@cedarjs/pg 0.2.0-beta.0 → 0.3.0

package/dist/lifecycle-2BZgSVz2.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-2BZgSVz2.mjs","names":[],"sources":["../src/core/naming.ts","../src/core/policy.ts","../src/providers/autopg.ts","../src/providers/host.ts","../src/core/lifecycle.ts"],"sourcesContent":["import type { WorktreeIdentity } from \"./worktree.ts\";\n\nexport type DbMode = \"dev\" | \"test\";\n\nconst PG_MAX = 63;\nconst PREFIX = \"cpg_\";\n\n/**\n * Build an observable Postgres database name:\n *   cpg_<repoSlug>_<worktreeSlug>_<mode>_<pathHash8>\n *\n * Never drops `mode` or `pathHash`. Truncates slugs to fit ≤63 chars.\n */\nexport function buildDatabaseName(identity: WorktreeIdentity, mode: DbMode): string {\n  const modePart = mode;\n  const hashPart = identity.pathHash;\n  // PREFIX + slug + '_' + slug + '_' + mode + '_' + hash\n  // fixed: PREFIX(4) + 2 underscores around mode/hash segments + mode + hash\n  // layout: cpg_<repo>_<wt>_<mode>_<hash>\n  const fixed =\n    PREFIX.length +\n    1 + // after repo\n    1 + // after worktree\n    modePart.length +\n    1 +\n    hashPart.length;\n\n  let budget = PG_MAX - fixed;\n  if (budget < 2) {\n    // Extreme truncation: keep mode+hash, minimal slugs\n    return `${PREFIX}${modePart}_${hashPart}`.slice(0, PG_MAX);\n  }\n\n  let repo = identity.repoSlug;\n  let wt = identity.worktreeSlug;\n  // Split budget roughly evenly, preferring to keep both readable\n  while (repo.length + wt.length > budget) {\n    if (repo.length >= wt.length && repo.length > 1) {\n      repo = repo.slice(0, -1);\n    } else if (wt.length > 1) {\n      wt = wt.slice(0, -1);\n    } else {\n      break;\n    }\n  }\n\n  const name = `${PREFIX}${repo}_${wt}_${modePart}_${hashPart}`;\n  if (name.length > PG_MAX) {\n    return name.slice(0, PG_MAX);\n  }\n  return name;\n}\n\n/**\n * Append `suffix` to a database name, staying ≤63 chars. When it does not fit,\n * cut the readable head (`cpg_<repo>_<worktree>`) and keep the trailing\n * `_<mode>_<pathHash8>` whole: that hash is what keeps worktrees apart.\n */\nfunction appendKeepingHash(databaseName: string, suffix: string): string {\n  const full = `${databaseName}${suffix}`;\n  if (full.length <= PG_MAX) {\n    return full;\n  }\n  const tail = /_[^_]+_[^_]+$/.exec(databaseName)?.[0] ?? \"\";\n  const head = databaseName\n    .slice(0, Math.max(0, PG_MAX - tail.length - suffix.length))\n    .replace(/_+$/, \"\");\n  return `${head}${tail}${suffix}`.slice(0, PG_MAX);\n}\n\n/** Role for a database name: `<databaseName>_role`, cut by `appendKeepingHash`. */\nexport function buildRoleName(databaseName: string): string {\n  return appendKeepingHash(databaseName, \"_role\");\n}\n\n/**\n * Build a worker clone datname from a TEMPLATE database name.\n * Layout: `<template>_c_<suffix>`, cut by `appendKeepingHash` (keeps mode, hash, and suffix).\n */\nexport function buildCloneDatabaseName(templateName: string, suffix: string): string {\n  const safe = suffix\n    .toLowerCase()\n    .replace(/[^a-z0-9_]+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\")\n    .slice(0, 24);\n  const tag = safe.length > 0 ? safe : \"w\";\n  return appendKeepingHash(templateName, `_c_${tag}`);\n}\n","/**\n * Shared acquire skip policy for test-runner adapters and Cedar CLI bridges.\n */\n\nexport type AcquireSkip =\n  | { skip: false }\n  | { skip: true; reason: \"disabled\" }\n  | { skip: true; reason: \"external-url\"; databaseUrl: string };\n\nexport type ResolveAcquireSkipInput = {\n  /** Candidate URL (TEST_DATABASE_URL for tests, DATABASE_URL for dev). */\n  url?: string;\n  /** When true, never skip (CEDAR_PG_FORCE=1). */\n  force?: boolean;\n  /**\n   * When true, skip acquire entirely.\n   * Defaults from CEDAR_PG=0|false (opt-out adapters). Pass `false` for Cedar opt-in flows.\n   */\n  disabled?: boolean;\n};\n\n/**\n * Inject DATABASE_URL (and TEST_DATABASE_URL for test mode) from a resolved URL.\n * Single env path for acquire, clone, and external-url skip.\n */\nexport function applyDatabaseUrlEnv(\n  databaseUrl: string,\n  options: { mode?: \"dev\" | \"test\" } = {},\n): void {\n  process.env.DATABASE_URL = databaseUrl;\n  if ((options.mode ?? \"test\") === \"test\") {\n    process.env.TEST_DATABASE_URL = databaseUrl;\n  }\n}\n\nexport type RunIfNeededOptions = ResolveAcquireSkipInput & {\n  mode: \"dev\" | \"test\";\n  /** Default true (same as acquire / clone host wrappers). */\n  setEnv?: boolean;\n};\n\nexport type RunIfNeededSkipped =\n  | { status: \"skipped\"; reason: \"disabled\" }\n  | { status: \"skipped\"; reason: \"external-url\"; databaseUrl: string };\n\nexport type RunIfNeededResult<T> = RunIfNeededSkipped | { status: \"ran\"; value: T };\n\n/**\n * Shared host skip+env gate for `acquireIfNeeded` / `cloneFromTemplateIfNeeded`.\n * On external-url skip, applies env when `setEnv` is not false.\n */\nexport async function runIfNeeded<T>(\n  options: RunIfNeededOptions,\n  run: () => Promise<T>,\n): Promise<RunIfNeededResult<T>> {\n  const skip = resolveAcquireSkip({\n    url: options.url,\n    force: options.force,\n    disabled: options.disabled,\n  });\n  if (skip.skip) {\n    if (skip.reason === \"external-url\") {\n      if (options.setEnv !== false) {\n        applyDatabaseUrlEnv(skip.databaseUrl, { mode: options.mode });\n      }\n      return { status: \"skipped\", reason: \"external-url\", databaseUrl: skip.databaseUrl };\n    }\n    return { status: \"skipped\", reason: \"disabled\" };\n  }\n  return { status: \"ran\", value: await run() };\n}\n\n/**\n * True when the URL looks like a cedarpg provisioned database (`cpg_*` name/role).\n * These must never be treated as an external escape hatch; always re-acquire so\n * disposed/stale shell env cannot skip provisioning.\n */\nexport function isCedarPgManagedUrl(url: string | undefined): boolean {\n  if (!url || url.startsWith(\"file:\")) return false;\n  try {\n    const parsed = new URL(url);\n    const databaseName = decodeURIComponent(\n      (parsed.pathname.replace(/^\\//, \"\").split(\"?\")[0] ?? \"\").trim(),\n    );\n    const user = decodeURIComponent(parsed.username);\n    return databaseName.startsWith(\"cpg_\") || user.startsWith(\"cpg_\");\n  } catch {\n    return false;\n  }\n}\n\n/**\n * True when `url` still looks like an unset dotenv/template value\n * (e.g. `postgresql://{yourMachine}@localhost:5432/app_test` or\n * `postgresql://<user>@localhost/db`), not a real external database.\n */\nfunction isUnsetTemplateUrl(url: string): boolean {\n  // `{yourMachine}`, `{user}`, etc.\n  if (/\\{[^}]+\\}/.test(url)) return true;\n  // `<user>`, `<password>` style templates\n  if (/<[^>]+>/.test(url)) return true;\n  return false;\n}\n\n/**\n * True when `url` is a real external database and acquire should be skipped.\n * Sqlite `file:` URLs, cedarpg `cpg_*` URLs, and unset template placeholders\n * are not external.\n */\nexport function isExternalDatabaseEscapeHatch(url: string | undefined): boolean {\n  if (!url) return false;\n  if (url.startsWith(\"file:\")) return false;\n  if (isCedarPgManagedUrl(url)) return false;\n  if (isUnsetTemplateUrl(url)) return false;\n  return true;\n}\n\n/**\n * Decide whether acquire should run.\n * Adapters may call with no args (env defaults). Cedar opt-in should pass `disabled: false`\n * and the relevant `url` (`DATABASE_URL` or `TEST_DATABASE_URL`).\n */\nexport function resolveAcquireSkip(input: ResolveAcquireSkipInput = {}): AcquireSkip {\n  const disabled =\n    input.disabled ?? (process.env.CEDAR_PG === \"0\" || process.env.CEDAR_PG === \"false\");\n  if (disabled) {\n    return { skip: true, reason: \"disabled\" };\n  }\n\n  const force = input.force ?? process.env.CEDAR_PG_FORCE === \"1\";\n  if (force) {\n    return { skip: false };\n  }\n\n  const url = input.url !== undefined ? input.url : process.env.TEST_DATABASE_URL;\n  if (url && isExternalDatabaseEscapeHatch(url)) {\n    return { skip: true, reason: \"external-url\", databaseUrl: url };\n  }\n  return { skip: false };\n}\n","import { createHash } from \"node:crypto\";\nimport { execFileSync, spawnSync } from \"node:child_process\";\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport pg from \"pg\";\nimport { PASSWORD_SALT_PREFIX } from \"../core/constants.ts\";\n\nexport type AutopgDiscovery = {\n  port: number;\n  adminUrl: string;\n  bin: string;\n};\n\n/**\n * Registered host from `autopg status --json`: attach target plus the paths a\n * revive needs. Paths are only what autopg reports — never guessed, because\n * autopg's own defaults depend on env (`AUTOPG_CONFIG_DIR`, `XDG_RUNTIME_DIR`).\n */\nexport type AutopgRegistration = HostStatusPaths & { host: AutopgDiscovery };\n\ntype HostStatusPaths = {\n  dataDir?: string;\n  socketDir?: string;\n  logsDir?: string;\n};\n\ndeclare const __CEDAR_PG_AUTOPG_PIN__: string;\n\n/** autopg release cedar-pg is tested against (`scripts/autopg-version`, inlined at build). */\nexport const AUTOPG_PINNED_VERSION: string = __CEDAR_PG_AUTOPG_PIN__;\n\nexport const INSTALL_HINT =\n  \"autopg is required. Install with:\\n\" +\n  \"  curl -fsSL https://raw.githubusercontent.com/automagik-dev/autopg/main/install.sh | bash\\n\" +\n  \"Then ensure ~/.local/bin is on PATH, or set AUTOPG_BIN.\";\n\n/** Password scheme v2: sha256(PASSWORD_SALT_PREFIX + \"\\\\0\" + roleName) hex[:32]. Frozen for URL rebuild. */\nexport const ROLE_PASSWORD_SCHEME = \"v2\" as const;\n\nfunction candidateBins(): string[] {\n  const out: string[] = [];\n  if (process.env.AUTOPG_BIN) out.push(process.env.AUTOPG_BIN);\n  out.push(\"autopg\");\n  out.push(join(homedir(), \".local\", \"bin\", \"autopg\"));\n  return out;\n}\n\nexport function resolveAutopgBin(): string | null {\n  for (const bin of candidateBins()) {\n    if (bin === \"autopg\") {\n      const which = spawnSync(\"which\", [\"autopg\"], { encoding: \"utf8\" });\n      if (which.status === 0 && which.stdout.trim()) return which.stdout.trim();\n      continue;\n    }\n    if (existsSync(bin)) return bin;\n  }\n  return null;\n}\n\nexport function requireAutopgBin(): string {\n  const bin = resolveAutopgBin();\n  if (!bin) {\n    throw new Error(INSTALL_HINT);\n  }\n  return bin;\n}\n\nfunction optionalNonEmptyString(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\n/**\n * Parse `autopg status --json` → the **registered** port (and data/socket/logs\n * dirs when present). Throws only when the output is not autopg status JSON.\n *\n * Registration is not liveness: autopg reports a port for a stopped host too,\n * and its `status` / `ready` describe the supervisor (autopg ≥ v3.2: `ready` needs\n * pm2 `online`; pm2's raw state is `supervisorStatus`). Neither, nor `runtime.live`,\n * is the attach gate — a bare postmaster (e.g. one cedar-pg revived) is\n * query-ready while status stays `stopped` / `ready: false`.\n * Liveness is a TCP accept on the port, proven by the caller (`acquire`).\n */\nexport function parseHostStatus(json: string): HostStatusPaths & { port: number } {\n  let parsed: { port?: unknown } & { [K in keyof HostStatusPaths]?: unknown };\n  try {\n    parsed = JSON.parse(json) as typeof parsed;\n  } catch {\n    throw new Error(`autopg status --json returned invalid JSON.\\n${INSTALL_HINT}`);\n  }\n  if (typeof parsed.port !== \"number\") {\n    throw new Error(`autopg status --json missing numeric port.\\n${INSTALL_HINT}`);\n  }\n  const result: HostStatusPaths & { port: number } = { port: parsed.port };\n  for (const key of [\"dataDir\", \"socketDir\", \"logsDir\"] as const) {\n    const value = optionalNonEmptyString(parsed[key]);\n    if (value) result[key] = value;\n  }\n  return result;\n}\n\n/**\n * Admin URL for an autopg host on `port`.\n *\n * Credentials follow autopg's own defaults / env chain (not \"any local Postgres\"):\n * - user: `AUTOPG_PG_USER` / `PGSERVE_PG_USER` / `postgres`\n * - password: `AUTOPG_PG_PASSWORD` / `PGSERVE_PG_PASSWORD` / `postgres`\n *\n * Port is never scanned: callers pass the port from `autopg status` (attach) or the\n * ephemeral recipe (`55432`). That keeps us off unrelated local servers (e.g. brew on 5432).\n */\nexport function adminUrlFor(port: number, env: NodeJS.ProcessEnv = process.env): string {\n  const user = encodeURIComponent(env.AUTOPG_PG_USER || env.PGSERVE_PG_USER || \"postgres\");\n  const password = encodeURIComponent(\n    env.AUTOPG_PG_PASSWORD || env.PGSERVE_PG_PASSWORD || \"postgres\",\n  );\n  return `postgresql://${user}:${password}@127.0.0.1:${port}/postgres`;\n}\n\n/** `[major, minor, patch]` from `autopg --version` output or a `vX.Y.Z` tag; `null` if absent. */\nexport function parseAutopgVersion(text: string): [number, number, number] | null {\n  const m = /(\\d+)\\.(\\d+)\\.(\\d+)/.exec(text);\n  return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;\n}\n\n/**\n * Upgrade warning when `autopg --version` output is older than `pin`. `null` when\n * current, newer, or unreadable — never nag on what cannot be parsed. Upgrading\n * is the user's call: it restarts the host every worktree shares.\n */\nexport function outdatedAutopgWarning(\n  versionOutput: string,\n  pin = AUTOPG_PINNED_VERSION,\n): string | null {\n  const have = parseAutopgVersion(versionOutput);\n  const want = parseAutopgVersion(pin);\n  if (!have || !want) return null;\n  if ((have[0] - want[0] || have[1] - want[1] || have[2] - want[2]) >= 0) return null;\n  return (\n    `[cedar-pg] warning: autopg ${have.join(\".\")} is older than ${pin}, the version @cedarjs/pg is tested with.\\n` +\n    \"Upgrade (restarts the shared host; open connections from other worktrees drop):\\n\" +\n    `  curl -fsSL https://raw.githubusercontent.com/automagik-dev/autopg/${pin}/install.sh | AUTOPG_VERSION=${pin} bash\\n` +\n    \"  autopg update\\n\"\n  );\n}\n\n/** `autopg --version` stdout; `\"\"` when it cannot run (treated as unknown). */\nexport function readAutopgVersion(bin: string): string {\n  const result = spawnSync(bin, [\"--version\"], {\n    encoding: \"utf8\",\n    stdio: [\"ignore\", \"pipe\", \"ignore\"],\n    timeout: 5_000,\n  });\n  return result.stdout ?? \"\";\n}\n\nfunction readStatusJson(bin: string): string {\n  try {\n    return execFileSync(bin, [\"status\", \"--json\"], {\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n  } catch (err) {\n    const detail = err instanceof Error ? err.message : String(err);\n    throw new Error(`Failed to query autopg status.\\n${detail}\\n${INSTALL_HINT}`);\n  }\n}\n\n/**\n * Discover the registered autopg host (attach target + reported data/socket/logs\n * dirs) via `autopg status --json`. Throws when autopg cannot be queried; does\n * **not** prove a listener — probe TCP (or use `acquire`, which does) before connecting.\n */\nexport function discoverRegistration(bin = requireAutopgBin()): AutopgRegistration {\n  const { port, ...paths } = parseHostStatus(readStatusJson(bin));\n  return { host: { port, adminUrl: adminUrlFor(port), bin }, ...paths };\n}\n\n/**\n * Discover the registered autopg host (port + admin URL) via `autopg status --json`.\n * Throws when autopg cannot be queried; does **not** prove a listener — probe TCP\n * (or use `acquire`, which does) before connecting.\n */\nexport function discoverHost(bin = requireAutopgBin()): AutopgDiscovery {\n  return discoverRegistration(bin).host;\n}\n\nfunction quoteIdent(name: string): string {\n  return `\"${name.replace(/\"/g, '\"\"')}\"`;\n}\n\nfunction quoteLiteral(value: string): string {\n  return `'${value.replace(/'/g, \"''\")}'`;\n}\n\n/** Grace for a postmaster that accepts TCP but still answers 57P03 (startup / recovery). */\nconst ADMIN_CONNECT_READY_MS = 30_000;\nconst ADMIN_CONNECT_POLL_MS = 200;\n\nexport type ConnectRetryOptions = {\n  readyMs?: number;\n  pollMs?: number;\n  now?: () => number;\n  sleep?: (ms: number) => Promise<void>;\n};\n\n/**\n * Retry `connect` while Postgres answers `57P03` (cannot_connect_now: \"the\n * database system is starting up\" / in recovery). TCP accept — the host\n * liveness gate — comes before query-ready, so a freshly revived or crash-\n * recovering postmaster needs this. Any other error is thrown immediately.\n */\nexport async function connectWhileStartingUp<T>(\n  connect: () => Promise<T>,\n  opts: ConnectRetryOptions = {},\n): Promise<T> {\n  const now = opts.now ?? Date.now;\n  const pause = opts.sleep ?? ((ms: number) => new Promise<void>((r) => setTimeout(r, ms)));\n  const deadline = now() + (opts.readyMs ?? ADMIN_CONNECT_READY_MS);\n  for (;;) {\n    try {\n      return await connect();\n    } catch (err) {\n      if ((err as { code?: unknown }).code !== \"57P03\" || now() >= deadline) throw err;\n    }\n    await pause(opts.pollMs ?? ADMIN_CONNECT_POLL_MS);\n  }\n}\n\nasync function withAdminClient<T>(\n  adminUrl: string,\n  fn: (client: pg.Client) => Promise<T>,\n): Promise<T> {\n  // A pg.Client cannot reconnect after a failed connect — new client per attempt.\n  const client = await connectWhileStartingUp(async () => {\n    const attempt = new pg.Client({ connectionString: adminUrl });\n    try {\n      await attempt.connect();\n      return attempt;\n    } catch (err) {\n      await attempt.end().catch(() => {});\n      throw err;\n    }\n  });\n  try {\n    return await fn(client);\n  } finally {\n    await client.end();\n  }\n}\n\n/**\n * Deterministic local-only password for an app role (Prisma/TCP need it;\n * autopg hba uses `password` for 127.0.0.1).\n *\n * Keyed by `roleName` (not databaseName) so TEMPLATE clones that reuse the\n * same role keep working when `buildDatabaseUrl` is called with a new database.\n */\nexport function rolePasswordFor(roleName: string): string {\n  return createHash(\"sha256\")\n    .update(`${PASSWORD_SALT_PREFIX}\\0${roleName}`)\n    .digest(\"hex\")\n    .slice(0, 32);\n}\n\n/**\n * Idempotently CREATE ROLE + CREATE DATABASE with cedar-pg owned names.\n */\nexport async function ensureDatabase(opts: {\n  adminUrl: string;\n  databaseName: string;\n  roleName: string;\n  password?: string;\n}): Promise<void> {\n  const password = opts.password ?? rolePasswordFor(opts.roleName);\n  await withAdminClient(opts.adminUrl, async (client) => {\n    const roleExists = await client.query(\"SELECT 1 FROM pg_roles WHERE rolname = $1\", [\n      opts.roleName,\n    ]);\n    if (roleExists.rowCount === 0) {\n      await client.query(\n        `CREATE ROLE ${quoteIdent(opts.roleName)} WITH LOGIN PASSWORD ${quoteLiteral(password)}`,\n      );\n    } else {\n      await client.query(\n        `ALTER ROLE ${quoteIdent(opts.roleName)} WITH LOGIN PASSWORD ${quoteLiteral(password)}`,\n      );\n    }\n\n    const dbExists = await client.query(\"SELECT 1 FROM pg_database WHERE datname = $1\", [\n      opts.databaseName,\n    ]);\n    if (dbExists.rowCount === 0) {\n      await client.query(\n        `CREATE DATABASE ${quoteIdent(opts.databaseName)} OWNER ${quoteIdent(opts.roleName)}`,\n      );\n    } else {\n      await client.query(\n        `ALTER DATABASE ${quoteIdent(opts.databaseName)} OWNER TO ${quoteIdent(opts.roleName)}`,\n      );\n    }\n  });\n}\n\n/**\n * Mark (or unmark) a database as a PostgreSQL template (`IS_TEMPLATE`).\n * Template DBs cannot be dropped until unset.\n */\nexport async function setDatabaseIsTemplate(opts: {\n  adminUrl: string;\n  databaseName: string;\n  isTemplate: boolean;\n}): Promise<void> {\n  const flag = opts.isTemplate ? \"true\" : \"false\";\n  await withAdminClient(opts.adminUrl, async (client) => {\n    await client.query(`ALTER DATABASE ${quoteIdent(opts.databaseName)} WITH IS_TEMPLATE ${flag}`);\n  });\n}\n\n/** Postgres `duplicate_database`: CREATE DATABASE hit an existing datname. */\nconst DUPLICATE_DATABASE = \"42P04\";\n\n/**\n * CREATE DATABASE … TEMPLATE … OWNER via admin connection.\n * Test roles are LOGIN-only; workers cannot CREATE DATABASE themselves.\n *\n * With `reuse`, an existing `databaseName` owned by `roleName` is kept as-is:\n * a worker clone made earlier in this run by another test file.\n * An existing datname owned by any other role always fails: it is not ours.\n */\nexport async function cloneDatabaseFromTemplate(opts: {\n  adminUrl: string;\n  templateName: string;\n  databaseName: string;\n  roleName: string;\n  reuse?: boolean;\n}): Promise<void> {\n  await withAdminClient(opts.adminUrl, async (client) => {\n    const tmpl = await client.query<{ datistemplate: boolean }>(\n      `SELECT datistemplate FROM pg_database WHERE datname = $1`,\n      [opts.templateName],\n    );\n    if (!tmpl.rowCount) {\n      throw new Error(`template database not found: ${opts.templateName}`);\n    }\n    if (!tmpl.rows[0]?.datistemplate) {\n      throw new Error(`database is not a TEMPLATE; run markTemplate first: ${opts.templateName}`);\n    }\n\n    try {\n      await client.query(\n        `CREATE DATABASE ${quoteIdent(opts.databaseName)} WITH TEMPLATE ${quoteIdent(opts.templateName)} OWNER ${quoteIdent(opts.roleName)}`,\n      );\n      return;\n    } catch (err) {\n      if ((err as { code?: unknown }).code !== DUPLICATE_DATABASE) throw err;\n    }\n    const existing = await client.query<{ owner: string }>(\n      `SELECT pg_get_userbyid(datdba) AS owner FROM pg_database WHERE datname = $1`,\n      [opts.databaseName],\n    );\n    const owner = existing.rows[0]?.owner;\n    if (opts.reuse && owner === opts.roleName) return;\n    throw new Error(\n      `database already exists: ${opts.databaseName} (owned by ${owner ?? \"unknown\"})`,\n    );\n  });\n}\n\n/**\n * Empty every user table in `databaseName` with one\n * `TRUNCATE … RESTART IDENTITY`, so serial / identity columns start at 1 again.\n *\n * Runs as admin against that database. Skips system schemas, temp tables, and\n * tables an extension owns (e.g. PostGIS `spatial_ref_sys`); partitions are covered by\n * their parent. No `CASCADE`: every user table is in the one statement, so no\n * FK target is missing from it.\n */\nexport async function truncateUserTables(opts: {\n  adminUrl: string;\n  databaseName: string;\n}): Promise<string[]> {\n  const url = new URL(opts.adminUrl);\n  url.pathname = `/${opts.databaseName}`;\n  return withAdminClient(url.toString(), async (client) => {\n    const result = await client.query<{ name: string }>(\n      `SELECT format('%I.%I', n.nspname, c.relname) AS name\n       FROM pg_class c\n       JOIN pg_namespace n ON n.oid = c.relnamespace\n       WHERE c.relkind IN ('r', 'p')\n         AND NOT c.relispartition\n         AND c.relpersistence <> 't'\n         AND n.nspname NOT IN ('pg_catalog', 'information_schema')\n         AND NOT EXISTS (\n           SELECT 1 FROM pg_depend d\n           WHERE d.classid = 'pg_class'::regclass AND d.objid = c.oid AND d.deptype = 'e'\n         )\n       ORDER BY 1`,\n    );\n    const tables = result.rows.map((r) => r.name);\n    if (tables.length > 0) {\n      await client.query(`TRUNCATE TABLE ${tables.join(\", \")} RESTART IDENTITY`);\n    }\n    return tables;\n  });\n}\n\nasync function listOwnedDatnames(client: pg.Client, roleName: string): Promise<string[]> {\n  const result = await client.query<{ datname: string }>(\n    `SELECT datname FROM pg_database\n     WHERE datdba = (SELECT oid FROM pg_roles WHERE rolname = $1)\n     ORDER BY datname`,\n    [roleName],\n  );\n  return result.rows.map((r) => r.datname);\n}\n\n/** Unset IS_TEMPLATE if needed, terminate backends, DROP DATABASE (no-op if missing). */\nasync function dropOneDatabase(client: pg.Client, databaseName: string): Promise<void> {\n  const db = await client.query<{ datistemplate: boolean }>(\n    `SELECT datistemplate FROM pg_database WHERE datname = $1`,\n    [databaseName],\n  );\n  if (!db.rowCount || db.rowCount === 0) return;\n  if (db.rows[0]?.datistemplate) {\n    await client.query(`ALTER DATABASE ${quoteIdent(databaseName)} WITH IS_TEMPLATE false`);\n  }\n  await client.query(\n    `\n    SELECT pg_terminate_backend(pid)\n    FROM pg_stat_activity\n    WHERE datname = $1 AND pid <> pg_backend_pid()\n    `,\n    [databaseName],\n  );\n  await client.query(`DROP DATABASE IF EXISTS ${quoteIdent(databaseName)}`);\n}\n\n/**\n * DROP every database owned by `roleName` on one admin connection, then DROP ROLE.\n * When `preferLast` is owned, it is dropped after the other owned datnames (TEMPLATE after clones).\n * Never invents a DROP target beyond role ownership.\n */\nexport async function dropDatabasesOwnedByRole(opts: {\n  adminUrl: string;\n  roleName: string;\n  preferLast?: string;\n}): Promise<string[]> {\n  return withAdminClient(opts.adminUrl, async (client) => {\n    const owned = await listOwnedDatnames(client, opts.roleName);\n    const ordered = [\n      ...owned.filter((name) => name !== opts.preferLast),\n      ...owned.filter((name) => name === opts.preferLast),\n    ];\n    const dropped: string[] = [];\n    for (const databaseName of ordered) {\n      await dropOneDatabase(client, databaseName);\n      dropped.push(databaseName);\n    }\n    await client.query(`DROP ROLE IF EXISTS ${quoteIdent(opts.roleName)}`);\n    return dropped;\n  });\n}\n\n/**\n * DROP DATABASE (unset IS_TEMPLATE, force terminate backends) + DROP ROLE\n * when the role owns no remaining databases.\n */\nexport async function dropDatabase(opts: {\n  adminUrl: string;\n  databaseName: string;\n  roleName: string;\n}): Promise<void> {\n  await withAdminClient(opts.adminUrl, async (client) => {\n    await dropOneDatabase(client, opts.databaseName);\n    const owns = await client.query(\n      `SELECT 1 FROM pg_database WHERE datdba = (SELECT oid FROM pg_roles WHERE rolname = $1) LIMIT 1`,\n      [opts.roleName],\n    );\n    if (owns.rowCount === 0) {\n      await client.query(`DROP ROLE IF EXISTS ${quoteIdent(opts.roleName)}`);\n    }\n  });\n}\n\nexport function buildDatabaseUrl(opts: {\n  port: number;\n  databaseName: string;\n  roleName: string;\n  password?: string;\n}): string {\n  const password = opts.password ?? rolePasswordFor(opts.roleName);\n  const user = encodeURIComponent(opts.roleName);\n  const pass = encodeURIComponent(password);\n  return `postgresql://${user}:${pass}@127.0.0.1:${opts.port}/${opts.databaseName}`;\n}\n","import { spawn, spawnSync, type ChildProcess } from \"node:child_process\";\nimport {\n  closeSync,\n  existsSync,\n  linkSync,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  rmSync,\n  statfsSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { createConnection } from \"node:net\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport {\n  adminUrlFor,\n  discoverHost,\n  discoverRegistration,\n  INSTALL_HINT,\n  outdatedAutopgWarning,\n  readAutopgVersion,\n  requireAutopgBin,\n  type AutopgDiscovery,\n  type AutopgRegistration,\n} from \"./autopg.ts\";\n\n/** How cedar-pg brings up an autopg host when nothing is listening. */\nexport type HostStartPolicy = \"local\" | \"ephemeral\";\n\nexport type EphemeralHostRecipe = {\n  dataDir: string;\n  port: number;\n  postmasterArgs: string[];\n};\n\n/** Inputs for {@link ephemeralHostRecipe} (production uses process defaults). */\nexport type EphemeralRecipeContext = {\n  platform?: NodeJS.Platform;\n  shmAvailable?: boolean;\n  tmpDir?: string;\n  uid?: number;\n  port?: number;\n};\n\nconst EPHEMERAL_PORT = 55432;\n\nconst HOST_READY_MS = 30_000;\nconst HOST_POLL_MS = 200;\n/** `autopg restart` exits 0 only once ready; grace covers older autopg that returned early. */\nconst LOCAL_RESTART_READY_MS = 10_000;\n\n/** Soft minimum free bytes on /dev/shm before RAM-backed ephemeral start (warns only). */\nexport const EPHEMERAL_SHM_MIN_FREE_BYTES = 512 * 1024 * 1024;\n\n/**\n * Hint when ephemeral `--ram` initdb fails for space / leftover dirs under `/dev/shm`.\n * Cloud VMs often ship with a tiny default tmpfs (e.g. 64MB).\n */\nexport const EPHEMERAL_SHM_HINT =\n  \"Ephemeral autopg uses /dev/shm with --ram. If initdb fails with Disk quota / No space (Postgres 53100):\\n\" +\n  \"  1. Enlarge tmpfs (cloud VMs often default to ~64MB): sudo mount -o remount,size=6G /dev/shm\\n\" +\n  \"  2. cedar-pg already removes its own leftover dir (/dev/shm/cedar-pg-<uid>) on cold start.\\n\" +\n  \"     Never rm /dev/shm/PostgreSQL.*: those segments belong to every running Postgres,\\n\" +\n  \"     and deleting a live one breaks new connections to that host (58P01).\";\n\n/**\n * Resolve how to start a host when none is listening.\n *\n * - `CEDAR_PG_EPHEMERAL_HOST=1` → ephemeral owned postmaster\n * - `CEDAR_PG_EPHEMERAL_HOST=0` → never own an ephemeral postmaster, local registered host only (even in CI)\n * - unset + `CI=true` → ephemeral\n * - otherwise → local\n */\nexport function resolveHostStartPolicy(env: NodeJS.ProcessEnv = process.env): HostStartPolicy {\n  const force = env.CEDAR_PG_EPHEMERAL_HOST;\n  if (force === \"1\") return \"ephemeral\";\n  if (force === \"0\") return \"local\";\n  if (env.CI === \"true\") return \"ephemeral\";\n  return \"local\";\n}\n\nexport function ephemeralHostRecipe(ctx: EphemeralRecipeContext = {}): EphemeralHostRecipe {\n  const platform = ctx.platform ?? process.platform;\n  const shmAvailable = ctx.shmAvailable ?? (platform === \"linux\" && existsSync(\"/dev/shm\"));\n  const uid = ctx.uid ?? process.getuid?.() ?? 0;\n  const port = ctx.port ?? EPHEMERAL_PORT;\n  const useRam = platform === \"linux\" && shmAvailable;\n  const dataDir = useRam\n    ? `/dev/shm/cedar-pg-${uid}`\n    : join(ctx.tmpDir ?? tmpdir(), \"cedar-pg-host\");\n\n  const postmasterArgs = [\n    \"postmaster\",\n    ...(useRam ? [\"--ram\"] : []),\n    \"--port\",\n    String(port),\n    \"--socket-dir\",\n    dataDir,\n    \"--data\",\n    dataDir,\n  ];\n\n  return { dataDir, port, postmasterArgs };\n}\n\nexport function discoveryFromRecipe(bin: string, recipe: EphemeralHostRecipe): AutopgDiscovery {\n  return { port: recipe.port, adminUrl: adminUrlFor(recipe.port), bin };\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** True when stderr/stdout looks like a /dev/shm quota or ENOSPC failure. */\nexport function looksLikeShmSpaceError(text: string): boolean {\n  return /Disk quota exceeded|No space left on device|ENOSPC|\\b53100\\b/i.test(text);\n}\n\nexport function formatHostStartError(detail: string, useRamShm = false): string {\n  const hint = useRamShm && looksLikeShmSpaceError(detail) ? `\\n${EPHEMERAL_SHM_HINT}` : \"\";\n  return `Failed to start autopg host.\\n${detail}\\n${INSTALL_HINT}${hint}`;\n}\n\n/** Free bytes on `path`, or `null` if unavailable. */\nfunction freeBytesOn(path: string): number | null {\n  try {\n    const s = statfsSync(path);\n    return Number(s.bavail) * Number(s.bsize);\n  } catch {\n    return null;\n  }\n}\n\n/** Run a one-shot autopg verb. Returns failure detail, or `null` on exit 0. */\nfunction runAutopg(bin: string, argv: string[]): string | null {\n  const result = spawnSync(bin, argv, {\n    encoding: \"utf8\",\n    stdio: [\"ignore\", \"pipe\", \"pipe\"],\n  });\n  if (result.error) return result.error.message;\n  if (result.status === 0) return null;\n  const output = `${result.stderr ?? \"\"}${result.stdout ?? \"\"}`;\n  return `exit ${result.status}\\n${output.trim()}`.trim();\n}\n\n/** True when something accepts TCP on 127.0.0.1:port (postmaster live, not just admin.json). */\nfunction canConnect(port: number): Promise<boolean> {\n  return new Promise((resolve) => {\n    const socket = createConnection({ host: \"127.0.0.1\", port }, () => {\n      socket.end();\n      resolve(true);\n    });\n    socket.on(\"error\", () => {\n      resolve(false);\n    });\n  });\n}\n\nfunction killOwnedChild(child: ChildProcess): void {\n  const pid = child.pid;\n  if (pid != null) {\n    try {\n      process.kill(-pid, \"SIGTERM\");\n    } catch {\n      try {\n        child.kill(\"SIGTERM\");\n      } catch {\n        // already exited\n      }\n    }\n  }\n  child.unref();\n}\n\nexport type WaitForListenerOptions = {\n  port: number;\n  /** Total grace period; `0` (default) probes exactly once. */\n  readyMs?: number;\n  pollMs?: number;\n  canConnect?: (port: number) => Promise<boolean>;\n  now?: () => number;\n  sleep?: (ms: number) => Promise<void>;\n  /** Return an Error to abort early (spawn error / child exit). */\n  failure?: () => Error | null;\n};\n\n/**\n * The single liveness primitive: TCP accept on 127.0.0.1:port.\n *\n * Resolves `true` as soon as something is listening, `false` when the grace\n * period expires, and throws only what {@link WaitForListenerOptions.failure}\n * returns. Used for attach (one probe), local restart, and ephemeral start.\n */\nexport async function waitForListener(opts: WaitForListenerOptions): Promise<boolean> {\n  const probe = opts.canConnect ?? canConnect;\n  const now = opts.now ?? Date.now;\n  const pause = opts.sleep ?? sleep;\n  const pollMs = opts.pollMs ?? HOST_POLL_MS;\n  const deadline = now() + (opts.readyMs ?? 0);\n\n  for (;;) {\n    const fail = opts.failure?.();\n    if (fail) throw fail;\n    if (await probe(opts.port)) return true;\n    if (now() >= deadline) return false;\n    await pause(pollMs);\n  }\n}\n\n/**\n * Attach to the registered autopg host once TCP accepts on its port.\n *\n * Registration is not liveness: a stopped pm2 host still reports a port, and\n * attaching to it is the `ECONNREFUSED 127.0.0.1:25432` bug. `readyMs` > 0 is\n * the grace period after asking autopg to start.\n */\nasync function attachLiveHost(bin: string, readyMs = 0): Promise<AutopgDiscovery | null> {\n  let discovered: AutopgDiscovery;\n  try {\n    discovered = discoverHost(bin);\n  } catch {\n    return null;\n  }\n  return (await waitForListener({ port: discovered.port, readyMs })) ? discovered : null;\n}\n\n/** Appended by the revived registered postmaster (next to autopg's own pm2 logs). */\nconst REVIVED_POSTMASTER_LOG = \"cedarpg-postmaster.log\";\n\nfunction errorDetail(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n\n/**\n * Live PID from `<dataDir>/postmaster.pid`, else `null`. Postgres writes it before\n * binding, so a live owner means another postmaster (pm2 still recovering, or a\n * concurrent acquire) already holds the data dir — wait for it, never compete.\n */\nfunction liveDataDirOwner(dataDir: string): number | null {\n  return livePidIn(join(dataDir, \"postmaster.pid\"));\n}\n\n/** Live PID from the first line of `file`, else `null` (missing, garbage, or dead). */\nfunction livePidIn(file: string): number | null {\n  let pid: number;\n  try {\n    pid = Number.parseInt(readFileSync(file, \"utf8\"), 10);\n  } catch {\n    return null;\n  }\n  if (!Number.isInteger(pid) || pid <= 0) return null;\n  try {\n    process.kill(pid, 0);\n    return pid;\n  } catch (err) {\n    return (err as NodeJS.ErrnoException).code === \"EPERM\" ? pid : null;\n  }\n}\n\n/**\n * Exclusive cold-start lock `<dataDir>.lock` holding our PID. Returns `null` once\n * we hold it, else the live holder's PID. `postmaster.pid` alone cannot guard an\n * ephemeral cold start: it does not exist yet while a peer runs initdb, which is\n * exactly when a second `rm -rf` would destroy the peer's cluster.\n *\n * The PID is written to a private file and hard-linked into place, so the lock\n * never exists without its PID. A dead holder's lock is stale and taken over.\n */\nfunction tryColdStartLock(lockPath: string): number | null {\n  const mine = `${lockPath}.${process.pid}`;\n  writeFileSync(mine, String(process.pid));\n  try {\n    for (;;) {\n      try {\n        linkSync(mine, lockPath);\n        return null;\n      } catch (err) {\n        if ((err as NodeJS.ErrnoException).code !== \"EEXIST\") throw err;\n      }\n      const holder = livePidIn(lockPath);\n      if (holder != null) return holder;\n      rmSync(lockPath, { force: true });\n    }\n  } finally {\n    rmSync(mine, { force: true });\n  }\n}\n\n/**\n * Detached `autopg postmaster`. Success: child is unref'd (survives this process).\n * Failure: child is killed, throws a one-line detail (caller wraps / aggregates).\n * `logFile` (appended) keeps output from a postmaster nothing else supervises;\n * otherwise stdio is fully ignored (caller exit must not close pipes under it).\n */\nasync function spawnDetachedPostmaster(opts: {\n  bin: string;\n  args: string[];\n  port: number;\n  readyMs: number;\n  logFile?: string;\n}): Promise<void> {\n  const { readyMs } = opts;\n  const logFd = opts.logFile ? openSync(opts.logFile, \"a\") : null;\n  let child: ChildProcess;\n  try {\n    child = spawn(opts.bin, opts.args, {\n      detached: true,\n      stdio: logFd == null ? \"ignore\" : [\"ignore\", logFd, logFd],\n    });\n  } finally {\n    if (logFd != null) closeSync(logFd);\n  }\n  let died: Error | null = null;\n  child.on(\"error\", (err) => {\n    died = new Error(`Failed to spawn autopg postmaster.\\n${err.message}`);\n  });\n  child.on(\"exit\", (code, signal) => {\n    died ??= new Error(`autopg postmaster exited before ready (code=${code}, signal=${signal}).`);\n  });\n\n  try {\n    const listening = await waitForListener({\n      port: opts.port,\n      readyMs,\n      failure: () => died,\n    });\n    if (!listening) {\n      throw new Error(\n        `autopg postmaster did not accept 127.0.0.1:${opts.port} within ${readyMs}ms.`,\n      );\n    }\n  } catch (err) {\n    killOwnedChild(child);\n    throw err;\n  }\n\n  child.unref();\n}\n\n/**\n * Detached `autopg postmaster` on the registered port / data dir (socket dir when\n * autopg reports one; otherwise the postmaster resolves autopg's own default).\n * Returns failure detail, or `null` once TCP accepts.\n *\n * No reported `dataDir` → not attempted: a postmaster without `--data` is not\n * persistent, and guessing autopg's path is how a second Postgres happens.\n */\nasync function reviveRegisteredPostmaster(\n  bin: string,\n  reg: AutopgRegistration,\n): Promise<string | null> {\n  const { dataDir, socketDir, logsDir } = reg;\n  const { port } = reg.host;\n  if (!dataDir) return \"autopg postmaster: not attempted (autopg status --json reports no dataDir)\";\n\n  const args = [\n    \"postmaster\",\n    \"--port\",\n    String(port),\n    \"--data\",\n    dataDir,\n    ...(socketDir ? [\"--socket-dir\", socketDir] : []),\n  ];\n  const label = `autopg ${args.join(\" \")}`;\n  const logFile = logsDir ? join(logsDir, REVIVED_POSTMASTER_LOG) : undefined;\n\n  if (liveDataDirOwner(dataDir) == null) {\n    try {\n      mkdirSync(dataDir, { recursive: true, mode: 0o700 });\n      if (logsDir) mkdirSync(logsDir, { recursive: true });\n      await spawnDetachedPostmaster({\n        bin,\n        args,\n        port,\n        readyMs: HOST_READY_MS,\n        ...(logFile ? { logFile } : {}),\n      });\n      return null;\n    } catch (err) {\n      // Lost the data-dir lock to a concurrent start → wait for the winner below.\n      if (liveDataDirOwner(dataDir) == null) {\n        return `${label}: ${errorDetail(err)}${logFile ? `\\nPostmaster log: ${logFile}` : \"\"}`;\n      }\n    }\n  }\n\n  if (await waitForListener({ port, readyMs: HOST_READY_MS })) return null;\n  return (\n    `${label}: postmaster pid ${liveDataDirOwner(dataDir) ?? \"?\"} owns ${dataDir} ` +\n    `but did not accept 127.0.0.1:${port} within ${HOST_READY_MS}ms`\n  );\n}\n\n/**\n * Revive the user's registered autopg host — same port, same `~/.autopg/data`,\n * still running after this process exits. Never a second local Postgres.\n *\n * `restart` drives pm2 only and exits 0 once ready; without pm2 (or under another\n * supervisor) it exits 1. Either way TCP is the gate: if still dark,\n * {@link reviveRegisteredPostmaster} on the registered port/data. Do not\n * `install` on an already-registered host (wants pm2, refuses a port change).\n * `install` is only for a never-registered machine.\n */\nasync function startLocalHost(\n  bin: string,\n  registered: AutopgRegistration | null,\n): Promise<AutopgDiscovery> {\n  const failures: string[] = [];\n\n  const restartFailure = runAutopg(bin, [\"restart\"]);\n  if (restartFailure) {\n    failures.push(`autopg restart: ${restartFailure}`);\n  } else {\n    const attached = await attachLiveHost(bin, LOCAL_RESTART_READY_MS);\n    if (attached) return attached;\n    failures.push(`autopg restart: no listener within ${LOCAL_RESTART_READY_MS}ms`);\n  }\n\n  if (registered) {\n    const failure = await reviveRegisteredPostmaster(bin, registered);\n    if (!failure) return registered.host;\n    failures.push(failure);\n  } else {\n    const installFailure = runAutopg(bin, [\"install\"]);\n    if (installFailure) {\n      failures.push(`autopg install: ${installFailure}`);\n    } else {\n      const attached = await attachLiveHost(bin, HOST_READY_MS);\n      if (attached) return attached;\n      failures.push(`autopg install: no listener within ${HOST_READY_MS}ms`);\n    }\n  }\n\n  const where =\n    registered != null\n      ? `autopg host is registered on 127.0.0.1:${registered.host.port} but nothing is listening.\\n`\n      : \"\";\n  throw new Error(formatHostStartError(`${where}${failures.join(\"\\n\")}`));\n}\n\n/**\n * Ephemeral host owned by this process/job: detached `autopg postmaster` with\n * fully ignored stdio (caller exit must not close pipes under the daemon).\n *\n * Never runs `autopg install` — that rewrites `~/.autopg/admin.json` and fails\n * with `supervisor mismatch` next to a local pm2 install. Reuses a listener\n * already on the recipe port. Concurrent cold starts (Nx running several\n * `db:ready` on one runner) serialize on {@link tryColdStartLock}: only the\n * holder prunes and starts; everyone else waits for the listener.\n */\nexport async function startEphemeralHost(\n  bin: string,\n  recipe: EphemeralHostRecipe = ephemeralHostRecipe(),\n): Promise<AutopgDiscovery> {\n  const { dataDir, port } = recipe;\n  if (await canConnect(port)) return discoveryFromRecipe(bin, recipe);\n\n  const useRamShm = recipe.postmasterArgs.includes(\"--ram\");\n  const lockPath = `${dataDir}.lock`;\n  const holder = tryColdStartLock(lockPath);\n  if (holder == null) {\n    try {\n      // Re-check under the lock: a peer may have finished starting meanwhile.\n      if (!(await canConnect(port)) && liveDataDirOwner(dataDir) == null) {\n        await coldStartEphemeral(bin, recipe, useRamShm);\n      }\n    } finally {\n      rmSync(lockPath, { force: true });\n    }\n  }\n\n  if (await waitForListener({ port, readyMs: HOST_READY_MS })) {\n    return discoveryFromRecipe(bin, recipe);\n  }\n  const owner =\n    holder != null\n      ? `cold start pid ${holder}`\n      : `postmaster pid ${liveDataDirOwner(dataDir) ?? \"?\"}`;\n  throw new Error(\n    formatHostStartError(\n      `${owner} owns ${dataDir} but did not accept 127.0.0.1:${port} within ${HOST_READY_MS}ms`,\n      useRamShm,\n    ),\n  );\n}\n\n/** Prune our dead leftover data dir and start the postmaster. Caller holds the cold-start lock. */\nasync function coldStartEphemeral(\n  bin: string,\n  recipe: EphemeralHostRecipe,\n  useRamShm: boolean,\n): Promise<void> {\n  // Locked, no listener, no live postmaster.pid: the data dir is a dead run's leftover.\n  // Only this cedar-pg-owned path: `/dev/shm/PostgreSQL.*` / `pgserve-*` belong to\n  // every Postgres on the machine (the registered host included) and are never touched.\n  rmSync(recipe.dataDir, { recursive: true, force: true });\n\n  if (useRamShm) {\n    const free = freeBytesOn(\"/dev/shm\");\n    if (free != null && free < EPHEMERAL_SHM_MIN_FREE_BYTES) {\n      process.stderr.write(\n        `[cedar-pg] warning: /dev/shm has ~${Math.round(free / (1024 * 1024))}MB free ` +\n          `(recommend ≥${Math.round(EPHEMERAL_SHM_MIN_FREE_BYTES / (1024 * 1024))}MB for --ram).\\n` +\n          `${EPHEMERAL_SHM_HINT}\\n`,\n      );\n    }\n  }\n\n  mkdirSync(recipe.dataDir, { recursive: true });\n\n  try {\n    await spawnDetachedPostmaster({\n      bin,\n      args: recipe.postmasterArgs,\n      port: recipe.port,\n      readyMs: HOST_READY_MS,\n    });\n  } catch (err) {\n    // A lockless starter (older cedar-pg) won the data dir → caller waits for it.\n    if (liveDataDirOwner(recipe.dataDir) != null) return;\n    throw new Error(formatHostStartError(errorDetail(err), useRamShm));\n  }\n}\n\nlet autopgVersionChecked = false;\n\n/** Once per process: warn (never fail, never upgrade) when autopg is older than the pin. */\nfunction warnIfAutopgOutdated(bin: string): void {\n  if (autopgVersionChecked) return;\n  autopgVersionChecked = true;\n  const warning = outdatedAutopgWarning(readAutopgVersion(bin));\n  if (warning) process.stderr.write(warning);\n}\n\n/**\n * Attach to a listening autopg host, else start one per\n * {@link resolveHostStartPolicy}. Internal: callers use `acquire` / `adminUrl`.\n */\nexport async function ensureHostRunning(bin = requireAutopgBin()): Promise<AutopgDiscovery> {\n  warnIfAutopgOutdated(bin);\n  let registered: AutopgRegistration | null = null;\n  try {\n    registered = discoverRegistration(bin);\n  } catch {\n    // no registration — local recovery may `install`\n  }\n  if (registered && (await waitForListener({ port: registered.host.port }))) {\n    return registered.host;\n  }\n\n  return resolveHostStartPolicy() === \"ephemeral\"\n    ? startEphemeralHost(bin)\n    : startLocalHost(bin, registered);\n}\n","import { mkdirSync, writeFileSync } from \"node:fs\";\nimport { CLI_NAME } from \"./constants.ts\";\nimport { buildDatabaseName, buildRoleName, type DbMode } from \"./naming.ts\";\nimport {\n  envPath,\n  forgetLease,\n  isOrphanLease,\n  leaseDir,\n  listRegistryLeases,\n  readLease,\n  writeLease,\n  type Lease,\n} from \"./lease.ts\";\nimport { applyDatabaseUrlEnv, runIfNeeded, type ResolveAcquireSkipInput } from \"./policy.ts\";\nimport { resolveRoot, resolveWorktreeIdentity } from \"./worktree.ts\";\nimport { buildDatabaseUrl, dropDatabasesOwnedByRole, ensureDatabase } from \"../providers/autopg.ts\";\nimport { ensureHostRunning, waitForListener } from \"../providers/host.ts\";\n\nfunction writeEnvFile(root: string, mode: DbMode, databaseUrl: string): void {\n  mkdirSync(leaseDir(root), { recursive: true, mode: 0o700 });\n  let body = `DATABASE_URL=${databaseUrl}\\n`;\n  if (mode === \"test\") body += `TEST_DATABASE_URL=${databaseUrl}\\n`;\n  writeFileSync(envPath(root, mode), body, { mode: 0o600 });\n}\n\nexport function urlFromLease(lease: Lease): string {\n  return buildDatabaseUrl({\n    port: lease.port,\n    databaseName: lease.databaseName,\n    roleName: lease.roleName,\n  });\n}\n\n/**\n * DROP every DB owned by the lease role (TEMPLATE + clones), then forget lease.\n * Provider owns ordering (clones before leased datname) on one admin connection.\n */\nasync function dropThenForget(lease: Lease, adminUrl: string): Promise<string[]> {\n  const dropped = await dropDatabasesOwnedByRole({\n    adminUrl,\n    roleName: lease.roleName,\n    preferLast: lease.databaseName,\n  });\n  forgetLease(lease);\n  return dropped;\n}\n\nexport type AcquireOptions = {\n  root?: string;\n  mode: DbMode;\n  /** Inject DATABASE_URL / TEST_DATABASE_URL into process.env (default true). */\n  setEnv?: boolean;\n  /**\n   * Start from an empty database (default false): first DROP every database\n   * owned by this worktree's role for `mode` — the leased DB, TEMPLATE clones,\n   * crashed-run leftovers — then create it again. Scoped by the role (the\n   * lease's when it is for this database, else the derived name), so it works\n   * without a lease file and never touches other worktrees.\n   */\n  fresh?: boolean;\n};\n\nexport type AcquireResult = {\n  databaseUrl: string;\n  /** Superuser URL for privileged DDL (mark template, CREATE DATABASE … TEMPLATE). */\n  adminUrl: string;\n  databaseName: string;\n  roleName: string;\n  repoSlug: string;\n  worktreeSlug: string;\n  pathHash: string;\n  root: string;\n  mode: DbMode;\n  port: number;\n  dispose: () => Promise<void>;\n};\n\n/**\n * Acquire a worktree-scoped database and return connection info.\n *\n * - `dev`: keep DB across restarts.\n * - `test`: DROP when `dispose()` is awaited (callers / test runners own teardown).\n */\nexport async function acquire(options: AcquireOptions): Promise<AcquireResult> {\n  const identity = resolveWorktreeIdentity(options.root);\n  const mode = options.mode;\n  const databaseName = buildDatabaseName(identity, mode);\n  // A lease for this database pins its role: objects inside belong to that role,\n  // and handing the DB to a newly derived name (naming changed for long names in\n  // 0.3.0) would leave the app without access to its own tables.\n  const leased = readLease(identity.root, mode);\n  const roleName =\n    leased?.databaseName === databaseName ? leased.roleName : buildRoleName(databaseName);\n\n  const host = await ensureHostRunning();\n  if (options.fresh) {\n    await dropDatabasesOwnedByRole({\n      adminUrl: host.adminUrl,\n      roleName,\n      preferLast: databaseName,\n    });\n  }\n  await ensureDatabase({\n    adminUrl: host.adminUrl,\n    databaseName,\n    roleName,\n  });\n\n  const databaseUrl = buildDatabaseUrl({\n    port: host.port,\n    databaseName,\n    roleName,\n  });\n\n  const lease: Lease = {\n    schemaVersion: 1,\n    mode,\n    root: identity.root,\n    repoSlug: identity.repoSlug,\n    worktreeSlug: identity.worktreeSlug,\n    pathHash: identity.pathHash,\n    databaseName,\n    roleName,\n    port: host.port,\n    pid: process.pid,\n    createdAt: new Date().toISOString(),\n  };\n  writeLease(lease);\n  writeEnvFile(identity.root, mode, databaseUrl);\n\n  if (options.setEnv !== false) {\n    applyDatabaseUrlEnv(databaseUrl, { mode });\n  }\n\n  const disposeFn = async () => {\n    await dispose({ root: identity.root, mode });\n  };\n\n  return {\n    databaseUrl,\n    adminUrl: host.adminUrl,\n    databaseName,\n    roleName,\n    repoSlug: identity.repoSlug,\n    worktreeSlug: identity.worktreeSlug,\n    pathHash: identity.pathHash,\n    root: identity.root,\n    mode,\n    port: host.port,\n    dispose: disposeFn,\n  };\n}\n\n/**\n * Attach-only: connection info from the lease a prior `acquire` wrote. Never\n * acquires, never runs role/database DDL, never starts or revives the host —\n * safe for many concurrent children after one `db:ready`. Throws when there is\n * no lease or nothing accepts TCP on the leased port.\n */\nexport async function attach(options: {\n  root?: string;\n  mode: DbMode;\n}): Promise<{ lease: Lease; databaseUrl: string }> {\n  const root = resolveRoot(options.root);\n  const { mode } = options;\n  const lease = readLease(root, mode);\n  if (!lease) {\n    throw new Error(\n      `no ${mode} lease in ${root}; run \\`${CLI_NAME} acquire --mode=${mode}\\` ` +\n        `(or your db:ready target) first — attach never acquires`,\n    );\n  }\n  if (!(await waitForListener({ port: lease.port }))) {\n    throw new Error(\n      `${mode} lease ${lease.databaseName} points at 127.0.0.1:${lease.port}, but nothing is ` +\n        `listening; re-run \\`${CLI_NAME} acquire --mode=${mode}\\` to bring the host back`,\n    );\n  }\n  return { lease, databaseUrl: urlFromLease(lease) };\n}\n\nexport type AcquireIfNeededOptions = AcquireOptions & ResolveAcquireSkipInput;\n\nexport type AcquireIfNeededResult =\n  | { status: \"skipped\"; reason: \"disabled\" }\n  | { status: \"skipped\"; reason: \"external-url\"; databaseUrl: string }\n  | ({ status: \"acquired\" } & AcquireResult);\n\n/**\n * Resolve skip policy then acquire. Single entry for hosts (Cedar CLI, Jest, Vitest).\n * On external-url skip, applies DATABASE_URL / TEST_DATABASE_URL when `setEnv` is not false.\n */\nexport async function acquireIfNeeded(\n  options: AcquireIfNeededOptions,\n): Promise<AcquireIfNeededResult> {\n  const outcome = await runIfNeeded(options, () =>\n    acquire({\n      root: options.root,\n      mode: options.mode,\n      setEnv: options.setEnv,\n      fresh: options.fresh,\n    }),\n  );\n  if (outcome.status === \"skipped\") return outcome;\n  return { status: \"acquired\", ...outcome.value };\n}\n\nexport type DisposeOptions = {\n  root?: string;\n  mode?: DbMode;\n};\n\nexport type DisposeResult =\n  | { dropped: true; databaseName: string; droppedDatabases: string[] }\n  | { dropped: false; reason: \"no-lease\" | \"host-unavailable\" };\n\n/**\n * Role-scoped suite teardown: DROP every database owned by the lease role\n * (TEMPLATE + clones), then DROP ROLE and forget the lease. Unsets `IS_TEMPLATE`\n * as needed. This is not per-clone cleanup — use `CloneResult.dropClone` for that.\n * No-ops without a valid lease; never invents a DROP target beyond role ownership.\n * If the host is unavailable, leaves the lease so dispose/gc can retry.\n */\nexport async function dispose(options: DisposeOptions = {}): Promise<DisposeResult> {\n  const mode = options.mode ?? \"test\";\n  const lease = readLease(resolveRoot(options.root), mode);\n  if (!lease) return { dropped: false, reason: \"no-lease\" };\n\n  let host;\n  try {\n    host = await ensureHostRunning();\n  } catch {\n    // Keep lease + registry so a later dispose/gc can still find the DB.\n    return { dropped: false, reason: \"host-unavailable\" };\n  }\n\n  const droppedDatabases = await dropThenForget(lease, host.adminUrl);\n  return {\n    dropped: true,\n    databaseName: lease.databaseName,\n    droppedDatabases,\n  };\n}\n\n/**\n * Drop databases whose registered worktree root no longer exists on disk.\n * Registry entries are removed only after a successful DROP (owned DBs + lease DB).\n */\nexport async function gc(): Promise<{\n  dropped: string[];\n}> {\n  const dropped: string[] = [];\n  const orphans = listRegistryLeases().filter(isOrphanLease);\n  if (orphans.length === 0) return { dropped };\n\n  let host;\n  try {\n    host = await ensureHostRunning();\n  } catch {\n    return { dropped };\n  }\n\n  for (const lease of orphans) {\n    try {\n      const names = await dropThenForget(lease, host.adminUrl);\n      dropped.push(...names);\n    } catch {\n      // Keep registry entry for retry\n    }\n  }\n  return { dropped };\n}\n"],"mappings":";;;;;;;;;AAIA,MAAM,SAAS;AACf,MAAM,SAAS;;;;;;;AAQf,SAAgB,kBAAkB,UAA4B,MAAsB;CAClF,MAAM,WAAW;CACjB,MAAM,WAAW,SAAS;CAI1B,MAAM,QACJ,IAGA,SAAS,SACT,IACA,SAAS;CAEX,IAAI,SAAS,SAAS;CACtB,IAAI,SAAS,GAEX,OAAO,GAAG,SAAS,SAAS,GAAG,WAAW,MAAM,GAAG,MAAM;CAG3D,IAAI,OAAO,SAAS;CACpB,IAAI,KAAK,SAAS;CAElB,OAAO,KAAK,SAAS,GAAG,SAAS,QAC/B,IAAI,KAAK,UAAU,GAAG,UAAU,KAAK,SAAS,GAC5C,OAAO,KAAK,MAAM,GAAG,EAAE;MAClB,IAAI,GAAG,SAAS,GACrB,KAAK,GAAG,MAAM,GAAG,EAAE;MAEnB;CAIJ,MAAM,OAAO,GAAG,SAAS,KAAK,GAAG,GAAG,GAAG,SAAS,GAAG;CACnD,IAAI,KAAK,SAAS,QAChB,OAAO,KAAK,MAAM,GAAG,MAAM;CAE7B,OAAO;AACT;;;;;;AAOA,SAAS,kBAAkB,cAAsB,QAAwB;CACvE,MAAM,OAAO,GAAG,eAAe;CAC/B,IAAI,KAAK,UAAU,QACjB,OAAO;CAET,MAAM,OAAO,gBAAgB,KAAK,YAAY,CAAC,GAAG,MAAM;CAIxD,OAAO,GAHM,aACV,MAAM,GAAG,KAAK,IAAI,GAAG,SAAS,KAAK,SAAS,OAAO,MAAM,CAAC,CAAC,CAC3D,QAAQ,OAAO,EACL,IAAI,OAAO,SAAS,MAAM,GAAG,MAAM;AAClD;;AAGA,SAAgB,cAAc,cAA8B;CAC1D,OAAO,kBAAkB,cAAc,OAAO;AAChD;;;;;AAMA,SAAgB,uBAAuB,cAAsB,QAAwB;CACnF,MAAM,OAAO,OACV,YAAY,CAAC,CACb,QAAQ,gBAAgB,GAAG,CAAC,CAC5B,QAAQ,YAAY,EAAE,CAAC,CACvB,MAAM,GAAG,EAAE;CAEd,OAAO,kBAAkB,cAAc,MAD3B,KAAK,SAAS,IAAI,OAAO,KACa;AACpD;;;;;;;AC9DA,SAAgB,oBACd,aACA,UAAqC,CAAC,GAChC;CACN,QAAQ,IAAI,eAAe;CAC3B,KAAK,QAAQ,QAAQ,YAAY,QAC/B,QAAQ,IAAI,oBAAoB;AAEpC;;;;;AAkBA,eAAsB,YACpB,SACA,KAC+B;CAC/B,MAAM,OAAO,mBAAmB;EAC9B,KAAK,QAAQ;EACb,OAAO,QAAQ;EACf,UAAU,QAAQ;CACpB,CAAC;CACD,IAAI,KAAK,MAAM;EACb,IAAI,KAAK,WAAW,gBAAgB;GAClC,IAAI,QAAQ,WAAW,OACrB,oBAAoB,KAAK,aAAa,EAAE,MAAM,QAAQ,KAAK,CAAC;GAE9D,OAAO;IAAE,QAAQ;IAAW,QAAQ;IAAgB,aAAa,KAAK;GAAY;EACpF;EACA,OAAO;GAAE,QAAQ;GAAW,QAAQ;EAAW;CACjD;CACA,OAAO;EAAE,QAAQ;EAAO,OAAO,MAAM,IAAI;CAAE;AAC7C;;;;;;AAOA,SAAgB,oBAAoB,KAAkC;CACpE,IAAI,CAAC,OAAO,IAAI,WAAW,OAAO,GAAG,OAAO;CAC5C,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,MAAM,eAAe,oBAClB,OAAO,SAAS,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAA,CAAI,KAAK,CAChE;EACA,MAAM,OAAO,mBAAmB,OAAO,QAAQ;EAC/C,OAAO,aAAa,WAAW,MAAM,KAAK,KAAK,WAAW,MAAM;CAClE,QAAQ;EACN,OAAO;CACT;AACF;;;;;;AAOA,SAAS,mBAAmB,KAAsB;CAEhD,IAAI,YAAY,KAAK,GAAG,GAAG,OAAO;CAElC,IAAI,UAAU,KAAK,GAAG,GAAG,OAAO;CAChC,OAAO;AACT;;;;;;AAOA,SAAgB,8BAA8B,KAAkC;CAC9E,IAAI,CAAC,KAAK,OAAO;CACjB,IAAI,IAAI,WAAW,OAAO,GAAG,OAAO;CACpC,IAAI,oBAAoB,GAAG,GAAG,OAAO;CACrC,IAAI,mBAAmB,GAAG,GAAG,OAAO;CACpC,OAAO;AACT;;;;;;AAOA,SAAgB,mBAAmB,QAAiC,CAAC,GAAgB;CAGnF,IADE,MAAM,aAAa,QAAQ,IAAI,aAAa,OAAO,QAAQ,IAAI,aAAa,UAE5E,OAAO;EAAE,MAAM;EAAM,QAAQ;CAAW;CAI1C,IADc,MAAM,SAAS,QAAQ,IAAI,mBAAmB,KAE1D,OAAO,EAAE,MAAM,MAAM;CAGvB,MAAM,MAAM,MAAM,QAAQ,KAAA,IAAY,MAAM,MAAM,QAAQ,IAAI;CAC9D,IAAI,OAAO,8BAA8B,GAAG,GAC1C,OAAO;EAAE,MAAM;EAAM,QAAQ;EAAgB,aAAa;CAAI;CAEhE,OAAO,EAAE,MAAM,MAAM;AACvB;;;;AC7GA,MAAa,wBAAA;AAEb,MAAa,eACX;;AAKF,MAAa,uBAAuB;AAEpC,SAAS,gBAA0B;CACjC,MAAM,MAAgB,CAAC;CACvB,IAAI,QAAQ,IAAI,YAAY,IAAI,KAAK,QAAQ,IAAI,UAAU;CAC3D,IAAI,KAAK,QAAQ;CACjB,IAAI,KAAK,KAAK,QAAQ,GAAG,UAAU,OAAO,QAAQ,CAAC;CACnD,OAAO;AACT;AAEA,SAAgB,mBAAkC;CAChD,KAAK,MAAM,OAAO,cAAc,GAAG;EACjC,IAAI,QAAQ,UAAU;GACpB,MAAM,QAAQ,UAAU,SAAS,CAAC,QAAQ,GAAG,EAAE,UAAU,OAAO,CAAC;GACjE,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,KAAK,GAAG,OAAO,MAAM,OAAO,KAAK;GACxE;EACF;EACA,IAAI,WAAW,GAAG,GAAG,OAAO;CAC9B;CACA,OAAO;AACT;AAEA,SAAgB,mBAA2B;CACzC,MAAM,MAAM,iBAAiB;CAC7B,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,YAAY;CAE9B,OAAO;AACT;AAEA,SAAS,uBAAuB,OAAoC;CAClE,OAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ,KAAA;AACjE;;;;;;;;;;;;AAaA,SAAgB,gBAAgB,MAAkD;CAChF,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,MAAM,IAAI,MAAM,gDAAgD,cAAc;CAChF;CACA,IAAI,OAAO,OAAO,SAAS,UACzB,MAAM,IAAI,MAAM,+CAA+C,cAAc;CAE/E,MAAM,SAA6C,EAAE,MAAM,OAAO,KAAK;CACvE,KAAK,MAAM,OAAO;EAAC;EAAW;EAAa;CAAS,GAAY;EAC9D,MAAM,QAAQ,uBAAuB,OAAO,IAAI;EAChD,IAAI,OAAO,OAAO,OAAO;CAC3B;CACA,OAAO;AACT;;;;;;;;;;;AAYA,SAAgB,YAAY,MAAc,MAAyB,QAAQ,KAAa;CAKtF,OAAO,gBAJM,mBAAmB,IAAI,kBAAkB,IAAI,mBAAmB,UAInD,EAAE,GAHX,mBACf,IAAI,sBAAsB,IAAI,uBAAuB,UAEjB,EAAE,aAAa,KAAK;AAC5D;;AAGA,SAAgB,mBAAmB,MAA+C;CAChF,MAAM,IAAI,sBAAsB,KAAK,IAAI;CACzC,OAAO,IAAI;EAAC,OAAO,EAAE,EAAE;EAAG,OAAO,EAAE,EAAE;EAAG,OAAO,EAAE,EAAE;CAAC,IAAI;AAC1D;;;;;;AAOA,SAAgB,sBACd,eACA,MAAM,uBACS;CACf,MAAM,OAAO,mBAAmB,aAAa;CAC7C,MAAM,OAAO,mBAAmB,GAAG;CACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,OAAO;CAC3B,KAAK,KAAK,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,OAAO,GAAG,OAAO;CAC/E,OACE,8BAA8B,KAAK,KAAK,GAAG,EAAE,iBAAiB,IAAI;sEAEK,IAAI,+BAA+B,IAAI;;AAGlH;;AAGA,SAAgB,kBAAkB,KAAqB;CAMrD,OALe,UAAU,KAAK,CAAC,WAAW,GAAG;EAC3C,UAAU;EACV,OAAO;GAAC;GAAU;GAAQ;EAAQ;EAClC,SAAS;CACX,CACY,CAAC,CAAC,UAAU;AAC1B;AAEA,SAAS,eAAe,KAAqB;CAC3C,IAAI;EACF,OAAO,aAAa,KAAK,CAAC,UAAU,QAAQ,GAAG;GAC7C,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAM;EAClC,CAAC;CACH,SAAS,KAAK;EACZ,MAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EAC9D,MAAM,IAAI,MAAM,mCAAmC,OAAO,IAAI,cAAc;CAC9E;AACF;;;;;;AAOA,SAAgB,qBAAqB,MAAM,iBAAiB,GAAuB;CACjF,MAAM,EAAE,MAAM,GAAG,UAAU,gBAAgB,eAAe,GAAG,CAAC;CAC9D,OAAO;EAAE,MAAM;GAAE;GAAM,UAAU,YAAY,IAAI;GAAG;EAAI;EAAG,GAAG;CAAM;AACtE;;;;;;AAOA,SAAgB,aAAa,MAAM,iBAAiB,GAAoB;CACtE,OAAO,qBAAqB,GAAG,CAAC,CAAC;AACnC;AAEA,SAAS,WAAW,MAAsB;CACxC,OAAO,IAAI,KAAK,QAAQ,MAAM,MAAI,EAAE;AACtC;AAEA,SAAS,aAAa,OAAuB;CAC3C,OAAO,IAAI,MAAM,QAAQ,MAAM,IAAI,EAAE;AACvC;;AAGA,MAAM,yBAAyB;AAC/B,MAAM,wBAAwB;;;;;;;AAe9B,eAAsB,uBACpB,SACA,OAA4B,CAAC,GACjB;CACZ,MAAM,MAAM,KAAK,OAAO,KAAK;CAC7B,MAAM,QAAQ,KAAK,WAAW,OAAe,IAAI,SAAe,MAAM,WAAW,GAAG,EAAE,CAAC;CACvF,MAAM,WAAW,IAAI,KAAK,KAAK,WAAW;CAC1C,SAAS;EACP,IAAI;GACF,OAAO,MAAM,QAAQ;EACvB,SAAS,KAAK;GACZ,IAAK,IAA2B,SAAS,WAAW,IAAI,KAAK,UAAU,MAAM;EAC/E;EACA,MAAM,MAAM,KAAK,UAAU,qBAAqB;CAClD;AACF;AAEA,eAAe,gBACb,UACA,IACY;CAEZ,MAAM,SAAS,MAAM,uBAAuB,YAAY;EACtD,MAAM,UAAU,IAAI,GAAG,OAAO,EAAE,kBAAkB,SAAS,CAAC;EAC5D,IAAI;GACF,MAAM,QAAQ,QAAQ;GACtB,OAAO;EACT,SAAS,KAAK;GACZ,MAAM,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;GAClC,MAAM;EACR;CACF,CAAC;CACD,IAAI;EACF,OAAO,MAAM,GAAG,MAAM;CACxB,UAAU;EACR,MAAM,OAAO,IAAI;CACnB;AACF;;;;;;;;AASA,SAAgB,gBAAgB,UAA0B;CACxD,OAAO,WAAW,QAAQ,CAAC,CACxB,OAAO,GAAG,qBAAqB,IAAI,UAAU,CAAC,CAC9C,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;AAChB;;;;AAKA,eAAsB,eAAe,MAKnB;CAChB,MAAM,WAAW,KAAK,YAAY,gBAAgB,KAAK,QAAQ;CAC/D,MAAM,gBAAgB,KAAK,UAAU,OAAO,WAAW;EAIrD,KAAI,MAHqB,OAAO,MAAM,6CAA6C,CACjF,KAAK,QACP,CAAC,EAAA,CACc,aAAa,GAC1B,MAAM,OAAO,MACX,eAAe,WAAW,KAAK,QAAQ,EAAE,uBAAuB,aAAa,QAAQ,GACvF;OAEA,MAAM,OAAO,MACX,cAAc,WAAW,KAAK,QAAQ,EAAE,uBAAuB,aAAa,QAAQ,GACtF;EAMF,KAAI,MAHmB,OAAO,MAAM,gDAAgD,CAClF,KAAK,YACP,CAAC,EAAA,CACY,aAAa,GACxB,MAAM,OAAO,MACX,mBAAmB,WAAW,KAAK,YAAY,EAAE,SAAS,WAAW,KAAK,QAAQ,GACpF;OAEA,MAAM,OAAO,MACX,kBAAkB,WAAW,KAAK,YAAY,EAAE,YAAY,WAAW,KAAK,QAAQ,GACtF;CAEJ,CAAC;AACH;;;;;AAMA,eAAsB,sBAAsB,MAI1B;CAChB,MAAM,OAAO,KAAK,aAAa,SAAS;CACxC,MAAM,gBAAgB,KAAK,UAAU,OAAO,WAAW;EACrD,MAAM,OAAO,MAAM,kBAAkB,WAAW,KAAK,YAAY,EAAE,oBAAoB,MAAM;CAC/F,CAAC;AACH;;AAGA,MAAM,qBAAqB;;;;;;;;;AAU3B,eAAsB,0BAA0B,MAM9B;CAChB,MAAM,gBAAgB,KAAK,UAAU,OAAO,WAAW;EACrD,MAAM,OAAO,MAAM,OAAO,MACxB,4DACA,CAAC,KAAK,YAAY,CACpB;EACA,IAAI,CAAC,KAAK,UACR,MAAM,IAAI,MAAM,gCAAgC,KAAK,cAAc;EAErE,IAAI,CAAC,KAAK,KAAK,EAAE,EAAE,eACjB,MAAM,IAAI,MAAM,uDAAuD,KAAK,cAAc;EAG5F,IAAI;GACF,MAAM,OAAO,MACX,mBAAmB,WAAW,KAAK,YAAY,EAAE,iBAAiB,WAAW,KAAK,YAAY,EAAE,SAAS,WAAW,KAAK,QAAQ,GACnI;GACA;EACF,SAAS,KAAK;GACZ,IAAK,IAA2B,SAAS,oBAAoB,MAAM;EACrE;EAKA,MAAM,SAAQ,MAJS,OAAO,MAC5B,+EACA,CAAC,KAAK,YAAY,CACpB,EAAA,CACuB,KAAK,EAAE,EAAE;EAChC,IAAI,KAAK,SAAS,UAAU,KAAK,UAAU;EAC3C,MAAM,IAAI,MACR,4BAA4B,KAAK,aAAa,aAAa,SAAS,UAAU,EAChF;CACF,CAAC;AACH;;;;;;;;;;AAWA,eAAsB,mBAAmB,MAGnB;CACpB,MAAM,MAAM,IAAI,IAAI,KAAK,QAAQ;CACjC,IAAI,WAAW,IAAI,KAAK;CACxB,OAAO,gBAAgB,IAAI,SAAS,GAAG,OAAO,WAAW;EAevD,MAAM,UAAS,MAdM,OAAO,MAC1B;;;;;;;;;;;kBAYF,EAAA,CACsB,KAAK,KAAK,MAAM,EAAE,IAAI;EAC5C,IAAI,OAAO,SAAS,GAClB,MAAM,OAAO,MAAM,kBAAkB,OAAO,KAAK,IAAI,EAAE,kBAAkB;EAE3E,OAAO;CACT,CAAC;AACH;AAEA,eAAe,kBAAkB,QAAmB,UAAqC;CAOvF,QAAO,MANc,OAAO,MAC1B;;wBAGA,CAAC,QAAQ,CACX,EAAA,CACc,KAAK,KAAK,MAAM,EAAE,OAAO;AACzC;;AAGA,eAAe,gBAAgB,QAAmB,cAAqC;CACrF,MAAM,KAAK,MAAM,OAAO,MACtB,4DACA,CAAC,YAAY,CACf;CACA,IAAI,CAAC,GAAG,YAAY,GAAG,aAAa,GAAG;CACvC,IAAI,GAAG,KAAK,EAAE,EAAE,eACd,MAAM,OAAO,MAAM,kBAAkB,WAAW,YAAY,EAAE,wBAAwB;CAExF,MAAM,OAAO,MACX;;;;OAKA,CAAC,YAAY,CACf;CACA,MAAM,OAAO,MAAM,2BAA2B,WAAW,YAAY,GAAG;AAC1E;;;;;;AAOA,eAAsB,yBAAyB,MAIzB;CACpB,OAAO,gBAAgB,KAAK,UAAU,OAAO,WAAW;EACtD,MAAM,QAAQ,MAAM,kBAAkB,QAAQ,KAAK,QAAQ;EAC3D,MAAM,UAAU,CACd,GAAG,MAAM,QAAQ,SAAS,SAAS,KAAK,UAAU,GAClD,GAAG,MAAM,QAAQ,SAAS,SAAS,KAAK,UAAU,CACpD;EACA,MAAM,UAAoB,CAAC;EAC3B,KAAK,MAAM,gBAAgB,SAAS;GAClC,MAAM,gBAAgB,QAAQ,YAAY;GAC1C,QAAQ,KAAK,YAAY;EAC3B;EACA,MAAM,OAAO,MAAM,uBAAuB,WAAW,KAAK,QAAQ,GAAG;EACrE,OAAO;CACT,CAAC;AACH;;;;;AAMA,eAAsB,aAAa,MAIjB;CAChB,MAAM,gBAAgB,KAAK,UAAU,OAAO,WAAW;EACrD,MAAM,gBAAgB,QAAQ,KAAK,YAAY;EAK/C,KAAI,MAJe,OAAO,MACxB,kGACA,CAAC,KAAK,QAAQ,CAChB,EAAA,CACS,aAAa,GACpB,MAAM,OAAO,MAAM,uBAAuB,WAAW,KAAK,QAAQ,GAAG;CAEzE,CAAC;AACH;AAEA,SAAgB,iBAAiB,MAKtB;CACT,MAAM,WAAW,KAAK,YAAY,gBAAgB,KAAK,QAAQ;CAG/D,OAAO,gBAFM,mBAAmB,KAAK,QAEX,EAAE,GADf,mBAAmB,QACE,EAAE,aAAa,KAAK,KAAK,GAAG,KAAK;AACrE;;;AClcA,MAAM,iBAAiB;AAEvB,MAAM,gBAAgB;AACtB,MAAM,eAAe;;AAErB,MAAM,yBAAyB;;AAG/B,MAAa,+BAA+B,MAAM,OAAO;;;;;AAMzD,MAAa,qBACX;;;;;;;;;AAcF,SAAgB,uBAAuB,MAAyB,QAAQ,KAAsB;CAC5F,MAAM,QAAQ,IAAI;CAClB,IAAI,UAAU,KAAK,OAAO;CAC1B,IAAI,UAAU,KAAK,OAAO;CAC1B,IAAI,IAAI,OAAO,QAAQ,OAAO;CAC9B,OAAO;AACT;AAEA,SAAgB,oBAAoB,MAA8B,CAAC,GAAwB;CACzF,MAAM,WAAW,IAAI,YAAY,QAAQ;CACzC,MAAM,eAAe,IAAI,iBAAiB,aAAa,WAAW,WAAW,UAAU;CACvF,MAAM,MAAM,IAAI,OAAO,QAAQ,SAAS,KAAK;CAC7C,MAAM,OAAO,IAAI,QAAQ;CACzB,MAAM,SAAS,aAAa,WAAW;CACvC,MAAM,UAAU,SACZ,qBAAqB,QACrB,KAAK,IAAI,UAAU,OAAO,GAAG,eAAe;CAahD,OAAO;EAAE;EAAS;EAAM,gBAAA;GAVtB;GACA,GAAI,SAAS,CAAC,OAAO,IAAI,CAAC;GAC1B;GACA,OAAO,IAAI;GACX;GACA;GACA;GACA;EAGmC;CAAE;AACzC;AAEA,SAAgB,oBAAoB,KAAa,QAA8C;CAC7F,OAAO;EAAE,MAAM,OAAO;EAAM,UAAU,YAAY,OAAO,IAAI;EAAG;CAAI;AACtE;AAEA,SAAS,MAAM,IAA2B;CACxC,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;;AAGA,SAAgB,uBAAuB,MAAuB;CAC5D,OAAO,gEAAgE,KAAK,IAAI;AAClF;AAEA,SAAgB,qBAAqB,QAAgB,YAAY,OAAe;CAE9E,OAAO,iCAAiC,OAAO,IAAI,eADtC,aAAa,uBAAuB,MAAM,IAAI,KAAK,uBAAuB;AAEzF;;AAGA,SAAS,YAAY,MAA6B;CAChD,IAAI;EACF,MAAM,IAAI,WAAW,IAAI;EACzB,OAAO,OAAO,EAAE,MAAM,IAAI,OAAO,EAAE,KAAK;CAC1C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,UAAU,KAAa,MAA+B;CAC7D,MAAM,SAAS,UAAU,KAAK,MAAM;EAClC,UAAU;EACV,OAAO;GAAC;GAAU;GAAQ;EAAM;CAClC,CAAC;CACD,IAAI,OAAO,OAAO,OAAO,OAAO,MAAM;CACtC,IAAI,OAAO,WAAW,GAAG,OAAO;CAChC,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,OAAO,UAAU;CACzD,OAAO,QAAQ,OAAO,OAAO,IAAI,OAAO,KAAK,IAAI,KAAK;AACxD;;AAGA,SAAS,WAAW,MAAgC;CAClD,OAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,SAAS,iBAAiB;GAAE,MAAM;GAAa;EAAK,SAAS;GACjE,OAAO,IAAI;GACX,QAAQ,IAAI;EACd,CAAC;EACD,OAAO,GAAG,eAAe;GACvB,QAAQ,KAAK;EACf,CAAC;CACH,CAAC;AACH;AAEA,SAAS,eAAe,OAA2B;CACjD,MAAM,MAAM,MAAM;CAClB,IAAI,OAAO,MACT,IAAI;EACF,QAAQ,KAAK,CAAC,KAAK,SAAS;CAC9B,QAAQ;EACN,IAAI;GACF,MAAM,KAAK,SAAS;EACtB,QAAQ,CAER;CACF;CAEF,MAAM,MAAM;AACd;;;;;;;;AAqBA,eAAsB,gBAAgB,MAAgD;CACpF,MAAM,QAAQ,KAAK,cAAc;CACjC,MAAM,MAAM,KAAK,OAAO,KAAK;CAC7B,MAAM,QAAQ,KAAK,SAAS;CAC5B,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,WAAW,IAAI,KAAK,KAAK,WAAW;CAE1C,SAAS;EACP,MAAM,OAAO,KAAK,UAAU;EAC5B,IAAI,MAAM,MAAM;EAChB,IAAI,MAAM,MAAM,KAAK,IAAI,GAAG,OAAO;EACnC,IAAI,IAAI,KAAK,UAAU,OAAO;EAC9B,MAAM,MAAM,MAAM;CACpB;AACF;;;;;;;;AASA,eAAe,eAAe,KAAa,UAAU,GAAoC;CACvF,IAAI;CACJ,IAAI;EACF,aAAa,aAAa,GAAG;CAC/B,QAAQ;EACN,OAAO;CACT;CACA,OAAQ,MAAM,gBAAgB;EAAE,MAAM,WAAW;EAAM;CAAQ,CAAC,IAAK,aAAa;AACpF;;AAGA,MAAM,yBAAyB;AAE/B,SAAS,YAAY,KAAsB;CACzC,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;;;;;;AAOA,SAAS,iBAAiB,SAAgC;CACxD,OAAO,UAAU,KAAK,SAAS,gBAAgB,CAAC;AAClD;;AAGA,SAAS,UAAU,MAA6B;CAC9C,IAAI;CACJ,IAAI;EACF,MAAM,OAAO,SAAS,aAAa,MAAM,MAAM,GAAG,EAAE;CACtD,QAAQ;EACN,OAAO;CACT;CACA,IAAI,CAAC,OAAO,UAAU,GAAG,KAAK,OAAO,GAAG,OAAO;CAC/C,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,SAAS,KAAK;EACZ,OAAQ,IAA8B,SAAS,UAAU,MAAM;CACjE;AACF;;;;;;;;;;AAWA,SAAS,iBAAiB,UAAiC;CACzD,MAAM,OAAO,GAAG,SAAS,GAAG,QAAQ;CACpC,cAAc,MAAM,OAAO,QAAQ,GAAG,CAAC;CACvC,IAAI;EACF,SAAS;GACP,IAAI;IACF,SAAS,MAAM,QAAQ;IACvB,OAAO;GACT,SAAS,KAAK;IACZ,IAAK,IAA8B,SAAS,UAAU,MAAM;GAC9D;GACA,MAAM,SAAS,UAAU,QAAQ;GACjC,IAAI,UAAU,MAAM,OAAO;GAC3B,OAAO,UAAU,EAAE,OAAO,KAAK,CAAC;EAClC;CACF,UAAU;EACR,OAAO,MAAM,EAAE,OAAO,KAAK,CAAC;CAC9B;AACF;;;;;;;AAQA,eAAe,wBAAwB,MAMrB;CAChB,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,KAAK,UAAU,SAAS,KAAK,SAAS,GAAG,IAAI;CAC3D,IAAI;CACJ,IAAI;EACF,QAAQ,MAAM,KAAK,KAAK,KAAK,MAAM;GACjC,UAAU;GACV,OAAO,SAAS,OAAO,WAAW;IAAC;IAAU;IAAO;GAAK;EAC3D,CAAC;CACH,UAAU;EACR,IAAI,SAAS,MAAM,UAAU,KAAK;CACpC;CACA,IAAI,OAAqB;CACzB,MAAM,GAAG,UAAU,QAAQ;EACzB,uBAAO,IAAI,MAAM,uCAAuC,IAAI,SAAS;CACvE,CAAC;CACD,MAAM,GAAG,SAAS,MAAM,WAAW;EACjC,yBAAS,IAAI,MAAM,+CAA+C,KAAK,WAAW,OAAO,GAAG;CAC9F,CAAC;CAED,IAAI;EAMF,IAAI,CAAC,MALmB,gBAAgB;GACtC,MAAM,KAAK;GACX;GACA,eAAe;EACjB,CAAC,GAEC,MAAM,IAAI,MACR,8CAA8C,KAAK,KAAK,UAAU,QAAQ,IAC5E;CAEJ,SAAS,KAAK;EACZ,eAAe,KAAK;EACpB,MAAM;CACR;CAEA,MAAM,MAAM;AACd;;;;;;;;;AAUA,eAAe,2BACb,KACA,KACwB;CACxB,MAAM,EAAE,SAAS,WAAW,YAAY;CACxC,MAAM,EAAE,SAAS,IAAI;CACrB,IAAI,CAAC,SAAS,OAAO;CAErB,MAAM,OAAO;EACX;EACA;EACA,OAAO,IAAI;EACX;EACA;EACA,GAAI,YAAY,CAAC,gBAAgB,SAAS,IAAI,CAAC;CACjD;CACA,MAAM,QAAQ,UAAU,KAAK,KAAK,GAAG;CACrC,MAAM,UAAU,UAAU,KAAK,SAAS,sBAAsB,IAAI,KAAA;CAElE,IAAI,iBAAiB,OAAO,KAAK,MAC/B,IAAI;EACF,UAAU,SAAS;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACnD,IAAI,SAAS,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;EACnD,MAAM,wBAAwB;GAC5B;GACA;GACA;GACA,SAAS;GACT,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAC/B,CAAC;EACD,OAAO;CACT,SAAS,KAAK;EAEZ,IAAI,iBAAiB,OAAO,KAAK,MAC/B,OAAO,GAAG,MAAM,IAAI,YAAY,GAAG,IAAI,UAAU,qBAAqB,YAAY;CAEtF;CAGF,IAAI,MAAM,gBAAgB;EAAE;EAAM,SAAS;CAAc,CAAC,GAAG,OAAO;CACpE,OACE,GAAG,MAAM,mBAAmB,iBAAiB,OAAO,KAAK,IAAI,QAAQ,QAAQ,gCAC7C,KAAK,UAAU,cAAc;AAEjE;;;;;;;;;;;AAYA,eAAe,eACb,KACA,YAC0B;CAC1B,MAAM,WAAqB,CAAC;CAE5B,MAAM,iBAAiB,UAAU,KAAK,CAAC,SAAS,CAAC;CACjD,IAAI,gBACF,SAAS,KAAK,mBAAmB,gBAAgB;MAC5C;EACL,MAAM,WAAW,MAAM,eAAe,KAAK,sBAAsB;EACjE,IAAI,UAAU,OAAO;EACrB,SAAS,KAAK,sCAAsC,uBAAuB,GAAG;CAChF;CAEA,IAAI,YAAY;EACd,MAAM,UAAU,MAAM,2BAA2B,KAAK,UAAU;EAChE,IAAI,CAAC,SAAS,OAAO,WAAW;EAChC,SAAS,KAAK,OAAO;CACvB,OAAO;EACL,MAAM,iBAAiB,UAAU,KAAK,CAAC,SAAS,CAAC;EACjD,IAAI,gBACF,SAAS,KAAK,mBAAmB,gBAAgB;OAC5C;GACL,MAAM,WAAW,MAAM,eAAe,KAAK,aAAa;GACxD,IAAI,UAAU,OAAO;GACrB,SAAS,KAAK,sCAAsC,cAAc,GAAG;EACvE;CACF;CAEA,MAAM,QACJ,cAAc,OACV,0CAA0C,WAAW,KAAK,KAAK,gCAC/D;CACN,MAAM,IAAI,MAAM,qBAAqB,GAAG,QAAQ,SAAS,KAAK,IAAI,GAAG,CAAC;AACxE;;;;;;;;;;;AAYA,eAAsB,mBACpB,KACA,SAA8B,oBAAoB,GACxB;CAC1B,MAAM,EAAE,SAAS,SAAS;CAC1B,IAAI,MAAM,WAAW,IAAI,GAAG,OAAO,oBAAoB,KAAK,MAAM;CAElE,MAAM,YAAY,OAAO,eAAe,SAAS,OAAO;CACxD,MAAM,WAAW,GAAG,QAAQ;CAC5B,MAAM,SAAS,iBAAiB,QAAQ;CACxC,IAAI,UAAU,MACZ,IAAI;EAEF,IAAI,CAAE,MAAM,WAAW,IAAI,KAAM,iBAAiB,OAAO,KAAK,MAC5D,MAAM,mBAAmB,KAAK,QAAQ,SAAS;CAEnD,UAAU;EACR,OAAO,UAAU,EAAE,OAAO,KAAK,CAAC;CAClC;CAGF,IAAI,MAAM,gBAAgB;EAAE;EAAM,SAAS;CAAc,CAAC,GACxD,OAAO,oBAAoB,KAAK,MAAM;CAExC,MAAM,QACJ,UAAU,OACN,kBAAkB,WAClB,kBAAkB,iBAAiB,OAAO,KAAK;CACrD,MAAM,IAAI,MACR,qBACE,GAAG,MAAM,QAAQ,QAAQ,gCAAgC,KAAK,UAAU,cAAc,KACtF,SACF,CACF;AACF;;AAGA,eAAe,mBACb,KACA,QACA,WACe;CAIf,OAAO,OAAO,SAAS;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAEvD,IAAI,WAAW;EACb,MAAM,OAAO,YAAY,UAAU;EACnC,IAAI,QAAQ,QAAQ,OAAA,WAClB,QAAQ,OAAO,MACb,qCAAqC,KAAK,MAAM,QAAQ,OAAO,KAAK,EAAE,sBACrD,KAAK,MAAM,gCAAgC,OAAO,KAAK,EAAE,kBACrE,mBAAmB,GAC1B;CAEJ;CAEA,UAAU,OAAO,SAAS,EAAE,WAAW,KAAK,CAAC;CAE7C,IAAI;EACF,MAAM,wBAAwB;GAC5B;GACA,MAAM,OAAO;GACb,MAAM,OAAO;GACb,SAAS;EACX,CAAC;CACH,SAAS,KAAK;EAEZ,IAAI,iBAAiB,OAAO,OAAO,KAAK,MAAM;EAC9C,MAAM,IAAI,MAAM,qBAAqB,YAAY,GAAG,GAAG,SAAS,CAAC;CACnE;AACF;AAEA,IAAI,uBAAuB;;AAG3B,SAAS,qBAAqB,KAAmB;CAC/C,IAAI,sBAAsB;CAC1B,uBAAuB;CACvB,MAAM,UAAU,sBAAsB,kBAAkB,GAAG,CAAC;CAC5D,IAAI,SAAS,QAAQ,OAAO,MAAM,OAAO;AAC3C;;;;;AAMA,eAAsB,kBAAkB,MAAM,iBAAiB,GAA6B;CAC1F,qBAAqB,GAAG;CACxB,IAAI,aAAwC;CAC5C,IAAI;EACF,aAAa,qBAAqB,GAAG;CACvC,QAAQ,CAER;CACA,IAAI,cAAe,MAAM,gBAAgB,EAAE,MAAM,WAAW,KAAK,KAAK,CAAC,GACrE,OAAO,WAAW;CAGpB,OAAO,uBAAuB,MAAM,cAChC,mBAAmB,GAAG,IACtB,eAAe,KAAK,UAAU;AACpC;;;ACxhBA,SAAS,aAAa,MAAc,MAAc,aAA2B;CAC3E,UAAU,SAAS,IAAI,GAAG;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAC1D,IAAI,OAAO,gBAAgB,YAAY;CACvC,IAAI,SAAS,QAAQ,QAAQ,qBAAqB,YAAY;CAC9D,cAAc,QAAQ,MAAM,IAAI,GAAG,MAAM,EAAE,MAAM,IAAM,CAAC;AAC1D;AAEA,SAAgB,aAAa,OAAsB;CACjD,OAAO,iBAAiB;EACtB,MAAM,MAAM;EACZ,cAAc,MAAM;EACpB,UAAU,MAAM;CAClB,CAAC;AACH;;;;;AAMA,eAAe,eAAe,OAAc,UAAqC;CAC/E,MAAM,UAAU,MAAM,yBAAyB;EAC7C;EACA,UAAU,MAAM;EAChB,YAAY,MAAM;CACpB,CAAC;CACD,YAAY,KAAK;CACjB,OAAO;AACT;;;;;;;AAsCA,eAAsB,QAAQ,SAAiD;CAC7E,MAAM,WAAW,wBAAwB,QAAQ,IAAI;CACrD,MAAM,OAAO,QAAQ;CACrB,MAAM,eAAe,kBAAkB,UAAU,IAAI;CAIrD,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI;CAC5C,MAAM,WACJ,QAAQ,iBAAiB,eAAe,OAAO,WAAW,cAAc,YAAY;CAEtF,MAAM,OAAO,MAAM,kBAAkB;CACrC,IAAI,QAAQ,OACV,MAAM,yBAAyB;EAC7B,UAAU,KAAK;EACf;EACA,YAAY;CACd,CAAC;CAEH,MAAM,eAAe;EACnB,UAAU,KAAK;EACf;EACA;CACF,CAAC;CAED,MAAM,cAAc,iBAAiB;EACnC,MAAM,KAAK;EACX;EACA;CACF,CAAC;CAeD,WAAW;EAZT,eAAe;EACf;EACA,MAAM,SAAS;EACf,UAAU,SAAS;EACnB,cAAc,SAAS;EACvB,UAAU,SAAS;EACnB;EACA;EACA,MAAM,KAAK;EACX,KAAK,QAAQ;EACb,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CAErB,CAAC;CAChB,aAAa,SAAS,MAAM,MAAM,WAAW;CAE7C,IAAI,QAAQ,WAAW,OACrB,oBAAoB,aAAa,EAAE,KAAK,CAAC;CAG3C,MAAM,YAAY,YAAY;EAC5B,MAAM,QAAQ;GAAE,MAAM,SAAS;GAAM;EAAK,CAAC;CAC7C;CAEA,OAAO;EACL;EACA,UAAU,KAAK;EACf;EACA;EACA,UAAU,SAAS;EACnB,cAAc,SAAS;EACvB,UAAU,SAAS;EACnB,MAAM,SAAS;EACf;EACA,MAAM,KAAK;EACX,SAAS;CACX;AACF;;;;;;;AAQA,eAAsB,OAAO,SAGsB;CACjD,MAAM,OAAO,YAAY,QAAQ,IAAI;CACrC,MAAM,EAAE,SAAS;CACjB,MAAM,QAAQ,UAAU,MAAM,IAAI;CAClC,IAAI,CAAC,OACH,MAAM,IAAI,MACR,MAAM,KAAK,YAAY,KAAK,UAAU,SAAS,kBAAkB,KAAK,2DAExE;CAEF,IAAI,CAAE,MAAM,gBAAgB,EAAE,MAAM,MAAM,KAAK,CAAC,GAC9C,MAAM,IAAI,MACR,GAAG,KAAK,SAAS,MAAM,aAAa,uBAAuB,MAAM,KAAK,uCAC7C,SAAS,kBAAkB,KAAK,0BAC3D;CAEF,OAAO;EAAE;EAAO,aAAa,aAAa,KAAK;CAAE;AACnD;;;;;AAaA,eAAsB,gBACpB,SACgC;CAChC,MAAM,UAAU,MAAM,YAAY,eAChC,QAAQ;EACN,MAAM,QAAQ;EACd,MAAM,QAAQ;EACd,QAAQ,QAAQ;EAChB,OAAO,QAAQ;CACjB,CAAC,CACH;CACA,IAAI,QAAQ,WAAW,WAAW,OAAO;CACzC,OAAO;EAAE,QAAQ;EAAY,GAAG,QAAQ;CAAM;AAChD;;;;;;;;AAkBA,eAAsB,QAAQ,UAA0B,CAAC,GAA2B;CAClF,MAAM,OAAO,QAAQ,QAAQ;CAC7B,MAAM,QAAQ,UAAU,YAAY,QAAQ,IAAI,GAAG,IAAI;CACvD,IAAI,CAAC,OAAO,OAAO;EAAE,SAAS;EAAO,QAAQ;CAAW;CAExD,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,kBAAkB;CACjC,QAAQ;EAEN,OAAO;GAAE,SAAS;GAAO,QAAQ;EAAmB;CACtD;CAEA,MAAM,mBAAmB,MAAM,eAAe,OAAO,KAAK,QAAQ;CAClE,OAAO;EACL,SAAS;EACT,cAAc,MAAM;EACpB;CACF;AACF;;;;;AAMA,eAAsB,KAEnB;CACD,MAAM,UAAoB,CAAC;CAC3B,MAAM,UAAU,mBAAmB,CAAC,CAAC,OAAO,aAAa;CACzD,IAAI,QAAQ,WAAW,GAAG,OAAO,EAAE,QAAQ;CAE3C,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,kBAAkB;CACjC,QAAQ;EACN,OAAO,EAAE,QAAQ;CACnB;CAEA,KAAK,MAAM,SAAS,SAClB,IAAI;EACF,MAAM,QAAQ,MAAM,eAAe,OAAO,KAAK,QAAQ;EACvD,QAAQ,KAAK,GAAG,KAAK;CACvB,QAAQ,CAER;CAEF,OAAO,EAAE,QAAQ;AACnB"}