mindoodb 0.0.3 → 0.0.5

package/dist/node/server/TenantManager.js

@@ -0,0 +1,615 @@
+"use strict";
+/**
+ * TenantManager handles loading, caching, and registration of tenants.
+ *
+ * Uses a global server identity (one per server, not per tenant) for
+ * authenticating with remote servers and opening tenant directories.
+ *
+ * When a tenant has a $publicinfos key (sent during publishToServer), the
+ * manager creates a real BaseMindooTenant for directory reading. User
+ * authentication is then validated against the admin-signed directory DB
+ * rather than a static JSON config.
+ *
+ * When no $publicinfos key is available, a SimpleMindooDirectory backed
+ * by config.json users[] is used as a fallback (useful for tests).
+ *
+ * A CompositeMindooDirectory wraps whichever directory source is used and
+ * also checks the global trusted-servers list, enabling server-to-server
+ * auth without servers being in each tenant's user directory.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantManager = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const NodeCryptoAdapter_1 = require("../crypto/NodeCryptoAdapter");
+const AuthenticationService_1 = require("../../core/appendonlystores/network/AuthenticationService");
+const ServerNetworkContentAddressedStore_1 = require("../../appendonlystores/network/ServerNetworkContentAddressedStore");
+const BaseMindooTenantFactory_1 = require("../../core/BaseMindooTenantFactory");
+const RSAEncryption_1 = require("../../core/crypto/RSAEncryption");
+const privateKeyEncryption_1 = require("../../core/crypto/privateKeyEncryption");
+const KeyBag_1 = require("../../core/keys/KeyBag");
+const types_1 = require("../../core/types");
+const StoreFactory_1 = require("./StoreFactory");
+// ---------------------------------------------------------------------------
+// StoreFactoryAdapter
+// ---------------------------------------------------------------------------
+class StoreFactoryAdapter {
+    constructor(storeFactory) {
+        this.storeFactory = storeFactory;
+    }
+    createStore(dbId, _options) {
+        return { docStore: this.storeFactory.getStore(dbId) };
+    }
+}
+// ---------------------------------------------------------------------------
+// SimpleMindooDirectory — config-based fallback
+// ---------------------------------------------------------------------------
+class SimpleMindooDirectory {
+    constructor(config) {
+        this.users = new Map();
+        this.revokedUsers = new Set();
+        this.adminSigningPublicKey = config.adminSigningPublicKey;
+        if (config.users) {
+            for (const user of config.users) {
+                this.users.set(user.username.toLowerCase(), user);
+            }
+        }
+    }
+    async getUserPublicKeys(username) {
+        const normalizedUsername = username.toLowerCase();
+        if (this.revokedUsers.has(normalizedUsername)) {
+            return null;
+        }
+        const user = this.users.get(normalizedUsername);
+        if (!user) {
+            return null;
+        }
+        return {
+            signingPublicKey: user.signingPublicKey,
+            encryptionPublicKey: user.encryptionPublicKey,
+        };
+    }
+    async isUserRevoked(username) {
+        return this.revokedUsers.has(username.toLowerCase());
+    }
+    async validatePublicSigningKey(publicKey) {
+        if (publicKey === this.adminSigningPublicKey) {
+            return true;
+        }
+        for (const [, user] of this.users) {
+            if (user.signingPublicKey === publicKey) {
+                if (!this.revokedUsers.has(user.username.toLowerCase())) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// CompositeMindooDirectory — wraps tenant directory + trusted servers
+// ---------------------------------------------------------------------------
+/**
+ * Wraps a per-tenant directory (real or config-based) and also checks
+ * the global trusted-servers list. Holds a reference to the array so
+ * runtime changes via the admin API are immediately visible.
+ */
+class CompositeMindooDirectory {
+    constructor(inner, trustedServers, adminBootstrapIdentity) {
+        this.inner = inner;
+        this.trustedServers = trustedServers;
+        this.adminBootstrapIdentity = adminBootstrapIdentity;
+        this.adminUsernameNormalized = adminBootstrapIdentity?.username.toLowerCase() ?? null;
+    }
+    async getUserPublicKeys(username) {
+        const normalizedUsername = username.toLowerCase();
+        // Bootstrap special-case: allow configured admin identity to authenticate
+        // even before directory grantaccess docs are present on the server.
+        if (this.adminBootstrapIdentity &&
+            this.adminUsernameNormalized &&
+            normalizedUsername === this.adminUsernameNormalized) {
+            return {
+                signingPublicKey: this.adminBootstrapIdentity.signingPublicKey,
+                encryptionPublicKey: this.adminBootstrapIdentity.encryptionPublicKey,
+            };
+        }
+        const result = await this.inner.getUserPublicKeys(username);
+        if (result)
+            return result;
+        for (const server of this.trustedServers) {
+            if (server.name.toLowerCase() === normalizedUsername) {
+                return {
+                    signingPublicKey: server.signingPublicKey,
+                    encryptionPublicKey: server.encryptionPublicKey,
+                };
+            }
+        }
+        return null;
+    }
+    async isUserRevoked(username) {
+        const normalizedUsername = username.toLowerCase();
+        if (this.adminUsernameNormalized && normalizedUsername === this.adminUsernameNormalized) {
+            return false;
+        }
+        for (const server of this.trustedServers) {
+            if (server.name.toLowerCase() === normalizedUsername) {
+                return false;
+            }
+        }
+        return this.inner.isUserRevoked(username);
+    }
+    async validatePublicSigningKey(publicKey) {
+        if (this.adminBootstrapIdentity && this.adminBootstrapIdentity.signingPublicKey === publicKey) {
+            return true;
+        }
+        const innerResult = await this.inner.validatePublicSigningKey(publicKey);
+        if (innerResult)
+            return true;
+        for (const server of this.trustedServers) {
+            if (server.signingPublicKey === publicKey) {
+                return true;
+            }
+        }
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// TenantManager
+// ---------------------------------------------------------------------------
+/**
+ * TenantManager is responsible for:
+ * - Loading the global server identity and trusted servers
+ * - Loading tenant configurations from disk
+ * - Caching loaded tenants
+ * - Registering new tenants
+ * - Managing tenant stores and authentication services
+ * - Creating a real MindooDB tenant for directory reading (when keys available)
+ * - Runtime management of trusted servers
+ */
+class TenantManager {
+    constructor(dataDir, serverPassword) {
+        this.loadedTenants = new Map();
+        this.serverIdentity = null;
+        this.trustedServers = [];
+        this.dataDir = dataDir;
+        this.serverPassword = serverPassword;
+        this.cryptoAdapter = new NodeCryptoAdapter_1.NodeCryptoAdapter();
+        if (!(0, fs_1.existsSync)(dataDir)) {
+            (0, fs_1.mkdirSync)(dataDir, { recursive: true });
+            console.log(`[TenantManager] Created data directory: ${dataDir}`);
+        }
+        // Load global server identity
+        const identityPath = (0, path_1.join)(dataDir, "server.identity.json");
+        if ((0, fs_1.existsSync)(identityPath)) {
+            this.serverIdentity = JSON.parse((0, fs_1.readFileSync)(identityPath, "utf-8"));
+            console.log(`[TenantManager] Loaded server identity: ${this.serverIdentity.username}`);
+        }
+        else {
+            console.log(`[TenantManager] No server.identity.json found (run "npm run init" to create one)`);
+        }
+        // Load trusted servers
+        const trustedPath = (0, path_1.join)(dataDir, "trusted-servers.json");
+        if ((0, fs_1.existsSync)(trustedPath)) {
+            this.trustedServers = JSON.parse((0, fs_1.readFileSync)(trustedPath, "utf-8"));
+            console.log(`[TenantManager] Loaded ${this.trustedServers.length} trusted server(s)`);
+        }
+    }
+    // =======================================================================
+    // Server identity
+    // =======================================================================
+    getServerIdentity() {
+        return this.serverIdentity;
+    }
+    getServerPublicInfo() {
+        if (!this.serverIdentity)
+            return null;
+        return {
+            name: this.serverIdentity.username,
+            signingPublicKey: this.serverIdentity.userSigningKeyPair.publicKey,
+            encryptionPublicKey: this.serverIdentity.userEncryptionKeyPair.publicKey,
+        };
+    }
+    // =======================================================================
+    // Trusted server management
+    // =======================================================================
+    listTrustedServers() {
+        return [...this.trustedServers];
+    }
+    addTrustedServer(server) {
+        const existing = this.trustedServers.find((s) => s.name.toLowerCase() === server.name.toLowerCase());
+        if (existing) {
+            throw new Error(`Trusted server "${server.name}" already exists`);
+        }
+        this.trustedServers.push(server);
+        this.persistTrustedServers();
+        console.log(`[TenantManager] Added trusted server: ${server.name}`);
+    }
+    removeTrustedServer(name) {
+        const idx = this.trustedServers.findIndex((s) => s.name.toLowerCase() === name.toLowerCase());
+        if (idx === -1)
+            return false;
+        this.trustedServers.splice(idx, 1);
+        this.persistTrustedServers();
+        console.log(`[TenantManager] Removed trusted server: ${name}`);
+        return true;
+    }
+    persistTrustedServers() {
+        const filePath = (0, path_1.join)(this.dataDir, "trusted-servers.json");
+        (0, fs_1.writeFileSync)(filePath, JSON.stringify(this.trustedServers, null, 2), "utf-8");
+    }
+    getServerKeyBagPath() {
+        return (0, path_1.join)(this.dataDir, "server.keybag");
+    }
+    async loadServerKeyBag() {
+        if (!this.serverIdentity || !this.serverPassword) {
+            throw new Error("Server identity and server password are required to manage tenant $publicinfos keys");
+        }
+        const keyBag = new KeyBag_1.KeyBag(this.serverIdentity.userEncryptionKeyPair.privateKey, this.serverPassword, this.cryptoAdapter);
+        const keyBagPath = this.getServerKeyBagPath();
+        if ((0, fs_1.existsSync)(keyBagPath)) {
+            const data = (0, fs_1.readFileSync)(keyBagPath);
+            await keyBag.load(new Uint8Array(data));
+        }
+        return keyBag;
+    }
+    async saveServerKeyBag(keyBag) {
+        (0, fs_1.writeFileSync)(this.getServerKeyBagPath(), Buffer.from(await keyBag.save()));
+    }
+    bytesToBase64(bytes) {
+        return Buffer.from(bytes).toString("base64");
+    }
+    mergeUniqueKeys(keys) {
+        const seen = new Set();
+        const unique = [];
+        for (const key of keys) {
+            const signature = this.bytesToBase64(key);
+            if (seen.has(signature)) {
+                continue;
+            }
+            seen.add(signature);
+            unique.push(key);
+        }
+        return unique;
+    }
+    async computePublicInfosFingerprint(key) {
+        const digest = await this.cryptoAdapter.getSubtle().digest("SHA-256", key);
+        return Array.from(new Uint8Array(digest).slice(0, 8))
+            .map((byte) => byte.toString(16).padStart(2, "0"))
+            .join(":");
+    }
+    async decryptEncryptedPublicInfosKey(base64Payload) {
+        if (!this.serverIdentity) {
+            throw new Error("Server identity not initialized; cannot decrypt encrypted $publicinfos payload");
+        }
+        if (!this.serverPassword) {
+            throw new Error("Server password not configured; cannot decrypt encrypted $publicinfos payload");
+        }
+        const privateKeyBuffer = await (0, privateKeyEncryption_1.decryptPrivateKey)(this.cryptoAdapter, this.serverIdentity.userEncryptionKeyPair.privateKey, this.serverPassword, "encryption");
+        const privateKey = await this.cryptoAdapter.getSubtle().importKey("pkcs8", privateKeyBuffer, {
+            name: "RSA-OAEP",
+            hash: "SHA-256",
+        }, false, ["decrypt"]);
+        const decrypted = await new RSAEncryption_1.RSAEncryption(this.cryptoAdapter).decrypt(new Uint8Array(Buffer.from(base64Payload, "base64")), privateKey);
+        return new Uint8Array(decrypted);
+    }
+    async resolveIncomingPublicInfosKey(request) {
+        if (request.encryptedPublicInfosKey) {
+            return this.decryptEncryptedPublicInfosKey(request.encryptedPublicInfosKey);
+        }
+        if (request.publicInfosKey) {
+            return new Uint8Array(Buffer.from(request.publicInfosKey, "base64"));
+        }
+        throw new Error("Tenant registration requires encryptedPublicInfosKey or publicInfosKey");
+    }
+    async getStoredPublicInfosKeys(tenantId) {
+        const keys = [];
+        if (this.serverIdentity && this.serverPassword && (0, fs_1.existsSync)(this.getServerKeyBagPath())) {
+            const keyBag = await this.loadServerKeyBag();
+            keys.push(...await keyBag.getAllKeys("doc", tenantId, types_1.PUBLIC_INFOS_KEY_ID));
+        }
+        return this.mergeUniqueKeys(keys);
+    }
+    async persistTenantPublicInfosKey(tenantId, key) {
+        const keyBag = await this.loadServerKeyBag();
+        const existingKeys = await keyBag.getAllKeys("doc", tenantId, types_1.PUBLIC_INFOS_KEY_ID);
+        const incomingSignature = this.bytesToBase64(key);
+        const alreadyStored = existingKeys.some((entry) => this.bytesToBase64(entry) === incomingSignature);
+        if (!alreadyStored) {
+            await keyBag.set("doc", tenantId, types_1.PUBLIC_INFOS_KEY_ID, key, Date.now());
+            await this.saveServerKeyBag(keyBag);
+        }
+    }
+    async listTenantPublicInfosFingerprints(tenantId) {
+        const normalizedId = tenantId.toLowerCase();
+        const configPath = (0, path_1.join)(this.dataDir, normalizedId, "config.json");
+        if (!(0, fs_1.existsSync)(configPath)) {
+            throw new Error(`Tenant ${normalizedId} not found`);
+        }
+        const fingerprints = await Promise.all((await this.getStoredPublicInfosKeys(normalizedId)).map((key) => this.computePublicInfosFingerprint(key)));
+        return [...new Set(fingerprints)].sort();
+    }
+    // =======================================================================
+    // Tenant management
+    // =======================================================================
+    async registerTenant(request) {
+        const tenantId = request.tenantId.toLowerCase();
+        const tenantDir = (0, path_1.join)(this.dataDir, tenantId);
+        const configPath = (0, path_1.join)(tenantDir, "config.json");
+        if (!this.serverIdentity || !this.serverPassword) {
+            throw new Error("Tenant registration requires an unlocked server identity to store $publicinfos keys");
+        }
+        const publicInfosKey = await this.resolveIncomingPublicInfosKey(request);
+        if ((0, fs_1.existsSync)(configPath)) {
+            const existingConfig = JSON.parse((0, fs_1.readFileSync)(configPath, "utf-8"));
+            const incomingSignature = this.bytesToBase64(publicInfosKey);
+            const existingKeys = await this.getStoredPublicInfosKeys(tenantId);
+            const hasMatch = existingKeys.some((key) => this.bytesToBase64(key) === incomingSignature);
+            if (hasMatch) {
+                console.log(`[TenantManager] Tenant ${tenantId} already registered with matching $publicinfos key`);
+                return {
+                    context: { tenantId, config: existingConfig },
+                    created: false,
+                };
+            }
+            throw new Error(`Tenant ${tenantId} already exists with different $publicinfos key`);
+        }
+        (0, fs_1.mkdirSync)(tenantDir, { recursive: true });
+        const config = {
+            adminUsername: request.adminUsername,
+            adminSigningPublicKey: request.adminSigningPublicKey,
+            adminEncryptionPublicKey: request.adminEncryptionPublicKey,
+            defaultStoreType: request.defaultStoreType || "file",
+            users: [],
+        };
+        try {
+            (0, fs_1.writeFileSync)(configPath, JSON.stringify(config, null, 2), "utf-8");
+            await this.persistTenantPublicInfosKey(tenantId, publicInfosKey);
+        }
+        catch (error) {
+            (0, fs_1.rmSync)(tenantDir, { recursive: true, force: true });
+            throw error;
+        }
+        console.log(`[TenantManager] Registered tenant: ${tenantId} ($publicinfos stored in server keybag)`);
+        return {
+            context: { tenantId, config },
+            created: true,
+        };
+    }
+    async getTenant(tenantId) {
+        const normalizedId = tenantId.toLowerCase();
+        const cached = this.loadedTenants.get(normalizedId);
+        if (cached) {
+            return cached;
+        }
+        const loaded = await this.loadTenant(normalizedId);
+        this.loadedTenants.set(normalizedId, loaded);
+        return loaded;
+    }
+    tenantExists(tenantId) {
+        const normalizedId = tenantId.toLowerCase();
+        const tenantDir = (0, path_1.join)(this.dataDir, normalizedId);
+        const configPath = (0, path_1.join)(tenantDir, "config.json");
+        return (0, fs_1.existsSync)(configPath);
+    }
+    listTenants() {
+        if (!(0, fs_1.existsSync)(this.dataDir)) {
+            return [];
+        }
+        const entries = (0, fs_1.readdirSync)(this.dataDir);
+        const tenants = [];
+        for (const entry of entries) {
+            const entryPath = (0, path_1.join)(this.dataDir, entry);
+            const configPath = (0, path_1.join)(entryPath, "config.json");
+            if ((0, fs_1.statSync)(entryPath).isDirectory() && (0, fs_1.existsSync)(configPath)) {
+                tenants.push(entry);
+            }
+        }
+        return tenants.sort();
+    }
+    /**
+     * Update operator-owned fields of an existing tenant configuration.
+     * Only the fields present in `updates` are overwritten.
+     */
+    updateTenantConfig(tenantId, updates) {
+        const normalizedId = tenantId.toLowerCase();
+        const configPath = (0, path_1.join)(this.dataDir, normalizedId, "config.json");
+        if (!(0, fs_1.existsSync)(configPath)) {
+            throw new Error(`Tenant ${normalizedId} not found`);
+        }
+        const config = JSON.parse((0, fs_1.readFileSync)(configPath, "utf-8"));
+        if (updates.defaultStoreType !== undefined) {
+            config.defaultStoreType = updates.defaultStoreType;
+        }
+        if (updates.remoteServers !== undefined) {
+            config.remoteServers = updates.remoteServers;
+        }
+        (0, fs_1.writeFileSync)(configPath, JSON.stringify(config, null, 2), "utf-8");
+        this.loadedTenants.delete(normalizedId);
+        console.log(`[TenantManager] Updated tenant config: ${normalizedId}`);
+    }
+    async removeTenant(tenantId) {
+        const normalizedId = tenantId.toLowerCase();
+        const tenantDir = (0, path_1.join)(this.dataDir, normalizedId);
+        if (!(0, fs_1.existsSync)(tenantDir)) {
+            throw new Error(`Tenant ${normalizedId} does not exist`);
+        }
+        this.loadedTenants.delete(normalizedId);
+        if (this.serverIdentity && this.serverPassword && (0, fs_1.existsSync)(this.getServerKeyBagPath())) {
+            const keyBag = await this.loadServerKeyBag();
+            await keyBag.deleteKey("doc", normalizedId, types_1.PUBLIC_INFOS_KEY_ID);
+            await this.saveServerKeyBag(keyBag);
+        }
+        (0, fs_1.rmSync)(tenantDir, { recursive: true, force: true });
+        console.log(`[TenantManager] Removed tenant: ${normalizedId}`);
+    }
+    // =======================================================================
+    // Per-tenant sync server management
+    // =======================================================================
+    getTenantSyncServers(tenantId) {
+        const normalizedId = tenantId.toLowerCase();
+        const configPath = (0, path_1.join)(this.dataDir, normalizedId, "config.json");
+        if (!(0, fs_1.existsSync)(configPath)) {
+            throw new Error(`Tenant ${normalizedId} not found`);
+        }
+        const config = JSON.parse((0, fs_1.readFileSync)(configPath, "utf-8"));
+        return (config.remoteServers || []);
+    }
+    addTenantSyncServer(tenantId, server) {
+        const normalizedId = tenantId.toLowerCase();
+        const configPath = (0, path_1.join)(this.dataDir, normalizedId, "config.json");
+        if (!(0, fs_1.existsSync)(configPath)) {
+            throw new Error(`Tenant ${normalizedId} not found`);
+        }
+        const config = JSON.parse((0, fs_1.readFileSync)(configPath, "utf-8"));
+        const servers = (config.remoteServers || []);
+        const idx = servers.findIndex((s) => s.name?.toLowerCase() === server.name.toLowerCase());
+        if (idx >= 0) {
+            servers[idx] = server;
+            console.log(`[TenantManager] Updated sync server "${server.name}" for tenant ${normalizedId}`);
+        }
+        else {
+            servers.push(server);
+            console.log(`[TenantManager] Added sync server "${server.name}" for tenant ${normalizedId}`);
+        }
+        config.remoteServers = servers;
+        (0, fs_1.writeFileSync)(configPath, JSON.stringify(config, null, 2), "utf-8");
+        this.loadedTenants.delete(normalizedId);
+    }
+    removeTenantSyncServer(tenantId, serverName) {
+        const normalizedId = tenantId.toLowerCase();
+        const configPath = (0, path_1.join)(this.dataDir, normalizedId, "config.json");
+        if (!(0, fs_1.existsSync)(configPath)) {
+            throw new Error(`Tenant ${normalizedId} not found`);
+        }
+        const config = JSON.parse((0, fs_1.readFileSync)(configPath, "utf-8"));
+        const servers = (config.remoteServers || []);
+        const idx = servers.findIndex((s) => s.name?.toLowerCase() === serverName.toLowerCase());
+        if (idx === -1)
+            return false;
+        servers.splice(idx, 1);
+        config.remoteServers = servers;
+        (0, fs_1.writeFileSync)(configPath, JSON.stringify(config, null, 2), "utf-8");
+        this.loadedTenants.delete(normalizedId);
+        console.log(`[TenantManager] Removed sync server "${serverName}" from tenant ${normalizedId}`);
+        return true;
+    }
+    // =======================================================================
+    // Server stores
+    // =======================================================================
+    async getServerStore(tenantId, dbId) {
+        const tenant = await this.getTenant(tenantId);
+        const cached = tenant.serverStores.get(dbId);
+        if (cached) {
+            return cached;
+        }
+        const localStore = tenant.storeFactory.getStore(dbId);
+        const serverStore = new ServerNetworkContentAddressedStore_1.ServerNetworkContentAddressedStore(localStore, tenant.directory, tenant.authService, this.cryptoAdapter);
+        tenant.serverStores.set(dbId, serverStore);
+        console.log(`[TenantManager] Created server store for ${tenantId}/${dbId}`);
+        return serverStore;
+    }
+    async getStore(tenantId, dbId) {
+        const tenant = await this.getTenant(tenantId);
+        return tenant.storeFactory.getStore(dbId);
+    }
+    async getAuthService(tenantId) {
+        const tenant = await this.getTenant(tenantId);
+        return tenant.authService;
+    }
+    getCryptoAdapter() {
+        return this.cryptoAdapter;
+    }
+    async reloadTenant(tenantId) {
+        const normalizedId = tenantId.toLowerCase();
+        this.loadedTenants.delete(normalizedId);
+        return this.getTenant(normalizedId);
+    }
+    clearCache() {
+        this.loadedTenants.clear();
+        console.log(`[TenantManager] Cleared tenant cache`);
+    }
+    // -----------------------------------------------------------------------
+    // Private helpers
+    // -----------------------------------------------------------------------
+    async loadTenant(tenantId) {
+        const tenantDir = (0, path_1.join)(this.dataDir, tenantId);
+        const configPath = (0, path_1.join)(tenantDir, "config.json");
+        if (!(0, fs_1.existsSync)(configPath)) {
+            throw new Error(`Tenant ${tenantId} not found: ${configPath}`);
+        }
+        const configJson = (0, fs_1.readFileSync)(configPath, "utf-8");
+        const config = JSON.parse(configJson);
+        const context = { tenantId, config };
+        const storeFactory = new StoreFactory_1.StoreFactory(tenantId, config, this.dataDir);
+        // Build the inner directory (real or config-based fallback)
+        let innerDirectory;
+        let mindooTenant;
+        const publicInfosKeys = await this.getStoredPublicInfosKeys(tenantId);
+        if (publicInfosKeys.length > 0 && this.serverIdentity && this.serverPassword) {
+            try {
+                const result = await this.createDirectoryTenant(tenantId, config, storeFactory, publicInfosKeys);
+                mindooTenant = result.tenant;
+                innerDirectory = await mindooTenant.openDirectory();
+                console.log(`[TenantManager] Loaded tenant ${tenantId} with real directory`);
+            }
+            catch (error) {
+                console.error(`[TenantManager] Failed to create real directory for ${tenantId}, falling back to config:`, error);
+                innerDirectory = new SimpleMindooDirectory(config);
+            }
+        }
+        else {
+            if (publicInfosKeys.length > 0 && !this.serverIdentity) {
+                console.log(`[TenantManager] Tenant ${tenantId} has $publicinfos keys but no server identity; using config-based directory`);
+            }
+            else {
+                console.log(`[TenantManager] No $publicinfos keys for ${tenantId}, using config-based directory`);
+            }
+            innerDirectory = new SimpleMindooDirectory(config);
+        }
+        // Wrap with CompositeMindooDirectory so trusted servers are also recognized
+        const directory = new CompositeMindooDirectory(innerDirectory, this.trustedServers, config.adminUsername
+            ? {
+                username: config.adminUsername,
+                signingPublicKey: config.adminSigningPublicKey,
+                encryptionPublicKey: config.adminEncryptionPublicKey,
+            }
+            : undefined);
+        const authService = new AuthenticationService_1.AuthenticationService(this.cryptoAdapter, directory, tenantId);
+        console.log(`[TenantManager] Loaded tenant: ${tenantId}`);
+        return {
+            context,
+            storeFactory,
+            authService,
+            directory,
+            mindooTenant,
+            serverStores: new Map(),
+        };
+    }
+    /**
+     * Create a real BaseMindooTenant for directory reading using the global
+     * server identity.
+     */
+    async createDirectoryTenant(tenantId, config, storeFactory, publicInfosKeys) {
+        const storeFactoryAdapter = new StoreFactoryAdapter(storeFactory);
+        const factory = new BaseMindooTenantFactory_1.BaseMindooTenantFactory(storeFactoryAdapter, this.cryptoAdapter);
+        const serverUser = this.serverIdentity;
+        // Create a KeyBag using the server user's encryption key
+        const keyBag = new KeyBag_1.KeyBag(serverUser.userEncryptionKeyPair.privateKey, this.serverPassword, this.cryptoAdapter);
+        for (const publicInfosKey of this.mergeUniqueKeys(publicInfosKeys)) {
+            await keyBag.set("doc", tenantId, types_1.PUBLIC_INFOS_KEY_ID, publicInfosKey);
+        }
+        // Collect trusted server signing keys for additionalTrustedKeys
+        const openOptions = {};
+        if (this.trustedServers.length > 0) {
+            const trustedKeys = new Map();
+            for (const server of this.trustedServers) {
+                trustedKeys.set(server.signingPublicKey, true);
+            }
+            openOptions.additionalTrustedKeys = trustedKeys;
+        }
+        const tenant = await factory.openTenant(tenantId, config.adminSigningPublicKey, config.adminEncryptionPublicKey, serverUser, this.serverPassword, keyBag, openOptions);
+        return { tenant };
+    }
+}
+exports.TenantManager = TenantManager;
+//# sourceMappingURL=TenantManager.js.map

package/dist/node/server/TenantManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantManager.js","sourceRoot":"","sources":["../../../src/node/server/TenantManager.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AAEH,2BAAuG;AACvG,+BAA4B;AAE5B,mEAAgE;AAChE,qGAAkG;AAClG,0HAAuH;AACvH,gFAA6E;AAC7E,mEAAgE;AAChE,iFAA2E;AAC3E,mDAAgD;AAWhD,4CAAuD;AAGvD,iDAA8C;AA4B9C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,mBAAmB;IACvB,YAAoB,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAClD,WAAW,CAAC,IAAY,EAAE,QAA2B;QACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACxD,CAAC;CACF;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,MAAM,qBAAqB;IAOzB,YAAY,MAAoB;QAJxB,UAAK,GAA4B,IAAI,GAAG,EAAE,CAAC;QAC3C,iBAAY,GAAgB,IAAI,GAAG,EAAE,CAAC;QAI5C,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;QAE1D,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QAItC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,SAAiB;QAC9C,IAAI,SAAS,KAAK,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACxD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,wBAAwB;IAK5B,YACU,KAC6D,EAC7D,cAA+B,EAC/B,sBAIP;QAPO,UAAK,GAAL,KAAK,CACwD;QAC7D,mBAAc,GAAd,cAAc,CAAiB;QAC/B,2BAAsB,GAAtB,sBAAsB,CAI7B;QAED,IAAI,CAAC,uBAAuB,GAAG,sBAAsB,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QAItC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAElD,0EAA0E;QAC1E,oEAAoE;QACpE,IACE,IAAI,CAAC,sBAAsB;YAC3B,IAAI,CAAC,uBAAuB;YAC5B,kBAAkB,KAAK,IAAI,CAAC,uBAAuB,EACnD,CAAC;YACD,OAAO;gBACL,gBAAgB,EAAE,IAAI,CAAC,sBAAsB,CAAC,gBAAgB;gBAC9D,mBAAmB,EAAE,IAAI,CAAC,sBAAsB,CAAC,mBAAmB;aACrE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,kBAAkB,EAAE,CAAC;gBACrD,OAAO;oBACL,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;iBAChD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAElD,IAAI,IAAI,CAAC,uBAAuB,IAAI,kBAAkB,KAAK,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACxF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,kBAAkB,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,SAAiB;QAC9C,IAAI,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC9F,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,WAAW;YAAE,OAAO,IAAI,CAAC;QAE7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAa,aAAa;IASxB,YAAY,OAAe,EAAE,cAAuB;QAL5C,kBAAa,GAA8B,IAAI,GAAG,EAAE,CAAC;QAErD,mBAAc,GAAyB,IAAI,CAAC;QAC5C,mBAAc,GAAoB,EAAE,CAAC;QAG3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAiB,EAAE,CAAC;QAE7C,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;YACzB,IAAA,cAAS,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,2CAA2C,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAC3D,IAAI,IAAA,eAAU,EAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,2CAA2C,IAAI,CAAC,cAAe,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAClG,CAAC;QAED,uBAAuB;QACvB,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAC1D,IAAI,IAAA,eAAU,EAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,cAAc,CAAC,MAAM,oBAAoB,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,kBAAkB;IAClB,0EAA0E;IAE1E,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,mBAAmB;QACjB,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ;YAClC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,SAAmB;YAC5E,mBAAmB,EAAE,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,SAAmB;SACnF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,4BAA4B;IAC5B,0EAA0E;IAE1E,kBAAkB;QAChB,OAAO,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,gBAAgB,CAAC,MAAqB;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAC1D,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,IAAI,kBAAkB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,yCAAyC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,mBAAmB,CAAC,IAAY;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CACnD,CAAC;QACF,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,qBAAqB;QAC3B,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QAC5D,IAAA,kBAAa,EAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC;IAEO,mBAAmB;QACzB,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,eAAM,CACvB,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,UAAU,EACpD,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,aAAa,CACnB,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAA,iBAAY,EAAC,UAAU,CAAC,CAAC;YACtC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC3C,IAAA,kBAAa,EAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,aAAa,CAAC,KAAiB;QACrC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEO,eAAe,CAAC,IAAkB;QACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,6BAA6B,CAAC,GAAe;QACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,GAAmB,CAAC,CAAC;QAC3F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aACjD,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAAC,aAAqB;QAChE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,gBAAgB,GAAG,MAAM,IAAA,wCAAiB,EAC9C,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,UAAiC,EAC3E,IAAI,CAAC,cAAc,EACnB,YAAY,CACb,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,SAAS,CAC/D,OAAO,EACP,gBAAgB,EAChB;YACE,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,SAAS;SAChB,EACD,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,IAAI,6BAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CACnE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,EACpD,UAAU,CACX,CAAC;QACF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,6BAA6B,CAAC,OAA8B;QACxE,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,8BAA8B,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,QAAgB;QACrD,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,EAAE,CAAC;YACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,2BAAmB,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,2BAA2B,CAAC,QAAgB,EAAE,GAAe;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,2BAAmB,CAAC,CAAC;QACnF,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,iBAAiB,CAAC,CAAC;QACpG,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,2BAAmB,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iCAAiC,CAAC,QAAgB;QACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAC1G,CAAC;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,0EAA0E;IAC1E,oBAAoB;IACpB,0EAA0E;IAE1E,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC;QAEzE,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,cAAc,GAAiB,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YACnF,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,iBAAiB,CAAC,CAAC;YAC3F,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,oDAAoD,CAAC,CAAC;gBACpG,OAAO;oBACL,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE;oBAC7C,OAAO,EAAE,KAAK;iBACf,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,iDAAiD,CAAC,CAAC;QACvF,CAAC;QAED,IAAA,cAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAiB;YAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;YACpD,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;YAC1D,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,MAAM;YACpD,KAAK,EAAE,EAAE;SACV,CAAC;QACF,IAAI,CAAC;YACH,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACpE,MAAM,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAA,WAAM,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO,CAAC,GAAG,CACT,sCAAsC,QAAQ,yCAAyC,CACxF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YAC7B,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAE7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAClD,OAAO,IAAA,eAAU,EAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,WAAW;QACT,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,IAAA,gBAAW,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAElD,IAAI,IAAA,aAAQ,EAAC,SAAS,CAAC,CAAC,WAAW,EAAE,IAAI,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;gBAChE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAChB,QAAgB,EAChB,OAA0E;QAE1E,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,MAAM,GAAiB,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAE3E,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC/C,CAAC;QAED,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,0CAA0C,YAAY,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEnD,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,iBAAiB,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,EAAE,CAAC;YACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,2BAAmB,CAAC,CAAC;YACjE,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QACD,IAAA,WAAM,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpD,OAAO,CAAC,GAAG,CAAC,mCAAmC,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,0EAA0E;IAC1E,oCAAoC;IACpC,0EAA0E;IAE1E,oBAAoB,CAAC,QAAgB;QACnC,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,MAAM,GAAiB,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAA8B,CAAC;IACnE,CAAC;IAED,mBAAmB,CAAC,QAAgB,EAAE,MAA+B;QACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,MAAM,GAAiB,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAA8B,CAAC;QAE1E,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAC3D,CAAC;QACF,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,wCAAwC,MAAM,CAAC,IAAI,gBAAgB,YAAY,EAAE,CAAC,CAAC;QACjG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,sCAAsC,MAAM,CAAC,IAAI,gBAAgB,YAAY,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/B,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAEpE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,sBAAsB,CAAC,QAAgB,EAAE,UAAkB;QACzD,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,MAAM,GAAiB,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAA8B,CAAC;QAE1E,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,CAC1D,CAAC;QACF,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAE7B,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/B,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAEpE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,wCAAwC,UAAU,iBAAiB,YAAY,EAAE,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,gBAAgB;IAChB,0EAA0E;IAE1E,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,IAAY;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,uEAAkC,CACxD,UAAU,EACV,MAAM,CAAC,SAA6C,EACpD,MAAM,CAAC,WAAW,EAClB,IAAI,CAAC,aAAa,CACnB,CAAC;QAEF,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,4CAA4C,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;QAE5E,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,IAAY;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAED,UAAU;QACR,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC;IAED,0EAA0E;IAC1E,kBAAkB;IAClB,0EAA0E;IAElE,KAAK,CAAC,UAAU,CAAC,QAAgB;QACvC,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAElD,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,eAAe,UAAU,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,UAAU,GAAG,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,GAAiB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,IAAI,2BAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAEtE,4DAA4D;QAC5D,IAAI,cACiE,CAAC;QACtE,IAAI,YAAsC,CAAC;QAE3C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC7E,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;gBACjG,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7B,cAAc,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE,CAAC;gBACpD,OAAO,CAAC,GAAG,CAAC,iCAAiC,QAAQ,sBAAsB,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,uDAAuD,QAAQ,2BAA2B,EAAE,KAAK,CAAC,CAAC;gBACjH,cAAc,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,6EAA6E,CAAC,CAAC;YAC/H,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,4CAA4C,QAAQ,gCAAgC,CAAC,CAAC;YACpG,CAAC;YACD,cAAc,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,4EAA4E;QAC5E,MAAM,SAAS,GAAG,IAAI,wBAAwB,CAC5C,cAAc,EACd,IAAI,CAAC,cAAc,EACnB,MAAM,CAAC,aAAa;YAClB,CAAC,CAAC;gBACE,QAAQ,EAAE,MAAM,CAAC,aAAa;gBAC9B,gBAAgB,EAAE,MAAM,CAAC,qBAAqB;gBAC9C,mBAAmB,EAAE,MAAM,CAAC,wBAAwB;aACrD;YACH,CAAC,CAAC,SAAS,CACsB,CAAC;QAEtC,MAAM,WAAW,GAAG,IAAI,6CAAqB,CAC3C,IAAI,CAAC,aAAa,EAClB,SAAS,EACT,QAAQ,CACT,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;QAE1D,OAAO;YACL,OAAO;YACP,YAAY;YACZ,WAAW;YACX,SAAS;YACT,YAAY;YACZ,YAAY,EAAE,IAAI,GAAG,EAAE;SACxB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,qBAAqB,CACjC,QAAgB,EAChB,MAAoB,EACpB,YAA0B,EAC1B,eAA6B;QAE7B,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,iDAAuB,CAAC,mBAAmB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAErF,MAAM,UAAU,GAAG,IAAI,CAAC,cAAe,CAAC;QAExC,yDAAyD;QACzD,MAAM,MAAM,GAAG,IAAI,eAAM,CACvB,UAAU,CAAC,qBAAqB,CAAC,UAAU,EAC3C,IAAI,CAAC,cAAe,EACpB,IAAI,CAAC,aAAa,CACnB,CAAC;QACF,KAAK,MAAM,cAAc,IAAI,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,2BAAmB,EAAE,cAAc,CAAC,CAAC;QACzE,CAAC;QAED,gEAAgE;QAChE,MAAM,WAAW,GAAsB,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;YAC/C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACzC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;YACD,WAAW,CAAC,qBAAqB,GAAG,WAAW,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CACrC,QAAQ,EACR,MAAM,CAAC,qBAAqB,EAC5B,MAAM,CAAC,wBAAwB,EAC/B,UAAU,EACV,IAAI,CAAC,cAAe,EACpB,MAAM,EACN,WAAW,CACZ,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF;AA3kBD,sCA2kBC"}