@credo-ts/askar-to-drizzle-storage-migration 0.6.0-alpha-20251010154241 → 0.6.0-alpha-20251010171953

package/build/packages/tenants/src/context/TenantAgentContextProvider.mjs

@@ -0,0 +1,151 @@
+import { TenantAgent } from "../TenantAgent.mjs";
+import { __decorateMetadata } from "../../../../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorateMetadata.mjs";
+import { __decorate } from "../../../../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorate.mjs";
+import { isValidJweStructure } from "../../../didcomm/src/util/JWE.mjs";
+import { __decorateParam } from "../../../../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorateParam.mjs";
+import { DidCommRoutingEventTypes } from "../../../didcomm/src/modules/routing/DidCommRoutingEvents.mjs";
+import "../../../didcomm/src/index.mjs";
+import { TenantRecordService } from "../services/TenantRecordService.mjs";
+import "../services/index.mjs";
+import { TenantSessionCoordinator } from "./TenantSessionCoordinator.mjs";
+import { AgentContext, CredoError, EventEmitter, InjectionSymbols, JsonEncoder, Kms, TypedArrayEncoder, UpdateAssistant, inject, injectable, isJsonObject, isStorageUpToDate } from "@credo-ts/core";
+
+//#region ../tenants/src/context/TenantAgentContextProvider.ts
+var _ref, _ref2, _ref3, _ref4;
+let TenantAgentContextProvider = class TenantAgentContextProvider$1 {
+	constructor(tenantRecordService, rootAgentContext, eventEmitter, tenantSessionCoordinator, logger) {
+		this.tenantRecordService = tenantRecordService;
+		this.rootAgentContext = rootAgentContext;
+		this.eventEmitter = eventEmitter;
+		this.tenantSessionCoordinator = tenantSessionCoordinator;
+		this.logger = logger;
+		this.listenForRoutingKeyCreatedEvents();
+	}
+	getContextCorrelationIdForTenantId(tenantId) {
+		return this.tenantSessionCoordinator.getContextCorrelationIdForTenantId(tenantId);
+	}
+	async getAgentContextForContextCorrelationId(contextCorrelationId, { provisionContext = false } = {}) {
+		if (contextCorrelationId === this.rootAgentContext.contextCorrelationId) return this.rootAgentContext;
+		this.tenantSessionCoordinator.assertTenantContextCorrelationId(contextCorrelationId);
+		const tenantId = this.tenantSessionCoordinator.getTenantIdForContextCorrelationId(contextCorrelationId);
+		const tenantRecord = await this.tenantRecordService.getTenantById(this.rootAgentContext, tenantId);
+		const shouldUpdate = !isStorageUpToDate(tenantRecord.storageVersion);
+		if (shouldUpdate && !this.rootAgentContext.config.autoUpdateStorageOnStartup) throw new CredoError(`Current agent storage for tenant ${tenantRecord.id} is not up to date. To prevent the tenant state from getting corrupted the tenant initialization is aborted. Make sure to update the tenant storage (currently at ${tenantRecord.storageVersion}) to the latest version (${UpdateAssistant.frameworkStorageVersion}). You can also downgrade your version of Credo.`);
+		const agentContext = await this.tenantSessionCoordinator.getContextForSession(tenantRecord, {
+			provisionContext,
+			runInMutex: shouldUpdate ? (agentContext$1) => this._updateTenantStorage(tenantRecord, agentContext$1) : void 0
+		});
+		this.logger.debug(`Created tenant agent context for context correlation id '${contextCorrelationId}'`);
+		return agentContext;
+	}
+	async getContextForInboundMessage(inboundMessage, options) {
+		this.logger.debug("Getting context for inbound message in tenant agent context provider", { contextCorrelationId: options?.contextCorrelationId });
+		let tenantId = options?.contextCorrelationId && this.tenantSessionCoordinator.isTenantContextCorrelationId(options.contextCorrelationId) ? this.tenantSessionCoordinator.getTenantIdForContextCorrelationId(options.contextCorrelationId) : void 0;
+		let recipientKeys = [];
+		if (!tenantId && isValidJweStructure(inboundMessage)) {
+			this.logger.trace("Inbound message is a JWE, extracting tenant id from JWE's protected header");
+			recipientKeys = this.getRecipientKeysFromEncryptedMessage(inboundMessage);
+			this.logger.trace(`Found ${recipientKeys.length} recipient keys in JWE's protected header`);
+			for (const recipientKey of recipientKeys) {
+				const tenantRoutingRecord = await this.tenantRecordService.findTenantRoutingRecordByRecipientKey(this.rootAgentContext, recipientKey);
+				if (tenantRoutingRecord) {
+					this.logger.debug(`Found tenant routing record for recipient key ${recipientKeys[0].fingerprint}`, { tenantId: tenantRoutingRecord.tenantId });
+					tenantId = tenantRoutingRecord.tenantId;
+					break;
+				}
+			}
+		}
+		if (!tenantId) {
+			this.logger.error("Couldn't determine tenant id for inbound message. Unable to create context", {
+				inboundMessage,
+				recipientKeys: recipientKeys.map((key) => key.fingerprint)
+			});
+			throw new CredoError("Couldn't determine tenant id for inbound message. Unable to create context");
+		}
+		const contextCorrelationId = this.tenantSessionCoordinator.getContextCorrelationIdForTenantId(tenantId);
+		return await this.getAgentContextForContextCorrelationId(contextCorrelationId);
+	}
+	async endSessionForAgentContext(agentContext) {
+		await this.tenantSessionCoordinator.endAgentContextSession(agentContext);
+	}
+	async deleteAgentContext(agentContext) {
+		await this.tenantSessionCoordinator.deleteAgentContext(agentContext);
+	}
+	getRecipientKeysFromEncryptedMessage(jwe) {
+		const jweProtected = JsonEncoder.fromBase64(jwe.protected);
+		if (!Array.isArray(jweProtected.recipients)) return [];
+		const recipientKeys = [];
+		for (const recipient of jweProtected.recipients) if (isJsonObject(recipient) && isJsonObject(recipient.header) && typeof recipient.header.kid === "string") {
+			const publicJwk = Kms.PublicJwk.fromPublicKey({
+				crv: "Ed25519",
+				kty: "OKP",
+				publicKey: TypedArrayEncoder.fromBase58(recipient.header.kid)
+			});
+			recipientKeys.push(publicJwk);
+		}
+		return recipientKeys;
+	}
+	async registerRecipientKeyForTenant(tenantId, recipientKey) {
+		this.logger.debug(`Registering recipient key ${recipientKey.fingerprint} for tenant ${tenantId}`);
+		const tenantRecord = await this.tenantRecordService.getTenantById(this.rootAgentContext, tenantId);
+		await this.tenantRecordService.addTenantRoutingRecord(this.rootAgentContext, tenantRecord.id, recipientKey);
+	}
+	listenForRoutingKeyCreatedEvents() {
+		this.logger.debug("Listening for routing key created events in tenant agent context provider");
+		this.eventEmitter.on(DidCommRoutingEventTypes.RoutingCreatedEvent, async (event) => {
+			const contextCorrelationId = event.metadata.contextCorrelationId;
+			const recipientKey = event.payload.routing.recipientKey;
+			if (contextCorrelationId === this.rootAgentContext.contextCorrelationId) return;
+			this.tenantSessionCoordinator.assertTenantContextCorrelationId(contextCorrelationId);
+			this.logger.debug(`Received routing key created event for tenant context ${contextCorrelationId}, registering recipient key ${recipientKey.fingerprint} in base wallet`);
+			await this.registerRecipientKeyForTenant(this.tenantSessionCoordinator.getTenantIdForContextCorrelationId(contextCorrelationId), recipientKey);
+		});
+	}
+	/**
+	* Method to allow updating the tenant storage, this method can be called from the TenantsApi
+	* to update the storage for a tenant manually
+	*/
+	async updateTenantStorage(tenantRecord, updateOptions) {
+		await (await this.tenantSessionCoordinator.getContextForSession(tenantRecord, { runInMutex: (agentContext) => this._updateTenantStorage(tenantRecord, agentContext, updateOptions) })).endSession();
+	}
+	/**
+	* Handle the case where the tenant storage is outdated. If auto-update is disabled we will throw an error
+	* and not update the storage. If auto-update is enabled we will update the storage.
+	*
+	* When this method is called we can be sure that we are in the mutex runExclusive lock and thus other sessions
+	* will not be able to open a session for this tenant until we're done.
+	*
+	* NOTE: We don't support multi-instance locking for now. That means you can only have a single instance open and
+	* it will prevent multiple processes from updating the tenant storage at the same time. However if multi-instances
+	* are used, we can't prevent multiple instances from updating the tenant storage at the same time.
+	* In the future we can make the tenantSessionCoordinator an interface and allowing a instance-tenant-lock as well
+	* as an tenant-lock (across all instances)
+	*/
+	async _updateTenantStorage(tenantRecord, agentContext, updateOptions) {
+		try {
+			const updateAssistant = new UpdateAssistant(new TenantAgent(agentContext));
+			await updateAssistant.initialize();
+			await updateAssistant.update(updateOptions);
+			tenantRecord.storageVersion = await updateAssistant.getCurrentAgentStorageVersion();
+			await this.rootAgentContext.dependencyManager.resolve(TenantRecordService).updateTenant(this.rootAgentContext, tenantRecord);
+		} catch (error) {
+			this.logger.error(`Error occurred while updating tenant storage for tenant ${tenantRecord.id}`, error);
+			throw error;
+		}
+	}
+};
+TenantAgentContextProvider = __decorate([
+	injectable(),
+	__decorateParam(4, inject(InjectionSymbols.Logger)),
+	__decorateMetadata("design:paramtypes", [
+		typeof (_ref = typeof TenantRecordService !== "undefined" && TenantRecordService) === "function" ? _ref : Object,
+		typeof (_ref2 = typeof AgentContext !== "undefined" && AgentContext) === "function" ? _ref2 : Object,
+		typeof (_ref3 = typeof EventEmitter !== "undefined" && EventEmitter) === "function" ? _ref3 : Object,
+		typeof (_ref4 = typeof TenantSessionCoordinator !== "undefined" && TenantSessionCoordinator) === "function" ? _ref4 : Object,
+		Object
+	])
+], TenantAgentContextProvider);
+
+//#endregion
+export { TenantAgentContextProvider };
+//# sourceMappingURL=TenantAgentContextProvider.mjs.map

package/build/packages/tenants/src/context/TenantAgentContextProvider.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantAgentContextProvider.mjs","names":["TenantAgentContextProvider","logger: Logger","agentContext","recipientKeys: Kms.PublicJwk[]"],"sources":["../../../../../../tenants/src/context/TenantAgentContextProvider.ts"],"sourcesContent":["import { type AgentContextProvider, Kms, TypedArrayEncoder, type UpdateAssistantUpdateOptions } from '@credo-ts/core'\nimport type { DidCommEncryptedMessage, DidCommRoutingCreatedEvent } from '@credo-ts/didcomm'\nimport type { TenantRecord } from '../repository'\n\nimport {\n  AgentContext,\n  CredoError,\n  EventEmitter,\n  InjectionSymbols,\n  JsonEncoder,\n  type Logger,\n  UpdateAssistant,\n  inject,\n  injectable,\n  isJsonObject,\n  isStorageUpToDate,\n} from '@credo-ts/core'\nimport { DidCommRoutingEventTypes, isValidJweStructure } from '@credo-ts/didcomm'\n\nimport { TenantAgent } from '../TenantAgent'\nimport { TenantRecordService } from '../services'\n\nimport { TenantSessionCoordinator } from './TenantSessionCoordinator'\n\n@injectable()\nexport class TenantAgentContextProvider implements AgentContextProvider {\n  private tenantRecordService: TenantRecordService\n  private rootAgentContext: AgentContext\n  private eventEmitter: EventEmitter\n  private logger: Logger\n  private tenantSessionCoordinator: TenantSessionCoordinator\n\n  public constructor(\n    tenantRecordService: TenantRecordService,\n    rootAgentContext: AgentContext,\n    eventEmitter: EventEmitter,\n    tenantSessionCoordinator: TenantSessionCoordinator,\n    @inject(InjectionSymbols.Logger) logger: Logger\n  ) {\n    this.tenantRecordService = tenantRecordService\n    this.rootAgentContext = rootAgentContext\n    this.eventEmitter = eventEmitter\n    this.tenantSessionCoordinator = tenantSessionCoordinator\n    this.logger = logger\n\n    // Start listener for newly created routing keys, so we can register a mapping for each new key for the tenant\n    this.listenForRoutingKeyCreatedEvents()\n  }\n\n  public getContextCorrelationIdForTenantId(tenantId: string) {\n    return this.tenantSessionCoordinator.getContextCorrelationIdForTenantId(tenantId)\n  }\n\n  public async getAgentContextForContextCorrelationId(\n    contextCorrelationId: string,\n    { provisionContext = false }: { provisionContext?: boolean } = {}\n  ) {\n    // It could be that the root agent context is requested, in that case we return the root agent context\n    if (contextCorrelationId === this.rootAgentContext.contextCorrelationId) {\n      return this.rootAgentContext\n    }\n\n    // If not the root agent context, we require it to be a tenant context correlation id\n    this.tenantSessionCoordinator.assertTenantContextCorrelationId(contextCorrelationId)\n    const tenantId = this.tenantSessionCoordinator.getTenantIdForContextCorrelationId(contextCorrelationId)\n\n    // TODO: maybe we can look at not having to retrieve the tenant record if there's already a context available.\n    const tenantRecord = await this.tenantRecordService.getTenantById(this.rootAgentContext, tenantId)\n    const shouldUpdate = !isStorageUpToDate(tenantRecord.storageVersion)\n\n    // If the tenant storage is not up to date, and autoUpdate is disabled we throw an error\n    if (shouldUpdate && !this.rootAgentContext.config.autoUpdateStorageOnStartup) {\n      throw new CredoError(\n        `Current agent storage for tenant ${tenantRecord.id} is not up to date. To prevent the tenant state from getting corrupted the tenant initialization is aborted. Make sure to update the tenant storage (currently at ${tenantRecord.storageVersion}) to the latest version (${UpdateAssistant.frameworkStorageVersion}). You can also downgrade your version of Credo.`\n      )\n    }\n\n    const agentContext = await this.tenantSessionCoordinator.getContextForSession(tenantRecord, {\n      provisionContext,\n      runInMutex: shouldUpdate ? (agentContext) => this._updateTenantStorage(tenantRecord, agentContext) : undefined,\n    })\n\n    this.logger.debug(`Created tenant agent context for context correlation id '${contextCorrelationId}'`)\n\n    return agentContext\n  }\n\n  public async getContextForInboundMessage(inboundMessage: unknown, options?: { contextCorrelationId?: string }) {\n    this.logger.debug('Getting context for inbound message in tenant agent context provider', {\n      contextCorrelationId: options?.contextCorrelationId,\n    })\n\n    // TODO: what if context is for root agent context?\n    let tenantId =\n      options?.contextCorrelationId &&\n      this.tenantSessionCoordinator.isTenantContextCorrelationId(options.contextCorrelationId)\n        ? this.tenantSessionCoordinator.getTenantIdForContextCorrelationId(options.contextCorrelationId)\n        : undefined\n    let recipientKeys: Kms.PublicJwk[] = []\n\n    if (!tenantId && isValidJweStructure(inboundMessage)) {\n      this.logger.trace(\"Inbound message is a JWE, extracting tenant id from JWE's protected header\")\n      recipientKeys = this.getRecipientKeysFromEncryptedMessage(inboundMessage)\n\n      this.logger.trace(`Found ${recipientKeys.length} recipient keys in JWE's protected header`)\n\n      // FIXME: what if there are multiple recipients in the same agent? If we receive the messages twice we will process it for\n      // the first found recipient multiple times. This is however a case I've never seen before and will add quite some complexity\n      // to resolve. I think we're fine to ignore this case for now.\n      for (const recipientKey of recipientKeys) {\n        const tenantRoutingRecord = await this.tenantRecordService.findTenantRoutingRecordByRecipientKey(\n          this.rootAgentContext,\n          recipientKey\n        )\n\n        if (tenantRoutingRecord) {\n          this.logger.debug(`Found tenant routing record for recipient key ${recipientKeys[0].fingerprint}`, {\n            tenantId: tenantRoutingRecord.tenantId,\n          })\n          tenantId = tenantRoutingRecord.tenantId\n          break\n        }\n      }\n    }\n\n    if (!tenantId) {\n      this.logger.error(\"Couldn't determine tenant id for inbound message. Unable to create context\", {\n        inboundMessage,\n        recipientKeys: recipientKeys.map((key) => key.fingerprint),\n      })\n      throw new CredoError(\"Couldn't determine tenant id for inbound message. Unable to create context\")\n    }\n\n    const contextCorrelationId = this.tenantSessionCoordinator.getContextCorrelationIdForTenantId(tenantId)\n    const agentContext = await this.getAgentContextForContextCorrelationId(contextCorrelationId)\n\n    return agentContext\n  }\n\n  public async endSessionForAgentContext(agentContext: AgentContext) {\n    await this.tenantSessionCoordinator.endAgentContextSession(agentContext)\n  }\n\n  public async deleteAgentContext(agentContext: AgentContext): Promise<void> {\n    await this.tenantSessionCoordinator.deleteAgentContext(agentContext)\n  }\n\n  private getRecipientKeysFromEncryptedMessage(jwe: DidCommEncryptedMessage): Kms.PublicJwk[] {\n    const jweProtected = JsonEncoder.fromBase64(jwe.protected)\n    if (!Array.isArray(jweProtected.recipients)) return []\n\n    const recipientKeys: Kms.PublicJwk[] = []\n\n    for (const recipient of jweProtected.recipients) {\n      // Check if recipient.header.kid is a string\n      if (isJsonObject(recipient) && isJsonObject(recipient.header) && typeof recipient.header.kid === 'string') {\n        // This won't work with other key types, we should detect what the encoding is of kid, and based on that\n        // determine how we extract the key from the message\n        const publicJwk = Kms.PublicJwk.fromPublicKey({\n          crv: 'Ed25519',\n          kty: 'OKP',\n          publicKey: TypedArrayEncoder.fromBase58(recipient.header.kid),\n        })\n\n        recipientKeys.push(publicJwk)\n      }\n    }\n\n    return recipientKeys\n  }\n\n  private async registerRecipientKeyForTenant(tenantId: string, recipientKey: Kms.PublicJwk) {\n    this.logger.debug(`Registering recipient key ${recipientKey.fingerprint} for tenant ${tenantId}`)\n    const tenantRecord = await this.tenantRecordService.getTenantById(this.rootAgentContext, tenantId)\n    await this.tenantRecordService.addTenantRoutingRecord(this.rootAgentContext, tenantRecord.id, recipientKey)\n  }\n\n  private listenForRoutingKeyCreatedEvents() {\n    this.logger.debug('Listening for routing key created events in tenant agent context provider')\n    this.eventEmitter.on<DidCommRoutingCreatedEvent>(DidCommRoutingEventTypes.RoutingCreatedEvent, async (event) => {\n      const contextCorrelationId = event.metadata.contextCorrelationId\n      const recipientKey = event.payload.routing.recipientKey\n\n      // We don't want to register the key if it's for the root agent context\n      if (contextCorrelationId === this.rootAgentContext.contextCorrelationId) return\n\n      this.tenantSessionCoordinator.assertTenantContextCorrelationId(contextCorrelationId)\n\n      this.logger.debug(\n        `Received routing key created event for tenant context ${contextCorrelationId}, registering recipient key ${recipientKey.fingerprint} in base wallet`\n      )\n      await this.registerRecipientKeyForTenant(\n        this.tenantSessionCoordinator.getTenantIdForContextCorrelationId(contextCorrelationId),\n        recipientKey\n      )\n    })\n  }\n\n  /**\n   * Method to allow updating the tenant storage, this method can be called from the TenantsApi\n   * to update the storage for a tenant manually\n   */\n  public async updateTenantStorage(tenantRecord: TenantRecord, updateOptions?: UpdateAssistantUpdateOptions) {\n    const agentContext = await this.tenantSessionCoordinator.getContextForSession(tenantRecord, {\n      // runInMutex allows us to run the updateTenantStorage method in a mutex lock\n      // prevent other sessions from being started while the update is in progress\n      runInMutex: (agentContext) => this._updateTenantStorage(tenantRecord, agentContext, updateOptions),\n    })\n\n    // End sesion afterwards\n    await agentContext.endSession()\n  }\n\n  /**\n   * Handle the case where the tenant storage is outdated. If auto-update is disabled we will throw an error\n   * and not update the storage. If auto-update is enabled we will update the storage.\n   *\n   * When this method is called we can be sure that we are in the mutex runExclusive lock and thus other sessions\n   * will not be able to open a session for this tenant until we're done.\n   *\n   * NOTE: We don't support multi-instance locking for now. That means you can only have a single instance open and\n   * it will prevent multiple processes from updating the tenant storage at the same time. However if multi-instances\n   * are used, we can't prevent multiple instances from updating the tenant storage at the same time.\n   * In the future we can make the tenantSessionCoordinator an interface and allowing a instance-tenant-lock as well\n   * as an tenant-lock (across all instances)\n   */\n  private async _updateTenantStorage(\n    tenantRecord: TenantRecord,\n    agentContext: AgentContext,\n    updateOptions?: UpdateAssistantUpdateOptions\n  ) {\n    try {\n      // Update the tenant storage\n      const tenantAgent = new TenantAgent(agentContext)\n      const updateAssistant = new UpdateAssistant(tenantAgent)\n      await updateAssistant.initialize()\n      await updateAssistant.update(updateOptions)\n\n      // Update the storage version in the tenant record\n      tenantRecord.storageVersion = await updateAssistant.getCurrentAgentStorageVersion()\n      const tenantRecordService = this.rootAgentContext.dependencyManager.resolve(TenantRecordService)\n      await tenantRecordService.updateTenant(this.rootAgentContext, tenantRecord)\n    } catch (error) {\n      this.logger.error(`Error occurred while updating tenant storage for tenant ${tenantRecord.id}`, error)\n      throw error\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAyBO,uCAAMA,6BAA2D;CAOtE,AAAO,YACL,qBACA,kBACA,cACA,0BACA,AAAiCC,QACjC;AACA,OAAK,sBAAsB;AAC3B,OAAK,mBAAmB;AACxB,OAAK,eAAe;AACpB,OAAK,2BAA2B;AAChC,OAAK,SAAS;AAGd,OAAK,kCAAkC;;CAGzC,AAAO,mCAAmC,UAAkB;AAC1D,SAAO,KAAK,yBAAyB,mCAAmC,SAAS;;CAGnF,MAAa,uCACX,sBACA,EAAE,mBAAmB,UAA0C,EAAE,EACjE;AAEA,MAAI,yBAAyB,KAAK,iBAAiB,qBACjD,QAAO,KAAK;AAId,OAAK,yBAAyB,iCAAiC,qBAAqB;EACpF,MAAM,WAAW,KAAK,yBAAyB,mCAAmC,qBAAqB;EAGvG,MAAM,eAAe,MAAM,KAAK,oBAAoB,cAAc,KAAK,kBAAkB,SAAS;EAClG,MAAM,eAAe,CAAC,kBAAkB,aAAa,eAAe;AAGpE,MAAI,gBAAgB,CAAC,KAAK,iBAAiB,OAAO,2BAChD,OAAM,IAAI,WACR,oCAAoC,aAAa,GAAG,oKAAoK,aAAa,eAAe,2BAA2B,gBAAgB,wBAAwB,kDACxT;EAGH,MAAM,eAAe,MAAM,KAAK,yBAAyB,qBAAqB,cAAc;GAC1F;GACA,YAAY,gBAAgB,mBAAiB,KAAK,qBAAqB,cAAcC,eAAa,GAAG;GACtG,CAAC;AAEF,OAAK,OAAO,MAAM,4DAA4D,qBAAqB,GAAG;AAEtG,SAAO;;CAGT,MAAa,4BAA4B,gBAAyB,SAA6C;AAC7G,OAAK,OAAO,MAAM,wEAAwE,EACxF,sBAAsB,SAAS,sBAChC,CAAC;EAGF,IAAI,WACF,SAAS,wBACT,KAAK,yBAAyB,6BAA6B,QAAQ,qBAAqB,GACpF,KAAK,yBAAyB,mCAAmC,QAAQ,qBAAqB,GAC9F;EACN,IAAIC,gBAAiC,EAAE;AAEvC,MAAI,CAAC,YAAY,oBAAoB,eAAe,EAAE;AACpD,QAAK,OAAO,MAAM,6EAA6E;AAC/F,mBAAgB,KAAK,qCAAqC,eAAe;AAEzE,QAAK,OAAO,MAAM,SAAS,cAAc,OAAO,2CAA2C;AAK3F,QAAK,MAAM,gBAAgB,eAAe;IACxC,MAAM,sBAAsB,MAAM,KAAK,oBAAoB,sCACzD,KAAK,kBACL,aACD;AAED,QAAI,qBAAqB;AACvB,UAAK,OAAO,MAAM,iDAAiD,cAAc,GAAG,eAAe,EACjG,UAAU,oBAAoB,UAC/B,CAAC;AACF,gBAAW,oBAAoB;AAC/B;;;;AAKN,MAAI,CAAC,UAAU;AACb,QAAK,OAAO,MAAM,8EAA8E;IAC9F;IACA,eAAe,cAAc,KAAK,QAAQ,IAAI,YAAY;IAC3D,CAAC;AACF,SAAM,IAAI,WAAW,6EAA6E;;EAGpG,MAAM,uBAAuB,KAAK,yBAAyB,mCAAmC,SAAS;AAGvG,SAFqB,MAAM,KAAK,uCAAuC,qBAAqB;;CAK9F,MAAa,0BAA0B,cAA4B;AACjE,QAAM,KAAK,yBAAyB,uBAAuB,aAAa;;CAG1E,MAAa,mBAAmB,cAA2C;AACzE,QAAM,KAAK,yBAAyB,mBAAmB,aAAa;;CAGtE,AAAQ,qCAAqC,KAA+C;EAC1F,MAAM,eAAe,YAAY,WAAW,IAAI,UAAU;AAC1D,MAAI,CAAC,MAAM,QAAQ,aAAa,WAAW,CAAE,QAAO,EAAE;EAEtD,MAAMA,gBAAiC,EAAE;AAEzC,OAAK,MAAM,aAAa,aAAa,WAEnC,KAAI,aAAa,UAAU,IAAI,aAAa,UAAU,OAAO,IAAI,OAAO,UAAU,OAAO,QAAQ,UAAU;GAGzG,MAAM,YAAY,IAAI,UAAU,cAAc;IAC5C,KAAK;IACL,KAAK;IACL,WAAW,kBAAkB,WAAW,UAAU,OAAO,IAAI;IAC9D,CAAC;AAEF,iBAAc,KAAK,UAAU;;AAIjC,SAAO;;CAGT,MAAc,8BAA8B,UAAkB,cAA6B;AACzF,OAAK,OAAO,MAAM,6BAA6B,aAAa,YAAY,cAAc,WAAW;EACjG,MAAM,eAAe,MAAM,KAAK,oBAAoB,cAAc,KAAK,kBAAkB,SAAS;AAClG,QAAM,KAAK,oBAAoB,uBAAuB,KAAK,kBAAkB,aAAa,IAAI,aAAa;;CAG7G,AAAQ,mCAAmC;AACzC,OAAK,OAAO,MAAM,4EAA4E;AAC9F,OAAK,aAAa,GAA+B,yBAAyB,qBAAqB,OAAO,UAAU;GAC9G,MAAM,uBAAuB,MAAM,SAAS;GAC5C,MAAM,eAAe,MAAM,QAAQ,QAAQ;AAG3C,OAAI,yBAAyB,KAAK,iBAAiB,qBAAsB;AAEzE,QAAK,yBAAyB,iCAAiC,qBAAqB;AAEpF,QAAK,OAAO,MACV,yDAAyD,qBAAqB,8BAA8B,aAAa,YAAY,iBACtI;AACD,SAAM,KAAK,8BACT,KAAK,yBAAyB,mCAAmC,qBAAqB,EACtF,aACD;IACD;;;;;;CAOJ,MAAa,oBAAoB,cAA4B,eAA8C;AAQzG,SAPqB,MAAM,KAAK,yBAAyB,qBAAqB,cAAc,EAG1F,aAAa,iBAAiB,KAAK,qBAAqB,cAAc,cAAc,cAAc,EACnG,CAAC,EAGiB,YAAY;;;;;;;;;;;;;;;CAgBjC,MAAc,qBACZ,cACA,cACA,eACA;AACA,MAAI;GAGF,MAAM,kBAAkB,IAAI,gBADR,IAAI,YAAY,aAAa,CACO;AACxD,SAAM,gBAAgB,YAAY;AAClC,SAAM,gBAAgB,OAAO,cAAc;AAG3C,gBAAa,iBAAiB,MAAM,gBAAgB,+BAA+B;AAEnF,SAD4B,KAAK,iBAAiB,kBAAkB,QAAQ,oBAAoB,CACtE,aAAa,KAAK,kBAAkB,aAAa;WACpE,OAAO;AACd,QAAK,OAAO,MAAM,2DAA2D,aAAa,MAAM,MAAM;AACtG,SAAM;;;;;CA5NX,YAAY;oBAaR,OAAO,iBAAiB,OAAO"}

package/build/packages/tenants/src/context/TenantSessionCoordinator.js

@@ -0,0 +1,192 @@
+const require_rolldown_runtime = require('../../../../_virtual/rolldown_runtime.js');
+const require_decorateMetadata = require('../../../../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorateMetadata.js');
+const require_decorate = require('../../../../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorate.js');
+const require_decorateParam = require('../../../../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorateParam.js');
+const require_index = require('../../../../node_modules/.pnpm/async-mutex@0.5.0/node_modules/async-mutex/index.js');
+const require_TenantsModuleConfig = require('../TenantsModuleConfig.js');
+const require_TenantSessionMutex = require('./TenantSessionMutex.js');
+let __credo_ts_core = require("@credo-ts/core");
+__credo_ts_core = require_rolldown_runtime.__toESM(__credo_ts_core);
+
+//#region ../tenants/src/context/TenantSessionCoordinator.ts
+var _ref, _ref2;
+let TenantSessionCoordinator = class TenantSessionCoordinator$1 {
+	constructor(rootAgentContext, logger, tenantsModuleConfig) {
+		this.tenantAgentContextMapping = {};
+		this.rootAgentContext = rootAgentContext;
+		this.logger = logger;
+		this.tenantsModuleConfig = tenantsModuleConfig;
+		this.sessionMutex = new require_TenantSessionMutex.TenantSessionMutex(this.logger, this.tenantsModuleConfig.sessionLimit, this.tenantsModuleConfig.sessionAcquireTimeout);
+	}
+	getSessionCountForTenant(tenantId) {
+		const contextCorrelationId = this.getContextCorrelationIdForTenantId(tenantId);
+		return this.tenantAgentContextMapping[contextCorrelationId]?.sessionCount ?? 0;
+	}
+	/**
+	* Get agent context to use for a session. If an agent context for this tenant does not exist yet
+	* it will create it and store it for later use. If the agent context does already exist it will
+	* be returned.
+	*
+	* @parm tenantRecord The tenant record for which to get the agent context
+	*/
+	async getContextForSession(tenantRecord, { runInMutex, provisionContext = false } = {}) {
+		this.logger.debug(`Getting context for session with tenant '${tenantRecord.id}'`);
+		await this.sessionMutex.acquireSession();
+		try {
+			const contextCorrelationId = this.getContextCorrelationIdForTenantId(tenantRecord.id);
+			return await this.mutexForTenant(contextCorrelationId).runExclusive(async () => {
+				this.logger.debug(`Acquired lock for tenant '${tenantRecord.id}' to get context`);
+				const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId);
+				if (!tenantSessions.agentContext) {
+					this.logger.debug(`No agent context has been initialized for tenant '${tenantRecord.id}', creating one`);
+					tenantSessions.agentContext = await this.createAgentContext(tenantRecord, { provisionContext });
+				}
+				tenantSessions.sessionCount++;
+				this.logger.debug(`Increased agent context session count for tenant '${tenantRecord.id}' to ${tenantSessions.sessionCount}`);
+				if (runInMutex) try {
+					await runInMutex(tenantSessions.agentContext);
+				} catch (error) {
+					tenantSessions.sessionCount--;
+					this.logger.debug(`Decreased agent context session count for tenant context '${contextCorrelationId}' to ${tenantSessions.sessionCount} due to failure in mutex script`, error);
+					if (tenantSessions.sessionCount <= 0 && tenantSessions.agentContext) {
+						await this.closeAgentContext(tenantSessions.agentContext);
+						delete this.tenantAgentContextMapping[contextCorrelationId];
+					}
+					throw error;
+				}
+				return tenantSessions.agentContext;
+			});
+		} catch (error) {
+			this.logger.debug(`Releasing session because an error occurred while getting the context for tenant ${tenantRecord.id}`, { errorMessage: error.message });
+			this.sessionMutex.releaseSession();
+			throw error;
+		}
+	}
+	/**
+	* End a session for the provided agent context. It will decrease the session count for the agent context.
+	* If the number of sessions is zero after the context for this session has been ended, the agent context will be closed.
+	*/
+	async endAgentContextSession(agentContext) {
+		this.logger.debug(`Ending session for agent context with contextCorrelationId ${agentContext.contextCorrelationId}'`);
+		if (agentContext.contextCorrelationId === this.rootAgentContext.contextCorrelationId) {
+			this.logger.debug("Ending session for root agent context. Not disposing dependency manager");
+			return;
+		}
+		const contextCorrelationId = agentContext.contextCorrelationId;
+		this.assertTenantContextCorrelationId(contextCorrelationId);
+		if (!this.hasTenantSessionMapping(contextCorrelationId)) {
+			this.logger.error(`Unknown agent context with contextCorrelationId '${contextCorrelationId}'.  Cannot end session`);
+			throw new __credo_ts_core.CredoError(`Unknown agent context with contextCorrelationId '${contextCorrelationId}'. Cannot end session`);
+		}
+		await this.mutexForTenant(contextCorrelationId).runExclusive(async () => {
+			this.logger.debug(`Acquired lock for tenant '${contextCorrelationId}' to end session context`);
+			const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId);
+			tenantSessions.sessionCount--;
+			this.logger.debug(`Decreased agent context session count for tenant '${contextCorrelationId}' to ${tenantSessions.sessionCount}`);
+			if (tenantSessions.sessionCount <= 0 && tenantSessions.agentContext) {
+				await this.closeAgentContext(tenantSessions.agentContext);
+				delete this.tenantAgentContextMapping[contextCorrelationId];
+			}
+		}).finally(() => {
+			this.sessionMutex.releaseSession();
+		});
+	}
+	/**
+	* Delete the provided agent context. All opens sessions will be disposed and not usable anymore
+	*/
+	async deleteAgentContext(agentContext) {
+		this.logger.debug(`Deleting agent context with contextCorrelationId ${agentContext.contextCorrelationId}'`);
+		if (agentContext.contextCorrelationId === this.rootAgentContext.contextCorrelationId) {
+			this.logger.debug("Deleting agent context for root agent context.");
+			await agentContext.dependencyManager.deleteAgentContext(agentContext);
+			return;
+		}
+		const contextCorrelationId = agentContext.contextCorrelationId;
+		this.assertTenantContextCorrelationId(contextCorrelationId);
+		if (!this.hasTenantSessionMapping(contextCorrelationId)) {
+			this.logger.error(`Unknown agent context with contextCorrelationId '${contextCorrelationId}'.  Cannot delete agent context`);
+			throw new __credo_ts_core.CredoError(`Unknown agent context with contextCorrelationId '${contextCorrelationId}'. Cannot delete agent context`);
+		}
+		await this.mutexForTenant(contextCorrelationId).runExclusive(async () => {
+			this.logger.debug(`Acquired lock for tenant '${contextCorrelationId}' to delete agent context`);
+			const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId);
+			this.logger.debug(`Deleting agent context for tenant '${contextCorrelationId}' with ${tenantSessions.sessionCount} active sessions.`);
+			if (!tenantSessions.agentContext) throw new __credo_ts_core.CredoError(`Unable to delete agent context for tenant '${contextCorrelationId}' as there are no active sessions.`);
+			await agentContext.dependencyManager.deleteAgentContext(tenantSessions.agentContext);
+			delete this.tenantAgentContextMapping[contextCorrelationId];
+		}).finally(() => {
+			this.sessionMutex.releaseSession();
+		});
+	}
+	/**
+	* The context correlation id for a tenant is the tenant id prefixed with tenant-
+	*/
+	getContextCorrelationIdForTenantId(tenantId) {
+		if (tenantId.startsWith("tenant-")) throw new __credo_ts_core.CredoError(`Tenant id already starts with 'tenant-'. You are probalby passing a context correlation id`);
+		return `tenant-${tenantId}`;
+	}
+	/**
+	* The context correlation id for a tenant is the tenant id prefixed with tenant-
+	*/
+	getTenantIdForContextCorrelationId(contextCorrelationId) {
+		if (!contextCorrelationId.startsWith("tenant-")) throw new __credo_ts_core.CredoError(`Could not extract tenant id from context correlation id. Context correlation id should start with 'tenant-'`);
+		return contextCorrelationId.replace("tenant-", "");
+	}
+	isTenantContextCorrelationId(contextCorrelationId) {
+		return contextCorrelationId.startsWith("tenant-");
+	}
+	assertTenantContextCorrelationId(contextCorrelationId) {
+		if (!this.isTenantContextCorrelationId(contextCorrelationId)) throw new __credo_ts_core.CredoError(`Expected context correlation id for tenant to start with 'tenant-'`);
+	}
+	hasTenantSessionMapping(contextCorrelationId) {
+		return this.tenantAgentContextMapping[contextCorrelationId] !== void 0;
+	}
+	getTenantSessionsMapping(contextCorrelationId) {
+		let tenantSessionMapping = this.tenantAgentContextMapping[contextCorrelationId];
+		if (tenantSessionMapping) return tenantSessionMapping;
+		tenantSessionMapping = {
+			sessionCount: 0,
+			mutex: require_index.withTimeout(new require_index.Mutex(), this.tenantsModuleConfig.sessionAcquireTimeout, new __credo_ts_core.CredoError(`Error acquiring lock for tenant context ${contextCorrelationId}. Wallet initialization or shutdown took too long.`))
+		};
+		this.tenantAgentContextMapping[contextCorrelationId] = tenantSessionMapping;
+		return tenantSessionMapping;
+	}
+	mutexForTenant(contextCorrelationId) {
+		return this.getTenantSessionsMapping(contextCorrelationId).mutex;
+	}
+	async createAgentContext(tenantRecord, { provisionContext }) {
+		const tenantDependencyManager = this.rootAgentContext.dependencyManager.createChild();
+		const tenantConfig = this.rootAgentContext.config.extend({});
+		const agentContext = new __credo_ts_core.AgentContext({
+			contextCorrelationId: this.getContextCorrelationIdForTenantId(tenantRecord.id),
+			dependencyManager: tenantDependencyManager,
+			isRootAgentContext: false
+		});
+		tenantDependencyManager.registerInstance(__credo_ts_core.AgentContext, agentContext);
+		tenantDependencyManager.registerInstance(__credo_ts_core.AgentConfig, tenantConfig);
+		if (provisionContext) await tenantDependencyManager.provisionAgentContext(agentContext);
+		await tenantDependencyManager.initializeAgentContext(agentContext);
+		return agentContext;
+	}
+	async closeAgentContext(agentContext) {
+		this.logger.debug(`Closing agent context for tenant '${agentContext.contextCorrelationId}'`);
+		await agentContext.dependencyManager.closeAgentContext(agentContext);
+	}
+};
+TenantSessionCoordinator = require_decorate.__decorate([
+	(0, __credo_ts_core.injectable)(),
+	require_decorateParam.__decorateParam(1, (0, __credo_ts_core.inject)(__credo_ts_core.InjectionSymbols.Logger)),
+	require_decorateMetadata.__decorateMetadata("design:paramtypes", [
+		typeof (_ref = typeof __credo_ts_core.AgentContext !== "undefined" && __credo_ts_core.AgentContext) === "function" ? _ref : Object,
+		Object,
+		typeof (_ref2 = typeof require_TenantsModuleConfig.TenantsModuleConfig !== "undefined" && require_TenantsModuleConfig.TenantsModuleConfig) === "function" ? _ref2 : Object
+	])
+], TenantSessionCoordinator);
+
+//#endregion
+Object.defineProperty(exports, 'TenantSessionCoordinator', {
+  enumerable: true,
+  get: function () {
+    return TenantSessionCoordinator;
+  }
+});

package/build/packages/tenants/src/context/TenantSessionCoordinator.mjs

@@ -0,0 +1,186 @@
+import { __decorateMetadata } from "../../../../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorateMetadata.mjs";
+import { __decorate } from "../../../../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorate.mjs";
+import { __decorateParam } from "../../../../_virtual/_@oxc-project_runtime@0.94.0/helpers/decorateParam.mjs";
+import { Mutex, withTimeout } from "../../../../node_modules/.pnpm/async-mutex@0.5.0/node_modules/async-mutex/index.mjs";
+import { TenantsModuleConfig } from "../TenantsModuleConfig.mjs";
+import { TenantSessionMutex } from "./TenantSessionMutex.mjs";
+import { AgentConfig, AgentContext, CredoError, InjectionSymbols, inject, injectable } from "@credo-ts/core";
+
+//#region ../tenants/src/context/TenantSessionCoordinator.ts
+var _ref, _ref2;
+let TenantSessionCoordinator = class TenantSessionCoordinator$1 {
+	constructor(rootAgentContext, logger, tenantsModuleConfig) {
+		this.tenantAgentContextMapping = {};
+		this.rootAgentContext = rootAgentContext;
+		this.logger = logger;
+		this.tenantsModuleConfig = tenantsModuleConfig;
+		this.sessionMutex = new TenantSessionMutex(this.logger, this.tenantsModuleConfig.sessionLimit, this.tenantsModuleConfig.sessionAcquireTimeout);
+	}
+	getSessionCountForTenant(tenantId) {
+		const contextCorrelationId = this.getContextCorrelationIdForTenantId(tenantId);
+		return this.tenantAgentContextMapping[contextCorrelationId]?.sessionCount ?? 0;
+	}
+	/**
+	* Get agent context to use for a session. If an agent context for this tenant does not exist yet
+	* it will create it and store it for later use. If the agent context does already exist it will
+	* be returned.
+	*
+	* @parm tenantRecord The tenant record for which to get the agent context
+	*/
+	async getContextForSession(tenantRecord, { runInMutex, provisionContext = false } = {}) {
+		this.logger.debug(`Getting context for session with tenant '${tenantRecord.id}'`);
+		await this.sessionMutex.acquireSession();
+		try {
+			const contextCorrelationId = this.getContextCorrelationIdForTenantId(tenantRecord.id);
+			return await this.mutexForTenant(contextCorrelationId).runExclusive(async () => {
+				this.logger.debug(`Acquired lock for tenant '${tenantRecord.id}' to get context`);
+				const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId);
+				if (!tenantSessions.agentContext) {
+					this.logger.debug(`No agent context has been initialized for tenant '${tenantRecord.id}', creating one`);
+					tenantSessions.agentContext = await this.createAgentContext(tenantRecord, { provisionContext });
+				}
+				tenantSessions.sessionCount++;
+				this.logger.debug(`Increased agent context session count for tenant '${tenantRecord.id}' to ${tenantSessions.sessionCount}`);
+				if (runInMutex) try {
+					await runInMutex(tenantSessions.agentContext);
+				} catch (error) {
+					tenantSessions.sessionCount--;
+					this.logger.debug(`Decreased agent context session count for tenant context '${contextCorrelationId}' to ${tenantSessions.sessionCount} due to failure in mutex script`, error);
+					if (tenantSessions.sessionCount <= 0 && tenantSessions.agentContext) {
+						await this.closeAgentContext(tenantSessions.agentContext);
+						delete this.tenantAgentContextMapping[contextCorrelationId];
+					}
+					throw error;
+				}
+				return tenantSessions.agentContext;
+			});
+		} catch (error) {
+			this.logger.debug(`Releasing session because an error occurred while getting the context for tenant ${tenantRecord.id}`, { errorMessage: error.message });
+			this.sessionMutex.releaseSession();
+			throw error;
+		}
+	}
+	/**
+	* End a session for the provided agent context. It will decrease the session count for the agent context.
+	* If the number of sessions is zero after the context for this session has been ended, the agent context will be closed.
+	*/
+	async endAgentContextSession(agentContext) {
+		this.logger.debug(`Ending session for agent context with contextCorrelationId ${agentContext.contextCorrelationId}'`);
+		if (agentContext.contextCorrelationId === this.rootAgentContext.contextCorrelationId) {
+			this.logger.debug("Ending session for root agent context. Not disposing dependency manager");
+			return;
+		}
+		const contextCorrelationId = agentContext.contextCorrelationId;
+		this.assertTenantContextCorrelationId(contextCorrelationId);
+		if (!this.hasTenantSessionMapping(contextCorrelationId)) {
+			this.logger.error(`Unknown agent context with contextCorrelationId '${contextCorrelationId}'.  Cannot end session`);
+			throw new CredoError(`Unknown agent context with contextCorrelationId '${contextCorrelationId}'. Cannot end session`);
+		}
+		await this.mutexForTenant(contextCorrelationId).runExclusive(async () => {
+			this.logger.debug(`Acquired lock for tenant '${contextCorrelationId}' to end session context`);
+			const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId);
+			tenantSessions.sessionCount--;
+			this.logger.debug(`Decreased agent context session count for tenant '${contextCorrelationId}' to ${tenantSessions.sessionCount}`);
+			if (tenantSessions.sessionCount <= 0 && tenantSessions.agentContext) {
+				await this.closeAgentContext(tenantSessions.agentContext);
+				delete this.tenantAgentContextMapping[contextCorrelationId];
+			}
+		}).finally(() => {
+			this.sessionMutex.releaseSession();
+		});
+	}
+	/**
+	* Delete the provided agent context. All opens sessions will be disposed and not usable anymore
+	*/
+	async deleteAgentContext(agentContext) {
+		this.logger.debug(`Deleting agent context with contextCorrelationId ${agentContext.contextCorrelationId}'`);
+		if (agentContext.contextCorrelationId === this.rootAgentContext.contextCorrelationId) {
+			this.logger.debug("Deleting agent context for root agent context.");
+			await agentContext.dependencyManager.deleteAgentContext(agentContext);
+			return;
+		}
+		const contextCorrelationId = agentContext.contextCorrelationId;
+		this.assertTenantContextCorrelationId(contextCorrelationId);
+		if (!this.hasTenantSessionMapping(contextCorrelationId)) {
+			this.logger.error(`Unknown agent context with contextCorrelationId '${contextCorrelationId}'.  Cannot delete agent context`);
+			throw new CredoError(`Unknown agent context with contextCorrelationId '${contextCorrelationId}'. Cannot delete agent context`);
+		}
+		await this.mutexForTenant(contextCorrelationId).runExclusive(async () => {
+			this.logger.debug(`Acquired lock for tenant '${contextCorrelationId}' to delete agent context`);
+			const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId);
+			this.logger.debug(`Deleting agent context for tenant '${contextCorrelationId}' with ${tenantSessions.sessionCount} active sessions.`);
+			if (!tenantSessions.agentContext) throw new CredoError(`Unable to delete agent context for tenant '${contextCorrelationId}' as there are no active sessions.`);
+			await agentContext.dependencyManager.deleteAgentContext(tenantSessions.agentContext);
+			delete this.tenantAgentContextMapping[contextCorrelationId];
+		}).finally(() => {
+			this.sessionMutex.releaseSession();
+		});
+	}
+	/**
+	* The context correlation id for a tenant is the tenant id prefixed with tenant-
+	*/
+	getContextCorrelationIdForTenantId(tenantId) {
+		if (tenantId.startsWith("tenant-")) throw new CredoError(`Tenant id already starts with 'tenant-'. You are probalby passing a context correlation id`);
+		return `tenant-${tenantId}`;
+	}
+	/**
+	* The context correlation id for a tenant is the tenant id prefixed with tenant-
+	*/
+	getTenantIdForContextCorrelationId(contextCorrelationId) {
+		if (!contextCorrelationId.startsWith("tenant-")) throw new CredoError(`Could not extract tenant id from context correlation id. Context correlation id should start with 'tenant-'`);
+		return contextCorrelationId.replace("tenant-", "");
+	}
+	isTenantContextCorrelationId(contextCorrelationId) {
+		return contextCorrelationId.startsWith("tenant-");
+	}
+	assertTenantContextCorrelationId(contextCorrelationId) {
+		if (!this.isTenantContextCorrelationId(contextCorrelationId)) throw new CredoError(`Expected context correlation id for tenant to start with 'tenant-'`);
+	}
+	hasTenantSessionMapping(contextCorrelationId) {
+		return this.tenantAgentContextMapping[contextCorrelationId] !== void 0;
+	}
+	getTenantSessionsMapping(contextCorrelationId) {
+		let tenantSessionMapping = this.tenantAgentContextMapping[contextCorrelationId];
+		if (tenantSessionMapping) return tenantSessionMapping;
+		tenantSessionMapping = {
+			sessionCount: 0,
+			mutex: withTimeout(new Mutex(), this.tenantsModuleConfig.sessionAcquireTimeout, new CredoError(`Error acquiring lock for tenant context ${contextCorrelationId}. Wallet initialization or shutdown took too long.`))
+		};
+		this.tenantAgentContextMapping[contextCorrelationId] = tenantSessionMapping;
+		return tenantSessionMapping;
+	}
+	mutexForTenant(contextCorrelationId) {
+		return this.getTenantSessionsMapping(contextCorrelationId).mutex;
+	}
+	async createAgentContext(tenantRecord, { provisionContext }) {
+		const tenantDependencyManager = this.rootAgentContext.dependencyManager.createChild();
+		const tenantConfig = this.rootAgentContext.config.extend({});
+		const agentContext = new AgentContext({
+			contextCorrelationId: this.getContextCorrelationIdForTenantId(tenantRecord.id),
+			dependencyManager: tenantDependencyManager,
+			isRootAgentContext: false
+		});
+		tenantDependencyManager.registerInstance(AgentContext, agentContext);
+		tenantDependencyManager.registerInstance(AgentConfig, tenantConfig);
+		if (provisionContext) await tenantDependencyManager.provisionAgentContext(agentContext);
+		await tenantDependencyManager.initializeAgentContext(agentContext);
+		return agentContext;
+	}
+	async closeAgentContext(agentContext) {
+		this.logger.debug(`Closing agent context for tenant '${agentContext.contextCorrelationId}'`);
+		await agentContext.dependencyManager.closeAgentContext(agentContext);
+	}
+};
+TenantSessionCoordinator = __decorate([
+	injectable(),
+	__decorateParam(1, inject(InjectionSymbols.Logger)),
+	__decorateMetadata("design:paramtypes", [
+		typeof (_ref = typeof AgentContext !== "undefined" && AgentContext) === "function" ? _ref : Object,
+		Object,
+		typeof (_ref2 = typeof TenantsModuleConfig !== "undefined" && TenantsModuleConfig) === "function" ? _ref2 : Object
+	])
+], TenantSessionCoordinator);
+
+//#endregion
+export { TenantSessionCoordinator };
+//# sourceMappingURL=TenantSessionCoordinator.mjs.map

package/build/packages/tenants/src/context/TenantSessionCoordinator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantSessionCoordinator.mjs","names":["TenantSessionCoordinator","logger: Logger"],"sources":["../../../../../../tenants/src/context/TenantSessionCoordinator.ts"],"sourcesContent":["import type { MutexInterface } from 'async-mutex'\nimport type { TenantRecord } from '../repository'\n\nimport {\n  AgentConfig,\n  AgentContext,\n  CredoError,\n  InjectionSymbols,\n  type Logger,\n  inject,\n  injectable,\n} from '@credo-ts/core'\nimport { Mutex, withTimeout } from 'async-mutex'\n\nimport { TenantsModuleConfig } from '../TenantsModuleConfig'\n\nimport { TenantSessionMutex } from './TenantSessionMutex'\n\n/**\n * Coordinates all agent context instance for tenant sessions.\n *\n * This class keeps a mapping of tenant ids (context correlation ids) to agent context sessions mapping. Each mapping contains the agent context,\n * the current session count and a mutex for making operations against the session mapping (opening / closing an agent context). The mutex ensures\n * we're not susceptible to race conditions where multiple calls to open/close an agent context are made at the same time. Even though JavaScript is\n * single threaded, promises can introduce race conditions as one process can stop and another process can be picked up.\n *\n * NOTE: the implementation doesn't yet cache agent context objects after they aren't being used for any sessions anymore. This means if a wallet is being used\n * often in a short time it will be opened/closed very often. This is an improvement to be made in the near future.\n */\n@injectable()\nexport class TenantSessionCoordinator {\n  private rootAgentContext: AgentContext\n  private logger: Logger\n  private tenantAgentContextMapping: TenantAgentContextMapping = {}\n  private sessionMutex: TenantSessionMutex\n  private tenantsModuleConfig: TenantsModuleConfig\n\n  public constructor(\n    rootAgentContext: AgentContext,\n    @inject(InjectionSymbols.Logger) logger: Logger,\n    tenantsModuleConfig: TenantsModuleConfig\n  ) {\n    this.rootAgentContext = rootAgentContext\n    this.logger = logger\n    this.tenantsModuleConfig = tenantsModuleConfig\n\n    this.sessionMutex = new TenantSessionMutex(\n      this.logger,\n      this.tenantsModuleConfig.sessionLimit,\n      // TODO: we should probably allow a higher session acquire timeout if the storage is being updated?\n      this.tenantsModuleConfig.sessionAcquireTimeout\n    )\n  }\n\n  public getSessionCountForTenant(tenantId: string) {\n    const contextCorrelationId = this.getContextCorrelationIdForTenantId(tenantId)\n    return this.tenantAgentContextMapping[contextCorrelationId]?.sessionCount ?? 0\n  }\n\n  /**\n   * Get agent context to use for a session. If an agent context for this tenant does not exist yet\n   * it will create it and store it for later use. If the agent context does already exist it will\n   * be returned.\n   *\n   * @parm tenantRecord The tenant record for which to get the agent context\n   */\n  public async getContextForSession(\n    tenantRecord: TenantRecord,\n    {\n      runInMutex,\n      provisionContext = false,\n    }: {\n      /** optional callback that will be run inside the mutex lock */\n      runInMutex?: (agentContext: AgentContext) => Promise<void>\n      provisionContext?: boolean\n    } = {}\n  ): Promise<AgentContext> {\n    this.logger.debug(`Getting context for session with tenant '${tenantRecord.id}'`)\n\n    // Wait for a session to be available\n    await this.sessionMutex.acquireSession()\n\n    try {\n      const contextCorrelationId = this.getContextCorrelationIdForTenantId(tenantRecord.id)\n      return await this.mutexForTenant(contextCorrelationId).runExclusive(async () => {\n        this.logger.debug(`Acquired lock for tenant '${tenantRecord.id}' to get context`)\n        const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId)\n\n        // If we don't have an agent context already, create one and initialize it\n        if (!tenantSessions.agentContext) {\n          this.logger.debug(`No agent context has been initialized for tenant '${tenantRecord.id}', creating one`)\n          tenantSessions.agentContext = await this.createAgentContext(tenantRecord, { provisionContext })\n        }\n\n        // If we already have a context with sessions in place return the context and increment\n        // the session count.\n        tenantSessions.sessionCount++\n        this.logger.debug(\n          `Increased agent context session count for tenant '${tenantRecord.id}' to ${tenantSessions.sessionCount}`\n        )\n\n        if (runInMutex) {\n          try {\n            await runInMutex(tenantSessions.agentContext)\n          } catch (error) {\n            // If the runInMutex failed we should release the session again\n            tenantSessions.sessionCount--\n            this.logger.debug(\n              `Decreased agent context session count for tenant context '${contextCorrelationId}' to ${tenantSessions.sessionCount} due to failure in mutex script`,\n              error\n            )\n\n            if (tenantSessions.sessionCount <= 0 && tenantSessions.agentContext) {\n              await this.closeAgentContext(tenantSessions.agentContext)\n              delete this.tenantAgentContextMapping[contextCorrelationId]\n            }\n\n            throw error\n          }\n        }\n\n        return tenantSessions.agentContext\n      })\n    } catch (error) {\n      this.logger.debug(\n        `Releasing session because an error occurred while getting the context for tenant ${tenantRecord.id}`,\n        {\n          errorMessage: error.message,\n        }\n      )\n      // If there was an error acquiring the session, we MUST release it, otherwise this will lead to deadlocks over time.\n      this.sessionMutex.releaseSession()\n\n      // Re-throw error\n      throw error\n    }\n  }\n\n  /**\n   * End a session for the provided agent context. It will decrease the session count for the agent context.\n   * If the number of sessions is zero after the context for this session has been ended, the agent context will be closed.\n   */\n  public async endAgentContextSession(agentContext: AgentContext): Promise<void> {\n    this.logger.debug(\n      `Ending session for agent context with contextCorrelationId ${agentContext.contextCorrelationId}'`\n    )\n\n    // Custom handling for the root agent context. We don't keep track of the total number of sessions for the root\n    // agent context, and we always keep the dependency manager intact.\n    if (agentContext.contextCorrelationId === this.rootAgentContext.contextCorrelationId) {\n      this.logger.debug('Ending session for root agent context. Not disposing dependency manager')\n      return\n    }\n\n    const contextCorrelationId = agentContext.contextCorrelationId\n    this.assertTenantContextCorrelationId(contextCorrelationId)\n    const hasTenantSessionMapping = this.hasTenantSessionMapping(contextCorrelationId)\n\n    // This should not happen\n    if (!hasTenantSessionMapping) {\n      this.logger.error(\n        `Unknown agent context with contextCorrelationId '${contextCorrelationId}'.  Cannot end session`\n      )\n      throw new CredoError(\n        `Unknown agent context with contextCorrelationId '${contextCorrelationId}'. Cannot end session`\n      )\n    }\n\n    await this.mutexForTenant(contextCorrelationId)\n      .runExclusive(async () => {\n        this.logger.debug(`Acquired lock for tenant '${contextCorrelationId}' to end session context`)\n        const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId)\n\n        // TODO: check if session count is already 0\n        tenantSessions.sessionCount--\n        this.logger.debug(\n          `Decreased agent context session count for tenant '${contextCorrelationId}' to ${tenantSessions.sessionCount}`\n        )\n\n        if (tenantSessions.sessionCount <= 0 && tenantSessions.agentContext) {\n          await this.closeAgentContext(tenantSessions.agentContext)\n          delete this.tenantAgentContextMapping[contextCorrelationId]\n        }\n      })\n      .finally(() => {\n        // Release a session so new sessions can be acquired\n        this.sessionMutex.releaseSession()\n      })\n  }\n\n  /**\n   * Delete the provided agent context. All opens sessions will be disposed and not usable anymore\n   */\n  public async deleteAgentContext(agentContext: AgentContext): Promise<void> {\n    this.logger.debug(`Deleting agent context with contextCorrelationId ${agentContext.contextCorrelationId}'`)\n\n    // Custom handling for the root agent context. We don't keep track of the total number of sessions for the root\n    // agent context, and we always keep the dependency manager intact.\n    if (agentContext.contextCorrelationId === this.rootAgentContext.contextCorrelationId) {\n      this.logger.debug('Deleting agent context for root agent context.')\n      await agentContext.dependencyManager.deleteAgentContext(agentContext)\n      return\n    }\n\n    const contextCorrelationId = agentContext.contextCorrelationId\n    this.assertTenantContextCorrelationId(contextCorrelationId)\n    const hasTenantSessionMapping = this.hasTenantSessionMapping(contextCorrelationId)\n\n    // This should not happen\n    if (!hasTenantSessionMapping) {\n      this.logger.error(\n        `Unknown agent context with contextCorrelationId '${contextCorrelationId}'.  Cannot delete agent context`\n      )\n      throw new CredoError(\n        `Unknown agent context with contextCorrelationId '${contextCorrelationId}'. Cannot delete agent context`\n      )\n    }\n\n    await this.mutexForTenant(contextCorrelationId)\n      .runExclusive(async () => {\n        this.logger.debug(`Acquired lock for tenant '${contextCorrelationId}' to delete agent context`)\n        const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId)\n\n        this.logger.debug(\n          `Deleting agent context for tenant '${contextCorrelationId}' with ${tenantSessions.sessionCount} active sessions.`\n        )\n        if (!tenantSessions.agentContext) {\n          throw new CredoError(\n            `Unable to delete agent context for tenant '${contextCorrelationId}' as there are no active sessions.`\n          )\n        }\n\n        await agentContext.dependencyManager.deleteAgentContext(tenantSessions.agentContext)\n        delete this.tenantAgentContextMapping[contextCorrelationId]\n      })\n      .finally(() => {\n        // Release a session so new sessions can be acquired\n        this.sessionMutex.releaseSession()\n      })\n  }\n\n  /**\n   * The context correlation id for a tenant is the tenant id prefixed with tenant-\n   */\n  public getContextCorrelationIdForTenantId(tenantId: string): TenantContextCorrelationId {\n    if (tenantId.startsWith('tenant-')) {\n      throw new CredoError(`Tenant id already starts with 'tenant-'. You are probalby passing a context correlation id`)\n    }\n\n    return `tenant-${tenantId}`\n  }\n\n  /**\n   * The context correlation id for a tenant is the tenant id prefixed with tenant-\n   */\n  public getTenantIdForContextCorrelationId(contextCorrelationId: TenantContextCorrelationId) {\n    if (!contextCorrelationId.startsWith('tenant-')) {\n      throw new CredoError(\n        `Could not extract tenant id from context correlation id. Context correlation id should start with 'tenant-'`\n      )\n    }\n\n    return contextCorrelationId.replace('tenant-', '')\n  }\n\n  public isTenantContextCorrelationId(\n    contextCorrelationId: string\n  ): contextCorrelationId is TenantContextCorrelationId {\n    return contextCorrelationId.startsWith('tenant-')\n  }\n\n  public assertTenantContextCorrelationId(\n    contextCorrelationId: string\n  ): asserts contextCorrelationId is TenantContextCorrelationId {\n    if (!this.isTenantContextCorrelationId(contextCorrelationId)) {\n      throw new CredoError(`Expected context correlation id for tenant to start with 'tenant-'`)\n    }\n  }\n\n  private hasTenantSessionMapping(contextCorrelationId: TenantContextCorrelationId): boolean {\n    return this.tenantAgentContextMapping[contextCorrelationId] !== undefined\n  }\n\n  private getTenantSessionsMapping(contextCorrelationId: TenantContextCorrelationId): TenantContextSessions {\n    let tenantSessionMapping = this.tenantAgentContextMapping[contextCorrelationId]\n    if (tenantSessionMapping) return tenantSessionMapping\n\n    tenantSessionMapping = {\n      sessionCount: 0,\n      mutex: withTimeout(\n        new Mutex(),\n        // NOTE: It can take a while to create an indy wallet. We're using RAW key derivation which should\n        // be fast enough to not cause a problem. This wil also only be problem when the wallet is being created\n        // for the first time or being acquired while wallet initialization is in progress.\n        this.tenantsModuleConfig.sessionAcquireTimeout,\n        new CredoError(\n          `Error acquiring lock for tenant context ${contextCorrelationId}. Wallet initialization or shutdown took too long.`\n        )\n      ),\n    }\n    this.tenantAgentContextMapping[contextCorrelationId] = tenantSessionMapping\n\n    return tenantSessionMapping\n  }\n\n  private mutexForTenant(contextCorrelationId: TenantContextCorrelationId) {\n    const tenantSessions = this.getTenantSessionsMapping(contextCorrelationId)\n\n    return tenantSessions.mutex\n  }\n\n  private async createAgentContext(tenantRecord: TenantRecord, { provisionContext }: { provisionContext: boolean }) {\n    const tenantDependencyManager = this.rootAgentContext.dependencyManager.createChild()\n    const tenantConfig = this.rootAgentContext.config.extend({})\n\n    const agentContext = new AgentContext({\n      contextCorrelationId: this.getContextCorrelationIdForTenantId(tenantRecord.id),\n      dependencyManager: tenantDependencyManager,\n      isRootAgentContext: false,\n    })\n\n    tenantDependencyManager.registerInstance(AgentContext, agentContext)\n    tenantDependencyManager.registerInstance(AgentConfig, tenantConfig)\n\n    if (provisionContext) {\n      await tenantDependencyManager.provisionAgentContext(agentContext)\n    }\n\n    await tenantDependencyManager.initializeAgentContext(agentContext)\n\n    return agentContext\n  }\n\n  private async closeAgentContext(agentContext: AgentContext) {\n    this.logger.debug(`Closing agent context for tenant '${agentContext.contextCorrelationId}'`)\n    await agentContext.dependencyManager.closeAgentContext(agentContext)\n  }\n}\n\ninterface TenantContextSessions {\n  sessionCount: number\n  agentContext?: AgentContext\n  mutex: MutexInterface\n}\n\nexport type TenantContextCorrelationId = `tenant-${string}`\n\nexport interface TenantAgentContextMapping {\n  [contextCorrelationId: TenantContextCorrelationId]: TenantContextSessions | undefined\n}\n"],"mappings":";;;;;;;;;;AA8BO,qCAAMA,2BAAyB;CAOpC,AAAO,YACL,kBACA,AAAiCC,QACjC,qBACA;OARM,4BAAuD,EAAE;AAS/D,OAAK,mBAAmB;AACxB,OAAK,SAAS;AACd,OAAK,sBAAsB;AAE3B,OAAK,eAAe,IAAI,mBACtB,KAAK,QACL,KAAK,oBAAoB,cAEzB,KAAK,oBAAoB,sBAC1B;;CAGH,AAAO,yBAAyB,UAAkB;EAChD,MAAM,uBAAuB,KAAK,mCAAmC,SAAS;AAC9E,SAAO,KAAK,0BAA0B,uBAAuB,gBAAgB;;;;;;;;;CAU/E,MAAa,qBACX,cACA,EACE,YACA,mBAAmB,UAKjB,EAAE,EACiB;AACvB,OAAK,OAAO,MAAM,4CAA4C,aAAa,GAAG,GAAG;AAGjF,QAAM,KAAK,aAAa,gBAAgB;AAExC,MAAI;GACF,MAAM,uBAAuB,KAAK,mCAAmC,aAAa,GAAG;AACrF,UAAO,MAAM,KAAK,eAAe,qBAAqB,CAAC,aAAa,YAAY;AAC9E,SAAK,OAAO,MAAM,6BAA6B,aAAa,GAAG,kBAAkB;IACjF,MAAM,iBAAiB,KAAK,yBAAyB,qBAAqB;AAG1E,QAAI,CAAC,eAAe,cAAc;AAChC,UAAK,OAAO,MAAM,qDAAqD,aAAa,GAAG,iBAAiB;AACxG,oBAAe,eAAe,MAAM,KAAK,mBAAmB,cAAc,EAAE,kBAAkB,CAAC;;AAKjG,mBAAe;AACf,SAAK,OAAO,MACV,qDAAqD,aAAa,GAAG,OAAO,eAAe,eAC5F;AAED,QAAI,WACF,KAAI;AACF,WAAM,WAAW,eAAe,aAAa;aACtC,OAAO;AAEd,oBAAe;AACf,UAAK,OAAO,MACV,6DAA6D,qBAAqB,OAAO,eAAe,aAAa,kCACrH,MACD;AAED,SAAI,eAAe,gBAAgB,KAAK,eAAe,cAAc;AACnE,YAAM,KAAK,kBAAkB,eAAe,aAAa;AACzD,aAAO,KAAK,0BAA0B;;AAGxC,WAAM;;AAIV,WAAO,eAAe;KACtB;WACK,OAAO;AACd,QAAK,OAAO,MACV,oFAAoF,aAAa,MACjG,EACE,cAAc,MAAM,SACrB,CACF;AAED,QAAK,aAAa,gBAAgB;AAGlC,SAAM;;;;;;;CAQV,MAAa,uBAAuB,cAA2C;AAC7E,OAAK,OAAO,MACV,8DAA8D,aAAa,qBAAqB,GACjG;AAID,MAAI,aAAa,yBAAyB,KAAK,iBAAiB,sBAAsB;AACpF,QAAK,OAAO,MAAM,0EAA0E;AAC5F;;EAGF,MAAM,uBAAuB,aAAa;AAC1C,OAAK,iCAAiC,qBAAqB;AAI3D,MAAI,CAH4B,KAAK,wBAAwB,qBAAqB,EAGpD;AAC5B,QAAK,OAAO,MACV,oDAAoD,qBAAqB,wBAC1E;AACD,SAAM,IAAI,WACR,oDAAoD,qBAAqB,uBAC1E;;AAGH,QAAM,KAAK,eAAe,qBAAqB,CAC5C,aAAa,YAAY;AACxB,QAAK,OAAO,MAAM,6BAA6B,qBAAqB,0BAA0B;GAC9F,MAAM,iBAAiB,KAAK,yBAAyB,qBAAqB;AAG1E,kBAAe;AACf,QAAK,OAAO,MACV,qDAAqD,qBAAqB,OAAO,eAAe,eACjG;AAED,OAAI,eAAe,gBAAgB,KAAK,eAAe,cAAc;AACnE,UAAM,KAAK,kBAAkB,eAAe,aAAa;AACzD,WAAO,KAAK,0BAA0B;;IAExC,CACD,cAAc;AAEb,QAAK,aAAa,gBAAgB;IAClC;;;;;CAMN,MAAa,mBAAmB,cAA2C;AACzE,OAAK,OAAO,MAAM,oDAAoD,aAAa,qBAAqB,GAAG;AAI3G,MAAI,aAAa,yBAAyB,KAAK,iBAAiB,sBAAsB;AACpF,QAAK,OAAO,MAAM,iDAAiD;AACnE,SAAM,aAAa,kBAAkB,mBAAmB,aAAa;AACrE;;EAGF,MAAM,uBAAuB,aAAa;AAC1C,OAAK,iCAAiC,qBAAqB;AAI3D,MAAI,CAH4B,KAAK,wBAAwB,qBAAqB,EAGpD;AAC5B,QAAK,OAAO,MACV,oDAAoD,qBAAqB,iCAC1E;AACD,SAAM,IAAI,WACR,oDAAoD,qBAAqB,gCAC1E;;AAGH,QAAM,KAAK,eAAe,qBAAqB,CAC5C,aAAa,YAAY;AACxB,QAAK,OAAO,MAAM,6BAA6B,qBAAqB,2BAA2B;GAC/F,MAAM,iBAAiB,KAAK,yBAAyB,qBAAqB;AAE1E,QAAK,OAAO,MACV,sCAAsC,qBAAqB,SAAS,eAAe,aAAa,mBACjG;AACD,OAAI,CAAC,eAAe,aAClB,OAAM,IAAI,WACR,8CAA8C,qBAAqB,oCACpE;AAGH,SAAM,aAAa,kBAAkB,mBAAmB,eAAe,aAAa;AACpF,UAAO,KAAK,0BAA0B;IACtC,CACD,cAAc;AAEb,QAAK,aAAa,gBAAgB;IAClC;;;;;CAMN,AAAO,mCAAmC,UAA8C;AACtF,MAAI,SAAS,WAAW,UAAU,CAChC,OAAM,IAAI,WAAW,6FAA6F;AAGpH,SAAO,UAAU;;;;;CAMnB,AAAO,mCAAmC,sBAAkD;AAC1F,MAAI,CAAC,qBAAqB,WAAW,UAAU,CAC7C,OAAM,IAAI,WACR,8GACD;AAGH,SAAO,qBAAqB,QAAQ,WAAW,GAAG;;CAGpD,AAAO,6BACL,sBACoD;AACpD,SAAO,qBAAqB,WAAW,UAAU;;CAGnD,AAAO,iCACL,sBAC4D;AAC5D,MAAI,CAAC,KAAK,6BAA6B,qBAAqB,CAC1D,OAAM,IAAI,WAAW,qEAAqE;;CAI9F,AAAQ,wBAAwB,sBAA2D;AACzF,SAAO,KAAK,0BAA0B,0BAA0B;;CAGlE,AAAQ,yBAAyB,sBAAyE;EACxG,IAAI,uBAAuB,KAAK,0BAA0B;AAC1D,MAAI,qBAAsB,QAAO;AAEjC,yBAAuB;GACrB,cAAc;GACd,OAAO,YACL,IAAI,OAAO,EAIX,KAAK,oBAAoB,uBACzB,IAAI,WACF,2CAA2C,qBAAqB,oDACjE,CACF;GACF;AACD,OAAK,0BAA0B,wBAAwB;AAEvD,SAAO;;CAGT,AAAQ,eAAe,sBAAkD;AAGvE,SAFuB,KAAK,yBAAyB,qBAAqB,CAEpD;;CAGxB,MAAc,mBAAmB,cAA4B,EAAE,oBAAmD;EAChH,MAAM,0BAA0B,KAAK,iBAAiB,kBAAkB,aAAa;EACrF,MAAM,eAAe,KAAK,iBAAiB,OAAO,OAAO,EAAE,CAAC;EAE5D,MAAM,eAAe,IAAI,aAAa;GACpC,sBAAsB,KAAK,mCAAmC,aAAa,GAAG;GAC9E,mBAAmB;GACnB,oBAAoB;GACrB,CAAC;AAEF,0BAAwB,iBAAiB,cAAc,aAAa;AACpE,0BAAwB,iBAAiB,aAAa,aAAa;AAEnE,MAAI,iBACF,OAAM,wBAAwB,sBAAsB,aAAa;AAGnE,QAAM,wBAAwB,uBAAuB,aAAa;AAElE,SAAO;;CAGT,MAAc,kBAAkB,cAA4B;AAC1D,OAAK,OAAO,MAAM,qCAAqC,aAAa,qBAAqB,GAAG;AAC5F,QAAM,aAAa,kBAAkB,kBAAkB,aAAa;;;;CAlTvE,YAAY;oBAUR,OAAO,iBAAiB,OAAO"}