@harperfast/harper 5.0.0-alpha.10

package/dist/server/mqtt.js

@@ -0,0 +1,466 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bypassAuth = bypassAuth;
+exports.start = start;
+// for now we are using mqtt-packet, but we may implement some of this ourselves, particularly packet generation so that
+// we can implement more efficient progressive buffer allocation.
+const mqtt_packet_1 = require("mqtt-packet");
+const DurableSubscriptionsSession_ts_1 = require("./DurableSubscriptionsSession.js");
+const user_ts_1 = require("../security/user.js");
+const contentTypes_ts_1 = require("./serverHelpers/contentTypes.js");
+const write_ts_1 = require("../resources/analytics/write.js");
+const Server_ts_1 = require("../server/Server.js");
+const environmentManager_js_1 = require("../utility/environment/environmentManager.js");
+const hdbTerms_ts_1 = require("../utility/hdbTerms.js");
+const logger_ts_1 = require("../utility/logging/logger.js");
+const harper_logger_js_1 = require("../utility/logging/harper_logger.js");
+const events_1 = require("events");
+const index_ts_1 = require("../security/certificateVerification/index.js");
+const authEventLog = (0, logger_ts_1.loggerWithTag)('auth-event');
+const mqttLog = (0, harper_logger_js_1.forComponent)('mqtt');
+let AUTHORIZE_LOCAL = (0, environmentManager_js_1.get)(hdbTerms_ts_1.CONFIG_PARAMS.AUTHENTICATION_AUTHORIZELOCAL) ?? process.env.DEV_MODE;
+function bypassAuth() {
+    AUTHORIZE_LOCAL = true;
+}
+const authorizeLocal = (remoteAddress) => AUTHORIZE_LOCAL && (remoteAddress.includes('127.0.0.') || remoteAddress === '::1');
+function start({ server, port, network, webSocket, securePort, requireAuthentication }) {
+    // here we basically normalize the different types of sockets to pass to our socket/message handler
+    if (!server.mqtt) {
+        server.mqtt = {
+            requireAuthentication,
+            sessions: new Set(),
+            events: new events_1.EventEmitter(),
+        };
+        // a no-op error handler to prevent unhandled error events from being rethrown
+        server.mqtt.events.on('error', () => { });
+    }
+    const mqttSettings = server.mqtt;
+    let serverInstances = [];
+    const mtls = network?.mtls;
+    if (webSocket)
+        serverInstances = server.ws((ws, request, chainCompletion, next) => {
+            if (request.headers.get('sec-websocket-protocol') !== 'mqtt') {
+                return next(ws, request, chainCompletion);
+            }
+            mqttSettings.events.emit('connection', ws);
+            mqttLog.debug?.('Received WebSocket connection for MQTT from', ws._socket.remoteAddress);
+            const { onMessage, onClose } = onSocket(ws, (message) => {
+                ws.send(message);
+            }, request, Promise.resolve(chainCompletion).then(() => request?.user), mqttSettings);
+            ws.on('message', onMessage);
+            ws.on('close', onClose);
+            ws.on('error', (error) => {
+                mqttLog.info?.('WebSocket error', error);
+            });
+        }, { ...webSocket }); // if there is no port, we are piggy-backing off of default app http server
+    // standard TCP socket
+    if (port || securePort) {
+        serverInstances.push(server.socket(async (socket) => {
+            let user;
+            mqttSettings.events.emit('connection', socket);
+            mqttLog.debug?.(`Received ${socket.getCertificate ? 'SSL' : 'TCP'} connection for MQTT from ${socket.remoteAddress}`);
+            if (mtls) {
+                if (socket.authorized) {
+                    try {
+                        // Perform certificate verification
+                        const peerCertificate = socket.getPeerCertificate(true);
+                        if (peerCertificate?.subject) {
+                            const verificationResult = await (0, index_ts_1.verifyCertificate)(peerCertificate, mtls);
+                            if (!verificationResult.valid) {
+                                mqttLog.error?.('Certificate verification failed:', verificationResult.status, 'for', peerCertificate.subject.CN);
+                                throw new Error('Certificate revoked or verification failed');
+                            }
+                        }
+                        let username = mtls.user;
+                        if (username !== null) {
+                            // null means no user is defined from certificate, need regular authentication as well
+                            if (username === undefined || username === 'Common Name' || username === 'CN')
+                                username = socket.getPeerCertificate().subject.CN;
+                            try {
+                                user = await server.getUser(username, null, null);
+                                if ((0, environmentManager_js_1.get)(hdbTerms_ts_1.CONFIG_PARAMS.LOGGING_AUDITAUTHEVENTS_LOGSUCCESSFUL)) {
+                                    authEventLog.notify?.({
+                                        username: user?.username,
+                                        status: hdbTerms_ts_1.AUTH_AUDIT_STATUS.SUCCESS,
+                                        type: hdbTerms_ts_1.AUTH_AUDIT_TYPES.AUTHENTICATION,
+                                        authStrategy: 'MQTT mTLS',
+                                        remoteAddress: socket.remoteAddress,
+                                    });
+                                }
+                            }
+                            catch (error) {
+                                if ((0, environmentManager_js_1.get)(hdbTerms_ts_1.CONFIG_PARAMS.LOGGING_AUDITAUTHEVENTS_LOGFAILED)) {
+                                    authEventLog.error?.({
+                                        username,
+                                        status: hdbTerms_ts_1.AUTH_AUDIT_STATUS.FAILURE,
+                                        type: hdbTerms_ts_1.AUTH_AUDIT_TYPES.AUTHENTICATION,
+                                        authStrategy: 'mqtt',
+                                        remoteAddress: socket.remoteAddress,
+                                    });
+                                }
+                                throw error;
+                            }
+                        }
+                        else {
+                            mqttLog.debug?.('MQTT mTLS authorized connection (mTLS did not authorize a user)', 'from', socket.remoteAddress);
+                        }
+                    }
+                    catch (error) {
+                        mqttSettings.events.emit('error', error, socket);
+                        mqttLog.error?.(error);
+                    }
+                }
+                else if (mtls.required) {
+                    mqttLog.info?.(`Unauthorized connection attempt, no authorized client certificate provided, error: ${socket.authorizationError}`);
+                    return socket.end();
+                }
+            }
+            if (!user && authorizeLocal(socket.remoteAddress)) {
+                user = await (0, user_ts_1.getSuperUser)();
+                mqttLog.debug?.('Auto-authorizing local connection', user?.username);
+            }
+            const { onMessage, onClose } = onSocket(socket, (message) => socket.write(message), null, user, mqttSettings);
+            socket.on('data', onMessage);
+            socket.on('close', onClose);
+            socket.on('error', (error) => {
+                mqttLog.info?.('Socket error', error);
+            });
+        }, { port, securePort, mtls }));
+    }
+    return serverInstances;
+}
+let addingMetrics, numberOfConnections = 0;
+function onSocket(socket, send, request, user, mqttSettings) {
+    if (!addingMetrics) {
+        addingMetrics = true;
+        (0, write_ts_1.addAnalyticsListener)((metrics) => {
+            if (numberOfConnections > 0)
+                metrics.push({
+                    metric: 'mqtt-connections',
+                    connections: numberOfConnections,
+                    byThread: true,
+                });
+        });
+    }
+    let disconnected;
+    numberOfConnections++;
+    let session;
+    const mqttOptions = { protocolVersion: 4 };
+    const parser = (0, mqtt_packet_1.parser)({ protocolVersion: 5 });
+    function onMessage(data) {
+        parser.parse(data);
+    }
+    function onClose() {
+        numberOfConnections--;
+        if (!disconnected) {
+            disconnected = true;
+            session?.disconnect?.();
+            mqttSettings.events.emit('disconnected', session, socket);
+            mqttSettings.sessions.delete(session);
+            (0, write_ts_1.recordActionBinary)(false, 'connection', 'mqtt', 'disconnect');
+            mqttLog.debug?.('MQTT connection was closed', socket.remoteAddress);
+        }
+    }
+    parser.on('packet', async (packet) => {
+        try {
+            if (user?.then)
+                user = await user;
+        }
+        catch (error) {
+            socket.close?.(1008, 'Unauthorized');
+            mqttLog.info?.(error); // should already be handled elsewhere
+            return;
+        }
+        const command = packet.cmd;
+        if (session) {
+            if (session.then)
+                await session;
+        }
+        else if (command !== 'connect') {
+            mqttLog.info?.('Received packet before connection was established, closing connection');
+            if (socket?.destroy)
+                socket.destroy();
+            else
+                socket?.terminate();
+            return;
+        }
+        const topic = packet.topic;
+        const slashIndex = topic?.indexOf('/', 1);
+        const generalTopic = slashIndex > 0 ? topic.slice(0, slashIndex) : topic;
+        (0, write_ts_1.recordAction)(packet.length, 'bytes-received', generalTopic, packetMethodName(packet), 'mqtt');
+        try {
+            session?.receivedPacket?.();
+            switch (command) {
+                case 'connect':
+                    mqttOptions.protocolVersion = packet.protocolVersion;
+                    if (packet.username) {
+                        try {
+                            user = await Server_ts_1.server.getUser(packet.username, packet.password.toString(), request);
+                            if ((0, environmentManager_js_1.get)(hdbTerms_ts_1.CONFIG_PARAMS.LOGGING_AUDITAUTHEVENTS_LOGSUCCESSFUL)) {
+                                authEventLog.notify?.({
+                                    username: user?.username,
+                                    status: hdbTerms_ts_1.AUTH_AUDIT_STATUS.SUCCESS,
+                                    type: hdbTerms_ts_1.AUTH_AUDIT_TYPES.AUTHENTICATION,
+                                    authStrategy: 'MQTT',
+                                    remoteAddress: socket.remoteAddress,
+                                });
+                            }
+                        }
+                        catch (error) {
+                            if ((0, environmentManager_js_1.get)(hdbTerms_ts_1.CONFIG_PARAMS.LOGGING_AUDITAUTHEVENTS_LOGFAILED)) {
+                                authEventLog.error?.({
+                                    username: packet.username,
+                                    status: hdbTerms_ts_1.AUTH_AUDIT_STATUS.FAILURE,
+                                    type: hdbTerms_ts_1.AUTH_AUDIT_TYPES.AUTHENTICATION,
+                                    authStrategy: 'mqtt',
+                                    remoteAddress: socket.remoteAddress,
+                                });
+                            }
+                            mqttSettings.events.emit('auth-failed', packet, socket, error);
+                            (0, write_ts_1.recordActionBinary)(false, 'connection', 'mqtt', 'connect');
+                            return sendPacket({
+                                // Send a connection acknowledgment with indication of auth failure
+                                cmd: 'connack',
+                                reasonCode: 0x04, // bad username or password, v3.1.1
+                                returnCode: 0x86, // bad username or password, v5
+                            });
+                        }
+                    }
+                    if (!user && mqttSettings.requireAuthentication) {
+                        mqttSettings.events.emit('auth-failed', packet, socket);
+                        (0, write_ts_1.recordActionBinary)(false, 'connection', 'mqtt', 'connect');
+                        return sendPacket({
+                            // Send a connection acknowledgment with indication of auth failure
+                            cmd: 'connack',
+                            reasonCode: 0x04, // bad username or password, v3.1.1
+                            returnCode: 0x86, // bad username or password, v5
+                        });
+                    }
+                    try {
+                        // TODO: Do we want to prefix the user name to the client id (to prevent collisions when poor ids are used) or is this sufficient?
+                        mqttSettings.authorizeClient?.(packet, user);
+                        // TODO: Handle the will & testament, and possibly use the will's content type as a hint for expected content
+                        if (packet.will) {
+                            const deserialize = socket.deserialize || (socket.deserialize = (0, contentTypes_ts_1.getDeserializer)(request?.headers.get?.('content-type')));
+                            packet.will.data = packet.will.payload?.length > 0 ? deserialize(packet.will.payload) : undefined;
+                            delete packet.will.payload;
+                        }
+                        session = (0, DurableSubscriptionsSession_ts_1.getSession)({
+                            user,
+                            ...packet,
+                        });
+                        session = await session;
+                        // the session is used in the context, and we want to make sure we can access this
+                        session.socket = socket;
+                        if (request) {
+                            // if there a request, store it in the session so we can use it as part of the context
+                            session.request = request;
+                        }
+                        mqttSettings.sessions.add(session);
+                    }
+                    catch (error) {
+                        mqttLog.error?.(error);
+                        mqttSettings.events.emit('auth-failed', packet, socket, error);
+                        (0, write_ts_1.recordActionBinary)(false, 'connection', 'mqtt', 'connect');
+                        return sendPacket({
+                            // Send a connection acknowledgment with indication of auth failure
+                            cmd: 'connack',
+                            reasonCode: error.code || 0x05,
+                            returnCode: error.code || 0x80, // generic error
+                        });
+                    }
+                    mqttSettings.events.emit('connected', session, socket);
+                    (0, write_ts_1.recordActionBinary)(true, 'connection', 'mqtt', 'connect');
+                    sendPacket({
+                        // Send a connection acknowledgment
+                        cmd: 'connack',
+                        sessionPresent: session.sessionWasPresent,
+                        reasonCode: 0,
+                        returnCode: 0, // success
+                    });
+                    const listener = async (topic, message, messageId, subscription) => {
+                        try {
+                            if (disconnected)
+                                throw new Error('Session disconnected while trying to send message to', topic);
+                            const slashIndex = topic.indexOf('/', 1);
+                            const generalTopic = slashIndex > 0 ? topic.slice(0, slashIndex) : topic;
+                            sendPacket({
+                                cmd: 'publish',
+                                topic,
+                                payload: await serialize(message),
+                                messageId: messageId || Math.floor(Math.random() * 100000000),
+                                qos: subscription.qos,
+                            }, generalTopic);
+                            // wait if there is back-pressure
+                            const rawSocket = socket._socket ?? socket;
+                            if (rawSocket.writableNeedDrain) {
+                                return new Promise((resolve) => rawSocket.once('drain', resolve));
+                            }
+                            return !rawSocket.closed;
+                        }
+                        catch (error) {
+                            mqttLog.error?.(error);
+                            session?.disconnect();
+                            mqttSettings.sessions.delete(session);
+                            return false;
+                        }
+                    };
+                    session.setListener(listener);
+                    if (session.sessionWasPresent)
+                        await session.resume();
+                    break;
+                case 'subscribe':
+                    const granted = [];
+                    for (const subscription of packet.subscriptions) {
+                        let grantedQos;
+                        try {
+                            const grantedSubscription = await session.addSubscription(subscription, subscription.qos >= 1);
+                            grantedQos = grantedSubscription
+                                ? grantedSubscription.qos || 0
+                                : mqttOptions.protocolVersion < 5
+                                    ? 0x80 // only error code in v3.1.1
+                                    : 0x8f; // invalid topic indicated
+                        }
+                        catch (error) {
+                            mqttSettings.events.emit('error', error, socket, subscription, session);
+                            if (error.statusCode) {
+                                if (error.statusCode === 500)
+                                    mqttLog.warn?.(error);
+                                else
+                                    mqttLog.info?.(error);
+                            }
+                            else
+                                mqttLog.error?.(error);
+                            grantedQos =
+                                mqttOptions.protocolVersion < 5
+                                    ? 0x80 // the only error code in v3.1.1
+                                    : error.statusCode === 403
+                                        ? 0x87 // unauthorized
+                                        : error.statusCode === 404
+                                            ? 0x8f // invalid topic
+                                            : 0x80; // generic failure
+                        }
+                        granted.push(grantedQos);
+                    }
+                    await session.committed;
+                    sendPacket({
+                        // Send a subscription acknowledgment
+                        cmd: 'suback',
+                        granted,
+                        messageId: packet.messageId,
+                    });
+                    break;
+                case 'unsubscribe': {
+                    const granted = [];
+                    for (const subscription of packet.unsubscriptions) {
+                        granted.push(session.removeSubscription(subscription) ? 0 : 17);
+                    }
+                    sendPacket({
+                        // Send a subscription acknowledgment
+                        cmd: 'unsuback',
+                        granted,
+                        messageId: packet.messageId,
+                    });
+                    break;
+                }
+                case 'pubrel':
+                    sendPacket({
+                        // Send a publish response
+                        cmd: 'pubcomp',
+                        messageId: packet.messageId,
+                        reasonCode: 0,
+                    });
+                    return;
+                case 'publish':
+                    const responseCmd = packet.qos === 2 ? 'pubrec' : 'puback';
+                    // deserialize
+                    const deserialize = socket.deserialize || (socket.deserialize = (0, contentTypes_ts_1.getDeserializer)(request?.headers.get?.('content-type')));
+                    const messageLength = packet.payload?.length || 0;
+                    const data = messageLength > 0 ? deserialize(packet.payload) : undefined; // zero payload length maps to a delete
+                    let published;
+                    try {
+                        published = await session.publish(packet, data);
+                    }
+                    catch (error) {
+                        mqttSettings.events.emit('error', error, socket, packet, session);
+                        mqttLog.warn?.(error);
+                        if (packet.qos > 0) {
+                            sendPacket({
+                                // Send a publish acknowledgment
+                                cmd: responseCmd,
+                                messageId: packet.messageId,
+                                reasonCode: 0x80, // unspecified error (only MQTT v5 supports error codes)
+                            }, packet.topic);
+                        }
+                        break;
+                    }
+                    if (packet.qos > 0) {
+                        sendPacket({
+                            // Send a publish acknowledgment
+                            cmd: responseCmd,
+                            messageId: packet.messageId,
+                            reasonCode: published === false
+                                ? 0x90 // Topic name invalid
+                                : 0, //success
+                        }, packet.topic);
+                    }
+                    break;
+                case 'pubrec':
+                    sendPacket({
+                        // Send a publish response
+                        cmd: 'pubrel',
+                        messageId: packet.messageId,
+                        reasonCode: 0,
+                    });
+                    break;
+                case 'pubcomp':
+                case 'puback':
+                    session.acknowledge(packet.messageId);
+                    break;
+                case 'pingreq':
+                    sendPacket({ cmd: 'pingresp' });
+                    break;
+                case 'disconnect':
+                    disconnected = true;
+                    session?.disconnect(true);
+                    mqttSettings.events.emit('disconnected', session, socket);
+                    mqttSettings.sessions.delete(session);
+                    (0, write_ts_1.recordActionBinary)(true, 'connection', 'mqtt', 'disconnect');
+                    mqttLog.debug?.('Received disconnect command, closing MQTT session', socket.remoteAddress);
+                    if (socket.close)
+                        socket.close();
+                    else
+                        socket.end();
+                    break;
+            }
+        }
+        catch (error) {
+            mqttSettings.events.emit('error', error, socket, packet, session);
+            mqttLog.error?.(error);
+            sendPacket({
+                // Send a subscription acknowledgment
+                cmd: 'disconnect',
+            });
+        }
+        function sendPacket(packetData, path) {
+            const send_packet = (0, mqtt_packet_1.generate)(packetData, mqttOptions);
+            send(send_packet);
+            (0, write_ts_1.recordAction)(send_packet.length, 'bytes-sent', path, packetMethodName(packetData), 'mqtt');
+        }
+        function packetMethodName(packet) {
+            return packet.qos > 0 ? packet.cmd + ',qos=' + packet.qos : packet.cmd;
+        }
+        function serialize(data) {
+            return (0, contentTypes_ts_1.serializeMessage)(data, request);
+        }
+    });
+    parser.on('error', (error) => {
+        mqttLog.warn('MQTT parsing error, closing connection:', error.message);
+        if (socket?.destroy)
+            socket.destroy();
+        else
+            socket?.terminate();
+    });
+    return { onMessage, onClose };
+}
+//# sourceMappingURL=mqtt.js.map

package/dist/server/mqtt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mqtt.js","sourceRoot":"","sources":["../../server/mqtt.ts"],"names":[],"mappings":";;AAkBA,gCAEC;AAKD,sBAmIC;AA5JD,wHAAwH;AACxH,iEAAiE;AACjE,6CAA6D;AAC7D,qFAA2F;AAC3F,iDAAmD;AACnD,qEAAoF;AACpF,8DAAyG;AACzG,mDAA6C;AAC7C,wFAAmE;AACnE,wDAA4F;AAC5F,4DAA6D;AAC7D,0EAAyF;AACzF,mCAAsC;AACtC,2EAAiF;AACjF,MAAM,YAAY,GAAG,IAAA,yBAAa,EAAC,YAAY,CAAC,CAAC;AACjD,MAAM,OAAO,GAAG,IAAA,+BAAkB,EAAC,MAAM,CAAC,CAAC;AAE3C,IAAI,eAAe,GAAG,IAAA,2BAAG,EAAC,2BAAa,CAAC,6BAA6B,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC/F,SAAgB,UAAU;IACzB,eAAe,GAAG,IAAI,CAAC;AACxB,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,aAAqB,EAAE,EAAE,CAChD,eAAe,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,aAAa,KAAK,KAAK,CAAC,CAAC;AAEpF,SAAgB,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,qBAAqB,EAAE;IAC5F,mGAAmG;IACnG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,GAAG;YACb,qBAAqB;YACrB,QAAQ,EAAE,IAAI,GAAG,EAAE;YACnB,MAAM,EAAE,IAAI,qBAAY,EAAE;SAC1B,CAAC;QACF,8EAA8E;QAC9E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC;IACjC,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;IAC3B,IAAI,SAAS;QACZ,eAAe,GAAG,MAAM,CAAC,EAAE,CAC1B,CAAC,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE;YACtC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC9D,OAAO,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;YAC3C,CAAC;YAED,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,KAAK,EAAE,CAAC,6CAA6C,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACzF,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,QAAQ,CACtC,EAAE,EACF,CAAC,OAAO,EAAE,EAAE;gBACX,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClB,CAAC,EACD,OAAO,EACP,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAC1D,YAAY,CACZ,CAAC;YACF,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5B,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACxB,OAAO,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACJ,CAAC,EACD,EAAE,GAAG,SAAS,EAAE,CAChB,CAAC,CAAC,2EAA2E;IAC/E,sBAAsB;IACtB,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;QACxB,eAAe,CAAC,IAAI,CACnB,MAAM,CAAC,MAAM,CACZ,KAAK,EAAE,MAAM,EAAE,EAAE;YAChB,IAAI,IAAI,CAAC;YACT,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAC/C,OAAO,CAAC,KAAK,EAAE,CACd,YAAY,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,6BAA6B,MAAM,CAAC,aAAa,EAAE,CACpG,CAAC;YACF,IAAI,IAAI,EAAE,CAAC;gBACV,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACvB,IAAI,CAAC;wBACJ,mCAAmC;wBACnC,MAAM,eAAe,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;wBACxD,IAAI,eAAe,EAAE,OAAO,EAAE,CAAC;4BAC9B,MAAM,kBAAkB,GAAG,MAAM,IAAA,4BAAiB,EAAC,eAAe,EAAE,IAAI,CAAC,CAAC;4BAC1E,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;gCAC/B,OAAO,CAAC,KAAK,EAAE,CACd,kCAAkC,EAClC,kBAAkB,CAAC,MAAM,EACzB,KAAK,EACL,eAAe,CAAC,OAAO,CAAC,EAAE,CAC1B,CAAC;gCACF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;4BAC/D,CAAC;wBACF,CAAC;wBAED,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;wBACzB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;4BACvB,sFAAsF;4BACtF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,IAAI;gCAC5E,QAAQ,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;4BACnD,IAAI,CAAC;gCACJ,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gCAClD,IAAI,IAAA,2BAAG,EAAC,2BAAa,CAAC,qCAAqC,CAAC,EAAE,CAAC;oCAC9D,YAAY,CAAC,MAAM,EAAE,CAAC;wCACrB,QAAQ,EAAE,IAAI,EAAE,QAAQ;wCACxB,MAAM,EAAE,+BAAiB,CAAC,OAAO;wCACjC,IAAI,EAAE,8BAAgB,CAAC,cAAc;wCACrC,YAAY,EAAE,WAAW;wCACzB,aAAa,EAAE,MAAM,CAAC,aAAa;qCACnC,CAAC,CAAC;gCACJ,CAAC;4BACF,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCAChB,IAAI,IAAA,2BAAG,EAAC,2BAAa,CAAC,iCAAiC,CAAC,EAAE,CAAC;oCAC1D,YAAY,CAAC,KAAK,EAAE,CAAC;wCACpB,QAAQ;wCACR,MAAM,EAAE,+BAAiB,CAAC,OAAO;wCACjC,IAAI,EAAE,8BAAgB,CAAC,cAAc;wCACrC,YAAY,EAAE,MAAM;wCACpB,aAAa,EAAE,MAAM,CAAC,aAAa;qCACnC,CAAC,CAAC;gCACJ,CAAC;gCACD,MAAM,KAAK,CAAC;4BACb,CAAC;wBACF,CAAC;6BAAM,CAAC;4BACP,OAAO,CAAC,KAAK,EAAE,CACd,iEAAiE,EACjE,MAAM,EACN,MAAM,CAAC,aAAa,CACpB,CAAC;wBACH,CAAC;oBACF,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;wBACjD,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;oBACxB,CAAC;gBACF,CAAC;qBAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1B,OAAO,CAAC,IAAI,EAAE,CACb,sFAAsF,MAAM,CAAC,kBAAkB,EAAE,CACjH,CAAC;oBACF,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC;gBACrB,CAAC;YACF,CAAC;YACD,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnD,IAAI,GAAG,MAAM,IAAA,sBAAY,GAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,EAAE,CAAC,mCAAmC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YAC9G,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,OAAO,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACJ,CAAC,EACD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAC1B,CACD,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC;AACxB,CAAC;AACD,IAAI,aAAa,EAChB,mBAAmB,GAAG,CAAC,CAAC;AACzB,SAAS,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;IAC1D,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,aAAa,GAAG,IAAI,CAAC;QACrB,IAAA,+BAAoB,EAAC,CAAC,OAAO,EAAE,EAAE;YAChC,IAAI,mBAAmB,GAAG,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,kBAAkB;oBAC1B,WAAW,EAAE,mBAAmB;oBAChC,QAAQ,EAAE,IAAI;iBACd,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC;IACjB,mBAAmB,EAAE,CAAC;IACtB,IAAI,OAAoC,CAAC;IACzC,MAAM,WAAW,GAAG,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAA,oBAAU,EAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC;IAClD,SAAS,SAAS,CAAC,IAAI;QACtB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,SAAS,OAAO;QACf,mBAAmB,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC;YACxB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1D,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtC,IAAA,6BAAkB,EAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAC9D,OAAO,CAAC,KAAK,EAAE,CAAC,4BAA4B,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;IACF,CAAC;IAED,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACpC,IAAI,CAAC;YACJ,IAAI,IAAI,EAAE,IAAI;gBAAE,IAAI,GAAG,MAAM,IAAI,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,sCAAsC;YAC7D,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;QAC3B,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,IAAI;gBAAE,MAAM,OAAO,CAAC;QACjC,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,EAAE,CAAC,uEAAuE,CAAC,CAAC;YACxF,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;;gBACjC,MAAM,EAAE,SAAS,EAAE,CAAC;YACzB,OAAO;QACR,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,UAAU,GAAG,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACzE,IAAA,uBAAY,EAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAE9F,IAAI,CAAC;YACJ,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC;YAC5B,QAAQ,OAAO,EAAE,CAAC;gBACjB,KAAK,SAAS;oBACb,WAAW,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;oBACrD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACrB,IAAI,CAAC;4BACJ,IAAI,GAAG,MAAM,kBAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;4BAClF,IAAI,IAAA,2BAAG,EAAC,2BAAa,CAAC,qCAAqC,CAAC,EAAE,CAAC;gCAC9D,YAAY,CAAC,MAAM,EAAE,CAAC;oCACrB,QAAQ,EAAE,IAAI,EAAE,QAAQ;oCACxB,MAAM,EAAE,+BAAiB,CAAC,OAAO;oCACjC,IAAI,EAAE,8BAAgB,CAAC,cAAc;oCACrC,YAAY,EAAE,MAAM;oCACpB,aAAa,EAAE,MAAM,CAAC,aAAa;iCACnC,CAAC,CAAC;4BACJ,CAAC;wBACF,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BAChB,IAAI,IAAA,2BAAG,EAAC,2BAAa,CAAC,iCAAiC,CAAC,EAAE,CAAC;gCAC1D,YAAY,CAAC,KAAK,EAAE,CAAC;oCACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oCACzB,MAAM,EAAE,+BAAiB,CAAC,OAAO;oCACjC,IAAI,EAAE,8BAAgB,CAAC,cAAc;oCACrC,YAAY,EAAE,MAAM;oCACpB,aAAa,EAAE,MAAM,CAAC,aAAa;iCACnC,CAAC,CAAC;4BACJ,CAAC;4BACD,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;4BAC/D,IAAA,6BAAkB,EAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;4BAC3D,OAAO,UAAU,CAAC;gCACjB,mEAAmE;gCACnE,GAAG,EAAE,SAAS;gCACd,UAAU,EAAE,IAAI,EAAE,mCAAmC;gCACrD,UAAU,EAAE,IAAI,EAAE,+BAA+B;6BACjD,CAAC,CAAC;wBACJ,CAAC;oBACF,CAAC;oBACD,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC,qBAAqB,EAAE,CAAC;wBACjD,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;wBACxD,IAAA,6BAAkB,EAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;wBAC3D,OAAO,UAAU,CAAC;4BACjB,mEAAmE;4BACnE,GAAG,EAAE,SAAS;4BACd,UAAU,EAAE,IAAI,EAAE,mCAAmC;4BACrD,UAAU,EAAE,IAAI,EAAE,+BAA+B;yBACjD,CAAC,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC;wBACJ,kIAAkI;wBAClI,YAAY,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;wBAE7C,6GAA6G;wBAC7G,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;4BACjB,MAAM,WAAW,GAChB,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAA,iCAAe,EAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;4BACtG,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;4BAClG,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;wBAC5B,CAAC;wBACD,OAAO,GAAG,IAAA,2CAAU,EAAC;4BACpB,IAAI;4BACJ,GAAG,MAAM;yBACT,CAAC,CAAC;wBACH,OAAO,GAAG,MAAM,OAAO,CAAC;wBACxB,kFAAkF;wBAClF,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;wBACxB,IAAI,OAAO,EAAE,CAAC;4BACb,sFAAsF;4BACtF,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;wBAC3B,CAAC;wBACD,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACpC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;wBACvB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;wBAC/D,IAAA,6BAAkB,EAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;wBAC3D,OAAO,UAAU,CAAC;4BACjB,mEAAmE;4BACnE,GAAG,EAAE,SAAS;4BACd,UAAU,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;4BAC9B,UAAU,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,gBAAgB;yBAChD,CAAC,CAAC;oBACJ,CAAC;oBACD,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBACvD,IAAA,6BAAkB,EAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;oBAC1D,UAAU,CAAC;wBACV,mCAAmC;wBACnC,GAAG,EAAE,SAAS;wBACd,cAAc,EAAE,OAAO,CAAC,iBAAiB;wBACzC,UAAU,EAAE,CAAC;wBACb,UAAU,EAAE,CAAC,EAAE,UAAU;qBACzB,CAAC,CAAC;oBACH,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE;wBAClE,IAAI,CAAC;4BACJ,IAAI,YAAY;gCAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,EAAE,KAAK,CAAC,CAAC;4BACjG,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;4BACzC,MAAM,YAAY,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;4BACzE,UAAU,CACT;gCACC,GAAG,EAAE,SAAS;gCACd,KAAK;gCACL,OAAO,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC;gCACjC,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC;gCAC7D,GAAG,EAAE,YAAY,CAAC,GAAG;6BACrB,EACD,YAAY,CACZ,CAAC;4BACF,iCAAiC;4BACjC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC;4BAC3C,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;gCACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;4BACnE,CAAC;4BACD,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;wBAC1B,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BAChB,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;4BACvB,OAAO,EAAE,UAAU,EAAE,CAAC;4BACtB,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;4BACtC,OAAO,KAAK,CAAC;wBACd,CAAC;oBACF,CAAC,CAAC;oBACF,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;oBAC9B,IAAI,OAAO,CAAC,iBAAiB;wBAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;oBACtD,MAAM;gBACP,KAAK,WAAW;oBACf,MAAM,OAAO,GAAG,EAAE,CAAC;oBACnB,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;wBACjD,IAAI,UAAU,CAAC;wBACf,IAAI,CAAC;4BACJ,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;4BAC/F,UAAU,GAAG,mBAAmB;gCAC/B,CAAC,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC;gCAC9B,CAAC,CAAC,WAAW,CAAC,eAAe,GAAG,CAAC;oCAChC,CAAC,CAAC,IAAI,CAAC,4BAA4B;oCACnC,CAAC,CAAC,IAAI,CAAC,CAAC,0BAA0B;wBACrC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BAChB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;4BACxE,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gCACtB,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG;oCAAE,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;;oCAC/C,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;4BAC5B,CAAC;;gCAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;4BAC9B,UAAU;gCACT,WAAW,CAAC,eAAe,GAAG,CAAC;oCAC9B,CAAC,CAAC,IAAI,CAAC,gCAAgC;oCACvC,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,GAAG;wCACzB,CAAC,CAAC,IAAI,CAAC,eAAe;wCACtB,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,GAAG;4CACzB,CAAC,CAAC,IAAI,CAAC,gBAAgB;4CACvB,CAAC,CAAC,IAAI,CAAC,CAAC,kBAAkB;wBAC/B,CAAC;wBACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC1B,CAAC;oBACD,MAAM,OAAO,CAAC,SAAS,CAAC;oBACxB,UAAU,CAAC;wBACV,qCAAqC;wBACrC,GAAG,EAAE,QAAQ;wBACb,OAAO;wBACP,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC3B,CAAC,CAAC;oBACH,MAAM;gBACP,KAAK,aAAa,CAAC,CAAC,CAAC;oBACpB,MAAM,OAAO,GAAG,EAAE,CAAC;oBACnB,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;wBACnD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACjE,CAAC;oBACD,UAAU,CAAC;wBACV,qCAAqC;wBACrC,GAAG,EAAE,UAAU;wBACf,OAAO;wBACP,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC3B,CAAC,CAAC;oBACH,MAAM;gBACP,CAAC;gBACD,KAAK,QAAQ;oBACZ,UAAU,CAAC;wBACV,0BAA0B;wBAC1B,GAAG,EAAE,SAAS;wBACd,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,UAAU,EAAE,CAAC;qBACb,CAAC,CAAC;oBACH,OAAO;gBACR,KAAK,SAAS;oBACb,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAC3D,cAAc;oBACd,MAAM,WAAW,GAChB,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAA,iCAAe,EAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;oBACtG,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;oBAClD,MAAM,IAAI,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,uCAAuC;oBACjH,IAAI,SAAS,CAAC;oBACd,IAAI,CAAC;wBACJ,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACjD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;wBAClE,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;wBACtB,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;4BACpB,UAAU,CACT;gCACC,gCAAgC;gCAChC,GAAG,EAAE,WAAW;gCAChB,SAAS,EAAE,MAAM,CAAC,SAAS;gCAC3B,UAAU,EAAE,IAAI,EAAE,wDAAwD;6BAC1E,EACD,MAAM,CAAC,KAAK,CACZ,CAAC;wBACH,CAAC;wBACD,MAAM;oBACP,CAAC;oBACD,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;wBACpB,UAAU,CACT;4BACC,gCAAgC;4BAChC,GAAG,EAAE,WAAW;4BAChB,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,UAAU,EACT,SAAS,KAAK,KAAK;gCAClB,CAAC,CAAC,IAAI,CAAC,qBAAqB;gCAC5B,CAAC,CAAC,CAAC,EAAE,SAAS;yBAChB,EACD,MAAM,CAAC,KAAK,CACZ,CAAC;oBACH,CAAC;oBACD,MAAM;gBACP,KAAK,QAAQ;oBACZ,UAAU,CAAC;wBACV,0BAA0B;wBAC1B,GAAG,EAAE,QAAQ;wBACb,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,UAAU,EAAE,CAAC;qBACb,CAAC,CAAC;oBACH,MAAM;gBACP,KAAK,SAAS,CAAC;gBACf,KAAK,QAAQ;oBACZ,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACtC,MAAM;gBACP,KAAK,SAAS;oBACb,UAAU,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;oBAChC,MAAM;gBACP,KAAK,YAAY;oBAChB,YAAY,GAAG,IAAI,CAAC;oBACpB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;oBAC1B,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC1D,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACtC,IAAA,6BAAkB,EAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;oBAC7D,OAAO,CAAC,KAAK,EAAE,CAAC,mDAAmD,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;oBAC3F,IAAI,MAAM,CAAC,KAAK;wBAAE,MAAM,CAAC,KAAK,EAAE,CAAC;;wBAC5B,MAAM,CAAC,GAAG,EAAE,CAAC;oBAClB,MAAM;YACR,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAClE,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;YACvB,UAAU,CAAC;gBACV,qCAAqC;gBACrC,GAAG,EAAE,YAAY;aACjB,CAAC,CAAC;QACJ,CAAC;QACD,SAAS,UAAU,CAAC,UAAU,EAAE,IAAK;YACpC,MAAM,WAAW,GAAG,IAAA,sBAAQ,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,WAAW,CAAC,CAAC;YAClB,IAAA,uBAAY,EAAC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5F,CAAC;QACD,SAAS,gBAAgB,CAAC,MAAM;YAC/B,OAAO,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACxE,CAAC;QACD,SAAS,SAAS,CAAC,IAAI;YACtB,OAAO,IAAA,kCAAgB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;IACF,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC5B,OAAO,CAAC,IAAI,CAAC,yCAAyC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;;YACjC,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC"}

package/dist/server/nodeName.d.ts

@@ -0,0 +1,5 @@
+export declare function getThisNodeName(): string;
+export declare function clearThisNodeName(): void;
+export declare function hostnameToUrl(hostname: any): string;
+export declare function urlToNodeName(nodeUrl?: string | URL): string | undefined;
+export declare function getThisNodeUrl(): string;

package/dist/server/nodeName.js

@@ -0,0 +1,84 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getThisNodeName = getThisNodeName;
+exports.clearThisNodeName = clearThisNodeName;
+exports.hostnameToUrl = hostnameToUrl;
+exports.urlToNodeName = urlToNodeName;
+exports.getThisNodeUrl = getThisNodeUrl;
+const node_fs_1 = require("node:fs");
+const node_crypto_1 = require("node:crypto");
+const hdbTerms_ts_1 = require("../utility/hdbTerms.js");
+const environmentManager_js_1 = __importDefault(require("../utility/environment/environmentManager.js"));
+Object.defineProperty(server, 'hostname', {
+    get() {
+        return getThisNodeName();
+    },
+});
+let commonNameFromCert;
+function getCommonNameFromCert() {
+    if (commonNameFromCert !== undefined)
+        return commonNameFromCert;
+    const certificatePath = environmentManager_js_1.default.get(hdbTerms_ts_1.CONFIG_PARAMS.OPERATIONSAPI_TLS_CERTIFICATE) || environmentManager_js_1.default.get(hdbTerms_ts_1.CONFIG_PARAMS.TLS_CERTIFICATE);
+    if (certificatePath) {
+        // we can use this to get the hostname if it isn't provided by config
+        const certParsed = new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(certificatePath));
+        const subject = certParsed.subject;
+        return (commonNameFromCert = subject?.match(/CN=(.*)/)?.[1] ?? null);
+    }
+}
+let nodeName;
+function getThisNodeName() {
+    return (nodeName ||
+        (nodeName =
+            environmentManager_js_1.default.get(hdbTerms_ts_1.CONFIG_PARAMS.NODE_HOSTNAME) ??
+                environmentManager_js_1.default.get('replication_hostname') ?? // for backwards compatibility
+                urlToNodeName(environmentManager_js_1.default.get('replication_url')) ??
+                getCommonNameFromCert() ??
+                getHostFromListeningPort('operationsapi_network_secureport') ??
+                getHostFromListeningPort('operationsapi_network_port') ??
+                '127.0.0.1'));
+}
+function clearThisNodeName() {
+    nodeName = undefined;
+}
+function getHostFromListeningPort(key) {
+    const port = environmentManager_js_1.default.get(key);
+    const lastColon = port?.lastIndexOf?.(':');
+    if (lastColon > 0)
+        return port.slice(0, lastColon);
+}
+function getPortFromListeningPort(key) {
+    const port = environmentManager_js_1.default.get(key);
+    const lastColon = port?.lastIndexOf?.(':');
+    if (lastColon > 0)
+        return +port.slice(lastColon + 1).replace(/[[\]]/g, '');
+    return +port;
+}
+function hostnameToUrl(hostname) {
+    let port = getPortFromListeningPort('replication_port');
+    if (port)
+        return `ws://${hostname}:${port}`;
+    port = getPortFromListeningPort('replication_secureport');
+    if (port)
+        return `wss://${hostname}:${port}`;
+    port = getPortFromListeningPort('operationsapi_network_port');
+    if (port)
+        return `ws://${hostname}:${port}`;
+    port = getPortFromListeningPort('operationsapi_network_secureport');
+    if (port)
+        return `wss://${hostname}:${port}`;
+}
+function urlToNodeName(nodeUrl) {
+    if (nodeUrl)
+        return new URL(nodeUrl).hostname; // this the part of the URL that is the node name, as we want it to match common name in the certificate
+}
+function getThisNodeUrl() {
+    const url = environmentManager_js_1.default.get(hdbTerms_ts_1.CONFIG_PARAMS.REPLICATION_URL);
+    if (url)
+        return url;
+    return hostnameToUrl(getThisNodeName());
+}
+//# sourceMappingURL=nodeName.js.map

package/dist/server/nodeName.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeName.js","sourceRoot":"","sources":["../../server/nodeName.ts"],"names":[],"mappings":";;;;;AAyBA,0CAYC;AAED,8CAEC;AAcD,sCASC;AAED,sCAEC;AAED,wCAIC;AA1ED,qCAAuC;AACvC,6CAA8C;AAC9C,wDAAuD;AACvD,yGAA+D;AAE/D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE;IACzC,GAAG;QACF,OAAO,eAAe,EAAE,CAAC;IAC1B,CAAC;CACD,CAAC,CAAC;AAEH,IAAI,kBAAsC,CAAC;AAC3C,SAAS,qBAAqB;IAC7B,IAAI,kBAAkB,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IAChE,MAAM,eAAe,GACpB,+BAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,6BAA6B,CAAC,IAAI,+BAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,eAAe,CAAC,CAAC;IAChG,IAAI,eAAe,EAAE,CAAC;QACrB,qEAAqE;QACrE,MAAM,UAAU,GAAG,IAAI,6BAAe,CAAC,IAAA,sBAAY,EAAC,eAAe,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,OAAO,CAAC,kBAAkB,GAAG,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACtE,CAAC;AACF,CAAC;AAED,IAAI,QAA4B,CAAC;AACjC,SAAgB,eAAe;IAC9B,OAAO,CACN,QAAQ;QACR,CAAC,QAAQ;YACR,+BAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,aAAa,CAAC;gBACpC,+BAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,8BAA8B;gBACjE,aAAa,CAAC,+BAAG,CAAC,GAAG,CAAC,iBAAiB,CAAW,CAAC;gBACnD,qBAAqB,EAAE;gBACvB,wBAAwB,CAAC,kCAAkC,CAAC;gBAC5D,wBAAwB,CAAC,4BAA4B,CAAC;gBACtD,WAAW,CAAC,CACb,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB;IAChC,QAAQ,GAAG,SAAS,CAAC;AACtB,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAuB,+BAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,wBAAwB,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAuB,+BAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,aAAa,CAAC,QAAQ;IACrC,IAAI,IAAI,GAAG,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IACxD,IAAI,IAAI;QAAE,OAAO,QAAQ,QAAQ,IAAI,IAAI,EAAE,CAAC;IAC5C,IAAI,GAAG,wBAAwB,CAAC,wBAAwB,CAAC,CAAC;IAC1D,IAAI,IAAI;QAAE,OAAO,SAAS,QAAQ,IAAI,IAAI,EAAE,CAAC;IAC7C,IAAI,GAAG,wBAAwB,CAAC,4BAA4B,CAAC,CAAC;IAC9D,IAAI,IAAI;QAAE,OAAO,QAAQ,QAAQ,IAAI,IAAI,EAAE,CAAC;IAC5C,IAAI,GAAG,wBAAwB,CAAC,kCAAkC,CAAC,CAAC;IACpE,IAAI,IAAI;QAAE,OAAO,SAAS,QAAQ,IAAI,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,SAAgB,aAAa,CAAC,OAAsB;IACnD,IAAI,OAAO;QAAE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,wGAAwG;AACxJ,CAAC;AAED,SAAgB,cAAc;IAC7B,MAAM,GAAG,GAAuB,+BAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,eAAe,CAAC,CAAC;IACvE,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,OAAO,aAAa,CAAC,eAAe,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/server/operationsServer.d.ts

@@ -0,0 +1,48 @@
+import * as userSchema from '../security/user.ts';
+import { type ServerOptions } from '../server/Server.ts';
+import type { OperationFunctionName } from './serverHelpers/serverUtilities.ts';
+import type { ParsedSqlObject } from '../sqlTranslator/index.js';
+import { Resources } from '../resources/Resources.ts';
+export { operationsServer as hdbServer };
+export { operationsServer as start };
+/**
+ * Builds a Harper server.
+ */
+declare function operationsServer(options: ServerOptions & {
+    resources?: Resources;
+}): Promise<void>;
+export interface ImpersonatePayload {
+    username?: string;
+    role?: {
+        permission: Partial<userSchema.UserRoleNamedPermissions & userSchema.UserRoleDatabasePermissions>;
+    };
+    role_name?: string;
+}
+interface BaseOperationRequestBody {
+    operation: OperationFunctionName;
+    bypassAuth: boolean;
+    hdb_user?: userSchema.User;
+    hdbAuthHeader?: unknown;
+    bypass_auth?: boolean;
+    impersonate?: ImpersonatePayload;
+    password?: string;
+    payload?: string;
+    sql?: string;
+    parsedSqlObject?: ParsedSqlObject;
+    [key: string]: unknown;
+}
+type SearchOperation = BaseOperationRequestBody;
+interface SearchOperationRequestBody {
+    search_operation: SearchOperation;
+}
+export type OperationRequestBody = BaseOperationRequestBody & Partial<SearchOperationRequestBody>;
+export interface OperationRequest {
+    body: OperationRequestBody;
+}
+export interface OperationResult {
+    message?: any;
+}
+export declare function calculateRestHttpURL(httpPort: string | undefined, httpSecurePort: string | undefined, req: {
+    hostname: string;
+    protocol: string;
+}): string;