*bgr7&p~b|pHY8d`y|&5*eltZjRO;WSfTEhVe)R!Y)b!G+Xwwyr3961h4;9t@
z%7JM}oY+?)`^|!$E9t2|pTZH6U^XQjkWYVbf~{KGPYaM38LZY4M;vHDt&Y5{2gZs&
z^FVk^-*ZqvvncHFM*{Vwc>L6CKp!BSdBI^{&S2B(FgwWhSV4ThL*Wb0ctCy@T*zZ6
z%n_~)4u`J=`3Q&f_Q5agm}z)f^IE1v$BrEIF)$b$3viym)9J2wK+Yiq7kWoeAh%D#
z|4YL8Aj^d~W_yVhyT%#4?Mo5~jRjWvQbDD`FSjwBY-k}_d?6!92>I}7O~;oozt&Dn
zzMe^*+MuXTPEI^WKfd`cK32MW|(d8a48&J@%js!6#PHMY-
zO*k5SjedoHQ^!Cvc=@DE;SfIYOjo@cA2>S%|79UG6(i$*GTYXTYKX^O3=lHlgJ{En%^G!X
zwsi52sq{
zGu(NmARE)VZ37FJE#2|e@35}V4~MK^e6#S1J_~$>Kf;U@3RGS|y}o||m7zOja+&xd
z=b+}mc^yv5
zfg8G)N2x`lAn=yNdTMplpDaSNzqk7dLHt|ss`{Abw8664t01JfUjFsBIV!QjFO+z5
zbsL@+L5KXQy%+;Jnxqjue~e!{g6
zeJ|i7x-HmcjbXY5167z{rjnQiQ-(L
ziDBs<>&cy=>UM?BACF7MO=LETjL#b(QrIl#c~6jI{W!m!If-sM?lZ`zwTV6){O~(W
zF93(z&9ENX3*t3-;2Hu(Q>({#5Ulsj+a`IXu?ZvLB&4EQbswduTjT+Pk@
zywap3WH;#}>j1n7qs6-}%HImOL2L-JYXLj4ZR8>3V4S0R;GO&*IXXyxz#JebW|_rI
zRRrO*+T
zD`uPV|F?$kJY&c)0Ig%l8Z5bbSqGFzs!NmsN3`trMIH8aFuP*md^t=(@>lHtsQC#T
z;gti^cI-bTgEL)Gl}GesY8DqR%#rg$_A&w}v466!PsTwPzl8tl4BDZ^~p7s{Cbq3}z{m7~n}
ztgbJEHDyPYH%=AhT5
z3oh(sYFUuB`Xtv?mN1hxMeq_sNey_gCU1N@LGr-JiW9n6O=Me7`x@4;R07psr3_$2
zhUfC%VZ8X^jCvsn9{Ao%q)^Cye=Jb1UcCXq#IAo%ca%^0bB$u&Txc=Y0~Rv76x0n65EbYC8#
z-lO;Kl=w2>*?R#wQ>w9}M5|xQeZd3Qw3>&{GHb^t6y&tIgS==R%5XmRe}uL9Tk!ZQI03xrf5GP
zWvY2VoIbLfga*_mWnwZ{0=y9Q2n=}jD!B%RuSmpDvM&|hgzRF`V!>LHGN$Sb79(U?
zvt_xwk7ruC1v}~HQeTg+x~{o<
z`O!K)v<}HtbfNMogjwo)?&*MGMI5^BZk6017OlWt1gJZU3H?#4xPT0QsC>uWOyDcS
zS9e*n7|hoZ%frf9oh|q=aJZ
zG5->kem!&0^jxHSsbopurkH5F{cdc2#_HYCMG3R&ZV;Q?X#4i}8T@yNBb{;iZZ^e9
z@KLGskZ%>8?XCeI$mCs`TeRrL8zmf@b};kiB6HXwpA7qIOB)fY@%0+j@S6c)x_kic
zqnl4Dut|ig4Q2AgvBlcyq^8rU-CYIe$Pquc=jSQJ?F&oA!cyKs4dW2iWB6WLj^k=&
z)p;u}94v<%rDfs~~^t_fk
zU^5jC6abhI`meuH+Oa^|Cdrqk&Y{qlrR7$a%n_Ux{6G!_MxJ^ch?ka)yhvJPYNd`xAeSn%DcOs?38NJ!tGQe49^ZQ1R-af3o5N0z3C
zV4?&kUL>NMG{#Inxcb)>rY5fH@ph^WKs>)519{gXihR6bm02X|5yQRBzNh~5t@3pJ(8I4=tHbjVLI6qf8Hx$(#6U%(@qN)pbKJMQ{&_Yg}o|
zYip1F7UK9NH;=ChaWZ~yv?#sIZEOQ|vvXoX@X6i^(T+Ef9kS@rsE;a=xqM^6qBK})
zJxLTzF@VQpgcsMkI?(>c3HjCO$I9i$Q{nw(LRPlF
z@e++FXW6jV>4V~0zQK`nxGsWlO;7h2_Tjo?4{!%+DdA@iO|$WF8-EhFrH-F$>hdP7{wAYk^1SfmoVl2
z6d>o!g*UXaim0tf2WOR`H$ire;t6mF`jR`TjchLVZuRV-Zi>VCkA(qC;wN?#YO3tx}AQ0Syzd!#h;OsFWXn
zK&C$sOdFK9nOEPJ%+ez3PV;?6_6DofDNiG0Ho3U_j)BiBK&p*qs$hb;AHT5RsSu=k
z(3(6kSHrX3)vcZ5K%YR)y?-;SfE|4c)m>8vL^Q}&x_T3&@{xTekd=PS)==#HEPSV8
zKk$qe7e919kEYcNJof*S9lGhZ$q%M;b`g9h!|nX`d&=4szvDS2{&vu9OO*9c+3D5a
z72n*?eUQ5%c@}!ytJmqdIGsD>MA%s1hNc5kLm9X&8Aczk((w(}?9Pj8u4gq6PU%x)
z*;DJ9sG$rWM)xpo`GdMwEm8afql(d+&x4t>&7ufD&ASVmReQS;CE~caAj}MXZaKcm
z_+0<>)lMYvhbK%0wpOo8p&TV_eje&8MvWBKcO^rI+7&Yj`#c1EgPpIC0Q%Flvfq(A
z*6S164Jnfh?k+plu3}{r6c(ZYceBZA*mq?CO!*GWuRvnn1yK1HlL+Se1vvM~!Afl_
z7cy`7e7G&Ya{zStZEilBJ%n;|bq*65-IS)W-EbJ7UYl1Ll55JD=1Ft%&lFx4`~<8_
zxzn#)_)N8hNZ>*klK4>x&Ur;S1?e$kgBa9$HU429hrFpwK*dVy?xpd9ug22_Tdjba
zBGr>cPPDijcTegg4;2!EN$?0-Q>?uq$`CqUx(4k$>LU&l{4>|s6_5nPGRuk`;=Un(Kh4~Q!jRwu?t&YFQ<5PDmdwSMS?{cTK$GJRTxU;|dYc6C47<6~P
zJ`e=*RlbJ}*s=kau$w4QS6gbYy8=_{Tm*e%B3_RpN+!=3gIN#8k^x0M!V0AB@as(l
zp6I0BU=Q7|O1fYaK#>i2N!JmOxtPnh*lbXrI4Z7tN_~=_06+Wino*4xdCH9JPY3_<
zuL}m^&A>60i3N{;R<-
zf4n)nrc-pJ+mF-zwzhljyXWVwnze7P9l;S&nVHmTxc)e{g%oxQL*J>O$XmZwLZ6>N
zLB6nB#nvHL219u3ybzuP&UIN!&$zQ0uc3dX5vJP->t*O_HbjUrs$W=YCTsd8Qd1Ri
z(A!Hr=VJtF9v8Fw1%GXDs$MoFRu9Da1injgbCsHC()YCaf#t(YW1=G0$V9Ox6#s9f
z>ZcKv16hZ6c`hT+))!15f0aEk7!SeWwx+QPrGkn~0ylxWC;SEs%Y=`CU>4R*
zb#$Cq;Esy8dtTPJ+AoVsOvh{(<>^c1rJa8d_|J|fVjrz;b!-DwN^_=yde(0nyL0^Z
z0b4W@Kso4o^WU{g`x5NWjRU?euxc{2-jHEt1O
z&AgPNE(LJA5I&G!t)uWjz_M_ZN)*I|puqDVU;`T>;My-94cBO+IOJQZSt0#mkn81B
zm~`Chtu6vpZL6BLB{7G+p*`+JPl?R|j@ycO&O6|@R^F26pzX^AQa-Oq=L}atoNG45
z1EDGAL(*9Xu*J_e0Z8Cv{tSXi;baBiks#Jb7~*Z(Xk$8a(kb$-mU?4}=J+`4&WlTa
zb4@#-OSw#|LQFX^;j*gM#jBtrN
zEuP5^^0pebCsvdp2xf_j6LyBYBCK$K+mGj}ib2BKiUk`Bd?C{Sbc#Xx^guSg|F>gy
z5g!-&*>TMb^+Sq3O>5jScSwT-ierFpQybZKrO7fD_phGwqfAc;4YhbAx_W~VK!$|w
zw|QkRui1GTZU@Ra`9Rx*bz4ORn9EC>l7^4vg($YYDy`O09KwQkl5?YI{O{c@keaC(
zO6Pt1?=|$8eO(O~=UMnY!rDWkzj4xHbvLfY2Kb)vIa2#=_%W$h1V872+?Q)9G3x|&
zHJ>C2JoNU7B%fyO4@SYUju63YVUUka9bY;
zByC9~=r-VUZsy~jutIC#@*idxOi7v^8rTrKI`xr4Glo!Tk_20EL$M*Y^L^{0i22}!
z6Fb8&hUOu{Cil4+HKw~UmtX5^_9epDGQ1yWR&O4g_jPsoTG}zDIBH_gWA+yd?40Y5
z00yW60F@;d3}P{i(0wzH@lG;QG2T&xzcnhD99y45%Nz=oC3Bn1h?X5l3rFmHnora5S#SUjqj6fp*?$C!~!{?;#
z`wq$__^3!ahFl(#H^~uFr7aPO+q#vCM>aP~htb%X7mBSf(
znEwg=emRQ9Ipsfl8Ped~u;%EuuOwt8L6>57Srt9UAsAiFHPV`0n+pU*>@V{1b63`?
z5dR=wuP(i_pIhj~W2DCf#zTeTTg=kGyG!2Tyd40(MY*hLOO9q
z6
z>vpYwlhp6J?ha-fr|%Ch+*VcywjGP>+uKSx1Y5#QhxS1W>(!aLD3kld^n+xss#u>z
z0%bGV^JHqGKmVPA5;jI<`na8^N0N=UVmg1nbo6mH`vBd=mXjW6)!5*)(`zmX{hq^~
zSVF?YFQ65LLZ|I-qhY`9`{A=*geZ$Pt1_$h_|N%Hv3&74jNh^m{u}VSI)tXO+(*Ct
z86z?^#nMMng`C*XU&!C(%$$F12BSzpr~%)~odFhFnGOw_WLBQ<^hjA~v?|g_kY3y`
zkV7_2DhB(l>B&EG>{0_tJ~Z%2Byr3q9I|#-bDe^?I$GoGK9a}6-@mql%{r@eAQQ2Q
z=%erUkaN1<=gcGr2?yjb6gidR__C$52Qo>5Ra`755jiBZ8nR0aHlBXC4Ej^XkMMfm
z@y%Huk3OL?pm-Q^L#hCU~6w%24xn*2lb9LT3IIu84derKbg8cYTefRRJ9qM<}
z<5`dqRVhy<2xupkBq7V$9zGIN?_i&amfTySTFabx@{p|5-^B{WraZDM1G~WaBD_yl
za8Q7BE-~i>N|hoN(|qxK)>knkEcMgL`OcLd^dVXuC2Jw@+EF%Z>%bPn|DBYv3F*D~
zpfE_%_AoDsQL@K4&XD)}Pv2Q80C_aRvXE*KDdOi!BQ#_@e-j9&=^`tXB-X%nKhztU
zW-E9IQ~ObQ1*nexI5F=j7IsLMvni1;{^}dL|BuTM86=4In4rfi1MgyWE*4?yNu1()
zHmJPgM=hcINyQVnj*~ulBC+tmYxZ||`4y&N$!Gs2Y|c5hj|!vblBm4V>Bdt?>)qRk
zxZ6u7E=rUfsLGOB{KnwPBJdYKZB2G8upeHD87`dq_n9Jg&6gBh5~5td@Ag>4?#RQM
z(FSlVF2{yWtR9u?bkr!3K*EsxG?EJ1#Y>CK3!|i#83K4n9`#WhRfH|5r3}o$*}-7<
z7GuUcoiRI}z22+1LP=KI2P~c`NwD>&|4Dc~Jm=XY+YVm1fL@?nHU1>~t9|fy&^YfW
z%X9^9xdH0lZ1Z_rc3&)E(3vX3g;+DO`?Db+vr~OY+>3EGkT$ED+dor58Xwu2OH89YO(T9Sxlu=E`)!*h_{4%
z!qNm>*s1|dF_a;!FNv+8{0&9MB%w>_T?7|lXql~Qh(vS;-SefBdI1rk`hlSGt?w=7
zfyhujtWL4xU|U_@G4h9y=!7EG{L
zf=(k#jnx~i?@EsN{j&0hwZIgOL&KEhqI;VKNW5m6ROAb!G=}ug5G6i|Ihs
z^d$iPUllL_a(Uh%W86AugxEy_@Ycg>7`6j6r6oo;L+ifn{kDbJp!BDYD*wKAxo`xwUwajU^EUP{y0
zom9E|e;Uq?B0quqd%EuvIt`E~(#;UMy#t@(SF~=Z^jV_&(>p*yS06Ev5A)d~*nPFZ
zN-1|5D&^Xg={3r4!E1}DD1xT`CdA^;7OTZzrfMxH{1};4TLQ1
z>Vf6;UT%dAIRwgIYK~IUaU0{x=>C?6LUS1ekIQw=&=T@np`16p@JI_Rlme#Cr@@Dj
z29`7o5p?NX6B^mj64BqltLo5h5(#LmOeO0yM<_OJ|6BVAMNn`B-lA)}0Y6lD=@boe
zg7pFz_IW`hYaI?*PZ((s9~d@eARiaDSJ~zA=vIPUs(JF-3(sL#Zd{Y;K`suy$pr_t
zF4Vq-T;m~iss%w9d6U#gd^lXJN|5?XMu8n_s-|xquB%)y^$k7jy{bStTNa3ynDD-
zN>r|z6C?K>z5eAV-R&*mxcU+mecAl6+`(<~J@!4V~4wq|9n4QBS2;PaNoGad{
zKicL!+2nbi>$F)e32tslor4BHe^O`tTpUePZa1KWQZF#orw6&QN8RO&brTrXa6ic~)h$-K*E8HKbAccT1Ejy6{!>q%7N4M;<(ddZQ|#@tHvT)u(Q;>#%j8Ij
z2N}|jIAz9*7zjjx#LCJzM%fyvUoj^Ws5^8Y!mC9sfgtVz@W3|$U*_RIU%Z-3$Iu;*
z2D*lv&TQs|@^TBG9VYXMENx*Yc3*ed-$B1jUOBf6wHk0cEoMc$m!*vn-ndSQdy8HW
zET|-RmBpvPhcmoZm3&JI-B2foXt
zKr$qR7k9v+#-7`O3D}k&^deTRpPf-2(2Lfhr_E6FG2u*~r0nyKCH!K!a?BYjVW;Vu
z;jNU-*7SKLI}%t>884bCzFZI__8|`1xUJ#L7Rj&S7`@xkArcxT{0ZRu$XcR?pR4iE
z>$k3^389z(S+dG1JyYA*c6H5k*S-0c;vdV|c|TA7)$b`Z5ODn?WIlUr5N&^J!7S!!
zRwpAd+^<7i6=eG$j-eIS5`Daqp?_Q4%7bP8^@8^SQ<>WRB)A05O5rox3NP?RUeX0C
z5}eHeYcx3S`ubM$t&ock7I*!
zWu9T*40V)fq6Qrr+-W*^UmY^e<059*j4jeuQhFD`M=mME{o+F-nz-j3nmHw!==yqG
z8_~Iw&9JKU;DkKg^!wi|z9ItVL$XvZ7r?Mr?J)#Q^$!19kn3;86Q!H`aF-R<32fVN
z{!&ND1M;X=x?bF1DmVd&q5!mpgAWr-j!5P->Xvs|MUqKQal6K=LzGo
z?+ax@42Eim9If4^fjy2hlGJ8NqTdu#{(aY_78u?t>6d&IZ&`y-`Q@FP?d3-9e<4s|
z4&(~WSUnL)iz2*kP8!9=;hS7`?BS2fG3Og@JVARAPos4`J27v7k;N#I@LE?rYF%7f
zZYQ&>L(au!Db^k(iTVDG;}#*yr|
z2)J>jCEcr_30aj>K!1!yC>hYJdC6^Lfq0TYrGJB>NG$z$M%r0axhT}F!!1byvtUm!
ztm!@}f0-V=IcNQ*iqv%E^Tkr70EJgoK^vEkY(f6FIpo9KcxidWz
zGUm5(=W<{;_24i?I2Efc47`A&FT~P
z^RBaz$BbFPWZ);Zi<^LF|9QQrTTAO4f}T;1sgM#iM(XEI3#ICBc)v*%UW40bNF(06
zq5d|3ZG`GSN{}E@cXF_UA?@=!)rPtrw)ax&`8%{>?=J`2B%?EyQMzZ9Vt}ep!Bg&E
z=1Jx}?;rS85ivGZ5z#(e5oxO+y-jQc+VMLh
zs*`pLI-IJUb_vGCvms-aeM<^Id6G~mN#2e0(X#j_vngD!--+;z;Tdx$`8tl6cWwhn
zKMa5C3wDTj$RYbvH2sbJijobjo=t!CuA(t7SR9i4@Kx1x>VO(KUNDscL`~EmWEiR^
zq~1+k!K{6WT!T|$oFajpG?|h~z6N|t{1tppRQMw$Yo<;u?`bmRYeFaQsB*v|WNQ55
zAOGDj`faNPPK&{dTg>*cyJreV;*aU=ROdoY;``MHW9W;>R%U&l>*a~?hj*gB)~!&}
zUJ*(9YjN~>fs5BJn_=q9D%;-9zL0~k-GUzpIVC;lODM_vX1>P@nn*mUgFRcZ6wu$YM~5QeR}pXV;8GYaDUu0A(zE
z;n88M3|#Mi?>F#h?8Ef{4|gey+lr#NTSv!kPCkC3w5Ss0z=E@foQElDsA9MqPv%)X
znVy)mkV8uj5P@sw-uI
z**%ZaX38UBP4Mb@+6i{4M|vCyoFL@QqhJQh)A-c^EQhWh7hx_EEgQMr#|p{m!{pd)F$i3Xe4ACFzP$4Q_W7GHP|tZAT;>vOK5$7Uac7cr`9$+W7OO5;dY*%p8KPt8ac2)?Ps$SoB_MFUrA+gLi@dAD
z-z&q#rKttU?Rz7vD>98-Gkm*S0{~gm6(x^KHOB`gKs#GAkBaGI?kuVehouuaU%Yv{=C(6_PZ6tT9DbE54XHAl0Zu_whbe
zFw9?Jt6(`iK3tta6n|^m5DBF=jZr)uBjw9o=0UKW471;Ij_s&3)mvE{j6y`BX}|#z
zCgBiQi^%(UK~YBtDFi|L!4Ad$jNDU+806g0Y5UGo)CoPsq7OwbT)E$U9ODG>F};4F
z!xPMqs~HvZD-MHO6OkNLp>O@63+I}O<(unFV_JMT7d;s-Lg3HKDjS-_&)eojmlI-_
zz>RLI=eRdiMC!3sJ;v&kbvS?^q-Fr!Q(T(2EWPCW%#u|Dp^~B~NL3?!>pMwk32KkJ
zE;~LZ5^}(#lGR=y_=`ehedVw+UKypqGM49$N=*7=U?C*Uzh^MHq5P6$*wRWABA!BZ
zSU^D&Za>;Lppe6RaYH@ELD)n}RwXyS`)^Ogger+;o0Le_
zJZ`n))@{N`Ksk{ThyA-Wimyf>;zY(VKW;8}3zpPdBYF)(VXr^r!wIY&d}zjG
z9WpR^Ih91B;%w01imt+a68e3`#N2(4|w4ZSWfh>%F8srxYy8XMDr$HUrD?bu%QZ03X@Jl-K2h9|q#o70k5tp2enkFO3AB;7>4KE;=F_-v;s
zfKyQoJg(wivJTxYRbf)5dPo;UxOH%nFF}+!9GXRq8?)h_>tqaz4*NK;?;78}tKUc|J@MZ4VtZl)Yw9d@l$hBveJuNK
zS35J77yv7H1$a@iy6bIYd==;qFFa{eU=^95UDAp1KuU5dLNehCCFj}~0N*jzkUoP=$5HLK$kkKLqUM5e4Qz5wEE}P_i(7{bg*=2>vWk
zbJ~xA3`NL!!|igL(D1MpFWG$k9kJbA)-*q6oM>z>
zYiu2uXah&1Fnp4kOr@bo=~b}j&cO`nKPA6rB&%Nn-z9Z2c|oKN5ZbX*$xr02;#@b4LW
zEl$?=>Kwd3`n3NhNMJTiD;MIdyaEs8hf73LsJ{?FtGIb3%45<=i>DV(P8UHz#aESP
zilx}>*8a0reE8AYg0(i~WNFmAR_kq#1yoS#uG>rb1N}F>>Te2flX(=~N$$LWrJ&?n
z0xZ@sH>ti6Q5f3T=8S_JN`Q~~Y?7#6>BJAl9*Y3
zFJ`ZEe#DXNBx3N($|U&nB%3#
zSjt6938^^h+@IA=XL{)}J#%7%7}867z3)cyFO3Jb7=&<#kZ4A0Cwit2a8)O(34ZDo
zJWG)vIg)Dyzk6v_D@_8+oSl?PndNX9D^?P(e1|rRS;Lc=dH!rpRXKG
zM%=`n{h@$PX^b?zy{#tjL7qzZgo*^Y)5Xm)UyHQ(63hue38~ZpT_SKsD-{3gp331(
z=*ziw+nYvzD*n8UOfm!{sK-VAalkUf?$;*!*0`JP1v9uq9lb@-;Qh%uVTDAJ#)jK8
zx=-FjWw*&V=878GUMN;A3ep{QP++vgSLaU@GNhg1s91u-Tvgj=pEWtEd$17~dE`YZ
zEWg4*SYNHGGg$#!wfH=-1gKGCmQOEZ<|upLq4<0JzQ~h&%AO9shx_(jmM4|{aRJHc
z3sVa`l{I-k7D`?I9M_u`NcEg7LwCRk!}cWb7MRe`5~0$~mdy;L`MCN56N}5*;r*$m
z+=*e3?noZ9jj9`D&km5k*@flBlb4N%k~tICLZHQdOXVzz{*p&SxRS5i
zwsU7*oF|EkooaIDKO@v`?r{+QF)j~BHkcR_T8ly`h?%ANq7i-Ir~fpe`)hoD(cYjncqdzdzMC7kyMH_s!=b#mY9b%Gwor?CH)jJaSMTiM5TI
z(dB~gdPV{1YNvFiw7MMNA}0n8_wmT{&<9~9*my;BC8ys<1jax6RA_0mx>_+{J|c3bJUjm=#YGl!gQZNnPs28e`^34h1EIBd#4
zR~#@0@Re5EXqA;V1*Gl^-6H$@q*YtJjO`(>+_$aB%+6+KR;W8;3{_{O6H2?B+_RMl3HN9)wo=}t
z6m$i&L1o=RKbbwgwB|gsD4Q7$
z)MA0=aA2ZKmcM~3fiwnK%7OR-EXgsUE`KD@zcU&;gG~x0$3}XRPRbF0bE&jss_*(t
zNZy#LcmK_MDk*VZtaJAJ+as=Y9Zb39w1K<>JHPuVUmjXy^q-e0@pwGMy^(VyMfuoY
z+6I69zJ2)F6P1~(haBYHB0^n`fZjx`(yJY}U;lk?AjUH&fe6cNZ~ZOsyHjWO=yv}2
z9%T)VW*(tc%Bzj3{nShllgmWo+vL6|2Uns`a2bnH=X?(Y(pB-7%Xba`vgNr!6U6Q_ZwQZ2u!~1{+;v6BITokM2Vx_a2#-Rz$*@$3*t5`uz6fg4%!Yq
zFaoJ2;gIt=J4l_^#ff)XjeHZ?OCo?WW`|ak7g&-=JY
z;4vv+`%mCl;~#^!;{3gN*|b0{tk_9^`VB0Xt$kE6eewqDz`zhH%Y!Fu$Vf=GPqjKL
zIAhaiC$5m{_oYn6x!p^!8fFdUtX(O)ec|f(1pVp?Z?YvEPT4}aX`+%4&2z5L7;rTB
zu0xH%Mf7l|T~D_%?c6iSbAM_!rPiT`kF=ALYGVj>UKYG=^h{L_(*v)SrqzGY1#6X5
z8TNCrlur`k?IDk~F?pCZv>Pe;y%*J~p67Oe5Q8e{c;6FQV^;wW{-oytk1P1sv99Ij
z6*n4jy|8f6J#hE%dJc
z7Ri|!^CfR7;!4eK&P(m8e8{BnVA6+=GZ^_W)`-NenUP(mC`^f+N#6Mz(?pg==C>#>
z)B?}$odJjdYG_xzkNl`5BP+OvDHxxdD$Oxg#OLC})3jD_v@xqLZKaDbcdac?c}myc
zh6gp<5|J$=g^G}|D;SzE%KgzPQ_&Po4rdIj3+FTD!HnXEs$iI_b7d9(SJdlg`Wt-i
zhsVU~t~nE0y<9eusA0sj!}JL07`(`58S{JM9{si2nESX58&phA&2Cw|n9n%$#V;@~x5U-8a$x
zfHv@8^*VSoF8eG2<|RyrqE$(PI8ow^E(DrxS_*XrORUogx6KZ)QgN0?EJ5Ex`h8Lq
zH%$27HLC4Smn^G~{TgVw#Yz2hwf)TXkdqB#5hMIdTZ$EBKsbwI(sSO{Pk8BA*qFDQ
zB=e4x6+J}blZK}$MWQ4x1a2JNReGiaSeaG{U|QpHg17DwixwhXt-2C~f&eE@Kzn1nwSTMbDiXHH`lZPAr->H&_YVi!tbx3Dl
zfKp03Ux~vj!azSvMJ!iV$+<&TLEy`p0YwNZpCKdQi~lC4TijR(8FV9>qZ8Y+uC1&c
z^m>}Hr01WxS`hjo#Y;T3fWWfZ^Jmvg@nJcg*%TW^r$)?cB6C*OtKJZ#>YK+mZ+5$w
zc=#F5=RZpMpf+U&Jdu?4h23LP`&R>f;3CQ>e~xi{%=^E>`}_JJretLNNS`kFdpL_y
zRvlXIG^hhPaFmYz?34c9M~7y!?$$VyDUYx@S8~mBX8Z2NCe7-D>8?!w^4zw)j8${y
z)BLnketoF{NjlwW_w@Zg>*wcpIVYrTppS+RYB)_rIVOQ}=qZ!#9~5#X(`w;MguG)4
z5NN)HFtWo}-#!IqOYUeOiVXf*`UjLgObbE7z%X*5g66nPtq-~BH_5*kcP8Ddv>YY&
zx%FtZ+L?9_cOF8;xU(7e4`wTy?y9Ml-p!~s2I=gJnuTt=Po=8HDW;dg-)AHPSqhbm
zhpt}}J-?zY%@vQ&mM*6V!Ut9{BfM+|27xWDu+F9qzx%7{a(^x##pJT~<%Jkie1V0j
zXz5&1{M~dnR43$>`d};(YQq3mgutY)^S$Qodlfgs*+#D(X3yIrE0s&Q1aR+Ac-7V}
zeg`_0QAi_=RKa-NtLprGrbYN^Ktk~T1gNK=dZ8Lsr9Nb=gKI-=fsAVrEDHH)EeLtM
zy7DMA-O;c{&G;V3GvN#_KV)Q@gbFN}{1q}(d{0EiRCwjn2rI{LZ&#d$9Z7H^+-p7d
zp%h~;mwH;SX=4T6==*;aYWT$GSgsNr1tEp1^km}wz)ZV4uMwoxzsmhAKPTls>kV<9
zIH8bd?5qA)ao#2^1cGX28-1|auj~G`s)~8POm76%FxOD2lbXg>!%JOn#2yL^Yx{`a
z3aPqN+onAA0{?wn^axz=dZS3#lE%#jR9Le3PSdL1VrUZSrM@Cc3LJ}(1|P>UcUp&
zZ5o%86pp>yP^cIy#9UAwlP4b#{^7wp)S^^8T6d#dK~W9ZAR~@-uc9Ns0r}L_Au9Ks1im4B#0j
z|AX7*Vk`B%vRs#>rejIw?~U7of8%mUYY%3+aur_nAk{5FVtF=1XSp{ec`BUA4Nl>U
zfXW~ziB8l!q^kXjOo88aaqB2x)$(P?kwHu45L;sV<_f-gZVpWW%cmzh@1bW(^;@;k
zSo3mNwTPANfdQpugjyvqm{~Yn<*X4bjk!$nrR;A;6aiGs5@4fzToXe8#XL>|$!5g0
zq{*yN??4?je?(#*uTL3(x<{CEA-5EreCk{KtZKOOB~9SLWKdn!tQ?A#hO5LL5wm=CAGe*wkeplrt-Hu
z3|bupaQIDwn(kqfCad(C71|M242UH%*G=Vl7x`3Nk$Ox3X9E~9&J(9Jo_q0JabhMK}a(E|;WW)d~2Ni(ef
zQ($L(d>q!=N$-tVJ5_5~)>SHmySI;ea$UHck(iR%-gHB+J9{
z#CKQ0%y4Nx*We#+u&ZHKiL-iVu&G`_c{=A{>%!eF}_s&DGiLbqt*SSUsoen@GHTgUcX;86-O>Ug^(LwYk?39f%new
z_R$X`b%)SnhF_EoJ8hY^&-}kl_bM?4TU+*iQX!UVi4jFb69hJKlGLBWACdKD16ww|
zwO~rd4B2ifn9z#g(xc%(yBx~)qy9YIVqsk)S93Wr2G$k&fv!52TNsv#+qX2V4d(Sn
zE7-w~+9*SBXT9Vgn2zRO9y@gXo%Tx%_0u~tzF;*SkAN3e#Vs}9r746qm!D_#No6C?
zR}X@Y=XWqhyLSiKD8)w5U3@gL9zS=_;3p->Z(2~Ouki?zoXDGStQSkSzI<>|j`9_4
z)V`FrkeICeX+p!*#=W3QR?O{KkmSmJ)SFF
z7L}yTi|GM$P<~2L@Y*UZl;*MX50c9rD#YUU4gs;edS`@1>LgR4ukp%}nvr;&e(@X`
zzxCJQKckb4C58!E7RqNAEg09y>ipym*!KgBoW5>L&+wfQZjS{#FRa2PpZJ@{sB2Wd
zCE&lk+&Ufp?OXNM?vn0N{s4&1OpP&idiMyyOFgvKSmorZ7%_y&cw?!>?u;E+1zEy!
z`9UYh>c~5FrAIX3d1*7Jzrgd#12f@N2-fm)OE$QDDL`IM&B!Z7OdGq}q+4fG(1C^h
zooIBkF)zc_;s@UW3OCs=A4^R_n<`QzD)#}2
z^}^*L_#3>k4Jp$oeOkM+iM8_w!`T%XP9IM&eUt6*P7bEM(}^P}!!Led$8~)ha$zE;
z!xi|;#HhuF%(xl)KDb8ZnhMBM@KYZ~WrkIYE;b=3r_9f$qyOFeuQUmv?E9)3Am@-0
zw=qx+dBR5tS^>QMbX|d6ljx6rAKbrycPa8MMWu@B94nXT5L|IVq(*U`i
zHj{#eSw8gngG&~Ez;=Aqq1QI1-%2`UP1--zXkj-hNp!?_1*sEI(C99L*Wx8u_@$To
zR&pt$iGFqcJo?WImS9JLZvPU)?sOQ-?1Q7c3j24Zhu7zmCRq|ioF@XgSTuqQVrHt_
z|GN7qZkQyV^?qKjSa
zsCr|(HJfYb$@u$i6r3P0RrreTyoHjj(-L*b?#0xR!}bi;qM~k^@<@r1TuJZXW8B?V0u^k^Dd#5M*i8K79SX&EkV4$!c
z7km$-p-vujra;8`P1wCm5-0mF~4tV!n8>J0s2{P;xQ7@jQs*$(x5t8L=1)9x_}00T>ZQk
zhO*>T)OG={$V}{uOXXjIzfw%v{6XWm91%62t!!+gJ4%%-pIx&gp$9*y%^fkFtS
zsE6|Vwbt?iY)9d3Ci3E`m?DLVVhy7e%uCXUD4a`e5BZlu|ENUK*Is&vdr(B${;KPi
zcwt3>=&}tjD_i~|_YSmLH;ue40O${}eUn{j^T5(Jt3%jLx|a-_+;n$htXkMeWz$}chc;2=>N
z&P`6fbJy=$@T=y);tz}5oL{$aKSTBoqqm(cKb%mk;B=@2jarzso)jTY7U9%t1Ys_1
z>I6TOiO8pfq*q#);S47vbkaYxYOG>v$)erkh3cC*as@IQ
z%5-B6L)Qz%R-8`oI%UimJxH?o*nlFYM4b5qWt}9pm@N-L$?pnT6TW5?jY~y!J#>k6
zcSRuh;DWAwSvbD%c3~)l%y&2Fvg&t%%cptfPH-8Dd922_p1U-Iy;Upnp~jm=ckpk1dou=UE3e_3EJrdv#KOJ&BR}te0i5T7
zq=-=4vX_J+o1`2xNr0F7*JCo+?Ua%Zbt+%h+2AZA>O)YA8dNdPXK;QtGVA8y1~8Nc
zgURbs{JsyoeW%+EeZ_K``}4=Z%ivIVfuXo!5s1gaL>8{(gx9+4K-DtUMm#gDAB!!o
zpC(io&OoNWhm(jb6(|ajl0~#o
z$jCM%TD%fr&jN3|YggiiI|FoFlvYHAtkr%M0EvH{~qZPC4d{EUY
zEM5Z_PwGAz#sPXGdaB>ze59k`6N+V~69{=m3n4D1X##(>ZYm9_tZxAG3xCvh
zn|x|M`?EgTYb{N#{EwBimsk{m=4fJ7FH<5}c3o6OsE?o3VOscH@O)cXxDg+`ke#!!
zuDZK?K^px?(XichB)_-snnWo#0xTiZaeKlngsOI}w8f{qpnu_)Ie2C#9+upNLu
zVH0Z`v@+C?wy1Jg^`%i1?-~+?MHziDq+kl4?FS2
zF^NZ5mq&le#cj}YTGoOgHQuZTX!mCWX{9B{Qap3O)x&86w_d_D0T=H;AabLY&N7oW
zHq~?M;4)pS9{wpmMCW8JQUQ8>v@4mOXZ>w7jhkS+b_{^pwCqBj?^23iyk*}`wG2(`RSel@w&y)1Qx-OFNm>dTVC!MSoauZ{+otJNCPVZEl{0oV@
z8G8q6BoU7#7BM6a)NsG9%P?5cj<&Ax#kkBt0#HDPm$QZZwN%{YGd#Dka`7YQzD@F
zH!KtG)4)A+gC9P=Ems|d^tRx{gWnritP~y1VnV?DF*`nx6bk51KDa|C>kzZ)rfwU%
zDX1iMlTWDJPE@f;RZURj&+bYM7{AILODFQBPJ-C7H!kaI#`65aLiR-C)&?b=n#X!t
z#9W)Z>Xd2UPR}`DgG+r*dmD{7Nl&3*pH?xa>LGW((&v%AgbMngs_
zr1`x&=FQ^K&4V@BJ(;)5s=qaH5lWyp%Q_EfferI7rjcTlnYP<<@beWMn2+?X`ENsb
z1dpnvd8+XZ&%~v^PFQry$#)ZS?I~TK)@A4Ob(#ELNB+M1{Rr5S+#I#RSiWm%gCff99nD=Q?vk#Y-tJvzg`A
zOtF1j@x-Y7YeOU$E`XH@ujZ}DB#U)9a=e;ufy3CB1@%7sYO(QML+;};69_XR&C73z
z8&j6(=RtRJ8TDUewpK+EAA3mP_9$xZy;x0gDZ=gad(xzcUtdt~*$9-k5brPBAVOQs
zArPE{)7(Z22dsL?un&y2XrcYZpLM6UVVTVkTRbtDYl`0ZeMzGBUHr8rY)jZhLjS7)
z77DMsNCBxQFsvwnf9W%`u-=gv=X6UFYcO_sD^Alu1CDPkyTU3Mzgqe;%mKe_C@OQo
zB-!ro)zwuV!-1hK$--@MJ2!lSh7Wr2L`L280$^@k+)ZhCzs9(#>#%Nd3+!?{RBJ{2
z06TII#pAJRm8u(Wk(zQ*0!(^ig4s^cDQ9!JI(;xD4PnboBx)QRWx&v1M%158=n48J
zPrfmL{$Befte*$Nk(DKIwjHX%jwSV$ZA7Jay
zY6Q_&wPS;=Z`RRs_J}ee1*wVAqLF(ZenNGBR`R`Z_CJ%4exu~G;Ij9@qs*WT#2*W2
zq#aH-Nd90qP3P21!WdZDJ1fbMzVR|HkHT+G-qpD~q|yN7ZI)e&8uYvXBK!ITe(#BG
zXAMlIVC?;ohwI@D@dJl9D3KSh-&pG$V2dF8f}NBN563N3f{_>@L?)mtd}>
zPF>-5acMM=u&z+OF7Uj*^A74gL~jVpuE5$tF;v%DPcEK29;0sBI@-1HMrC)A
z9Kpa@4zrKigSjIQZlw{V2oYfgArOt_eP&-ynGW9X}#Y
zGL{7Zq{m(dXiIUJFGCxy(;!k!+=rg1Ky-i70q!EgTPmq+mFrDLtmaSP(Y&hgRi{s^
zDe>}ay{|x$?N?@vR;yAEe_-pl0!ykC^s@#qS8))htEn(T2L^a
z*jQcr9tYmSrOj$LbK1!SNKJ)J#bt6FylxpVj=fcY$H^M(irya7QOpw>+;IyLby`lT
z$Fl5Ggb}Ki?7w7C8SGaH_RBHPRdD;ekUGYT1ADc8tJh+sgFA0#4fopjfNgT1-wuQ6
zmK1DVA>FwD&wL#Q&yAtz*Faq|D#(DK=%6V~9OqZ%#<(dA(s8kIPkk8+!UYi&AETOT
zvD&uTwYu+CnOt
zRnYF2+UIvfH&7|Tr9A6dk!wizCEG%1shHK0H2S}hBtaW3wEL0v_x%!eSeLk=5CW`5
z3s}bv=W(0KIO6jRm%(>KNEp+oGz|g^PnD4Xv4Q-tuLB`Mue!#*`57=RMloUS;NV%p
ze0F+GVSdrICokG%Uf;ZEpF6Gr(jc8H_d-4l(lclne@vashZv%pA#La12@&%1w)em;
zN%ZQN#rdoSLd4f*jm()A;n1p6XVT#lrr5guP%_^*hKH}?`YS~5K%B87BVcL3w|ijz
z*Nk9k_{32R&gELY52aprQ4fKby0M&a7kHF@&mMMyk|+fHr<_!`SuoQDW|W&7Uj8&M
z$OeM`%9DosDZYp}Prv;L#($^%2Lh)2nJx}mzBDti>i^z5fAbOI0VnQp;kt5Af>kCg
zgeIt00VTh_TEi4D-LX-Ed2Xlev?V@XJNp;ZlMfIL%Yr(9?z^6EPRGjEcC1Jd)uM=h
zkmJ<%w&#yW|E3Qm{4z3XS6UwI0ogM?jM*H+)cfRi6q?M-z9Ag&phRn1CD@7S-F-Cq
zuZeG9u@;YV|HNfh!TcERQnBL}_YIM`;lwLO2)HV8FS4fSc
zL?GJ_L#;(EwNR6KlF++xg)Y#gqkkx){0p!UQtj+?#E
zlKyXwQE)6v+HfS!WwxK^CbmF@wZ*8^EIq}iN&9?V6y20xlC~3q4VZ7W^u%%A%2{%N
z%v%+!hQR36!7_g~zwx9o($&c@I|3+i1}_Mc2w#zUO385!D!<+>3XHY0utYOmNul_D
zNr!ux(kC+sf{=u1$Ql@+6dIXU7#H0<`g}BiqIOUZf@)@q(CK@HdWPatAAZ
zz5S$~Tm#s<0d$&-egVGknpZ;u1)@%kP+Fdr&=hTMFBk|eM@bW3nzFx3-9!Yb=KVyv
ziv>?mM=9M3eOU@~j<>;=VpQ|WdJ=VdmXQsI@z%}<4HwM&L?_v>Sr&lG?_0%8miVs)
z)6tkDj|(HO>6mZ9`_ApHsdv3VQIll7E
z{+cK$gpQZK!+1FCU$P83aQ)P^B2{3saiJYgC8dVJY(gR~;dub`+|AvCdHKoTr&g|l
z6>|e0is>f;01K5M#pK$<{D*3_-LIMDew%RThu7i-N%w2#Tb$H?UQQXK^_pS(HYG6U
z?+}cF%hU>@a?5YM(dsTZc&FU>L>}{*`S$Vc$m>wD&G05OQ7WD?ENlX
zSY4HZcOo<4(>)!>qtb?vBu6_^m<+$1+i}9oiAl}vC1!NqsC
z2Fn5PQ7AW$=3SiczNi^AJeYYqecIeDF#e`xf7OgUZ0quJhQ#Y*Ke3SA+jjwqcW4qW
zQlQ)v@|lKaq{AQ`_b6Zn?J){9Y*wi@bM^Hc2Kn_QF(cqTCUINTzGQ}C=6kQzR#VT8
z=P%xK1Jcikg*JH*n151%lMt0BGuhg%al-${rf_%^^YTnR(ZoSSdq7ljP-V~5SRwGW
zS;dv6!C7Is14HyMVTK|)&*rag>@W>+5bn0iSKIONq%QkVZ-f5K8*J2j1R}ihx8A~&
ztV7-BKc0Soqu57LuNccTa>TzFyW0ag0tvKx1k5i0bJ=p3Ng~D{5Dbs*MwMFbTpW|h
zXF5+4H9WQ;{y49stk}5N`6}BvGY;Ak$@G>?kMM35G*@cZp
z#Ukso5T{^$A)W4Dkqon;1aA%+(PlqR#~;nkyJZkOX(|Nj@NyxVsps^hF>20ryz^pv
z|MJxAz}|VV1o;6kTnU{~V}z%ZQE&me9uU87VMMvr+^-ycm^b-3id9(-ZVJRuD4L`n
zZv3VlS+2wPMhj#Mq-I@1;KOj6>5_U3gt$TR??J%
zYhwT7(_-0tDwdzI!w$~RE__||T24h>6#(STFb9qgbf1?;Gp*|1p0^6C
z=YT>p=t$yQYG$|OFuO#_$%SJShDz``VN1{-PvEzXd3EcY_EvlAQ&x}3T0ce%Dcydq
zd8WE;(W{{r_NoMakktc2vz1Qumoe%nE~Vcg?mwExf(8NJvwo;qz728ts-FNnukF8C
zl+ufwP^EO?^unM%Rh3BfZz}gRgUESj|7N?@MBA`Eu59+oyzAkUh9$GK#ap**)#$`u
zDGXf%kHydHI86x>(Xcd}>Li$TyIbojIJ?+8y>Gce7~&C>tqEkViB#EcN&I(p2b0@t
zM|(l8c3TOy9U`RGkz$xKtYaRw`Sn^3aaJKWI^S)KOm_U5ymDDr6f2C)r+b`qFVKee
zoB3Lr7|#YlH>pW_=6YrzX$(j9%3Uwx#LKxCQ+7u$ou)C%LG(&_GG1vWk54O8ES)Vc
z%fY8mgO|z{Rew}cEJ>V5KCweRR1`JUKdwT!Qr`<=4?oz$%#BmK1e|Bx0G@--1c*Bh
zu5DJW6jKali(Tqbuu|#kPq_6SytbL2%GhdZYt!z&*Heoi6QvuzWW_GXbD*k4Hx(RT
zAarGiSFf}avQ7=qxctVyKIl|*L3^KoOfwpKDfit5lielrP)_i=v4GpsGMW3^4!!&$
z7xuiyxPzeYYYX}wG91vkY)lGcBpVKM0m^AZl7@<@?L5HUu(|I{WdK=
z_{p_LmlC;{Tnl&f$lomr`PX*=s7$bhni7M{A
zc$!Nt(q?%&K``37*=gB$@mcq{|q~s(}L2fw7S>
znpmTPHC-u5N5r5Mj?-Bmp6}wG&2syi_>ke^s{+QspGPX>a6bxmthauGv&VNnoDttkCzmH)E
z6AZE-aJqe2KSu*~oUa?AD2=2{x8gCby3iGl+h413`gnxZ^boT8k=O}0BGkC%??G$l
zIUhO`V$cC*q^HUKT|dS^<$%ZHy*MtJss0CwsfESU4;HH%4PkoCiaaD43^<<&+(_2|
zW`wh>-kCz`-mGjLEws|gQVsYiQrA{FP;2Ul_TmjB#sVaKKPmP4_~0Kc@q80!w$u{r
zVGj$h9(v3vKLjvZ@WbsJu0mj_{BUNh5leK+d9bwSo77JJIUUmOC^M_R$7}amy`~)y
zlaN9i((9XpkrtqkF$c^q`3lneQ~2V(N}sJHFyUo03@ims0fE%XTU
zFjrR0e$wS8V8-IC_U;0ChK|RJtVzkYCoz8B1;?rg)i;U5lcE*RtH%z{PU9`xII=@!
zV4lavL)YeRq=>BL;(DezUWYoOKkWb*TVfXeU<-(I)Eg?0(E+5XGOT1~Glz5oGI(01XD}2c7%Oem2iX`&n*J=xkI}#`L#gE0>!DB
zZRvdehqt8^bcJDzN=c9wQmG3fCaEcql`qDHSJp^vNL%kQINAASxr=|OR9Li~D?{nh
zzdeZJ$Kq#0RG8Ga4v_h`=)UPeR_I7j`uD-THA!WLGk3
zN>Zz*Em`~|05`G&kV(sdjd+^?MBQ1AfO|I-xDUV^#{+dKm5F>|qtjC@_hwuFD6nJlkB
zJ^!tsD16z7(I~M__AI}MN5uYjqUbvGlruan8uAFYBXNY2D7y(v`7DQ835hh4jIb8h&v?A8SIy-k^n+
z-8DCxvgK)oKl+m1*Q4K{+?C}wM-=nB@6p8iaSciNe8&Kvzwa!kUO{nkYf|!TJSCN-
zPgP}ic5A@mHioc-W2({K2_WYS1z7X+v|eG5TPtVdvZ#K;6Y8BU;Fo!)X7#j)@Gj^a_uwx
zECBZoI&iYN`VnhpWd6{VF23MEnCHFAbNuHzkxd#pw*ZeA+u%_qvUr;~21Zoo<+9I}B_O=N!?dm=fDT!+}6315a6lePa
zyKLhah56njQjD%lBV$nRV|)BzX$*4dzf!z#V|(0sh^#T$XA^&EmGWm$;>}>*<=>95
z!s)3*a4eZfA7pUT4cstq**;zrCt5ODW)lC{vsBc~Y5j?fYUg&ESU<>C`yLm;82AJQ
zuj|D{Hl_LO3#IDR|5(8Cy?lCl`s`s_&I@oebL^sZIzaa`Lke#@zX*!{L-WI&RpROJX
zUx+DH&-1IIPgU%-RD)}MfJd*`mm$B?+=;r4{?s!J)BJ|KJ%K6)ac26%*d;idRPO6t
zaVR5J9JJ9$gyunANHu98&Iyih#@OOnQe7kq#6uf9)uc+L{>5^H!2+4xuY02JfEQ>Y
zcKoXAI(z72Dzx41O3`#vUkdJ?1~f|eJMpqzzfPduC+<=^b`SHx85*Q`N+<{qhOP-O
zodo{!+Hhnl!BL
zA>P6^unp%jWyeYhHY-pTP`m~57+y*PmyMx&4#g#wj8)8=SoDz9U*G4c18E!LKy&)V
z+(FTj@t|$FKO(sExG!i#EY%GF{YIXp+q5e3gS!o^(w*qk9AbW&+gAl{&
z0#=hLGt21Wk((cznA6pE2FeoCecuv8$h^UVaWH60s6g!TP{)q5b=VkZ%bnKXkWRJndD0J+H2L
zzJicxc%Hd`O3}s(u_3~O{PAOdQiKvzat{saOyiyG-uByRXu}f!l9}Jw`@`-F%00W>
zu>)g@LZ}Q>XWbuGMj~@PPBseeXk0vG^_;h)er@vD?FBsgVvRSAO93>SsUe?{jmaWK
z)b~iJV^Vq(7@jtZwl@gfRVc?nA0%cRp09iVi0EnuP
zw?Dn!3&}nFk9YLJJL1&wb3azHwh<>f#bOpFk@}g{hQF;{p{%0gzvk*4Gu^9zoahpe
zZ&yRXQ-TZ^7eGThu%sVWo^6|EiK|zS!RtwS$px<7EnVT!V>w8tP^8BMbk4(9$R
zGgiCiHmpldisnqDjdu1}ZAGwEW7{)QZ@=JvQ
z`eWltxfQv^;ik8X4>2qB+s2eS(+oQ%KyAk9dRq7QB3AM81yBiC{cT;7FpDhRKN_h1
z!1J4OTUJY@!koiI&9bGjxZ;9Z)Fq{v!K*L1C)>z7YB+y@?ZqaDNpOHQ^Kl8w@I_~BvySp!aM1qYgO)YFzMFec%ocTy0^7}dv@g*
zxsEvwYMq{bdk@zEqLG|(x^1Zp`T`ngDP7+w@;i+f^zru|qiOiopEqu}*YWrGNa>kW
zf+aTlCVjkvg#>o>tPgHnzxp+xcL=f@GcKPJ@5;-f0`1*&LU|HTB#kl0WRW##7G62Z
z*=(0%Zh#DhTd22LyRzMSplOyrTG2HK8BB;>G6mwP-(As~bOA
zzI-|xY?UtN-dS!FT&67G7
zPMR|d5!+=^v3U{O%l;1n+G!hbUF_n#YcGH9dAco8qNbstBo9}fqPr2HHdhhLL&-0x
zoSm6qt+huR4R7Nd^sADK+*%I$JsO&d3~5
zbX+ew*9jlq{wtg+Y)&5O@DzAt$VS{=Yu?>%``o9^7w+Q(|C;t^rR?xsE$%tf>5|s^
zOdc#@eTv=8w14W5#R>Pq|DvFV{ZrGx;NPNqwYn3Pr_|mq8Pxa9bRf+?2dr(?BmWHV
z{&UBCEiB95c$ega2y(rt{EgLqdnSp$EVARFVpse24O1vjws(@aX~?`KV#B8w%ifp!
z+QNkw-i-TRH6>#AxB{V(b(N-A_u*dC!U_+c_w)TP$UoHzmsg(p3Q^b}M25LrsOyL9
z;eUDOJ&6;bZ;)xN9G2=bO)O$Z(NGhFHLh^}Pj1mjC2t08@m9d^;`WNq|Ln`mvDava
z?_L$*aqOCU`5@F+x$xuC2PR2^nGc)NIF~MO4;tIvC!jQ&tRWd`u8bb4usE5Ude~v>
zej;2Ga(R8sWhy-FCVl2rZIgD4$+4Ch`Y|v(C4a2P<3^+JYL@!y8)Yx;-IV!F!ps4#
zIK|JKX~&~j-ec<|???EU3?A>myE)F?BJ$aRT_dBud_Et~xu++lNl&x()nrF3n*GLs
z%SX<qq_HZ00(s4CJ
z!2eEgi!74%Z1_#^Te_Y5n~OA?p7$1bU3ACC4U?l}}Gdd-2j@mz1o#3Y5yz04CytPiu$aQnDrIB*qGsdY6nfN8B(#
ze!WAKBIjb|Zzk1xyjVw*I9sfcv*{?1)N<=OHm`7aekt}eq6
zsU8N#jNWE2DOltFLs5~Wpy#dgEeY-fh-dgq*sbg3Os!YsxhU~rSX`)IEX$SY*E|ly
zEq8gs`LNZWACF#tpNDX>D^aiKz|ao?xif62&!Xy5(07zrG*DGQ3?*tcX~Yp!Xks11
zH)BSEBIg)bHzZ8bY5&sBM#E~CQg#6OJOtCE>k;7Nu`&f8$peh4Mpo~f$7CR
z#Z-Eu0Y&P5aIu
z#)?cb&sM=|^7WH#lVSWu{6eSGlcRByE>Az%4lb2lt`lLS3K}QR$0R%U
z;}xkBA(1g-8Y3)%E#}B)x)-L_?P_{7uZ3}+T4d!=Qi>*>)X5RJO`|HS7TZ=M^vG`M&gl@^#u#;kAXxoD;F16`}^2t*11C#xY^BDu$W!
z8J8%{YJBHAay_fd_ojj=`W2-y?LOfW@q$T^C|NWk7S*z5)D-&c992nbnxjHY=Rbj)
z*U-mHhDU!*X{UCT<2_OaQsgVZC?x_#9QU@5D_GV5*9%;z-@
z41qs!ny_2;ȷdxg)W}4}-y1OW4?P!74pJgaW^j}lxli{h
zNE;#_9&FRoRhya&m4j|PRKNucMDj}A8QlqUYtuk&^1AkEyCmp-z^UqcXYkv@tY9j5
zAvY131!@!3o2fKcz{eY4kV@)lm+eXb>kTzLEa%`|9FvNGztd+F?bnTB(J9+_G>m_w
zvOj$=f~tXnuq&|;VjEA5H#*l;pnC%D^g@uBCO;-^wnG{D{@y80Dl`4-4JA0fPeNdL
z8{h5D>@f*+*X0bFm9EIcchUc>=c?8ng
ze@Xi1+{$vqZysS~s625LEy~!^Et>%={;0*%s>LE{Pb+aXxK)##~j#Eg|^7XqMb>HVdd
z-9^bqwQ40`r7ZQ`t^GprA_YI~uUJb64~$a>5KNok0fL9rOL$4!GI(D;hlBMfBOWqk
zZEck9Sm+0
z=hCR?Q*=;{cfg+}xVm4MApncBZEiWjB23+pw{lRdQtHpyn1ap^W)&iQg2+HI^yjar
zsD?xnLb>k}!&l;?$EG4)OaCES&bk69o?>;Gi>2OcgMXU-+Pm!H;2XPhT5MiJyF9lw
z{q1!2DC>qp~aa$988(xUXA`V
zVkwe-+Ned%LNzO8RgrhL0?{4=Fieuz6Qh<>bMFjt97}z-$%!J7<;Xvm5CK*|h3i*(hD9y1ak3mHnud)-O`l^vp)}ag_%v90B
zdK3M`z@h2z?%9v&zU+_+|TQu(lT9y5Z#LXDvw5L3yJJK4+l%|GEjH)YkAy0-C
zO>FmvS_L}P@QQpvN}2FI;ounWg|Sd2rbBM__)q*#O`E?_vbxf~qAaL5iT+VZXM#}k
zUht|w7nT4$b{=9;bYfnTTOUJKS(7|I2Xav9Gi^G@bt{xkmS>E#Ij|EgV7u&xo>=q#
z`SEc{F_HD4o2={IK)j#lE_ifZY3agyoZoiOXLzg>yl?Iwvx|}uWtypEp)GYXdX9lR0)!-ud@0KZkcOc-`-?jCwQ(@P=
zd;N-Ph5D2lD9VgKj!!Ja=buhRp6mTlIQdy@lF!G3&r+GQbsLh{Y44JhBrxO726p#U
zJ@^~vWuSI>x+HJzA3lNrksE^JQOR0(`Jm33##Iu0e9h}uUra}4Pec%w5+7lt{ODrU
z*;}of!y5vXA)5jk+++fD6s1eHF^6mdy1`=-pWWr4sWXz`%8Da~2;b~A@2JZAnWWkS
zSaP|!wL|h88-E|8Yn{C1tn?8|94%0}W9W@bSfAU~=zQV8>5HH-$+qvBd~>7(y8nbW
zUT=Ll*~|+6+*K?%vZ+(AxGw7~4zY112WvAI-P(*v4CjX07g3}qX9b45#%_kzFV$rn
zf?!!ip2dn)Sry-!xNfq}9rhpkVk7=w;cSehSSS6`#OFk^{U&=YVv8!wMukLl%{KwOV;!A_irj^U0$cPbzIzq{0l3Z#E9)(
z^(fPOLn2XN$G4xQTdMDOQE;1X*J?Rin~QP;7usygjR@K2{`d=1UayI*U?JzaYhjQ_
zy)u=CUW*l`h{nD;uk<)o{GK=gH`q4g$M{09&Qj-cik%@dy(w&Ve|<|xg}v<863pP;
zm6weBrF=kJ9dR4Sweh|G%Q*$aX=bqzTb#dh`Xe~P@W`%Nt!4s3;4H$VBcS>*;NfuV
ziQ}{Q`zuMd>cR>UXtd_{&5p`;|4Uugx0*9y{mF7i8P6OxKfkXpiI1bd*WzlOMt?|W
zJhAS2=_6hwx7@wd(H|g@ofxqC8X+madNtzjHM%CI`MF>}bdmK9=01)S+$E4#+o?Is
zx<8G`2W+q}lO%fQPyywLdU!vZufH$$wq~~!bKOin#H!$INpE1{)syYtwSP@5!R>y8
z&e2=VZq6*zCm0PXUzkE;da<~xvwoZlx{&RS4EpZr6iXf=H_fT`M~gu>LYDX@-FE<1
zQ`TLSFFYQ*X?0902UA_BW=$>(;4h>N@(^_FYC~MZLDE-DD$picLMt$P8Q{6jM_61#
zQHLaEo~k$^LK|$VU-#|NV3JH8GVtMpY8CI=^Q_1W#JRmGbvCgC22H6V!_PnraBzTIHK~}l+z@Ac$wLi4J
z@+(DOAW{x0_L_mr38Vw@aamu>Ar_m_BUN6n67>F%622=$`wc^Ps~C$YYe4vXi;Hun
zq(m@URE`lQ+n+^+D#)wPj)8w}rj1-WjoM^mE64|QCvpTmKMcC|HSdRWdKdjaO6~>a
zV`8=@Zj*ZQefr}#m$)o!7tlbHm3Ni@57F;h-yu@Xq)9|qJ_>zocq``XnHDBF`EMmGs1wEyepH%Z+8YxxQ162*-DRgY~?
z1qYe2b~b9pt`{mX5*_v1a_1Zpgo3Cq;J?;Fx6I{IF;
z3dkQHSC>`Cl;Cd5W
z9*>PnXXm02d_B#Pb-Pz?UOaoR;I#CE6@Z}=pu-@vYT)i4@(tt0{rw9712riktP4VG
z5LMQ4f&q{vDKLop(Q1%O!=hl^*!2qe#rHCTP;OUn0c5TDp9KI3vq09(EEdd76sz|vytoASfBv<2eQYi?3R8=q&m@Dsm8grb1sdT^r=fvS;6i^=-6^kG)G
zVU*DS07Z@LAZ^Cg7`ez=+Icgh>`<9=WNCMUjN2y6grC9#?GsnF<+el@lb#`zyJRGIm(E@NR}VGMx?kzpV@6rwqfa%PNQB&&>Dc-_kaMFK#rYqPymdb&0wv9Z@aW-yhIF$xeKnTO1Q4`{
z3h>+i$oN3#B7%JF?J%uTRI?bUYnMBoM*)V?r*e&(KEwjo`%yxK99Ay9^MtusR=4Nez(K%Yk*4BOw`zkqA*VEVjnH7lbIk
zdgXPB22P&e&G63fc8n-IdkjBxER1&u?2o6tmRz_+^lW*-Eax9w?#ZWhtznjD@+FJ5
zN{pN`*SgI@5(xD6A~CSPJqO;UQFeATqG!$vc7n((w$NgGn_SX}{*h_6pk~$Mb-Vu0
z(?Za{D3ecoxaw-U7v({af|8O@2L>u?>?#qs16dh%vLf2Olsd`-H|(k@T#ev5!w-Tz
z{ET~vlnB%Ena96K1jJXO4@Zot5zBo1*ptz_AHX-ofD5R98;>+{8L^55VEGKwL8Q!g
z>qa<-xRlVB#s)OVuaOb4t#i}(m%1gO4t#{c>F#mZgD2FN=H;9me$se3KdmrmD-|qB_#ww
zkq%Kx=~QVMOGbv&zBZFmqW09TmJYSVQo;~zrxiMi(x&!4(%6}sndkX`{hv?wci(f)
z`~J>3&vVX)`(D&qm2Q4D-DaUp=s9v9RfKZRynZSLyzfOI{D{$KcG>F7ahT_&2av3*
z)s^nAk9u!{{|2*XIH-K~md)(wJwapPzqSom-UP+cy84Bq5+iq{>wHyISo;n7EC(Pl
zHnXeu1pi)?4pLTOiP7MvIr+L=jUdNAkA=s{t-J(>5bj{^$2>u8`YgIDsjwW}?YPnz
zOeoh{At?7%%Fx14FjOeY7f7-!-xvP2J}dvy&b!*9QBr8BP=#n)GouhcR@}-x0w;T
zNG++5l;Kf?tJ!xKwSvf2MXkJ1#1$J^{pKcmdj7)Sj}Ug;KZYU
zFdtgs466hkjp>!r9K$X_WBto4f}RP6!|}-8@mTn>7OpT
z3Mt_06e^A^@frIo2NmZ^5}hd=8M#urt{Cu`hN}3*nH1vd!QcDlImT@&@Q>6Ai0tv_
z)P7sMB`kvN8rZq+0n>|5=9|>hA;bPhWy-m3fPzD9?uRh63vCU_P;kuQZ=ffE@A`oH
z=tL3)%5ko=z5=q_;fBi|M5+86g=)p+CVHb%ST$toKmXRScUPg|qEZsG#%FYzPO2IW
zQ-O?0>bsDz|2e3FgyNiV$goTu1Au1(#vMb7ct|WvY*DQ4mZnnsZSYpG$qr{+IsQ6q
z+RTkW(89D)bsW&NwVqBzT{)n#?#_I;Hs8`)mpLh!J5Jo%viKYWk
zvZAt3r^lUeqrMI>ZTD;{?znK&M93B$QiOLV5MC(jus*V1v_Da1XeKkFU&(k@Pr7Cy
zv1UiiYCN{{6kWqpvl2)4ebSObo`&&O{6?ZK-0;_K`uKI%rHs2=C_c&S1kG6eIb|k&
zoco)2?Q#Pj8GbK}aw{8IF-Jg`g$3hN7kA#ISP4Zr99q!?bX}JtOUzrb%nt{2(%sz>
z(3uiD^=LzX@V>_}d7#5o@R34guETDp_+?%pu>1#}JynV_bz`t%RX}ZMb8yV+-Mq%Y
zx^wuOp%9QZ{q5KOZuvZITcM~RQ#i=ah3EeMCWaQORva294Zte@wY(&c*ApmH2|k*2
z-;INC8}@OaOsBGlV_n8rRrqeYIC@!K0A-c8v)sJYY4>%qHMc&va2;W^p~ARj!67v_pPa7kBb55IOhItTLf9Hn9mHd+2_Ua|B~8`Z8OULuXy8hg13zwc2!)
z4M?|4TD8dJ-(MgM!|2_1E7?EFA#*+y^fp}d0S<&dALjKqY;XaB{XF~nqWOSnca;>I
zL?##Ow3e|n+Eja{^haA1nw&3;%{m5^QL-)iCew!7>xO#A#wLFAymee;{>ZA=-5MD~
zn3gO0=WU7GMrQ-!BN?7;7v~!d&SuOowJthXS}d!#q>Jxd@C!dWW1yoT2VA{QBU8l-
z^h*^Q;aM?*>Q9uy1BbB3yEF6Uyfy?otMclG7Ud(>L{FIl)L-@_8*%HMQv}&)ft&p}
zQgi}&*b|ylx`uDX;1=V}EqMLWSCsdaBM2^M)HXqxD$nX!%Q@6L+XhswSiNDx+~ZVl
zGYh|KcJkSwW8xFUggcK?(~UtdO}1fH==Vw${enYR{E
zH!zVYW>w$m#cyAXFu3>J~6lOtF!9A-Sr7)IR%G?vHT1rR+*tZX&eSfx1be7?ZC31Y!kZMbPj&d-dBqIIn{UGrC%&Nj
zG`xLJzix`?t7D8j>Vk);QR}A;Z7(&=M|KLsvR?Jd=8Z;g_IDf}RI*kR&9rx}AFpG?
ze&>`N&iJ<K+F!_C3yYF;=ZnvX}{twdv2)+DQww7p%+AF@l{sSHb
BzDWQ8

literal 0
HcmV?d00001

diff --git a/docs/notification/notification-ui.png b/docs/notification/notification-ui.png
new file mode 100644
index 0000000000000000000000000000000000000000..76b01c3aec3d49e0b53f70e4bcf37006e534fac8
GIT binary patch
literal 375962
zcmbTdbyQT}7dJeJf{KC|C^^zdDS{$(m6q-<3F%O}22rGul#Zc$K)OLmL14(CK^kUg
z7~)dzfZyM<*8BYVtTk)RTKC+u&u8~O`YCdEw%1ae#It(Yt^FhL(Mjr;ogdVTtIaCr1eSP8p-=50ay@9*z>dwg($_H8mBL))W;LwYRs6iHQvk4mCG7Yiny$
zP*B)d+bk|FPfkwS+1b_C*XQNsF>s15E-a|2sbyznDJv_RzBg5nk*=uu86O`n5x3Ug
z*Doro>*VCr(>rKyZ(mwcQd3<$GxPU*)OQsfOGZY1>hjV)a~a>n)F+rNq32ntKk)XEVyws;sE!?`YSD&*EwQ!Z-XA9s>_W^xI`l%#4kHi%b%BtL61*=X#}Z&3x$T
z!-r8t$f)>q0^6y?=;+>-W;Ql9P7aO-x>d{?iL}PG>R#3Q!5z(GN1^`yGpqaiy}vE|
zik{gul(bGf?blDQ8xb(i<9e4)#ULbZSJZ;q0(UmWJ)7V8H>vrzCsYpS{TvgagR+@7
z9FFzLeQxa-T=dUH9xYC!wQYYc#grm(X#El)l^IhRzMkY^e$G
zP}MfB7koqlxmKelB_^!uI=(hpLfZW7j`%N`x39z{Op~e~-u!^K5l~6~f$-&LiShM0
zn_`35VD#e=+q;G2zzy2PX;b33z;wg8D>+wH$xW8Gy
zOJ-BDFM-@i1^;63A#c3VKIs4VKkNOCg^IvuA@hgxy-|0mU2f+(UCa2QBg4U^M0q>t
zC51-rO}aTheM@s)#R3-Q
zeFMh6vmwCtiSgOaiMu#UgJ?@)d|uu|VEMG7Ji4#TV#;}*z0SyAjaD`|3Cy3aW>Ird
z4UMllA7JxG=NRtnW(1uYPLw_2h
zwp(TUIli9b+pAfIkgLGU--@le7>Fd)PF+CCYT
za~DQ{-@lyu$}}JL@Sk`rOvWdhEvbtUAlU}QDWAb}aMR_a5fxvSsMYV&r)(GC?BI&&}oI64et4=f!
z3Ug&QxJ@4!bKT(O(&lXPIOx@VdgJw{1}u4bGXsLtqLql*XRc$-@bwP;SU2E_h8LB
z@YHp!Va)9e1+P>;iWgP(S0E5?vVL&r8!(?03Hvr-?Dtjk9HqV=6MMI_9ExOuMfBd!
z!)nD!Y0E8S)##1?RxeqXDrk&|(T1ne3|mh=gsH#H{eot^u*Y=)826%S=
z@}Q2w!piQM)-cJcY=kzvqbE{ffS)WXTmMBMkkh^KH>X-%-pa2p)cu_yzz2@#*CNKI%R@TpLq1IJ{{KO)St11da;x
z8RfL$GEx1@`tbGUBO=%wzf}rc=*fc)Ri|7{!RpQW*!b+F&p48)jO9R65bW&Pnc-yo
zeyP4lNCON_nNbeB9;@>hVVZjtI&aWQ*!Tqfq@7vS^G(~|R6l|nY5k8lqBVIQJ+Qh-
z2dIr_Ip(d-Ej*r6tP152PpWm!3wTS~KliwHv@`A8cLsABd9pz}QYXVT?y2u0g(RM$
z0_q)N$<*P@ro;Vu0({_M^KG*Oa(!qf8203TKCKk}}`zOU4!Q%M^P6wmpChtoC0`
z)D}`xW_Vd+YnA(4dw2a+wt`hYGLD@>a(Arow8v{?keDX2XkJ3CUK=K_{T%z}xMJ0T
ze=J$LtDo9zNyLRU`nyA_5>{)(kiS@3xr6FJFGuliH_43)%4g(O`QS<4kp|qZRxKB}
zhZ?IKWY)%#%fIUAF&_9HLQxR`zSWq^|MghGm95mD@0_{*!O&jX0?W1G_|EU#@l?Sf
zEF-=2|3sGt@(93|npPWm1z=2Q!ipU8VKcF%5IGd^>o|FsS*CVSSMA151MmR3I-d_r
z4=zvY{R!ufiIyZN$98nrN!_x?_rRrk2&7pAyPXV_&1NeMLR|-A6pq#5EQ8F(ulAyP
z^je-sB;1?-a|;17a2R9%Bo?T`Mkk!}$5Z9tji;P?-Ts$+HH%_D9ygTpSb?-1Ymw)B
zNBLHbpscKBab+^lpRd4VINHFF_@xYFKt)XGElGzn*GJbzvva$!WqA+hv`+iwS_*M@
z4DZ#v;e2pWTtK{86k+wA`uPdbv738*mHC4?FFnUyK(V?JX0unfqIyVMEZ_%weg|5pZdzcTQ*MosuvXw1QKv{xWfVL?&j>|Dr0!a{iy_$9h%jL
zKWk4u0Ka#dHepEZO5P1GXBU7gLGH^p)M2epYGfmq!cUSvmTEvJaplH^IcTd4n@R9)
zzJ`%Cvf6Ls4d%QU&YAhZFP9KkaC7l@6S!6JeqIl)Y@#=~{4)5*uw*7Si+--#)4M)D
zjQJlwZxvyJo+(L5@jUUbPjiqZzQsgAx}ME@7IN4?nU0d+sO)#I7~FqXfv)y)a2g{kSaR3GHvH=hRkBLLMdZZjinL~CNMFm{!1
zb-))_h(RECZsdpg!-G}Onjb+bkEVAtL_3jXW2@XYJv4lZFcFW$ir2q?uDD6iRS0pM
z_a!rDbu!maar6EWccUcIfteTT2m3AT7=>IvxG0w(Cr?r8Shq6G*Cz!?4=teC-L4k=
zy%I4fh$AJlPeJ_9L&E*rSE__PHDx-l;xHO#*LTZF_0Ss{FfjwHj4YAc(%cP8RoK9Y
zE@#>$L9x&1`9&F<1KG}50a&GGon%9ktvje$CMmB9--^@{IvyexsPIfE2B`JAZ=^?_
z{GPd`4MTmqUwF>B*==IN0hb{R_#ZZ2lq%K@Ybs5RmmijW!D4(|djk+r4PP*A;7NRY
zW48e)p+-kp#O7^efw>cE4h@3W)nPP(%Y_um;-+41`qMjRfs?~I+k50<|MYofxT6kS
z!STu}4w618!AOH2d15aP7I@nbmRujVWy8^B
z{U>Zs&9z(}>e!OLC;~R^Io(vD-mllD{#e};rXt)j*lH^(#v;VqnA2SYa#Lx`)eDsS
zH4#sLa8xUMrakQc^70379f9E0C#3cH7MU(2c;X+Pq=*SOuq+r7r<@R8HFGYV8gt~e
zxz|?e`I=h*mN`}4N7LvjfJ@92XzzmR=b_;UBsI4AR-Lk14d#0Hc>3O
zFLhcy?$Evol|!MTK3GlG*s&br@f(|XO%P;p0j*uY`|uTqa2G*=Japz;6_S82I#2`i
zi@Fa&;f?AT3FxTIb2~p1jp~;a-y_8lb)^U+pDkCyNT$s5@tJ({#@Shx*idoX
z_#9iNg1W~8aSQr1abvr+%xXGZJt@`p(sAsYMbLWJ=bxzM<}3*2GEij`A;REh^ja3y
ziKPcnxT5#lHrD$=iz1yA86VXd@AiSW2qoZ%Xyr8P8FMyYB?kmaTRFI);ti`GwGirv
z&6JKpFF{{6S%Y~ggx=i12o6)iJDS?%eJz+f$(FzJ
zo*NVIPaK5Yt+JXTZX?6c)l#Wchx)8jW}?ib)$d(kk;T`Bo}-pG#o^LiJp=O6W|O{8
zlo-x=p5BVul2QfMjEtMVbtgev(iJU=uv!Ijb1X+vtljj{)$1^6q2s{H@+aN$JNX{X
z6Iv;bWOvJ!D(D!*EHd|Ru~rhV@3ZD$<0G9e)8OD|)G}NGT9F$3H_D!@0PWT~hBr(Hqf*Y^l%$rBMGx1^ONLo1;h4j;NN($~)rvV7FC-ad8IgOQin
zB`CA*Ar+^q6~Gm#LPr>F7a+HR<)fKMt1;T1j$^7zi!6?5->Y`8gx%*w
zA9r6WM~~kdj1yCMqryA_Rzu*nY%9Chfa3!?nkrMiOKww06IhAR@gx
zB+aFQ4Pu6R)%5$f(c~O`rSMcygjBN;sLr8sPLa(u3S}e=0%jN*&=dFi04JQ_+p>hQI6K10d
z6cJKvhGR1)iktJV&hA(J
zWx2iq3wB;lkR^}qzD7MDlG>)na_v{v)vv)K0~FORJGZX`%*^L~QRyG0NM?|`N%l2?
zF6Y};bf&#ID6?Is6{&U@WgyT|uEO7(+F&?R0nGO=*KX*xWof!dZ{yk=IKf=L8bxW4
zsM1+o^?Is5M^=FO4r_K|(+yCm-neRiewhHCIRF*FM_`YE*V9D;{`mO-
z`?mqB$MR~~2nBA~9-pIe2J(rnzm=YlZ?)c@Wm)v(>q~)jCn+G1$FQRPp1cLW*xr>g
z*)n&Y)1>#U7{?I?_?Z^G8Fp(V^P@ej!gr_GwgZP5o~v+&29=4=tEfR!9se?Q6H|mL?-$
z&ZlL7e~Jz4=DNK#Sko0(pkJi1S@Y>>%Ds!c_RI>$);TpSl)~LoiQTw&tY}ygj>i@B
z!|6fJ8I3|Z$$z4nL76p|0cMFFd*7cgQJvcCxn(#Afc5=Y25_tJf6`<=&b;f;E$@b6
zwvw}j?J%J-`D=MI6f8S}S41y#>>a|P
zS-Smunw(_b!(zVFiz4J__t6kof6Q~iQmH&6Jx$pZs`oKSRomJ2O2Q&jM2P4kQFhJV@Kh~sP0hNC2f
zRJ7q{+Y%08i{QbpjF%$WyLre|Y)KUJv96`skXG`7La^EpUl8Gc_NHF}K%oGNrkg}1
zJ})1u>XupP6&%$P$p6@$W7jfKH+3pe^JH;ZQPW&r*J;Rb7yzk?ivIOfwyzug3h@r62j7=&$1uK4bO=gAIFx#_CU
z4ta2TFy~9uh9B2GhVNPK`0_rOS@Pqrnzp5}X?Z4{f`v{EjiEX;57aCwWGiQ1Y88R`
z<<4z4PcB`H!%Pix@2bmKwnhs|a#FJAm1$WgyX^hvPeVMpnRVcw>+S3Hn?}w}L*=_p
z(u(7T3+SCM?eWbYtzqyg`8}_MN?>lyufq1U|F<Tjh4_^t_AK3GN(e5UQM)%AwG3>@2v7dND$OoDK8brl
zc2+C#RvB`^Os
zwow{ktH$0j-I4P}L9#W^29|CA(^;}ypcnJFk8Vc
zyR7Cf3bf&$79@HdqNklUf6p+hr(cANH-E;4!M_}bmm=l7jv%>2`~lA#_U6)qh;V7tWl&iEaX;bYZ$s_G;vXP)O*-JWw>JycTQoh4lTrWK&}4@JuM(P
z!%f+8bkJ9a@~gu~a3D(>mo2bq#@KkZ7YtI7nM0^ju&)#xV!<^KDq=2atkL71|1AU@
z5r8Rfp)Xpnm96+DrT2#s3{uM0I6_nh@%Sw`Pt7X?%1^Oe$8RGUo;)ugK`6kL7MuP(
zchq++yL`@5K%)0>x*Lb*>T#J%M=oiL;(c+_PpmRo`%S37*CVU%M9uvn>*muXcvyzF
z8*YuI6}6l9t9l0Fh+2g8LJLSlH!gPGlx1Le+K9GvV28mvqg3SH?CIGnOv_El0{J7H
zOrm~(KYkXd!Lc}q1L`^oPt>7)dz90+UPB;)>}P=Au)lS~%bC54Q8FFm`~4Cy{L_Ws
z(%dcU_yL9&@bcD6;ns^nFiWUI$zEAH^x@=q++9UeK*Hv9Ikr0MAjD;l@{a}&(8h@#nqe;;OPH8p+TZhI>e6
zXZ8@o)Rf+sgz+J=ge_e3;$I;!W3Sa=*6{}Y=WOz5pH5;sdnk_Olo6~6RP}J-h82dd
zu5b3X@6iERuVQuI8Qy@dP&)0
zQoSx2rEvIH>KIra2H(}TBpTsJcP7>%-R-X-Tk1caZ>=W!wZQaazZ2U%D#k_}Jd(97y*pI^jwjC;6QGi%Ahp&7X2P+zu!J49(An&qYMxI_|kx=$5eq>3=TNH^Iy*2B{s0)_y$=;{I3)r5A$QPtMBiCjwW6@8Eu|gzdjoRww7MW0qYFn}~>;b`&Pm
zZ0qtb1nPfHjDT-nw?^zE9~q~!1YP{>MzS*C1yB5jCqinoj>TRd?=cj74DdN3otl~L
zIm@BOaXUV{UhHY*UsaQrqZKxg_HQ0EjexpyDyIQR9*ND7i3}*&)EEJO+js6hE+RPz
z!DRF>`HfDAT<`fk`QJjDgAW|d)gP!KV%e?^VkZe~?k-{AGn|`bs(Wo4J*U$ZqBb^g
zEe17yo)&E=OI?c&W1=iP(`hZ6Wc!gr@INArdbj!Ka%0@bW+jM@tGSTRlPmR1YI^EN
zhlW}<(KocTRRWiS1?u&lexP`{zGXTRxfr3DLsHzOdm$Ix4^GOevb(=&QO2U;W`|kK
zapFGa5;tnX>|%4Xs}}g%u(^#p0`=rR{oC%c8ik^lZ3alA!o6mWAmigv5r-y>Ltb_~
z^ka(a!U)KaIW98uQueZ^^p4j_mv5w_`i*ik_QnU!1lFn+orXAm?f0djE=(651No82
z)H+V3mH(VROBc@edIbJ$sdNk*VM!!Pc`*#pPYrgqQ5c9ULcaJpR&AmOE%BR=%zr6b
zcwuLdpI(j?Vd61=Twrma_uP+uY>9kESgX#(5X9AYbT!lT)`P4SV!Ng*N#A7lb>R;t
zI*>03E=IjI%#8}qB$ryTpFgclmDtX`x$kQj_nE2CmrnhD09^zN=L@W~*Y$z!D9x@!
zP3fB>8K^db7{9B3mEpz*#TL#H9IRi6Fna^jDoo~x7Q9V%mP@Z6tS&c8?#0fo+ZN^F
zdO1ID>p-U_i0vp3tlF$ioC?;&b9H7UgeaKfhX0W_*MZXt2=J{5y
zR@IfA77>=!kph;i>cWSw%U%S`a$A_LP$lq@^@0@E?SO*EAC;|#;u}U-o`ifEHp4i8O%58Jz2J{dynbBZNcBN=3^c55
znc_|sIZB1iV<+a!3Ph~M}CA->1d3cwEru1
zaBX?rytuadp!j|HId~hG#AX!{yztRXpk6Bh<-dY|@_y6S-PSLi1u{}3CT)_@NJn><
zy72in>6g#nAJYN^43PnnDc)TrtqNe=!V@#7XE4kn
z-W0i>ag3+>z*|i00Fui_l=)m@20z-h1aI7A@V4Eq6|@(82HqhhB|Tk7F(>81>KAq3
zru;J|WIwIqGs;m$ZIw3}21<&g2b!w@a4Nw^b1~Q^1TdPUQZwprEi#xWh#bz%(SdGD
z|4dQs|E2>MZjQfSin|lTOGihS-c&zpa~O3nYl+!{c7v^Cg9;T51d4yC7#q#6<+2Ut
zil?Y&+s_Cue%QVZY2&>+#&6jlkV~OT_c2gfJPQKeN+4@9+#ad|V2X0$=bkNz59Nmd
zYuM;NyjT?TiDA2uCdfVo3KI08k@iY-+-p6-^>|$;r^anTO2PF%rPqUlEqtw^!6M>W
z!U#HotX%V(CZ(p0@l6Ab*e8$$*7QU>S7S`eiYV?fTzTdy%534$>1=2ApI&g~8swX-
z+biz4+*~-8bokM41*T3*6th6hxydTd^KYqIz0rXgQ)YxoV+MLz!Rn)AW%0!;g&`8~
zW=Uwz$T<}&rHw0P@OTo|aE}%z3~fIQsp
z58_0Z{&CubHGhH}#$bh~=~!5C`lp2+5#}|vRXKBo$@$uZDdjX%N-#Z40r;TVDY&QGU(~1_Xg9$!obXDilA9Y@-bv!tv9Yjcp)NM^7FO75y6RU7`1o
z_CzwU^5gpV9Eu2sFk2KD5(Chh!5&>0aR6CA5_F{}^7l93;Kgvi2D{Sd$3T_UPBFbZS`5%FrMhWaQq*YYP^({eXOwtXhs4?D-5bFTl2OmSd93k8=7S
z&6vMBa9~rm3Ycy(hZ)63o-E0=
zkxAa?r~tEw-~;Rv1i_noGKPi@atX4IGGRPwpW19|D%1hO+As?ezmRGzXtDkXkZ9{l
zWabRe>Odu+m;NyfemzTgHMu-f0Wf+WM6G7veGoP^zeS~D(lJ8vUTXm+o@SuW_~4yY
zY8OL^xx<60t`&M#ip{aQ5s1fN0|&angQTuAr++0X!&rsrd+nLyxhpECsr@6$pK|(A
z#&KA!R4gA0cLTvYukjmMJ2I>B@hO(aMRAWEBcvos82WS~{
znfwuArSnL-$ub$-jRb!(mApoo;mmDp=w3|5Lmg-(fO8eGPoG+J4$nB-cK*)UdDo7l#N3m%)?ry&JJ9SW=%=6`6u~=7fCdllL{)?eyw*6LUmA
zP3iJ|xw7+F3x}L0N)Qz*JUWj&#VAwROACcL?oxh_Tx3*457hwb;%b(>8)Zj+Rn)U<
z17?A!Ws&<0x4jno6CZkjPifYU@84=jdibqK0_sDYacSh|IO7xEh%fiV(0gzlDNcAe
z?srq`kM;5^tpkQ`Rks=bJBc
zy_kH7#NaYYdvq&8bvx*wI^yK>{Y^KHT4(m_y_2!24(rEP9X6Lb96lfHwfj)|umy1*
z%q%)PzSw$&xr{^MM`ggQ=IWrqDZ0wn4Cc8$7j<25XQ&pE8|l?Yp73G-u_Kq7eW2l0a;D{q58h6
z1>YD!`u?c`fLYZN&!<*;ObJZ|V?tX?Ro^R$);d{J*EH%^(FeXve4NTHR2pL{*(JGT
zoiBSqO`f8akMY@JSzd|4f>Yq39_j6O3bp`d{x)|nPEkZSilFO5pJ@b(`{>k$m=Zq<
zr20f5&Z}^ZtuB-XM6uqOB0_~q^hf_KVD7JS<^~lv(LEDSzXk-XaCv7cAKS*50`;348O(63co`DDZIwA6xioayX?lT#BgUx`C)7
zI%7z3>V2*6UT-CTeVdTs9HkMwKpFb2Cf|(bG4RzE^sM@Z
zV4c_T+0#D5Tejn_b`B1^6M4sKThB^IKhfVH{rI{1`mL5{w_3z}1%9ZDZ
zEx87~(js`ugJCIwY|SXcGpX?Iqb*qziUn;DZKd-f2A^eNE8&(WonLPXjs3m-+|fn9
zfuD96Pxu!l_0Z}&{eX7t>8a}*G`)>Q?zBGoo{50Q(5%gn;i(4m--r`N6}V_{wSKdg
zjEaO{>eThQhM(Hdx$7m42DfA3QCn1Gg}!|JynXd}@U&Q~Q1E-z{RgdyQ)$3(!`)g{
zFS5sDVn%mmX&#pl2X)7I#hy|-lF5uN809??fDdl7i+xds>z_OfFnr`^m@b(EL~e;d
zVO-DZb7sDJXa)OzYO+u_E(QDIDG9f-rHdO`rr+BhEd?Bh%^sF$q07GI3;i-~9sWDy
z|43ZWGU9NQOh+>I6cco3^>n`Oj|HB68Vc2sv-)>c`Wgco
ztK#%ceT=#OjutvYA$z(ARP99~tpeWGQ7gku(cGUa`@Eb(S@4tTj6OxY5gT7hT0B_F
zIn}N!Ajwaxw0}Zk!H+%I=V&Ynga^ja0*#kZ3rI!)$a!6-ssW
zsqv^Pe2DLMus_K>JxQn~&*T^RW+iyBhK2^b$jpXfyo`T_|D6AZ{wwT-j^YlkNyB~~
zhLY19x26|i`%m1SFD$d;i-Bw9jN5LE%&Ss9l&1C0jU73m3Pa3UzU)d`&i5W?0gug(
zx}H24_tzIC5AEX@^<)$aIQrdIMmwG`l5;0l0L*-C@A)SWsWN_}b)sBnD;pRL&{6ln
z6DtpJtM9gpVdA!PtMmRkJNg3dQuBKFhD`k4z3_@QsvPjDVGX5_9&H(U3
zb-m{vmcFUSr*2hNnYf$C*m}bA^;aIrh1=9KE253%^(ka!ZRq7;Jic|=CrRx0zaQPY
zU9kWhZ{X|r-eX>QQf)96wcBA^>?3ko4iVwx$0}jA1@|70n+QtWLj%B(g^NC%*AL)2
ze}>&3UZ&K*-OA74dH+i%Jxb;FIA@v7QSNuDA75|st&|0X*>p2Epp7$uDJ4u)H~rFA
zVrS_9NjYq1PO4PeoD$rj)yq7*lYZKVSR^m(kMoU>bT@u|Kwm(8wngK#Rol-;*o}y{
z{e~CwkUVrW6pMl_Mc{&UZA0GzxsgSi8vGUA+0_K0Rzb%*e&A0V{)C&QjYq5Z54FzH
zAi$h4d37rm>eUY~d)E9<&SIe(TV(o}3>eGKPzOVNN^y!hw?$tjQriity}&fKMbm)B
zZ{S5@P5gO<3#Q4f{>nrx$&6#R$hN*_MPTcLhs=g|87Amz(cFR6qkV})Y$1X%InMDo+#9Qd0?2U@DK&ozo`wp!XWKt?b1{k8h5QFNPnXS%^emn^Cdfsn7fZJ4jol*
zenK~o`{d`EV#xANfa~@OglD^h&9RqrUrm^MSF-Y}X59h%jUa(N^6g)Il-s@#qhY1i
zu1WU){F}pFA6n5LO(t=c5r|Vq5^74)mCWIxm%5CC-G1fE6Qt&hCORV)mk}(AZv?_Z
zem%$n#kOM^A)y3m72LF
zBncggKn9yy;)GWX1ySxHELbihIP`N|x-b>hT|Vm{DFkip*J>A_-gIsmUpW`Ag@>Qc
zRe#%PkSa|31NjdqEkCwD`PQVc;^6Fc{`!h#z>MSlqwK{)WJ1nxcFt5z8{zbci$aP8
z8}`OZwin-i|ITiwS|;FF*1Z^-FzCQ!!M?Uh$(L|9VKK5WJtMx_1$y~~nwsITAB
z@1)%okmY1Hw3!VkFfr$tkBQi)Kk@&yAp`qs#;~6sJ8X8vnRNYYPUo)|EVXEQ{kLXu
ze!ZaBp;j-kKx;#pX?2&_h}gJ)${8}9v#{rA-#
ztMjs!#8rMTBPA4gOF>>9P^+WIT_C_u-kNOgV&27F$pBr{-=eugf^NI5Kj)o%7;jDO
zXn@9t(<^n!F?ym0N%91z{$|UK?kcLIMP<8OqM>1qa|Zl*faz`p->e$^gy0OQAjgNbnFH}jFc?RT=y}mhY)3Hd25S`8RXd$ZnJLKx--;;1jlTV6
z!jf=WMOzp6uBm6bMGH=LDy
zeBNO@>59nn6q?S2TGMUJrd0S2?psG3*1Qm*{40`QH>e2L>B)9Egxt6IPrxF3^}rIn
zWXVruc<)=7_T#Ow%2cz8kd|rK-yQ?V`^m?z!Jz4eEMmKIuE1wluKqj{J#>fXq=@o?-#6lH3!Z{#;Yhx&x=jj%
zh#6@rz$Xf`H*tQlOS5tXI`FcWd
zMc}O=XUlSaBD$`$GWkd7d*icm4qp#lMx0$$PD*t+(?s9v6e!4vQ|DJMlf0Ng`Z^R!
zA(n>fc4mYnw~NucaRg(8Qsz5il;4;v==BFB1MkkIDZrRi6EbuEOCL(OghI>fzN?=D
zT=_Xf!y$?{g`mu!v30!Dhov2|+><#|@UKez4!*rIQFl!ho;Bm;&->9$ADRxeijk4X
zN74}}m+0E^D#Me>jplDOShSGKCQwh?2e{PXn%X{_b_%I2mZGqot_N#h*)5f#IR*T{
zJMmL={CmR8vl?*2)>u>jss|Rj92Cs5ZIvD?K?QZ5_tm{7;C!CxqY4+gFC}B9kJa4h^6iEI=m!9-oH{
zB_N$rQbf;p$ij94Y7(cC!MCjv#H8yM$f4}*`XK%o-D~+4*nWmj)&8yQj(5DUol((`
z(D>VUl#CBY?*9ECQ=9UOfDYhE&u~HjpabDg@vZuQ^&G9KKd+uWsX9)tpOm50hgS&&
z!P;?b_3_t(R-#yVCPjq-#@G*_U3ndmR}eSS@y#SAWQe)E=ksgquSooK8dnuKIfFW&
z{5qY@3fA5E`rvB;P&-Jul8y2MA7v|jC2r0Ej2&Igb4j=cG*tIh>PT8|x7M3W!v3qS
ze)s2vouAK$%E0*F>BGsM5p9Won2h3K2Mp2D3^ymW
z6R$TvtM7LI`yxhFL%dB?jP(9B1R>9F_4(Rg15r9UZK6s+<*eJ;3lj4c4dMFO^UT*h
zV;iQC1MfT6y*i`@>q{`G@n0p$Pl1Dn?p91O-hnynI_=kRePeBC-N#HB
zI9?u>>#jn=oRZJZql|{)F!dYJ7O>XW+VG^xR*r9nOdjWj$eSMod%)@^DCUNi#PsXm
zgMXqwpunrbA2fNiu7s=fOFpNxOm#|S(au1+-toLE7m6Q;$!G%T!TXt|lhLROk>-D4OFp#_b?5#B
z=l<#_Xj0*#;D*|ibd5yig?n)#=CeRjTZem*JXp4
zpm^PZXTo7XEFRTJI&u;-V#Q&Ibod$v`JmOxo&r#xy}7|+QT*IY46gS0gV?PDEbZ4j
zBJP2ufO9sMJd@ZiVw$UJWk}6;+wIf$hxLqRKle6Jq3Tk@9}!{HP@5l5QDz?(&$e(Y!!x#@m=a@r1
z6fI$@m0UbwwVAP%9}J*Eo0&)nF^_r~?^b_u*WxTD0EqyJx%c$Yt
zcocT~b6qyp&6^rk8285;^ZO&kR<>Us*bR9EH&>%PNWfjJ>#{h!^#HcRE0k()&|1IK
zJlZE&E(Y&VILS?rECV3&RuhpDNV#BYCd;4MR77}+>^zij1i3Q8%J5X@I(4%D$t|c9
zU|r8Nhkq^uZUD>;*w2I2FVj~gd&Kbz14%6Pc+E$Heri
zLauUdJvpEM6F0ojD}B^K`XG(>pk@C%53L-{&>ZvB1QMToaf(rvpG
zGm4)A^x)g2U`1o!&#>+CZ+>?I&#Y61+#|<1+E^?>bIqC<}jH(I=)hb0ZC
zY?VOJz9mdw9l{QeUbVP;xA^(7=h5^48bmkm>>>`b#yYn#(1oZpJ?(OeBl#(wN^SG646yMo6k!k@_-a4mUR{Toa08SpyaWZ$7!O@^sr{P)LomdlveQlsC)_8DMn`jT+^VKm#H
z#~KKI6sKwxu!^_QGZVjIJ>9vOBtxixJD}(&oO-u+5lgR+LA!C@)7v44=>s*H_Zb!9
z#yk2s!bly?^cP>G|B`I*a3~!p4~u$XcvNU&Pj}$@bbz@Nyd&`sSg#fAE~v%EkFy8*
zV?Rcc7c2h!YP@l=l6P(H4*7QL%xm$K@C@u@EoQ*qIyXarkPBD7PCHcs>>C_)ppdu^
zN=5jWzv^z8nn}U8KBN5mFY*j+Chnj(#z1RextQ4QtK(NK%ph4gaNgj7lf@m8-#_o+
zs=7R8J#e%f$YjeUw$pz4ZI7P99Cn#3art3%w&&%oI|!216l`aO&XVZGY1YNmfd*};
z&J7xYnhnY10WiEs2mbX6v_+`&a@igK27%vlj|i@?P;jr+uFzngHJs;lU117}es{+>
z@9t(NYZmXL)6m;*q_AU1pyWs>0WG>-q_EI;`ZgDE#@$!w%18E=BG=1~3-qA*wywcF
znbaLQV^}5JP=3Aw6)uJG4EwVl6)DII<%i)8j^C9Q0;k`!kK$)=7q8-Xo%RBA^279?
z86=Q5i$x0Mj(1?H(0msdYHe3B7m$ELyqjHMMh?#DVU*J>jk7k?o^!uSFvhrJ-rPbU
zVOrm@X?ero$A?d{Yi4hXvbo0P+B@T3D;#mG
z-|PB(fBo0>dOcsy*LuF5gdhzfOjrc#$W4eKEtxc%9h?bZ+@Zg{`}PSD$|A2Yz4Xd-USrY`oWBnLex
zMhR3&*y=8QN3MBu{$SjT(41^WlOMcaeXXujV*31c-@7Zr%kbJf>EF>C3{L|Myt9lt
z&!b*y%yZZ)M@ow29QJ(uIhc*`43=K$^GBUp{nr3_HfHBML9PuF%PQT4%j;VJ0JJ0j
zRz*=SXR7ha+9LNqcAN+708en$LTdP+>QX2aA*&%S;`1{?tgblRpbGqYhFJ}tGgbGT
z$x^7NTwrWz?QF|qOsTQ^-=O^--1Aoy(@2NKOfe!8v*bw>u>7d-ug!9O!fW&226$a7M<2C7E9|NPLix>Wg~QGKTNU$#(!Q)w
zc^zPRz~G|#F&k>fZD)WJo&FlFhPZt-tve;<+Osp~{+e`oN}0fCvJLM$
z?!lce#jYmscY0Q*k!~3lekB>u3xC7}&7)q;bL#G*G$}W9?Of7wjz68k>okJc`ZwsT
zAdPwU#e3#K9Ih@Foz_AGX;NDZRlsB|QfycWm^cvU8
zbD!hwnajuq`@WRd-CuvF61AMqF#FOV=ZdQ&EF%1gi)m|h*2xej-hwGlB;Eg;3zavw
ztWE|-GPY;Uv2N{IvUFVHM8*|%K+$LQ@B$k}W9*cEEH5PIu}PZZ>F)I1(F*H7y$mL1
zF|YVxMynl&IJdHW7gw{5KiN8iw0#r~W}zAq2dVy?NbFD
z8FFJc+xH)um4}D!u|-X^%BG%tCc^lk2~(cD_P;5Z!a1t7(GM`7e~*48ozz2&&6?BW
z1z65}Q}-Ln=Uc?4t%7PQW_#r|F|Bnim)w(^>@dU(1C)kn#>(SrI-2jb1za{`xaVJk
z*WlH3R6LWhJn}Xc;v8E3W9DlCUmo*zqMl~+qX`}4Mbfc|d_7;WH;fiXVQ(|IXeT}F
z_v>89n8HE%%9is%A777SS{I#uocLr9Shq(Duj~
ziI?E$uTxy1*0KX=xoQ354Rg97Us>Q9M{T
zDK|IQczX0IS&~gWAVIEAY`hP145vWs|2NTcD7f7({H9L{#ng@K+%&p=3F|Hv-NSZM
zlk%iwm{-Y(CnyAykoZP7hb{I(2c-V(?N2ZUW6
z&(fe#p_S$owBD(@Z@HbzIcJ0sP%8$onXCE!4i^8g8}4ux;XzI!>NTUC_b2*x@DV=R
zQ%%f~BUWd|vG&QPbCPw(6S>a
z5B|eG%OS7jQmWfi>^j;N*;J-o9`)(w%P#;#{BsKq?<&F1rh*3Yb*69Q4w(~m7>^}B
z%6^w5s+Rckxs1h!ZjS>`^j=YX1MD0!F{X{LEl+1GOd^Qa%Fi)Y5K>}W7!#vk-j{3<
zzi5G8y%tnp*b|v#RdAd~qv+9s#7M?1wEk?+&O*si)pZx2wxmWb6gYerT|?)zr)?zR
z{+OiYZ2$Hzd{^+;t=moHFSk@Q3JDp7Au;}03qz!3%6TqZP!;-;J1t2T<7V@
zA|C$?ktX-v#(f6+PtKq`i}LLfZ0o}6)9OR*Zkrkdm!lsH&0G`eC(V>YgNn$ju=ZNf&>P=vd>lkWSi8I5RIRHJ
z`-DshGWQuFt}>O7zWb`IC;Bh#B)9!hLLRz(RaDsi;BSaf)$uNvZhMaS{yjXO=hFF+
zP{=p_Nps0FMIVJMD~E`0hhko+A+wvGnFWac
zeDBprF`=1;_D7oar;XDB^PUH3cFs^oIlHSi+!$<>DL$t2t)vv+G4tJ4phoN^r6_
z{I>EtWpa^7pk>O3!IZYNy;ottnN=Vv1QK1S`uU
z@5d7ft$Rb*KxC7QgSw)P8kSW6L)W5)Cto>}jj2x}*Ea%(XAH
zqSUkEXZ8C+Ws6`Mk4?k^9Y9SY5+eJ}mqM}rqWlXo`6ZibRy~_RVtvpZ_aKoVLP(}IVPy~1|4X|{0
zMu)bg*XZ=GTaC%Z&L&27Y$+%{fn2L8mXysz1nL#8Y#!w)I$r#a`VTu10!8ep9H0f8
zU1>Dpak#Tnm?JZf!X=;iSzHkw4&NrHXs9yS1_LD;B;`26$&B#Zw0U%`BKmK0lWfmd
zmFlyrFx7^SyS(LpyLsm%(cdNBn_O!q%$b>RvFRP{R5+xb2r;bCFKV2(A#&awa>-)a
z5>p4&PbPimBFXz#>w)gdeR!`bPR3j-xaV-uqVV9h21g(#pFy{eH~%8L@6YsHGpO<)
z?pyRi*f&M^MwC}3$#u%O3OuEqE-)601*Slm&`cYugYeSlh$z7KsMY_}kXCS^9%W?`
z3eEmpFdXvCWV%cwz4p2FLKuid59z<}3sLte?7JRysW9;kY4}JYIQw^|4UrYctr}Vz
z8qbNY)t5jjLn6U|`v;NOuhLd7VCw+AecF2n`5&SLsaBpjA3
z|m}1JY!a(Qe3gEJY`RkHv7Ogt5QJNYY!$_AB-Mpw*135+9M!1sM
z0GZD5&jh_i3=lU5f<&}wI~r+s+XmEs5g&fth&`)z2>@rH2xN+-GFCremF2Ze=~g;#
zJhUyY^y*qzfCXbA1Lx$U0~gF${{C$Y(1jCzEihWOKr`#&64oSRy&YY5y9W!&-6g9B
z*9@?`e$EmaTGGJw9^&eX1^xPd|C~_K|PO_
zL+igmtK|&B%v0o#4_y;^02dWhQ*+(GYYS2b;i9}}w2rVE$+n7qInV{vCk%4yDMh+C
z-wOJT5n|eiiMwLzhw`5Tl<#Xbr(Cw-n-mqE{E&ua@4Op;rV&0Rci1K
zQ@PiCGv~!%3n4uviDu-_de38ty$8j|uWzjUdubPhu@Yv+R6KTMoJX7izHkZ~eyquR
z(jomXG(EACndU*>&zp8uGe=-CJ4XWi9o%q_OeQTY5$`hplGBC%Cm+@D>8UyAEN8VW
zr;H`(Hw@?DVSu;sX#wKs?ZY(bB;E~8{6ApJgYNS1_qR0$_%Y(LV=9yg)(97&N2%RR
zqP=@Hj~2I#dqTE!nI||zt_=X}sNo$J{(3?a|Lc6u4qjxFOoYC_1rJssoYPcIaMVkS
z?YvBpoo9XnTrqc!wW2>=*SN}xqa)oZlPY?ZN||q7$N_@iF~=;XiAKqh<|4iC3|4)y
zEiIp0NQ{xziL*iDQ{U|AB?>8ftx9j@)Ty0jQjvCXM90vNQGsW@NfZ963iQ!tSOPIuOV@ztTUNq*KTN10
z^?Z$cfo!A3Rs3^wO>%xD=7LJ83^+_Vl)~ml0uEa0*F^~$`6AgvYMn-->e?CfniydN
z93@cg-&4i)>#M}L)>PFHoBr&3%8p8?etM=`s5^f$k(4W4OVPM)$aVcBqo%-9EUSbU
z3Z(J^E$2s$o;20w?DiU|jf>?(RP4e;?8`?pC18}9D-k#XWyX
zsjYvx`EF<~5_{?onQ@}i^&)%1v5T;`3&bxbJ6F)}+&V_{LP+RS1hB=kf^9|2Fn;HMj
zZr}fG*m^m}z44O8&?O7CQu`KuS4pLCuJ8CsPpdDJ|ADfi_PV)HAxqxLV>)I~Q!_!V
zFFxh&zX7Wy4xhc&U&YFJ{(0Yru^W_>rn1f1Xq#)fumirRk!-qs+GefI?IYW!`n3&5
z#P?Qde;)*9iTi<*$RJOCl&%+1Lv&t8kTteXF(g9P8U#2*V9LuICQC|CCePULTt|7X
zWf^fg=hc+mmKF}2%;!DvWUAKijRmneD}1L|+CH7eVrV3(!kGY@NV5y`XKaO-Cqj)+
zm2~G%)uZiE7xZ=$31>yr@qY}DW&68Lt?47^O?zH#L3Hi-ZJIh?ka1$w#t0_;QK*oo
zs`>Cz?y;TnGP@jfiKNe;%%VP;Z3#E)5F;6DV((Ce>{ZiMU+X&wEI$4G{4k(8VSHqi%7x7JXCttFWB#-3=h%C~8+m%w5nhS=H#976D$WjEuC(KiaUe}hxjCG9?o(aRl4-4g_p|VQJrgqNguU4SOq?~MIvej#rRgKP-OVJw
zEw?HG`E;}C+A=|ldsxIp4gJim;wDR!FHj4m6MXdjLksqvv=O6072@S6?gHhbTp~AQ
z3jRJ0BrG*+4}59Rd@24ZzJM&3pA40#-EP5Hc_v)X*<8s|ip3HmQ;5IAXRoZCXnfh%
zv#b%(v9pw>ZPsddySYnhNaJXPP#v1w^PftFUohXbt2x7dn`FyCi@z7|ZbWR6xg51E
zLa98cYV)_6BwhiO_|jiu&ovIRcc5kRfdU3+HFI8Sljgb1;zQ-<@4H`hMz)LOvZ
zNb?KCzS(dEVr54oFFNyFH!sMCWbgkfnHRaMqj5?utnz*g!HviSR*9Fqm7>I*0-m_@oXhDX9*~$*_$w;GdEPiL56XJMQLXSozL&sqWW|e%
z3$-S;{@(Yq+Ra%BUU3Y+2^<6yWNq&!WfNrku$MauHEwh?M67J!EQ^zpA79G9zlD&L
z_^~xeCd%nNN50J4)oZe{%X${g0fJZV(t+Wfn&dX@58z_GACn}Rd189TTch)Bd`!B->uy{
zui%}Svs~!3Lzn5)ou`YC2&)oDT65RrEZZ@iFs=D71n)YQyG_C-aKC?-Sw~;DwK_tI
zsl0y~KL@+TuB4y&_zVdhOt;@F_`<9R3MBgzo
zc!m-eC1PtyI;hTeAtor_k&cm{B9}7z`$|@K9)RBiQHh##0uPoaNmI`&Su%l!R5}FK
zsOpK>Va=s-3kkH-jZ_<7CyAKim~GZj)8W3X!dola=3
zwkp&FKj{KLk-;*k67%D?@0I(GKD^$A^p+ZUj9UvyKD8dBKzCHNhU?(#BJY1WX>|Ui
zb|)kc^wKy#A*r`5nh
z6tz=>0pS}ob+?x5bboy7-*kc#5z5;zL`G8w4n?ACjljYbJ-kO1rxKYtqj}+=*s1#0Y_zwlN_OmN73FV2JPdCqPQovt|W8&opDdE7NXYHJAcFl#sJRM9bcrWaTb
zKNiVcFCC5TDO`kjaF~Bc+QPsGCiu8oZ}L7;^idS}`M=*ly|O@!%MLYU^#ryPf8qgF
z)mX~+5nnF@q%@|7PN$d5)sQ{nt2$^w;acpM-RYP^yNEtk1Eeogz3BFaJlx&crULhR
z(JeFMQmAcyLmqw@hDi%$(_MN*CYPHnxw+kUfJ@{~JNnpR_G96SC?dH->naMAVzXXQ
z7}CG<65ap$=oKY}9`XvPaey!FucxzfRBvDI}#&+0?}%zE5mk3|9gzn^n@7QIB_j
z%U{uFSpp7-^*<568t9MKF}m4n3s1E^r819|(*M%}cEZ&w9xK62ba^egBW&T_eyA;nA
zMM_F0_G?Q7)b|Up89dV1xj07sm-72baZ^qSUQ~Q?eJ}3Z>ZCp*WkkhZS^C^Wd7`QD
zE-l57R13|N;rVc<=%hUE)h3mk!cqby9!h~^LdJpBBzb5)hGc>xQayHsZkVPz44Y@FXytUQT0*|{ntdBp#Yk+Y0J^id&z?BTqZe5Ctk99tW
zJ9ncWJw4A}poaHWQg-yoAvWKjn1+WlJb!LcA%Z&>p$v~&2V$=V$)-1#c^d19q!y#c
ztzBHIyts4R2FMkxM<7ZGmOmAxe(s(=k{xdH&$$
zNCwBUwK|Be!X74k^bqg$qb1Pxi;ef{z{3_@e3QLTII}*hS4(ucvo+DSO0Vch!ZS5|
z97;d!;@<`-DfQ&ZM*W0;apMz?)A1_C$VRZY98&l(`8_!$hdMTzg~ZYJmH8;n)*TK_R{b2l>N^o2WHf8>
zAjU)XX@xh|#Puobe(@KqDYchFbDqla$boKR;8xu^^1=?T8cGyWfHO(|RTxrjjE+@0
zNndka{RS)Vrl=d1R8!KqBes60E?``3{UyJwh
zvIr$Ugr6VYWiqwCHYgDO5BD@~>%Ev*8hLWIdALV-9ka!#+glK+5uaP<6CPL?>~rcP
z=hah0!mlLy-kfJs0$vG^!yDOIBuV~5PIhpUp-V=$z`w*pENokLTWDRYM-j;8$-R#+
zn#OPzazHfK-Q7ndEKV)8Qm1b%l;@79OX&j-1o}>5nizd%hMn8
z2Y_h;-W)E0?9>tRHI)?}n141WC{Vk$VWPb2u*#=W$ZST6vcHZID2nIzpH75Q?(cVz
zqN^pg`N#?mbRwNOB^PaC6}N#7a9@lFvZ6p5LF8NpL=aEXFK|7NiKk
z*Y(QM25hU}2kU>Lt{MGH;*oH>
zn|c-1S#7r)ErEkqyH0Xtu~V8J=>1aIMY$HihhXnbW1F|Sf=&+NM0WU>R!4^4Y7nTo
zf4@z}oW=V>Q*-`)mjv`AIP>$vss5r|vE_ko7%5I3xQAUx#+giU`@k#ev9B%Dzu722
z_Z*S5^(XR1U~sj_n88p3VjMkbR|46DCqsc9EqHkJv9CXaoAWUfd}84zKu#t3lMdh7;p8wt^;Niin}-S`Oa0%Xh4n#N(ys(s?XI@e}wa)~%l#GwG0S5iR?YOgN2=)5h^>4lfWW{Y(H!Aq?AI>{e
z3XM30-@ZrPqtPei2K2TE=fkk~g?B*IB0`5!o2_jB6V%?f0(4EkHARShl2L}>`Pe`fav_{jD&Y#eiHof2f
zY2C=@z2c|h_>;YN_+9a&Epgw4(dqgRdp{OKn@U8cv@%8mM2D&#v#`%Bg0|<*z7pux
zqi0mGiR0Ee=&ti`+?!D|L>_hoHGXdNbG-+MuI^ay@*bXRLIW|uT(?X@7U&n<0ouOn
zLL-f2sMWhC$Kv_YXzJUt)IB}m1l65SgjAhEv7@*8Q66h2J7gNW!^s6C4uf(j%z9~1@XxkNVM;@-4{l+}_iG3dHf3dO`^brF`@%kqNWNxlQA0PIONb+6k
zzc=?4u)GdxKjMx@Btc0cg486M)KU{UC2}@*{~rU&etUat)oqu@K=TAf_N-yB(&v+h
zGb!D|HdSnipzoc1!Q_xKj=p7@nH&U`yo@7)V7{eGjzx%ZZQ
zYPva{=QFiMQIqx#aDQ;f%NuOEH}fd*_N)6Xo$n07{O6PlS7KoJksG)V*SU#=6x$2v
zyDj>n)G;sGA$iR^tN2@j}x{Cj6+yh=s
zvu?0Chee5mkY`nF?_wJw-XR~r5r4HZwdc-mS|;J7-85h&X2JgKI*3q!N^ZEiJJjlP
zHTE!7gh<;HymP$mjSvfp>2`2gCKHpj&KDOxWcKoDz<4zMJ}5hm9eGy@i7bPqDvnK}
zFG>%^v@)ZD!Rl6xdTtiM{UosPg28nTxXXolO_W9lU<lD}&W+?-3`UB$+tab->vU`z2KO>|*s$`uM#2GTWs~#s~I4sblYd$-zE+
z>F>Cg&o9<__S@?$XW>UZ&ud!gEL4?Zdhl>1ki#t%
z_lOGQWV0!DB^Dfw^Jx8k$n4<=<3XUn-eH)bRcqA{U@#d>3y7%`=lf7I_q_t>&k`pEqn?#TXo3dOWG?1)U_;AOvG;sWkcEUm%vSez{<opPb^hKZ?0V9=2SWTgpywtSo^Zd%$qeK;bdg-|f7uxRCfR
zRAG^6tQP3T%J7%BU`te&6xOkqwC9sAiyaFE4;$BA8&X}`6?Y<^%tfBNV^j5=w+w_}
zJq0q3sKD%=;PYH#jE!XrT;RR*a4Uh>roTe%e*_h&Hk$bu_Jc^OpYAd1Tkv?j+izva
z6BFQzHL0q}qep?4L$So*n1CUQX^=W%x_@@C-(Y*Cc;NBx05!^FJiXQ;&SS6?iYD2H
z$<8iv6G_e61o%rO^!&D^7_IJH-n#0wL^6mjLbHbs?E|v=2VrH-G{uYCdu;X6sS6K$
zYq`BHDBjUF)EU0F=hxo!C%dzQITPDXG920+)GhXE*6-Bc%Z|d4ku8sh2hCm-+w^e`
zk@Ro6i@q!wZt}O`uS$ZFCm74TVzH~b=2_`W*3Yss-FzQndHj}Vy*6D`1C#b6;Z}(p
z_Qj)@?p6z<#hXb&JMp~dAQnEZT(R5^TbjJ8>QmG63w{jg=%^g^O@>;uo7py6cOrxV
zME{D{|H{4b(1=B^65`i=|9Vs8OfHwqOQno3Es;VW_V9YQFFR4l^LK!gYHF-MqDKk7
z|L6SaE1}v93GL+C&#deJ`#aDmSZ=2}Gh0;kz0-~U8V>cX7oR)UQ~6hvC*5MZpTFy4
zcOxw~Gkj{Xs(j2^IC3B7Qqnfo*(dI@2R!PE>CRD4@x%c^H%AYQOsGlkJ42{
zxWm{BViex$n(@Ld?|~Brw|5$~HfJ9*`nv-B!&8512Vpg&w%$TAmFRC!PndnpT4iZZ
z4a9z33lE1ZON>(qK(Yh>-)KCG=LLhsrq7j4t7!Y>I*cpZ|PiVpTN
zEXhA<*(_oOV|54sDhTKnm9UQ87+~2t$%~5XUwx@>;S4`%C7U`<
zeN`6)f*XwT*co0OhqF;@!?^w=@p(`v{=Vbod*PgwuIMFYc#&8Q2F@V%r8
z%`3n!zhDoi|E+UvZe=G?xQ?s9me;l*TmAZ5qsIMa;V
zV~mb3zU;uj&iB7Bq%I2Oij1gy;Vd@Lk$>%;-me1NRNQ*sLG8PVLbpz3iiojlGWyD=n7VJ(tn8#k-*`aQEaN|9fOMF5?d~1vV6d-GZ{+o
zZucDN^6em-{_3v%-wA(2^taYp8M`h7vgnxy3#1J>2fnJfXZeT9S>=qme$Qe8p*EE0
zpPS1B@YLB3lDAd%TC>)QDYK1rB}>_>jFIp*L3K%{{?kryJ5^d+Zzk<>o#sbRNdWN5nw*9p{h>$==gDSpd!N5C8C{q@_Uy
zF)TfoSn#pl&3yAtLzd^`+|Gk}=LRECVpK)7-e2`de)z`DwjMEs->>|$PI$d_(Z?ZhJ>PP{!M;rb4yfjj-eEr{qH3t=gfJSkWiQY9(j(koQ#^
z%$57kWEv>gWa^%>t=r%>#~rw7?>-p;(5}Lqrf_nhP4wsC(>n#3i(=5Wa8+Mjq}k|Q
ze8}Q}*(+n$*ov(|jSPR~%WCxqvo3yUSqC5L{CSuD4!{^!nG4;^@TzS9Mc7X@XT!^8
zTks;+q3c{$wLjly*hHQ^dosg6M8Wx4kQY~dy1xV9_Vl$#+vIJpbAw=IzE@?CTqVjr
zgsU|KYu9E!UN$|-(#F-pPCH@-yLRXy)0>Bv<$e|er5*>$Iek@m@)VyhPDz1RtR)T~
zt}vQs`LFf2j99C$r2fW%;oukWVHaYW16sF(oYXIXa?SCom0kNA?@LnTSPeC1c8b~G
z`EL?C;SY8Lk^R~xHYRfB7_24Liz#zi&hoiG@}vuhqL=V;mE7~-Qwb$qrkn|+7j?S$
z^2s(MnS%dq%a$n|lB$c0ba<8>e&FIvGvtm&A$(Mw(>o<*dI+>C64!
z${!-=wenQtvK~@XV=!P@a@ESk*RuL`=rKK`$1mZYLo)&ZqoI4P1v_9fEo7I;Bxppt
zcond|rH{1aI!Skh<5eRY?Pp~V<+Egjwq+Mf#4`5vh4p!)ugceDhksJOw-1+IRE8E?
z*%Xep0YesiA4&b!tqelHFs-*}&8XaR{->t?%FT17p@XWmql)3rR(LW)kN?3l4JjQ{
zRp0wG?fuLxj?(*eb4pK>vWGt_`y3uttpg{|sYMPEOF`dMcFD2o#*O-d1M?xiQ!(rK
zX!nah;Tf_~rlx~y-qF6x{PBACvP=sbzWdbvPI)Hlmd7A2;(pICho!hF>rBQId97nT
z28x3VZ5-i;>Na9U7*1(@i{z9MBB^};&^$>5vw0+3{nE8dmi7@vXokw
zDYccI>!tM+)ZNw{|IaIZzJHNxTyBU%ph&txj6=wK<|fDXWV(MgdMyOXgI;xG5n~0q
zJwS=PwoRRETI^#+0NWQ;%t1{{FX
zx%SfCSpg^P;dU8Fsssv|7DrEeLiC2;X0W`CxkyQt!6FGXn~o2QyqqaqUI+Knq+%-!
zZQ&LC4m}lkblBz?&}6^Uqc=wR4zOQVoEl=aGRG?R=KO)(j|BZb3oU`rp>2?y%Zu~9
zckiXP@4MyUk9u;&X0?gX45Z5>NA
zbE0^PtztTAc=|dv)sa)&O`R#8*FYs8C8of4rLW!N(CIy^s!o#)sWB5fR??aI&y2ffgTjJFapC@M?a$m
z^S;|zA9=WoZi}DpLF+yK+PaZ}+Wg3cVp_f|4@UsLY5-ru{^c%fDgauJ+p0gxyf1^I
z?Rxerrzrn}Q=-rlIb&b{IOZW;71zDYzof6d?UFgwC7;22yl6iiyfoRz
zWNLahjpcL0KMQ_(smJG<-pkkxte)&S`i$Uc<2JkGwJ+cu!Lbin+I;2p6wcVpKNNR0
z-lF!B_iY(E^|X-tAY*)dpwAUd<}8swY2{k1!Vw9YHyyv^iQ^_-pi!Tu%I#MlC^Uv2
z4m|#nKX`{{%}1cNyH5504YPdlgudPw)4r$$(Ti$gcD_zslCGhQ-z++N61l5~2Te&*?G`rnkz?7wl3;-b4DsK9w@~
z_!#*!Z}xC7Pc0a*Jg(3FUjlIk|Y}WSewtBWJOh9cPsFQlk_f{-s>xQ$t*>ybyGAAXK
zlv*=xDkOLwbhB17*#Em>4$a;kTo%nEn+ol&HT@kuz%(38wii{$r#0y;4_;ijS8<`?
zT!&tg4t8T_Jycm%up1L=Oo>njQSxTEl;n!!jRRxUu35e2-oI2$T7&1voT{F|)#605
z*@KuF1}m+kj!jAa?VBiZBA4O$*2WE!h9F6ge;iAkRrM3hg8gNy&v^<2BD#T$MU4c;539^6gfg-Ex)FsF9
z6wL|lZ=S2_$WT_LGF)Z&#bo;Htbt%CX(ESQ{m=ETNi~PU_|ebJ3GTOE^dr0q=PLuo
z&biZ1gRJf)G+WYz-<@hB(An4HW{zlEUiwdM>Xi|3Kke8JQ6jrxY*X1TK4!7ltpSa9
zmS@u_DTUHH6}vANzZe`&a9qM}g@le8?mc_V$?EeiW{zfUCZEsoQthV#f8RS!Ki|T=
z9OaPTpw#D1>Cj^er
zT+Gvyqlr+xtU}Iz=NZq|IsfKiWi%u1*5vtMGoqiiO!VSfQ{UP9W2a&l3c$xpNot$i
zaRL(jmbflnJKn4C^0m`z&7}K=AH!TT$Ra=B1kS8CPoDh4osME1>Nk
z?+Zypw_CK_RK5MPPbRk1rk8FA`F`qa4eC&geN!-!8WH$LmK#<9g0>b90p=sC!26rEn23GKi_IjgUT?YTgg|-CS9a$<%GmD7cEi)N-~}HoXnVi
zRH598Q-e2*3Zmw*@kMbT?of3l?`~eUkPw{x)kIvEoL>k_7$08XwMo7}>v)}@+Sw_o2j4%ZU)m>>
zd2n2aQ}15L)Ro~aOZs?9F*Ddk$L)_&sRSWegtipM-kjijmS@7&Y&j4axHOm}C8THj
zU1~|xr=e>(r-GvRz)GwCh%A0yNIJi>wgnEe_~QE5vnJO
zAq|rusx
z?yP+(izI2lIZW)gijs?cf7uUC&0*b5=JMT4XV)L`9gCn31*-KT;=?_mi~*mK#R~HZU*r+(Z*1Bi_{w!$Tey17
z)YAH&1I1<3T=#CS&Q!A74)*lG^;G{J*C=&(?s%K*KUa@WE!wK^`{sVxFQZdZVY7Hx
zSZ{nG)xSJ+?dsj~$j;iLmF8QS;Z*fl9ubAhPFBm24?Z+dg>HOvJ#MTRyMxL6bRMj6
z5b4P`sJx<$OGSDzEgdSD_?q`sAb6VAxctmngaVf8AJKK(CA}{;ir{wn`Cjl1
zkJIp#eO6;ftTg>0Su|4PzpvQL<^>Z)ceQYhQ*5KqI5({*g>2=%F?UwY
zr}Q7&XSnEl_KCxoV%oz>%@>NDLL5&cL!t8FG;JIlEUA5#Q?oEC1K&C)Z2wARU~A73Fj7CZX5TNavb0Mxsm{C~`vl
zcIJY-mYxPfTGa+f@nKItsCcXXuiF|OMvwcH_#@Mw``pC`FgQLEn-r>XTd;9bw4Rhy
zJ&3e?XO1?WGklKLXO&w^4K7}ZUCiw?HQ-R#m7%EIyMtp5JfQ|lgL)2>@7QxoB_#4l
z7IaD{Mf4Tn_mqvJQCOU1lL7wXTAk-nH;Tw6k|`WE;}pHp?Kh*$Tw)o1o^0e804ox
z<`0F2a;nn^vO;*$0~u7j9^Pxm)yc(j1{Ac=rh5%>9#M0c<0PjBV#oDD3qB%rYR~=W
zXj_xEK)}~<{|7y)Ci;tHoI>B1F>1j=F&jNw1Z4L-gv;_e%0SHk%`|GTNi(6&SPMCv
zJ1F&p*M_uWA;Tnr8oZU987Q|@zkAd})re0rNF`A^F)sdshUK){UFI_f6S-sA6sM*g
zFB)Di@e}bDGAyo3KcO@^buVvIv@JaHoYmSwqM1@pO5w)vJ)l*`z3k%p1BvYEFd*!Lm|EL33?7p~uBG5a0!=x9*L*RW{$jn^w^RCH`
zo(=a*XhigS)g-2EE41Ei@Pr03zTVmS
zHr%*$#9}+__XUTYq@Yx4hl|#;jda4wAIuRQ`DHPLn#E29mk@I4=4OHpvUwU=y_SP5
z^NDTyY2xqq|Dl>!7+TPAfAX@LNb5&!q~g!OwpgKispz5m{os=X?w_y90aziZ=n;eV
zz}8f4{I~7}mPNZAf}_;nTtW=ix&KS)2%ikHJR3ounr#=CHj<1zxGGxq!M5l1KY9*6
zcPhk}L4FZTmAamY*@_*cXA^}0Q1)`dG+6_G&kU`vPm!FVCnkF&P&-~vJC*!VLF03<
z^hHFwM#e`V?+`t|zeERFUiW9TdcQ~w7BDcOBk2BsSCA@XZUP^8X9Am8_m)~Vm;R5o
zZH_+}?Rghh-kvskc28U~COuML4T+XrtNQbm$}GlbR1&*GLnIgK09^R70U?nH?7E|}
zP1txiD6$e{J&)z>aRB~=SM-Vy!bkV+I??GObb6{${`GOrDku2UEx_q?(v?asvo245t3Dkhck2I^
zin%cm)J|ysK4MWaXz{6(-m)#7Fau`Zo;zZ}4$}vZbM4|f1gidHsiYfg|9;b#hui|H
zw+J_~4YvGVqGMah&Hwj*6D}D%JyD7~5*06-1o>YoY=aZcJIj|tPwA?>1sp82omvk3
zCa|N0Q?;HU%0kCTK7eR8U%(XN!FS>lNRV_CeaTlqyi7$7eVhQ=jh7bE*;7TY(WJn~
zE@lNcZ*3=l)qZe`X0zHX$~Gw9AXfJKdLa9aO#)i%R!iD5mCv1nEBkDQdRc4WKlbV%
zJ!z0a|F%Ayi8uPuI&HmcIJ{iqq1nX)0Q;Q8d?JXIdtWkNfjrMHh3dpp@Am)v;;ibN
zJscmd#@#8!9tY#_oTPx)Yu
zF(?sjrGxjpgx~&n+!yExpAFvg7w=gXa>uyY_E(I%Nt+cux=ZRbkV^ZDLVf<0OaFRR
z4=1sg2e~gHHjg~1Dc4c2Z8!2t=fNbuy(LSzhuppMk6~1`LS_6av=r9
ztu|%=`f;^{${9sp3@smnC_PP5l%AO$aXGv}A2awH*|`r}yM7nB`>3YlO>;P0q>J-i
zIPvN{T-10FCD)ri0_x;@LKoJo!ZeVDzswxGD)?^IS(z=f>OURlwg#9lH!fpakN}peR
zON$*)7m*Z=;@!MeW1Jtm!OZXPMu
zEuvOe)#>wz?~OMt%n4>_<0Q$YQtvt@Wvu-?;aA6;!B_Crv0Q677(4ZYQ5U}9Fkb38
z7<(ZyOLdZu&3}aPjj6`i
zx7oXATRk3fcL%w}vaCz5AK79%{Bn7)=8ea~kdRt;rv2cTLboP{I&@;Udz*DipE>|^9LezA?bK+OB-
zmJeV6aE-pDmn-X0p=K2|I87_YXCn5-ctbAX`KW(~h-fxu=goj}PxnN3%b$$7R;U<~
zi=us*pnmXS0~UuY6m48m+D{=_k;0j7q7H82>C3S*X(T`$*jf0c;j%tZyOu#koo)o#
zhi`QH2v4FV>wE{~l1&Iyh?GS0e{@EM=KsU5P`SFh+B~|!X-W2B9D+|;=g9{`Cn7^9
zX_Rg0FJcs}bMSCcGjlIjB}YhQcXQH!AWut%M_NRlJO61anWY%o^W_Z9X926>6&+1I
zVA(eZN*{AS>8g$U-KUmAxMX8Sr_kLxNr
z0;*_RwwswKC5p#{-^sBCd_K1IR8FTaiqG|5JaZkfQ9@*IfuFxVqzm?z6-}!k%31Oa2>9)W%N9
z?Oe>wex!VuZ22Y|Rii
z^)AIek~{k?R8`E;OZTMglJp$l`Zr}0F4TEUu~Bq!DI#J+Sx`q*=yYMt$58|FBdY!|
zReIiAv_$o?0_iQZcyNFG{%;8k*
zx;uqDS4wj*)UzOECvv5i&S#*?uQw}&J9rZNRpQM>(l4{qv{`w@A4VQGPop9P-9XW(z`+&!M`Wr~Z
z=26|Q0VpFEKe$TCPc_;mW)$g+?8fGq9D6VwYK(gdkWH5*Y4|+)$0V*2(;8R!;-zfI
zi|nrCV(r9yhhVXG+*`ZW1DP>Y{aZr%9?XlEcK|-^+cJ&K^6gL+rDyNBW2+HT?^t0|
zJVv$DY7a~M;H_O_^0rAF)-!4q^SE(2)_@G~DB7)Zpr}d-8cy+0dw$sN4H0PF^$EFH
zw|7Z6BAWBy?aVU;Lq1lflkK4^?K>!-1?rMWAig<5w+=6&6B
zHxd>A5lpdMkNcrZ!6T_6x9R4X%K>odH{g+=zWEuG8QzB(o}6hX(tXt>QWL!{2*3j0k0Q4#K?(sKx}A9lb?0F^qK$R7wHRv9b8QuVX3tK;*
zT3bBdBVj;DIdp3D?=L-&E|_h}$9To20AW)S-EKQ_JN3RTnh{`DQ)r2*<=+5y4~X2O
zmC#1d$G(903g}xWD?p2Zy3SJ>O(mr+r$Mt$`Iu`Z4KaNiLjb;-UKJkzA`7S+EYMJGbN>uC$5@9V=4i8Jcp%&*P5e@hYi+
zMG2d^gDL794w7666&C;_=hF}(5oGExTnTjs0BF`3A!NYLVCqei37So0Jg@e7BLU#q
z{v?8N5djaaFoL(W5xL%P@(BR2>>$Vqc7AsSbQ+LLYF!(5tEuEF0|GO!8SI$;thUIC1tv=KmKm(Q=B@`RJQ0EkZ#s8ek7`5$*wRfStR!EW
PfOXOs4&qkq!mcY4}6E{Ih&XpcPh`F=4W(FO|E-IDn$5z+>#)=q4!u=obX~
zKH0CGn0W#;_ER6iRBIW_)j%n$fxgu0fr6O(t4K3{Sr|q?i4RMrYwD8&|em|5zr#=6Pz?mtY!wf+EFDhXyf
zt6c^(2`iHC#g&q{-fQYtzW3j+AFY?4)ls7UBL&7XjD9`==f|kLA<`Mpdh9O9gUOu2
z)6*-$i=m`W#P_H=Sd+|`0g|bB)*O`5>f{PfEULONjGDpVFOpeWxEF+4BCVZ_F^LnR
zC8R)rzIr73p8Le1Wq;mdM}M#%SUIA}scU$-@I=!^gUhc64dUqDeoR+m`+3QQbXsA0
zkyZW^-zMK!O#GK98*EUk>|TYlqYZ%V9o(CxGUDmOey?wlml`}2-T{2%)U$CFI=O=p
zRMlTlCFCDVKw^`wKN=$4Ayb2lehIuPFuW3c6f%Q?dtgbyF6XQvaE`@G2H2$Ckc=^Fq{SavGHE$Rd#
zkZkn)VMzH^t~mlGYDZ!}?I8fdSCGA)A4Cjfs)DZfx%KcPzII>=TXrTb_k{vu-!|!S
z{-5`GHvso*U7dyu%^)DhpD!4ptwCPa*Y*_YEdk(m0TE8_D8mdjSQj8(Z-w=AfkUxF
zRWREFWAyCMJFr>~GaKV`v0d>^Wvy^Z4xn;L|LV;zU#-JGt)7Eo?t7e6*LpxEOPY&T<5?k#Rx7zkiLS
z%8dzl0U+&Fu!34YYuhdX?Z@(qXl-%-n&rmAovE@mTp{&-Tf2d(ZZSgD8Fq=c}_TKbFZ)inPb~p!oldKl#_oGIoLnneKrBG
zSpT6nfzrpJKAE26$*mfQp&+Hdn!ONP*U%z1TXBdxnlq2NMB5$%OCN9l
z%vnf!bpFN9*6GRssNK`)x(=D6VaD&w+hHban#JUylp0dw=(KgYx)!ebKb5HSEOC0j
z6+>B%R84RwQBWTJNq`CL|5Q>iLWi;O%@wBRY4y>E17?!qJN-nicAv-fNoOMtl_yc5
zJ+JfUKsN)VY~^OtbFwg9@>h=2f+^p>yiB&zeLa$ra5u&1pYfS6xpbo+f>kk!ItP9#
zC{1msj=P(bClMH}PelEMAp&ePld-cgGUo#EB2S=XErs8_D=39#{bpHRVRWbIC~
z{I@F}+3Nb0ICu{oC5aR^oP^Fvte7c+{MFIBkHf
z)0oA4-idQvX-B&a&u9M^?*Y3yZ#&pUrH3(?h+zdw9a6%8hL!SY=TD;Ff4)&s#iqhn
z=mVBcuS{!#bmiF)fDLI7SoDO+Cw2wibs=x09Ir>5w7}VR_vR&(rhJVn&L1$r*$G@~
z+mu9SKrZhVir1gBtHK5a0zE4S95-qpyU#ah`S_$X=tit-VNNj-dqS?6fyrR7dQRnM
zl;ZU|JfyQtONI{
z^L*PzU@oxvpjCzq0BCzkY`>|Io%DS5*f*1(pSG+yzR_iDQ}7xgyQ|=I&B+XXvVhRH
zQY2xxQNk#3oWUV>-y2l}+?OhEeRqzc=E~g`h`c{5cRujd#9M#jo#O6M;e`NG9+B`2uNtOsDWwrl55
zU6qUd4i*X7zhUVt;Zn6DZ0N=i7Z^et!$RIx;=T_rp&{_PUoQL
z5hy_%VN&?dcQUNe1!mYk#UVZ36C?Zkebu@wwYcr3f>
z1!t0Y$vO%bc+3OKBl4AuT{t#WpL**h&C;J6Sk*f`4&;ejy@UCO*FWyVOutW4+eVul
zj$mL{ZP?UWn@xInbaeF2P>^=-OGg!^biy}GT0Y=v{~>0UE5!fn`Z~5%{qMoq4`j7b0M+lt*IqWqbAnTwo3&bsxLx^Ngpui!SXh&sT15L
zid@Piacyw&yy-~Lts(EmFz{$d3ol}8m
zdco-naV9-GpX731Go+Rz`Y!K&rMvvu$aJXqPiY~G>o|?&hI-gxgqt|Wn+6^5gjG#z
zMlU&;SkzN3g$DF@U6nQ_2dlfW_rwkJ?nYCI(1Y3<4t#HPXcPQj5fNKfT~_bVpZPzy
zE_m8#rAk4-i_C%JK&WlemnM2Mt~4D-ScGyiCtY+FROTbf$~u~fYa5<-pJB7ZPW~xv
z?koGBn&9=1&>EJ?Ip5v!T?_3#p@Y0pUC1VjZ=1%H3n5!sV_Ll)FC>t=@(q$_^%t_e
zjblZo{wNJNshl;js%-Z)>?B((Nlk;B8Y(%V8(aH#a};>MWC*Qhcg0y&nhfncU0P{2
zFKV41)j2o!Wc6gInN>TtP2RA
z`)4|}&=tMwWJE>h{2?89cTe{5W!oEs`44qZ^WRo?W)7gA;mbxGmwJ^Tch|!y17{o^
z?#^0pdC)rcY!Ru^wGzrTK|7V_6)v{RvQ&?Rcf%gM883E+DdGhUrGs}oMGpH87@<|%
zFE)gP?w9-QnXG+a`496mz+YkQMmt=xyE46I;MJ%1`g&9vHG!+}cPAGot+q|93r
zA~JMpaNA^%iKxuyt+~3B(W;TuNAF}_ezoy_X}e#KhnfXpt!USdLaX1zMxvz6pGnab
z)i0K-zzy%?z*^4(SCA<{$#oJN|1q`a{RcX3^>LckLbh4+losys8~Y_o%>VvFDIIfd
zIo4kEWne7zlU7~FD7s{jcj<8JbejoTYpa^6%5|MK1Xq6oVjib#w`U5eA5T
ztn($Ow1YbKG8gFF+MMsH9J(YI)!1R
zqjaa^d@7P+LRq6;$)CY(0qIbX=ji;EPjDV#hkzjfKW^Do)KlSV5x8~Ar5odNO2hgB
zW5s};V-)?he;Tyk<{9IPN){|gft^K2tQU7rA?=sH`mif~T9kWF2B@kwV1%Dsb%k5H
zVQd%mEV&FKC8e-2`1~y?0?eB|rk+fe9H7X3F|zIyZM4f1QHKrv{dtAbPB#amcB;s6F)BQ6>qd2o}q!$^#N<466a`MgFHA
znv=NN7A1p>(fj|xS{_lhr)?}6U>|E!VTr8>=aF|MTEweG||U~`?$ZG59&LuJoSM8
z1#(_r{@*q@d*a@6Rd?ym11ZZ7FB0;~A(X5%dnUu`4dp2qV#kG@mspBWo;qFH6c!iG
zo69~{30!GDU3%Xa*qM#+nDXyDfl+3O3m=*$U(RibM1(IrV%MX7F4dWe<6rG+4avjk
zXTc>9@nRL!V`fYf+rB`=G`%#v58e3vrf;hZbjx6)C;a5G7tBk*uD#6zA&2CmCva^(
zcuJeJ>zQt&)CbXk^iQivTn@Jj`k?!id-hdY>#-!LQJ4iN-=Orj!HjtbDsrqBOp21l
zF0d3H-gO{l@{PGYg^zv2EsHI93iy?SaOoCMQJE5-
zugyi7Q}5=E=Z?t+04a-VptJvsER6d~nO?W2;XDDem>BqGnutB)p*{o@@&Jq!fEpo!Lm&^xY!K3RbZ1FAhGxbh}8xWGsnnF09z}B
z;1{mb^fsGb!qkMGY*PR%?%w=2n~L;+t2+v{P0Y-1fp$g4LqN)C&;;-YQLn&7L{A~v
zJ8tNbDe=_9B<7pUp(zK
zamaO_i)1E3QplcEQG&z6GN9+01OMax5RA}WAYN1Pgv_zh=g@2K{u#_z6bi_$yqD(%
zLB`}48IUp{VjI!oa;R5Id0`3fK@86?*f}3#IG-vd3C0ceO$3Qx?@ad~ndj4gSTREL
ze3lh$+fiJnX%^p!^7gtL)4@?xmUvWM4kLz2SJ}{0jo|PJAeNzgxtd;Iyo_
z{&F52iPUQ2F}uiuR)Ig`uD@&OZTmy_79Zq0+cegF)njwz@@~BQr&QuHu_&pxF=U$a;0uwaZK{~o2BF8|kNs;R)-@5$$5pd)|R@oJ%M+LqtFk*mZLYE0){^q>c>yY(c3daG(m`t>*lm&Th?zdZw7wZ{Z0V!%O
zMamw!GU}}Uqur9(I}5*OamTpwE0!u{|HD+)8MPc=<4Lh$e>;KlcFwu+Yc}iCO@&mA
z?w>~(ez{rLGKM@aow)u~Wb}1mpJ8g=gdg*@ra#9yf6{l-vBBft#cLCUixV%I*M7kS3f&ksje%F@D`D`6YG;fm&$$kdL=
zjcTb;?G(U=sNuuBByR6rG*pH)t=O*F2UjQ>j7}C1&3^L6F8w*eE`(_0)?c6QT3=1a
z{90?-SoL~3wPn<_4@2U_XyT?Nx&Gobs~)+`Q0L1%;qJ5rrzH(P-@HNB&C$g?mUTpz
zr*vp|?&>3(6;C)pv>ncSQ=I;Wi2dZ=6d>ECFLdKm4r3(Zri!_cuRO<)X%VoE2)x&b
z=nkZuh>+E;EB{;C&^p;nBM`ls0s&&fVSnA*x+4|P*rHO6ll|}E6yMAm&KKEbPE8#}
ziyTk~Z{&pBgUab?{H(GPcZM7pc&(y)FEwSulyF<2Ta_E^;)k62i
z=r0~}{1~(g@d`r7@$x%ctxhm!kN#EuKkiFB;c>`C7Vq!X%#R)O(x4Shjy8){Xjyk>
zWI*cBvfF_~BQ3Di<`%=vEcXEKLlGBRGVzs^9*;_%y;vRLZC)1&@
zv|}DBz942hm?m6JQpk8R$1iKcgKW3_;j{VGY2h$(-$1B&_?)UA}khO%^`H;D<#7q;a+Z#oL_1d6Z5vxx*`{=Xd;lxbyOpF^7+u&1WxGes0#DN2`iBeaB+4)a%F4`m*D#8IW)8wB&<#h(`bFka-S#K+$J7Ysc@ckTBJRf?#AG=DcKD{7Ry
z*TfkT1X(@2rY3zu5}hf`y@0DCSqg;EhcABp>_F5d7$Fg6>G!qJt?wM|M?A<{6S(H^
zE}dh#?xCOZVxZTenCgNHx@;uYU^RI9WSfzsx+p{c9BsP|&z&_vD@-?a>S_g+=eJ5}
zS|&W(x!yd0C-N)7s+^3K>$k$GC3l?*!u)00>Eg<2N!W-Ak@VPumf7F$3XR@cGaou^
z4&>)dW{Zm$KZ@ViOtmwKw@eap3QU76BB{AdRvRsBF@a4th3XW1_GcyM{Y`2UyXs;=
z95GN}J;y|-FHuK|=b1bn(T;H<%p6p%DDAzF2JvDv(U}q(&nGN!(VDnLHOr7+nfzxm{}
z|LVvG$Sc=(w`n^*JO4`|}b!iijQqW?rT3h@}*X}d$^SxG{4
zcmf|L;+OQl%yhyPr)QcNRq|S*LU}9!e+!erZMf3Hv=5&2Z!*DsI_h{l9irFfcq#kt
zv-b$@->&R@Wu@YSa?P0LJ9whSc?m=rT0eQjp(;Bt`Lv`|$DMJiWc8`B@Ha}Z!HZAs
zk#Wu+KCQI{s%;5l_%k3lH{y?Yxx}X%Ii8{JmRikTr)V>u^S&lp!SsjHivq$SJyDZQ
zrBk0+de(>Xd0vJG=Mlsr`(P9JJ+QY+t7p-~i7Ca4(Opxwyq-{}2wSQUb}D)52Jb%T
znk3)QqNX)sC7Y>h-I*!~Gl{TWYc)UCG3j8VK8QE#6d8pi)JN;?S%M+gP;62IeUx}8?P9GeA
zb30S$ryI8Ga3$db^dJb2Y1x#vF1SheSCQP4b?7544)D$AT5Wwi1Dm}nd=w|U_eEq~
zkKU##e;vJ0Fe5iJhEHARa=3{E=XNyQR5`(?Ujf$iy$$Lyh3Q8f(HFIF$F05BrrSwo
zw=QW~S`j+ccwhq+IKYiKBc22s#s+dCHveQcI{TPGNmtzgb#?cK(|>qOwTVvaEA95{
z1}3D|m>NOP(=sw$e(A*392WSYKz
zUJPk&t3K0q%LyJ)cu+f`=Oygbx6WAo*JzL7rqQ|t4$GENI&J7hcCz*_eXlE|*Swao
zzfBIR15x_a2SQRp@dbwo$Q-5IB`n11HBZcEE0?UJ`6q_d9@`Yqmqg7Y+b;8KF|4B(
zWA!VQGqDxJYCkfddRf^u=Y&HhlhT|Tow*A(GR=R~WZLK~v~cTgv8gTld&R;HPnb_3
zBkQ4HK9G8CSMYm{wV~^zn$}q0+%A7m-QD@AbY6vZG`U6-D8vMui{(fKG6=JUKG{Dw
zUi=_jzORY%OLb{8GId~|{OxA^&Rx@FJ-k=rw|Uhstf5tg(i>BA;v+DzZH`6WaMP}xvZvp>^KkNJ%=#_-Uhrr377DlZ
z-|YsyE^P|?u?y&s_@_LT1a=j1fy0-!XR4JN;)j%&<0a?(S9ja;EN-w)d_IZsaq3X>
zA0jngkXW2L`Qzimg0Nv>9mo4;;<6K+@+nCyPL`YD?yEmO!9(fe&TIA07JF~sB~=`E
z%oAI;DV+XDUB95?GvIVzc;^0@Q??sfZvSk53|T&K3iiOsgH9_VB?y!Zg_
z4k($=an!c5H+aKEO(A?3Q4`(6^E8kcX+m~vvs)@T`6`@pmLLx%t
z|B4z5k$5Z6XspPGR6NeE9j$ck)0PRBP()YSw~cGfk!vB0eEtZVkOD;dHxMkLXyP-r
zGL5^lb79iIyoMv&lq_z)^;tLL%J$LTLu=|V^ru`@87Gq+WkMECz7U~T|M9|O8ody;
z{{D<6?kb*$#ZDEL)MNgbQq>bgtY@kG=kVzeyGo9XOr|)Lwmx@c)W2N!zN>bpdjY{x
zxAe$
zfhoU35P5DiS1ejE_EQCJSdY0QvBR@pLJf$SxBpV7?1dj40g;v=!plCT+0u7kITq}T
zJ`&SihCP_C4h~BG>J0l^s8eJ!lT~d|x
z2gqVj(Oo%CshJCweY0^eX-<5Oz<|Cpwg~tEf>@N{jPO!?LX`MLrHQvXTCQXNuJ7`o8R+p$e)EHiwNR^hP
zNL;V|Xc+7w%>U>xb%#3W{ONvv1q@4Wc>d=0Ph!(GWwdA$j?)Uy;;?YI>*H1}Bzh^h^ud?Q
z#2eK|7XCwXJ;P&WGzDcBLcEsctUTh0c1cMaV|*7|yEP50bv~7CPIc@sSyX7>M8^ae
z|C%_nQjKOi2j0jhLZb9Q2;SIE8NO&VhVYU|CojGsuDaqe>yK&hHWcb7FsL)$;N2$D
z1-+#pbNjA6sK-D#GW{EyH~G*{@o|3Xa<)8&y?sL=Icf0Zr3HryCssUtWlaHw(#Ws3
zzgn&)0jm)_W{W=!di(r`;qPcuq=fo>|8;WJHPFHkxVN62@fSD!t$w$)Pk28l+WE!=
z?O6g4ERVRVO9yKjrK-yJ@7%QCb3HLxrzYFhKmzm6v3rTHjyrwj;(Y-W)A_^edpSNOpwbA4p
z!k?2;Au|ub(*T3dBL@DlF&D#EJo!wQ_N#crUD|UINojH)w(weL7>g;UIqn%`W9HGl
zfy_A5M*Apu+KGk=1ZaI}pjrE-7;2r5qN8ENpX5MOm%9~)wbnpY=KIYIATul?=BbW-Tn$mQ20e{M
z+y&aG4@<@u*!HkETE!KSUashrnU!+#JyT@B$Fs4W7R&w6PW@Xn9^wi%J#E+Nb6e5gwYdGTs)kSrVUIGI#0?yxq%H{P-zz
zI4w*+D?woh8sSm~ddU!p%k+A55wJ`F0=ijHdwJ3)pOJy_kbk{gzhp1bUIJUgi)_uH
zpcG)kwlh+xzgr9pwM(ngm#OSCU6N8_~eNjkXtwV>8N%pNjmE>wSzC(=CBK`;EB>pl6NLSsQ@x)c0a
z#`bA@E=EGnth#)y^)RaHS+o5aYg|S7JUQ!UgaIbj>(sj-xhyzeH@%
zm4xA_Y$!MmQ7ZgG9V0ur>p0w(nFrlA
zgh6c^L0}YKwWuw)Lz;O+aXBcqX5h$x^77D!nVrhhvI&C!Lu>?3ZfO;tdoswtq@}@p
z-M6uF8FO64+}@uv<*=(3w>)F_eetf4PQ&GvOT+qkbkok(;^i`v30vN-uGq`^4?BY<
z9eoIQe-OEh7Wxx=fH<*!w={|wr~?rIrOzH~jC;nSrHM`x7T(Uy3W0whgt;mxh>`x4
zwG7`9IH}s}#Zcul*cesa?!AZMVE!szjx!HtseI9xBj4&K_CSnsFW3dXsbDwls|Nyl
zBmU)0;eO|;AX{yk>h7un9nfQwMtG>;=5|=~CH%vNF4Yz8YvDQ2nQZl07bSNzmtvtX
zk{Lcry*l7uz7;I41%Ory4VkJ3P!ey`q4B0e8;GwGa9py$X#jO)NUk`8CUGEic8=;F
zx)edZ+6;oFc`yk4GF<};VCrflm2rk$i=J5pUL>4Z-_E}3BQ|dDMy6?{q8Px$mpE1h
znHaBXi2##
z_vM_}W|jMD^9(n_0Uq!aO^)M*86I;L+}ChaJALwG*zESh0CL-zFE<)HmdJ}%E7K(2
z{CA(;B`t3Ei0=yAQmTY9w$>tnRILY1ctPSzKBoO5Z$=?8lYoEF;RB?%D6fh-vlHBg
zTu47X4R%*gpIb8+$&iH~&sjvyQyA!ByEaLnPl?bxe42dIp?W_Y&|vsJoN}sEI!nNE
z$tMM5b41cTzO4TtO)BdBa`vElf5uVoL_;^WYoYP$JD_(zS%cU>(<>L4UBU7i@gaGV
zb-`!BrY+%=i@B9my{xVnn_dSwX)B0zr>kJ8DY)r%kGd@ePg;(TI90(0`p6z=OUIm
zqM@R`UYWU_jDqCt
zOr=Nu-mDtmosqM#&XR^|u%u&xfRZQ@`*mdGVzAW@!{vBu1=Bx2(EnfL_G|`}^0`~e
zQ2;2vGe~r5;|Z&cfL>^M*Tv9M)1@qqYNS09X#u1%$Fvqk7}F?JZR^}iu0YsuIjY9f
z26!B%qP(AZ$wiViC=8{#_m|_|WI%y(c4;4?nOUCpJVsx={*?D?gdL-}!*Io_;nwvU
zv1Ti4p@xi876J)l{$loJQNM7)Gd_(&O5ljhKH*#E0#CdN`m2TRFt!i8VtMDyp$ehr
zl%@gM(0&r%cPn>EPH15HVm!Xb0{4$j8J2HI
z)I^^WtZHJPU{L5?Ns@wPn~n$-U_a;roZ+Kr=@Tzh;97OV^ks61sG%nmLdpYczWv_-
zBx32azU`m2`p=ajHDyLFmQ-N&4oicAT#9OsHD^(@g4>Bawnq+u7XJI1BbfO1t=qSB
zi0&=?LKSv3TX=S^ufqLNRIi2>u0uU+ToSa>UVfMoD$ij3g|hbbt}x4Lh6;R>KN8Eh
zZJGY?W&`#qm(X4og=6Bh3oI}HlP;ekEWJ4pGg$!z31;}}FV=D&lzQo{gK7)yLu`tI
z^Zx^Ju;Ud6l1T{9eQ=&Uz53vqGd|2*u~_C%b4!=zZ83714t&twjbWw1LS`ADh1f2~
zQ8{taEl%}AJjwT0MZerzz3@fqG1;PJR%wCCSl(0-sRBE=L}i4!qkc;b#L06aDFfZb
z4(b8M=u10k+AzB#5jn@?#3fk$`t94MuPV-PKqDmK;AV(AAsTn{)tP2dvv)gfDibgpr&2lRrd@hAGr)
z^9y~iEBtG3RgS9(iRybrS2qtYeIMs~NShmTM*B1Dt1GO2$o^jbL9Ak#FFQSsdMkpe
zJ>Aq^r2ma2&h}+f%(r`e7lQH9KipKF)swCdD%(=z^CdBob%$>q4Ra{EXWJ
z9Ke%ues-v>xgR(%w-5qOwqU^aB}ne&c3l53a5tq`^UlT#Z|3yQaMG)qZ9Sm#V+KTN
zPs0Z{#X1AT&tbTM(%d<88jx`QhTFzbdXC;4iI}k~AUl0Dl?{%jc7|toUI+FrMu%FA
zP$n^7925IQf65aO-#f9ca6llm5m*VaL!fn_ufyl5kM4yc&A<}t;G^r<1AIL<4{8nd
z5ELlXPo4VA!1_swdWXfXstfBzUfbg4j3RO|Q90?ixR39;T;>VIuHiWJ5~y%0Z|*$XB$_Cm=1Mg_8urh|BBqXk^3
z+x}g^-g#3$X!ev`Y`_)Mg@z4`R5G9?RXX)vuUD3R$UB|3qmD8vpf=La^h_ne#`LXD
z6W1gQHk5!J-}Dg(Ab(^@I=6u5SK7rJkbK3_aHOLI{i}DX=64r7d5A&Avb;INF7MdF_ar-k&x(FmFLEB!eEhv^I?|7>nQoa|#&9U#)m*-%F8PXv1rPh?@5J7Z4Nt~`#L=kS=YW!Cok1Q3m
z$5{A1(8Q6MUPm8yeD#2KMqs{!4?DdnRV0!L-S7}m_p=?t#kMgNw~xjb-j(X+K0{|9
zRegZM06w8OHQITKk=q6KcN%>^3q)lVUEQB1n=s=H_iU7XegecjN`|IJmVB27DO{B(
z5!#ru{xM`<)arByNpOOn-a}VHua0t*f!o88G>TT-pXus5gDUXPRzfMX9J}EY{t~`v
zC{qN^9^61a8`UYNiRN0y|CJ_ZK;L#xr#7KYYxt3IBedKBS|*3LB|H^cyjr~c^8S7kLTESN6MyHZ!-WpLfke7I
z#nk?2*8$POFpybKrtw^v=tjooL!;X%ahJII43%Z(z>GpZy2
zsl)#APYs(%4neUy+ATukr#sDBWNC`wbc@d@3pC$UW?52WOK2lkj0BJz2PTK$%_Sn!
z$xkDw$wzGX>ho0GG5sRNz|dCv&ZMt6&?DC;YYk3xB6o*4k>?EtQg+XJ)xlvE7L%+N
z0%5X5XV|W6mYU3Bx42zOpkf~(KR>Y+0aSM0^-{~VhjUhP!$wY2t04N
zDI3&N;t7}8r1134>@
z3Vm)Noj6DRHa+^c`#`6h2^^q8xC-=|(p-#jj7yMfVCojoua?@UnJBoz9VrC2^P1?s
zmvHy`ci?T13o
z{mrl;`>#_*_8Sq@Z;N2X&0f{QeZ8FLvL&odu0JnWP`<`B^gx3?3D8$6XiDbHTU8`1
zq?4mgmI31E%YP8pN_&C@XsWXrP!(m>COeJhm~tTkh`BKddkUWRO$BKGXD>mA`;w`u
z8!^!B@sJW=Qd03AR(10OM4bJ>yJeR{3{difxpP42s_?2diB2pNP%}W+#qLpd-8d2R
zUH@`QXC`nT+5l2O0FRbiazWnwimbEUMbgdwrMRI7P)0){bR53eqwy-Gp@1S4irjxIUI=C(}PKB)(v3y
z2J89>H9$YSX-Eu=Y%*#Pc^3%1C(_+S{L82F%Km*J08`wnPPCK%c~vc3dI3|rX&My1
zZj5syr-CK1EoA{>3f!+;Vdi^aIuO%w%YD_oW%_=VfNWw}&xDYOuiEU3
z!K!6U-Zny40RYPRq0-xQEB#=f;yy&{slz=)uF8R~c>Z+A@APfDRJHGw*%^Y>6523^oX
z&%oDF2E|Le!XS$DvVDfy{}H4J#!fZ_?-}`g{XjP&ZqB!sbMkv!_i@KAV^{l919CBi
zX9s0Z-ev$#c!q%!Bp<@$e-;X8UU9qfA9l-eow7s8=d0{H)-?R4)=aHE9a3RXxCD4Q
zq1CcyQT)$GrDzWp0!-z}7*53f-{L|}9lNISn`gXQI@eEDMlE|%cZy_tm`oAu)^{rMwBpg+uO7{A~KYnzsf3uW1Qsit$T3Iij+1%T^
zkO^($v7V`@IF)(Xp7==xX93NnjhzI`q{@
zN<680*4gBXG4Mt{Q{)6!uW6zMcbCihmc^nEiqFaC9MZlgDU=iDh&*@~#~3zk5b$1K
ztlFLO7}w4+nvjTPMd?kQiK0jSHfZWVnlaL$o+)1Bo`v!SUq)|3#;^DJ4aa#MVv*AL
zjmm|_fed;dOiuFxHP`-9TOy@6rLXnOtJY1jOuP%~mF?$+mOSB#d+;!Cx)#n_jc|`A
z_YwwboICMQutRyYRz`1F#P(>_%hMO8m`7K8kG}ax5g7W<&3<%YDxSj&u0ufC
z(xtE;k*Kq39nvKCgk4vQjwKiycJ+UB?7O098aZ^Us*J;6G}|VLYIJ8^Ns9()O8#2`
z9SJ#F5z_)J99WcB=DY~l&f*J>kMU)^O5eSNm<=cVM1-_4(Nwo1Q5$jl*mdqi>Xbsl
zkE>Z;^+Sqt+zf3!xT@(V`O$wTENnE(<)y+MSZ-#HK4HWR{*vC$_1RgF8u>RE>7^HU
z{;-Tf#I)vzak2V6b$cBbpPp!}gXf63h*Eb?)Hk$r*mWDTtOQPk=Vq~h_dYhvtO}1=
zX)2av_z00QFYu^%w=qXJKj9s<-mKLnaw4a7v>Zi(?%^KKgWUvW7GDL8Zo_nohSxRG
z;$uG>qbo%}n8dHSjbe9=H5Z)R#3Z*mg^M5FUfR@CkEGh2rMm4y;lKVQHacPSq>LmH
zCZ!&kc-x&wQ`2GjY@}Q8!Oj9kLAGuF=U%LHUC69@Uc&wQ_;Nr|qZLP4t%5Eo!!4rK
zH49-6ChKE4-+b4&91zv~?9N-x?dandmd2<;C#cP8X$-`fMSB$tf&1tzE
zlpbk$`r}hK&on1i{RzeQnUT)X!@q1Q5INy{*L&kbhMkL{&6SP)48gPOGgQv%^LR}1
zo&4Sm4Ux<0UP{Fnu1V9>e}vi(N2RNje?_f$?x;|KEmJV0Q`*y}iDn)JWjwoYMAoWy
zico=D7N~b3j+S-C->k)oeSBP3hmDn)1NIIrk$|7-T)(f2{8ie4)X4J}%}Fo@jY3A#
zWiMIjIAl8Z+~%_TG!Qm^$&ktoytcA)N9;i7(V}7~Gh2LE`Hl7Gq;5Rn;fjr9_o?Ed
z@?`rr2h{-8utgWRJj>t|_A!TL#gxfhLxcx--e`gkU)(*OO6*=g+Q&Q5;a^)@I<$Ll
zbg3ZWq)2r-us{KC{xU*rm751L0XzBY>@A3azrcjE3Thf9iBo5@4meeOq3
z;>=WR?Kev;tzRw%Tw@AoyY_2(=hK&|$QMCI-W^Q9Ke($H+Vzn?goUR~l_h+lpCUG1
z-o`EQYKs+j1VbEK@5d2Z)=F}qoENeE!d0go2WWBVW6*Wct3riXazOd>F0LGK?v@8;sU1)|A&u;$--p)B
z>7d&2Sz8TwRcEXGZlUtoCq(y+`Ta~9(8a}@3e$r4&vx~34Q2>_W)p`s|MRJgE}
zPb@qH-$yfQE+LB?<;gN?rU@c&Ry1XvTX&m0;eZ@^)p*3lYKitwAGY*y)j;3K<8=;U
zYnEp6cx$A~p%43vsDNDas2|$;pF80>pqDwR02h((`KMM+|K3>afoZx;(!;qR!SK~@
zJIGtFjaI2oS3%wiA?E%+qP{zx%J={OG_{bF5p|@5M2eEpO_3FjJwvJNO=dS5NU|j|
zj;&*6WUnHl;@Gl|Y|gR5ZQR!PI^Lhh@8_=`clWukd0+Q+y8XeRgMuh$?K?PtyE7=Kt$f
zN2a5S+BNrx>RpYSvOkJqFTYPYy0HeY3N*>vkJL^#zJK|~2!Fr6(^b+VrPqJ!sNDo7
zBPm@H#PFl4pbRtplDybOS&uv-=fmISy=DgfRb3x1IE}}6w|?Wct{7UFW-RH?O%}Ih
zH0m^c)6TguDc}bIit-%XRO~jhmQ)Sg%6-UBoj*naUHO0QGObb=m$^%ai!;SES0k5Bfq<_WK}8SW$;lU>8nn&c_o^avXI0cDR8pZEieckGo%_Lo)JLNcTUqYH92G_x-G@$sA@
zbLXG)YNpZ8Ee|*2>CS^(_>~?adSn8kri4qM
zk_#oSs$;{IC=33D**G3a>Ido4AjJt75oLe_R`zNdj%uTa+1E!P-dLG2tKtL4>m@*x
z>kgvkXphKK5Yg>5bKnhnbAS|aHxM^kH
zF<-m73IxA
z?m~EfwPox8x$OcCJPTixKh@|9qd>rI9rGxC4o{CJ^Op!vv?~pPjVVTc8lC;%($Bqs
zwxwo3{=3(y8RKcLbm&)GV+AxGXoxr1QzBbA4U9x>j4CP8p$TXa2
z3sl7Z)+!q**>Rlu$!i*1?9sN3-!a4wkKH!v-h5W&-Lv`Yw%7UFY=vD@_7A`O55G%?J{`uqvuW7V_&dTl>>KMO?Si{bOCz3c>4}+du55wh^SI_E;Yq2|RKU
z4+Og{sDj;I&TlVke9Icm%BWUg{`g7vN@C98A1ssuA3pzibI;OR>4gmM&wD{<4?0K-
z%dQDLEO+?U>fP#OCMF#NS@YWHy{L(4jlYMD6}bK4jv4s6Cr*F`@f#h!bqy89qm>%3
zi>^5Hx&EvDTb7#eJ`#HRG^4UxA=bRMlD6pKm)?vOX+H|+MF39WQ^>>V#gFC1E5St?
z=$mV^rEL|tM)(Zd8K;Xb_M_yoR7dl)%XSeNuA1kZjnIAV202CyML|k#RvasLK?i`p
zoH-<4>;w8|^>I#@(Lk~19LdNa`dVdkha0(2hnGKgR`UEHi>Lb8b8%Ya3+?CA762mn
znj}IHS^2i-`GWZqZG_EIpY9}dO^ro5nlF5=8ofWrYA%Sd{*-{8Pt3Qb=+mmzrhbYT
zvq>utASJI@U?q|Kr&$ssEe3n&5scIWb^N30P7wMpitcm^bXr~;qfn5(G|g8%Viaxh
zf$q~WU2-Wa78k`&U)hXI+S@N;^qXsPL)Z^+14Ah5YYPm|d_(FXO@HHjU8VCCHU_g2
zW#u2}QlT)ln=11d-v@mUXd=&6Mz#o;7MgEZ(14g!2rHH00{W1$K?wO$e6U9)4N}bd
zS=2{Epz|-%;X4=Y6m!&}KC*SWH;1fxnC~3Q6qv=(`bgb@cXKN=#SA%eF>p7!mxj
zMWXApQ`%o^?hizvO1(un`PXT5ZUhq-iuz+63@Jx8xNS`tT{u+kzu=Z`2hc(Al%?=?G0PVj@!!a9&_OP|B0L?G+mrp)6uUBr+LJ$#ET#e1LoKH~K
znNJYA8cT?82)A4*QE%kQif}z@>}FLXzze_cQE~faIE*uiasQ_G(W_nGp_N`u?OmP*
z*DA3~T~aG5YN|`HF6~46a}|vzvmsm|rGBsC24wI{;>1!@6kDRF$WV%M@LOAh05P;(drDq7|z*e?;X=K
zBMa3_EHK?3#3fS>Wvprh*eB>b-MHL%HjSQtO7yF$IKpfHvoCsif;c>tBTWI5}>fU=U9D%Nn(Y_LMHpHg%b(s-aOJ0?W!l
zWL$ze{5>vpmltc!QN#G;1Cl_j2oiId%w|!#!m4u*
zR|Xa|jZY|xEjhw)KzBR=VJK3u{~lYS%SNIUhB``rd^~yPidf~T%fp<@3VPb>tXlGL
z@tbT_hlK&xz?vUb6%0#f+`fs&a6chkgTIH#zuD++m9Gbm1)>5EU?!sv8zACEon(i$
zz*43-+quy-#mS(YrG?UUU$_-NBcS5O)|;M3*-lv3S`**_iY&z*Z#S|
z|8zySh~eo$uBUCMZDgd?8EpKSPRQsVWS;$-R4!sh6Ynq?cGq5n7
zL(8{hw?b&_E7bWLeNoF(@^WPln%R#`HDr|RBA6OoRief{Z~eQh2U2LF{RLh
zn6+u_`CE4Zf>{j>4)&z`74%OGn0s~wdPtYeRvE`vzfA-3>fty6Fg@sw%~
z&OQaLG{FA}8Ej7NIQUbcu`1OHU-7Rt2paJ5V=-YtbB#_2#zmfvxNuggpXEBmiFaEi
zvP81=XW~BtYzx`&Mebe`ADY5lH)pqYd#3zYM@^hZdooHUIc}bWSFfX2-}Is~T{kBq
zU}uU@e2J9$;aRJ1LD0>oW1J&wqz)-Xzt1KsekF|4Z%vYJz$<;KtR}H1soj>HgL9i(
z9@fW-J_&ZwYCtYKT>dh`&jPPM#Q(US-2SbUk+VShE2I&iKi!nLCZ#Ng?<6sLUJijM
zfl|-A{6tc8g=LbZZVZvdbVy}0S+U1L_5>b;y-DCWS_ot$`y76-PrPi3%)yP~C=sPi
zJ!VHg_cU(O-=g@H*gsGFFi+SO;}1TjDo>tvDh?gu(kO;3c+RN3Duncz6~a!xlVv>M
z=nc-u(H$nz0$iMXo&^g%+)FiPaM2j9W#pFK=@_@3so%;IWfn#~Yb{5MpwwrBcz{}qO!tJ#x0O|{qf3-6z?QTzy7ZTS~|brTshM;^ZvNh#W68-t!Jvj
zx4rrZ=oSWLfbY8<_#!vNR6=5_>BQ|dkLBlK%_+F=!o3njkvYU0Z8^mCG~$UIq7J5*
z=1cOZc}9Hz)DK!ocaF{dDI&tldCnU4N=h33n3myt51fRZfh!et=&;yr-I?6^;BGuvYn?&>H=7pIuMm4_dolPh5r1o-M4}e4m3mtk`%`
zrw@B;uqR`bKcwgC?rZO}ELX-pK&yw@X6D?BdWb)={D?7vgf=z?t5MM2R*xmR!N`c-ZwD;Wb^0+2V?3
z&x!th^aTkRc`eW65brO+RD`=R?^kl7?RN3=ELVZl;#_8G`JaZfLv%K--lr_jt!u*;
zYDpiy+`W&T8@6>5f-p6yNBOuFiw=rkf!9nwAr`g4fjPTMRs0sGx&EMWvJb+i-!(B8
zk&&wfEn=#fS=WXegP}tw%=e~8OBE9E+3H&k@mV2vQl9udzHjl!KfHbCSLj({#a)`j
zS-mjYbBQJg4e$_$&HG^Jx*kQBiPj-GWcBDdFhK{}KDhFTyMNB~&fr}#+&wq(&jA0L
z>2T#NF%z7;Dot@3e)ziG?EW;Z-QBQIAuY=C(Jv*Lo9*Gx@PAZ&k^3)92Nt!Z
zeof2a1-#bv@zY|iaSG$i)i1Wyc3zc;pJ
z!LXfubUO!zwx>`dE0sLBdF=4~bJWXmV&u``X2@-)=E6
zGq7sQ6Ja5GJNJlGwrq)%#wulMY-{FfVJTBXzZ~*p@pJjX_33dAmk(5(8Ac89{#lY<
z)mvTqa`>_<+w)*o5#R!6j)5Gb3D9Kshhi5{_V@>BYr^NU$R^PNO;csst?9;+hi1_e
zMcSGFyxo`N@U2zBHE!Okw{`!Be@%rh(AuSYmktg0&k;5AsKx`lXGu}=FbA(X{%@OE
zT~}ibLs4A64fJC!On!PK!*pR(5cE+jB8D7vwM?CFVslpm|63iO)gA-UkSI@r
zksr~PR$!;4TLJAfgdhgu>ezZ5d^T(}lRgPRI_E!E*31NQi+fe`EbLduhip_=WiF%L
z|1|Kky~2!6USD;8b9X4ge)Q5|-^?AeJoM#rSm-J`?7z73D1X%FlbZsk1D`(tzya{C
zZ?FAYZYX7R=xrSD&}=f+b10yMD9{)b5WMm=hz=dOI^!lTD&;ZT%$GFnyf+8_J=Os&
z3^nO(3`J`Jt!4HJ(;!vf2XjdQ&YlKIm&>GFoa*!w^4^B+Z2_h81pNLYayQ%%i?Qi;IY|$
zC5vq!9||rK)UmxM;D-n&a(AVxF@Ykw_xqFXy^Xt$u|$VFdQ!oN&BlM!i0@sEIVWIq
zfK2ui*^HzroM3$XQUUh(9>`a4fMI5*wF8ed4--K0_ciT)XIMj}I%d%~X%NWp0Bx44
zF`g4YFsJz?x}{#%@ASS~uUC9J!RtE|pTd2ERsUEr9~)*m77>-juPF>vWYWj8k#gns
zQ2o<6fU#`uZCA%u)or$0PmMyWzHdQOD}(BQ6tS>2o=4~z_a2)es5`?n;g69tl2nEc
zlE+%_Nl;PpVy3X-WOE={+A;?kkZYwzxYE1Hj1>-Yk_cb?6mtz
z{zyLME-J_&QfU~n7hr0;Nm*ueFBb3i-$#7tWZw@%*QlWVq3(><
zxP={ccpCAp`M|v=IsCp^4}X6ppl(+SE4DRM^IyQ5$uA3+hK7on!K-G?R0_tELdbmx
zI43yUx{1I0K@D|Je}+C50)l|E4t_2Zv{sPE4E8c{*TkBNRL1W;*;xzpjBafIq6-17
zmj*$%#K%3{KSraG$B*g^{(vc1`z0G1w)+Sy3_iD_kz8ai5Qg~sgLJOw7Q>sz?07NX
zd;NY4daDjY+F2(fD5pF30lgbkQHuYQ(6#kM-$fM}ycz#$<&
z_JTH-+7?jV%as?bdNVGsFi_D47>?mGXo&?YI^5EM-0jIF3L6woDZ<*T<(nAibIw>h
z5Y3B{mWM}ORe^})715CvmAT)9kaHfGu=MRSz&H_D-D3wH1s=647vrvy%V=b_!l8%f
z3eGgL3;%*UH1O4HUR^^&U#~JfaGGJ{{Y13?~_wz=904FXleUX3-bkx
zzhpmNxSS3dF3@Bh_Gw>xG`^h+0Bn!{N2E8+xjlKXWwHd
zc!f{Su(=Uaz&M>MRe_muDNa*eX9RdM;o-zP_ds}JXk4P#YVzp$d90$&YDd^s@o=>VpvJ`*-jvoPWhEXzRS)>C+4YMy4|7i?2mcasE^MUK1(=`4a+^V
z*NZZyJ?l9+m@2gPrX;ehF&y1`ykMjs`}VtFFg9+Q(-N-qInr}H_l4G?dKxQda?#Y`l?p=Ok7>E*MoE;o0u-Mkv8sPiZuDa
zX)7R~f>GU9my5Hf!M{_2tIab_TiY9DQ$jY{r-Gl_(UjNmRcOfKkC=Ic6Lg5N==wr8
zsf->F4E6%gTB<+0rYh4tKH9Cgi{C`tEj;EfTlasG?wY+w>2^$mdmR?C!Ml*&jS0E3rK)tDR+bi@`6BIj0JgszZfcyPV<`y
z0e9oYX^`oRN-tw98$?ITzB*Z1S)ENNCb4P5UQ-
z9o;%F?=8eZuA)C@VgCagw+gck;64e0=kAW!z~NPayw8*{RDJ;WcR1Xtob!)*YI#0nXpxB#
zy#yLqmJe25)k8uW_)F^|7D8UtVa1m;
zmVKRoVB>C_KPc6f?>)6UquY_A_wXDD??Zm&&IMaF?4^j=g=@69u?1u!J-2R2|Hh#h
zq9YsWJJ88hb)=5KmFO_^5|=zoE`hvZ-FO{!OL12GrvT>}jY-&kFcsU`2PQ==?XxB@3{G9KxQIb5efr+{sS{5+UVMojO|iA
zCr{7Z5L=QbY^z9Qk8=L;Vv=zPIa+M7XoO8H*QV~e&H&HcG4Cxydvak~QhZlN#`_K9
zoI~oqG^=eb1B)(-Vsl@dCoe8X-~eynEp_w619qWc38C}&bmaT(_chHu(NeFyzr4Ht
z>g*j_BaXZK2^Qv~Nis>wC*==byuh-KdAKt9gN?h!*SN!`LusbRg~#`KhP&5LQ5Dj0
zKAl)C1Pn-AkfY5tDEqI?P61&Rm7$FO`M$v(T5_aJ?L_K
z;E0I9Ff=7lI^j*M8QjC=nuh*{!pBpI&$&grZ`I+wMlx?@qwG!bYz+lm8MQyTRpIcJ
z>u&xftBk<&r0$fY7)I*g_ipapb0lp`N1aTZr552p;Z*ow{-NziI-90!VrO}l&WR_y
za~l;ywyJRYX7xh=diZAoAiO6JNK%B>e^#Lno0<(uG#?P&^#!OOXId)AL<>pe!Xmc<
zq1~$VJ609fV8Qn@BqJogFDMH)HShy?J0H{?16weugU58?>MPv_aP@74K-1XpLAK-W
zoUXQ2-5I}F#*b`vw4%SX@eIj0K-YX11Q@GQC*GCR4I~$I
zn;ElKFbNtIXD?Cw&n!c%jvt3cY~D=QWz(x#Q>`2@oQp&~{BH)y4WOl;ah_tDb`dER
zmdPD05iQkT14be|w*iVAQ_rCZZxwI@D>Hkz5K^`g>B=w9|0apH$6mp$T`TdIH;n-$
zTl;}nF~@$d9<#smwmUW|-5F6i5W#rjr=Av}L2fhO?yVuOAzGAQ$0o=McAY*f2QzWu
zMxr{{XIZ$$0}3^?j2GgO8G|7(@F&5Z6}ZnFiKj$(BccmmDa;n(`hEebytt5)RAZcW
z>IU*U4+y7mXtd-^CO_tUm;;T>N9@fRA+Q~mI#^x^9k}eZ^#Hh(xR%x#Onm^{>6c)k
zdV3c{@sc&MN+)aT3|zl~t~i;0CJI#N2ta|^fm-7YXfe4W0SI>x)5<0tNPbjMs<(b>BZ@<13kwn&zOv;30wDBX;0ITX`AW(7u
z^V`;(q9K_KE^FcSPtlZzqOwK4%Xgz^uaE84)nB8J_N$k^|?Q*>9umK&TwVhv$(C#prt~v)U9e
zu0y}AAGN!WTmT|*|E9-`u+eegnXJNVsKkyIa-qll&g7#fo@J5b1EOHuo+hG;`xmf{
zEfK*v^y6Q_l}nE(b;m1*u&_2L7zPyOCMo2x=6cT*F{`nM=JMJMwa`yF#FQ%E9QyXw
zSaK(QNGAR7Ija2sK~3zAjsfgPZR772Y8%hn!ek;c_eKOA1*TKRpowMIjNJ}!y!1kN
zDF#T=JIN87&uC->xZk>LkPahQQI5>SQ?xa)nZTUs9gxYVu?AK6Yk^p3vt-h@8{pG<
z%6n;+%KJe>Yde8TLIy{-Ke)9a1#qMbov8gJ0nSXUeq?ETgf$5C%}8vOxU2=wk^O?~
zx_lpKUj4n$(dWhx>wLaeT=z)AfW(o&nEGcwxMtrhXe8I)Vv3a%`ZdlZhsB&avW9ly
z%}8N7FpC~+sg$i^?4L<dd#$+GUmdTkWQyg4R75XJF1k&MS@rhs)MdY~``OpG^r_&;9c4S+&A?2&CnS6)v2ufZMwd_L-|
z1>hBeJ#*VbGj}VJB%+a*G2k`kcn#S11D{H|NAfc1Uk}cPKzwYZzhaf^wQQK9MVUB>
z{e6oKwR(8Ba!`fwuM$5wQj0#GU&nO?YgO2Q6Wkv6`)o-4i>V|yKx}!X(o@j_s_W)vmIe0d8GWm
zuIVCok|E$xW>--aOUtfwpCE^{LG2~aR@It+mo
z@G46b^vkFWypXLGZTYUih`452W=`O
zs^=vWtl=_y{-1(n&GfB#p>e74HUQQ_ih!+?&ybM@#3b>!0`b7MSr>
zGz2#M>}^o23!ajFZdC5Ia$i1a$^5c&_t19Y%60uLIIr7?oVlXeQmi{Lq)!gEeXEtR
zqVUwOWST_;3ETQKm2)kQ2Xp)324i4}gk2Q}2BQRhMBi+_NWQMxPeCK=K7>@c#<-pu
zxM=(fmzJWvqZ-S!fvO;N&yNag;WhVjR-+S+gogrIB$t|)ax!f`$x5Y4
z$d~(dnEhrYnWRBw%b?f7uX$k99fN<;U_y_=VBE)FtnjGg3oW~jE=Y#uTjGOSORiQ9
zX$}qMWw{$hB$(V*z4G=`l(VL@tcU4Z5oeD@PT<$nk&cYPFF*Ca#_E*!efb2`+*%i-
z9(eePOpU*z`Mb!EPbma*pW!Z_t-V
z=Fj4&o>y#4h+&v=gzsjTm)+1sS#IXupv+|@^>TaV;fjh>Yz?v8k|M6*Y$CS)E`?9@
z0jB94KrOT%#y168q(Z>Xjr+k3zs8Oz;uP*{OJ4u2ga$&HUVbZzwnW_+=tw)O2q))m
zdblR8l$Ckcex4UMc;zNk`GX#QwHIlW7e)eHwo*X`JWbYLXy*wl@j%ddYvXHyo{}gQ?yzAa=Q44kej^IY-D;%P2x~M=37>&`lY~
z`1tgpziffwm>{|PDM9KrCf`3ClI0R3u!^T%uuze7$#JIwj}retwQ}rWA=I(P8tz%8Cz(i96Am
z{Qc?X_QTLWOjlY63s%0<^Usc-?!n9Utvy$U3#46uHVa$&e_71buErBm4Xm#4`9Udv
z5$qjaZ)RR!bRrf`hdy2^`siX$`avKL%0Byk9?s6i6^yjdBp#7TwLkvnHg`TR4<;x*
z4|C4a%S4RR8N^>mPX^umnpv4)D(@>~*Qu^AoPS$*=*RYa
zdj<>rivi9W3hJgRbs($^^V#Tz-GXJ-*Zi`xLsl;D?@^QkLp8_|JKjz_n}Ywj5_t0>
z4(>m--kc^px8O^bcHqcxGY+|PD&_#4RnisJz)Obsu$d3jxAz;#EY&!}mf*l2>p*sT
zlXqyNs>J*VGK4rBfls*X`7)T>8{)?&uerjv&b%xB8C`V8FG)&I#o@T>=bo`#`f~F@
z#G*#Yqs19MML8>zGLpNZ`MGlRKH%9;ti&4+9}<
z?Pt21zCBj^yRj=g2`12CiB!k8;Y(;kVmQ`n11|=TgSJtXG*uWfHQy4Nm#iDyekJ
zt7C<&m0oYsCBrlG=EXYr^h6FxWIG_
z^4147!=qo8@C8(w_+#BRQ*v=G8y6cDk)AlP{)_Ti!KY
z#C9vpsKBQU{~$Axh(i7x{zUw=1O4$Q(--KtD7
zHS?KmOLv-x@%NGz|8~(Vcpoe{7P1S{%53d7>_=Ef@MT>
z53~zbKn?Uo79LVzi^Ff**ZfKb296JKRYr8(ID4q9<5i74py7nhC7!C9+vHz2pw&Dd
z_*4Vmks6eO8)hT@E~?uDSTKmP*!OamMbN^a^H^f1+s3)In9P)U8lLVey_|Fh=Fc+3
z%g5qe*k{orMn~-3Ey=JO4^RdXUiJB#^hR4zb^Srdb=n{eyzMNyQZ>TgNNY!J^0@V)
zA>O)kN~s)bcxieVJND`J+1R_&$ggWyNJ-w@rAWY0vr^DFqTcn<*b6bvGe0znKs@ny
z5`8n@q{x{g+Nl?@G!jnB6TkDXbm0Jh2YKAP=Og0Rfi!O^TF%D<_-HVr=8yKeE2=Qv
zL2P4c1{ZcGv)=Tq`##}2Eq)~oQdRB&zlV_1$J}s}sW$o!94mm%J}8Z6|IgF|tpVy%
zT6gU>M<)~Lt2~X;_xl?2+uq5$$;@mP`!(JSK}sfaFDld!!pEpMO|DNwCxSor1TM;8(LKt@G0rpYqsREYNhVgQ{pY3l70s{sXfyd1NyH2P@t5?)}{qVy~qC7cf
zuy%;qlR>!-G`r=k_}t3dJ#pv+Q}`1obFHcfGE<1vZB7;1NeV+k1IL!f8++69AF$A+eK)N!N=?LJj;!0lMK|H=fkrEU
zy9r!PSF6u}Faid%c$=cpo+Hi7rA#^CEmGP101N&BuIJ_8luM!@aJuoNXw-C2tIu)C
zvnRtVr$%T1ePRlq1i+=@7HVbMt1U*;EdR`=-x^-LYzeP4eMJJu)V%ayG(s@v
zo6^OBCoOu_#nL&{4cv~eQ!F3ljEcK`{y~T))ao?iaD%0(I8dpYbK{hTtH3EhBL9_U
z3p?jqP7X}I24=tsX7FtN*gq$@fwJpggmQ{KPNn-*qgl{kq+H~MGimM^Qa#4ywE5$tj~AO$Tv?*9@og*aZqSFccjT85s&{_50d^78O8^CGCD!=H^L_>t$79rNQ;ONoQ7@!7W@a~ANN`^YCF
zB@isk(O7V>tMP5zs^CSMjeqgHVS#T3gHHA3-=CKch+_!*s4YtAG(x8*UmH-KWN&*A
zd}JvpfzLWkMU2WuXnoSy7(}IHi^J_H&6%O>S2))QGV?Zpaqm=E46lUkesR4fN-KT+
zw3P1&MyY#8WM{pT4j$EOx6&{&s8ID#F_Jt!U0+rOgq6bVuF6zP@*;ZlcQ#<*Y#_W8
zw5*QL7;-QJLe7|VdDr5*-OVk~{wa2EHt|Jc3pkc89jwo+bYBMciJ_r|eR@%;#^
zSwd4`3|gy4AkLRE8c;FFTkdj7O*$tz*R;d1iaTc84uFW&NAm6R&&(ytOoQ+<(6@V$
zi~Bw3{Sj5|L-Ya{oIha2Rd^=R&$Ybw#*9@w)klubUmvPMmHBwj+A
z0qMtWjPpDm?>A#wM)y{Sx@SFPh;Ob~P{+O-yp}>_-c!L70jGLAZ4yP=qSp+bmjDS*
zAAvq3;7-Z#M=Ob2m1?CUHqZ(+4bm2g{#k7J%#Sn^ZGbyGASM{%2i+glvCVX_k*Z15
z^l4-|bUk6>SsmN!C|bLX6hO1bBtCF~R|Eh3S(M%OEBQk8GjNGPXL|&`JHh6WhWN5B
zD#6-kG?&N%WCTJd$?mQ6ACrs
z%7KiWg$rC8dFT$@J&C#Q6gE+Bzw1qToPVPH>!n-KVBmZ2^qoj197H3DVX`Wx@;@;_s5B3Bxu9`e&##n6|HrOuHHhEFsSD=am;W#%d|Kpv=P6
zTwI(#M50KC;d@utzkpo0RF)`GcGh*kE)7cU&n5mVPXh~ylyWb3t|#R1BAFsR^nKu}
ztpK&gX9&dmvy8?`R4E1=+)x6JF4Qp+RfbjW0gg-6aXX!l)Kcyca8MJQA@&m!2}onR
zQRyAi)9AQ2>1w4z+m}TqCK9+1MIc(t3blS&l+Bz&l_alI8Fh&`7uYl`!&gLo=KFxh
zG?g!t=sGgDIQX57mO!+eenK5LK&<#3a7YX+n&YL9dylpZkh(um4#h
zdr5F5n6*29DxRF(0F#Ioh_)A`w
zS^GS7B4IGGHzg?=RpB77v>A)^ajrN}BjlLGZ=0y*H9^YjDk6II*Ddxv&akkDF&@CZ
z?3JzEetG?e3J`8EgEO7(eAOw6w!Uf)<|duf#fcn$n<_>e5Rag)KwP{yfG+M-fCCR$NwOhIja{{S7S<>{ki<@O0`Jz5b_%w|)ZRf(J@^_3(4*ctcYdvW(BY
z#?jRI(<()57UgM>5W;k`-s4ou|d
zKr+NU66D9Bm1Y-txV+QW%W-Lb`rcXg7Rpwor|T))F%uP!@FjQUHSwX!k(`TF+4#%)
zF^HOl!m8e}URN6RcIE56AHEyx^${>47du)AnMZ-?+-8O+gs>@a7bhe4o!n3O|EyqA
zh+hS9eC&&b0Y&oiWGp)L=iDLR1=G1`ejrYSp{qBeiqceClE?TCl{CZZ{Gq1TIO3KpYn#z2J*etJeKQ=9Z+MV_Q_+h;fiYD%}F}97j0lZ&Q
zE`g|vc9dODsQU7hCq7=j?2aVgf&pi|-4MF|%mTQmYF5tip8ZOlDw2H_PkMyE-wqzz
zos1L6Nz=TtqN8}&f%n{K+X?!Y!89VyGso>iV-MmSnoR^{xnIA%#_`%N@pY_Su4~4Q
zs6Ydmi(Y>nUWzO}I@gutUA-YmY@f~zSvIX3seqn-(8iu~wH{ndSF}l;{;d9~SduFx
zL|$!48_&!6I5Y>++s7#q_kw!94OYks*}+CEprJP9lnDFTN=nKkM&eNPyGsp{snPEt
z^56E1_W}M4XC34%YkSEN&uJeuHB*l})6?1&P&V|`uoz`O2`}m3d3_494c|-$C}t9o
zM+eO5de{RF71CllTdkG-6Pd{850@-vs$=F8vLGiJ)4(62#8F&opYAbg^kw3aL$80g
ze|8%iiS8}ro<(F23&?&Rnk!QC^1%#e(uv=u+GihSm1iGp;B#9X7HOHDJi+n&}x>7qZaXSh_68>qwE;PsK%_
zH?CN3Swn8=fE%9kD9<_gaP93o=-^}C>)LybjR^PZZ43Y<_C;2WwB$S18GH?p(=jpI
zIbHkth1c=g6AOdeV1x(fE_1sakZ`#eixUk$4`*J`FDRDb867jy#9XByD1d3(EgSAV
z@JX91tZmlPUPqR8na(B7lOuKw@%kKL*OrZrJktEwG|`4JUm6M@+n7G{UL
z8yo4Coe@?H-1nJ9=6mL6jFgb?f0IBByv&T)c{KD{AGy$VrJd{)ogA}r?NUyq^{0PA
z6;SotE1IqNU7l1~Z0~j_quO0F;d3s&6?
z>azU^Fm{X3>C(bA5JvF^Vs%}9FIjw&Pe1?Q!q~J;Jln|f__X|Gnf@yOe@9K*XF{H0
zeC)DtI}D$`PHm{c=JAML0Hi?OjsbybFHP*^Gh~AUeM8-OIUyi$A8UYp9t${K
zm)Qcv?8za=mT&57*QuLHIfSt59I^x;n-yETckl(wqg32xn=qx28)P{BKKU(pzMrSDo>DTlrRy
ztTf7`e=sRhId_dJ2oXSQX9~0Eh*VDWfpjURHWD=ig4xmF0?_@&U{3tX!c~F#ocN`O
z{~=yN)#|Qx5jTZZE;41(N9>gZGV~aqU_HEY<&aP|+GYf|nkj?!KT_HGn?rKZ#HK$*
zn(NoAH>0VYLI8nGnB{r%L{EP4=pHDw4MeFt>aJ7jqO+k!1(2V`%u~7N2dFY)slMSU)L(sw4ffcwL#7ZVdFDY^tup|E~9S$zW`ARDw(~j+e~r~
zaw`Ke`Mv&$q{U(^Yz>UI{%&OxKa!;fz4Jt)U#y3vQHLZG?b>=)NtSLHTLZivaJt7}
zvi@Wf!4b(}I8O&JLOpMlGGs%D7)a-50VxotU(|d2&0sVKC|9J4ROXN;srcSYnZ!h3
zB(H_1Xi(e!0gt%j)!|Zxp~d3!)G!1)0W#Clt@JEvHdTP$KNQ@Q#x$+Hsjv#E}{SD=%drV^1*p+%GJ16
zp@xT>YlsYo>a&S)(~JU{(A<-?gOSgt&-Wk3kOdPE)>b2RnCH=F=y)=&JP}R(cp`iB
z?+A^LSX?IY_GY~|z}wgQl{mW?m7udut&Q_$jh?c1
z|D@$x<$Pf&>MSZbEL?lci`_|u7GpiE3Y!Ej_TBkRmgcP(uw$&q9*&xi(!%$Yw0%jQ
zisR?pm$-jB8^==9UZk8!e`s(}7U3-znd4eud&FPCjTOaM+Gj!*$t&-RD+$m;&z`BR
z6TLv0fx>65+l`Og{(jnLP8^T0O76Pl(I2V@NBnj(2V`a`f1mc#ej1;%^`5Yi7T)Lv
zMVdz)Hg(1qIoAz9uC$A4Ad~yzMur}KW;O*CBy9PWtb6JqqLcoIb=yg%445m6d8o`t
z49hB51yrBb89X%TjYCAskH20cK$sUd*XkUty8XYWi&Ulo-n|4`>oT{za2QjZiw91i
zRDt#D*C|4I=v6$jLBjBnB~Xm&ORpa8peg=vTDwRFHd2%fJ{7Gk1`q4vxK;V1YDx-8
ziu?=}rVu-Tx;u?2K-SbUGcF(&ofLipFa%Oaz=PSUd61~Tr2+)&4#SA3_k7H6AgHhN
zHE^QGg7mILyb${GEFQom4xxJZU6W4xI8&I1Ba>(!2Br?4ild-a>E`~b0Yvr{r_Erd
z`v88v__4}UL5;&N8Dkl7o^V?Dh(NMw?vL%fw11uS;yae%q1;m^oeyZewx?8!6u-^_
z016q9p#@Hh$HUO8R5=F0azI;`+TV_p=_t9Syo_EfmRQN}r8z7z7s7{O8A_u7<-@EY
z)8+XBcqa^%qB9c1+*qdo*^6oOs-eLlXJ?q>8aRWq&YGlIJWqv+maD3Ob9m)9v&D{m
zq2G8BUUjV4yIkU&y8?J9H-J1G0K2MpNA12YjRL-kHQ>jG-c@q*WZncZ8<0EPk}E|LVg~`yL>PyP4WYIpBWoA@$}CB)`|+$mILL5;b;_
z5&>>~nM*%(pIj)s*Ltcx;Nc9a4`%`=@E)CLk&9BtHUTvQsl&typbYs*uhE`z3KYIn
z&
z97mEdpH%f&8Qw_IjR?d(ytF3y;8El&XW4Y-J8d^B<&u*J7_4h*j+weHpu+yZ3InLT
z;=HFBfqP_Z7md%c;#DvL@+sVvh(9PokSd;dMRx&x)8&5$9*=&VI|!p3xh1%C
zq?In9Dg@!Qk@o6IM(IQOBg>#4H(1BR1K$OhP$wL&r1LQ#=%Tt5f-XZ^@V=eg_dy#X
zxNQ&vb*S<@|xrX!eUD~pqY)=G+TW&GBwIY
zF8&Gy9M95}0nGJq=Zk_*0_|Vn-QI8Hx5JMhW4A>t|3fmQR^o^cJ4$?5SsI-!Uh~&A
zk?%(L!|b^lh(k$d+p4(mM0v|$2D4(OAcyc8ci>tgyMhIr{gr70_@|CA()s
z(^Ve?q-qdBYk6M`yTMU*T^oo?*X;E*Qtx=2ot(y3*$=drs*46psY?CtrdMf_m&GG~
z6+fY2Bp`iBhyp^sdEblB0P{wxbrX2;I^%7`$5P<`I7Sn3$jnD)-lKNkK$+sfzWw)4
zJr&&RYaV)DGH{x@yR1#{)9X{FVF9l*lt}hHXX`>=w!4XgI5=3MAUsXwm_Rp
zw($#wZz7<$)W|Hn_zwh%5`LRBvJQ^4LtvbJqT*Gf>@{O8i?5JD`UjF_ef-g
z+UNm)<fA>JDla(Yc@b{=3N*8&`hrG6kPc#z%i1^6EDxTT)!M@}a;Wam#%I7KcSf?4Y*D*k5|n)?c@p1>mdy
zLf2%-5nb~u4|y{d-7o-ex-FKEX*BX~oNVN=1%ls1%JkrNEwTx@2Of47{S%+Ym(o8v
z-62oXZ!>BXuU;!#HR+E_yMHwb8(!uNl%?J)Cm7yEi206C-XOJGlU6ZzzW66x1_yNt>Dt=|E1xA-GRfD948
zv1{xgXMOz6B!KmA!g6r&OEd?#eX>WwN>X>i-xo$V+Q`DGF;g{fz{-hqPruhhdx&vM
zbwuxy8HffN)`V?dj)JzpfkA@Z)w==9F{K^(CE1Hhr*mY5VcPLF0C6b2efzsZ{2&o?
z_|^Vk?;S3W`+;dTf8OAm%&W_FJ0%?6?awb&J>4KsHmt=YX%Fk5e?qUIqnaoI2vflU
zu9mZ185*g|F{YkV2?da}k88zYUXwN`k~%l|o9KwtHMY_C9V3bqJ@q{M%^zk8UnRiH
zNE?i)99o5Z5}*9&zflu#zaC8A83k?CmHJ8axa$Cl^aXaczNFp~)0cFAvm-amVd-TOKr3>TX#a|8yK+E(x;@s)5L+dI5~VBJ^7
z9@}YHbV7%0BlG_O-7bD%0^L~2?Y~4TKuMqyyxFMxarpR2sFe~jLUR|ef2M@p-(uy|
zD5F|+u9l0*ctk(!reXm1BwD?nGy4??l7Hw>SwFg}vs?~ycw`mb#<_PHn5~J%rPJ`Y
zwz2^ITf5Dp4;l&hMI3B@ltWt%pQ#M{wdzv%pIo`fN8035I@AT5T$mePRxIxBoY5@D
zzr`EaUcb?Utg+;%xcP{?r859VujCNj
z`ni!evK4%P@9qDjIYD&A@HMuAQ=SUSZY|YhY9fL>`jX{&HkH(`s!M%IKvkbUmx@=k
zRk%h&Lc^AsD_;3_gXC@1sKTiSCFI~P4PEMCx%`Nog{zA#CGED8e)mb}Qr&A|gap%&
zc`ENmeBAXJ$Bra-cWs9=k2#;h5cb*&WPO4O5GAF8UEe2Ux0TmiAYJR+Tqo(*Jvc}d
zQMR`0$Ku_z82sJjV-6qnyE#wSZqaHUl2XxItnYI}{A=to6Y4g^lPTGg|E}Z~EK1Hj
zzfQ(=Y?1kst)gFT@cp^QcDB|k4Y6E7BI#!?
zT=<7wza0qeK%zJjyOG3~n2T2i$h0K`>J}(&Zo4RM14SX*%D)W~fChycG6o&*K2zl*
zuXznCFZ#p?c}biA44L9Zci!RtH?2^G7z+3JwS|Vz7?rsHSvX&sp_j;#j4>xn8!m*G1QUNt&0;wRDuu;^cKq~g+yeYQ!bPnU})@?i||p^Z&a72>~Hq3!J4&_|YM>zJUQGGUW>Jgb+r*SQ6xzxx}OZ4$*3f+_q
zGYGOvDHLIqG2t!kk4;NjJbPt{j6hN%-8F#nvH@g4o2HGj`vzO!|0a<@!O2yKIsD^fAf7)cOB`(l4{4I!(Z@Yd
zpFrq>6-UmcQ096j4r-EP!tj1y@To{7w?z8U@$xu^Z!b|DLl}nemh^9LTp4qu{c7cp
zWs)cL>dtq(8=BYNep2$wb^DF7-@eTcyR?YeHpVBZY|cZ<0DH69j!T-kBs$fPY0#kj
zvVm99qmkt__npWbkzzoQM}Jn%ko@`g*7otb((5o*Nc;@^S2M#_o%7&bgVo%7un|c$
z1VqRmPu1W%=6$kLFT+t8aQ&%%Q%%B#WbG08e2~&cT{*G0&Q67_dEkflhDTpgZ{)-?
z{RY)k;L<$VLHu+kUn-yRzcscYb|prAX=fCs5^{&V3WOa!^Q;t{t>X9p>}t|OwcS)b
z-HzM1P5JvTB9$J@LYx%#5;uNzM&DKm`~$7Dx_^DMz02C@e$ribA2mOX#P9z)a*0NF
zXg@2DUZ-E3T+vkCF0+HR>#FjO(6<|3KR$P2*^Vb2m`pS#V@N*HKKwou3bm}{n{|c7
zIqo;!$KF(;BW`Z9p!Jr6XN*f^B1M>5*OtxYVx~TS?qV^R;dqNVDLb-PE~jk+JCi~5RpM@{0^MSpx7c}@bo|-db^dvcWo4|4NjxS0Pbruq#*j)6{!A+;`s+xfocK;&v2M0#
zc3G+E$%*INHU~WD;Ak~HnZ$QwVL5(^S%%ULQqsd0x3HV?VwE)p22zWxxvanVgcI_Sjf5JX?b`>Ek5(XS$+Q+
zo?}9%0!EVDw0bM1vwmoLHuy{2t89VI;pix9ED5jq
zJ2C4hZ6T-UOay&y3BSgglA|Xe41>1{qjN-LO0{Szg`Ni|VEzGM)0qOOHmrW-DRiaj
zR|e!5$C8#QF8$}7HaetwoWZ4tDZslG^a#qmjC|bM%Gfaq=ie`%Uyw$uq^UIIaHO$%
zODenM=^EQ~4M5M6%q=jV?9SL5gOzvj(N@uoWcL~%Ns#}=TkNQHkm6;rY{4M
zK1G?GF97AjilxBGm^2Qm$7GZ}k0v5el0EW7op@l9S3~^E7$}tfq)Tn~Jari2TioL5
z8;ZVWC3-K}YN19UMvZrR*o3m#ovPcg>rW2nT!OWOJ?7R*6v=sG2RZg(upexMawjcU
zD0m=ot~JD4)))++RL#sO#AE
zMw4AL5i3YFjwMDMKJ}?gwwhk@8%|%k1hL*;+--$!agOXPKp3BMr;@p~=NF}tDPuij
zdtjq+qvOx%2Z#{W_-pLRrAY`*Xy$a@-e*bdP^v|f_}hn||0k$J9n%3*MO~=IyJf3S
zBp~nbHMXhTwHjfHZy`ckI=5Ynw9!8hOCUv+q)=q1A$)RWDOC0mt9;Tm>@^)i3yG{0
z`ltPFgn>@pZ4e)llClJ^>hyN`d)d@Ra~CB&1jB7D!>Y!!NEao0IrvlPO}~
z1zoGb)gyT)v1OGZxTBlXsxV4K7R_U<8`QCAV_oW)R0Z)y_9yW4ATIGYg?_&`h_FP>
zwFcIKEwxanq1jaRo~Wkiyud5V++!@7B&e(gj1h}
zMB_C~H0`K<13IUNM*eYdZL&suVh1M2n|7M2j3t+JqMxtNPSCbUw%nd5d7fS})?4pM
z+e-2_n-~m}zrABM&#<_p$+cnaTq#$SL@jm;aM)fB3yGG~GGLfO%
z%6e_R91<3NmQDK_dtEt7yqPB^r2lcJ+2d9$5a-=}?YaCCU5UMdaVoN=bonQkR+i_=
z+D!vpW3+?hor33IXUBSM5$xrrr*zslS{w0%?hE4I8NRJYYvcSzq!jZry{&2+ii59*
zE?Q<4m|4ttbzRuS2*oHOWz
zoY}A4TI9QVjpB-j;862TRqc~|l-QHxttlTjFxCsbxg*veEE}
zVn555(*CK6zjePEUXG^Tj=HTywNNI@>-lO?U%zIZ1Uv@7j#)f=KJx}9@o0>6JBB@p
z!n@|fkK$7l*@uyl-uh=T{^!@s
z9v(5NtW;9;$Hz0?;H``5Ya^Ejyt`Rk7qlJG;3igzIykYFCXsm9lSIDR__ekZm!O_n
z)j_gZ><#PfW5AOPlpZ=^Q!8AIl~Z&{y5;#>o{T7c^!RP(@TTy4%nN4?D#=a~
zdu@a{mx0o{`owDIN&K9d(*i2_ZUCMTQ-wHL`pV_mi(_Qg3=LMw^_U-R_h1_1bqgqvVYQI(ll)&~QWX
ziBJ4n_gZREN9$O#3B~$EF1XBu9aQ*!RU}6(e3~I{H1hd8nleVZr>9@F+WRHrcTAT%&_RvYh&?enaMz!AIqbJRW?_b}wkXg0u
z?aR3ANFiMetDe@OU*}e^XE{utl#=$zkTmTR!V2faQU2)J~gr)dns$Se1TydhfLU3
z-SExMm%FQA@$G|gbLh=PN`>EIQgZi$N4-5-R93f!%%JSaUw`-}aHUS~OoF8CQXHeS
z%vt_o6FlKiwmZ7|@2D{~&}NzQ3(qe1yOWob{pI^%U+`-kgpW=aNjo{7mk
zcm7@udZW2{8HYq$>J#aL$W1ZCe`t&<+n;%q^Yrf>-)txP=S7wU%GVZ;|6LZm{A83)D_&ir{78P20IeK&C8
z@fhWN-_H7+@!wRI7InYU**3q*_~m;0NfUM+eX@&VbWU}ryK#pAQ;U2}a_8&Ucnt`M
zn#Bd|dD``_>0FXs`Ntj0g`Y`meDnSIv-5WA4)AF8?|&zhvUo~u%bNpsf!aSsUA+Ze
z7p=<6Z>|1@S>7!z@1bW-d*+MT>(qFE-{yIg<(V-&7BH={@gJPLx4uaK>)z!k_~p2x
z$k7T@DnnPG{X**|>DtJvag;ss(FYtvZP;4%Axgb227GIdZ)TtFJ~}t>_m>QW#IK({
zmt8_@nL5X7p+Wu-N8eb0oM)Cx+Xim946f>tUD%nWLr$P0P(0ek2{L;#0F?n-nZ2p^
zuhXAju-P@#d
z%BN;>+G@{TnUTUahrC1n#!-$?PYya85p+%kTIBdYD;fsXjyCeHr6>BK6XCeFS8}-J
zp7fW84sU9Di|@+YcEe3_6u4mDr3#eCA$$tK0hWJ`-Cg&-@j)PiHS*WBt>W3u1Ai^H
z1L-@radntyzW{tNHX_j8nt6+D-=z71+^uu?#`T}iy#zI>v+cu{hYx)eNYG29m{I?R
zI+dO=2|24po&3JlRChuhnq@vzXO&v{;baXvkii==zrxli4*Am9rb%^=r8IsVM;k64
ze&#vxE0U^^=;vD(uTVRf7~xs7?ltFJlAc8{#ijn#&g#_XH?6ud26LfN=JR!>1!JGK
zIu9=rX#WlI&tVyX_Heq+nTW$f&yzOK@FzaE&>49ChMLufJyFnvLgq7ARxA6lp<>xTs1U|sH*_`Q+`}d)Ia!2^gjgHyA
zt3_L&rBH}@#5uBBE(5X$!$1QZUt=}7!qzEJRXZTK!a&3E(@D0LpIpLUEo!q?wrB$*
z;U)zPcQxsz&2IaHLX3Ai3|GhPc#i2%;8}M7b@sCPqoUC)^o1>(<_P57?44D&?3h7U
z4Di5R>K_koGc8Mt>DKJ-KbvCh>?p?Z6hi}~SQ`S^O?Jv|3FXyz?VUq!s%}LSHZ+S?
zu4C+bs9FJ%xi05XYqG(a!7F5IaH2^hm(%F|Kbw*7{Es0O1MKq~en!ksfI~_m3A>@1
z*M?Mo>Z!p8y}|`6BBHFh?9jzlY%K-rUlWV$()g4n@Xvp%#kg!o!;Kt)6l!Nz6a?|K
zsN0WIy}4C!rXY60+1via(jCVA5U^^4vKc(SSS1@OEZ$x>ho^WbW?fmE^%Jl@5ESqZ
zWr%n51r=4M1O2+k3KjAOD+61851=@Q^qu0V+dF*jlb%i`TFBpPoljXIH*K)1B0(t6
zO={J_M3bwsmCH%TO{iNowx4p`o5&|(maWd_;!TyO(kR%`Qe>ou+c?0pbs8;uLjYdk
zB~bNu2E_+ho|O_~x$ygY$U
zW!@R$;>IaQ)+3y-CVx(&mHrmf8F|x2UwyW{M;w7e&e%AFGdR<``F2AUKbEtfh#Y2!
z{K69ZZp^MqZ8mJ%J1VcV);%S71fV9+ETNF-~;JvX#d}9&ELfp_S#&zd6aTW*>aK
zGvvg-!hNS_401D+P@5nfFgQB)JqU!`zTI@c0C_+-Ag8oquXn0LOe+viqu+HV=;$xj
zV^99t4wnB7uEC-~qikb@1iUXw6oj-X-2;Wlu1AUVzv%>WIVGP{PeH4t&Y&*s53}9e9-uN`$DhQ#yJ=Eci1k1Se#S1{gXm7Jo22zn9IYB+Q
z0JjTD1pa9h6%Z*p$yRH7m_4lq-A5vQH=%mAK@u38blYC8+JRawBGa)0i&ns%)U(a5
z?(7kV10~RffH5sFIM0cP5nTPaky&gXZiO8p#RFBp~>Tp)1{B*=M1GPqE*GE$R
zb0}C$Q&dm^g*!p8Of+QzDBhb7|K2;nSwS*AHi#PwKTP8@KpU<0Dol?s#GA`IN;;{;
z?H@8Hreqcsulfx9#@SHt)h+}?SsU}90JY(zmza4zHb*;bMTTeOrqfS`4gXLrDk|O9
z8ak~Mj;9z-53S$k5;%E9@d9ahEJBMq^VfdL3<9iK?KY!*Vm&Wi+z((!Kg9;|DOI`O
z%3DG5%-3pU%~iZS&Q^QEl#4?$1=BA$ywU#2cR_zig)0KA9axo9j+ym=;&imx4
zXLIw}j2o_>E)?q=TfX#zf+7C>OCWwRlS4DI|89>;win)e
z9~rV+jMQu5gdzFq%;$-?)AOm`N2df
z!M#FAp9_7F#30*KbNoH>olsX8uR7sMIyKyc?d8u!w4tEj~zPSMG_RO>2F~`PL>D9#hcH|*?(CV@fyxR%#jxHqP4#);p+PRE@0`5L%wEdAi
z`kUZ`lfK`NTdy5L)L>{b;+0_Lst)OH+D_srW3Zgsbv^$!Lk}u+rYeoYg6c4spML>9
zQVNh*TWiALp55~o;-^fzpUwp1#X_)LKR4Gvo$?}MLtnxK2#oKD&pUP>Qpl2!r#v;>
zjx`B>L#nap5VMvB79@6ER*U72{8-4?T_WlH3_h#Muk=t+-t^lv^`v67^qHVDQsFfl
z+GBkWSSsF&oSC`lz0!~^u=4|80-8*yL75=0w~=KGd9CXvFsI~$!L|GTBM>ichNfr_
zhvMB?T8+MoK#O&z6}0(oadXc=4<|cO?k<*Z2MVdPb&z`n+b2ZDA$k_@j2m+gvp-}}
z@mqKRo)KR^zYTEZJ&x$9ZWD5C17(!ObRM#3nGwf}*ul%A3arziZm(br#|Q$HIBI5&1P$UX^X9OTp=
zojr$%>;nBKB5qbmAb9Q<;tp@Jt2>gBhplYc8Z_J;HNUG);3|3nu-8xl=_DdmI+6wn
zdtR~vY31iMu-$o|CyQSVk?KUt>A4j%m1me&=l^{1B732cG4Ryv>X46HVw?Y;
zX#&_|DLDUn$T_J4NU*qj0%Cszel3+n7fySR`~N`=1|_vr3KEcu4~R_rCG^xsz+443
zw$(*AR6^FDYsb%(xU~~i7Ep%W*Cw@yw07y8;b=g8Bp_Q2^W~Vnl?K!fx)=@dpgHp<
zu2^zRP?aYl`00)%N)Pj_^B)7GhX007r0^A~m3@Je2l@XfNIq35dRh*I`|cH2_0`u`ZhjOPYVNZe#otPivPe>x#H6FXUpF83%uzMt`y?&S=7)Jfy;-
zD~+$)@epxwF2{ayCI!~p%RqiiY|WJyz#PjsjCgAw1a|BVVfb?&WbnWDMGfFeYlucG
zK-J2G?x2>J2D$^#52VeXK>0@nWy6C%I8CGSgCIC-st$ixaR|7A=aT5NurXX`Yt0vc
z4f$YN?068GNFTk&@GVZGpYGLy1*hBd1@In8*IfSG0I8(AGau7I=OqvBY#Fj0f@+@QE{NjQ8%r6Lx9^IJLpN`L=m
zQz#0e&C;~4sfnc|8sLC*+%H~(s=BbDlAVCmT?5=;@F5IFyd^T5uLVfU$NjiN{fj)r
zzY$hisF`}el(X359itX(qxAjap5?iN)eiONJ>SjGOQdQG4@z5#u9rF8vuzvYW46dB
z=FW5OH^R}18>QtenZ%-pe6lA9h(m8H;7m53z@FGsTr$Q~F%gFpWKElRPC6g(QTOr`
zFUg`Idxewu+*vj*`zbKdk70|U}K5?>VvGkE$UmSk2+x^*jtgaP%^1b4PndP?wFRE_u>(^`!L?_L>it_rsJQm
zQP~c4EmS{PkD9+phx)J0-E3lV;Lglv+qJ&2<7Ku?`fQzhQOly@&5&t&1}tU&0L1!j
zuU!6%bZx5Z0EPF$pP|2NN!4G99CNUqWqU@W*=h_Mmp1^?bxK9*C5I;XC?UL24Wly?
zLV86*q~A(c8?2rqEwbk^k$v*{nNSh$lK{sK|MYYn>d14p8l>~iVdeJVYez-l*3R3z
zGmpmM7a>Kokkewc;-3bT=nXwuOy8eu*#%6*O8NYgMrKDNCg0;1by3X?e$LdAO+?lP
z;1$N#gIHAz-)uGW6;=tlu
zlMTr=4mT$VSLV=N$1Jq5=xSya_PGLIGoVYHEi4%1GQDNi7Ut8NQCMx`iG-V51M3tZ
zRL;p`LII0DpbnUG
zI09=^6<#_{TtdtAs8f3h49WFBG-T}C)R82<^BMT~XMGB6#w1cLTdNenTIZASx3lYv
z5-3CmL76}G-z8M&57SENGB+t3(lM;79*;}EvqB~R0*@H!z(e?#qvD8G5}(>lYye9dec^HkT_StO?~zV-Y@Uzp0x;M=pKJpOB0)*)
zvx>KQE(xlx5|CR|e!MIAyO>wq{Cv{!@JoU}9$Jm3_;knzkK5ttD7B+x#<#DeyA+qkUCME*Kn
z;>Z>(Vg56?GvA=$mf}~jI>5?h>wS=pFX;F!ko{WjOH22u?xiaXPAv1zm@%Ms4S4lg
zmTWx_5)mJN_+;Ohyet%xy*65FXL)=?i+%;34%l7hBR;-r&U5VfwDT`PyMIP`HzwPZ
z-zK=Iz7*^BGvZm%dur$10_#(0eIf?O(91j(vX04OCQw@e$Vk-T9T|5E00Es;(!;x2%Mj!b)`TXE6CNa4D
zF%zmy>X!g05VW$swbr75i+FWmm8nz#8x)p_8
zKKv$hK9#TmY00}xq?DW&QHT4dSK$tQKL|4T-flWxnI;DoAI${UyG|XDMyl)-ifiu;
z^j~TFc8(Z7j9v*bov0_T=I0wuU+^jWm13-vYyau%eYaIL*DNjyMU{Zw8IqD#g3fCq94iUW0wfj!mpony#GfvRH-}zzvv?|4SCAf*wRL#
z4aggt45+jPd{wJGnw95Mh5I*dZLeNHMnDA%v1VLvV#{`z5SeksDJX(X>l`t~qIV}#
zI*fS<*e8kfnq6PyU`kY=IAA%cD$bIOP-5XSZ?H0zF|Jqw6p#7%cm#KS<2}f<(j1$-
z$n@O^MIk?l_49~-IFvYPV3+rsq16OCBuTXp*QQ#c`d5LIUY%Rda=HqiF_|Wk|Cc)o
zdVZgr>?3Mw;9K2-GT9~5XuBxS{oL*(%8OfCD1H%jQNxHActR0;{gL}n0h6c1`|R(D-&@`u
zasIQ6ai4bU%a11lo3Hk_CXj-o6&L~Lm-#E6zvP{KwYsD9^akTQ?(>E6q?%+Zb|WU@
zOBxh$$b$yS!e*07qV*s#aW^tPsp(CAqh9Cqz6v@!tlJ&W&KR>(Pdv^7-hL{q(G*
z+`Q*oM1n-puEale*IPmNeucey{DvV`o;RIa#hzy^C3)XBptk+qaD+*0h#uolbkR|p
z>?g_*8%ZQdDiois{sxalFB=PNT_xj9sHlVI+OvSsEY-rPY(0n+_aV{nxuUxX}_#qGuztA!s
z*=oOpbf*?v{scIlX(@2*kDLcB*rKedCI^V=*A^go_Jr4Wv&0C&Ke2oo_ro>Et17fdO`j^?oq~S^kxSUwMy%=6#~&X*zEe&9gV0=4
znfsE(X(kSIbsZrbcF@jx&(MGlm)8vonER
z!k>;f&)XysQzYXR2vGriYRf@pd=?vRDh1b>hs2+ZbZyIB3toCBn?`SpScOG%QAV!~
zs9HcEYM75d=e%5F3sYHDEe&T_)B*5CEXRPVHkC%)Uc>(eGawuWp;0Da^|gs@e1|T|
zcIlyZ>X3b4izT*kqLL5%__w+xo8s`{CDiG{s-8?Xw^jZrNLNY@aZ0co%0_eh!nn;B
z>olM`Vw=4H9pzpSK}c1=bE8Cngr`(CLRE(>_Qimj$9hUsB$0MN@ggf0&j;g;^
zE=3E9{ywO8C;n{kjwgKlmpA7G${bg(S*p22yIU~#(mNAnIU4O_Xs1NV?|J>9T^A%;Q9XvPvvF@R1j*QXBm9O--kc7sE5
z4E}lMJ*6~_Pn#zX`QEW{2rLiTmT&#e=vTkbeL-v;tD(&`K+0j~zI;4GFbI
z&G#J~|L?MTwt&}f6BVs`zw>Sjn~JVBC_
z^N=fj0}m>GZSwK$$lkX7@o8tlpXwqD&1^BDN>5)zYoIbbk&GG}CDEUi-Bocs;Bna{
z0hzpOJU6!R*!N6vVGrZJ7+m#rP6VA}%@@eU(jcNW=THhOiZ-
z!s^&DT02LE7t5s>IibQQ#gH_l)73_=ZY-D>6r{cV6qi-ae0j)q#?;@F+cuhYrnOu|
zLqzX7r{D=@qEdzHVK|X?+#5;r^Za$*_9gqlsR)xEChOe=mzI2i?Wh|?F{s}yoL4;m
zwn{}Y84l5qIxsgx52k&-#Qm5RX%|{LIJAK$FOl?_!j2}ZKc_fN)=vL$m%{PQ+)rOQ
zJ&AWa&xWucgbl2)#bPOnN%V79U-=ZppK15Goy
z3crT%&oB3V&EikkjTaUyYn@UBV11%#DOm8}!NJb0xD;_gc?+5EaGqFcpGNL29T(-S+8&0F#Xm
zmu5G8wfWFwA#ox@u&()?hDhQP`O9x^i-vy=7AZr#A4&OJTwY1FXumEioAX>={)cpH
z+4g@$&!33ge#%w7PuOu9lWC&9L810TY6kRqEG($lnQDOom#*HiJ)*egQ1aV(#%^w(
zY5_KfMw4db>pCiNQ}NxEG2Jr}&K|(L1L%y@HCqeJJgW7id{-p?x=eerl2j|;y4*b$hz_2^kg
z$!YO)BzA~gJ?8tkGIGpWKqrovi`x7y4W%wkzHA=7VfK|GtIVe1o^5E_$+WqjH{5nj
z8vabCB>weG;Le4W$MwiwzkK0KjzhJ;x!Z%BDrcalIZ@#QpLZ{2;Jtx=AjI)v4v|A3?a28}
z?Z^{iKh;Dn+7gjnZAMg99=5ato7x30R;_4Y!OFM`-PF#8G9kj;KeAxUJmZBWo+58*
z2Sa!lrc&mbaDM)%Vtfbrb4i-c3Rxq15)WD+GyB_y>gP@e{Th{
z`(xN;P6z(hv%;Bs(b1_qghf^b&4&c?N_Fn;#
z46X}vx?YzmhXcg%1sp>Q;S5BWSP05q1c4rXJ=A#5^=j!5E{QqN3W&?c%H^+HpF}SQ
zcsS8xhMQ@KlsYvD=Le$oBUa8t+%t6=h_Rot1$?*DF%hOy_AM_nD@H{EVv-g*H4A=p
zN(7cDmmeUWM49<|P%gjiz}U1Q#1o*Ns|i{b6Nb5JYDIEruKJdfzy_JolY^);edG_G
z#QOY@ODNtZNt@P%>o1|~TR|{hR&dLuw5g_g9icf*P#2zI(ZGtEhcKF^@%QitvTfp~
z;q3aZ`nH2KGjP-=^{AgKK6SouXnAI0U$=x;u)abj7EER)4
z?-<@#2wW3gSr5pK@_F!4Wo!X(QGXjygE%Sg@$n|%wbQegRp=F$=W~Er+pR%74GiI9
z*GrvVYJLv``WBYptx`p;X@!k1(n@)lQ!#}QtZxiR*Hho1QF6ea>0
z3q33`6lTY8S^M^6G5)2Og(Sp+o0p8v(YI`z+WF@4-;MUGI=7wEP1WkJVm+6J=Fi%U
zPibQ!r{wdQXSv)KVM$1^00qmt#Pk)SVg|_wH(C~8KpmU!&>=hh^vTA!g$B}a#*+~T
zW`_^ac*+7_g3xQMk9zx7I^;wO@vF|}Lr6{%jLihZBco-u{UsOue?6-TXI#VfLZKo%
zNJWOAS@pVcEF3F0>D3uO>UkEs4Em|cIA}PKimkEo72@vcdeDJaJ1xUj=<&F?>x&9#dXH8#i
zDM$|Fb>3dkovYNQCQLfVCh;jIQPLW@VT4mwXfq>+U6KSRnNlej^WMJ^=v&wK4z#Nf7#SKL;Wl%5L*0ukk^*}s@pQ6Ri+H
zSU(0pERdjvaHz&pF4Yont1uV@(`*R2)@FAOxN>KTPzvG-H8lfF){TW|!3P7X(oxt4
zmL*Xlf`QsDlW4#>tcgY;4wI=&Rwmj-jLVG85!e$$7A)n4$&^A9A{s1x8%kI3tsY1+
za;O?t`Y$LCjeq@xbzM_vKV_gmip172y1X
z(XV3TQegt?QdB0+sM6&q!PNUT9Ad;B|K}`WLOL$l$Mn4p!EfTbXEK~i6V`o`CY@Xr
z_tS>vKTSO>eQZhR$nWFq_L5x(Zq&P|1U7}GAyXfg(~xs;Uel?dMibeCE0plDgm7Awc@{TF7Ng(04zO~#Yxw+aT8
z9&;mQP*s!S9H|c-eg!L^-^-l_A7>n^+eJNWw!*vrhOckGVr$x
zVWTuQttSF_KVA?aFmAwdyb@=8q|GmDPvHZW;i@l%)5a=<<=!X3A-rZ(9w`c
zJ>4mk$O<(gI5>jMEmRO?$iobkg5hF+w;}$mII$F7kHpS6HjDZ>qu1Mpb-$MoJLmOO
z#IfIE10)ie;$DDUAU%iJ?8#QBVr^PuyO8^-W(&;2_J5&m*a@nK2oI*_Acy9q-;u(1
z5~#JftVO9)>@M(2{-#jcVh2sA3kZrmk7M>w?_NE)u65q{LUH;N#!eie_rR@eEpU-~P=q|W
zitUxaU5XeYWMttI1
zYjo}nZfpzlPbxo{xaGM9vGwr?fOIk&tWXSD&gXxmfk}X0W>Z9j(BQnSaz>arf1b5;
zkj{rwp5BX%&S#T)auLT~9GDmmN#;lV#|gU=YYIVs$|v%nP}R^yKv-A*oW%RZ+ei0d
z(TA}orQ5TQ0G|TsP#iM7X&Ue~gAA4fRN-J*wZ0xDv2SX@C6PKTiiVY;4-oMDLXV(Hf;nM>OVnuJV2%;EI{aA7XHcV`)%4
zkY)&NWOQJAt+-gxkTg0Tke9~CbGI|~X%)B4{`l3n_>aSsg%J#D1
ze&{(T^rafvgbF7X{mgqimMz}%?0>t%KmMba8>~efheYn4VGGKXRMuv}hyWZcjOeqd
z#Thj0BL%&%U}2PwPSK7l+h|jF_Y!-rR{{bQ&?klIGAKl9Vc)w1J_8+ugLMic
ztq8aa$@`Q&*2IB!UsB}QD?%MV3>|;US4j$tFS$RdFKyj_0@q%30i<+b
zC4HYvw;8u18sC>nHyU?!2LU-F6c_LJG`$E7{5{+t&P+rqb*SpopNZ96)!vg+Z}u(*
zm)1iYR6>Zs+o@HRRTOCgr?wc1qeq$li>nMc|A
z!h}70${JV)@s#W=dpH^8=-vy$3)R_a*VsjHuc1GsHlvx|a&b4%i4c=MjW;#C<)&eA(W^fZM`lu%)lZb8Qh!(0Dtcf0pGjlQWvfzH;O-_BGdp0T(L;8|?=g2h>vd?OcV|+8MDIfi
zUP&Rk7_PSpg-H|I06Clmqykgimz;ME4)B>UTvORW+|*}R3Vmu68X?%WwH-oVB$D$u
zBn>KJ_M6
zn7F%u54|3K_nN8H{gRaJ!)iVAMK{Y-$E^3CejMC(^iYBw=c`NVP12q>*pu;&+W?7p
zmxh06rmQa1*N;2
zfP3h>Ow9)62FdCA=~@kNb$2;~!=8qCxqBJFgOVl-dsOntgfRN&%Oyq^p4W~x%?`Fe
z+0~}hSyVeR2j5n(G!bFwQazs8OjP>6IS-LUh{Qi=J9T-_%96d7OONe*We_bHIO$a$
z5a2Ifuu&v{cB8OkGBUDG(%|>ofA{tJ-uG$Fw<;@z_EZ4n^?6jY)i{0oe*4$`FeORD
zTe_59Tze2S&D$3rghyRs%QjeT?M|Z!Pv*>ljvHji>OfF+>`W)mq{Q^zO>+COW62Dw
zyll}#C$_kTJY~$W-|Y%Whm-F3N6!nhZiGuQwUiSrp;GKT9e-HEDtnu47kRL;FX@%$
z*}ZX$*q^tqrFb$TSBQ0`@P$Jb_fs_Jf{rRv6CkiwN#`1d9gA<;AD7iKhec
z9W}!#l*~U8xdDTtXOAxzdB}fU_{`ug?2G*&>acFy-2M9Xi<|!O6Myk931mn60X??r
zGlux!LpkvY;_BrhrExQ@d;q;x>z);8cd|+o-%92_=n&c&h6qjegPU^zl
zavXRyDesllkAg=0n|N(@Jfha~kS|6>1!@_|LzW8-h)LNXwluW4%OsIrGgMT_Vch9T(gEq*5F&!e!ptMe}zR%I=bEgxU)uNVlKR9PI=LI1MC){f!m
zkOO?!#D6ySAJ`u#&9BEA4q}_}zwS8^`wlp%kc&fbrIl#bvy+;RtjPZ^9o&C$Rzrxh
zaYB8K7FDEFIbI}B>ruWk}u2u4^v+q71j5>ZJ;Phi--s#B@H4ab&)P{1f)ws5RmQ|P?3(2kcN>4
zVF+m$Kt-e(a_DY`h9L%!_ky4AZ@p*n2kYKD_nx!Q-uvtm`*|2W(G`KZE9%rgGM{?gsmEkXUHBtvvqss6+MH@UCeEzg{^ffjkS0pXoD>-{B9Y)2ut
zeHlOW&bfQs3IeDGYj>?zwga2~eWc*zmyYsHJGPt@8&%k-7l!-Hd|29TG+YG^->7-Y
zaPLHiMg%z_R@r&?9=GpmX2R#amKIW&M-}M7Kx^QD-lo}1WEYGkv5!FQIHtojE41y$
z_V-thHzww6w-a}1tq~(#;jC9On>V+#3}@~^n+T!rOCnzL9aYO4#ISpA@$Vtwuy0~FlhrG-
z0kv0YPMoZ+8gVT&VsnQ-kB_-Ifz+rafb)C%(o2x`Ea#d*
z=I$K&)#h{JtQ6i1W+Kpf5_ehK-XLLp{M5Ovkebc1Z*}g0KS~DthFTKs{pooQ&zt*<
z#lm6Lj6()u@3%aV8>I~xh50*D+y8OAZyz$ptXeD{OGbCUDV2FEQYDk~0#c;h_l
z#p<0I_g@qbC9}5&zFT@f&o$|Nw)IQ1uiZ^3xV7D`YRo3&c?YIm5s{YWrLU|qKgP_K=hrveQ+JGx0->;XcWO4Si^lyOZFt%S=+C;m
zb>1rXGLx`p5p>MUQ#KGGzFW$(rnd4Y8EZNFG=yK^ctjZbaTsE|TbZA~
zHl9ECbzn(al3Fw?6MO|J}5fYD8&u88|Eb%hKQUUUvjyZwD?w8QEg
z5rRPj;@+DJ=X}3b?T7|=RHFr6;2*3tln$1v3GVJhFBE<8jPK}c$p#KW2P`w~kRj%?
zZjv~)Kkyi)n86gXsBG&Zp6Hvo?69o;Iv`Xnz&H=v*d8yojEjWLpKvF
zTI&F{fnuLg<3V7*D>?`g&8!;zRB89B{ffT=-SI7j$w)zduhmGB=P(|@4uAXg*Q?H(
z&cuR-^M&2Vg?4KA0cA1CEsN_e{SLcBmNTue3xj(3Y$iwdMK`-hq_1rVeGLql6Z_0=_Lh;`&Rk??jjJ>HQBq@)JW9u
zt*xS{0Jzb4swk-S#QAWh@f$x^hBOc_$niQWep!-GPj^ApJ`XO5*x%RMx(>WwC?~v-
zX=ou??|jr={UIN1Fj2#x{1~^Q9LTMVXcC1|yb;TWcI88>m(^nQ&k`P`lSRKr2nvl}MxZJE)0-4*%Z
z&S`T1%aqAak}=Tqq&rz(IpBl!GTccR&u0G)HDGU~s4i5QU86FBM9WM%25b$?;0+-V3MY
zn^$~arn%2kWj|Co>IZDNy8=@%OFWy3rl@kvl7&5XS6xz7Jy|0dXh!27TU`YhCxd^9
z1;QSl+m1;FwoPn~8{CS4Wzj_({Ei^?6W!5e$Dz_cmi#1V>tTyn`nKq%bTf;&CFfmM
zcFkZhE+kSIJm8r5yBeks3DtuDLtS6MS8L2-SY7XO`}RQ2k9VHe+4z$uwx5?eWGV?)
zY8(CgHU_islv(lW9eZWYTY7~>+=-=
zR?OJs4;d`f78dzP1>r&N7ia>xaHYe=SQFW#ZQ-!Xfv^n2UCPOKLA9Q&X$Mg+B(`4F
zjDA~P?zeW>Gl|VrtC||Na6dLE5%Bh`D5QgB+$b-u!X<_h(M`75!iwCCt_SH;6Ql82
zaR6Ti6zku2VKdWb@_Rf1R_ig2;vXHcWt}-7qHm92V1Q7wv%@zezmG>h)
zm%*_Co9n);&2OA*=`6HX2azur4RaO?_8KFZh)23~=o
z)R}&cPAqU?JSEVf{yG8LeR7)8b`(x`(dD|&>{=5xJyGjx87cIb%Lmz3LwD=e6m|0Y
z@*MkMVWOdp9)6gF?Mr*sU!uTGqf~F4T0enxkU}|bADcFipr{C5Z&3uFbjG3IOOuOB*;RhGQc9$-lCzj9ikQYWlOm{9{)<9QYPu?v1}8Nsha(Y41*hmc+RO~KeQehuG
zpNK8JPqY0h6vWl_>T<7T*7u|Y@6@UvA3#QVm1ue_-^$hV(WaV!&b)~AFW2TZK}K7C
z-|lC!B%`1n@kQ6R?zgmBLfLUvK}PLrsa{1>1yOt1lHVWamqA}vu~UgH6;EvHTEbJs
zeQHgu{^Y%1)+l{6lse^Wkvfz}c%``l7?Be5jU;FLr($tDjHR82q)ug{tlRo;qLA?N
z)ZcM`Gc)1pMm5`^`d@2Irabv&`j&{64V!SN*DX(;)Q&6#Q_XF#Kg2&M^Qu;ywolo@
zY!WB2{qs%nq4Ec~$BDfxe#5N3Yw*V@xG1;PqJdrojYL`+IwQgP<4pdB*gkhH5qMIO
zHt;vNGtwiOP2aHnApiYx*^UQvhlcUx)=hhnen9er5;&&@gE*Gfht3j=e?K~|$8^et
zOvw?0sNf>87<}vK@k@4Bv&G>hLtKHkP1A`{RepA887KOh#%Voq?T%u{8zvzDo?AJYB#OkfXI;oQNbzY^#q5+{g
z|B1N_vqb2795MPQc$Qy}3c}5pAwMfmkY9`W
z!YL)+BUk0N)Gmjt>pLxE4qIDgv6iuO(>@|pDx{53x7PU(F9h+B4R6X9Gm
ziVu%~Yd4}ow2f>G8g$r7cX$RmNkTDgzGMRD=!6IH$I_}Ew-jLmGGvcuh{5)Je3+L_
z^{rTe+d|K$-+Ybo0p0;Ap#8HR_$d-$1hJD45&|5T)_)&I^>?hNxASpoj_mMMrJGV0
zh&4uzrMcho8F^bgf^S8X_K$;G&M0lN=%(K()SV2bLJlK>P4xi4GL1^crlChQp4cVWO`6~lKxBY#kifz|shlijt&6!_@0uAX)R7zK;w{p|eOP@aF
zi`{9^r#*^pO-`*p8mMhv56i}I?`za${^&TA*O=nZ+~2>o=4;XaV{Htj(|6M}oLtxV
z(a?2UV!;{P#>I)g94{uu|9a0_lf5i$T7CD6``VmdhWs_xkb?TpIiWBR!yt-zrCsx98}wUtUl3`wdQIjl0nzrpgV?a_)wd&HCEnvk-tOm62yi~$$q`9Lp)oc#Ua3z;
z%Xa1a@`omME&i^25?)AlNopSI0e4ft(z7GLR~^9#8NkA=f1+_dmj@qL(Wt^01H~4m
zmo!x);wis4g?JvFH0flWRKA)g{G!0y8k6eaAYd|JmLNG|h8ufgVFC8*6GI0_X
zWBv;igwL)H8tr6s^|S>El{t%a(eI%=5sMsNT&pNLs$RJ0`+@&eIO#2Y_VF{dx3(o{26+e?#PDR)t+wsFTg)#9UE>S9U+%$joY&f*yBzSPE5un|&Z16S1FNSK%*
zzH0A!C{Obb7E97~RgEa5;tAj${Wz<2pmgA~m2Rbg1jToAU5Z7DAtZ
zb<1Py-g18trFUys2W(8K>tp8=r>DvFa{N-oH3^GsK5}ynxpAaVI6?
zvDC+Tr?L70n_zlPop6(`Lh!wtRuxqg!@321$z4oMR2{6?a{16n?(1
zCY;QwhLRB~xDm{=FZ(M1`gmyJi;oo#>>a5jdvZ)Gp^MDZ2NNv!J)gP02r;f+d!(^=
zEh)1)ANqQE4#gdHbgrY9%CG3+;rM++Rxk-bY*&o^_6A)
z!$I2Mp~kHrZkuh&pp8>Xu)}tq`Y!G*vrkSi#9uWuH0&F3QF`h)!ZFM2IsG){ZDpmR
zsx*7Gme{ucw)SFfmhnrIz^x4dS@1xo8vdv2_SKkR
zp^#MOw$SF^h17A>F^?@bj#!s|XUJtPSipBldCLxvHzJHh6f}v?!>!*n
zHVsLLTa!tU4=Ftu});ArV@3
zRffE2WkU_N#Z95qnqlD+*RJfl@VcDAeScMXn`5NodmN+tK;Z_&pgFSv@=N-&c38U~(t1nfVs?
zO9Uk0k>i9umYeUSlfgqWK92VnUT|tfWXKg{@)Q#Nl~uVdXicZV5ix3QQz9uPd!M`Z
z=EsEUB2I0)JLA=^D|)LhzN4RnZ6pOeRFoPQ*<5&IK`~{%c0+I5N5bt9Z%ii}`<}<*
z-}DPcX$f~UB|2B^XeJy+EaC*kuW}Wl2_zxyTocwh2nFgf&)8W7Sr^;+
z`_40?iu%d^L3i3~&W7;8B=&UC8kwp$U>70N$G_R05=r!ZDdM1
z_NDiMt|G;(KVHi=K9ZTU6(}Fg>Y)u82>tsQq#!n_gs(hQjXXBDtHh|Ro<{!S7FMMJm9^#H
z(l2uSjO+``SJVauf@ZY{m(&e)^Ivgr21#-*WfH@OQ`a584W(S$?rH;rFMW7&u#yReHKUcbG6;FqDVF3
zxt{(ie~pb6=IBmqy5C}6F{$f#8IZ`X#7nJIvT#F^>3%0sQ?y+n_m+TQsfavJ6KWV3
z%JnmN&EK)^!;c$L<$gE2n};K>0O))ZT-5LRok}YGrx|Le`JNKKR*}Ts5gQAlzswLN
zrV#rAUh^GwgyLk2z*s72Gbh!GPlFee^pR6N?{5*D?RO
zFSI=Ug@>w#EL*3f%@P(mJ6rVqp@c7jtw}%EBa*E}W!}{JQH)XnubmR?BNEL9c_{Uv
zp9A*+rN$3VK6G5V<-;Zu~n+7noN!KE=BZ&KwUFbDD=1-{_h^4Ybg%?(WFU
z7|!78P(k9sp6}JUxE1tQoxcPXY50qY%a%t--qojgkX)zeuMB&!?$gF?V5I~jaRRxZ
zEvF?b0f~uqL2;spvja%rBl~~DJJ!Sqx}<^4%yI|_1ZECy26S-~AIPnm>PtcyWBzm274>5T?$^RYT2P7m=lU1R+aA=`Tq
zE&ixY7@}M`nYq_11L6JMD~Um&%+9VdSqBO89#}O_Apd54|Blz(saFqEZ~&49EC={R
zk6SCGh^*wCI#ZlAAn}as8+TcUeSh@PQY9c_NR!8&Dn$Riy7swdARn_N>ii^94}q|T
z?JY|V-}^5Z-XmPZ$;SJN94>E#v)z+nlB@oywnSWn>&*hxoFTlp72P5XRDf~8!X3&EoCr#@mx0}Hza;_HiZeBOY=XZpVw1Itlfkp
z{;7Mw#a||oJXU1y>|p7mR-GvT?O$$!4W&$|@|OVSZtjGSvgNl3X?OqmhjZn8$=Hye
zUPG)phZIfexY3xe+Bl1p%fs~^c$S^mju$S}HaQ`+3I;ex5LHzQfK7>xqcD!fJ-nMI
z8pO;CF7uu53kOf#r24a4@NBZFwJqk#j@VO
z$ND8~_<3!`$cc?q5+F
z5V#IvAsZ;gJHb3XYaYFWcKtk>l*^Ia(G6<~Wu-8jRJDUBItgz+QIX9(6zP?-c%i!P
zB@~15+c$ioOSS-nQRlVpA96b-EZ$l7G;y{r6G5lk-$Qkque@5R#A~RJ^!hG%M^m%F
z0}~;FZgoly&NJV;_9fJ)U6vCav}Kei^WlX!zAGS~)43f@^LAm6B*K4Wv(e3bOy-om
zjXH7b)W7*RJ|qp#Hp^E4@BCBb0<`b87At4l$%ptb8y4X_lhM$4MbidYiv7#yts`j|38%cilSSB*b+FjPWXo
zY8=C)_Uy&c%JAxZbi-A^e09!o`;(N)3bwf=Ojb!*3$t`J)e(|0fwZ8mo4K
z8*b^zdWoOBZPW0ezPF#gNC}of5wmCs?cxJIhGyw*Xb_`@xW#e3jTTEY2K!$|H**~x
zRZ+a*R{zbaR9e!@4B@9fczJIzvo5K5KH#hYldA&49TWU-Ohu#&QTom0hQJrzY6AX_J2+4aTS-eHvEKs`)AQHgYH(gP%QrW
zXYWRDhmjIo-AEu%WWa@g1LV@Mr=Ppj&RFact~IX|{#}JBia*ID9|L3AS5rsaRNtsS
z)2!t>{C?m&W1+%~i_&V6V%U>9Z+PAtiMbZQ4Tn$k@XewX$&}L$Dfggc*>7XUIW80&
z)JdWxbGuL7HW6+j^$9d9n2X3njsXrCOMnq*kElP-nAoDUZHOZ6I6gkx9ynk
z^(c@v^22To(4~4D4l>`y#}!Bz+C6
z$O;<{j3^XahU(;|6_htiq&Ch~%2RX?l}049{o>m&t7zVDGU&Ctw=AFiEH3*V>z181
z1XA{ufMh(UHzmokAK87Mcn-e%l6=|_f3Na#EQq;xozsu`Ze;V)L3u~?H$w2~Y7%?B
z^`zxNZ|UXp*Y|@OOOLy@<`}xpuU;h2vrq1NT{&Xel35THy%Cxp!yGa|7@Y$kcj(m4
z$fUi&%%e-Kap_CA;B+!ehb%s|)&6nqII0S%H2NDW+?6h$29_kfEkBRR-zNA;0PE@v
zGB}ABXOe8MqP%?NZNJ3Woi3cZ6ctfitcSJ%%VXIJ%j@0PEep40Nbdqz@f3*g(dGh-xI42CIC$Q@#;d=INsh8(D
zWKusG|LnC8PAMHusvdG-3cN3phRURtogLh$aEj?&xK~nY?o7unRNusS%6YSZ*E(Y}
zstO}-kIoW$2tgGS?)JLdjg9Ib`c){L0%P7^VM?YYjXyes!B+$3hjS&xD!`vi%-H6A
z%!NyY_<&7#O=z)%6E|GTBx{>b1d^0tqvTDtMJ?#zO6UOo{Ts(1VX;*0?!bh#b7c^-
zkRTPX>+c#l5^L~Lyj7?jMdXOjq%F#SFE5}FcS?N!d*IQx4IOpJQ_z#Z^1k{#=|3OR
z-KKYUz5eu)f@x*u$!R;jdCAp+G){S$SPFXf^n;G6prh4YTzr
z_0|3xyyYj0?3<>cKHsb`LU9+p_mRZ@$ynO(bj0`b)px~r62+E_$7T$@a(NRs^P&A;
zn+Tt5+OH6)3`d{k%_=Rd~I5dr^Ie4+?1hrpqXc@
z%U1JQzZ$BinX|vaC6>6{W}^L9?*WMDM9P(iQ#y7=SX`Xact2ych`M
zxj+BV3Qy$w>4EpMjk~4bex9_v%}_PP(OCnHQeB*XjFD(?&K)_m0mie&v;xTS_-0f%
z8@_0BS7kBB&!Zw6%5g39@k#n1Yggi62|MkMn%H!ibaHum&O&R#+6l;rk^hT)eGl@5o4SNT&F
z>&K}_RuOjP!YZWNOUzE#&RlvJ%LM)8>!Hd~JHHwZyM5Ye2+HSV7(54iDQtf%!1@g3
zXMz8T+(+|DN>+jwe`K^RQzqvWjqPhb_-_AWkOW44{{53G#g#UpmSU1jSKoL;K(wmS
zachyqZ{rtrN8`pCadC8^Ew(nY)Je(`QH#`%34EB}MA2RF)TeUy?YVvEL{~!fRaSGX
zOsNb$kFd7y_1kDpT*)?KX^L*B7VOm$Q0)i*u1VCVut{{GFpWQC56~=3N~ql76a+tUsnCFl+ceGRF2Mz-r6
zRX}m)G8>u3MfJ(PrzCts_@J;ptxeFptmm;Nit4?4&lQm0E9;PtjLo`|1Z^;dx@A22
z`Vo3Il`Yx}NL(vD=1YCrrrmyI$3eTvSBT3e_sNd67|o;CA6+RlB==GD+cBx&w(5J9
zn-~VUw)afy8Z1S-9BdccSg$8ej@G=3R8BrO+!Z$?1FQGmb!${QC$T|wsD>xThWF#Z
zR+mWUv-66_wb74xL~NwFB#P13rEQ+*_V}0Eo!|IzCE!jm-QH_aSC^LlwHTq(ga)-2
z=ljIqp8WS8%x)rm+3k@}z!Z5V;`7IC`WFQul)3#3ymZ*qO_y0oE^Bhh$gJ>M+g+VtmWV;~x@sL4639c_$61Q&F9;PgWh^J(
z#!e9bA_@G>xeePzkLCX4xNS|(MBCkJHVKE(C}u)ed`7?zS3ic=e}nj#o~8p_po0c!
zR#q%ert&*{`0v9k%udCy%!BYVIxwICixJdlp}Ey#k6kh`V#;^TM)SWiXoVS`qb@@Q
zWd0VczzNB3$NQ*e!W(fj)MD-q{twCI
z)M9Un3EB;OD#<4AD4`RhCMO`!E=f2^p=6(3=yu0mWF)t?*yCs*V7BggM$xCzU?6+d
ze+4}L|I}*5$M+kMaDFvfJs-bi0k)NF#2V+B2dq7YZGdf@pPfRYRdFWCO=@8J#6t*f
zR1zh)4!(738cYIus&20ZOUh7(o#)%%$kLa{UX?iqA9z?K&;{nIo+l#k5f^}IAC^P?
z*`PKUJlBSf!2aEs8R&1ZLqKsq&sTJN_q;8$@aJesWazzo{R3yLzdk6@*&`AVB;q_b
zq`L355e$TeIsgAzVDB6zNE&z9qtv~HgBZl>59IxmP2?nHK%^Y?g67s;7xrN#GAS3g
zI|e>ig%uokK2!|rYxsX<4t~%G2LbL2gCv)(zpozc&HY#LV0oO$1-f667OoWQ4@PUx
z#F5Jy|A}i?1cd517aYN>>xhi+|J{GH!QR$#(|%7277pGzp<}^uopG|F&QmwYUOEph
zMHoWX&j0V#+jIOydm#wHOgQD_g`liOwm@7F_VbLL--F{g-IM=5P@dwYm9hom$6R{$
ztVtc#p8cOhj>o~QZnc9|{)Wa;Mb#?dmOu7j!fRh704AqyY9rbvm5PiXtu#$=E%hIP
z$0E0vXC7X@w8aZjE@Hscjm;&4r4-BE!PKSZR8iv;`)uCz2X;9S5!&0Ud$!Q{IxJKq
z6$~~rn*|diQQd@>w%RA_cV)?&)h?YCqf<0pm=764x9Q|>5inH$H1u4*{;^f2H!tDd
ztk~$i`^|dq3d_qLm-ZeqlsuCuP46MdPVXt4`Y}0@STE)-?`HA&Ms>=RfyIVh;7hfX
zlyUDfUcMqQ8!*$_d4AdXTmR$KEVDh5iMr}COMC5Kf6e*oB9(3?UcQG@e<=a*p|3q(
zyE8=Kpqf#e@JF`(ZFG-o=*B1Vjr4PlsNRoYK&ZEpQ3cT6W$
z91#kzF-S1BGh9MaXfnP3;5>W(Mlis1LzwH_x0SyhpNY__ZMA_Vy_#hQ)@#JLsc3{M
zE-zOzSDv;>GT2w$F}(7Um!41q(9c>n0rUnH)t)fp_bP|~eE4v;<Cwt>CJFfSUW>Dt|+y2=<<85{kaxliCC)#M`1Ii16zDD~dzQNa!1XGmnO4
zXQ_8%AMQGqUm9zUYWGt)uaTd>7^*k)E-a`@zP|)~a7OFULtlCHT3DPN&%I38tcSqm
zhrJJrRt4VcCuv0yZ&^{Ovb;Bs!Ql6T=V~PJ1DC4x!+|Edy%Cm30{wrSct0_$wZpON
zTcS5LPx<3JPFw#bgx=yd!Iq6VGHvFPff{U+;725`IW
zDM4Q1HL)7yv_FQe2JvrugOC@*eP@4cVXsy+jBH@0&NT*@1}6;)#sjy-xfVEooV$j!
z$`D>$IO3s26~WV+4{PKfh;6{$XPZ5|*|Gd)Td@lQ`y*R})Pra|jowy2q^EvR7b;^Gnr?5H-BQzi3{I)QmH_2Y{hhwIZnFT
zJUmj9-ES@4l+Ko-G#{ihRsn-InLZ!A{P<1~5!y0GYo*gUHY<2LOE_#m8m&w#qX!w;
z*6|jk)9wvQ)~5vZ?bO~>&gK^UyESa_du;{9Lm_?4y1(V+>bI+|GWao^1dLlmA=usydn1yB8#*Gjlt~e&(SYJ05T5Q;8
z?ixCZ-rW)QBR*#1^`35Y1(54bYZO9XYFi|L
z5*?eHL83=IGtu&;h8t5F;lNOn9zu%k=;@&CuN~9+Y7VuRtZ`BDl1#?81o4Ix7sBQF
z+n3wfjY~|%T&n_jT@`3xe?75fML4}*dqulS5y3l?4kNs-0P0>TE`O&Apr^X^4)%&{
zl#1HW*1ayV;E4~Rs`YqJ(%1OG%S
z*3UY=Rus{A3oCk1Wm}$86)E;r53#FCoEZ2ByL$C;Y^lW&Id3nRdlw6y&d8lLe2iu0
z_>%hkg6EHld9k!|yc^f1>eo+D1t46*>|sVCW;l674`!(k(q>ur_S@)fze5q`T0S=T
zt_h2IP!&&SE+fbnXlspxx_W<+-OGAY-Fzhsch9W_xOnHnd>rt`vk1DOKflb6(-kgj
zUEW=F-PS|)vX<&{Y*$t0%+~R@(9C+Xs4#dbYCM*0(sCscWMc6$#>N
z9T_-o@EEWO);j4E$T8m`r3HeK
z;B{>|BpP)>VsAxY%@qvTX1H9&%rf51JokcX6@zy$z}y@Le{wQ%P`0UJJVgy7wub@t
zhY0H61Ju5VngeESR
zP3&OrG%bEw(54>66YN$2*ssigXnL1SV=)Rj6_@mx?Pob3)*D;_8@t1J@`LugI|dW=
z>muM&B=*Ld^E5AakA5%-Y6U4kn%>GIjE*F~*uw4?GIq&3DeGeWqoa&vK7kF^k{+w@
z$wI=puCJXwS$p!Hl41bwkbD*FgN)L)HJ<@N5d7gt^z~{yS-*l9ey?^{(hg>!Qf)Ay}IjgsD)>oA6&8nD)vD}mmYLF1`{jyyJus@BaWGu#QKliz5u0=C7!bUNUXI>3s
zzIPEQeB+)v%A;wbn`{8+dr;1aq^SD8%g-f1g{(hXYr?R~+GJ|7jimFpB`szZ@6;Hq
znvBU;HtE|^_SD?@kvd9V2{?^jcN?s!;(pdIN?wFJ*BHF})6$ksNj@7GJ*oNNp1cQk
zSMTVlIA;V|d6^W|q|$Vh!F
zUP{o7CGIoQ{HHveHzc<8vAe+WQ?bvIU~#uKX{_Vf7jDACc}gZFc*wLDk9is)g>xI*G4HvGpf
zm9N`gDS4G8`+usGn9mw$1Dmu|wE^QlL>8k+s+Yk#Si7!TEbN3t+3NVx+AV8X&PYjm
zYAi~Q`Z5>!n-Jn*v5Z1oO_F?rNK)#1Y_Q@AhBcKd+Tz0c@cIT=%C`8zm7&A?5?7WE
zBQhuOC!4*j)>tN_7EOfus4^S3m_G*Za^JhgQ~lCtv!nFc_+>g+Pyd1y(OVeB%UX+I
z8|5pbG*Qt=(khYj)#3Ze1AeEDlQZj%m~x?vDhQ`7>>ezm63|PgvWts-GDG$tQS}Mm
zNSyfe>Eg!5h9@JPmZ|plx~4<1BElX4RRg?&*c%ETy{?zn6;y(5kDXEI?KreymZq~~
zepX)aJ!@*D#(0~K;mr|Go9YT9R@cY+dUF>QHjaCGdZrHy8p&OK2ZC41l*JF)Wf6ll
zBAx6*Z&nwv9S)j*(d3-u(FJnvv6&&F0I+(zc(dkXbc?G6(+?O}!N?WpJ+HvUf+K0WJ?2?hYwUceP2
ze+S0=Y-22ctO_~-xUR-JyY-=8M<}j`5%L;L1r6anN^`XlSLj`K^QUl|6#ULP@)1Bh
z(m{cxb&()8jF|EJ{B?n2Q+;%38*b=@(56VQ57HMio;{&ZxnB;ke;(r0b^S9%Q|A`l
zq|oro{pyDbt&l!~EgFoE_LA$xJRKQ>e_i@}Urlk2!u>W!QShvk
z!)3WUb61Essu}Ep?rLu_i%ws0eV!}D+)CC{@Ps4cAsfBZR`ln(9Ppx`j?+eTW%Sxs*@3qakz@7
zUs8b3-yOu4k5jA3288$dVVxhRzO(Pl$8gmJXLWwR3PRF`EWZj(HGEb(zX{?;#9307
z4%UerDAq{yD~Y1SsHz=JyoW(l?X-~d71+ZdQCD~`68$&>Za6nSx1BdX7eL)&`$hCm
z6Gow#KEz80NA0+JmnLho9#C=5qO`4+jp|;77k3%PsmN&@E#$2E+LhWq%X;R
zk}b!-E7f@ZJ>j@$MQ=8}3x5SJF=4thGe_J5YgS_{&4MKB>BBY=Adm()FA(d}c
z^hWCEBTtZZOOLz{*^D-)Q0boZqP!Evqa1cCWNWoB@@g&Gjv;!2{J-huFve
zE(hWqh}tw9!jGa6fAt}5+tM$$3UecyMg+$A?1?XOMQ%$ShzRpTJ!qBptcVz1wX4~W
zwszF1Ki0$Uz7sbXFsVzi^KB8#o_~piHpUq%S5;3!{qu|7OBCH
zw6!VD-}2)nT;y{{XFU*;bU72gaM!isHapVm9!y8csJ7*SxJFx$-;J}zOlM9ZcB-M?
zgzun%fr}qt$^5nYc;{0UsMi*1{hcpcD>;u$lZgNp3B1FiT3Bo?(*q-VIFq%I)qNhn
zyf}xp8{fg@C9vG1iqkqy7zU>zZmPt0V3=CpUfvy3-vBRNS1MSn{mfPScLvBU1Di-e
z>v0a;x7u}DqhmY&=kGxbFtEsnWWObE&BEl0i)0@OD1ysuu*Q0wFyFZR-Ij^v{t0Ym
z`i}&%Us0UT0nrYsG!(nBMT$$w>qi;jQWXf+Mbe~?$knJt+i17y?sg=dE_fS&na4%)
zvdoEbLz(ER!{vUbS0yG?cukc_4PGX<ViZ^)5_lAG
zP}Vnxv8Dp~-utV7P45}$zXO%w6eQv~Re=33ZBy*72ne);Gv1wFz+G*wrt8H!%-`%M
zRie^Xu
zDo!{PVF?)U6($pyTn2-XVzWEBlMTGQg7~xa|D@9ATv!33@sRFsq*d6m5zQTvZLry;zpYPF-NRE6535P!9C`;;|?eG!C`7lBv
zMJ|-+S-e1c%OM8OWhi+Dl0^zw%{%=BjvkjCX)duvhznux;<6TAw5^_}c{5Ejm|`P}
z^Bu_^x}T2gbNX24Dwm44Fr(%W)f3I`I;CjRBrhWVTpT;BPn!zXH)eI~LdZm7@{-I5HmlrhZfwGGeo=^hoZIhQJB)s1l2no#2xNKj*rPAY#%^p+vU5Ja98(H$+R$QXB(I~wO}Q+GD7|l{eMl;S=_F|
zv2(q%-!_D-G-oT7I*ANUwa8)3l9u@)al3CxQTgK5pYl_Pe&uaH{J$T~%-LegjJPnj
z#`G$HojclpYVGEK%lkaNVmBhrgF&JKY;LH`oCXq^iH5L
zmTG$1@mjsCbS-97)ci#AiIC>vIbB=Bv(g!#A{DD$rZ2WS^GVA4dXe>$Bi!{Kjt#UI
z=2FYzU=4xjBLb`-FuZa5fY}NwwRQ=o{d0>yRxlzNI+icK8pq2l9nD`Xy0{mb7zqDq
zPu!1unAc<_U@`az-`Z7uNBdZVqk?+Oap5_ZU((}FOiU6pJplYOTWvX_0k
zXd@*19+Pa1eP4$}S+a~}80$#(89PI+?RTfo_xF0uAKZKHInQ~{exB!fzZGh&O=mgG
zf(Pf8_Qd+sI^JjG`S9L01*P
ztjwOGyWi)slRdw{VDk{0K04UEXiS6iM!kG`isnWMT)#l;VO2CYOju9|%;3x99yHVD
zLGz6ET~0JrWDsOsJU6iYMIQ_`=Vq(+UG^yY=-|oukHF!f%j(-Vo4L4$iV~eov@BDa
z`CGmXK9~0fBsz!^(A%1d{(u!a8#+G2p%
z16K;wzShGw4D&otg{#et$~g@q+zrA{Bl91wVE!|Wa0_tw=)%z9Fuy}Z68zWQ|8iEQ
z5*7Z-FP7cn?*eb67#i7m#nad1Y!rss7b5@=eKE7Bv8EV(A
zl@A!g(p7&c8py%vBlBVLOf|u0`&E!w8Ke*Zn{|sra`Qhb^5@Z8=Arbs)uS_SK{4xQ
zNEHLLFKms|?5qC)<6D`5E(cxp@LT*0%wRY`lLyy7A+~6swG8kYRE_3VXK^r^GlbFH
zs}*(NEQ8(R+$$lm8IQf+OM5B4>e1W_113-@Bvuc_4#TbbFf*?d>IpJHmPNpM-dGUU
zM~-Y>A$G#jEpnN~$za77*PJQpJ3s!tP6VMuclcvBvLzfg{P>DKa<*Uv^1@Tg-Nn0@
zrcs{wz&$I_F_YZ!PuAtRiD3=+<#_Nwu*KH$RTx+?^b6k~cU_zL{i2GBCX`Yu14Fl*
z=~45$UTURq6TGmrwZ-KF9~8-D2e^OL6bwL@Kw>|<6-=q5fq=F<{9oJl)Qjd6Sl}&8
zCIN<|yJ|s%i+wCwQwlxesVDab3?32^xYhe|;s@nzPM)BJ4XZN7dFKVDTVI}-Th?LaVBQBBpZ;_`JkTNMA+81&*}J9W8G3X#sE
z$E*&v`Z~ec)`D9h(p7*L6+|)TH2lJc5)wcB8Wz*d(Fv4YZGyeIa2LDioHIvQh#wVA
zk5D_wi2h^%ICK$)7=-QkPK=J0Fa|z+LvdqcC;8V+@qlC8O3^Syi^p#10X%C9+(tXngG_6J3XCuOjcGBCmh{phEAmx7+K!apAS
z%8At$BP4b#z3Vx+i4#lw`EBh`vO!^=6RtJ0m#zjZ0!x$e9?E$6L;i_c7J)_nh$je1Q(U5|8c>>$mG
zB@yx>a*%IEi2(;QbP0p6{+C_RrG^~o6pnH4+O0J{XOMJk>q~d-q+>$V
zDsRw}#Njc~y&bk2cz~n@n>Pe6(E2U?(a7z%J{2TG>7ocb;l!4yzHEVWCl;RScr}~+
z(Her-xQ{>Ck{pnm3aZ)(CTEAF!U+)X?phAGZpM?0Mj+ii#seZ=&IYtjaX55(PW1-i
zV}AN+K;Byw^s7jxU{2iB8K8IaviH+SeJ(w4<)#&!!ePx}DI@0RoabkLSi}4=IRBX?scK};A!|>@txx65#D#a1@tcLuEyvc4wKdj
z={=Zh8qV=4PuPC9%c11>o&$DriF+uewID)dxun7_|04YQu?aataH)Ge!rd6+E1);;
zgFYo!COeky*H=<%K1BqN%UbY#gVWtNTGYpFel42KqK8|2pa7T9?J;}+y(GKJfs5Ty
z<8a5iyAx$rR|%_azU~eCvhA5`Y+G%cZ7?N(&ep&@!{~72k)c
zY5vry;U}>#rkLsk7F(>dCJLM94;KRb{PEK__)Yz
zrU>T=#tK-(#_Jf=s0ko3@3@+1jx<%IBy~Z0?tV_Z*r=V=Ir!}JqJJ0So=^j+A!jfJ
z^ber<3URC%+@(4M$tuFO50@)+KJtRgj6)AwFc`18hL3~p3r
z{gQ=pe-5zFxhkF7OYX0C#rM3evY_AoIK%`;AAEs*+_T`&EBT~K0`JB{BaPfJYo#Nb
zluy8<@O|@-a#uGww_s&e-z71IC0=M>doH_~Bt&Vy?|zZ4nc(sgW&=UWgY(oRe_xO!
zIUw#<#y1vB*ZVi2%y&L_V=gyDyYgV`tA9LQX!ervfTswA>0|@I`xah1*8o8^24pglL_|F|SKD7wQ=}&cJ$_%chpLgeRktS1WaO
zyXw%n6^#C9Bgo;?(k(}_QKV-qV3XKD$PxDEgQ*(eFJ2VTI=8Q8fIfm-HDD2n`Dt9t
zs763}nVCf-B=wNpLbPqpU3U@1%pP6aQ85|AgZ)Vl!x6*FCxUPvBo4x7DioM&xYJqS
zoRPXdhHp*!nP5N2JZ%taH=1NW25R=D-I5mk_9FP5v;Iz#iV)VK_HbgZ9tT81n@Y(0
zFta^8wDYn6QDnUy-ur&`GUes2myKo7{=mm7oti{QRx;-4>rKHn(bf2bDcx~ZG2lbt+y!o2-@>Qz+B>pMv4wPAy|E7x{5)
z41*HVP3RuWst1aA?O{lMYLv}yV+_hO&E)U`JBw1sbW1&u0#-;oWhZ}G%)E?K+))v5
zS$U{s`?6{DP@Kjo<7Le_J4%2*2(Rl2o*}aELFrRKb`%&6x!lY?;Hs}c2eJK-s3nh;Lb
zJ3So?+20=ly6-L;&cB>|B+XQzMav_E3H_YKdAlN3?NnT!{);;>y%BHZuOl-*+M~hM
zxcZ&t)tt#SRl-Y;QL7Zg@|)ihDfYff0|mP7>s~GQ`Q5!RFgMnbU8WM$)aQ5R=u?3j
zF%HL0%^w&xuszmc4%E@~iplWnJhFk{8}%vGBSk%C*f4^)Z~uwMM5N{b^~Z+`lb};u
z8-2m!E?1Q+yQC%y;;%1va8(dgb&y#w5-CP$nX)ieG@LX1jtIk9G6kx}Y$EPSoe&8&
zNnj)@)&)FCP
z-BrSlVQ_~vo1A~vYk)M3=WQBDnb0BC(@Zg4*z>F&Ge?zsdAc~QM_-PgU&y}s{(Q~y
z7u~lo2#iw{PJCwc4F!5m%D_ZWu~>C6akS1|4?n~^QlL!4B8@O;*f4aYNi1lNC9v4=
z%z6iJ;$AuHT#NVX3uF64Z@*%CM!l+IE=01D)#TJWIko3J(WL~N_aCmUB)K=G5H1lG
zGwOk4h>xmY_K~+$w(g{KlnDm6nl_bZhTweos@+3rnvFrZ2o;h?IDY$23H^^_9>1*7
zJAPmJ840{tJ>+rE5{twfAnVD6-RC69_-ue$aqT5LO)vX{_h52Q&QEi62cpvUsECRM
z>U%^a9T?H^>wql+>##E?L#6I>CgtP77n3L>A{^q!3r5vsm$w`y)k$fh+87;VdZ
z!+I*wS`)18;=epX{+|-?oY{bs5U5GQEqx`5I@|gYzos4!4DTkAE~H
zj{nqKW!!c7A|s^2(P_1yWX_Pmxw<~W%W}luz{`rnxUJ@Ku!uob#q-+zzj9+`YwE^?=#4PrhR-%%g4rY-bn=M@+ds_C~%C-j5pMb>mZ9XSnJ{z&<Z{P?bf?xOIpaW^flo5l?WN{&1VMVXyyd1AlIYBOMTLg_
zZspmHXgwpzAmQ}?2~d}e!QtggE5^t=KLOi>b1qL29h+!vqzSXfTd$aoUp6&~FMglw
zP;bGVIeELb$Mw@x+MHIP*UN*u$k0hittjY)_+(b(;zH=FBzOk
zx`qOYlAhpNxt@21^H!#agg5&}g?O0$I7>@n&NEKJIj8~(FId4P$d4z_N&hz}?Sd5u
zb7{8#N_`}lR}bjDV;sg$XJstMV04hfEE6O~U#&Q;HtW%QY~0aYXD^gK9Df`WGVD29
zygpg&Rc;?ikmBTuMjb7t&jub~&9Z=JytlEk8b!FNaC5X)90)f*9MdZdZmHNz+?e&K
z-0e-g8II3c{UkmcbiJ^l7}2|)l9AV=jq99K<-zBW_3d;;RANXycer2aFYe5t)8
zCEfAa7whGzGg00N*+1@SLqnfL>y)l;T3(g=es4y9@Gfs?AFuOfgpX8Ce?c?Wwl(a6
z*vr>LoPRije$c>xGV0(j`d?w09I2EVU@FJHJPOJmyO6-$idoGysw&%$7q7aEK`q!#
zB;xXa=>)J`PxAelIIvRi>#U`}e2N_JXfy?j*Ns6OCy_!Xcsir&7aw)ete9bMt4>#ngZ}`e;jkt1
zBwV6Cve&vO;#8!16{cHM_51@Q#AJEy*D=w1Jnlw?@fK2Q9WR}g-u{>tZoU1x%W|d}
zi}<0%bnIM=?(O$Y)wv#T$-Axmt?*Pt;rFn-s_=o<`HSmu8SE{09-9xtzgSjm=JY!a
z;tj>Y)?Do4&b-pY?~78tpn%P8wjIfvOECNfvBApSlMr50Dt5o@#)B?zesIf)NuL9z
z6B)#1m%e;;nz!uD!Cd*orI;F}ch0zoqm|cveheHe5{l5-p(*SZ=@*1S>N?aulCrA*
zP2aixxg3S_=4;kk-AkG06Ksti+-to~;a4@}z3`({=ToGk_&ws$A6BI1pP6JYF&Inw
z{XT0`4wf%J{D^2t{yDh&h#(FhX(M~(Ht};xWfK?G!O*@rSGnBH!LHgL3M;G|WqMh_
z!=fwwie{P}L}QtEmT2Q^o)0oMFYRA0x`oH!FnW@uJ|8>!csC@L%8JbeL0~y0>Ok73
z+%YkE!1=42{7oqI%gRZ=Oo;sIE?^j7pcZtS5~hvJD=`lA#4bjeO0k+P+1
z+txB?Vsh6x*PF#wt?z^KG`oK14r_pwBuf2<%yUT%H4^thkMNxzxek{$k{2x`TJo(j
zvyDt{ijJ-fnu%_Is}jH|?7V3=^&81G5}zfc$dvWVDEl{${v`R9_06R}1c|ZmJq%?k
z+LKHQcNkWb763gQa(7!k+(+x|FBX^(L`GQv*=rYjjeIg4S<8HuMk?q%a4U(OmjuRv
z9SXw$9H>KG*lwwV&s`REzG;6up;?{;yk^Q0fsBh;q&O)$}V)_f=;po5ikf(ZJ2cByF^MI%@8P4*E-{oOOeUvHwAB
z3ZzhPsc9UC`XF8@wAFc}Zm_LtmsFJ(@GJpEWJ}#qj^^kvmbt0F9HkCcK6}r8(P`hZ
z^S%-EJ_6&Er4K!eGC5?scrYerJ=eRuJuGG&cG@OO$Umgzzuk$Q(k)67>%#!l{*H#9P=rC)zHP&pY%|yz%hHav^>U8S|CW`*mu@fzanZgl^u03cfShj
z`8-jJOHOMIVa(z181k+fH#sQ(S+qY=G$Bj-mf_;u&W})wE4(@rI>2tj$_Dq(IrNC%
zV<2aE)l&Pj!eL1G?xDX|3X9A`*Mm9w1D5w)iiaWQpVnT>>_ElJO2OrcnLY2*HP^*o
zZVnS{075%fF%RmrB{Ajzl8tw{;j5oJuPQy9STCd4kg}1ory36KUrJ;k^@|-3!Ota1+Y=4@{7tJ7mvN5pt&E@miS
z91<^0gdQC6Qo3OEnIp|YCh!WAmfNd2^RGadIt7C$i?w1PDHUZ5*?W
zPJV*sH)nun0!6>W`vU$58Z=`Rf8`rK^XPKzb4mB#g}!#V#o4`PDIwV0c!ak81hIYJ
z89w#*XB^2DX()A^B0|y$W1qAO=4OE=E^qXHDV!Hz6t(GJ=BG)CP{`wo1cl}5xpHyV4{dpH%k
z`AL}mg>&eF17hgIK+b`iP0^rFjF4{ADge2h83K8HaeQ>z<>eqww+sn1N83@!FwLwHVc(P%uolN(XN1-KuYSB4qq
ze2pkiew_;x{rTdoida6cb%#IIlWj}Q=ag&;_s~XQ>Ggp*lhf5l9;Y0?@(H3!+qol%
zU5Kk{_>9kyQEx7ZEiorH_W3u_J1%Bie-bZ&%yB_(U_p@k&$^_jm&RvZFW=*Atgm;A
z&ZYwbKBNt^vUfBej+0y;BIHi#po4q(Y_3y6DidTWIm&taxLd4P$OzxgiER{G~}@@lA_gC6w9B@7=G|6Xkq?k66;nHq^4W9Rr81vg+Ya}
zG@^rW+d)NuWzg-1pqoeF==c^S^o;>aGxoSVJ_#TEeB~A0E8k~7Nsb?x2cUzK$vU4mM_+fHX1FmD?akrU3zyI)nIX4>6_s-~1d&F!WwNVml#_DxJdCZIxWspY(Y
z!DU#NU1&g5A2jB8Yve{e0Q&^7>gGr4hI3b$S6fruX#iKxhZun7o=Kr;fHV)Zzjyk#
zsB)5u4X134=5Tfb#N^nRid8!O@G&|Xi@4165)rFJsd0{etmQBI(&FF5FXv9mNTp1q
z*PaB$eLEOevGj^USsOmF#XxeUU%+qT
zX>MKtZX2BwQ0e4bHER*TsymG{izioc4$J`;3f|Hc55C4eHToLyYyI9O;js?}zWw;Q
zTY!*v^9={!V{rR-=hokUHP{%FCi)j6FewqAlkj#yfWBPNkW<)%%
zSH(B}fYRxG&Is_?de%G3abKR)ye1PLtMIWCELHFg2aahKNP?ue5JP9%)6$@F7&HNe
zQ0RV4Vl37<@+i%~IK>J2Wf{svqX*uJf9B47TXOU#QHmmWl&zo$XLsr7_At{eQ{nLv)v3Xf*)hG}IzpnrchCf+Wwy*0Ss@6SRH&T;;w
z@iz?4paJ4*+kAN&1V5fd7rnC81DQ4(03XuSsjD>bVjOz*cX4DpURCVq?`)V57RC)~
z@&^c$X!m^Ezb7NDV4}98Ru93pWbeVi$BO7eV3wgcS{G>tqu&e!Q>_eujs&BJP=<%`A#&jCo^zk=R{MusIFP_^Ifina{oW
z3{zM(cJ%u;rl1Uv!@tY#8}VQOWtK$!0o79R+G&KWSjgA8*HzA=%-CLO^VJsWpwC$%
z_w$pZY}7T`1GGS}8~eNKenraPhP{-Zv;Bh%n7Qe+Z%rxL!*7Pkt`4UhE)8btd)4{0
zoOX@|A5U_MZ7W%8BRe**TA@3~g)k(Y7yGQw&s5(Dg&fKOO7zpgS0}BKG9e*EVlQ5`
z)Q=(lrM+54$go~cyXlb@DM}6P5-Ec}l5JMR)&kkV?a0TLW0^&MVz!n&k2b%6
zQhoTY+hFpc`!XGo9FqpU?*`C{l$~EE3qKkJ{_=t)pqI@~G{FYxUw64W6&ja-qqVWXsf?pF0EfN
z@Uo;DdYmvQpG6qF3u-`X3=&jXl0^*G6@HM%%L5vG#_R3-Z1Ps)!y>*f!o_
zv{)&>?ta2tUZ0HHxYn;{0fILU{5EL4;^Xka`UuYmE>p+vR~{budi0_;UX@k*8YHRLZs@z$9os(}!E}2fEWb`9h9Nj?NlL-L?%j~1{Ifnu8hCZM
zhl105o)`fvzki1Fuc~P^b>ZpMba$j4T}72gd7t-O?rL@j<>w~l`$6vk&=m6kB;FD8
zoOyu3IS1zD;q+(#(GQUpW{-2-iDj=s@-qQ@M9Xp_)2eQDcrGAChfaWrd=ZZ##%vfG
z9jRMKht4KKvmrPg`c1o3*tYjru0Fn}Rq$QhqgF~LS-h(<#JIB55_m%v$&x|Lyel6h
zGl8kP=i=#KQO$DaQB86;vcAMxb#I(*+>%9%R+v;*|G?0*A1UTlUe!rCDP|9^TXM!y
z1)0zz_S=@3zv(@HRI3@y25c>Vt+3?_J@$7-Kg!a8C-d%wSblG9WYCvxEp3)krmzAb
zSCf~OVl9tuRI)6DnV`pGP`k|j@0T)$%WripQCgn6HA@{@++Dd|(6-z%G>QInC0?B3
zvrp9irhF`~QXlf;`Vt)eqSF2DbZoUkegmB(nsCppvFg{({)@p=lBqw@_mR7iZFTna
zJRmv}HlQPZ`vv+1I@nt%FwWxJTsIa{pEyAjGxeNxtIAV_^`?S1dQX=Gnp2{(^L^
z0LSDa(w+K3!A~Sd1O0B*McFPZqW&T0+#p7gZKXYlIg*qiT+yfM)OWksn2yiRZaibP
z^;bRX4Y2Il^IlpOdvEu@CD$&+0r`_>4|^9L--g{V5UW=(5ptVaYoottB)0N#SovN7
zjx6RsRr!0%&vQi*rOnQhHkX|Oh9?U?qZ2ms>FIbd5j=7fx%H6O)(fxO$Y8}=Bkz
WF!2By5;X8t+
zy83^UJqdqCXY8byh14rHpP1}fRK)*N=H5aX;HM=V+PR_%-vRqJr;JPrlN=qf6^^x1
zzrdx8Ps}LyU!%XCybuZx7G5*4I;<
zR`PWm2jY=L=DW4`HdTtrlKqp8*ef<&oGy0b343P)W^1cv+6u}3G1qWr1jjb<-Da|h
zKdZaL4I4nqjPAWDVQF#6VM*g>CAo5@twn1^!8H6Aqug4h_Sv=tg+f95ar198y^|w%
zLWTyht>$Lx@F
z7sL0Ysq(DgGj+3Bu2Jn!-Apjpf-pRY;
ze~r+ueX@rLyjk~)MBOHQ=--lBhLf)Aw%#>p@ShN1o||2XbzaX3_x+O~fu@cf#Iv_)
z5L4$`gfY#UlzXs@$Hr;F)5LG8!hW4O$u85dwNv03gErFDRbkxEs5tYSbM5Q&%_ILz
zKZpSMuoXVODd{I31T4VSN-R)15@Ij?mQPxrFIQe+y4bpLeXc!!61S`m$~kE+#)C#l_@`0uPih;_393!&Q6N-9i1g$gddv#lnGEB(cFIs|02aUk>lDUC@Imi)m*yn-C
zGAujsYw2bhJun9sk3a|!JFb>!=+Pf9Td*&o
z%DgE*0yZfArk#U+pwvONTpRG|jU`ES(9fQl-lQA$v$6AwhKe(MnoWpn)?KftsgZD*
zS7F+2;wrOnQVxLp=c;Lt1MvS;r<+g_rv>54xHOL{XZAszY%B=G^4Kc#O$;gq68k!_
z%G}TBCRz}2i$(>uyV}74kJ5mXHk#FZI}aaRYlJphF3W}w1Bygu1fuW(7(X^~rmDXO
zMw3OJnd*
zX|ylEd8gQu@QefDrl)Mdc`~#R-|xW*zj|?x++PU$rJrAygq)
z4luP=!pCXZDgY-5`{8*S!97U_oC#zcjiZ_I?WUy9f14D}S(1Z3*uY+7D^T!Y&ZT#q
zP$XqyHGcc6Xs^wqUD)qt!phJZIEU-SP9T?uonzgzv53$&IT1
z341i(b_KxQ+6Cb!Z9;%j*y=9Ijh@sPfHI49jGXO3HJ>V=W;0|*&lo-Ib`lYI=z$D2
zN}{N*AGI$7*f^_zUJ>wVI8fGV<#QC#_${S{ys88%xhQ;4<`Y@TB4SiH^-6`m0M##T
zG0qqbht!<|Wv~SScVQ30-_o{&yk_A{y0@g^q*H9*FVx~(3f2A9ya4qnT4mbyQ~|y6
z%30@LUdK8A
z4wF~Hc67RXJXl@4{d>Cuo%+eP-xTQfJaUznB6o53M^kA8KKQ;hJj}eQcvCO7%+NDK
zyo=DIX_!8AbC2;O+=zQcEUssrDcQ>V)}LYYaJ_e-|L^v^KQurg9B0EM_x?VO}u<1a}LCx7KCCvZi
zOM%VaRTUqSYpK3v88{3(DK!;BlR@5cFMai6aIYi?!^VSvnX+=Ojr-*Ev`dTZ(M|tjsTziK(#gHyumLQ6mM``3{C#R$)HUe-QyQE^j`f~mYNA&;bL~y6|-ux
zz+sc(!q@|zdh=sMyzS*lP@=|__w#P^sB6#}^fpwzY3*0ccmu2{xo*SL>v{q
zWSGWHu|2jxCM4sOXK#+gyb`LdJnm!SWx{uc;{;-M;bYYgBV~^w!sxM{;ZeGYQbWe|
zIOtxC$`(Y8*N^god0RqU8NTakqqPLl
z%Bpqm;*Vj(=Ph!YH>c<gx8
zt`v)weiVJmmR|e3vh+{LTLJoycP_~3{g8X>bXl=KMG5_gX`M)B^o+q!1GF#fyOJ1_
zjBXKy9(aXi0`h7glX2kyalo#E(5{2V%gggeT{C0Mh*N&@sB2m$q?L`0%O(vKT7%}l
zq@oNP`(cVXVc3Zbj#cHdz(g=|o0jw^Wdc#(WHsPjS77LHZFA=AkzAI0KF{y3_o=$h
z?yPb2_==>9=pfM;oFSX*ZE9R-gAe%n5(;dgK)2J2ahVvL>+PRjG(ur(HGjpfhrL;B
z9r^W4qU*t_&=+MnxDtHpSNF((R(z`~$@RLv<%T&mVx245g~WKX>n>@Elt!zK-ihYA
zrjje0@3EZXddSOwY3Mv<5ISMK`zfL{dr$j!9Q
z)NH1CDYT28(KB0;YM|ybnnyxv&nrqB-8q*R*uI&9?|Ar|ET#TF)X3
zN{pvly?AW&Fbe9_dzB?DG}NzAeOMeEZFnW?)a{JcLPL$v>t&9!&Q(81>-YP0G{B?(
zef#B-8u%Ks1xhmVi*IFL5%2y8(eek1ELEG}Mx8GXEGhXU5m)Cvze-fp&1T1ttK<{K$`NMFHo+5&{_b;
z)^~>a^_?j3N7(xIqwf5fO>XS9{4Anhb6x*tUQOQ9dW+V+xnQKfR3h|OVnrLd`(B^$
z|03~VPs9{0XnK|DX>wDv8VfSFp&@*0t&XyD&xX#29NLX>h2p4aX(_AUbfFr}EKCz&
zuHQr=N(293dN7&55twC#s^GOzGGpi8w^jFdWN6;tRZHw5%=kWXN1>`Yl};!t#~+>o
zwMXTyCNM|IuXa1kRejz+MhkWoVIwCTOa&YawC@t(hJ9Q<^k2j?hYq@Z4*OFFyEK#uR1twcadyx#n34B{l+-k=i+aas0-?If%aPt=N7_W>c7M007rEG_2_kbr)57e
z@;3CLB)d`dlHp0Wb-ZeA;N1=v2X9XL6FpU}^2HF7A*M}@y%q1@X?JP|1}
zHj0zNrQLj#@3h*;dO^+HBSRUK0{Z7$E#Hq`ernZ(6q!h{be}h|WWTk6J$_5dgkA{r
z3zvJp1s%r{=2(0^`(aA2pHKFFXEHmy4p8QPAO6@g=R#=3)ng3#OyY^Te_tC4Gxgp-
zSzCJLy1i%NUgO70bMovK?_V-7uJ184MJf~O73AjN$kxa6-zLbCKS{1w&!(=Jfw=|Q
zG5}L)dW%lP$=ot|LYwm&
zAU^`ijNb^s(y$97!Z7lz^Uc$$Xw>O}R_EcK?CAg}w`#J$6y&1D(IA+u26=VS
z7M)PFN)gaCvh$INcM`c!)=`q_n;@*`d%Znt>e*EE%#EsPZ9$95t2L(Udva5rXY`!C
z1Of4Xs<5*GTiSts46uLT1CfwwK1q5=$IV?Nfv{_~^R*0c#@f;l<;II&M;K%|RkzQ{
zE~Hk(7@HX1D4Ur@I~o$Z_jeb?grt}AJD
zF8RswyR*(S^UW^ya2B17`6yjDq(rx5vOsFR`Jbpf-bJ{!44@Z|chaq#6n^|KLX9z%
z5~A_}&_zCYKFEu$fp=91#KmqX*0uY+r6NBJO84Rw_3A6Il)n=;%9T%^rQ^&4W+ZQv
z!Mi&|;&eXhJs?>EKb>qk4IhoTg3&5k6lItM%4pkqHE=nDoJVOZPk9CBXyJb#tgmD)B08h
zss$)nqty7Wq(U4+FuW`7rghdb`{536&R7?qxABEEFH?xTSmj+XaX_a|rVde=nZY9+Wy^pzz^aT?)a^)XjQa
zA#NibR`UWrhaPl;n{H@?z+1}_0oDC0%032qJ2?o)TX=#b=N=awQgc3`%HGHnJ@+q5
zOAB!Eyc?g|jOgaE}cFVKEFBAV2;|O(fh|RE!f><8i69&Ip8%
z8)!ElGY6ZJjgwaO4Tj?3ZgR#Ge&)*PJ^{BQuFJKWwIr;4_q-rGtnoZ)IdW$9dzyQ8?y*txbDqh_II&!zfmdaJ?UI3
zr+x1!biQ`GCZEOe`m>jqm@<7R3;ji_&rDVEWQeM4#L}fXY
zpL9&6CPy&9K?ZKuG15NZZC4dW;s;$W4DPXvMyN<#3U8LIm|EFO!HYHH!rHp>6)HL+
zD^|4BkKz*s$r+N^vl#kMx8k7V7rhu5i9QNE%7j@4{&Nv(QzN&M`+lEOcCS{3A$6#b
zvj`#4dP3{_eCr@!p7M%2iL9Ot_$MR|
z$P+WyeZWYlQQ{Qra*eG2opzH_(#rJQrHxjH&54QT=c}Q0yd{T}QdLHUW^S*<^!}~?
zu0{_fVW&?fOoTt94|w%Ed~dj_747}IpuO9WRf4`f#>3Fo&8ReBs8Uuc1A{x~dVtnO
zFU@jL?|U1Yx|S*8(;gfcTuyJ#=8snHuPXpv&=r@9FrrwAUGl4aOGF
z;|&Jg;Y>BXB>m~Y*?AbwvRquNA8Fik?pNe%Va*%E-8&Vu$Y}2$s!7$eX?t#@G7tQv
zJx7w{w7`ENhM1$X)W8N~#luIC;c>x-SwOTn=GCls5h`L^Fz&Qu7#I@#gyh;adxZAN
zb&-jy0_`+^PIfwqj?2A|mnbaA0@#0rv%f4#gWNppBz?gazJDDj{yRS`r@S9m*jsJ%
zwmAKFeiosQ+80ksiJXSg{-g}|r1o)B3@&}h!0M%T3?^c6%y#&r`Z|+mh=fQ&hzpIW
zCQU`h*>!2V0f92J0)3Mhe6YPxTi=|y9XqaA1
z@((UegS0WG?Y2#;|IivVLl$rbB;^ruS|1ugQa>7CZ#?U~r=H^Q^!rYs!^bX42%OvtY^@qVb?Rk?Icuk%d
z$e}?OFpQ^gnkocD(RHNTXl>6dzq6``D=3bMfJ*n>N&US#NFxaQ%r`Z&OWHeKB`us#
zgrrUI#42^yX|si^bShk?(8Sst>=g%Gjh{HlGhme(gQPTH2`$q`gYj7UsRG4+ZJrGm
zdd9s+lP3}yD`)D;xk~ZA&k=L?;9K=uyv;>rADG(A0JRBmM?vK^cNw2_-93>OzYli4
zYSs>F69w^!Z#wblOOl>hx02f`a&OSh988}4*Z4;<=IG&)2*6%8iPqUun0%+0|A3?u
z31P2IcDEHuH;ArG&Ur?741BVaXNA^oeX77wkp^X*0Zd(gRL#Fl5Q~!o@5E={z
zWAgr-(MIb%%f+ku&M#T`fX4k8oK>(Yx1)hV=OX*q(T(QKit;M=3fPZ#+}b+F7N%yr
z>&U?7{!|0G-(H#D#eVR*03bY)I+G_5g
z4@++Fr(0P7PyJ*;V;raUI^F#)HPGqNRr@SpdF1I01%l0+SZ`+=!u*u9(sg;LiW}w*i=q+7;C|RgB{biY;^nF`<&rJ)8~ofg9_0V4t*8;`L8#3%=6XJnz~NY9{Y1x|0~4Tu3%Fk?zHF@8Tye85H7dApP%2;`!};6
z=k_Z^nUWaA6yu(gTuts-FZIs-wZF9U;MZzk+wSh9!T55UoP(Si=Qr}yraBnJIJ`QW
z=W-_)Xy}4bE>n{i1%~X;=@;O0ekn^*UNR?8=HJBlQk&ykd17INC5<9PY*sHOyBhm#
zo05DuH1AkSHfNqW_g-Os(0^nqQ^8*&61YQRMDBhqL@~@kkuS?}SqzdBlY5#li^o<-|ALNDYu9WbB#`m&?sE`^}d&%JPH^&iMtS*Sf!sV~B2)^;7aY6MSodyqjS^VS?_T(h*67Dv4V1
z2E1Iug*3jh_5@>zeGy+QWQva00nO|SAGE}Fs|V*d@`WYD?wEadBA+|ArOpdq3qHy4
zKUEl`?hcCRc?HK}YiT4k@?4}lvhx+^uurXvUJesiv#aH}Msmemtrd6eK=6>Q;@O2@|p{Y8d5HQ)`mIQba9V&1A-m|H8s`Rkx>rp`Y=Uy90Uncw*H_D9{VdyzK;C?x@O`@!5F
zrOws@%VzrV`%yk`1Pwy$#;&5_CO_{6t{26tsP|$}(-Ir9z1;#k|19zdHjcVlK=Yd`
z`1C3IxHj5ylHRf=}(RsvMb~+$G#I6CSuq0+3yRs=n;t*q}F*?
z^UVFN*tWRuA>Vs`l$S5yKYaMarFLnYqU95jIHE+bd8b&N{+T@G_=sEQGqE?v@SM;J
z2Ph&Y8WnFeC9hnFLG!PTmzI7{3+RaNQ2jSao#V(O_bYDgz-O9}?$$K)P0;y4z@+2s
zI}J-Ni?$c2k%L2s?#{?OzBMsm%e@fwyhi_&HZn{cN`$$LEmsEoU<`Xqp1#$=?WmL6
zt3w9du+9;(UTy^5Swm!uzuC9co}j8Se6zU|s6Q=!3HW9IT313FX}>xQi~HQ=|9JZH
zc&PsG|LNT#sZ@#M)Tl!;VOY_`=Pwo8$
zH_w7sq-S)J=?VKkN2L|xAiK`=yD^u8n9hu?)NeQ%fC@&m87a&TbZa
zJ*0Y>kZ?!kNd1~C_a5sb|K6hD0(%M1t8p_s?=y@uG>EOY;dL%AMypLm|8%heu{Buk
zad?g4X(MZE6+Q`yGUwp&P;3d0!**NKUz4o=9^G#*6p$JBVwWhDS3?&yErcCh2q&tAjZ
z1FSbB)uwTVGTSUJ4zgZ!sSk_(N8EFc!oh^i|
zMSG~oO6?%MytRop$HfM3FuXk9X%{q0<(s&OZTJ@k#9L_uVmy?Z3vl~Ki(|mf+1HDl
zyKh%tdLw`w0r^1
z2dz<*Y7DS&MMs9lZwUKl>J2*S#LB!n{^METBWSe+E)Ve1wmQBbv`JS9J|Dhm8vZsQ
zdR?K*(0zT>8N#NR`O|Dbd}d6X)mudOJ(k|R3AtS_3)~r-Hrzx3w45qPX1^N`yamAWj2kP0KJVuDs0*R`?pukZu$Qs}
zN&v^@-P^WkHh;=o+~|Afuks_6%f;~KOq9RS4yE(*!ds%hPN0wRE4Sgp8X)c$Oo1ve
zTk-pw^x~j9fDL~F`~~<`80g=D5aM7FR0n<&z~=5#8l|x%Wx{BNvsXNYv-c6^r?}FA
zRNvDD&W?vF;Izdo&rf-j#*bDV3UuGgS<{@Gzx<>$<~s)gV4ehV_JR}&z{w#g<|dvG
zVINxB(4~*0jcZiQftj=AM|9Y1Ha`|bX_Wdqwz#6u83dH(c{J1LC`O()3Xm5F5Ai3u?Js0IdZ>uLZZuXn6JkdFs_m9pWmE@x8itMJq+*@+*5#<
zdtZI}oGN3Ec38NhH@j;RmfhA-0s{TPF|?lU!Y8P5Q|(}7O2}68mkR#x{&;`yZ+$H%
zaP-t(o>StFlrM72+`MctaraliF=>CJmh;9Zu3iu3S0}S=7#-47AG>w2r730a2;?dY
zJeamIG(_j%f@WXdU3lU4+xW(Mu$L^#Z7o5T{3dxX2@A8I*@jXGU<{VN4PI^Dg1c_!
z2>guZL7^{umm3-*A^mTA%=B5IT
zWUV6+xLwyy+_g+!_0GB5(__L}6xz^5rE$!0UyfU&v)Uj-S2=odcRwl
zHXOaynxgX(7p24;e`Skz=X(Q(BD*U%W^H47k?QQ+FVhQShV#QV3rL4li&;T^(mC#&
zk1kWnP`zQHa3+s4eBJ^axX(8eGjPpPO=VMsUHZd`tTrX^?tJ4CsUV7Ohq%Os`y;dR
z=o~&FXAo!&4%sGyJK$i<-B$o@oa*}M^sr1XpBbFJqI1~r{Y9sWnzOss){Do21cWXg
z{O!XT$5;3y4tl;7bK+vl{k7mT;r!gp)d4{l{R~*CPw86HqXU^;i3{7T4(qDMLG@c~
zB=RAd5ip@R{Wk_g?+T7SEzyCA`8+cta1l6M82vE>-Hwgbx*Vi({JZXHsLjIppu@|k%NGP86|0ekM7!B
zgkKcGp9>=EY*s!p4eI!esa=6aEXg`O+VvE6GC^-gQCCOEyP7Xs!B|{ozyZ^LqeS}R
z+*dC2v7rV&!??yu^jTj(^j1e$>!dTB&Ny-m%#uuKB;;5PGFlb_fIxKqoLG~AGiJex;k^r@t*vgRk}WD%Sk_DSj@6ANbk&tR7~(iJonX)JPF}p*
z(nHaC(_rn7Vh3s~Nt8O9<;hfoHU1CiW3CYtHz5x;`6bx`C~N7_sBtoL?#lk4pVb3O
zH_x`dZwL$})oSpbawo1o9Baxgw?0_ssUAgTF}sQ(O?R3oglNW~g*TKfTG+E3@#_E|
zTPPZG`$7udMSu8fTp;hCG`T^^JPN_<>w}x%h!pMxaN!;PDRe0@CdZZ1xTX*+98SaHx!3OglO?}Ni16jvM#5X&Bzs9^a0
zI%PvzjL;?4mUJ`+%H>1XNXL42-NS>$tUW$g3?K&Cltp4p;FatFt21OmiI0$Jkyt2I
z!U%RIXb@#4IgnH8_~@c2%o@AEFGc4QZ(Zq0fba_%9vuYt#Vjql>9bYazwacc0*9*s
zOj&TheR>$_jDx^gynxx&U!sAUw1r@u`-4JgZ!s`!cj84|*kUtWEPRt&_Sm3O;SMlP
zU=+Om4!<;=@6yiQ@F2O7_)2o;(>kVOZ1>p!PeyAzb89Bo6i_?Qej+jl<+hfrQB7@C
zS+2F$)#ig7H_v4;9g3r-0E+o+^E$?6QXil7g+dX&=8!7XHJuQ{Zh$Y{yE&`hJCJ6@
zCycG#{77{&!LUke5Fzj&(V9hn~uDF#;1a-sK
zq8@-q2%J*;;u7#IspAut7P>zk6FLDfsiX#PF`UxjMf9&SZ`aVI9;5t>(F%o-so?=X
zumbC%dZPtlC9}KK7C?h*&QYUiDG(sgT}PO*Olb9*M}bP+>YXDlZB_STvs?J%xI_Mc
zvUXzFPb=)wKmZ84w3P#Toz{X7vL*Uu40CSuy)ShH?OH%DT|}Pd==DjhSf{Wj-C=B%
zVU?rv3GsFOO1}Rvg?&z)cxFD0&aw+2iP7E^rf`B}XgjIIy6jjhch}V1`=dF^9n7s3
zV52-g;6ou?JN}3`p3Z7>2Sk(kLIBQ*SA=o=C#TTA8v~qc-art7!63`G;j!7PTiF2y
zoez~ic;#&S5xu0xMB^H}7tqpKY;aBaP=_v2qtFwekKx>1!m~Or^PyC6a5HYcZ!QUc
z5_xzjgV`!&C)QQ02tP0Ycq=whZ#S|4EH#&t-`Mpz8}E
zFp$hkj6(kKZYP(u$m8DFD03A`?bY8DSS?JWdky(ADZz&yt&G9CRUK
zI^;KXM1#)KpbXZMZDRtZ27pMIRQIy3K_GNy6+qH-zc|9bc~yFrg3u3IcU)^jfeovh
zhV|(dowUn~@f*B56?o+Koh_8b^ikdK0PpPaEZA8CNchaNg#mKgBAHwFbdQVSnq-~f
zv%@7Xga-mLMUl$`d&2URVcaNB0d%X4FF_!N4irr-5~Oy=wH3?}u&A2K3Yi>jIZX!}
zkcY{OB?B}dBtBq^n>`#y|5`n{{zv4FtFaS9xX>>jYI?r51E-s-KWxEGX0Id{K#gLx
z-eRM-uz_Vbz~;*?2Kbg5>d3hW=GNqP8=M!|{848?mdL@2k>)K1a%WYAgZ4f3o|oZ`
zIlBF5>dTN{anBEP?DhV|b~Xx$6T9fjkPI&rpo!O0vecADqK9{b8
zi1l3$&FGb`TpYcZ&b0wTIfY$S9IWT_8;9+|z0ZDQ+6AUu8%Q1w`;RADa{D!$%ziUE
zpVZvgGZOPvNq3b4tkm#%yNtMnwJy;7W(p06L1cEY%(Hjlx=%+6n6VK**q%R7YPbs^
zOR*>tbCAt*UUBW_0W!O$H97F8MOk>FgxE#gji<9GHE=Q~f&E};Vm4}g8~)&H&h4?c
z<+uRyR;#-v0=M&&`E=tBoXlnLNK~l;k#--LlBQ}`hWjNsdNn&F?gwrw{rmOMh&eD8
zw}5AgODk8y*P9U8hML8XRFdg9tBtu=g#_JFBq1+1_pFO(Hm6=6+H7u-v;=^1sLj4XK1?*a~`(SQMc{NEq$Q}IXq;olL{3E!6E(RrGPUqx7d
zB3)^f!Gb&J;|$AJK<*YFQ>Mv;yyb<_a{AA#8pQ)Sx7`^WfJcw}piEa-lsHEYwDu|^
zLCV4t^h5E^fn4V@`VO>FDUC^(dn?Zwz5{X_{YQcVT?EQk#Xqukh_CSPJo~N{GwC+}
z4nBg`JSP*n$#HHx9o%(_iRjwL-TYY-X*}ER!u}glzc*Oj)~Go4vpxY#-zPh;a0jd6%xhPPqceH_nFKv$7n;18%iDz_b8<=E`3U$jpS#JOmI@!y{t`7mjde
zPBeG~+4QiP_5?rax@+CYJCkaxm*25$Ig!?5nyQTpL(kY;#++3+nb#8ZN~4A5whd^E
zI^yyqb9;5}VuyZ
z62Bw^&OP>#UoYt`yIXB9>YLK{)m}5dHW_o{;bbWN6v8L5oy+wEMIcKYaNm207c(EgpqXBGXz*2=pbOR1%NAR
z*3Zv#dThf`@mOzfz*)rY*oCa`H=mqKnwKXor&6dsyf1ZbHP$l(>_4|#juoh$0pTmW
zzKhsAl^$wG#=N*w=Sxe(49Si43-(
zvik*(xOU)O!{P30(<>{9lQShl{L)CC6R6C}-T|M^>pLL?D*4r_6KVAomgQZ`OVNLI
zInS%#?M&D1GD$eP`r}@6Ay)nwjJV7dC}WYUhiJ_d(l6@B>p1ebms-n25eee@8)jk;
zlL_Vmb?1@4Ass9+yR#HAUmvbY4V;j(!GaR)z+h%mv|AsYyDj%+cXo6eLT9G58gm-*
zeGFtWg+XIROvOiv!PSf(L~jE?`T~uOPm!3xVxu>=s<@E}gRaQZ*m$qfqz3`ERO70@
zF%@?Mb*R(8TQRkhm>MQDGuEN+_iX-NHvlI#ILi{497B60SI!{SX^Yem^@y|wc8x}4
zf_8W^i-oil&+gxw3`GCe5sT<fC}&+~z3`2g*#hW)3!TIaF3?>n
zQG)ebUpi~E7F}gA2_UtWN&oBQAgHv;cR!OLS{MN8f4vebysNDDFz@WAM6Jlx!RmjU
zJNa;QJZgD75cp?y0{d`#k4+-e?NYTH-PB~x!KFO>n!rJzsBeBw=KTTS^@>#;13+I;
z0^~BBEF}e8rxV%*-`-c)-^Y7#>~eX&DMCC7vIfNYa)^m01qdN|`z_D45BrlK2?Juj
zU|;A7A8m^9-G^M@p6wR{p5v~Y`@HQ||73;x#drOsNWQ-PzQy*?-7pc^gEx5&9F==_
z`?llsuIZ!KFF~sEZ?9&L{E2Kg-FQ~u8+7jW%1}YacHDeNLWFgc7Z
zDH$QX=x$?<63&h~-(j!m=^;D+kt3S_^7Z>EWI!L?=V=O!H@%Vrmp&&Vd46}V>pGWp
z+4-Bg(a;mdg+(wu-+$)RtCDv*7;eSyX#)S9Vx$smZD7Z~16hz;;YXsH6|6FJHRsQ%
z29diQ;fJT5nNEk|?Ke3}2Zb`AE9NKX#RmSiW+3~6znIZRL>j#%nGV5kW0~O_y?5qz
zQ{oV{cegf^`is}0b%$hrI^td$F;6$7j3)>7R6B+}^vKMBUi|w$w+Z~xawtIqrt*Qp
zZI2vRy`C^%MOo+(wZ!{@<^`(s`s(0$C#wwk#rv424T)C;bn)~0pOcVk!f+d6sfRCk
zD3xhlP*XUYSbn88$&X8R3r?o7Dyi{fX2!TWenSVZX1KAM)-s+p~N(h^t_ZBN<
z8WPLvgz$o@U3bs=^icM`E6eU8WhSLxNMikNa4kVZ+RsWyzSr@lm!9>TGk^c?mvEDr
z>^-#@ca!p_3b*j84jqjTR23jD(^&cqiM_QBbCcf^Eei~^%5|a)5Y3Fh1@?k`zv^Gv
z23Ka|L`)tVFLhMEDGYjk0o6RU$a~u3=HC;atA@S1W8d7l;q#&~iJ%?kpTB$G?a8XT_Vq*MwJ#rPdrQous_0)4
zRuFAC`W|DZmC|lK_T_YYY!h^KMflz7Bi>otA{`=+2gG`=B!GmxP+;6^*<&4PN0#z-|ECfo^8(w&O!d7AA22O_0~Q^ItuZu}P#k&_&~=3V50WJY9#K
z_p48)_Nt%qdCBwqKxf;X5Qz_q(w}c;a?0`Lk6zq4wcqjf@PA*wF@yyHsMOZK%JKPG
zJW~#AWk=5|ej}IHty;6|u%eg%>#qvQ+>@7F39iMD>YXtwcLr&fYi8)R8z0mhw-4
zJW9xIRj1i(>aG>P7ZJq1{cE~R&niH(-r<&xt8usSGbJ!_+B^nCXr5fq1U@j>yU<8g
zz|fJyQz(^|=XK~jo6RqvL}TAh1MXM@`bTuy_x)NCD=<|6bvPc%G8pZ9rNk%~!`{Ej
zF;b>Ccg=%R1+Xt=?t<4~!yIMPAVN#c$U|~vEB2azCu}wsx2XOFNZ1z@IJ@Qv22W|*
zQ$WP2b_#&kur`mLFdT}WMs}&=AIW0o6L<^2qR=t^RuFyq+b#jZZlhnWjJet-KB6*1
zE@>2CM=KA&q8!`#hzFOhrgBzcVzUa1sBB*1w4g8@A|=+y3SxbC}F
zP2=9yqk9Uy>FsrLhuKaYX7zL3mcrxMf37g7%0F;`-V;}F)~wjZLgzg3vD+Mj51}!K1Q+<7?mDs|6OJUCG
zk2>^%H4XJGF~CoO-L@~lfOs^!?kk1;?j%77%+VzfuDW_TNlhKEdj`qVtk=g@2N1tE
zlD;wx7;@vC2w7+IlP>TTdd+LGusEhL6TGPDv;pz^!)jN$?+Hb?0ng8c&A$(&aXN{R
z4V;lpV*`#TVfZvq{`)x%h%?kIs;}tc$RG_9wwn%g5(QwT$MOmQ+t(ReZ8IiH<(3$~~=nfzWGf{uWP&**Jk2?%l
z5h;z~MzueS!T~LshE!{=PXQ!bfZX`Q6BRXdUCHO}kpv&Np_3e8Q1PYmf|a)&cjbob
z*_xr7H`Mp@RjBXtHsU$uDBR6+`{nUZ2dmZfsh?!T)RZa6c3*lueLhkmSgBCjp+jyJJ4KH^nfw*l_&MpYdw4jlmz4o
zccmS5okT9Ox3L7>cQ5Z+MEk9(Ys*!f0fIuRDyOkLUzECkj+9T(ek
zYv}%eiQr>^n=D|>40bLF4>d(PI*P7Mb!Y3XS-m!CAkY6a(M2EgC%W_A)>%$PHedF4
zrU>e=hJ_lAMNY1Suh}*kdBl1PJKP|f3x~FlW1=}hxm#`!PXoTI+>O>rcW4oX>m_z~
z^~ldXsElAETfH~ZGUNZ=mY2-l=8I|64~|&EoF+v7#KytgHjv6b%E_lC`e+>NwZsi;
zJ<57OouX-JiN-D#$2@39vGOapD}S@0vB1z;nyJM%MJIH!blsLG;6i$gn~Tp&GE2r3
zGT2Xx32x^%t=7dn&
zoZH5g%%!Ki%KC^8M>OuJA&L@@H2zK7R~tB?zGOTQ|m2b{QsC0saKITRUh14rZ-Kjqe}ZRKb%Dd)ab!$CF;3Zh;XxJL=2
zKU^j8M@WK2dSx^Y5)WypasQrSNy#&8QDT)BJawb=);_P|fm3@=zWTPOUiG`r?sunV
zUPr6kQkw}-IrS$l+RvDKJLy_qUO)b^was-=x>?1rS)r%&j!d2j&!q(kAa_fH+0bA*
zVe-A0kyxRi_IaHks!Gye@!cOzv6=ybWX1ajgqg4BL_dvly*pd-{}UgOt@+uh=f!LgW`&BFWwdJwwyT(>%zQ=kucgg#WWCCT*735A_sDC@3G4sPVG>*4+
zcdY88yNXUA*sG!dgbsmKv+1Upu9|9I8e=%bcTM%_S!ade*$eeVGFFs*&wH3y@MhHs
z-RITgTI@Scm8l*VY$H{rGs?l)0ruF3k!MT}%Mf_B&6G_@&p?GPd6jHTlgc2-S!IZV
z2WdIbmj6FpHt_6!7sU#DrXtQMze_$zrWU0dwS)^F{hpa6+v*$&a(ac_Bd)S~bS5^&
zSLVdlN37clpj)tmhWkPppSd#L
zJD;!!Hk6k{wwO{`x7KfAGE)>&w{w&Wiehs)M&r>7?^(_3W0N{g2y|
z?ZytHilW%zDCHAH7Vn00Eu#J`ww~hKE17%Ub4`jR>7Exe*ai}~hmX!h`R>Cnd(ho~
z10e~q;ec+JlHO+vI`>7fY&AG-_7ZR*@NBbYa!l^A32k}Oa~#&qdF36)zSY!{Z6>?;
zYX|v?WXPtdCI$DQ7YNdt_*H>=g0Hd)Ek=_lOg>J(+Q1FzhRl74a(FKvJ5zN;iP6cu
zDGO4oG?ME=3@9noJuOOGpo%&u5UbKv;tf2`72ks&vtfJuIZ_QaU#NBlB8zw;tf)_p
z?BfL`B(HkIPH$f0n!@nrfwt?rJyQcH4_D1Rcdz(}3EzhkiVQC*tsC4PnS6TIFv8RE
zvEh$%Ju3B^hy6j-F`DVnBI>!Og2*0efB=!qD9mgs%O7WnB%kIzngS)^Xpf#
zp)4^gI0_#e3-p3`OW1s%cRJ*DVq;p!Xt>nvYq53BBmtdUn?lKJ32VK9iqX|*G&+vK
zG3fzc$UxpMUd`a@DvMem37$(IwY1iAkBAFAF2IFNK=f_o+(B@`@#_hLpi3Kgcyj2D
zWsId!awczy=*i%VMG`^~1y$2fGO!=i0xy()6-~WJIUP&lUEE{)7
z@85i*cQRqPm3J$+0u9|SP9b*LBBG|y4zBltl&_)Gq
zq%g*qsVsGD^wO2ad-#+xY@DEL{j?EeJlN|2^OgA$h%$Uu-c?sLzmKFqbR~qlgw)(8
zQV!}}-5hoWC{^m7ObB4SdbgBJn0)5iX4)B|Qr{9A7&)FOae4Ew-Iw_}8xjWf;o|nM
z@3E<-kv#Yf!llvnYObfYj~YHgvWp{b|ad_zW+1;gJy
zQ?zn${|dlu>`e52Y;3GJ?`8o+C;D$PL2!xTklmMYQx}d{c}12eMjbDj?xm)_+fslk|V^a1Lt%73yTpfz2HbXHdAvsP-{J3JNkh)kx;UTjJ*NFzU08v
z5a8%gKu(ssCqc(;U`cE%)pep&WCWzNPGmo6%xs-twK4)kP0GtrkJXJ!azOG02Gflee7p4_-z8^|bsn-p66
z)}|{Fd-g*va*k!>NIPnKl&cG0D6yH*>iZdM_(mb+qQpSJLc_&MMusgYS_$534@U5s
zk5X}{&38eM_-!+B)yaoU;UG8>aCBk#c4~2RNW4=
zDGv27`R@3y8&`6mN}E3%URuPqB8FUSGC}7%gpH3E)Y~5SwT@4O?kBQaWkYOwAdyya
zdqH1l!Z-2vgGPn1KF0=?tv{*rhi^N+N2$to=Z|BL<|_G>WdCb6y#-zIR6l&in~?bI
zr*v#d`3C>UByGsG@j;gqf9N7JYE8WBL@(c9`G^M~0xvPp+*)XoN|I;15>Y2M>;X_J
z07r2+zeP%*N8uJSdyAIP!2?(D>fk@{GpLBWt?0?bAVBOWGYz&D7!d>fycYubUXl@E
zb$pz_{R=m9j&S^|8g%MJKJ>obm&)SRVeo&i@GGGZY=hN_-94?0E?bX{$66n(K+LGD
z4G1;GkSU%&WTr8T)K8}b=vYj1)n7T;kSq1D%C!wDK7)0d%|8&`X`w=C`qsU12Vy|UfXc{=Gz>`Qy|1w7~g_O)S2R+VT!xY
z1e$A1ECrF2Q5r;jjf-Cwu5>Oaf6y5!yXj~VAUQCh0Me~vK%V>r+AiCe6%Vb*U%P)1
zX|}!LGwWz&r6ey?U&UU)3|41o)R^`~fhT!BgDLx^H!k*qP91>_0-V2&x*7Uh=1lAj
zhLlJoUb`^&=$zl%qdxmRb%Ou$5S^Ym02cjoz=o5x$-6-`o4SnTCCjIn`B(2dZ?0ML
zuInSi$}a3_;)(iqR$eXSQ@OucZDz%ZPE4%Tr$*$hmGMJDlfZv&%J6SJ_s`9|N4oji
zdJ>*qc-N}XmY6$~C?7iVE8UVRt|fQrCVk}AjecQG#%a@K%N0S;+uJMpM4s%D57RG5
z)RDZScU6O42#VI##M%gShH-?3H9s92i4UWNARTt`x?@83V6Lv-{jOi8e|s{keu9i%
zIGJ|_c#q$D^X7q`bDvO4^KYhCzP}D(Bvb|G`>_3))BuVL5H(<*4lbIYgYujd~-~`Ab%sgh+@OM-vCaWU3dZU*EI20Y@P+3dA
z0E&C8VG6V2bSM2+3)Sjpl>zb5joOiCoA45-u8IVhMoM^aL^1_JfEcrEoBpj3H?>w_nFH(JGYmZ}ddGLtT
z7jt?g0R~D+;47lZCv=;NBBlNIu045o{XEZIyTuii5J3qum9-wRoq23k{n|H5@2`Pi
z<^}qX3a=vxeTW2Bb+7bO0YtWMe#IBdYIBd*?MW2GQmTDPDuqoiEFhUYSmf$bls(hM!b)^0P9jB;y$41fto#kIV}mPlY$Q%JBtl~YlK8pst5YPU-Ru5&q-Js~&V9*zB-iy4
zlE+1YY5@gCn=5AZZ5@#G0zDy6hz)NLaK<@5f
zj(!>bU`il<<&3`jMldK5P`AxU)Z=r=EgJ74oKGgmx(7{7#dJnxJ+`n0d2qh90t&|2
zNfgWVfWzs$(I7U1G@@V7zea6C2L<(p>u4zwWJuaLBtvd?5t)f3^RJJ_ISO4xp6>0T
zo2u1c2OihW)gJ|`Uv7+_IzLDyHHEY`bX?7_2Bk>O@R2@~1mgE=;PXOw^Uu1JoyxEx
zg&I#Vg)drl4ie)ajwvP}NP}-jjpsvou^&;-08VHiowtOauR_{gIFizsm}%dQ=G(Us
zVgXGl($l8vW#SLwMhCT%H>1(W&!;;7->^$0o;qr^)10Un!LtbDB4{)~I;wPEH*XOGtgnWyQ$dBZeWO{T^d>R8D
zdCgKsv}_~cdP{@V=zJpqoO_Aua*WoG
z-47VXTFu#^qAPOtVMI_l?Zz#0M-DB0fq|l&NtU(Kxq3m9J7$h8ZuR31zo?kF82nAE
zQZe+1yr>tQuhKiGWV}b#f>eRD?g$?s0Z?^E0TZhDs1mips_XHQ7T?m1@|kj+8g-h2fAGGd;Ss6!P^T-}khF3~!W&>l-_
zf_u(CQ4CRNgZHJz3ZSW1FO|py!jm
zMU9+!a-->I|2k1g+54~<)qm=LyWkukGWolof3_u55*ZW7jSobqQZ(w@g{WiZ!yw*g
z6C}M!&WC3FL#qO_R3cEz+p`A5m7<{`{P7_bdC{Xs8N;WL>h?{sR_mk??veSP^_Va+
z$UGqBUhnOr$IQpBBN7-4g~O=<-fDLT)nQ8M3z`%WB9%ryt!V0_s~c(kGz^f{uqW~<
zfkqokWV+ftMsPRCm3HKaIl0+FQ+8JB$VfT7C02z?Xa`
zjQ#8(LEqE?P=fmq%@j5s2WQPDwWnX&&VWwxG%Biu
z$n2b9|C<$+L`q;Fd>gj)IC^*Uu~Nk*WJVyu!sRkABD?DrLj!gH*Wv7TO5>e00#HKF
zyrU3)gZU~2rKAtvis9M$pV_63-@O}2ey>E7FAMF^crktA)q0B0S#>Qj88bk8n&fa%
z$IJ5~fX|70uF60oNQL#0RNs(FVFcqWML*1k?4STZo&iq`()2fcA09+F^;hE2emVIM)zW7M>_3(hP6O!j3kdoxJeSp^pGQI%f9uAjG
zX$-4~cZ-7#u3-`-^W7QFMxgoX{rVs?PVc|8C9!RYL}02RNQtYCmvp9^VsO{t&lH0H
z74h(AWn*aSA&{Bw(O1yCbkq?(H77xl{ES|jbcRD%Z2&52O*f5Fx0Y-}VuH|i0AQAa
z@v2B$sl)&{jxJ^RFJLS-hi)3~2eRS-Bu0r2()|FHHHDe6P@QCI6wizN#L_hu%Q?dD
z(;AsVdI|9DZAlz%;`LocXtm~qO%LhO)
z-L_@lW#}vSTJ-A1y|>5R_Q_>dU2^#GNb!SxeMM$LsC?k!=LEa!n1OJ#0Ahy24ML(>
z)AFR1IX0Wkpt&9SklO;DyqZ=FD!2?RWRak74B2Xtq4QOsa}6uW9`I%&BCs4HT}X8w
zlgf9YusMHv;do{HCeHdajv3s@M|1&YSA(ekeo19&NY7BkkoebP?$>(_@EBv{!|!~E
z??~gRdB7{aOAf@oG5na$$5@m4VN*PG4S1G~Pz1Q`&|(_#pau50W?#BEJM2a^Qg5@xvN9mJaM4W!q})^DP|cR(mK
zm{-Ci5>vfq)2)k1)}wr8h6+4;8K7NuU4Z4f+59d@f>Y+8y8!U1P6V@PR6$xCN(fw5
zb}W+3Cg}gh#!=}&1AlG;rK>iZ1-QWPHeT@<;6eTFKa06^7O(b#R}r*_{JWyx^++oQ
zU0FJQXyND1w-N$X>g`+yx?&Scl>{FRoDbOrk>0-H_KDQaSv-Qft?LBWkO_66fQ~xI
zx*4mO83aOL+fA(mCF#C`8pI8v5y$`p?g8w{m_~awhFtnRx&pA7WfFAgBz@#n1frmSx@}
zIQXLhk=Uyd&86|h$H0m{vK(Hz`Q~5>p)NLZuIR*yW*p=UMSeYtbs_h7Ev2!dKfBEG
z)fufgs6fWlXQqY{i0zCs0r}8nc9(a-eX~^Hv0wvwGssTt??)jhxjhJUa3?fU*qSQx&PcT4%mz8BF{OHXm3=k!Nli?sUHI$sSdIdMgpg3enI-$~V
zoTrXfnd1CAa(bA;kptZ%ZZyp65&zQz3yE{RVFRa|3IFjkT$W?L(zAfOiHA1Xs5~6z
z%)u1+dhGk3QQ64y(4Bd{5E74);Z8xdDKD@S||ztAJL;PHdj%LU2o|5^cH!*fDo
zx-Y^unJ~tjF?_t$6tOu}Zg2&m`C@YjTIV81>=-W=Qy1IL=@N&Y>JnQRL2*4+4&UN$
zDsk?Vc41w_ES1udaw~Y&9bYm(vvGP)2Re?gRSa`59qJ?rRxr#h+Xc@{kKA$`UQw80
zmTz)mb25->GF+IE1P^3GLp~AhMW&B>a#)k`&}GtJw{&aRA}qtMLCdn=Gd?TQ+$!qW
ze>VT)bbVC??sRt9*WFo!T#nwTbCp4N&vyE;8y-rwxD{3VP9i0~QB+Dd6{n$Yp8xJEt6@%kDDuL
z(u#Z`jQP`zd>2v2ywTRr@lv?ykS09LIB`
zIjlt5<}x2`?Yqhihr}xki#R^q+We$s!Hw*D`deeCIo(H7IfaB~g(Y&p>n2Q%2iSO@
z-)T<{G+KGgUZ0NWXugko6uhF^mt7oq|81P@KHJ-5HUHmIp
zbYwp){}yq+M&`F2#va=#f6eU-
zyMq2w9AP9n98!)PE>KYrLL+WZS>0iBd@c|b&GsPaSEA+(-;VMbshmh4nC
zY|H;|<8XK~2ZbaQO?Mr>KG?B`AGOeFJXbBfAtkLFwKRmvz4vEIys`^~#ehj?RwS#~!Q
zDmX$~a*SR%bN{ex$6GyoozNMA(M?@#+sE?wp_6|`=awpjd(ut|!+p{^*?;oSXVxS&
zP8`tN%(2>{0}?tuDJ+hm@jW-WtNvs(%>MPv*w|R5&it0Wj|z6SahTIc+YNY6qrZ{^
z^(w#p)_a>5xr^5JGvU@VubwCKI%$A;td|8v{L39Hz+E}+xvL{Skn{C;7Sy!-an^q{
zSdO*bF0=uS6AhkIxcC%CFFESJ1vPP@tIgCSFh!VIzGpLma9o-jB~T4H98Vb7p-bE$
z!l8J$r`ETyS)prMYgq~vSA1iip@%=0>^qvw=kvLVBYsW*wG0s1AKO@StXDMTAY=(+
zsb8x)^PtzY@0Zi0nH)D-ZO_>4?fFT}gx)-onVmeg7<6Afw5IXrOck*)6!P6*J
z#MB=mU+eyt40&U>1C5k=p~oyMaE(UFSv_XMr`Ke)p~y6z<(mEU41kvcuN5~m8GpW?
zsd;qTO%#CAv7wTvKB@9Qg6@
zTU3GW{M$=ci_?*yy|(;m9x{6VG`{((i-%#YsQ-IQO9v4-cOj2sJ2N>@VD?;TcPg?P
zhkSpL_w$+>aOHos*sJn9#iF!TSr7ljYTT{6
zM$)1kfmEM|=eIr1L)3JusK}X=1JllS<$76e;(J?0=Ojz34w=4*4(mWI52opG2D!*>
zJ88S1T}NY4yEo_4JffS--uO=_u5t5id=D(1km+&O#mDUD;n;8ha)h@x)?pjSR2-%>`-df4E?)sn%i3tcAfi
zL^ieirdgH)EdDQhvh#Nx;_9yK2IO)iPkGp1;Y4n$T1|2u+m{>n_X_M>`FJHZ@Jgv1
zA?_Wyzd8!dw2`J3EC3cVl|y$-AOF8|;uD~{j(r|1&ZC*K95Me$C>S~OS!FHSEk{h!
zFTV$`<|vxD=dACk-dl@b%_2dx8>qeWX|=}@?`!=3bf1k
zx1t~mtwgsbvo+~K-reeIj^H2b4o?#1we1-tqEKGO#kA05T5*$6_@+32BaZi^DgBZ;
zxLx&QTI=iAZM2$(1|?aYtkxU*(%L)OQ}-!f+bAy!oL&?eeX}<|EcN0(`@OAov~!}}
z-HW)L!3B_@3W3}>{xIygVUIz>+|X>k34cDwposDBZlo9xuPnS(0u_NXo*G-Eyfrsj
zA=N+eN;ecf3$pBj4W>`&X5VB*Gh;DjdND^SBqSy;f`oWWq3Bj1XCA`L2k~1
zJhJq0{5W;D5{W_p2`O;TlPW2MDnq>dH)Dn|mS1+u+2D{Djk|#L{cY$+qryM^mXnSw
zpPmDji^4w@d)Jx^to}bU)Q2>RUfA<24)P{JWF^d}a}b>Zm0NapGc(k#Vs>`)K2QU_
z?wKRJ^DYchmCqxXuVJ)+Ial7NPG%PvM@8_3n3XDX(le#8QCbmxqXg4LA$4L6X7}y_
z2Ak3U^b}*nZFFoW8$*zOQfQp8fNAmiP01-cJrBNg!tPzeim)CD3dI
zbW+N`>TwwBtWrY{0>y(1BQ}H$SMcR~F}rx*C5MAdmj9rOdLAr@(kCc~1gEOl1^0Zp
ztS&nB-m&bh)H~`1kCizw)>h2XtcKPtl-mHE;iI0?v=Etvmrp1OciT-XDebyG$u^j?
zAnfF_CwIB``vOu@=%-_iy*$B)8o&r|
z^tTzdEon3+(p)EHfB&Xf
z{X$2+e4JJBd4(NXCo>L5_#FVqqOh7tIhWt#vC^kCh4SRx
zgX5H&meSuuy!|!cP?O(|fTkVXAT)=3U26B8E%IDGeiUV4du&9ibBCz)^gWvHxrVQ(
zh=VrHXC&!jo{Mmmk5XzXSAGa#G4CIw)RC+7mERUQ!dGhY%-mjKpm6tJnfp~IW?UPa
zOwKZ_&9T3=?8>nsjU`&M4xL{sv*R8BBn5!dAeQ;%+2!PdaVtlW=a%Z$mM%Sn7rY1c
zobJ@Md;}?M11aPF9)Me(Xgi_{Mfg7%mj5u$y7Tbmd7ssD`hu2UXRW<@<63C9nMzbFj9W~1MxRRc
z${XnXh?d9uC86jco34(q+bzgthpllB#E3r@MjClx^!ds4)LVdUjP9#mY~1
z;iK{B2yPPQX`Ebt$|kK#GO{rck#S}Gv4w7ZmVhwqEkoim-08qU}k{QU(DU1F!gRP(BoitvI(4(vla#<9cP`33)drJ;4ElNJk|@ITu(LN6FBm^WYeXxBm=N}DY+!|lF^J@vTGDS0?8P`5PjneJ
z5fzv!>s*hc3H~!1GqFvN^_3l@nKV?Y@YRGk*I}mxE%VFj$OSK;xPD_&LV+yPj4kK}
zl>P;sv+@Y}vXOQW(P}cKK@r1`U1Ym4jLHJ`JdJlgbHPi91*5BB_>0IBy5O>%X&5#v
z9eX`AFquWUEhgZS05>6X=uv4(IA^&@oF)Cx-@T4`E??;P=G(1Vk+B3?l-(UB57W
9vqYCUW7J4
z*x)L~4*28r#Y++d%RpqU`mGdn&ESmx@mS5f7wmS+21wUZkN#!QOYn*#Yd@LaVo#k5
z-<(Z|6wjlRUVs*f^1G^ie{ui=%`_nlX%7L?X3+Sy)xCK&oYw)LhdjgmL8v`UQpXG6
zrr3n|);ap{a4DPhRF^CNXOjK+lM&>TUv^U;+M8qQ;o4W+*Ctn>eclHBG2T2~^yH0$
z66yop8F(Q>>ivByxAq|3)&XV-;IzRml}+YK9zU<#S*Pbvd=tE-&yHP@>%*taJM>LU
zF0b_5=0L%Vpteq`nHv`r3El9%hn*g1()C+zs#HxL?;y|M5<5C1xjDfTWFUFDgD^&f
z@IfzT?l?$92!_{^XWAKT(jOLuwgC}a{|1XWglEOc(=J4xE#fStcBR^a;KBt4;QRvW
zKF4s0i6mFQfJa+%M^QwE$DUPBc=Bk;_9%pAVk0TgqtJFO!)@A4TE$LSN2X4K^!Ygy
zH_30Pl-f;Jn>HJ3j$rehnN>UU{@KnQ)7skeA6yy1h&aG^WMEqv;&o^-v3
z{=<{&X_y$F2fo5^O**~*jwIUS7enmo-e8HNZ;@pUc_&rO73>&Alnw-xNec9|%=s
zff{HG8!PSNXm~U%A299i4_Lx}Q1S-Ov+pX--|?vtCcQ|3d_{J}|Et<6dx
zPk4Tcef*I-KYvb`@*sS#^*Xc&blyn&7ms$VF!SrlPZiQ71)Wf-oqMdn-^%9kK7Hlc
z5t!%$0wqhksUkK~(0dK-7|5Rli^!@1%{egLs!AxfUQ3&)OrGGwd67vQu!BmF5QU6v
zxeIQdT%TSEtA~lBfA7`GW4iriy30UtJZ#7!XiYa{D_aZMB2XylgkcS|H%Ucd
zi~E(VtS#%TP;3ICg%}8cT&BHG{f7>!))QV%NXZNO*I*BqqzgF&?0%<>KW@65^b2Mg
zbGY)T+s?ES-A?HrCIns{@fdD9JRPGqMKV-6VgB`PdnRkpy%fiK^w}XAE*|k3=9wd7
z2)-cw9VUGn6ABG*Rm|CaVQE!DkhKPNGCIk-r(yj`ZPb$r=If*K$J{%?D)&QfUtK<%
zuQHVV_Y6aY`(s8+{|M0aExqL-jTStqq>9??Hgz7wW!oHax+5wmTCfqwejkcs1;aqi
zllj@0XcRhK!uPqPp&;)`E%iKBUbhz1rIDLId0NWXm&P4awyCEOwe!6~HC4nSmt8te
zOqAK7Ok!RgrEaVo(pnLLP9OA35+!v$S8z-h9mhXzjbehJljc&s4TL#gLI&Nw
zCYBIry?c~}zGtm&nkk%}Hbp^}PeV*OL@`LaN2jBiHahov^$wEF=AcURLswh8acCVU43?)Zlgl=-
zah$Dlmz?*#;Po#uDrwzhRfE|hiEiNZ0oi}OZQM_&Y
z38J7$OgFbxQvsn~vGVp+R1xC8D!^x01@B^yaT4|dL9hp{q-vtKYgOP2)kF)%Z(c=b
zv9!h~ys%)Z^y(%EL?;8d4O8{oU{sw%LMs=Yu#=C1xs
z%2Pf++
zjwxS<-|(z5(9Ty5=wUAXavG$nj)>>-2KmW#!`-_Xn7@jMBu(bUeb
z@C>|!sGu^w)fJrIgG8BvNKCyh%Np)rWnqQ*(qlMJVW2e7xyGdAp*=fFA`IIGXC^3(L$YYccnip0mzWX
z0RuBJQW-SQWY&kJVFa6y01wm#8QQInx~Ld8D-n5SUo{W^amW{tMTIuMTyGQ;_A8kX
zEX8^l_VE$PzrH_^B~_brTuv?vWz)u7>8qH^KtoIJwt-H81)Z%q;>R2Az!5nhi;H}Y
z$G22$G%povE*6S;YiUygv8(?%Lh_2N9E1*Atykz$%WBDX>CVo$bdXj$%Q#qtPAX<^
z>JsfTG8j)~qTES{wLu$L;g=&}r!HLfQEQgFA|7Y`wa`lGpIQ9)U*$6PHtulrwec5p
zuLVv1&!rI^`|(OA^rZ_fgWlCxSHv_OAiQ>`(@nKbe|_;;H@cVHaAAR6R*o_Ihdy;QZ+Z4rz{VH1nCpa=nOHeuVh
zOAmUFL4tSH7k+l+P?prY;cqXkgktNXlH4Pr0u*i*UBjb>waSxLlEDemCKSBh_u~n=
zjGHf(pucS(XQ1ThNTMVD*n&v=hYa3Aj)cIM+u;v-MaQH#l$itE1J!4tiynCh<5-IN
zrbB;O@#l5}WI;BRl3e!coR8L|3lBUgaA9l#BuKZ=y_+;|5zmF$a{&ewU&U?AFTUR->+axTPc~6-V;9y
gdPfvHjubS=0p-UP;5T{vbm>@wgDtZicSD1+Km$5qfl_AX3
zX=%Qn0ZqjK=pgr{Y1lytoy$o*Nv;#)hKd1qxq4Ok*-vn?!EH<@u|JuKMO>8ESN3mb
zmiY$<2>B~xwc4m20TYJcB5}yoWHePNpG|y4QEwF_C!M#Gp$Yp>hAR?e1oFc+Uj*O=
z!?1^rcr~i>$5)Z}B)97OV6t@h7#*$f>&U`(4c4NI_?VB-6B;kknpb!L>GxIY#;sHO
z%J8xOLKiTqm6qwh-rSWIp$$+Qn;4TpRdp3#5NtLlBKsTkmGggi+Jsv2Li^!bJ@+#5
z3`VC;6W}I=9ygVK4N|f%KifWqoQU{)T6CrP{Vl&G_AFK07h=7+an$ODIQF#PSy{+un{4VlLh}7aoZle0h2qcZ^0BiD_h{rmb4@=utqG*iP?2$ta
zQpIElMcY{TY&sW$KiIK7myyAuz!U!YG@1u3!u#;ynV8q~dX(J+DRoksC<;r%GXz2o
zAALXIfH*%!BTpq=K(l~dsa`>*X04H^p!}!7?8+l1FPa5R4DFDCei**AOG4kE{P}K@
z>s<*)5?Ubbi@Z`X{OHfU1y%@yX*icOVcZ=>0W|8e32?
z>?}`bQl~>;Q;QR?n875tE&|A2XsxT1ca!(Z+GV-&znFlSHz*&z0gx_z`1&gHOe4tT
zJx1$13>5v`1MGhV39)J+hl9*NPMQ!U23fEq+HWU2EkV)LR$(`}U~+D?8H};DQq4e5
zRvOt3kOtKp%af0`_G%EEptEuPDEj?g)*b(2%Wvx+$3D{>P{gGhEU}97Ub?mTmNMDV|mTBo2
zh+4wnvlOY~JLj2)MV^J=5ansn18^0^du~M%!IzvYKCw}>3DOCPMXG-{eNO%sh6PCJ
z+j1Ampwj6VP4(ep7@2?yKFb+_#c!%taY+ZEmY6G3aItB9|Ln7-XjylBVk-
z&8F&sgvLjZyE9J+H|ExQ_S6<-*kp)4b$NQG)NVw#1EPgJY-Qw?{o$^v3$O+jWXU{6
zjiEH4ow}q?1ho7Ek_(_R4zC*Gb5ID%17t*@3~*a`ThOaw@m%)bm9jzqZPDLQy~t^f
zSJOD_TZ#G3{`R~uZKaI8+t>R0tDh_10gi8QrtKQwLn%bCi3cd`_WuIYjkzqh<>Z+X
zJ>+lHz&zFMj_kW&2cjCg808J{F7K+mA@ek4a8AoTY1kU_-dFOBp+3=v7J@&(%q?Fm
zlxNx=Iv}y5^9+wPOxhB`6(a&2r`FBv0;q!kuM|eFVYcS5sraT14d|1phr-Ocd`On~
zruE7U&2GaN^4|5OfS_6&W-e&>@ETr`#IlaUd>UGw+L?e&SPX(2)l3)&a3SC=z!skyZytCH-s2#vKw1^!?8Bq-A^St8q?f*9n5fm7lH;Hw<^6
zXhIwxuM;HlcoV#@Dk{3XbgrQ65a=@7s
zhdvQ{hSW0qSvOm%$Te%DN}uxthUkp|?XrLW$J<+?0%MUhy&RE4lkhwJj3aK^WXxW@^$!TDZL3Xd4)z6;EJe?pShI4nKnD!y$G
zNXH7D%pY9evjk?(l?ypqzR13Pfkd?Fa7dtQ!Xc+W*M?)Z=)&t0(=m;%BD*7|Mi3@D
zwHzpWw+d5<&g1=~
zC-fX?5bPay&3f~P!TU<{T;!H5Gb+g+bDbgc6~KbbH1*9~dAqk#Mf4hhGZ}FnGw4|7
zd<}0K92>rG*FjHLxWJPtf`3(FGa>grI}_r!(No6(EDNqtOUKaI#v|YhyP^Sp3|_^g
z3Fg=11Ujc~!-A#siKb;W2!Q=MY)V9m55R|mh=tyL8`4A(_aDGTK&OSSK`hEOAwWR#
zbQ0%D=dimx|#f&?nqmUCHB{wJ3{6b$6m
zz-9vGpp1;$I20H6;g+2U8k9-dkSXG%Rzq;*ubQztkRB#E6J|+(X6W5RxGB2SxBL!M
zqUF!0Jo!w;`tM?dV();^GhpJ%bI#B5gl(Hb-
z65d7m*5an3Uuk$I|G)Pa{rJxoY~A_$qP88u&qCWxkN2ApAsql_Pdm%Nf@iX%in}`$
zYZ7|)c=w~GnbR<{s8D-{OAWArfwl>X`A4C$mxmp_0~MDx&|#TN(C83CXpO*I%tb||
z9);Z^&YaH{@0_h0AKheXLtjBT&X=!s08fcWnE`vQ36Y#2p!`9e<#j_r%fUpnw=Z@v
zDAk^`jNyAT!V^$xu%C6k)}f6a{|bgf+<%(vs3WL+<}br0v=99plpL@cwwEej-w)M`j0=5Vz&yVQP72wI{6Y%U2mUH)SKq&AUIo@7Bc4QFpF<
z1Y^FQfZOe^*##l19ODhD$_GTVoag0;|Ppw5>a)Q9h~1GQ(Oq`5ab7-P7ho=ml^
zwqEMC6wo&qAd-U|+I?71lL^KwhnQ3-U1;NVKCf&==-lWbnzFt*
z4V%9~V1N>&h;dDA#__GGCjB4~Vn`}-nPtW=Ot
zMS0k`UF;zz8bi!_e?E>ybelsY0q>5sn$W9$$s90&ea>SH5YZsz@4xv8Cbn-QjkMRG
zU21ugCy>L_#`$kxUI~wdUgY~HkmB36I=6zQnjKEtvh`5jB;E2sdg@9XlYzcRIDpt$
zNS>L~&b-8f4!BJe!XRfNw=g`rjx+*2FtegFwyu5_!mJZID+X&>q)YgRV~`J4z!*DNl1S>QDgIV(
z2YCCx{+GZlgvG1*a4(qw3d&u~E4gNm=MMz{Al_4iBE<|(cN5~}Lq~v4^z?~pS|khd
zvtt#VPEg>pd?pmr(fXHi@}3c2)mWs*m4DEY`ZbY9duSLlm60)U@$HE;ET-3atdX|p
zE4G2gKTo$sW&2;`nLAzue$*w}QEP#wS4>lXvnF);TDDQoQGNwAo?UgZywB23o?>599F`d+l;#xB(yM2S5YxPc_Kbe8R*6MQTj-DTNZZ0{{>
znN*ig{*8R>mjKe)r9*LHy%M^K%L^?e?CDzaY@+YHBzLN`FI}x?1ALcny1>uUIE1I1
zqJQ<9g+xubT2S&yoVlJ1){usxfL9nm-b<*T7vtTvvsV6T~G(r!@Jh`&=ut@
zp=x-rzzNUbx)=1BSnG8gdG
zesy7bn5?pMn6w|btw
z(w);pkg_YWqzYv|>NikVc7NuQMkE%Scak?b5EQ91;sXd)K5{WI3_CmRwT%$y-
zyb#nbZbu6my##cORL&u{AFhHwC1Wi)i+XbFm&B})`{j(%?(--7cmFr!UUAjR^Zk<@
z^W0C~wmUMlF0H3e!|o>)UbH|QdQ5quA)2BgxC|cFKV5tWuKr~3RCxg!Q}3)L<(I6B
zlK&~#h=C+VBuc<
z+T-o2(-)U}8j~>sP_KeE@x~a|7FZ><;#{YtLD5$Gh4?%^Cf8_0yhU4YUK}P0
zg(Kv8B@lVb$k@c=OV--Fy14kkG3Bp;+03KqUd^phpPZ7M{f1iqfx}>cwl$9@E!2IC
zlpoVCWT+SuewH`@q3mV{3bVDrS}~c(R;7|Iw57qv+YPR%-X8
zbyuKU7$%pFnK_lw0ZIqS4Rx$`_^jP~9#^`OnyF9dq0KwqHB{zUjlF^a(1$+9Fmjg_
zLa_sNSy9>p`2SB{HD)+=#|myLXbWj1+E>Aetr-GU!`vMb+9o+vflh*tAY!95H)Zd6
zumJ!Fn+#II-q~d)e&m^B`n1(6+Mip~IJ@kV;H}7W|9*V1<}kYWmxdl+yTs3cLZfS2
zqwFz6gESiQX|-^kUJ@g3w^7RXL-tBXpRlhKLsX!U2`QZ}?bPxY)l0^JQMN~O(EnD;
zV-(+&`cSUxHX0gS4Sq(IO442!zk-8Rs@X(?1!1xuZ*z1mri93N-)MVHj%W=QZsKFR
z`eSHo`ja22!HvV@!DZ_XY|bz^j4lF?%nglr&GrEzAH^nA(dyXcD6z{*yrxBFLH($D
zVf~=-XH&u*aYl3i##wN&YpAb;f8Cg{8}^mTZ_
za(8K86eYjE#bXOHYs-DgBNSC<*6WasE2L7FQR^z?Gufv2AJ(>uW|n(~U8_I}Q7Wkk
z)Q4*+=MR#Nd!(1p))-y=xqxi5sPJ5Zc7@Z!<9PjJN-hLIhLuTKZqxolM+HSu199p#
zj*IG3KB0{f*ceCc`h_LyFI>aN5DZ>A_XLqqr~=noMxW{aq!ICPoyHepa5+><
z^`%zzr7{BS-L+Z~f8pa(UQO
zmTHn#*5v(HjURXu_tYcex&}n(M
z`_HQ!<}G;kGA|>j2mg>a^~KtgZj%dc0Gl+jzaKJB1l*%!H17_V_1dZt{&GUnKX(gy
z`nE0kHf{WV9g*j%F0>@?SHbjGe(#FufLVv}ywDmbl2RS+E&DZ~#Zp+o7?){lxU3AI
zP-@r0t$%Y@YO+q2^2ydsFp8Gj&&boxTG&PHdK^8=me5yTm`=a=BSo1~w)mL%+*9fs
zx*hkLRH&*&9Qxb`WvNv(_u%y74M`J)D_b)3-Om^;g<4x021O7V89Ud9L$`#gkhsXB
zUQ*V$9lZrC9**60PO4@DbPjwb`WY|m5plAs*8%#RVNwd|(Ow*3jn);p%OazRI;_@+y-0G>Z=P^gNYGRO>Ops@nLsXO8T
zT{zZG4S_n&9rk~R=G^<`++_6q6(5e~J3m}GCc97k@i*n8haG!2akr3FmFVNzM_`)<
zxUc4guDc4I&#A72`YiNj(YceJQa!}s&qxmTy?VFw?dR*f@5cu$M4m?VzH!0=^q$x;
z(g}Z7mi#PR%_CiO>=0xIm9$dTywkjOKpp+>+=!B<9r}8}gFYbfR)eyZ8*K=qS8`d4
zJ+P*@H`qWJ9U{HtnAnb$TQBdR))%+OAnOp4+!!ld1QE@|ZOj4R2R5f`27PdhkaNN&
zw(-#jR1{Fa5+rFLxh)m;`9v)l3?rveP#ZD{^TIEMVVc$F4&ohjP#b}*>Via&>ms59
zrVGG+DnXc0K0>ffbB{{w6aZe@m+46VzNcw{J`oRs{~1iwXMR$`u5g~lAN5Jc2H+v-
zd=I42yuUj%L%iGO@U>?eQ1&+Dx^IKlxe~Ik)yd^a#U*7z5al*WFVq0}3#K1@wwL;QlB#=ou73Y-#8ex|zJ^{TX3M
zXT&)*83-{u=7<9TBqQT6+%DEHk7&^bf>R*ngg(m|wn#it)WT))d-gn)GAu~hJQKn<
z9BW$R-cBhDGBVjm;)cXa_T0NrwO4WrRrGs$^K*>njW#Oef>$1*rA-`s6xH@kto-fzD%H`0w**s8UCynjeMDUy<>pfiyy}%1fB0`S}RUbpR*?dd53-
zXgufQVcf%laP5We2JyA6b6>C!PHiUQY#qG!7x=$E=S4QLC|U9slJ_n?+^Hq*>`E1S
zu243H>mX=jUnlVJoJ|2nh-FH6Z0I>x3z*x&4TQr3dgeLjAgF6wtkt^&2m#L8OYCUc
z;{{WZY9JzGg@2r3oBYo?M5@1_FH(gFL=xCTf68Dm_-^HQ9-y}La2Up!evE!tDjk!r
zIRL>2B+PV%;h&DZatfC4jX_mCIJf;E+EUJtc_*+|PXPcCCCwSxKtulkWQ>S{en1^S
z4BG4pBn3ddw#TPg5Gj)jL?@tDg3jMlv2=(E6L$s{Xn*J(`-f~KGF|ptE8R!9_Fij`
z`pJ_AXZ>7oclxw@+b+-csvMEin(^YFO$_BvWfL@pOcWcXjhQmn)r9f5kG(@QcemMP
z9KhS!sf_wSnr6HY#IENS7&NMO7$v`AdS#w|O3QW4ss{TdBWE28Oc
zS-`$ih%n~LgE9ho97E8aKLyh3-qiXp=mg(hz>C&X`4#$3xDTH#9sKw0q`@zFs(+uW
z(eVMo$*!?OE)J>oKc&0`3|j=Sos5j@Z5X&tT_1*2Ifs$6zZweW=FBtz;8W0p`c9Y-
zk0!xvy}^c9w2>NeKsEU2FC?I{5b|dMh0vEZakcT$ccJ(jvRS#HYS23jZ|1M#XdB(D
z;0b0Lz(4g&Xj0j*KMjsX0$&D2Tp{)%PD33~;#cb7Imn!e&R3B$;Gc)^$LJaN4Rlh=
zzp(lM#Wtwu54*q|6bp<3GZUxKDnZ{r$SD@LQJRbT5&)R!Zh20Zo}K{Y{^1OOjDM#y
zT>us!`Xh()umgBx!dmyjP-KLHV(5oOjISq_b)-gCr|B@9q2w&on7Em9}7~s+v
z8B9UUYP@*%KKk$T@ECRE5XHOXl8#{h=D)mDf23=<)XexRL6AUJPNOgtf=r2vp<
z8kd_@N6rwh&;|t-sg*CKV4%
zjZQVKJAkgqf%-Ch6^IeQd=+4%Xq&Qm_vuo9&07p5SjZ*
zCwvbsSvjO_u>Py+gN)_HhvztXoqM
z`-fOyxKEO+<0bN8z{>UD1`0v>0zMS2(?5VgH?K9
zDN}U23oQS4ySpC7edGc~_-dH6DHV3!E-R49*CMuAY=vnK-Knq8X4A6}arzqhSN~k6
zG`Ulfn&8xA62-W98pC6_{roF
zSYC#&sDN&Dh75gg>%qQ1zp;FR&YtN!OeC+5SZEwwWCEl~V_
zKbGh76VULNk$Oz&4(1;!wpe;!Yz7xql{BWQOn1BNQyik6=jxg6hENU&YRKT^Wk5rW
zBy}$0r+8VHqiy~Y=zEPVC#%3W(&oEh`!)R2Y3b3<)6Fn)UA@Y;VLrp#?}Ar5@;vnL
z?_TM`>FCX++=Q1rcmCdtJg90fU>4~pPf=1%*Jk!nI0Y
zvgbKt?}7Q03ur+HRB8Z=M_y|E?r@mGDR`jWGz9FZ($*RpjD*g+42NEuSg%YB)y*%@
zw@t@FKT1mnkz`HMrXR&{f0$IU{h%jHe{n+_LqC}YR4xl4lyL5b+&#QRGQrujNImBM
znNWQdC;88&UTcFIqd5*0s(gWUzv8Qqk02wu#1>`0i*fe~PFJ)iU_?h^vBU6TR0cTs
zRd+>P+>;^?fVClRs;C_WZ!^<~=$~I>evaS}$CQs-S8x!Ds1U`+3f2fd1d1!&0g~ra
zr&?Q3jB-4kTHK0XZG5KjF%uieK#-qKGBx&ki)N~NLJXzwiBDfE$Qb{lSMwYJh3Lo<
z3QbJ9apW~w_?-WiDr)=}xV)%>*)x-8L=;H8RWrEQ?bb}}JU9c{VoCpV+(tmC{>Q~)
z24lR?yEiPC^l$CpdyW1R0-RbJ@KNqD!g-=k<^(=C_f|m%pU|}p=-C6W3q5#zH6QCw
z1Maf!z?Gau;}SdgUm2NbBYXvBwTHatSoV?(Zi+>3sJdMB?4X~xO)W~k;Ux(_1NN!$
z0o|i>ryRL9`i9hPyAd!M8TS27y;G!td2sx^UzGpsQF=B@<_Pc#S}Mh3Th6S`ILh?q
zsXS*Bb0^(_YWs$u9wN7W`?#b(W!S=Q)IUyTrtNJTi5<<;Yy;Iy?-z&ocVJ6558Hpe
zMpt=JgF`@vV0@~H@_|5k09Ak}9Lpy9vji|zY+n6J=WVWx*MYMtE+K|v%n9H=oHU^s
zC%4@s{LSL-z(+iJydZb<4~DmO5O-TW+MEi%a7{plE7Qs4(e`I&zSqd&kdwWjI|@~5
z)k&l2J6=J2@AKmiFiLAJ0r07BbRN1W=UjgPIQnX8zzi0XX`8f
zyA(nHmS6eUl-X{RV3IpbX%tSKD-<_hjHsf5g`UF<*k@^T08gvVDDT;`nXIZaM8~D5
zks7Bg{sx_>V(K}9jQr2$)^xMs47b?;-@}PFas|q|P_t6lu!ie}CUE(W0SXIf!7^6YIUvvJEbUjWM>U!CtF@(N*)RRcWo_dl3AJYQ
z^RBgW+P=L51Bh|p$HVas;*#d|$}pIwdSEQZx`Re6FF|Y8*Z#EXQ6HiB0d(H#DarmT
z^EZe6lgaR;?X0ay&mSHRu6lEw_2T2kHNQlBDcSg(DNe|}!K#{ly+}=fW<=uwOy^&z
zH|5&gT?Be<7fa^+>>prCj+suHcHG0!5dW7oDOt{RTd$s&eH!`Pe(U
z&j{+^l5?p2F^z+7M%M6lS0?7X6oRJDLe8WP4Riubk!&67*5D2>X}Ve5gCbgzYSfg_
zO#ie9oY#UE#8oT$*r!HBhG=X)+-_)@cmvcE(aq@C1!37C8NhOG$F}5ga@J*tWfVu#WY}(fQDM-8f!g9#f;lknb_}}L_W4&
zlaP%ptf$TIv_UG&ppcaOx||GFB}cYp8KZ9@3lDZRwEgeyc)m
zZpwIZXLVHa2IWGT%ZtvDetU^tKpa<$Hbpzhpz2IpG?sUDciSDs
zH-jcRlPT;wew;`dn>Rllt4WsRW@oyf47U(|8A-7oIv>RYqvRdnCY&zh-AUd$@ph~B
z*e>YVgul+3U!M=tF~O^ywv5Hj4Hoh@9K(lEZ^>ol0v>DbJ+b-mrQh^{m0N>8&V@Lv
zze8+tSdW@Ab&8FW9$~S-+RN~OFfP$1HeTmEBm|e
zBwt#J=N}=1`PAa?#Rx2UJ2BI?$=!ePr#8hXc|8ZznG!ahW4ug0^gj4ssRMmuL7CKZ
zDYk0zR4pbuzuvNjZjBi})BRX~p+|_yjXy-|tj8n^)27u;=6~4B{?ucByZ*)4mjf0JM&5?nCW&>kp5KSQu)*x3Q
z07wB+{&%KjL(y-0_Q2+GLot)WN#NeK`*wG`t$d)Q{9+wfUVgio7c`tgIhVCHOPW
z{ARztFHe}>8(Wn@YIWVZhXH+%>-#Yrj7Ud(ZBy^5@0p`8ApInhPKLROI6$f$b^HKL
z1eW2Lvc*yq@PM1IDdqf57X76?NF4!KhK_A=aApFlnAc4${%d}o$YaIX?
zpMJ<*26R###jI<1B($f{#V<$P*P<>^Fb2RtUIa=4Z>yOQa}uBlJ@ZHVgGyo=#y)K4
zqN%T}6Cs6~JN(8C=}cOK2MZ>sqU=!mI2{p38Mwn+0coSzLOR)?Z194Tqbaa1_zh)L
z^SP;V_vc8xb8ps)cL2y2^61x*hYxQ`c7M~_^V-8GO(84$R~a2Ek?JkN`PEH9{)BcMl{MNf`LzyBow1b_A)s+nb?BSqV%nruvTW*oVwuOPs3uXfy1Oc+UyOr
zgMe;#CpC1Xc!xMv)K<-sK|l(n+n{|1eK^_AgH-eHo}$!4PNC_jC5t)dsz1@SlcYm&
z!4i}=DEM}gRfL-B33!2KsJ9vRHec#(h1W*|3;Skg)eqMQ*!ak{6dO=+Ox$ipr@aHv
z0BZ$_pAQHs=j+jV31B0~#=eiOMtYNVB$sYIR|jfjI5cGPcmhOcRJrDWo4W}9gLEu-
z4e4jLlD=0cd4y{efPYHwyjoRAYg__h_~^x)9dkX7dPv!1tkIF7?5HTcDH94gAAOE*
z^_-IzqvBe-UA=@lCfB*Gtq0`~bP^+9jvx&PwFeZAs^STH9kI`Wm*Ed$vmK=q8WgXiDg$V*;le@<>ht
z01_<1!e~JUw0UYRV!Y-y4xFd4dyQB?=2g>PnoVkSKyKi4FMw_Zlzm+;-Y7|JgA=~?
zeSl&t9d}S;EKmhX06jLheoql~$bbOP!4Js3_)rriNG9bG`Q^uYxCuw`c=VASFGpi`
zRS{hT84Z5oM?rd^m^xdfVcL~6evJ8*yX|X|yL$U*-vM^H=e*A&eLc^tQGqG=T!pHR
zVCSF_5sf95FpT`RSWK}>H41{h>Hx&F-eF0Q8YNh7$584l+n3}B)U6E`K@NE1wMY1HWU7qG_bVC}7!qE;rAOYKx`7>1kG
zKyd59V7c+{r0f%1773t(l9Vx!N_zMo1*s44>##+#G>~QD0I4q8D{al_81&X9CfG4M
z9EiHoWwx(>ZBf4spiU_Bm}lNX#m_1(p#AuqNl+d}o{?2*LO6}=f4B65!X@DNGqgrP
z+t}g@)2w1^s3d@Cfg%d9Jd{`xrTr)JRwT^<(**ai5$+ujCg?wSSHauT+opw{r3(4I
z8|y%yIO2?oY;NS~NSGXsWKkCHKHSF=EZ{FtKWgoNE~Rp(J9-VNLZ0kcFb
zqp_NTeJvX%mc>!=VbpVa`KLt*dTjdFYt(>~jK-$Z(Q1+rant{`01Ao&)rbv)YOk_d
zwz}lKW%RcGkM;h|93tAa$CQ0*=z6bgY`Lo0pGE?C
zEVXNm&n(+S1Da$a8y(Fm85Zsy0B#6R(%(0q7OKcB7xP=U*Du{$?)l4AAPyn8A|?*o
z)TLdJH`0Fu?xnl{Bz@078Jm4vQ5JT`+iQove}V0By7G|k
zRfpnWu}Vh4>72GNxAcz>eSq5HW0ysfUa(MS{%9b*4&28>lF!kL(=4
z11w|{y{$CsvlMza$}#?3j+-hO44Z~_726;>x|7Tm2yOui6G1a$72t0pMs{PVfljC6
z2&LZLUlUU
z-at17d&Z3hB5<`A@{pz#h-~SziK~-#88JEj`*i+XR{VwY=|dZTJ+HTaXv6|MMkUGB
z=qK?i&SZ?xv!3D9%4V7n>Q?ic2r(5e9G6BsPN3-mx086R!%-PWH)nhym`!2`t}Ztq
z4EiTQjTy$YAsF^HAbuq~Un681diUtLvhW}q>om461p%uxeWEv(rXrOJ$wKpyfMs4{
zF63}O09YLWTkG>M=WTHy=G=i;qfGEP=-j%v`GVF2K#LLBJ1yFE=m54$@LePNG6HRZ
z?RPo5&h#w2WBL_&YH~`R6g2II-6zOyp{Ji|Q>0Hl$(is*vXca)A(=
zUo-1(s004XsBp!%reeR_^3ZJEwuYYLc4%_|$XXaAzW5(hbs$Rbp!W;7_wbaZd;pvO
zgnZvZ6B$rw=HPB{)|%b=B?CX+>gQK={=91X_lXFdwSD{dB<)VvlQ0mt@|*4K8|r>0C`x)vtGE3qW;TZL1oaEb
zu3!HMV`;Uz_{j7&PO=FqmiiDAh9S%MzGn1f>!Xc=M(eT{0For}1Vekip|m*&2JFJ<
zwD1uaIP?#)R4E>9)FqMgRV+LW3n*pGq1$Kur;@P^@Q+6|#mKAk%=K{7@`-WdemWg>G{RIX4oyN{YQoV7cW0y_d}xyKye-T)1L(X927}^>B=xN5k^){P77N
ztPQ54?O(!Up=yQ#?D&M{(@O4M1$9uT^UN1=47?F~b2|{a&<7W+duKHL88sH~xcAkZ
zDQD*1cr?kYOEv795LB=Ak!)BdQ9hZ)sx)-I@!?8IX)`KvqD^RTFlc0e_jxgH62&g9
z!iYcmxaHM5v8(m_ao~I-DKV96>oUqyczwc=^s|k#Xy(9B@yP4OvmM@B-erVg1FxmD
zhBYK&IvqxY@(xfH2xpQesyOwoo%uIw5`!*=2PoGZRt@amu-1Z5qm1Hv@*gub$I`SO
z-xDQTegiyRC0kqoS#m`6ODhH>M0$F?a@38@}0-B`z%212l`)PLPBfWzK
z=SWuo{4iTD$d!Bk1LF8*xx5`Rd6Ch=`jH)(liUNk31^09nd~dgaZ&m??LR@#9Kdy;
zrV|ae=uB$})2MM64|KsNuFf#Q#$X2LB
zty>i~`RTC6HH4xMql3Y)QerL5uSYJqbafN0kTj0p;4w&@bV=O-NP-Iz9+i0a`9m1NNyWRmxTts-RHiAaI(zHnzzcU^b*z6k1l>6kZ9FrP-+6{h|4GG42^`IvHK_vA6_
z*i9Wl%kH?($Qep_@d5N*&+dWP=7K0(RU+R$xiTvwg^$#LxF9P3R>O*%8|=C8iEh7E~7FgAJeUb3Q-WJjK7AY<#zHrfahr=@&=SP9G!uR
z6p6?gU@w|rh(`tx90E=`SwZg}?2VOeRH7%BbqchJp1;AgQOQI>f=0`m+8Q}oH86oC
zlvf>`7gLLCpB}(hn$iVH6`*8QpFtd?_4%53jJ5`CenNPHKWbVW^+cW<-ZIedv1}-s
z=6)_dfi_QmYTaP&Yduqt_@WCZ7h>SV8Bpe5_HYA>*v=FoDIUx5_;mRHo_7$Qc-S1>
zyOU1`V~vH^AOZ(V_JxnOtkGDs6jUDN)L5b}ziP-;%%Fewq7D){$q754Pfa%XD^yH(
z`4W5n{&cZQWUlYLPh`o@17H*7@T)6f?Ksek>2Ie8O^E>5`3o2}DR}XXr5eBAfF2>V
zcx&@PJ0pib>*{LYJU5A*R0=%~DGlSfZun41$<*S`=~EfFM^x
z?jMFpb7|4J;8;jSS(#~V5lMdnw4z0?yab*Az`bGR064goi3+$p*6t4PTxl%)sf_v4
zdYJRq@Xgyg2>P4~&_=Dzg$C*Dg)PH**Foy)U`-~2{z0wWkbl3>Ap{|i44)jZkc%#-
z_)0BvxKJDgs_E?GBGs0(TT=S~uv)JeXblRyw)(`O>wOP};uo3Q4KFDDnzR1?!{{U<
zS!b1oNp51JPP>=hzeOf(9H_I3<5j4tU
zt$2OvO3&W_gIp`2o+CISXCNJGntZ1WI7Ve)**skh`1
zxr&b+^8fMVEg;ji8wzEzKd8qFt@Y%+ox}?-Yp2j;>N#CfEHNTZt;oo(@9a%Ero1g$
z@S4UynqmZ#Q36kp&ae;okuB;$JBq{L9(*a0@=v)Z_M*lB8IOVE1jjz*TWpe9x#w{r
zIhI0AHK*^ND=h45f^lwsP!XtLBCbRUTNR!MFeGwtd~Xk}!4!>+1bWA9PrYnNo?%dw
z-gnJQ3O}_$f5hJ7OthrdO@bL0$l#7h)fn(*+D?aA1#7=L=1-Ep--g#-N29
z3b}j?Rt$th(6o}bLut>`su@PI_#~%%=2Iv4F@>ro8Jy0vj7-VD
zn`z@?zU)30~rFVpe)VoR*W37WJ>enYh
zaf^oVfS$kICUxN3g#id2*Vu|OsY`UQ@0gxe9`@y`sTan71UN)AW7-arsWx^SbNbB(Hb`|pkHgxfqr#J<#-c{Q
zhnQmW=8U5}I$wNJEv8nFgw!bVAKBrS$BA*R1L(`OrPr;97QpnREdtH6Fp@n+a0z{=
z;N$qlQOyU~NZwI=WeIhOF3Hsy5iuGg6*bLu6Az%pi_)Cn(Odf(2lp*(Q}f&le-*%c
zxB$xfj3`plphyi0C?cIo
zOE*a8fC192l)y+cq;wH%L3%psnsGf5R@EEMOM;HL^{?!Z2OUmJ?^*AT+!HfTdQoc`k
zXcq1!-U&nWzl)4r({jl^vc<*G5nj_)Tn-}dyfgu0lW!8q77F$`whT(@=oX3C@i3)aD^SR
zT(hB_#WSmTFXYK*3GBA5eQ5$9dOX*enXnQZ(*vx=XY~#zRp*FrJ%Fj4x2L^kbBrtb
z{y;aIhdef%4*nv84;uh$T6!HbO$DdK+YvB;p`0is0oEbtF_r&J3Gx?*hO?y#_yj<-
zYaIKc=)CMY3Ok|*`b|1G1w#4KSL*-j)P^!bRJs5f6!db#SsV3gLyJmVvMt(>E6Q-`
zd$`AmaZcP%lBWT2%ou#-`OUA&aH^bIVpxO^ztedF4uDE`v%CPT`20^IfNAsqjmp-+
zpf^Eq4GIw3deW2U6pft#xo$EYYz49pI9m#E&y}MaTJY5vlH-75$@F_3>6d?@Re+FU
zodS3+z3P7+o;xtkc7Xl#G8Ws&sfa5)09hmRb|@$%02E932LMzi9D4woa1DXf!%g<4
z1c0y0KOLY{HDZz6o{Ol4grOAudLLzo2`(0H?wGb_L(KLtEg*#2mAs-9uYtjT7y91
zI8~p=I1VuZJMQWjpjpIkPMH-fgEmC1d=iS!V**Q45cZ&OI+zYJ+nd3GpHl=_I@};%
zBmYn27Xx5g8weFoIUQB*jNvLregT9p=O!W$MTnCbF65!W>0Ms!0WqdT6kbi7x&zix
zU?kNb@Ny{?Fx&P&o-_xTI^dW}p8$yk#M(>1sRl}|fWQ6?|2LpXk1zHD1a42x!85-~
z(e}sJ`totcKF#@TBmqtzu*VkK&TDJD55Xj(+Dwu_unXtLxm-j#!d9qo$in7xx;yVC
zusHzO90?iFqV!QMD@0{mHX<_%-GEGd8qf-LE#aubIm
zE~claXAobYn8tEpL+?w8`GDWnF=%TIGM{q#@C-Owh_TxC@SHB12r#C&t`>2wVW!*j
zka)`-u&{-n&0Xu!&nJz}06bwmxa^zKZ(L?#7Njp{@{l-a-}9w)j6bmE5Z}*{ryxbS
zfN`7APlakN4xc}|Cg8D++iGmv2}k+n{-Z_&S=7#D5TN>T?!aw;%}DnK1~^_#ps(0swiFe(Y9bv|>`kZ_a>gd5x<5qAI3Ny0pKxa}3rJ&v45S_h@bKBmtfYyI~
zu2K7ruy=yz>0p41GC4~e`k@424VlUVP(hqV8)DM6hK$e`BhX8KtBd7rY##BGSxN0%u#1)$lAizDC9TOB^
z5$}4s*oFi%KtKS1!0FH`PEe_`b3%ouFuRWe?pHRD`$;os=#UlOg8>nq)S;eVC||%b
zh@a@SJmj;lz!cxj@hRI9#*OTqAc*kFQBH#FWLYZo4DX^{1;T?27~VZaU5DkylQUY^E~2`mwOfx^le
zCvC(^(Dr}|5YILRZQcTbq)8-L%LQFik(#(j#eGZ_^q~R3nBvBCaNP@(|710QHi$j?
zUi-?}QxlT^S{NQa`7}|#N%!@gQahhs%mAR=+A;8I0Z@#j-~TdEfHiwalT{m1i(9UB
z+8}5Q&lUzEwSDXC09%7!A^>L5=q3`0y;=D$6#?>4he%@)HU#O#Q+x)HY7MKBQ|dNAxqiPAnjJ6?=!%F)&gr9Weg(^gZ61u|{Otkr$^p-~r=V?dm;-7Js=MKV#O$QKWm!<5vja#}p(1*f!upo+~7Wp~VBN_4*HD
z8{k9Z5yC|F+VF2H$G{K77j@hO@6mZgE;m0Pa0c4{qpcPPsYW{R&P@Mtki;xw4fE`w
z9V#Huvh)T9m`=dza~@g*su>JX76yRqV0i*derRk*840FYaBcBTKR)4ubD%S-+Qk78
z$6jR(9?!Pp4zpH^HYUvk592lhJ?E{d-_?Ovj;qiC256CgqX5smlfEtv0jHMQZ1CG8
z;|!&(JS5<$zm3c8A23B}1G-_rA8RuOCiWvKsDHTp>Hd`qrs3VAXJ={x&kU)rGc)*X
z(rL1d>J(j%B+#osNB##&3vyb|!%BBS-9mr~QoROnzI|1K@1XJFBCbJVHu-hoOuv2M)|3P(i`}R?Gl!V>AAB
zjX8bc1e+XEE&+ASLH`=GvVoulW*IPdj{Vze?)maCvZHY?khBGCI{2LJB(4M*7!(F{
zxTICs-afX`Jp=w9AS(f+K6p6DuOSSA$n!1;%ohJcV*utbrTsKqQiDnk)}4>f+JV)Q
zk!P<3gmdIS{*_-Km_Vp-dR7~^+5GApfujdB%`!2H*&P
zf6O_?RZtk9OLqkX3oKW~U)+37Eb`cK`P0H_#@$Bdg4Pz1TcPqvk0suKxNNf4T2~Do`Sb~K~AtJ2&R^V1WG#c2!yQ#LAeTO
zA`3?=PvN4^NgeZBb?0qYJpk?0_zd{h5TG!DJ;j@$pmd=UN8}Eepzt*hAYbUg4#?HH
zRy>bR{HWP+!LrIK0DwU`0qjU;D!#c05m@fRox2AeN7^8cd6bQw)dK6g9uU;Q9g8-b
z!(`6wXkb{B_`xROY}I6fpiQRr7#`CCvZ>u2U|{ropd~6!1>J0}1lOm{Tf*LS17&JB
z7eMb9I?@WhzYow~AYPy7h1WseASubZhuG->0>11B;}(JMNPyd&f)+UUp@su#i*IuS
z24YgP=~O+93pksADiOS90FurB33~A|kTo?RaQ8_RC{q4UpwaMsQ`(4F!o#zCo~S=O
zurdkWTTH64hU{Vys@d-UedIa-VH%+kU=!2tvR4mG;i?e{^gv(Qlq-%$I0+8=bl{b%
z0VwS)j!Xi5Nr$#_Kx9&G?E;{FHl>%AHZ#J`w4bdhJxA}IDR$A=g7B!*0Er`paY
zkwAn1T7rK8#w5_JIJ)eo?!U%1mjE}|ckv-tfM`DXhx!f&$${<)`viUfLc$H-#XS^s
z@F{zF<6FiVsFeZYutNA`8$U3xc=NNNjzF`3qHLT6Mzw;?5r?y#je|2ycc$@nJfNfO
z4n#49+?jlqfLp51g4V$7a~#c`fENbKi*EU6ss{u9M$G7ob12Fb;A;+efD2{zJEUDv
zV&;fbfA;qU_B11|o0^${A)KS=?v+XO?@XQY4xc9e2h(R^CNOi?Hyb84vIAJI)+Ssb
z{Nn)Te32%EZzp3VuUetsuDHnqckt2lee+x;$=*{KGKf&4i
zJfLhML-Zg8Lr*<|Gzv#^Me-~*(&4(Od&@r{V_6TO0#xhq`f;FFLiG-~g&JV^gPs)gJm?Mpk6UZunR<8C`FHoe-?MLz(m?bmLiK6&{M)s?V}T~!
zvT}c1%fae5M;3XDeQb%lv7%X+Y0wto*BJBl=ZfF_)&DEXyz8jv7%938D9BpB%+X&7
z3=_+c?SA4}BQ=nhse*1Y&R@hHUmX}ViO)D)n+KLZ!H373Hjs?!Br)`tjXEWCq<;6Z
z1CMM!ANc7iiETYopH#)wM~D2phxO64vhAk^=ln{mmh!0GCDwq@_G0JcE7)&dZ{WiH
z7{Fxiu$T0iG$@1CKEwVy)tK1*2;3|aSUwsr={MQ?lLBB9A?C1^8pE4nMD*S_^`Er!
ze#scpIOJ_1wizzK#7>&~%%N$HNr=IRVt$aDN$<8S4QlV&)zdgxz_4v3)TjQVlDIR)
zEJGCwnZ`bJf!^dtr6BMb9|bjs;65NKpl8ial=ZeNnDgdetprsN8(X&NpsOlDsj}zb
zTJ0#4ha$TF(OqG(MNgvnioqn$z^muyQ4EmZc*>C&Vgsuz4fb+{{4UNV?GquK=+WiO
z8vx6jpd4PfOD*ye!`eMASd3ZjD_p!~5a}N+t#QWukq+*(Lj+*nBDPH6P15HM0zOmMbjK!2fo7HJpA2flvip8ecarxdi=LGS3Y_r
zFIbl+5~z02M#@}F(xIzm^B_~I
ztHl~Q{)$u`Q6;Br{Z@q4Yh&0scBrgi54$!CtEnel?9L|lq=7jEcPVbC{4P!S%o>UJ
z$v!q-d6t*XSVYHB-(hkrr4J)s;DF>@+tb6})v-fqY(@DoEM4%d`;@8Lk-J$jZh16g
zEpBM&?A>wW72OWkB_@7#MeN+$ZWn`~6TJ-?jd-GZuHzTfNsj|GtDaaZl2QE8R^j7e
zl%N1&RfU7z&D_wk1oO(#E8(ezjJBEHZ{^aG)ecWOrAb7;mL~`g8Mpe4EHHDQRt5_51>sqi>
z_!^}o-vU>8gi-#nJ!z661zltP)C)L-?NS8HA^1DSl;n)rR-$-4)*gCnV2D#72w&Z9
zc9Ap;3BW7*SlBP+ukMeGKP&!NxAY-5^oXTN4Y$VtmhPs0jP~=->_UrO?r2_iDJV>m
zRwZvjnN`g(&4G5xYh0eCTwsx2O4)0q!*i4HoSte^YKe-MALBfZbVei_C0ymiBkG
zG+uPQWleG`DxW8MM1rr``N%(nakkI6jyBXU+`fMdMq-a3-yFnt+9#bvllhS1WCHzh
z!ez6sQz5#Pfn>G&*mA;HV6-iSTt2ZmmgE1`jYt~SP1u6Fl7
z7$zeXX<*PxQT>gU*E~NiH5`aelav7A4-TrUiirkSrZ#75FtJe%&~1~EhVA+cADy=8pTfD6cHU-FlaB$mPn>u|qgx#yM?G`Ff8l~EqpB=mWT~u^F
zxFgP~wdmI`jKGgOf-=@<-iedF#}fOl)o)~IdVSLuy!rn`Q>^~mF(DCk5nrU=Jkm9_
zce8<+m+pptt7X2o=uvSS{SGrzs&)rvbNsg=Sv0MB&uqKRvQg!#COoa$E;?p>FyqA)
zvlJvToe5bHX>SWt|1&Jb75iN%Ud$af%
zmPMn)=}CR^iI`D|JOvd;?}jG)N43(!^nod?VG7bLc~*3%n_U9Z44Nf{lPqKcy9*q3
zbws6HO`Do?9B0WJi`e1*k-oWx^!&{c_FR=52ih`$UDGbg0rNH3D}mNu9%abtx?km~
zn2N^75ix2y=>E1+sC-vXy7xstXwVS(Wa0aw^HoZVO3p7-m+)MBcqI>ZT8s%-yz8tr
z8#&2wkonDRTv>44_EO&!Bhx1X2j&1D4E-AyVEZXe6NMd~B~jZhkBTwYLyMPUmgACG
z$Y8X!nvlljvH_E!R
zGZ;$o{Uq)9d4El#%61CU^@sh9jK^uY$mCseW6I=E`FeB58F`kc2lyr6X|kcEuN6@L
z?6gVIjx-`lkxz%8O(Xnfut_GDqmN67iNb>idVgLqh~=uQOIe3_`{a(OJ1QFUFV|)_
z*XI>|7~}i?w1{l6ct|x59Wyp)aO|}cc!cSUjq~YRoZ7j!ggEj1+jAj*m$N7dj**I)
z!w8MTZt*94HZs}Ht+s?|JQ=_;TT1Key2cVYmm#IZBh&`8$}s+!i-VJ>#WVFU_KiL0-mpB_ISl@-C7n&3=l0r2tc;KE&@CrsUrfoO4^*z^K*49bMggvv`
z$2$naB6TZ%!Q4=zv0%G$3t7p@yAd)RfM3=OmguB*L%Wm4dPRIkC49om`Ad>K%+%9l
zC$Ea8&=h9+&IG1Kb>kR6#RQah%&$dW`3mjKJpx-&bSju)($9j<-u$*^M81IXX9>&W
zaToP!8_JxVAlT|)ec0Qh_}07H)q^HQz0x6m4`{AaTCMa~QRjvlz5{dxw<_=}a{6pJ
zv@kJ|hxyvo6~maa0_QE~adhN|6gtG5^wLiCI~IynvH3R>6k4gx{R@GGH%-<@M{>+z
zN}tHd`BsaAZZOq|3w8u^$lHTQ$Vi#^PExiD3ZW(}99j)J|08*fdGSv<3vx{mmDRn)
z!u6HBc6k9*Fi*-Ol^j!^86l~|_qg=#`ocE>$^!m<7gsGJ9XU0WI;3ikEi-f`b^1@=
zNvx(bl9QW3{+@cL>u9(Y@qX5o+(Y<(k2I7~D<(N`)d3zkYn
zUE}_^$V)ZHy@`|x5W_Gwh4JHs+L?^@V2U|>s%D$%#p&&IG$O`g3K41!qd;AQNby?^
zVENK7EiRPs`MXQ{{H3VM(||n2GG<~92SU)9^dp%gbEQy?Y8pi*qU#>@Kd$BN;g{Qi
zt{$uj%J#mgY)P=%9d?URYJ9RK*D%3+xNslwtnkiO^yeS5X1BEbwoKLbpgw{=KkT1}
zswwzRe4QI5(15#Gld)Jkh+ZJPB08PBuR9GnLlWZcgoCl7#GZoCsu`qny*KnE14Ivk)zy?zr}Dv`NOUMHqs9*$~2n`V1)a$ZPXFkd>;py
zOoG@&3Qm`lvfb&3uCM2iis7w^k7v}dx*cgQgyN6&;BXQD*5;
zk%{5dy-C?9Rh?(Vo*foX!^a^v*6Cu%Px=!xVzT=opzc0X^`WK%?H+zN#DDMptA*sZ
zm|{QFJ=DDK6`%6ukmNgdvyt>|g$#_L0^!11%Jo2E#piGQHTxvj{O}T?=M#|xdGESSCCJw~Lfo2vzt_NLRNmw3%IW@t@+_Iv*J;pX&Nqp)S4B}9
zZNJr2+ZNni;UK_R?x$PjWd?fG6tcNT{`>$ySnneFDMmUn%x>nA25SkvcNlhr*Ksjc
zb8De5;tZl^LJ4gZbY*=WLpEmxq}RAqRvKV6q?F1bl|zelm<&qJ1-sxB1{aUr_B?I(
zP!SQeUps62e-NQJJUv>LDtO5rhz#9;K&#`5wVnyP&5mBUAf5;!Hi!6q+Nl(ik7_vn
z4$*CGs9nl670jSdhsHC6@28ndH$#Ju+A5Xvbzw~viES50{((hol&NMmld
z65Esy;*Et5PX&wYMLbVvo>VzpBpsH)3m1szUv{M|HFT~R%C%(KFh%`L;m+qN8g{um
zV~!?;YNm40opr9Ze@VIbTb?YQBw+sd;XFWsk0V#n{CmA;A310B`g9?NT*D})>F@D7
zoCx^}m4wsbJXFAs=R@`Uo%;vBs=34TDk{&s?_)1>oKDq0mkbC#`UH$9tlsOw4i4y1M+B)Kv
zK4p&!AC*&YxX<u(aPR
zPg5+au|mFkLn;iTFEBN
zYjhkTP&;P*Ph}VPt|&QZu|E+ox-z(>cr_*e?0#2w`?y=&g83;O`=yueB<#w#Y!Eo!
z`zH~*@I_x9|GJ)hm;wD$a7uqY?XnDv*&2}x&ElT-KH6*&w~Gr)$*ggBV2$Cn5=y(`
zPndS+;(slFTBLZ?sI$5F$5iJEepCdSo~7AG$7#5-zmQd2Qj>{g1*NZ>6OXYbqN)=2k55hjs>$+`5RM_<(&CX#gZj&`JJef;JVbE-Sr-fUP$
zGt<=_NkpjG<*S*M^do>ssuzhr-_tT0Hj1ChdAz*b$QbXS7eg)F&0{V@cl<
zf7_YoaJCXFKI3{paGsvhw^#)M<=0!e5}~y?RqWjRIu;
zxdO>8Jq{&QfRBb0w)^<{gv*|kI62l-3GU|`mt}6#{d%0iUm4=Hm8|H@kQZqk>XIej
zS32-HJYsI!SLg7ljHp0(n_+Vd?}ga%)kV2mL2^Rz5|cuy>1T6N#!%O7!>A(E9Fcv9
ztBUv2DktvW9UZ3}+@r4+B|73aR)vSUPS)1eqMtn+<<&}JL>?%Nx9EYo#?l~VxWvrV
z8UIDxw!2T%XDouvgYFXRh~#H7ucp)upB>+IPhmW52AdD5536RR=AZ4lO+NJ-cA^u#
zg}froM<%Vw1mN&0^3~c<3ANv=46nIcuWDZ3-_*M`=Sm{w^x>Ig$Aas}
z_09W=+iWI*5^v|!48f0O@1g!KUPy^5I9)
z??|$8iNGZPaK72PZ`-_H{1|SNM(9dBWGkRWYQ_^g8p9BKSUwkHT#U7*D6+z+?7#WE
z7e&Y#p)XsZRom=S_?!dUJz*EI!?4`C*w}Z8SgZ;>yNqU%#BI
z`+Gl#<-q8U>
zm(0a)Grv{JObOmv5L)boRk^8GUQEqP7gzir7J}8
z@72YJxuH*Ydo!TokNz+Q>g)&X*RmJAb$PhMm(TP^W1Z>G)4X>Q86p;u^JLVsT0hO`
zCTfmeS4-H(O$Dm$&c7eXM})%PbYSO%-?h(D=a8~iU9_vdw`z{5^{ptc5hEENl5kbiv^IKwwW?f21q0%|M+g5@gUuGAG!^DQ0cPpV5g^vm$#i(<#k5^SQ*t&5vzm9~_a683`$F~57eh10
zzLM{;{jphLInh~7k%I9RAhpV$92U{b^~Z)Pe0;}>D1$bY-+lHa?T+|vlY`~WUmjAf
zH5nIQ;|Ah)E@DopUwPYE-%a*`nu{r?%X*c{*R_}_LC(HGG5!vvp)8v+A=nRvE0xw(
zh3UyZUnh|^RjpF7JHE1PbNE%jc4=YT_K>ToD<2Vv@b{g5MP+PH&x=8Db3BNsg6Z;&e5ihYvoMPuF}{f|^y6D)%vH#0f{#(RZ+9JJ$nrnlXC=LOk&_s}-ZL*TGiGK^
zPu%Ji^S+s^@aGmiy~Y9$cL9aJ&-ZZZKVJ)-JHvvnzkZ#0OTS^ixx&`2V*EXw)$$p}
zX0^ODpW4e4Zcjjvz`L>IcI$VIshGvC@t=s6nChT~8MZViw-Wqaesx8AG75Ti0qUvL
z@Vj
z6_-j_9x^KM0$kmCgAWjyqw4LTAsUd8X_6)={_VcF=B5)mdX)BPAV0#`<2q%tAFPd6@t8p>gYT4h#F*4bLJPp#Bw~{^lSdy#eUVb<%W^V-{xSN(6>(`
zV#oAW?8D*mQ!z6yl4rFx?W@w1D=o^PJQy>sM(Th~u41UkhOcilJq8eVw4Sds88&ZM
z5%Z1cx5{sqzQ_m#*?l7~NH7m_mhmO`62j2GjXFBcgpFAq8XTtl)Y`CrF394$6s-iW
zdil~V)B1~3{MyxvcayJQi;@H+M#AF)cMLfvAGL4Ak=4FX`RkmzDG=RZ)Bv%Tf^`m>
zgq20Uk1t|Szkz%>-*mhk-MiT_X>TVu6==>pX@<<&=*oCM;6G1pqS8*_-u`JC?FR{}8g>c=A
zT8YQ@r~hq0DPM=ro-U?DET;UCs};eF2(Y|sj-D&!ABe#2+TKCPlk=NepDU-)cPcw>
z*Ozp}y(GI%8x?H~pxk=Wu-#cNUW_7xNa*g+MCQ}|`3|kRGEQA+#A8pkt_e0o=-ri_
zX$5y+;gLVe
z8i2!VSpyP_Wmq`zdUl{c_9k>yl)*q>y1YhMJ7zMqc<|Sw(KtUOih<60STyMWF4$J
z{K^4w_)bV{nL;Ej=M+CTeTlp!quLW?cmp+uuqONag@K5R>*TmaR=9TArW
z^A|x|(%h#_ljX7rhF$^QUCL6H36*OI`S@{3_lexS%wya2z&Xu|h@e@IU6ctIm!PK9
z$j_T*FRylLDIh|VCFslEL=XRN>7xne6-^_8me~d|XqMVPUq>O$VH{lhk3c#u3j1@I
z5O1rPCUv5FDY=j`w{E;~>%m4a;(
zKA2l^9^r24JjK*kLdpcnU2QeWQ`kcL{+{G6ewmmz_yyI=CDj193~;awyNY}jZQuzuTqJZklPk&&?{dFsQEBb8`vO
zNNtx7OXOe^nOf%DEd_;mI)zI-BN$dTqFx7icg(>Y9pC6NF!1incD}RF6Ox4PUeK;0n0lW22pez{agdWNSO8aT9_Ny-$
zRQ4Q`7CO`qhOE$WIIS2kExWMTp{x21y%Qx*zjZtrx_LOftTec&TJTIz>el{1gMNaN
z#+}h`ex@BikygTv%XN{r^(-4G(=%cul_VV6P0rF0gBeZbhUE#o5p)GZYY9Vg{TlTTaJ58LRW&p)pZk)t=R?~yXgh0my1
zhc%xZy%o=oXiEgv<=`5b#0vTJ+@6!#Ei2<%hl4zEvg#ijE{1KI5Jhz4^HqG-i%WFJ
z4VC!)pdeHPQ@|Pai+wwgWD?a&g^-t_HS=_1{j^2)?NP8DTz$66dJnbOGGsZd+KN<2
zU^g^zAyJ%E4l$1rV~nbx&|5Vm9r*wme?U^UamgH3`S$)UfZBjf6qf;{II^}n;^gWh
zi=~u_!QG|7muzy3dM+p3t5HD+d5_BKZ_#!p<}YUYccI%Ug3^eORDi8*NUOuuKOf@<#3qIc7R1&>U#dv?i(E;KHadv?MZ?i
zu6!oX)yRW{VWuRbCkxTYoJ?N!^fy){^kGUtD5fiIhJCi)(_8U%7anP2N#Y+aCltGU
z*hq6XL-ajb_+MGGl;4R~bS~})8y##dt3G-V#~8~@f94-IvgGQ19(8NjkV
zuPt)EQYCv)ks{b7XXe*)Lm%(P3-t6(!KiymqMxm?#K&S@i8IL=;W~M6UQFt}Bib9!
zmR(jCdpOdEW?kDA<)-$lI9&Es(7(pmX2~amdI-tL$oOr3VBC)V5QpTW3(ZiYPNizn
zF&B02TE&1QWfwCO(Fm7OyTxuL_{8a!L*>~a8m+n5&;{>bgULHD3P`6zCGar__91iu
zR%z8^HPT>4$>Z@XjaPzxt;uSJ?@J?Tfv^=m%*fi_)Vh3!J^Czj?q*_2HlJvMFCzNrl;B<-be`kF
zY)6ZF$3ndx%Vb_&$GfjuLe{oGJs~cJ@O~Pg%5VO>DqXdZfy{p!^ov9IlTTt4^fE^f
z&yfu5CwWN2#1218Bt8#{jyc^c5dzOvNwL~
zqYNkV&=(UnPq}Vl?>~4jgS9NuLC$}FCiO}0YiOeM?426#+XcvS*$m!8HMkh*us-#v
z>MXHM&jmPIdZ!vV>CYGAKK*Tq}Kafg{oeGyHn@KIT&?EosBS$*c7*
zU}hhGIIT|funw|D4qQ8Gybx$i7VSsTLaM60xm(OA-5J5)DydcOaTW@|ea4{O`y6gL
z{o>eGfBe=T)|tT3Q=gou=8*rJtwZyrjPj1Z5wi6Tj>~^&+NJ#beb?s34fWsO^Y@`x
zdgxkJzAWRd`ec4(;hkUF*Mc~sj&E@rlzX=#uyx4*Lx`KmoXZxsj!=~PdE;p^t{$^p
zZH3TM1;5*~OuUP%!x66hU+^r+raEk+YkWg0ia=E$3~Y*3Yl{
zvml3onQ-D5YH$VG=`kDJ?=_+5c!`4l^#a&;H+
z414xbCT!=M!-1-f1@i-WSZx@#?iLywG@O05a)s=y(Ag>5>f#Fu>sT@Rt3H>QQYq6J
zP_U1EKS0?MJ*Vyns-b?`g+YCcbra@(D>wCo+F#4?nGUBIQPS<|MEy4DNBo+(ZWooT
zhMP@Dof2odP!S3Po>`~`4*HtWSKB#0Ubl16I|1m67CD$d_~p0%I>tPv^o%G{!tCbC
zreRSSFK_7Yg1QnZBQDHq{l#HI*$2Kh9GCJ)cTJp~V4s_yxGd3VPS8+M^4jc1=SFsU
zYjrPg+g>==e6#)-Q!Ll>*QYZyKF}!FmU3uV&I&f@FD{o@=YBtRbYj~7a81=!1~t;l
zz_CO5GOy*cpS{PKRJ9v{_SoFrM}0vh&>mt(*oA&VT*hRqKmNpRcRSuyg6Hpbbwh@e
z#&!A~iGy&b;5Fj1Ts{fk9r@M)THB;%_Ko{v{(*mO-r~q#m&{
zBMX`0U-_>?(m79lV#4bE3e7b3`CIcL!t*CO)0W;xS7-&k8C7^yz(Xml_liXeKAYtE
zGD24+O4TC#(MqCgL(2$M5a9?*282HDT99{tFvK#ryu|R0ojo)$BG>4sar?laV7b3^
zZ&2D)l`zMTB|Q}K`r;nP_l{41az?%!`r%&H&JgY2qx;|`ng;41X~#?sPoGwrx5^CD
zm1x95t({yIWFHRtT{YAeESpaex#fL*d6mmXSi3P*ZpFPxWhg^r23vRK&_U=u7Jo|%9ptw)$76!p
zK$16EOaIy^LY=ZW$V)KIn^WaTc(5phyX*;Nclh
z5j_sa0+^VE6$D;B5birJ!vgJ!Tf!btAICdBP4_l_1E!DW>|eX&KPu5r}TGQ$IH*k!s_9{enHe~(Bnp#$E?fGl1|?plGqGrz^5R4M|v)kYu3!)
zUK-6EuDjFTNV&lsAeN-SOmQ{st^cv(vwJ&AV-jza5rM@#l&PloQ<~dfzy4hv+h4lh
zZ58^xpWaI{(cJ87cd2Wfs6aVsjljUqHC{gQR@fRM#ZcCO7CF{p`bFS%YPtk1K$D+r
zJ|ocjGl4AQ1kXo6plR#?gHDM~h8R&rNPbiwufc)e!Tu;c+!9QO9%WHGJkG0i0%$IpNL4reU+baKY?&B^1>+~=@0N4gu`WRDcz
z-fC*QNECj5vsyxR2RmP4FHCm>jXgOrnzVp7aJNIYuHrAcnMx}A2E7I=qTY1IA2TE3P%`F`cM6Z3EkEC>5
z;h&O`x^dy|9fJ=rhdy=9iK5FLJYKFeYM3pN{LkZZoaHfQJGYpK#!AL4pnuCYuTq@n`R{
zb@xiLqdfB5(`$AW*Dih#-2;WY8uL?cmi`@OOO7@RS#kPpY}U|~jN4thIaT%Th}wP|
zbLN?@6n@#Fj6j{}yI=C74o9)~-(c(#r1+30Z{>t+rjmD;n@HzLg}*AJ_3l>ok2Ur5
zo*y>7=*dpiCruIR;~psa$8o>kIs1H9hGk5l-fy9rZH&9%c~xRA-5BjLPGo3`3g=L)
z#LhU4w&Fy8^UmSek2i3c-{RDl@NWj$oc4KjwfoRv-3uKlo%o72V;%2Je_Ryza=+s=
zU46z+$i0J{`1_|b+B%Re<=>&3Jyi6#NcYZY*oH>)MX5adK6d8-%C&EZmDAH_%EWZF
z9?kiK`9fc0PP}V0*DrZ0O!y0Cs&m4s*SB&^u2;38>bJ!_?f*SaZ%buVmA=K4Vuz+X
zQZd&tkYk4}&P;JG$~soL+H`6)%V`aUL_wcRKYDjs?%M4%@*4`@DmpEi*R|eQNMKva
zn_})LP!>;;jt$43DPI$h74^J4x~kN
zKl&XJ|0nP;&UYxUW+Rr>>ATj+?1I42JeU3Pe^cB@NSVY}>W%_P6}&A?KF@_hD*aP<
z0o}>IL-DEw^`ME>&wnoi*=HqQBsX8=%H&)4k&e?D`F!!VU_zPv=KEetK)aJcF}Xf`
z6em2zDxke>pID_miFrU0nWMy7TYbRI%DV?qMXJTUf!Ayj(-d;?+-QNC>Fl{W%MALR
zen}8|ZAIf(Pmm*PwbaQNKwTNmU-LXqp>m1r>crjaHDa*CH|AM4guf;;+@$w{uQ8z^
z(su*dc!Y0NXmLb$%&ShG&L@#>W!?=rg6()<9(TT%Y6z;oJu{v~?qgN056k7E3NeFd
z53z>u+D!G%i*FgDTrKX>U*)e6*mrqNOPtm|mR{0rs)3amn->ZR>F1?tCcLD0#AN*L
z&24s7+#T#Hs-Gy>G+1--5!N4m-eX%yz{+5%sIKe%eAJn18?vYByE1%Ga5h!?M3*sL
zZzcPBm*qQ0m9>M#!=dSpq4f{tTF9Y}L%YNvns?~sWgzZ;@Z~z@MWf4*6VowoILxBR
zbM`+}Jp!saP8hmSBFDnwwGq<7$2zOSfuvE@R)tuL_8lR`RL_sI0pZ^XiLRbq(r_iY
zd)4DCi#G@eo~~A)4VD|S}C)2QyCJ&EDBgNI6t-fpjU0EwXFHRVR`%A4`w91pY
z68a8Ts%)}stAR~TMK@S@$lyM;jLXBHGyaK>1NK$E65qMvmxZei_JGs|$H@H4;{1Of
z2pwQ9*D{WW|0AgTx{Sq@Q`g<=!Tgy5-@$zb3KIYFA2}&pynmhGg#rOg?DOqonv|cP
z2$#Fd%Pnu*e~$TsE0+0KhNaCS#W5gA)6B;8OJZJtK;L__v3O|4c|*fd6$t1|NO0l*
z@vHV1X+OA(t};vk#Egj)V4Jv_&gb~c+`6C$
zLz?{}Nl`{tis_O#g92H<_*L1fX~j`uYW=E+A30hSZzo@HHfmZJ+u3nlB)_Fsx5zKk
zy8q~65zO@f$g>ZG3b5z6h-lqCa0Bx!dA*&am$V12I6Ej4`a1Zs3j8>6_Sxw}8qLWS
zoA_eOBmjouT#K^ADUQCtl`kqPa51if@(|_q5rqOW>u1qk>^k}8MTZYzzZ&Vh%I0oV
z$AhciFUf?ylfkIRqPL3PciIv*gzBDr_li22^G5$|XIBpjee$F^A=BCO$$Uin&}URu
zs?$uFpkj@Q)M13jwcOiNl!5%~vyikkcVLfvR9Aq7@$9I=(~#5gIPN{i+#4Wd;nl^cd(I0cNv->scjlI+C4;0P8{)(wb;_0%_wi@%8RDFvh?r_x=nsv
zKa4N;PFnAM)7y_8FnqoF@=KszxM1Kla?9%s98^qi@7(KgFy-n^?elq|Onyq>ypiO5
zGVx-=Ek3;qvr~z-B_`(JfLB-GroWC?1#WkjCob|wtLlMslET6Flkdc2Div4-v1elo
zT$L#E$V%y#$b26A>W4BY{y&||`wSM^2Bi|Q4_mIU_3d&S$h%RJIhM4eyo{1vMD^9*
zgf^(W;!MZ+r5{Z)p%xbJI4BB76$TQ*7Lfu?Ro7oQW|KNzGl@o2cTIH0|4hz^
zWKnZy792oN{&HM$F6_Evh1FteFgV&xVtHE2>E7MRZ~DDwO*6IJE2FrE^ada1C*G1p
zeSEG8|IC^VE6ix^-PdZ
zW_LKStx|Rm%#K`@a{_LJzkJr@5$uO$%hw3x2^Elm+@+jVd4XAWJ=i2(rsJ`vS-u-v
zK@B+n2?%~(xrD&7nHbTuy%4viH%Yv<(F&ikF?RIw97JQc-oozs1ajLIt8efgMWmNL
z%YN{%Eoq2<&qu01RqocrKVW1B+DlaRJy^<*F{-0-6RKhc76szyEr`L;&7p
z65Q{KjaRu6%9^3=AqU@ttM|)i$=7Bf{hg-MeaCAS?QSgdGBh9i3#&i~kwbCN6cvZ`
z$U`o~I#)}`UmR5g?pg{1OmJkBT=a6vL4iVbcQ~i6vGl0|Y+Dt^=#xE0Z|CUWVfNIR
z#5vp^L+um;?H(}6SAi|vw_hZFu%fr{*agRgN$^~jNC894zWAuSpQ-4+yYKSsZ)}bi
z)`93PS;6nZ75f)Mc~f$%aBc(ab#0?NDz+Gbq4XcLw9vT{P=rb4wL*WDc)|J@S1U;H
zar9>9N>Pk%=Z{6H#T8y{K?PWr1}xFvFL#r##$&`*ez=fUedOn@lQ-SqWYY?8Vj)BYB*j8|U@hV@sykizJ
zB;Aut@kSepV@LAo)gMcL00}$tq7|0v)CR*MidQcL1X&yk114?anDC!im27PFt*7CQ
z96UZ(a;KC-^db_E6U!CSk
z0+|5qO5Z1L?|v;)T=>Bto%HV_?^WRe8S)E1*cR=vot<%#HF9u_DjaRz5#F>PW~ne-
zDIafGV@WlT722^Y^*sT)xAIUrCk4wF$>xK1o)xZLP=!TN?5wmHVA>9Ip?!Nv*y7q1
z-un;g^~2cch^u57MxbeAN*J@=8rF%)eRWuJA{?(A!Bj|n%7Q+Ayz_WRdS^#^BDKKatEZGc97Qro*Ok2Ke*K8}Ns;>FTV0@{SdUR*XQH$R&*8M+3eRV)o&-XUANC_w)wbBA2O6NrdrCE>?Y3Y^*VL=R1
zSVC!7x|a@V5q0S$mj>xr8kShlU8*Vukobi=^o()@Ji7iz8Wb20hS9)
zKN#w1BSQ4Jcb9h{Q$P=0u2cgQA?I-nY6I)=(s<*9no3RQ%HBecb=I5aR{i2}#ytU7
z3qiqYzH+?%y#~CHK#&k&>qqp?Ux^@TG)t_zH5>1H%d%(yyQkQo6wg%vC5}M3eKPhH
zMnHmBL;^$vyg*41!RgVX)C6p3K7ggi-zWj%<{?l2sVDb~ChjOYS)s?Wc}EukFM#s5
zhq-wirQyG1uoV@ajLK#|fE=t2B!GAM3S_(dGRU`Yt=w9Y{7<7=%1**3N~V
za{lWVRXSemP#{VrF_%&1!H_)eeM4_QaSJ0rtc9SeTo&=0ERN1QT-D5MH?9i*a@-{)
zC+9%9Xzlc5Xi0pCqI4^*cXi-yv9LSdAecP)-~8PpD}Za_G?>8Q`?7)G?6`P!m{R(c
z^&$Dxf;Z9&G-ivoxvQ?B;y?PGJL>369j7fHa5}perL7M1_jE}!Fq9tId
z0@Kg_j`<#O0sI3*ai|1$d*_YRFhp;Cb+;J`fer=rtUlP+P#c5Myie4`5tpUMmRC1g
zE&7;$Yw3a%EL6_~FyvhD$OAb2ozgwMu%V&Kh_Z?z-9iiCznDPb<`j-
z48MJ^_!Xlc9r3XuM}6vqwX}8Ci61%r3-R|Z6u>j*8RpugnC=hmxoxaymVGgLX<(47
zuK?u+fmq*bP5+v`;|co4z)J0}qhGa^Ug<9LNWA)E^d{XxFKesXa)B>hf1CD)lW=%N
z81K(A`nZ*W_I?xn00h?65jH
zS!B+c<#zs^J@c#bdH?eKyt%ELv*{`ncPDP#%GUsh{E%HcGYDx7Q`YhTdGT!fcRROd
zu~%Qxt)x-k--9z{pA?sG1(!RLIdYldrD{fU(K@kpp3&WnjGkV0pW6~*m~^3;nAEXw
z$-hVYU#tzpmk{kV;tj&g+%9=VwdyH4f
zb*TCRckd^&JZp4uwab-k7}~3N6Mz4jny`nFHLQO$TX0tc#D!$=E>%7~s5;)~o3VCZ
z+_+XxOmOJX536%xu=`WF=s{np2Ucjoxz4x26#Uk=V`6p9l^AN}-xL7KncQ5hHaxsj
z1?UHpzrZpoTNug8$g`9U9jhUz0rW>$vrCA?Pn=Z}i%kBnJ<(ODUC=B~~aNpu8S{%s-y
zY+`+HRAy}VelD{G{^bxVx>OaBovOuC%(xiiZm2ec(#P2h8ZvUq%R(Yzp88C9cuXHH
zzT5DZ>6aM+Mr3xLP<%`>Q*EJUKl~9z^C}-%Tr7+>cHqx{E1r4oNG7g@FnE9eQ_W3+
z+HPGNLIuR0oE&vqwR-_CFTb+1bvx8!=FLGLIA7uJ-)?weQ3)fM5Aky7<5J1A!i{Lb
zX%U{^`;+sdje^67sXCam;HbO1r>MGGqhZZdHHP{>u}h*p2k2S3o4=h;h*^KIx_r9(
zGWh-e`;?cXqldXSFC$s6H(e;9%9&JUqbZMk1tyIyhJHfMe1FlyJO6R=Cts28rT4pQ
zjv~~PhQgEvL7PhnT}%mYPT|HL#iIkciQXOF^?q2v>+(!}sLx~ikgEP8skKFo%}gYk
zv&V3(z(C4vKTYAy!dW-6<5LAeuf6#D(lG2RQT*j`HnZp3_afZ&4J9%~OLQ}#z5RI7
zt}W98DaN334jZ=fB1=;)H_WHZbk|uU{twat{`zS|A9B=0C
z=5v}uSA+B3$ulay`B7x@M2RjK0>0kcS3g|cV|*J`+o@0Mm`nw>{tmMggt2lG_py79
z$iE7yr>U-Ri|yIua7JDS>W0vG>qTyq4Xl5rV28pXDIGgwaFT{ZFFGP3Zx5H?smQ=x
zuFQd6T{dg%bMWqNiQzdKFl0R|
zG*p8v?Cj}Y0xIIjIsZzFP$-G^miL?-q+4nzT1iAmw*I+CASc<+M1M4h&|2b*uAp^dBv=g77Odv`fo!b}9_e
z1#z^{<6gqDEdrjs!B&lMnI)PCT$|D$YQUr&5TbUkwE-)vL;(qCm9>t@xSJ@v4S4RKD-K7
zRJXJT2Srx*@%*R$tqOZs#~;m`Uu`oqIAcUyPlNlqgM7%X37ffISHCKt_ynDaJ`TCP
z600b9s-lhmX6)q}tW?;O%Zte}ZHF(*{-4sSy|EQrX}tLRC#-mO)04twY9DIY|4G`k
zo%1xt*uZGY-80dSx9zAT6aDHkpf4h5`-1+{h$dF>NX)M$-V<919A$YJyvic$vy$@D
zMi$@_Y_=5LI^Rdwkw?E~g%pdY;VyusAgDSUSq(ZA{Hw^*vI!059Um{h
zxTAENUBXiy%B%Dfm8gfu@6P8gVP?kTY&R^
zBYl3%Fg5GU{Z-Io4w~uvwa*H7lw&}mabSp@JASNY=dKJiOyF_683gmE@6N?6wSFjk
zj@^}@AHRJXJuo)6%@y-@u+0W0faor}dAoVj68p5cR#bO=XT~_O|F5;o_}apN`;b_Q
zgZb}c@8ySlDT0@4BJG1&4j+E1S8+QR9;`R&=jAUKGcSEpr@)*UVn{>&!yQx=6H&&Avue22?8e>hr8Z
zNLv)wsTlq3*k6$P1eLDTWdnr=#KOb#B2M6qDrBR%pVzjZ=)ZSU!FRg~Ah1_5<%4De
zP@ZCwBtyE00?`I;q%UcE)qWMc9mxMStLojpHN$a@0Ek0mEk&UZu`}YrEBHi)>>SZ4
z&pZ=oORd!CiW+@L1U+sCmunAW
zeBm{|@>zB=omoOwu)-m>5wkt#@&5+|wilFNXo+QOaqMk2k6d7$w7|MbkMeW>()-zm
z3@UF9T=?|xHuV4Wo>Tk^jn6x*_HWh+hgb>&ijAeEWgh^+zS
z2!UEC5fpE_r#BQ1L{AkoNq=#jI-lfS(}$S7j#YDJPwB+WlKpQ|pitFyjZHnsP^hQK
zvUw(gBBkIna1Dt@W9=%)oVz7y<<8uIe^KxEE)w@B9~Dt+u;mNj^9qe?JZtLQC%(!~
zBHw<3?K!svcu_w~5#*(T|JQHOit*AYp-7S`U!SFDGvpGgJ|^}3AL9&oLo$LGXeZew
z{?8V3F}c#~>tqWVp2c6a8V%Mrc$#YTcdDsisomXbyI^cNK9N&R(5eP*$mQ`-BN}`|Dh2N5o3Q&ZWt*s?|D-oUHM-4?1|@q8Rk0gio;nr{NrH#t9oPU$t`Vx#46)4
zL{fOijws0L41S$ustj>`{5`)oGwF&UmdWc*I;~pprmq$+upBiJU?g80eKuvYI9Fel
zt8q5!*j&@UDSQpLg*1PZNN!b9(e74vZ@QMS<4-$O(uSR>B?hY1mCuE%+Y+)gS9FV4
zTlop!lRxGD<>D{?OW{+hgV?<|XRr<>t@q#20BhPmc3|)qLUJJZ-QV+r$Cv;2D`7Kv)M>6#UjO3*cK=VV-;`fMM?!|Iz=ZR?!kTpp97_d$
z??~QTF`9ivsE~pHisG0iT1at*i(*&oZ$2180_9U6_WO_kb=0AZWp}`{<9x^q6ic*5dfmoHv|9u
z(_IHbwO>~E2gKCuC<55;W8btUflcyQ;aFxs$gg)Gx|4nDUDA)Hl?ptci(g;0yvty5
zPMo3DtL_{N-SNTyB**YG5ZP9M$m-3&Ir=cB5qx|8lV}406jQDUFh>GQA!Ah#P$Sx%
ztFl2us47q?q278hg|bQyagF+YHpS?yS9-8Eeb{HPcY_unfu|uv_wTs*{;81D1jmBH
zV0P8uqlD2dl;i&p_!KNnaOq3_Few}-D1jA}@c)ObScpD!Z22I}~heg$X*>aTtd
zueO?Xj{Qc=ae$8>vjRF0W}kWjLYPAtL;F0Gf9)QvYG-W5B%|
zX|c*`&3*QR`z}~KNtqz61L3TlL4tsr@2+rzZ@FNWsuNIWY+%J6D>`H-
zNYT-Yff*J$8{ZVcU5R;RhpcLv(1FBe>Vw4Dz$xOuK~5s)SUgKC*{_fABL;7bsMMZX
zGsDdsi8idy-4pg70#8s3qF%_Y-6*6`?w#BcaeJF<&9u!Q4DQt;r`<~E!E`pmRQ#{%vj{LS*iUB2MA06wIQwQM1f_H3dPd$wAGAN7jl6EnW4{?ed-)0
zw8s7Ym!yu?W@849
zeOd!+;w#XzpVukCIdfC*@V3Z)qq$!T9#!rNS(KbM^y|Y~$CF{KeEFb}N`YYYjYC|j
z39vh>6@V*FPtx-I!4kL~c0=H7R%ASN5iAvgHhK1544Pe4T!h4t<+u*w@HH5`W^&Aq
z18e+sdM5rN)`QDev+cPC%-XX^2XTv=fViKQ;e-phMN3;i0YBC*1j3eg#ZN)}GjI!B
zfX+DT(hWNsFvTo!REXkMsTINJO*FH!4kuiSbSKM0c>wGcM{+Rm=M?jdf1O5ipB!;woox+Q!63$xoiMqH4I%`-kls;lCt#60eLdN
zNu3bD`M@R3hfy^B-i_~xvNq|wB<YQK2A)z`()cz;w^?|_k>m9
zp|jLBlof#%8j9vak4~Z13A3my?+8=H2r+JBF$Ea%4^fPjs0xM0m#v0>ip6%S|c!VXnd>
zl4+~R^Y(?nnuQ$re=^)xD^5!L1opg*TJ;}2q_10X3oHBr`)c+AC$6K_D5$XYC9q~C
zjDCs`6XqQca3Md2KKa$mKRLiTla2wuG<4P^BYXqw=FJ20y8f(`W|)zMr1o#oaN`I)
zjFQX&oagmGUcPZ0x0tP_N@#@q*=a}LlF4--&~a`>B@=yxVj8C>Q;Gc>JZk7*r3$d<
zm6yC;B&btQmwiJ>)1d94~9?j@sHjYrD|j#k@0aL2YmwGGA1(0a0E<$&2q)*dJd9`AD>*%Rj|D6GssF~}S*ZexezqDTC5#*OiuP%}BiznX
z&x30xz3a;8%}g4rojZuK>@BM%HY!_pP%d9rSoFX%xvg(!e-p!-lZns!4{TNY&D(lW
z6ZDw0j#tU)vZ6ee+G_$}@lKfBj2r&nZ8xRiQj(FiEnNdGCa2suy%KS+_V#OJK~&Yd
z6PNPZ2Gu?6og-i>nNaCiXx@w}VGhqUY$U>bdoWB=>rFtyd3Wwu!MA)@y>7@=Muh4(
z9O5M@qJ~{x))4;e}WYYH5
z5P>Yt8LCHZy0zD>RCz)FtC*~_*dozzpB|-MY8|mm0{)fNe~R2{dhW1d|JT3
zGJypiaCxQrs7K21s0mgwdV2int2n!z
z6<8Bs9wNN?*}Ij4rW0w_nsh;Ii199lQLO(a?W;OpsY1NKNvB-|u<)Ht27q~y#U)K=
z1Nu;rz^y~K)^Q;Ne%7>_l>dCQ8wSfcvH}j}+ILgk4?hl~rUbF=IUh}>Rs=>0bAWqxX9ZKE34>YP8bZp;iL3Om4YlWbY#_T^gZ7m6i|gppdvdN9zDI{17i5$N2>uoh#yFOkE3cC|u$!SyQLS;mY*YAi8mUsf{|Tk9(!fmrsAVQ
zsTS@o4Fwlzr_Od#8YMCA^w%?pLLXQJKW_^ToxS~_7(1viuF?NECN_fqWr$3fIjw%Z
z>!uT%9);LX_RG{4qc=k=Hm_^eHZHk`|}BE
zEfCGk|8^6%;-yYc8phRNNC6xC7g9VEw_;Vb(PU-l-D_FEiJM8NL#LntTJ!4`*!AD_MpU7N_u1hF+;gQM>qaoXLc^~hHu
zLz;SYq=$MdyPvML0#Q}E00~!v^zg^OW_eUtJ-(?)c2+aU6>VQ^`4r+v20w95avu;u
zeNaL1V#^&WO`+R=Y49V(?6WN>WGcW0N?Yc(eIO~cP$`Ea=SH@Cch
zUb!JO(=C18u2thdjGbeV^Q1ZH;L0$)Op8|y0XrG%B^3{9p#zM6=a+J6^g25
zG4L&>K#=Ohta$y(Aa*ia%_RQ2j_lAn)X+AsEc%`v4qhW`$9L?iP0!E-Zo-Aao#O%z
z$r3~!zO+x=e8Y=BI{gB&>FRT
z-~l=zWV7IEx1QB3#XUvH@8Q#CpL`N`dc?h5kH(dyPM8hGP{z{I3SZGdT@`uA3x*3j
zz1A)d6d?IUl}Gg0#AI1TOHaO_zJi$}T41KeXJB
zn^Li|Mhs@2#u>{JU(2V$%h~R
z_~3DAsUzZ=lQY{TrE;G8{Gv>wKjrqFNVi(;(nZZyKJ-SdQ|m}f*0rljvXqIuL~C8d
zlzr&dgtVsGpVHob<#N4~vq4q3+Srd2CiE}JZzSPQ?0=5CZO=VIS)>)i%^)H!)q
z@}81?HxlXMd%Tzr505Dx@C&~*W%6kI9xLr9F0=0`3q$vDkF?n5c8m}!n{Q%)CY^u5
z$uoH?7EPPF;9Bh~R|3^(u!Jb(kiVqWkU2WZe4uN6`9j
zlXtnm!-kNMB3;p$Zj;A%uoAIGz4otD#?#hvMRipNj>Cyw4-A^Ne5?sSpHyARO#K%b
zHcGMpza~b!3Kk3u8_Kh_GndFa(otkZrmT9b0$4niR{=FVu-_%DgZ3PslnZzpdYJ!Q
zJ%n!-8eBp4mSh?4{g%Os*dB1%0imY#OAdpHXoi>d6#N;0d1eWcv
z9P2+tEE|v92r*<5JyNYuADWt`P6X(F$Hf6>1u`b?q@~-!e5aEM5XWOb!)Sb0D0BAT
z&^mk8^HEgBc(KNkLIGxQI1#;}N!m8X5XAH{FZFj*YOeZ7(n@P%`e(88KSt{{bDYzr
zcJ^R+l2AoWH0KE`!5hnRSfbS@Ma_jS-v_SYpJd2s3gp>T*f7$^92cTn>nx{2JeW^Em)Z
zmSBOiIk#FVrso%qdP$;I;I-eM9Ab!iGZ6A@C+&!
zF1-&eG-*|x)lsL+GI&p^%^jJeu2FSS`}+0QpXz4HK}seslBs|l>ye%;Gqic~Y|fAT
zbAA@Hfm@U%E_-Nkf(jPSvw*sXtGgd-PO8wGt9A0RqkR!y53-=0UhvhGx7SDOh%iu-kD90$TgXG{qi*-?i@w)s6Qi*
z;!B26_exYj2B+ujqX#wJIcPh%1|%O!tR358&UX?azThOM1PLVcaGQB#tgzn
zylYqnuh8d#uEsFoweXSn2|XB#-o_AvAl29-0Rb14^E-g#eTR|{Y#EFsZ~Pqn{2Xu8
zI4Pkv*vRiE5c(F{vRmz0==3%SxU!5pio@Lgx@3Ok@$-ebxT>8;1$R;c6V|@j`!pFL
zY~7R6&-2kYO4%tlm9R=!OWy5QU)8Y;^cou#HwKJCq^~{CUVn(WuO!bz9{2ID=)0@9
zM}aS`EP+e$csh%S=Ka@FFId!VL>t7NR_DfcVvGG;CWoz{Lv-1W(#O5n3ZnZ8*33Cr
zDsWp4F`lPTG0t|ldM%%U}+=Z7uSVS6CNy>HtOk+Hzs$j
zqH~6x86i|vVU?>Ok|UL)sX_E}kI;s~LegcH-`Xp#+UN4Q%*yk`fAq4UOyLU)Lkslp
z7kYVmgJZ91LI|44*lO6b7j>`v`U2w9oMg0T+nhc@J+)`irr`D>^ZSs^*&r7iUVQDS
z+}c@gqhQWqz>KPMHoza?N|k^*Nl?UsbOK(5NHwH#H9kBvu5J{Y+3k+^+`j~AwWtp^pkp|$TBJ#X{`NDZ{5x$#W-}~OHT;_`pO^g{KxVs_UT3t!|9i*M@&WYbJpWrfHydW^2q2CvuEh(0peyI9?viI&g!0Xx6MB^M-s0n&GmvCge0iF9m-Om$w%cCKz#X!)=e7B1Ou3M|^9`{8|`z
z&lNPJkrJ+kUpzfX`Ad@^@7bHrp(sdoQ|s|UW2Vi{`=gcjy(X%jgkg6qLcIpE;gY!g
z(QNdP+lpX)Woc!prBwWv>e_FSH%vyj2rASfO^qXWA58zihU4A{tN|fm=Sl5+?DXq|
zcwp<9h&wS&I5=)@S{cD2ym)s`k56rNm&T?=p>EHcpP2t8o)8po2QD2MhNf}h-AKZ&;^s#YZz0oRm_Bwb$RlrMeH9PN*#he9;tz4LvASY$^^Yv$P`cDkBxZT-C
ztqriKolJ2-@%^skfslT+{x4_##3=(JVFKoTK}!u>-v{65L#Vxd_n-OL!_3PAe&|qb
zxS-y%;VNX`_67{h$f5hP;pe}&d{S@;FR?Mv1NgSDhqm_%n#>7Rr{7yl^daXTYZ}H-
zPOuzLR1)=@at?Uo#@3Nc(4IYZ{djgd@}$w(va$Zuu|H2bblOm}7cWKJs;=Fdy1Mz$
zU^*Qa;;@|dAO!!|XI2i8N&CWx5==4?@By`W7GQYi3*N}A_&@rGbyW!%hcDV6J`uGT49M5Bc_Kb74e
zu@kjDjHea}wJ$E57U%;{bEgT8S(PDKEyE5Ob^LmVV=GZ79{zYku2U)PLA&R=D6?RJ2@Gc4n3
zNcbbT0YYa(aeH}~r9_cu9j$iJ@8`Nz8t&t33U
z6iABS=pOu`cm0+gV&78Ny;dXxm!RFq=dX|8la6wLHSK95l(K-5sA;aBaG=?T`_jMW
zgRNjEUULh{^B{ABv-Mzs$jaw3oOnT0O9drYgZ6QO@m#Y4ZhO7{V2or%4-xu1c8Pso
zgN^@Z7+}h^ZkjuA3!EX9pu2BgM9kQ~&%_0oNg<)_-ig@!v2*W(IOMn0Z~r;kpZOh`Q7>~Tnn9Wv>EyDNxYUs!59@5
z^PU-61Mu#s#rY}Cw%dF8p3MZAxtP}D^g=3n3W5jqrL_%hQ)~*WTdQ2h`{dEdGX7_u
zcY~7~9)My;{JpsvYCG2otzi%MF}cfnh=5i33g2&~LN9F#i>*L<5fIWIRf`N%JU0mG8B(ny7;wWe4KcLvC*{xP=Lw#LM7mRN>KsaGsxCq
zGQ|Jv%jLZCYQ`gS2$zryMCqN0y38|sP++~ksL5nO!Sx%2^Q{=CJ*4h
zYwi&{vF&<*je(M`$U!uZ#3U!IVOt>YWm^dE)r@=eg#sN;S2b95B2P;m-3?IDpDFQR$aK{`Pm)TZBTVqpk;_?WbH6b_!tPWH_WeO+aUOn9z8s_jHYL$T*bU8eI1nD2A#*}*lJd3H16hS=6;LO4Ww3%)2#`qfn>5z7
z=4s-cy;~shGfUk>9Y&FGoFG>S4X04vr_hGH0P9EV$31aA`>@ik_
zFrzcv8psXIBI7iiH14TOAesfG6b|pUtYzXOLHa68!|S;n!U4h2s^)RS8SX-wb^!%=
z_9P4@yQaYNlWsieP;L%!8dz$tix9{EWx#pUs*eUX2UDNv!rF8Yi3bHfgqvCFI2+>{
zi2u=kkrt$XC>JC2muUEWwB9rMDhTS57Ej)C;pq;sSn#Gl&&PRfyWBfew4*++j^yhC
zf?RYjJ+{TIDFb?J@30RV#%IO|@MIW^}1!a#wtOx$45yb(e+d$qA20y)+9=OBpkM?jfs5ad()Q306!0JDZfkHbV7kkitl8tOPZ
zGN+&PQ%reXv?XeH*YSHI$C}jWkC>zL}F2NM08+SmdO<=S
zBBCk3$b~O@#yTg?#VT{ZIvJUW4#m+Ztz&Zbu)ac{w
zz!N+x2AHodzH0AdxGB4(@$1(&%BqZKdDXYJhd@S5;07ztw>QJ#z2VYrC$p>KPrD}OIVmT;ZEe*rkw)Y2BNtQ`p9pQgbA>&O8031;DBbfnKI{-Xh4=l?
zSfzg1gKLR@3!5E55oqv;h-|nTge@C>*&l|0Z=@1CX{^bDdLnvPNj){&%jLK~YD^!6
zzw2Fso?fzl`IfM%M`rEWJR2DAkQO^)!L^9JKs@KyTb5w^+e}8kl~*|R!STx%5cVPQ
zIy&f0(&fKD%nov;&REX92Z39kbPS?IlG^P-peIC;0Vq)HO9!#jBL;M3adYJ!{=4!7
zRpv2QdqZs7-J-jbR2eC$gb%%>~(C6@Uy^YTiptyxYX7{3S!sR;s
z7scaUJ~gEAN99LeAnG3E!f#q--c3CDSi@yUMscE>i=kJe>uP8mMA1kZn8k0!S`1;Z
z=1jke<1kU5*!<41t6$=bbTiL1m+F?zs<7F^j@atvo$A*|$Rb#QuKh64cjB!;g6kXGqd>Q$WD5wGN#Ao^lB(P)95a%QrR{zQ*+2*@6uRzt
z%pvq)P6=Cqdjc^l`@tML*M-Y5&4p&ovY(2EhIYS}IKrRmGV7Lf&>!{cv}r=4Tqh-n
z{Lj}0+sv*<`OGOqS#imwz70|NcHZr_%Nuhk?wz%dZFM(B?I2TB
z;=0CF-Zwz4Ej^IKWVczC&V>^@`TWQ|OdcT40o2URstkB%I|i*fn@jNgq3d!zblLXZ
zL&Dwd-9x-NZo`Rf6nX-(29!tkH?xwrbV4|7BS8ltPoq>a-%QJGYZ6hr$qE&F=4j_R
zrGu0`Nyg3kRCt}%yDD8YW2|Rm66XEU*
z@8B925t!p^w;Yal&=ZM*Tw1i)RMNmpHFB22vi+36*s@*=IG-|Y{2k`jc{Y?6&u=xc
zW|sRE|E)@f*=u}Ebo5mU-hhg74)?5>VRLlxsB15DEqCA9+s?bTLGEWW2J%2y8S(V|
zYta-3?oo&)Lfu4EX$>DSxJ2vYxjP_t>)C~q-%r{HDI%u7-qm=-Ic4%xJy=Bec2p$Q
ztI)f2VeH`=>Z}Z{&j-R84C!=FKcuWQtY9DJU23}ZbvH@Z4)x%tP+(GPV;tdgKRFvP
zdUKjFYK892t;vUv5j$-s2NY3HxmXBaK!3htVDbva`Rm>jN)0zXg|qMaGyR)@k$dn0;#6V@=~QOQr1gQlpq?T(
zx&3Z2bDHNjN5AfmJcZat*La;>H4-ye=Gk#&+p|Uw9^nW%C)R6?!2WUfT0WdM7O;B$
zHUYmJ%=mNRVu3{rp7cv8UsTQa3j1vI)5!C#3&>Z09Qdlq$q>Iko%w#lW&XSto=*XO
z!BXn=a5Z=@#xIek!>yDMsT;V_W;^Y)@_?{@k8Dk4q?rcm_`-u5U+Ptq&0jv^WGzwB
zjpZo+-3S!VkC~CLZI56HIV8E*xkeyC6XH|Pl~19huiyP06Ril_5Uu&a3l#21et4$R
zd3C2>xLjLuPqZSGi
zsK$FWD#29vF5X)+f_xI!<7_}q-SiF*qsqrd+;LG4KOc+Jm0Z2vSS8At?La*e-Mejh
zVZlPpOOSCN@6}A|=a>rc6FMm8-!zP>_^KAD1IfGwqEN=P#SdC3Qcib*91ibC2IW&P
zwX*II$45^(@^b^pS8b^h^kdsl7eg;m)#{^0>Z6v>w6()1!xD79^xU(Jf9gNThpYOO
zSN`o`o#$cvAZkKjsowmxCZdH0GoFs_@>Z-X)wxJ7uGbP>>0oB5@>H`o!HS9@uRZ%>
zni$J`@i13aXJrz|)k>I5m-1nhU+#*9HEzXlRWnJMjzSaicquc^juY2zB3lyr=!%xP
z$Zh<*NZ8{?q#td+7X>Fzt5^Q!(BhW%<0KA0Tj^F(Yg;gabdGDg3I6M#Xg=KPLvp0I
z5(*HZRmujWD>A;5*d$$c14&FswW@&9VAO|x3ln6XxDJcpFP53x
z&)U|F5OV7d-pO0f2?~tZ$G@B^ev5ii0@qYlzn@ghV7)ka%{v5n;YL@8ySVX-%QUK(
zta!*L8s2_OM{WtBhOtd9-F*1hywZe!J~KYZCAHtK?4BeUzqQzQBQ0moJEv_58&h+q
zl{IZY+t=~Jy@|sw!?ALlM0|S`!P)_8*Nk4X9^x*S-j+i0DnmT;;c*eLI>Xoh+=l!u
z?CHu|RC4PCwn7u?byL-=BA;T9C?EcrM?ES+8Lr`wO4IK7BANEeuOhd?3mWs49ITtS
zTE;EDD@Qmlo*By3i6f1lFjzt_So@74$1p#hhXEaW^
zz?4<<^GG~cl(_Pg%aAm|r*Ry6DbKs|08eyn8CM1d9Ikgdm+o~bMytZ`mKK-BCfIO#
zeVm$*13XnDkWU{Ba)*-9%zN&wl9k-AjqCut<9|+c%X@@g_DK
zJ_C~9#1+36n+Yd3H10gW#a>Q5u9tdr9yREDUj8$15vh38?4Avf_^q8P5_jXzwA4Op
zOgFR1$&A#;rHT}b-S{If^*(}$eplgQo;!D%f>^N}u^K~X8Hvi(0DET6kj%$Lta4;8
zEoDb9TMekbEb9g5~4k
zFcP}7Gz7HtFVVk3e58dHg)TkC?w-on!z9RK&B|)2?48{sp|wN~dk)Qll@f+ip@q#*
z&!HRgwN8GQAL=7t$^MBRvK7dQHRqs7Dx<*$6%KheKRppeLQQr|Dm{sw`YM{4pVB=>
zv334nLp^L4V+^|gLs%94@JIJBz9{n9r=pf>1>GaN7$MTcz|(J^BE4=JpQe)_kaK7K
zO1DIzZnl?^d+}XQuCo*i%ybX0yBT?0VPH945eBnkwTqag=@jh15TfF}DvrD|fO%-^
ze#Ccy9ZpNh0{oe~-A4@tEjA*yQrHw10)AX)Ezq#5)A%!sVa4BUJLU*=eH4-%fs-8URw^a
zG-i&B5dt=xGqm|pC%3DMyDxv;P1pE{0ky3vn4~YW^)?~*s+o26l@Q=*aA75ovWl-<
zr1me)#d%kszcC&S^+uux&sxo}8~rj#Th+HaaeF_Oyj~*gZQ)&j63xcld#RzgOUrlg
zA1}&*)dhy}dFgFNkUq`=bMlUqFN&#Om)dqYguX22no&6kAnmnH^*aS1lq5Co&r4@BXm2KE
z@OfhD7DmW?l6YKTMzu0L^btAgG45lmKION?wt89ip!?d4)4|IXPgIY#TmtTh;^pkjs|^ejjb*sPWp2JG
zQA|xu)e#VmUZk?Gi3`7B-;ck}(o|%E&5W~5aeP>}f#ISYn82Vqr9H50X9p9Fz}es&
zpGz^^n)<_)Z>;r8S>nD7lq0kA7fM@%ZW-@!2TI`gE_t=zdM8_g^H!lT(PI@QA}tdO
z-mpmVesMq0V$LW_EtXB)2ob|AinsqR=t!Um*tO
zO&JF8dtQAgJD3OErM0S&Yk#hU@%Ktweo0rMU!?kxE{9=z!x-}$t+w~b=JO9>6?zH0
zdHcmm#ygnsjFR^Iw^H`&{%|4TH)oZx>kfD?4Ql_(br_75SMIFOTG2(Z($u`p+6wAa
zxY~qC9j?zwW;22RL;=e-_RFWdxc8M}l^@AnXw!#EzymvwvLI#e6i3u$K1$ZPf8D;&
zlpChbLEE?WdBQyd8hUcISR(ux7yff}puhF=mr!}@O5kk`ZH)T!0V5{
zN0Y~A42Hb*M_i4#%N!7flGc2g5g!oC?
zKZ^D}H|l%m^3(kuu_RuK8&mf{4sodJ09({sd!L&jnHEsVk=vBVL0W%OIG-G6fx#%L
z?db`>lx=rOA3S-agtscf~uqK}%DfZi3U+%Zl+4J7vnR46hd&cv7<~k#jWFU;~
z_NVp8E;POQ)!2OMSD#ZIY+xU6@>#cp2YrN4&>v0Hi%MTo-}sIdK29XL{(=lme?;>t@IK=Tqk)#Y`r!&jzB3v{
z#2ih0&s)U2E^UJUMOgULqx9#|}!K?`n&
zHXRcLzxiNn>0o@Jq>an}75qNd_9!O#!q(*OQVfO-h2PDMfpYmcy}=6FJR~0f9vyvG
z8B_iiZcrl8M2w2BX}hE6+kXpoqj3J}#P#Iw*G?_z*u-ftGgnoS@VL{RCd^X$lZ{&$
z+kTo5FJTS#I8nGUW3nFa{Y&lw(#`%232b2$ZdlnI-gf6d*FLB~q(YkuHD5tkerj_y
zjCP_7@a>{DFgcO~{N;fv6)$QBi-_vR&fkp57wN1Xujj0R;3hXd(V>wg;$Tgh(-&rE
zeEdNh6=UO!HLNs}BSA9$`f~(Fa-Y|Y<;sdrpCbUnPWCWClIt}lSk3el_<=iCP;N3d
zw$1)0d5>?V&V(dOTrxu^TPdlf+eaymqX!w&&dJznfAI1Z82+n=<*_Ftw@<1ofu}Yr
zA8SkwG5iY#kUnM_ER74=5vF##4omt@_3EIb5_WD*)ho%=<5ujq^hhn`J_zgwc-xPc
zn8&q3!+390wtTz2S|MuDp-Xs*)U!jYClJE+^F0#%P<+h}hH29+{Z&3{lh(>^+!|Y>
z+4u2@?DVo=JH!opNuPhx$&oOV-(FxdOQ6_2>938zMLv62qGhh#M*Jlk*iTwomII)A
zIJd-v4ZSAp2kNpwF0Z+62`@(_^;9;w=t-?SvqOXvPt8;CM%kpkmDXpRktlxtk?C^&
zaJ~5ruf;`^TLP8Rymu?X4$+Cv*}>G>1$3$Tk(?w+R7UpPsl%8N%pPo$O<7qR{r1W)U`_o0lPN#7x*bg;A
zIqAr#`^(F7HM|tK5P+@T3(CPc7ct+-D$B}5OR3)#B+4PnS$FFa^Nk2vWgn(|
zftUb~a6V*3VU6F!^xQw0ij;Z6E7skUek^F=q5~SIT&F&wvt$v@<_@N0`wEDix?9HW
zn6q(|>*;-X1ECLr?CmGvAd-HhCLGY0`;pqc)VCK74=X($k4eaP8xG|?H&
z!H>6(@}%SzIA(h1DiA?}X%qOt-HRtpoNsc3P52bH+I$f5NWoZ<_%Y0H$m=6+dEW)2
zJ0VCU)~Du-$r}@9v;WUJf@Jvr7yvU6pPWxZg1a^E(&&fZ{G~M#Y$!xU
zDkP!gWAnOoFh^bKred(h1x?WrGNfJoYUrk>OyaH!D#3X$UW}5l2fov<_VlS|kpE`>
zcbPn3!mj2L-Clsk-(wTe#w}RC>l@{eU>0vr;
zTra?RD+4bW#HLPbBOc`gtiQ>e&Pu5rB45CMe!7VS8f!(#K5!ZB*|=P;Bo*=GcgA@)
zIlFx;njT){^S&dxaE>ZKSmkk8!n6Ff(_?p0Fic
z9O8mK_t>~xfTj|ESBRA|tQtY{u7iG-lW1jxF)Dtzb`J1*54TH
z+!N2mE@=0J}smxKtR;T*iZ<%Onk`=(c*^oQkSRNk5)z_pWKp3Mc_y`*;?uj$C;cq`B(qh+j)+iKKcDc(C3@?uqr-mUwt|=-w!EB+c9|tEa{-JT0VmENxo}@VcUZ
zuP6A@zE2%%K!=l#_9qj~d~wp_H&w7zD%zz=Q)xsKWj)Z#s(*gtQryX4ebdiSg_RjZ
zLkS{C!On@1PhX}20Zvtu6K{w}cRGwI+~OP+K0550>FQZqR^zHFJL_}5mo1-B?}5Tb
zq|9)H83K4=38Hj5)OecE*XMn>q%gSOoMLn}`rK5YUcPAaSyqgXjT%Z&;2<`N)6DkS
zSR7+4>@EC!S;0LbmbKLwP^&x=TUqQOB+z+FZn=zl&hfj~Mc|vf=7pg~PPX>v^fB->
z@2d$v;$X$@|ImP@cQh_4`96pyuwU}d#x2}!8S-jnc^W7Rt6JQO>{uxg{2^x55{*n9
z8D;J*0pzClbCendQ>J?sRX)UjTyvz4pR_5^nvrjh-+I++b;mX#+<;JwU(M!dh*%=1
zHoyP<$}g3pCJpFk_X332PM92qgmS>(nm}*3s?Dcc^@yc?;!di?L(*Hr78V==5roj?
zp@Gp(%3=VQBR=5=`sr8VC127apzm@%x&mO_MU(n)XD5SgD0n{MDMPFuE(^Nn#4)^l
z752P1e093?FJT}@?Ln;k1F)XvujX9-hO^&b&8-Z6@D-m!lZJ^dZa*Der|~+mYk&C=
z=T@areijCg>e;zUEb_KYByDY)b|dbs#Loh>_>h)cZt$gwJ|(nd%4#GwEZ$l8of~*l
z-L-?2I$tZf+{J!R!p^*o%NIl5AhIj2@TR?3c{s~ZJuobI&S3-Q%`KD`tMnpA0^h*K
z*HzG&H#vNE;}(}$K#UctU*LU78R91KF3Sau4Q6%)P()O5f4*anyoz0JAV)>`Sh@^a
z66GvxRqtZJdea_5#TIGv*6a)>{g>4S_ES=E_D#oj?p~2tRl9BM5t!gqTj7Q)h=1n|
znfRy+6Z2;`>{<`H(RN|o3}BGT0)qFuRzfaf==vy59@-OppN4wu?cubZXp#a0Rl{TZ-8VjC3Tczg};5uxK7;cDVpaI87NPkt29Z0lPhy1(;FK?OGqya)5(bc#Y~8I*P>Jbj|r_26`izS9wv`&w5C8
zUD%nT4V56U55)cN;}w^7T_oy^2}J}l05FZm^`i5)Al_wexCLM_Q`*iz#VE-z_Hyox
zjKH*b@dfBWL7F?U)S!Px5anhE>&mSm+znp$eS9?AO7gf9j}5OrkDbL|cJAd9Uf$X6
zYCh5J^y@1j-j*h7I9eS#{BT|g2L1K298{Z$i>-1lR&nI|Q|{Fol7UC__tQ_~#$Yvf
z8t|;ldZX_nMJ|RZLmCJ23)p4@Q`dzZ+FQ{CfoG-U9{%RE`#Us8xo1yY4wRp2cXjQ4
zNY8u|F!MHYM${pACQTwo>K=raq+bU*%sLy9l9UAm{lM1Z{yA*vkcYpWHLxGqN*oj?
zv4bhzuD1#|)3)rdNQ=YO1U@Jz)AQ*(Y8LO)^}Nn}5vdeT+bBiI@%=i0Ot4Y{$as`+
zpGv&(*v);oX+$O(n^sf>tjfq#v`;tNy~NvF?B!Ct)o7Ehxbt%plj#_&_jMy6zN@-Q
zl_5~8D+iYx2#)LW7+{cAu9k>MVXPrz>{N*)GI*l?^r`HHGkiPmn$7#y$hyg~_-I0Z
z6Wg=Dsau&`KMQ>HECTr%?y9kwS&XE~61u=W8oIyh;zg!(Kg%O!#>CzDK(7u<#^Yzr;=|iZU_O_0sF+0m0GYB
zqsG_jE0%Z5ZGSJq%y_@BrjaSEh_q6BxIcX2lnY=`yGv_Y7pEa_Z|3DOR8{#
zCQpjfZt>he=a6p-ws%z}?gRR8#^8^ALyD3d9A@U`UH~}MM~Rl-uni!LDO;JB>4?2w
z&=VK0EWo*r?O?)HxTnt1vFa#c&M@Xle;`JWsz&y|2Z!grtHo1}fnx{BMMJsjC0uGwR;)IT42Yq%_&bm9Oczu1%xwr=V%r&OvaUp5g+C8U?oelEYWX+iI1
zc$F1noqrp_^4~uV(NCw(Bmld0HbG6@`LXiU{2}W|VdsEnlU2ZIvf4X0Z`1!2x1@Bo
zGXLxfw{#-0Kg!;rD^f~6Y;wToLJH>-wz{1Jx#KtGSDe$or#S`k`}SGhLxJ222xB%7
zAvRwImq{M6U_TgE$Ij>lc|()B6M{r&e#q_3%+zInr;o;-BKh5{LG!>Tg1%!dLDB2f
zY|2p;X<7L8(Wl&_7o1WnrpD&WRfT^)sa_3FW1}UUUZW6mfIibn>3^#FX_q6Nvo>s)
zGxm2MkzA{lHQ$AsW4L!ilM_mO?B3@9
zKK!t(34(~v4Lf^&981r!U|?n+44cK&W&7=qci-1ovD{w&>vY
zH(Np)(#t>VXlm!PTSW>zHDK6lnRxZIV!Z)E^wn$2VR=fA(fg0lRdap5bN#1%C+ykG
z@-cQI(Cd>N7&jrrbr}5TBBO~#F{W97VfJDyp8|YqS;gvwwt>7u@@BxfmV&
z`#+31NO+4>7T!Z+7#4-qlg%x@?jF+FiZ+l7RA2TMj)}XNZ_eDcfZr!zzVFm_<5cud
zFlDXANVL68*vR@BZ;>IHSbvtyf;n8veA$$f$y9x+Kl@cEynfSXtn(X~;j;D>+`1sY
z5;2Z#?LZS5GiH-{sESQbPP;w@yG>5cQRA84Di6DwO7luQ0m=H{Zx!w0oyh`w*5ODEa40pWFe@Ax)5yJ%_y#2Y513lsBt}ET!?ckO=)?1Y&T4u1@f=ny
zwM|jSMhCg2AeW%55j#&WFT}g?CHsGlb0v*7-O4T>V#QF+$aV*Ckt3rGCb7NQ
z7oH$*W!cAS2Kj=&FP6Tum;fzQzk6e0rJ@)`qajxVM+A&F
zsws&>L4WSDZkun1J|25#uB!6Ca>_x2*gKL?!@}69J}m8zL_M|&?kFIEBe#b@=!FZL
z5)N)b#ee0B)y(1O*@$MFBD7ew0vw(11t+Ah1Qcc;e}XY#th~wox2R7sWj|>_$R4F~
zF=p`$eA%xatQM-UV5n|*OAv;(LX{1_8qd++3E(_)HKeFKkIp=>W`rS&Sz*Y(Po@9k
z&YWHpB4*)Zo#RV6fJ|=a=*OIoXmx4yu;vG}sdYNYB?MavO2&RQMSkQMGeG8}l3nb*
z#$+acva>bKg1^)D|7l7{`@aabu8uU?9&VVf{D9_Fd8GcTHi6^ap4db9hdt+m4x74^
zqK85+c0@}=dYiUR13mazK-E2vqr$KOi_R!^wN!6sr4j8!Y{oHnvaE)NzsW
zpR{M%)IJ5}`O7VwbdfDyHn|PU*3mhoAN*%nTo?|$onJYGUFL$$EH_V^MYuy!@
zh)FiVaoir1ibK^Zc~uAb&3B5E`xJUsW}SRGxE2?n1r!AK%M#F=10WKhL%`Pbb^0@ZN`o;i!G_gU{9eQOcj8ty?aGw1@OPo&S7Qic_ZkY`<@Zl|4>4!
zPwZFAqy0V9IcMi*y~hmZsgI~FF#Re1hO_ACosOQNFLJOtjpz8&xd0w(=SRouVV@@{M_i-pZ6dd)N{{{yXU|D6|2btz&UR#CIG2o7x{d<
z96uS)?GXjfIkM+cQkF2M`-dZ0A2tuPD%?dQ=u2pVs&F|d3tV74khDmwd$qtpHxdnU
z$TS}`&3Njy*Bg!D9EG)m>$2(I&%&Ajx4!rJsEluPgHyI0Xc{&|>*$(LOsZU)zkZ|6Of
za3F~U_8n!2=4dQKn#h(ZlRmAQt{!)b-bS6kU#TWiA^SQO#F*lv`p7NE)^WiEg=PvF
zThjF{>uWUP9wf(s*Ty|sR~AT)!iw`_UJ$}9-PF@OK|SgQExA9nTH61AO=b7X#ePrxq9bMhHa2qEe`)+RTTQ
zuzS9#Cyjr!p&Ydsd_t*)5~2rk5>-IH@zH?$Sl}!hKpNfC+o9SPZDL~8`x&?6mwTCi
z>bn4U`e?7WK}kkoWj~WK3B|{e(7{@a@n9v;_xS{4e3BI#_G7~02V6ne#H88ycvIKJ
z#PG|lYehHQX@V!k{@lNJ%Q0$I{lAJ3zl(?-IFHGU0;%l_jBR7gvv&3-cN%Bsr2Whr
z15(W{HQGmxbT|m0jUo6{`<7#N{~{>k7u~q)iUcPX*V(x1QUp&aE)5hH@n4GY>mN-n
zZ?r%DxwS#+Y_FBC^m?nkh)6Q1sJ|NRvC`@)SETZpC71*zb&fZXCgiCj<*2yS
z86@PuD-_-^>9<@MLJx1Zr;A`)<*nV&=4s_@9hcarQ%aQ!f6)+{a8mZ8jm@ZWY@Nyu
z{@66$()fwMn&syz#P15=p>Z`}z~j%R;;xJA%0!es$>!fij5oGQTB#CESf?tsn~aBjo&8Aq{-LL19TzZS*<1D+V$TcJ54t4E
z_tk~a(|bN`z319tj)#9zJai6sBk`|9*KGa@-;DKyqOL9Jwf<&1TSM9Y<6|D&sWbN-
zisqFuW*@VyM|9JHCO@sO<)j)VKb%T)k76}~^BoFyYmRlLGm7EcqKTF(Dn_9gU8ujJ
zlN@s}i{VFd*kc~TU>$Ljo&3Wt5;_6q2W-VEd7JHpAF6{~TN&d?G8>!1pubu|e|Ris
zEId_k_e~vx*S>grE*xR)T(yf+1B8`%{T(Snu);wv4UnkGM6{EZJhg!v0Dn+2{u|HM
z>$L^diduRl5-)dvXT`HdFB5@#CxolX02J7)+ts|^1@j2_`efg2@
z85iXh8av3#PY_Dvjx}(_dVBN`$#yYC}vGOnd9UKDOPGX*pGt-7{L-
z35s-`ySHEP-2i8KERfsPLt~4#`Y2LnZagqRxoAJfW4Wpm-S(($ID-WJxL$fJq@IJ*
z;*JzFJSb$xME7GGiSswdu-TA76&Zq2>_ix&{*G^4-K}TAOZ&r!Wa?Zy+vE9{1V+O`
z^{!%~Uus@tTN)KQ*mQe8H6O3_
zKcAtmDnY!K-pu^Q;~v0IF%_57v`O!K90wMsmqAt;@0eC@;)R3&F7tmbr9a_D=x0bT
z$T#`w@5vx{-W<4ll?aTTWOWrb_kLU5AVpolONCDzA^9ZN^^O+8E1ydyI?ow>8SqHjv
zz$|v+IrKP^&kp|HvI2O`;r^MQV@4Y)IZleT&3Gl6PJcH;_xKPWXQEI}O6#wqqDEZ5
zrrD7;btUkE@#FC}e^TS{Gulp#cxQ17%1U5EwFYXV^JY-yBTTmnAZKm0f2wj8-m3i?
zpCX&6gTMgZsv;4|Ln3d
zL|$v0TZ(M8OU#bT9QtmdLS?nww_uYks=XPU&x&|eHJSY-TS5BAT5#U|&Rc`^I>|zl
zs5RFU71RmfqOz6QS-qS+9ZF=&OvC&yd*=gKFsX3V`ql7u8nc3h|CmK&Z$YV5Ag0~3
zdz{3
zBY;l$EU4cDd>tqdi8E=`c1UWqx!sxXQsQ*EYlyiUp
z`HSnFoL!B8oo6rDs9%_)%Uc>LO0w;^9)EgB4mTifZHo3+=^^}K1COEEom;=l
ze71kzK8%~G5)QwpEXyV;+5atJ3$Hv3&-C04#?yf|Dz1Kz{U<_B>QE<1S$Df-8VqLW
zbDn>XwG%$Gu5`sucUDQBx9R+=2F|5&xUeh~rGupe8T~I}?-i-Y&FxiBmC{YBbVTIU
z`b2RVTNc^6w)BMpSZ{oz#d?Qx(h58K-i6_QiQZ8H1FkSS@1+gi42;_3I_|r5Ftl?2
z&LXyej|`2n&W6^=PAN##lO6KAIRQi=;&sa_YGnY6T9;m8YCDB@JoH)Lfk&p>D4~MPlZom
zZ?_14$?WeMllg#bG+u8%$G-fXh4;?=ke#a++!gRpcfDy#*{s`)nLD?
zIcYW9zXA6G`KkDEEQ1w{|CVl{;+l~6VD1BC-`ygWzXGrP;5}Tz(~zo$5@U)d
z;X%O1fSMR@@W2xl21NbDlo5a)@PUNhiSpK*DtVU(#~STpI6Y+F_&1PHqK(Xb
zO8~%=%2eDF{0EB=XgK{g6H*Lvvq{20`i=O&za3X}DrOPfl?1jj?{ac&yw`s(ac7rU
z6WjXrxZk(yfSW53^QOOAT4~|6wqtEd&)E7*6VNT`rL|tF9Akf^$41P7^Zr;0$+${f
z@vK}sXO*R;>}3!@&Wuea5AN0FE(ImCkh#zMUJ@?Mzb@-blAWZ`c}s7N`XKOC=;@Ti
zA6C}8SshTk%9q&!n?a|hU!Ic?4JIn$y(MC39}o_tZFFB)OTV(3wJ|u@wJZPeshlKw
zy*+C7S=dX$_Wk|8ha#!4?EZo6Mh~?kyq3);gTGMy69vo&slnTR#m&;Bxxmx->mL--
z?;eD!Bx7rHfxf9uK3oTM`{RPLxHyDD&3b`C4HaH8wlvWyo=s^dwt6X=bnat6k_mqM
zeYE-@Z6nYvWx#W7N1wC`gZ_Y#;eV30q8x&8QuYOyW(9^jbK-V>t-&wHUuOv^N2$=n
zrprTPv4!AaDTA`tG=F^kwS(n*S^MT&Q@GNHu>hi|!_erB?4LJ~cLA35BQoKFKWeIv
z6{~)PtLR}hVz7Br7K95Uf!xnW`7n;NMrb`glybv(phpz;v?m7uD#kl;aw+8u`$;;!
zsOovalTj)RZ-bX^4+jfKdoeI|v!WH@p1hl%o-0YwSV@{QNRq_tVE&cJPfH0Gz=(6`
zW3dA{%9Ukz)&xhloGDr&Yufl+@3q((Th4LgW{MpT{z2nU-+=cqiN!<*f&c2Q9k=-io8;VP5ctQhATTXh{AxX7h(E=OZSy
z?+oqM+mn53B#|C-tkYY(;!?|3ZGq~yM~|=qpuWjHBG-b@KN%Y@{KRsk=JXa5a+Kk}
z-a&NYr03v=32U72UkZ>`30v>SEwLn=a8`Nv2!OmO#8Czvw<_xx`y+6vX~ANTa1Uc#
z1^xq!79PkgUP*u6;9(ptOF?S~@~t-e43Md0a`#=Lj|ztA(7w%ARu-TRFuOI?6<`7qccsG`P%}~*Y>A(Tf!U%zjC{V2y4UV+{KXgPu%uf}C2`
zWBg1hbA_HqgJY@mD@7Y-LC@Rq<;58@=xXBuR7Y**QLuX0!%zir26^N7k=#Q%l!_Ph
zd&cAUDGiT$CjLpNd~wCwco@vX$5$_x9;Qgq7Vdi(uCgvo^~dtl_}32oir24ckhj}2
zUZ|H|$6~usV@}OPxj+~ibb7&m@RQDYN0>vom>XJ~i_{Go$n9=tzX}(V
zFFOsH=UIaoGfr6sW;}0r0dlhdN`0Q)ELmjBD=KD}DNi^f-{;`%tM;OwuggLHniU+<
zD;eEpf~NNil{}lK$w+>~SD(~ovhm1o-Sli)SAy@u{o^EuvEOcgr@6jb_KLR
zJu-c@O@F|7QbbJ}AmNh8C?+-+1^5?*&UuXMU!vo5UUjI2Z$b$@>0BFkhNWG2kO`aW
zMboa)Nh*EDj$J4MvVt|1S9_Ebru@yUg##0*fv%7w>)XTNX9X$$e(}u-rLsmfIOKy;
z@l4J@_A~-R)^N&R;oPsIp$vY^kSnqe1et>=BwD^T5CMXP2+JXu!|zmda@;($B12B0
z^`km8_AKubFuw6F7=b#}t*N|B1r9^jk^Hlhgd0I?z0sL5z3zuLZMvKVq_)Smx0a=1
z9;>Ph0M%(-Bc0H3D{qE3m5%9rn9W_hyjP(gEMw_Bf39drK4h8=&}FN9u@q)dKpu;S
zWQb;iIr-Nf;~b`hSR=~k8B)e&=(tyG^8OwcZzuEv({}<`_U=*ZCzT4*Kn7632Wx}-
zUuW~6=F938IbSq$0M^4uv;VxWEHMr^=fj@P{7Dze0<#U6a@4}BzrPN=?6oFpMYAz<
z(#AB@!|1A%;bX{6DKhx5mN$dMw~4KY`(PGGw#rLoscyurQ*|k<9kbu8)N6U^Wtx9}
zXiWF5uFapfx`uGsoLH+f#{(ZCcX=28sz{++9~(rc8lZWL#2AF|*HV-h_hGih>@E)o
z?6Z1_R-jVDabFzPgqtDmEP59>YqD_chgH)OxRwBTu9th2xUc20otb*zfyA8#=Z;5ZDL%G|8^YA85rWL-UDgS$l(
zvS0#}XuJx%nwJg7=RGFMN?mm7qm~fWkg(s70aEt0-{mp(j)rvgfsr0_G`-i@-L>ow
zY60h#?oZSLR6w{^nq1jW5Qbbfed=85CGz^})H)D|?
zl(jc~QJ+$?7H@4EV`c5HZcTFn9`K&+fqC%}Kd)5Pk!d;b&_|-Yyu6qGQ}1}a2(71V
zt{$!lTA-KppiF_f&|9XsEw*X_6nqV&8TU^H_5l*jTKpUslpoyGxV3n}Sa;uv)$&+v
z{Uj25adA1ghoFCDpQ;syEhPL%@#L@hE$P6jRthp&>M{C%(19)S9gN!ir($rWa9gtS
zW>~1_mDK8pspsu8ocA;Yl;
z5``!_La}26-8x^ESk2Ft)!Jx?pB=IfTn+0V?!^96T|DUg{`zC`UtuG97^+`}X%+y_
zIyhEZ8u@~rcT0lg8*M{aE~jKW(p8urgZoBVy|q>31MhsRV{SXKzX%eomnPdf+6nuy60?<|k3iyiOg
zs|
zPCl=HYUnv0rSUk6U1;&I1R6(st=g93ypT3O^t5(b?dn_6DklzjOZ?IdZ2+wp=Ws6XGZzJ
z%(j_qU5Bu-PP}`s^S5VgY}aXQPRfd-b(6-P3}g8YQgOb?_Sy&n!4cSU4m&kxc}F^z
zrSeNyQHL=R-(sWea9-X4YW%!wgn5^l$O6ug`8?IlC$;gD?Kx(*AiOTX+^ekW*v8q#
z0(~)C*tNn@tQ-hxz*Ttvn)0rcE+t=H$#(J&j(}nI#<~&s>lAE`aCnZ
zJ#CI1>*403hYV%xVn~E_Iy(Wa;^z%=ebA3{7Pqd+2k#4`d2^>pmray{E`5s}+L#}~
za$v{}6^1?#?TKk&p02j|sEGKfo}q3E`F=YA`>P_Np_E5x(YBufWBhJ&KXr&>$wIqJ
zcZu*p0g22OFRgNsYflIf+yTS@(z+;!fZMXRbbtNTKhUOAL6Z3}!N?D32GZf5+NS?b
z>yz?e23_O`E1RZPXfPYZcM|J~Un|MNhjL-aQ<`k{n_K_8$5(;2OM~}uAOgl{(+=M}
zrE*V&LK{VQUU~TYOzFzr35?*Jo{6#7uV8me631kWT+FUEl#OqFXRWpqL?|3Mi>I)z
z_Ph|kXchO+Ya%yoHFQ#@EL@@&2CW{+I+kCi%5|YA>)c#=KjEfqPnD&Z4a5~X><8Uo
zRCnKbO->FCYNvv$=U+R{d@ME-ZGsHT0-V~Cs^LqaG{17SN9fi1wV{gcG!(g7!n>uD
zM$8R@>JW*{o0
zNCOqisZtAx#+I@=W_T5L>MB3l#SF$>H3Dc{yO$`Hc4tWihbm9#84H;Tz~?F?;{VD$
zwL4^_@Iv8k^8?XeCsN(7r1B+|)1{Sn!^r(91XJkic&6yR=wthOO+EIkalF$w!kp?Kyy$*h@y9A1
zxw(vskJ2_cE;!NAo*&v$KAp!Ai-@K$$-4lH-&ih)e;Uy_wJ1yk>KnZ~rZMB%p%5%L
zU%o1QV=r<*p`9sdm&_ndVHn0g8KnKDKDmlmuuS^*df~0|oFwe~#lGh+j=Oum@>h&>
zCfJkCyT6qxAewZ%8j!iyz8W^Vqz=`jbSxnv3tQfZdyj=#euq!q>9qZK^x-a-x@Dw`
z@QM+YgMQ;9-3m#HpSd`XvYXPH-qn(M^zu$f(0i^_>X_t2vVRWl`8A3KGBK0;j
zS;nMI_mm#FVPE(~(cPK8GUzlwZk@*QqZ{k?K+!lat^#95g5(mY4Q7(yx%N}Pbq+sOasjX{ofLw;LE=jY_@ob5etQ}mh
zmM2c5>{7+K(TvtUz4gC14vZogz2JS=$KQYhq7}=w=^>3IQjXp~^tJ~IhYL0F#pO7d
z_>(*T@Q7b^{IR<aNZt`?U-jC&Ff+
z`Jw1LW<#P`@guH>7h;d$)nmKo{0-q2jyI~}RWM8fd0=zo+~xJ-(e-n?8sWP0@v}zD
zaf_4Vza83-Jq~t8JKg$c_K#1WyTP&TZkb>tEB)<0ZsGlQX>62vZ~Y7ZMSIw>$7Afj
zO?xBVou*C1c+E{Q2nMoZpl+L2^ntB9yjUfk*eb%H2|EFPk+xCX-?kFX*<5T0H%R9E
zC*-hFkLLY%SqBP8_?4=G@@SHn0+rK)tA043cQ-`k1rvh8Q@ikL(p0DF8~r
zq~05elQ1lQL&v{_JfPHWoO!KTgdc={Rafs#{6Q
z70#jw?^_lC8v+|B2IP|Mfz8g{JV0X(BWH-bsgWu_yB~KivGqqLwlu(XUh(1sD1HyZ
z#F}s?E_4C#aI^&2)B{98i%MO`nZtR@+)VzjS^f*lH_t~ojWXvrnuEn;;Cb)izxnO{
zo357P{+Ua=d?Kn>Zg8P|qM1@Reh%9^j*vjgcdX0x)gSj&^Esp%D(_+#){H_&)XP|G
z)9F25G#=d*-OT>3&?Mh%DM|dTVVm06?aAN6mm$BbAGsd>@x2EL%1^||DeO6DK+&T;
zTJk2DbT`KS(rHq=sH!&c_bo22)`aFKVS)?#>%bvv=)>=m!HGD5sb&mlpAT4ziPKX3
zW<9^q&GjUz7+-+8_c_?Cn;8$+Kz2{cVAAW+(Xm?par!hsPTGX1(uFgFCj9Z(HlaQ0
zzur*T7z^lVU|y;-{9D`&nw{r8X0a5wXAXZ1rlx>G`$~mC$1Et?QWZ3sd!cOs?t^}w
z=I|wXP3ZlRiuNQBZxCvf(JSWVnv@>&1jz
z&~FFcV}j$;%;9~yJJ5R3N)p0Cgg@9X)z*FnfM;e&)*P)JM
z%$yZK%R`+B&qp~&|6IjxrD=Q6PxpNvv{oGr%%u~EWZ$#6lInN$pJs^_DkZ~bB*Ve
zyLnN!#UcoAQIop4)6DC$(beI-+LC;P0(u)$`p?&=8^vUH+~y5zIb2GnEmBVS=ZOq=
z0j0Gu6CVe6ALl_qYviZ+YI+xyDKVep<32-Z!+Yg5i7h2OWE4vOE3pv1TnvGMmSF_v
zIadJ&Ge2(FFXSs`1HGDp$F+cgX1g={W!UnmWT?pcMCekP^sfM>vR|I;Ot0dmPViuF
zp7P}Fw51MG=_x8v?|Lml9TxlU`X*YX^krIXB_ue>#%#udK(gC8OYx#%!4q<#EL6Y{18N{XRE>&3@fd~+=gm|jOVjn+a<3m
z@9tz7xJ4&ef!U;D&n%$W)-r`J#zQw*i91oh
zf5u;PBnkA7os*^#CWbt1>dGG3w=ibh9uN&^ml?E+pQ5Xf_3tYXTN;Bp#P
zeCAUT!ZgqBk{WD=S@V7z{KyhlFgEp+Curo|3zdYKZ4GyGQQnR4Bhu`xU{CJLexa5{
zZ&?^hq-#+xYtA)V5P{|;5f)6Ya37|DC^lhhj~#{)vxqdTUx;-PVoR`=B?rx`na%Z6HK*PvcE*xQrMat!U9ntTuy?HnEYLmohCdhBS)j1OV>
z;tYq)1;{|#LH0)c-JD6!rOOm_bQFXJHOm}X0=6ElA{|9rRVd1Muz=Yb@7FmI3hyTT
zNf6YPcF9Fc?fvtqZ4jA`^*6g$V#|_sRjFx7an9~%d`#^^gnJJ$JQ~PaiUE{});UD{
z*(kHSaE;mv4XEYG{OMCWv_sy{6lC3n%w!dOd;whk$q_4hZo9u6V-=^Y8Q
zO*8w`-j9^lu|K^t`{{e<;vJ?o4f?=}kw2>N=W8zz?T(=PF6ki`TtvZUgA_b-Pp;+1tzTj9Z
zAM6m)nVG8&ZYtYT*O59$Pc)$Mk|Kn>c>hh&rw#my39ulN##iBn>??E~@M@Dk52yW6
zS=_fGz~6L~S=6Nad!@F*E!MdAcby(j`xdkCBrO=0B7_BM4{U}EGU=8H4=78vIv${n
zBhZJR&%)mL3Z+^Yd`2%H`3p}puh3tAGbVvNw;B`aB(#6g2oo5`HCdQjv>ll*0PaTC
zjC8*xDU%0A*VU97%L-IJZdVW$kx;Ra`4-?t0P2RJw1U!}DcxpHRO)6g5^d1fwH
z;{R|w-JpN^3l^6&Qy%qb(J9D{1-=rOG}2Bxx}Ip~njWn(&#Hm^=OeSYaNDz$V;uB`
zL}&QSG~EWBaKjs$Pk}Y&su#MW79l}o_oW*}S>0n|Gs5!EHIVsvB@n6fE#smzf~c|
zvD-PV;xLHfsLYn=7DUmm2n=4Ig0-M~%*KVI>*2LzjaM-k@qA#^LdwARtcX=pe{0wz
zWQ47HuW8g`(pn))#FF?e^19_N;fULhAUkF={tE6;!GWv0QqDflOe5-xct|xxEiOAL6S-Agm4(T91f#eqGNcqn2qmJjU?*6A%7)RjWQVGEH
z2auMD1#8sUMDAsZ-3LZHxv{kc{qcoGkNL0-yj`K`zW;(mGVdi@4t~fL?0U^u|5K%e
zNR2UhnV~;;11NYm(q4(Jbc5Og0^^*X
z+wnh5)TRp2sAjL3$yE8Ad{0VVBl;tFm+Pj5czzfZ7bv|xocwrTS)eMNj3Q(!9Ufwr?k<)x7
zmKXtbW{l{guy{muxxnx4;YI)v1fvtrKloa++V<31Fr?-k8spL91)syi93R_}q@X$Q
zVmaVL4rEU)JXE3M}cejF@4FW|+VXBhBP2#WzKnpOMh^m|
zGC5@7C*xekHTWx89XV+Bqy$-(q8M#%ov(^)#|Fp+MiN_c;%q{#*{xwx=8S+D$&62UdQu&^PpG$r
zJKh#PP3~t49p4Yg2(f>LnwTM>|Jwn)A+5*(8oK!sk%!MwDjnRoPmiUwVPN9%dnHeJ
z;oW5xBHtoY`s*bVCs-sI4s~UJW5G{!DERCuJ-CnD%#y8|myh
zZqe;DW%N9&4w;h1Gy-*$KSf0r|CTC9Z4rn6M)hBMMOws>^vNOPz8R0mA#l>~;pB00yiV1Uey0O?~39VSu_7nlzcYCss=Q-)s+x
zXb;o9`qL|?qVf?T=ObIwy=)Lg{7JYjYeRvRFjW
z((li@cOS8KFzT?CCAr4?`yBoZaMfKGHkmCf5Wx&fr(CUgU}tx{T$Z{
z=ypSn6>+LF2rs(NY%K$eJ0t9a+xTP(q#f}%AJp)DchvjdejWvuJ(+MsiGc>P6
zs2Wky7$|{0%Let>BZZfjIacaZs*f}1Ye69|_f%|QdYT0s?(7`MLO}nwn(nLS9);S4
zhy7L2hm_?V5$iuxj5?{caZhKrKVo%bCiHZslIQeR>7P=(H=NS*G$xbYa!gG5wkVbn
zQ01ZX&63!9+UJ1JuRHuD!l7EWh0+HmUFi=gKD6XaY99E-j_Rj<2P{lk=)j<%P|e5{
zD5QQ3obW4nga+Q?tJ^gI27lWNcM`OJ{?&?r_?J&nZ-h-@m`}=Udq>
zrf-b%fXQmRC8$^C$z`4i%Ig7$AL
z9=x%b>>Z$Y9_G!2LP$5WzIN)ou)x&7dYbzq?>}ic;6A}>kmcEF*$qVdVtz_P<!_7a?r|~o8-XZj(2^d-DvZb{#K|kH_46OQR9pFXyW<+|Uz0?c6
ztX87(XOUq}t(5mRb7Ws1v0|rf%^gV=a=XQ84k1L%S0mERcwBCptyEQ@Bh6*++5F%Pj
zFWQaj=h#v3lTJH#mJM}j-A~A&3)qi?x9PTcjMYbC@dn+C2wRn(rPH3R;at-6EKx4>
z2C-&7_9+hTd3_|x$zK_UT~XRnSB#mPk#X~^Vsk85uuy_KQ2Yq(3MHtcbbB}8NqVsL%Y{8
z9s6f5Ru!8}B!Z~30IwkUQKlWLU(Z$^8N9o@`vAw*c%#o!=TvFaStpdvzZkA@varPB
zS0=^hil5WPtCaLHaGy9A82hLTgO-W?MTyoz3~MuwGf-lxAQ(OSY=pk6Vgqbi(Y=7@
z7-f&HNYDRA%Icm*l`$_)DgQXVFFfzwLe{bH!|TKXABkF$VUzfOS{r#eOwXS*fXP2;
zSrgTlMZ%0I#02#BD81enu4L8KQ#+RWoWl}Y=d;6riOm6v$ECEJ1EV7EV#-F1e
z+2oVoXL?=v<${3xkqNcbqt{t9Emei}Xx)9{ro_fZSl%47Sv*0js3V!oeoMX#28
zGL1MR_&lCL5{nfG0A%4UT&eiZ58z}EDVMlzPiBJpne(*46v-qIznVtCbHYI;2ax~j
zkr-plIj(?w$MZ^_zr2@%j>0vM5f^0_WLZ$KUWyIS)U`qnpff>~eD(Pw@7<@n2Ro@t
zPsFnTw{p&2COk;XG`{`uK<*`~|KiuLU%|Cb??wA71=biCJ-)>h)rEU*9@;uYRTi3s
zvdC*JE_yBwBY(}hdVPgX!Jrs*FdgJ7lJd6}3&R-YSJdH47hX;5d$VFjsRZ#+Ki4;U
z5AQ+@hEXbAo2Ouz7tYNp4|S;+D{hQO9t=s7KQ1$jLckW^z{(GM-HBU+;~Rl+->4t^
z_W%?6^KF<>Sh|X2jVN7I**^1=2)v*^o;FqR9%vUl1(~2pv0&2VXRsQCgcL_Ez|L=(
z^In97UPEpT$3?4={r467jU1~%M}lAka|nSu@1oLW%UAyWY#-yb**kZC!zs+~kE}kD
z&sJFDV41Vc{n#TbHcNv
zdsvBvrn$|P@0kfi6HS0btW;kb88l9l8c%_@6B&aAWt&v~mRP5@iyL4l!mTDmDX~p5
zLKYC*%XAAe10qV_=PIG-EPQ)#>Ap1)jFqjlS_@&)6K|IgF#kB5p1qW+FOhn>NAnQ`
z191#1s>OnJi*{AhMA$ilrp-Ke)yLUF;x4waCIb`Mt<4wzho-L%h~oR+UK5cLK|ldl
zL0t^GYrv0mEsZn^g0yrF21?5kN{Fy@cSG&rC9uR$?=0WnJO9DX+>SE#(x2*%9!pC;
zzQ0m*Qpo#0y|gqY!GF_)WG
z@{?*`)DEHIJvG3fpHrk4#82^OQ~LAJmfi19lH(AmRnJ<+%!}O@XFLe8u2n-ewlSNJ
z)OVmlrAe+AlXeflzXdvHX{FS_YplH|36zLetc}3Uz~74I1c{EBL7M@b8TP}hYu8
u{7=+cq{s*uJ>5nzR^3wjWvvT7a>E@CVp*3bMrZpjuPtZA18%M#j
z)&FsrVgADFnq`JbLNovWTHP@>h?*TV~S;*AZ34!S%!yTVo_B=Y8GSxt3lA{wAoZ6e(O_%U$8ID)Q_iSgeSWq%#rVCF#2-u
z&GiR&anvegZ?F0C#6zbszDw_(JcEP2G_$_n(G5hXCbO1k;>r%h-A&0NL*06*K9kP{v4I
zrvaz^qz(wQG@FBunGRiUk(J7EiNPbjhaVOORdR&ezx~-zY;Se3GYgssa8Am(vJ(`Y
z!@vKzJ^j01cn7ZzT~aVzM_DMwgu{#5^~!C5t5?D>_Z2J^(zB>Vr~U^Cpg1
zJq1=t-@vOET7A1?RODtmUwpQa2%f!4Yi)n!9fi&Yb+z~Sp^&wej+B{|oTqBX94En$
zhJH_IA@>%?zKxZiY?DuTmmi)g&KO%ZiW<<1vIE1yWR4E5Z`r^5nY>1db~ZLUEMZ4A
zoXUOGCzO8)aXjU%^qol^i~<$
z)|*Tt571Zj6B<>L1T$sQgWu2}c4H(N8Uyi_6B5dw(ArVi#+D6HOcwQeFEKnP`)B|3
zLtFMpup~48)iCkQ5I$#Rfj#++krC{sLWqqMIr|i5FWh>fl+p*u?p6U38zEoK$Uk|n
zlA>E|8n)9&uh%Dt4CgsCQ%@=<6QT^B+mD9@^Tyy6H^gA2!L|SNEkTL0E}}EZ
z^8E8w)Ck+WJke~&NH$BpC0TQxaxByiL*HOgJ#*11t?1o_r?J+K8`pforIgIL{ghqA
z_5^FGZ2l8D2uSSiTCLXUnjYIXMIe5%PX5rrY7ic!wH^i5j10q^2MC1xJ`~Xo9O5zo
zMhWlK=^|SgHYHVvG;(*_7DhvPL*u-(>Q_Q`1m~!LZw7-);n?|ZvW8)-*s`!1u}t7W
z9Q0j1=fqXK+ypEQWGaJPPTo}H1+nF69$K~cvmjlDHj=@Bw8fPy{B-x!$
zwL*+ViZ57VQ=rdEV6Hm&_nweF*;#2wtk{2wO{xNrfGWsk?;S45UA#|D0+xj#Or%_C
zzXOhvFcwU%y?4Fy(b6*6gT2=Tj5YIUxQycz;j;B;ob$w`9aHX;PHnf%?P0p3L|-M{@FAl(}!0u+sS11qnt$TDrhvuLEeu4Fq&pOFL
z=p2G6DV76U2XGoq;3ou&W+D{P2Jl}{1~0Vbp{apR$vnFCgTtvvK?7v3hQh&$W&aT6
zD=m^exY2XZryoYg;kh>Hy3DYa39NUqADfg6#bcUz%+S1()>RV8L5Gt)05ikT^27*6
z^$E-Q^>#MZ$uRIPxMFqr*DX9P?Um3hHpzz$H@QN;xevAtUmK-oj=QkKb8v>|7LV^Y
zY<5oDf@BUsS0itG&%+vOtjOf??Hd}{kq#xHIi%l3@^Nye59=V?jW(>O3+dXrC)elC
z8eK=)fFTlNe+)w%AbR&25{K*6K9I>U#4P@CY;^8+m+I>fu4+T1`R>aJapI#DOOXcQ
zrb;;MD@0;6PP#wLXVETR-ZSl-qWo%Vd-v$QqTPnGa&j=4+k4);H9pwGD^LM!SM-)Y
z{rR9WG*;~oCPEdl))c`n+Q>7VGy$&$=w4*anI8@2QfHRjU_@-_$L(Vw;RHh-_q17TTPrMnAMA$
z^r4h%u!K2Jc3}-kEgkg-)i6Vh-QvY{7nBR`6kylRpFbam2rSkxO*b+sw|W=Y
zae1l#u~~r%3BM31DRgD)<>Qy@gYyG(s`l1A^=_^MP4(?1+$o|<(>-$()yuuyvb~E8
z(ZSpv=gZHTE(_>j^-VAB39v@5Z0{(+0tgXj&a&QUPuX=zfTHM+gKE}`-*5LqTLplE
z+nAo|Td98JJ^hb|+nYJ>zc}4KHTA{Bb{1C(jrVE4Y$Pe0^-1}`4v{x=`;p2F#tUo;
z&X4bNsM1g9M~5yxRRfJg8mn@?i$^Ej;0S{)gmxe;6qyZJeQ%oXCctPh(~bmLQ(s+@
zvhP=ctJM$n=;rCBWTZ-nY$ymzZdlKru`|otSH}52Kh&9MU;ju-@)vlQ
zkEx2Y{S#(g6DTphVYy*!GnB#1M&FrwZcJ`IHJqPhJ901DEoAjW2S40K38G~?;5p4l
zy2%N5V)mHROTy-VFN@e#T}{q@oDhiWushY1?u+~RiS%#s9jJ-xJL`YA*B2JQ>{j*m
zQy6W=J?X+nV5&x(*gdV~yQvhFZAW8Apye#{J8dVMn%xe2!jxC`A
z2Dv#)ZAMCf&T3=l)WDG3?qxixp|x8g@l6H5C<()}bR~E5R{;MuOu)#gt2(&T4shDI
zcH`ehEt1OQ_D+hZk#u9R-lVorOiuw*duypSb|+s)OOR@?lUCVkzmG&KK(dX49IhCi
zQI+5;oE4UH*$=RPoKWB+1jXVQ|RJo2REu!mBtlh>Su
zUj*
z+LD%txMVYkTXtjNO@V?;aL~g7yI_JN<6xPHihF&X%(odB`C*|{Chg0I4w~q%0
za)@w}5dHAwNh&>d(^D*lhgCVLkyXZT*SswW3^z&qcY7bz{|yo)cRC$RYVPFmsd)ru
zVYuqj1-(W6bZ{Gsh90nl4MHFEVD~KLf#Y6S)Al1IZaE?Tx*G|1@kWvGS|HtQKCK_+
zL7{H3R(D)8w({UT1>tdT<~hl}mD5GNpSt=O9Rvjx{X|KpL;oX+vc*w1Mf#
z-TZx*Qwa9X+jjONDl=N71_2TM2RBmDdO4{#4Uos)35uybHHrZkTy-2&nhoXn5ZqqGcccXJ#ayMY
z?SXsuuLB7E5WY&{ml0@(c;T%ip{ux9obNwVZ$EA9Kg)cK0!Jlq8+Y0@pP63Bu+>E9
zH?tks!aAv`?EwwTyHKt(!woVxwe-p5rN{6eAU2xPIG6}p2Kwf;-5E(9_)=hFNaXzZz3@2e;pvs
z&^Z5Ib?Z;^e++WuV|oA^Vd??hz8eDOs|DS+P6WZE_SH|d5^<`?Q*AOCdatL1kSUkxqsy~aQ#sU>;fj&
z2l=)p^#GHzt%QL*C|A@B_P4jvILl@Jom|g8uHxQ$hCJji1Tz2n454=WVpaYY_h$3&
zJv}v3JzKC>i@`)8DAcLd$&3Ch^
zeAq)%6b?vXJ6k$etM#jo=)Pr(1tXs&b?5Z1LEakdB9SYF06h*Rw(s2?>;;A>wHbqN
z`cS*`7~22F*A%|^-tZdq#eH|l
z-zLTjRBCIOR=>SfjJd|#S$PePKa%)lp*$IAns;bHM-#dCAJp$zKM0k=Tp5a%mgaEPw97x)3l@h2AP6apXCgKBhD
zeN2*cNug$LnwJu*Q!RhTuM-4$Y8So0bkPQ%@@MpA<5M3?_T5WFvok0VJ(y4W&SYJ|
z5|c-RpjU5uGFV*!$r&J5fbPyOm2HNci>|Du>$
zbj#uRNbe{r9&PuSbTzM|D~hDZI#~%lC<+ac4hdqGZ(1LylE47SQx9sNKL*(_>aDdm
zOCi~{z0a;TH^}{;;UxLe5!D+=Zj3+9W^#Fk=3yZ)8@p8xKvmqT`VSAYyucJ)xr_Q^
zx2#@X)W=T8=*Bg0MGg(*&bu~)Lpc`}o45qH1>OaDd0rpPTKz;j$#cGtA$v*zTalL0
zt1u%G|BPfSf}C(^Ova(=phbOqo1s&1*R&~3!Kpq{5Mx5S)aEd5w(rSvRK0Ln5^sxGQk@ZD}AQ!z6c+jWV4AqFh
zd}n<&18+l282v|mX2-1;(~A~M*k
z*JiZ|ZEk=)BeA!*ELazgL*+w@(pXWaohLAB&J`U}Xb=3xfdrFXecgMK?i%
z-%00+r(=|SSRO7pR}VYw+zsdEXiJR9dKm@1)d^_P@0fT!B`a^@VUaC$ddNbVO()gK
zL&1D?gxUh*ayU#~2w1RzunB1o_)ek5dT|S{G=SebU~wrVr-zLY-CK0jIq8E4;7lQ~
zg;@*|Es`RX=wt7?sAW!%2qo8CvNIQ_Q~Xgq1^#^eyk_RzVA^)*uVRkHEHSfFrInY#
z7uGp9HESd+=f_K5;V9HwJMSZkufYqb1JH{|2Kzx1a8+g!V+g7H524bb=bPUgc6?f3
z9-VtjgbdD0Q=~Mx#d_d%0nph@tXNY%udcWg$##vcJYWH3LvMYyh(PLU%CfIudK0IC
z_d1KJi*8ANkZZppO1S*$Sx<4GXtGoCk!%UPXb{~u`c?;;ai|bD-q`?-AgcNEd$pBZ
zQM4DhrIqD96nr@qKHhImkZwXdtBFkE2nW!q`1BXo{I9dDOU>jk}7-iR3<8KBkrcujNhk
zKycNbY<=%teWX6tyb!Rj+>^DzN*4lhnK9l&ib$O!&=~$ro8QS>mD_@pwp#P8@|rYN
zuQ~&P#W%SG`YhsHlBT{Lw3qUX^n|q6MsN#o-=hD61-C0;`zdU{7(Mt4n5?OQqQY!j
zjTaU(SSMjI?q_#T-+#d-It`=`9a^n9dB$GI;ETjoo^!Rh))x7er8&e&NsTt_nq{R*
z4nFtB?#EAI;o1DBu8kxnh!l@~yf0d}e*Vk(bV;XQiIFRk$!TJ5%hJ}QnsXh0zoUw9
z+wJvfZzj4)J`8xa45dPEr(llGTg}V%%Mjw#<)vcGWqmXXk;}+M5!u
zi|46zkzzN?{fFBh(BtBLz8Ggp9xpO55*NrN6apE4;OOvFIYUr)^C~--UIMtqOOlN0
zjYhh{<$qd6=T!E_0I!SxBiHxUU8$mX!mYCOm*TEU9Th+HeXkbC1#TAfDtW_SY1qCdZC+IY&T7~l@h2bXDlCNOSvzN*VRF*t&O_J5g{`Z0jPR#Bs?Eso(mN&GD
zqgUae%L0H`6V!y$&e-}4kk7vJ4>1^EgS;mgM=J9RvRun#DOSUmqhdZ>e4Xu&qo@b?
z+5-Nue9Dy6#kM-}ZNm8shc;Z3@aH!g;GN`j{O3n^Qn>Pa7XoT(2kb=coaO5bIUhdU
zUNgBp7Ge2qk!0{bF;QoG=WHFnAT0T3MpdbxYfH4a_Jx_p3y@)#fAn7(IJ+V;^cu|U
zhW*OI_|FY=J#*D+Vh!*Ak~{kP2v4|qu&kgh=gifH;4I`a^tDo~b-IXA$x9d(=w89{0kC;Q-K2TA;h(ri-^K>V)w40{frAc$98hk2y5w}xZ{|I4@5#}M*fXe0HxPMfIUa{b*VoMfP_F+9Hk70)F0{
zyA2C<7(jRTyXElvZ+^2#4Z#u}Z|(>}b#NpwZa3xyA
zCqa4XvX-7zii6BV#?GLPLDm_$fVirh5rtQMQH+6d=1%S8C9kQRs1FZcJLoAdH4C#TdXoM%
z50nzm4BT&faxj`LmRshyW5(qbpD3=3xV}{1)v$YD#-bYDQ%{pejkr?;JhUTR1t{gq
zh?|1E{en9hVo}$8x;vU^$_+WjW|eNqAGce5k2VHRuL-ST#{C}v4})W;|8gG1fAlvA
zA~9m-%swF+BzS$;?z5gn@Y#~CPQvM(wLU>9N*dn3Nb>mi4*kh5n0We6mEETJODiEA
zeOZg6VtYR4_M2o)n%a8cBCOr|4X8#Q=wG5+VR=tj!LW_~6jlTN82GnLH)0gk&%H`L
zHV3Ui#Ri|8l;<$?gM^gN#09|FyM=`ReG)(M^IBwdcQ_#$yus{gY9A
zA?9txbZV@YO*)gg(kpsN6WzM56TV}kb{`1N_;Sjy_^p}wM9sR}t!iRyT9im(
za1;J53eMDb!DED@03e8+sg1kc9@hcg)%N9J-wC(>U6XI@7|rzBNo^*L7b34M@RQ1>
zN}>$7goMur?yBGKsdD+eSI6pVu$Z@A+i)$u|Adtff1rvWZwdkde{raGspe
zL&m5s#_%2vn@3)Im!1bGygYuGZ7Zn7ca6jKqe)xCvRDao$1TFzVP5f8NYjohJfGi3
zI1?03+*gRX#~R)`t(qTjIi^d+JI%9gA}q6;>6xyxV%QHy+ihl|%_`OQei>+a-?K*L
zFlzh%NxKeHV=FnbhO~$s*^TgU-D^=2mVf&uEve8f@=uKX4I!cMxbrjWop-W+dz8`r
z)~O74aywrF7O8mtRpwT`u9qUDf7G0){NK7jxWB(I=hqj)M9XVfsR2ryEyz=)Dasg~
zH<_qpSG-_Ie6(eozx(HpVPrTSMcKOk;&51nHun35ZoiYUlb_4Gxpw@oPs2P;`==2I
zrtxav&f#peRtBlIuIXrFZh3iU?_Wv5PQC;?I|=%h%3z+`^OW8+Vd7v}IX?r6#piS$
z{IO`2XSL={N8cc^pVzuH8%d@0uF6mA70!!-_U4J>v&9pgrbc(ahyijJN7w!IUi~=
z@F*uQ33j(~cCXQ;yc>BIe5GT0Zv$WK)5e=~CVg}&Sg$bYW-w$IWji~&_=I!g#ehxl
zv->~e9u+-bpd7KX2)DFPBXiyNj
zkd)H#-?||wlQXX((Yh&lM}D%P>B<0PLQG73vg+i0Kaoe$o1PM$qnbNGH81l)yGkGs
zneY3le!56dKlxqwhYV<2>{9fsg2!b2d!;odEO13gO;U{O$ZxY>o-D_!F(GMDQRsz7{pIwSG<2?|g9ze#+M_4eM
zZ5i$PTZ-9&k#(rRH#?C3YNs@F{*V{;02u0$`z`c~b+X}2PcS)y5Ag>^ieObufr;Fr
zL-&($tg?M?sz=WU=aV^kM}{qeDB%5b&-7U
zSXhdv1ZZn5$r?;p7`OZUWi11{l0=5P71)8kVDb(=aOEqrpgeR9WrRc28}l;!`?IRetV&Y
zwy~VS;JX~8P)m)H6J7<65_FCFvlq%>LIPB%QbkVkT(AK>^U!_kKXg?aX&+%pnMGv3
z-e6D-i%`u_aAHr<5fk+PzkTeS1*o~%dF&2fA+ttUfDPVk5cXmu)~OuqR&$On7QrstB@1Rw2t}w_2D}K}iMtx#IltAPz!c$&m?xe3xYV`j;-o%Hz0D
zi-*0B%VcR;Y#8V!8c-iXJ|l=W=Mf!6fX7b`GZSK;B5B%jr(BIU{e&hX0w%NC@4A{#
zmuCl`LNj|AMPRQoUp}-o@2`t2$L&DwJM~2^Qfw!!oi802*jiO-t7;0&^odyuG~J7
zf}AfJn2%<=F4zsd$g6!&PjHI?1Ds{x0@fqPb{1B79o4realumX)REbLOP1&sd~>$M
zHL6N_;y?;*_53z`c-a~rP)cL#Ot4t`1!x)Q?fPHv7sU}|~?B-LZr)mh{KK-!Bw2QEyj$+BkrSftRau_dl
zn-hJp6kj&*7b&05LTn~!kd(u_+Ga+~N>+0(Q;lX^Oo;cn@fe;A|f8_;``DW};Sp
z{la4C#t$^?3GAr`iT(Da_jocVd~;
zuYPsnLPdkeglCxgY&31~4DnY<9{v
z{wdq<->#Z}Fs5$X4f*A6?zKJ90c=>ho_{2N@hXi9hdS&Nd=T(6g=F~RiWcZ3oJq4k
z6R7*rAyMD-KAvbKO+PdvQgs}|5R11o3lB>7^d{%%BP_h_svhM{)n<8JmrW~(e=DSf>&)_8Ye`g{59xa$XHTt(8m#Ly?H?2|2$n3Kv=;T0jX
z8KlEJ)5EF^e4GwlX|rDTeg0B?C~M@dYGRD)Kwd>`iA2rz&7p$o+3%lk;|Hf*?|!jo
zd5+HkXK(#rATJGMRWr1pz3EfpjX;P0uKv9{*7z?;yTQuTtoVzO42<~@Pplx7WoJKo
zyfsgV8`!Q-XOiu+6k5ri_YL5utq^8i>?tpADrf2cjq02FSgxwG
zKYs#`iU3a+`9@&W$<&9Z?bj9JV^`^_@4t{d(xp5zWj)QSG74K7hXuWF4%l!x!|apk
zTie9Bzeo0|_xqnOxx9W5+q
z)Q$BvfnU-hycO~LDP?cHT)dlVEF&pP3fA`3ybZgW>Mgo@b4oa@_74r)`%A-U1
z9T2MyHYDnZT%3Y8TN8~cTS0p<(;5xt@V$c)y$`xw`xBj8g}rZPF+gNSZwQTZAOA^!
zWP~bP&YiA-bjn^RbAsms74w-KfEjcduimmA_5<;A7(lWMiombOUGk8ZIWY@w3>Tu;
zE)qLo-6j(18?BE@6O1&bTCxGE{`{A2IKeYQ4YzGTvyPRG*EN@DoRj4P=}+)JTEb?U
zgMnCQ?>rZpI&jY@Mn
z>5U7pl`gy#Yu5Kx2YcT`yy}aJUu+U|qjo!AI@gg7rU?qj>lLldn`O^O7v^M-?ZVl2
zzclw?^fmq3Q6;;bf{O#3gGyN|+F97OMsptFH2q3}eTp
zkT6Tr+XPZ#{Kat3+*#dSm)XJg`tqCH!xQY{jt10^L>r_b(yJ5B6^n?!Vk6ez;IIvh
zw5jY0k07u5Mvr{vLHz)JX{fL_%lh72V$6X5yiy*f#$9@0YuxC%=v<|aFf|Oa`~cD+
zxbgH{gT>(UB?!tc3a$<=yqDSAHAMdUrHo!4MJYRp%eIaUHB|PMYTS>pTPT`);^9(8
zF!x!~z^xfIm!27!^NYFfG}`o26=f=B%i@dAAzp)B59D1Qan{Z|oE9&`M~uz8pZ0|N
zobukG%Begd*H+{0!q3%lg=0`qEKg6O@Ep`I`=KgMGRsdKHRo(nF_kiy{L?-Nb_zMt
zpHOXF=v$x9THE|*?+S<9ns^Z^Zr=6!wfx2iuK>gIQT2z;#Cbv)x($x_4^j)w2R+Zm
z7yyl)k0rcn#{K^c#BC?}{9BFJYU8-@9)R|zjD
zG!5mH;Yug*HTl-tSsTO6qXma6FC;Ckk$Oqyi~khYikU21zgqhf7)bu}&*3OKgzTar
zHh1c(4J?+iIJ@h|Ll&+)Df=@aqM{W{Mk3Xd)^XI2vVoX7H66#XQzVP-Nm0yADrq4`MiD1OBo*7U2p*W)wjM^Rd!_tZ=Emy^lnII;Vj~G
z5A@|HuYmz+=@ZN@^bgP16Y)3D=i6K5e9U{`DBALb`l!Xxy8_pqp9RU?&xVvN{jBH9
z*-;88S68kCAssDUc5s+XYw_v@u6-gJ>~}U$CGB1IYl5siV<>Figu)OdY$xZnOK|W}
zB52}>vzc#rZYZGW!iK$gr#}J4>zEEE8<2<#Wz*fF$v+9PxjB$-Qe#uoD%Blr&e1Nc
z?*X{re6qt|&JJnHk7a&^Hj$;lM$lX+r+M-6%Y2sngO?-{y!p%3Yp
zmr5tAWGZ1sZM#+w(gZKLm98boL^U`_xAUEJc^L3@akL#Z{8u}z0Mf85(odh2w;@*FB&Z}6>
z^4>J)E;w|VqJpoKUR@h8M7s4_Ar(mvpTFlS0_GbS${~m6e|00W32B+v-FX5+sY$XC
zbCIiIO2)z3OjYjdUCf*$quTfqzDuwqgTH#9;WHY0KKXPlpFTx~g%_!B*RBQC805E`
z>&fUEV4Da5@}xu^$1o)W(eKZzD?eWO?1n?$#hD$=$?)FcsZ5@X&_xf7i73KW23Z;`
zVNqwiR-W|m@%!iakywwfG|ohJcB#a}B40B@uv*VNvIJQ3tGgXq?G%D@wk^QwVN){W
z!f*=;myIRjlS??14`vtPnWV{T3_47fku{lWi1aJ(Id<9ua5*Cb8alJqsmYD}xP`^o
zkO(2B=;;JPMUn#294w4Yp}l@364)c?NI}b1idgwb@=ohfS^;D=;ygozaSL>QJLLm%
zEI}>@eZCz!V{#G)!)_`No1o3B`
zMx+S9cJ9l1<57~qO$tT(hdb^f1;7rnjxEv~O*Kok<|C(wq^GBket82cYLom>ARl}d$zW09%r9#1t*I;mr?LTZv$I^r`=v1`QT5d~u$E~=>V3-90Iulw
zYyPk4BEGyUwk<#X)*77G?<76oxQ^RxlYrPBY<=uJYGadwpIh?T&;blj-lUFGJi-uS
z!Is~zdPmQX*rgH~n?H2?ki?^mt;XcbCq4#_tp3Qkpoiu4aGm8(zgLKSw*XVk9c=v*
z1l2|MnP+A$kz2Zz0QY8{&DT=20#32o5|8>va4S=*wx;KUK3nL=ZjI-z9KeJhc^6G7C8<2j{DK2iL-Hi
zJsaD&K5>h=Pna0x?}8Xw`U+n^pAtV)4++`L7FduHd1FYemWw{CVzix9VvQ;(9q9{Q
z%gGuG-=4iSy{USl4&4#f$)HXkABfp1L^nLK1|zFF27a)AqXk(B4(U1>9QifYZzfT
zrT1vVxB0yn{XIz!qo2%|V&m(d3*MNz(5I1mJH_ij#Xnaj}J1>P9Y7DpKbr$tE1K1ql_lF&AyOT
z#VNvSm^JTMSV?C<;}j#l+kgTtp?!5F=nWi2sYruk5tQ0$^o^PthrOu{x?bSQhhP~)
zGP`xLrilq!R7Bx!C?tA4NYs2B_~uvwkUuGdZurIb*nZiLWtS^J``k+{CUC+7E#}&O
z6R_$G4~9DU&{x+3(<4jfL;hpzMZn_%S1U#_MIJ;SLC};kx8S6X1FGPzAkl(t$P{jgxF#HjitpS|MvSiCfh#GWIcO?@=Lz*q_-1Kx
zM>`)-)hE?9`jGa%-RbJHSvezqW=O|Zg!Wr8fVx9_eDvvg-v2cSzBv$hB&7@9>ZEZ_
z9B!vgB>B*?aQdH`l3I$Aq5Zn~u2{-K4+~QPN1HECNIMT`!e-0N@1fUj&lx#o}vuC)q1Kkjxj<&86#a$PJLxb
z4}5sca$}vO#!<{|*nq`@JoV6S1rR*S?4sbS%7NDP*fspGzQ#{t=g7MeQnF9J0-bTW}kdDh_UQ_gMW4#sm8o!AY!upb~
z9;QdKfZ*mHwK$dnm+=S9M+`hx)CK3U?&o?TYMkK5ciAvTo{sbi_H97Jbpk3hLJwKf
z)&y+`7s^Zs+Ky8V^e(pk`Bn~P5-z|6{QPSTmZ#If@rJhyz;W>h&Cr%YifRcYlv5{Q
z0yw0j^fO61dO2Q5?f^^pdS)sfr%0!xOSTT?Tq*!viH>BUzEPlH*TuJ$LlT87?GQ(!;$2LnKQ4IN`;~1@|y)ggbbQ-5Cic1hUzH5%q6o
zcgQ9a0+!_0xF4upfuTIH$vWV5`D4KFdXQ^nKJLct{r}znXp;DKksrG8`DL*-2X4dJ
zC)QTGAy!lS_(>~km~P%4981Ff=;RddS_ItLF7e8z`#Eh59xTr^{g19L5)NfvjGcIy
zKzf+MI@#sB?NW1c`7mn$9#DoaA6e!C9fyrT04a2Jo2U-A0w_?!zB_RjT$`+u
znC2X^XdU|ne?ueMP*pM129S@c0<4pNBc5QRpmn+e!E2LG?P`G27sA1@Cy
zIh4?aRsg1p6%6}hbx!8+AiZtJt)s?2x?0Tu-zckqkTQ1ruVo4Rg>4?1;ZYi9Fu1T0
zAbK!E4~&Y1;Vbqi+&Ys^#19~C`aLld2)DcgTlP0xN_w9!Zz8p^D}NKmT=9kI%7Wto
zV=_y!QUb|vImThALeJS{&JerOyJkL=wfApn$Z|R^A_w3X4nFoh@x_S3Elw?fmu;DV
zF$WQIAYKNKOc6=S5yiMoTNn1gXMR(4KM~?)Qscg@BS%;|B2qN{&v4f_E|yX~U6Tm<
zr)8h0qlKbxP@$`O6_7w?RmyPv_triQEjo_cWq=yLL@AH_lw5eZw$OXv~k
z#G*)CWbn#DkJsP3z+FP>9Qxxn$l!g0YE;UbLuH;9Ei$J@Su-b~c&_iqJB6`<=aKK?
z1c`1#pN1eQ7^{W6<6BwbQNHhu-H#a_s}MJ-`Jr+ady0MMHl45L8hCjhx`hIh^i%$^
zg2C(J9bulo-n*bXW((0_6(=88Zo&86>rPwq(}S)?Sdphz&mLY$jWd`~=cbm;L;a-Z
zV_G?ElzsF8C7FQxFPQ%L^_WKOs>}MAWd6E&-Qz18OIs;>c$)~89jhmM0zd7m)eN0~mlTfSA5zUV
zM(n1<^Xq)PUMj6=vhcXaA@Wt4_Z^#P8+QQS0>c0S;rGDbCtLh4O6dM4VjtVQ4fqCa
zso$J6VBTE=)Q9j#wF#Rp7o=J`;->xTct+7@^F8SvGh_u>_7%ofjM|(jpzq7k{XBa5
z-lR{+lsx)l-vU$t+$G0gb8w`8-4JcatC?5Mp_(_wK6v^?xp;e|pn9$=UWfUspmAjv
zFs_kv-aUKcGCP>L&zaHmyv*Na+5lRHlZ-3#M75T2@0SQ;hhC
zJQ(g|V2ZtCRGaxGp~t9@Ig#6mZ!*5V{<~Xnx$tteV7LO(9yylo|DQgG!)c2DhLTC4
z55Ou16YfF%{A$4Pvueol((J12lvajrh`OJro}k4_-C`k
z82eG>%IknJCVKmjs8(S~t*yHSoBaB?J!5&S0qRV&su8x#oH02>se(?5(VSkz;QN0K
z`I;Mk;Hpty(f{>e^fXM%_;Hb6ni%Uw-@m4?Y^mdn!T=g#kdn12k3Bf~ZRT?b42SiZ
z-h6%t(>c4PKeWGdv*tC4FYSBZ!o2By$T$iP8ibz?2O>jP?C}8JhV_YKpTY%~PXda!
z3o7L=(z;%k#hPthWxj$SI2^EpB7P;lB|sj2!KL}`lWLRo^JmiRd!fYya&SESF!IR|
z8EQ=JCoR8_Y}>~F4m=z-NVG&`rCEb)q%`yuu=<6DjBEF|{26&Hs>D19G^01?jb~LX
z`qD#X3j6%t|8FKT!d;f>biiDM36Js<*krreLy>4HmZ(PiI%uT|s83;1A*fvjb%~q$
z@3LiUpA-42vw1|iCoTfl`Jk@xT07$ZiQ^s(-w^Azw7(z*mVWNCy0ra}$>P-e1Yrsz
zoZ*$Z7<>)|#e)0yO(jJv4W-YoMYls5=d`+LIMoV%u0{foV%N)n67a+J=yEk%%H`r~hMo!Mivj`*o;=N-_l2L4k>#5O?a_o0(!OUxy4jY-l!IVWx=dvR7
zpR5n@S3c0?NIW1JVT(S7s45`OFiaNm!(m<%=~IazSINWgXB0r(#8d*^-y|n{YHryX
z-+m55C$>FLF?!5437y@rcg?=kAv${tQ#=_Yn&reK+Hh5zXo-2!VqE;V(&X2hbH{Dm
zJ@e4o`I8^yDGL#o*hLHPQ(E8hvh-aZ?`c`9k6zTdVs7)Cn4#0d&-hA_!^6F{k)MJd!va#Pc~e=9LbKMUL#{=oKLd^Z
zFCF*t>8m_ERcaExL|zG%ex;L?b)ez%#>kZll(b^i&_b2XvnAW2GkmW21(VsahK^rp
zMd;^ndg3ZrDbU}i_){waxRXL;C^mM09oBEEDS&h4|LAU7;@cA5{cC?CDS5I~d>Vlh
zIh8gipaNt?5vE#~$?>L%7KZ(K=bZ-b@le2xqd-G-_E#z1X6^Q?gDmghe2#us#CNp!
zOpqw7;-_}VM@8r!I^be+o?nK)0JCKd;~%586MYL@2i@2A81}cb`tXVc%7sCJXZse|
zAtP+oPnY)kP{3Kr_C90ecjGWeP-Nb!;;hA?QiE{xuZ1rIkZwH3qyRMDk(IR0WWJy9
z91LS(tX%inM$*Ut=fc|q$XXY84l3k>h4t|Y#>k?ZE(8|6C8O`ZcB%l6e~v{Qvz4t0
z>H0MXHMDX(lfk#Hfg%MQHs^NZMCCJ$5UZ8I;fc<}^FVi^CD$%vtiQxNO3jN*HI3v6
zkmv-~EoWw-MT+PmZ~wTaP<5!|j|-$TU_TpYhn{|*Ke^giH_~$l^G7F`BUvdP$w~ftaLHbZu~`X6f}V@@B8)$uPNf%?x@g
zU<(3D5jHIE-IhcBi~Rm}7o}tV8%kHoc>CLAK>Wf}oboy@9LV|Rm$T08h0iQ7x=*SC
zgsNdg3iE0}oSA;7|KM0zGfeS+3h^$+BroS;9Q|QZ0A7A3{upiJ%!6};EhRZmR_0AN
z^Ad^V61Ppvb@P{Y!c$xep&g%AUy9%`S&*B1`u5
zQcp!HsYfZ4n=HfFjis^`NrWML7|Als*twQ#`+d&zef|C`j&slXoO3?Q`?GcZ)K`pG
zu*#5%^FJMNF~=$?t^CPf+>e6`m)%#rzBYV%`adt*Wp^^tlvce}#8Y?I&F}G>x^?CD
zZQ-5UvrqjUP|3m)?}vGG$8EX4z|I_9ns3lp-N*_mn5PpUU)xQ
zw&8U|04p=#lYK&l=)*v0tndbkRIh(GHSanvH6ZmBj{f{{I<`QS=rN>mRnyWtPesH_
ztrLE0@vJkRT~W)>zGbGFqCIPqxw91O5e#3f=6dcTHFtFwy(C*`j-lxi$!14
zOIk1t%3#)Q9stv}q@RlHx07jVU+#qSmQzb7VJ`=tbLBdRJKii*g8k(1S-Guy^Y~)>
zxm0yTw{j!&R(PB8ySgaHqf5C?*kiqOBHe7>!@QHRbn6qeAXMz)VAV&ySPGL$ZWX!C
zz|4NBWR{mI^=J{le#JyaS9#JGx=~Fp#0$8hQATqvo`vZa{O5oh0nqRxkzJd4Ikodw
zHSatvZkzDv>yopZT1Hq+)EhRU+Fqn~;tDN?A8gedE-hL4tk2am%rmrM@8$Xz^(T}5fzOWi
zXweR5UnZV(Jc|}}-oR_SXzRLYY9vjfgMUP)d&5&|vCp)ZcRkIkLSrh^D=*#8D#MVg
z*!+xl#vt^5$V`OUFSmE@`@CNp&kX7S*(|Tw)=5fIh^QBElPJlsyIMp>e`MO1BmW-d
zOo{Eh@*&uG#FjYOKH+wPY^LnP-EEoz&w59-rk`{_zI5^HOJ&_^+U(Ngh|89r*85s|
zE<@gr!R)4>`_Cr-4eh0>M`YV$9^iG7iv0GRe-bo_+Mv0-HO|>`y}x7G2Or-UsVI9X
zJ*1+!-R}Lc3L}{IdrwW%{;?~Ev)p$caHa8v?r-J9mOl=A>~yf<)d2ugZoBU{CieD*
zO&!?*v6*3co6cPS;#JVtS6>u~jXL;A{Zn(W#A-t|>82PmT6S>c)Pe2pJD<_yUo18c
z|M?<4b6CBg@ES9Mm9aIp}
zRXj4Fc9Zq<<7GyO7s2K-S$T9XwyasWs}=?{9p3Z
z2QNtNdm19qaavC4sb^fIxH4U|#l;VpxMr^H*VkNmbL2_)C{97-yD;mwVG4`~*Y!l@p6yURdHvaf
z%?%4HN7o>J{q3}SZBbME=!l5YM6GX^1{XBZo0gjZVOs!xi~Ua@sye|D~AZ17oj
zTY6!Ev^ra&tGkwwVqR=@FRn&jNS9ypQFyEOMW<_6ZMkcVcqxRgf8+u&zSo>z=ykilAIywJa
z;1JFo-!40?JEU}tugo^Hadjvgzv}gSAvBvVQeRzVm{TulfqN-ztt?V8B#s*lI*!QY
zw)U=yz4PGU;ErRP&mVnjysaFeAkPv!O@#@@``2VROGY+(=foS{PvO}&#-^^jbzaY2
zKgGYh&rD^+;8*3D4S2TQ_7meCR<28*8xnHw6f3#^nF@?@!)*!d@Sj}Q
z?g9gvJl{uFrssV|CYIE-$TnSr=67n*qVBl$b0l<2YC82;|;hJ7?yS+9obnUfgNO+M%pz{6%e9P8h`b5TB>ydJ8D?dQuAAl#EIWCjo}8g
zgoDaS_D87o^#jpPm48r~YabNFIZGB#w|kY;`j+Rk?j^ie7#b3KGJLH?xA#de8=N^!
zgfGM8zc0ScIba_62wS7(TeVjD4O8-QSNmKcC^80T_q`hs&V9IRlIYrU4)sb5GpkU;
zM_U{U8ZAs+4b{9}iF5XyuJLfJIdE7qE6Z{HuVm@fxc%nJKA}AynnK_n_5_tvJBpmM
zf)kz&id*4bQxFL+Uyy^D@d4jlRlMH;s_>W=#V)vAe1!G)(~TF8RxoMiEmh>UD>7H&V8dQhP14A
z^g_3toZ>f6>vLRV0IVd2Bs*KO_yuibn@MsQUMA!=!v**yCX
zt^R2au)j{>JxZfmk>udRms<;K-ppP*HPQgLuFnr!y{W?Xkm|c5dAGwQj|RPOu*Ov*
z8na9vY-Jr|ZI4>>d4m9bd6qNcBRf`qw5`*=qOedh19J>Bpp6aAi4OQsTg2>Ylaq?t
z$A*qBgS`<$Hzld(tInPpu8FCcQ=7`)eOqetg*2KWvG#eC)rH$B?w&oHrnWDe7qQ|G
zTiM4X-G0pcko3oZ_(ll<6aJY~$!uZhYVVi=mx$br5HDSxnmyW#D%DNWkySka+n^{utt6W!<3
z>WVzdk8l0whR-fmuO5DlV)Dfv%#B@OT~_e9D`T~!S?`SJddYn@CMVux>8__U-`NDF
zbK2djA-hHN&FH{b*G#t^XIZz)g+lYz-6#rG-6WbHC^u?XchH#D9-+yK4M;yg?$m0K
z)HYoHFe$M3+B#y1bsZ!2OU!w*sz>i7{ffGEWWAi_H@taZcX-Ol(pf3uWrOYT+2zxA
zQy~-2?zj~vG_L-xSZAJ({3_4S{Rg?ODWb8W>rXl1O*gyW=1OhbHK|>laqx@b?k8;)
zRnb_je?!*db~m}o4J}V7?ogeV$8y3Xq@_Gwto|%RDLd?Ol6#JBTus);b!;=OZJ(!p
zs~L^aiyqOG6vRN%F5hoV3#czLsEowEozgy<8KCpfc=R0J{>Z+kI6v`8#zqCBnFm`3
zSyeBiBC^_OEBA-=&a{4JvK7}osC-KPefS9Yy6&FUBwPxykZR%Cy<}xHzpa&c+s?AW
zPat*I1D7!-u6vwGdW1I}-JZQkRwF$_o~+E}Qu<{pWjM|xjzYVR#0GeGMX2CUC+}rC
z_O$JBkH((a-+Q(dJJl8OH=1U<7{|&@@@9?X@j78QHCGl}S1mT+-l@~uG-5I$cft(y
z3S?!2Ce5SZp6rSWQpKNcO7*>@&PIKUk4#}?-19yFW2}y}UPz+iw33pjTZy7W%WIgU
zgFnZOXuJ3H-5_pP0KtDLGwZBfif-nLb18|s>Y`?oqqdhWM)S3T>KWk&wjh;f$FeGN
ze>Rxef{=I0n`pmk*v}^0aOCHyuK_y$YcoAi%cyrEN
zHm23t*Er&y_fPfU|0=%NAcJB@OWMm4*(WT6VFt_mQ0IMPMl{nq_V-p6-~Sn;4!=*f
z2tdv*F%D$Vj6eda94mmuEJV-7?JqGWbu@Y`(cn;umQpL%4;&8Q1>
z{{byCPdgEcofjdBrY9pkHlR^nlKe~??K8=AS~IU8dFQT2TE`3a%gW#;~EF=B?yslg=aut)aB|I&;I`Kz>@`
z)QwK%4p`X0GtGs+Z+P@<&%x@?W%rR9cJm@J>)ya9tK#VVyD^?H3#O$yBNtdLY|9;^
z#t(huw2W}ca4WSHBi9U8gu2n$x_RY@>T8%l
zTAG}&D+&FNdV2^XEqpCpEpsp_1AG1J2GOgv7ZiQ#K{KtX=eKdBevl&}xQ)`=I^nBY
zG+QVd$Y?q^C0)G^?vvg}f{Gd087n$33ggafH;y>mYOOvX#$Y^;*hQ$e!(OB_>WW^<
zT5@gT;F&w0$4A_acrsQy=|Sd}4|lY#3GN4<^rx=sqP!Zj=hebTZvts8a6=yJ^G@Hm
z^^v6kl9=3j2^nOVUP^v`LJ9!*$*0t%yy`QdUG
zlNnJe`1;98cRb^ws=kU}6}>aU-P1mN0ES85g%V{mRcgGu)1(&7nlEt<|EjN6^B*A*
zbskUAmTSL|>3$^x27bac!Amp!fIs;h&LO;x5%sQ?FH^pp9@RNpNPn@sO(CnrEcdzM
zq3o=I;`G<6N;U$+8JxN&yV6dD?(&)Lu@5#Bp+)PpIhtaw=siA>LOu;7WNq%-MI3Q-wy
zrr?ca>Xzz$Im6b_r2T+s*O+lduOxIcW(QNs`O~S3a9+R$C78v^^&Ik?Mr#q;^t+fD
z-t|~EyJIJE+n&G3_q_N^Yp{RRGQdant2pOBl+AShVw`bDVBNJO(JXUZ73IQM6&NNC
z`3c1+`BwXuiP-ugA1zGxa2LNWoUVeeQNxECKlT7YE`fDm+TmdQaSM4Fv`3Vw^(sv_
z^GwIb=t<>uoL5$^HxKiJ(4TKN$L&34$hx=+MkMz5PaAo>-2}W6lyB>|X8t=N)%d7u
zo80G${+_09d+--mYwl&HbARQ0v((px2lM!{Y}xFZ^gieY4HTU(BVzlZ5fZM1mY(h-
zi*If{S0Fw~84#WAQ7BqCY}7e-%-nxhEpZ0A(`U5y#!-LV-4U^L-c{nEENqy8eGtx@
znSKs)NLLKhuE;)=InjP@9S08UDDRs;)Fl)WI;=%d#+$;<;%ls34g`hr|AR@AgDLG*#teQ6G@uV7ixpi_ZOls+wUQlCm?(=233-;T
z9*WGP8nGz-?M*eqK8n9BR@6hpw(bX-_h&qvsUJW<>^%6ZlL++rQFFYH{s~T(j_-Pj
z_EihTNU7u`g0w*ATCalJ=LMF;i?(52nuMjU;DgenA1!o@+j1~_**r}m3Hp)4HI-+F
zUbTT9ui$M>2TBPEX_aTbY|AUawvn68mqCe3At8O|uxT4^#_tQff?K?*BE@wa2(vvZ
zVk>vk3-?ldMoDWqNRSg|{Y!M$JqX`%`v9hwzvpE4>XF$zjrj^Uq{8Q4ST%>cG<3gB
zb6RHqJc#{2%)r{XDk^w=>rEpIc>^?GeceFq*Q<&)c)hS0uHROLT=2DJPPpUk#IM9S;2
zblq$nY;ld$I?nvYbsWKa8S=?o>?%J}T+aYPI3LR1fWEKqmc*`)o}PF4buhWf>Za>%
z6cE1WJZ`yaa^&V75nHP_Wbtf<;4pb6#Fj;zjcNgrts>~18l7w5%ZT92%&C(mJmvbv
z0p}`oXrZ}Tt-aqK;XDiaw*Rei@V5yukxaK;$3f|bpPXKE>A5WyE32?&^HgyCngO)C
zOOMXu?<(c55(*o#s(s(EFuRx4#^{-cmJe?Mz(>-}NRt*sIiZLJ!;X0NEGlGrRFjZ5
z`;KVFH^X_C)29^8Z>#d|!o8TO&$?TE?_Y`eZhy+-7t^4n|`8gS75pvHfD2v~{aF&{JCI
z*kx$F@cu)G3GHJR1_+?g?Rb~ggtPdP`}bwtVF>!ko6bEa2%~J*-22tOoNC4r{3~vv
z28|jk$q9`v)(n%c%*{7^k4ENqR-3m6v4OtmEQerCs_Skc*PG6hI@Os|f6WOQwCwXbts06Q5G)y(0^jw{63Gj+a^ilke1
zBv(Myx8eN21H|Uhl!4QE{078Ftz^wNO6k*QzUGUou=5*3_CJBYfp3(>(iO9!_{weh
zjR)eN8K8$coNxF%oPHMX>Y-MMuZ#@a=kcT^L+3+HtW#NR^4xbYAWZ}h3EIb$WR7K0JdDLCltBRYgMzd&_@
zg$<{#o9>1OCF|ek1W%(dK7gnE?`siTyY`>Pcp{^6dJlX!5$o-Vpwz!7VXO&byt&Wi
z9eY1}k&w^^78Xt=pP+m)^&emkvm_9qn6_epzCE!H%KGhdudQ$LD^S
zT|4LBf3AP~ckgVByXc)Lll!GbJuoGcJ^o1>pZ`sVxW1o{()}RxR8a#jr7E_@u|JO7
zNgW+fhrC;%+p^7lFI7kjRr2yTJ%T4?(7RC;PF6_hw`6u1(f|Cdv<73a&A2n%Y=SVsEc_
z=BQv-#XPMfw5!)_{!i0f?5bHU>ILjt*X!JXn}?9Cp0qk+vb)5D2IX-ipmeSoenbM}
z%W&c|nu`|LqOW~~OVoP1!i1otCZ0oYc-VwKX~8u1CbVfju4H#;v^UY{QmW8`x2*$O)KOVZusa}+$j+}clWhoO^bx!U8g+%T9W&haO+ynm2PLq
zu=XF{mBza4U+ax~g`Ep4^1Z!8R>9kQqUEo%b$l_mE?}hJq8d35*s?A!aU5|Ap&wCL
z$Y8(!-D+VA5B!}&sVOU897W3=E5Y%pTZ?nBZ(sWPRi!KH`7$5Z)~{YX>NV245NV6I
z=Pr-NMkoof7Jh`@vJn@{=w>%PZD>L&*JHY?MpeSWY>VInCTAF|45Nw){@ulnJXXng
z;Lcm7#Iq6IxF<5x!Per?Z3B|NL)GwuVjG||G|YLqBBJi+j^sM-`)zuoSymgThqb&v
z+f=+T6hAH)OZ1V!MDstBlmuauwPCKJWrB#-?}fHo8tin6j_Y@qdbhNX-Ew|#_U5?b
zk|*riO>jemzMW%W)U!Yn+O<|a*WqEcq;!qnxtQ3q-Fj5dNmU}{;84_Z!LCgPO$a$n
zT01MZ@`*3zrMfC3zi}ikz9G7rJ3iCO@!$JQb}Zeu@O|1L0S!uj#|GFHY}hRVJ~#Cr
zqtroPEIQtVFx}kd+ATIN;c@s0$P6Kg%<)`okx#X-o1+s?tX2_JF0p0ZdD_(Lhp&Hv
zbqL20d}xe%HIV8RQ75d*t3K1ay@O7Eh%q6UIXmzSwbfr=eve`oef_%e59NQ5)c8&I
zQ|g!sL3LSl_OD1!Vms=2b`PH~aol2W-K&u_7R5E8UrcZ~`iH(c3giOKjVniDK7mo$
zo!0cbwi5l>bE?VDs8p5UUuJLEoN8(+BATF=^Rlw4``C%l7jOPhjy?u~y$Y~+)t}Wx
zU!o1%c4r$uXwum{9re4wQqjPL7?&9>zYB^#+NjJM>Yn)7uQStXNutle@+zNwN-31|
zIYx~H|GZ9|+-M#1^JSSBUy#n%{!WWF9chqv5SF;@GOsP~bnL6&nnbtF_1({SAF8>!
z+J_ud_j=%eMrS`!le}27MsezbCT+(~Et=SqUncuw1KwOT^z&rt=#b4_Ef3eTlj2Tw
zY?+gFYy0LipV_Qr+04C;BDCREk$=nCAo_v3$Z
zyEz7-j@O<~-KybM#Y=4NXsa+21T6P1BnDQU#|rynv4KN)Qh=C=YcPYyq_>)pbbq>L
zXaJ`5!PZI!N!Z)Y_vx;2XUIE@K_1KIpLPBoc#zF?+g2mN0-d14~|gVB&Z-#
zo^rM29!M5+ME_*-#jZ%)`LPG*EtMTjy$$DSWsN*85#zize3mt3LbOLM{?C$(rQw22
zWGySYLx&)C;vJ>neTw|7#OKx&X)_~M<0HM~PA1#$+t&VlvBoEd%=EQzXowCA+oc`H
zKHX5{53%G2b@BY~>;zS(8uQD&1NXl<%6VREY1wd&Yi>-+rEWw~*~cdH0cHu^XBi<{
zBV5);4vMjPCbauw)a%AUnP-pQWxba(ca=Cmo~EJEw-0l2FiyP|2I&BBY}=Xal-Qi(
zs?Y#J=2`ie{kZ;&v&4Y~PcUT63aM{;GAGNkgnMih(&#KcQsZ2!xgXhgm|~ohKBHFN
zmmOYiKK#;4QB`l0D(xJe7`crY*xM5zSo;0LsY`q+Cr0057EU@=*0cV^6}S)g+Y|qH
zAuhCf;HA?&1tv7B7p8c=loRxq3skw{J$cLFs@`k*_E@J?EuD3&09$Lp1-c}=(L*v@
zE)GSxTl3FUMjWb!LTwAs-TGzQM?xhc*nMMV?!#dCZpX$=E2ky!7P$oYIkr9CY1vDKiqxo
zb6Mi{yM<;tMaHL$-j3yMxzbweUv=#J5#DdbO-ntbEU~t~gu;?A>z3Gb?q%pg|KJVT
zz{ZL}p@Pa6rcs`0#DO@+$!MzL=&dAr2*)akeH1AZCQK}@ODmX!9QH7mjmt;!QD63@
z3jDys@93KN8k=CiUSQbh7dBPV8SK^d*YxY@KnLRshplO96leXuw$8Gu6By*#QRCT2nLfq@s3(b<{KUmC>f8nOkG23
zGsBe1sMk_VQJ5>VC}HNH;CCl;27*3TXnAV^juSk5h^iO-bg`!DWbE)5Qc8gswAiCo
zf0U|;{6^|w1a&KB8<&4v1`Yir>*4aa?cmaXF1cn0=0EKHdzps1#;tk0z0aW1BO}sa
z!QQ&m~^irfn$fWQ!8YdW&j8_X1K-9#ab`4G(aBrDR$fJS5^@vFyw2n9e
z8@i*_a>y-}j!(sD;Xhh!vkYhZ;P;DUvyG=RH1@%l^{*Eg#_Z?IxDS)xi=4eVEzK=k
zg@l4!_ct9Bg<3F|wKVXD=ji@C8Kh9E@My6!#=
z>f_<1EKF<|y=CZJJ&~mr2Dj7c^~c=zjzxKa$o^Lcm|{m9X4PNa5_Se@mba7heKH4Y
z;zdJ`I!|w@lypHRm1}hC<$}fry+&q8%zX-z(j~p
zd2#RI4#{5Z-&y-Cqu-FM
z3JdXOt~I{l=6o$B
zOHmg?WCdn|_-N+c&)j7V>*~rGFykvnT*MFXhJPVz8FJ{Wc~A#yJwI>)xw}y>0-M`zeISy3ADU(7^Q#ap!mJ@y=>KGJ*WD~wd~F}d~LkTaa~b@Y$R}mW9P`?ZwJOEW~`am
z;%P%d8*Q$h@+_8{isUIrG?G`xm~Rt6^oZ1O*SdA~T;(fQYT}(~F@kzc`yc*&e5sFy
zkCJ2AH8yKZsb0r+_6Udh^Ou$p~aHLEqRa{AY-4
zjqj%P*4`NZiCd^v#-|bkVuq2atW7h6>Q=UTs;6KZmoAgVgY&CTu+_-RC(5YjX)GBu
zG~a;u&t0*270eJoG!C{m3&vh2Rc2X+E$+r}fupJRX@zNYlzU#04L@|V$fYZ4d{ZG?
zJ}VJJWucOzsmO%1z8Xn0{6;76vu42=hLEw6q3-;Kq8zN$t!aj*f(*Dz$8-o;ypEiR
z!JfYug9-@+4TA3hNa9qUcRYfUPUs^)^gTv|9MuJOq<@@_-LH>8gOvy)CdoE-~GHhR@E5R?i34+n05Agi*j
zc=jV+K_tc(WW1N%AXSul=hXP7h}fcsGt-cDwc6(nh_`2wFP`r`|1bUNB(Z;<`BK+(
z=hip*0~;6pUAJowCUb6AFj<@z%oM%KWs0{kJbRL66WS?G`EdZmH)jaz<9(8{ZRTxN5mTLaeZ~
zc3Xo7dA=gUzkRfxi1sf}5`gViuHt8iZw#KYe|807N2t$UX+zznqnSXDt@P^rth
zz%a}XB=4(zFAaUs)r@T#$avJ(L$C2&cr#IM4e2DO0ZRm~OX%nl`Wxr7uqhV0`z}?suHpcAL_$JbOYCt9F_%}4N$eSG
z8M9hnZCxDc7MJvN@!u9`2{z3c+ghYiCSJwP_jTN0{S)M-mD+&1z_J+7j~cD>Y?T>4
zuM+MG_#CRr88)9A^^F2}cX`7_oDGo&m(JA?x}cf(IDP3|$pHz@thTC8MWveg^7vJM
z_wSb%u`%!9&dwA1)p{+lFDpHw+IPVc26SPDRdtmbKrOmkVu&{>gp^+Hir^P$<8|h*
zD9`pra0brUwOWg>;?xU(vRhtzvH??!HlX8I#zlDOQ1ybddT|{{F;nLy+Zqd+I0ar?
za&8sg&pinZskkqvhnxz#1mK_n&mr{44CIBKpr5M)Hw17#-fGTo_pT}vOmCh56`LI<
zu8YtX&cA5brGWpcdeWN)OL{+WSbt3#Ld=5en$q>TVJ~E%+teakfrsb2)n&Dp{fmn@
zPa?6>E-Fnx+G=NfRVAl6R;&dQ&)(h7WWOIzzmKra1HpTH<#O0`yFmch70Cuwpxut=
zA10@zM!Wug8v?60vaHyOav@hjldS~u@sp@+*wRxVk&>W}1DWAwPadE1GQaCdr8
zYPa!LD#SoY-VC34j$64#KzyqaC!IFYYmBa|SuJ
zSVI3ATsvS%o|Dm)k{NZGk|4DJ3%}Z=O``x(@w2NH>?4vVV(Vt)56>hLG9tM}ZV>q?
zbi3RGFL!{~VysIP>mElkDuX9uM!XLu!!PI(DS$%3nP?OHCp~5O%5m}7S_Ib!XS?d`Pnk(98djw_3s(I>u1lZP8y1QeyCO+zAa77<7wwbQoNwXTpYL8
z-^arCL<6*EI56sV5b=MgCi1gOtCUK19RUuiqyw7=OX&1Z3pj`axvdE_(hi}@%1|g>
z&p8!1Z3&EXM7$pS&av2sEuhyvhb%X;_*~93szdTC)5L_xy+HNQCr^^$kD;o$Y>yaP
z`m3XL+$$TpEkIo>up;FwcDEH*qO!ao)U0&%&66k?UTW?7oh=HOD?C@T0z=A<0N2QK
z;LW{aFYh{_PckvSUYU-_oLIq+EjG#_$_?_gY-JmFzqkv_10G1=uhG`N#j&;UswNF@
z_+U&XH=yS_4Xp!QsVWZE<+Xaat2$}$j@>cVFJPHR_*EqnjJ|i2bard+)94AbnM)t3
zYYquAtDP8>^!wI?B~l5({oB##0X-Jhz&S-;zE#lJTPR?|`|(7&1D>OWzamJ378g}3
zqSZe=zPutuIk6g6P_
zrz+wH1L6Xyj)OBUB?qGgRC0^ztPzQf$XNgHCbay{9Bj3gc{U4qAFAW&hA|VX-6XT0
zHSuM12>u%+DYB{R@*XXwC>$#9Ong5QZcpEkZrhOoLoTq@;>AMsZ=nj!8b%lo!x_}l
zBrGE19s3B44qEFtKc2mLGQL_JpHB?bit6V5L>w-IvN}cN>fjIfVjTI&sf=cZVAcjc
z>zuzPeiocA;Y)PT@B3$`+V@XLC_q|8`5Kne&ETxv3rX?4s{{+
zx3HY58}IX!zcgmT&t+YQ6VXcR`7Bf17!Y@!gGUP5WKbN&&t`qpra{u2JXH#&HVhj8
z4Qbs?GyDN)abvTn8fC>03v*~N@YYmwZMzTYb@b-430HX`K_N}cf@6!1RWA8i_(n%r
zt>W&;3}e^afA1bGiT-cXz{c|Y_P-aup{^mWMW>Ji5RIu5*35jjQ2xcxuKSf+6kz_X`Q#;0&x{iuNY5Z!UQ<
zn~R>Lyg39pzA?kkK8NXh&v9(fMVdvV^GRzeIv?93`_>QJxjifiaw{Ih<
zcptZo`988AjWevXp&TZxDgjd_H)$B*SGESAqS)219M-z@fh@P<#nT0>t{9vjNN+el
zD=?6cCCCMS3XB8`<|K4^Lbm*|?_q&Ce9RI%3rRV?0TVWZ9-wWoJ)&1!|~KiocK^H)iHQ?}&Xl$-0g9%f0YN#|&w
z{y;>$btCN^d+;2&>B4KW*q3l@v4Nis^nJi8OQ~CaO#`*Gn9wo72AR|sr6Qy=#nIEM
zmF5U?%~g@kXmrCg=x{k!j@FS%oxBO*_5Z*x$Qnt(-(9QaZqlah8~U)1;j)hqkkh@E
zd-+HuylB0=)&$ecnFP2_>JEwYo8ir3>-$Y~^oJ*%J{u%rOU76fh|{&j
zIjUd%k#P$a&M10Bo$vQBLQQoay9hKngk;@{VPZ9Ih}Ek9WU`my8{dNlm))yJkfQ`~2x>e>wtg_7e;YKF2zcR5vN-0egSUt&
zU>0nuI;(u3K`=EaIOAGOtW-mslWO960C6o-MiRifRd2*}2K|1wiCYCEGLB0XonBLh_k{M1t{TN4QCR8FZciIdupFIpU
zd$l;3FX*)$d(h<@0qiaedOC)Zn?!Vpb>g`>iD=YyEki(zLY>kx>R7e
z&n@d4yqz+D^Hd{{k^2!stQc^`FHZU{J-rNknhCtK1(L50J`_=-H8sFmv0-N-02$Z$P#d=T|||
z>_{jGCbUq%5F@BPsn7^CAf1nMkb`?oJO_-7!S4MBnT#(1
zm|(*xC6lee8)_ucJDP%j-*1Yb&eISWw|r#AhOhi@DNkVe{2;wN$EOqrfYGPyWzwe{
zQRt6c4flsOty~M9yel>=#`#KQVA_5>R{4_*m`3<-kFOmlIQ&C(!XrmOhMnW
z%2fREyJy-#FoPi>7Q$10!A}7nJj{6L9hK%9)KFCGtDZuBs7HKaa|UL9u!b9ox?ZfA
zmoKdv++!uRFk154ar;@V7ts&?l6|=I*^0USmp^`65aL;CtLb|`^A^(cj|1cq1h$+e
zl>D~0bJl@Xf+TIiTlelkhNX%w@vSI9bWTTpql$+S`q8CU|6*fZbS`4ewsMvle2oun$F%QIt
zHZ;ounyalx*o~y17i0mLV4OOBR#KM`oVIO2qZ;1=Oc!$ar#MIL1DzHv;z`A5azVnbpI?#>~vVlYTjh-Yg
zKg{N{<|7^e)m}4v@zHz;)IlakzIv1#)$O+wh
zmN1)m_Pmx&m5N=Th8_|VuAl;}biq4&V9AB4RNAWufi3ju2XFWo$fuZC%nsM#38E$G
zc~ny(iU&Fj`n+AM4>F=w=z>n!or^lao#`Qr{B7msC>;pq5xrXnSwnA^U7lus7Rppf9
zbcBd)&r=ut>$bayuue6Son$_oS|l?Io7lGaf0PO4xPSxdTNdV>cMlDV&4v)FaD823
zjrYhZq&qx)XbxgDT-U}`{3Ke{**GS94)SrqJz8TcxKf`eUe)h04ZMD59J}G22vTo;
zr1HeBLaUMjHNdF_sP89B+kS9a^mb+m7{_X7YuC`(MM==Xj>(>i!9GFm)#FC##maxB
zEj(H?s$TtVf%{VceT^4O$6l9OrnsX2__3wzkdZ+Zp*0m`N}aDeHx?o{g@lBA$kvwn
zQL4QX?!3gx^9cG)hZHdM0(8|}AF0)x;VH*9@x>V2T+bZfvAcshMza-_hR)*e^CuM!
zA#}DdsH2~nibw^3bRDg#DeKBdAnal~PU#@6|BHMX`u~a&sI)@#JDZFGT>740_3q6{
zB>}d(WqWpdpDxXqwlBrT7+_wGsiklkOg3CPqD`t$%iBlTPrK#kMYlqz#9AVmo9JIU-fUm>S}*KR_n
zWxt{!aC}WLwZ8Ar3rc+}T$=^p{suBd^2PR+Z)}OeA}fuF;R;4GikHvpX}+L3=lIgw
z8jU43KOQ~(wLsy)n9_^TWBa`mE;$`@4cPvcRc1C7Z}|}FYDUn(GWFZ|{m>H0KTjKC
z_g`NpR>ie25jgTVg1%>Z2B3FuJAQvwm&4T97zpd%_Qp%9-l2yZ&Ji_ryW$iUP)a>5
zF~@(82tW+8TFI~Aj5tYddST=G=Jy+J4hvGww=@n0T%210qMe&)bA_8UA0h9%&
z3=O3Ehaz%!2%?Em4tG7<`5j!<)Oc(n2la{gv^Xa(v&=f0DJn(k2i1lk%<+89B(L{0
z+4^G0gjf>>@lY^ZTI=4~hP^(>qxiFfi3E^=4S4J+hAWS`E&4Jxac21IGqsy#_FC)^r&SR|0P@
z76COIX;5D+*3AEVM~S8Ct(Cj~0QBGftGux`X~!A{0QA4-maIt0HD4@rtkMuy9rbe;
zfv-F268jGvs+B>^0E{o^9nf}fA_!J<5USB9X7Pj3>41atd#DcZwH@w|IHI?YXX8JJ
zOt2gE0~y)ve&4}#kA*IjIo$`4>354x`h`;is!p}$%l^RGI19UqFMviaOsc|scDy9C
z*-Oxg#Ziy=*do!Q$E86qWgNY^Kd6X13RcMNS#UgEBX*oI8HM9)bHJ}W9xwu8*rZvn
z4wfA1-5Tu;4%h^2i>@FM1$t71A-mCB8!PvMK{aG
zrozTm!uZNJNx3{bbPo%mTGh_edqO}IH(eBu&-zG-09^&CTMV7M$ZeCRF0sHDwn8IfV$tIsj9NIAe#&e$S&<2>Z`4mm_j
zNx=i`1X%cp`z+FR4wh2w=O?xg`GXEYb@*iBBMpL+8_^}|i{9KE+8Rkc1^MqivXgFaK3Gj)k@QB$-!RQqNjZ6E$II=76
zlmLWy1+j0ltvxIkLbYMwtG6y8FgIEa2>DQ)Y6FR6Q!APN9a1MicLq;~b@)Jn)?RoC
z*ps^NS(%&+G<>lR5%h5_mLqe|=M1u9N{LFy{(HN6{53uPzLAkmaMf$S?-+-tAeqAaX*^2ifB
z?~)+0U@8lXtwO3{k1^3pCA1tvD;u9=u(d>on_hrZ`09W$QC&EF6a9QmJT`{3TOdkF
zzrc+(P|Vp7QN3#JaiQse@|mi$cK_`AGM!ZN>FwH*muHQSAMp)sdLp^@A@9z`I?3;=
z9KPE|V%0eq-ac_O@fdP{JL2QRo5|w)cLmOHcVpsx^>?;#@YQ5bIU63GWSmuovxNl5=`_nmfiH*Su7HZcdp|$MeP?qnX8mH1%l}`
zM6FM)zdI~0&go)c=H<{s9hoCHqOpeIhT}uv-LK{<=nK+i9vTzz6YZCZwveqqs=4tm
z1?|K3lEGasiY^st()PWl6fj2tHpizt-Ih{cTwym!7&p9;#YJwN5Mv^zE`CG1HXxsT
zR^}T8Pl3h(?XzXVHnhXwG%Z5Lqp8hY@a#owch8dxqAJeeeMQak^cED_px#ZLk5=GH
z?1nwTjtW4#1wK;ilUbBPFF(yIU^?NWiv%+9O|`jl7_PBR*ddTw8WPJ6lS0Ibt0RMH
z_d$J3?4}|i$UsO4>TXx2Jjf`_3}>Ik$FKEs?8K3)=5)QbhEd_b0{dB+c~2$w%nwmx
z@p+2UgT8ykFDrZ>0+QSmaM_=|hwsasYZH4~?Mo%H9RxacG?rvL?AQBL1oD}FX2Hi`
z=bA*_%ZV?8ToamQvkYml;ZuvixLtAHRXhwTSB2KeZqKd^q`s_>^;rN+LA#mnkT@HP
zO&sSbd(=r5oJHh&s7aJMuDZErt_pr5bl~ukl>$i13GPJg#l@#U`K}0p2`2BM30A1N
zhMu|EArE03OU4wnh>7?@lqUDqIp5IgCO0}!R3tZdOyM@05vz0_anxi!tI*OvRFk#~
z_v%jyOGesqHe^4KI^t(*jERXeFMXxa!;Vg*C$3QjyI@_DZ?(AuO!@1L80U$iF-`Lv
zPX@bc-X|7{zF*DZv-GR}kEZL6r?UP38c$22Jyb_i11Xh=TSY0OQ)t*SvPmNArioG{
zqJfinI%cx6%Sh%SRcwVpPxW{#0<8yt+`~AMc>b$B}+Rj#?
zD8WUYLTlQ?3BLsLjUN8gK{qa$(coNKxUS8<9|gg;OzT_Ic?hol2;7(i6-$;N_B
zZH?|D10Ow2h(u7v0B=IGD$ou~7?1{=4#&^!=q_4Q%(G$swa58$#Uc-%eqOk?YwY+J
z5#fNvUaal^9W4$#=%mxc&*KRy&2phEc{@|ivvxt08aA+M5H5~mI-gO)!8mSpA>Jb2
z@Y@wmDYKb)%_`L4G?l46rn>FnUYtV|l?(gHh7+I(s=k>|40$LXdU(ViVLi?*H*k@q
zWRR~Yp4F9bgR&E6F*HcSv6x&w^2Gq!CDo(j4XI2pJQbLzxF<>u_r;O3E0|HJ-ceyR
zSJrBOFOG)FEdWO-Da6K(fm!?UHUmFwdsAw8f*)msv;fHH3=oSRwW_Tpy8{TjVm9A)
z{usqg5CzCFv1H2c(#Ld7aBH`;j|N5Drf}gTV2pp+6DnjdyD_p;37Zv>dl3cO+kEwU
zXPPn8H~^3mnK3wf78&CxqKER1Q3Jlok2rF^x&;?A`CXH;VHPSAHk$Zly<_P9)wWLB
zsE!=YohcP%4#p3PaH?L9}GF*h~wuXjD(|EXNF(QUw@`OlLKY$%c#6#>9pp7DOz
z*u{Htg>yvfJEjkQOan=w%4?JfNS4EkG;l*k0Dmk$`HqzDL~uNs)&|4z{
z0uM#JVio>@>OFG^LGO&TDU4G+DT5Q~sF)vFFYE^?2yi&F^(MAav86zD(S$%u9NDcJJ^3R5dHzr)tWr`GVZT_Lp~#^Hu#C6?Zar1wP0CVnV|E*9zMikm&2CNy>)mOu-5jJ4iE+e2>#-c?x7Obmgx2)*oJ*BlZn?g`Pj;*``PvKX6WHVS%>G^Zbg0q1$&H)_m~Fa7<)vc*t#pIDahX12}_s>w~76hTW|Y#U6Mi?ewrb3$XVi7xnEKCjEV
z1T#VHGhj)43E{LhCBa#wMe3CK>vgESb+>^^m$Lk9D)Y3NE$Gu_eP
z@b^SU9+0#@5UD!|bWD`cok{0VulHFJGwL|_Thbg&TZ~)ttRe>S*ADi6v^uX%hcny-
z2pxB16{FNBzBn;0!&j-yl2?wwRFUrv_#(0Hk$kC{6yTQsO8M73K-AbA`&55B7q*_#
zT&x7SfCd+#AarVayDym97}Mi9Z&2Z?$ju`+(c$&no|$88c^$@fE+@8yM%NN^1
zZ1&uEVkaMITI|?{dcHd?RQkkumU_9&Fi}1Hil|dVJGX!`&XQ3hExvmncOQTy_^N%h
z;dCN%pkI;U1*#iAFcY+q)9RSx?gR0lXYhqa4%J7_#ZL!ZOV{#`NEQ|qx<;O5AA>@w
z{hTKEra><(3oFXq$vJFjd}6SKn5MtbpznOP6V&^e=#BC06b(p^
zoo4gdo_KKCq|O+OWs{^`~5-EJ(2dpOq7P61QhkVvP*V)H(!QP|#)H6`!Mv0>7z(J<fRXF%mc8mjour$+1v--nkBl4WgR()ciw9kF99O6jH}e
z)YdUF5=$V?Ho;{@c}ppoUTjRIrk#2X7qv#N9qVyJ;E%4&ojY+O>$?GWAHg@oD;2yf2M&{l
z=^lZc;*+s;RP0+RntiJG7^aX{PD)?2(ELKZk})gJwy3mtEjgw_bhUfh&;Tj<*(wq=#2
z*sWJU$q&=rp+;JU3?zk{VA*SmYcY7~;ZVmI=i`P~TECpDLYKi-^udXxjquF=NP4JwJ;qOIMxgjABc`uh9#}E*5szavjPhX>Z&*8*WZ>{C$hM}b0T+kKkTGkRl>=ZwX>{o4+6Y@D+F
zaH3R?q}P?2SbmcggC?jO%l=xqzm20HSofPO_2t1=(2TE6e;K(^jWphug2~!B-b3l1
zSC{ao!8Q_2KOT`z-_|7C0+rQ0}tD8`Ix({i!B5HY2p6}P1b_8L=w
zyMmz6uCENLuRNv27J{cr;3Vu9P&muuFw^u-b7}D$>BJ*{KS%1yOS_h~8=bo+_aP?U
zg2$=2pyiKe?Jv$Q$0Ry;-UVfh#QC20a8vtG=Vi>GUgs9Ak`w98PD0IPK*mp`yK-fc
z%J1V1^fN5^FYFX+6Era2+1VIp@*@7TomWVV7=@_t1W^?cV|9vqZC?%DPHqQmu1TQzDXQx6qDPOUR#k#_Xc%H2Dkk3m
z)Cet?uA#qSnaGah=sCq5?R7qWT0qljPj^B#7L67Zkn2zEw7#88AJT{QUXw^SyozY&
zXCm14H#$nN?uQp)ch`hpz6sfMFg5A*H>VEjlC)$v@Lw38#uE4DzGSlXP}gzeu9uGy
zvf=MLyu*F_T;Nkl^ztdmd~MclH0qy6Po9Xvy0<;5^Xe?nMsAXL@Cc#du{|apw4{FC
z$MZDu-RD)Isht6+-XY`(j0BGI#q+-35MHEf@qiDf?50`S^p~f#)JC)8Muxn$uJhZZ
zHJu`hH?>=|Z4p6+q^XYCIp84++A<(%JbBtY1et;-*_dMDNTeF+F0bvh};UTMM*bE@4bxrSWGz&A5vEqbN{w
z8Pvw+S3@V>=}HJ{EJ3l3XdOq2F%p@D?cLlS!&M1daUY+0NS0G0X=SlfL{|A?9m
zu=HJ$=z0Uht0_1}w+-cQcz6nE^nIgEvcP%yDVD>LMDJCA{@DIy^a6P0k=#8gXxd5S
zgpc)bBpZ3^mi@J+C?tI~0!U&Zpuy>|QuzNjZyfNyT5bWvD~{VjqZh`7D?yUkZqR;K
zdoO2K0Fh(U*A`39!a4@qj$ST213B`7D{FOx_Fn!rPxt06k91PKxi8<%Z=+pQpxAG>
zN@(A18ksMdyaO!ISvbmJazDE~iwhwa;yA~5RL1jXYErJs@t{?WWIxy)Jxy=8#>#^q
z@&Pb!8b+rs_QSzX*X^rm^izY}{b&WK`$@}o_r^d;W9+Y;EPYc3FE>`HASQz=SI&8z
z$XPo+Whc7>N#ybHjMbUmt)L3iL7+-hmYoti-@$@tg6k`lR#07&z|Aw8^~`9tJ%t`}
z5z_Z#t%vW|j$ZJI#&G72K(uv)rMczlHTQ%-a(-EjXNLQRFKAKS1ksF{R*VBV^B%!=
z-wZA8#-(r@kEwSDNC!kdGdZYQEo7z{vzRjE;0hli$Cik}hP2TtGf1N6H0y&;4F?R#
zOmflfuS~YS4waVj!Ve#Yl^=sm%X2sB9?%OD9v(>g1e2K0)`9Ecj0c(g$<4K?x|N$(
z=M`k(BnV_yxpD?**T}StUQbCTxBcCHgtMz*^m=e)Gb$4I|CTf!KBPXFU42=KFy~-cgv*puPBD3UuFqCS{`WAH4q}?%7CPGuH-g
zfcZ2%pYxL22WO=@?@F**xk8AyQtz=O_;K!z@_}P+8cy~&%-IFC$GE0Bw514v7j?v$
zosuLY&X$kwO0YcM$7c(Z9A+_4eU#f{z2IJdD<{|CUrtMbrVZ;9G_+2obee947U{Ei?po(R;VyGiunGHVo-el?Mz-(PdV9lj!jBlW+YfE;Eh
z9AhQe9_EsOBIi`A!j@7g7a`8BcSN1FdhOxrk@0!p?vKp49A!h$c3}*vaf9kD+)V(W
z8T774BpO`~Fch_CRs*Y~{@xQ&0jb5)a(lcVT|MUewCG5*Guh^str7n2sAx);wT_F8
z#~ZYzu7=N6!&d;HnFvFvp=u}yX5d5QR;_k+kTlh!l(;
z6~mRUQ~aH6Y}(slD}ef?aqak4W9dxP!7`siW~^
zD2iOjAttwRw!$4S=AAOZk7cIq0aYhDNT}l$&WuFv5o^h;6gpHd1tC^VA)L@^8jPnO
zn**kSJSYwJMQ3{iqlKpiTQ=#X2FY=}-V|s4MGz!`1dLyQ0?3)Wv~e-Tq_jN9K0(%m
zB>`CC!prUrrp~?B(L%OynsbGC$_z}*-#!!vX;sg`(WV-tu<$tgRW9M_H_B0XdHmF%
zT>BRR)@VXz&gnTD95EsgtCU$(PxF1Bc18xPOoJU#VtrdttsDX)i!
z_<;Lj4(Q&@L~@!~5F}5>X=IAkXO<)ap8mXt|9FEbGrTNwNc3A@&dQo{mm!OY&m2m*
zhrcaWrwp8sj*L35{e$z|ZB~-(WJw)9IOo(^JmQufWQv)
z)JiI*jtHL{T^Obu>M$~)2z*E5D?GE|jOG4p4WD1X)=&O571{D=-36spTaDG)C!;tM#3nhB&Z78s2Mql^=&h#FBs)E6F
zd#*Szgkwx7%gB;J6J1E&c-wR(Un5qQy=!LNhp_u7umN9Mw5B(iaft^KJ9U
zK%={#qiHIu%aZrkaf-Vi?#*IaJUjvkT~3tzj7}s8jA1q7>JP(@@DYWpd*y
zC5G3H@nl=%7OM0UqiXH&3baKBE_(pQ?KMMHUynI0<_FDElRFYVJFUL&7I5}^wchv*
znZqL>&}M;nBY~w@-bpKwq2=#p*rqB&RNGQ`p;J
z+<@Y&w$1aA_zP)Y@_uK5$A|Ci8uqxRboPQvi^4r`jjHfe-81dj-%I8mN#tR7EBpY6
zJ;ZYLC$118{5-xn0JT0knfMb0r49f&jRkQ(FjpH|{`h6R@Ua5q2As9!
zfabsN$?KHoSfQ|95c4#&;iXA3r^~6k0T3`qTjE<6y2pl1BYNt2ZAp3vkqj{Y9|;rM
z7fN>#XlM=Cg+r&U@o}ONJ{dG8fo9R*-28&uu4)6#ywd>cKTuh3x`zlsbr+ZrSq|@a
zBY}+0M~@+b2~OaTZt0fcTi#xkMUO)+|DB&tGc@3yoq0C+u>$l^B~wn5t!yEWJSTk8
z2Ct&XqOR|6AqF$TH1I7PeL%+Pqn{4E)TXpGtWU>QX93ZKJKx0n+liju{8;|SeZ02L
zNB<4uKr3N|hVd5!e_E4(+rB?FEOg?bkoRJ<_hpBSjy(FlzUQy$>KCi`O*M+Cz1W+h
zcsSKkl9=^?x^5O0@EmrIX9Z6){?u^M`_G!0M2~P5rUFFwseI#GD0XHg(%+8WbTW!?
z>k`#Mmi0_RyLRea%A9|lmj;DUXqo?wbT>a{u_c5#w<2WzNqxrZIema~tr`fJr+Pj8
z5(nbsJP-7NM@Hi>0cp)4FKz|>+4$28CYTV=)=v|eLzVVdW%u9;!E9{IKnrD09whQF
z6ut*CrGec<8{HNLsq1C_prxjkPYFF>6&)7d$NiklIV$cFg=x&45;f{i$xEN+YLZ5<
zK?7BExht&6tY8I*`oswE~rRLU3cXc1LZ{RP5;JO$G%2O|Ap;5TK6+}N45?HYkX>qS1Cb@1?g=16{B7oBZh&&c*V1&%
zaLe2i)X@dG;FKdzL6uRB+;(=|ad(8vlKm
zXxiwvPoblmyk@m_ac+fKhd_1@ETA3BeozZ`jM&*Sqg(WEdhkk^DH{ekQc>9c96aUzk%MdHuL_*uyMMrU>5b06
zi~~za8|T)UjZO)M$`3M4o0rHtTx*O3GJ{Jcom(zD1~ia&VeG=|14Kxy;;T*2z%ANN
z%HMNj7+wiqMuS{O&LfWk3MjsxIKOzIC*F_MQA;r9LHJ^W2zH8%qgv_#8h^HNm+1Y|
zXyY=3ic$$>V%KO5C;XkBlTS_u+MnJI5<1gQ?DZf9ch+>W%xLjJM&g1x#Uh!kn=}Pp
z$dP_RWIlJA+p3RHII2>F1fkBRcA}&;0wr52qA=MOsaRdFMEs~i>(({n&Ps;`%t4XT@of4h-K1>zC!@K(S+hj1?SrgKxrc%616Tq*TjK
zm0|Nsqi`{lV+o9rbBQy1hDtsM8|j_wWM%)BGCxF9Ip4XQsT^5JcR$
zh<5O~t*-dam*C#ri@}U4&iZ?BkyN5II!Nh1vtR|N*Q+8cr0a;EW55p#rc)BvRaJEb
z^JEnJo*2x#nz<59aZwsMuo%mT1OrqEHqUus7Fqd^?7|OodLRffw$+O(EThh#29-PD
zZ~H8DfA9(SHa;G+%+w)6TN^;F19ndHDz@5w!6+_5DcAvbRA#D?)I1obyzZh&0RUXRazIN+Z81g({CUx!SrmF(NKj-Oh7r%^uCVAW`#)T|&lVyFKVdi5we`YwNk+>t-on92Yo%_e8MCS|-4L7G1&
z5;EKw0w=g^b2khbotg)#0be~8>B`97O(M77MjqLaZ)C+NOyGcc%k`Q_GysPffsH+wNe-s6o7ms{3chA^+XfZ%#*Qn
zr(avgSvCl&1xbAszti12V)0n7xL(LXdPKN|x&
zfPk*;=B8KP#wh^;DI)G~NqZ=?tnk2v%roDn!v+QSuT!K!@OyaFO_y6>
z0YJ|9hp7ob0B>%HBLmeN)^ip^*n>F*a+K*{gDSXK@WxLV=Pcx4Znlg9ITQh#0RrX$
z;M=d~fpo!L;GaJOu@4aMv7qo^ABgf+6|L-mGEYgH2@N!L0#h)2H!%tLv1Thy=FTZD
zur?Xaf99|EvIZPFm|j?mdYplN;LL4=A1E1-XrMfA<7%=Rq^TayjI0VUG9c6f6m0_D
zAOg8Qx6bz{yR<(Rtfx&doI8;ykv_Vx{IrQnNo~2U2sJZ63^x%hNz9O+3BjGQ8
zH>gg~EMkCHHwBauC1@zO1+maRJNT%V5ARnIZlb~Pe5Yb(snqaBJs_Yp)SlRRUXcqR
zOCwg7RS5zAI|_vEGjc%9lM00Sg{~>C+)xOgEgfxs{_$9Lf537fG$k+9Gf614bKx{8QaX-s
ziQ-ZzFa)+4aO%mkze0K3F?6ms%_)HjKyd?wRlCpuz9rl%*~S$`hws*UKKvP(fGZ$G
zh90-8@&jjpER6<$)~^Tbs&L}U9?2YzDF~Or_oa)>8_aeO!W>woiAVHWZU#&;1VRqX
z-q(kpc)|VQRW35=uCa9BV!ZkVT#PGqmotw|o!da}oTv9cSYsj~EgI!x)h_=^yv53s
z61$k^^kyN^meG@RtmYi&))f$O;O^T#9QRF*<4rRfobZoC4|Wz|fG(ED(#@Mn=Li@C
z7%&vb#WP$_mt%90Ft8wTa?+h&9kJEHh;~^^55a@>!F73@?I~QYXlwj*mkWK8%-NL?
z!f7hfcRj&n>ZAm_n`d9a4;*g^YaogiSpWy-7y?k->&PB9@^XV>u(V!t7UnF>*|kY5XJ3Emh#lJAMx)AG
z!pS&ztSXsdn8&osu`k1@aBuh(Sj*tz_c&qm_GJyI{g)V2estk#=XpJ+IrR~4T7C(Q
zEC~L>+t*Js+Dm%pL1uE9ItBdeqn}69uT7&+&R{o(b`l&}VLeJ&Z3%em4N|xJ4D`9@MSQPej-KK?gEDiFBcAn?j~mvD)Gx#txLrSjvYg^j)}S-m7sAyjM_@Oh0k3@V
zfwMavK6<$4j=-?Tq4%o=i@%;@wF`Q`td03;s(9G&1m_vIBJ>nI7(mn{0;5d$J~vP>
zZ4f@O{5IbBrjFU{*USa$1x*oAL!EmkYoJ`fsz757Cs?%VepsLj?~%mqLS
z3G1GPaW&EpbxIaxoZJ1De73SY76HusC~Pnadt*7ro@$kRS9o2bIR65
zMVcbFLhaKtAruJXivVh+`yO+;jkfe9iWFvfuCxfyEI+d+h_*G-9H$vBI&K1lVj8I>
zXPplKeWN^~?_-=>C)%?OfHrvEhFXZt|AFGpG5~ngd))0j37f_@Csshmy_=LtK4p9h
zu)UN5{JbC`|?54v^K@mI!GZbRV!p&hf%Zg6_j(XR|)m*Opq_upy;d1-maHln33ZMnhbiNYU^}U{u3XsGk7rxFzl+Dl({3IR
z*#2;i;=lj3$?cfmR9EsrgWzN5FOVF09z2-#D@i6oHm`}pqQH$)pGrVW9wfs2q_eM5
zdVSPzI5r}^-3~c-D=LY)tnVKenyk}dnSV`UrqHE7WOD_x)ap%b#6Ow5)An#!0LXb2
zyJccqY|pl{&}P_#kctBEzC$wV?`VBYy`TkgO0^@}?q*pBLQ_8`Ow
ziJzhxW=%;*a%X2w547g5QDFNWUTz64i8sJotbu9=LC2j2Qw_>KBBVhl4ttW5vm*|QSde=8OjH~U
zD-={=EC<65aH5>r9JJEFMX(O@xUjTY_FXJy>=qgeAU=>5ilg^Eo3P-_{REgcsh(QZ
z#4VbRnvRhC#=dDzblJOO`G@Phbf7K>n>Zj-W9ibGS7Z5|nXHM{4)bY6uBwAggQ>?~
zn%?MjRFejvscs_)U91pCpKY2rB-s9wtw~ANxkJOy)lmI7a**%8vs*3{-!;Bxe1}V_
zQQGx3V(@t0-_D-x>%?B0^XIr}oal+AyVp@GJD^@}CzInl^oZ?@z|@c|ZWeQ3i!x&Q
z8F%Fxw(H2)($N5TxN|b+Cv8n%rluqzNKhp)Y0ga(7sZj~nnB~9C2!Thj1qGL_YcbJ
zniO|8S=e6$+DEUW+kO5(f&2wTh*JlFzLrdAkd%?d@41aPZ$I8~0}5;_q;_85X!^l{
zeo%3Or<*ojrvQ?56n3C0*(KfO-L;TNf-<@m2Pna)!aIHE?TB=D0u{}|bM;KgCaRUw
zo>T0U*67o#fD6yP80JKMa?){GfSWqg=N%oa&5y;F
zn&KxVSwX1vUmZD_+i}((QSL)oBd5_$Z8pG4xj@j7d3Bo9cZJu!E)v}5@gK(v5%lE&US+F(!T&7M8M&nk@PgfYavU@W*4t6Yw
zb}o?RSDmT*BX_qd{;p_D1CEd3+m_sps_j?a5m6;Wc3ZPlfb|^?1^Glt)G2kq_v_m_
z;`2P?X!YoYTdb5LhCeo=KLi4nFtuFfd239vpFRGGjPH-*;?`EFQ-Z`!baxzsjq6Gd
zgQ|M{1M=CGAOfxmX`Oy@6b|$RxMFfEdZ_^XEH|*dHe_x!Mzm<=&r&kq>cdL3I6UVEHI2+
zd$)i6P=g%0X)tAa@-3dzhZ-GvA=9A;G=&ZqeY4Kd4PvM3dfW@U)jV~IhNogP-VM}xJExrCUI!2><{9qEx^4e>
zc**3P87}@II2Bv+rT9nhmpr|NFDrLF5jeNPZd(h-LGy@Luc}4Z_w}4eEs}~Y9;8w<
z{Bwio`DnNRu4-E`cS#i2S|dAt@^sEEL$2QE}^#7jfwZ&I!Zf|p<)JqFo+$Y$i
z^0Lib{&i)_aepl^20X3Ge=Ay3wC4sl%hwVHj%;;ibANiOS=7-VTZ~>DJ-O4`@6IRu
z?t4oq24OG`s?;U{{wv>Q?9elOfvy+~jDJYy!eCiaK?ug85Seo(44n8YJM_3c{@E{u_HP|`;MMX8+Ul!w1aJ!>de-w?@j06^WB`a))-~UZ7DOi
z_;_;00J>lqoqg;*C0vXxafz=`e08Dt3%SA2;bwkqy(<2l`8aI0Ip=i2z1RnyCcZ+|1XF1+hm(|7XKJeJoM8d?$a
zes@4eRfW?vos@aMducB!#%rPh38^rQ<1fall+fv~a1!m@+|2TV=tn!KmeNzV68U>>
zX^~s`Yos-$7LAv((4|>9x-?-3b
z>yMRtMPmUOA+)TOQ4;?(v24>L5*%1w|MTD&rwUXxirKuXjws!QenHYRNW6()~jh(!K8yD*N6{
z#9-T|kLP(;?>l3%Xs$9f(I{8-?Pc0a$5I@9W3qg&89tJ-Q*8F$-#Y5JdqZk)+NKVH
z`9Z1rsJ!-ktNxUe+XqLu9adoDZWyrhTBFJ5!hKVzN}6hvGS~b($Ngp(-KXB)RkP*A
zpDdG8nK}#Y-JX!u{7&GIXQ6x03;cCQz#h)Q`S?$<5r-ZfbQ-dz)aZ~}dNnMUPx$@^
z+YoeQ{&I(48?%y2Q@hmBwb?~fV(SIjHvb>4?Jg}hV)k<`aoUS+mJI!|U5>h=_1U(p
zpBmjo4VZMfyQ*(piPy%qbN%Zti<(^9UI&25x0=UAlp>Dr+r{?)6kgbvkJvby>P
z+Kl!%M~mB5roIV|sg{|zbNZo*I?1xR_Dny>&MZAEaJ;A|Hu}D){q}`DPHTjXZ~VE-
z+LPNBZ+zvRNy-|Fhl%~4>sRSxG5V93(aGMe9;IvTb5)M}kHoB-D5z){Q>ZLctdKSq
z>sGn7r(5}~{I{~W5y%G6k497O!7?h*|f{rVIgzztJx}s0@RdJ<#W2cYmN>$}4-bhUOBv&cjq*SPrd^Ts>?WX(BK_Ur0h);KAvZ33x_-fkeh>ze6+1Q;?
zDh{O={a2E+66~Sq;rf`T0=<;ma&f$UjLf+*(G8Zr)l55{N06SniU!b
z_}js0;`7XJv%bF7aA-MdH_z%@GC|Q9KQ!$ujVZUQyHwwlMO|Dev&-;=eWtKtq0ox7
zHA^B5*guj>N9;djBxY#{{?UGZTkjs6k@__?LLpMJSecvLR
z_j=q5gjy#)#=Cdzv0XmyDNUa`txhR+-ug_#kY%6T9p3j!!|{;VcfwdHS-k8`_n*ll
zT-j9kiU%czF6}4$%_u!$0dAtJtQ`#74iqf4eQ7{DbCaN#&Q$;ZCEae3zP(%g%lGxu)K6
z*Ats+gJF$IN_$vwpySVpzv_EdpR=*pp^+-Ebor+3!};ZcBV(D0DmCwjiq5hVhU?TR
zi&j1c0-q@P;Y!Yh=7clL{@q~{JEcoB^1LfMrGyAg_>AQP!falH#2?O&
zrpejrg@~wlFS~d{hyD{&W9#?=Wy)?Rk!h`Cr>C?xj@b6{VbUuKh00tP=k;4S%rALf
zm=yfWo%#9G!?Q{(`}c>>Cu3E0UQUi@;>mmsC9fg*lkhBAV$nNfo_M}3cy0b5EkFv?
zAQx)U8c%PH!qyRg?mVZN)g9KY$M-}m+~)Q(sZ
zUL`d}GjdVbC6bfn+wV6%V@>KJ8>~D7o{J=x%Ra%lv;6Er>UK?X+1BY}D=yJ%wSQUMsJZ`sZuI8=s;6^|sA!A6A|w$%}s$uK{rZ=kA~e%WfKduVGZmhnbKz
zwM(k_ZSRAI4F!bpvu)SCFi(KM3#HqYa8AkHA5@GBrp0Besq7l-D;&TW`2ih>+K36c52+h>7D)!PTwO
z_MRY+o<#Mvam@6p{Qpk~Q~RQw;z;v6-KO1
z8vQ*H^I5RLs}yQd9pU_r{}%5bwv#W7F|<;+z2hx$r$18qm_k5nq2osfRfbslGJVMp
zBb!&R$(tLO3MA(Y(AOXIzx$kXFwc8+Sm!OS1%2FZlJ?K7vDKq{#2(u{`A}#D9MVfD2EOJ*6=TWNs>c1<)l_;NRb#)Mtc-X~
z<&0m#6~RQ(!p!v(AG#?bH>dh4TaKKq2PsnbT4oJ)`cF=EGFCna%&9$LzK?S-=;FpV*2DWZ9hkl&F8(CJ&-Q(+
z)Zf{SCuT3D(C+dU9I~A54qUQwt@>7jeA#$Qed;-sCD>+h!s*6hUe^K5x|Wcl74
z>1AYf_z_~90Y=EcvMMu6`J}OGQ`+@pviZT#Ewx(<#c%c=Jc6%VE}=kcD(TYt)|Xj+
zK4Q|`KSM@%_qRegNO;yZ=&sb3k!2`e>sN0XVEglbea&|JmHA6D7mJHb(3BWmd;Us%
z&}C|h^8OS?m(*kPt)b$#Cry_P{bCw6umV~uhmvpH_hv{e`VhE0ntW&Xg;N2GK4>p>
zVz9f7Pw6l_x6NHCg4_!H%Tru8`t_{#>7jBQ-@UC%{3@r>J9yM^xBulM3PX|?UU*@Y
zRTTym2Sj3q>Vz%Jlt^Q9YQFmxGwAx*>84L^7rd88)8BoYnM$5#r0**_u(Z=8iT~Q$
zQP1k-D3Ywce`u0((IK-c^9^H9yUa!W_?K0C@-^hTitlCB)E2&7n<#EQyyVuhln#v}
zP04g^b5>;LMu|0>{amgPMN8s@CcB)%2q<{N?uHuMssAb8h~l7%zrFDOs^1lnp?f8L
zV^>a{-0*Alo*;`lS*?p768EipR#K~AUDVR}Ny3}hI`(mLrQSmH_`sfThdm#keY)GT
zIil%b+eqnY`ux_Kc6O%8ev=h0Q^eDXF)*jwT~j_%6W+wcP#q!WNg}0
z^i@blb&l;lm_e?1{*zf_{rmiYd}E>V!)1FUmO3rx{jc{@qzZG%Pe>)fKes2W&Xcog
z_d?YvoVTMV*TzHRL2oWP%m0oEVAWX
z9M@2vAFDYNACXETi)9{(zFj)e76&9SZ?~Y<`R;xw9_jd
zCN&XC?l<2P55#IRrm~U(aQrJky16seqlLx3s%p7iYW#SKZYgz#j!j$;VOCjJ(!>bl
zFv|~j1OW%4`YQ@g|kNlX6*Gm@N
zWro#^iK@tQ%;S!#o>|L{CwcCzo&IiJ=VN-sFE1v()n7j$j8M3k(y56j`(2>rd{Il(
z)t9+{aQ^p8lggsW7w-hOtMaR8FG(XE?p=JA)qNy!sa4hbs=D*8Qip$qX)pTlFh7v+
zX4ecZ;eG%mUh#F)#o_wc#m$L{0iD~UcKHKrICudZ!UIA1cpT%d@}5ZBNcpQ1wZ=9d
z-S3Fom3-<;{BvOQ%By62_Z)qv2i_{LXP?_U)&5fU6N$ep#v4{wlB%xz={M@S`LztikQHca#q*|S7JLBgF~Mz>$6{rOoi
z^GNf6R+@=?A+>+>#W3ZHBb2%NxrYT_N=)3
z-7l0Cj`^)Y8tn|zCI42zx%^LA`t)sw4`tTLrd;j#nVeSg%=Co*4%tgMk=plaN#7If
z&&#P>HSs~G-dXIk)nE#;V@+ZLl_^VH?j9c4YQrvFxNot9*Heq_{Qu@)DbUIi{Z1PpGC?1iWLcntilmZo|+oVQGngy$aUfv=ta$
z7e~JN4!{AlWp~6CuBnk!oF1cW*<_QuY{GEf0gpucvfk^y!$!RgS-#zbFwB>W3YNa<
zHhCxYQg5berB#HyJGkXSv_W8Bq`iHEoB0oe=S$kFSn5R&+uFv>eh&nst)kt!&`eDt
zufqBoy$r#--0=OuGTn|OuUNbU#g(opM63#r(HQveTCACi
z=X$E1jQQ!o<~GOSM(f|hM*O)?m;5^ZL}TdKkZgVt{j$?3r*QGH`EknpI;r$`pX)pp
z=JUwQ{l@&m3ZF;2U(yb$RPi%;So~RkXgKc+DaqVIuzrcxQKo3vK=!pwIs_ZvWklw5_5q?40D=IeiD|E9>18`GwDg^FLGA?SFCaFY|I2=^byn7p^lm-`F@c
zV|n*cbWTph_(jc2JqzN-tlG$o>iKu%55z)}1XU?G_st+`fCEztycaBuBfbv~OC~z9^v0P5fwAe{MLt
zHtfctrKA$=o1Xh=_f}OMh;N{pyPC!Fb3+w{6_*Y4$lquM`jYE(UaVJ%D!g)VcN8Y(
z#tOJtHr!D8@`voJH(Fm7iTr)uoMqjzNs+;vd=-s7yQdX%j`U`q^7A^X*#=dG^b-O%
zzTIjXXx2Gj$`tzQWwvFo(a_E!@QA%tWyhKS1bZaPg5^ZYPht#8SW
z9)HJ5?y{YxRBFFJ*@C{!={U8XX=(mT+;8~qx))O
zeZ+5XLM};vq5CFDJ7aQZG^eIh+(m{)&r`zZb?ceP}6`xIzNm
zUm5?@`2YPD)yEN+wpH3F;-Tv|653k!fj_RZPBHNu6??5*Ft?(#$1C6Gd2J(y!O`uk
z62ARx$(jh^m5XTf5Z4>z@)tL2mqdT>9eVTTjk8Fi_{?{sx3^lz)k{0)Lf+l>;xVeD
z4Zi#F{Oi4qq(xB`I&u|4YZgDyD|WckWCoxcn5~BR0gn0c4D4gt$HxEUlr)Crxe?je
z1t#a`oA(#JEl8Pu+sT8Gsb|{B=b|yzx*e5oj-Pxl`EzaP8bVaL_RPbbcPfj#RdBt)
ztq0S;{@8ptAq|TZx>>MW@=So!f2VHP1>iw~_bMvZJ+OH{@~|-AntN;QpM4KhbC$oD
zBPFC#F{8(iANvWoE_aoijKY>#Ms>c18h}4hRFvdE-4(lVW)*&M?>e;h&Kb*=Y@a(Y
zEWc|cEYcVM!|E@&5iRpv&d5=eQ!^R0KbODbVyanT!p+Nlk=mDcMyhGkvOz8xQU&
zdH?+Bk(nB6<&2@gHLI0*w-Pg_bH3j<2`(<_Joe(X)^;Cz9=r78*m}_f%hs-*%!6lD
z#`{h8d}w*Uxq;br-}=RGU7nfFKGmYK%4b0*m!G%-`Wg>@G;iO2a0*NSH%$C}s*e-$
z=#YgSZqi>1!icA;R#AvE8ZS<87{t%_q->9p+eegBbFXh)y-(;A$G_xedGCJu*>&t*
zA+eO9R4GRF>9RkuNodYNel0!+u
z&>ad4EeJ@*P%|`0NX*bM#8CGPe!lnq{<-&$yC0qhIA_P&?_PWFvtz9nbfF-!+2jeM
z%F22!r6kXe0jD^e)=FxCxtoHN-1xptdghT{m(Mj
zln<#VsM>^oX(!3@uU_%@0bi^BfhO|_uOT{>*d-^wu9<|+3zQy|xPD6sv(Ss1vlbX7|P<)l=+3Dwh0EetFZ*gXYW}STzGb^Dg(@3?Uv222Ji#qLMda
z)AGXaBEZ)7>&luDpnAjEnVGYa#v(p&q=Ge3>Ih!8xWL&@6q^eB2oI$+zzzp-6#aP_
z&mH9Nd}+`nLJ*eOm2AxT>-Sn_=tr#btI{JIXoGt5+;#I!y!J1yLIN7P6ZS59kA}7X
z2Z((?_9o?FCnrdejt_A^^qk_5RUbAVdA9)ORLWKf7$B{UP#@#)Wa-&5+sNryXXv|)
z`AoHCwM*^4{ysq7Nc&s~uGJ%T)W06#dkua$OyN@Oz+JfL)?Oyx;I1018i}K3{h%Oe
z;a8N1_qhS?SHV10goFQEh`j>HS6rN&h+^ZlE
z=E31I*^9emN$Vl@3*R{+6WO7%^&yLE(4|r6ExKcN?nQ4*D=huLIcaDdwcU%2vRKp3
z;C|W$WfLwdh)Mk;AU8Ps+Vzwp2b|8txm}{S`E)RG*SPS!HkCr=x)A(NE!f5^-bHFG
zy(eZcP=2mG(77K0E>ddAQheIMIz`+$cciC%xh7oiPqf5vC$G_pJX9SmlMANi`IQl0
z44a%&+@|Q9ow@?j==Qm&|KkW#LkMFp?&|CFoj^I;_Sov$0buJUrVJpDAyf~;lMosGX#82uzYA@Z-jgLrI
zHOiW~xa$8H=kwx@)^6re0?zAdI^yx~zmLV?v-?YNa^L;79;%4F#<1}I@8c!ABF_{K
zEPOu~>O$WOm56$HgzVaz3;aZJiP>LDA>YIAFeT!u~}EvbL^-_R+u&!
z4k;ejeffIjG1vA~Kr^x8k5Q&XyuKOgO|l~?Lp$B|sS%mA3U%x-->3{%BW8g3lQ?Lo
zX)U$ShFpcBjWaB(!Ahz~rINyRBs}wwOV?UukmlQ`d5gl4w|7-+B>5S>BCvH%e{*Ti
zFP&c(bBl(?8@#u8$T3~B`?Db-Ue0Nk8L9rN>*y~J_bOuyf17_^-hm;Z;c4!=S{cF&
zLi#&aRygAsGIF1pp5EdQ3JQhVcEz5?uj%#!#sSB__4J9K=FF2N9<%!TJwKBCh&mcm
zgIig-xW$+=pT}o0);{}OGdVSdzo${Vzmr=NOa6^TA)gfWVCqLnPSG8zW2&~Wg4$I{_c?U(c-SCV
zNz||l;*U!dpa_UIdwfsM5C&tdG94nOwRcZ#DQl*K4L6?QzPU)!O+`m>+j(ho%w#QD
z9ZFjDVnAH8;Yl4{vqAX9?|%OxTy1tm7E_d{D8GV!5P#ctjLr{Fj}>3duVs3Rp^^B6
zT5#3(!5jbfim!*AbC*jrVifO#t_SV%ZjcXt@{n;cyul?{Vd`i|BMqdR(Wb82$nV5xtHE6TH0BuluO5&TwYMGm-%GGW@SF+#Mr1H9CL1}R4C
zg5)s^G$+cr`a@B$9g()~B@00{(9u;%jshgk=d9JHaHFZ)#!yadi_DW}b8~YN8jr
z>OmbR`576Rl=_9&!71SjhU>3htBbo@?dZ7gzMkTKBAX6X?g$DP3dg>2w^~CTL(=y47G>07O=Rf4S|O|CQ=asEUC`3PTH@x@1A>6B
z{Y=ZSj$y!_5GZJ@qu_~yleZ=;-Y58E>#?sOdZZ&YY%?gMX`ZtunX@{>WW*heOU!?5
zWrFpnjJQrAINGsa@OtB4-!4qxA;7SG(WLj2aa;9n<4+lmL&DaAZ!~FN
z+12+A4}KRCD$oYvcCgfgIAexm&aKF94IZ}pt2QU-W8G-9-zQ&b)GmGVZ^LVVOn~3s
z*>7W_1ANlcu$UG|>8E+{tdf(Ju7K>?ZI#$(DdWRfTM^&qG_dPqM_UE3AQRBVR6fM%
zjW)fhVQX@k)V&r+j7lIrr^oZ8q2}L_2|O2Lm6L$Zsk#@yeYh7cE9|w=AErmV3rf4clKp;<5z|+}d9k`{j!`Pk
zXA5Ifee{68N6eL>*E#488_UqIZ!fBiZ=IoDY$v($W^17K?-fs_v-3iajMmpwmB}>s
zeq2@0SkTDSUc9yQv6PO~(>UyehS5l$SKfFG6
z_69KYD%i$dr=9%uDqpEL9)D{-tb59R9!d6wna-#$zh{UA!l|9k4NcPqS+14fRC45v
zDhXTIBJnn-ULz5A_Fd?e4!Yl6M;BP#H&yd7g+GTb;Z*Q$HJOw&K>ZI$9b_*`X<($q
z<9M1(Ok|L))Hw_NRO{T4U}zPu<#}j4m@d`idd1CeQoM;X&dz<=o_r^6aS$zJrS;RZ&J3k{hP8F0*fbIG2!l~Euc8lIsY)~z3
z@LN#||IMvUHMeLT{Fq8#x@U{kphub*ns^_FTNMNSS0gk|d%+~a36$bF#TXl71I7Pb
z*`6iW3q&K-av-nx`Ey|9`+{*`zwh7=O#nrk%a3MSLJNI%Y)TWt!_gK#T&{^j=bnZL
zM(06s@>TAi!O(d
z4GM+lHT^?D55C|&{_+W`#((?e_`iZMUZ3=~mz~AyQ&g@E1OXH)w+%QXx2lJKPB$>i
zzp_&1K^$616(hy=``my1OZUJAV3yle*^HH{v^(tf-!)3>Tr9
zt%TYX1(-j+$LPbuEk#&+fP1_|{-%vsl_eWciHrI=d81S~R>Gy^${6}`=`cOG
z*Y{+^5AaKeFZ`$8X3iJg;gPW+GJSs=V(gG@0ao&ree+FeHRdy)f)D~S@~WU9?BPtr&*ZDd&Go5
zTeRVS`CPXuh3xG{NE%%=@s!{qVL=nb6i2T1GEvE@y2EeFCGNaBXq2z{6}{D8}=@#dfzJDwE0hd_8L~}<`UA!0H_ap{uYeMR^Pbj{BE10w_m_
z5icewXZ^-_10L|3P~9P;Xb+10!Yd#^T=B;lVm8Y`HlPQu)l|^DBW9A29Te+3yFy7n
z9?d)xN)pS~^_A8xE_JZ0zSUS>HN{Y*kc;};ePvck`!XWa#S
zNu>E0M<8|uzTV__ZRC!QkKQ9GE&L@KjLIAcPl-6g4WPOuIeWfbU*Dzto)4C)iaEqhT6x2yf^eO;uD=I;&Tp?Irn3&`Qeq>u}=1`%FIxzUydBs_rvcH
zRFAdNgF{wqhRc3I$i#6x+~s3#qWI*r|Ea;mkD49hP$vY+0LJ%fO_w{75+0|ji=K1p
zFG1X6Cn6i_<6$@5eJcYr>wsU`SB^69jUh7E5r0h>8Snl0#lw1^^kH3%-~&j@HpBXm
ztCX_*&wJPEZS)W_bd`Q&pYGw@)~OeL>hZ-^k(1d~x3;dD)v=MSGEf3?`>RL_Etfgs
z=OT{n_Q`nZJr{>Va;;Ge6PpZWb2=|(KG3ly<-7?$N2L#0)Ao11$ZM`U(H?!j7)$JY
z>(9-?h{8k}9>T1Yj-W|-BC;Xj2VW_tS}%uhswHJTJ>_}h7n<$yVw|{yW=(BCE<`?;
zvHN?-sA9Cp%~ep{+m|bU%f$J(|E9EaJAkp}G+kXpkm1~1xQC<}ed~ANigAxU1=n3E
z?|`2Pwy!PS`Y884Z5jtfGGrfpJ`vfE71Ba$bh%uY3>3_xFWt|wgeRDQQyK2=0EsYEZmP<^0Ovdb}-
zhxqKqk5n}(K~F&Qc;ZUd)GylA|2$Mx{=04X&Mnuw7Z0YWrD)oeMx*TXs?uFdl;RtS
z{@ojUb9a$cvQA7|?bCX|??qUd6imW~FwA;*6ceq@Gs|0hl7QOGMd&o19Osj_3daY&1*z02Un8tEhFXmu<`~}=38DuWk`AAI4t$<^wCLeWf?PFVIR1Qk-}m68kJA84ebV~FhfnWgMX;Ib
z!B){sq#k4C+L^|P-Vy1=35KL9#mIdjJ}s3onyx6VFs>h)^McRaB_+C58d!uS`Fo~E
zmb>eJM_v}z(0I66*cwxIAb-bm#PZ7QZy1((?b-VyA2$Wr0S6DY@u${*AxSOkD`jsB
zqQdV58dC)tC(Jx<3DV^b>#D3|ZTnsM%YBJc<%@X6ao
z9t=(-Y3bOjJ^KB3ZqKs3dtBg`abR9aoqEm_GquHs1$_+470H=?XYl72S#P%0jciqv
zGwKu_4NvoMO}AAIL|bjg7;si_x$ooEpKJJv2y%+^6t@}rAC5m5=Zfuwf%gt2k&lPL
zm>=WyVYt-m>iAe`yQJNlQnQ)HbD6=98yGGirk^M@q)Eb9t!QQ0CtkO!)WtqS75)fb
zxUb`sxaegJPJ>T&xSETlUGse%ZkagmQK=aFOdL|8Va>y8LH;73S1Hph?pe;r&}t6E
z!HE3QiIt|!h&15uiwM?djcj-EK)4CLnzhB{`N;YD%PsMOw!(^B=>*ftAN^T*??8e7
z?Nfh*VxC6SXPoK0J=*?z)B|GSF_Fa_BkKL1nV^z$}Kg{69h7`hc
zq8aMtylHn|4n!IfvaIIraiVv!x=9(FNB_--j?p;ss5;loF*m$%%&Vxlhy
z37f`hO=$s8Lp~KsXhhJ}3`$e~qBUE8-F^Mz?T>Yn^9vt82ctX=Flq;v&nH{=0E0^F
z!93){4179ZA{41z2AZW+3uoUR02Q2#{zbX1485SGzN`)+n4dj-
zS%}QQ{~;KOjWCoBk)ntRHt!?W`hV4-1l#G(7x+C#Yyj~6|JuHg%xHf-{VLI2qEGLL
zpc7(6@2-R9`zrkicToMF&F=bV6^CuxhUiR|F2dO
znwKm_^@JCEkpC{3I!gtiy%%X4v@uO<;f~Uojv5OOOgykL2XWl?KHXaC0382@W3F6$hTR9q
ze*1w&A$oi%AN=(l&dS~<+3^nWe>(oLuC+dtL$1z>pa>}9LDdBeH~T7JsYM{&mXr@K
zLJ~M!h=}M5$ue_uQOo$y_~_i+pmie;fhGY9;DziX;Ee`!DR+onM;O{l>Vzm5KkI(6
zS^{M8*byjB6=$`kHE^PF+tvGxO{(TlU1imQ6Jo$b*eiz%mjrRI_0x<$hbyD*p;0)LRL=55*Y)s(4>Nwmtp
zbmmn!a81yE3{XfuR33iS*+uRc>-hY4h{*c4Gp&GUwb14)@a=~@MXz4`7w<6xs$*4?
z3GzarUL>??-TWZNJ>n=(mkF^EA)=%^G{P}McC4P;3Y30Vn5ziv+VM)SRKP8L$tW2Z
z?zrJxlJmvLZ1&`;m*hJxI)g=(*|=n$VI$XP0xQlpm_!mjP*D>NBF
zRW*0~R{@0XLL3Xh5&S+O?tIBVlxIhsCpEEm&g=04EEML8zbtS(V-XR@r9J^K9*(df
z$FyPRb2hJ%%?QoS_&TK!!d(9p?*6>j+CJVv^F?0&vbL&*0hFFCcGBE9!etiWZ}W`J
z6D>`5n<{=P#+;HdwIcH!j@pEf{I^<4AyV3{dLY(WApRIL-Byj%OofBM4^GaaM*P)X
zajTj&aCfkZ+b-Zb35voL5XBnI_r-*mx`)8E*Z0=_9EQ
zHrt+H&HPf6sm)q{>l0R83MFl3s1;|mXcexK3uyYevA
z-RC=3)uNMg(k)!hGI>4U<&k
zPCW3F{N%aiD2p>Zw{+oqV^D4I(ZH$Yn
z+rG+Pf+qYMSq^!17$TTZ=ev(!g~;x*&HByyZ8Nbd+933NOt0q~TtOZFIV%#Z=AW$<
z@W2KA+bsvR+$=c#k}$0JzXY6rG&Uif{O0;N(%v7Ag|4c3;%f6mv~Fv{UGOQ76yUs$
zxF5MoTGWJI{W?LU5bUP_U*A}bY2Hhe#If;1`xVXcvO<6I!S^m=r27$QyTuz{zv~flD6FHY>rc3nA9a>G&{@T33B2X&;lOtdLN=wlrYEPITiV
z1eG@p;ay)(0S}X>f}4UMHN$zfIKg5O;yz12pIrf(CiI>07ghihI}rbBTOMY3gFgxC
zO#?k1IE10{_jGgS}NB*|8w0TnGZS
z+z?WunvYLOfysG^dQ4dcu4NK1xY|*KQ7hxeM6DPd>?LmatT3*%3g<$A){PDkGz27n
zsSnlc(bXofei7XW21M4Y_QFYX;@4`Mw$NRfcy(Q9e^I_&Ey^Nx4zv3#pp9FcT3=}5RbrKX24?G=WMz+2N3*_RGDE{6;#*WDfb
zV$U7<<=OdFhZ)5rT5hW0uTIXsvrvA~c*TItVcH%2(4y;TsZsOY(xz9pC?~
zkPkDPiePu)2=GiBgVPr42f1#qONWy0J6`(d*g^@0VM3n`N?-+!*x`*8Zt7?6u)7Yr
za5W51$uHO^j>PIiI)Amylt)A#l1j(`t3nlv?*+IcK0AD4XGN!)bHUMB^Ik1U
z2@D|9KF`Dne*RRC04TYCxtf^$)%%S9?Mmz4q=ml}ravkjNPSV_+IuxDw}G*i^U@NS
z3xCps&hw_|qm8$o(fe?%|Lfs(=+8{iCRdy4&I}Ei2oh3*^(fC%qU-dbRS$lpPXz@J
z66)Eh#D@Tv;O2|m84Q5*tn
z7YaU7kjzQ_pv-2kt0~gemHqI+y8Lt9g#3D~Y1Y{MHo0I8;EZ_hvIjepguf9@EtdF$
zNiD^59WM%!N38VgA02|J4h=y-c9}}X8rb2gl?6o^m#Lfad_SLM_>?mW0j_jSHaH%L
zBua`>7m=P;7U9MhiSgN%jzj_sBnHHRbvc&MQST8~8A(2(8uZf#zIITrj`nu@TL32a
zbUF&r7P&bqS+Y5)uupSdDepA)jxqyaGi|YC%(1e6ErTTo2wp-oi6TK_o
zaXDB~<0_fiap}7>8>Qhr10#W5mk#QfS!WYj=o@vn%VDMcF!M}JBoHUNs*xym3YEt?heCX71}#
z-IRAlj@(%=ed#}HosWF`YsVSJi4V6Y-(UJ=I#&gT1H|YCNgTs}%SCHX*xBv&R07q?0azJqnFJsRk6+rJotRPYS-pQJg%f@#{IYy
z>0fEc(=2^pW*dW)i{&{;vS`VNS`wy+Keds%@B@B{>RpyTky9wh_mt})G;?q9v0t4<
z;Go4AUVA7%Nu0%=qxPf#+Z}Qt&3d2c6%~2e?v3jjU@IH~V1^N|mh!8UQ5GDa62f-52&F1^cXp5k>2;fW
zmrd^=aIgcD39%7Dk6By}23Hb32)6WVN|2x3p8m((uaE$C+gRm8Fh#{yDVjHdGHzB~7kp{A!_{@0S`Bk*9&p%u>Hm>z!^={9Z`@3i>1m@GmaMN>EF}|(R(gUE
z;SK+tAUkE=ers+4{hyTDB}hMM_;F})a+~4QlFq*I^x-=__~d%`L=`nV*Lv7;k_gx7
z=Pgb}tADx$AjLU~bBVt>DAQ=Q;yG&$mrdCZRd@z6NSy-#)K+34^9OJ9Qi9d2ie>)~
zwA5taUXwl3O@4EVq@it@N@8{1j^nGT%ts^36wnd#F?{FXUUWdsVmmt%5sd!sMOldN
zy6_npQ8it-x8j-=Faqo=W<}+unL`FG)QI6G8t1IpD%99Er8A13FEu&-r<%Uy&K<={
z62?>=v*{dzgI(j8#ZjBa*3@#ByLqo~*Qv8l<>*;{`%o)DRa&WETxoTC-TkhQ^F&In
zUGe?9^V{db4oVU$N|%sIy2@Zg7x
z*v4Y^zKT{TB9>|5NI>(S0;R9&+dxT&gi2tQJlhFVrV97j4#&?-w8!z<<<+F!aWB|B
zc8k&(AFy1gTl$>7H542%f7)GbSF*B@_p|&1x8kT=w0VquSzb($C6sg{`}>`U=S$;4
zIu^T9AKtHql3#R?fe%Uuu%pPU7zdm#Xtz_(z1n3@xehuy{Tu~zD=NgT>dQCZo@@^K
z^~juhNwRERx;n1rBe3lQ_#a(X$C7V`^){AJLmLziG7Zzb@JEggdhiH?Q4=P+2MH1u
zECXgTC2jXE^wCnFLl;zJzo*jWkO}eQEFa8MtJ!c_{G%q!8U&*CBVA~poW77~i|j)o
zE_gn=vY&P)Y&~6=Y9%8pnOY;o2j=#ctYIABK!wG=Uk`1m6$toG4xq^UmI!&s9Pnj(V>X!
zK@mjycQm71bX`?7DkvJoq6sX*^}O|<`8v>EFz~`U1r=0?>R1D|22C|V?D|JK_X0t3
z(Ts>bjKr6PgT9Y*fMBJ?;Mi$=0+dm12q27<4yU@_^0ND7!Sio*=Q^znvMDCbZLIg#
zynUW?>|b7zDR+6V33_V;Pz87bvMZV4GIj#_>tTQpq(G*C<7#u@F{wE&qh)0`u$l)i
z8_l>HW+8DUchLXlMu0EBE&VE{zCRPDM1>p&fy}rvedIK*J((bLv1VP5V
zoXl~?AB$Xx0sKAQ9idHe#yN9={6Nj^z@stTK#5kB^wfbsk#RkF6%c8F_c7lH8b*L@
z!n2gc!rsHQpa)q0|9b1`=fiB2g9_R~br=(nI~_(lpKsRtYC{jrHzVB01C3wadbU$~
zee=9Q@4-!1m1(Kp(~*Y}q<7!O7|MtNo@xL+_poE2Zl9W3;g^Rhk1xFr;s=U3YxNYZ
zJtm16A=dDjaZm(Wh{(UG02|ylt}(AyKvsBIGn-@r0wNl!k8)20t4$)AvcdU9xG2J%
zfj{$rXOl6Oz&El`W%QilhD0=D*O%fv_I+yfidHr_k}%_@N8szyYDZY$l>N9jjzRnx
zWPtQqLAter)jSpQ~Ge6Qm9%018CKC>-Mf*kEmV*40A-h}{MTaMUlx20tb9
zTi@e6dYUOXN=!L|?d2WU$GJR>}zRH@ca{i}?9ix#_R(dt#<&Td&Io
z@yik-e|Ql^vP}84V_9;Ie4(-ws4v~jXF_a+inLwhl)8t2%S`2&xqk>)&{VfMJi}>~
z&vl`pC#7g&6x|HPaU`Q$V*$CVsMR&3dE-{i_BaGWdO+=PlWs=Y5PNY!&cmI7dY{u%
zqn~ZK0J6-Ab1Wr$E8Nfp1(a{LE0_RQp45itN=!YR82|$Vq}gf%SU6wbX;G#ySUf-X
zyd@s>GJ|2YJq>H1z3_5cEQyE+ESqiTm<0}VmjGOOCHxYiCeV
zC1T`Kzdoqa_k!q=NFWX8&$4N4vcMXs;aQ4D6aV}Vp}bn*vb?cxXQEz0)V)ZY_vc#h
ziURaAL8Us%h09nr(ZN9hRN!g;QR09ZQiqIITDj=OOI7_?Ic~Q&19|9<*dq2o6BE!+
z>OlE~aF0;nYrChY~r`*B4S|@IJ{>$GV38Bvy9`YXu
zdToE^FA1hI0IdN&w@)3B!mfUAXm-?K&)*QPLA0n1B(nd7+9L|{5$y60%c?w@Y!tuICf;UNm5bP9`!e=z0?aq)k%=AVUl*u4Tt3vtmBNZ`tZn72
zXj}u#s`)302vxZ;D`oa6@whPazFwS_eZ`x^aJQvrfCCJTfr+GJaBlU}Iu7N75a3!P
zG%ma^i+rX9q9!vQaL?qe@%Mwzsuu|Ef!Rp;AH7lL37!(I>|EFX+ibLA&KEyb=#8(-
zrU*EV&mpedD=bB730IBDjE`x#LNUo;y|=>%_tb&Oy{r79gw`G~+V3~)uwwn%($Y?1
zb6e^SM?R}+LJ|!d=WAjT$fw`Q#aFMn)~$Q;y(cXvC7#u$P5Err)P=+O9CXM>r7J{O
zoCv_ABb30_S0bnxa`Lm-nj)1S-_PY_K~M4;CasbG=r1fpR^0No-FK101zWt8ii1=Y
zVvoVIsM1QW2C@q$XLpR!ppvFE30js6h>nBgtp2$1(mgvtW
z`1hsA@-63KL~@nfy4s_R$m@iIVyeKop6|Ld(ad`}8$q(M&^d9;qusiRgjdn;CJzkC
z(#?GeVoG%8)}_9P@_E;t=))(jb$qG9PBeytDCS$UsA)g{%LUmJaTea&MnkJsQDMN_
zv~a}ybMdOzqc}&%luH@YlksG9rM%yt~Q7A5(QQ(tmNEW!$5(a=|ae%y0{en)7)^VSu!51v;lj_&hs
z-+nVAD|94y?H?3ySl-7kg`>ISV|>nS6{v;1kkVLv#_rB;bK>DN
zuYXQSqb#an{MC5>)$i`$i-YTzKG*HVZ4!r_Pf~6QIoZCfGJEnldo@~+Wotbb?-4ww
ztFAUjatt_H_3Fi~9(YX#4v^=a+~^Ma2c6c^c$wL~Z`pXY(!pn9R|@qhozyZm#AkGt
z3n6CP;UX~4PF!>UzCQf#QXzyE(%fCcViP97_wQQ5*4q>=**C=H!DAWbv<$sJTHVdx
zU{6-PTY{knw+q0`_}*D;ASS>-1E=z(8oJ=H5se{7Ru2*Vle>Y&yCGUo$PCrdF|ycR
zT-SRLoH72H*qQr&_bmt4TcQl%k=THe68!U9;0^ZC4qpp_Qv6s3{XfJEL+KVnDv&FT
z9g7b_?&ps$={%9myOXo?bs4Xn2I&Oz7LrvpVs_`RqVi@tShf-{x?o;&@SoFadb55_DpvTJzQ7`dYq!kkh1@X^^Ifau_5?JWPn
z9XNP;{f?A5826*)eY^&=`zDy}xVHd|kpd@hV?O_|5h?ECkI%DQSO1@!d
zRM@(aXZ%y&?Bok!-y7e4sfLBPHu|myt}tS@5tzpSG%M
zeR$@Y^Y}8pLG#b>_`qZr8m4Vzv&XReH!_Dd&Flv;OmWkNmv+XB0wmX)uoe!Nq
z6dM!vHpl~rCgo}KIRmj3JGssi-~NIQ@-CSF$9qb>dS|#r>%t{&p|xmv
zf7wopd3fR}pVE!dXciW3^WFq5)AlfG?lZV)zg@X2s_P-&?QA^bSWGaNJ84Lxz@@zumLPNZG=yY@ioVI
z|6bEy3#l2BJ^$rz-h1f2pwC9y`{_k4|Ce}wi=(@wfIHwO_q9t6-Zf=pQ-*E5^Ytja
z0z-8FrFA(?S_ft5-Us<(4!HwX>k7YJ>os15p_0p^M=IvwGhk9NdWQKH(?YO8G-@b5
z|4qfUp?I4gxm3M{I`8ez+n`XTaZ-mb4mVP??E4Zp)1I>Y7n=I}IJ;jaaAqVeXf-u2
zZ*V;#qGLU4FJ{Yop%cVkglo1XCf-!X?nd(5>&k>Yt5u&%e5ip7PR6JOQK{pCi(cg7
zi+jkD&9;mM(tkdb+hxS-jGs4)FlqETJ#6}_&|FL-#eoY)fb(Wca8?y!b^&6(33J!C
zL{MK+{tG8GoLGS`^&Ck?vNFCJvRAK4Oulo<35@rDZ1g6GKgP#}m;2xh0hSkRvKsCN
z2Q809s@_Mq1iJ}>hM1Y!X4K&~>_`hiSArCv(zPO=wOKsFk{jJ33YUA$P%H@~6Fv-q
zhguqNr=V(E_q!t!j)Bh2lb8Q*)Gu=)_+Qhtlg!^qserUNKGkj~deTsG`X$uh{{HmL
z+>4qb#lxZLzhdqMxPl>0U)26MyK97`lC&MEYv#VT+`|I59Jd`Iwq
z;RAn2;_YmS8Rr{q)V&T{1y!vl?S0LQ*GXZJ_WjYu)=4?a@54XULAK@}f}6TS)4nC7
z)Hmu$25$7IQ6N;*;J(flsV99M2&*%kG=W7;b5rFA6X|6f&Ll1jaR&c*YVc3d=Ml=fzkF(H>aD?
zx4u#iyOQTUf|s;wsiN2pvS4Ob0pXZsf4|N4HX7B%4mbLp`i`l?4;f!Uxubd(*Afbl
zQa!2SX5W;v?(F+TiSyxBU*LjMPu-`o@eO0DaB>cCIUO2*XgdSH^@Y|tqssab(*A$a
zI3c;Xn(xZ=y+IMbr&93hu09%PdGmFX#+7v>bM43Ev(sih&AlH_h|cwKiIUlDL!8g(
zZryPPVYjO47+i}@WD6m`OVAyq6Rvr9vMG+0gaX*x_ZE5h&xg7}g)6G?8-^yYIqkZ}hkAU5%lJoo?THl50fmPA1w$>hO+Zd;5_(+%F0r
zYqhQlFDi!>fRlQ9TLr=xp$(!>+|IaCq1dwmA1oK(r)3y%d{N(&+8
zu#w?g6mHOoUWoVEcdkRAmz4^D!R~ie!BtyLkF?x@(8h_(-APAszj+K~SWO_at;#-0
zg`-c6yJv4?q{LULO&5;dtE~yFcK6stiPo`wg#l~oepbKSrKWGJDc(eOO#cm8V$Wr`
za+OO1xZc0E4>FT_*+3i_Hdl`W=bCD7hi`VO&CZcDeL(WM*8_vpbPE0t*-Sf|++=b|
zlwj&SmFWtu%`4onZ06lfwL2XRc?D;a8dsA?r_pmI<;A&l{Nz!Uf}y9nAJW?D*4x${
z^@6IGd%)V*-TMFh`wbm>~*Z?!9;~Rw~ZE2(9m>Q`6{|5CB4Ffkb24uTW#7%9c
z67{SjA`@ZOcMV6W-;nW%F)VABK%7ZAnlFtLuNwg-tq(_BmC3DJG(v?`)~#HF98+BG
z$xYhlud5nR+BiHen4Re8V=(m|>CH3v-uH&4ifqBSLN0qYMbicvi~cr^UM3T6$mn%O
zpjn1*U*&$Zi5FyzSxRb(iuo5n;aCjwgU!e*#QrB)-&@PC_I}(lcvy!Rr;k_`RhWBT
zN$ldWYe$kYhghLghbz9%zx`cDr?7>4&CxK)p|2#y|3&jEnEg0xHaf%lUM)|@2((bg
zx2i|tYb_t~boY!_vShrW9_bO820W&z45p)`ix92p{Jv{4$2ju8S?=ViCcjG2Jxe`Snmh)
zA8tw8tLMVqIH;Nc30oh>nvu4A
z*H{zSz_#*B34PU5$+L{O9pnrxuPGk_y&9ESs++T}=Kf&z;Z6;mrgW{--|lbE2qG+*
zKg*7&kEk5;|Mby0b1=Z6nL9-I`^P`RpbrO%s)=uJJeawBMjFCIA{~zns6slTFJ&rq
zGZ1Igl)={jl7^(JzDurHy6OhHo`bf{U@7#?T&jw
zGKnR_2de?8H@lq$R6xBhon#W`^z)#aEwbXIlLwI$mDRxtf*l
zB;q8y&lqGbKFE(L+hUft3f^aRhJG-ZykwoSGC&$X^bF(%t%*UjO(u0XGC(%(xgeD9
z>aLQ1eh@%*tJxz^MY!X^?nf6}4vm?WMAkbkt@FlzoS@qHF=dbt4(n>slu1RUpT}#%3QNp`^7-c;q4xfB7>;Y>tmFpHyBeAG
zXAA!qQ(qkxW%vAzfFLCxsl)<;AYIZdB1m_4OLrqINJ$ARB`GW2OG$%BH%l+wy)>-A
zg7~h_^L&5Td;Z+(-nr+@`OKU-_nAok@gFiwZcej>YeR2dxqqul7xev!B<%)H;TDHK
zkJNdr6vo4_+F>6zkc)V}knasTT>iEOOyCkKe71jvA=e-&6Zmh1%M_9)yVgpE0nu3yb
z<~PQ89QQ3~eS;D&DThQ{Av^ad%{W-F^a|X48od*@Q0^R`60TF^Auonlsa8k7TV@`j
z=GIH-l%af|c%3OX?RVbH3K<-ZMKg>bEs@%_^6`RjTps>Aif}K`54tVXhg3ubYpquC
z!RGNA>vz&tpwtJWgBGCIG=RXJG32$NA9$~3QyAYDKw&23)bhL4py_NEfNzty
zlOap}ua^{Y2+PkLuNG_E#dcgce0jRU>O&Va?H3PG>9|?Sl^zwRwkcM1GaC}c)r&XN
z4JMEy*;bIvl>~eiuj-Qsyx*_}*ZFbpR*lSKa?j
zE#!I5A$Bq@|9QNXm}UqTncG^>wPRa&%y^GAMvS#3H2nj`%8HkcKaC5NxX-mX+QX!l
zK@6zG67*Q?7oq0(D}l%0JO;M!VnIc0pR{#mTOX4s0|IqEgCAE$@ws+(sRO$Uj&eAJ
zXk}V}3>8z`D4W+yn{UQbpkR@>j+}ujpEBs&ETv|%$%|TXnk#?yR-gy@fp@C0z^j(k
z5K*ae&45?Q^QGD@W@fqSr94IP2<_oHgPOR_(<)rC&i@Zrlvp3$x_;0&`Bvt+Y)Idc
zvVLPCB@*u1T_o`s+(YGo|ElEF_pukqS;zLaSKY3@YpB>jr4W?4{LnZx;njQg<*LJG
zxpHH~w@F}GkIZ@oq8q07oVxo_VF6x1PdVuIT|~FOf4D*#0_%W2WI^Ew75)4-QkMI-
zUVh8V5#Kb1;2-2(z95lcR-^B?s|VjdBgEH(QXM%OK*cIEQoU9D99fEoJg%-kR0?3)
z?DAFj6f)xJ8UNGs0CsK`(lK0YBUz!X4?0pJrp^+$;r1S1w&g5Yskd(Z57{eDUwDFk
zUOs&XC6@Eu{Wcf(%k{0z1EN`=+<6MVrb*2=jdj7)&*(2CubQ6+B}}4Zm)3GUDm+Qf
z$u3nyUf*oJkGC{|I8$Q#E|>t?n6jyy(5R_#oe9|7+!ah4#%9&Y%E-(_Mefy=is*4=
z**+g|w(i&+Hn`mEI(@hmWEUw+Xb>vM1jl_&
z^~yKFSBdm$4yjlSGT1qVU$_bfc*+xY%^B$VV;wyg8!Hv%3sHdY=5s0^=6ZtG#Ci#Y
zQV|0CULXy!(e%D>k$(9tbO*0|Gl|$JdQ#KhP^BrNo4WojbJ-#d6Jb4b60XDS_9>RK
zch>Go#A5}pw`Ip0V3t$6hq0Oe$8qrnh$|i3!qhpwwttE_wnabh6~jcrd3rCAzx44-
z`t!vqJ%8nh(Ps3HD=_H<;N{wSEbq|+?5}I^At}1!w7{48=mFyYjMxlp@dDXoJ{D|B
z?n6qydjJKu9k2p)-QK-M%^3(0%#_L6iuYoL^gFFH-MpY_jQMqJla$W;`@HCF&;h^X
z$;zS~dm=DdeXrCyvcfyEW+nE22)V(?`EEM)$=WpQ=ePwSt52GD_m!Z6&w6h9uT78Y
zCzx(Ojn|1xA&I-F0ywb0RDw`Ll$ZV2U{B2~@VeBaUrL*v^wYPlEGamy+eX$Hl5`T2
z(^TJeN#{WUaW^wO>iHkK41<)D^DD6l_4rTGcS58tl~-z~#FAURp6G(iD2W#>Pi5>B
z1MT{9|BoXl5he2UBP#k5TmNwmwe&n$&o=H7?mf$7zk#)SlNi+me7DdkWHaxO3FMNr
zk{n!D1!3xF313+M!VY+vQy;R_``Rt~0`#%!bmt0m*9_FirRNDtX$IOaw&-_xV#m8K
zv9zo>bugh%8%y~jYQK2=)RVsoEXxNp9ef#BelcjSx;DE#v(82&vpu~o;iX<@>PlRJM|Fpg7K|Y~&3SqfAm+O+Dz-a=q?(XR
zyf4CKvh{A4Ih;Wgk%VK5dH&uQitjci3nAF$hwl=Z5Ege}
z<+CO9>EC={xTFfQz#&-q=m#<}gRR}7)^r(KXiH510c=t=_(KG>XK(TMFZAQ1480eBX>&PF2C7H`z~*9U-91nZv&B%WXP?WC(4jp9W$iv=|_P3nhV+&{a1R=
z4qc?BSQqK&`VT{@^G3$vkuZuXXE8zd;B*q93}E
z#dT;P7d+DkN0vIwd6idxQAOuGZF0FBMM6X?o=&@D8o7#7ZDIqW3k^`RQWMD^y+LdG
zw0=8lxBqAOlVp->ZgcjJ%~L(5b*G-OzW02eO|WtIR7v8PC-(!p%C`sT<~S(#xxSkb
zWB}H7ve%<5Ggd~UHPs3~uOMm%$2Ou9ln6_Mll^CewXoIg3n;NzEoMbUW#vr#<@#JK
z2kBB#{HIUGvchG8f70uReDX}Wt$vFHNTqGa+h*9uXDKc<|Cs+{?+#U8@8OKPXaY7_
zK8yOFjx>kgngWhnSx8^NMC!k2vr2anYn`z#b$z@YdF+NO?Eg9z-|bHI;?FTUNPMOF
zZh+*ie1qP2PrkzLY
zt?uWP1tR=fTZ#mh_uYO3j=fUdv;i--O>Fwj9(db5>yp(^%!7X0-KK-e@G*{@!bsI{reDyQKVv7(>%8h(3A=&
zHO*DBm~6geUUf>T<2{V-gcg`|rEZPBm9$cT9I}fiU_Fsd
z_~ndbK&0>^20sWt9QPwJQBLNf+5#(=`zWuy&l$RYn)3%lct_`8Gtlh5(G$d$)fE9;yKda5ALWuY3#16@$ORcaGf@GAsl{@%ad}Mc{24&rKoz_!u9`?2QqP}uh=D2$
zVtEgQI#}VjvzrAb0JV2MSv$=@-k`PepU7sdq0JQobd7~(tyHU4A4`P2DI|*HM_-Fp
zPLPw%dAo38eW+Z-NnO%N2aaUinN?8L`
z-SrZK5zgubs#x?j1>E~}s{6N!X)Db;|K5Cex;9%`_pW+W8M2$knUmt_F&DJLfEGOv
zF%-xw7+Icq9>TZr-xz4{5cB|U9)MOw1a*tmwq}Uve
zYc5rc4n8RyIy`=CnFxVaA!Jz6jV&}$I^uAe}&eV(3lJj7mS5-^Uo-hJRyCPG`iCl8XG2HXQD_-OyOFa>z|oa4IzUzMzK
z!|jk|f*rUFqsY+E1uIiXi5jNlZR3u$&ne+LP
z!XG#;DexSIbdX#>GI+VYrJGW70q~D8Bm38gorn>W%PjXjw)@8B5zY{EIvPP__7s(<
zkq@^f5)%^WUD4flnSDi0-ssE03OJ@{&^Z9~AwIM}K&L1TLo^h_+ao
zyh%9Q4<|=2LEy=lO(*pypKy=D7`yFX-k=~T@eeQVuVW^V#C#co=P&nnr1ew5kel5!
zpwdojr+}0By30QHV!x0fl-L^_SD7VrWUSTO(7V_LVYx;BSsSbW%(G#{Olm?LRhlxN
zOib@)a(})a%cV|lA|C9!e0w9%zLJ!63pwFt_1dqynG;c>fQlzqAvSp!ujkgIo_O8$
z{A=dKhxukDnatr)lZ-r7*dA7<^sm8QaFJvd9X0AW#<_^?YEqBL#=<|EXbsyXa{4{j
z=dUjSGWhY+?`e$}WzWYLC^2RO@xlNyV+*B{P#JoJHC5c9LCFnr;hg7Zi`0B7P`vX)
z=<)XCu8*R1Ff(YD*qRd*G=8X9v{=i+{m)oYea!bdCaGDVx$Rrow>KN1uPbkoAI$%t
zSJ3SfFpi^n{#g}m?OA=CR~x#F>6P!TPMt(=V{WG`r=oaNWwtll>KQ0iJwYYqUdwd5
zsGk=R2m!vX%q#!$L(?YF!z;ItYZ0%*UW;mUW0{s@fqto+5a(2=vScQqp9j*iEgA#`~5PN~HaduJ~5A>F&Xw)#J
zHS_7H`~3sgx9$|8CU0
zDIEoHHLWAOzPmaxs8hs#n@P4Bs$Om5>Ui4&CB8pcl+}2=Z60Sa#>rZLE};1D=F+CT
zl&~`yuJsVhd6V}t2C+MgJrNXoock^BOD=o2btT;k=_s(X#(Mn4ipA}BcMu83A0tlG
z`$oExA9mvO$F|cv56nK<7XX}bMX*Vs2!T$dG;T96@oGxQ;LH80wp8L#@&c^kf3kjL
zZac~wno$-FB_3OpAYe0XBA*<#V5qxRwlY{&z}BLeb`o(hTOTbTnjW)HYXRcFMO6EM
zf-I$1=Fx6O@LTBk&~GYLNYh72g4d`oq#pl_vp;Ep6c&{X${)X?zpG5_)UWQL#yON!
zo~o$~<5L=d!I8i`vy0^-iWN4$a}z*ho-Qw(HDykD0)6tXm%csyc+kNeywr~ed|0tv
z(sWJrYmBYYh5AvR0yd~V>fpD!E(7-TD1y_TLFM(l+d2*mgVY1{=D+l|VMF`b*$xjEBi%`Kp4c+7*`-+$uDu&EAK-JY
zZmh*&ehMp@sJ1_;iD-1b-9s6aP(am>kQs|W0r>7+=Jz?!AdM8}g-~C3^{VDya-KI{
z9^3)p=E+^v>$shT`|bJs6w{Azhk|@QG<&ykGLn(8uSW!RSA!NJgxTnufKgCzq|p{?
z{MS<{t3R+FWCnZ*InTe$C3yR~Z2jV!)_+X)%!88ClFpR1#;DZtraL=(3APJq;C4GN
zdlk8Hk{%k>7QNp`&-b@Z4Sd%>u<7$@Ll1JDHmj&L{vZv(&%V9IZ}uOhpTi6vVQSoG
zg`2xU=JX0QdkKR@VkGWOX5Jt+b0h7SS7HyH%KSic2$@BBc>kM9FVNiDl++rkVn%Ye
z!5AgjbvOd>lAvcD+V(_K?2uA#oxOa&e_;n)0a^bp7tQ{+#3BrYXrSCig=A9
z?c2^5f2Bv;0;F`*t%CLZ3TT4ch1$>iDFb|&Rec2>I|ckhEN%7c^LdQn*F%FxPnwwH
z#I~`yG|i}77*;x;{#q;9jl2lGUg_6dm!40Zx5aZKkw|%smL9Sl3cIUWK+kq@hbE|{
z`#UQ?e2>Zb?Z1nmeagL@kwcKYAp-c0XQN9Z!YD{{hS{|E+48e^%p0q2i}XkL`U=sT
z3(ZkaRvxzi|0H;WD!vASX6@sCn?lkn-*Cz18~#h`cR)v>9o?tJdM}`>YUbqn0^RF_
z*DNXKCM?Q1
zov!P)>^ZON2A5g?!(Gm1!!BdfnZBxxst2Y3r&7elu7AON@d+~E)q1yCrw56%HKFBl
z^*@?%e(NDeiA^_wTQOmrTiEsCh+ld&A>1jV=M_7T9DPb+x`}FgUqBb4N*g`rnWfyn
z9OizxM76ck-Cm*&t3dWl0=p3qN71JL7UM`{a(?Y(JT7-v%OF?N(&WPiL0!Euq1Aa8
zPc)Ry1jzQI?Vw{UdNG})tv&6LQ-mP`t#9wzfq;-A-+go>;At*GMj)N<(Lh)-TG5(K
zf~C|5aM<%dlOM}bNOzLW;K}0KaunP2VxHiBC-LTpT>ZSJvi?5BW-3CsrzN!(-j6CF
zGJ&`qA?Jb1EkkuA4g5HKdN_%A&;ROe^PQZ;wU7p&RGw|Cb0^
zlb>f`v5_xJ%H8*AYF7n5uF|Z0b>F`6le=F5H$q(e<$OU58Tc)Ic6e@&YG;u(vs9)K
z@I$wLp?2UETQK~Mdeeu?hxnBq|E}-iMS;8pY8w7RfDPAp(}&ztBrlWw(XO>;8`%Aq
zNMC?Ahym>09=40;b}~>8Jm@w95Y$g2W6WS8CEYDR(=cWVO||}Fy=MylqWSplJ>?e8
zTUBxq+Q-@nq$`iae1~i%g2OVEX*@sle$2Zm6PJ_JydEK2p+40cju0lOFN51z-4f~q
zg3L@&Jv<=?#AOUP5atV`f9auPYc2k<;`TPCj<|2RftPv=X?K5!DTzqmo$(T|$8TJp
zQgV}@O)#5c%gJ?{u82lyKT${QAJPp)r;ueYJu@pA;g#7_NGr<4u*^!qYNn(*u>N1J5z
zPvgG~UWbX8j;T5t{+>X8B}RQmRthH|GOtkonMs1j!XKSY7u|K?q#UAkiQ(}evXjTS7Bqsc?E-&qavK4e9EtQ&yKV%lnYu@OxsKmc?1Zr{n7ECLh`*qU%{(bqZcI6>8Fi)x~Y<}81VJKaNr6U
zXSe5Zd!ui%_LwN8D3@GGtBAwxwWgqd3U5=m2tGeJZlITRD1`!RjH4~y3-tK_Jz?Gi
zKhVao3FL*n{e`rWme^tcaG>zN=oj9cW)KuY$w+2Q8hcdBSgdH^&j6{j4MhYkg~rsS
zYq0AGhPzvNiIJqs?A#8|(pi{536#zqK1WMg8eQT#jr79o2_*dhF
zBv35Qawlxo4BxGoc!{}2TZeFth;c?Z*jz-hdm>xaXJQadPyHSA3Th{^lHORVm0n*X?6BOz#h_CPGnnC;^l%K6a~ys~hC
zUhD!OUrZ*}F`@HIYSDBq_!k1i7O#ak3~9LH1BQYVyGw1{>q90cJ}(r(#`A%gyMiQvylCvW~$7(h?J;O$cSME6*`+F&aFEOco}uB6;P
z|L1vUll?)Dc9ya%o{SWsONr0ti`X5HfXY+7oGJv0n(xOT(h!YDmAHbG2AkXJTH6QT
zum=92`G>HdrRZW>`e!DV%zBf>d*Eq7!vM09@iVW75$PhHEyb3eQb~GA_7cZP$GR!S
z%I6I-GqfmOAqask6F|=p6Z`YMoLw7$V;<(lAjZFtlv1o`pPn8
zW!_yBQAp4Ar)}qGFBfLbPayrb5^b3xbD=sbcmtqe${U-^A
zD*MgtqCh>xdaNjHJ;K0Wz1uk3r;6{VZI#5ho4+Fi#BMsOmTd6SOaKGV6Qt6BRZti|
z$B|Gqn)Sbt|H3nNO~4K)j5S<6&|Xk`{d71HEN?Nt+s|MAulj@CB`P^3cCMx=mv+6_
zYaPObKgRnSym+fVDOMbecUhE_G4+y-ow10%FjY(2Ls5LAjn3g&!jxTKZyv&$b|1AS
z?0Uy>Ro_1)wSR%IVTk9IVp&g97(2jo^{ab&#r%(U1WCbqr{4stcY1&gbg&rbizU0s
zr_SUFJ0rE&EpPUEFg?<<#m`Yv@4{|Vi5>b`zxJQ(A|Q;Q7S_|b-~#k(wouvDa`TfA
zw2$H04rL8rEco+B_o_kbsgQtfRYozCBA2gU_9c^=-|on^AWwLW
zdXSn8BIVk2L!{lr&R
zRXI^1#-HWy{z;?uvxgSYbQ>@3E7co_Lxx|gu@|D8_GHOb3(!)5NOo&LsQq{e-hAg}
z_@#S0enaMY5^}@;_CioZnHL?qL%t;beKFd#9lYO7k
zop5fyS^sv6Tm~HEF8+I{fP<;H1g_8HD6H6o2r}4l@Osw2L44S3%ny%3U(gO2H)!$r
z0;7Og!)=@w{g?NPssUGu!QmL=^E#3SUyAx+0e9Erw`Uc8s>CJ|s$erAbC~y^?=vdh
zZ6g=AwsmN=A;q8&rd!#YTj!!WkGbB3`QJR_^$gxCmv9+Sd6jFW~OZ
zK3~|CFe@>E2F>0ss#k6O>Cm5sSk=36f`dcELV`1BtxX||!PQV=gecuYsd~Vjo=Czj
zB4&4(_qVUiQecuf1BSPd&f|7s&G*;Y;*lcMX-+^y9gl}S}>H9#Zyqx|HEp(=!f9HK5R9y|3h#H42x|jS>e)qU_cp9D9X~y>n
ziQ|S&UCc#qD&H%6rT;!{))?oO4VOg!7!uX!^88mKIy134)=O6M&(>s-7C=uOloO5K
zanberD3IfJ9LU_XsdejH?Zaf2Qgl9@)0})@quUOOWcKis^0*MV;)#LL#{J$Iv{C>p
z@DXp@9zg950{bV7AEOH|)ZgE6BN@GqPG=K94Ij}tauw?)kKHN|GIsOpm8jX_$8NXi
z+HDn?C*Bw3Mp%XBOX^Sz?uPSh#fX>mufQ-Eq#_wtTar->iGc?KVwZR*D$;s1M;PfQ2g&y~N(bS0
zCUlZ;JKpP<^nX&Y|Dd~*hn#(&vK8_=oek)gazo$tya#=KzmoLW?eE{v<)q0LzORzy>i>iCx>BlwTHIO5uy&=Bq~5;433)O-%QcZ=_Zx1m?9t%;(bN|5FPQC
z5Y?{;T2T;&nwVt>v@UoeW^2ARJnSu=DV}k((@)*H8hkhLgr~l`{l^ck()xC~G0N|@
z1ErZOFGt0aMcrm-fa3PLFZ(xy=&?ez(_NsD!#4vZR-F8fA=3c)*)iHo%sv!yTx
zjhQDj?U3fx4qd*jyfuJ74drdY#5x)<7D}lb37#g8t7Mz-v-D&Cctc@>v#6$C?}Pl{
z1FzMWUI!Pt3w(jau$`k)&GV>TH9t;&pIc#3B9r#o9_Uih)kU8zEO3UfStNNHRbU=<
zGWieHXEzk;LLPTfrRt6>m%`$0L`6VoGU|Hs!uGL%H%V7PMKo0rDo)jkBz6`BNzh<$ssc(KwU04PO2fqV;PF}r&0t>YORr6ZgPfNjRZU+Lg
zwHQ{=zd5ievBUjTU|j@RHgvkU<9IL!Wl||Vnx$V->eyMSflj?$c+Z}cjY=xFazyv=
zYS-gQMETzo0Vks8ShLaIEn4F2z1to=*0U(tb&#VLNAvwcbJOReaF#*Ny*H#18P#7<%*Ix`5>E}v7{j-fA
zC9Qw#v?0nw`zyGnjS09)_iHT&v-O$)hUU)U2A^fGmR;hk)C}fVjslZ{Ja!*vQM~`W
zzU;TviP`(i=q_H24vlG*7*xPpNuxF$GO$%!UPC-~oA&rKjZc(XOnNDfy?dCX&!8107IO&{^3`r^kBaX0@XJFmL%hv%>w!cd
znX(^0geHw41fYYrwq^NPai#bZ@6spwT-}Z+d~Ktv~Vg%|givFStD_!LQCL(5Vkk9d;hO?WE|$z4f7$6+-!ozoVLT
zoHCU2YwbS$#aJkL#5*HB#ZgM^fcS{%T}M||vPHL2t+IIxG$d9FOinlyqudk2FfRNhE#LR_X(+-PPxT(2tR;E|6+pU*K3`l8|=292~n&i0r7
zdg+9iTFAE6Z~`&c@1(d$3=e@ugp0Hfno5k>ICV=X!&a|CaH~~c?1vMvIkL*6(tSg
zi-;tt%zpFFa=pB|Dh9+{u+_~sYl^Bm$e{$JvL28#rqW86vcKq}
zU|YVkr}!{;{gSs&FMpxZgERk&7u8wgMqudPM_y{;>RUXflpQwj?*cTC)3xVAg%)$Z2$X*00s
z8Dp0_C7HAoEiIW9Wv}=P?@keudOHik%rXN`T5UkzaCL^?3)v@Q2N5D+VST`Ote1SD
zChKd;P1a_6FEk@$-7$T&*K6EE1E?vjnf&ot;`SkG*t>^iq@gfnd#ytH0`*?
zv_rl*lwY`!m_L{=QCo!qJ=O;#wua_N2j*TE@|lL8q(g&_nrJ4o3IPXX(;&+!(_`H5ZTC+6UFC}^8A%ObE
zUlTFQ3WL3WO-?R9+e9*DUMpAefWL!Ao0ljq$ML85%bq3usp56G#iz>0jN4zS#-5RH
z+r&)t->PcnOwZ2dj5c9RQLuEBA1Sm3Y1{tTlrbKrWccg~!hvwW#eSv-PVDZ!S-8@I
zqqbDV->t64E7Yg{`Qg^G#qlqAk(k7mY`EM?Mw}dr#mQ-sM=U%@jIf}lCY@Fw0G{i~r`*U{{;459R;P80t$)Q&+q1*I~
zq2h=+bWXJ6Qt{ALsT$*aIR=wz>zXip<~&-F#BfUaeQAV(zNoA!+~KL=a%qw+?$h^u
zlGpwfI0<6(FbB1#XV`g~a?z$&)st(owZwC8`3;cbcQ&%&@&3Y-gR-~D6DeF0zU8SoX0dy|!fP(QFuOqbf{{q|iBcJ{ATFA)1&BJ)cb
zfb(|RN9{>F@HZ@vFSP!G9*=$2rn65}upSad8&alx4QjR{RC}_PSf(2&>Gb&__|ScF
z{}%zfKXbxSCV506zIFb)%f(QyikVEVa!nnJ7y9Hl4EziQ7WRXBJpEXi9nAXcR4MUBHSox+Zs7NSYMCR1J-6$lR!&
zHmm0BaGieMJ-vIz8(gbP{0g+<*Xnofg>m{|2IvwUBO338jpDU;NQA0ytmeS`zs^T>
z?jqNruy!g>5HycZ3{o%!j@AEhf>PkoC`|!odV(70_O0RcMb`Uu8YxamxjL@*kcUk`
z!)T^J;C?b4^)sd??P5A>Cyb;$LfPOqy%uqnBt6`wx|qX{FtmCxbbH>oi*FMYf1ua&
zo=&anN0A3*ZP*N1ly#|~f;!khd1Nh6{1IjOiwNqF`jF_P17P3N$uE2d0SAjM)$sSDiyW8{MwH#
z(J;;1KT@FmGt#AoAdKNx|8JmG475+TD9Y+fgbw&ydi?)mc7Ht8rMMuDdoXmSq
znc>^P-uSvB`=UpWaD&bx?TXAfqE}80<=J#83UlelOixJ0$DiX8#+ZlA;;SU{eijkW
z`Jf!y5rjEB#Nmm}VYz=XLI~e|WP9c{jtqz>{mO6>-oHX%3CzE3g^sm1F5T?=oQ5_2
zPS3^}TF*M)^q5RdpVAnk*z1mJ^+@R;LwG&CK+Sd8p+h5JrwzAAU(}|PL0S0a75=q5
zTz=vDAXgp`=>$|M28fZE0DR9+(5vCk%ns^mP`5hPX&FH_bMDs}zKFKp5iHp2KW)_T
zW;PT7U}Y2R^KM(D&2@KIWqgPVMU_<CHMx~GkN0g>*lMYWn)dh8@lYeR~P=t|#
z9?`orjEhJ;)@}eFN#Jk3DY5{Iif7TbRVJ=C!R8q;zdRv>FO=Ih9ip3e3LKbxDJ+%@-Uy06
z51+L+JhNRGPh{}5Eq$tqvcadbiSF|zB2~>j#wRZXccSYOg`e66IE#(e?Zq}x4UY#0
zKKE_G;e1)ue(<@-Xj3*{8mDV;Z+(R@3Ar`R%fl>PI*#3e)7cM^Ex_!Vb4qtDknAC4xL9TJ
zYdXGe)#PWwUSh9HeOlY;nH-nR8ZiTxkoy)hS1GGRnD{%*Z5^Vsd5HTcJ+y+P*!R(MV?7NVi*Lp{}qx;TT;7UvduPQEIO4(6e!1QQA^
z9ZyoT%QH^AR6cW_r3+^n+uS@9c^EU4-_N~)s*vO!2AI*Uu}5!78-CitYXTCVg?g{9
zlG-`PixO>{gaSKayfW{P0zgmx)FQeIVZ;tF^nIGUDZoeqjHo-G@!CHsHpk40FE0Iv
zx~4XP{@%gqH-CS*sV?=lh?T1*d8pkW-Bsg}anG1~46kkU$kid=1i
zQsXN_DVCkRm0CZ)_6aMmgxP~gQ1GA}px!6i@NsN3SFbjskN)0edzEASva6SZ4vd7q
zh-fLSM5E!6Bm9B&=nS&_S(2#*vnn&khC1#t%4h&Nm{}580PdA*IKF(N$R=JAS*Wf_
zBBB%%&`6jn#7ibY)tS`l(zF?KvC_;sEU`7ZbG*APye0@NoZM|CK-&qOn>G&I07|B&
zo#%$Z7up|0p)jt?89qLOuM?MkIU5$aQ1I&0cJ!2K5p`dItq89=?{2c`0nrvx6KE?+
z^L+^wJd_EvMObl*+Pf!or}vN6bvd;mI0Q_|wH;RfChXx{L6S~`(LsLJAgJkQM4eo<
zgwIaktC8+P4QVd|XI~Cksw_Y#{e543b4U=bZ4FyP{Wtag~
zaNHilF}mGheGOz9LKXaM-*uUW1{-T(oIMFjw(3Y-W
z(8GA2he&2khrgM$+e2w*2Z920chmy{fBjDM!un=lCeTRYW8nDX3j~C#w)r$8Z_ESq
zBWP)tu@l)We}C`8ZYm=6Ha3k&tl~JvDKy`CZhU%C-_1ElNf|JFE?m(g5|N&+kV5bf
z#mL1%z?Ay;tKB^A8YOmHZ&$8BJ%FGp4!8snT9TH}P;`F=#vJ25z
zQho1;v1eaZe1JVT6P`hrv^l?oXtVkE{@R}`CZ@H{K_qADc#l$ljWC6L{iw@sNc8Fr
zYHRtD@U0x|c$FMa^7T0KrKP0A#7oZrsxQFaP~GyWhl$m%OlQ^nK-aMCmo);9>PyW`
zSjI0VnM?t6A}r=F%=!z#p&y@-ZC
zz+Jd8u6Vg`KTc`L)l7B}P`|RI-);-Ra&8qa{A&BER}YEG30X<>Y9<|orPX38
zj|A#W-Fat?h992ImNy=~iEgwR67VvC^uL2t(d}Opoy=pT0z;oh9r#_|7eCZ
zNlaoBT)sadO8lbMsFFuQ=n_(PVTC@`iNACkr?)nF&tHhuoDmhvyx%B~pzIti6;w*)
z-!NN~+F;su|okeqj7<&Mn`%qnCYg02Yt5WF|Q?Qb(!uqf|6(HWUF~P=vNTCk!3^
zQkr5P>Do9pELVWYhYg)Ja5n)#hZXG&ee@t{l>3ZL02yHPj{#Sh!ZUpA0eTExcvP*^
z#s{>2N%ALa%BXjQp}b5VwehXb5tCAdijSZ=uT0T>4xd<+tfP~n=c_|=;^kK|tTQu`
zN3FmZT3`Lyl=bDelmv@{;Y4s9ai2^
z741QgFmZ)6bN!+91T|eYZ&O48wyC~)V}sT0l5Xz=`~u!X5p{jf&X<)j>{5VIXrF?4
zsMq$g*&nTSBtw4^5OqhyuP&@X28n;#iLCA~(2;3}yf3vP8^UMA(fA|r1TkZm`
zU+V*zu5$*W3R)`z6oc!Tj`I5sz51(pFH}v_n09#LSi$P~_qU;X{{0+d)G|U5kKnjM
zSU_Uh^e`&TSwUdQ5YJYDz&n5A@a7ueJE*{jZKc@^Nu>iipo+QAVw};dzmH}4O3VFO
z1@C@$Of+&mbUIQLs{Ui~$opmVT>btQYz=iuN+Vzm@@%7_%mXtoAn{;`x+h6MmAhJb
zm!iwTTrdNu=<49;b#(0Sr;3t+t}l860(f#}>|U0N!6)gHl-6RG$um~6
zDc|nPqK747MrioytbfUUkbieWK{B7`J7#x&F)0C$x|Mb~MqwAi5S|~Jp)lo3(M%=b
zfrH#pp4z)q?S*el2jkmD(J?Vwjejj4RKl(T_O2DU9{?rRmywbl385FBWn~V^p3m$J8-D+fA9y!pEQd3ybu
zP+i0`)`JAZ?)57Vn^OW7>9*IV)JoDkKMA$bXJx=zo`9KqZpfE>Gk>+DWU!1v=UZ{B
z;A$ELt)%bRW68S`Cz>S5Ud_Nr0klcLW1r1Eq#(WFqZ4&vGc@y8!2(m(P%jt)dNl~`
z^5$Gh5C=rQ*1#kr8|e-zeZXfv9DVj>v;{GlLS#w#Xm(Ho*nC*IwDL{BO;J;TeqDoY
z6Y${I7ByJy+^sA*2nD|FGeuVJS1te|t5SG(8BJ+E;xm_zeWL%L$Ddq(B$
zPwfY$zvh4*uHI)?Tr%kSDWs(R?6dO1OaE?U>k;z>hhCN);~#z3pPOV+%Nrk(YwNn^sf63Dzsj?qZ4lL
zMq+QWH=BU(8sp0@F`lS}|A=MBC^_DHLX&X$RJ9o>(+Cb4^8q>UPkFJt4Vzn@Ts)4P
z!jeXbl-n^*B11=+p5a|txzJ&HS6k8$T<+Xey&t{VtAHg)A!H6zK2;mjk!DF49hOy5
zrU4VgMp|&c4Ls=lNsW0ZV!bCqCXaHq{`~cG1&scQEGN*lzlp~m?G8@hyWKp<+h?Xy
zh)He)J)`S#VB|hVMH@oozF(eQ+P)YR>3IoR3f$l0s-&3LwIac?;jOln_B$>-?_G%N*K|aS`
zp;qF{8;5lf>OTz8^0|h9sVQDYDA#_I#6KT`-$#xo0g1KpX=|GzoTvO`*psgd7ih&#>wgIL-#r$jjmE%Y_x9N
zC<(kc#ybEjzKx|q%dQpZ(1RSucXLVg9D1gvwD9BOC__(+dS0QrcuUu!Aruxg*?%Y~
zHrr0Rjnc6!LevEk-g|(ihuHldpdg+~*?zBm8xT{^Iok#p2lk3&9hh2xpGX%<_|ZVl
zu8tquM_tnL$V+2Nr4Ij4vP+3;ZnTy1&|D9T^=l5>OZiJ>rX(&g~;q)W476yiqm
zN+B9i7cjuw?=-poS4&yZaTF&Vh$YupPY_UY3VHLh4B~$CIa7*{4}O5UTTgh`l3fA5
zGPwL;vQGwH}R%XIX1X#;l+)>UPC9S8)!E-5d#J`_B3+fl7{XrfzD!=e&O#>QJc
z`hm`bnj6K$a#k_6pjcLr(uq*6mv0eh8RL7>RT%Y3l2V>(dg<9{-sQwF=1?0toTTHy
zVXOQ8COT@$3(jibmv)50#vB0A#u@^+K|h6xpUwFNv0Jkvv>AGzY&;}u#cMD%bO$|o
zYg+6l+f@|tiOB?@KSqQv(Y(g@=?kzwt`$gAS4fPP2BZ%eM%I)%EV!rgeE0*?ByBau
z2-~v99x6DZ)P&*GN`E^4QJC#K?GCq7xZ4dstf+{z1u6Mr+CeMS$K1cqd3zvK8g@Sh
z#U}7T;d_Ek42#(q3xbXJQc(3{-LjzL#YF5kCJ>qu3CwSbS%AOtEy>(vMkpAGul9lYN>J^=6=tIyptftdEBrZ{yp~*#;aA6a;jdjQ|JfxBA}?
zOYu5CO0a-pu^w2jRH*9>pd!c{S0K~4D)!i>fDU<&2<;!*s~({5nD4?0em)|+FqG5I
z(Os_$PX_heiIsm^eDhFtKV15IbOmu#Z*3DInd=?TRLJ~rz+y2Y$(YC_Qo2j}gpYd%
z#j9T#YcMcBK+p=jUq_~r_f#;+M;LygEJS0uf$!_|%WRTqz;{!!H;;shYJqLWyPM7~
zQ)1o81A6xv-a)z>Dj{4$*dzO>Po#kiO+Y5kr!{>=6taRS94o4t$5YIKFRaY((Hg6+
zIGHTmJvL9VlB8b{cUX>a*q=nLx`Wn^Tj5m->MKXp)rgCiWGYX#iTpDvFJBPQ_4aVS
z02Q?~{62mN`jUlQ_aC-`v+e+fQPD3UKl8jiK-Ux(HP4jo>y&mBnB8@7J!VWm<@wpMr^_xaDc=UvbHoM(^Um-LYQX)T^^*wFQXXsPa$#G#kxt#-{{
zPbx9|ebNN0=5PL|4Rvdu9(AGob)Yzc$m`I}CArf_8uf86f#<48bJv5lp_7!m+Re^q
z$73P`={^ALI($DRd?Q1oiEMgM;tyZn9~B}lR_7ntduyMF?TC02g36+YjQY)Plv)J!
zv}zi!zxq0P0FAgjLA6OXiIhuu#9GnIP!?q3Odzx!LW!U7m6|9ep46XN33tw(sPX+0
zgVu;bNzAJjjvEe6?HEI8CR&J?Q5=
zQSsNS6`l@Hx%EZ##?N;HIZqE>8h3P3&eVfS``SmPE_Aqnq5vt7Ui9J|a@Nx!wD6Sv
zl+PONc=s;XG&|l540Du&+RmLGb=co*n-`&+@$>$)+W2PM;Rt$HFhcYoBlX0mm2)M=
zgY?eeAHH)<4eBGwiGIg4?teq9FJ&g?hn{d4{D6kaaM!izKkRb`BXYjM7yXPLYPd;;
z_>LMox5M@*dAROziupV8T=aF&Ap!1oTShs8Yo~^n*^Dos{rvn+=Vg{(O@E{$-Eaop
z+g7wC=VRePcCCKtQz7+5GHE(~)TYkriu#-P)5EEkPV{X*`4OtD{LwkvUsHF1k1KCs5gQmZWU)1WZ?}2D;&t^fx(v>V
zRpX8e-(Iae-MV;jMf-OZFdqE}gXuXFRj&I}ek1i)$rH$l8Gf&W`2PeVgp+QvU&?J_
zDLct?Crz;y&_jgw7vgUYj29fZ$ihYC7846x`M`3mUzVW^2q-b{&!SHV`ilr9Rw=ME
zMZwcuZ?eN5lFT@-P@61_?0w`fTkAoW&!`m>0)=>ube%w9Mt--`qwT0wKA6d1zJzv@%?tpj`oD=yX=L`l+P0kEwV!H%8bVu
z2M5z+aYR
zTQt1vW7lSEJ>2Ui3&r^B;{dnmc{Sr$K2B;GM^MrL{6-sC3gOz>30eTXjJBqhzacRd
zE0^6ULVPUB!4)>%FUcct^D(>ThGOlN!Yr3GJ!s^Y`T0o;7-hU=tKNQRMTe0$zkN>m
z3mWzZrl;!RMvIitx)~>;Zm(PnW*sdx@)rrzW5m0h5L)UjB=CI^uIkD1(ORkoGH%t<
zuGF9()ik@E-S-rfuFc_$j=bH9Sb4OabXwQ`58vzO;A-C^Eq{^NL$B{mv$M%V+k9+s
zx?5{Q0seY8?fJQvU*1{ey)mE4e-u+=|H~|+>Rl}7zSD{)w+Nv@W=f>+&vGK?TgwjZ
zV_~cCec_Vm{p-1_Xd|4%bRT(G1>_bNj_I(vi2mw23EVyT_1B#&;q#kM!X<^=1{DcJ
z`Nm_C@b^g4sFV9FS2ye)D*ei&cq7Keok<_Zi2m<0>12CQdWvhhhke-${6k;(BH}1o
zk*R3fO1p@`P%KotxN!*5n^~`^Es^=&hTLf892M(CntA-w<6-T)O{;eZ$Lvlg42YVZ
zI8kWbu2q^C5=CAlTD$iwOj!>p9SR{ZmIA5N{j5biECKQmiQoc;8JqmIiIICb+p{%u
zSt`T@JXOi|SZrY2W-R<*sldoHo{x<~Ih==e6!*=X);=o2&;rZ3)Skm5A64*(9waBg
zLP2h%w!m#{XVl(NjU{~i=G5X3zCxn1UOlIAR5_!>p9H^&0<6?)1e|@g_t$1<`F|}1
z#5lTW^CquV<{w>gnrUeu9Q!bHyeIi7^kR#>jg{%nVZP~PL8tp}1Y-SM0@tQjf1Us7
z1$I*~teThHVmV|t8OErMyF)HiWSHLl)%~y|2zPgsO{vS0H^p%FXe#B!tJvc91oiRR
zrK{6jk=!ievOSKksO%^kERVl3OVETz2hF9p!Ap3q%id-N=!C6dnQ%yaPJ
zY?Cjb;0QLq^g{Vsi}8jwuFxaZ1}a}}Lmrn*yv_SBg597j^4htf%13lQi^=Su3q$Zx
zlILJW)+FyJ@pT7MeCM8g!dKKQbs>_`x%}np$dT72K|<%IOqscS%}K3)9D5)5i&Uh~
zwx4Bs_3gF%bF`$!XCY^6H<+S0cwN7bp!f{*&|XN#GgE&#f-PDo9vqlvN`l9gT5@CH
zMH8*q!>6trn5Ie`Ajv#*0&g$Z05-2o_tDjuM}%?Kwf6j1h(D-QtcN?)n`Du9HlVtP
z^kvsfsCnm!Or24n>#S5-nedkfPElq1%mP9mb{J;QD;~bNplSW()CL2{s6Vch{@R3c
zCHwm--ASV3uhKz@neUAO?Q)u@S?`v;y#V#TQV*a+<6f*RT6V#Mn|#T3bD|M+^ZK7*
zIe=fzZj=_fC{HL9clhMAF7|m0N8;Rwc~~9sU%Tt$WK?hvDkRw1){*gR-90GiyRM@-
zr!kXF+;vhzfY%rIYM}M@!m(x``%={Gc^RA0BY#WZ8OR*N*<=I{$kODOJ4M0vMs*yX
z?{6I-nO&#ucfgg@DrB)A{CdpL@fm2zp~h8v3CHyC=HP$I!Rr!-7R{3q;YB|UF(Q19
z?YfhTyn0t`Q}Fd!rYo(T#g`u50GF&?)%mGu^fUX0Yu)XhBi}o}iwuU%`Ha@gNtxjh
zVnTsEiG09Qt&l#p34W>n$|PFT?Rc0FV+ebNQ3XEQw&u6nWs;fw^!{0mfLm+Vzui8h
z)d4>$Fbo;ryx-gLGh@R@!;h(1nXm1`zDsJEWrh3S=e?eMtA=z}J+Jp>Jza9U^vvlj
zuV2Ow*{M8~K{%I@TSKIWqqdG|4&h+~T~Jwoy)68&eCGFe-$#${>_obT2CyQ;Z+CV7
zlGYMJRlA`r5^2(}3CTB6p1Nomf=w$0*?O->se0+5
zyA9Ok1^$n+jpQ(=yENYdd!C^dk>5z5sRfSzZ&`Cb-Up@Hj9P_MRF_+rBnuVdkG93#
zx?kVj6>QTSZteM*KbCy@;o}-96XFH%l?Un4w}C_L7xm?9!2RdCwQ;iCul+uarlR4m
zv!x-GH*N2w-)^hzIc(M&BZI84>qCBDgbNrDoRPl*u2RsuTWHYkK9gVE1Co@rt(_g`
z%Wy;dq*uL8i&q}+wKN68_dx8;C_&r2+_s7&S`#oXQS{3rv{D3DtVb1fKUXg@5fz(z
zt13u=>Sj}jcjb*tb)AQtHM278zKAaI`uOWXAS?GxSFq|qk4E+A{BGz;+`VDhMqqp*{L~}PJBhPYkgJ*`BO`o^7*36omMr@g1bA^FUiTCsTk2a@rXOWIS@+x)1%f2RyUt5#Xg!DUS
zS&mFHa)1|;E4r_q5%f?9OZw?oY4L}X!&G3pNkMN}l%#-GV<-$pvo4QBX^ty(-RsUI
zY?y$_LHbW3-o+Ovi54iuQ6_Fy&6MXgrLmgV1YIh6msg#g5Q%F7tOJRn8N3Qd{tu4tF#dRO_y*esvjKSoEk|L~L)ST=4d7s!_!Ek^32XvjA@3SRe&{XoWT2~l3-hxSmn@
zDt=PN?LLcetL2${e=dsEx!6r!Z6Ltz>j8%gU#vIiKK|9D@Ytq~`FG@&Sf?nPF3BScJUvYZR
zoToF38Wz7gG=NiC+^;O%H+oz@0o%l2L-0`VJbn9&+JHbwicTmf*Z{Y2e
ztA)|OkZ;RzfK>^VsciU|-8iG5zyT*^w8oSo&+4TFx;uwjI%(`rka)m9hb#u~lB6y)
zKKQnP|G;y*F3Bf`hC2P=<>>M0dt1KE>e&)--<~x=aPZA_w27f(~ke#@nv|;zMRpVTVS8Dm)V~H2_YFFfnksn*|Z@YjP^zYL^
ztuayf)wL6!nGW4L&h=l8iO9>3gN<1?)-T$!dinVIgtzlOc=wBYUBmIEL|pL~U*T}r
zvV8Pv<1(mqGweJw-^%LP8of&13UOw6S+iENnA+4meSS2+82atZd2w{1!Z5~svn%qF
zzW&%fFQor;&}`i&QTG+GPuuw{qXuJ%_i7w9PtvFqte#WtT4?ERqqUnT!S6V)7ZP4P
zEiJ?0mK(lDf9j3-PUTCfZh)4uKr!)MhSjPquhFY=YkWL3G_d@vmjzNtm^1Qh_-|eh
zcPv=AE+nGPdFcyKJwE$sFloeKSZ|oFZy%HtAeGoK6W+RyMuQccL7sap72@skvewDL
z8(djHrVWkHF(Io^U}#jNs{~gI@C+;nU)=n&=Fk-HD@#LjeIcQnQ?Yw<^v-p8P)ig(
zCwIZK@@WH>81ndXxnl-H<{UB;ie|F#{9K5lB^_S{qR^j+M!lVVeq0`7q8UIwzert3
zD=-r1f<~xc5C7?|%EU2;+>1qKlF(5@3mSBHd~*nlLTJ{<4a&6&Fs|4HZG})*(pZSU
zpa7<#$vw$@%chXc5l2@rKoflsc#vhZbi7NZiG@ZYQq{BSRH@YY(NsrJ>neOs7w$&W
zKvWW&93iD|rU}%v@sJ)%T08x3w;ArZqy~tfhs{`J;4&#wg|f#(7_CI=CQ0W5pmC7XDWgQa-f#n;6hYdBAa7}#d~a&hfUlHpV+f_;dqV{WA7xxwgNPZW3G++^8ltnj66U=ouVL(i%?vWM%b8#kW
zU6}4g|Jz4X95dThf=n&~BX?Dyv6&G8U4!jt
z?VM0_(jUOiK||xTG5GvRf8YaGO1Q>=u7cerdc$2N1`7V)@8ZhoklQTmI-`kO*^-S?>Bq=89Oacm8b
zC;&EIUDu)CM7kzd*HMkVi&GGTt}pf3;NJoHI8|t^Y3SqR`16=5bLS>qXUiCDnXd_I
z(2v@#BqDiv!}#YC;w56={Vs=K8=;Gsn1a88>+fpWumv^Vez9WdXOVlL^%7t6t0Viy
zxheavX*-2?g?wSNy}}}sV%2^4uVB^ULF7bP66t28N3WZsu9~B>{l;#UkRXG6wAjW{
zBAPT+tqQG}&F}oiWdNL(yEl+;DnbxqeFo{m`us{%6cXTI${E{j6M1lyv*AD`F`P(E
z91|CeXvqSmGwJowW70faD!e1hJBSqJ5FRpn*j`hr@5PfmhLM!L)Goa={Jp6vr@v)=
z0hO(R3XXEi&jn+FqZ3_U=98f97B9dn}p^=0_y*q2^WLivx9}El!Szf
zDt=|U*QNtkm-Hdx|Gkv254mOCuX0`-G-?`ZSYb=}Jm%j`emHOal*me$>4>)-JL4h;
z%KxbaxSX&Y7lt+nd60NXx?YG;O@Q*U3#LZR$ZPiHQ!=n$a
zq%(Cc(elYqmbF9`(}6VO>E5mmK;A=rqh#hGB6K5yEWLX@hj0r+C>j$*P|xdRX*xik
zVQRDD{`~s%x80xPyw1Vj+s|aGuJx%TL>3Ybm4v4KgSYJ5V8*orb=C*NT-#cgvvGuC*uPEj_s?gmfj>trJTxN1Ty`=8ItX!a3
zIkZ~B+X1k&GpRyKbXckqje|4DhmzX76FGQxT9#@3@;Kzc;k69+_1vM96cza2OEkwN{}!gmK5ZJxM0@(7vuUG_Am*>)=g|HWcbz>~
z9anQwyU8}(u=KbsQJ$54m8+Mw2Fo8DP+6t5cRMt28plwa$ls5>zlBTq@UIc=Km$=)ZHKvRamxK
zE-zoG78kj%W#*n1^K(KS3&TuvjbQD4VA
z?ETSa|8SVoBXcM~1naN*pbW5*fkJW#U!0qNsd=m#U-TVc>Lyn
z_$G@B^h{#CHch(E&~~mqY<*d=?iK2wGIVhVsZCqFrU?mcd%Txs49zjUupH4dZk%c-
zYU8GcqWv`?YMC;cQP+V8xu}ao>wbE(o?v$$pvsCK)Yr{9^t@?^LUBYJwVcuyu2bI|*f3r&%ewVo=P9+%%)w=8
z3+8?dHMI9-@h%I!NWq3W^_#8rkxlL;{@`F-E2s1(BP;5Gw04o&C=$1;L%G|zGSKfn
z^1U5558Wcb-rn85y6ViBIyBnOG8#9XwGFADIQb;63@9gL#%n^5@BQTzs>{tJaDDx{
z7)yO^wZbjU=&_UaABPt-W(!*L(L2mA1DEn6TZ>{8ht+fGug=h`qhnprD{xj`)gI0PF#3%azd%a~!f_%j
zqt{Te3VepK^4hRG{KU2=wGKb2hkH@xD#FDmdH3y&^|^L
zteX?cK;Gv9k}K|s;A3?B?=^&|T9g_}k^Bbgw}RT(n{Ssm>k`$WQuy+OjV^lLom?9X
z8sYV%EQ?PU4BjLxNPn}@jn2fzOK(urW@Gd4ypw(+d;8*rH8GJbIV7xr07ao?zj3;IKY!>ddHvhCX)8zx5>Y
z?wiWeg_d89y3dQyv!s+$!>?a7n;)(RPVm;LH;3%;i%Tb*z~9~rBqqBWK#`}e04I_X
ziV{Pgm!9A|rloodIqS_`;GdChHcV9)0bpmsMi
zcKGr~zPhUzJI*wrgs&>7JArOD;6Yu9Goz^7Mnz`KDw8S~q?a3qz!^1+m$axtUd-3w
z%jn7@(O_rb95z`QwG8bX%Ph@2S}49Blt)kV*#xb;(lmu8qOhSaJSnBBof#bvt3#{a
zk+Lw>8Z(FFPZ;1HSW%X3{;KVXJvB9Gf;9TfrRlicW^T)(Bsz@`F;GPJxZRyAXZ!6k
z(5vt%q%W#CGrHpz`xR<$L_d%-qizL#a2xYrgGFLd9VUlumAW1lS32S>g2i>l`Xf4{ogdI$A9>p3k{+G;}B2g-d_zLG27jVn)Fj
zfo^bc{K2=2q8o7i7asyFpoaDprpav5wft*L+UxYoa0xC6!h^%ZmDEC7V1H=CHTccS
zhy^Ee4tiJ`iPt)iTUDbPBx9#Q+FVz>@w@YGUA3;X$EYlNBpRPZdGKSz*VsP-B{d%S
z9-@Z#@gVgEbH^vr1b~Fez%)nHsm3yktfLLlrRzNI`PoHsaREt3j~St}5G&5R#O`%9
zKcEB#iId2h(?JxCMh{O5-KDC$o#1qfza^K_7RmuJw2}KB!)=+?gD&O}lCFGo$O3u|
ztQ@|!*=kCvvn=*TCDTMspN)&)lDtJnY2PSWI%jTrYxRbgUb-E_CXNEBzPE5YWWbbGdKYLs7#GX*Ih06&YK};0DsL-D->d?h=
zx70)Cct5loEpH)dxrx(OeQ@wsj&ZzJMSp9<)57`9)@ls6XV6Fmz#59yF($MTvgHrCG
zW%R^WZ{aCw20a&z~*9mRs$iwzgL8eo31(FIRXu
zO&&hVTR(2|a8*tjqr^0)9)k&T>d;3P4V*iP*#Fd66V`HgM+6eSQ&ho5$G%qZvll4f
zd9wp04>ZZIwQ*{r6n2Lcm)&Mcz#nI)=ly{cwTPejSxAf`MPQo=Yu-+?FE>FH0UHHl2mS3?Mx{+~;WbT|tU~jjI?mBdq;4b|seAXhyg^4yt*>80s_>qL
zU4;m%x-)qlXLH}Y5INz5Tf^8rjn9EN*j_WLR=+|U@@)N}&N3@EW0kHk1{BDSDX8a3
z4rE>u+6}0jiJ-@N%hSB?>TBIq`WBIk+|#kr&bvF*#-hL7O@;PMy{$^H7)rL-ofDPud(yo>=#?fAIY@JDeE5r;c2v7aPfDCQuX?N>LTvtG4
zXm3f*4&Dp7*`H5vT3!q~k?W;3{N}v1TYTLPI`?La(%xB_Dv+41NrRvw;Dyb(3;|9_
z;?&jom1OQ~Z}WiBzY_#t@A`lBn}Gp>_1w?l4M9OVHl^u4(@iTnX)_!qJkT^g#!VFJ
zZE~d}M6;GJbQL{$99DEa%>OXr85#h~s@5DJGB_m4@@(_5ic6$PweuPD$A#$nyRvAl
z(N{FDV}@rGKGQGl8lGn9xJ1ixHBk6~s{i||5V+7YR7P`rgJ{MfM$VzXQVWPlJ-@Sq
z>2nfjI@R_|V&Lw$OFhYAMh(Pjgve$AeZ9kHqEQBz0R%pJMJ39hims0diJa3ZiE;Dz
z1z~R+=c+YW1*3*xIe702d^z;Ix5o=aDnbSiZTDboSfYxmCjJ<70>7>Q9q(^_V;h`_
zpGLm|21Rg6I&J6P4r;)7PeD4KIp_72ZmMA;GO3Oyk(Hz?IrNt+sn2FIh6_F_Vdk2z
zYS2#`p}1R+Mh);s4LXP1#`Y717RWcP8S*`9_eT|CT+TPhKoRMo8np9$kp5PZLG}Bi
zc6Hov&Y~s8ta(ZBxfHzkTe|m!^jwwS>sv-EzUCdZ+Z!PHQ4m55IO-V1NaPGCX
zYWudPlq$}FjC4FbU%PoNDH0QpWGRk{u9ohN>BK;5ieSe#y!Ac646bjQPUZAc*AJ^-6NKOSC@Q@gcG@a=_59w>t{Po(mEs<4c7n{Ok`eRdM)^;NtQNv|tZPkZJ(@@^!cyPNBX4`RcyHH?()o9Y+uPu?EmyZ0l-m
zWXW?y6X|4ZvBQ|VfWONt%DT)@!x8w5#A!CtfLJR3f{41L#
zoVN&flVq_UDEd&=APYPEw48Z#>ZDP(2exNoEpUg-fy#rmfTQYaTWG8P-m5tT6f;!}
z-0p(44&roEd$OZ@A;F;4^USDLy?^DKz&Yn$84Qr@@Ev+Lo;t?%9DKmtjkw8qLud4G
z*-qf7KY9qKk)pBq<(bH|{!L9xE=eSsjb;GY9?py!v;uc31Tcy7uM^mbiVR%vQ+4Li
zo2z#Yy~B_jn-Ms-`L>WgZxC)9;9PFO>?XhV>qBi;pFkZqWAtT*KfL>8Fc5p)gxef7
zcm+4{;Wu;5o&C;L9<{;el8gl8E|V87iGSLWYP_+$
z&qtNSIrgiJbNNyZeV>12TPdO1Z12GDk%xboq$y37{B;>^_FwjFk5r^N`T1jhCs1qF
zzw#d0pNj1%IT7gqix;G`T|f8j;f&hwVI~78s-q&Yu}Qg5KA?5*~Bxy`P3q@VW5;mvDsP=W#nZ6wse@cj4G?
zu52rVx+qxhZ4JP&-!Y7$p{Xy#^HmqL)w09m?P%@`I%WO~l3D4r`
zDWln$z@2%QZ?B|Dfu@w@wXQwN(t=i}ZGMyU^tjzAHE4PH%)WH&t1+OIiQfn{6-VbU
zCz1tlRbEp(m?>FD9}*8huT@A5GBk$jR}Ii>^2ovWbH7VLk<+$vLD*9ayE+ejXhUFi
zF#gPFHh*2BB$RM>0ecm_n>(v-JVg}2iw0w(;=m^;I_vIE$Qbh|-zx|Mui?yyLg2#e?>eF6q*EJiZpPOvQDF1%^CPb^FEqv{i3d%T&`Z&F(QadS*Pt-P5o9y}MP2(E9p9Xu6es6n=
z2C+oX{Nu2c9KhL|ME*9}GVfJa6qK;B@Gx7+(d)+-92vy4Wf~Q!GN79y@x{%-tju|2
zJ+TFvQ4t_zJ$&V>t9kv|v!O!|XovIhwhQ*5d+g>jS0z#f-SdtIDH~{Ho7L8!+37`~
zt{VTLXuG7V(WFwYgg3atP0N8VCiaGUUm0LvN~IG=ThpUUU9<1!RCB+H>bcrbe29f|
zp3h*#4=B>9h2uY#p}Y?nU81C0_Q^Ic^_eWkZQZ_Wf3hB7+2dmJxxn-g?b7_<`CW_2
zKC+W>u5QDzs?iGnyFEh&Gm>@!#iMSUa>kybXKI={xyxR{V2Vc}qDTNP?uh}{T>Cls
z5tA{Z8rUF`Ih6Ox4BFTqS7pwTlM^w)dfd<|oq6EA_ZMY{mwLRzw04V#@#;A0xIhtD
z53D1ecf=bc_L0@nd>rqpH(Q&FSuFcMb#z)eda7DDK|AA3^*ep_84q(2O{;$EPdB7k
z(N67I|3I5<)ZeP0vD#j#lS_Cb&1m=dTN!(pu;1!{I!>(eh3E-d;p+~$#@lzpE*`4T
z$WE#qw`o7W+k#orX|jI@R9eGwc_|2wP>{LBxw*l(#S-ZcG8K|sx~J|`F!*_%8nXGK
zkz!=qpLGqhMbW6B@!rCl>Co^}ZV@1UUTV1aX2$@tCaB@xuim03e#Gv|?iuLE93wNO
z_^V+wY783192_)0VY#8vKY&5bEDB}0
z%@?j-(Wh#;8HU~6Jn`=6X@@dkPgW(i{6PLVC6&w!OZD}UrS9~R-Jg`)k&2uB)$-@B
z9fRd|Wxn(L+xXA?P?37XZC4ep?wViWEuIJx
zD~%3MBc$?j_0P)i6i-EVA)%pOs05ZfD01156~(EYp^&}BBW_Ryc{i&@#8p9~hJ&uB
ztqyvk1NE)4dhUx90t&u|&kxvMb&*>WKN9JHx~tX_>(>5_Qw1}h;VPFc^MT`mbgUkc
zGtsHrlSX~5i)aV?k>if2Pccx}>PnW?eMhIZA!e(qhoOSyc>kbk%Eama$Es)joKxEs
z$nA0sNJ>sOd^R^SXhUpf0y4}BumT~`+6zJ_#pnWSRr@$y93O+qi9%)JcK)J5ptqF$
zMG=%#(IiKt5n`f6;dFQJETqG3xpG!%b;SJB7RA^x?$+_JTPK@83D;86KD;b?|LBy@xTIZ;fd7Sp-hly}30azRLdHjLaP6HgR
zP^FYdYG(sGUZ2R$Ue)Z^d~Mv08}Dg~9IN^G_CYJHuflcHi@DmkYUfk~=X<|;YVHYB
z%lm-xG=eUB_e(hcrm1tJG
zEM7t$oBCwBcNY7+P=zt;d}QmjCOGOo>se3Hf{%6}D=SV{9Hw-QOhp+^b(n&~HG{2v
zdqnTG05#m;nXOmTP?lStS+0R6CCHy5LH+46
zU`jWgqSo869r6X`C6(2)&Tzn*K|N(AH2KLmtzFcG*+lz)iebJs&X{vj1GoHu{ReV^
z*nGeYls2L?btj61$0a|n82`ch{U1q?-J(qVM}k};w81~wxHP1Ls>t!Gl|2y_cxi##
zGg8x}5|BUDv^H*ncov+72JW$5={WCua7O>tKM3f7|20jq#KHnablX7`-=H!IlS#S2
zKaLg@3){!%0#h3cB!VZ%_&7lwTKG_c-(zOijGE#T`B0msWNs*meZ@nlaT|l^E}Dp_
z4i=B}X9F99IF#&cnV~Wi`yr!iK4&No;{3%_=Dc%-q!q7}DWx++t=;H2U#a_cW9K~0
zSq0F69iguQ>gq}Q(9X4sm<)hcepy^rLrZLW-h|(5QqNb~V!}#U4t`oo7Svj^&cV}z
z2`F*>>_y6YLCvH}mXE=0<-&XZU~4pe%}^D$lS^fK)}R}MN-v+aNaSHNd2k?7A3C|N
zr-0e~ia#I^=L985fkxu+v|52ArkO-KqH51TbPoO;<&3LYY#cV!i4v~cd2v$~l=WpA
zrJME7QXIv+Jx}tfjxA!B;ishKqBQ&{fL3QgRn&jKFEOy^Dwx+19t$fxGugKG4mF{PzUAG$FfA|-~+$4ADY1>jMjan?n)_!9$dsd^CK
z(oIYhM0Fc^R3CYY7bj(XGJ&w!)=lT>R9OOEUi0Bl)SS-k+JwqO7=1smC4B8*Te$ct
zbNxSIXjkef#WD1mrIn~EF0Ka1yS*nF5}m=Dt8G!$#6Z45cyRAgdXImlw?MrW1?eJV
zK3IvY?RwxlZ`frxMKTlE?AVhrbA;eFv2i7IALFP@in;{`mkglZyi8&sFbKN~!bdT&
z^Aw15@W-QN^&v&@cLF9ptPY3$;{Ky_82y)QwGo~j!K;Eg?POz;4*qa$ukBJtcvd4sm;Ig
z=@@+O6DFIgL?O-k6v>ylM6z3y_?~Lx3>qc$wxEg(U-g1;pO=AV=iVxK(1-;^hHQPe
zTAt0fpRjw3a0Tg9aXOQYLk!fm!`Krip1Nmsf@mv}%eBBn-AT1c@}9OcQV%RMqg(W-
zUWhUhQ~Qf~Lz7deOpfFSlqP9M3YzCjB8S%BmA1Kxng!ak8gb{GE{*LzHfUDmxoa@<
zMD#`-xkN@azxlfJEgBjYQ*iDM9(qWTw6SyB1ovipVpN3RiG{}pQCfH&!9pgUjO7#D
zdpOUJR>hjTeV?tc-voR>ZcM@-NoHIuL=@0I
z+PEDQH?=2{MyHQslElC*YT1h!+ah`qL0Y@-5%~GX(gB;_ib+c|=}CE8P}*_LIqpz?~PE$Xg5+;R#<1a8q@0
zNV+D0*X1qdC_~)_7g`N)hlJp2ML2&6u)_$$DoWMrGJp<`?cI)_mR*j2gE1NFvq_Wg
zJ2aSPpN*T9|Bxib?E@N6LPN8;imW`OG$nK*dd5%|k-TRmIXjG|dBQ2eB6TpnU&OGp
z6+2kWPb&JAeEYeeFGIHjO$FkjK-w?VD9
z0)~u_=aExo6-X#o6pDG7%Y$xznSQ5YGnJ!-=p!;vCydes0z1q#k9N&Nm+dld)Qv^{
zA`Ed(V9&R*C~OM90DVYkiw92eFOvn^2W?9*(kqcII$q#KBS(>B=^eEGvnndwiQ@Am
z;w%!;Dl3n6+)#zOU*JDEVoRmCkg{aa&(s`E?yqhl)&1e#9pyf}Tg^p~v2}Tl9o{~7>JPWkt&2Mtk(#DSI
z_GSJP1-KJ2G33uj;jt%pTD@q1V
z7qZd(thb&+v1?I#`jSf(67c;b%ZaU&>jbvv;_E0bAX+H-Ft^RaM`v5<6FK~^NWIGOQ$6<5*00e_
zZo1}+zskvu)UPK?8AX0R=ufR$J;(Er{|4xvPc9doXl`oGtNJ!;y1rZGG0&Px9p1Q2
zo-=8$nY1MJ&&cOY8c-T=0ddpiO>}k*OXF>Op9Brt7#L
z+W5;rpJS`y
z-bH>WpvK*xA9?)U%S)Ga&s`v~MQ4|1cz-xNI1KSRpIAB7lXBXFovS>k-;;OAf(Lb^
zL!|^~-_Kb|?K;qvsvgewT_~rbp;?@Vt4X?fOOZkkC}rU}&!70W$cmQbvct8ef);hT
zn}eUWStwqVoS)-AvQ*zA{|4O92fPv0pErjLy5!k*BA$5hQ;nr-qc<+vwx;GB~6wJ~S44;Zp$atfjCdQI9
z!;F)fbwdTIw{i@dDkwhF_3X&tfMUEc1=aMyZ`b=(sn4{lnXXB
z!qutq`*&m}7P3VGXnEIaV1X4TZ}&w~CVnRn1H*R4iS>
z=gv|x>qwlq!r_3by$GsqOK|R!WlSTGNZ_Lz5efb
zNW^Z+UtgUX2)RO467D~|SDpKH1mdSYMQE3X5e=Dn%$=u`RmxFquVs19v
zf)>&gH8TV1^5^>MqkG$X{>Tb!?BYDT<5Y&aD3^UT0N!#t(~#bIyQS%=&kiH8>WVA5
zQs|&0tV?s_rj1X
zJ8Ib1wNv8Snr-v&{#hTKHJk6`6F+@FCq8|p!Y9OoEVVb9V}ve;Jh)WecF-#z{o6r@
zLwz+8bf?6EPjDB>e(pKO(-3;U79V-+Rwxv^kH$k5R25m(b}S;mqhs-%q_fc!7Y2br
z{^K&xoSA^DTDy94URVxcGv<_wVit*WeuM*+le&Uu;I`A(xea^O)SwQxn{Wd~lWt5b^>~j4lVs(TOH-DofZuTF&FFfdZ!z%o
zbhqSZCi~UZ8AGWw~IB892q*svcks
z!Gw^NZfbZd8USE%oC)(te8#QLJ;``^E#SZGlbSA9SA4g2i+V^8+!T4#We@o|%HFN(
ztcahsIf>~-{f{V3+0-b6_!UUOmJ_NXk)NNa2hvN3&Z`rtBZGI5`rg1
zZNv^0FIF0M7FGiXIQP8YPOAv9-MvW_ht#opf=2w2k4600?
zpk;=07;@v*IPb+h509EEO3*
z89*nuXEqfxfRA{$U|q3ba0L~#o;Uhcq9U!TF(rHq^}?Yl9R*cQ+S@CK&=~17>SWnH
z4U&$X2ZkWZVE@&=aAF`Te`-})Ts!u;IIZ{S8TRX!D~>Tp3QKdOTR-OEnE{U&`1tz=
zW^#0Ym>g<8^iEJ~EIPj3R+GMbHzEEf>*x;0X7h2>B;!-64e8%C`oJX%r@ZJlJ9U=R
z%He7*y79+z3uk`xu5MZM2ReOa9bIbNiy;1*PpJM7{E{N6lY)G-5_QeQWYc?8rdo}A
z4Uci{BXoV_2WzoqCr{D`poz?-_l{qfrJ|ZM5+{S$1p^-f!{n0
zX)pG=IUH5bsJxb+{SBP&9TQco|4
z-;@qF`t$O2(4&XcmOPFCEklkg(9QuU?SexmdA*k}Ih#A(`&
z;}sdveY+x+KVo}62mJUUNYvy}&qm`;o>7yIwH&vpt8pK5!Dr^_
zc-CAVlFmmqv;n=%?WO0`#?L72MHgLYiAPLuHo;*e`wRddnP(*_svF%dCyvjv*qHhw
z>QePgKe3pNkPsK(Qx9k}?#Y)eC?!<_!$iDs{w6n(^lIkShpw-MP*&h
z`X1F2F;trX|(NNacR7NkDfoe-
zcKsUff`zM&Q&sCNJg2xLbt}jn0qJ9*W&1~6RzSZ3yo|nryBtN(fwFvC{C67x{JS^)
zHL+E5hr^9xEZALX2Az@W@K)ka0P<)5^yPVI+;VP*cG{S#_XbM>qn
zISgKhfRFz})SCxFwg3O)?!E1s?$s_$w~dNYiWEnslBAI}*+P=CT*>ZGw-72yo03Uc
z8jO9(-X$c!0(^L2WEen0=*E@ye2*YaE*&*$^;lrT^P2W3lDD7i78
zC;6R1hvylz2s?x=d+u*$1~bkin^pM@T4rD7KQnfk8<+`i`q+IRf4YWM<9Gdscdrf&
z^4^D{u&+LAsm<~)K~C(KS@M{4%#!)eTUQbon+7tner{A|IGb(1aqKxu@o#l7m%5-`6a}jed
zoo{H<%DC2?eG5Is_zM<$p(G3ukupe^-+NaB&vVjww&)QltxF_czCsKC+509tnyfAS
z5#^E8lv@p5I&v}KE)mMT)!zT}+uRnUn?+2zlN$)XEKj*=TwfUIxfMRhX
zJ>(4jg-F%E&X+kvxbG-zu5f!R=HOQ0f=`G#sBXwT^yiJ&bKy=cls6^UGWfH4GZA*p
zr)@xA)go>Cu6(}&7<4YO_pB0pJbvO7U
zAVDNh12@j>3$6D0!XK2cd&FxK3o}eVG^_XcIggAdx?<1bod(i8iAhI|v#xp17UuA*
zk2Phj^^C&iM_~^sV}JV>7rfT^FrofII~Qv%|K=o{smtw*9#oAlxrrB?5n6J^%6SE^
zV}v99Mb<$X*9)+0UTx{}w5mSE;!EQE#~ewO!Jetp)Y_FqW0NJrAAQvf^aW0u=I?G^
z&J5cI4Pyylo!ix&4H+rAE7bWe_78)8zQ_zM$JoPKlx?VeZu;eP`hqPH@Wfq
zuqw^qqF`jldauVE>)GPMvU7dk@)Zr%V}xSc(`$160~2411Fdf26%PkH6QkPJ7zxhI
z>NLwv_+`mnp_xqvps2gZn>UHU8jRkmn1CDFjMe4i(O62HMTPu~#_&a{OU2D+^{$;#
z6yuSBCH?Fy&!n+;aida7)$FX|(ey!MZ9IEi&u6H%YH{%`6BTEWSy!rZh9A>SAJg-zje1XZOuo&F
zbIOvrz&caq>i3^~UWu`NR%P_B0+A)Kgr>btE=+oH#qN93`p?rRzV^mg6oQ`f=0+`b
zHyh5EV9tI_cvWd?x}=UCT|j@G1>n&GPqO+*$6Rs6(IFc#T4`
zMWm#O^48rOpG1%ceuzH6xLWz|KCR7|@SgjuE}v)R7qRkS4A;~N8Ra5hgye@#xUeO3
zzX>Cy^hbrtwLm;T`r^U+FPWTtOilCXzF$Y`@-ByBBbP!WcP9G}cOpo7NLQOD`}jLY
zGPiwm^R#36uX?OV&DX%$P_z>x!dlMe+6QDtNfe)c`SQi0=9Y)+GIR=2x|zr=iyW*`
z?x;W~xxBTt^|S2bUF~P;PMH2Dokz*^H=jIl<2d_>@Pb59SzVswGKEIBeM;K~9ztL9
zWY>YX<$oL#Ik~Sc?7(kxUbFI-fM>k^UCsS?rwbwTcj}#PsoW#-(avXWz4ff3F71P&
zP|j!iQ7a(jLi`E*9}dz-sbiPyV!lF>l``O?oCt#Yb{)IP?w0zCO@f-Ia0uEz4hy%aw3Kd
zX}W?}j~}^bhMwsep$G(9ns-l_
zOkJ8s9R2?8fl!3SE4a8Vt@r2b6Q*5v|6LUn?idp8rxH7Hsvy
z`3^9Uw%;#U~(-_0UhnjXpBp+Qr=FPlHTc~rAAtSWA0_cP7C
zAEJ}2Z?`XY$e!8MYS0*kJqh!~1;#V-+9t^HI%&dC@`tRU`!SgEAT!wCk_npNqn5zQ
zVSMzYJX5s8gfZTL!Ydz}Jn_^Y>4zllo^`Xl_JJ^?y?xZdH0V2lp2FmGZ67P&L6~!0
zO>8_S1EWptB&lTWH7&wWAv8e$^6hC%X%aei
z!3n7|VLYy=h08ndW_2}mndbACpN;8dhpU5EWfvo
z+YiHV!JC*}+lc@)2q06jWmx%G6p1^D@kwTv<*(R}6p{S{q5?nRxfx$fkJFG7{34qt
z+3X7q4>@n-z}7xa!i*4ZS$$
zc3oV${41ar;E3{tVpEN3L}Vg4O&6DDrAwgVr)%+S?=kQJzZf#|3RB0ZvbI`7#*Cm2
zwr4ddonvtk`BhcyYVxk2SX7@e&32&NLoGi=O{d;rR9Om~W21BOZ1@nx;7skRceE$((73$Ewn%x;=uIDwQT#j}Iwb
z#AjQ(UhS4w!;x8Yv_63y*u4e+tCa=UiF+nm^p^FHb%hw^@+42v(7U2?$lfcA;`%ZL
zNbD;c9{{E=<9uoqq#;B4%HHoE6WFXSi=6gWF}?-)h<6r+5
zf`ltsGrVURdfs=qt2VwNmlr$P>~wHIpV7^Yqf;{@$tI)RK~yXczEj^7;i~_v@b_%q
zLJV^IxjX)q6)El%w^?uTnbY|#MTU*CXZCA56yZ3s}V>VC;d!*-3_QlS1e%T5T+A56sjJBB7+y*YD3kLEgVS7=S;ihQNJrLB#q
z@8aDQj_7M`@2k(mcI(qJPQtDeIXY-a^Q-$JVD|;Skysxpm2i
z_TxD|9nT)f$ij*rJP<#&_{U4){Q5?JgcXUbJkcBm4H3oyOmXk4_#UZ9rTVfeY|QBY
zM%#gLiwenPf*I}-A?UbFn|l2n9c7WbkWKwl^E|#XhUDOJ!Ecdf-+Yw_)5hqXf{}zm
zMaBAyu8A&Vul~JZ=*aDI%y)4Z3qzq%5s_oo_!HN$0Db)Bov+!Z-M#7atWuk}U6161
zPUCbLMJh`2cYH8hVt{WjFtKZvSaN3Dw}jvzq_;%wh7sovnmvl6&*|r4_4A|u>^5aQ
z(L|?2MC3nfe194}O5oI3@7k09{GYLi5wXK+L*r!ST*|NXjgL^T1`EQ}*=QHUNDEGL
z$b4qYD6dRuT-C6t7M!~K?BV~_6SN9-fciK&zAo>2U@&>r^~MV?BHD16IQo}lsn?oM
zb*93*3bAC=yv_exgceWyJ7bXhp}vQI?>Vn@bnLPqXMC?^<&f{T#0QgGoFwUM$bXB@
zx#^rECa1!X&=Of$K)yddKuo@o3*U6_xp&#d;{BKa1+7rcbp_qc&kSIs_Mi_FkE5j{U&
zdXuuJuw12~f1AzzJ>{1jGwX`R>+B?LlCqVQW@Z-LQxJx7WQ8N{2Veh83Db;?@0ZZI
zs#F`hHYg?~E3yAv#puDD!x^*<@MiRKJQKf2uwG>hM5~;a@9ZnZJcR0cTIPxddA*PJQoX$aC|{nu_na=~{K)
zMPI)1Bd_CZZGO!9Ykiq%RaFMHKLZ{%?jR4nwRPKF_Bv|12JNbE2?}}j&PnX!f}z$*
z0Y22)US=
za{&MB)Y$E`89$JYZC`5zWuw$CoELzlB_EUW64ss0x7WXp=ZxjWH(o0Y<~;Fg
zS7E4l(j6ss;pn^I(UjywE6*?0{`DvZ3~(Q&9r@
zH0)t_8ul*ud763%B}6Wr3?tM7yTUWE;%+&pel~fC8ALy~b#p3d9^@v^nb>Fw
zeR@@?DcH;kP8!U0bcz|?%p$SZ6jrMs>!;E#)pM=-)4
zwbr)GgVc67)NDwz=IJ+Z%XZKTCwH;fpAIfms|^;`Dqp0jRT?rDFYqy^k_Z3I!e)Qi
zn;X#-CMT-=8wOp}J!;9#617mpda7i%X42VN&eQ8C?+cFa6|UqE4;x#2SZEna|Ik|(
z@(gl*UqAO;*l08A{?ew&B?SwHx0&zpXy2BJm>m%75+cO0HFT
zPU(ByDTaYt&pBn~c+)4W)LI~?S69u_xZC4-J#DKdlbyKSRz^cgC&lI1iDy~=K0m{q
zH54^G#W>bSru!69{_N&XA6{%4NAlZ2BAc_Pv(v6wR9;J}uPx%sJKxtysqzf7NkvKL
z&@`9hCu(ol_Suxn%aY6Nd9lhPhaE0c?zyQpW5sj)ejCU7WNz}`4&_hMxTbwq?Bp|~
zWvYyf!k=jgHjf-4!#g+4t-}|%B(jYhn<(%t{SPul9n)ea&rH8iK4st0fyO=n)dee&9h&-a9Q$Z!LN|2hzgTFmB{jr!P;gX
zV2>a1YTH#W3Qon$OKfi;pbTxa5B`~$YkM1EfKt3Q`z1uI8m=OaaPsiP0=D()K0lv@fqX65_t#GO-a
z)yRpvD7G!Y-%mkdG?G${m<~g}EuY5_zt7{8J=LyPwULq~w^hYPK(FYNDpe&L{zeo(
zBHyfdvH3s!%zc=_@dMUjVnLhrvXTXiw5DG&nk!>ozcM0#Jvoa
zEQ|B_`}AW|7yS40?(a|@naEM;T&#+wI`xA5>=&1)(LH!kk3CPl7PwU|caM0j|Me=%
zQJa~JTsh)JK@66f%#72J+mfoIQy;hae2xlFa;1AF{my!7-9OF+W2%qH&vzHd52VI#
z_z>~uwllot4v!+~x2QDv37F46Xx8);l&NW54aF$9U!uuW(k
ze%P!IjaU8JPd@mw*I%(PId$sYs&IY*vFmq!cP~;(M6w{V@z~qO1z+oGbk2AF_U*Us
zo~!M@U3Kd}vDNO%DFuD5IQ{MCHp%NgMhe_8r{za^3;7ml!xx0gJMygRg4=uw@#)#<
z!JnhOq_htez4RCj`0{kutJ2Bo?CsFYg(b$f-#U;R4&gn>)MF>ow~wh0SjS>>{lVDW
z(yfZ4klxo`D2tL4ADS@UFLN>S$G+AOlheYkSQXz#5Fzu->6Md1e~)0&AL5VwI9)Mb
zufO;g9er3O#(%qEN_uZB9}1L2MA*)!O&DG)ubspBt54No?X171qVCX*HDHw+;)Nr<
z9RIJzTqyJ=KW#00L%q=i>c!)CL}NE!4$4=F?^Z91^hEBOhbttG=5Zl&vCM154TOYv
zLJnza^;!I(@7DvdSjJWt+p?wA$B~yA8nf_0P$brZC0IJOqfffqJ7rFgprcAX@u*xkLQ1BRUN737R0-8jo6s
zn^Xkk$_?^)G7I_;R<`o+00G|eu3T&`sqS;b{}m&h;rZ{&ZkJJI{33>07KO>@?UU4D
zgr@~3y+MPiaY~{q`!sS0^XeIw3dN~aO32+(V=x|x%1iTM`<-}k-BSEoBJd=ITb$|7uJ1F(FriCc4
zL$zR4Ot#w>X6YQzU_hxIlWq^;i6b0NY(JCTLy<*1OJr~Ff;R_u%qsd~8rkUdUpDABCijVn168S5RZx%0-PNfPQ;0s3}Gn^^f
zx70!C4u2F8>0{FMAm$$0G5dnyrd>T63unqJ#Z`f&iL&y7`ENqrZ%iq$`txK^kj8wS
z_fJ*^EME2(>%U{~g7p7hv_|Kjca0ZXJ~(!L5$$a$Ul#h0*b%?5iK00LNvG4@`-3(`
zgdY(JY#@g8J=S>t6WB$*8RSUHFceW9uE;Hw$K;Fmr*W-@MEaHX28sMblqNelK!zJf
zVN!>QeTFhf>Y#l!-4U1Za<1>pD>F(%NqO)j<9kaJMFTU>=XS;h+KjBHpxF@e8%PdLTpVN3s=)AK4aDzKszBS9l_<{Vym(G~A+(XQu9hI#Px>&2V@oeR~#*OX$j
zJsW;`);C=7@PimHwz;<9vT$gO$5OcVPQ&P3+^Vi=iT}(j-i_4+uWqffhAuep#4nn7
zkusS6!_pj#et80XxLq%Kd
zwdt3yMdj!`Z`hqtelUb%6rVJ{RpQ7$ES5{#`i9I)P*Y&25o1S9eu4u}a<|U+ME2#E
zLyfOxDlp9;)s%`SF`sMTf^cqE)M)v#YXZqhI2$?bVydauPN
zacpX}x^Y(1;=eQ(XYhjOZ#W}A)lhs*X@BGGL%C_p;HJi}U5~D{5;EG1-?bU{hOYG8
z|7F3LLuZk|?5r8fGa7iDgvsYj!QA|hHK~m#F~5HERvJ>rs*65XUy2J1s~XPGlRqrw&k=ixr&B&
zarNzOrs2yug7(V0T)o`!2`%RV$Ii!hUACoE$UmtJ8~JXWcI10+Q#Qx?=NJ3?*zSf4
zFUU#*;IgMSs!cBD{q!Z-+r1y3Tt3uNyD|7xNBdyk@&_9ah|@c^b>F}xu~?<*Ohy$c5_-cy&TB8Be&+vUSm^?-@G7BjY-$MUsl|{)}d$Ns+KAr
zrB#9NcwL94z#LUQ0YBD|{P#5ai++%*?Xt4Zb(|=4_47d*YXyOMpqw8OS!@BjO?V-038A`^40y
z)T^*w;%|8TTc;4RMNqWMIrXiCytxeiYCmB(8viWyLxEc~oACW&xt>9~u`2>;Ykr*A
z(=rdM3hX+r{@aq1_{~)i&)YdFuVozq+h;d_Zf46*R;B#yrxiCkJ6w2dFyXR>y~KB
zybd~pSMD3#_-hj#hGOvOq|4fjwOY5%mp4f^E$aTVZR1nXvu--K_bn{_>se)U{AY+Z
z{dQrrYOm?<&(yRT{pXHCYgY($U&+$`-`XDX#Cucc?m7s?e3IDP=jDsN3l?$qjN`<1
zUKQDBAf<6l#I;1MQTPs@$1QoT{Ly;7I=d^~{aP>ERv^aEU$5WS{-d|znz(!>v#R3m#?>30
z-t@lsqa$rY!tZ-+dz>IZ8elEaPzSVicNXq{N#0EvRWuREiJk9x@j4$vql?=9Rp^vQ
zY&n?oT@z2ZZY1A+e#zjo^WM^>J(78oOOBcdKAxQN%>oLpkkGKWtE%5}dwDfpd$xoR
zUfC8(PKXAH@$bRU=hKIXfEBm}JY!}_(W?8kF=uxn(q9vH;_5`gc`=
z=l&GE`ARFIv9JZ{4=1?Od6H?rC!7(_XnnhM*9)@qc2nwA1(!FslHhs%W^O?$M2hy<
zD&w;_8k$rjNAf8IWRl14X@@Mf+WWg!#-#Y#y?sGrDLSiqmK{;nDe&4I>7|!mp_y>n
z=$P3CTfxYNrgP_vr%bM@q`?WT^gsXVxK6IQ4&%|Avhe?{!lTbP{`NTI@{T-1tNXl=
z#md)rFI&R6kK-CFnq;;&$-%z0T$jDGu+$WCwP+e+-QUgUUd8c9P^%-$F#I`V1nVCmgEJy^gar53fwY}bT
ze&J$O!bM3n!%Uh>9e3UWJJD$f6DgzpmQ
zH$6L%nY;EznToQar=ymgtLKj!NzI8X3MGsKKaZc$+)>YVy}Yeq@8#7I7)5~ri@)EBQ;`pGZP&?OU%Vyn>!w&
zGbE6EeT%9)zNPNWl{6er5rp2ZyZs``;NO-d@$}2D-oUdjvM@{`L!JYZ(`wVe=vmLV)zk)}#5rq1IAywko#riTm_uj+%
z|Hs#Vg=`Ig$S)i+CsOueqTWA-enGr(qHA8z<~`zC#x{KU
zgUb8ZJOgnhl|y6j(7^h#0>P)a;Q#+xt{bV*~^-QIoOP~q8bcNf+6sSa!
zH99yJ+?HW!TG`ow3~rtJ*oWX2KY9sy4n};72UtJsSy`yhx(ENNvG=hRUZsb(6(Ogx
zG(I>NJ6kRY4U?Q=3y;B5zwx2hX8Qw<0iKvjpLIlDFpMl)SbQr1vl?^H_eC)P?WqL%
zvxr^unb?8Gtfcp;bnF$}y17b^aq$HaIhjb$uaiM>)!NPk`pgZU{|<-XJ}u{nXGt&7
z-L3}@Rj}c9@wzR!{#@{(9l}5J$OJTG1Kifl@`SxxP<*MA#|i{y
zw3}uWqtUSd;HG;7vj^o
z;J2C}IH
zW?5Mup-x>eOSG?xlc
zhLTra=%d#u0{@U#gM~5t8$M*G5o0>2j_c1c!M{%|%SET|W2HchKUjKVDyKeKE)e4*
zP;NXM>-q|mZKL{(L**0$=E8daSWlJ_&PU_kWkidxZ{w05Pnu5i(W?gi6gFMIfD2Ai
z^iBONdZJ80n;m{S%NBo_gyNwP!8fAq@L1k9xQ2L!B4KHnn7L4OUoQEi;==Gb6k&Xi
zDb)-bGp3(cbUYON;f46^7g%gw@<#ehhPGJhxXSfKFDkESWo}qMZ{TlR!;Dw$Bilu!
zgkTjX!#jQL68;DtZZ71=byvr8lcI1nnqymx8+Rw
ztJiR&s`oyj%8!!znwEM8yzweDMJSO1jEA_VO`
zff|>^c%D!-I~bllaDC=t)0pb^5(^@+%_!g$KNz`nimUausOwnw>a0&ihHLPNfaP#86a!+GU=y!
z_l;(ooKu;{E%D?GY)=^ZQ_oA6>V`$jh@$}$ARVq7WGpymyvRrJ`
z1uuOhNh?CIzS3**2~fG)yX6MsrSrv+2fYEZO^I2koPI^#-%2k)zVE$yX7F-{1gDl*
zY*K|m5rsNIkc6yZK!9C95sYF_pkTG88P?@4Zi>*66LYzkLoT+Rh?FC;3pTIrVxbkD
zIEyYPbr{o%?6!I|_gF2!h&5denU%_+Wtw(S!LWJLIUHa_`6Rqzpy^ry8P20J?fReq
z*87Sckf_zPd$#o-XBa~TC7@MelY3Xq?WZ|^Mnf?@ed1OjLtksGt3$PV0g|gXz1w?
zR1CaXFBUT|5_e7&)-hf$hRqk1nvV^r(me4G>`bg<%UI7{qztraS8kreF+WHff~s}=
zMcp$K#(7|2MWR!T|Dv&$T)+`~yBK
zSqQ`itD2g~$Nis93Mi5TC^D~0&FqgDaVdR;@VFzn7#<5%-MeNYaHk_wKCde=K2lGr(|JXZV8J0
zJ$kpMos+KC#lJJ*kktV7wLs+x{@$^7Yv#>06j3l4M^EV2r7cm&EAbk33Z!xc-@hWl
z-qF3|uqa5saY{kVC8K%_x5)!S)m^QFF5ceYHS#{iAq&$
z8~kZPI}AEEq573io);?k;Z%{8;=Wz*iHC$~t6rgZT}#5Qn{y$BFReu|CM23rCR0@!
zChRbw1#X$xn#S8zKW1dMl1*xzL`nZL#xSPdR9ac{Qnpn88BMZxz=+VUAlCu3pMwyR0QlhSf
zAmz0u&r!{j=sCgQr%*X&T)0nC5*P{)fahxOqSfURMjTow)SKk$&oTN+D+}K&s48q)xJ)RW)Q>m;g32Dbl
zU?y*WP&z88YiT&7j7-r>gP!$lR_Oe_;y{)VxxZZUh<)R$5SbCj
zQ+yDJJy$cLX%C3=uRTH|rjlAW-n$J+t%uY0<}GZUGjlHg*H-Rx`RP}>ksp)yhP<->
zuQZYUegwiY-LNNc(@#|Nj!BmwFSuDYLFmYm3T_0
z$~1zEGX5(MD?y`Pi1<=^M?RFYu1`+?iKK0{GqN=t1fhEIy#${!dTc>$s9N%@{~mbF
zxPau?lnDcfDM8d+bSdPb4trgCDy=j@#{krS(^(4QV
z-c`HvV^6L-p>B!!T=DBFhz?`psYY|RK<$W#@h@lr`{GvDnV@K-hR8(rx|wcL)-{Q~
zY2w8GUI=rG+{)odMq&2_u75G!cNhLQs{Pf!E?r$)HczkJ-gXMo;dQT
zh4|!-%!Etlc#=J%0LeyM&IKG8>)|0g0D1%2pT3G%}v{>Lv<`gGj;qH
z;4tel%r`H3^ZwG|q?flSYST3@?&sbACrxJ&Kj^RBajnvf^}l@#5)`-o@XOK}OF@gO
z-r{mUFLZt{HS5y)`}d8p
zPjb)i`H+bo^ANnYVfIZXmJpA**Os>x_xK=mqTXNJ^Sx#Cn~&x1BaKr>(rbs(hP@%a%zk`J^b`cz2whVNXH*FA_D4I
zhO{-F5A$CT?q+&3lSqejzaSKKXCNh*tIKG6@se)5sjwIskw87T5q#0DEKu<9JJisk
zX3&%Y3OY%&LV5grR_UrF8uC7`CLwvAF)MKLUWLZPbl`%kyOkA>IggfihO!Z;QIp+X
z1)0Vp>pHHF26&-b+hjMcqz3&dC>MQw#)MQ*{Z~}yI$?=eoEBJ!1n%MJ^=fWjD43z^
zo!!v+;YQx0HNNBPPCxwCZnVF+K6cF&{KZRxY5JiOAtV4H=+N4T$Sl(91%W>5&^|M~
z$WP&=QbfIEbsBq&s(Za{$f!ULcfY_Xg0g37Z3&2B?^G0uog{X$P2l~TfzNFsQ50Ak
zS9>7wx&cfOaJ3;LC2u${-_-^IST^5tF`6|>`({BW9J;L<-1p{~DssPn3PQ6Yrq`BG
zo8y48@EuuG*e>(XY?zYpOY7<-D@j=`{D$u-(_|{|lWJM&SeN*IyUb-*KO2%IKe0W=1E;4nB
z6X;)E1q;vD`zJ1UDC3G1prtp@Bkvm0c3dVJvm)wX4nQoF8$y!FL80n3=$jT0RN+Et
zJbi?N9LwUpyc1*~t;c{``E_N-*4_KPJMqfyH=Rd4=X6f4;+|MBZ%OXD9_7eS?F+bU
z25jkCQ--hx%->QMe1)S^>xy5dE9WUBwgAO5B_`m^@(NhNzw-Ct_!o`IxA&QMQ+D#V
zM7q3plOfN4Xsl1Ae{VCgZbj;Jz|V;JoJjX+#AbNWNYqsJA#tH|nb!q`U2A_GYF%)P
zFPA#4fwTZ%w67<6jwpjDQj5W$CF$o-BqW)l^JRo&V{f@x>uwYm&%vIIZX?PKP%#g5
zRS0~T$bL?hS{!|u#sjC9c_Z4!i#dj3{{MuKTCJ(9STP{0MJfYGw{*vO14KaEXPqfj
zKo1X({$a{ci=aBn6eGp$;4%gy!!1$3#mI(#)a)9mfPKdgsJ^|?7XrL
zB&sAh2Po@}QppT|7%{5mhsKFAGssT{I*eo_TN21mJ@G72rlZg)K-oQ!P$L3jk#X{g
z+r{cdu-QfYi$dS^QAhMORR}XX2M+Od<(qOT}a?^#DiO}Ck2+m;>yJi&En2&XzXu*l%kI-smlPVe*vWay|-8QB}yy&HaC}bC09Z|
zEyO}?^C8K_DaN_UAM#dropWn8V60P7M<=Ak5Wc?sG7&%=6>h|TR;=?uU0qtTK$geK;gFOZ9vapfn_bk!6MnPIR_{SrttoLF(TDVhfII*6B*O*<|
z@aB$e?4|*O%shg|qlLT0^l`1<_Xm7O((NPHzpOE0aLvfBeB`HnyQ>g!Ri80;g4%Q6
zI=Qjl@1t0vU3k)UiRa6EwiHs%+y&eg=qzT9tqA5jY7<>;Ml?CZ!45|HmBZjd@+$z|P9!1SN8gJpETkq*O4PZ1Dyy
zeE1{$7e1ni>@1-lMA~)*`yKp`nj}p1Ae6=wG_eO#4lqVs^QS2tpUq;w^oET;^5Jm1
zOyC_BLi#TyqslE6PuKfRN0-h2?a5&7p$C5hHhe*A-__LyuA7y&eFBe7vH_$h*JX
z^28$qn*u+iRr>>Ac+4!Qiv5{&DIYmWwy3F64T#2GQ#Xx{s^?VGAZ^-1c|b7r?l|s2
z%l$@J{9lZ3Rv;s&2Gt(k@>O_vK${V$C!`}TbC@MpJk=SCaK;x&EOjs>%F~e30e+MT
z&7-rZId8y4I7g+*0e>9zDTk!>d0FTE3r-Duo*gEM+L>V6FJr^@HI&&yABP=+brp{$9KoqR2CjQ=R}(d{9@Qqd05{8&56+f
z!t3<*FjXq@?CzlTW269>OGHD7&Hw68mB}
zU9ESsrq7}Y;`mqO*coMTB@1uRC{gqRcmh>UIpgb2xL_@T5p3TBpDuQQ5^qj
zAcn%0QDmeq&fwR;8#Lm@@;gHdqvFx(hb7W+;9GJmGRpr#-PoSX1V{1Ib>Mm7#4fvq
zrT|&>`iPq~a7#@5u2=ug%^7J#`b9n#&O5cj&*^iKpLE*2Y^AU-EVj*P3K5wKm>bgl
zA|eL5pxqzU8!$qd6l8eg2e-@v7uyPeb
ztjQNztR49}{2Cb(Q0fbXlDR~{8ns_oS7$8?`kmPk>Mxv%>HzVa7K3J;U2R7iOq>2cVH`07^T2mzx<3QZW=9djJ
zzaHex<6(i*CcM_f3thCz4lng#?DN*8ow1$q6^NlmEtd?5#YQylq}S-^J-J|PYAq5q
z7d{X+g=;ghgu$V1|F70=OKzZv5XK>$eT?8*7mOhP=CnSX=0nI8E0N5rI!R_zWpwra
zN2ZwAkS!HSOD5VQGWpF{H%>K>5CvSw{1bZIiu~ymH2&A%o#8oy?OU#|)6X0_=Co4R
z{QjnIK{h$_(ScvXh0X&O)ZSA+&y!T}ehB)f{F85%q!oqx$04(P4+jLnRRr2d^&*pe
zJ^~R_!7oSluDK?(;@k|0#vpsMg<>+w{Y1O&Oi}ZojNsSb&zBV$k-~FfY^egYYrDzh
z@bMy}bh&*kyZ$Ev0{JEk^Qv!$gm6QMZi^5w7*^iknw>q_7v0kUx`K0OMQ|kN+Bz+f
z-8~U2EEbH}B%L}_Hexl=0V)&1Q{n()dtM{nFRy2
z1%q_rFtb;X5t7l~w-cI-03iv$%`w=cf~LV!+D*jzM_uyci;;YjaK#fNA!Pl;^L1HU
zapqsYvXNhqAB4px$Ni{O-^Tt#I^?HoKO^t2TlxzWX%*+U5Pw6U&*HH9w08lLFS?MV
z{Hd=^8+;ZM26K-68l7K1j`g0K`1_&5)fqKiGrN(95aePbjy(TVPS=srG&gEGTAAqi
z0DS2yjN`SsZn^0S2DX9Zkz-O>RK3_k$2O(#h8=DAt$o`~`b(TA+&5*2u
zH?Ce!t?B>{aK~f5VPy`O0<$?X9W3xp#)iCd`kh
zpltZ=0rJV(+R!)Wd{
zP>`jICao0-ZexMi8veS`Z1%=*1#h${Q7IIB2F391?K1X=5&%v&?)DZ6QObH%E3(cQiFq*1rGVgy~vb-zK&X}vW
zPSogd9DQ;wv+f9e85GNd_mLoa#DhODX{z&>eSiYy-($8y=*CLRGS9z_K1vWyl<#&Z
zjwX{ou{(5eJ`Fh_gKx>?{Qc1MsrCg0_5kU`l^NiWmk{T_?akbjN+}cvBB0SVPPBqe
zFoRY+M$du{(u!(~;rC?7Gkdpq$*`E|J;*-P_9Oy^uX6pU&3z;5Mhg=Z01&I-FmEaf)UJ?Q09rxj}A4w;?w7bKY_RJHTy=E@0_VV0b
zl-rT6N9!VMcEr;IQ(G^>w|+Z5l7LRyMUO-_uaRQBXNmK}g{ogK;KPSe1`I-qIexb{
zFMB6lS7Nga3mJgPPq4W3Lr*SkrJLw#^=k)*x_s8|&@^I<67ODYs`t+nj7*jw#3w3+
zOz>riM%PPPGosxnYCLQ%1qI)_3tTA4)l12CsYZSg&A
z1tShf!M4@|o55w7dPy}<&VYC(I|%_T_>#A2U?aZ9l18}=5F{hDI=jaAolDsRumenq
zV-ouY(#lpwj2>O#UWazdp!Y;MD!TT#h1Vz20^D1O0_1=z{hoy>PDz)+iviqEKuH&2
zyz{vBnBpcBDLLgXl(UoBLvPZ?-!rj+&vS$q?NuYZ1RT>@D3oR2o8qsdqbp-r?9spT
zSfUw5jMIjag)UB%X6%j!V;}^glpoytzPll%`@Wg1Tp9#$s8l@Wcn}1$61tl!5X*#C
zX<3-#Y8;gS9OZGX!&Mr{L8v!+Cl3hDDyxaaZBI?L#tPB?7quwWIqmyxET9=yVeZ=rOsI#5Q7
zZCpB;PPxw_Ml=`V+Ch^oZsHIap~jbZ#%{7-VD^hbVn?A6fEDdYzpOoFuRnK9^O2?V
z9uiP=@bAaQz_tOe18=A|#Ql2Zo|ILi1A`vVc{ZD!{pXAua+br47+!m1{>Clp&X
zt88)Pssbnj1f5c+UVq=?>!md}7r)_ss$46tHwR+by@Q!A3th3s5d^{;^(g|I<*x_a_OPKoU
z>*=hUl(Cb}i}iyzNXSiB{7YK-bIQq)CIG6ifUNLGt~1k{sA$o4s>eZ;0-?ABAJ#*Y
z@O7~RV3t3=46P#=?>4GINMV!I2{Bsw&ZxUvSu
zaCifsBdJjSGl9-a?EI-X2O4!d6c9Z}={XqhBxht1O6ju<+ij&&bJf4Q%B&7W9lySJ{RB2+u2
zKhI<3?L4)A>A>H~f3t!bXob&+dH^oBWI^le>BmUKehg=^d%jx(`NmE*VKb0AYMu^D
zaLESw(&}s?KqjXbA^3w~$R2km0vyNG&wobJ>goRsa?kO3b;WyIG?mbf-UT7iA*TcA
z<}WOIy3=2jXm1%TU7eqaspkb#660($c~haF5t423Ex^=7?R7CEXtqI6UA#4M_AeB?
zePb`In`5t^p$>gYG#W&W5j4r<`nyNqgrX8U3}^YIZQlcyX!)>!N^05xm}If|YXOVx
zK4wD+4(~)ZnBj?{8TDNUrlRJ*{B?@w=O&Y91`t>7oZRDEs%QEXqHZ1E3dGi&3o{Coi9n>*SPRbBF;NrX3rI6nd8QQDmblbvKs71`c+`iVi%MVFI1`%f$o
zJ~nDn0bUwXh>gXPJe}zaiosgMZ@P8ZZ~SUG4JdmjD%bOMCA8C`^Bk1
z9~vEnu7BTX1T(j_d)ksE{?!#(+l4jIO4D7HmAW5uM`Gtd8`}n`UNqj!Be^Ple9~m-
ze2M|x7~$6Hq5@<{BoSIlge4D+TPY23!q8xiX>=5jh1QwS3I!g_;54VoG#3GYGFaGR
z+m}i~%@02heRmy`o`-WA>oeaVS>=KCChSc+JsEKXm{xix4+-N
z0+Hk5VzairMV_YG4mm2MXNTM<=#HZ6p!XePLeVMU+O=}F%{$N`kS(1*bn@knSIF{q
z(tuF=Q84&7BC#Ho!yZk9K0FU5Jtqi#AF?x|Z#P2-%<$upm8>LG${fI}n3Gsx+kH0kup(`qz{a^ccJk|c_)Av8D&e)7NJ
zXPLtEU1a}86@W~7)M<3D9b~tdJOg;C>PU6!lrhw)UVy|5_2gLM-gr2242)sR)WNor
z!d+ahicp;nqnjXZXV*1qAfv?*tvz_kQO2Dj?``ru*{lUep{X{T?PH&~;IzgdB&<_)
zzOZGNx&VMKueCP4czo3Jn5W;BEf42S^0HT(*~tkXD=Cy*I<_c&W^w~Mx!s$g?;Ju>
zA2tzpZM==y;-``51Jt6mJ)H35ODvs27EDtXhbA5}`w2_?%GM}Bb~$`^0QzTUjiEgl
z<;=FJcLm_nq0uA+S4aCGfw&nQ#gdz7VCs_*qZ?ffOxEiJsaReRww~fNY?~Q68G4+u
zt+fsAmF*FP@B%T6*&viSO^L-GXi`VF)goQ+o#i7I$=BZ0Kjq8;mM9=-kV+Z>bdm#l
zag^EC=$J@*ctz6$WKl(ZB|J$xbyko1pos6*V1v-HD>Xt$82_?%fUR&QmbiKT?;$Xi
zK;oyssHRR|;~4r(us7Wr$)@jWLzbQ#M@LalVBDeMUqc1Uha@)|vQtmN?R`p&N);#T8vEYl`cOSNK7dam&R@Ig0?&^4Um<+kpLf``;
z&!l|1&$ihPz}2TSog(s>b2AxuYhXdF?^k?1)1i+H`VBN8X#4es_HjPrxeDZ=>Kh=i
z3+uEjHXOTzEWXQN40IxJTMa~*gM2g>}e$|
z5V5yfV7T|Z)1z)R!?R|~ks`gE#R(h_G2>B326a%MxED5c6LZ-@S3vWF)~vcfr;+;cyG(*6ho~jEnb=7DvKN
zz_{R;jz=JerHv>S9#xK|pt@hclkgq`ASUwU>LrF-y#f>8iQ@CA{!QUG#CG#hfC<_9
z=kIbLgjKP8ZifCyAwvsb*-A+PuQZalx!_}RTaO)&rHnik%J~fyAz_B{Iol`}^Me`K
zj#U}hd*-^X`MpTp#3JI}vvDoXrKCDU7&|})wNeR|_%$O$daH1&+>b(qFo(j`vup;fYjaKR^^TbJp()b+n$_8e}_Ay`1Or{gHzO#>b%n
z;E#3kxoj57_2TtGD5WeXEQ0w5Dk+B})9O(I?->JChafqM1v;_0H0(iU;sO8}X~Y%}
z{nvMa)4AChMnXndB9P*Kds>wf28G=X
zk%v$qK-zrkma6$iojbk0M>c<+wmMvAbIs>f*=i&F%PSY16r+Avbi;yOr|K+v0V*Ws
zaLT5>k+*7yqlf~xtemyR`rnK-^uz;4&KiH6KYyNMm_P(y7(~w-M;A%ts@YjPoF+Zg
zl<`E$2E@S%Ou(qOspy1$)`tHVg_~$m;~vz<{3YF-JkCqL_JHx3S#z0esXPe*wB<|q
z+TnY~#%zuIk#sB>ChLY1zUwV`nSeJXwp1_4zeGOwbtotpA_nE{)m=9@BhPm!79?`^qNx=X~4GxMk2)a
z@vUvd*!`EJ`8tEZ+BHkWHp+^z%DYrhq)17m{Km%IZRuOvi!A$Y#;HtBefT;EVG8Xa
zBA1%B5t(d5yofcNF|eq+HYLXFh}?j)mr){rktuS`hFEO%o~U&|;nw
zNJWa-w2#n7+;0D=Qwm~+j!`pX%qvJD=&=BmbGq3ml%bg1hkA1tgeOuA`e`W;kYZPH
z%67%cK|fn$HJFm%*U3QQyy`E!X9E@KcU=I#+IxsM+tsNRpF-w6s!2l-$~geNL?P)O
z!{>^~7dxak)-Z|OHDI6>L6&32m#SYARAf?sjSy-ja6#;jnkH#+g7z(y(xCQdD;=#I
zJOz>fYRo#si*sJGBjvRgyuXSZ%&{^i0iKzCGPnM^mG5c3ef
z*zXtl{muM*Lu7!_zCoi+r=LHwx!W13y2q-0C7ez}wP{EF(7TvC)d7iF*lEGk(Vh;C
zL3^}EK~Qb#FKy0>!G12B(!Uc3CJ{Z7+vZhDdMUBINGl50FA3YBxPWcWn0=m{Iqdx%J+DWwnABh
z2^&$j0~|UwT+Y;%BG>z)sA#@=nKLd`10kA=KEPadH8Xfi
zp3Q6)kZ3i_p!Xgo_7m$w$mDh4-SSvR(!iuT2uKuyRJuTZpWP@Dom#haXqNurHqZ0T
zx3=hSTi*WEV`Y}C8+F%Xjai{w2pgZw>e}X#oN@xXz^d+qEYYH%P
z+hZxJr5HyE9epAe$O}C-e6bXqBkk(Sd!gXpRU{^26F?6&UB~ac1Z1OUPM$|(Up-D1
z?^R|4uMI&`bnpox*b1oFpEHS@hotADNcakj0ZoAnE4-T?
MJ4q<3_+fdq7GQp@g
zfFuI-69}*{L$;68$VT%0ds+xas5q_ZC{-)V~)lX99wdyag(JfKjIV7;M>f6&|y)Q2RIgaaA?WX+9rjRbV
zdIqL959<4QlCG-i13ofvKf?mnfbpAjPN1t%FWMNj1DwDMumX3fSE$4H!}TV9k&e42
zFgJB^qXxVXDLgnX;a8qJAj+09uDgFUbQmB@F0O5Q)VZ0tnI8@AL7WZkq6@0@
z4T}B!sLRCMC+8)RvVbQ7>hxc_ZpIgW($0b-dDfYBHG)JULiDKjkcoXPT{lq}&t6cd
zhVpqtvETn#F7mU0bN&w}Q%PXh*DwcVklda|OztqHdX{)bC7P^EU@d08mr9cEV#|?}
zV1a9^#{Ki@LB`KV7)BmLr)wLGw?M+#{>=y3b>|oPMyHg2Suc&S@|!iUnp6#s#4dN6
z*eZYK+v<*aJ}y)6pAP43@FOn&xwpgkD)QGLifuyV?__J(Zk|Pgsi&U^{s#;+#-tPQ
z;LsWTFONnEp54z0i(~s(nj^XR=uaZWMd%R6kfrDF>Mbem#5gZq1#Izvat$g+O%Gio
zZ_{Y9cmDi4;_g&o5E8-w7x5$hb}TRhs>U4G;D1EX*#Zp5ry5*u<$pZZ$&RsPASi+yv9c`d1KzF}VW&B;W$&@7WTc9FR_of*8D0P8V
z(DuFB#1IKBe}>Q&pyG+-_CLd1k04L&i~)7#ej=|QJZ<938KhdioJ3tT$L#S?lI?I{
z5Ge~_1do21EmrL#GjSfoV4K^uf$<<#Yo71*1)?P+m$%+<>x=LMM%kxsZT6i_I&?7l
zXraO(g~dgZpH@cBmbeEAeM?M0bo9K=gc1vAwgS5kZKh8-ogxvc(bTgLhlUxjVvElW
zt9`;YwhuLoB(bg>N1I_51$XacVh63Nu9GCAHW1P7Qq+mJUiUVVIB5Y8_cAceE7YkT
zK)hjoAwPK7hNO?gvNl*|kgmsXNI&e2CW2)`zmf>?7f$c|wscO|Pv)du4O0<$Wbufm
z@>wCD?UU$giIQ^OlxJe^lP-;eu;??Ob}o=ROvRc&Pv}+t(_SuwOH}W)r
zmos8OJ(=43+^Ex>zzp#E6
z8(duU&3WmE=q;v`lV?iOSR3Y1AOT`-aqy4u*bf)!63+X+VG5cc_WvbT7Pr+R>l8F)
zUV2|tA7f11#JEe~
zxQk44_O*>}K@!{}%N|yC((S_dDUbWiQY5S)4rRdBSwbH^22oVfkai}V+QAj14k6l{
z3k|bKx+SoRZUD`BV8tQTWyI+OXj|<`x6Hff2)$($4d{+Ll?%PDef%9M$%2#wy4E~s
z02ja};Q~Hz!SwNH;;4MZj!^TXJ0KPcpBfR6CzC1(wCn@>f%R;|C`IOnM?Dn4%gn%(
z8&WzHsH2cP088IO>}W)+?9EzKdqi27G+gL!d(?CH{G43hYJ{U!+Ia8OnkJtz)2*U%E|<%>oChwwn+do&#v
zK^uVt-uq9Fdg?l=7cJO)uQ13N|G|o*q$x>DqY0LWcvA5g^%G0(ZN$V(2@-T~EI(m3
zAo;x}dZuiI`1#4n&cx_&?*k*-!GS{)vABdJcJ($egOD75^)G?`6`9h1Hnjg?k~Gu}
zdPv1y^oXO_;g53AG~FCT6i#25A)qaz$*n>JP8O@qsMZzfhVnsv|#V6)R~BXB;V3O1M&-{6sCSnohAhi9A`I0j%4UzbowDwwm)^5Yix{b3()b~j#6z&eq_){O&;&}%$`D3<5YuCh_EaEy#5h0{P}k$p=FUb2eD
z+V!XhsIq9xfZ_Kv#8^4CLN37IRdSG^eN`vwg-8QdPvCYsFWMnikV0kE_I>2i_{;aK
zQItq`YIU(JSMdSLkNJ)dL3iC&V;7gpZMxmu=eX8fsts1ZClA0)=}sR5s@^SDjB>}w8(zZpRa
z4+sTOWd1^D@0W9Dq{&;^;Uh1{zh0*C7V%i0FtT`toTmgv3@Fxkkz51Uidw)jX2`7c
zCxR;eIkwXEzlFOI#7GVO@Kao=Bhi2mJjl?Q`oFpcY_p={Ojt
zvFnnI>zPba_je}JsVIO{$79{^_?yfcmJ>-9NnuMl*+o5dYliApj!3xmlp!wS%h52*(
z(3L?AY6^m5|1ls1`^!6GX70NsIs&~YXFwIDE+5Su8s7ot3(Qy{AC;Xu)G$BpgO+l@&hgCVoR9(2_#u?5*8n0n4+hdbS
z6%&M*mg}x)Q0LP1LjB3xWn;56jYjv3A8xpKCO^AeENn1?|R=>!PR?GnT2{YHN729_An+$
zCNSBajq&)
zbIMRn0_`J5a_iR(xuM4kaysvJ(C7kwurgd+iAs&`b!~&xVNXpI*!-Oxi3JacgdVRf
zyUr%Vnzi<@&Q1GsFuL6T4ymfd1N_dh;s0e@t=&kYlYIk~SVg@9IxLO6?k{KxYZECH
z*S{BWgiYMtOXEHA&Vc#?$PyRO3ChS~i&wZlz_s5Knyo4RL;++^0E>2=+@g&Un*0*G
z^5=Ex*6{5*xiym3Zd~w+eb8>|Avf2>sz^)?(XE9!Sub6XA=v{p7wju5A{g$s2h-gRCeO2V?dCaq}Le
zmw-W%(HOH5g2{&F&`5(Kg3cnaHzD>Ltb~uCVDQ~=Hl)eb^yguhfEolN0s1HW*;55o
z1wfaN+2XY?M|NsLiGc}%7Nbp4-F`-6>D3&=aEMBi{G^P|1$L!1G_OAK94%b)6hjCa
zf$Zj#HU31VO2*?v`d4%)^PKUKWi6!0vH;E}xAjj*|9G)`fW{+(mQU3Vu{0$)Wg^sB
z3ZkqRkg*@Ad#a!BIx>YKQq|dwOeh1YF0fsL`svqA_}1_Dd8e;fZiTMx9y(Y3gB}5I
zbBUO6Y0B#$y~n@LtaS@MDgVQv`{SuI2!eqW_}LI_3KcyS4Ecpl?+H%t)%baSbeu0T
zW3VuGQF|gi#w+sx$+oiSCm7!;&TQzg?!{xBxnIYV^hL@F`QDG83bieDa(v}PmZsHj
zj8TAbS&T{%3?URax$KFW-W&exa%}z8WU^C+475kGH&nX*X2WAkW*v`rSUIC0j;t6|
zy-MUQ(Qb?xoJ0~r&RuMrq|ZkKib*S52lqxdakFi8Jr3
z(b)rO#OKU^;gX#q%SQ$&78tZ0XHM$-E4qariKKyp8jTrHH`Zxk_qI6
zF$M|7JuA+tjcD4g!0>v+cSK>4w+yI+^~%|8H6=ocE}3=UxcgC9zWA>+(lXHs;IF
z_se;lGCz|!GL+Kw4C;xzf!Ng!#}SfIlV*V{^ae%=*1PX69S@BA12!#Ej1R6*vjG18
zZr;IPwm@qe155~@=&&C)7IQ4Q;jVBzI62sRJwWyj
zbP)QtNct5Jl_0S(p9prHk6cLWf*=6|k9M@sh{#r(wK52q{0u`#;JtNi+AbDzY~J8F
zfbzd&Ar5uK<+cXg=F?DXrp?$T-WgAN*Hg6lc&u~7AZ#}C(QIxJ%E_pP`RWBH;8^J=
zOrn`NO+~H&PLig9_Q7v5j7-#_lJ=eP2ovNgu~5}DST#3qE%Ge9NLTfM_A>A+-@S=D
zVstFRJsUgG5qSHox&XftJ|IWkg(SphpadBRG?)ci%TdL~Zlei0VL+9Nk75@MIW!8f
z?wuCh67(ERrhha#{6|VtS+dLm%c(x4ueVL#)vQ4Tw2iVi_A)N=}>#!DU^vVF_-b1*@b|DQ40@>;mWX?LVd<2y-w}Tg01X1jxT+qQJW`zriS!z#3>3!B
z9P*E-iSk0v`s@prB@ZcVQ^u`o^Ky_4bD+x}|4OIK&h3_b9!Tei-*XRI|k2(d)WHTzbJayQf40@Zh
z#lN1K-sTDnR~qJemD$ER1*ytl-gJ5;9nZix;~^IWwt#+z5?;A6fSmhV;m_mjNo?0n
zld6uJ9*v_AyqV~D@9b_68V_lLgl~U`HX9%)UO-=j9IJBhc)xaCsvEk6un8y&*6j_n
z#-5?kQwi8Gg2qf^v44epXD0w72iu~@p^+(#LTx*@wEreL2IeB36f#R0?>?=dNxt^4!5E+4X4P(eE82Th(K>j#eJ2
zw4g=VSP#4;OY`it#D6*0jQ?tIzdgonJuFNHP5x@Z2y4?4=tWD~Nx=Fh=@AR}yJb$A
z_odDv`YJ?8n$+)1Y_KA67E?WHRWw*TH+7YIWqL?x{3(?A@YfySw{cpC{~9U?Om{X=
z$f{;A61Ra&5}mvI?m-fG;DetVk|s;Z6$DIdn?WqS0wQb+fS0m~NSiZ$5=8=T#DJGW
zMcLN>g6lwZ!JNIz!1~#C;J_d4bIaT_UHs~Q*!0n;C`Ol<$vh5>RBo7|zm~WY$~6{i
z(9M{SGqC6gA^CW3uHoSm5HTJW%I!xl`h$^yHTI0MqgX{Z%tadAL)pJb;Nh<(fQSHg
zT717kHD|t@Myddbl7nj?7XN&k%hi)h-GakRszXYLR<_SCeW$LwW}A4mtNLQPoP=$E
zVJ9bO(IY5MlG5&aj9?N8nMiE1wd)4vq`vv(fSK&>1CKBli
zV+Xq?6NopLaV#@}K6{mpK>7B16SEy1S^^M|;Pj;4pK2j1|1bgI5%6Y0|31$IiqhCY
zlKM9fCHH_qq9t%YmU4zDp3On@k)BjemR~4m<8cAlzx*ddRHL*uA_U8&KIRiPHYydo
z*`)uM$!2r|K^)$+iFng}3qnmKnCi+o2w@g@GC}IX@dlHeY2VBE53x09BmDh=klZ&0
zcm`rmaB-cshDU?~m7ILQnK)oYyupj~*l$squppEe@%joBlwHFBw@Tl4M;eq>w8$V6
zn;#49xL~!g%h#G^Yf??6?zezc04#a!okT3v-{gUk14zB!?obZRa>vTTqaFv6j4T(E
zEb;2df|TU=Ynt4v2Rm1<{(0;b_w~6uu~5y=Q5>MnPx(Wek!}YfChzqDlf0_)R5Gpce+3_0nLSGjd!0$gC@%
ziO9eeW15hg+Dk%6R(QKS2#im8Lm9<4M@fu5fhZ0qs`nnr{b#L}jU2-Ke0y}2o9GLQft`Q{`vsu)Z6ks&=HeW(-$6c!CUnty?Q
z3^4taqbEJn2A7lqy8w3MBR(?Kk@V0(lsZkmG
zir4I{$s(=*WxS!|pDo@4Dc3o$L2F2z1s$-1s=>I8Y=ETjhqEyYSjt0|&0FFPvh15;
z>?$@7lMc)mwoSqt;*D+&c4C~iC!q*=3D+b#`=P6IZM9pb{)7T)ZA0o_;*a;YF0kax
zSw6|CnqzCt1)7mWBw?7@^&RqgJU*9|L?=0i$laNO}C4y_UX^zRxgqoBGjH%@VA
z^9toq{LjFE%B&W8hQ1E;=TJFn?t7xTnKL!I(Eyq20pMusz5=g0kk~O*5}i1^Wj8{;
zpJ!w5Qy{s^oRzv|Dq9pis1EtAtD)?}-`HE!+;&J+1QUnOIhaK!9^2qOJFIqkk1|l&
zSmawq%y)3CZa)mZAenJ|(AAFgvyGq}V+vHrtC)6dr8n&^_mv=@FVhG<$%{T{IJiAt
zkIZs%%E4?C29+Hm91Ha@!}@_5C@nYym`w!0k(asleQG`QX34*~7~R#YwiW;W@!s}eL|iNYL9vr<|~?4lEOfnbCZe;4I!
zo-WpaQ!J~|$W#Z9QSMb^$Fy_7Npf%=HRw8S=xEum0lAxC#{lOWirg)^pG2Q{p~dMz
zhT2wD1UAUp;YI?}eN|-Xy9a|DNflRErvZ*+v7JpKg8u#h4;&GZ8=`)0t3}(vEzxk9lkjKADPtzzA(fq;Eg?-Ejb6
zBsZivFCV&dTSIG;20ju`5+607{u_buLsFOr2?)aW0GnqXz>?#R;DmN%{YU)&@hbKJ
zqVPeTYA?MR1_i{838=~h)d_)jMAf#IMqtY2)@CS^>;&wUUmQtZ{54sjh!4u%MPfk6
zB};uRtNzeiF6t|LC2RidtKLU$VrqhW-WNKrwv^rSd2(j`vj)r4?MXI>i~KRLjw5L{
z^MD$ajVUYPf9^I9KxruO@+r9bMf@UUz8UxU*pRE1*h8eP%C^TRgHZJ-fO=JN^)#TK
zc;sMR3k5;$H8OLDQ!5121y~x?dkZHn-2l*`qhSar0aR@01QbG&q4B2XU0Z6Gm%%*{<%Px??Hp}?c~+5aLsG(5^$GG-qa8gx!1wSaT9YvP7QUN{RM3tL
zyCn$qX3sU6*b`5zJnWoMea*{he-fxOb>DNa$l5j5OuaRPG|DOfNMW8W0X2j;R*u!w
zUSc67;3&kl(*iW#RcOM}bQKhMRBERfHUPl+`0O2n_(?*XOV*p}O5L#&m^RQ=E#@^&
zI^nNI`XnJi8LCX4nK!fT^BEy|)5{E~tfP05cxNH5{T(ZP7DIaQ-o1Yh05}>6j&NBhcClu3u3vgq4Wcv0W}~g;M!y4
zJ%KZ}?fTYU$gmmUyexf7cd$SkdVlV4*fGevrf%$#AhSzy*cu@U{TxGWD6i@#j>Md<
zN@>*}VTj7#VvQacD`$3>LXHx7}#91y;+xR@mDev7Y
zLB?HKhfeu$ubRSZ7vp3*=4rnk$qs0yL=2lUeCJ;YjxT-sU&^-ERXYWzvM_sN0U^%W
z-R`sY)HV2%_f@FyFW1GWN&P<19g)CPKLwHuY-_H^V-R-sa(@-fep<{VT31Dcwp5eJ
zC0w;DnS7q#<<$iuq4`?TVT(ymo+D`Ib6srYY?~^MfT|d8em+L}fvc(Td|_9o2Qx
z4xpWJN1Tx`?Xp>wvcSy_5_Ji(KA|9FLo$5`CBeBUst8A=p{y}Ci8nCd|C4(-`
zF2$I-UF!E5ti39U$*HJ2S8QWN-&Nge?NI4Y*J(`m)6|KCc`=KXRA$a`I={h{OAQ@*&=^>?Haw_$J{m1z)aiqOsjJ>YuvZoz3pp
z>53@-))DR;3^?O%4Ix9_UDZpF<`BFl_IKx04)(M$@XUE?dh2ysrcO)8wXbR|LO&lq
zAAEqXyV%6h*+@+Cpj%I-<=qU5#!k~dbBB!k)2|t1cbv{s$g>O+_IScrvHl&DJ*B3S
zHIy8l#GPpQ%r=gCkjCv8H!HJOFA`4^pFWa-$#>f8VlceDs<@SeB#NMMJ%sE7EAP7A
zn17=xiW48NJH>cqV79|6ggD=hj1T;iczIyelF7I0D|epXc-?n$sd0G9C-0{vld)Pa
zS6<2UP>4%5yMv#<6fgR)^lIx?iMd6h`q{S3bMwcUYwdS@`E4v3qFp&*Uc^|Z{-Mb&
zNr0)(^VHhG=84`4vM*)9HI{WIb~vwRbOLH!s&x!qne(Ae%b4PxS3f{1CQk-m`E2@8IQ1|e|)UFxSA6aF-e
z+e7bb;|CTGT>8Se;X<3~TEyezDsZhPz65ZRE%41&rlBzo|7wUwXQtO!cR%uOp85zH
znd?!2F4deOkn7RzVlg!{R{yn*IAxHE`6bV7u8Py4iiH{|eZ4HeW^4I2#7w8}zl|3>
zF<=|}W25#BLT}6Kj)*8Hteo$BXK1+?y?VhpWxn=nY0}nvGBNwS3wc%ZL8;g)?YHqq
zz9lICjA@8D;Am(rjwoKF)!8)}~NJK$@KH8;$VaPhrFdcFVs6ZhGpY5yEQ%$uCdO$e)g
zJzTK6tns_+U1m)@#UN_yT3@fzueifU96ky<&bY_6#nUO~0%@46O@3#kFm7alXNX_D
zlvDL?cT2$u_23IF)>gbSoTT21>+t6{pT4*w>~ni;+qig*XK>$rZ+L3KI!H_ikCOgz
z!4e-^LY0~y&%)S~ow>mrooTl~`ZejeR$pl|X-WS3IoE?uEDzz_dvaJ;;Kkeap=g_o
zw_m!NhwOZ^b|_Gz!Q*3!@|2~@oz&>>vGFhwKY#q297BT8Y`PmlKF6LtdTjO4^?M$<
z^ekacq+;ePEb#9+#uZiNCsrvZZ0pgdrb?$ajOz=`>ThN$NEuZ)B!8ZCGWy+MGP5)F
z?|Suj`}oT*zgNpYyE8WT+p)J}j>B1yK)p`j47ifMs<
zzAB$%Wwv*Q4k;>+ZgjjaO{DhhG2i+8iz>X$jTc!QNB;fP7YP*Yt(IZe@2?2vT=MgO
zDbMJA_v5*}U!SgkeUn7dvrbtlC$`Top@$djSxarS50vg-VUDZ&yi=lGsEZ#LjZDck
z%&MtB{_l?Z=C#w>qWo*mvtwJ^Cw54h;)2V&pG%lLzRkdr)3ACOGhE#-?Co^`2_!S6
zF8fFkeSho|0ly0sq@26&mAxiCf*vyX1tg>=!J}x6xdLo;lT2g(-~KD^-eAw1!M>cG9p+i3v>!|&GN1e2^rT
zPYI{Nzt<`<_ay32@x%Oj>3`edC79wHe2
zucbKor)(;g?iCsDP#9Vxy)7jddx2GE531x@?l&4Mv(N25&t78Jr$-{Ki?c>LRSnOQW)@84@up)bzG0?IUM88r}@sn
zRhhQsm3&#{OQU=LghVg9$DbbqDRH#8g~+u&NWb!K*SYE8jJ9dtUgnjxcN6I@_xfBc
z)8AU>d$42wQ?nP@5`I&Ho%+%-Y`u`Gd~;vx94Ye6kLc(Y$)RViBjp6E#NQ;_)|e{4kK=n>z3+52=vogDn77&@+eitHXA*O8l+Tk*as&bQ|hF9Lz$^xL?K^OFPBI}L|wUY@`1
z^*H#Dgiy?tlTLcn42!cg+0Y;K7@zf15>QhMcLH$v=q$x5u(}M<4twb&j3--2#6Xc@a}mJW0e;
z(l1~1N$SnStlhQ>br>dFd~OhG+ZuAq-=2THfpFE)QHx&UM9A4Tv$gLoe~7tMc2r1M
zPoVT+dhhjWLU#37ymyRiQPc=1%bn3lVt<
zr48rHhI!=r0x$Wbgr?q1!?yV!jt{4}oaF_ju%V6E`i#=?%S2Tow@l`AZCY4kSy20r
z*Z&%JwGr_UJ#Qi7&+0S2
zm*_1&wr#_TvT)8lqLS$8F@{2&vD|8V!fns>P&GZ4JWa!NT%c5@o3vI{FSPN*)w~{N
z7Mf&pE{t`0a^k&>9~w2RFbW6eu<&i%!e38`b;JT!Ue@jY?QL}C;`sM^*4InKwbEOi
z*y|)>u839GyXgOEeqAc@L!v6mRO^SZ_skzBJTE7`61FX>%jp)>@XhU9PwSBj3e9!?@$j*v%6ZAqL
zE$7Dy6B24nSTnSyZqOZ7Q086%pba{Zj1cSKDD_r-_fDHXsdDP
zWtw+OO{pdGpY7>$QW4+clkM@4H--@Z
z%kzszRxRcF5roSx9*_U>Z1vlA&ib|*=E1CcJ_YU?0w*zlWjv8-GmuFof|soG*}R^U
zBpGlgY)4d8k6gFmhGg#PnYvH1ssi}Q$1m2%7SHwP$$LUSY#(U~9-nI58?#G8;LO-t
zmzXVE%^QUbAIfzp<1>rH*5_d7M4k9dSQ>77gG>3RukL<69T|hw6)e8QZUyG&2Sq$F
zkAW*2P}iul4rKKalX2;X9*q?++*6iKtt(iRuC-L%_Z#huyoitS`jU{Rdqb8i4xg^}
z-}QZ~vFAa4Ylj^Bk`GJl_Y~+6f9pCp+}NUe;_txN5ifb0F)TI7!^}Ei$XuW>%=Yagdmy-A07A^Aa;d)W3G3>BoWz)puA(#VWi=Ph<4OCB^u1J{Q
zae|}MuZ&%FCJ##@8{1y
zs!H{0v~J)e>z=wKn7QZj4qxJ;&Tls<myMT?K3eza;^s)2!%c>DBr#UIqGI@|FXNVp9e{t0)?rr#|F*TR+!s6W0OTV63
z9~G%&Y6#UYTYQiQXZ%;|8Lo=7dcqp
z+SDiBR^!}CwtV|IlFzt;?|Y3FLs2yaAP;WRaUKhNaVA=-T7><;U(X~RYsc1WRbPpI
zeTNo&XScki%3p_tS=z5*Zl``l#~0=
zv>9%=ah2A3p7dp(p()?`x6K>ZIWz8k`MtwTidU^HY9H5l-bHjuZ5(nsRi>u32}hS7
z3}$K7-_gwnp-|0+elKi(tK)VGYs1fdO0pwvQlWcy?RK})pf-LLZ-1>$4>uHEUo+G4
z-R>^PkZhf0s#irr*%~@aKX7jSlCRI6%qaC)cOdDMk2cpu>^JP#oEh9epg++7dcL&&
zPNc8>tjPFJ@*V31Bn2E=H$qt-_j0-I-^W`ypK6#(wJ+Ig9JofVI+*m07bfbGAJ|!c
zT4R0v!G7x1i^IVBJI1fO*UKT19uc*Tt8!L|p>avp0!ka@-q||nI^GJ;i^_Wft>Y53@_8SaSVH#zd_|)`fgJa1@)I~L@
z?h16d({@v(Z`zgq^Lj%BtT?@w#<-BIelPs~Z>X!q^E;ggz4TuA=6Qb&0Xq`|+eFH|
zlJOLQ!KFac3e?A}KT-tNa%;KH#
zOAP@yJ<44;OD=l*4dq4y0nT?pgQ6YjZ1K0MCYQ1^EpM)HWjp078Bm9gtr;q?Y!vbt
z(Aix^7(3Z1%Eswg4_}>h6gvl9@&PyDq#N_h4<4&v%id-O{7pMEa
zvVoAvz`jqsry5O`hc8ci^kEflr)X*}Vovkckq@bze7a*=nm7tCvz=E%VAk0DYmO>j
z)mO&c_b#`W=vnKTX{PPeSX!c%7^*>|TLuUWZBZ3~6gxg53v(*&lHO^;@<~{A{8OCz
z(h47|i{Tznhn|j#9YYO+6I~fv
z_B8M9xJ&+p#uPY-@|p!>0;WJrK99{ih3k}vz|*@Ji#;11{2w>bHVch+LnFcr=k6%f&gwM!x_E@)%bWK
zUMI4j@0pESo`I-go%#yYr^##}Rfy18$_
z_u$~>^_zGP{rz$BP%$if@;!CFc4=iCIG`QS5qjVw=%CS1mqc$D4imFup`9USC!XJ;
zipK+t0A|e$q@DNeUkhwh{9B;c5`Tpay_Y_{^7Os^R6C7FdwBlqiT>kzo^C2Ubt6b|
zB5lpNO^05I8d-%F#nUY~h7BudQ>+a>_)q$pI7^^A^~dq1VwB5x)opzB>D*n(L-|;y
zgd<9{cx0Vkq?eF=h^pn(CNo+K(RAN+qITcwRG?L#;8hMc6*`r{4LT0hXP9!tV)X*=
zGJO7u7mMO{ti99-se|9HwU<0N&pCUbBic5-cc+4
zUBwmKefu;cZd^CKjla3*Z0w%74uzVF9UAd6mPTB*x%n}ntkto$V@ACO_nUj$6}ej~
zv>>nfWjfpTOFTa>u*T+54K=Raubv#%#x>LPvUkw-@@ULwkhk2DEk-Mi$Wc2&uVBYJQCLlWi}MhKqs*x6pV
ziC%)^cfhrMA?e=1>t`Ufw@yzd`abck>_oqsmiIvVpo+=6ozK6zmM9+2QJNpW<~$J{
ztGa4<%Qmk7&RO*gv)D`D=L0IHiJ8p^L>sX2p1#&r;W_Y8a)*>oBz#62L&Tymp^LdB4n!%xrO>p^2J^Shs)$FD@&5C%t`n<3GJ}&*)etyp^h)ia--$t8^
zp}=x9Fz+Cam`zSj;K#FeXmslmTyz}$T!%{4Ci~vIcK&@eW8CxX)fhD>0bAPa&U$(|
zo3&x>v|9}d@^d}9@Y#f#%m=gYpM=>I_Q)Z$ub_>UNWhiKzoG+kY(&wDaPgYtc*#^8
zhqT4BQg&^vuc1mAeER!w-)(U`1S&xEGT7a>$He*|ECBU+iR9+s5L0#h%`?k}^))fz
z6v4&z=3isIxv!r7NeG77ojJiCbquh2gWi}+`ev{AF`G(wWPE+;Wqj_l{faD0D2gMy
zPwcS9({rDH%U3_+854w37r&0*=iZPO(scXE;H?*e{P)P-8TBC`N0+YC_Ho21jS>$n+WvuCJTl&rfI
zEywct{y+?h`(J**;#}&Q(lkdcK8J4RycmWWF!uX6X1p7f`*ViZ$-o#L3X)#TU*FLS
ztqb1~k>jB`**hg9*TRfS-|#5vt$}_d`4t~VIX02%>3crxwu3*kTEE0?!W#~7!fI^`
z^`zqN|NFaj6ith>NCH-GNL*scNgT0BTyEOxfp@Qz*a?4W5qTRo!EV`qktKH_N4i51
zXU$d*YQxjNXuOVc`5KxbGe%U?iMNElIfs_nQTLxCOny$^p6C&`W}@MfFTnsnZA(IuNkr%<=do%G~MgYg)`0_TQ4d3
z-}ZMpTt>_G3LBm**si_Txj<{HLDtwW2P|>Ci8*->KX9UX9ivs0kL!l0YL0PHHBpe#
z!)1&pzy*7dO#XemsP2hOWgS9I3+|Hu1%p62^Hff0^B7m7T8Jfaz}a
zcWj5_$i+3otHF-Yn|kR1JwT!#&%U7(0poxERXnIryr`{1ME>s|`qyh4g?
zGaMDA%ilVchCK!*75aU)$)spjr0N~Tp)Nn>m6zO|N57V5sNBJ4CVDpqh1AxqtXorb
zbT#@_=njrrSKrRwU?gonE8->B_sQjC)xk`x`#pAW)5!fy(IZ8?yF^~=eo9yCOr0Vi{Q8F-zZtt9zBzm
zBX*3Oci^$n&q|8XTZuH+U#EloKZPHCEpt@$UR9*oTHW`I{q8+$bOQ|6J?&E7^Z0-`
zZK=VDmAkiOtUqhI<*{gCe^|k0OEyoimdoquUCSenRND-+NnBA?g#5t@z$1+&;8DLpJxDhCb%N~
zh{zUpUDx_DsLKENw8z1E&Dp!wJrC|v)e;|Wms^^>5(>eN50#}k_Es8<33fkTcW&h_
zx3AUtCvQ^PqWy@ba-njk_zfyiOAOTa?Tk;@LJ^v9GzhF%-@|Wro$6`x()?*iAE!a)
zFk&je&zr5&Z;xH-^Fi4FU^GqTV
zBOiD4adLSyUmkWW{<^2#jei9x>Wb_S>Xot*jb$&HYDNQoLKD}nh1uuJ%su&3>dKxj
zx*6~%LSo~6ORLdg2Z2pf<>HvZ$YHc9xFIv2cg^+P`szhej$T7t^A!
zy4Ra{jFP==B+cDGoxqRawt=g!T5r~}IoyqQsR}-k{qBkqX@_VZn^&*JG~ClE9iB%u
zt!4h*^D(`AbW7QgpEv)yJ*DS=G;QD~UVah|SQc(5PJgZWEX*bFoM@UV6X#c43O6&W
zV;EcS@P1m&TC&RxM(4wB-&?!3caYuXsFt_E-no)-CN^4gUC&cBsmE^4L82$!N_;U%
zaql;V@4c_Qpz*vC!Ee9Z{PUsUZvV2+hg=@jy4Ut|?#17-v~83?^kw)d7<`+Y!Hd@_
z;!e{1k-q1}RwN}IjM@}2Wiq!%Y-ieZ{7Sim+e!jKM4tkU?t4^|Pr6v0x@^6=NP2X8
zk72Z1tvi&ge`(F=+Fd7_m=+T=e`_&%(_J$X>1i!1kL58gI4yg(ch8G`UDFoh6^b8i
z!CBFn{q(SXcH;c9BQ=NWm2EH7_Ixj+QNG?7aAKV9f;N}pI=ZW=&AY;nF8Q@Ry!DWx
z!2ULdP`-aq(d4cF&G&D*Gky%sgH`?8V@LGXZM)U^-Q8Mug>Kwug8RYcjw3(TUUSsj
z>`D1q`;tZ%SzqP(AR6PlaDq|aQ=Yqbc@%F{C~-6-3X|4bzvwLN(RGE!x8J#8@uxXc
ZYx%z_Toc~N{SeL0C3)5JiRW%S`G353%t-(M

literal 0
HcmV?d00001

diff --git a/docs/plugin/shared-event.md b/docs/plugin/shared-event.md
new file mode 100644
index 0000000..5e706ff
--- /dev/null
+++ b/docs/plugin/shared-event.md
@@ -0,0 +1,83 @@
+# 插件中如何发送共享事件（SharedEvent）
+
+在插件中，可以通过共享事件（SharedEvent）来发送消息。 共享事件是一种特殊的事件，它可以被核心和所有插件订阅。
+
+## 订阅共享事件
+
+目前，核心中已经提供了不少的共享事件，例如 `run.halo.app.event.post.PostPublishedEvent`、`run.halo.app.event.post.PostUpdatedEvent`
+，这些事件由核心发布，核心和插件均可订阅。请看下面的示例：
+
+```java
+
+@Component
+public class PostPublishedEventListener implements ApplicationListener {
+
+  @Override
+  public void onApplicationEvent(PostPublishedEvent event) {
+    // Do something
+  }
+
+}
+```
+
+或者通过 `@EventListener` 注解实现，
+
+```java
+
+@Component
+public class PostPublishedEventListener {
+
+  @EventListener
+  // @Async // 如果需要异步处理，可以添加此注解
+  public void onPostPublished(PostPublishedEvent event) {
+    // Do something
+  }
+
+}
+```
+
+> 需要注意的是，只有被 `@SharedEvent` 注解标记的事件才能够被其他插件或者核心订阅。
+
+## 发送共享事件
+
+在插件中，我们可以通过 `ApplicationEventPublisher` 来发送共享事件，请看下面的示例：
+
+```java
+
+@Service
+public class PostService {
+
+  private final ApplicationEventPublisher eventPublisher;
+
+  public PostService(ApplicationEventPublisher eventPublisher) {
+    this.eventPublisher = eventPublisher;
+  }
+
+  public void publishPost(Post post) {
+    // Do something
+    eventPublisher.publishEvent(new PostPublishedEvent(post));
+  }
+
+}
+```
+
+## 创建共享事件
+
+在插件中，我们可以创建自定义的共享事件，供其他插件订阅，示例如下：
+
+```java
+
+@SharedEvent
+public class MySharedEvent extends ApplicationEvent {
+
+  public MySharedEvent(Object source) {
+    super(source);
+  }
+
+}
+```
+
+> 需要注意的是：
+> 1. 共享事件必须继承 `ApplicationEvent`。
+> 2. 共享事件必须被 `@SharedEvent` 注解标记。
+> 3. 如果想要被其他插件订阅，则需要将该事件类发布到 Maven 仓库中，供其他插件引用。
diff --git a/docs/plugin/websocket.md b/docs/plugin/websocket.md
new file mode 100644
index 0000000..bd63e19
--- /dev/null
+++ b/docs/plugin/websocket.md
@@ -0,0 +1,49 @@
+# 插件中如何实现 WebSocket
+
+## 背景
+
+> https://github.com/halo-dev/halo/issues/5285
+
+越来越多的开发者在开发插件过程中需要及时高效获取某些资源的最新状态，但是因为在插件中不支持 WebSocket，故只能选择定时轮训的方式来解决。
+
+在插件中支持 WebSocket 的功能需要 Halo Core 来适配并制定规则以方便插件实现 WebSocket。
+
+## 实现
+
+插件中实现 WebSocket 的代码样例如下所示：
+
+```java
+@Component
+public class MyWebSocketEndpoint implements WebSocketEndpoint {
+
+  @Override
+  public GroupVersion groupVersion() {
+    return GroupVersion.parseApiVersion("my-plugin.halowrite.com/v1alpha1");
+  }
+
+  @Override
+  public String urlPath() {
+    return "/resources";
+  }
+
+  @Override
+  public WebSocketHandler handler() {
+    return session -> {
+      var messages = session.receive()
+              .map(message -> {
+                var payload = message.getPayloadAsText();
+                return session.textMessage(payload.toUpperCase());
+              });
+      return session.send(messages);
+    };
+  }
+}
+```
+
+插件安装成功后，可以通过 `/apis/my-plugin.halowrite.com/v1alpha1/resources` 进行访问。 示例如下所示：
+
+```bash
+websocat --basic-auth admin:admin ws://127.0.0.1:8090/apis/my-plugin.halowrite.com/v1alpha1/resources
+```
+
+同样地，WebSocket 相关的 API 仍然受当前权限系统管理。
diff --git a/e2e/Dockerfile b/e2e/Dockerfile
new file mode 100644
index 0000000..4cc3663
--- /dev/null
+++ b/e2e/Dockerfile
@@ -0,0 +1,4 @@
+FROM ghcr.io/linuxsuren/api-testing:v0.0.17
+WORKDIR /workspace
+COPY testsuite.yaml .
+CMD [ "atest", "run", "-p", "testsuite.yaml", "--level=trace", "--request-ignore-error", "--report=md" ]
diff --git a/e2e/Makefile b/e2e/Makefile
new file mode 100644
index 0000000..3339af3
--- /dev/null
+++ b/e2e/Makefile
@@ -0,0 +1,6 @@
+all:
+	./start.sh
+	./start.sh compose-postgres.yaml
+	./start.sh compose-mysql.yaml
+demo:
+	docker-compose up halo
diff --git a/e2e/README.md b/e2e/README.md
new file mode 100644
index 0000000..6a9722f
--- /dev/null
+++ b/e2e/README.md
@@ -0,0 +1,24 @@
+Please add the corresponding e2e (aka end-to-end) test cases if you add or update APIs.
+
+## How to work
+* Start and watch the [docker-compose](https://docs.docker.com/compose/) via [the script](start.sh)
+  * It has three containers: database, Halo, and testing
+* Run the e2e testing via [api-testing](https://github.com/LinuxSuRen/api-testing)
+  * It will run the test cases from top to bottom
+  * You can add the necessary asserts to it
+
+## Run locally
+Please follow these steps if you want to run the e2e testing locally.
+
+> Please make sure you have installed docker-compose v2
+
+* Build project via `./gradlew clean build -x check` in root directory of this repository
+* Build image via `docker build . -t ghcr.io/halo-dev/halo-dev:main`
+* Change the directory to `e2e`, then execute `./start.sh`
+
+## Run Halo only
+Please run the following command if you only want to run Halo.
+
+```shell
+docker-compose up halo
+```
diff --git a/e2e/compose-mysql.yaml b/e2e/compose-mysql.yaml
new file mode 100644
index 0000000..62a9914
--- /dev/null
+++ b/e2e/compose-mysql.yaml
@@ -0,0 +1,46 @@
+version: '3.1'
+services:
+  testing:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    links:
+      - halo
+    depends_on:
+      halo:
+        condition: service_healthy
+  halo:
+    image: ghcr.io/halo-dev/halo-dev:${TAG:-main}
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8090/actuator/health/readiness"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
+    command:
+      - --spring.r2dbc.url=r2dbc:pool:mysql://mysql:3306/halo
+      - --spring.r2dbc.username=root
+      - --spring.r2dbc.password=halo
+      - --spring.sql.init.platform=mysql
+    links:
+      - mysql
+    depends_on:
+      mysql:
+        condition: service_healthy
+  mysql:
+    image: mysql:8.1.0
+    container_name: mysql
+    restart: on-failure:3
+    command: 
+      - --default-authentication-plugin=caching_sha2_password
+      - --character-set-server=utf8mb4
+      - --collation-server=utf8mb4_general_ci
+      - --explicit_defaults_for_timestamp=true
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "127.0.0.1", "--silent"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    environment:
+      - MYSQL_ROOT_PASSWORD=halo
+      - MYSQL_DATABASE=halo
diff --git a/e2e/compose-postgres.yaml b/e2e/compose-postgres.yaml
new file mode 100644
index 0000000..08f0ce6
--- /dev/null
+++ b/e2e/compose-postgres.yaml
@@ -0,0 +1,48 @@
+version: '3.1'
+services:
+  testing:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    links:
+      - halo
+    depends_on:
+      halo:
+        condition: service_healthy
+  halo:
+    image: ghcr.io/halo-dev/halo-dev:${TAG:-main}
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8090/actuator/health/readiness"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
+    command:
+      - --spring.r2dbc.url=r2dbc:pool:postgresql://postgres/halo
+      - --spring.r2dbc.username=halo
+      # PostgreSQL 的密码，请保证与下方 POSTGRES_PASSWORD 的变量值一致。
+      - --spring.r2dbc.password=openpostgresql
+      - --spring.sql.init.platform=postgresql
+      # 外部访问地址，请根据实际需要修改
+      # - --halo.external-url=http://localhost:8090/
+    ports:
+      - 8090:8090
+    links:
+      - postgres
+    depends_on:
+      postgres:
+        condition: service_healthy
+  postgres:
+    image: postgres:15.4
+    container_name: postgres
+    restart: on-failure:3
+    healthcheck:
+      test: [ "CMD", "pg_isready" ]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    environment:
+      - POSTGRES_PASSWORD=openpostgresql
+      - POSTGRES_USER=halo
+      - POSTGRES_DB=halo
+      - PGUSER=halo
diff --git a/e2e/compose.yaml b/e2e/compose.yaml
new file mode 100644
index 0000000..c7892e9
--- /dev/null
+++ b/e2e/compose.yaml
@@ -0,0 +1,21 @@
+version: '3.1'
+services:
+  testing:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    links:
+      - halo
+    depends_on:
+      halo:
+        condition: service_healthy
+  halo:
+    image: ghcr.io/halo-dev/halo-dev:${TAG:-main}
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8090/actuator/health/readiness"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
+    ports:
+      - 8090:8090
diff --git a/e2e/start.sh b/e2e/start.sh
new file mode 100644
index 0000000..2ed7905
--- /dev/null
+++ b/e2e/start.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+file=$1
+if [ "$file" == "" ]
+then
+    file=compose.yaml
+fi
+
+docker-compose -f "$file" down
+docker-compose -f "$file" up --build testing --exit-code-from testing --remove-orphans
diff --git a/e2e/testsuite.yaml b/e2e/testsuite.yaml
new file mode 100644
index 0000000..32f2dc0
--- /dev/null
+++ b/e2e/testsuite.yaml
@@ -0,0 +1,290 @@
+name: halo
+api: |
+  {{default "http://halo:8090" (env "SERVER")}}/apis
+param:
+  postName: "{{randAlpha 6}}"
+  userName: "{{randAlpha 6}}"
+  roleName: "{{randAlpha 6}}"
+  notificationName: "{{randAlpha 6}}"
+  auth: "Basic YWRtaW46MTIzNDU2"
+items:
+- name: init
+  request:
+    api: /api.console.halo.run/v1alpha1/system/initialize
+    method: POST
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "siteTitle": "testing",
+        "username": "admin",
+        "password": "123456",
+        "email": "testing@halo.com",
+        "password_confirm": "123456"
+      }
+  expect:
+    statusCode: 201
+- name: createPost
+  request:
+    api: /api.console.halo.run/v1alpha1/posts
+    method: POST
+    header:
+      Authorization: "{{.param.auth}}"
+      Content-Type: application/json
+    body: |
+      {
+        "post": {
+          "spec": {
+            "title": "{{.param.postName}}",
+            "slug": "{{.param.postName}}",
+            "template": "",
+            "cover": "",
+            "deleted": false,
+            "publish": false,
+            "pinned": false,
+            "allowComment": true,
+            "visible": "PUBLIC",
+            "priority": 0,
+            "excerpt": {
+              "autoGenerate": true,
+              "raw": ""
+            },
+            "categories": [],
+            "tags": [],
+            "htmlMetas": []
+          },
+          "apiVersion": "content.halo.run/v1alpha1",
+          "kind": "Post",
+          "metadata": {
+            "name": "c31f2192-c992-47b9-86b4-f3fc0605360e",
+            "annotations": {
+              "content.halo.run/preferred-editor": "default"
+            }
+          }
+        },
+        "content": {
+          "raw": "
{{.param.postName}}
",
+          "content": "
{{.param.postName}}
",
+          "rawType": "HTML"
+        }
+      }
+- name: listPosts
+  request:
+    api: /api.console.halo.run/v1alpha1/posts?keyword={{.param.postName}}
+  expect:
+    verify:
+      - data.total == 1
+- name: recyclePost
+  request:
+    api: /api.console.halo.run/v1alpha1/posts/{{(index .listPosts.items 0).post.metadata.name}}/recycle
+    method: PUT
+- name: recover
+  request:
+    api: /content.halo.run/v1alpha1/posts/{{(index .listPosts.items 0).post.metadata.name}}
+    method: DELETE
+
+## Users
+- name: createUser
+  request:
+    api: /api.console.halo.run/v1alpha1/users
+    method: POST
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "avatar": "",
+        "bio": "{{randAlpha 6}}",
+        "displayName": "{{randAlpha 6}}",
+        "email": "test@halo.com",
+        "name": "{{.param.userName}}",
+        "password": "{{randAlpha 6}}",
+        "phone": "",
+        "roles": []
+      }
+- name: updateUserPass
+  request:
+    api: /api.console.halo.run/v1alpha1/users/{{.param.userName}}/password
+    method: PUT
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "password": "{{randAlpha 3}}"
+      }
+- name: grantPermission
+  request:
+    api: /api.console.halo.run/v1alpha1/users/{{.param.userName}}/permissions
+    method: POST
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "roles": [
+          "guest"
+        ]
+      }
+- name: sendPasswordResetEmail
+  request:
+    api: |
+      /api.halo.run/v1alpha1/users/-/send-password-reset-email
+    method: POST
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "username": "{{.param.userName}}",
+        "email": "{{.param.email}}"
+      }
+  expect:
+    statusCode: 204
+- name: resetPasswordByToken
+  request:
+    api: |
+      /api.halo.run/v1alpha1/users/{{.param.userName}}/reset-password
+    method: PUT
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "newPassword": "{{randAlpha 6}}",
+        "token": "{{randAlpha 6}}"
+      }
+  expect:
+    statusCode: 403
+## Roles
+- name: createRole
+  request:
+    api: |
+      {{default "http://halo:8090" (env "SERVER")}}/api/v1alpha1/roles
+    method: POST
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "apiVersion": "v1alpha1",
+        "kind": "Role",
+        "metadata": {
+          "name": "",
+          "generateName": "role-",
+          "labels": {},
+          "annotations": {
+            "rbac.authorization.halo.run/dependencies": "[\"role-template-manage-appstore\"]",
+            "rbac.authorization.halo.run/display-name": "{{.param.roleName}}"
+          }
+        },
+        "rules": []
+      }
+  expect:
+    statusCode: 201
+- name: listRoles
+  request:
+    api: |
+      {{default "http://halo:8090" (env "SERVER")}}/api/v1alpha1/roles
+  expect:
+    verify:
+      - data.total >= 3
+- name: deleteRole
+  request:
+    api: |
+      {{default "http://halo:8090" (env "SERVER")}}/api/v1alpha1/roles/{{(index .listRoles.items 0).metadata.name}}
+    method: DELETE
+
+## Plugins
+- name: installPlugin
+  request:
+    api: /api.console.halo.run/v1alpha1/plugins/-/install-from-uri
+    method: POST
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "uri": "https://github.com/Stonewuu/halo-plugin-sitepush/releases/download/1.3.1/halo-plugin-sitepush-1.3.1.jar"
+      }
+- name: pluginList
+  request:
+    api: /api.console.halo.run/v1alpha1/plugins
+  expect:
+    verify:
+      - data.total >= 1
+- name: inActivePlugins
+  request:
+    api: /api.console.halo.run/v1alpha1/plugins?enabled=false&keyword=&page=0&size=0
+  expect:
+    verify:
+      - data.total == 1
+- name: disablePlugin
+  request:
+    api: /api.console.halo.run/v1alpha1/plugins/PluginSitePush/plugin-state
+    method: PUT
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "enable": false
+      }
+- name: enablePlugin
+  request:
+    api: /api.console.halo.run/v1alpha1/plugins/PluginSitePush/plugin-state
+    method: PUT
+    header:
+      Content-Type: application/json
+    body: |
+      {
+        "enable": true
+      }
+- name: resetPlugin
+  request:
+    api: /api.console.halo.run/v1alpha1/plugins/PluginSitePush/reset-config
+    method: PUT
+    header:
+      Content-Type: application/json
+- name: uninstallPlugin
+  request:
+    api: /plugin.halo.run/v1alpha1/plugins/PluginSitePush
+    method: DELETE
+
+  # Notifications
+- name: createNotification
+  request:
+    api: /notification.halo.run/v1alpha1/notifications
+    method: POST
+    body: |
+      {
+        "spec": {
+          "recipient": "admin",
+          "reason": "fake-reason",
+          "title": "test 评论了你的页面《关于我》",
+          "rawContent": "Fake raw content",
+          "htmlContent": "
Fake html content
",
+          "unread": true
+        },
+        "apiVersion": "notification.halo.run/v1alpha1",
+        "kind": "Notification",
+        "metadata": {
+          "name": "{{.param.notificationName}}"
+        }
+      }
+    header:
+      Content-Type: application/json
+  expect:
+    statusCode: 201
+- name: getNotificationByName
+  request:
+    api: /notification.halo.run/v1alpha1/notifications/{{.param.notificationName}}
+    method: GET
+  expect:
+    statusCode: 200
+    verify:
+      - data.spec.reason == "fake-reason"
+      - data.spec.title == "test 评论了你的页面《关于我》"
+- name: deleteUserNotification
+  request:
+    api: |
+      /api.notification.halo.run/v1alpha1/userspaces/admin/notifications/{{.param.notificationName}}
+    method: DELETE
+
+- name: deleteUser
+  request:
+    api: |
+      {{default "http://halo:8090" (env "SERVER")}}/api/v1alpha1/users/{{.param.userName}}
+    method: DELETE
diff --git a/gradle.properties b/gradle.properties
new file mode 100644
index 0000000..3e7456f
--- /dev/null
+++ b/gradle.properties
@@ -0,0 +1,2 @@
+version=2.19.0-SNAPSHOT
+r2dbc-mariadb.version=1.2.1
diff --git a/gradle/wrapper/gradle-wrapper.jar b/gradle/wrapper/gradle-wrapper.jar
new file mode 100644
index 0000000000000000000000000000000000000000..d64cd4917707c1f8861d8cb53dd15194d4248596
GIT binary patch
literal 43462
zcma&NWl&^owk(X(xVyW%ySuwf;qI=D6|RlDJ2cR^yEKh!@I-
zp9QeisK*rlxC>+~7Dk4IxIRsKBHqdR9b3+fyL=ynHmIDe&|>O*VlvO+%z5;9Z$|DJ
zb4dO}-R=MKr^6EKJiOrJdLnCJn>np?~vU-1sSFgPu;pthGwf}bG
z(1db%xwr#x)r+`4AGu$j7~u2MpVs3VpLp|mx&;>`0p0vH6kF+D2CY0fVdQOZ@h;A`
z{infNyvmFUiu*XG}RNMNwXrbec_*a3N=2zJ|Wh5z*
z5rAX$JJR{#zP>KY**>xHTuw?|-Rg|o24V)74HcfVT;WtQHXlE+_4iPE8QE#DUm%x0
zEKr75ur~W%w#-My3Tj`hH6EuEW+8K-^5P62$7Sc5OK+22qj&Pd1;)1#4tKihi=~8C
zHiQSst0cpri6%OeaR`PY>HH_;CPaRNty%WTm4{wDK8V6gCZlG@U3$~JQZ;HPvDJcT1V{
z?>H@13MJcCNe#5z+MecYNi@VT5|&UiN1D4ATT+%M+h4c$t;C#UAs3O_q=GxK0}8%8
z8J(_M9bayxN}69ex4dzM_P3oh@ZGREjVvn%%r7=xjkqxJP4kj}5tlf;QosR=%4L5y
zWhgejO=vao5oX%mOHbhJ8V+SG&K5dABn6!WiKl{|oPkq(9z8l&Mm%(=qGcFzI=eLu
zWc_oCLyf;hVlB@dnwY98?75B20=n$>u3b|NB28H0u-6Rpl((%KWEBOfElVWJx+5yg
z#SGqwza7f}$z;n~g%4HDU{;V{gXIhft*q2=4zSezGK~nBgu9-Q*rZ#2f=Q}i2|qOp
z!!y4p)4o=LVUNhlkp#JL{tfkhXNbB=Ox>M=n6soptJw-IDI|_$is2w}(XY>a=H52d
z3zE$tjPUhWWS+5h=KVH&uqQS=$v3nRs&p$%11b%5qtF}S2#Pc`IiyBIF4%A!;AVoI
zXU8-Rpv!DQNcF~(qQnyyMy=-AN~U>#&X1j5BLDP{?K!%h!;hfJI>$mdLSvktEr*89
zdJHvby^$xEX0^l9g$xW-d?J;L0#(`UT~zpL&*cEh$L|HPAu=P8`OQZV!-}l`noSp_
zQ-1$q$R-gDL)?6YaM!=8H=QGW$NT2SeZlb8PKJdc=F-cT@j7Xags+Pr*jPtlHFnf-
zh?q<6;)27IdPc^Wdy-mX%2s84C1xZq9Xms+==F4);O`VUASmu3(RlgE#0+#giLh-&
zcxm3_e}n4{%|X
zJp{G_j+%`j_q5}k{eW&TlP}J2wtZ2^<^E(O)4OQX8FDp6RJq!F{(6eHWSD3=f~(h}
zJXCf7=r<16X{pHkm%yzYI_=VDP&9bmI1*)YXZeB}F?
z(%QsB5fo*FUZxK$oX~X^69;x~j7ms8xlzpt-T15e9}$4T-pC
z6PFg@;B-j|Ywajpe4~bk#S6(fO^|mm1hKOPfA%8-_iGCfICE|=P_~e;Wz6my&)h_~
zkv&_xSAw7AZ%ThYF(4jADW4vg=oEdJGVOs>FqamoL3Np8>?!W#!R-0%2Bg4h?kz5I
zKV-rKN2n(vUL%D<4oj@|`eJ>0i#TmYBtYmfla;c!ATW%;xGQ0*TW@PTlGG><@dxUI
zg>+3SiGdZ%?5N=8uoLA|$4isK$aJ%i{hECP$bK{J#0W2gQ3YEa
zZQ50Stn6hqdfxJ*9#NuSLwKFCUGk@c=(igyVL;;2^wi4o30YXSIb2g_ud$
zgpCr@H0qWtk2hK8Q|&wx)}4+hTYlf;$a4#oUM=V@Cw#!$(nOFFpZ;0lc!qd=c$S}Z
zGGI-0jg~S~cgVT=4Vo)b)|4phjStD49*EqC)IPwyeKBLcN;Wu@Aeph;emROAwJ-0<
z_#>wVm$)ygH|qyxZaet&(Vf%pVdnvKWJn9`%DAxj3ot;v>S$I}jJ$FLBF*~iZ!ZXE
zkvui&p}fI0Y=IDX)mm0@tAd|fEHl~J&K}ZX(Mm3cm1UAuwJ42+AO5@HwYfDH7ipIc
zmI;1J;J@+aCNG1M`Btf>YT>~c&3j~Qi@Py5JT6;zjx$cvOQW@3oQ>|}GH?TW-E
z1R;q^QFjm5W~7f}c3Ww|awg1BAJ^slEV~Pk`Kd`PS$7;SqJZNj->it4DW2l15}xP6
zoCl$kyEF%yJni0(L!Z&14m!1urXh6Btj_5JYt1{#+H8w?5QI%%
zo-$KYWNMJVH?Hh@1n7OSu~QhSswL8x0=$<8QG_zepi_`y_79=nK=_ZP_`Em2UI*tyQoB+r{1QYZCpb?2OrgUw#oRH$?^Tj!Req>XiE#~B|~
z+%HB;=ic+R@px4Ld8mwpY;W^A%8%l8$@B@1m5n`TlKI6bz2mp*^^^1mK$COW$HOfp
zUGTz-cN9?BGEp}5A!mDFjaiWa2_J2Iq8qj0mXzk;
z66JBKRP{p%wN7XobR0YjhAuW9T1Gw3FDvR5dWJ8ElNYF94eF3ebu+QwKjtvVu4L
zI9ip#mQ@4uqVdkl-TUQMb^XBJVLW(-$s;Nq;@5gr4`UfLgF$adIhd?rHOa%D);whv
z=;krPp~@I+-Z|r#s3yCH+c1US?dnm+C*)r{m+86sTJusLdNu^sqLrfWed^ndHXH`m
zd3#cOe3>w-ga(Dus_^ppG9AC>Iq{y%%CK+Cro_sqLCs{VLuK=dev>OL1dis4(PQ5R
zcz)>DjEkfV+MO;~>VUlYF00SgfUo~@(&9$Iy2|G0T9BSP?&T22>K46D
zL*~j#yJ?)^*%J3!16f)@Y2Z^kS*BzwfAQ7K96rFRIh>#$*$_Io;z>ux@}G98!fWR@
zGTFxv4r~v)Gsd|pF91*-eaZ3Qw1MH$K^7JhWIdX%o$2kCbvGDXy)a?@8T&1dY4`;L
z4Kn+f%SSFWE_rpEpL9bnlmYq`D!6F%di<&Hh=+!VI~j)2mfil03T#jJ_s?}VV0_hp
z7T9bWxc>Jm2Z0WMU?`Z$xE74Gu~%s{mW!d4uvKCx@WD+gPUQ
zV0vQS(Ig++z=EHN)BR44*EDSWIyT~R4$FcF*VEY*8@l=218Q05D2$|fXKFhRgBIEE
zdDFB}1dKkoO^7}{5crKX!p?dZWNz$m>1icsXG2N+((x0OIST9Zo^DW_tytvlwXGpn
zs8?pJXjEG;T@qrZi%#h93?FP$!&P4JA(&H61tqQi=opRzNpm
zkrG}$^t9&XduK*Qa1?355wd8G2CI6QEh@Ua>AsD;7oRUNLPb76m4HG3K?)wF~IyS3`fXuNM>${?wmB
zpVz;?6_(Fiadfd{vUCBM*_kt$+F3J+IojI;9L(gc9n3{sEZyzR9o!_mOwFC#tQ{Q~
zP3-`#uK#tP3Q7~Q;4H|wjZHO8h7e4IuBxl&vz2w~D8)w=Wtg31zpZhz%+kzSzL*dV
zwp@{WU4i;hJ7c2f1O;7Mz6qRKeASoIv0_bV=i@NMG*l<#+;INk-^`5w@}Dj~;k=|}qM1vq_P
z|GpBGe_IKq|LNy9SJhKOQ$c=5L{Dv|Q_lZl=-ky*BFBJLW9&y_C|!vyM~rQx=!vun
z?rZJQB5t}Dctmui5i31C_;_}CEn}_W%>oSXtt>@kE1=JW*4*v4tPp;O6
zmAk{)m!)}34pTWg8{i>($%NQ(Tl;QC@J@FfBoc%Gr&m560^kgSfodAFrIjF}aIw)X
zoXZ`@IsMkc8_=w%-7`D6Y4e*CG8k%Ud=GXhsTR50jUnm+R*0A(O3UKFg0`K;qp1bl
z7``HN=?39ic_kR|^R^~w-*pa?Vj#7|e9F1iRx{GN2?wK!xR1GW!qa=~pjJb-#u1K8
zeR?Y2i-pt}yJq;SCiVHODIvQJX|ZJaT8nO+(?HXbLefulKKgM^B(UIO1r+S=7;kLJ
zcH}1J=Px2jsh3Tec&v8Jcbng8;V-`#*UHt?hB(pmOipKwf3Lz8rG$heEB30Sg*2rx
zV<|KN86$soN(I!BwO`1n^^uF2*x&vJ$2d$>+`(romzHP|)K_KkO6Hc>_dwMW-M(#S
zK(~SiXT1@fvc#U+?|?PniDRm01)f^#55;nhM|wi?oG>yBsa?~?^xTU|fX-R(sTA+5
zaq}-8Tx7zrOy#3*JLIIVsBmHYLdD}!0NP!+ITW+Thn0)8SS!$@)HXwB3tY!fMxc#1
zMp3H?q3eD?u&Njx4;KQ5G>32+GRp1Ee5qMO0lZjaRRu&{W<&~DoJNGkcYF<5(Ab+J
zgO>VhBl{okDPn78<%&e2mR{jwVCz5Og;*Z;;3%VvoGo_;HaGLWYF7q#jDX=Z#Ml`H
z858YVV$%J|e<1n`%6Vsvq7GmnAV0wW4$5qQ3uR@1i>tW{xrl|ExywIc?fNgYlA?C5
zh$ezAFb5{rQu6i7BSS5*J-|9DQ{6^BVQ{b*lq`xS@RyrsJN?-t=MTMPY;WYeKBCNg
z^2|pN!Q^WPJuuO4!|P@jzt&tY1Y8d%FNK5xK(!@`jO2aEA*4
zkO6b|UVBipci?){-Ke=+1;mGlND8)6+P;8sq}UXw2hn;fc7nM>g}GSMWu&v&fqh
iViYT=fZ(|3Ox^$aWPp4a8h24tD<|8-!aK0lHgL$N7Efw}J
zVIB!7=T$U`ao1?upi5V4Et*-lTG0XvExbf!ya{cua==$WJyVG(CmA6Of*8E@DSE%L
z`V^$qz&RU$7G5mg;8;=#`@rRG`-uS18$0WPN@!v2d{H2sOqP|!(cQ@
zUHo!d>>yFArLPf1q`uBvY32miqShLT1B@gDL4XoVTK&@owOoD)OIHXrYK-a1d$B{v
zF^}8D3Y^g%^cnvScOSJR5QNH+BI%d|;J;wWM3~l>${fb8DNPg)wrf|GBP8p%LNGN#
z3EaIiItgwtGgT&iYCFy9-LG}bMI|4LdmmJt@V@%
zb6B)1kc=T)(|L@0;wr<>=?r04N;E&ef+7C^`wPWtyQe(*pD1pI_&XHy|0gIGHMekd
zF_*M4yi6J&Z4LQj65)S
zXwdM{SwUo%3SbPwFsHgqF@V|6afT|R6?&S;lw=8%
z3}@9B=#JI3@B*#4s!O))~z
zc>2_4Q_#&+5V`GFd?88^;c1i7;Vv_I*qt!_Yx*n=;rj!82rrR2rQ8u5(Ejlo{15P%
zs~!{%XJ>FmJ})H^I9bn^Re&38H{xA!0l3^89k(oU;bZWXM@kn$#aoS&Y4l^-WEn-fH39Jb9lA%s*WsKJQl?n9B7_~P
z-XM&WL7Z!PcoF6_D>V@$CvUIEy=+Z&0kt{szMk=f1|M+r*a43^$$B^MidrT0J;RI`
z(?f!O<8UZkm$_Ny$Hth1J#^4ni+im8M9mr&k|3cIgwvjAgjH
z8`N&h25xV#v*d$qBX5jkI|xOhQn!>IYZK7l5#^P4M&twe9&Ey@@GxYMxBZq2e7?`q
z$~Szs0!g{2fGcp9PZEt|rdQ6bhAgpcLHPz?f-vB?$dc*!9OL?Q8mn7->bFD2Si60*
z!O%y)fCdMSV|lkF9w%x~J*A&srMyYY3{=&$}H
zGQ4VG_?$2X(0|vT0{=;W$~icCI{b6W{B!Q8xdGhF|D{25G_5_+%s(46lhvNLkik~R
z>nr(&C#5wwOzJZQo9m|U<;&Wk!_#q|V>fsmj1g<6%hB{jGoNUPjgJslld>xmODzGjYc?7JSuA?A_QzjDw5AsRgi@Y|Z0{F{!1=!NES-#*f^s4l0Hu
zz468))2IY5dmD9pa*(yT5{EyP^G>@ZWumealS-*WeRcZ}B%gxq{MiJ|RyX-^C1V=0
z@iKdrGi1jTe8Ya^x7yyH$kBNvM4R~`fbPq$BzHum-3Zo8C6=KW@||>zsA8-Y9uV5V
z#oq-f5L5}V<&wF4@X@<3^C%ptp6+Ce)~hGl`kwj)bsAjmo_GU^r940Z-|`<)oGnh7
zFF0Tde3>ui?8Yj{sF-Z@)yQd~CGZ*w-6p2U<8}JO-sRsVI5dBji`01W8A&3$?}lxBaC&vn0E$c5tW*
zX>5(zzZ=qn&!J~KdsPl;P@bmA-Pr8T*)eh_+Dv5=Ma|XSle6t(k8qcgNyar{*ReQ8
zTXwi=8vr>!3Ywr+BhggHDw8ke==NTQVMCK`$69fhzEFB*4+H9LIvdt-#IbhZvpS}}
zO3lz;P?zr0*0$%-Rq_y^k(?I{Mk}h@w}cZpMUp|ucs55bcloL2)($u%mXQw({Wzc~
z;6nu5MkjP)0C(@%6Q_I_vsWrfhl7Zpoxw#WoE~r&GOSCz;_ro6i(^hM>I$8y>`!wW
z*U^@?B!MMmb89I}2(hcE4zN2G^kwyWCZp5JG>$Ez7zP~D=J^LMjSM)27_0B_X^C(M
z`fFT+%DcKlu?^)FCK>QzSnV%IsXVcUFhFdBP!6~se&xxrIxsvySAWu++IrH;FbcY$
z2DWTvSBRfLwdhr0nMx+URA$j3i7_*6BWv#DXfym?ZRDcX9C?cY9sD3q)uBDR3uWg=
z(lUIzB)G$Hr!){>E{s4Dew+tb9kvToZp-1&c?y2wn@Z~(VBhqz`cB;{E4(P3N2*nJ
z_>~g@;UF2iG{Kt(<1PyePTKahF8<)pozZ*xH~U-kfoAayCwJViIrnqwqO}7{0pHw$
zs2Kx?s#vQr7XZ264>5RNKSL8|Ty^=PsIx^}QqOOcfpGUU4tRkUc|kc7-!Ae6!+B{o~7nFpm3|G5^=0#Bnm6`V}oSQlrX(u%OWnC
zoLPy&Q;1Jui&7ST0~#+}I^&?vcE*t47~Xq#YwvA^6^}
z`WkC)$AkNub|t@S!$8CBlwbV~?yp&@9h{D|3z-vJXgzRC5^nYm+PyPcgRzAnEi6Q^gslXYRv4nycsy-SJu?lMps-?
zV`U*#WnFsdPLL)Q$AmD|0`UaC4ND07+&UmOu!eHruzV|OUox<+Jl|Mr@6~C`T@P%s
zW7sgXLF2SSe9Fl^O(I*{9wsFSYb2l%-;&Pi^dpv!{)C3d0AlNY6!4fgmSgj_wQ*7Am7&$z;Jg&wgR-Ih;lUvWS|KTSg!&s_E9_bXBkZvGiC6bFKDWZxsD$*NZ#_8bl
zG1P-#@?OQzED7@jlMJTH@V!6k;W>auvft)}g
zhoV{7$q=*;=l{O>Q4a@
ziMjf_u*o^PsO)#BjC%0^h>Xp@;5$p{JSYDt)zbb}s{Kbt!T*I@Pk@X0zds6wsefuU
zW$XY%yyRGC94=6mf?x+bbA5CDQ2AgW1T-jVAJbm7K(gp+;v6E0WI#kuACgV$r}6L?
zd|Tj?^%^*N&b>Dd{Wr$FS2qI#Ucs1yd4N+RBUQiSZGujH`#I)mG&VKoDh=KKFl4=G
z&MagXl6*<)$6P}*Tiebpz5L=oMaPrN+caUXRJ`D?=K9!e0f{@D&cZLKN?iNP@X0aF
zE(^pl+;*T5qt?1jRC=5PMgV!XNITRLS_=9{CJExaQj;lt!&pdzpK?8p>%Mb+D
z?yO*uSung=-`QQ@yX@Hyd4@CI^r{2oiu`%^bNkz+Nkk!IunjwNC|WcqvX~k=><-I3
zDQdbdb|!v+Iz01$w@aMl!R)koD77Xp;eZwzSl-AT
zr@Vu{=xvgfq9akRrrM)}=!=xcs+U1JO}{t(avgz`6RqiiX<|hGG1pmop8k6Q+G_mv
zJv|RfDheUp2L3=^C=4aCBMBn0aRCU(DQwX-W(RkRwmLeuJYF<0urcaf(=7)JPg<3P
zQs!~G)9CT18o!J4{zX{_e}4eS)U-E)0FAt}wEI(c0%HkxgggW;(1E=>J17_hsH^sP
z%lT0LGgbUXHx-K*CI-MCrP66UP0PvGqM$MkeLyqHdbgP|_Cm!7te~b8p+e6sQ_3k|
zVcwTh6d83ltdnR>D^)BYQpDKlLk3g0Hdcgz2}%qUs9~~Rie)A-BV1mS&naYai#xcZ
z(d{8=-LVpTp}2*y)|gR~;qc7fp26}lPcLZ#=JpYcn3AT9(UIdOyg+d(P5T7D&*P}#
zQCYplZO5|7+r19%9e`v^vfSS1sbX1c%=w1;oyruXB%Kl$ACgKQ6=qNWLsc=28xJjg
zwvsI5-%SGU|3p>&zXVl^vVtQT3o-#$UT9LI@Npz~6=4!>mc431VRNN8od&Ul^+G_kHC`G=6WVWM
z%9eWNyy(FTO|A+@x}Ou3CH)oi;t#7rAxdIXfNFwOj_@Y&TGz6P_sqiB`Q6Lxy|Q{`|fgmRG(k+!#b*M+Z9zFce)f-7;?Km5O=LHV9f9_87;
zF7%R2B+$?@sH&&-$@tzaPYkw0;=i|;vWdI|Wl3q_Zu>l;XdIw2FjV=;Mq5t1Q0|f<
zs08j54Bp`3RzqE=2enlkZxmX6OF+@|2<)A^RNQpBd6o@OXl+i)zO%D4iGiQNuXd+zIR{_lb96{lc~bxsBveIw6umhShTX+3@ZJ=YHh@
zWY3(d0azg;7oHn>H<>?4@*RQbi>SmM=JrHvIG(~BrvI)#W(EAeO6fS+}mxxcc+X~W6&YVl86W9WFSS}Vz-f9vS?XUDBk)3TcF
z8V?$4Q)`uKFq>xT=)Y9mMFVTUk*NIA!0$?RP6Ig0TBmUFrq*Q-Agq~DzxjStQyJ({
zBeZ;o5qUUKg=4Hypm|}>>L=XKsZ!F$yNTDO)jt4H0gdQ5$f|d&bnVCMMXhNh)~mN
z@_UV6D7MVlsWz+zM+inZZp&P4fj=tm6fX)SG5H>OsQf_I8c~uGCig$GzuwViK54bcgL;VN|FnyQl>Ed7(@>=8$a_UKIz|V6CeVSd2(P
z0Uu>A8A+muM%HLFJQ9UZ5c)BSAv_zH#1f02x?h9C}@pN@6{>UiAp>({Fn(T9Q8B
z^`zB;kJ5b`>%dLm+Ol}ty!3;8f1XDSVX0AUe5P#@I+FQ-`$(a;zNgz)4x5hz$Hfbg
z!Q(z26wHLXko(1`;(BAOg_wShpX0ixfWq3ponndY+u%1gyX)_h=v1zR#V}#q{au6;
z!3K=7fQwnRfg6FXtNQmP>`<;!N137paFS%y?;lb1@BEdbvQHYC{976l`cLqn;b8lp
zIDY>~m{gDj(wfnK!lpW6pli)HyLEiUrNc%eXTil|F2s(AY+LW5hkKb>TQ3|Q4S9rr
zpDs4uK_co6XPsn_z$LeS{K4jFF`2>U`tbgKdyDne`xmR<@6AA+_hPNKCOR-Zqv;xk
zu5!HsBUb^!4uJ7v0RuH-7?l?}b=w5lzzXJ~gZcxRKOovSk@|#V+MuX%Y+=;14i*%{)_gSW9(#4%)AV#3__kac1|qUy!uyP{>?U#5wYNq}y$S9pCc
zFc~4mgSC*G~j0u#qqp9
z${>3HV~@->GqEhr_Xwoxq?Hjn#=s2;i~g^&Hn|aDKpA>Oc%HlW(KA1?BXqpxB;Ydx)w;2z^MpjJ(Qi(X!$5RC
z*P{~%JGDQqojV>2JbEeCE*OEu!$XJ>bWA9Oa_Hd;y)F%MhBRi*LPcdqR8X`NQ&1L#
z5#9L*@qxrx8n}LfeB^J{%-?SU{FCwiWyHp682F+|pa+CQa3ZLzBqN1{)h4d6+vBbV
zC#NEbQLC;}me3eeYnOG*nXOJZEU$xLZ1<1Y=7r0(-U0P6-AqwMAM`a(Ed#7vJkn6plb4eI4?2y3yOTGmmDQ!z9`wzbf
z_OY#0@5=bnep;MV0X_;;SJJWEf^E6Bd^tVJ9znWx&Ks8t*B>AM@?;D4oWUGc
z!H*`6d7Cxo6VuyS4Eye&L1ZRhrRmN6Lr`{NL(wDbif|y&z)JN>Fl5#Wi&mMIr5i;x
zBx}3YfF>>8EC(fYnmpu~)CYHuHCyr5*`ECap%t@y=jD>!_%3iiE|LN$mK9>-
zHdtpy8fGZtkZF?%TW~29JIAfi2jZT8>OA7=h;8T{{k?c2`nCEx9$r
zS+*&vt~2o^^J+}RDG@+9&M^K*z4p{5#IEVbz`1%`m5c2};aGt=V?~vIM}ZdPECDI)47|CWBCfDWUbxBCnmYivQ*0Nu_xb*C>~C9(VjHM
zxe<*D<#dQ8TlpMX2c@M<9$w!RP$hpG4cs%AI){jp*Sj|*`m)5(Bw*A0$*i-(CA5#%>a)$+jI2C9r6|(>J8InryENI
z$NohnxDUB;wAYDwrb*!N3noBTKPpPN}~09SEL18tkG
zxgz(RYU_;DPT{l?Q$+eaZaxnsWCA^ds^0PVRkIM%bOd|G2IEBBiz{&^JtNsODs;5z
zICt_Zj8wo^KT$7Bg4H+y!Df#3mbl%%?|EXe!&(Vmac1DJ*y~3+kRKAD=Ovde4^^%~
zw<9av18HLyrf*_>Slp;^i`Uy~`mvBjZ|?Ad63yQa#YK`4+c6;pW4?XIY9G1(Xh9WO8{F-Aju+nS9Vmv=$Ac0ienZ+p9*O%NG
zMZKy5?%Z6TAJTE?o5vEr0r>f>hb#2w2U3DL64*au_@P!J!TL`oH2r*{>ffu6|A7tv
zL4juf$DZ1MW5ZPsG!5)`k8d8c$J$o;%EIL0va9&GzWvkS%ZsGb#S(?{!UFOZ9<$a|
zY|a+5kmD5N&{vRqkgY>aHsBT&`rg|&kezoD)gP0fsNYHsO#TRc_$n6Lf1Z{?+DLziXlHrq4sf(!>O{?Tj;Eh@%)+nRE_2VxbN&&%%caU#JDU%vL3}Cb
zsb4AazPI{>8H&d=jUaZDS$-0^AxE@utGs;-Ez_F(qC9T=UZX=>ok2k2
ziTn{K?y~a5reD2A)P${NoI^>JXn>`IeArow(41c-Wm~)wiryEP(OS{YXWi7;%dG9v
zI?mwu1MxD{yp_rrk!j^cKM)dc4@p4Ezyo%lRN|XyD}}>v=Xoib0gOcdXrQ^*61HNj
z=NP|pd>@yfvr-=m{8$3A8TQGMTE7g=z!%yt`8`Bk-0MMwW~h^++;qyUP!J~ykh1GO
z(FZ59xuFR$(WE;F@UUyE@Sp>`aVNjyj=Ty>_Vo}xf`e7`F;j-IgL5`1~-#70$9_=uBMq!2&1l
zomRgpD58@)YYfvLtPW}{C5B35R;ZVvB<<#)x%srmc_S=A7F@DW8>QOEGwD6suhwCg
z>Pa+YyULhmw%BA*4yjDp|2{!T98~<6Yfd(wo1mQ!KWwq0eg+6)o1>W~f~kL<-S+P@$wx*zeI|1t7z#Sxr5
zt6w+;YblPQNplq4Z#T$GLX#j6yldXAqj>4gAnnWtBICUnA&-dtnlh=t0Ho_vEKwV`
z)DlJi#!@nkYV#$!)@>udAU*hF?V`2$Hf=V&6PP_|r#Iv*J$9)pF@X3`k;5})9^o4y
z&)~?EjX5yX12O(BsFy-l6}nYeuKkiq`u9145&3Ssg^y{5G3Pse
z9w(YVa0)N-fLaBq1`P!_#>SS(8fh_5!f{UrgZ~uEdeMJIz7DzI5!NHHqQtm~#CPij
z?=N|J>nPR6_sL7!f4hD_|KH`vf8(Wpnj-(gPWH+ZvID}%?~68SwhPTC3u1_cB`otq
z)U?6qo!ZLi5b>*KnYHWW=3F!p%h1;h{L&(Q&{qY6)_qxNfbP6E3yYpW!EO+IW3?@J
z);4>g4gnl^8klu7uA>eGF6rIGSynacogr)KUwE_R4E5Xzi*Qir@b-jy55-JPC8c~(
zo!W8y9OGZ&`xmc8;=4-U9=h{vCqfCNzYirONmGbRQlR`WWlgnY+1wCXbMz&NT~9*|
z6@FrzP!LX&{no2!Ln_3|I==_4`@}V?4a;YZKTdw;vT<+K+z=uWbW(&bXEaWJ^W8Td
z-3&1bY^Z*oM<=M}LVt>_j+p=2Iu7pZmbXrhQ_k)ysE9yXKygFNw$5hwDn(M>H+e1&9BM5!|81vd%r%vEm
zqxY3?F@fb6O#5UunwgAHR9jp_W2zZ}NGp2%mTW@(hz7$^+a`A?mb8|_G*GNMJ)
zjqegXQio=i@AINre&%ofexAr95aop5C+0MZ0m-l=MeO8m3epm7U%vZB8+I+C*iNFM
z#T3l`gknX;D$-`2XT^Cg*vrv=RH+P;_dfF++cP?B_msQI4j+lt&rX2)3GaJx%W*Nn
zkML%D{z5tpHH=dksQ*gzc|}gzW;lwAbxoR07VNgS*-c3d&8J|;@3t^
zVUz*J*&r7DFRuFVDCJDK8V9NN5hvpgGjwx+5n)qa;YCKe8TKtdnh{I7NU9BCN!0dq
zczrBk8pE{{@vJa9ywR@mq*J=v+PG;?fwqlJVhijG!3VmIKs>9T6r7MJpC)m!Tc#>g
zMtVsU>wbwFJEfwZ{vB|ZlttNe83)$iz`~#8UJ^r)lJ@HA&G#}W&ZH*;k{=TavpjWE
z7hdyLZPf*X%Gm}i`Y{OGeeu^~nB8=`{r#TUrM-`;1cBvEd#d!kPqIgYySYhN-*1;L
z^byj%Yi}Gx)Wnkosi337BKs}+5H5dth1JA{Ir-JKN$7zC)*}hqeoD(WfaUDPT>0`-
z(6sa0AoIqASwF`>hP}^|)a_j2s^PQn*qVC{Q}htR
z5-)duBFXT_V56-+UohKXlq~^6uf!6sA#ttk1o~*QEy_Y-S$gAvq47J9Vtk$5oA$Ct
zYhYJ@8{hsC^98${!#Ho?4y5MCa7iGnfz}b9jE~h%EAAv~Qxu)_rAV;^cygV~5r_~?l=B`zObj7S=H=~$W
zPtI_m%g$`kL_fVUk9J@>EiBH
zOO&jtn~&`hIFMS5S`g8w94R4H40mdNUH4W@@XQk1sr17b{@y|JB*G9z1|CrQjd+GX
z6+KyURG3;!*BQrentw{B2R&@2&`2}n(z-2&X7#r!{yg@Soy}cRD~j
zj9@UBW+N|4HW4AWapy4wfUI-
zZ`gSL6DUlgj*f1hSOGXG0IVH8HxK?o2|3HZ;KW{K+yPAlxtb)NV_2AwJm|E)FRs&&
z=c^e7bvUsztY|+f^k7NXs$o1EUq>cR7C0$UKi6IooHWlK_#?IWDkvywnzg&ThWo^?
z2O_N{5X39#?eV9l)xI(>@!vSB{DLt*oY!K1R8}_?%+0^C{d9a%N4
zoxHVT1&Lm|uDX%$QrBun5e-F`HJ^T$
zmzv)p@4ZHd_w9!%Hf9UYNvGCw2TTTbrj9pl+T9%-_-}L(tES>Or-}Z4F*{##n3~L~TuxjirGuIY#H7{%$E${?p{Q01
zi6T`n;rbK1yIB9jmQNycD~yZq&mbIsFWHo|ZAChSFPQa<(%d8mGw*V3fh|yFoxOOiWJd(qvVb!Z$b88cg->N=qO*4k~6;R==|9ihg&riu#P~s4Oap9O7f%crSr^rljeIfXDEg>wi)&v*a%7zpz<9w
z*r!3q9J|390x`Zk;g$&OeN&ctp)VKRpDSV@kU2Q>jtok($Y-*x8_$2piTxun81@vt
z!Vj?COa0fg2RPXMSIo26T=~0d`{oGP*eV+$!0I<(4azk&Vj3SiG=Q!6mX0p$z7I};
z9BJUFgT-K9MQQ-0@Z=^7R<{bn2Fm48endsSs`V7_@%8?Bxkqv>BDoVcj?K#dV#uUP
zL1ND~?D-|VGKe3Rw_7-Idpht>H6XRLh*U7epS6byiGvJpr%d}XwfusjH9g;Z98H`x
zyde%%5mhGOiL4wljCaWCk-&uE4_OOccb9c!ZaWt4B(wYl!?vyzl%7n~QepN&eFUrw
zFIOl9c({``6~QD+43*_tzP{f2x41h(?b43^y6=iwyB)2os5hBE!@YUS5?N_tXd=h(
z)WE286Fbd>R4M^P{!G)f;h<3Q>Fipuy+d2q-)!RyTgt;wr$(?9ox3;q+{E*ZQHhOn;lM`cjnu9
zXa48ks-v(~b*;MAI<>YZH(^NV8vjb34beE<_cwKlJoR;k6lJNSP6v}uiyRD?|0w+X@o1ONrH8a$fCxXpf?
z?$DL0)7|X}Oc%h^zrMKWc-NS9I0Utu@>*j}b@tJ=ixQSJ={4@854wzW@E>VSL+Y{i
z#0b=WpbCZS>kUCO_iQz)LoE>P5LIG-hv9E+oG}DtlIDF>$tJ1aw9^LuhLEHt?BCj&
z(O4I8v1s#HUi5A>nIS-JK{v!7dJx)^Yg%XjNmlkWAq2*cv#tHgz`Y(bETc6CuO1VkN^L-L3j_x<4NqYb5rzrLC-7uOv
z!5e`GZt%B782C5-fGnn*GhDF$%(qP<74Z}3xx+{$4cYKy2ikxI7B2N+2r07DN;|-T->nU&!=Cm#rZt%O_5c&1Z%nlWq3TKAW0w
zQqemZw_ue--2uKQsx+niCUou?HjD`xhEjjQd3%rrBi82crq*~#uA4+>vR<_S{~5ce
z-2EIl?~s
z1=GVL{NxP1N3%=AOaC}j_Fv=ur&THz
zyO!d9kHq|c73kpq`$+t+8Bw7MgeR5~`d7ChYyGCBWSteTB>8WAU(NPYt2Dk`@#+}=
zI4SvLlyk#pBgVigEe`?NG*vl7V6m+<}%FwPV=~PvvA)=#ths==DRTDEYh4V5}Cf$z@#;<
zyWfLY_5sP$gc3LLl2x+Ii)#b2nhNXJ{R~vk`s5U7Nyu^3yFg&D%Txwj6QezMX`V(x
z=C`{76*mNb!qHHs)#GgGZ_7|vkt9izl_&PBrsu@}L`X{95-2jf99K)0=*N)VxBX2q
z((vkpP2RneSIiIUEnGb?VqbMb=Zia+rF~+iqslydE34cSLJ&BJW^3knX@M;t*b=EA
zNvGzv41Ld_T+WT#XjDB840vovUU^FtN_)G}7v)1lPetgpEK9YS^OWFkPoE{ovj^=@
zO9N$S=G$1ecndT_=5ehth2Lmd1II-PuT~C9`XVePw$y8J#dpZ?Tss<6wtVglm(Ok7
z3?^oi@pPio6l&!z8JY(pJvG=*pI?GIOu}e^EB6QYk$#FJQ%^AIK$I4epJ+9t?KjqA+bkj&PQ*|vLttme+`9G=L%
ziadyMw_7-M)hS(3E$QGNCu|o23|%O+VN7;Qggp?PB3K-iSeBa2b}V4_wY`G1Jsfz4
z9|SdB^;|I8E8gWqHKx!vj_@SMY^hLEIbSMCuE?WKq=c2mJK
z8LoG-pnY!uhqFv&L?yEuxo{dpMTsmCn)95xanqBrNPTgXP((H$9N${Ow~Is-FBg%h
z53;|Y5$MUN)9W2HBe2TD`ct^LHI<(xWrw}$qSoei?}s)&w$;&!14w6B6>Yr6Y8b)S
z0r71`WmAvJJ`1h&poLftLUS6Ir
zC$bG9!Im_4Zjse)#K=oJM9mHW1{%l8sz$1o?ltdKlLTxWWPB>Vk22czVt|1%^wnN@*!l)}?EgtvhC>vlHm^t+ogpgHI1_$1ox9e;>0!+b(tBrmXRB`PY1vp-R**8N7
zGP|QqI$m(Rdu#=(?!(N}G9QhQ%o!aXE=aN{&wtGP8|_qh+7a_j_sU5|J^)vxq;#
zjvzLn%_QPHZZIWu1&mRAj;Sa_97p_lLq_{~j!M9N^1yp3U_SxRqK&JnR%6VI#^E12
z>CdOVI^_9aPK2eZ4h&^{pQs}xsijXgFYRIxJ~N7&BB9jUR1fm!(xl)mvy|3e6-B3j
zJn#ajL;bFTYJ2+Q)tDjx=3IklO@Q+FFM}6UJr6km7hj7th9n_&JR7fnqC!hTZoM~T
zBeaVFp%)0cbPhejX<8pf5HyRUj2>aXnXBqDJe73~J%P(2C?-RT{c3NjE`)om!
zl$uewSgWkE66$Kb34+QZZvRn`fob~Cl9=cRk@Es}KQm=?E~CE%spXaMO6YmrMl%9Q
zlA3Q$3|L1QJ4?->UjT&CBd!~ru{Ih^in&JXO=|<6J!&qp
zRe*OZ*cj5bHYlz!!~iEKcuE|;U4vN1rk$xq6>bUWD*u(V@8sG^7>kVuo(QL@Ki;yL
zWC!FT(q{E8#on>%1iAS0HMZDJg{Z{^!De(vSIq&;1$+b)oRMwA3nc3mdTSG#3uYO_
z>+x;7p4I;uHz?ZB>dA-BKl+t-3IB!jBRgdvAbW!aJ(Q{aT>+iz?91`C-xbe)IBoND
z9_Xth{6?(y3rddwY$GD65IT#f3<(0o#`di{sh2gm{dw*#-Vnc3r=4==&PU^hCv$qd
zjw;>i&?L*Wq#TxG$mFIUf>eK+170KG;~+o&1;Tom9}}mKo23KwdEM6UonXgc
z!6N(@k8q@HPw{O8O!lAyi{rZv|DpgfU{py+j(X_cwpKqcalcqKIr0kM^%Br3SdeD>
zHSKV94Yxw;pjzDHo!Q?8^0bb%L|wC;4U^9I#pd5O&eexX+Im{
z?jKnCcsE|H?{uGMqVie_C~w7GX)kYGWAg%-?8|N_1#W-|4F)3YTDC+QSq1s!DnOML3@d`mG%o2YbYd#jww|jD$gotpa)kntakp#K;+yo-_ZF9qrNZw<%#C
zuPE@#3RocLgPyiBZ+R_-FJ_$xP!RzWm|aN)S+{$LY9vvN+IW~Kf3TsEIvP+B9Mtm!
zpfNNxObWQpLoaO&cJh5>%slZnHl_Q~(-Tfh!DMz(dTWld@LG1VRF`9`DYKhyNv
z2pU|UZ$#_yUx_B_|MxUq^glT}O5Xt(Vm4Mr02><%C)@v;vPb@pT$*yzJ4aPc_FZ3z
z3}PLoMBIM>q_9U2rl^sGhk1VUJ89=*?7|v`{!Z{6bqFMq(mYiA?%KbsI~JwuqVA9$H5vDE+VocjX+G^%bieqx->s;XWlKcuv(s%y%D5Xbc9+
zc(_2nYS1&^yL*ey664&4`IoOeDIig}y-E~_GS?m;D!xv5-xwz+G`5l6V+}CpeJDi^
z%4ed$qowm88=iYG+(`ld5Uh&>Dgs4uPHSJ^TngXP_V6fPyl~>2bhi20QB%lSd#yYn
zO05?KT1z@?^-bqO8Cg`;ft>ilejsw@2%RR7;`$Vs;FmO(Yr3Fp`pHGr@P2hC%QcA|X&N2Dn
zYf`MqXdHi%cGR@%y7Rg7?d3?an){s$zA{!H;Ie5exE#c~@NhQUFG8V=SQh%UxUeiV
zd7#UcYqD=lk-}sEwlpu&H^T_V0{#G?lZMxL7ih_&{(g)MWBnCZxtXg
znr#}>U^6!jA%e}@Gj49LWG@*&t0V>Cxc3?oO7LSG%~)Y5}f7vqUUnQ;STjdDU}P9IF9d9<$;=QaXc
zL1^X7>fa^jHBu_}9}J~#-oz3Oq^JmGR#?GO7b9a(=R@fw@}Q{{@`Wy1vIQ#Bw?>@X
z-_RGG@wt|%u`XUc%W{J
z>iSeiz8C3H7@St3mOr_mU+&bL#Uif;+Xw-aZdNYUpdf>Rvu0i0t6k*}vwU`XNO2he
z%miH|1tQ8~ZK!zmL&wa3E;l?!!XzgV#%PMVU!0xrDsNNZUWKlbiOjzH-1Uoxm8E#r`#2Sz;-o&qcqB
zC-O_R{QGuynW14@)7&@yw1U}uP(1cov)twxeLus0s|7ayrtT8c#`&2~Fiu2=R;1_4bCaD=*E@cYI>7YSnt)nQc
zohw5CsK%m?8Ack)qNx`W0_v$5S}nO|(V|RZKBD+btO?JXe|~^Qqur%@eO~<8-L^9d
z=GA3-V14ng9L29~XJ>a5k~xT2152zLhM*@zlp2P5Eu}bywkcqR;ISbas&#T#;HZSf
z2m69qTV(V@EkY(1Dk3`}j)JMo%ZVJ*5eB
zYOjIisi+igK0#yW*gBGj?@I{~mUOvRFQR^pJbEbzFxTubnrw(Muk%}jI+vXmJ;{Q6
zrSobKD>T%}jV4Ub?L1+MGOD~0Ir%-`iTnWZN^~YPrcP5y3VMAzQ+&en^VzKEb$K!Q
z<7Dbg&DNXuow*eD5yMr+#08nF!;%4vGrJI++5HdCFcGLfMW!KS*Oi@=7hFwDG!h2<
zPunUEAF+HncQkbfFj&pbzp|MU*~60Z(|Ik%Tn{BXMN!hZOosNIseT?R;A`W?=d?5X
zK(FB=9mZusYahp|K-wyb={rOpdn=@;4YI2W0EcbMKyo~-#^?h`BA9~o285%oY
zfifCh5Lk$SY@|2A@a!T2V+{^!psQkx4?x0HSV`(w9{l75QxMk!)U52Lbhn{8ol?S)
zCKo*7R(z!uk<6*qO=wh!Pul{(qq6g6xW;X68GI_CXp`XwO
zxuSgPRAtM8K7}5E#-GM!*ydOOG_{A{)hkCII<|2=ma*71ci_-}VPARm3crFQjLYV!
z9zbz82$|l01mv`$WahE2$=fAGWkd^X2kY(J7iz}WGS
z@%MyBEO=A?HB9=^?nX`@nh;7;laAjs+fbo!|K^mE!tOB>$2a_O0y-*uaIn8k^6Y
zSbuv;5~##*4Y~+y7Z5O*3w4qgI5V^17u*ZeupVGH^nM&$qmAk|anf*>r
zWc5CV;-JY-Z@Uq1Irpb^O`L_7AGiqd*YpGUShb==os$uN3yYvb`wm6d=?T*it&pDk
zo`vhw)RZX|91^^Wa_ti2zBFyWy4cJu#g)_S6~jT}CC{DJ_kKpT`$oAL%b^!2M;JgT
zM3ZNbUB?}kP(*YYvXDIH8^7LUxz5oE%kMhF!rnPqv!GiY0o}NR$OD=ITDo9r%4E>E0Y^R(rS^~XjWyVI6
zMOR5rPXhTp*G*M&X#NTL`Hu*R+u*QNoiOKg4CtNPrjgH>c?Hi4MUG#I917fx**+pJfOo!zFM&*da&G_x)L(`k&TPI*t3e^{crd
zX<4I$5nBQ8Ax_lmNRa~E*zS-R0sxkz`|>7q_?*e%7bxqNm3_eRG#1ae3gtV9!fQpY
z+!^a38o4ZGy9!J5sylDxZTx$JmG!wg7;>&5H1)>f4dXj;B+@6tMlL=)cLl={jLMxY
zbbf1ax3S4>bwB9-$;SN2?+GULu;UA-35;VY*^9Blx)Jwyb$=U!D>HhB&=jSsd^6yw
zL)?a|>GxU!W}ocTC(?-%z3!IUhw^uzc`Vz_g>-tv)(XA#JK^)ZnC|l1`@CdX1@|!|
z_9gQ)7uOf?cR@KDp97*>6X|;t@Y`k_N@)aH7gY27)COv^P3ya9I{4z~vUjLR9~z1Z
z5=G{mVtKH*&$*t0@}-i_v|3B$AHHYale7>E+jP`ClqG%L{u;*ff_h@)al?RuL7tOO
z->;I}>%WI{;vbLP3VIQ^iA$4wl6@0sDj|~112Y4OFjMs`13!$JGkp%b&E8QzJw_L5
zOnw9joc0^;O%OpF$Qp)W1HI!$4BaXX84`%@#^dk^hFp^pQ@rx4g(8Xjy#!X%+X5Jd@fs3amGT`}mhq#L97R>OwT5-m|h#yT_-v@(k$q7P*9X~T*3)LTdzP!*B}
z+SldbVWrrwQo9wX*%FyK+sRXTa@O?WM^FGWOE?S`R(0P{<6p#f?0NJvnBia?k^fX2
zNQs7K-?EijgHJY}&zsr;qJ<*PCZUd*x|dD=IQPUK_nn)@X4KWtqoJNHkT?ZWL_hF?
zS8lp2(q>;RXR|F;1O}EE#}gCrY~#n^O`_I&?&z5~7N;zL0)3Tup`%)oHMK-^r$NT%
zbFg|o?b9w(q@)6w5V%si<$!U<#}s#x@0aX-hP>zwS#9*75VXA4K*%gUc>+yzupTDBOKH8WR4V0pM(HrfbQ&eJ79>HdCvE=F
z|J>s;;iDLB^3(9}?biKbxf1$lI!*Z%*0&8UUq}wMyPs_hclyQQi4;NUY+x2qy|0J;
zhn8;5)4ED1oHwg+VZF|80<4MrL97tGGXc5Sw$wAI#|2*cvQ=jB5+{AjMiDHmhUC*a
zlmiZ`LAuAn_}hftXh;`Kq0zblDk8?O-`tnilIh|;3lZp@F_osJUV9`*R29M?7H{Fy
z`nfVEIDIWXmU&YW;NjU8)EJpXhxe5t+scf|VXM!^bBlwNh)~7|3?fWwo_~ZFk(22%
zTMesYw+LNx3J-_|DM~`v93yXe=jPD{q;li;5PD?Dyk+b?
zo21|XpT@)$BM$%F=P9J19Vi&1#{jM3!^Y&fr&_`toi`XB1!n>sbL%U9I5<7!@?t)~
z;&H%z>bAaQ4f$wIzkjH70;<8tpUoxzKrPhn#IQfS%9l5=Iu))^XC<58D!-O
z{B+o5R^Z21H0T9JQ5gNJnqh#qH^na|z92=hONIM~@_iuOi|F>jBh-?aA20}Qx~EpDGElELNn~|7WRXRFnw+Wdo`|#
zBpU=Cz3z%cUJ0mx_1($X<40XEIYz(`noWeO+x#yb_pwj6)R(__%@_Cf>txOQ74wSJ
z0#F3(zWWaR-jMEY$7C*3HJrohc79>MCUu26mfYN)f4M~4gD`}EX4e}A!U}QV8!S47
z6y-U-%+h`1n`*pQuKE%Av0@)+wBZr9mH}@vH@i{v(m-6QK7Ncf17x_D=)32`FOjjo
zg|^VPf5c6-!FxN{25dvVh#fog=NNpXz
zfB$o+0jbRkHH{!TKhE709f+jI^$3#v1Nmf80w`@7-5$1Iv_`)W^px8P-({xwb;D0y
z7LKDAHgX<84?l!I*Dvi2#D@oAE^J|g$3!)x1Ua;_;<@#l1fD}lqU2_tS^6Ht$1Wl}
zBESo7o^)9-Tjuz$8YQSGhfs{BQV6zW7dA?0b(Dbt=UnQs&4zHfe_sj{RJ4uS-vQpC
zX;Bbsuju4%!o8?&m4UZU@~ZZjeFF6ex2ss5_60_JS_|iNc+R0GIjH1@Z
z=rLT9%B|WWgOrR7IiIwr2=T;Ne?30M!@{%Qf8o`!>=s<2CBpCK_TWc(DX51>e^xh8
z&@$^b6CgOd7KXQV&Y4%}_#uN*mbanXq(2=Nj`L7H7*k(6F8s6{FOw@(DzU`4-*77{
zF+dxpv}%mFpYK?>N_2*#Y?oB*qEKB}VoQ@bzm>ptmVS_EC(#}Lxxx730trt0G)#$b
zE=wVvtqOct1%*9}U{q<)2?{+0TzZzP0jgf9*)arV)*e!f`|jgT{7_9iS@e)recI#z
zbzolURQ+TOzE!ymqvBY7+5NnAbWxvMLsLTwEbFqW=CPyCsmJ}P1^V30|D5E|p3BC5
z)3|qgw@ra7aXb-wsa|l^in~1_fm{7bS9jhVRkYVO#U{qMp
z)Wce+|DJ}4<2gp8r0_xfZpMo#{Hl2MfjLcZdRB9(B(A(f;+4s*FxV{1F|4d`*sRNd
zp4#@sEY|?^FIJ;tmH{@keZ$P(sLh5IdOk@k^0uB^BWr@pk6mHy$qf&~rI>P*a;h0C{%oA*i!VjWn&D~O#MxN&f@1Po#
zKN+
zrGrkSjcr?^R#nGl<#Q722^wbYcgW@{+6CBS<1@%dPA8HC!~a`jTz<`g_l5N1M@9wn9GOAZ>nqNgq!yOCbZ@1z`U_N`Z>}+1HIZxk*5RDc&rd5{3qjRh8QmT$VyS;jK
z;AF+r6XnnCp=wQYoG|rT2@8&IvKq*IB_WvS%nt%e{MCFm`&W*#LXc|HrD?nVBo=(8*=Aq?u$sDA_sC_RPDUiQ+wnIJET8vx$&fxkW~kP9qXKt
zozR)@xGC!P)CTkjeWvXW5&@2?)qt)jiYWWBU?AUtzAN}{JE1I)dfz~7$;}~BmQF`k
zpn11qmObXwRB8&rnEG*#4Xax3XBkKlw(;tb?Np^i+H8m(Wyz9k{~ogba@laiEk;2!
zV*QV^6g6(QG%vX5Um#^sT&_e`B1pBW5yVth~xUs#0}nv?~C#l?W+9Lsb_5)!71rirGvY
zTIJ$OPOY516Y|_014sNv+Z8cc5t_V=i>lWV=vNu#!58y9Zl&GsMEW#pPYPYGHQ|;vFvd*9eM==$_=vc7xnyz0~
zY}r??$<`wAO?JQk@?RGvkWVJlq2dk9vB(yV^vm{=NVI8dhsX<)O(#nr9YD?I?(VmQ
z^r7VfUBn<~p3()8yOBjm$#KWx!5hRW)5Jl7wY@ky9lNM^jaT##8QGVsYeaVywmpv>X|Xj7gWE1Ezai&wVLt3p)k4w~yrskT-!PR!kiyQlaxl((
zXhF%Q9x}1TMt3~u@|#wWm-Vq?ZerK={8@~&@9r5JW}r#45#rWii};t`{5#&3$W)|@
zbAf2yDNe0q}NEUvq_Quq3cTjcw
z@H_;$hu&xllCI9CFDLuScEMg|x{S7GdV8<&Mq=ezDnRZAyX-8gv97YTm0bg=d)(>N
z+B2FcqvI9>jGtnK%eO%y
zoBPkJTk%y`8TLf4)IXPBn`U|9>O~WL2C~C$z~9|0m*YH<-vg2CD^SX#&)B4ngOSG$
zV^wmy_iQk>dfN@Pv(ckfy&#ak@MLC7&Q6Ro#!ezM*VEh`+b3Jt%m(^T&p&WJ2Oqvj
zs-4nq0TW6cv~(YI$n0UkfwN}kg3_fp?(ijSV#tR9L0}l2qjc7W?i*q01=St0eZ=4h
zyGQbEw`9OEH>NMuIe)hVwYHsGERWOD;JxEiO7cQv%pFCeR+IyhwQ|y@&^24k+|8fD
zLiOWFNJ2&vu2&`Jv96_z-Cd5RLgmeY3*4rDOQo?Jm`;I_(+ejsPM03!ly!*Cu}Cco
zrQSrEDHNyzT(D5s1rZq!8#?f6@v6dB7a-aWs(Qk>N?UGAo{gytlh$%_IhyL7h?DLXDGx
zgxGEBQoCAWo-$LRvM=F5MTle`M})t3vVv;2j0HZY&G
z22^iGhV@uaJh(XyyY%}
zd4iH_UfdV#T=3n}(Lj^|n;O4|$;xhu*8T3hR1mc_A}fK}jfZ7LX~*n5+`8N2q#rI$
z@<_2VANlYF$vIH$
zl<)+*tIWW78IIINA7Rr7i{<;#^yzxoLNkXL)eSs=%|P>$YQIh+ea_3k
z_s7r4%j7%&*NHSl?R4k%1>Z=M9o#zxY!n8sL5>BO-ZP;T3Gut>iLS@U%IBrX6BA3k
z)&@q}V8a{X<5B}K5s(c(LQ=%v1ocr`t$EqqY0EqVjr65usa=0bkf|O#ky{j3)WBR(((L^wmyHRzoWuL2~WTC=`yZ
zn%VX`L=|Ok0v7?s>IHg?yArBcync5rG#^+u)>a%qjES%dRZoIyA8gQ;StH
z1Ao7{<&}6U=5}4v<)1T7t!J_CL%U}CKNs-0xWoTTeqj{5{?Be$L0_tk>M9o8
zo371}S#30rKZFM{`H_(L`EM9DGp+Mifk&IP|C2Zu_)Ghr4Qtpmkm1osCf@%Z$%t+7
zYH$Cr)Ro@3-QDeQJ8m+x6%;?YYT;k6Z0E-?kr>x33`H%*ueBD7Zx~3&HtWn0?2Wt}
zTG}*|v?{$ajzt}xPzV%lL1t-URi8*Zn)YljXNGDb>;!905Td|mpa@mHjIH%VIiGx-
zd@MqhpYFu4_?y5N4xiHn3vX&|e6r~Xt>
zZG`aGq|yTNjv;9E+Txuoa@A(9V7g?1_T5FzRI;!=NP1Kqou1z5?%X~Wwb{trRfd>i
z8&y^H)8YnKyA_Fyx>}RNmQIczT?w2J4SNvI{5J&}Wto|8FR(W;Qw#b1G<1%#tmYzQ
zQ2mZA-PAdi%RQOhkHy9Ea#TPSw?WxwL@H@cbkZwIq0B!@ns}niALidmn&W?!Vd4Gj
zO7FiuV4*6Mr^2xlFSvM;Cp_#r8UaqIzHJQg_z^rEJw&OMm_8NGAY2)rKvki|o1bH~
z$2IbfVeY2L(^*rMRU1lM5Y_sgrDS`Z??nR2lX;zyR=c%UyGb*%TC-Dil?SihkjrQy~TMv6;BMs7P8il`H7DmpVm@rJ;b)hW)BL)GjS154b*xq-NXq2cwE
z^;VP7ua2pxvCmxrnqUYQMH%a%nHmwmI33nJM(>4LznvY*k&C0{8f*%?zggpDgkuz&JBx{9mfb@wegEl2v!=}Sq2Gaty0<)UrOT0{MZtZ~j5y&w
zXlYa_jY)I_+VA-^#mEox#+G>UgvM!Ac8zI<%JRXM_73Q!#i3O|)lOP*qBeJG#BST0
zqohi)O!|$|2SeJQo(w6w7%*92S})XfnhrH_Z8qe!G5>CglP=nI7JAOW?(Z29;pXJ9
zR9`KzQ=WEhy*)WH>$;7Cdz|>*i>=##0bB)oU0OR>>N<21e4rMCHDemNi2LD>Nc$;&
zQRFthpWniC1J6@Zh~iJCoLOxN`oCKD5Q4r%ynwgUKPlIEd#?QViIqovY|czyK8>6B
zSP%{2-<;%;1`#0mG^B(8KbtXF;Nf>K#Di72UWE4gQ%(_26Koiad)q$xRL~?pN71ZZ
zujaaCx~jXjygw;rI!WB=xrOJO6HJ!!w}7eiivtCg5K|F6$EXa)=xUC
za^JXSX98W`7g-tm@uo|BKj39Dl;sg5ta;4qjo^pCh~{-HdLl6qI9Ix6f$+qiZ$}s=
zNguKrU;u+T@ko(Vr1>)Q%h$?UKXCY>3se%&;h2osl2D
zE4A9bd7_|^njDd)6cI*FupHpE3){4NQ*$k*cOWZ_?CZ>Z4_fl@n(mMnYK62Q1d@+I
zr&O))G4hMihgBqRIAJkLdk(p(D~X{-oBUA+If@B}j&
zsHbeJ3RzTq96lB7d($h$xTeZ^gP0c{t!Y0c)aQE;$FY2!mACg!GDEMKXFOPI^)nHZ
z`aSPJpvV0|bbrzhWWkuPURlDeN%VT8tndV8?d)eN*i4I@u
zVKl^6{?}A?P)Fsy?3oi#clf}L18t;TjNI2>eI&(ezDK7RyqFxcv%>?oxUlonv(px)
z$vnPzRH`y5A(x!yOIfL0bmgeMQB$H5wenx~!ujQK*nUBW;@Em&6Xv2%s(~H5WcU2R
z;%Nw<$tI)a`Ve!>x+qegJnQsN2N7HaKzrFqM>`6R*gvh%O*-%THt
zrB$Nk;lE;z{s{r^PPm5qz(&lM{sO*g+W{sK+m3M_z=4=&CC>T`{X}1Vg2PEfSj2x_
zmT*(x;ov%3F?qoEeeM>dUn$a*?SIGyO8m806J1W1o+4HRhc2`9$s6hM#qAm
zChQ87b~GEw{ADfs+5}FJ8+|bIlIv(jT$Ap#hSHoXdd9#w<#cA<1Rkq^*EEkknUd4&
zoIWIY)sAswy6fSERVm&!SO~#iN$OgOX*{9@_BWFyJTvC%S++ilSfCrO(?u=Dc?CXZ
zzCG&0yVR{Z`|ZF0eEApWEo#s9osV>F{uK{QA@BES#&;#KsScf>y
zvs?vIbI>VrT<*!;XmQS=bhq%46-aambZ(8KU-wOO2=en~D}MCToB_u;Yz{)1ySrPZ
z@=$}EvjTdzTWU7c0ZI6L8=yP+YRD_eMMos}b5vY^S*~VZysrkq<`cK3>>v%uy7jgq
z0ilW9KjVDHLv0b<1K_`1IkbTOINs0=m-22c%M~l=^S}%hbli-3?BnNq?b`hx^HX2J
zIe6ECljRL0uBWb`%{EA=%!i^4sMcj+U_TaTZRb+~GOk
z^ZW!nky0n*Wb*r+Q|9H@ml@Z5gU&W`(z4-j!OzC1wOke`TRAYGZVl$PmQ16{3196(
zO*?`--I}Qf(2HIwb2&1FB^!faPA2=sLg(@6P4mN)>Dc3i(B0;@O-y2;lM4akD>@^v
z=u>*|!s&9zem70g7zfw9FXl1bpJW(C#5w#uy5!V?Q(U35A~$dR%LDVnq@}kQm13{}
zd53q3N(s$Eu{R}k2esbftfjfOITCL;jWa$}(mmm}d(&7JZ6d3%IABCapFFYjdEjdK
z&4Edqf$G^MNAtL=uCDRs&Fu@FXRgX{*0<(@c3|PNHa>L%zvxWS={L8%qw`STm+=Rd
zA}FLspESSIpE_^41~#5yI2bJ=9`oc;GIL!JuW&7YetZ?0H}$$%8rW@*J37L-~Rsx!)8($nI4
zZhcZ2^=Y+p4YPl%j!nFJA|*M^gc(0o$i3nlphe+~-_m}jVkRN{spFs(o0ajW@f3K{
zDV!#BwL322CET$}Y}^0ixYj2w>&Xh12|R8&yEw|wLDvF!lZ#dOTHM9pK6@Nm-@9Lnng4ZHBgBSrr7KI8YCC9DX5Kg|`HsiwJHg2(7#nS;A{b3tVO?Z%
za{m5b3rFV6EpX;=;n#wltDv1LE*|g5pQ+OY&*6qCJZc5oDS6Z6JD#6F)bWxZSF@q%
z+1WV;m!lRB!n^PC>RgQCI#D1br_o^#iPk>;K2hB~0^<~)?p}LG%kigm@moD#q3PE+
zA^Qca)(xnqw6x>XFhV6ku9r$E>bWNrVH9fum0?4s?Rn2LG{Vm_+QJHse6xa%nzQ?k
zKug4PW~#Gtb;#5+9!QBgyB@q=sk9=$S{4T>wjFICStOM?__fr+Kei1
z3j~xPqW;W@YkiUM;HngG!;>@AITg}vAE`M2Pj9Irl4w1fo4w<|Bu!%rh%a(Ai^Zhi
zs92>v5;@Y(Zi#RI*ua*h`d_7;byQSa*v9E{2x$<-_=5Z<7{%)}4XExANcz@rK69T0x3%H<@frW>RA8^swA+^a(FxK|
zFl3LD*ImHN=XDUkrRhp6RY5$rQ{bRgSO*(vEHYV)3Mo6Jy3puiLmU&g82p{qr0F?ohmbz)f2r{X2|T2
z$4fdQ=>0BeKbiVM!e-lIIs8wVTuC_m7}y4A_%ikI;Wm5$9j(^Y
z(cD%U%k)X>_>9~t8;pGzL6L-fmQO@K;
zo&vQzMlgY95;1BSkngY)e{`n0!NfVgf}2mB3t}D9@*N;FQ{HZ3Pb%BK6;5#-O|WI(
zb6h@qTLU~AbVW#_6?c!?Dj65Now7*pU{h!1+eCV^KCuPAGs28~3k@ueL5+u|Z-7}t
z9|lskE`4B7W8wMs@xJa{#bsCGDFoRSNSnmNYB&U7
zVGKWe%+kFB6kb)e;TyHfqtU6~fRg)f|>=5(N36)0+C
z`hv65J<$B}WUc!wFAb^QtY31yNleq4dzmG`1wHTj=c*=hay9iD071Hc?oYoUk|M*_
zU1GihAMBsM@5rUJ(qS?9ZYJ6@{bNqJ`2Mr+5#hKf?doa?F|+^IR!8lq9)wS3tF_9n
zW_?hm)G(M+MYb?V9YoX^_mu5h-LP^TL^!Q9Z7|@sO(rg_4+@=PdI)WL(B7`!K^ND-
z-uIuVDCVEdH_C@c71YGYT^_Scf_dhB8Z2Xy6vGtBSlYud9vggOqv^L~F{BraSE_t}
zIkP+Hp2&nH^-MNEs}^`oMLy11`PQW$T|K(`Bu*(f@)mv1-qY(_YG&J2M2<7k;;RK~
zL{Fqj9yCz8(S{}@c)S!65aF<=&eLI{hAMErCx&>i7OeDN>okvegO87OaG{Jmi<|}D
zaT@b|0X{d@OIJ7zvT>r+eTzgLq~|Dpu)Z&db-P4z*`M$UL51lf>FLlq6rfG)%doyp
z)3kk_YIM!03eQ8Vu_2fg{+osaEJPtJ-s36R+5_AEG12`NG)IQ#TF9c@$99%0iye+
zUzZ57=m2)$D(5Nx!n)=5Au&O0BBgwxIBaeI(mro$#&UGCr<;C{UjJVAbVi%|+WP(a
zL$U@TYCxJ=1{Z~}rnW;7UVb7+ZnzgmrogDxhjLGo>c~MiJAWs&&;AGg@%U?Y^0JhL
ze(x6Z74JG6FlOFK(T}SXQfhr}RIFl@QXKnIcXYF)5|V~e-}suHILKT-k|<*~Ij|VF
zC;t@=uj=hot~*!C68G8hTA%8SzOfETOXQ|3FSaIEjvBJp(A)7SWUi5!Eu#yWgY+;n
zlm<$+UDou*V+246_o#V4kMdto8hF%%Lki#zPh}KYXmMf?hrN0;>Mv%`@{0Qn`Ujp)
z=lZe+13>^Q!9zT);H<(#bIeRWz%#*}sgUX9P|9($kexOyKIOc`dLux}c$7It4u|Rl
z6SSkY*V~g_B-hMPo_ak>>z@AVQ(_N)VY2kB3IZ0G(iDUYw+2d7W^~(Jq}KY=JnWS(
z#rzEa&0uNhJ>QE8iiyz;n2H|SV#Og+wEZv=f2%1ELX!SX-(d3tEj$5$1}70Mp<&eI
zCkfbByL7af=qQE@5vDVxx1}FSGt_a1DoE3SDI+G)mBAna)KBG4p8Epxl9QZ4BfdAN
zFnF|Y(umr;gRgG6NLQ$?ZWgllEeeq~z^ZS7L?<(~O&$5|y)Al^iMKy}&W+eMm1W
z7EMU)u^ke(A1#XCV>CZ71}P}0x)4wtHO8#JRG3MA-6g=`ZM!FcICCZ{IEw8Dm2&LQ
z1|r)BUG^0GzI6f946RrBlfB1Vs)~8toZf~7)+G;pv&XiUO(%5bm)pl=p>nV^o*;&T
z;}@oZSibzto$arQgfkp|z4Z($P>dTXE{4O=vY0!)kDO*
zGF8a4wq#VaFpLfK!iELy@?-SeRrdz%F*}hjKcA*y@mj~VD3!it9lhRhX}5YOaR9$}
z3mS%$2Be7{l(+MVx3
z(4?h;P!jnRmX9J9sYN#7i=iyj_5q7n#X(!cdqI2lnr8T$IfOW<_v`eB!d9xY1P=2q&WtOXY=D9QYteP)De?S4}FK6#6Ma
z=E*V+#s8>L;8aVroK^6iKo=MH{4yEZ_>N-N
z`(|;aOATba1^asjxlILk<4}f~`39dBFlxj>Dw(hMYKPO3EEt1@S`1lxFNM+J@uB7T
zZ8WKjz7HF1-5&2=l=fqF-*@>n5J}jIxdDwpT?oKM3s8Nr`x8JnN-kCE?~aM1H!hAE
z%%w(3kHfGwMnMmNj(SU(w42OrC-euI>Dsjk&jz3ts}WHqmMpzQ3vZrsXrZ|}+MHA7
z068obeXZTsO*6RS@o3x80E4ok``rV^Y3hr&C1;|ZZ0|*EKO`$lECUYG2gVFtUTw)R
z4Um<0ZzlON`zTdvVdL#KFoMFQX*a5wM0Czp%wTtfK4Sjs)P**RW&?lP$(<}q%r68Z
zS53Y!d@&~ne9O)A^tNrXHhXBkj~$8j%pT1%%mypa9AW5E&s9)rjF4@O3ytH{0z6riz|@<
zB~UPh*wRFg2^7EbQrHf0y?E~dHlkOxof_a?M{LqQ^C!i2dawHTPYUE=X@2(3<=OOxs8qn_(y>pU>u^}3y&df{JarR0@VJn0f+U%UiF=$Wyq
zQvnVHESil@d|8&R<%}uidGh7@u^(%?$#|&J$pvFC-n8&A>utA=n3#)yMkz+qnG3wd
zP7xCnF|$9Dif@N~L)Vde3hW8W!UY0BgT2v(wzp;tlLmyk2%N|0jfG$%<;A&IVrOI<
z!L)o>j>;dFaqA3pL}b-Je(bB@VJ4%!JeX@3x!i{yIeIso^=n?fDX`3bU=eG7sTc%g%ye8$v8P@yKE^XD=NYxTb
zbf!Mk=h|otpqjFaA-vs5YOF-*GwWPc7VbaOW&stlANnCN8iftFMMrUdYNJ_Bnn5Vt
zxfz@Ah|+4&P;reZxp;MmEI7C|FOv8NKUm8njF7Wb6Gi7DeODLl&G~}G4be&*Hi0Qw
z5}77vL0P+7-B%UL@3n1&JPxW^d@vVwp?u#gVcJqY9#@-3X{ok#UfW3<1fb%FT`|)V~ggq
z(3AUoUS-;7)^hCjdT0Kf{i}h)mBg4qhtHHBti=~h^n^OTH5U*XMgDLIR@sre`AaB$
zg)IGBET_4??m@cx&c~bA80O7B8CHR7(LX7%HThkeC*@vi{-pL%e)yXp!B2InafbDF
zjPXf1mko3h59{lT6EEbxKO1Z5GF71)WwowO6kY|6tjSVSWdQ}NsK2x{>i|MKZK8%Q
zfu&_0D;CO-Jg0#YmyfctyJ!mRJp)e#@O0mYdp|8x;G1%OZQ3Q847YWTyy|%^cpA;m
zze0(5p{tMu^lDkpe?HynyO?a1$_LJl2L&mpeKu%8YvgRNr=%2z${%WThHG=vrWY@4
zsA`OP#O&)TetZ>s%h!=+CE15lOOls&nvC~$Qz0Ph7tHiP;O$i|eDwpT{cp>+)0-|;
zY$|bB+Gbel>5aRN3>c0x)4U=|X+z+{
zn*_p*EQoquRL+=+p;=lm`d71&1NqBz&_ph)MXu(Nv6&XE7(RsS)^MGj5Q?Fwude-(sq
zjJ>aOq!7!EN>@(fK7EE#;i_BGvli`5U;r!YA{JRodLBc6-`n8K+Fjgwb%sX;j=qHQ
z7&Tr!)!{HXoO<2BQrV9Sw?JRaLXV8HrsNevvnf>Y-6|{T!pYLl7jp$-nEE
z#X!4G4L#K0qG_4Z;Cj6=;b|Be$hi4JvMH!-voxqx^@8cXp`B??eFBz2lLD8RRaRGh
zn7kUfy!YV~p(R|p7iC1Rdgt$_24i0cd-S8HpG|`@my70g^y`gu%#Tf_L21-k?sRRZHK&at(*ED0P8iw{7?R$9~OF$Ko;Iu5)ur5<->x!m93Eb
zFYpIx60s=Wxxw=`$aS-O&dCO_9?b1yKiPCQmSQb>T)963`*U+Ydj5kI(B(B?HNP8r
z*bfSBpSu)w(Z3j7HQoRjUG(+d=IaE~tv}y14zHHs|0UcN52fT8V_<@2ep_ee{QgZG
zmgp8iv4V{k;~8@I%M3<#B;2R>Ef(Gg_cQM7%}0s*^)SK6!Ym+~P^58*wnwV1BW@eG
z4sZLqsUvBbFsr#8u7S1r4teQ;t)Y@jnn_m5jS$CsW1um!p&PqAcc8!zyiXHVta9QC
zY~wCwCF0U%xiQPD_INKtTb;A|Zf29(mu9NI;E
zc-e>*1%(LSXB`g}kd`#}O;veb<(sk~RWL|f3ljxCnEZDdNSTDV6#Td({6l&y4IjKF
z^}lIUq*ZUqgTPumD)RrCN{M^jhY>E~1pn|KOZ5((%F)G|*ZQ|r4zIbrEiV%42hJV8
z3xS)=!X1+=olbdGJ=yZil?oXLct8FM{(6ikLL3E%=q#O6(H$p~gQu6T8N!plf!96|
z&Q3=`L~>U0zZh;z(pGR2^S^{#PrPxTRHD1RQOON&f)Siaf`GLj#UOk&(|@0?zm;Sx
ztsGt8=29-MZs5CSf1l1jNFtNt5rFNZxJPvkNu~2}7*9468TWm>nN9TP&^!;J{-h)_
z7WsHH9|F%I`Pb!>KAS3jQWKfGivTVkMJLO-HUGM_a4UQ_%RgL6WZvrW+Z4ujZn;y@
zz9$=oO!7qVTaQAA^BhX&ZxS*|5dj803M=k&2%QrXda`-Q#IoZL6E(g+tN!6CA!CP*
zCpWtCujIea)ENl0liwVfj)Nc<9mV%+e@=d`haoZ*`B7+PNjEbXBkv=B+Pi^~L#EO$D$ZqTiD8f<5$eyb54-(=3
zh)6i8i|jp(@OnRrY5B8t|LFXFQVQ895n*P16cEKTrT*~yLH6Z4e*bZ5otpRDri&+A
zfNbK1D5@O=sm`fN=WzWyse!za5n%^+6dHPGX#8DyIK>?9qyX}2XvBWVqbP%%D)7$=
z=#$WulZlZR<{m#gU7lwqK4WS1Ne$#_P{b17qe$~UOXCl>5b|6WVh;5vVnR<%d+Lnp
z$uEmML38}U4vaW8>shm6CzB(Wei3s#NAWE3)a2)z@i{4jTn;;aQS)O@l{rUM`J@K&
l00vQ5JBs~;vo!vr%%-k{2_Fq1Mn4QF81S)AQ99zk{{c4yR+0b!

literal 0
HcmV?d00001

diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
new file mode 100644
index 0000000..a441313
--- /dev/null
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -0,0 +1,7 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.8-bin.zip
+networkTimeout=10000
+validateDistributionUrl=true
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists
diff --git a/gradlew b/gradlew
new file mode 100644
index 0000000..1aa94a4
--- /dev/null
+++ b/gradlew
@@ -0,0 +1,249 @@
+#!/bin/sh
+
+#
+# Copyright © 2015-2021 the original authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+##############################################################################
+#
+#   Gradle start up script for POSIX generated by Gradle.
+#
+#   Important for running:
+#
+#   (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is
+#       noncompliant, but you have some other compliant shell such as ksh or
+#       bash, then to run this script, type that shell name before the whole
+#       command line, like:
+#
+#           ksh Gradle
+#
+#       Busybox and similar reduced shells will NOT work, because this script
+#       requires all of these POSIX shell features:
+#         * functions;
+#         * expansions «$var», «${var}», «${var:-default}», «${var+SET}»,
+#           «${var#prefix}», «${var%suffix}», and «$( cmd )»;
+#         * compound commands having a testable exit status, especially «case»;
+#         * various built-in commands including «command», «set», and «ulimit».
+#
+#   Important for patching:
+#
+#   (2) This script targets any POSIX shell, so it avoids extensions provided
+#       by Bash, Ksh, etc; in particular arrays are avoided.
+#
+#       The "traditional" practice of packing multiple parameters into a
+#       space-separated string is a well documented source of bugs and security
+#       problems, so this is (mostly) avoided, by progressively accumulating
+#       options in "$@", and eventually passing that to Java.
+#
+#       Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS,
+#       and GRADLE_OPTS) rely on word-splitting, this is performed explicitly;
+#       see the in-line comments for details.
+#
+#       There are tweaks for specific operating systems such as AIX, CygWin,
+#       Darwin, MinGW, and NonStop.
+#
+#   (3) This script is generated from the Groovy template
+#       https://github.com/gradle/gradle/blob/HEAD/subprojects/plugins/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt
+#       within the Gradle project.
+#
+#       You can find Gradle at https://github.com/gradle/gradle/.
+#
+##############################################################################
+
+# Attempt to set APP_HOME
+
+# Resolve links: $0 may be a link
+app_path=$0
+
+# Need this for daisy-chained symlinks.
+while
+    APP_HOME=${app_path%"${app_path##*/}"}  # leaves a trailing /; empty if no leading path
+    [ -h "$app_path" ]
+do
+    ls=$( ls -ld "$app_path" )
+    link=${ls#*' -> '}
+    case $link in             #(
+      /*)   app_path=$link ;; #(
+      *)    app_path=$APP_HOME$link ;;
+    esac
+done
+
+# This is normally unused
+# shellcheck disable=SC2034
+APP_BASE_NAME=${0##*/}
+# Discard cd standard output in case $CDPATH is set (https://github.com/gradle/gradle/issues/25036)
+APP_HOME=$( cd "${APP_HOME:-./}" > /dev/null && pwd -P ) || exit
+
+# Use the maximum available, or set MAX_FD != -1 to use that value.
+MAX_FD=maximum
+
+warn () {
+    echo "$*"
+} >&2
+
+die () {
+    echo
+    echo "$*"
+    echo
+    exit 1
+} >&2
+
+# OS specific support (must be 'true' or 'false').
+cygwin=false
+msys=false
+darwin=false
+nonstop=false
+case "$( uname )" in                #(
+  CYGWIN* )         cygwin=true  ;; #(
+  Darwin* )         darwin=true  ;; #(
+  MSYS* | MINGW* )  msys=true    ;; #(
+  NONSTOP* )        nonstop=true ;;
+esac
+
+CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar
+
+
+# Determine the Java command to use to start the JVM.
+if [ -n "$JAVA_HOME" ] ; then
+    if [ -x "$JAVA_HOME/jre/sh/java" ] ; then
+        # IBM's JDK on AIX uses strange locations for the executables
+        JAVACMD=$JAVA_HOME/jre/sh/java
+    else
+        JAVACMD=$JAVA_HOME/bin/java
+    fi
+    if [ ! -x "$JAVACMD" ] ; then
+        die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+    fi
+else
+    JAVACMD=java
+    if ! command -v java >/dev/null 2>&1
+    then
+        die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+    fi
+fi
+
+# Increase the maximum file descriptors if we can.
+if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then
+    case $MAX_FD in #(
+      max*)
+        # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked.
+        # shellcheck disable=SC2039,SC3045
+        MAX_FD=$( ulimit -H -n ) ||
+            warn "Could not query maximum file descriptor limit"
+    esac
+    case $MAX_FD in  #(
+      '' | soft) :;; #(
+      *)
+        # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked.
+        # shellcheck disable=SC2039,SC3045
+        ulimit -n "$MAX_FD" ||
+            warn "Could not set maximum file descriptor limit to $MAX_FD"
+    esac
+fi
+
+# Collect all arguments for the java command, stacking in reverse order:
+#   * args from the command line
+#   * the main class name
+#   * -classpath
+#   * -D...appname settings
+#   * --module-path (only if needed)
+#   * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables.
+
+# For Cygwin or MSYS, switch paths to Windows format before running java
+if "$cygwin" || "$msys" ; then
+    APP_HOME=$( cygpath --path --mixed "$APP_HOME" )
+    CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" )
+
+    JAVACMD=$( cygpath --unix "$JAVACMD" )
+
+    # Now convert the arguments - kludge to limit ourselves to /bin/sh
+    for arg do
+        if
+            case $arg in                                #(
+              -*)   false ;;                            # don't mess with options #(
+              /?*)  t=${arg#/} t=/${t%%/*}              # looks like a POSIX filepath
+                    [ -e "$t" ] ;;                      #(
+              *)    false ;;
+            esac
+        then
+            arg=$( cygpath --path --ignore --mixed "$arg" )
+        fi
+        # Roll the args list around exactly as many times as the number of
+        # args, so each arg winds up back in the position where it started, but
+        # possibly modified.
+        #
+        # NB: a `for` loop captures its iteration list before it begins, so
+        # changing the positional parameters here affects neither the number of
+        # iterations, nor the values presented in `arg`.
+        shift                   # remove old arg
+        set -- "$@" "$arg"      # push replacement arg
+    done
+fi
+
+
+# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
+DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"'
+
+# Collect all arguments for the java command:
+#   * DEFAULT_JVM_OPTS, JAVA_OPTS, JAVA_OPTS, and optsEnvironmentVar are not allowed to contain shell fragments,
+#     and any embedded shellness will be escaped.
+#   * For example: A user cannot expect ${Hostname} to be expanded, as it is an environment variable and will be
+#     treated as '${Hostname}' itself on the command line.
+
+set -- \
+        "-Dorg.gradle.appname=$APP_BASE_NAME" \
+        -classpath "$CLASSPATH" \
+        org.gradle.wrapper.GradleWrapperMain \
+        "$@"
+
+# Stop when "xargs" is not available.
+if ! command -v xargs >/dev/null 2>&1
+then
+    die "xargs is not available"
+fi
+
+# Use "xargs" to parse quoted args.
+#
+# With -n1 it outputs one arg per line, with the quotes and backslashes removed.
+#
+# In Bash we could simply go:
+#
+#   readarray ARGS < <( xargs -n1 <<<"$var" ) &&
+#   set -- "${ARGS[@]}" "$@"
+#
+# but POSIX shell has neither arrays nor command substitution, so instead we
+# post-process each arg (as a line of input to sed) to backslash-escape any
+# character that might be a shell metacharacter, then use eval to reverse
+# that process (while maintaining the separation between arguments), and wrap
+# the whole thing up as a single "set" statement.
+#
+# This will of course break if any of these variables contains a newline or
+# an unmatched quote.
+#
+
+eval "set -- $(
+        printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" |
+        xargs -n1 |
+        sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' |
+        tr '\n' ' '
+    )" '"$@"'
+
+exec "$JAVACMD" "$@"
diff --git a/gradlew.bat b/gradlew.bat
new file mode 100644
index 0000000..25da30d
--- /dev/null
+++ b/gradlew.bat
@@ -0,0 +1,92 @@
+@rem
+@rem Copyright 2015 the original author or authors.
+@rem
+@rem Licensed under the Apache License, Version 2.0 (the "License");
+@rem you may not use this file except in compliance with the License.
+@rem You may obtain a copy of the License at
+@rem
+@rem      https://www.apache.org/licenses/LICENSE-2.0
+@rem
+@rem Unless required by applicable law or agreed to in writing, software
+@rem distributed under the License is distributed on an "AS IS" BASIS,
+@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+@rem See the License for the specific language governing permissions and
+@rem limitations under the License.
+@rem
+
+@if "%DEBUG%"=="" @echo off
+@rem ##########################################################################
+@rem
+@rem  Gradle startup script for Windows
+@rem
+@rem ##########################################################################
+
+@rem Set local scope for the variables with windows NT shell
+if "%OS%"=="Windows_NT" setlocal
+
+set DIRNAME=%~dp0
+if "%DIRNAME%"=="" set DIRNAME=.
+@rem This is normally unused
+set APP_BASE_NAME=%~n0
+set APP_HOME=%DIRNAME%
+
+@rem Resolve any "." and ".." in APP_HOME to make it shorter.
+for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi
+
+@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
+set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m"
+
+@rem Find java.exe
+if defined JAVA_HOME goto findJavaFromJavaHome
+
+set JAVA_EXE=java.exe
+%JAVA_EXE% -version >NUL 2>&1
+if %ERRORLEVEL% equ 0 goto execute
+
+echo. 1>&2
+echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 1>&2
+echo. 1>&2
+echo Please set the JAVA_HOME variable in your environment to match the 1>&2
+echo location of your Java installation. 1>&2
+
+goto fail
+
+:findJavaFromJavaHome
+set JAVA_HOME=%JAVA_HOME:"=%
+set JAVA_EXE=%JAVA_HOME%/bin/java.exe
+
+if exist "%JAVA_EXE%" goto execute
+
+echo. 1>&2
+echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% 1>&2
+echo. 1>&2
+echo Please set the JAVA_HOME variable in your environment to match the 1>&2
+echo location of your Java installation. 1>&2
+
+goto fail
+
+:execute
+@rem Setup the command line
+
+set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar
+
+
+@rem Execute Gradle
+"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %*
+
+:end
+@rem End local scope for the variables with windows NT shell
+if %ERRORLEVEL% equ 0 goto mainEnd
+
+:fail
+rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of
+rem the _cmd.exe /c_ return code!
+set EXIT_CODE=%ERRORLEVEL%
+if %EXIT_CODE% equ 0 set EXIT_CODE=1
+if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE%
+exit /b %EXIT_CODE%
+
+:mainEnd
+if "%OS%"=="Windows_NT" endlocal
+
+:omega
diff --git a/hack/cherry_pick_pull.sh b/hack/cherry_pick_pull.sh
new file mode 100644
index 0000000..a2e9ad0
--- /dev/null
+++ b/hack/cherry_pick_pull.sh
@@ -0,0 +1,257 @@
+#!/usr/bin/env bash
+
+# Copyright 2015 The Kubernetes Authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Usage Instructions: https://git.k8s.io/community/contributors/devel/sig-release/cherry-picks.md
+
+# Checkout a PR from GitHub. (Yes, this is sitting in a Git tree. How
+# meta.) Assumes you care about pulls from remote "upstream" and
+# checks them out to a branch named:
+#  automated-cherry-pick-of---
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+REPO_ROOT="$(git rev-parse --show-toplevel)"
+declare -r REPO_ROOT
+cd "${REPO_ROOT}"
+
+STARTINGBRANCH=$(git symbolic-ref --short HEAD)
+declare -r STARTINGBRANCH
+declare -r REBASEMAGIC="${REPO_ROOT}/.git/rebase-apply"
+DRY_RUN=${DRY_RUN:-""}
+REGENERATE_DOCS=${REGENERATE_DOCS:-""}
+UPSTREAM_REMOTE=${UPSTREAM_REMOTE:-upstream}
+FORK_REMOTE=${FORK_REMOTE:-origin}
+MAIN_REPO_ORG=${MAIN_REPO_ORG:-$(git remote get-url "$UPSTREAM_REMOTE" | awk '{gsub(/http[s]:\/\/|git@/,"")}1' | awk -F'[@:./]' 'NR==1{print $3}')}
+MAIN_REPO_NAME=${MAIN_REPO_NAME:-$(git remote get-url "$UPSTREAM_REMOTE" | awk '{gsub(/http[s]:\/\/|git@/,"")}1' | awk -F'[@:./]' 'NR==1{print $4}')}
+
+if [[ -z ${GITHUB_USER:-} ]]; then
+  echo "Please export GITHUB_USER= (or GH organization, if that's where your fork lives)"
+  exit 1
+fi
+
+if ! command -v gh > /dev/null; then
+  echo "Can't find 'gh' tool in PATH, please install from https://github.com/cli/cli"
+  exit 1
+fi
+
+if [[ "$#" -lt 2 ]]; then
+  echo "${0}  ...: cherry pick one or more  onto  and leave instructions for proposing pull request"
+  echo
+  echo "  Checks out  and handles the cherry-pick of  (possibly multiple) for you."
+  echo "  Examples:"
+  echo "    $0 upstream/release-3.14 12345        # Cherry-picks PR 12345 onto upstream/release-3.14 and proposes that as a PR."
+  echo "    $0 upstream/release-3.14 12345 56789  # Cherry-picks PR 12345, then 56789 and proposes the combination as a single PR."
+  echo
+  echo "  Set the DRY_RUN environment var to skip git push and creating PR."
+  echo "  This is useful for creating patches to a release branch without making a PR."
+  echo "  When DRY_RUN is set the script will leave you in a branch containing the commits you cherry-picked."
+  echo
+  echo "  Set the REGENERATE_DOCS environment var to regenerate documentation for the target branch after picking the specified commits."
+  echo "  This is useful when picking commits containing changes to API documentation."
+  echo
+  echo "  Set UPSTREAM_REMOTE (default: upstream) and FORK_REMOTE (default: origin)"
+  echo "  to override the default remote names to what you have locally."
+  echo
+  echo "  For merge process info, see https://git.k8s.io/community/contributors/devel/sig-release/cherry-picks.md"
+  exit 2
+fi
+
+# Checks if you are logged in. Will error/bail if you are not.
+gh auth status
+
+if git_status=$(git status --porcelain --untracked=no 2>/dev/null) && [[ -n "${git_status}" ]]; then
+  echo "!!! Dirty tree. Clean up and try again."
+  exit 1
+fi
+
+if [[ -e "${REBASEMAGIC}" ]]; then
+  echo "!!! 'git rebase' or 'git am' in progress. Clean up and try again."
+  exit 1
+fi
+
+declare -r BRANCH="$1"
+shift 1
+declare -r PULLS=( "$@" )
+
+function join { local IFS="$1"; shift; echo "$*"; }
+PULLDASH=$(join - "${PULLS[@]/#/#}") # Generates something like "#12345-#56789"
+declare -r PULLDASH
+PULLSUBJ=$(join " " "${PULLS[@]/#/#}") # Generates something like "#12345 #56789"
+declare -r PULLSUBJ
+
+echo "+++ Updating remotes..."
+git remote update "${UPSTREAM_REMOTE}" "${FORK_REMOTE}"
+
+if ! git log -n1 --format=%H "${BRANCH}" >/dev/null 2>&1; then
+  echo "!!! '${BRANCH}' not found. The second argument should be something like ${UPSTREAM_REMOTE}/release-0.21."
+  echo "    (In particular, it needs to be a valid, existing remote branch that I can 'git checkout'.)"
+  exit 1
+fi
+
+NEWBRANCHREQ="automated-cherry-pick-of-${PULLDASH}" # "Required" portion for tools.
+declare -r NEWBRANCHREQ
+NEWBRANCH="$(echo "${NEWBRANCHREQ}-${BRANCH}" | sed 's/\//-/g')"
+declare -r NEWBRANCH
+NEWBRANCHUNIQ="${NEWBRANCH}-$(date +%s)"
+declare -r NEWBRANCHUNIQ
+echo "+++ Creating local branch ${NEWBRANCHUNIQ}"
+
+cleanbranch=""
+gitamcleanup=false
+function return_to_kansas {
+  if [[ "${gitamcleanup}" == "true" ]]; then
+    echo
+    echo "+++ Aborting in-progress git am."
+    git am --abort >/dev/null 2>&1 || true
+  fi
+
+  # return to the starting branch and delete the PR text file
+  if [[ -z "${DRY_RUN}" ]]; then
+    echo
+    echo "+++ Returning you to the ${STARTINGBRANCH} branch and cleaning up."
+    git checkout -f "${STARTINGBRANCH}" >/dev/null 2>&1 || true
+    if [[ -n "${cleanbranch}" ]]; then
+      git branch -D "${cleanbranch}" >/dev/null 2>&1 || true
+    fi
+  fi
+}
+trap return_to_kansas EXIT
+
+SUBJECTS=()
+function make-a-pr() {
+  local rel
+  rel="$(basename "${BRANCH}")"
+  echo
+  echo "+++ Creating a pull request on GitHub at ${GITHUB_USER}:${NEWBRANCH}"
+
+  local numandtitle
+  numandtitle=$(printf '%s\n' "${SUBJECTS[@]}")
+  prtext=$(cat <&2
+        exit 1
+      fi
+    done
+
+    if [[ "${conflicts}" != "true" ]]; then
+      echo "!!! git am failed, likely because of an in-progress 'git am' or 'git rebase'"
+      exit 1
+    fi
+  }
+
+  # set the subject
+  subject=$(grep -m 1 "^Subject" "/tmp/${pull}.patch" | sed -e 's/Subject: \[PATCH//g' | sed 's/.*] //')
+  SUBJECTS+=("#${pull}: ${subject}")
+
+  # remove the patch file from /tmp
+  rm -f "/tmp/${pull}.patch"
+done
+gitamcleanup=false
+
+# Re-generate docs (if needed)
+if [[ -n "${REGENERATE_DOCS}" ]]; then
+  echo
+  echo "Regenerating docs..."
+  if ! hack/generate-docs.sh; then
+    echo
+    echo "hack/generate-docs.sh FAILED to complete."
+    exit 1
+  fi
+fi
+
+if [[ -n "${DRY_RUN}" ]]; then
+  echo "!!! Skipping git push and PR creation because you set DRY_RUN."
+  echo "To return to the branch you were in when you invoked this script:"
+  echo
+  echo "  git checkout ${STARTINGBRANCH}"
+  echo
+  echo "To delete this branch:"
+  echo
+  echo "  git branch -D ${NEWBRANCHUNIQ}"
+  exit 0
+fi
+
+if git remote -v | grep ^"${FORK_REMOTE}" | grep "${MAIN_REPO_ORG}/${MAIN_REPO_NAME}.git"; then
+  echo "!!! You have ${FORK_REMOTE} configured as your ${MAIN_REPO_ORG}/${MAIN_REPO_NAME}.git"
+  echo "This isn't normal. Leaving you with push instructions:"
+  echo
+  echo "+++ First manually push the branch this script created:"
+  echo
+  echo "  git push REMOTE ${NEWBRANCHUNIQ}:${NEWBRANCH}"
+  echo
+  echo "where REMOTE is your personal fork (maybe ${UPSTREAM_REMOTE}? Consider swapping those.)."
+  echo "OR consider setting UPSTREAM_REMOTE and FORK_REMOTE to different values."
+  echo
+  make-a-pr
+  cleanbranch=""
+  exit 0
+fi
+
+echo
+echo "+++ I'm about to do the following to push to GitHub (and I'm assuming ${FORK_REMOTE} is your personal fork):"
+echo
+echo "  git push ${FORK_REMOTE} ${NEWBRANCHUNIQ}:${NEWBRANCH}"
+echo
+read -p "+++ Proceed (anything but 'y' aborts the cherry-pick)? [y/n] " -r
+if ! [[ "${REPLY}" =~ ^[yY]$ ]]; then
+  echo "Aborting." >&2
+  exit 1
+fi
+
+git push "${FORK_REMOTE}" -f "${NEWBRANCHUNIQ}:${NEWBRANCH}"
+make-a-pr
diff --git a/platform/application/build.gradle b/platform/application/build.gradle
new file mode 100644
index 0000000..18f3715
--- /dev/null
+++ b/platform/application/build.gradle
@@ -0,0 +1,61 @@
+import org.springframework.boot.gradle.plugin.SpringBootPlugin
+
+plugins {
+    id 'org.springframework.boot' apply false
+    id 'java-platform'
+    id 'halo.publish'
+    id 'signing'
+}
+
+group = 'run.halo.tools.platform'
+description = 'Platform of application.'
+
+ext {
+    commonsLang3 = "3.12.0"
+    base62 = "0.1.3"
+    pf4j = '3.12.0'
+    javaDiffUtils = "4.12"
+    guava = "32.0.1-jre"
+    jsoup = '1.15.3'
+    jsonPatch = "1.13"
+    springDocOpenAPI = "2.6.0"
+    lucene = "9.11.1"
+    resilience4jVersion = "2.2.0"
+    twoFactorAuth = "1.3"
+    tika = "2.9.2"
+}
+
+javaPlatform {
+    allowDependencies()
+}
+
+dependencies {
+    api platform(SpringBootPlugin.BOM_COORDINATES)
+
+    constraints {
+        api "org.springdoc:springdoc-openapi-starter-webflux-ui:$springDocOpenAPI"
+        api 'org.openapi4j:openapi-schema-validator:1.0.7'
+
+        // Apache Lucene
+        api "org.apache.lucene:lucene-core:$lucene"
+        api "org.apache.lucene:lucene-queryparser:$lucene"
+        api "org.apache.lucene:lucene-highlighter:$lucene"
+        api "org.apache.lucene:lucene-backward-codecs:$lucene"
+        api "org.apache.lucene:lucene-analysis-common:$lucene"
+
+        api "org.apache.commons:commons-lang3:$commonsLang3"
+        api "io.seruco.encoding:base62:$base62"
+        api "org.pf4j:pf4j:$pf4j"
+        api "com.google.guava:guava:$guava"
+        api "org.jsoup:jsoup:$jsoup"
+        api "io.github.java-diff-utils:java-diff-utils:$javaDiffUtils"
+        api "org.springframework.integration:spring-integration-core"
+        api "com.github.java-json-tools:json-patch:$jsonPatch"
+        api "org.thymeleaf.extras:thymeleaf-extras-springsecurity6"
+        api "io.github.resilience4j:resilience4j-spring-boot3:$resilience4jVersion"
+        api "io.github.resilience4j:resilience4j-reactor:$resilience4jVersion"
+        api "com.j256.two-factor-auth:two-factor-auth:$twoFactorAuth"
+        api "org.apache.tika:tika-core:$tika"
+    }
+
+}
diff --git a/platform/plugin/build.gradle b/platform/plugin/build.gradle
new file mode 100644
index 0000000..39f1a91
--- /dev/null
+++ b/platform/plugin/build.gradle
@@ -0,0 +1,21 @@
+plugins {
+    id 'java-platform'
+    id 'halo.publish'
+}
+
+group = 'run.halo.tools.platform'
+description = 'This is the platform that other plugins depend on. ' +
+        'We can put the plugin API as a dependency at here.'
+
+javaPlatform {
+    allowDependencies()
+}
+
+dependencies {
+    api platform(project(':platform:application'))
+    constraints {
+        api project(':api')
+        // TODO other plugin API dependencies
+        // e.g.: api 'halo.run.plugin:links-api:1.1.0'
+    }
+}
diff --git a/settings.gradle b/settings.gradle
new file mode 100644
index 0000000..693b581
--- /dev/null
+++ b/settings.gradle
@@ -0,0 +1,9 @@
+pluginManagement {
+    repositories {
+        maven { url 'https://repo.spring.io/milestone' }
+        gradlePluginPortal()
+    }
+}
+
+rootProject.name = 'halo'
+include 'api', 'application', 'platform:application', 'platform:plugin', 'ui'