mindoodb 0.0.85 → 0.0.86

package/dist/cloudflare/MindooDatabaseObject.js

@@ -0,0 +1,614 @@
+"use strict";
+/**
+ * One Durable Object per (tenant, database), named `<tenantId>/<dbId>`.
+ *
+ * Each object runs the platform-neutral server core for its database: the
+ * docs and attachments stores live in the object's SQLite, and access control
+ * runs locally with the same code as on Node. For that it needs the tenant's
+ * directory, so every object other than `directory` keeps a read-only replica
+ * of the directory store and pulls new entries from the tenant's directory
+ * object before it serves a request (at most every few seconds, immediately
+ * when the directory announces a change, and once more when a request was
+ * denied — a grant may just have arrived).
+ *
+ * The `directory` object is also the tenant's hub: it answers the auth
+ * handshake (challenges are kept in memory), proxies RFC 3161 requests, holds
+ * the Server-Sent-Events streams and receives the change events of the other
+ * databases, and knows which databases the tenant has.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MindooDatabaseObject = void 0;
+const entryWireCodec_1 = require("../core/appendonlystores/network/entryWireCodec");
+const types_1 = require("../core/appendonlystores/types");
+const base64_1 = require("../core/utils/base64");
+const MindooDBServerCore_1 = require("../server/http/MindooDBServerCore");
+const TenantManager_1 = require("../server/TenantManager");
+const CapabilityMatcher_1 = require("../server/CapabilityMatcher");
+const SystemAdminAuth_1 = require("../server/SystemAdminAuth");
+const DeviceDiscoveryService_1 = require("../server/DeviceDiscoveryService");
+const SyncEventBus_1 = require("../server/SyncEventBus");
+const rateLimits_1 = require("../server/rateLimits");
+const types_2 = require("../server/http/types");
+const PeerAuthService_1 = require("../server/peer/PeerAuthService");
+const purgedDocumentGuard_1 = require("../core/appendonlystores/purgedDocumentGuard");
+const StoreRpcServer_1 = require("../core/appendonlystores/rpc/StoreRpcServer");
+const storeRpc_1 = require("./storeRpc");
+const DurableObjectSql_1 = require("./DurableObjectSql");
+const WorkersCryptoAdapter_1 = require("./WorkersCryptoAdapter");
+const http_1 = require("./http");
+const host_1 = require("./host");
+const DIRECTORY_DB_ID = "directory";
+/** How long tenant config and keys from the server object are trusted. */
+const TENANT_STATE_TTL_MS = 60000;
+/** How often a database object asks the directory for new entries on its own. */
+const DIRECTORY_POLL_INTERVAL_MS = 2000;
+const DIRECTORY_PAGE_SIZE = 200;
+const REPLICA_CURSOR_KEY = "directory-replica-cursor.json";
+const DATABASES_KEY = "databases.json";
+/** Sync routes whose request or response carries entry payloads. */
+const PAYLOAD_ROUTES = new Set(["getEntries", "getEntriesBinary", "putEntries", "putEntriesBinary"]);
+const TRUSTED_SERVERS_KEY = "trusted-servers.json";
+class MindooDatabaseObject {
+    withPayloadSlot(work) {
+        const run = this.payloadQueue.then(work, work);
+        this.payloadQueue = run.catch(() => undefined);
+        return run;
+    }
+    constructor(ctx, env) {
+        this.ctx = ctx;
+        this.env = env;
+        this.cryptoAdapter = new WorkersCryptoAdapter_1.WorkersCryptoAdapter();
+        this.stores = new Map();
+        this.tenantId = null;
+        this.dbId = null;
+        this.tenantState = null;
+        this.tenantStateLoad = null;
+        this.tenantManager = null;
+        this.core = null;
+        /** Change events of the whole tenant; only used in the directory object. */
+        this.eventBus = new SyncEventBus_1.SyncEventBus();
+        this.replicaCheckedAt = 0;
+        this.replicaRefresh = null;
+        /** Payload buffers of store RPC exchanges with the server object. */
+        this.rpcBytes = new storeRpc_1.StoreRpcBytes();
+        /**
+         * Requests that carry entry payloads run one at a time: a batch of
+         * attachment chunks is up to ~25 MB plus its encrypted copies, and the
+         * isolate has 128 MB. Metadata requests are not queued.
+         */
+        this.payloadQueue = Promise.resolve();
+        this.settings = (0, host_1.createHostSettings)(env);
+        this.openStorage();
+    }
+    openStorage() {
+        this.dataStore = new DurableObjectSql_1.DurableObjectServerDataStore(this.ctx.storage.sql);
+        (0, host_1.seedServerIdentity)(this.dataStore, this.env);
+        this.stores = new Map();
+    }
+    get isDirectory() {
+        return this.dbId === DIRECTORY_DB_ID;
+    }
+    async fetch(request) {
+        const tenantId = request.headers.get(host_1.OBJECT_HEADER.tenantId);
+        const dbId = request.headers.get(host_1.OBJECT_HEADER.dbId);
+        if (!tenantId || !dbId) {
+            return (0, http_1.jsonResponse)(400, { error: "Missing object address" });
+        }
+        if (this.tenantId === null) {
+            this.tenantId = tenantId;
+            this.dbId = dbId;
+        }
+        else if (this.tenantId !== tenantId || this.dbId !== dbId) {
+            return (0, http_1.jsonResponse)(400, { error: "Request addressed to another database object" });
+        }
+        try {
+            const url = new URL(request.url);
+            if (url.pathname.startsWith("/internal/") && (0, http_1.isInternalCall)(request)) {
+                return await this.internal(url.pathname, request);
+            }
+            return await this.public(request, url);
+        }
+        catch (error) {
+            console.error(`[MindooDatabaseObject ${tenantId}/${dbId}] Request error:`, error);
+            return (0, http_1.jsonResponse)(500, { error: "Internal server error" });
+        }
+    }
+    // ==================== Stores ====================
+    /** The object's own stores, and the directory (own or replica). */
+    store(dbId, storeKind) {
+        let prefix;
+        if (dbId === this.dbId) {
+            prefix = storeKind === types_1.StoreKind.docs ? "d_" : "a_";
+        }
+        else if (dbId === DIRECTORY_DB_ID) {
+            prefix = storeKind === types_1.StoreKind.docs ? "rd_" : "ra_";
+        }
+        else {
+            throw new Error(`Database ${dbId} is served by its own object`);
+        }
+        let store = this.stores.get(prefix);
+        if (!store) {
+            const bucket = this.env.MINDOODB_LARGE_ENTRIES;
+            store = (0, DurableObjectSql_1.createDurableObjectStore)(this.ctx.storage.sql, dbId, storeKind, prefix, bucket ? (0, DurableObjectSql_1.r2ContentStore)(bucket, `${this.r2Prefix()}${prefix}`) : undefined);
+            this.stores.set(prefix, store);
+        }
+        return store;
+    }
+    /** R2 keys of this object's large entries start with this. */
+    r2Prefix() {
+        return `${encodeURIComponent(this.tenantId)}/${encodeURIComponent(this.dbId)}/`;
+    }
+    // ==================== Tenant state ====================
+    async loadTenantState() {
+        const current = this.tenantState;
+        if (current && Date.now() - current.loadedAt < TENANT_STATE_TTL_MS) {
+            return current;
+        }
+        if (!this.tenantStateLoad) {
+            this.tenantStateLoad = this.fetchTenantState().finally(() => {
+                this.tenantStateLoad = null;
+            });
+        }
+        return this.tenantStateLoad;
+    }
+    async fetchTenantState() {
+        const tenantId = this.tenantId;
+        const response = await (0, host_1.serverObject)(this.env).fetch(`${http_1.INTERNAL_ORIGIN}/internal/tenants/${encodeURIComponent(tenantId)}`, { headers: (0, host_1.internalHeaders)() });
+        if (!response.ok) {
+            throw new Error(`Tenant state of ${tenantId} unavailable: HTTP ${response.status}`);
+        }
+        const body = (await response.json());
+        const state = {
+            exists: body.exists,
+            config: body.config,
+            publicInfosKeys: (body.publicInfosKeys ?? []).map((key) => (0, base64_1.base64ToBytes)(key)),
+            trustedServers: body.trustedServers ?? [],
+            clusterActive: body.clusterActive === true,
+            loadedAt: Date.now(),
+        };
+        const configKey = `${tenantId}/config.json`;
+        const configJson = state.config ? JSON.stringify(state.config, null, 2) : null;
+        const trustedJson = JSON.stringify(state.trustedServers, null, 2);
+        const changed = !this.tenantState ||
+            this.dataStore.readText(configKey) !== configJson ||
+            this.dataStore.readText(TRUSTED_SERVERS_KEY) !== trustedJson ||
+            this.tenantState.publicInfosKeys.map(String).join() !== state.publicInfosKeys.map(String).join();
+        if (configJson === null) {
+            this.dataStore.deleteTree(configKey);
+        }
+        else if (changed) {
+            this.dataStore.writeText(configKey, configJson);
+        }
+        // The tenant manager reads trusted servers when it is created: they count
+        // as directory members (peer pushes) and as trusted witnesses.
+        if (changed) {
+            this.dataStore.writeText(TRUSTED_SERVERS_KEY, trustedJson);
+        }
+        this.tenantState = state;
+        if (changed || !this.core) {
+            this.createCore();
+        }
+        if (state.exists && !this.isDirectory) {
+            await this.registerWithDirectory();
+        }
+        return state;
+    }
+    /** Tell the tenant's directory object that this database exists. */
+    async registerWithDirectory() {
+        if (this.dataStore.readText("registered") === "1")
+            return;
+        const response = await this.directoryObject().fetch(`${http_1.INTERNAL_ORIGIN}/internal/databases/register`, {
+            method: "POST",
+            headers: (0, host_1.internalHeaders)(this.tenantId, DIRECTORY_DB_ID),
+            body: JSON.stringify({ dbId: this.dbId }),
+        });
+        if (response.ok) {
+            this.dataStore.writeText("registered", "1");
+        }
+    }
+    createCore() {
+        const tenantId = this.tenantId;
+        const env = this.env;
+        this.tenantManager = new TenantManager_1.TenantManager({
+            dataStore: this.dataStore,
+            cryptoAdapter: this.cryptoAdapter,
+            serverPassword: env.MINDOODB_SERVER_PASSWORD,
+            storeProvider: {
+                createTenantStores: () => ({
+                    getStore: (dbId, storeKind) => this.store(dbId, storeKind),
+                }),
+                listDatabases: () => (this.isDirectory ? this.registeredDatabases() : [this.dbId]),
+            },
+            jwtSecretForTenant: (id) => (0, host_1.deriveTenantJwtSecret)(env, id),
+            publicInfosKeysResolver: async () => this.tenantState?.publicInfosKeys ?? [],
+        });
+        // Peers replicate through the ordinary sync routes with a peer token from
+        // the server object (same key derivation), as on the Node server.
+        const trustedServers = () => this.tenantState?.trustedServers ?? [];
+        let peerAuth = null;
+        const getPeerAuth = () => (peerAuth ?? (peerAuth = (0, host_1.derivePeerJwtSecret)(env).then((jwtSecret) => new PeerAuthService_1.PeerAuthService(this.cryptoAdapter, trustedServers, { jwtSecret }))));
+        this.tenantManager.setPeerAccessControl({
+            peerTokenResolver: async (token) => {
+                const auth = await getPeerAuth();
+                const payload = await auth.validateToken(token);
+                const trusted = payload ? auth.findTrustedServerByKey(payload.publicsignkey) : null;
+                return trusted
+                    ? {
+                        name: trusted.name,
+                        signingPublicKey: trusted.signingPublicKey,
+                        encryptionPublicKey: trusted.encryptionPublicKey,
+                    }
+                    : null;
+            },
+            trustedWitnessResolver: (receivedByPublicKey) => trustedServers().some((server) => server.signingPublicKey.replace(/\s+/g, "") === receivedByPublicKey.replace(/\s+/g, "")),
+        });
+        const config = { capabilities: {} };
+        const syncEvents = {
+            listenerCount: 1,
+            publish: (event) => {
+                if (this.isDirectory) {
+                    this.eventBus.publish(event);
+                }
+                else {
+                    this.ctx.waitUntil(this.forwardEvent(event));
+                }
+                if (this.tenantState?.clusterActive) {
+                    this.ctx.waitUntil(this.reportToCluster(event));
+                }
+            },
+        };
+        this.core = new MindooDBServerCore_1.MindooDBServerCore({
+            tenantManager: this.tenantManager,
+            // System administration runs in the server object; these are inert here.
+            systemAdminAuth: new SystemAdminAuth_1.SystemAdminAuthService(this.cryptoAdapter, config),
+            capabilityMatcher: new CapabilityMatcher_1.CapabilityMatcher(config),
+            deviceDiscovery: new DeviceDiscoveryService_1.DeviceDiscoveryService(this.tenantManager, this.cryptoAdapter),
+            configRepository: {
+                listBackups: () => [],
+                loadBackup: (file) => {
+                    throw new Error(`Config backup not found: ${file}`);
+                },
+                replace: () => null,
+            },
+            getServerConfig: () => config,
+            reloadConfig: () => undefined,
+            syncEvents,
+            tsaProviders: this.settings.tsaProviders,
+            jsonBodyLimit: this.settings.jsonBodyLimit,
+            allowInsecureSyncUrls: this.settings.allowInsecureSyncUrls,
+            runInBackground: (task) => this.ctx.waitUntil(task),
+            cluster: {
+                mirrorsForTenant: () => [],
+                syncReplicators: () => undefined,
+                resolvePeerName: async (token) => (await (await getPeerAuth()).validateToken(token))?.sub,
+            },
+            onDirectoryWrite: async (id) => {
+                this.notifyDatabasesOfDirectoryChange(id);
+            },
+        });
+    }
+    directoryObject() {
+        return (0, host_1.databaseObject)(this.env, this.tenantId, DIRECTORY_DB_ID);
+    }
+    /** Let the server object push an accepted write on to the peers. */
+    async reportToCluster(event) {
+        try {
+            await (0, host_1.serverObject)(this.env).fetch(`${http_1.INTERNAL_ORIGIN}/internal/cluster/change`, {
+                method: "POST",
+                headers: (0, host_1.internalHeaders)(),
+                body: JSON.stringify(event),
+            });
+        }
+        catch (error) {
+            console.warn("[MindooDatabaseObject] Could not report change to the cluster:", error);
+        }
+    }
+    async forwardEvent(event) {
+        try {
+            await this.directoryObject().fetch(`${http_1.INTERNAL_ORIGIN}/internal/events/publish`, {
+                method: "POST",
+                headers: (0, host_1.internalHeaders)(this.tenantId, DIRECTORY_DB_ID),
+                body: JSON.stringify(event),
+            });
+        }
+        catch (error) {
+            console.warn("[MindooDatabaseObject] Could not forward change event:", error);
+        }
+    }
+    // ==================== Directory replica ====================
+    registeredDatabases() {
+        const raw = this.dataStore.readText(DATABASES_KEY);
+        return raw ? JSON.parse(raw) : [];
+    }
+    /** Directory object: let every database pull the directory and run its purges. */
+    notifyDatabasesOfDirectoryChange(tenantId) {
+        for (const dbId of this.registeredDatabases()) {
+            this.ctx.waitUntil((0, host_1.databaseObject)(this.env, tenantId, dbId)
+                .fetch(`${http_1.INTERNAL_ORIGIN}/internal/directory/changed`, {
+                method: "POST",
+                headers: (0, host_1.internalHeaders)(tenantId, dbId),
+            })
+                .catch((error) => console.warn(`[MindooDatabaseObject] Notifying ${dbId} failed:`, error)));
+        }
+    }
+    /**
+     * Pull new directory entries into the replica. Returns whether anything
+     * arrived. Concurrent callers share one pull.
+     */
+    async refreshDirectoryReplica(force) {
+        if (this.isDirectory)
+            return false;
+        if (!force && Date.now() - this.replicaCheckedAt < DIRECTORY_POLL_INTERVAL_MS)
+            return false;
+        if (this.replicaRefresh)
+            return this.replicaRefresh;
+        this.replicaRefresh = this.pullDirectory().finally(() => {
+            this.replicaRefresh = null;
+        });
+        return this.replicaRefresh;
+    }
+    async pullDirectory() {
+        const replica = this.store(DIRECTORY_DB_ID, types_1.StoreKind.docs);
+        const storedCursor = this.dataStore.readText(REPLICA_CURSOR_KEY);
+        let cursor = storedCursor ? JSON.parse(storedCursor) : null;
+        let received = false;
+        for (;;) {
+            const response = await this.directoryObject().fetch(`${http_1.INTERNAL_ORIGIN}/internal/directory/changes`, {
+                method: "POST",
+                headers: (0, host_1.internalHeaders)(this.tenantId, DIRECTORY_DB_ID),
+                body: JSON.stringify({ cursor }),
+            });
+            if (!response.ok) {
+                throw new Error(`Directory pull failed: HTTP ${response.status}`);
+            }
+            const page = (await response.json());
+            if (page.entries.length > 0) {
+                const entries = page.entries.map((entry) => (0, entryWireCodec_1.deserializeStoreEntry)(entry));
+                await replica.putEntries(entries);
+                // Receipts of entries the replica already had arrive as metadata updates.
+                await replica.applyWitnessReceipts?.(entries);
+                received = true;
+            }
+            cursor = page.nextCursor ?? cursor;
+            if (cursor)
+                this.dataStore.writeText(REPLICA_CURSOR_KEY, JSON.stringify(cursor));
+            if (!page.hasMore)
+                break;
+        }
+        this.replicaCheckedAt = Date.now();
+        if (received && this.tenantManager) {
+            // Purge requests arrive through the directory (docs/accesscontrol.md §13).
+            this.ctx.waitUntil(this.tenantManager
+                .executePendingPurges(this.tenantId, { dbIds: new Set([this.dbId]) })
+                .catch((error) => console.error("[MindooDatabaseObject] executePendingPurges failed:", error)));
+        }
+        return received;
+    }
+    /** Directory object: one page of directory entries after `cursor`. */
+    async directoryChanges(request) {
+        const { cursor } = (await request.json());
+        const store = this.store(DIRECTORY_DB_ID, types_1.StoreKind.docs);
+        const page = await store.scanEntriesSince(cursor, DIRECTORY_PAGE_SIZE);
+        const entries = await store.getEntries(page.entries.map((entry) => entry.id));
+        return (0, http_1.jsonResponse)(200, {
+            entries: entries.map((entry) => (0, entryWireCodec_1.serializeStoreEntry)(entry)),
+            nextCursor: page.nextCursor,
+            hasMore: page.hasMore,
+        });
+    }
+    // ==================== Internal routes ====================
+    async internal(path, request) {
+        const bytes = await this.rpcBytes.handle(path, request);
+        if (bytes)
+            return bytes;
+        switch (path) {
+            case "/internal/store-rpc":
+                return this.withPayloadSlot(() => this.storeRpc(request));
+            case "/internal/databases":
+                if (!this.isDirectory)
+                    break;
+                return (0, http_1.jsonResponse)(200, { databases: [DIRECTORY_DB_ID, ...this.registeredDatabases()] });
+            case "/internal/directory/announce":
+                // Directory entries arrived by peer replication.
+                if (!this.isDirectory)
+                    break;
+                this.notifyDatabasesOfDirectoryChange(this.tenantId);
+                return (0, http_1.jsonResponse)(200, { ok: true });
+            case "/internal/wipe":
+                return this.wipe();
+            case "/internal/directory/changed":
+                await this.loadTenantState();
+                await this.refreshDirectoryReplica(true);
+                return (0, http_1.jsonResponse)(200, { ok: true });
+            case "/internal/directory/changes":
+                if (!this.isDirectory)
+                    break;
+                return this.directoryChanges(request);
+            case "/internal/events/publish":
+                if (!this.isDirectory)
+                    break;
+                this.eventBus.publish((await request.json()));
+                return (0, http_1.jsonResponse)(200, { ok: true });
+            case "/internal/databases/register": {
+                if (!this.isDirectory)
+                    break;
+                const { dbId } = (await request.json());
+                const databases = new Set(this.registeredDatabases());
+                databases.add(dbId);
+                this.dataStore.writeText(DATABASES_KEY, JSON.stringify([...databases].sort()));
+                return (0, http_1.jsonResponse)(200, { ok: true });
+            }
+        }
+        return (0, http_1.jsonResponse)(404, { error: "Not found" });
+    }
+    /**
+     * This object's stores for peer replication in the server object. Pulled
+     * entries of purged documents are refused, as on Node.
+     */
+    async storeRpc(request) {
+        const state = await this.loadTenantState();
+        if (!state.exists) {
+            return (0, http_1.jsonResponse)(404, { error: "Tenant not found" });
+        }
+        const tenantId = this.tenantId;
+        const dbId = this.dbId;
+        const server = new StoreRpcServer_1.StoreRpcServer({
+            bytes: this.rpcBytes,
+            createFactory: (scope) => ({
+                createStore: (requestedDbId) => {
+                    if (scope !== tenantId || requestedDbId !== dbId) {
+                        throw new Error(`Store RPC for ${scope}/${requestedDbId} reached ${tenantId}/${dbId}`);
+                    }
+                    const guard = (store) => dbId === DIRECTORY_DB_ID || !this.tenantManager
+                        ? store
+                        : (0, purgedDocumentGuard_1.guardStoreAgainstPurgedDocuments)(store, async () => this.tenantManager.getPurgedDocIds(tenantId, dbId));
+                    return {
+                        docStore: guard(this.store(dbId, types_1.StoreKind.docs)),
+                        attachmentStore: guard(this.store(dbId, types_1.StoreKind.attachments)),
+                    };
+                },
+            }),
+        });
+        try {
+            const result = await server.handle((await request.json()));
+            if (dbId !== DIRECTORY_DB_ID) {
+                await this.registerWithDirectory();
+            }
+            return (0, http_1.jsonResponse)(200, { result });
+        }
+        catch (error) {
+            return (0, http_1.jsonResponse)(500, { error: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    /** Delete everything of a removed tenant (the directory object first wipes the others). */
+    async wipe() {
+        if (this.isDirectory) {
+            for (const dbId of this.registeredDatabases()) {
+                const response = await (0, host_1.databaseObject)(this.env, this.tenantId, dbId).fetch(`${http_1.INTERNAL_ORIGIN}/internal/wipe`, { method: "POST", headers: (0, host_1.internalHeaders)(this.tenantId, dbId) });
+                if (!response.ok) {
+                    return (0, http_1.jsonResponse)(500, { error: `Wiping ${dbId} failed` });
+                }
+            }
+        }
+        if (this.env.MINDOODB_LARGE_ENTRIES) {
+            await (0, DurableObjectSql_1.deleteR2Prefix)(this.env.MINDOODB_LARGE_ENTRIES, this.r2Prefix());
+        }
+        await this.ctx.storage.deleteAll();
+        this.tenantState = null;
+        this.tenantManager = null;
+        this.core = null;
+        this.replicaCheckedAt = 0;
+        this.openStorage();
+        return (0, http_1.jsonResponse)(200, { ok: true });
+    }
+    // ==================== Public routes ====================
+    async public(request, url) {
+        const route = (0, http_1.matchRoute)(request.method, url.pathname);
+        if (route.kind !== "tenantAuth" &&
+            route.kind !== "timestamp" &&
+            route.kind !== "sync" &&
+            route.kind !== "tenantNotFound") {
+            return (0, http_1.jsonResponse)(404, { error: "Not found" });
+        }
+        await this.loadTenantState();
+        const core = this.core;
+        const parsed = await (0, http_1.toServerRequest)(request, {
+            params: { tenantId: route.tenantId },
+            jsonBodyLimitBytes: this.settings.jsonBodyLimitBytes,
+        });
+        if (parsed instanceof Response)
+            return parsed;
+        const req = parsed;
+        const rejection = core.tenantGuard(req);
+        if (rejection)
+            return (0, http_1.toResponse)(rejection);
+        const clientIp = req.clientIp ?? "unknown";
+        switch (route.kind) {
+            case "tenantNotFound":
+                return (0, http_1.jsonResponse)(404, { error: "Not found" });
+            case "tenantAuth": {
+                const limited = await (0, host_1.rateLimited)(this.env.MINDOODB_RATE_LIMIT_AUTH, (0, rateLimits_1.buildAuthRateLimitKey)("tenant", route.phase, req.tenantId, clientIp, req.body), "Too many authentication attempts, please try again later");
+                if (limited)
+                    return limited;
+                return (0, http_1.toResponse)(route.phase === "challenge" ? await core.challenge(req) : await core.authenticate(req));
+            }
+            case "timestamp": {
+                const denied = await core.timestampAuthGuard(req);
+                if (denied)
+                    return (0, http_1.toResponse)(denied);
+                const limited = await (0, host_1.rateLimited)(this.env.MINDOODB_RATE_LIMIT_TIMESTAMP, (0, rateLimits_1.buildTimestampRateLimitKey)("burst", req.tenantId, req.timestampPrincipal, clientIp), "Too many timestamp requests, please try again shortly");
+                if (limited)
+                    return limited;
+                return (0, http_1.toResponse)(await core.timestampRequest(req));
+            }
+            case "sync":
+                return this.sync(request, req, route.storeKind, route.name);
+        }
+    }
+    async sync(request, req, storeKind, name) {
+        const core = this.core;
+        await this.refreshDirectoryReplica(false);
+        await core.resolveSyncPrincipal(req);
+        const limited = await (0, host_1.rateLimited)(this.env.MINDOODB_RATE_LIMIT_SYNC, (0, rateLimits_1.buildSyncRateLimitKey)(req.tenantId, req.syncPrincipal, req.clientIp ?? "unknown"), "Too many sync requests, please try again later");
+        if (limited)
+            return limited;
+        if (name === "events") {
+            if (request.headers.get(http_1.INTERNAL_HEADER.eventsGatePassed) === "1") {
+                return this.openEventStream({ tenantId: req.tenantId, storeKind });
+            }
+            const response = await core.sync("events", req, storeKind);
+            return (0, types_2.isEventStreamResponse)(response)
+                ? this.openEventStream(response.events)
+                : (0, http_1.toResponse)(response);
+        }
+        const carriesPayload = PAYLOAD_ROUTES.has(name);
+        const run = () => core.sync(name, req, storeKind);
+        let response = carriesPayload ? await this.withPayloadSlot(run) : await run();
+        // A grant or a new device key may have reached the directory a moment
+        // ago: refresh the replica once and retry a denied request.
+        if (!this.isDirectory &&
+            (response.status === 401 || response.status === 403 || response.status === 404) &&
+            (await this.refreshDirectoryReplica(true))) {
+            response = carriesPayload ? await this.withPayloadSlot(run) : await run();
+        }
+        return (0, http_1.toResponse)(response);
+    }
+    /** Server-Sent-Events stream on the tenant's event bus (directory object only). */
+    openEventStream(subscription) {
+        const { readable, writable } = new TransformStream();
+        const writer = writable.getWriter();
+        const encoder = new TextEncoder();
+        let closed = false;
+        const cleanup = () => {
+            if (closed)
+                return;
+            closed = true;
+            clearInterval(heartbeat);
+            unsubscribe();
+            writer.close().catch(() => undefined);
+        };
+        const write = (frame) => {
+            if (closed)
+                return;
+            writer.write(encoder.encode(frame)).catch(cleanup);
+        };
+        write((0, MindooDBServerCore_1.formatSyncHelloEvent)());
+        const unsubscribe = this.eventBus.subscribe((event) => {
+            const frame = (0, MindooDBServerCore_1.formatSyncChangeEvent)(subscription, event);
+            if (frame)
+                write(frame);
+        });
+        const heartbeat = setInterval(() => write((0, MindooDBServerCore_1.formatSyncHeartbeat)(Date.now())), MindooDBServerCore_1.SYNC_EVENT_HEARTBEAT_MS);
+        console.log(`[MindooDatabaseObject] SSE subscriber connected tenant=${subscription.tenantId} storeKind=${subscription.storeKind} subscribers=${this.eventBus.listenerCount}`);
+        return new Response(readable, {
+            status: 200,
+            headers: {
+                "content-type": "text/event-stream",
+                "cache-control": "no-cache, no-transform",
+                "x-accel-buffering": "no",
+            },
+        });
+    }
+}
+exports.MindooDatabaseObject = MindooDatabaseObject;
+//# sourceMappingURL=MindooDatabaseObject.js.map

package/dist/cloudflare/MindooDatabaseObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MindooDatabaseObject.js","sourceRoot":"","sources":["../../src/cloudflare/MindooDatabaseObject.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAEH,oFAIyD;AACzD,0DAAiF;AAEjF,iDAAqD;AAErD,0EAM2C;AAC3C,2DAAwD;AACxD,mEAAgE;AAChE,+DAAmE;AACnE,6EAA0E;AAC1E,yDAA4E;AAC5E,qDAAgH;AAChH,gDAAoI;AAEpI,oEAAiE;AACjE,sFAAgG;AAChG,gFAA6E;AAE7E,yCAA2C;AAC3C,yDAK4B;AAC5B,iEAA8D;AAC9D,iCAQgB;AAChB,iCAWgB;AAGhB,MAAM,eAAe,GAAG,WAAW,CAAC;AACpC,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,KAAM,CAAC;AACnC,iFAAiF;AACjF,MAAM,0BAA0B,GAAG,IAAK,CAAC;AACzC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAC3D,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,oEAAoE;AACpE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;AACrG,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAanD,MAAa,oBAAoB;IAwBvB,eAAe,CAAI,IAAsB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,YACmB,GAAuB,EACvB,GAAwB;QADxB,QAAG,GAAH,GAAG,CAAoB;QACvB,QAAG,GAAH,GAAG,CAAqB;QA9B1B,kBAAa,GAAG,IAAI,2CAAoB,EAAE,CAAC;QAEpD,WAAM,GAAG,IAAI,GAAG,EAAuC,CAAC;QACxD,aAAQ,GAAkB,IAAI,CAAC;QAC/B,SAAI,GAAkB,IAAI,CAAC;QAC3B,gBAAW,GAAuB,IAAI,CAAC;QACvC,oBAAe,GAAgC,IAAI,CAAC;QACpD,kBAAa,GAAyB,IAAI,CAAC;QAC3C,SAAI,GAA8B,IAAI,CAAC;QAC/C,4EAA4E;QAC3D,aAAQ,GAAG,IAAI,2BAAY,EAAE,CAAC;QACvC,qBAAgB,GAAG,CAAC,CAAC;QACrB,mBAAc,GAA4B,IAAI,CAAC;QACvD,qEAAqE;QACpD,aAAQ,GAAG,IAAI,wBAAa,EAAE,CAAC;QAChD;;;;WAIG;QACK,iBAAY,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;QAYzD,IAAI,CAAC,QAAQ,GAAG,IAAA,yBAAkB,EAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,SAAS,GAAG,IAAI,+CAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxE,IAAA,yBAAkB,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED,IAAY,WAAW;QACrB,OAAO,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAa,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAa,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC5D,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,IAAA,qBAAc,EAAC,OAAO,CAAC,EAAE,CAAC;gBACrE,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,yBAAyB,QAAQ,IAAI,IAAI,kBAAkB,EAAE,KAAK,CAAC,CAAC;YAClF,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,mDAAmD;IAEnD,mEAAmE;IAC3D,KAAK,CAAC,IAAY,EAAE,SAAoB;QAC9C,IAAI,MAAc,CAAC;QACnB,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,SAAS,KAAK,iBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;aAAM,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YACpC,MAAM,GAAG,SAAS,KAAK,iBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,8BAA8B,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC;YAC/C,KAAK,GAAG,IAAA,2CAAwB,EAC9B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EACpB,IAAI,EACJ,SAAS,EACT,MAAM,EACN,MAAM,CAAC,CAAC,CAAC,IAAA,iCAAc,EAAC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAC3E,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8DAA8D;IACtD,QAAQ;QACd,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAS,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAK,CAAC,GAAG,CAAC;IACpF,CAAC;IAED,yDAAyD;IAEjD,KAAK,CAAC,eAAe;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QACjC,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAAC;YACnE,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC1D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAS,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CACjD,GAAG,sBAAe,qBAAqB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EACrE,EAAE,OAAO,EAAE,IAAA,sBAAe,GAAE,EAAE,CAC/B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAMlC,CAAC;QACF,MAAM,KAAK,GAAgB;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,eAAe,EAAE,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,sBAAa,EAAC,GAAG,CAAC,CAAC;YAC9E,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;YACzC,aAAa,EAAE,IAAI,CAAC,aAAa,KAAK,IAAI;YAC1C,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QAEF,MAAM,SAAS,GAAG,GAAG,QAAQ,cAAc,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GACX,CAAC,IAAI,CAAC,WAAW;YACjB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,UAAU;YACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,WAAW;YAC5D,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACnG,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;QACD,0EAA0E;QAC1E,+DAA+D;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oEAAoE;IAC5D,KAAK,CAAC,qBAAqB;QACjC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,GAAG;YAAE,OAAO;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,sBAAe,8BAA8B,EAAE;YACpG,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAA,sBAAe,EAAC,IAAI,CAAC,QAAS,EAAE,eAAe,CAAC;YACzD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAS,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,IAAI,6BAAa,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,cAAc,EAAE,GAAG,CAAC,wBAAwB;YAC5C,aAAa,EAAE;gBACb,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;oBACzB,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC;iBAC3D,CAAC;gBACF,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAK,CAAC,CAAC;aACpF;YACD,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAA,4BAAqB,EAAC,GAAG,EAAE,EAAE,CAAC;YAC1D,uBAAuB,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,IAAI,EAAE;SAC7E,CAAC,CAAC;QAEH,0EAA0E;QAC1E,kEAAkE;QAClE,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,IAAI,EAAE,CAAC;QACpE,IAAI,QAAQ,GAAoC,IAAI,CAAC;QACrD,MAAM,WAAW,GAAG,GAAG,EAAE,CACvB,CAAC,QAAQ,KAAR,QAAQ,GAAK,IAAA,0BAAmB,EAAC,GAAG,CAAC,CAAC,IAAI,CACzC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,iCAAe,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,CAAC,CACtF,EAAC,CAAC;QACL,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC;YACtC,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACjC,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACpF,OAAO,OAAO;oBACZ,CAAC,CAAC;wBACE,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;wBAC1C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;qBACjD;oBACH,CAAC,CAAC,IAAI,CAAC;YACX,CAAC;YACD,sBAAsB,EAAE,CAAC,mBAAmB,EAAE,EAAE,CAC9C,cAAc,EAAE,CAAC,IAAI,CACnB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CACpG;SACJ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACpC,MAAM,UAAU,GAAuB;YACrC,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC;oBACpC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;SACF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,IAAI,uCAAkB,CAAC;YACjC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,yEAAyE;YACzE,eAAe,EAAE,IAAI,wCAAsB,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;YACvE,iBAAiB,EAAE,IAAI,qCAAiB,CAAC,MAAM,CAAC;YAChD,eAAe,EAAE,IAAI,+CAAsB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC;YACnF,gBAAgB,EAAE;gBAChB,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE;gBACrB,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;oBACnB,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;aACpB;YACD,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM;YAC7B,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS;YAC7B,UAAU;YACV,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;YACxC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;YAC1C,qBAAqB,EAAE,IAAI,CAAC,QAAQ,CAAC,qBAAqB;YAC1D,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;YACnD,OAAO,EAAE;gBACP,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE;gBAC1B,eAAe,EAAE,GAAG,EAAE,CAAC,SAAS;gBAChC,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG;aAC1F;YACD,gBAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC7B,IAAI,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;YAC5C,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAEO,eAAe;QACrB,OAAO,IAAA,qBAAc,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAS,EAAE,eAAe,CAAC,CAAC;IACnE,CAAC;IAED,oEAAoE;IAC5D,KAAK,CAAC,eAAe,CAAC,KAAsB;QAClD,IAAI,CAAC;YACH,MAAM,IAAA,mBAAY,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,sBAAe,0BAA0B,EAAE;gBAC/E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAA,sBAAe,GAAE;gBAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,gEAAgE,EAAE,KAAK,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAsB;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,sBAAe,0BAA0B,EAAE;gBAC/E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAA,sBAAe,EAAC,IAAI,CAAC,QAAS,EAAE,eAAe,CAAC;gBACzD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,wDAAwD,EAAE,KAAK,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,8DAA8D;IAEtD,mBAAmB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC;IAED,kFAAkF;IAC1E,gCAAgC,CAAC,QAAgB;QACvD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC,SAAS,CAChB,IAAA,qBAAc,EAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC;iBACrC,KAAK,CAAC,GAAG,sBAAe,6BAA6B,EAAE;gBACtD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAA,sBAAe,EAAC,QAAQ,EAAE,IAAI,CAAC;aACzC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,IAAI,UAAU,EAAE,KAAK,CAAC,CAAC,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,uBAAuB,CAAC,KAAc;QAClD,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,GAAG,0BAA0B;YAAE,OAAO,KAAK,CAAC;QAC5F,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC;QACpD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACtD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACjE,IAAI,MAAM,GAA2B,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpF,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,SAAS,CAAC;YACR,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,sBAAe,6BAA6B,EAAE;gBACnG,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAA,sBAAe,EAAC,IAAI,CAAC,QAAS,EAAE,eAAe,CAAC;gBACzD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;aACjC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;YACF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,sCAAqB,EAAC,KAAK,CAAC,CAAC,CAAC;gBAC1E,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAClC,0EAA0E;gBAC1E,MAAM,OAAO,CAAC,oBAAoB,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC9C,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;YACnC,IAAI,MAAM;gBAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,MAAM;QAC3B,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,IAAI,QAAQ,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,2EAA2E;YAC3E,IAAI,CAAC,GAAG,CAAC,SAAS,CAChB,IAAI,CAAC,aAAa;iBACf,oBAAoB,CAAC,IAAI,CAAC,QAAS,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAK,CAAC,CAAC,EAAE,CAAC;iBACtE,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAC,CACjG,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,sEAAsE;IAC9D,KAAK,CAAC,gBAAgB,CAAC,OAAgB;QAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAuC,CAAC;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAS,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,gBAAiB,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE;YACvB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,oCAAmB,EAAC,KAAK,CAAC,CAAC;YAC3D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED,4DAA4D;IAEpD,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,OAAgB;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,KAAK,qBAAqB;gBACxB,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,MAAM;gBAC7B,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5F,KAAK,8BAA8B;gBACjC,iDAAiD;gBACjD,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,MAAM;gBAC7B,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,QAAS,CAAC,CAAC;gBACtD,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,6BAA6B;gBAChC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBACzC,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,KAAK,6BAA6B;gBAChC,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,MAAM;gBAC7B,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACxC,KAAK,0BAA0B;gBAC7B,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,MAAM;gBAC7B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAoB,CAAC,CAAC;gBACjE,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,KAAK,8BAA8B,CAAC,CAAC,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,MAAM;gBAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAqB,CAAC;gBAC5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;gBACtD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/E,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QACD,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,QAAQ,CAAC,OAAgB;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAS,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAK,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,+BAAc,CAAC;YAChC,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACzB,WAAW,EAAE,CAAC,aAAa,EAAE,EAAE;oBAC7B,IAAI,KAAK,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;wBACjD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI,aAAa,YAAY,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;oBACzF,CAAC;oBACD,MAAM,KAAK,GAAG,CAAC,KAA4B,EAAE,EAAE,CAC7C,IAAI,KAAK,eAAe,IAAI,CAAC,IAAI,CAAC,aAAa;wBAC7C,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,IAAA,sDAAgC,EAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CACjD,IAAI,CAAC,aAAc,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CACpD,CAAC;oBACR,OAAO;wBACL,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAS,CAAC,IAAI,CAAC,CAAC;wBACjD,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAS,CAAC,WAAW,CAAC,CAAC;qBAChE,CAAC;gBACJ,CAAC;aACF,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAoB,CAAC,CAAC;YAC9E,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACrC,CAAC;YACD,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,2FAA2F;IACnF,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAc,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CACzE,GAAG,sBAAe,gBAAgB,EAClC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAA,sBAAe,EAAC,IAAI,CAAC,QAAS,EAAE,IAAI,CAAC,EAAE,CACnE,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;YACpC,MAAM,IAAA,iCAAc,EAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,0DAA0D;IAElD,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,GAAQ;QAC7C,MAAM,KAAK,GAAG,IAAA,iBAAU,EAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IACE,KAAK,CAAC,IAAI,KAAK,YAAY;YAC3B,KAAK,CAAC,IAAI,KAAK,WAAW;YAC1B,KAAK,CAAC,IAAI,KAAK,MAAM;YACrB,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAC/B,CAAC;YACD,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAK,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAe,EAAC,OAAO,EAAE;YAC5C,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;YACpC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;SACrD,CAAC,CAAC;QACH,IAAI,MAAM,YAAY,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,CAAC;QAEnB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS;YAAE,OAAO,IAAA,iBAAU,EAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC;QAE3C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,gBAAgB;gBACnB,OAAO,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAEnD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAW,EAC/B,IAAI,CAAC,GAAG,CAAC,wBAAwB,EACjC,IAAA,kCAAqB,EAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,EAC9E,0DAA0D,CAC3D,CAAC;gBACF,IAAI,OAAO;oBAAE,OAAO,OAAO,CAAC;gBAC5B,OAAO,IAAA,iBAAU,EACf,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CACvF,CAAC;YACJ,CAAC;YAED,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBAClD,IAAI,MAAM;oBAAE,OAAO,IAAA,iBAAU,EAAC,MAAM,CAAC,CAAC;gBACtC,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAW,EAC/B,IAAI,CAAC,GAAG,CAAC,6BAA6B,EACtC,IAAA,uCAA0B,EAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC,EACnF,uDAAuD,CACxD,CAAC;gBACF,IAAI,OAAO;oBAAE,OAAO,OAAO,CAAC;gBAC5B,OAAO,IAAA,iBAAU,EAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC;YAED,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,OAAgB,EAChB,GAAkB,EAClB,SAAoB,EACpB,IAA+C;QAE/C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAK,CAAC;QACxB,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAW,EAC/B,IAAI,CAAC,GAAG,CAAC,wBAAwB,EACjC,IAAA,kCAAqB,EAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC,EACjF,gDAAgD,CACjD,CAAC;QACF,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAE5B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAe,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;gBAClE,OAAO,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC3D,OAAO,IAAA,6BAAqB,EAAC,QAAQ,CAAC;gBACpC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACvC,CAAC,CAAC,IAAA,iBAAU,EAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;QAC9E,sEAAsE;QACtE,4DAA4D;QAC5D,IACE,CAAC,IAAI,CAAC,WAAW;YACjB,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YAC/E,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,EAC1C,CAAC;YACD,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,IAAA,iBAAU,EAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,mFAAmF;IAC3E,eAAe,CAAC,YAAiC;QACvD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,eAAe,EAA0B,CAAC;QAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,WAAW,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE;YAC9B,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC,CAAC;QAEF,KAAK,CAAC,IAAA,yCAAoB,GAAE,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,KAAK,GAAG,IAAA,0CAAqB,EAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACzD,IAAI,KAAK;gBAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAA,wCAAmB,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,4CAAuB,CAAC,CAAC;QACrG,OAAO,CAAC,GAAG,CACT,0DAA0D,YAAY,CAAC,QAAQ,cAAc,YAAY,CAAC,SAAS,gBAAgB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CACjK,CAAC;QAEF,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE;YAC5B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,cAAc,EAAE,mBAAmB;gBACnC,eAAe,EAAE,wBAAwB;gBACzC,mBAAmB,EAAE,IAAI;aAC1B;SACF,CAAC,CAAC;IACL,CAAC;CACF;AA/nBD,oDA+nBC"}