@betterportal/config-manager 0.0.1

package/lib/plugins/service-betterportal-config-manager/bp-routes/tenants/index.js

@@ -0,0 +1,405 @@
+import * as av from "anyvali";
+import { createHandler, uuidv7 } from "@betterportal/framework";
+import { getConfigManagerRouteContext } from "../../routeContext.js";
+import { getManifestCache } from "../../syncApi.js";
+const TenantItemSchema = av.object({
+    id: av.string().minLength(1),
+    slug: av.string().minLength(1),
+    title: av.string().minLength(1),
+    active: av.bool(),
+    serviceCount: av.int().min(0)
+}, { unknownKeys: "strip" });
+const AppItemSchema = av.object({
+    id: av.string().minLength(1),
+    tenantId: av.string().minLength(1),
+    slug: av.string().minLength(1),
+    title: av.string().minLength(1),
+    hostnames: av.array(av.string()),
+    shellServiceId: av.optional(av.string().minLength(1)),
+    authServiceId: av.optional(av.string().minLength(1)),
+    routeCount: av.int().min(0)
+}, { unknownKeys: "strip" });
+const ShellServiceSchema = av.object({
+    id: av.string().minLength(1),
+    tenantId: av.string().minLength(1),
+    title: av.string().minLength(1),
+    serviceId: av.optional(av.string())
+}, { unknownKeys: "strip" });
+export const ResponseSchema = av.object({
+    title: av.string().minLength(1),
+    tenants: av.array(TenantItemSchema),
+    apps: av.array(AppItemSchema),
+    shellServices: av.array(ShellServiceSchema).default([]),
+    authServices: av.array(ShellServiceSchema).default([]),
+    adminApiBase: av.string().minLength(1),
+    serviceBaseUrl: av.optional(av.string())
+}, { unknownKeys: "strip" });
+export const title = "Tenants & Apps";
+export const description = "Manage tenants and applications.";
+export const auth = {
+    required: true,
+    permissions: [
+        { serviceId: "service.betterportal.config-manager", viewId: "tenants.index", permissions: ["read", "create", "update", "delete"] }
+    ]
+};
+export const cacheHints = { ttlSeconds: 0, varyBy: ["accept", "origin"] };
+export const demoScenarios = [
+    { id: "default", title: "Default", response: { title: "Tenants & Apps", tenants: [], apps: [], shellServices: [], authServices: [], adminApiBase: "/.well-known/bp/admin" } }
+];
+export const handleGet = createHandler({ response: ResponseSchema }, () => buildResponseModel());
+export const handlePost = createHandler({ response: ResponseSchema }, async (ctx) => {
+    const body = ctx.request;
+    if (stringValue(body.entity) === "app") {
+        await createApp(body);
+    }
+    else {
+        await createTenant(body);
+    }
+    return buildResponseModel();
+});
+export const handlePut = createHandler({ response: ResponseSchema }, async (ctx) => {
+    const body = ctx.request;
+    if (stringValue(body.entity) === "app") {
+        await updateApp(body);
+    }
+    else {
+        await updateTenant(body);
+    }
+    return buildResponseModel();
+});
+export const handleDelete = createHandler({ response: ResponseSchema }, async (ctx) => {
+    const entity = stringValue(ctx.query.entity);
+    const id = stringValue(ctx.query.id);
+    if (entity === "app") {
+        await deleteApp(id);
+    }
+    else {
+        await deleteTenant(id);
+    }
+    return buildResponseModel();
+});
+async function buildResponseModel() {
+    const routeContext = getConfigManagerRouteContext();
+    const config = await routeContext.storage.loadConfig();
+    return {
+        title: "Tenants & Apps",
+        tenants: config.tenants.map((t) => ({
+            id: t.id,
+            slug: t.slug,
+            title: t.title,
+            active: t.active,
+            serviceCount: t.services.length + config.sharedServiceActivations.filter((activation) => activation.enabled && activation.tenantId === t.id).length
+        })),
+        apps: config.apps.map((a) => ({
+            id: a.id,
+            tenantId: a.tenantId,
+            slug: a.slug,
+            title: a.title,
+            hostnames: a.hostnames,
+            shellServiceId: a.shell?.serviceId,
+            authServiceId: a.auth?.serviceId,
+            routeCount: a.routes.length
+        })),
+        shellServices: config.tenants.flatMap((tenant) => themeShellServicesForTenant(config, tenant.id)),
+        authServices: config.tenants.flatMap((tenant) => authServicesForTenant(config, tenant.id)),
+        adminApiBase: "/.well-known/bp/admin",
+        serviceBaseUrl: routeContext.serviceBaseUrl
+    };
+}
+async function createTenant(body) {
+    const title = stringValue(body.title);
+    if (!title)
+        return;
+    const routeContext = getConfigManagerRouteContext();
+    const config = await routeContext.storage.loadConfig();
+    const id = uuidv7();
+    config.tenants.push({
+        id,
+        slug: stringValue(body.slug) || id,
+        title,
+        active: true,
+        branding: {},
+        services: [],
+        activatedPlatformServices: []
+    });
+    await routeContext.storage.saveConfig(config);
+}
+async function updateTenant(body) {
+    const id = stringValue(body.tenantId);
+    if (!id)
+        return;
+    const routeContext = getConfigManagerRouteContext();
+    const config = await routeContext.storage.loadConfig();
+    const tenant = config.tenants.find((t) => t.id === id);
+    if (!tenant)
+        return;
+    const title = stringValue(body.title);
+    const slug = stringValue(body.slug);
+    if (title)
+        tenant.title = title;
+    if (slug)
+        tenant.slug = slug;
+    tenant.active = boolValue(body.active);
+    await routeContext.storage.saveConfig(config);
+}
+async function deleteTenant(id) {
+    if (!id)
+        return;
+    const routeContext = getConfigManagerRouteContext();
+    const config = await routeContext.storage.loadConfig();
+    config.tenants = config.tenants.filter((tenant) => tenant.id !== id);
+    config.apps = config.apps.filter((app) => app.tenantId !== id);
+    await routeContext.storage.saveConfig(config);
+}
+async function createApp(body) {
+    const tenantId = stringValue(body.tenantId);
+    const title = stringValue(body.title);
+    if (!tenantId || !title)
+        return;
+    const routeContext = getConfigManagerRouteContext();
+    const config = await routeContext.storage.loadConfig();
+    const tenant = config.tenants.find((candidate) => candidate.id === tenantId);
+    if (!tenant)
+        return;
+    const shellServiceId = stringValue(body.shellServiceId);
+    if (shellServiceId && !isThemeShellServiceForTenant(config, tenantId, shellServiceId))
+        return;
+    const authServiceId = stringValue(body.authServiceId);
+    if (authServiceId && !isAuthServiceForTenant(config, tenantId, authServiceId))
+        return;
+    const id = uuidv7();
+    const app = {
+        id,
+        tenantId,
+        slug: stringValue(body.slug) || id,
+        title,
+        hostnames: hostnamesFromBody(body),
+        originOverrides: [],
+        refererOverrides: [],
+        ...(shellServiceId ? { shell: { serviceId: shellServiceId } } : {}),
+        themeConfig: body.themeConfig ?? { mode: "system", bootstrap: {}, light: {}, dark: {} },
+        defaultRoute: stringValue(body.defaultRoute) || "/",
+        routes: [],
+        menu: [],
+        slots: [],
+        fragments: {}
+    };
+    if (authServiceId) {
+        app.auth = buildAppAuthConfig(config, tenantId, authServiceId);
+        ensureAuthRouteMounts(config, app);
+    }
+    config.apps.push(app);
+    await routeContext.storage.saveConfig(config);
+}
+async function updateApp(body) {
+    const id = stringValue(body.appId);
+    if (!id)
+        return;
+    const routeContext = getConfigManagerRouteContext();
+    const config = await routeContext.storage.loadConfig();
+    const appDef = config.apps.find((app) => app.id === id);
+    if (!appDef)
+        return;
+    const title = stringValue(body.title);
+    const slug = stringValue(body.slug);
+    if (title)
+        appDef.title = title;
+    if (slug)
+        appDef.slug = slug;
+    if (body.hostnames !== undefined || body.hostname !== undefined) {
+        appDef.hostnames = hostnamesFromBody(body);
+    }
+    const shellServiceId = stringValue(body.shellServiceId);
+    if (shellServiceId) {
+        if (isThemeShellServiceForTenant(config, appDef.tenantId, shellServiceId)) {
+            appDef.shell = { serviceId: shellServiceId };
+        }
+    }
+    else {
+        delete appDef.shell;
+    }
+    const authServiceId = stringValue(body.authServiceId);
+    if (authServiceId) {
+        if (isAuthServiceForTenant(config, appDef.tenantId, authServiceId)) {
+            const existingRoles = appDef.auth?.roles ?? [];
+            appDef.auth = {
+                ...buildAppAuthConfig(config, appDef.tenantId, authServiceId, appDef.auth),
+                roles: existingRoles
+            };
+            ensureAuthRouteMounts(config, appDef);
+        }
+    }
+    else {
+        delete appDef.auth;
+    }
+    await routeContext.storage.saveConfig(config);
+}
+async function deleteApp(id) {
+    if (!id)
+        return;
+    const routeContext = getConfigManagerRouteContext();
+    const config = await routeContext.storage.loadConfig();
+    config.apps = config.apps.filter((app) => app.id !== id);
+    await routeContext.storage.saveConfig(config);
+}
+function themeShellServicesForTenant(config, tenantId) {
+    const tenant = config.tenants.find((candidate) => candidate.id === tenantId);
+    const tenantServices = (tenant?.services ?? [])
+        .filter((service) => service.enabled && service.capabilities?.includes("theme"))
+        .map((service) => ({
+        id: service.id,
+        tenantId,
+        title: service.title ?? service.serviceId ?? service.hostname,
+        serviceId: service.serviceId
+    }));
+    const sharedServices = config.sharedServiceActivations
+        .filter((activation) => activation.enabled && activation.tenantId === tenantId)
+        .map((activation) => {
+        const shared = config.sharedServiceCatalog.find((service) => service.enabled
+            && service.id === activation.sharedServiceId
+            && service.tags.includes("theme"));
+        if (!shared)
+            return undefined;
+        return {
+            id: activation.id,
+            tenantId,
+            title: shared.title,
+            serviceId: shared.serviceId ?? shared.id
+        };
+    })
+        .filter((service) => !!service);
+    return [...tenantServices, ...sharedServices];
+}
+function isThemeShellServiceForTenant(config, tenantId, shellServiceId) {
+    return themeShellServicesForTenant(config, tenantId).some((service) => service.id === shellServiceId);
+}
+function authServicesForTenant(config, tenantId) {
+    const tenant = config.tenants.find((candidate) => candidate.id === tenantId);
+    const tenantServices = (tenant?.services ?? [])
+        .filter((service) => service.enabled && service.capabilities?.includes("auth"))
+        .map((service) => ({
+        id: service.id,
+        tenantId,
+        title: service.title ?? service.serviceId ?? service.hostname,
+        serviceId: service.serviceId,
+        hostname: service.hostname
+    }));
+    const sharedServices = config.sharedServiceActivations
+        .filter((activation) => activation.enabled && activation.tenantId === tenantId)
+        .map((activation) => {
+        const shared = config.sharedServiceCatalog.find((service) => service.enabled
+            && service.id === activation.sharedServiceId
+            && service.tags.includes("auth"));
+        if (!shared)
+            return undefined;
+        return {
+            id: activation.id,
+            tenantId,
+            title: shared.title,
+            serviceId: shared.serviceId ?? shared.id,
+            hostname: shared.baseUrl
+        };
+    })
+        .filter((service) => !!service);
+    return [...tenantServices, ...sharedServices];
+}
+function isAuthServiceForTenant(config, tenantId, authServiceId) {
+    return authServicesForTenant(config, tenantId).some((service) => service.id === authServiceId);
+}
+function buildAppAuthConfig(config, tenantId, authServiceId, existing) {
+    const authService = authServicesForTenant(config, tenantId).find((service) => service.id === authServiceId);
+    const publicKeys = existing?.publicKeys ?? findKnownAuthPublicKeys(config, authServiceId);
+    const providerKind = authService?.serviceId === "service.betterportal.auth.authress-io"
+        ? "authress.io"
+        : "betterportal.default";
+    const expectedIssuer = providerKind === "authress.io" && existing?.expectedIssuer === "https://authress.io"
+        ? undefined
+        : existing?.expectedIssuer;
+    const expectedAudience = providerKind === "authress.io" && existing?.expectedAudience === "authress"
+        ? undefined
+        : existing?.expectedAudience;
+    return {
+        serviceId: authServiceId,
+        loginViewId: existing?.loginViewId ?? "/login",
+        logoutViewId: existing?.logoutViewId ?? "/logout",
+        refreshViewId: existing?.refreshViewId ?? "/refresh",
+        provider: existing?.provider ?? (providerKind === "authress.io"
+            ? { kind: "authress.io", roleClaimPath: "roles", subjectClaimPath: "sub" }
+            : { kind: "betterportal.default" }),
+        expectedIssuer: expectedIssuer ?? (providerKind === "authress.io" ? "https://authress.betterportal.local" : "https://auth.betterportal.local"),
+        expectedAudience: expectedAudience ?? "betterportal-runtime",
+        jwksUri: existing?.jwksUri ?? `${(authService?.hostname ?? "").replace(/\/+$/, "")}/.well-known/jwks.json`,
+        ...(publicKeys ? { publicKeys } : {}),
+        roles: existing?.roles ?? []
+    };
+}
+function numberedPath(basePath, usedPaths) {
+    const normalized = basePath.startsWith("/") ? basePath : `/${basePath}`;
+    if (!usedPaths.has(normalized))
+        return normalized;
+    let i = 2;
+    while (usedPaths.has(`${normalized}-${i}`))
+        i += 1;
+    return `${normalized}-${i}`;
+}
+function ensureAuthRouteMounts(config, appDef) {
+    const authServiceId = appDef.auth?.serviceId;
+    if (!authServiceId)
+        return;
+    const manifest = getManifestCache().get(authServiceId);
+    if (!manifest)
+        return;
+    const desiredViewIds = ["login.index", "logout.index", "refresh.index", "register.index"];
+    const usedPaths = new Set(appDef.routes.map((route) => route.path));
+    for (const viewId of desiredViewIds) {
+        const view = manifest.viewIndex[viewId];
+        if (!view)
+            continue;
+        if (appDef.routes.some((route) => route.serviceId === authServiceId && route.viewId === viewId))
+            continue;
+        const path = numberedPath(view.path, usedPaths);
+        const methods = view.methods.filter((method) => method === "GET" || method === "POST" || method === "PUT" || method === "PATCH" || method === "DELETE" || method === "OPTIONS");
+        usedPaths.add(path);
+        appDef.routes.push({
+            id: uuidv7(),
+            path,
+            serviceId: authServiceId,
+            viewId,
+            targetPath: view.path,
+            title: viewId.replace(".index", "").replace(/^\w/, (char) => char.toUpperCase()),
+            enabled: true,
+            methods: methods.length ? methods : ["GET"]
+        });
+    }
+}
+function findKnownAuthPublicKeys(config, authServiceId) {
+    const activation = config.sharedServiceActivations.find((candidate) => candidate.id === authServiceId);
+    const sharedServiceId = activation?.sharedServiceId;
+    for (const app of config.apps) {
+        const auth = app.auth;
+        if (!auth?.publicKeys)
+            continue;
+        if (auth.serviceId === authServiceId)
+            return auth.publicKeys;
+        if (sharedServiceId) {
+            const appActivation = config.sharedServiceActivations.find((candidate) => candidate.id === auth.serviceId);
+            if (appActivation?.sharedServiceId === sharedServiceId)
+                return auth.publicKeys;
+        }
+    }
+    return undefined;
+}
+function hostnamesFromBody(body) {
+    if (Array.isArray(body.hostnames)) {
+        return body.hostnames.filter((value) => typeof value === "string" && value.length > 0);
+    }
+    const raw = stringValue(body.hostnames) || stringValue(body.hostname);
+    return raw.split(",").map((hostname) => hostname.trim()).filter(Boolean);
+}
+function stringValue(value) {
+    return typeof value === "string" ? value.trim() : "";
+}
+function boolValue(value) {
+    return value === true || value === "true" || value === "on";
+}
+//# sourceMappingURL=index.js.map

package/lib/plugins/service-betterportal-config-manager/bp-routes/tenants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-config-manager/bp-routes/tenants/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EACL,aAAa,EACb,MAAM,EAKP,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,gBAAgB,GAAG,EAAE,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE;IACjB,YAAY,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAClC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAChC,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACrD,aAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpD,UAAU,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,kBAAkB,GAAG,EAAE,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAClC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;CACpC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACnC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;IAC7B,aAAa,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,YAAY,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACtC,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;CACzC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,KAAK,GAAG,gBAAgB,CAAC;AACtC,MAAM,CAAC,MAAM,WAAW,GAAG,kCAAkC,CAAC;AAE9D,MAAM,CAAC,MAAM,IAAI,GAAuB;IACtC,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE;QACX,EAAE,SAAS,EAAE,qCAAqC,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,MAAM,EAAC,QAAQ,EAAC,QAAQ,EAAC,QAAQ,CAAC,EAAE;KAChI;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAe,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;AAEtF,MAAM,CAAC,MAAM,aAAa,GAAiC;IACzD,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,uBAAuB,EAAE,EAAE;CAC9K,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CACpC,EAAE,QAAQ,EAAE,cAAc,EAAE,EAC5B,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CACrC,EAAE,QAAQ,EAAE,cAAc,EAAE,EAC5B,KAAK,EAAE,GAAG,EAAE,EAAE;IACZ,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC;IACzB,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;QACvC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CACpC,EAAE,QAAQ,EAAE,cAAc,EAAE,EAC5B,KAAK,EAAE,GAAG,EAAE,EAAE;IACZ,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC;IACzB,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;QACvC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CACvC,EAAE,QAAQ,EAAE,cAAc,EAAE,EAC5B,KAAK,EAAE,GAAG,EAAE,EAAE;IACZ,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC,CACF,CAAC;AAEF,KAAK,UAAU,kBAAkB;IAC/B,MAAM,YAAY,GAAG,4BAA4B,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACvD,OAAO;QACL,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM;SACpJ,CAAC,CAAC;QACH,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS;YAClC,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS;YAChC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACjG,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1F,YAAY,EAAE,uBAAuB;QACrC,cAAc,EAAE,YAAY,CAAC,cAAc;KAC5C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAA6B;IACvD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,MAAM,YAAY,GAAG,4BAA4B,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAClB,EAAE;QACF,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAClC,KAAK;QACL,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,yBAAyB,EAAE,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAA6B;IACvD,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE;QAAE,OAAO;IAEhB,MAAM,YAAY,GAAG,4BAA4B,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK;QAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IAChC,IAAI,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,EAAU;IACpC,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,MAAM,YAAY,GAAG,4BAA4B,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACvD,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;IAC/D,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAA6B;IACpD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO;IAEhC,MAAM,YAAY,GAAG,4BAA4B,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxD,IAAI,cAAc,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC;QAAE,OAAO;IAC9F,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,aAAa,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC;QAAE,OAAO;IAEtF,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,MAAM,GAAG,GAAoB;QAC3B,EAAE;QACF,QAAQ;QACR,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAClC,KAAK;QACL,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAClC,eAAe,EAAE,EAAE;QACnB,gBAAgB,EAAE,EAAE;QACpB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,WAAW,EAAG,IAAI,CAAC,WAAmD,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QAChI,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG;QACnD,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,EAAE;KACd,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,GAAG,CAAC,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC/D,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAA6B;IACpD,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE;QAAE,OAAO;IAEhB,MAAM,YAAY,GAAG,4BAA4B,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK;QAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IAChC,IAAI,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IAC7B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,CAAC,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxD,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,KAAK,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;YACnE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,GAAG;gBACZ,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC;gBAC1E,KAAK,EAAE,aAAa;aACrB,CAAC;YACF,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,EAAU;IACjC,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,MAAM,YAAY,GAAG,4BAA4B,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACvD,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,2BAA2B,CAAC,MAA0B,EAAE,QAAgB;IAM/E,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC;SAC5C,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;SAC/E,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ;QACR,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ;QAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC,CAAC;IAEN,MAAM,cAAc,GAAG,MAAM,CAAC,wBAAwB;SACnD,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC;SAC9E,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC1D,OAAO,CAAC,OAAO;eACZ,OAAO,CAAC,EAAE,KAAK,UAAU,CAAC,eAAe;eACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAClC,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,QAAQ;YACR,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE;SACzC,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,OAAO,EAA0C,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAE1E,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,cAAc,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,4BAA4B,CAAC,MAA0B,EAAE,QAAgB,EAAE,cAAsB;IACxG,OAAO,2BAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA0B,EAAE,QAAgB;IAOzE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC;SAC5C,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ;QACR,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ;QAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC,CAAC;IAEN,MAAM,cAAc,GAAG,MAAM,CAAC,wBAAwB;SACnD,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC;SAC9E,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC1D,OAAO,CAAC,OAAO;eACZ,OAAO,CAAC,EAAE,KAAK,UAAU,CAAC,eAAe;eACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CACjC,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,QAAQ;YACR,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE;YACxC,QAAQ,EAAE,MAAM,CAAC,OAAO;SACzB,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,OAAO,EAA0C,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAE1E,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,cAAc,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA0B,EAAE,QAAgB,EAAE,aAAqB;IACjG,OAAO,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA0B,EAC1B,QAAgB,EAChB,aAAqB,EACrB,QAAwB;IAExB,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC;IAC5G,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,uBAAuB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1F,MAAM,YAAY,GAAG,WAAW,EAAE,SAAS,KAAK,uCAAuC;QACrF,CAAC,CAAC,aAAsB;QACxB,CAAC,CAAC,sBAA+B,CAAC;IACpC,MAAM,cAAc,GAAG,YAAY,KAAK,aAAa,IAAI,QAAQ,EAAE,cAAc,KAAK,qBAAqB;QACzG,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC7B,MAAM,gBAAgB,GAAG,YAAY,KAAK,aAAa,IAAI,QAAQ,EAAE,gBAAgB,KAAK,UAAU;QAClG,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IAC/B,OAAO;QACL,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,QAAQ;QAC9C,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,SAAS;QACjD,aAAa,EAAE,QAAQ,EAAE,aAAa,IAAI,UAAU;QACpD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,CAC9B,YAAY,KAAK,aAAa;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE;YAC1E,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CACrC;QACD,cAAc,EAAE,cAAc,IAAI,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,iCAAiC,CAAC;QAC9I,gBAAgB,EAAE,gBAAgB,IAAI,sBAAsB;QAC5D,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB;QAC1G,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,SAAsB;IAC5D,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;IACxE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,SAAS,CAAC,GAAG,CAAC,GAAG,UAAU,IAAI,CAAC,EAAE,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,GAAG,UAAU,IAAI,CAAC,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA0B,EAAE,MAAuB;IAChF,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;IAC7C,IAAI,CAAC,aAAa;QAAE,OAAO;IAC3B,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEtB,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;YAAE,SAAS;QAE1G,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAuD,EAAE,CAClG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,CAC/H,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACjB,EAAE,EAAE,MAAM,EAAE;YACZ,IAAI;YACJ,SAAS,EAAE,aAAa;YACxB,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAChF,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,MAA0B,EAAE,aAAqB;IAChF,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC;IACvG,MAAM,eAAe,GAAG,UAAU,EAAE,eAAe,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,UAAU;YAAE,SAAS;QAChC,IAAI,IAAI,CAAC,SAAS,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC7D,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,aAAa,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3G,IAAI,aAAa,EAAE,eAAe,KAAK,eAAe;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QACjF,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAA6B;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,CAAC;AAC9D,CAAC"}

package/lib/plugins/service-betterportal-config-manager/cpBootstrap.d.ts

@@ -0,0 +1,26 @@
+export interface CpKeyPair {
+    privateKeyPem: string;
+    publicKeyPem: string;
+    kid: string;
+}
+export interface CpBootstrapState {
+    keyPair: CpKeyPair;
+    /** Public RSA JWK derived from keyPair. */
+    jwk: Record<string, unknown>;
+    /** Issuer URL used in tokens (iss claim). */
+    issuer: string;
+    /** Audience for tokens minted by this CP. */
+    audience: string;
+    /** Stable identifier for this CP instance (cpId). */
+    cpId: string;
+    /** JWKS URI the CP exposes (built from issuer). */
+    jwksUri: string;
+}
+export declare function cpBootstrap(input: {
+    keyStorePath: string;
+    issuer?: string;
+    audience: string;
+    host: string;
+    port: number;
+}): CpBootstrapState;
+//# sourceMappingURL=cpBootstrap.d.ts.map

package/lib/plugins/service-betterportal-config-manager/cpBootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cpBootstrap.d.ts","sourceRoot":"","sources":["../../../src/plugins/service-betterportal-config-manager/cpBootstrap.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,SAAS,CAAC;IACnB,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;CACjB;AAQD,wBAAgB,WAAW,CAAC,KAAK,EAAE;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,gBAAgB,CAmBnB"}

package/lib/plugins/service-betterportal-config-manager/cpBootstrap.js

@@ -0,0 +1,58 @@
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { randomBytes, generateKeyPairSync, createPublicKey } from "node:crypto";
+/**
+ * Load or generate the CP keypair + derive JWK + assemble bootstrap state.
+ * Returns the same object on subsequent calls within a process.
+ */
+let cached = null;
+export function cpBootstrap(input) {
+    if (cached)
+        return cached;
+    const keyPath = resolve(input.keyStorePath);
+    const keyPair = loadOrGenerateKeyPair(keyPath);
+    const issuer = input.issuer ?? `http://${input.host === "0.0.0.0" ? "localhost" : input.host}:${input.port}`;
+    const jwksUri = `${issuer.replace(/\/+$/, "")}/.well-known/jwks.json`;
+    const cpId = `cp-${keyPair.kid.slice(0, 12)}`;
+    cached = {
+        keyPair,
+        jwk: publicKeyToJwk(keyPair.publicKeyPem, keyPair.kid),
+        issuer: issuer.replace(/\/+$/, ""),
+        audience: input.audience,
+        cpId,
+        jwksUri
+    };
+    return cached;
+}
+function loadOrGenerateKeyPair(filePath) {
+    if (existsSync(filePath)) {
+        const parsed = JSON.parse(readFileSync(filePath, "utf8"));
+        if (typeof parsed.privateKeyPem !== "string" || typeof parsed.publicKeyPem !== "string" || typeof parsed.kid !== "string") {
+            throw new Error(`Malformed CP keypair file: ${filePath}`);
+        }
+        return parsed;
+    }
+    const { privateKey, publicKey } = generateKeyPairSync("rsa", {
+        modulusLength: 2048,
+        publicKeyEncoding: { type: "spki", format: "pem" },
+        privateKeyEncoding: { type: "pkcs8", format: "pem" }
+    });
+    const kid = randomBytes(16).toString("base64url");
+    const pair = { privateKeyPem: privateKey, publicKeyPem: publicKey, kid };
+    mkdirSync(dirname(filePath), { recursive: true });
+    writeFileSync(filePath, JSON.stringify(pair, null, 2), { mode: 0o600 });
+    return pair;
+}
+function publicKeyToJwk(publicKeyPem, kid) {
+    const keyObject = createPublicKey(publicKeyPem);
+    const jwk = keyObject.export({ format: "jwk" });
+    return {
+        kty: "RSA",
+        use: "sig",
+        alg: "RS256",
+        kid,
+        n: jwk.n,
+        e: jwk.e
+    };
+}
+//# sourceMappingURL=cpBootstrap.js.map

package/lib/plugins/service-betterportal-config-manager/cpBootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cpBootstrap.js","sourceRoot":"","sources":["../../../src/plugins/service-betterportal-config-manager/cpBootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAsBhF;;;GAGG;AACH,IAAI,MAAM,GAA4B,IAAI,CAAC;AAE3C,MAAM,UAAU,WAAW,CAAC,KAM3B;IACC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,UAAU,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7G,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAE9C,MAAM,GAAG;QACP,OAAO;QACP,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC;QACtD,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI;QACJ,OAAO;KACR,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAc,CAAC;QACvE,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1H,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE;QAC3D,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;KACrD,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,IAAI,GAAc,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACpF,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB,EAAE,GAAW;IACvD,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA0C,CAAC;IACzF,OAAO;QACL,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,OAAO;QACZ,GAAG;QACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,CAAC,EAAE,GAAG,CAAC,CAAC;KACT,CAAC;AACJ,CAAC"}

package/lib/plugins/service-betterportal-config-manager/fragmentsEditor.d.ts

@@ -0,0 +1,3 @@
+import type { BetterPortalH3App, PlatformConfigStore } from "@betterportal/framework";
+export declare function registerFragmentsEditorRoutes(app: BetterPortalH3App, store: PlatformConfigStore): void;
+//# sourceMappingURL=fragmentsEditor.d.ts.map

package/lib/plugins/service-betterportal-config-manager/fragmentsEditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fragmentsEditor.d.ts","sourceRoot":"","sources":["../../../src/plugins/service-betterportal-config-manager/fragmentsEditor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EAEjB,mBAAmB,EACpB,MAAM,yBAAyB,CAAC;AAyRjC,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,mBAAmB,GAAG,IAAI,CA+HtG"}