mindoodb 0.0.3 → 0.0.4

package/dist/node/server/server.js

@@ -0,0 +1,225 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * MindooDB Example Server - Entry Point
+ *
+ * Usage:
+ *   npm run server:dev -- [options]   (from repo root)
+ *   node dist/node/server/server.js [options]
+ *
+ * Options:
+ *   -d, --data-dir <path>   Data directory path (default: ./data)
+ *   -p, --port <port>       Server port (default: 1661)
+ *   -s, --auto-sync         Enable automatic sync with remote servers
+ *   -w, --static-dir <path> Serve static files from this directory at /statics/
+ *   --tls-cert <path>       Path to TLS certificate file (PEM)
+ *   --tls-key <path>        Path to TLS private key file (PEM)
+ *   -h, --help              Show this help message
+ *
+ * Environment variables:
+ *   MINDOODB_SERVER_PASSWORD / MINDOODB_SERVER_PASSWORD_FILE — server identity password
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const MindooDBServer_1 = require("./MindooDBServer");
+const ServerSync_1 = require("./ServerSync");
+const config_1 = require("./config");
+const resolveServerPassword_1 = require("./resolveServerPassword");
+const types_1 = require("./types");
+function parseArgs(args) {
+    const options = {
+        dataDir: "./data",
+        port: 1661,
+        autoSync: false,
+        help: false,
+    };
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        const nextArg = args[i + 1];
+        switch (arg) {
+            case "-d":
+            case "--data-dir":
+                if (nextArg) {
+                    options.dataDir = nextArg;
+                    i++;
+                }
+                break;
+            case "-p":
+            case "--port":
+                if (nextArg) {
+                    const port = parseInt(nextArg, 10);
+                    if (!isNaN(port) && port > 0 && port < 65536) {
+                        options.port = port;
+                    }
+                    else {
+                        console.error(`Invalid port: ${nextArg}`);
+                        process.exit(1);
+                    }
+                    i++;
+                }
+                break;
+            case "-s":
+            case "--auto-sync":
+                options.autoSync = true;
+                break;
+            case "--tls-cert":
+                if (nextArg) {
+                    options.tlsCert = nextArg;
+                    i++;
+                }
+                break;
+            case "--tls-key":
+                if (nextArg) {
+                    options.tlsKey = nextArg;
+                    i++;
+                }
+                break;
+            case "-w":
+            case "--static-dir":
+                if (nextArg) {
+                    options.staticDir = nextArg;
+                    i++;
+                }
+                break;
+            case "--config":
+                if (nextArg) {
+                    options.configPath = nextArg;
+                    i++;
+                }
+                break;
+            case "-h":
+            case "--help":
+                options.help = true;
+                break;
+            default:
+                if (arg.startsWith("-")) {
+                    console.error(`Unknown option: ${arg}`);
+                    process.exit(1);
+                }
+        }
+    }
+    return options;
+}
+function showHelp() {
+    console.log(`
+MindooDB Example Server
+
+Usage:
+  npm run server:dev -- [options]    (from repo root)
+  node dist/node/server/server.js [options]
+
+Options:
+  -d, --data-dir <path>   Data directory path (default: ./data)
+  -p, --port <port>       Server port (default: 1661)
+  -s, --auto-sync         Enable automatic sync with remote servers
+  -w, --static-dir <path> Serve static files at /statics/ (e.g. bootstrap UI)
+  --config <path>         Path to config.json (default: <dataDir>/config.json)
+  --tls-cert <path>       Path to TLS certificate file (PEM format)
+  --tls-key <path>        Path to TLS private key file (PEM format)
+  -h, --help              Show this help message
+
+Environment variables:
+  MINDOODB_SERVER_PASSWORD or MINDOODB_SERVER_PASSWORD_FILE — decrypt server identity
+                               (required if server.identity.json exists)
+
+Examples:
+  # Start server with default settings
+  npm run server:dev
+
+  # Start server with custom data directory and port
+  npm run server:dev -- -d /var/lib/mindoodb -p 8080
+
+  # Start server with auto-sync enabled
+  MINDOODB_SERVER_PASSWORD_FILE=./.server-password npm run server:dev -- -s
+
+  # Start server with explicit config file
+  npm run server:dev -- --config /etc/mindoodb/config.json
+
+  # Start server with static files (e.g. bootstrap UI for distributed web apps)
+  npm run server:dev -- -w ./webapp-bootstrap
+
+  # Start server with TLS (HTTPS)
+  npm run server:dev -- --tls-cert /path/to/fullchain.pem --tls-key /path/to/privkey.pem -p 443
+`);
+}
+async function main() {
+    const args = process.argv.slice(2);
+    const options = parseArgs(args);
+    if (options.help) {
+        showHelp();
+        process.exit(0);
+    }
+    console.log("=".repeat(60));
+    console.log("MindooDB Example Server");
+    console.log("=".repeat(60));
+    console.log(`Data directory: ${options.dataDir}`);
+    console.log(`Port: ${options.port}`);
+    console.log(`Auto-sync: ${options.autoSync ? "enabled" : "disabled"}`);
+    console.log(`Static dir: ${options.staticDir || "not set"}`);
+    console.log(`TLS: ${options.tlsCert ? "enabled" : "disabled"}`);
+    if ((options.tlsCert && !options.tlsKey) || (!options.tlsCert && options.tlsKey)) {
+        console.error("Error: --tls-cert and --tls-key must both be provided");
+        process.exit(1);
+    }
+    const serverPassword = (0, resolveServerPassword_1.resolveServerPassword)();
+    console.log(`Config: ${options.configPath || "<dataDir>/config.json"}`);
+    console.log(`Server password: ${serverPassword ? "configured" : "not set"}`);
+    console.log("=".repeat(60));
+    // Load server config (capabilities-based system admin authorization)
+    const configPath = (0, config_1.resolveConfigPath)(options.dataDir, options.configPath);
+    const serverConfig = (0, config_1.loadServerConfig)(options.dataDir, options.configPath);
+    // Create and start the server
+    const server = new MindooDBServer_1.MindooDBServer(options.dataDir, serverPassword, options.staticDir, serverConfig, configPath);
+    // If auto-sync is enabled and we have server identity, start periodic sync
+    if (options.autoSync) {
+        const tenantManager = server.getTenantManager();
+        const serverIdentity = tenantManager.getServerIdentity();
+        if (!serverIdentity) {
+            console.warn("[Main] Auto-sync enabled but no server.identity.json found. " +
+                "Run 'npm run init' to create a server identity.");
+        }
+        else if (!serverPassword) {
+            console.warn("[Main] Auto-sync enabled but no server password (set " +
+                `${types_1.ENV_VARS.SERVER_PASSWORD} or ${types_1.ENV_VARS.SERVER_PASSWORD_FILE}). ` +
+                "Server-to-server sync will not work.");
+        }
+        else {
+            const tenants = tenantManager.listTenants();
+            for (const tenantId of tenants) {
+                try {
+                    const tenant = await tenantManager.getTenant(tenantId);
+                    const config = tenant.context.config;
+                    if (config.remoteServers && config.remoteServers.length > 0) {
+                        const serverSync = new ServerSync_1.ServerSync(tenantManager.getCryptoAdapter(), tenantId, serverIdentity, serverPassword, async (dbId) => tenantManager.getStore(tenantId, dbId));
+                        const stopSync = (0, ServerSync_1.startPeriodicSync)(serverSync, config.remoteServers);
+                        process.on("SIGINT", () => {
+                            console.log("\n[Main] Shutting down...");
+                            stopSync();
+                            process.exit(0);
+                        });
+                        process.on("SIGTERM", () => {
+                            console.log("\n[Main] Shutting down...");
+                            stopSync();
+                            process.exit(0);
+                        });
+                        console.log(`[Main] Started auto-sync for tenant ${tenantId}`);
+                    }
+                }
+                catch (error) {
+                    console.error(`[Main] Error setting up auto-sync for tenant ${tenantId}:`, error);
+                }
+            }
+        }
+    }
+    // Start listening
+    if (options.tlsCert && options.tlsKey) {
+        server.listenTls(options.port, options.tlsCert, options.tlsKey);
+    }
+    else {
+        server.listen(options.port);
+    }
+}
+main().catch((error) => {
+    console.error("Fatal error:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/dist/node/server/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/node/server/server.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;;GAkBG;;AAEH,qDAAkD;AAClD,6CAA6D;AAC7D,qCAA+D;AAC/D,mEAAgE;AAChE,mCAAmC;AAanC,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAAe;QAC1B,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,KAAK;KACZ,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5B,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC1B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;wBAC7C,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBACtB,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;wBAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;oBACD,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,aAAa;gBAChB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACxB,MAAM;YAER,KAAK,YAAY;gBACf,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC1B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,WAAW;gBACd,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;oBACzB,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,cAAc;gBACjB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC;oBAC5B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,UAAU;gBACb,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC;oBAC7B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBACpB,MAAM;YAER;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;oBACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCb,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAEhE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjF,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,IAAA,6CAAqB,GAAE,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,UAAU,IAAI,uBAAuB,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,qEAAqE;IACrE,MAAM,UAAU,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,IAAA,yBAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAE3E,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,+BAAc,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAEhH,2EAA2E;IAC3E,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC;QAEzD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CACV,8DAA8D;gBAC9D,iDAAiD,CAClD,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CACV,uDAAuD;gBACvD,GAAG,gBAAQ,CAAC,eAAe,OAAO,gBAAQ,CAAC,oBAAoB,KAAK;gBACpE,sCAAsC,CACvC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;YAE5C,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;oBACvD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;oBAErC,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC5D,MAAM,UAAU,GAAG,IAAI,uBAAU,CAC/B,aAAa,CAAC,gBAAgB,EAAE,EAChC,QAAQ,EACR,cAAc,EACd,cAAc,EACd,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CACvD,CAAC;wBAEF,MAAM,QAAQ,GAAG,IAAA,8BAAiB,EAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;wBAErE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;4BACxB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;4BACzC,QAAQ,EAAE,CAAC;4BACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAClB,CAAC,CAAC,CAAC;wBAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;4BACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;4BACzC,QAAQ,EAAE,CAAC;4BACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAClB,CAAC,CAAC,CAAC;wBAEH,OAAO,CAAC,GAAG,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,gDAAgD,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/node/server/serverinit.d.ts

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+/**
+ * MindooDB Server Init - One-time setup that generates the server identity
+ * and optionally creates a first system admin keypair.
+ *
+ * Usage:
+ *   npx ts-node src/serverinit.ts --name <serverName> [options]
+ *
+ * Options:
+ *   -n, --name <name>       Server name (e.g., "server1") -- required
+ *   -d, --data-dir <path>   Data directory path (default: ./data)
+ *   -f, --force             Overwrite existing server.identity.json
+ *   --skip-admin            Skip system admin keypair generation
+ *   -h, --help              Show this help message
+ *
+ * Environment variables:
+ *   MINDOODB_SERVER_PASSWORD / MINDOODB_SERVER_PASSWORD_FILE — encrypt server identity.
+ *   If neither is set, the user is prompted interactively.
+ */
+export {};
+//# sourceMappingURL=serverinit.d.ts.map

package/dist/node/server/serverinit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverinit.d.ts","sourceRoot":"","sources":["../../../src/node/server/serverinit.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/node/server/serverinit.js

@@ -0,0 +1,317 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * MindooDB Server Init - One-time setup that generates the server identity
+ * and optionally creates a first system admin keypair.
+ *
+ * Usage:
+ *   npx ts-node src/serverinit.ts --name <serverName> [options]
+ *
+ * Options:
+ *   -n, --name <name>       Server name (e.g., "server1") -- required
+ *   -d, --data-dir <path>   Data directory path (default: ./data)
+ *   -f, --force             Overwrite existing server.identity.json
+ *   --skip-admin            Skip system admin keypair generation
+ *   -h, --help              Show this help message
+ *
+ * Environment variables:
+ *   MINDOODB_SERVER_PASSWORD / MINDOODB_SERVER_PASSWORD_FILE — encrypt server identity.
+ *   If neither is set, the user is prompted interactively.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = require("fs");
+const path_1 = require("path");
+const readline_1 = require("readline");
+const stream_1 = require("stream");
+const NodeCryptoAdapter_1 = require("../crypto/NodeCryptoAdapter");
+const BaseMindooTenantFactory_1 = require("../../core/BaseMindooTenantFactory");
+const InMemoryContentAddressedStoreFactory_1 = require("../../appendonlystores/InMemoryContentAddressedStoreFactory");
+const resolveServerPassword_1 = require("./resolveServerPassword");
+const types_1 = require("./types");
+function parseArgs(args) {
+    const options = {
+        name: "",
+        dataDir: "./data",
+        force: false,
+        skipAdmin: false,
+        help: false,
+    };
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        const nextArg = args[i + 1];
+        switch (arg) {
+            case "-n":
+            case "--name":
+                if (nextArg) {
+                    options.name = nextArg;
+                    i++;
+                }
+                break;
+            case "-d":
+            case "--data-dir":
+                if (nextArg) {
+                    options.dataDir = nextArg;
+                    i++;
+                }
+                break;
+            case "-f":
+            case "--force":
+                options.force = true;
+                break;
+            case "--skip-admin":
+                options.skipAdmin = true;
+                break;
+            case "-h":
+            case "--help":
+                options.help = true;
+                break;
+            default:
+                if (arg.startsWith("-")) {
+                    console.error(`Unknown option: ${arg}`);
+                    process.exit(1);
+                }
+        }
+    }
+    return options;
+}
+function showHelp() {
+    console.log(`
+MindooDB Server Init - Generate server identity and (optionally) a system admin
+
+Usage:
+  npx ts-node src/serverinit.ts --name <serverName> [options]
+
+Options:
+  -n, --name <name>       Server name (e.g., "server1") -- required
+  -d, --data-dir <path>   Data directory path (default: ./data)
+  -f, --force             Overwrite existing server.identity.json
+  --skip-admin            Skip interactive system admin keypair generation
+  -h, --help              Show this help message
+
+Environment variables:
+  MINDOODB_SERVER_PASSWORD or MINDOODB_SERVER_PASSWORD_FILE — encrypt server identity.
+  If neither is set, the user is prompted interactively.
+
+Examples:
+  # Interactive (prompts for password and system admin setup):
+  npx ts-node src/serverinit.ts --name server1
+
+  # Non-interactive (password from file, skip admin):
+  MINDOODB_SERVER_PASSWORD_FILE=./.server-password npx ts-node src/serverinit.ts --name server1 --skip-admin
+`);
+}
+function createReadline() {
+    return (0, readline_1.createInterface)({
+        input: process.stdin,
+        output: process.stderr,
+    });
+}
+async function promptLine(rl, question) {
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => resolve(answer));
+    });
+}
+async function promptHiddenLine(question) {
+    if (!process.stdin.isTTY) {
+        const rl = createReadline();
+        const answer = await promptLine(rl, question);
+        rl.close();
+        return answer;
+    }
+    let muted = false;
+    const output = new stream_1.Writable({
+        write(chunk, encoding, callback) {
+            if (!muted) {
+                process.stderr.write(chunk, encoding);
+            }
+            callback();
+        },
+    });
+    const rl = (0, readline_1.createInterface)({
+        input: process.stdin,
+        output,
+        terminal: true,
+    });
+    return new Promise((resolve) => {
+        const cleanup = () => {
+            muted = false;
+            rl.close();
+        };
+        rl.on("SIGINT", () => {
+            cleanup();
+            process.kill(process.pid, "SIGINT");
+        });
+        process.stderr.write(question);
+        muted = true;
+        rl.question("", (answer) => {
+            process.stderr.write("\n");
+            cleanup();
+            resolve(answer);
+        });
+    });
+}
+async function main() {
+    const args = process.argv.slice(2);
+    const options = parseArgs(args);
+    if (options.help) {
+        showHelp();
+        process.exit(0);
+    }
+    if (!options.name) {
+        console.error("Error: --name is required. Use --help for usage.");
+        process.exit(1);
+    }
+    const identityPath = (0, path_1.join)(options.dataDir, "server.identity.json");
+    const trustedServersPath = (0, path_1.join)(options.dataDir, "trusted-servers.json");
+    const configPath = (0, path_1.join)(options.dataDir, "config.json");
+    if ((0, fs_1.existsSync)(identityPath) && !options.force) {
+        console.error(`Error: ${identityPath} already exists. Use --force to overwrite.`);
+        process.exit(1);
+    }
+    // Get password from env / file or prompt
+    let password = (0, resolveServerPassword_1.resolveServerPassword)();
+    if (!password) {
+        password = await promptHiddenLine("Enter password to encrypt server identity: ");
+    }
+    if (!password) {
+        console.error("Error: password is required.");
+        process.exit(1);
+    }
+    // Ensure data directory exists
+    if (!(0, fs_1.existsSync)(options.dataDir)) {
+        (0, fs_1.mkdirSync)(options.dataDir, { recursive: true });
+    }
+    console.log("=".repeat(60));
+    console.log("MindooDB Server Init");
+    console.log("=".repeat(60));
+    console.log(`Server name: ${options.name}`);
+    console.log(`Data directory: ${options.dataDir}`);
+    console.log("=".repeat(60));
+    const cryptoAdapter = new NodeCryptoAdapter_1.NodeCryptoAdapter();
+    const factory = new BaseMindooTenantFactory_1.BaseMindooTenantFactory(new InMemoryContentAddressedStoreFactory_1.InMemoryContentAddressedStoreFactory(), cryptoAdapter);
+    const serverUsername = `CN=${options.name}`;
+    console.log(`\nGenerating server identity for "${serverUsername}"...`);
+    console.log("(This may take a few seconds for RSA key generation)\n");
+    const identity = await factory.createUserId(serverUsername, password);
+    // Write server.identity.json
+    (0, fs_1.writeFileSync)(identityPath, JSON.stringify(identity, null, 2), "utf-8");
+    console.log(`\nServer identity written to: ${identityPath}`);
+    // Create trusted-servers.json if it doesn't exist
+    if (!(0, fs_1.existsSync)(trustedServersPath)) {
+        (0, fs_1.writeFileSync)(trustedServersPath, "[]", "utf-8");
+        console.log(`Created empty trusted-servers.json: ${trustedServersPath}`);
+    }
+    // Print public keys for sharing with other servers
+    console.log("\n" + "=".repeat(60));
+    console.log("SERVER PUBLIC KEYS (share these with other servers):");
+    console.log("=".repeat(60));
+    console.log(`\nServer name: ${serverUsername}`);
+    console.log(`\nSigning public key (Ed25519):\n${identity.userSigningKeyPair.publicKey}`);
+    console.log(`\nEncryption public key (RSA-OAEP):\n${identity.userEncryptionKeyPair.publicKey}`);
+    console.log("=".repeat(60));
+    // System admin keypair generation
+    if (!options.skipAdmin) {
+        await generateSystemAdmin(factory, options.dataDir, configPath);
+    }
+    else {
+        writeDefaultConfig(configPath);
+        console.log(`\nSkipped system admin generation (--skip-admin).`);
+    }
+    if (!process.env.MINDOODB_SKIP_NEXT_STEPS) {
+        console.log("\n" + "=".repeat(60));
+        console.log("NEXT STEPS:");
+        console.log("=".repeat(60));
+        console.log("1. Start the server:");
+        console.log(`   ${types_1.ENV_VARS.SERVER_PASSWORD_FILE}=<path> or ${types_1.ENV_VARS.SERVER_PASSWORD}=<password> ` +
+            `node dist/node/server/server.js -d ${options.dataDir}`);
+        console.log("2. Edit config.json to configure system admin capabilities");
+        console.log("3. Use MindooDBServerAdmin or publishToServer to manage tenants");
+        console.log("=".repeat(60));
+    }
+}
+async function generateSystemAdmin(factory, dataDir, configPath) {
+    const rl = createReadline();
+    const answer = await promptLine(rl, "\nCreate a system admin now? (y/N) ");
+    if (answer.toLowerCase() !== "y") {
+        rl.close();
+        writeDefaultConfig(configPath);
+        console.log("Skipped system admin generation.");
+        return;
+    }
+    const adminUsername = await promptLine(rl, "System admin username (e.g. cn=sysadmin/o=myorg): ");
+    if (!adminUsername.trim()) {
+        rl.close();
+        console.error("Error: username cannot be empty.");
+        writeDefaultConfig(configPath);
+        return;
+    }
+    const adminPassword = await promptHiddenLine("Password to protect the system admin private key: ");
+    if (!adminPassword) {
+        rl.close();
+        console.error("Error: password cannot be empty.");
+        writeDefaultConfig(configPath);
+        return;
+    }
+    const adminPasswordConfirm = await promptHiddenLine("Confirm password: ");
+    rl.close();
+    if (adminPassword !== adminPasswordConfirm) {
+        console.error("Error: passwords do not match.");
+        writeDefaultConfig(configPath);
+        return;
+    }
+    console.log(`\nGenerating system admin keypair for "${adminUsername}"...`);
+    console.log("(This may take a few seconds for RSA key generation)\n");
+    const adminIdentity = await factory.createUserId(adminUsername, adminPassword);
+    // Save the password-encrypted private key to a separate identity file
+    const safeFilename = adminUsername
+        .replace(/[^a-zA-Z0-9_=-]/g, "-")
+        .replace(/-+/g, "-")
+        .toLowerCase();
+    const identityFilePath = (0, path_1.join)(dataDir, `system-admin-${safeFilename}.identity.json`);
+    (0, fs_1.writeFileSync)(identityFilePath, JSON.stringify(adminIdentity, null, 2), "utf-8");
+    console.log(`System admin identity (password-encrypted) written to: ${identityFilePath}`);
+    // Write config.json with the admin's public key
+    const config = {
+        capabilities: {
+            "ALL:/system/*": [
+                {
+                    username: adminUsername,
+                    publicsignkey: adminIdentity.userSigningKeyPair.publicKey,
+                },
+            ],
+        },
+    };
+    (0, fs_1.writeFileSync)(configPath, JSON.stringify(config, null, 2), "utf-8");
+    console.log(`Config written to: ${configPath}`);
+    console.log("\n" + "=".repeat(60));
+    console.log("SYSTEM ADMIN CREATED:");
+    console.log("=".repeat(60));
+    console.log(`Username: ${adminUsername}`);
+    console.log(`Identity file: ${identityFilePath}`);
+    console.log(`Config: ${configPath}`);
+    console.log("\nThe identity file contains the password-encrypted private key.");
+    console.log("The raw private key is never stored on disk.");
+    console.log("You will need the password when using MindooDBServerAdmin or publishToServer.");
+    console.log("=".repeat(60));
+}
+function writeDefaultConfig(configPath) {
+    if ((0, fs_1.existsSync)(configPath))
+        return;
+    const config = {
+        capabilities: {
+            "ALL:/system/*": [
+                {
+                    username: "<INSERT_USERNAME>",
+                    publicsignkey: "<INSERT_SIGNING_PUBLIC_KEY>",
+                },
+            ],
+        },
+    };
+    (0, fs_1.writeFileSync)(configPath, JSON.stringify(config, null, 2), "utf-8");
+    console.log(`Default config.json (with placeholder) written to: ${configPath}`);
+}
+main().catch((error) => {
+    console.error("Fatal error:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=serverinit.js.map

package/dist/node/server/serverinit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverinit.js","sourceRoot":"","sources":["../../../src/node/server/serverinit.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;GAiBG;;AAEH,2BAAwE;AACxE,+BAA4B;AAC5B,uCAA2C;AAC3C,mCAAkC;AAElC,mEAAgE;AAChE,gFAA6E;AAC7E,sHAAmH;AAEnH,mEAAgE;AAChE,mCAAmC;AAWnC,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAAgB;QAC3B,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5B,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;oBACvB,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC1B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;gBACrB,MAAM;YAER,KAAK,cAAc;gBACjB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;gBACzB,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBACpB,MAAM;YAER;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;oBACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;CAuBb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAA,0BAAe,EAAC;QACrB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAsC,EAAE,QAAgB;IAChF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC9C,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,MAAM,GAAG,IAAI,iBAAQ,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ;YAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAA0B,CAAC,CAAC;YAC1D,CAAC;YACD,QAAQ,EAAE,CAAC;QACb,CAAC;KACF,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAA,0BAAe,EAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM;QACN,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,KAAK,GAAG,KAAK,CAAC;YACd,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC,CAAC;QAEF,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACnB,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,KAAK,GAAG,IAAI,CAAC;QACb,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACnE,MAAM,kBAAkB,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAExD,IAAI,IAAA,eAAU,EAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,UAAU,YAAY,4CAA4C,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yCAAyC;IACzC,IAAI,QAAQ,GAAG,IAAA,6CAAqB,GAAE,CAAC;IACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,MAAM,gBAAgB,CAAC,6CAA6C,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+BAA+B;IAC/B,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,IAAA,cAAS,EAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,MAAM,aAAa,GAAG,IAAI,qCAAiB,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,iDAAuB,CACzC,IAAI,2EAAoC,EAAE,EAC1C,aAAa,CACd,CAAC;IAEF,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,qCAAqC,cAAc,MAAM,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IAEtE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAEtE,6BAA6B;IAC7B,IAAA,kBAAa,EAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;IAE7D,kDAAkD;IAClD,IAAI,CAAC,IAAA,eAAU,EAAC,kBAAkB,CAAC,EAAE,CAAC;QACpC,IAAA,kBAAa,EAAC,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,uCAAuC,kBAAkB,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,mDAAmD;IACnD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,kBAAkB,cAAc,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,oCAAoC,QAAQ,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,wCAAwC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,kCAAkC;IAClC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CACT,MAAM,gBAAQ,CAAC,oBAAoB,cAAc,gBAAQ,CAAC,eAAe,cAAc;YACrF,sCAAsC,OAAO,CAAC,OAAO,EAAE,CAC1D,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAgC,EAChC,OAAe,EACf,UAAkB;IAElB,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;IAE5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,qCAAqC,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;QACjC,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,oDAAoD,CAAC,CAAC;IACjG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClD,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,oDAAoD,CAAC,CAAC;IACnG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClD,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IAC1E,EAAE,CAAC,KAAK,EAAE,CAAC;IAEX,IAAI,aAAa,KAAK,oBAAoB,EAAE,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChD,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,0CAA0C,aAAa,MAAM,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IAEtE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAE/E,sEAAsE;IACtE,MAAM,YAAY,GAAG,aAAa;SAC/B,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;SAChC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,WAAW,EAAE,CAAC;IACjB,MAAM,gBAAgB,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,gBAAgB,YAAY,gBAAgB,CAAC,CAAC;IACrF,IAAA,kBAAa,EAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,0DAA0D,gBAAgB,EAAE,CAAC,CAAC;IAE1F,gDAAgD;IAChD,MAAM,MAAM,GAAiB;QAC3B,YAAY,EAAE;YACZ,eAAe,EAAE;gBACf;oBACE,QAAQ,EAAE,aAAa;oBACvB,aAAa,EAAE,aAAa,CAAC,kBAAkB,CAAC,SAAmB;iBACpE;aACF;SACF;KACF,CAAC;IACF,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;IAEhD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,aAAa,aAAa,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,gBAAgB,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC;QAAE,OAAO;IAEnC,MAAM,MAAM,GAAiB;QAC3B,YAAY,EAAE;YACZ,eAAe,EAAE;gBACf;oBACE,QAAQ,EAAE,mBAAmB;oBAC7B,aAAa,EAAE,6BAA6B;iBAC7C;aACF;SACF;KACF,CAAC;IACF,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,sDAAsD,UAAU,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}