@librechat/data-schemas 0.0.42 → 0.0.44

package/dist/methods/userGroup.es.js

@@ -0,0 +1,516 @@
+import { Types } from 'mongoose';
+import { PrincipalType } from 'librechat-data-provider';
+
+function createUserGroupMethods(mongoose) {
+    /**
+     * Find a group by its ID
+     * @param groupId - The group ID
+     * @param projection - Optional projection of fields to return
+     * @param session - Optional MongoDB session for transactions
+     * @returns The group document or null if not found
+     */
+    async function findGroupById(groupId, projection = {}, session) {
+        const Group = mongoose.models.Group;
+        const query = Group.findOne({ _id: groupId }, projection);
+        if (session) {
+            query.session(session);
+        }
+        return await query.lean();
+    }
+    /**
+     * Find a group by its external ID (e.g., Entra ID)
+     * @param idOnTheSource - The external ID
+     * @param source - The source ('entra' or 'local')
+     * @param projection - Optional projection of fields to return
+     * @param session - Optional MongoDB session for transactions
+     * @returns The group document or null if not found
+     */
+    async function findGroupByExternalId(idOnTheSource, source = 'entra', projection = {}, session) {
+        const Group = mongoose.models.Group;
+        const query = Group.findOne({ idOnTheSource, source }, projection);
+        if (session) {
+            query.session(session);
+        }
+        return await query.lean();
+    }
+    /**
+     * Find groups by name pattern (case-insensitive partial match)
+     * @param namePattern - The name pattern to search for
+     * @param source - Optional source filter ('entra', 'local', or null for all)
+     * @param limit - Maximum number of results to return
+     * @param session - Optional MongoDB session for transactions
+     * @returns Array of matching groups
+     */
+    async function findGroupsByNamePattern(namePattern, source = null, limit = 20, session) {
+        const Group = mongoose.models.Group;
+        const regex = new RegExp(namePattern, 'i');
+        const query = {
+            $or: [{ name: regex }, { email: regex }, { description: regex }],
+        };
+        if (source) {
+            query.source = source;
+        }
+        const dbQuery = Group.find(query).limit(limit);
+        if (session) {
+            dbQuery.session(session);
+        }
+        return await dbQuery.lean();
+    }
+    /**
+     * Find all groups a user is a member of by their ID or idOnTheSource
+     * @param userId - The user ID
+     * @param session - Optional MongoDB session for transactions
+     * @returns Array of groups the user is a member of
+     */
+    async function findGroupsByMemberId(userId, session) {
+        const User = mongoose.models.User;
+        const Group = mongoose.models.Group;
+        const userQuery = User.findById(userId, 'idOnTheSource');
+        if (session) {
+            userQuery.session(session);
+        }
+        const user = (await userQuery.lean());
+        if (!user) {
+            return [];
+        }
+        const userIdOnTheSource = user.idOnTheSource || userId.toString();
+        const query = Group.find({ memberIds: userIdOnTheSource });
+        if (session) {
+            query.session(session);
+        }
+        return await query.lean();
+    }
+    /**
+     * Create a new group
+     * @param groupData - Group data including name, source, and optional idOnTheSource
+     * @param session - Optional MongoDB session for transactions
+     * @returns The created group
+     */
+    async function createGroup(groupData, session) {
+        const Group = mongoose.models.Group;
+        const options = session ? { session } : {};
+        return await Group.create([groupData], options).then((groups) => groups[0]);
+    }
+    /**
+     * Update or create a group by external ID
+     * @param idOnTheSource - The external ID
+     * @param source - The source ('entra' or 'local')
+     * @param updateData - Data to update or set if creating
+     * @param session - Optional MongoDB session for transactions
+     * @returns The updated or created group
+     */
+    async function upsertGroupByExternalId(idOnTheSource, source, updateData, session) {
+        const Group = mongoose.models.Group;
+        const options = {
+            new: true,
+            upsert: true,
+            ...(session ? { session } : {}),
+        };
+        return await Group.findOneAndUpdate({ idOnTheSource, source }, { $set: updateData }, options);
+    }
+    /**
+     * Add a user to a group
+     * Only updates Group.memberIds (one-way relationship)
+     * Note: memberIds stores idOnTheSource values, not ObjectIds
+     *
+     * @param userId - The user ID
+     * @param groupId - The group ID to add
+     * @param session - Optional MongoDB session for transactions
+     * @returns The user and updated group documents
+     */
+    async function addUserToGroup(userId, groupId, session) {
+        const User = mongoose.models.User;
+        const Group = mongoose.models.Group;
+        const options = { new: true, ...(session ? { session } : {}) };
+        const user = (await User.findById(userId, 'idOnTheSource', options).lean());
+        if (!user) {
+            throw new Error(`User not found: ${userId}`);
+        }
+        const userIdOnTheSource = user.idOnTheSource || userId.toString();
+        const updatedGroup = await Group.findByIdAndUpdate(groupId, { $addToSet: { memberIds: userIdOnTheSource } }, options).lean();
+        return { user: user, group: updatedGroup };
+    }
+    /**
+     * Remove a user from a group
+     * Only updates Group.memberIds (one-way relationship)
+     * Note: memberIds stores idOnTheSource values, not ObjectIds
+     *
+     * @param userId - The user ID
+     * @param groupId - The group ID to remove
+     * @param session - Optional MongoDB session for transactions
+     * @returns The user and updated group documents
+     */
+    async function removeUserFromGroup(userId, groupId, session) {
+        const User = mongoose.models.User;
+        const Group = mongoose.models.Group;
+        const options = { new: true, ...(session ? { session } : {}) };
+        const user = (await User.findById(userId, 'idOnTheSource', options).lean());
+        if (!user) {
+            throw new Error(`User not found: ${userId}`);
+        }
+        const userIdOnTheSource = user.idOnTheSource || userId.toString();
+        const updatedGroup = await Group.findByIdAndUpdate(groupId, { $pullAll: { memberIds: [userIdOnTheSource] } }, options).lean();
+        return { user: user, group: updatedGroup };
+    }
+    /**
+     * Get all groups a user is a member of
+     * @param userId - The user ID
+     * @param session - Optional MongoDB session for transactions
+     * @returns Array of group documents
+     */
+    async function getUserGroups(userId, session) {
+        return await findGroupsByMemberId(userId, session);
+    }
+    /**
+     * Get a list of all principal identifiers for a user (user ID + group IDs + public)
+     * For use in permission checks
+     * @param params - Parameters object
+     * @param params.userId - The user ID
+     * @param params.role - Optional user role (if not provided, will query from DB)
+     * @param session - Optional MongoDB session for transactions
+     * @returns Array of principal objects with type and id
+     */
+    /**
+     * TODO(#12091): This method has no tenantId parameter — it returns ALL group
+     * memberships for a user regardless of tenant. In multi-tenant mode, group
+     * principals from other tenants will be included in capability checks, which
+     * could grant cross-tenant capabilities. Add tenantId filtering here when
+     * tenant isolation is activated.
+     */
+    async function getUserPrincipals(params, session) {
+        const { userId, role } = params;
+        /** `userId` must be an `ObjectId` for USER principal since ACL entries store `ObjectId`s */
+        const userObjectId = typeof userId === 'string' ? new Types.ObjectId(userId) : userId;
+        const principals = [
+            { principalType: PrincipalType.USER, principalId: userObjectId },
+        ];
+        // If role is not provided, query user to get it
+        let userRole = role;
+        if (userRole === undefined) {
+            const User = mongoose.models.User;
+            const query = User.findById(userId).select('role');
+            if (session) {
+                query.session(session);
+            }
+            const user = await query.lean();
+            userRole = user === null || user === void 0 ? void 0 : user.role;
+        }
+        // Add role as a principal if user has one
+        if (userRole && userRole.trim()) {
+            principals.push({ principalType: PrincipalType.ROLE, principalId: userRole });
+        }
+        const userGroups = await getUserGroups(userId, session);
+        if (userGroups && userGroups.length > 0) {
+            userGroups.forEach((group) => {
+                principals.push({ principalType: PrincipalType.GROUP, principalId: group._id });
+            });
+        }
+        principals.push({ principalType: PrincipalType.PUBLIC });
+        return principals;
+    }
+    /**
+     * Sync a user's Entra ID group memberships
+     * @param userId - The user ID
+     * @param entraGroups - Array of Entra groups with id and name
+     * @param session - Optional MongoDB session for transactions
+     * @returns The updated user with new group memberships
+     */
+    async function syncUserEntraGroups(userId, entraGroups, session) {
+        var _a;
+        const User = mongoose.models.User;
+        const Group = mongoose.models.Group;
+        const query = User.findById(userId, { idOnTheSource: 1 });
+        if (session) {
+            query.session(session);
+        }
+        const user = (await query.lean());
+        if (!user) {
+            throw new Error(`User not found: ${userId}`);
+        }
+        /** Get user's idOnTheSource for storing in group.memberIds */
+        const userIdOnTheSource = user.idOnTheSource || userId.toString();
+        const entraIdMap = new Map();
+        const addedGroups = [];
+        const removedGroups = [];
+        for (const entraGroup of entraGroups) {
+            entraIdMap.set(entraGroup.id, true);
+            let group = await findGroupByExternalId(entraGroup.id, 'entra', {}, session);
+            if (!group) {
+                group = await createGroup({
+                    name: entraGroup.name,
+                    description: entraGroup.description,
+                    email: entraGroup.email,
+                    idOnTheSource: entraGroup.id,
+                    source: 'entra',
+                    memberIds: [userIdOnTheSource],
+                }, session);
+                addedGroups.push(group);
+            }
+            else if (!((_a = group.memberIds) === null || _a === void 0 ? void 0 : _a.includes(userIdOnTheSource))) {
+                const { group: updatedGroup } = await addUserToGroup(userId, group._id, session);
+                if (updatedGroup) {
+                    addedGroups.push(updatedGroup);
+                }
+            }
+        }
+        const groupsQuery = Group.find({ source: 'entra', memberIds: userIdOnTheSource }, { _id: 1, idOnTheSource: 1 });
+        if (session) {
+            groupsQuery.session(session);
+        }
+        const existingGroups = (await groupsQuery.lean());
+        for (const group of existingGroups) {
+            if (group.idOnTheSource && !entraIdMap.has(group.idOnTheSource)) {
+                const { group: removedGroup } = await removeUserFromGroup(userId, group._id, session);
+                if (removedGroup) {
+                    removedGroups.push(removedGroup);
+                }
+            }
+        }
+        const userQuery = User.findById(userId);
+        if (session) {
+            userQuery.session(session);
+        }
+        const updatedUser = await userQuery.lean();
+        if (!updatedUser) {
+            throw new Error(`User not found after update: ${userId}`);
+        }
+        return {
+            user: updatedUser,
+            addedGroups,
+            removedGroups,
+        };
+    }
+    /**
+     * Calculate relevance score for a search result
+     * @param item - The search result item
+     * @param searchPattern - The search pattern
+     * @returns Relevance score (0-100)
+     */
+    function calculateRelevanceScore(item, searchPattern) {
+        const exactRegex = new RegExp(`^${searchPattern}$`, 'i');
+        const startsWithPattern = searchPattern.toLowerCase();
+        /** Get searchable text based on type */
+        const searchableFields = item.type === PrincipalType.USER
+            ? [item.name, item.email, item.username].filter(Boolean)
+            : [item.name, item.email, item.description].filter(Boolean);
+        let maxScore = 0;
+        for (const field of searchableFields) {
+            if (!field)
+                continue;
+            const fieldLower = field.toLowerCase();
+            let score = 0;
+            /** Exact match gets highest score */
+            if (exactRegex.test(field)) {
+                score = 100;
+            }
+            else if (fieldLower.startsWith(startsWithPattern)) {
+                /** Starts with query gets high score */
+                score = 80;
+            }
+            else if (fieldLower.includes(startsWithPattern)) {
+                /** Contains query gets medium score */
+                score = 50;
+            }
+            else {
+                /** Default score for regex match */
+                score = 10;
+            }
+            maxScore = Math.max(maxScore, score);
+        }
+        return maxScore;
+    }
+    /**
+     * Sort principals by relevance score and type priority
+     * @param results - Array of results with _searchScore property
+     * @returns Sorted array
+     */
+    function sortPrincipalsByRelevance(results) {
+        return results.sort((a, b) => {
+            if (b._searchScore !== a._searchScore) {
+                return (b._searchScore || 0) - (a._searchScore || 0);
+            }
+            if (a.type !== b.type) {
+                return a.type === PrincipalType.USER ? -1 : 1;
+            }
+            const aName = a.name || a.email || '';
+            const bName = b.name || b.email || '';
+            return aName.localeCompare(bName);
+        });
+    }
+    /**
+     * Transform user object to TPrincipalSearchResult format
+     * @param user - User object from database
+     * @returns Transformed user result
+     */
+    function transformUserToTPrincipalSearchResult(user) {
+        return {
+            id: user.id,
+            type: PrincipalType.USER,
+            name: user.name || user.email,
+            email: user.email,
+            username: user.username,
+            avatar: user.avatar,
+            provider: user.provider,
+            source: 'local',
+            idOnTheSource: user.idOnTheSource || user.id,
+        };
+    }
+    /**
+     * Transform group object to TPrincipalSearchResult format
+     * @param group - Group object from database
+     * @returns Transformed group result
+     */
+    function transformGroupToTPrincipalSearchResult(group) {
+        var _a, _b;
+        return {
+            id: (_a = group._id) === null || _a === void 0 ? void 0 : _a.toString(),
+            type: PrincipalType.GROUP,
+            name: group.name,
+            email: group.email,
+            avatar: group.avatar,
+            description: group.description,
+            source: group.source || 'local',
+            memberCount: group.memberIds ? group.memberIds.length : 0,
+            idOnTheSource: group.idOnTheSource || ((_b = group._id) === null || _b === void 0 ? void 0 : _b.toString()),
+        };
+    }
+    /**
+     * Search for principals (users and groups) by pattern matching on name/email
+     * Returns combined results in TPrincipalSearchResult format without sorting
+     * @param searchPattern - The pattern to search for
+     * @param limitPerType - Maximum number of results to return
+     * @param typeFilter - Optional array of types to filter by, or null for all types
+     * @param session - Optional MongoDB session for transactions
+     * @returns Array of principals in TPrincipalSearchResult format
+     */
+    async function searchPrincipals(searchPattern, limitPerType = 10, typeFilter = null, session) {
+        if (!searchPattern || searchPattern.trim().length === 0) {
+            return [];
+        }
+        const trimmedPattern = searchPattern.trim();
+        const promises = [];
+        if (!typeFilter || typeFilter.includes(PrincipalType.USER)) {
+            /** Note: searchUsers is imported from ~/models and needs to be passed in or implemented */
+            const userFields = 'name email username avatar provider idOnTheSource';
+            /** For now, we'll use a direct query instead of searchUsers */
+            const User = mongoose.models.User;
+            const regex = new RegExp(trimmedPattern, 'i');
+            const userQuery = User.find({
+                $or: [{ name: regex }, { email: regex }, { username: regex }],
+            })
+                .select(userFields)
+                .limit(limitPerType);
+            if (session) {
+                userQuery.session(session);
+            }
+            promises.push(userQuery.lean().then((users) => users.map((user) => {
+                var _a;
+                const userWithId = user;
+                return transformUserToTPrincipalSearchResult({
+                    id: ((_a = userWithId._id) === null || _a === void 0 ? void 0 : _a.toString()) || '',
+                    name: userWithId.name,
+                    email: userWithId.email,
+                    username: userWithId.username,
+                    avatar: userWithId.avatar,
+                    provider: userWithId.provider,
+                });
+            })));
+        }
+        else {
+            promises.push(Promise.resolve([]));
+        }
+        if (!typeFilter || typeFilter.includes(PrincipalType.GROUP)) {
+            promises.push(findGroupsByNamePattern(trimmedPattern, null, limitPerType, session).then((groups) => groups.map(transformGroupToTPrincipalSearchResult)));
+        }
+        else {
+            promises.push(Promise.resolve([]));
+        }
+        if (!typeFilter || typeFilter.includes(PrincipalType.ROLE)) {
+            const Role = mongoose.models.Role;
+            if (Role) {
+                const regex = new RegExp(trimmedPattern, 'i');
+                const roleQuery = Role.find({ name: regex }).select('name').limit(limitPerType);
+                if (session) {
+                    roleQuery.session(session);
+                }
+                promises.push(roleQuery.lean().then((roles) => roles.map((role) => ({
+                    /** Role name as ID */
+                    id: role.name,
+                    type: PrincipalType.ROLE,
+                    name: role.name,
+                    source: 'local',
+                    idOnTheSource: role.name,
+                }))));
+            }
+        }
+        else {
+            promises.push(Promise.resolve([]));
+        }
+        const results = await Promise.all(promises);
+        const combined = results.flat();
+        return combined;
+    }
+    /**
+     * Removes a user from all groups they belong to.
+     * @param userId - The user ID (or ObjectId) of the member to remove
+     */
+    async function removeUserFromAllGroups(userId) {
+        const Group = mongoose.models.Group;
+        await Group.updateMany({ memberIds: userId }, { $pullAll: { memberIds: [userId] } });
+    }
+    /**
+     * Finds a single group matching the given filter.
+     * @param filter - MongoDB filter query
+     */
+    async function findGroupByQuery(filter, session) {
+        const Group = mongoose.models.Group;
+        const query = Group.findOne(filter);
+        if (session) {
+            query.session(session);
+        }
+        return query.lean();
+    }
+    /**
+     * Updates a group by its ID.
+     * @param groupId - The group's ObjectId
+     * @param data - Fields to set via $set
+     */
+    async function updateGroupById(groupId, data, session) {
+        const Group = mongoose.models.Group;
+        const options = { new: true, ...(session ? { session } : {}) };
+        return Group.findByIdAndUpdate(groupId, { $set: data }, options).lean();
+    }
+    /**
+     * Bulk-updates groups matching a filter.
+     * @param filter - MongoDB filter query
+     * @param update - Update operations
+     * @param options - Optional query options (e.g., { session })
+     */
+    async function bulkUpdateGroups(filter, update, options) {
+        const Group = mongoose.models.Group;
+        return Group.updateMany(filter, update, options || {});
+    }
+    return {
+        findGroupById,
+        findGroupByExternalId,
+        findGroupsByNamePattern,
+        findGroupsByMemberId,
+        createGroup,
+        upsertGroupByExternalId,
+        addUserToGroup,
+        removeUserFromGroup,
+        removeUserFromAllGroups,
+        findGroupByQuery,
+        updateGroupById,
+        bulkUpdateGroups,
+        getUserGroups,
+        getUserPrincipals,
+        syncUserEntraGroups,
+        searchPrincipals,
+        calculateRelevanceScore,
+        sortPrincipalsByRelevance,
+    };
+}
+
+export { createUserGroupMethods };
+//# sourceMappingURL=userGroup.es.js.map

package/dist/methods/userGroup.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userGroup.es.js","sources":["../../src/methods/userGroup.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAMM,SAAU,sBAAsB,CAAC,QAAmC,EAAA;AACxE;;;;;;AAMG;IACH,eAAe,aAAa,CAC1B,OAAgC,EAChC,UAAA,GAAsC,EAAE,EACxC,OAAuB,EAAA;AAEvB,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;AACpD,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,UAAU,CAAC;QACzD,IAAI,OAAO,EAAE;AACX,YAAA,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB;AACA,QAAA,OAAO,MAAM,KAAK,CAAC,IAAI,EAAE;IAC3B;AAEA;;;;;;;AAOG;IACH,eAAe,qBAAqB,CAClC,aAAqB,EACrB,MAAA,GAA4B,OAAO,EACnC,UAAA,GAAsC,EAAE,EACxC,OAAuB,EAAA;AAEvB,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;AACpD,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC;QAClE,IAAI,OAAO,EAAE;AACX,YAAA,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB;AACA,QAAA,OAAO,MAAM,KAAK,CAAC,IAAI,EAAE;IAC3B;AAEA;;;;;;;AAOG;IACH,eAAe,uBAAuB,CACpC,WAAmB,EACnB,MAAA,GAAmC,IAAI,EACvC,KAAA,GAAgB,EAAE,EAClB,OAAuB,EAAA;AAEvB,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;QACpD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC;AAC1C,QAAA,MAAM,KAAK,GAA4B;AACrC,YAAA,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;SACjE;QAED,IAAI,MAAM,EAAE;AACV,YAAA,KAAK,CAAC,MAAM,GAAG,MAAM;QACvB;AAEA,QAAA,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9C,IAAI,OAAO,EAAE;AACX,YAAA,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1B;AACA,QAAA,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE;IAC7B;AAEA;;;;;AAKG;AACH,IAAA,eAAe,oBAAoB,CACjC,MAA+B,EAC/B,OAAuB,EAAA;AAEvB,QAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAoB;AACjD,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;QAEpD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;QACxD,IAAI,OAAO,EAAE;AACX,YAAA,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5B;QACA,MAAM,IAAI,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE,CAAsC;QAE1E,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,OAAO,EAAE;QACX;QAEA,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE;AAEjE,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAC1D,IAAI,OAAO,EAAE;AACX,YAAA,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB;AACA,QAAA,OAAO,MAAM,KAAK,CAAC,IAAI,EAAE;IAC3B;AAEA;;;;;AAKG;AACH,IAAA,eAAe,WAAW,CAAC,SAA0B,EAAE,OAAuB,EAAA;AAC5E,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;AACpD,QAAA,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;QAC1C,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7E;AAEA;;;;;;;AAOG;IACH,eAAe,uBAAuB,CACpC,aAAqB,EACrB,MAAyB,EACzB,UAA2B,EAC3B,OAAuB,EAAA;AAEvB,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;AACpD,QAAA,MAAM,OAAO,GAAG;AACd,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SAChC;AAED,QAAA,OAAO,MAAM,KAAK,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,OAAO,CAAC;IAC/F;AAEA;;;;;;;;;AASG;AACH,IAAA,eAAe,cAAc,CAC3B,MAA+B,EAC/B,OAAgC,EAChC,OAAuB,EAAA;AAEvB,QAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAoB;AACjD,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;QAEpD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE;AAE9D,QAAA,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAGlE;QACR,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAA,CAAE,CAAC;QAC9C;QAEA,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE;QACjE,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAChD,OAAO,EACP,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,EAC/C,OAAO,CACR,CAAC,IAAI,EAAE;QAER,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IACrD;AAEA;;;;;;;;;AASG;AACH,IAAA,eAAe,mBAAmB,CAChC,MAA+B,EAC/B,OAAgC,EAChC,OAAuB,EAAA;AAEvB,QAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAoB;AACjD,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;QAEpD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE;AAE9D,QAAA,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAGlE;QACR,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAA,CAAE,CAAC;QAC9C;QAEA,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE;QACjE,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAChD,OAAO,EACP,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAChD,OAAO,CACR,CAAC,IAAI,EAAE;QAER,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IACrD;AAEA;;;;;AAKG;AACH,IAAA,eAAe,aAAa,CAC1B,MAA+B,EAC/B,OAAuB,EAAA;AAEvB,QAAA,OAAO,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC;IACpD;AAEA;;;;;;;;AAQG;AACH;;;;;;AAMG;AACH,IAAA,eAAe,iBAAiB,CAC9B,MAGC,EACD,OAAuB,EAAA;AAEvB,QAAA,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM;;QAE/B,MAAM,YAAY,GAAG,OAAO,MAAM,KAAK,QAAQ,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM;AACrF,QAAA,MAAM,UAAU,GAA4E;YAC1F,EAAE,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE;SACjE;;QAGD,IAAI,QAAQ,GAAG,IAAI;AACnB,QAAA,IAAI,QAAQ,KAAK,SAAS,EAAE;AAC1B,YAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAoB;AACjD,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAClD,IAAI,OAAO,EAAE;AACX,gBAAA,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACxB;AACA,YAAA,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE;YAC/B,QAAQ,GAAG,IAAI,KAAA,IAAA,IAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI;QACvB;;AAGA,QAAA,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE;AAC/B,YAAA,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QAC/E;QAEA,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC;QACvD,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE;AACvC,YAAA,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,KAAI;AAC3B,gBAAA,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;AACjF,YAAA,CAAC,CAAC;QACJ;QAEA,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC;AAExD,QAAA,OAAO,UAAU;IACnB;AAEA;;;;;;AAMG;AACH,IAAA,eAAe,mBAAmB,CAChC,MAA+B,EAC/B,WAAsF,EACtF,OAAuB,EAAA;;AAMvB,QAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAoB;AACjD,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;AAEpD,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QACzD,IAAI,OAAO,EAAE;AACX,YAAA,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB;QACA,MAAM,IAAI,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE,CAA2D;QAE3F,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAA,CAAE,CAAC;QAC9C;;QAGA,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE;AAEjE,QAAA,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB;QAC7C,MAAM,WAAW,GAAa,EAAE;QAChC,MAAM,aAAa,GAAa,EAAE;AAElC,QAAA,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;YACpC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC;AAEnC,YAAA,IAAI,KAAK,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC;YAE5E,IAAI,CAAC,KAAK,EAAE;gBACV,KAAK,GAAG,MAAM,WAAW,CACvB;oBACE,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,WAAW,EAAE,UAAU,CAAC,WAAW;oBACnC,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,aAAa,EAAE,UAAU,CAAC,EAAE;AAC5B,oBAAA,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,CAAC,iBAAiB,CAAC;iBAC/B,EACD,OAAO,CACR;AAED,gBAAA,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB;AAAO,iBAAA,IAAI,EAAC,CAAA,EAAA,GAAA,KAAK,CAAC,SAAS,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,MAAA,GAAA,EAAA,CAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAA,EAAE;AACxD,gBAAA,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;gBAChF,IAAI,YAAY,EAAE;AAChB,oBAAA,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;gBAChC;YACF;QACF;QAEA,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAC5B,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,EACjD,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAC7B;QACD,IAAI,OAAO,EAAE;AACX,YAAA,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9B;QACA,MAAM,cAAc,IAAI,MAAM,WAAW,CAAC,IAAI,EAAE,CAG9C;AAEF,QAAA,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE;AAClC,YAAA,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;AAC/D,gBAAA,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;gBACrF,IAAI,YAAY,EAAE;AAChB,oBAAA,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;gBAClC;YACF;QACF;QAEA,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvC,IAAI,OAAO,EAAE;AACX,YAAA,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5B;AACA,QAAA,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE;QAE1C,IAAI,CAAC,WAAW,EAAE;AAChB,YAAA,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAA,CAAE,CAAC;QAC3D;QAEA,OAAO;AACL,YAAA,IAAI,EAAE,WAAW;YACjB,WAAW;YACX,aAAa;SACd;IACH;AAEA;;;;;AAKG;AACH,IAAA,SAAS,uBAAuB,CAAC,IAA4B,EAAE,aAAqB,EAAA;QAClF,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,CAAA,CAAA,EAAI,aAAa,CAAA,CAAA,CAAG,EAAE,GAAG,CAAC;AACxD,QAAA,MAAM,iBAAiB,GAAG,aAAa,CAAC,WAAW,EAAE;;QAGrD,MAAM,gBAAgB,GACpB,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC;AAC1B,cAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO;AACvD,cAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAE/D,IAAI,QAAQ,GAAG,CAAC;AAEhB,QAAA,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE;AACpC,YAAA,IAAI,CAAC,KAAK;gBAAE;AACZ,YAAA,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE;YACtC,IAAI,KAAK,GAAG,CAAC;;AAGb,YAAA,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBAC1B,KAAK,GAAG,GAAG;YACb;AAAO,iBAAA,IAAI,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE;;gBAEnD,KAAK,GAAG,EAAE;YACZ;AAAO,iBAAA,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE;;gBAEjD,KAAK,GAAG,EAAE;YACZ;iBAAO;;gBAEL,KAAK,GAAG,EAAE;YACZ;YAEA,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC;QACtC;AAEA,QAAA,OAAO,QAAQ;IACjB;AAEA;;;;AAIG;IACH,SAAS,yBAAyB,CAEhC,OAAY,EAAA;QACZ,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAI;YAC3B,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,EAAE;AACrC,gBAAA,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YACtD;YACA,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE;AACrB,gBAAA,OAAO,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC;YAC/C;YACA,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE;YACrC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE;AACrC,YAAA,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC;AACnC,QAAA,CAAC,CAAC;IACJ;AAEA;;;;AAIG;IACH,SAAS,qCAAqC,CAAC,IAAW,EAAA;QACxD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,aAAa,CAAC,IAAI;AACxB,YAAA,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;AACvB,YAAA,MAAM,EAAE,OAAO;AACf,YAAA,aAAa,EAAG,IAA2C,CAAC,aAAa,IAAI,IAAI,CAAC,EAAE;SACrF;IACH;AAEA;;;;AAIG;IACH,SAAS,sCAAsC,CAAC,KAAa,EAAA;;QAC3D,OAAO;AACL,YAAA,EAAE,EAAE,CAAA,EAAA,GAAA,KAAK,CAAC,GAAG,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,MAAA,GAAA,EAAA,CAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,aAAa,CAAC,KAAK;YACzB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;AAC9B,YAAA,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO;AAC/B,YAAA,WAAW,EAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;AACzD,YAAA,aAAa,EAAE,KAAK,CAAC,aAAa,KAAI,CAAA,EAAA,GAAA,KAAK,CAAC,GAAG,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,MAAA,GAAA,EAAA,CAAE,QAAQ,EAAE,CAAA;SAC5D;IACH;AAEA;;;;;;;;AAQG;IACH,eAAe,gBAAgB,CAC7B,aAAqB,EACrB,YAAA,GAAuB,EAAE,EACzB,UAAA,GAA0F,IAAI,EAC9F,OAAuB,EAAA;AAEvB,QAAA,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE;AACvD,YAAA,OAAO,EAAE;QACX;AAEA,QAAA,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,EAAE;QAC3C,MAAM,QAAQ,GAAwC,EAAE;AAExD,QAAA,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;;YAE1D,MAAM,UAAU,GAAG,mDAAmD;;AAEtE,YAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAoB;YACjD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC;AAC7C,YAAA,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;AAC1B,gBAAA,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;aAC9D;iBACE,MAAM,CAAC,UAAU;iBACjB,KAAK,CAAC,YAAY,CAAC;YAEtB,IAAI,OAAO,EAAE;AACX,gBAAA,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5B;YAEA,QAAQ,CAAC,IAAI,CACX,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAI;;gBACjB,MAAM,UAAU,GAAG,IAA0C;AAC7D,gBAAA,OAAO,qCAAqC,CAAC;oBAC3C,EAAE,EAAE,CAAA,CAAA,EAAA,GAAA,UAAU,CAAC,GAAG,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,MAAA,GAAA,EAAA,CAAE,QAAQ,EAAE,KAAI,EAAE;oBACpC,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;AACrB,iBAAA,CAAC;YACb,CAAC,CAAC,CACH,CACF;QACH;aAAO;YACL,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC;AAEA,QAAA,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE;AAC3D,YAAA,QAAQ,CAAC,IAAI,CACX,uBAAuB,CAAC,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAC/E,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CACnD,CACF;QACH;aAAO;YACL,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC;AAEA,QAAA,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;AAC1D,YAAA,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAoB;YACjD,IAAI,IAAI,EAAE;gBACR,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC;gBAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;gBAE/E,IAAI,OAAO,EAAE;AACX,oBAAA,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC5B;gBAEA,QAAQ,CAAC,IAAI,CACX,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM;;oBAEnB,EAAE,EAAE,IAAI,CAAC,IAAI;oBACb,IAAI,EAAE,aAAa,CAAC,IAAI;oBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;AACf,oBAAA,MAAM,EAAE,OAAgB;oBACxB,aAAa,EAAE,IAAI,CAAC,IAAI;iBACzB,CAAC,CAAC,CACJ,CACF;YACH;QACF;aAAO;YACL,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC;QAEA,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC3C,QAAA,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE;AAC/B,QAAA,OAAO,QAAQ;IACjB;AAEA;;;AAGG;IACH,eAAe,uBAAuB,CAAC,MAA+B,EAAA;AACpE,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;QACpD,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IACtF;AAEA;;;AAGG;AACH,IAAA,eAAe,gBAAgB,CAC7B,MAA+B,EAC/B,OAAuB,EAAA;AAEvB,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,OAAO,EAAE;AACX,YAAA,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB;AACA,QAAA,OAAO,KAAK,CAAC,IAAI,EAAE;IACrB;AAEA;;;;AAIG;AACH,IAAA,eAAe,eAAe,CAC5B,OAAgC,EAChC,IAA6B,EAC7B,OAAuB,EAAA;AAEvB,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;QACpD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE;AAC9D,QAAA,OAAO,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE;IACzE;AAEA;;;;;AAKG;AACH,IAAA,eAAe,gBAAgB,CAC7B,MAA+B,EAC/B,MAA+B,EAC/B,OAAqC,EAAA;AAErC,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAsB;AACpD,QAAA,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;IACxD;IAEA,OAAO;QACL,aAAa;QACb,qBAAqB;QACrB,uBAAuB;QACvB,oBAAoB;QACpB,WAAW;QACX,uBAAuB;QACvB,cAAc;QACd,mBAAmB;QACnB,uBAAuB;QACvB,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,aAAa;QACb,iBAAiB;QACjB,mBAAmB;QACnB,gBAAgB;QAChB,uBAAuB;QACvB,yBAAyB;KAC1B;AACH;;;;"}

package/dist/migrations/tenantIndexes.cjs

@@ -0,0 +1,85 @@
+'use strict';
+
+var winston = require('../config/winston.cjs');
+
+/**
+ * Indexes that were superseded by compound tenant-scoped indexes.
+ * Each entry maps a collection name to the old index names that must be dropped
+ * before multi-tenancy can function (old unique indexes enforce global uniqueness,
+ * blocking same-value-different-tenant writes).
+ *
+ * These are only the indexes whose uniqueness constraints conflict with multi-tenancy.
+ * Non-unique indexes that were extended with tenantId are harmless (queries still work,
+ * just with slightly less optimal plans) and are not included here.
+ */
+const SUPERSEDED_INDEXES = {
+    users: [
+        'email_1',
+        'googleId_1',
+        'facebookId_1',
+        'openidId_1',
+        'samlId_1',
+        'ldapId_1',
+        'githubId_1',
+        'discordId_1',
+        'appleId_1',
+    ],
+    roles: ['name_1'],
+    conversations: ['conversationId_1_user_1'],
+    messages: ['messageId_1_user_1'],
+    agentcategories: ['value_1'],
+    accessroles: ['accessRoleId_1'],
+    conversationtags: ['tag_1_user_1'],
+    mcpservers: ['serverName_1'],
+    files: ['filename_1_conversationId_1_context_1'],
+    groups: ['idOnTheSource_1_source_1'],
+};
+/**
+ * Drops superseded unique indexes that block multi-tenant operation.
+ * Idempotent — skips indexes that don't exist. Safe to run on fresh databases.
+ *
+ * Call this before enabling multi-tenant middleware on an existing deployment.
+ * On a fresh database (no pre-existing data), this is a no-op.
+ */
+async function dropSupersededTenantIndexes(connection) {
+    const result = { dropped: [], skipped: [], errors: [] };
+    for (const [collectionName, indexNames] of Object.entries(SUPERSEDED_INDEXES)) {
+        const collection = connection.db.collection(collectionName);
+        let existingIndexes;
+        try {
+            existingIndexes = await collection.indexes();
+        }
+        catch {
+            result.skipped.push(...indexNames.map((idx) => `${collectionName}.${idx} (collection does not exist)`));
+            continue;
+        }
+        const existingNames = new Set(existingIndexes.map((idx) => idx.name));
+        for (const indexName of indexNames) {
+            if (!existingNames.has(indexName)) {
+                result.skipped.push(`${collectionName}.${indexName}`);
+                continue;
+            }
+            try {
+                await collection.dropIndex(indexName);
+                result.dropped.push(`${collectionName}.${indexName}`);
+                winston.info(`[TenantMigration] Dropped superseded index: ${collectionName}.${indexName}`);
+            }
+            catch (err) {
+                const msg = `${collectionName}.${indexName}: ${err.message}`;
+                result.errors.push(msg);
+                winston.error(`[TenantMigration] Failed to drop index: ${msg}`);
+            }
+        }
+    }
+    if (result.dropped.length > 0) {
+        winston.info(`[TenantMigration] Migration complete. Dropped ${result.dropped.length} superseded indexes.`);
+    }
+    else {
+        winston.info('[TenantMigration] No superseded indexes found — database is already migrated or fresh.');
+    }
+    return result;
+}
+
+exports.SUPERSEDED_INDEXES = SUPERSEDED_INDEXES;
+exports.dropSupersededTenantIndexes = dropSupersededTenantIndexes;
+//# sourceMappingURL=tenantIndexes.cjs.map

package/dist/migrations/tenantIndexes.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenantIndexes.cjs","sources":["../../src/migrations/tenantIndexes.ts"],"sourcesContent":[null],"names":["logger"],"mappings":";;;;AAGA;;;;;;;;;AASG;AACH,MAAM,kBAAkB,GAA6B;AACnD,IAAA,KAAK,EAAE;QACL,SAAS;QACT,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,UAAU;QACV,UAAU;QACV,YAAY;QACZ,aAAa;QACb,WAAW;AACZ,KAAA;IACD,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,aAAa,EAAE,CAAC,yBAAyB,CAAC;IAC1C,QAAQ,EAAE,CAAC,oBAAoB,CAAC;IAChC,eAAe,EAAE,CAAC,SAAS,CAAC;IAC5B,WAAW,EAAE,CAAC,gBAAgB,CAAC;IAC/B,gBAAgB,EAAE,CAAC,cAAc,CAAC;IAClC,UAAU,EAAE,CAAC,cAAc,CAAC;IAC5B,KAAK,EAAE,CAAC,uCAAuC,CAAC;IAChD,MAAM,EAAE,CAAC,0BAA0B,CAAC;;AAStC;;;;;;AAMG;AACI,eAAe,2BAA2B,CAC/C,UAAsB,EAAA;AAEtB,IAAA,MAAM,MAAM,GAAoB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;AAExE,IAAA,KAAK,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE;QAC7E,MAAM,UAAU,GAAG,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;AAE3D,QAAA,IAAI,eAAyC;AAC7C,QAAA,IAAI;AACF,YAAA,eAAe,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE;QAC9C;AAAE,QAAA,MAAM;YACN,MAAM,CAAC,OAAO,CAAC,IAAI,CACjB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAA,EAAG,cAAc,IAAI,GAAG,CAAA,4BAAA,CAA8B,CAAC,CACnF;YACD;QACF;AAEA,QAAA,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;AAErE,QAAA,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE;YAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;gBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA,EAAG,cAAc,CAAA,CAAA,EAAI,SAAS,CAAA,CAAE,CAAC;gBACrD;YACF;AAEA,YAAA,IAAI;AACF,gBAAA,MAAM,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;gBACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA,EAAG,cAAc,CAAA,CAAA,EAAI,SAAS,CAAA,CAAE,CAAC;gBACrDA,OAAM,CAAC,IAAI,CAAC,CAAA,4CAAA,EAA+C,cAAc,CAAA,CAAA,EAAI,SAAS,CAAA,CAAE,CAAC;YAC3F;YAAE,OAAO,GAAG,EAAE;gBACZ,MAAM,GAAG,GAAG,CAAA,EAAG,cAAc,CAAA,CAAA,EAAI,SAAS,CAAA,EAAA,EAAM,GAAa,CAAC,OAAO,CAAA,CAAE;AACvE,gBAAA,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;AACvB,gBAAAA,OAAM,CAAC,KAAK,CAAC,2CAA2C,GAAG,CAAA,CAAE,CAAC;YAChE;QACF;IACF;IAEA,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QAC7BA,OAAM,CAAC,IAAI,CACT,CAAA,8CAAA,EAAiD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAA,oBAAA,CAAsB,CAC7F;IACH;SAAO;AACL,QAAAA,OAAM,CAAC,IAAI,CACT,wFAAwF,CACzF;IACH;AAEA,IAAA,OAAO,MAAM;AACf;;;;;"}