@calltelemetry/cli 0.15.1 → 1.1.0

package/dist/lib/appliance-api.js

@@ -0,0 +1,492 @@
+/**
+ * Appliance REST API client.
+ *
+ * Uses the appliance's own OpenAPI document (`/api/openapi`) to stay aligned
+ * with the installed release.
+ *
+ * Human invocations authenticate interactively as an appliance admin and use
+ * the short-lived session JWT returned by `POST /api/session`. The JWT lives
+ * only in this process; nothing is written to disk. Automation can supply
+ * `CT_API_TOKEN` (machine API key) or `CT_API_EMAIL` + `CT_API_PASSWORD`
+ * instead of prompting.
+ */
+import { request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import { createWriteStream, readFileSync } from 'node:fs';
+import { randomBytes } from 'node:crypto';
+import { password as promptPassword, text as promptText } from '../utils/prompt.js';
+export const DEFAULT_API_URL = 'https://127.0.0.1';
+export const DEFAULT_TIMEOUT_MS = 30_000;
+export class ApplianceApiError extends Error {
+    status;
+    code;
+    method;
+    url;
+    body;
+    constructor(message, opts = {}) {
+        super(message);
+        this.name = 'ApplianceApiError';
+        this.status = opts.status;
+        this.code = opts.code;
+        this.method = opts.method;
+        this.url = opts.url;
+        this.body = opts.body;
+    }
+}
+export function normalizeBaseUrl(value) {
+    const raw = (value ?? process.env.CT_API_URL ?? DEFAULT_API_URL).trim();
+    if (!raw)
+        return DEFAULT_API_URL;
+    const withProtocol = /^[a-z][a-z0-9+.-]*:\/\//i.test(raw) ? raw : `https://${raw}`;
+    return withProtocol.replace(/\/+$/, '');
+}
+export function isLocalBaseUrl(baseUrl) {
+    try {
+        const host = new URL(baseUrl).hostname.toLowerCase();
+        return host === '127.0.0.1' || host === 'localhost' || host === '::1' || host === '[::1]';
+    }
+    catch {
+        return false;
+    }
+}
+export function authHeaderValue(token) {
+    const trimmed = token.trim();
+    if (/^Bearer\s+/i.test(trimmed))
+        return trimmed;
+    // JWTs are accepted with the standard Bearer prefix. Appliance API keys are
+    // sent raw, matching the api_key_auth security scheme.
+    if (trimmed.startsWith('eyJ'))
+        return `Bearer ${trimmed}`;
+    return trimmed;
+}
+export function parsePositiveInt(value, label) {
+    if (value === undefined || value === '')
+        return undefined;
+    const parsed = typeof value === 'number' ? value : Number(value);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new ApplianceApiError(`${label} must be a positive integer`);
+    }
+    return parsed;
+}
+export async function resolveOrgId(explicit) {
+    if (explicit !== undefined)
+        return explicit;
+    const envValue = process.env.CT_ORG_ID;
+    if (envValue) {
+        return parsePositiveInt(envValue, 'CT_ORG_ID');
+    }
+    // A standard appliance has one organization with ID 1. Multi-org
+    // deployments should pass --org or set CT_ORG_ID.
+    return 1;
+}
+export async function resolveApiToken(baseUrl, explicit, requireAuth = true, login, loginOptions = {}) {
+    const envToken = process.env.CT_API_TOKEN || process.env.CT_API_KEY;
+    const supplied = explicit?.trim() || envToken?.trim();
+    if (supplied) {
+        const token = supplied.replace(/^Bearer\s+/i, '').trim();
+        if (!token)
+            throw new ApplianceApiError('API token is empty');
+        return token;
+    }
+    // A full_admin session login uses a short-lived JWT and bypasses the REST
+    // API license check that applies to machine API keys.
+    if (login) {
+        // Public spec discovery should not fail on stale optional credentials;
+        // callers that need auth retry with requireAuth enabled.
+        if (!requireAuth)
+            return undefined;
+        return loginForToken(baseUrl, login, loginOptions);
+    }
+    // Spec discovery should be usable without resolving credentials. On current
+    // releases `/api/openapi` is public; protected deployments can still pass a token.
+    if (!requireAuth)
+        return undefined;
+    throw new ApplianceApiError('No appliance credentials supplied.\n' +
+        'Run interactively to log in as a full_admin user, or set CT_API_EMAIL + ' +
+        'CT_API_PASSWORD for automation. CT_API_TOKEN (machine API key) also works ' +
+        'on REST-capable licenses.', { code: 'AUTH_REQUIRED' });
+}
+function extractServerMessage(body, status) {
+    const text = body.toString('utf-8').trim();
+    if (!text)
+        return `HTTP ${status}`;
+    try {
+        const parsed = JSON.parse(text);
+        if (typeof parsed === 'object' && parsed !== null) {
+            const record = parsed;
+            const message = record.message ?? record.error ?? record.detail;
+            if (typeof message === 'string' && message.trim())
+                return message;
+            if (record.errors !== undefined)
+                return JSON.stringify(record.errors);
+        }
+    }
+    catch {
+        // fall through to plain text
+    }
+    return text.length > 600 ? `${text.slice(0, 600)}…` : text;
+}
+function friendlyTransportError(err, method, url) {
+    const code = err.code ?? '';
+    let detail = err.message;
+    switch (code) {
+        case 'ECONNREFUSED':
+            detail = 'connection refused — is the appliance web service running?';
+            break;
+        case 'ENOTFOUND':
+            detail = 'host not found — check the API URL';
+            break;
+        case 'ETIMEDOUT':
+            detail = 'request timed out';
+            break;
+        case 'ECONNRESET':
+            detail = 'connection reset by the appliance';
+            break;
+        case 'CERT_HAS_EXPIRED':
+        case 'DEPTH_ZERO_SELF_SIGNED_CERT':
+        case 'SELF_SIGNED_CERT_IN_CHAIN':
+            detail = `${err.message} (use --verify-tls=false or the default local mode)`;
+            break;
+    }
+    return new ApplianceApiError(`Cannot reach appliance API: ${detail}`, {
+        code: code || 'TRANSPORT',
+        method,
+        url,
+    });
+}
+export const nodeTransport = (options) => {
+    return new Promise((resolve, reject) => {
+        let parsed;
+        try {
+            parsed = new URL(options.url);
+        }
+        catch {
+            reject(new ApplianceApiError(`Invalid API URL: ${options.url}`));
+            return;
+        }
+        const isHttps = parsed.protocol === 'https:';
+        if (!isHttps && parsed.protocol !== 'http:') {
+            reject(new ApplianceApiError(`Unsupported API URL protocol: ${parsed.protocol}`));
+            return;
+        }
+        const requestFn = isHttps ? httpsRequest : httpRequest;
+        const req = requestFn(parsed, {
+            method: options.method,
+            headers: options.headers,
+            rejectUnauthorized: options.rejectUnauthorized,
+        }, (res) => {
+            const status = res.statusCode ?? 0;
+            const headers = res.headers;
+            if (options.outputPath) {
+                const out = createWriteStream(options.outputPath);
+                out.on('error', reject);
+                res.on('error', reject);
+                res.pipe(out);
+                out.on('finish', () => resolve({ status, headers, body: Buffer.alloc(0) }));
+                return;
+            }
+            const chunks = [];
+            res.on('data', (chunk) => chunks.push(chunk));
+            res.on('end', () => resolve({ status, headers, body: Buffer.concat(chunks) }));
+            res.on('error', reject);
+        });
+        req.on('error', reject);
+        req.setTimeout(options.timeoutMs, () => {
+            req.destroy(new Error(`Request timed out after ${options.timeoutMs}ms`));
+        });
+        if (options.body)
+            req.write(options.body);
+        req.end();
+    });
+};
+export function buildMultipartBody(fields, files = []) {
+    const boundary = `----ct${randomBytes(12).toString('hex')}`;
+    const chunks = [];
+    for (const [name, value] of Object.entries(fields)) {
+        if (value === undefined)
+            continue;
+        chunks.push(Buffer.from(`--${boundary}\r\n` +
+            `Content-Disposition: form-data; name="${name.replace(/"/g, '\\"')}"\r\n\r\n` +
+            `${value}\r\n`));
+    }
+    for (const file of files) {
+        chunks.push(Buffer.from(`--${boundary}\r\n` +
+            `Content-Disposition: form-data; name="${file.field.replace(/"/g, '\\"')}"; ` +
+            `filename="${file.filename.replace(/"/g, '\\"')}"\r\n` +
+            `Content-Type: ${file.contentType}\r\n\r\n`), file.data, Buffer.from('\r\n'));
+    }
+    chunks.push(Buffer.from(`--${boundary}--\r\n`));
+    return {
+        body: Buffer.concat(chunks),
+        contentType: `multipart/form-data; boundary=${boundary}`,
+    };
+}
+/** Log in with a full_admin web session and return its access token. */
+export async function loginForToken(baseUrl, credentials, options = {}) {
+    const api = new ApplianceApi({
+        baseUrl,
+        orgId: 1,
+        timeoutMs: options.timeoutMs,
+        verifyTls: options.verifyTls,
+        transport: options.transport,
+    });
+    let response;
+    try {
+        response = await api.request('POST', '/api/session', {
+            body: { user: { email: credentials.email, password: credentials.password } },
+            headers: { 'Content-Type': 'application/json' },
+        });
+    }
+    catch (err) {
+        if (err instanceof ApplianceApiError) {
+            throw new ApplianceApiError(`Session login failed for ${credentials.email}: ${err.message}`, { status: err.status, code: 'LOGIN_FAILED' });
+        }
+        throw err;
+    }
+    const data = response.data;
+    const token = data?.access_token ?? data?.data?.access_token;
+    if (!token) {
+        throw new ApplianceApiError('Session login succeeded but returned no access_token', {
+            code: 'LOGIN_FAILED',
+        });
+    }
+    return token;
+}
+export class ApplianceApi {
+    baseUrl;
+    orgId;
+    timeoutMs;
+    verifyTls;
+    token;
+    transport;
+    spec;
+    constructor(options) {
+        this.baseUrl = options.baseUrl;
+        this.orgId = options.orgId;
+        this.token = options.token;
+        this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.verifyTls = options.verifyTls ?? !isLocalBaseUrl(options.baseUrl);
+        this.transport = options.transport ?? nodeTransport;
+    }
+    static async connect(options = {}) {
+        const baseUrl = normalizeBaseUrl(options.baseUrl);
+        const requireAuth = options.requireAuth ?? true;
+        const orgId = await resolveOrgId(options.orgId);
+        let email = options.email ?? process.env.CT_API_EMAIL;
+        let password = options.password ?? process.env.CT_API_PASSWORD;
+        const hasSuppliedToken = Boolean(options.token?.trim() || process.env.CT_API_TOKEN?.trim() || process.env.CT_API_KEY?.trim());
+        // Humans authenticate as themselves. Prompt only when we actually need an
+        // authenticated API call and no token was supplied. `--json` prompts go to
+        // stderr so stdout remains a valid JSON document.
+        if (requireAuth && !hasSuppliedToken && !(email && password)) {
+            const promptOutput = process.argv.includes('--json') ? process.stderr : process.stdout;
+            if (options.credentialProvider) {
+                const supplied = await options.credentialProvider();
+                if (supplied) {
+                    email = supplied.email;
+                    password = supplied.password;
+                }
+            }
+            else if (process.stdin.isTTY) {
+                if (!email) {
+                    email = (await promptText('Appliance admin email', { output: promptOutput })) ?? undefined;
+                }
+                if (email && !password) {
+                    password = (await promptPassword(`Password for ${email}`, { output: promptOutput })) ?? undefined;
+                }
+            }
+        }
+        const login = email && password ? { email, password } : undefined;
+        const token = await resolveApiToken(baseUrl, options.token, requireAuth, login, {
+            timeoutMs: options.timeoutMs,
+            verifyTls: options.verifyTls,
+            transport: options.transport,
+        });
+        return new ApplianceApi({
+            baseUrl,
+            orgId,
+            token,
+            timeoutMs: options.timeoutMs,
+            verifyTls: options.verifyTls,
+            transport: options.transport,
+        });
+    }
+    /** Build an org-scoped API path (or pass through absolute API paths). */
+    apiPath(pathOrResource) {
+        const path = pathOrResource.trim();
+        if (/^https?:\/\//i.test(path))
+            return path;
+        if (path.startsWith('/api/'))
+            return path;
+        return `/api/org/${this.orgId}/${path.replace(/^\//, '')}`;
+    }
+    urlFor(pathOrResource, query) {
+        const path = this.apiPath(pathOrResource);
+        const base = path.startsWith('http') ? path : `${this.baseUrl}${path}`;
+        const url = new URL(base);
+        for (const [key, value] of Object.entries(query ?? {})) {
+            if (value === undefined || value === null || value === '')
+                continue;
+            url.searchParams.append(key, String(value));
+        }
+        return url.toString();
+    }
+    async request(method, pathOrResource, options = {}) {
+        const upperMethod = method.toUpperCase();
+        const url = this.urlFor(pathOrResource, options.query);
+        const headers = {
+            Accept: options.accept ?? 'application/json',
+            ...(options.headers ?? {}),
+        };
+        if (this.token) {
+            headers.Authorization = authHeaderValue(this.token);
+        }
+        let body;
+        if (options.body !== undefined && options.form !== undefined) {
+            throw new ApplianceApiError('Specify either a JSON body or multipart form data, not both');
+        }
+        if (options.body !== undefined) {
+            headers['Content-Type'] = 'application/json';
+            body = Buffer.from(JSON.stringify(options.body));
+        }
+        else if (options.form !== undefined) {
+            const multipart = buildMultipartBody(options.form.fields ?? {}, options.form.files ?? []);
+            headers['Content-Type'] = multipart.contentType;
+            body = multipart.body;
+        }
+        let response;
+        try {
+            response = await this.transport({
+                method: upperMethod,
+                url,
+                headers,
+                body,
+                timeoutMs: this.timeoutMs,
+                rejectUnauthorized: this.verifyTls,
+                outputPath: options.outputPath,
+            });
+        }
+        catch (err) {
+            if (err instanceof ApplianceApiError)
+                throw err;
+            throw friendlyTransportError(err, upperMethod, url);
+        }
+        const status = response.status;
+        const text = response.body.toString('utf-8');
+        if (status < 200 || status >= 300) {
+            const message = extractServerMessage(response.body, status);
+            let friendly = message;
+            if (status === 401 || status === 403) {
+                if (text.includes('license_restricted')) {
+                    friendly =
+                        `${message}\nThis appliance license does not include machine REST API access. ` +
+                            'Set CT_API_EMAIL and CT_API_PASSWORD for a full_admin user (session login), ' +
+                            'or set CT_API_TOKEN to a full_admin session JWT.';
+                }
+                else {
+                    friendly =
+                        `${message}\nAuthentication failed for ${upperMethod} ${this.apiPath(pathOrResource)}. ` +
+                            'Use an organization API key with full_admin access (CT_API_TOKEN).';
+                }
+            }
+            else if (status === 404) {
+                friendly =
+                    `${message}\nNot found: ${upperMethod} ${this.apiPath(pathOrResource)}. ` +
+                        'The installed appliance release may not expose this operation.';
+            }
+            throw new ApplianceApiError(friendly, {
+                status,
+                method: upperMethod,
+                url,
+                body: text,
+            });
+        }
+        const parse = options.parse ?? (options.outputPath ? 'none' : 'json');
+        if (parse === 'none') {
+            return { status, data: undefined, headers: response.headers };
+        }
+        if (parse === 'text') {
+            return { status, data: text, headers: response.headers };
+        }
+        if (!text.trim()) {
+            return { status, data: undefined, headers: response.headers };
+        }
+        try {
+            return { status, data: JSON.parse(text), headers: response.headers };
+        }
+        catch {
+            throw new ApplianceApiError(`Expected JSON from ${upperMethod} ${this.apiPath(pathOrResource)} but received: ` +
+                text.slice(0, 200), { status, method: upperMethod, url });
+        }
+    }
+    get(path, options) {
+        return this.request('GET', path, options);
+    }
+    post(path, body, options) {
+        return this.request('POST', path, { ...options, body });
+    }
+    put(path, body, options) {
+        return this.request('PUT', path, { ...options, body });
+    }
+    patch(path, body, options) {
+        return this.request('PATCH', path, { ...options, body });
+    }
+    delete(path, options) {
+        return this.request('DELETE', path, options);
+    }
+    /**
+     * Fetch and cache the OpenAPI document generated by the appliance build.
+     * Tries `/api/openapi` first, then `/api/openapi.json`.
+     */
+    async fetchSpec(force = false) {
+        if (this.spec && !force)
+            return this.spec;
+        const candidates = ['/api/openapi', '/api/openapi.json'];
+        let lastError;
+        for (const path of candidates) {
+            try {
+                const response = await this.request('GET', path, {
+                    accept: 'application/json',
+                });
+                const spec = response.data;
+                if (!spec || typeof spec !== 'object' || typeof spec.paths !== 'object') {
+                    throw new ApplianceApiError('Appliance returned an invalid OpenAPI document');
+                }
+                this.spec = spec;
+                return spec;
+            }
+            catch (err) {
+                lastError = err;
+                if (err instanceof ApplianceApiError && err.status !== 404)
+                    throw err;
+            }
+        }
+        throw lastError instanceof Error
+            ? lastError
+            : new ApplianceApiError('Could not load the appliance OpenAPI spec');
+    }
+    describe() {
+        return { baseUrl: this.baseUrl, orgId: this.orgId, authenticated: Boolean(this.token) };
+    }
+}
+/** Read an `@file` or literal JSON value from a CLI option. */
+export function readJsonOption(value, label) {
+    const trimmed = value.trim();
+    let text = trimmed;
+    if (trimmed.startsWith('@')) {
+        const path = trimmed.slice(1);
+        try {
+            text = readFileSync(path, 'utf-8');
+        }
+        catch (err) {
+            throw new ApplianceApiError(`Could not read ${path} for ${label}: ${err.message}`);
+        }
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch (err) {
+        throw new ApplianceApiError(`Invalid JSON for ${label}: ${err.message}`);
+    }
+}
+//# sourceMappingURL=appliance-api.js.map

package/dist/lib/appliance-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appliance-api.js","sourceRoot":"","sources":["../../src/lib/appliance-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGpF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AA2BzC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,MAAM,CAAU;IAChB,IAAI,CAAU;IACd,MAAM,CAAU;IAChB,GAAG,CAAU;IACb,IAAI,CAAU;IAEvB,YACE,OAAe,EACf,OAAyF,EAAE;QAE3F,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF;AA4CD,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,CAAC,GAAG;QAAE,OAAO,eAAe,CAAC;IACjC,MAAM,YAAY,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;IACnF,OAAO,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACrD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAChD,4EAA4E;IAC5E,uDAAuD;IACvD,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,OAAO,EAAE,CAAC;IAC1D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAkC,EAAE,KAAa;IAChF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,iBAAiB,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAiB;IAClD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAE,CAAC;IAClD,CAAC;IAED,iEAAiE;IACjE,kDAAkD;IAClD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,QAAiB,EACjB,WAAW,GAAG,IAAI,EAClB,KAAwB,EACxB,eAAuF,EAAE;IAEzF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACpE,MAAM,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;IAEtD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0EAA0E;IAC1E,sDAAsD;IACtD,IAAI,KAAK,EAAE,CAAC;QACV,uEAAuE;QACvE,yDAAyD;QACzD,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IACrD,CAAC;IAED,4EAA4E;IAC5E,mFAAmF;IACnF,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IAEnC,MAAM,IAAI,iBAAiB,CACzB,sCAAsC;QACpC,0EAA0E;QAC1E,4EAA4E;QAC5E,2BAA2B,EAC7B,EAAE,IAAI,EAAE,eAAe,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,MAAc;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,MAAM,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,MAAiC,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;YAChE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;gBAAE,OAAO,OAAO,CAAC;YAClE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,sBAAsB,CAAC,GAA0B,EAAE,MAAc,EAAE,GAAW;IACrF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;IAEzB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,MAAM,GAAG,4DAA4D,CAAC;YACtE,MAAM;QACR,KAAK,WAAW;YACd,MAAM,GAAG,oCAAoC,CAAC;YAC9C,MAAM;QACR,KAAK,WAAW;YACd,MAAM,GAAG,mBAAmB,CAAC;YAC7B,MAAM;QACR,KAAK,YAAY;YACf,MAAM,GAAG,mCAAmC,CAAC;YAC7C,MAAM;QACR,KAAK,kBAAkB,CAAC;QACxB,KAAK,6BAA6B,CAAC;QACnC,KAAK,2BAA2B;YAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,qDAAqD,CAAC;YAC7E,MAAM;IACV,CAAC;IAED,OAAO,IAAI,iBAAiB,CAAC,+BAA+B,MAAM,EAAE,EAAE;QACpE,IAAI,EAAE,IAAI,IAAI,WAAW;QACzB,MAAM;QACN,GAAG;KACJ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAkB,CAAC,OAAO,EAAE,EAAE;IACtD,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,iBAAiB,CAAC,oBAAoB,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,iBAAiB,CAAC,iCAAiC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QACvD,MAAM,GAAG,GAAG,SAAS,CACnB,MAAM,EACN;YACE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;SAC/C,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAE5B,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAClD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACxB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE;YACrC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,MAA0C,EAC1C,QAAyB,EAAE;IAE3B,MAAM,QAAQ,GAAG,SAAS,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,IAAI,CACT,KAAK,QAAQ,MAAM;YACjB,yCAAyC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW;YAC7E,GAAG,KAAK,MAAM,CACjB,CACF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,IAAI,CACT,KAAK,QAAQ,MAAM;YACjB,yCAAyC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK;YAC7E,aAAa,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO;YACtD,iBAAiB,IAAI,CAAC,WAAW,UAAU,CAC9C,EACD,IAAI,CAAC,IAAI,EACT,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CACpB,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,QAAQ,CAAC,CAAC,CAAC;IAEhD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3B,WAAW,EAAE,iCAAiC,QAAQ,EAAE;KACzD,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,WAA6B,EAC7B,UAAkF,EAAE;IAEpF,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;QAC3B,OAAO;QACP,KAAK,EAAE,CAAC;QACR,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,IAAI,QAA8B,CAAC;IACnC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE;YACnD,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,EAAE;YAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,WAAW,CAAC,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,EAC/D,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAC7C,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAGrB,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,EAAE,YAAY,IAAI,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;IAE7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,iBAAiB,CAAC,sDAAsD,EAAE;YAClF,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,YAAY;IACd,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,SAAS,CAAU;IACnB,KAAK,CAAU;IAEP,SAAS,CAAgB;IAClC,IAAI,CAAmB;IAE/B,YACE,OAOC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC;IACtD,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAA6B,EAAE;QAClD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEhD,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACtD,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAE/D,MAAM,gBAAgB,GAAG,OAAO,CAC9B,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAC5F,CAAC;QAEF,0EAA0E;QAC1E,2EAA2E;QAC3E,kDAAkD;QAClD,IAAI,WAAW,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,EAAE,CAAC;YAC7D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YAEvF,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC;gBACpD,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;oBACvB,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;gBAC/B,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,KAAK,GAAG,CAAC,MAAM,UAAU,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,SAAS,CAAC;gBAC7F,CAAC;gBACD,IAAI,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACvB,QAAQ,GAAG,CAAC,MAAM,cAAc,CAAC,gBAAgB,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,SAAS,CAAC;gBACpG,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;YAC9E,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QAEH,OAAO,IAAI,YAAY,CAAC;YACtB,OAAO;YACP,KAAK;YACL,KAAK;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,OAAO,CAAC,cAAsB;QAC5B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,YAAY,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,CAAC,cAAsB,EAAE,KAA+B;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAE1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;gBAAE,SAAS;YACpE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,cAAsB,EACtB,UAA0B,EAAE;QAE5B,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAEvD,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,kBAAkB;YAC5C,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;SAC3B,CAAC;QAEF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,IAAwB,CAAC;QAC7B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,IAAI,iBAAiB,CAAC,6DAA6D,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC7C,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1F,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC;YAChD,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,QAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;gBAC9B,MAAM,EAAE,WAAW;gBACnB,GAAG;gBACH,OAAO;gBACP,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,kBAAkB,EAAE,IAAI,CAAC,SAAS;gBAClC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB;gBAAE,MAAM,GAAG,CAAC;YAChD,MAAM,sBAAsB,CAAC,GAA4B,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5D,IAAI,QAAQ,GAAG,OAAO,CAAC;YAEvB,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBACxC,QAAQ;wBACN,GAAG,OAAO,qEAAqE;4BAC/E,8EAA8E;4BAC9E,kDAAkD,CAAC;gBACvD,CAAC;qBAAM,CAAC;oBACN,QAAQ;wBACN,GAAG,OAAO,+BAA+B,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI;4BACxF,oEAAoE,CAAC;gBACzE,CAAC;YACH,CAAC;iBAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,QAAQ;oBACN,GAAG,OAAO,gBAAgB,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI;wBACzE,gEAAgE,CAAC;YACrE,CAAC;YAED,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE;gBACpC,MAAM;gBACN,MAAM,EAAE,WAAW;gBACnB,GAAG;gBACH,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAEtE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,iBAAiB;gBAChF,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EACpB,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,GAAG,CAAc,IAAY,EAAE,OAA+C;QAC5E,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,CAAc,IAAY,EAAE,IAAc,EAAE,OAAsC;QACpF,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,GAAG,CAAc,IAAY,EAAE,IAAc,EAAE,OAAsC;QACnF,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAc,IAAY,EAAE,IAAc,EAAE,OAAsC;QACrF,OAAO,IAAI,CAAC,OAAO,CAAI,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAc,IAAY,EAAE,OAA+C;QAC/E,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,KAAK;QAC3B,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAE1C,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;QACzD,IAAI,SAAkB,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAkB,KAAK,EAAE,IAAI,EAAE;oBAChE,MAAM,EAAE,kBAAkB;iBAC3B,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAC3B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACxE,MAAM,IAAI,iBAAiB,CAAC,gDAAgD,CAAC,CAAC;gBAChF,CAAC;gBACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,CAAC;gBAChB,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,GAAG,CAAC;YACxE,CAAC;QACH,CAAC;QAED,MAAM,SAAS,YAAY,KAAK;YAC9B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,iBAAiB,CAAC,2CAA2C,CAAC,CAAC;IACzE,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1F,CAAC;CACF;AAED,+DAA+D;AAC/D,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,KAAa;IACzD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,IAAI,GAAG,OAAO,CAAC;IAEnB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,IAAI,QAAQ,KAAK,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,KAAK,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC"}

package/dist/lib/cube-diag.d.ts

@@ -10,6 +10,12 @@
  * keepalive; this bundle surfaces the DB state, NATS KV view, and the log lines
  * that explain why that keepalive never lands.
  */
+/**
+ * Public entry point for `ct cube doctor --pcap`: resolve the shared network
+ * and run the same two-leg XCC wire capture used by `ct cube diag --pcap`.
+ * Writes xcc-bridge.pcap / xcc-ingress.pcap / xcc.pcap into `bundleDir`.
+ */
+export declare function captureCubePcap(secs: number, bundleDir: string): Promise<string>;
 /**
  * Collect the full cube-diag bundle and write it to a single .log file (plus,
  * when `--pcap` is requested, sibling `xcc-bridge.pcap` / `xcc-ingress.pcap` /

package/dist/lib/cube-diag.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cube-diag.d.ts","sourceRoot":"","sources":["../../src/lib/cube-diag.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAmtBH;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5F,OAAO,CAAC,MAAM,CAAC,CAqOjB"}
+{"version":3,"file":"cube-diag.d.ts","sourceRoot":"","sources":["../../src/lib/cube-diag.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAupBH;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGtF;AA8DD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5F,OAAO,CAAC,MAAM,CAAC,CAqOjB"}

package/dist/lib/cube-diag.js

@@ -622,6 +622,15 @@ async function collectPcap(net, secs, bundleDir) {
     lines.push(pcapStatLine('xcc.pcap (compat)', compatPath));
     return lines.join('\n');
 }
+/**
+ * Public entry point for `ct cube doctor --pcap`: resolve the shared network
+ * and run the same two-leg XCC wire capture used by `ct cube diag --pcap`.
+ * Writes xcc-bridge.pcap / xcc-ingress.pcap / xcc.pcap into `bundleDir`.
+ */
+export async function captureCubePcap(secs, bundleDir) {
+    const net = await resolveCtNetwork();
+    return collectPcap(net, secs, bundleDir);
+}
 // ── Rejected-keepalive summary (API-1792 parity) ────────────────────────────
 //
 // Distinct api_key_prefix x distinct source_ip x count table, so a stale CUBE