@endora-commerce/test-kit 0.100.0

package/dist/database/run-isolation.js

@@ -0,0 +1,490 @@
+/**
+ * Per-invocation test isolation (issue #189).
+ *
+ * ## The defect
+ *
+ * Isolation in this suite is **per database and per Redis instance**, not per
+ * invocation. `helpers/test-server.ts` truncates `SEEDED_TABLES`, composes a
+ * server and seeds fixtures on every booting file, so a second `vitest run`
+ * against the same `b2b_test` lands its truncate in the middle of the first
+ * one's setup. Three agents hit that in one day and every one of them read it
+ * as a real failure first: `Hook timed out in 30000ms` in `beforeAll`, then
+ * `Cannot read properties of undefined (reading 'app')` in the teardown that
+ * never got a handle; a shifting subset of one directory failing with 403s and
+ * missing fixtures, a different subset each run; and a role created through the
+ * API reading back `null` because another invocation had truncated
+ * `admin_roles` between the write and the read.
+ *
+ * The cost is not the flakes. It is that a false failure is indistinguishable
+ * from a true one, so the failure is either chased for an hour or — worse —
+ * dismissed as "probably the shared database" when it is real.
+ *
+ * ## The answer
+ *
+ * A run gets its **own** database and its **own** Redis logical database,
+ * automatically. The escape hatch already existed and was manual — every agent
+ * that got clean results set `TEST_DATABASE_URL=…/b2b_<something>_test` by hand
+ * — so this makes the thing that already worked the default rather than a thing
+ * you have to know. (156 hand-named test databases were standing on the
+ * developer machine that reported this, 4.1 GB of them, which is the other half
+ * of what "manual" costs.)
+ *
+ * **Per invocation, not per file.** The harness's per-file cost already
+ * dominates the suite (issue #72: a truncate is 1149 ms per composition), so a
+ * fresh database per *file* would be unaffordable. Per invocation is the
+ * granularity the defect actually has.
+ *
+ * **Cloned, not migrated.** `<base>_tpl` is the migrated template — created and
+ * brought up to date once, under an advisory lock so concurrent invocations
+ * cannot race on it — and each run is `create database … template <base>_tpl`,
+ * which is a file copy: 0.2 s warm against the 39 MB this schema occupies.
+ * Nothing about the migration coverage changes: the template is still migrated
+ * from scratch on a fresh cluster, which is what the CI job's comment about
+ * exercising the whole chain is protecting.
+ *
+ * **And it is the template of this run's migration set, not the machine's.**
+ * `<base>_tpl_<digest>` (issue #289): the digest covers the ordered migration
+ * class names *and* the content of every file that writes into a template, so
+ * two branches that differ anywhere a template can see get two templates, and
+ * two trees that agree share one and migrate once between them. Before that
+ * there was one `<base>_tpl` and a check comparing applied migration *names*
+ * against the configured order — which catches a branch that added a migration
+ * and cannot catch one that changed what a migration of the same name does.
+ * See `templateDigest`. What the name claims is checked against the template's
+ * own provenance comment and against `mikro_orm_migrations` before anything is
+ * cloned; a template that cannot account for itself is rebuilt, never used.
+ *
+ * **Names satisfy the existing guard.** `runDatabaseName` refuses to produce a
+ * name `TEST_DATABASE_NAME_PATTERN` would not accept, so the harness's refusal
+ * to truncate a non-test database is untouched — not loosened, not bypassed.
+ * That predicate lives here now and every caller imports it, so there is
+ * one spelling of it rather than three.
+ *
+ * **Redis by logical database index, not by key prefix.** Every Redis client in
+ * this tree — 8 in `src/`, 40-odd in `test/` — is built as
+ * `new Redis(process.env['REDIS_URL'] ?? 'redis://localhost:6379')`, and
+ * ioredis reads the index off the DSN path. Pointing `REDIS_URL` at
+ * `…/<index>` therefore isolates all of them, including BullMQ, with no call
+ * site changed. A key prefix would have to be threaded through every one of
+ * those constructions, and `keys(pattern)` — which `dropStaleCaches` uses — is
+ * not a key-taking command as far as ioredis is concerned, so a prefixed client
+ * would still scan and delete another run's keys.
+ *
+ * ## Cleanup
+ *
+ * The run database is dropped by the lease's own release. A **crashed**
+ * run cannot run its teardown, so every invocation also sweeps: run databases
+ * carry their creation instant in their name, and one older than
+ * `STALE_RUN_DATABASE_MS` with no connection to it is dropped, at most
+ * `SWEEP_LIMIT` per invocation. Only names this module generated are ever
+ * considered — the 156 hand-named databases and anything else on the cluster
+ * are outside the pattern by construction, and `strandedRunDatabases` is
+ * unit-tested on exactly that. Redis leases expire on their own TTL.
+ *
+ * **Templates are collected too**, and have to be: one per migration set means
+ * one left behind whenever a branch gains a migration or is rebased.
+ * `staleTemplates` is the other half of the bargain keying them made — same
+ * three conditions, with the age read from the template's provenance rather
+ * than from its name, because what matters about a template is when it was last
+ * *used*.
+ */
+import { createHash, randomBytes } from 'node:crypto';
+import { hostname } from 'node:os';
+/**
+ * A database name that says "this database exists to be wiped".
+ *
+ * The one spelling of the judgement. `assertTestDatabaseUrl` applies it before
+ * a run touches anything, `runDatabaseName` refuses to emit a name that fails
+ * it, and the application's own dev-seed guard keeps its copy pinned to this one
+ * by a test of its own — `backend/src/seeds/dev-seed-guard.ts` is `src/`, so it
+ * cannot import a test's module and has to re-spell the regex.
+ */
+export const TEST_DATABASE_NAME_PATTERN = /(^|_)test(_|$)/;
+/** PostgreSQL identifiers are 63 bytes; a longer name is silently truncated. */
+const MAX_IDENTIFIER_LENGTH = 63;
+/** What separates the base name from the run token. */
+const RUN_INFIX = '_r_';
+/**
+ * The migrated database a run is cloned from. Nothing runs tests against it.
+ *
+ * The suffix is followed by the migration set's digest — see `templateDigest`.
+ * The bare `<base>_tpl` was the pre-#289 name and is nobody's template now.
+ */
+const TEMPLATE_SUFFIX = '_tpl';
+/** How many hex characters of the digest a template name carries. */
+export const TEMPLATE_DIGEST_LENGTH = 12;
+/** How old a run database must be before a sweep may take it for stranded. */
+export const STALE_RUN_DATABASE_MS = 4 * 60 * 60 * 1000;
+/**
+ * How long a template survives with nothing using it.
+ *
+ * Templates are keyed by the migration set, so a branch that adds a migration
+ * leaves the previous set's template behind the moment it is rebased or merged.
+ * A day of nobody asking for a set is the point at which keeping its 19 MB
+ * costs more than the one migration pass rebuilding it would.
+ */
+export const STALE_TEMPLATE_MS = 24 * 60 * 60 * 1000;
+/** How many stranded databases one invocation drops, so a sweep cannot become the run's cost. */
+export const SWEEP_LIMIT = 25;
+/** The environment variable that turns per-invocation isolation off. */
+export const ISOLATION_ENV = 'BACKEND_TEST_ISOLATION';
+/** Set this to keep the run database after the run, for a post-mortem. */
+export const KEEP_DATABASE_ENV = 'BACKEND_TEST_KEEP_DATABASE';
+/**
+ * The base DSN, exported to the workers by the lease on the isolated
+ * path only.
+ *
+ * Its **presence is the statement** "this invocation has a migrated template,
+ * and a file that needs a database of its own may clone it" — which is what
+ * `setupMigratorTestDb` asks. Nothing derives it from the run database's name:
+ * a run database is `<base>_r_<stamp>_<token>` and taking the base back out of
+ * one would be a second, weaker spelling of `runDatabaseName`.
+ */
+export const BASE_DATABASE_URL_ENV = 'BACKEND_TEST_BASE_URL';
+/**
+ * The template this run was cloned from, exported to the workers alongside it.
+ *
+ * A name and not a derivation, because since #289 there is more than one
+ * template on the cluster and which one is this run's is a fact about the run,
+ * not about the base: another invocation may build a template of its own while
+ * this one is still going, and a file that re-derived "the template" mid-run
+ * would clone whichever set happened to be newest.
+ */
+export const TEMPLATE_DATABASE_ENV = 'BACKEND_TEST_TEMPLATE';
+export function isolationMode(env = process.env) {
+    const raw = env[ISOLATION_ENV]?.trim();
+    if (raw === undefined || raw === '')
+        return 'per-invocation';
+    if (raw === 'per-invocation' || raw === 'shared')
+        return raw;
+    throw new Error(`${ISOLATION_ENV} must be "per-invocation" or "shared" (got "${raw}"). ` +
+        `"shared" is the pre-#189 behaviour: every invocation on one database.`);
+}
+/**
+ * Why this run is sharing the base database rather than taking one of its own,
+ * or `undefined` when it is not.
+ */
+export function sharedDatabaseReason(env, baseName) {
+    if (isolationMode(env) === 'shared')
+        return 'explicit';
+    if (!TEST_DATABASE_NAME_PATTERN.test(baseName))
+        return 'name-override';
+    return undefined;
+}
+/** Whether this run keeps its database for a post-mortem instead of dropping it. */
+export function keepRunDatabase(env = process.env) {
+    const raw = env[KEEP_DATABASE_ENV]?.trim();
+    return raw !== undefined && raw !== '' && raw !== '0' && raw !== 'false';
+}
+function assertSafeIdentifier(name) {
+    if (!/^[A-Za-z0-9_]+$/.test(name)) {
+        throw new Error(`unsafe database name "${name}" — a generated name is interpolated into ` +
+            `CREATE/DROP DATABASE, which cannot parameterise it.`);
+    }
+}
+function assertUsableDatabaseName(name) {
+    assertSafeIdentifier(name);
+    if (name.length > MAX_IDENTIFIER_LENGTH) {
+        throw new Error(`generated database name "${name}" is ${name.length} bytes; PostgreSQL truncates ` +
+            `identifiers at ${MAX_IDENTIFIER_LENGTH}, and a truncated name would collide with ` +
+            `another run's. Shorten the base name in TEST_DATABASE_URL.`);
+    }
+    if (!TEST_DATABASE_NAME_PATTERN.test(name)) {
+        throw new Error(`generated database name "${name}" is not a test database by the convention ` +
+            `the base DSN is judged by before a run touches anything. Isolation may not widen that ` +
+            `judgement — point TEST_DATABASE_URL at a database whose name carries "test".`);
+    }
+    return name;
+}
+/**
+ * The migrated source every run of *this migration set* is cloned from.
+ *
+ * The digest is in the name because that is what makes two different migration
+ * sets two different databases: a template is shared exactly by the runs whose
+ * platform it actually is, and never by the runs that merely share a cluster
+ * with it. See `templateDigest` for what "the same set" means, and issue #289
+ * for what one shared `<base>_tpl` cost.
+ */
+export function templateDatabaseName(base, digest) {
+    assertSafeIdentifier(base);
+    if (!new RegExp(`^[0-9a-f]{${TEMPLATE_DIGEST_LENGTH}}$`).test(digest)) {
+        throw new Error(`"${digest}" is not a migration-set digest — expected ${TEMPLATE_DIGEST_LENGTH} hex ` +
+            `characters from templateDigest(). A template whose name does not carry its identity ` +
+            `is the one issue #289 is about.`);
+    }
+    return assertUsableDatabaseName(`${base}${TEMPLATE_SUFFIX}_${digest}`);
+}
+/**
+ * The lock every invocation of this base takes before it touches a template.
+ *
+ * One key for the whole family rather than one per digest: a sweep walks the
+ * templates of *other* digests, so it has to exclude an invocation that is
+ * half-way through building one. It is also, deliberately, the exact string the
+ * pre-#289 code derived its key from, so an invocation running that code still
+ * serializes against this one while the two versions coexist on a machine.
+ */
+export function templateFamilyName(base) {
+    assertSafeIdentifier(base);
+    return `${base}${TEMPLATE_SUFFIX}`;
+}
+/** The digest a template name carries, or `undefined` for a name this module did not make. */
+export function parseTemplateDatabaseName(base, name) {
+    if (!/^[A-Za-z0-9_]+$/.test(base))
+        return undefined;
+    const match = new RegExp(`^${base}${TEMPLATE_SUFFIX}_([0-9a-f]{${TEMPLATE_DIGEST_LENGTH}})$`).exec(name);
+    return match ? { digest: match[1] } : undefined;
+}
+/**
+ * What makes two runs' templates the same template.
+ *
+ * Issue #189 keyed the template on the base database alone and compared the
+ * *names* of the applied migrations against this run's order before cloning it.
+ * That catches a template another branch added a migration to. It does not
+ * catch — and cannot — a branch that changed what a migration of the same name
+ * *does*, which is the ordinary shape of two agents iterating on the same
+ * feature, and it is how a run whose tree contained no such string failed
+ * against a payment method row called `paypal_checkout` seeded from a branch it
+ * had never seen (issue #289).
+ *
+ * So the identity is the whole input: the ordered class names — order included,
+ * because a manifest `dependencies` edit reorders migrations without touching
+ * one of them — and the content of every file that writes into the template,
+ * which is every migration source plus the handful of files that seed the
+ * platform invariants. Two trees that agree on all of it share a template and
+ * pay one migration pass between them; two that do not cannot collide, because
+ * they are not looking at the same database at all.
+ *
+ * It **throws on an empty input** rather than digesting nothing: every empty
+ * input hashes to the same value, so a caller that read no migrations would
+ * quietly name the same template as a caller that read all of them — a template
+ * of unknown provenance, which is the defect and not a fix for it.
+ */
+export function templateDigest(inputs) {
+    if (inputs.migrations.length === 0) {
+        throw new Error('refusing to identify a migration template from no migrations — the digest would be the ' +
+            'one every empty read produces, and every such run would share one template.');
+    }
+    if (inputs.sources.length === 0) {
+        throw new Error('refusing to identify a migration template from no source files — the migration names ' +
+            'alone cannot see a branch that changed what a migration of the same name does.');
+    }
+    const hash = createHash('sha256');
+    hash.update('migrations\n');
+    for (const name of inputs.migrations)
+        hash.update(`${name}\n`);
+    hash.update('sources\n');
+    for (const source of [...inputs.sources].sort((a, b) => (a.path < b.path ? -1 : 1))) {
+        hash.update(`${source.path} ${source.sha256}\n`);
+    }
+    return hash.digest('hex').slice(0, TEMPLATE_DIGEST_LENGTH);
+}
+/** The marker that says the comment is ours and is the shape this version reads. */
+const PROVENANCE_MARKER = 'b2b-test-template v1';
+export function formatTemplateProvenance(provenance) {
+    return (`${PROVENANCE_MARKER} digest=${provenance.digest} migrations=${provenance.migrations} ` +
+        `lastUsedAt=${provenance.lastUsedAt.toISOString()}`);
+}
+/**
+ * What the template says it is, or `undefined` when it says nothing this
+ * version understands.
+ *
+ * Every "undefined" is a template a run must rebuild rather than clone: an
+ * older version's template, a hand-made database that happens to fit the name,
+ * one whose build died before it could sign itself. "I cannot tell what this
+ * holds" and "this holds the wrong thing" get the same answer on purpose.
+ */
+export function parseTemplateProvenance(comment) {
+    if (!comment || !comment.startsWith(PROVENANCE_MARKER))
+        return undefined;
+    const digest = /\bdigest=([0-9a-f]+)/.exec(comment)?.[1];
+    const migrations = /\bmigrations=(\d+)/.exec(comment)?.[1];
+    const lastUsedAt = /\blastUsedAt=(\S+)/.exec(comment)?.[1];
+    if (digest === undefined || migrations === undefined || lastUsedAt === undefined) {
+        return undefined;
+    }
+    const at = new Date(lastUsedAt);
+    if (Number.isNaN(at.getTime()))
+        return undefined;
+    return { digest, migrations: Number.parseInt(migrations, 10), lastUsedAt: at };
+}
+/**
+ * The templates a sweep may drop.
+ *
+ * Keying templates by their migration set is what stops two branches sharing
+ * one; the cost of it is that a branch leaves its set's template behind when it
+ * merges, so something has to collect them. Same three conditions as the run
+ * database sweep — a name this module generated, nothing connected, nobody
+ * using it lately — with the age read from the template's own provenance
+ * comment rather than from its name, because a template's useful age is when it
+ * was last *used* and not when it was built.
+ *
+ * A template with no readable provenance is stale immediately. It is a database
+ * no run would clone anyway (provisioning rebuilds one it cannot identify), so
+ * leaving it costs disk and buys nothing. The pre-#289 `<base>_tpl` is not in
+ * the population at all — `parseTemplateDatabaseName` refuses it — because an
+ * invocation running older code clones that one *during* its run, and dropping
+ * it under such a run would fail it for a reason in nobody's diff.
+ */
+export function staleTemplates(input) {
+    const selected = [];
+    for (const name of input.names) {
+        if (selected.length >= input.limit)
+            break;
+        if (name === input.keep)
+            continue;
+        if (input.busy.has(name))
+            continue;
+        if (!parseTemplateDatabaseName(input.base, name))
+            continue;
+        const lastUsed = input.lastUsed.get(name);
+        if (lastUsed && input.now.getTime() - lastUsed.getTime() < input.maxAgeMs)
+            continue;
+        selected.push(name);
+    }
+    return selected;
+}
+export function randomRunToken() {
+    return randomBytes(3).toString('hex');
+}
+/**
+ * `<base>_r_<epoch-seconds base36>_<6 hex>`.
+ *
+ * The instant is in the name because `pg_database` has no creation timestamp
+ * and the sweep needs an age. The random tail is what makes two invocations
+ * starting in the same second distinct.
+ */
+export function runDatabaseName(base, createdAt = new Date(), token = randomRunToken()) {
+    assertSafeIdentifier(base);
+    const stamp = Math.floor(createdAt.getTime() / 1000).toString(36);
+    return assertUsableDatabaseName(`${base}${RUN_INFIX}${stamp}_${token}`);
+}
+export function parseRunDatabaseName(base, name) {
+    if (!/^[A-Za-z0-9_]+$/.test(base))
+        return undefined;
+    const match = new RegExp(`^${base}${RUN_INFIX}([0-9a-z]+)_([0-9a-f]{6})$`).exec(name);
+    if (!match)
+        return undefined;
+    const seconds = Number.parseInt(match[1], 36);
+    if (!Number.isFinite(seconds))
+        return undefined;
+    return { createdAt: new Date(seconds * 1000) };
+}
+/**
+ * The stranded run databases a sweep may drop.
+ *
+ * Three conditions, and each one is load-bearing: the name is one this module
+ * generated (so no foreign database is ever a candidate), it is older than the
+ * threshold (so a live run is not taken for a corpse — the complete suite takes
+ * the better part of an hour), and nothing is connected to it right now (a
+ * booting file closes the ORM between files, so idleness alone would not be
+ * enough, which is why it is `and` rather than `or`).
+ */
+export function strandedRunDatabases(input) {
+    const selected = [];
+    for (const name of input.names) {
+        if (selected.length >= input.limit)
+            break;
+        if (name === input.keep)
+            continue;
+        if (input.busy.has(name))
+            continue;
+        const parsed = parseRunDatabaseName(input.base, name);
+        if (!parsed)
+            continue;
+        if (input.now.getTime() - parsed.createdAt.getTime() < input.maxAgeMs)
+            continue;
+        selected.push(name);
+    }
+    return selected;
+}
+/** The same DSN, pointed at another database on the same server. */
+export function withDatabase(url, database) {
+    const parsed = new URL(url);
+    parsed.pathname = `/${database}`;
+    return parsed.toString();
+}
+export function databaseNameOf(url) {
+    return decodeURIComponent(new URL(url).pathname).replace(/^\//, '');
+}
+/** The same Redis DSN, pointed at a logical database index. */
+export function redisUrlWithDatabase(url, index) {
+    if (!Number.isInteger(index) || index < 0) {
+        throw new Error(`redis database index must be a non-negative integer (got ${index})`);
+    }
+    const parsed = new URL(url);
+    parsed.pathname = `/${index}`;
+    return parsed.toString();
+}
+/** Whether a Redis DSN already names a logical database — an explicit choice this module leaves alone. */
+export function redisUrlNamesDatabase(url) {
+    const path = new URL(url).pathname.replace(/^\//, '');
+    return path !== '' && /^\d+$/.test(path);
+}
+/** Identifies this invocation in a Redis lease and in the log lines. */
+export function runIdentity() {
+    return `${hostname()}:${process.pid}:${randomRunToken()}`;
+}
+/**
+ * A 32-bit key for `pg_advisory_lock`, derived from the template name so two
+ * bases do not serialize against each other. FNV-1a, folded into a signed int.
+ */
+export function advisoryLockKey(name) {
+    let hash = 0x811c9dc5;
+    for (let i = 0; i < name.length; i += 1) {
+        hash ^= name.charCodeAt(i);
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return hash | 0;
+}
+/**
+ * Whether the template is a database this run's migrations could have produced.
+ *
+ * The template is **long-lived and shared by every branch on the machine**, and
+ * it is only ever moved forward by `migrator.up()`, which appends. That is
+ * enough exactly when what is already applied is a **prefix** of the order this
+ * run configures: then the pending ones land after it, and the result is the
+ * order a database migrated from scratch today would have. Anything else —
+ * another branch's migration, or one of ours applied somewhere the order does
+ * not put it — is a database no `up()` can repair, so it is rebuilt.
+ *
+ * Both shapes are ordinary here, not exotic. Five agents share one cluster, so
+ * a template routinely carries a migration the branch running has never heard
+ * of; and `orderMigrations` places a migration by its module's position in the
+ * dependency graph, so a migration added anywhere but the last module lands at
+ * the **end** of an incrementally-migrated template and in the **middle** of a
+ * fresh one.
+ *
+ * That is not cosmetic. It broke
+ * `test/integration/catalog/attributes-migration-parity.test.ts`, which drives
+ * the real migrator: umzug reverts the last migration in *configured* order,
+ * while the test reads the last one in *applied* (`id`) order, and the two stop
+ * agreeing the moment the template stops being a prefix. The test then walked
+ * `down()` past its own target, never reached its termination condition, timed
+ * out, and left the run database with most of its schema reverted.
+ */
+export function templateDrift(applied, expected, templateName = 'the migration template') {
+    const known = new Set(expected);
+    for (const [index, name] of applied.entries()) {
+        if (name === expected[index])
+            continue;
+        if (!known.has(name)) {
+            return {
+                kind: 'unknown-migration',
+                name,
+                message: `${templateName} has "${name}" applied, which this run's migration registry does ` +
+                    `not contain — another branch migrated it. Rebuilding it from empty.`,
+            };
+        }
+        const inPosition = expected[index];
+        return {
+            kind: 'out-of-order',
+            name,
+            ...(inPosition === undefined ? {} : { expected: inPosition }),
+            message: `${templateName} has "${name}" applied at position ${index + 1}, where this run's ` +
+                `order has ${inPosition === undefined ? 'nothing' : `"${inPosition}"`} — an append ` +
+                `cannot move it. Rebuilding it from empty.`,
+        };
+    }
+    return undefined;
+}
+//# sourceMappingURL=run-isolation.js.map

package/dist/database/run-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-isolation.js","sourceRoot":"","sources":["../../src/database/run-isolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;AAE3D,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,uDAAuD;AACvD,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAEzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD,iGAAiG;AACjG,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAEtD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAE9D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAI7D,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,gBAAgB,CAAC;IAC7D,IAAI,GAAG,KAAK,gBAAgB,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC7D,MAAM,IAAI,KAAK,CACb,GAAG,aAAa,+CAA+C,GAAG,MAAM;QACtE,uEAAuE,CAC1E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAsB,EACtB,QAAgB;IAEhB,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IACvD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,eAAe,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3C,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC;AAC3E,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,4CAA4C;YACvE,qDAAqD,CACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,QAAQ,IAAI,CAAC,MAAM,+BAA+B;YAChF,kBAAkB,qBAAqB,4CAA4C;YACnF,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,6CAA6C;YAC3E,wFAAwF;YACxF,8EAA8E,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,MAAc;IAC/D,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,sBAAsB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,IAAI,MAAM,8CAA8C,sBAAsB,OAAO;YACnF,sFAAsF;YACtF,iCAAiC,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,wBAAwB,CAAC,GAAG,IAAI,GAAG,eAAe,IAAI,MAAM,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,GAAG,IAAI,GAAG,eAAe,EAAE,CAAC;AACrC,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,yBAAyB,CACvC,IAAY,EACZ,IAAY;IAEZ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,IAAI,IAAI,GAAG,eAAe,cAAc,sBAAsB,KAAK,CACpE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,yFAAyF;YACvF,6EAA6E,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,uFAAuF;YACrF,gFAAgF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,UAAU;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAC7D,CAAC;AAUD,oFAAoF;AACpF,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEjD,MAAM,UAAU,wBAAwB,CAAC,UAA8B;IACrE,OAAO,CACL,GAAG,iBAAiB,WAAW,UAAU,CAAC,MAAM,eAAe,UAAU,CAAC,UAAU,GAAG;QACvF,cAAc,UAAU,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CACpD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAkC;IAElC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACjF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACjF,CAAC;AAgBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,cAAc,CAAC,KAA6B;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;YAAE,MAAM;QAC1C,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ;YAAE,SAAS;QACpF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,YAAkB,IAAI,IAAI,EAAE,EAC5B,QAAgB,cAAc,EAAE;IAEhC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClE,OAAO,wBAAwB,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,IAAY;IAEZ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,SAAS,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;AACjD,CAAC;AAeD;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;YAAE,MAAM;QAC1C,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ;YAAE,SAAS;QAChF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,QAAgB;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,KAAa;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4DAA4D,KAAK,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,QAAQ,GAAG,IAAI,KAAK,EAAE,CAAC;IAC9B,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,IAAI,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW;IACzB,OAAO,GAAG,QAAQ,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,cAAc,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,CAAC;AAClB,CAAC;AAqBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,aAAa,CAC3B,OAA0B,EAC1B,QAA2B,EAC3B,YAAY,GAAG,wBAAwB;IAEvC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO;gBACL,IAAI,EAAE,mBAAmB;gBACzB,IAAI;gBACJ,OAAO,EACL,GAAG,YAAY,SAAS,IAAI,sDAAsD;oBAClF,qEAAqE;aACxE,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,IAAI;YACJ,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YAC7D,OAAO,EACL,GAAG,YAAY,SAAS,IAAI,yBAAyB,KAAK,GAAG,CAAC,qBAAqB;gBACnF,aAAa,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,GAAG,eAAe;gBACpF,2CAA2C;SAC9C,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}