@highstate/common 0.9.27 → 0.9.28

package/dist/{chunk-FHSPC2ZL.js → chunk-RKTGGVPZ.js}

@@ -794,7 +794,8 @@ var AccessPointRoute = class extends ComponentResource {
           {
             providers: output(args.accessPoint).dnsProviders,
             values: this.route.endpoints,
-            waitAt: "local"
+            waitAt: "local",
+            proxied: accessPoint.proxied
           },
           { ...opts, parent: this }
         );
@@ -1445,5 +1446,5 @@ async function createServerEntity({
 }
 
 export { AccessPointRoute, Command, DnsRecord, DnsRecordSet, GatewayRoute, ImplementationMediator, MaterializedFile, MaterializedFolder, TlsCertificate, archiveFromFolder, assetFromFile, createServerBundle, createServerEntity, createSshTerminal, dnsRecordMediator, fetchFileSize, filterEndpoints, gatewayRouteMediator, generateKey, generatePassword, generateSshPrivateKey, getNameByEndpoint, getServerConnection, l34EndpointToString, l3EndpointToCidr, l3EndpointToL4, l3EndpointToString, l4EndpointToString, l4EndpointWithProtocolToString, l7EndpointToString, parseEndpoints, parseL34Endpoint, parseL3Endpoint, parseL4Endpoint, parseL7Endpoint, requireInputL3Endpoint, requireInputL4Endpoint, sshPrivateKeyToKeyPair, tlsCertificateMediator, updateEndpoints, updateEndpointsWithFqdn };
-//# sourceMappingURL=chunk-FHSPC2ZL.js.map
-//# sourceMappingURL=chunk-FHSPC2ZL.js.map
+//# sourceMappingURL=chunk-RKTGGVPZ.js.map
+//# sourceMappingURL=chunk-RKTGGVPZ.js.map

package/dist/chunk-RKTGGVPZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/network.ts","../src/shared/command.ts","../src/shared/impl-ref.ts","../src/shared/dns.ts","../src/shared/gateway.ts","../src/shared/tls.ts","../src/shared/access-point.ts","../src/shared/files.ts","../src/shared/passwords.ts","../assets/images.json","../src/shared/ssh.ts"],"names":["ssh","command","environment","env","triggers","toPromise","output","ComponentResource","resolvedType","interpolate","matchedProviders","name","flat","uniqueBy","z","Resource","issuers","getOrCreate","terminal-ssh","randomBytes","privateKeyString","remote"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAkCO,SAAS,mBAAmB,UAAA,EAAwC;AACzE,EAAA,QAAQ,WAAW,IAAA;AAAM,IACvB,KAAK,MAAA;AACH,MAAA,OAAO,UAAA,CAAW,OAAA;AAAA,IACpB,KAAK,MAAA;AACH,MAAA,OAAO,UAAA,CAAW,OAAA;AAAA,IACpB,KAAK,UAAA;AACH,MAAA,OAAO,UAAA,CAAW,QAAA;AAAA;AAExB;AAQO,SAAS,mBAAmB,UAAA,EAAwC;AACzE,EAAA,IAAI,UAAA,CAAW,SAAS,MAAA,EAAQ;AAC9B,IAAA,OAAO,CAAA,CAAA,EAAI,UAAA,CAAW,OAAO,CAAA,EAAA,EAAK,WAAW,IAAI,CAAA,CAAA;AAAA,EACnD;AAEA,EAAA,OAAO,GAAG,kBAAA,CAAmB,UAAU,CAAC,CAAA,CAAA,EAAI,WAAW,IAAI,CAAA,CAAA;AAC7D;AAQO,SAAS,+BAA+B,UAAA,EAAwC;AACrF,EAAA,MAAM,QAAA,GAAW,CAAA,EAAG,UAAA,CAAW,QAAQ,CAAA,GAAA,CAAA;AAEvC,EAAA,OAAO,CAAA,EAAG,QAAQ,CAAA,EAAG,kBAAA,CAAmB,UAAU,CAAC,CAAA,CAAA;AACrD;AASO,SAAS,mBAAmB,UAAA,EAAwC;AACzE,EAAA,MAAM,QAAA,GAAW,CAAA,EAAG,UAAA,CAAW,WAAW,CAAA,GAAA,CAAA;AAE1C,EAAA,IAAI,QAAA,GAAW,mBAAmB,UAAU,CAAA;AAE5C,EAAA,IAAI,WAAW,QAAA,EAAU;AACvB,IAAA,QAAA,IAAY,CAAA,CAAA,EAAI,WAAW,QAAQ,CAAA,CAAA;AAAA,EACrC;AAEA,EAAA,OAAO,CAAA,EAAG,QAAQ,CAAA,EAAG,QAAQ,CAAA,CAAA;AAC/B;AAQO,SAAS,oBAAoB,WAAA,EAA0C;AAC5E,EAAA,IAAI,YAAY,IAAA,EAAM;AACpB,IAAA,OAAO,mBAAmB,WAAW,CAAA;AAAA,EACvC;AAEA,EAAA,OAAO,mBAAmB,WAAW,CAAA;AACvC;AAEA,IAAM,eAAA,GACJ,6KAAA;AAEF,IAAM,cAAA,GACJ,iMAAA;AAUK,SAAS,iBAAiB,WAAA,EAAoD;AACnF,EAAA,IAAI,OAAO,gBAAgB,QAAA,EAAU;AACnC,IAAA,OAAO,WAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,KAAA,CAAM,eAAe,CAAA;AAC/C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,WAAW,CAAA,CAAA,CAAG,CAAA;AAAA,EAC5D;AAEA,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,MAAM,QAAA,EAAU,IAAA,KAAS,KAAA,CAAM,MAAA;AAEvD,EAAA,IAAI,QAAA,IAAY,QAAA,KAAa,KAAA,IAAS,QAAA,KAAa,KAAA,EAAO;AACxD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,QAAQ,CAAA,CAAA,CAAG,CAAA;AAAA,EAC/D;AAEA,EAAA,IAAI,UAAA,GAAyC,QAAA;AAE7C,EAAA,IAAI,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AACzC,IAAA,UAAA,GAAa,UAAA;AAAA,EACf,CAAA,MAAA,IAAW,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AAChD,IAAA,UAAA,GAAa,UAAA;AAAA,EACf;AAEA,EAAA,MAAM,gBAAA,GAAmB,OAAO,KAAA,GAAQ,MAAA;AAExC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA,GAAO,MAAA,GAAS,IAAA,GAAO,MAAA,GAAS,UAAA;AAAA,IACtC,UAAA;AAAA,IACA,SAAS,IAAA,IAAQ,IAAA;AAAA,IACjB,QAAA;AAAA,IACA,IAAA,EAAM,IAAA,GAAO,QAAA,CAAS,IAAA,EAAM,EAAE,CAAA,GAAI,MAAA;AAAA,IAClC,QAAA,EAAU,WAAY,QAAA,GAAkC;AAAA,GAC1D;AACF;AAUO,SAAS,gBAAgB,UAAA,EAAiD;AAC/E,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AAClC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,MAAA,GAAS,iBAAiB,UAAU,CAAA;AAE1C,EAAA,IAAI,OAAO,IAAA,EAAM;AACf,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0CAAA,EAA6C,UAAU,CAAA,CAAA,CAAG,CAAA;AAAA,EAC5E;AAEA,EAAA,OAAO,MAAA;AACT;AAOO,SAAS,gBAAgB,UAAA,EAAiD;AAC/E,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AAClC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,MAAA,GAAS,iBAAiB,UAAU,CAAA;AAE1C,EAAA,IAAI,CAAC,OAAO,IAAA,EAAM;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,UAAU,CAAA,CAAA,CAAG,CAAA;AAAA,EACjE;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,IAAM,kBAAA,GACJ,uHAAA;AAEF,IAAM,kBAAA,GACJ,kMAAA;AAWF,eAAsB,sBAAA,CACpB,aACA,aAAA,EAC6B;AAC7B,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,gBAAgB,WAAW,CAAA;AAAA,EACpC;AAEA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,OAAO,UAAU,aAAa,CAAA;AAAA,EAChC;AAEA,EAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AACxC;AAWA,eAAsB,sBAAA,CACpB,aACA,aAAA,EAC6B;AAC7B,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,gBAAgB,WAAW,CAAA;AAAA,EACpC;AAEA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,OAAO,UAAU,aAAa,CAAA;AAAA,EAChC;AAEA,EAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AACxC;AAUO,SAAS,cAAA,CACd,UAAA,EACA,IAAA,EACA,QAAA,GAA+B,KAAA,EACX;AACpB,EAAA,OAAO;AAAA,IACL,GAAG,gBAAgB,UAAU,CAAA;AAAA,IAC7B,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAWO,SAAS,eAAA,CAId,SAAA,EACA,MAAA,EACA,KAAA,EACiC;AACjC,EAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,IAAA,SAAA,GAAY,UAAU,MAAA,CAAO,CAAA,QAAA,KAAY,OAAO,QAAA,CAAS,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EAC/E,WAAW,SAAA,CAAU,IAAA,CAAK,cAAY,QAAA,CAAS,UAAA,KAAe,QAAQ,CAAA,EAAG;AACvE,IAAA,SAAA,GAAY,SAAA,CAAU,MAAA,CAAO,CAAA,QAAA,KAAY,QAAA,CAAS,eAAe,QAAQ,CAAA;AAAA,EAC3E,WAAW,SAAA,CAAU,IAAA,CAAK,cAAY,QAAA,CAAS,UAAA,KAAe,UAAU,CAAA,EAAG;AACzE,IAAA,SAAA,GAAY,SAAA,CAAU,MAAA,CAAO,CAAA,QAAA,KAAY,QAAA,CAAS,eAAe,UAAU,CAAA;AAAA,EAC7E;AAEA,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,SAAA,GAAY,UAAU,MAAA,CAAO,CAAA,QAAA,KAAY,MAAM,QAAA,CAAS,QAAA,CAAS,IAAa,CAAC,CAAA;AAAA,EACjF;AAEA,EAAA,OAAO,SAAA;AACT;AAUO,SAAS,iBAAiB,UAAA,EAAwC;AACvE,EAAA,QAAQ,WAAW,IAAA;AAAM,IACvB,KAAK,MAAA;AACH,MAAA,OAAO,CAAA,EAAG,WAAW,OAAO,CAAA,GAAA,CAAA;AAAA,IAC9B,KAAK,MAAA;AACH,MAAA,OAAO,CAAA,EAAG,WAAW,OAAO,CAAA,IAAA,CAAA;AAAA,IAC9B,KAAK,UAAA;AACH,MAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA;AAEvD;AAEA,IAAM,eAAA,GAAkB,CAAC,KAAA,EAAO,MAAM,CAAA;AAU/B,SAAS,gBAAgB,UAAA,EAAiD;AAC/E,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AAClC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,KAAA,CAAM,cAAc,CAAA;AAC7C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,UAAU,CAAA,CAAA,CAAG,CAAA;AAAA,EACxD;AAEA,EAAA,MAAM,EAAE,aAAa,IAAA,EAAM,IAAA,EAAM,UAAU,IAAA,EAAM,QAAA,KAAa,KAAA,CAAM,MAAA;AAEpE,EAAA,IAAI,UAAA,GAAyC,QAAA;AAE7C,EAAA,IAAI,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AACzC,IAAA,UAAA,GAAa,UAAA;AAAA,EACf,CAAA,MAAA,IAAW,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AAChD,IAAA,UAAA,GAAa,UAAA;AAAA,EACf;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA,GAAO,MAAA,GAAS,IAAA,GAAO,MAAA,GAAS,UAAA;AAAA,IACtC,UAAA;AAAA,IACA,SAAS,IAAA,IAAQ,IAAA;AAAA,IACjB,QAAA;AAAA;AAAA,IAGA,IAAA,EAAM,IAAA,GAAO,QAAA,CAAS,IAAA,EAAM,EAAE,CAAA,GAAI,GAAA;AAAA;AAAA,IAGlC,QAAA,EAAU,eAAA,CAAgB,QAAA,CAAS,WAAW,IAAI,KAAA,GAAQ,KAAA;AAAA,IAE1D,WAAA;AAAA,IACA,UAAU,QAAA,IAAY;AAAA,GACxB;AACF;AAWA,eAAsB,eAAA,CACpB,gBAAA,EACA,SAAA,EACA,cAAA,EACA,OAAuB,SAAA,EACA;AACvB,EAAA,MAAM,wBAAA,GAA2B,MAAM,SAAA,CAAU,gBAAgB,CAAA;AACjE,EAAA,MAAM,YAAA,GAAe,MAAM,cAAA,CAAe,SAAA,EAAW,cAAc,CAAA;AAEnE,EAAA,IAAI,SAAS,SAAA,EAAW;AACtB,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,OAAO,QAAA;AAAA,IACL,CAAC,GAAG,YAAA,EAAc,GAAG,wBAAwB,CAAA;AAAA,IAC7C;AAAA,GACF;AACF;AASA,eAAsB,cAAA,CACpB,WACA,cAAA,EACuB;AACvB,EAAA,MAAM,sBAAA,GAAyB,MAAM,SAAA,CAAU,cAAc,CAAA;AAE7D,EAAA,OAAO,QAAA;AAAA,IACL,CAAC,GAAI,SAAA,EAAW,GAAA,CAAI,gBAAgB,CAAA,IAAK,EAAC,EAAI,GAAI,sBAAA,IAA0B,EAAG,CAAA;AAAA,IAC/E;AAAA,GACF;AACF;ACrYO,SAAS,oBACd,GAAA,EAC2C;AAC3C,EAAA,OAAO,MAAA,CAAO,GAAG,CAAA,CAAE,KAAA,CAAM,CAAAA,IAAAA,MAAQ;AAAA,IAC/B,IAAA,EAAM,kBAAA,CAAmBA,IAAAA,CAAI,SAAA,CAAU,CAAC,CAAC,CAAA;AAAA,IACzC,IAAA,EAAMA,IAAAA,CAAI,SAAA,CAAU,CAAC,CAAA,CAAE,IAAA;AAAA,IACvB,MAAMA,IAAAA,CAAI,IAAA;AAAA,IACV,UAAUA,IAAAA,CAAI,QAAA;AAAA,IACd,UAAA,EAAYA,KAAI,OAAA,EAAS,UAAA;AAAA,IACzB,cAAA,EAAgB,CAAA;AAAA,IAChB,SAASA,IAAAA,CAAI;AAAA,GACf,CAAE,CAAA;AACJ;AAiIA,SAAS,cAAc,OAAA,EAAoC;AACzD,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC1B,IAAA,OAAO,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,EACzB;AAEA,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,gBAAgB,GAAA,EAAqB;AAC5C,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,CAAC,OAAA,KAAoB,MAAA,CAAO,OAAO,CAAA;AAAA,EAC5C;AAEA,EAAA,OAAO,CAAC,OAAA,KAAoB,WAAA,CAAA,IAAA,EAAkB,GAAG,QAAQ,OAAO,CAAA,CAAA;AAClE;AAEA,SAAS,oBAAoB,WAAA,EAAoD;AAC/E,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,CAAC,OAAA,KAAoB,MAAA,CAAO,OAAO,CAAA;AAAA,EAC5C;AAEA,EAAA,OAAO,CAAC,OAAA,KACN,MAAA,CAAO,EAAE,SAAS,WAAA,EAAa,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,OAAA,EAAAC,QAAAA,EAAS,WAAA,EAAAC,cAAY,KAAM;AACnE,IAAA,IAAI,CAACA,YAAAA,IAAe,MAAA,CAAO,KAAKA,YAAW,CAAA,CAAE,WAAW,CAAA,EAAG;AACzD,MAAA,OAAOD,QAAAA;AAAA,IACT;AAEA,IAAA,MAAM,YAAY,MAAA,CAAO,OAAA,CAAQC,YAAW,CAAA,CACzC,GAAA,CAAI,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM,UAAU,GAAG,CAAA,EAAA,EAAK,KAAK,CAAA,CAAA,CAAG,CAAA,CAChD,KAAK,MAAM,CAAA;AAEd,IAAA,OAAO,CAAA,EAAG,SAAS,CAAA,IAAA,EAAOD,QAAO,CAAA,CAAA;AAAA,EACnC,CAAC,CAAA;AACL;AAEA,SAAS,eAAA,CAAgB,OAAA,GAAyB,GAAA,EAAK,QAAA,GAA0B,CAAA,EAAG;AAClF,EAAA,OAAO,CAAC,OAAA;AAAA;AAAA,IAEN,sBAAsB,OAAO,CAAA,kBAAA,EAAqB,cAAc,OAAO,CAAC,cAAc,QAAQ,CAAA,OAAA;AAAA,GAAA;AAClG;AAEA,SAAS,mBAAA,CACP,KACA,QAAA,EACA;AACA,EAAA,OAAO,MAAA,CAAO,EAAE,GAAA,EAAK,QAAA,EAAU,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,GAAA,EAAAE,IAAAA,EAAK,QAAA,EAAAC,WAAS,KAAM;AAC5D,IAAA,IAAI,CAACA,SAAAA,EAAU;AACb,MAAA,OAAOD,IAAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,SAAA,CAAUC,SAAQ,CAAC,CAAA;AAC5C,IAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,SAAS,KAAK,CAAA;AAEhD,IAAA,OAAO;AAAA,MACL,GAAGD,IAAAA;AAAA,MACH,6BAAA,EAA+B;AAAA,KACjC;AAAA,EACF,CAAC,CAAA;AACH;AAEO,IAAM,OAAA,GAAN,MAAM,QAAA,SAAgB,iBAAA,CAAkB;AAAA,EAC7B,MAAA;AAAA,EACA,MAAA;AAAA,EAEhB,WAAA,CAAY,IAAA,EAAc,IAAA,EAAmB,IAAA,EAAiC;AAC5E,IAAA,KAAA,CAAM,0BAAA,EAA4B,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAElD,IAAA,MAAM,WAAA,GAAc,mBAAA;AAAA,MAClB,IAAA,CAAK,WAAA;AAAA,MACL,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,OAAA,GACJ,IAAA,CAAK,IAAA,KAAS,OAAA,GACV,IAAI,KAAA,CAAM,OAAA;AAAA,MACR,IAAA;AAAA,MACA;AAAA,QACE,QAAQ,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAAE,MAAM,aAAa,CAAA;AAAA,QAC/C,MAAA,EAAQ,KAAK,MAAA,GAAS,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,KAAA,CAAM,aAAa,CAAA,GAAI,MAAA;AAAA,QACjE,MAAA,EAAQ,KAAK,MAAA,GAAS,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,KAAA,CAAM,aAAa,CAAA,GAAI,MAAA;AAAA,QACjE,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,QAAA,EAAU,KAAK,QAAA,GAAW,MAAA,CAAO,KAAK,QAAQ,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,GAAI,MAAA;AAAA,QAC9D,GAAA,EAAK,IAAA,CAAK,GAAA,IAAO,OAAA,EAAQ;AAAA,QACzB,WAAA;AAAA,QACA,OAAO,IAAA,CAAK;AAAA,OACd;AAAA,MACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,KAC1B,GACA,IAAI,MAAA,CAAO,OAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,YAAY,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,MAAM,CAAA,MAAA,KAAU;AAC5C,UAAA,IAAI,CAAC,OAAO,GAAA,EAAK;AACf,YAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,MAAA,CAAO,QAAQ,CAAA,wBAAA,CAA0B,CAAA;AAAA,UAC1E;AAEA,UAAA,OAAO,mBAAA,CAAoB,OAAO,GAAG,CAAA;AAAA,QACvC,CAAC,CAAA;AAAA,QAED,QAAQ,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CACvB,MAAM,aAAa,CAAA,CACnB,KAAA,CAAM,eAAA,CAAgB,KAAK,GAAG,CAAC,EAC/B,KAAA,CAAM,mBAAA,CAAoB,WAAW,CAAC,CAAA;AAAA,QAEzC,MAAA,EAAQ,KAAK,MAAA,GACT,MAAA,CAAO,KAAK,MAAM,CAAA,CACf,MAAM,aAAa,CAAA,CACnB,MAAM,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAC,CAAA,CAC/B,MAAM,mBAAA,CAAoB,WAAW,CAAC,CAAA,GACzC,MAAA;AAAA,QAEJ,MAAA,EAAQ,KAAK,MAAA,GACT,MAAA,CAAO,KAAK,MAAM,CAAA,CACf,MAAM,aAAa,CAAA,CACnB,MAAM,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAC,CAAA,CAC/B,MAAM,mBAAA,CAAoB,WAAW,CAAC,CAAA,GACzC,MAAA;AAAA,QAEJ,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,QAAA,EAAU,KAAK,QAAA,GAAW,MAAA,CAAO,KAAK,QAAQ,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,GAAI,MAAA;AAAA,QAC9D,OAAO,IAAA,CAAK,KAAA;AAAA,QAEZ,sBAAA,EAAwB;AAAA;AAAA;AAAA,OAI1B;AAAA,MACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,KAC1B;AAEN,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AAEtB,IAAA,IAAA,CAAK,eAAA,CAAgB;AAAA,MACnB,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,QAAQ,IAAA,CAAK;AAAA,KACd,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,IAAA,GAAwB;AAC5B,IAAA,OAAO,MAAME,SAAAA,CAAU,IAAA,CAAK,MAAM,CAAA;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,cAAA,CACL,IAAA,EACA,OAAA,EACA,IAAA,EACS;AACT,IAAA,OAAO,IAAI,QAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,MAAM,OAAA,CAAQ,IAAA;AAAA,QACd,QAAQ,WAAA,CAAA,oBAAA,EAAkC,OAAA,CAAQ,IAAI,CAAA,YAAA,EAAe,QAAQ,IAAI,CAAA,CAAA;AAAA,QACjF,MAAA,EAAQ,WAAA,CAAA,OAAA,EAAqB,OAAA,CAAQ,IAAI,CAAA,CAAA;AAAA,QACzC,OAAO,OAAA,CAAQ;AAAA,OACjB;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,eAAA,CACL,IAAA,EACA,OAAA,EACA,IAAA,EACS;AACT,IAAA,OAAO,IAAI,QAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,MAAM,OAAA,CAAQ,IAAA;AAAA,QACd,QAAQ,WAAA,CAAA,iBAAA,EAA+B,OAAA,CAAQ,IAAI,CAAA,0BAAA,EAA6B,QAAQ,IAAI,CAAA,CAAA,CAAA;AAAA,QAC5F,OAAA,EAAS;AAAA,OACX;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAO,OAAA,CAAQ,IAAA,EAAc,IAAA,EAAmB,IAAA,EAA0C;AACxF,IAAA,OAAO,IAAI,QAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,GAAG,IAAA;AAAA,QACH,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAAE,KAAA,CAAM,eAAA,CAAgB,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAC,CAAA;AAAA,QAC9E,MAAA,EAAQ,IAAA,CAAK,MAAA,GACT,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,KAAA,CAAM,eAAA,CAAgB,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAC,CAAA,GACtE,MAAA;AAAA,QACJ,MAAA,EAAQ,IAAA,CAAK,MAAA,GACT,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,KAAA,CAAM,eAAA,CAAgB,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAC,CAAA,GACtE;AAAA,OACN;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AClXO,IAAM,yBAAN,MAGL;AAAA,EACA,WAAA,CACW,IAAA,EACQ,WAAA,EACA,YAAA,EACjB;AAHS,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACQ,IAAA,IAAA,CAAA,WAAA,GAAA,WAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAAA,EAChB;AAAA,EAEH,SAAA,CACE,YACA,IAAA,EAIA;AACA,IAAA,OAAO,OACL,OACA,IAAA,KACoC;AACpC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,WAAA,CAAY,SAAA,CAAU,KAAK,CAAA;AACpD,MAAA,IAAI,CAAC,YAAY,OAAA,EAAS;AACxB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,qCAAqC,IAAA,CAAK,IAAI,CAAA,GAAA,EAAM,WAAA,CAAY,MAAM,OAAO,CAAA;AAAA,SAC/E;AAAA,MACF;AAEA,MAAA,MAAM,UAAA,GAAa,UAAA,CAAW,SAAA,CAAU,IAAI,CAAA;AAC5C,MAAA,IAAI,CAAC,WAAW,OAAA,EAAS;AACvB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,oCAAoC,IAAA,CAAK,IAAI,CAAA,GAAA,EAAM,UAAA,CAAW,MAAM,OAAO,CAAA;AAAA,SAC7E;AAAA,MACF;AAEA,MAAA,MAAM,SAAS,MAAM,IAAA,CAAK,WAAA,CAAY,IAAA,EAAM,WAAW,IAAI,CAAA;AAC3D,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AAEvD,MAAA,IAAI,CAAC,aAAa,OAAA,EAAS;AACzB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,uCAAuC,IAAA,CAAK,IAAI,CAAA,GAAA,EAAM,YAAA,CAAa,MAAM,OAAO,CAAA;AAAA,SAClF;AAAA,MACF;AAEA,MAAA,OAAO,YAAA,CAAa,IAAA;AAAA,IACtB,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,IAAA,CACJ,OAAA,EACA,KAAA,EACiC;AACjC,IAAA,MAAM,eAAA,GAAkB,MAAMA,SAAAA,CAAU,OAAO,CAAA;AAC/C,IAAA,MAAM,aAAA,GAAgB,MAAMA,SAAAA,CAAU,KAAK,CAAA;AAE3C,IAAA,MAAM,aAAa,CAAA,EAAG,eAAA,CAAgB,OAAO,CAAA,MAAA,EAAS,KAAK,IAAI,CAAA,CAAA;AAE/D,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AAEF,MAAA,IAAA,GAAO,MAAM,OAAO,UAAA,CAAA;AAAA,IACtB,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,UAAU,CAAA,6BAAA,CAAA,EAAiC;AAAA,QACrF,KAAA,EAAO;AAAA,OACR,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,CAAE,MAAA,CAAO,CAAA,KAAA,KAAS,OAAO,KAAA,CAAM,CAAC,CAAA,KAAM,UAAU,CAAA;AAKjF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6CAAA,EAAgD,UAAU,CAAA,EAAA,CAAI,CAAA;AAAA,IAChF;AAEA,IAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACpB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,mDAAA,EAAsD,UAAU,CAAA,GAAA,EAAM,KAAA,CAAM,GAAA,CAAI,CAAA,IAAA,KAAQ,IAAA,CAAK,CAAC,CAAC,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,uCAAA;AAAA,OAE7G;AAAA,IACF;AAEA,IAAA,MAAM,CAAC,QAAA,EAAU,QAAQ,CAAA,GAAI,MAAM,CAAC,CAAA;AAEpC,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AAEF,MAAA,MAAA,GAAS,MAAM,QAAA,CAAS,aAAA,EAAe,eAAA,CAAgB,IAAI,CAAA;AAAA,IAC7D,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAQ,CAAA,EAAA,CAAA,EAAM,KAAK,CAAA;AACtE,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,QAAQ,CAAA,QAAA,CAAU,CAAA;AAAA,IAChE;AAEA,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACvD,IAAA,IAAI,CAAC,aAAa,OAAA,EAAS;AACzB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,yBAAA,EAA4B,QAAQ,CAAA,2BAAA,EAA8B,YAAA,CAAa,MAAM,OAAO,CAAA;AAAA,OAC9F;AAAA,IACF;AAEA,IAAA,OAAO,YAAA,CAAa,IAAA;AAAA,EACtB;AAAA,EAEA,UAAA,CACE,SACA,KAAA,EACwC;AACxC,IAAA,OAAOC,MAAAA,CAAO,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS,KAAK,CAAC,CAAA;AAAA,EACzC;AACF;AChGO,IAAM,oBAAoB,IAAI,sBAAA;AAAA,EACnC,YAAA;AAAA,EACA,CAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,EAAG,IAAA,EAAM,CAAA,CAAE,MAAA,EAA8B,EAAG,CAAA;AAAA,EACtE,CAAA,CAAE,WAAWC,iBAAiB;AAChC;AAqFA,SAAS,kBAAkB,QAAA,EAAsC;AAC/D,EAAA,QAAQ,SAAS,IAAA;AAAM,IACrB,KAAK,MAAA;AACH,MAAA,OAAO,GAAA;AAAA,IACT,KAAK,MAAA;AACH,MAAA,OAAO,MAAA;AAAA,IACT,KAAK,UAAA;AACH,MAAA,OAAO,OAAA;AAAA;AAEb;AAOO,IAAM,SAAA,GAAN,cAAwBA,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAItC,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAAqB,IAAA,EAAwB;AACrE,IAAA,KAAA,CAAM,4BAAA,EAA8B,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAEpD,IAAA,MAAM,UAAA,GAAaD,OAAO,IAAA,CAAK,KAAK,EAAE,KAAA,CAAM,CAAA,KAAA,KAAS,eAAA,CAAgB,KAAK,CAAC,CAAA;AAC3E,IAAA,MAAM,aAAA,GAAgB,UAAA,CAAW,KAAA,CAAM,kBAAkB,CAAA;AACzD,IAAA,MAAM,YAAA,GAAe,KAAK,IAAA,GAAOA,MAAAA,CAAO,KAAK,IAAI,CAAA,GAAI,UAAA,CAAW,KAAA,CAAM,iBAAiB,CAAA;AAEvF,IAAA,IAAA,CAAK,YAAYA,MAAAA,CAAO,IAAA,CAAK,QAAQ,CAAA,CAAE,MAAM,CAAA,QAAA,KAAY;AACvD,MAAA,OAAO,iBAAA,CAAkB,IAAA,CAAK,QAAA,CAAS,OAAA,EAAS;AAAA,QAC9C,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,MAAM,IAAA,CAAK,IAAA;AAAA,UACX,UAAU,IAAA,CAAK,QAAA;AAAA,UACf,KAAK,IAAA,CAAK,GAAA;AAAA,UACV,KAAA,EAAO,aAAA;AAAA,UACP,IAAA,EAAM;AAAA;AACR,OACD,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,IAAA,CAAK,eAAeA,MAAAA,CAAO;AAAA,MACzB,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,YAAA;AAAA,MACA,SAAS,IAAA,CAAK;AAAA,KACf,EAAE,KAAA,CAAM,CAAC,EAAE,MAAA,EAAQ,YAAA,EAAAE,aAAAA,EAAc,OAAA,EAAQ,KAAM;AAC9C,MAAA,IAAIA,kBAAiB,OAAA,EAAS;AAE5B,QAAA,OAAO,EAAC;AAAA,MACV;AAEA,MAAA,MAAM,gBAAgB,MAAA,GAAS,CAAC,MAAM,CAAA,CAAE,IAAA,KAAS,EAAC;AAElD,MAAA,IAAI,OAAA,EAAS;AAGX,QAAA,OAAQ,aAAA,CAAwC,IAAI,CAAA,IAAA,KAAQ;AAC1D,UAAA,MAAM,QAAA,GAAW,IAAA,KAAS,OAAA,GAAU,OAAA,GAAU,IAAA,CAAK,QAAA;AAEnD,UAAA,OAAO,IAAI,OAAA;AAAA,YACT,CAAA,EAAG,IAAI,CAAA,cAAA,EAAiB,QAAQ,CAAA,CAAA;AAAA,YAChC;AAAA,cACE,IAAA;AAAA,cACA,MAAA,EAAQ;AAAA,gBACNC,WAAAA,CAAAA,sBAAAA,EAAoC,KAAK,IAAI,CAAA,EAAA,CAAA;AAAA,gBAC7CA,WAAAA,CAAAA,kCAAAA,EAAgD,KAAK,IAAI,CAAA,uBAAA,CAAA;AAAA,gBACzD,CAAA,QAAA,CAAA;AAAA,gBACA,CAAA,IAAA;AAAA;AACF,aACF;AAAA,YACA,EAAE,QAAQ,IAAA;AAAK,WACjB;AAAA,QACF,CAAC,CAAA;AAAA,MACH;AAEA,MAAA,OAAQ,aAAA,CAAwC,IAAI,CAAA,IAAA,KAAQ;AAC1D,QAAA,MAAM,QAAA,GAAW,IAAA,KAAS,OAAA,GAAU,OAAA,GAAU,IAAA,CAAK,QAAA;AAEnD,QAAA,OAAO,IAAI,OAAA;AAAA,UACT,CAAA,EAAG,IAAI,CAAA,cAAA,EAAiB,QAAQ,CAAA,CAAA;AAAA,UAChC;AAAA,YACE,IAAA;AAAA,YACA,MAAA,EAAQ;AAAA,cACNA,WAAAA,CAAAA,sBAAAA,EAAoC,IAAA,CAAK,IAAI,CAAA,UAAA,EAAa,aAAa,CAAA,EAAA,CAAA;AAAA,cACvEA,WAAAA,CAAAA,kCAAAA,EAAgD,IAAA,CAAK,IAAI,CAAA,iBAAA,EAAoB,aAAa,CAAA,MAAA,CAAA;AAAA,cAC1F,CAAA,QAAA,CAAA;AAAA,cACA,CAAA,IAAA;AAAA;AACF,WACF;AAAA,UACA,EAAE,QAAQ,IAAA;AAAK,SACjB;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AACF;AAKO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqBF,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAIzC,UAAA;AAAA;AAAA;AAAA;AAAA,EAKA,YAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAAwB,IAAA,EAAwB;AACxE,IAAA,KAAA,CAAM,+BAAA,EAAiC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAEvD,IAAA,MAAM,mBAAmBD,MAAAA,CAAO;AAAA,MAC9B,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,IAAA,EAAM,KAAK,IAAA,IAAQ;AAAA,KACpB,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,WAAU,KAAM;AAC1B,MAAA,MAAMI,iBAAAA,GAAmB,UAAU,MAAA,CAAO,CAAA,QAAA,KAAY,KAAK,QAAA,CAAS,QAAA,CAAS,MAAM,CAAC,CAAA;AAEpF,MAAA,IAAIA,iBAAAA,CAAiB,WAAW,CAAA,EAAG;AACjC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oCAAA,EAAuC,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,MAChE;AAEA,MAAA,OAAOA,iBAAAA;AAAA,IACT,CAAC,CAAA;AAED,IAAA,IAAA,CAAK,aAAa,qBAAA,CAAsB,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,QAAQ,CAAA,KAAA,KAAS;AACxE,MAAA,OAAOJ,MAAAA,CAAO;AAAA,QACZ,IAAA,EAAM,KAAK,IAAA,IAAQ,IAAA;AAAA,QACnB,SAAA,EAAW;AAAA,OACZ,EAAE,KAAA,CAAM,CAAC,EAAE,IAAA,EAAAK,KAAAA,EAAM,WAAU,KAAM;AAChC,QAAA,OAAO,SAAA,CAAU,QAAQ,CAAA,QAAA,KAAY;AACnC,UAAA,MAAM,UAAA,GAAa,gBAAgB,KAAK,CAAA;AAExC,UAAA,OAAO,IAAI,SAAA;AAAA,YACT,CAAA,EAAGA,KAAI,CAAA,CAAA,EAAI,QAAA,CAAS,EAAE,CAAA,CAAA,EAAI,kBAAA,CAAmB,UAAU,CAAC,CAAA,CAAA;AAAA,YACxD;AAAA,cACE,IAAA,EAAAA,KAAAA;AAAA,cACA,QAAA;AAAA,cACA,KAAA,EAAO,UAAA;AAAA,cACP,IAAA,EAAM,IAAA,CAAK,IAAA,IAAQ,iBAAA,CAAkB,UAAU,CAAA;AAAA,cAC/C,SAAS,IAAA,CAAK,OAAA;AAAA,cACd,KAAK,IAAA,CAAK,GAAA;AAAA,cACV,UAAU,IAAA,CAAK,QAAA;AAAA,cACf,QAAQ,IAAA,CAAK;AAAA,aACf;AAAA,YACA,EAAE,QAAQ,IAAA;AAAK,WACjB;AAAA,QACF,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AAAA,IACH,CAAC,CAAA,CAAE,KAAA,CAAMC,IAAI,CAAA;AAEb,IAAA,IAAA,CAAK,YAAA,GAAe,IAAA,CAAK,UAAA,CACtB,KAAA,CAAM,CAAA,OAAA,KAAW,OAAA,CAAQ,OAAA,CAAQ,CAAA,MAAA,KAAU,MAAA,CAAO,YAAY,CAAC,CAAA,CAC/D,MAAMA,IAAI,CAAA;AAAA,EACf;AAAA,EAEA,OAAwB,iBAAA,mBAAoB,IAAI,GAAA,EAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW1E,OAAO,UAAA,CAAW,IAAA,EAAc,IAAA,EAAwB,IAAA,EAAsC;AAC5F,IAAA,OAAO,WAAA;AAAA,MACL,aAAA,CAAa,iBAAA;AAAA,MACb,IAAA;AAAA,MACA,MAAM,IAAI,aAAA,CAAa,IAAA,EAAM,MAAM,IAAI;AAAA,KACzC;AAAA,EACF;AACF;AAcA,eAAsB,uBAAA,CACpB,SAAA,EACA,IAAA,EACA,kBAAA,EACA,WACA,YAAA,EAC6E;AAC7E,EAAA,MAAM,iBAAA,GAAoB,MAAMP,SAAAA,CAAU,SAAS,CAAA;AAEnD,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,iBAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AAEA,EAAA,MAAM,iBAAA,GAAoB,eAAA,CAAgB,iBAAA,EAAmB,kBAAkB,CAAA;AAE/E,EAAA,MAAM,YAAA,GAAe,IAAI,YAAA,CAAa,IAAA,EAAM;AAAA,IAC1C,SAAA,EAAW,YAAA;AAAA,IACX,MAAA,EAAQ,iBAAA;AAAA,IACR,MAAA,EAAQ;AAAA,GACT,CAAA;AAED,EAAA,MAAM,kBAAA,GAAqB,OAAA;AAAA,IAAQ,iBAAA;AAAA,IAAmB,CAAA,QAAA,KACpD,SAAS,IAAA,GAAO,CAAA,EAAG,SAAS,IAAI,CAAA,CAAA,EAAI,QAAA,CAAS,QAAQ,CAAA,CAAA,GAAK;AAAA,GAC5D;AAEA,EAAA,MAAM,eAA4B,EAAC;AAEnC,EAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,CAAO,kBAAkB,CAAA,EAAG;AACrD,IAAA,YAAA,CAAa,OAAA,CAAQ;AAAA,MACnB,IAAA,EAAM,UAAA;AAAA,MACN,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,KAAA,CAAM,CAAC,CAAA,CAAE,UAAA;AAAA,MACrB,IAAA,EAAM,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,MACf,QAAA,EAAU,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA,KACP,CAAA;AAAA,EAChB;AAEA,EAAA,MAAMA,SAAAA;AAAA,IACJ,YAAA,CAAa,aAAa,KAAA,CAAM,CAAA,YAAA,KAAgB,aAAa,GAAA,CAAI,CAAA,OAAA,KAAW,OAAA,CAAQ,MAAM,CAAC;AAAA,GAC7F;AAEA,EAAA,IAAI,cAAc,SAAA,EAAW;AAC3B,IAAA,OAAO;AAAA,MACL,SAAA,EAAWQ,QAAAA;AAAA;AAAA,QAET,CAAC,GAAG,YAAA,EAAc,GAAI,iBAAiC,CAAA;AAAA,QACvD,CAAA,QAAA,KAAY,oBAAoB,QAAQ;AAAA,OAC1C;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,YAAA;AAAA,IACX;AAAA,GACF;AACF;ACtWO,IAAM,uBAAuB,IAAI,sBAAA;AAAA,EACtC,eAAA;AAAA,EACAC,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,IACf,IAAA,EAAMA,EAAE,MAAA,EAAyB;AAAA,IACjC,IAAA,EAAMA,CAAAA,CAAE,MAAA,EAAiC,CAAE,QAAA;AAAS,GACrD,CAAA;AAAA,EACDA,EAAE,MAAA,CAAO;AAAA,IACP,QAAA,EAAUA,CAAAA,CAAE,UAAA,CAAW,QAAQ,CAAA;AAAA,IAC/B,SAAA,EAAW,OAAA,CAAQ,gBAAA,CAAiB,MAAA,CAAO,KAAA;AAAM,GAClD;AACH;AAmEO,IAAM,YAAA,GAAN,cAA2BP,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAIzC,QAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAAwB,IAAA,EAAiC;AACjF,IAAA,KAAA,CAAM,+BAAA,EAAiC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAEvD,IAAA,MAAM,EAAE,QAAA,EAAU,SAAA,EAAU,GAAI,oBAAA,CAAqB,WAAWD,MAAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,OAAA,EAAS;AAAA,MAC5F,IAAA;AAAA,MACA,IAAA,EAAM,IAAA;AAAA,MACN,IAAA,EAAM,EAAE,GAAG,IAAA,EAAM,QAAQ,IAAA;AAAK,KAC/B,CAAA;AAED,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AACF;ACtGO,IAAM,yBAAyB,IAAI,sBAAA;AAAA,EACxC,iBAAA;AAAA,EACAQ,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,IACf,IAAA,EAAMA,EAAE,MAAA,EAA2B;AAAA,IACnC,IAAA,EAAMA,CAAAA,CAAE,MAAA,EAAiC,CAAE,QAAA;AAAS,GACrD,CAAA;AAAA,EACDA,CAAAA,CAAE,WAAWC,QAAQ;AACvB;AAoCO,IAAM,cAAA,GAAN,MAAM,eAAA,SAAuBR,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAI3C,QAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAA0B,IAAA,EAAiC;AACnF,IAAA,KAAA,CAAM,iCAAA,EAAmC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAEzD,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,IAAA,CAAK,MAAA,EAAQ,KAAK,OAAO,CAAA;AAEzD,IAAA,IAAA,CAAK,WAAWD,MAAAA,CAAO;AAAA,MACrB,OAAA;AAAA,MACA,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,UAAU,IAAA,CAAK;AAAA,KAChB,EAAE,KAAA,CAAM,OAAO,EAAE,OAAA,EAAAU,QAAAA,EAAS,UAAA,EAAY,QAAA,EAAS,KAAM;AAEpD,MAAA,MAAM,aAAA,GAAgBA,QAAAA,CAAQ,IAAA,CAAK,CAAA,MAAA,KAAU;AAC3C,QAAA,IAAI,cAAc,CAAC,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAM,CAAA,EAAG;AACrD,UAAA,OAAO,KAAA;AAAA,QACT;AAEA,QAAA,IAAI,QAAA,IAAY,CAAC,QAAA,CAAS,KAAA,CAAM,CAAAL,KAAAA,KAAQA,KAAAA,CAAK,QAAA,CAAS,MAAA,CAAO,MAAM,CAAC,CAAA,EAAG;AACrE,UAAA,OAAO,KAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA;AAAA,MACT,CAAC,CAAA;AAED,MAAA,IAAI,CAAC,aAAA,EAAe;AAClB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,0CAA0C,UAAU,CAAA,iBAAA,EAAoB,UAAU,IAAA,CAAK,IAAI,KAAK,EAAE,CAAA,CAAA;AAAA,SACpG;AAAA,MACF;AAEA,MAAA,OAAO,MAAM,sBAAA,CAAuB,IAAA,CAAK,aAAA,CAAc,OAAA,EAAS;AAAA,QAC9D,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,OAAwB,mBAAA,mBAAsB,IAAI,GAAA,EAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW9E,OAAO,UAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACgB;AAChB,IAAA,OAAOM,WAAAA;AAAA,MACL,eAAA,CAAe,mBAAA;AAAA,MACf,IAAA;AAAA,MACA,MAAM,IAAI,eAAA,CAAe,IAAA,EAAM,MAAM,IAAI;AAAA,KAC3C;AAAA,EACF;AACF;AC3FO,IAAM,gBAAA,GAAN,cAA+BV,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAI7C,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAA4B,IAAA,EAAiC;AACrF,IAAA,KAAA,CAAM,mCAAA,EAAqC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAG3D,IAAA,IAAI,KAAK,IAAA,IAAQ,IAAA,CAAK,SAAS,MAAA,IAAU,CAAC,KAAK,QAAA,EAAU;AACvD,MAAA,IAAA,CAAK,iBAAiBD,MAAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,MAAM,CAAA,WAAA,KAAe;AAClE,QAAA,IAAI,WAAA,CAAY,UAAA,CAAW,MAAA,KAAW,CAAA,EAAG;AACvC,UAAA,OAAO,MAAA;AAAA,QACT;AAEA,QAAA,OAAO,cAAA,CAAe,UAAA;AAAA,UACpB,IAAA;AAAA,UACA;AAAA,YACE,SAAS,WAAA,CAAY,UAAA;AAAA,YACrB,UAAU,IAAA,CAAK,IAAA,GAAO,CAAC,IAAA,CAAK,IAAI,IAAI,EAAC;AAAA,YACrC,YAAY,IAAA,CAAK;AAAA,WACnB;AAAA,UACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,SAC1B;AAAA,MACF,CAAC,CAAA;AAAA,IACH;AAGA,IAAA,IAAA,CAAK,QAAQ,IAAI,YAAA;AAAA,MACf,IAAA;AAAA,MACA;AAAA,QACE,GAAG,IAAA;AAAA,QACH,OAAA,EAASA,MAAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,OAAA;AAAA,QAClC,gBAAgB,IAAA,CAAK,cAAA;AAAA,QACrB,YAAY,IAAA,CAAK;AAAA,OACnB;AAAA,MACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,KAC1B;AAGA,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,IAAA,CAAK,eAAeA,MAAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,KAAA,CAAM,OAAM,WAAA,KAAe;AACtE,QAAA,IAAI,WAAA,CAAY,YAAA,CAAa,MAAA,KAAW,CAAA,EAAG;AACzC,UAAA,OAAO,MAAA;AAAA,QACT;AAEA,QAAA,MAAM,IAAA,GAAO,MAAMD,SAAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AACtC,QAAA,IAAI,CAAC,IAAA,EAAM;AACT,UAAA,OAAO,MAAA;AAAA,QACT;AAEA,QAAA,OAAO,YAAA,CAAa,UAAA;AAAA,UAClB,IAAA;AAAA,UACA;AAAA,YACE,SAAA,EAAWC,MAAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,YAAA;AAAA,YACpC,MAAA,EAAQ,KAAK,KAAA,CAAM,SAAA;AAAA,YACnB,MAAA,EAAQ,OAAA;AAAA,YACR,SAAS,WAAA,CAAY;AAAA,WACvB;AAAA,UACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,SAC1B;AAAA,MACF,CAAC,CAAA;AAAA,IACH;AAAA,EACF;AACF;AC1EO,SAAS,cAAc,IAAA,EAAgC;AAC5D,EAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAA,KAAS,QAAA,EAAU;AAClC,IAAA,OAAO,IAAI,KAAA,CAAM,WAAA,CAAY,mBAAmB,IAAA,CAAK,OAAA,CAAQ,QAAQ,CAAC,CAAA;AAAA,EACxE;AAEA,EAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAA,KAAS,OAAA,EAAS;AACjC,IAAA,OAAO,IAAI,KAAA,CAAM,SAAA,CAAU,IAAA,CAAK,QAAQ,IAAI,CAAA;AAAA,EAC9C;AAEA,EAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAA,KAAS,UAAA,EAAY;AACpC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,CAAK,QAAQ,QAAA,EAAU;AACzB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AACjD;AAQO,SAAS,kBAAkB,MAAA,EAAsC;AACtE,EAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,IAAA,KAAS,QAAA,EAAU;AACpC,IAAA,OAAO,IAAI,KAAA,CAAM,aAAA,CAAc,mBAAmB,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAC,CAAA;AAAA,EAC5E;AAEA,EAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,IAAA,KAAS,OAAA,EAAS;AACnC,IAAA,OAAO,IAAI,KAAA,CAAM,WAAA,CAAY,MAAA,CAAO,QAAQ,IAAI,CAAA;AAAA,EAClD;AAEA,EAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,IAAA,KAAS,UAAA,EAAY;AACtC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,QAAqC,EAAC;AAE5C,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO;AACvC,IAAA,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,IAAI,CAAA,GAAI,cAAc,IAAI,CAAA;AAAA,EAC5C;AAEA,EAAA,KAAA,MAAW,SAAA,IAAa,MAAA,CAAO,OAAA,CAAQ,OAAA,EAAS;AAC9C,IAAA,KAAA,CAAM,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GAAI,kBAAkB,SAAS,CAAA;AAAA,EAC1D;AAEA,EAAA,OAAO,IAAI,KAAA,CAAM,YAAA,CAAa,KAAK,CAAA;AACrC;AASA,eAAe,mBAAA,CACb,MAAA,EACA,eAAA,EACA,WAAA,EACe;AACf,EAAA,MAAM,KAAA,CAAM,eAAA,EAAiB,EAAE,SAAA,EAAW,MAAM,CAAA;AAEhD,EAAA,QAAQ,WAAA;AAAa,IACnB,KAAK,KAAA,EAAO;AACV,MAAA,MAAM,gBAAoB,GAAA,CAAA,OAAA,CAAQ;AAAA,QAChC,GAAA,EAAK,eAAA;AAAA,QACL,MAAA,EAAQ;AAAA,OACT,CAAA;AAED,MAAA,MAAM,QAAA,CAAS,QAAQ,aAAa,CAAA;AACpC,MAAA;AAAA,IACF;AAAA,IACA,KAAK,KAAA,EAAO;AAEV,MAAA,MAAM,QAAA,CAAS,QAAQ,QAAA,CAAS,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,CAAC,CAAA;AAClE,MAAA;AAAA,IACF;AAAA;AAEJ;AASA,SAAS,iBAAA,CAAkB,UAAkB,WAAA,EAA4C;AACvF,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAQ,CAAA,CAAE,WAAA,EAAY;AAE1C,EAAA,IAAI,GAAA,KAAQ,MAAA,IAAU,GAAA,KAAQ,MAAA,IAAU,QAAQ,SAAA,EAAW;AACzD,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,IAAA,OAAO,KAAA;AAAA,EACT;AAGA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,IAAI,YAAY,QAAA,CAAS,KAAK,KAAK,WAAA,CAAY,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,IAAI,WAAA,CAAY,QAAA,CAAS,KAAK,CAAA,EAAG;AAC/B,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT;AAYO,IAAM,gBAAA,GAAN,MAAM,iBAAA,CAA4C;AAAA,EAOvD,WAAA,CACW,QACA,MAAA,EACT;AAFS,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAET,IAAA,IAAA,CAAK,YAAA,GAAe;AAAA,MAClB,KAAA,EAAO,CAAA,mBAAA,EAAsB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,KAC/C;AAAA,EACF;AAAA,EAbQ,QAAA;AAAA,EACA,KAAA;AAAA,EACA,SAAA,GAAY,KAAA;AAAA,EAEX,YAAA;AAAA,EAWT,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,MAAc,KAAA,GAAuB;AACnC,IAAA,IAAI,KAAK,MAAA,EAAQ;AAEf,MAAA,IAAA,CAAK,KAAA,GAAQ,KAAK,IAAA,CAAK,MAAA,CAAO,MAAM,IAAA,CAAK,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IAC3D,CAAA,MAAO;AAGL,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,mBAAA,IAAuB,MAAA,EAAO;AAC3D,MAAA,IAAA,CAAK,WAAW,MAAM,OAAA,CAAQ,IAAA,CAAK,QAAA,EAAU,iBAAiB,CAAC,CAAA;AAC/D,MAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,IAAA,CAAK,UAAU,IAAA,CAAK,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IACxD;AAEA,IAAA,QAAQ,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA;AAAM,MAChC,KAAK,UAAA,EAAY;AACf,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,WAChC,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAQ,KAAA,EAAO,QAAQ,CAAA,GAC/C,IAAA,CAAK,OAAO,OAAA,CAAQ,KAAA;AAExB,QAAA,MAAM,SAAA,CAAU,IAAA,CAAK,KAAA,EAAO,OAAA,EAAS,EAAE,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,EAAM,CAAA;AACpE,QAAA;AAAA,MACF;AAAA,MACA,KAAK,OAAA,EAAS;AACZ,QAAA,MAAM,EAAA,CAAG,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,IAAA,CAAK,KAAA,EAAO,EAAE,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAC9E,QAAA;AAAA,MACF;AAAA,MACA,KAAK,QAAA,EAAU;AACb,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,kBAAA,CAAmB,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAC,CAAA;AAC7E,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,iBAAA,EAAoB,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAE3E,QAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,EAAY;AAC/C,QAAA,MAAM,SAAA,CAAU,IAAA,CAAK,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,EAAG,EAAE,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAErF,QAAA;AAAA,MACF;AAAA,MACA,KAAK,UAAA,EAAY;AACf,QAAA,MAAM,YAAA,GAAe,QAAQ,GAAA,CAAI,4BAAA;AACjC,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,MAAM,IAAI,KAAA;AAAA,YACR;AAAA,WACF;AAAA,QACF;AAEA,QAAA,MAAM,OAAA,GAAU,KAAK,YAAA,EAAc,CAAA,EAAG,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,IAAA,CAAM,CAAA;AAGpE,QAAA,MAAM,UAAA,GAAa,iBAAiB,OAAO,CAAA;AAC3C,QAAA,MAAM,oBAAoB,UAAA,EAAY,OAAA,CAAQ,IAAA,CAAK,KAAK,GAAG,KAAK,CAAA;AAChE,QAAA;AAAA,MACF;AAAA;AACF,EACF;AAAA,EAEA,OAAO,MAAA,CAAO,YAAY,CAAA,GAAmB;AAC3C,IAAA,IAAI,KAAK,SAAA,EAAW;AACpB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AAEjB,IAAA,IAAI;AACF,MAAA,IAAI,KAAK,QAAA,EAAU;AAEjB,QAAA,MAAM,EAAA,CAAG,KAAK,QAAA,EAAU,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,MAC1D,CAAA,MAAO;AAEL,QAAA,MAAM,GAAG,IAAA,CAAK,KAAA,EAAO,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,MACtC;AAAA,IACF,SAAS,KAAA,EAAO;AAId,MAAA,OAAA,CAAQ,IAAA,CAAK,yCAAyC,KAAK,CAAA;AAAA,IAC7D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAA,GAAsB;AAC1B,IAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,6BAAA;AAC7B,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,IACjF;AAGA,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,KAAK,CAAA;AAGvC,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,mBAAA,IAAuB,MAAA,EAAO;AAC3D,IAAA,MAAM,kBAAkB,IAAA,CAAK,QAAA,EAAU,kBAAkB,IAAA,CAAK,GAAA,EAAK,CAAA,IAAA,CAAM,CAAA;AAEzE,IAAA,IAAI;AACF,MAAA,MAAU,GAAA,CAAA,MAAA;AAAA,QACR;AAAA,UACE,IAAA,EAAM,IAAA;AAAA,UACN,IAAA,EAAM,eAAA;AAAA,UACN,GAAA,EAAK,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA;AAAA,UACvB,OAAA,EAAS;AAAA;AAAA,SACX;AAAA,QACA,CAAC,QAAA,CAAS,IAAA,CAAK,KAAK,CAAC;AAAA,OACvB;AAGA,MAAA,MAAM,WAAA,GAAc,iBAAiB,eAAe,CAAA;AACpD,MAAA,MAAM,IAAA,GAAO,WAAW,QAAQ,CAAA;AAEhC,MAAA,WAAA,MAAiB,SAAS,WAAA,EAAa;AACrC,QAAA,IAAA,CAAK,OAAO,KAAe,CAAA;AAAA,MAC7B;AAEA,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAGnC,MAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,QAAA,EAAU,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAC1D,MAAA,MAAM,MAAA,CAAO,iBAAiB,gBAAgB,CAAA;AAE9C,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA;AAAA,QACvB,IAAA,EAAM,UAAU,IAAA,GAAO,GAAA;AAAA;AAAA,QACvB,MAAM,SAAA,CAAU;AAAA,OAClB;AAGA,MAAA,OAAO;AAAA,QACL,IAAA,EAAM,OAAA;AAAA,QACN,OAAA,EAAS;AAAA,UACP,IAAA,EAAM,UAAA;AAAA,UACN,CAAC,kBAAA,CAAmB,QAAQ,GAAG,IAAA;AAAA,UAC/B,IAAA,EAAM,SAAA;AAAA,UACN,IAAA,EAAM,MAAMD,SAAAA,CAAU,IAAA,CAAK,YAAY;AAAA;AACzC,OACF;AAAA,IACF,CAAA,SAAE;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,EAAA,CAAG,eAAA,EAAiB,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,MAC3C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAa,MAAA,CAAO,IAAA,EAAc,OAAA,GAAU,IAAI,IAAA,EAA0C;AACxF,IAAA,MAAM,MAAA,GAAsB;AAAA,MAC1B,IAAA,EAAM;AAAA,QACJ,IAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACR;AAAA,MACA,OAAA,EAAS;AAAA,QACP,IAAA,EAAM,UAAA;AAAA,QACN,KAAA,EAAO;AAAA;AACT,KACF;AAEA,IAAA,MAAM,gBAAA,GAAmB,IAAI,iBAAA,CAAiB,MAAM,CAAA;AAEpD,IAAA,IAAI;AACF,MAAA,MAAM,iBAAiB,KAAA,EAAM;AAAA,IAC/B,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,gBAAA,CAAiB,MAAA,CAAO,YAAY,CAAA,EAAE;AAC5C,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,gBAAA;AAAA,EACT;AAAA,EAEA,aAAa,IAAA,CAAK,IAAA,EAAmB,MAAA,EAAwD;AAC3F,IAAA,MAAM,gBAAA,GAAmB,IAAI,iBAAA,CAAiB,IAAA,EAAM,MAAM,CAAA;AAE1D,IAAA,IAAI;AACF,MAAA,MAAM,iBAAiB,KAAA,EAAM;AAAA,IAC/B,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,gBAAA,CAAiB,MAAA,CAAO,YAAY,CAAA,EAAE;AAC5C,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,gBAAA;AAAA,EACT;AACF;AAYO,IAAM,kBAAA,GAAN,MAAM,mBAAA,CAA8C;AAAA,EASzD,WAAA,CACW,QACA,MAAA,EACT;AAFS,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAET,IAAA,IAAA,CAAK,YAAA,GAAe;AAAA,MAClB,KAAA,EAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,KACjD;AAAA,EACF;AAAA,EAfQ,QAAA;AAAA,EACA,KAAA;AAAA,EACA,SAAA,GAAY,KAAA;AAAA,EAEH,eAAkC,EAAC;AAAA,EAE3C,YAAA;AAAA,EAWT,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,MAAc,KAAA,GAAuB;AACnC,IAAA,IAAI,KAAK,MAAA,EAAQ;AAEf,MAAA,IAAA,CAAK,KAAA,GAAQ,KAAK,IAAA,CAAK,MAAA,CAAO,MAAM,IAAA,CAAK,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IAC3D,CAAA,MAAO;AAGL,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,mBAAA,IAAuB,MAAA,EAAO;AAC3D,MAAA,IAAA,CAAK,WAAW,MAAM,OAAA,CAAQ,IAAA,CAAK,QAAA,EAAU,mBAAmB,CAAC,CAAA;AACjE,MAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,IAAA,CAAK,UAAU,IAAA,CAAK,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IACxD;AAEA,IAAA,QAAQ,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA;AAAM,MAChC,KAAK,UAAA,EAAY;AAEf,QAAA,MAAM,KAAA,CAAM,KAAK,KAAA,EAAO,EAAE,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,EAAM,CAAA;AAEvD,QAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO;AAC5C,UAAA,MAAM,gBAAA,GAAmB,MAAM,gBAAA,CAAiB,IAAA,CAAK,MAAM,IAAI,CAAA;AAC/D,UAAA,IAAA,CAAK,YAAA,CAAa,KAAK,gBAAgB,CAAA;AAAA,QACzC;AAEA,QAAA,KAAA,MAAW,SAAA,IAAa,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,OAAA,EAAS;AACnD,UAAA,MAAM,kBAAA,GAAqB,MAAM,mBAAA,CAAmB,IAAA,CAAK,WAAW,IAAI,CAAA;AACxE,UAAA,IAAA,CAAK,YAAA,CAAa,KAAK,kBAAkB,CAAA;AAAA,QAC3C;AAEA,QAAA;AAAA,MACF;AAAA,MACA,KAAK,OAAA,EAAS;AAEZ,QAAA,MAAM,WAAA,GAAc,iBAAA,CAAkB,IAAA,CAAK,MAAA,CAAO,QAAQ,IAAI,CAAA;AAE9D,QAAA,IAAI,WAAA,EAAa;AAEf,UAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,IAAA,CAAK,MAAA,CAAO,QAAQ,IAAI,CAAA;AAC5D,UAAA,MAAM,mBAAA,CAAoB,UAAA,EAAY,IAAA,CAAK,KAAA,EAAO,WAAW,CAAA;AAAA,QAC/D,CAAA,MAAO;AAEL,UAAA,MAAM,GAAG,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,KAAK,KAAA,EAAO;AAAA,YAC7C,SAAA,EAAW,IAAA;AAAA,YACX,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK;AAAA,WACxB,CAAA;AAAA,QACH;AAEA,QAAA;AAAA,MACF;AAAA,MACA,KAAK,QAAA,EAAU;AACb,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,kBAAA,CAAmB,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAC,CAAA;AAC7E,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,iBAAA,EAAoB,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAC3E,QAAA,IAAI,CAAC,QAAA,CAAS,IAAA,EAAM,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAG5D,QAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,kBAAA,CAAmB,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAC,CAAA;AACpE,QAAA,MAAM,WAAA,GAAc,iBAAA;AAAA,UAClB,GAAA,CAAI,QAAA;AAAA,UACJ,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK;AAAA,SAC1C;AAEA,QAAA,IAAI,CAAC,WAAA,EAAa;AAChB,UAAA,MAAM,IAAI,MAAM,qEAAqE,CAAA;AAAA,QACvF;AAEA,QAAA,IAAI,CAAC,SAAS,IAAA,EAAM;AAClB,UAAA,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAAA,QAC1C;AAEA,QAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,CAAK,SAAA,EAAU;AACvC,QAAA,MAAM,MAAA,GAAS,IAAI,QAAA,CAAS;AAAA,UAC1B,MAAM,IAAA,GAAO;AACX,YAAA,IAAI;AACF,cAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,cAAA,IAAI,IAAA,EAAM;AACR,gBAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AAAA,cAChB,CAAA,MAAO;AACL,gBAAA,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,cAC9B;AAAA,YACF,SAAS,KAAA,EAAO;AACd,cAAA,IAAA,CAAK,OAAA,CAAQ,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,YACxE;AAAA,UACF;AAAA,SACD,CAAA;AAED,QAAA,MAAM,mBAAA,CAAoB,MAAA,EAAQ,IAAA,CAAK,KAAA,EAAO,WAAW,CAAA;AAEzD,QAAA;AAAA,MACF;AAAA,MACA,KAAK,UAAA,EAAY;AACf,QAAA,MAAM,YAAA,GAAe,QAAQ,GAAA,CAAI,4BAAA;AAEjC,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,MAAM,IAAI,KAAA;AAAA,YACR;AAAA,WACF;AAAA,QACF;AAEA,QAAA,MAAM,OAAA,GAAU,KAAK,YAAA,EAAc,CAAA,EAAG,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,IAAA,CAAM,CAAA;AAGpE,QAAA,MAAM,UAAA,GAAa,iBAAiB,OAAO,CAAA;AAC3C,QAAA,MAAM,oBAAoB,UAAA,EAAY,OAAA,CAAQ,IAAA,CAAK,KAAK,GAAG,KAAK,CAAA;AAEhE,QAAA;AAAA,MACF;AAAA;AACF,EACF;AAAA,EAEA,OAAO,MAAA,CAAO,YAAY,CAAA,GAAmB;AAC3C,IAAA,IAAI,KAAK,SAAA,EAAW;AACpB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AAEjB,IAAA,IAAI;AACF,MAAA,IAAI,KAAK,QAAA,EAAU;AAEjB,QAAA,MAAM,EAAA,CAAG,KAAK,QAAA,EAAU,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,MAC1D,CAAA,MAAO;AAEL,QAAA,MAAM,EAAA,CAAG,KAAK,KAAA,EAAO,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,MACvD;AAAA,IACF,SAAS,KAAA,EAAO;AAId,MAAA,OAAA,CAAQ,IAAA,CAAK,2CAA2C,KAAK,CAAA;AAAA,IAC/D;AAGA,IAAA,KAAA,MAAW,UAAA,IAAc,KAAK,YAAA,EAAc;AAC1C,MAAA,MAAM,UAAA,CAAW,MAAA,CAAO,YAAY,CAAA,EAAE;AAAA,IACxC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAA,CAAK,EAAE,SAAS,OAAA,EAAQ,GAAuB,EAAC,EAA2B;AAC/E,IAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,6BAAA;AAC7B,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,IACjF;AAGA,IAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,IAAA,CAAK,KAAK,CAAA;AAGzC,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,mBAAA,IAAuB,MAAA,EAAO;AAC3D,IAAA,MAAM,kBAAkB,IAAA,CAAK,QAAA,EAAU,kBAAkB,IAAA,CAAK,GAAA,EAAK,CAAA,IAAA,CAAM,CAAA;AAEzE,IAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AAEpB,IAAA,IAAI;AACF,MAAA,MAAU,GAAA,CAAA,MAAA;AAAA,QACR;AAAA,UACE,IAAA,EAAM,IAAA;AAAA,UACN,IAAA,EAAM,eAAA;AAAA,UACN,GAAA,EAAK,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA;AAAA,UAEvB,OAAO,IAAA,EAAM;AAEX,YAAA,IAAA,GAAO,KAAK,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AAG7C,YAAA,KAAA,MAAW,OAAA,IAAW,OAAA,IAAW,EAAC,EAAG;AACnC,cAAA,IAAI,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA,EAAG;AAC5B,gBAAA,OAAO,KAAA;AAAA,cACT;AAAA,YACF;AAGA,YAAA,KAAA,MAAW,OAAA,IAAW,OAAA,IAAW,EAAC,EAAG;AACnC,cAAA,IAAI,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA,EAAG;AAC5B,gBAAA,OAAO,IAAA;AAAA,cACT;AAAA,YACF;AAGA,YAAA,OAAO,CAAC,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,CAAA;AAAA,UACxC,CAAA;AAAA;AAAA,UAGA,QAAA,EAAU,IAAA;AAAA,UACV,OAAA,EAAS;AAAA,SACX;AAAA,QACA,CAAC,QAAA,CAAS,IAAA,CAAK,KAAK,CAAC;AAAA,OACvB;AAGA,MAAA,MAAM,WAAA,GAAc,iBAAiB,eAAe,CAAA;AACpD,MAAA,MAAM,IAAA,GAAO,WAAW,QAAQ,CAAA;AAEhC,MAAA,WAAA,MAAiB,SAAS,WAAA,EAAa;AACrC,QAAA,IAAA,CAAK,OAAO,KAAe,CAAA;AAAA,MAC7B;AAEA,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAGnC,MAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,QAAA,EAAU,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAC1D,MAAA,MAAM,MAAA,CAAO,iBAAiB,gBAAgB,CAAA;AAE9C,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA;AAAA,QACvB,IAAA,EAAM,YAAY,IAAA,GAAO;AAAA;AAAA,OAC3B;AAGA,MAAA,OAAO;AAAA,QACL,IAAA,EAAM,OAAA;AAAA,QACN,OAAA,EAAS;AAAA,UACP,CAAC,kBAAA,CAAmB,QAAQ,GAAG,IAAA;AAAA,UAC/B,IAAA,EAAM,UAAA;AAAA,UACN,IAAA,EAAM,SAAA;AAAA,UACN,IAAA,EAAM,MAAMA,SAAAA,CAAU,IAAA,CAAK,YAAY;AAAA;AACzC,OACF;AAAA,IACF,CAAA,SAAE;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,EAAA,CAAG,eAAA,EAAiB,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,MAC3C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAa,MAAA,CACX,IAAA,EACA,IAAA,EACA,MAAA,EAC6B;AAC7B,IAAA,MAAM,MAAA,GAAwB;AAAA,MAC5B,IAAA,EAAM;AAAA,QACJ,IAAA;AAAA,QACA;AAAA,OACF;AAAA,MACA,OAAA,EAAS;AAAA,QACP,IAAA,EAAM,UAAA;AAAA,QACN,OAAO,EAAC;AAAA,QACR,SAAS;AAAC;AACZ,KACF;AAEA,IAAA,MAAM,kBAAA,GAAqB,IAAI,mBAAA,CAAmB,MAAA,EAAQ,MAAM,CAAA;AAEhE,IAAA,IAAI;AACF,MAAA,MAAM,mBAAmB,KAAA,EAAM;AAAA,IACjC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,kBAAA,CAAmB,MAAA,CAAO,YAAY,CAAA,EAAE;AAC9C,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,kBAAA;AAAA,EACT;AAAA,EAEA,aAAa,IAAA,CACX,MAAA,EACA,MAAA,EAC6B;AAC7B,IAAA,MAAM,kBAAA,GAAqB,IAAI,mBAAA,CAAmB,MAAA,EAAQ,MAAM,CAAA;AAEhE,IAAA,IAAI;AACF,MAAA,MAAM,mBAAmB,KAAA,EAAM;AAAA,IACjC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,kBAAA,CAAmB,MAAA,CAAO,YAAY,CAAA,EAAE;AAC9C,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,kBAAA;AAAA,EACT;AACF;AASA,eAAsB,cAAc,QAAA,EAA+C;AACjF,EAAA,IAAI,QAAA,CAAS,WAAA,KAAgB,MAAA,IAAU,QAAA,CAAS,gBAAgB,OAAA,EAAS;AACvE,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,sBAAA,EAAyB,SAAS,WAAW,CAAA,oCAAA;AAAA,KAC/C;AAAA,EACF;AAEA,EAAA,MAAM,GAAA,GAAM,mBAAmB,QAAQ,CAAA;AACvC,EAAA,MAAM,WAAW,MAAM,KAAA,CAAM,KAAK,EAAE,MAAA,EAAQ,QAAQ,CAAA;AAEpD,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,aAAA,GAAgB,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAC3D,EAAA,IAAI,CAAC,aAAA,EAAe;AAClB,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACpE;AAEA,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,aAAA,EAAe,EAAE,CAAA;AACvC,EAAA,IAAI,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8BAAA,EAAiC,aAAa,CAAA,CAAE,CAAA;AAAA,EAClE;AAEA,EAAA,OAAO,IAAA;AACT;AAKO,SAAS,kBAAkB,QAAA,EAAmC;AACnE,EAAA,MAAM,cAAA,GAAiB,gBAAgB,QAAQ,CAAA;AAE/C,EAAA,OAAO,cAAA,CAAe,QAAA,GAAW,QAAA,CAAS,cAAA,CAAe,QAAQ,CAAA,GAAI,EAAA;AACvE;AC/sBO,SAAS,gBAAA,GAA2B;AACzC,EAAA,OAAO,UAAA,CAAW,KAAA,CAAM,WAAA,CAAY,EAAE,CAAC,CAAA,CAAE,QAAA;AAC3C;AAeO,SAAS,WAAA,CACd,SAAkB,KAAA,EACK;AACvB,EAAA,MAAM,KAAA,GAAQ,YAAY,EAAE,CAAA;AAE5B,EAAA,IAAI,WAAW,KAAA,EAAO;AACpB,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,WAAW,QAAA,EAAU;AACvB,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EAC7C;AAEA,EAAA,OAAO,WAAW,KAAK,CAAA;AACzB;;;ACxCE,IAAAa,YAAAA,GAAgB;AAAA,EAGd,KAAA,EAAS;AACX,CAAA;;;ACYF,eAAsB,kBACpB,WAAA,EAC+B;AAC/B,EAAA,MAAM,mBAAA,GAAsB,MAAMb,SAAAA,CAAU,WAAW,CAAA;AAEvD,EAAA,MAAM,OAAA,GAAU,CAAC,KAAA,EAAO,KAAA,EAAO,MAAM,iCAAiC,CAAA;AAGtE,EAAA,MAAM,QAAA,GAAW,mBAAA,CAAoB,SAAA,CAAU,CAAC,CAAA;AAEhD,EAAA,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAM,QAAA,CAAS,IAAA,CAAK,UAAU,CAAA;AAE3C,EAAA,IAAI,oBAAoB,OAAA,EAAS;AAC/B,IAAA,OAAA,CAAQ,IAAA,CAAK,MAAM,cAAc,CAAA;AAAA,EACnC;AAEA,EAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,mBAAA,CAAoB,IAAI,IAAI,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAE,CAAA;AAE1E,EAAA,IAAI,oBAAoB,QAAA,EAAU;AAChC,IAAA,OAAA,CAAQ,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAM,WAAW,CAAA;AAAA,EAC9C;AAEA,EAAA,OAAOC,MAAAA,CAAO;AAAA,IACZ,IAAA,EAAM,KAAA;AAAA,IAEN,IAAA,EAAM;AAAA,MACJ,KAAA,EAAO,OAAA;AAAA,MACP,WAAA,EAAa,gCAAA;AAAA,MACb,IAAA,EAAM;AAAA,KACR;AAAA,IAEA,IAAA,EAAM;AAAA,MACJ,OAAcY,YAAAA,CAAgB,KAAA;AAAA,MAC9B,OAAA;AAAA,MAEA,OAAO,YAAA,CAAa;AAAA,QAClB,WAAA,EAAa,mBAAA,CAAoB,QAAA,GAC7B,cAAA,CAAe,UAAA,EAAY,mBAAA,CAAoB,QAAA,EAAU,EAAE,QAAA,EAAU,IAAA,EAAM,CAAA,GAC3E,MAAA;AAAA,QAEJ,cAAA,EAAgB,oBAAoB,OAAA,EAAS,UAAA,GACzC,eAAe,aAAA,EAAe,mBAAA,CAAoB,QAAQ,UAAA,EAAY;AAAA,UACpE,QAAA,EAAU,IAAA;AAAA,UACV,IAAA,EAAM;AAAA,SACP,CAAA,GACD,MAAA;AAAA,QAEJ,cAAA,EAAgB,cAAA;AAAA,UACd,aAAA;AAAA,UACA,GAAG,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA,EAAI,oBAAoB,OAAO,CAAA,CAAA;AAAA,UAC9D,EAAE,MAAM,GAAA;AAAM;AAChB,OACD;AAAA;AACH,GACD,CAAA;AACH;AAQO,SAAS,qBAAA,GAAwC;AACtD,EAAA,MAAM,IAAA,GAAOC,cAAY,EAAE,CAAA;AAE3B,EAAA,OAAO,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,CAAE,UAAU,CAAA;AACxC;AAQO,SAAS,uBAAuB,gBAAA,EAAsD;AAC3F,EAAA,OAAOb,MAAAA,CAAO,gBAAgB,CAAA,CAAE,KAAA,CAAM,CAAAc,iBAAAA,KAAoB;AACxD,IAAA,MAAM,gBAAA,GAAmB,aAAA,CAAc,MAAA,CAAOA,iBAAgB,CAAA;AAG9D,IAAA,MAAM,OAAA,GAAU,gBAAA,CAAiB,IAAA,CAAK,CAAC,EAAE,OAAA,CAAQ,OAAA;AAEjD,IAAA,MAAM,EAAE,aAAa,SAAA,EAAU,GAAI,QAAQ,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAE/D,IAAA,OAAOd,MAAAA,CAAO;AAAA,MACZ,IAAA,EAAM,SAAA;AAAA,MACN,WAAA;AAAA,MACA,SAAA;AAAA,MACA,UAAA,EAAY,OAAOc,iBAAgB;AAAA,KACpC,CAAA;AAAA,EACH,CAAC,CAAA;AACH;AAgHA,eAAsB,mBAAmB,OAAA,EAA+C;AACtF,EAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB,OAAO,CAAA;AAC/C,EAAA,MAAM,GAAA,GAAM,MAAMf,SAAAA,CAAU,MAAA,CAAO,GAAG,CAAA;AAEtC,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,QAAA,EAAU,GAAA,GAAM,MAAM,iBAAA,CAAkB,GAAG,CAAA,GAAI;AAAA,GACjD;AACF;AASA,eAAsB,kBAAA,CAAmB;AAAA,EACvC,IAAA;AAAA,EACA,gBAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAU,EAAE,OAAA,EAAS,MAAM,IAAA,EAAM,EAAA,EAAI,MAAM,MAAA,EAAO;AAAA,EAClD,WAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF,CAAA,EAAkD;AAChD,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,MAAM,gEAAgE,CAAA;AAAA,EAClF;AAEA,EAAA,gBAAA,KAAqB,IAAA;AACrB,EAAA,UAAA,KAAe,OAAA,CAAQ,OAAA;AACvB,EAAA,WAAA,KAAgB,CAAC,UAAA;AAEjB,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAM,OAAA,CAAQ,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,KAAA,CAAA,EAAS;AAAA,MACpC,IAAA,EAAM,OAAA;AAAA,MACN,QAAQ,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAA,CAAU,CAAC,CAAC,CAAC,CAAA,CAAA;AAAA,MACrD,SAAS,WAAA,IAAe,GAAA;AAAA,MACxB,UAAU,YAAA,IAAgB,CAAA;AAAA,MAC1B,QAAA,EAAU,CAAC,IAAA,CAAK,GAAA,EAAK;AAAA,KACtB,EAAE,IAAA,EAAK;AAAA,EACV;AAEA,EAAA,IAAI,CAAC,QAAQ,OAAA,EAAS;AACpB,IAAA,OAAOC,MAAAA,CAAO;AAAA,MACZ,QAAA,EAAU,IAAA;AAAA,MACV;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,UAAU,OAAA,EAAS,IAAA,IAAQ,kBAAA,CAAmB,SAAA,CAAU,CAAC,CAAC,CAAA;AAEhE,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAM,OAAA,CAAQ,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,IAAA,CAAA,EAAQ;AAAA,MACnC,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,CAAA,OAAA,EAAU,OAAO,CAAA,CAAA,EAAI,QAAQ,IAAI,CAAA,CAAA;AAAA,MACzC,SAAS,eAAA,IAAmB,GAAA;AAAA,MAC5B,UAAU,gBAAA,IAAoB,CAAA;AAAA,MAC9B,QAAA,EAAU,CAAC,IAAA,CAAK,GAAA,EAAK;AAAA,KACtB,EAAE,IAAA,EAAK;AAAA,EACV;AAEA,EAAA,MAAM,aAAaA,MAAAA,CAAO;AAAA,IACxB,IAAA,EAAM,OAAA;AAAA,IACN,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,QAAA,EAAU,WAAA;AAAA,IACV,UAAA,EAAY,UAAA,GAAaA,MAAAA,CAAO,UAAU,EAAE,UAAA,GAAa,aAAA;AAAA,IACzD,cAAA,EAAgB;AAAA,GACjB,CAAA;AAED,EAAA,MAAM,cAAA,GAAiB,IAAIe,MAAAA,CAAO,OAAA,CAAQ,UAAA,EAAY;AAAA,IACpD,UAAA;AAAA,IACA,MAAA,EAAQ,UAAA;AAAA,IACR,QAAA,EAAU,CAAC,IAAA,CAAK,GAAA,EAAK;AAAA,GACtB,CAAA;AAED,EAAA,MAAM,aAAA,GAAgB,IAAIA,MAAAA,CAAO,OAAA,CAAQ,UAAA,EAAY;AAAA,IACnD,UAAA;AAAA,IACA,MAAA,EAAQ,uCAAA;AAAA,IACR,QAAA,EAAU,CAAC,IAAA,CAAK,GAAA,EAAK;AAAA,GACtB,CAAA;AAED,EAAA,OAAOf,MAAAA,CAAO;AAAA,IACZ,SAAA;AAAA,IACA,UAAU,cAAA,CAAe,MAAA,CAAO,MAAM,CAAA,CAAA,KAAK,CAAA,CAAE,MAAM,CAAA;AAAA,IACnD,GAAA,EAAK;AAAA,MACH,WAAW,CAAC,cAAA,CAAe,SAAS,OAAA,CAAQ,IAAA,IAAQ,EAAE,CAAC,CAAA;AAAA,MACvD,IAAA,EAAM,QAAQ,IAAA,IAAQ,MAAA;AAAA,MACtB,SAAS,aAAA,CAAc,MAAA,CAAO,MAAM,CAAA,CAAA,KAAK,CAAA,CAAE,MAAM,CAAA;AAAA,MACjD,UAAU,UAAA,CAAW,QAAA;AAAA,MACrB,SAAS,UAAA,GACL,UAAA,GACA,aAAA,GACE,sBAAA,CAAuB,aAAa,CAAA,GACpC;AAAA;AACR,GACD,CAAA;AACH","file":"chunk-RKTGGVPZ.js","sourcesContent":["import type { ArrayPatchMode, network } from \"@highstate/library\"\nimport { type Input, toPromise } from \"@highstate/pulumi\"\nimport { uniqueBy } from \"remeda\"\n\n/**\n * The L3 or L4 endpoint for some service.\n *\n * The format is: `[protocol://]endpoint[:port]`\n */\nexport type InputL34Endpoint = network.L34Endpoint | string\n\n/**\n * The L3 endpoint for some service.\n */\nexport type InputL3Endpoint = network.L3Endpoint | string\n\n/**\n * The L4 endpoint for some service.\n */\nexport type InputL4Endpoint = network.L4Endpoint | string\n\n/**\n * The L7 endpoint for some service.\n *\n * The format is: `appProtocol://endpoint[:port][/resource]`\n */\nexport type InputL7Endpoint = network.L7Endpoint | string\n\n/**\n * Stringifies a L3 endpoint object into a string.\n *\n * @param l3Endpoint The L3 endpoint object to stringify.\n * @returns The string representation of the L3 endpoint.\n */\nexport function l3EndpointToString(l3Endpoint: network.L3Endpoint): string {\n  switch (l3Endpoint.type) {\n    case \"ipv4\":\n      return l3Endpoint.address\n    case \"ipv6\":\n      return l3Endpoint.address\n    case \"hostname\":\n      return l3Endpoint.hostname\n  }\n}\n\n/**\n * Stringifies a L4 endpoint object into a string.\n *\n * @param l4Endpoint The L4 endpoint object to stringify.\n * @returns The string representation of the L4 endpoint.\n */\nexport function l4EndpointToString(l4Endpoint: network.L4Endpoint): string {\n  if (l4Endpoint.type === \"ipv6\") {\n    return `[${l4Endpoint.address}]:${l4Endpoint.port}`\n  }\n\n  return `${l3EndpointToString(l4Endpoint)}:${l4Endpoint.port}`\n}\n\n/**\n * Stringifies a L4 endpoint object into a string with protocol.\n *\n * @param l4Endpoint The L4 endpoint object to stringify.\n * @returns The string representation of the L4 endpoint with protocol.\n */\nexport function l4EndpointWithProtocolToString(l4Endpoint: network.L4Endpoint): string {\n  const protocol = `${l4Endpoint.protocol}://`\n\n  return `${protocol}${l4EndpointToString(l4Endpoint)}`\n}\n\n/**\n * Stringifies a L7 endpoint object into a string.\n *\n * The format is: `appProtocol://endpoint[:port][/resource]`\n * @param l7Endpoint The L7 endpoint object to stringify.\n * @returns The string representation of the L7 endpoint.\n */\nexport function l7EndpointToString(l7Endpoint: network.L7Endpoint): string {\n  const protocol = `${l7Endpoint.appProtocol}://`\n\n  let endpoint = l4EndpointToString(l7Endpoint)\n\n  if (l7Endpoint.resource) {\n    endpoint += `/${l7Endpoint.resource}`\n  }\n\n  return `${protocol}${endpoint}`\n}\n\n/**\n * Stringifies a L3 or L4 endpoint object into a string.\n *\n * @param l34Endpoint The L3 or L4 endpoint object to stringify.\n * @returns The string representation of the L3 or L4 endpoint.\n */\nexport function l34EndpointToString(l34Endpoint: network.L34Endpoint): string {\n  if (l34Endpoint.port) {\n    return l4EndpointToString(l34Endpoint)\n  }\n\n  return l3EndpointToString(l34Endpoint)\n}\n\nconst L34_ENDPOINT_RE =\n  /^(?:(?<protocol>[a-z]+):\\/\\/)?(?:(?:\\[?(?<ipv6>[0-9A-Fa-f:]+)\\]?)|(?<ipv4>(?:\\d{1,3}\\.){3}\\d{1,3})|(?<hostname>[a-zA-Z0-9-*]+(?:\\.[a-zA-Z0-9-*]+)*))(?::(?<port>\\d{1,5}))?$/\n\nconst L7_ENDPOINT_RE =\n  /^(?<appProtocol>[a-z]+):\\/\\/(?:(?:\\[?(?<ipv6>[0-9A-Fa-f:]+)\\]?)|(?<ipv4>(?:\\d{1,3}\\.){3}\\d{1,3})|(?<hostname>[a-zA-Z0-9-*]+(?:\\.[a-zA-Z0-9-*]+)*))(?::(?<port>\\d{1,5}))?(?:\\/(?<resource>.*))?$/\n\n/**\n * Parses a L3 or L4 endpoint from a string.\n *\n * The format is `[protocol://]endpoint[:port]`.\n *\n * @param l34Endpoint The L3 or L4 endpoint string to parse.\n * @returns The parsed L3 or L4 endpoint object.\n */\nexport function parseL34Endpoint(l34Endpoint: InputL34Endpoint): network.L34Endpoint {\n  if (typeof l34Endpoint === \"object\") {\n    return l34Endpoint\n  }\n\n  const match = l34Endpoint.match(L34_ENDPOINT_RE)\n  if (!match) {\n    throw new Error(`Invalid L3/L4 endpoint: \"${l34Endpoint}\"`)\n  }\n\n  const { protocol, ipv6, ipv4, hostname, port } = match.groups!\n\n  if (protocol && protocol !== \"tcp\" && protocol !== \"udp\") {\n    throw new Error(`Invalid L4 endpoint protocol: \"${protocol}\"`)\n  }\n\n  let visibility: network.EndpointVisibility = \"public\"\n\n  if (ipv4 && IPV4_PRIVATE_REGEX.test(ipv4)) {\n    visibility = \"external\"\n  } else if (ipv6 && IPV6_PRIVATE_REGEX.test(ipv6)) {\n    visibility = \"external\"\n  }\n\n  const fallbackProtocol = port ? \"tcp\" : undefined\n\n  return {\n    type: ipv6 ? \"ipv6\" : ipv4 ? \"ipv4\" : \"hostname\",\n    visibility,\n    address: ipv6 || ipv4,\n    hostname: hostname,\n    port: port ? parseInt(port, 10) : undefined,\n    protocol: protocol ? (protocol as network.L4Protocol) : fallbackProtocol,\n  } as network.L34Endpoint\n}\n\n/**\n * Parses a L3 endpoint from a string.\n *\n * The same as `parseL34Endpoint`, but only for L3 endpoints and will throw an error if the endpoint contains a port.\n *\n * @param l3Endpoint The L3 endpoint string to parse.\n * @returns The parsed L3 endpoint object.\n */\nexport function parseL3Endpoint(l3Endpoint: InputL3Endpoint): network.L3Endpoint {\n  if (typeof l3Endpoint === \"object\") {\n    return l3Endpoint\n  }\n\n  const parsed = parseL34Endpoint(l3Endpoint)\n\n  if (parsed.port) {\n    throw new Error(`Port cannot be specified in L3 endpoint: \"${l3Endpoint}\"`)\n  }\n\n  return parsed\n}\n\n/**\n * Parses a L4 endpoint from a string.\n *\n * The same as `parseL34Endpoint`, but only for L4 endpoints and will throw an error if the endpoint does not contain a port.\n */\nexport function parseL4Endpoint(l4Endpoint: InputL4Endpoint): network.L4Endpoint {\n  if (typeof l4Endpoint === \"object\") {\n    return l4Endpoint\n  }\n\n  const parsed = parseL34Endpoint(l4Endpoint)\n\n  if (!parsed.port) {\n    throw new Error(`No port found in L4 endpoint: \"${l4Endpoint}\"`)\n  }\n\n  return parsed\n}\n\nconst IPV4_PRIVATE_REGEX =\n  /^(?:10|127)(?:\\.\\d{1,3}){3}$|^(?:172\\.1[6-9]|172\\.2[0-9]|172\\.3[0-1])(?:\\.\\d{1,3}){2}$|^(?:192\\.168)(?:\\.\\d{1,3}){2}$/\n\nconst IPV6_PRIVATE_REGEX =\n  /^(?:fc|fd)(?:[0-9a-f]{2}){0,2}::(?:[0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$|^::(?:ffff:(?:10|127)(?:\\.\\d{1,3}){3}|(?:172\\.1[6-9]|172\\.2[0-9]|172\\.3[0-1])(?:\\.\\d{1,3}){2}|(?:192\\.168)(?:\\.\\d{1,3}){2})$/\n\n/**\n * Helper function to get the input L3 endpoint from the raw endpoint or input endpoint.\n *\n * If neither is provided, an error is thrown.\n *\n * @param rawEndpoint The raw endpoint string to parse.\n * @param inputEndpoint The input endpoint object to use if the raw endpoint is not provided.\n * @returns The parsed L3 endpoint object.\n */\nexport async function requireInputL3Endpoint(\n  rawEndpoint: string | undefined,\n  inputEndpoint: Input<network.L3Endpoint> | undefined,\n): Promise<network.L3Endpoint> {\n  if (rawEndpoint) {\n    return parseL3Endpoint(rawEndpoint)\n  }\n\n  if (inputEndpoint) {\n    return toPromise(inputEndpoint)\n  }\n\n  throw new Error(\"No endpoint provided\")\n}\n\n/**\n * Helper function to get the input L4 endpoint from the raw endpoint or input endpoint.\n *\n * If neither is provided, an error is thrown.\n *\n * @param rawEndpoint The raw endpoint string to parse.\n * @param inputEndpoint The input endpoint object to use if the raw endpoint is not provided.\n * @returns The parsed L4 endpoint object.\n */\nexport async function requireInputL4Endpoint(\n  rawEndpoint: string | undefined,\n  inputEndpoint: Input<network.L4Endpoint> | undefined,\n): Promise<network.L4Endpoint> {\n  if (rawEndpoint) {\n    return parseL4Endpoint(rawEndpoint)\n  }\n\n  if (inputEndpoint) {\n    return toPromise(inputEndpoint)\n  }\n\n  throw new Error(\"No endpoint provided\")\n}\n\n/**\n * Converts L3 endpoint to L4 endpoint by adding a port and protocol.\n *\n * @param l3Endpoint The L3 endpoint to convert.\n * @param port The port to add to the L3 endpoint.\n * @param protocol The protocol to add to the L3 endpoint. Defaults to \"tcp\".\n * @returns The L4 endpoint with the port and protocol added.\n */\nexport function l3EndpointToL4(\n  l3Endpoint: InputL3Endpoint,\n  port: number,\n  protocol: network.L4Protocol = \"tcp\",\n): network.L4Endpoint {\n  return {\n    ...parseL3Endpoint(l3Endpoint),\n    port,\n    protocol,\n  }\n}\n\n/**\n * Filters the endpoints based on the given filter.\n *\n * @param endpoints The list of endpoints to filter.\n * @param filter The filter to apply. If not provided, the endpoints will be filtered by the most accessible type: `public` > `external` > `internal`.\n * @param types The list of endpoint types to filter by. If provided, only endpoints of these types will be returned.\n *\n * @returns The filtered list of endpoints.\n */\nexport function filterEndpoints<\n  TEndpoint extends network.L34Endpoint,\n  TType extends network.L34Endpoint[\"type\"],\n>(\n  endpoints: TEndpoint[],\n  filter?: network.EndpointFilter,\n  types?: TType[],\n): (TEndpoint & { type: TType })[] {\n  if (filter?.length) {\n    endpoints = endpoints.filter(endpoint => filter.includes(endpoint.visibility))\n  } else if (endpoints.some(endpoint => endpoint.visibility === \"public\")) {\n    endpoints = endpoints.filter(endpoint => endpoint.visibility === \"public\")\n  } else if (endpoints.some(endpoint => endpoint.visibility === \"external\")) {\n    endpoints = endpoints.filter(endpoint => endpoint.visibility === \"external\")\n  }\n\n  if (types?.length) {\n    endpoints = endpoints.filter(endpoint => types.includes(endpoint.type as TType))\n  }\n\n  return endpoints as (TEndpoint & { type: TType })[]\n}\n\n/**\n * Converts a L3 endpoint to CIDR notation.\n *\n * If the endpoint is a hostname, an error is thrown.\n *\n * @param l3Endpoint The L3 endpoint to convert.\n * @returns The CIDR notation of the L3 endpoint.\n */\nexport function l3EndpointToCidr(l3Endpoint: network.L3Endpoint): string {\n  switch (l3Endpoint.type) {\n    case \"ipv4\":\n      return `${l3Endpoint.address}/32`\n    case \"ipv6\":\n      return `${l3Endpoint.address}/128`\n    case \"hostname\":\n      throw new Error(\"Cannot convert hostname to CIDR\")\n  }\n}\n\nconst udpAppProtocols = [\"dns\", \"dhcp\"]\n\n/**\n * Parses a L7 endpoint from a string.\n *\n * The format is: `appProtocol://endpoint[:port][/resource]`\n *\n * @param l7Endpoint The L7 endpoint string to parse.\n * @returns The parsed L7 endpoint object.\n */\nexport function parseL7Endpoint(l7Endpoint: InputL7Endpoint): network.L7Endpoint {\n  if (typeof l7Endpoint === \"object\") {\n    return l7Endpoint\n  }\n\n  const match = l7Endpoint.match(L7_ENDPOINT_RE)\n  if (!match) {\n    throw new Error(`Invalid L7 endpoint: \"${l7Endpoint}\"`)\n  }\n\n  const { appProtocol, ipv6, ipv4, hostname, port, resource } = match.groups!\n\n  let visibility: network.EndpointVisibility = \"public\"\n\n  if (ipv4 && IPV4_PRIVATE_REGEX.test(ipv4)) {\n    visibility = \"external\"\n  } else if (ipv6 && IPV6_PRIVATE_REGEX.test(ipv6)) {\n    visibility = \"external\"\n  }\n\n  return {\n    type: ipv6 ? \"ipv6\" : ipv4 ? \"ipv4\" : \"hostname\",\n    visibility,\n    address: ipv6 || ipv4,\n    hostname: hostname,\n\n    // Default port for L7 endpoints (TODO: add more specific defaults for common protocols)\n    port: port ? parseInt(port, 10) : 443,\n\n    // L7 endpoints typically use TCP, but can also use UDP for specific protocols\n    protocol: udpAppProtocols.includes(appProtocol) ? \"udp\" : \"tcp\",\n\n    appProtocol,\n    resource: resource || \"\",\n  } as network.L7Endpoint\n}\n\n/**\n * Updates the endpoints based on the given mode.\n *\n * @param currentEndpoints The current endpoints to update.\n * @param endpoints The new endpoints to add in string format.\n * @param inputEndpoints The input endpoints to add in object format.\n * @param mode The mode to use when updating the endpoints. Can be \"replace\" or \"prepend\". Defaults to \"prepend\".\n * @returns The updated list of endpoints with duplicates removed.\n */\nexport async function updateEndpoints<TEndpoints extends network.L34Endpoint>(\n  currentEndpoints: Input<TEndpoints[]>,\n  endpoints: string[] | undefined,\n  inputEndpoints: Input<TEndpoints[]> | undefined,\n  mode: ArrayPatchMode = \"prepend\",\n): Promise<TEndpoints[]> {\n  const resolvedCurrentEndpoints = await toPromise(currentEndpoints)\n  const newEndpoints = await parseEndpoints(endpoints, inputEndpoints)\n\n  if (mode === \"replace\") {\n    return newEndpoints as TEndpoints[]\n  }\n\n  return uniqueBy(\n    [...newEndpoints, ...resolvedCurrentEndpoints],\n    l34EndpointToString,\n  ) as TEndpoints[]\n}\n\n/**\n * Parses a list of endpoints from strings and input objects.\n *\n * @param endpoints The list of endpoint strings to parse.\n * @param inputEndpoints The list of input endpoint objects to use.\n * @returns The parsed list of endpoint objects with duplicates removed.\n */\nexport async function parseEndpoints<TEndpoints extends network.L34Endpoint>(\n  endpoints: string[] | undefined,\n  inputEndpoints: Input<TEndpoints[]> | undefined,\n): Promise<TEndpoints[]> {\n  const resolvedInputEndpoints = await toPromise(inputEndpoints)\n\n  return uniqueBy(\n    [...(endpoints?.map(parseL34Endpoint) ?? []), ...(resolvedInputEndpoints ?? [])],\n    l34EndpointToString,\n  ) as TEndpoints[]\n}\n","import type { common, ssh } from \"@highstate/library\"\nimport { homedir } from \"node:os\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type InputOrArray,\n  interpolate,\n  type Output,\n  output,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { sha256 } from \"@noble/hashes/sha2\"\nimport { local, remote, type types } from \"@pulumi/command\"\nimport { flat } from \"remeda\"\nimport { l3EndpointToString } from \"./network\"\n\n/**\n * Creates a connection object for the given SSH credentials.\n *\n * @param ssh The SSH credentials.\n * @returns An output connection object for Pulumi remote commands.\n */\nexport function getServerConnection(\n  ssh: Input<ssh.Connection>,\n): Output<types.input.remote.ConnectionArgs> {\n  return output(ssh).apply(ssh => ({\n    host: l3EndpointToString(ssh.endpoints[0]),\n    port: ssh.endpoints[0].port,\n    user: ssh.user,\n    password: ssh.password,\n    privateKey: ssh.keyPair?.privateKey,\n    dialErrorLimit: 3,\n    hostKey: ssh.hostKey,\n  }))\n}\n\nexport type CommandHost = \"local\" | Input<common.Server>\nexport type CommandRunMode = \"auto\" | \"prefer-host\"\n\nexport type CommandArgs = {\n  /**\n   * The host to run the command on.\n   *\n   * Can be \"local\" for local execution or a server object for remote execution.\n   */\n  host: CommandHost\n\n  /**\n   * The command to run when the resource is created.\n   *\n   * If an array is provided, it will be joined with spaces.\n   */\n  create: InputOrArray<string>\n\n  /**\n   * The command to run when the resource is updated or one of the triggers changes.\n   *\n   * If not set, the `create` command will be used.\n   */\n  update?: InputOrArray<string>\n\n  /**\n   * The command to run when the resource is deleted.\n   */\n  delete?: InputOrArray<string>\n\n  /**\n   * The stdin content to pass to the command.\n   */\n  stdin?: Input<string>\n\n  /**\n   * The logging level for the command.\n   */\n  logging?: Input<local.Logging>\n\n  /**\n   * The triggers for the command.\n   *\n   * They will be captured in the command's state and will trigger the command to run again\n   * if they change.\n   */\n  triggers?: InputOrArray<unknown>\n\n  /**\n   * The update triggers for the command.\n   *\n   * Unlike `triggers`, which replace the entire resource on change, these will only trigger the `update` command.\n   *\n   * Under the hood, it is implemented using a hash of the provided values and passing it as environment variable.\n   * It is recommended to pass only primitive values (strings, numbers, booleans) or small objects/arrays for proper serialization.\n   */\n  updateTriggers?: InputOrArray<unknown>\n\n  /**\n   * The working directory for the command.\n   *\n   * If not set, the command will run in the user's home directory (for both local and remote hosts).\n   */\n  cwd?: Input<string>\n\n  /**\n   * The environment variables to set for the command.\n   */\n  environment?: Input<Record<string, Input<string>>>\n\n  /**\n   * The run mode for the command.\n   *\n   * - `auto` (default): if the `image` is set, it will always run in a container, never on the host;\n   * otherwise, it will run on the host.\n   *\n   * - `prefer-host`: it will try to run on the host if the executable is available;\n   * otherwise, it will run in a container or throw an error if the `image` is not set.\n   */\n  runMode?: CommandRunMode\n\n  /**\n   * The container image to use to run the command.\n   */\n  image?: Input<string>\n\n  /**\n   * The paths to mount if the command runs in a container.\n   *\n   * They will be mounted to the same paths in the container.\n   */\n  mounts?: InputOrArray<string>\n}\n\nexport type TextFileArgs = {\n  /**\n   * The host to run the command on.\n   */\n  host: CommandHost\n\n  /**\n   * The absolute path to the file on the host.\n   */\n  path: Input<string>\n\n  /**\n   * The content to write to the file.\n   */\n  content: Input<string>\n}\n\nexport type WaitForArgs = CommandArgs & {\n  /**\n   * The timeout in seconds to wait for the command to complete.\n   *\n   * Defaults to 5 minutes (300 seconds).\n   */\n  timeout?: Input<number>\n\n  /**\n   * The interval in seconds to wait between checks.\n   *\n   * Defaults to 5 seconds.\n   */\n  interval?: Input<number>\n}\n\nfunction createCommand(command: string | string[]): string {\n  if (Array.isArray(command)) {\n    return command.join(\" \")\n  }\n\n  return command\n}\n\nfunction wrapWithWorkDir(dir?: Input<string>) {\n  if (!dir) {\n    return (command: string) => output(command)\n  }\n\n  return (command: string) => interpolate`cd \"${dir}\" && ${command}`\n}\n\nfunction wrapWithEnvironment(environment?: Input<Record<string, Input<string>>>) {\n  if (!environment) {\n    return (command: string) => output(command)\n  }\n\n  return (command: string) =>\n    output({ command, environment }).apply(({ command, environment }) => {\n      if (!environment || Object.keys(environment).length === 0) {\n        return command\n      }\n\n      const envExport = Object.entries(environment)\n        .map(([key, value]) => `export ${key}=\"${value}\"`)\n        .join(\" && \")\n\n      return `${envExport} && ${command}`\n    })\n}\n\nfunction wrapWithWaitFor(timeout: Input<number> = 300, interval: Input<number> = 5) {\n  return (command: string | string[]) =>\n    // TOD: escape the command\n    interpolate`timeout ${timeout} bash -c 'while ! ${createCommand(command)}; do sleep ${interval}; done'`\n}\n\nfunction applyUpdateTriggers(\n  env: Input<Record<string, Input<string>>> | undefined,\n  triggers: InputOrArray<unknown> | undefined,\n) {\n  return output({ env, triggers }).apply(({ env, triggers }) => {\n    if (!triggers) {\n      return env\n    }\n\n    const hash = sha256(JSON.stringify(triggers))\n    const hashHex = Buffer.from(hash).toString(\"hex\")\n\n    return {\n      ...env,\n      HIGHSTATE_UPDATE_TRIGGER_HASH: hashHex,\n    }\n  })\n}\n\nexport class Command extends ComponentResource {\n  public readonly stdout: Output<string>\n  public readonly stderr: Output<string>\n\n  constructor(name: string, args: CommandArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:common:Command\", name, args, opts)\n\n    const environment = applyUpdateTriggers(\n      args.environment,\n      args.updateTriggers,\n    ) as local.CommandArgs[\"environment\"]\n\n    const command =\n      args.host === \"local\"\n        ? new local.Command(\n            name,\n            {\n              create: output(args.create).apply(createCommand),\n              update: args.update ? output(args.update).apply(createCommand) : undefined,\n              delete: args.delete ? output(args.delete).apply(createCommand) : undefined,\n              logging: args.logging,\n              triggers: args.triggers ? output(args.triggers).apply(flat) : undefined,\n              dir: args.cwd ?? homedir(),\n              environment,\n              stdin: args.stdin,\n            },\n            { ...opts, parent: this },\n          )\n        : new remote.Command(\n            name,\n            {\n              connection: output(args.host).apply(server => {\n                if (!server.ssh) {\n                  throw new Error(`The server \"${server.hostname}\" has no SSH credentials`)\n                }\n\n                return getServerConnection(server.ssh)\n              }),\n\n              create: output(args.create)\n                .apply(createCommand)\n                .apply(wrapWithWorkDir(args.cwd))\n                .apply(wrapWithEnvironment(environment)),\n\n              update: args.update\n                ? output(args.update)\n                    .apply(createCommand)\n                    .apply(wrapWithWorkDir(args.cwd))\n                    .apply(wrapWithEnvironment(environment))\n                : undefined,\n\n              delete: args.delete\n                ? output(args.delete)\n                    .apply(createCommand)\n                    .apply(wrapWithWorkDir(args.cwd))\n                    .apply(wrapWithEnvironment(environment))\n                : undefined,\n\n              logging: args.logging,\n              triggers: args.triggers ? output(args.triggers).apply(flat) : undefined,\n              stdin: args.stdin,\n\n              addPreviousOutputInEnv: false,\n\n              // TODO: does not work if server do not define AcceptEnv\n              // environment,\n            },\n            { ...opts, parent: this },\n          )\n\n    this.stdout = command.stdout\n    this.stderr = command.stderr\n\n    this.registerOutputs({\n      stdout: this.stdout,\n      stderr: this.stderr,\n    })\n  }\n\n  /**\n   * Waits for the command to complete and returns its output.\n   * The standard output will be returned.\n   */\n  async wait(): Promise<string> {\n    return await toPromise(this.stdout)\n  }\n\n  /**\n   * Creates a command that writes the given content to a file on the host.\n   * The file will be created if it does not exist, and overwritten if it does.\n   *\n   * Use for small text files like configuration files.\n   */\n  static createTextFile(\n    name: string,\n    options: TextFileArgs,\n    opts?: ComponentResourceOptions,\n  ): Command {\n    return new Command(\n      name,\n      {\n        host: options.host,\n        create: interpolate`mkdir -p $(dirname \"${options.path}\") && cat > ${options.path}`,\n        delete: interpolate`rm -rf ${options.path}`,\n        stdin: options.content,\n      },\n      opts,\n    )\n  }\n\n  /**\n   * Creates a command that waits for a file to be created and then reads its content.\n   * This is useful for waiting for a file to be generated by another process.\n   *\n   * Use for small text files like configuration files.\n   */\n  static receiveTextFile(\n    name: string,\n    options: Omit<TextFileArgs, \"content\">,\n    opts?: ComponentResourceOptions,\n  ): Command {\n    return new Command(\n      name,\n      {\n        host: options.host,\n        create: interpolate`while ! test -f \"${options.path}\"; do sleep 1; done; cat \"${options.path}\"`,\n        logging: \"stderr\",\n      },\n      opts,\n    )\n  }\n\n  /**\n   * Creates a command that waits for a condition to be met.\n   * The command will run until the condition is met or the timeout is reached.\n   *\n   * The condition is considered met if the command returns a zero exit code.\n   *\n   * @param name The name of the command resource.\n   * @param args The arguments for the command, including the condition to check.\n   * @param opts Optional resource options.\n   */\n  static waitFor(name: string, args: WaitForArgs, opts?: ComponentResourceOptions): Command {\n    return new Command(\n      name,\n      {\n        ...args,\n        create: output(args.create).apply(wrapWithWaitFor(args.timeout, args.interval)),\n        update: args.update\n          ? output(args.update).apply(wrapWithWaitFor(args.timeout, args.interval))\n          : undefined,\n        delete: args.delete\n          ? output(args.delete).apply(wrapWithWaitFor(args.timeout, args.interval))\n          : undefined,\n      },\n      opts,\n    )\n  }\n}\n","import type { z } from \"@highstate/contract\"\nimport type { ImplementationReference } from \"@highstate/library\"\nimport { type Input, type Output, output, toPromise, type Unwrap } from \"@highstate/pulumi\"\n\n/**\n * The ImplementationMediator is used as a contract between the calling code and the implementation.\n *\n * From the calling code perspective, it provides a way to define the input and output schemas for the implementation\n * and call the implementation with the provided input.\n *\n * From the implementation perspective, it provides a way to get zod function with automatic type inference and validation.\n */\nexport class ImplementationMediator<\n  TInputSchema extends z.ZodType,\n  TOutputSchema extends z.ZodType,\n> {\n  constructor(\n    readonly path: string,\n    private readonly inputSchema: TInputSchema,\n    private readonly outputSchema: TOutputSchema,\n  ) {}\n\n  implement<TDataSchema extends z.ZodType>(\n    dataSchema: TDataSchema,\n    func: (\n      input: z.infer<TInputSchema>,\n      data: z.infer<TDataSchema>,\n    ) => z.infer<TOutputSchema> | Promise<z.infer<TOutputSchema>>,\n  ) {\n    return async (\n      input: z.infer<TInputSchema>,\n      data: z.infer<TDataSchema>,\n    ): Promise<z.infer<TOutputSchema>> => {\n      const parsedInput = this.inputSchema.safeParse(input)\n      if (!parsedInput.success) {\n        throw new Error(\n          `Invalid input for implementation \"${this.path}\": ${parsedInput.error.message}`,\n        )\n      }\n\n      const parsedData = dataSchema.safeParse(data)\n      if (!parsedData.success) {\n        throw new Error(\n          `Invalid data for implementation \"${this.path}\": ${parsedData.error.message}`,\n        )\n      }\n\n      const result = await func(parsedInput.data, parsedData.data)\n      const parsedResult = this.outputSchema.safeParse(result)\n\n      if (!parsedResult.success) {\n        throw new Error(\n          `Invalid output from implementation \"${this.path}\": ${parsedResult.error.message}`,\n        )\n      }\n\n      return parsedResult.data\n    }\n  }\n\n  async call(\n    implRef: Input<ImplementationReference>,\n    input: Input<z.infer<TInputSchema>>,\n  ): Promise<z.infer<TOutputSchema>> {\n    const resolvedImplRef = await toPromise(implRef)\n    const resolvedInput = await toPromise(input)\n\n    const importPath = `${resolvedImplRef.package}/impl/${this.path}`\n\n    let impl: Record<string, unknown>\n    try {\n      // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment\n      impl = await import(importPath)\n    } catch (error) {\n      throw new Error(`Failed to import module \"${importPath}\" required by implementation.`, {\n        cause: error,\n      })\n    }\n\n    const funcs = Object.entries(impl).filter(value => typeof value[1] === \"function\") as [\n      string,\n      (...args: unknown[]) => unknown,\n    ][]\n\n    if (funcs.length === 0) {\n      throw new Error(`No implementation functions found in module \"${importPath}\".`)\n    }\n\n    if (funcs.length > 1) {\n      throw new Error(\n        `Multiple implementation functions found in module \"${importPath}\": ${funcs.map(func => func[0]).join(\", \")}. ` +\n          \"Ensure only one function is exported.\",\n      )\n    }\n\n    const [funcName, implFunc] = funcs[0]\n\n    let result: unknown\n    try {\n      // eslint-disable-next-line @typescript-eslint/no-unsafe-call\n      result = await implFunc(resolvedInput, resolvedImplRef.data)\n    } catch (error) {\n      console.error(`Error in implementation function \"${funcName}\":`, error)\n      throw new Error(`Implementation function \"${funcName}\" failed`)\n    }\n\n    const parsedResult = this.outputSchema.safeParse(result)\n    if (!parsedResult.success) {\n      throw new Error(\n        `Implementation function \"${funcName}\" returned invalid result: ${parsedResult.error.message}`,\n      )\n    }\n\n    return parsedResult.data\n  }\n\n  callOutput(\n    implRef: Input<ImplementationReference>,\n    input: Input<z.infer<TInputSchema>>,\n  ): Output<Unwrap<z.infer<TOutputSchema>>> {\n    return output(this.call(implRef, input))\n  }\n}\n","import type { ArrayPatchMode, dns, network } from \"@highstate/library\"\nimport { getOrCreate, z } from \"@highstate/contract\"\nimport {\n  ComponentResource,\n  type Input,\n  type InputArray,\n  type InputOrArray,\n  interpolate,\n  normalizeInputsAndMap,\n  type Output,\n  output,\n  type ResourceOptions,\n  toPromise,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { flat, groupBy, uniqueBy } from \"remeda\"\nimport { Command, type CommandHost } from \"./command\"\nimport { ImplementationMediator } from \"./impl-ref\"\nimport {\n  filterEndpoints,\n  type InputL3Endpoint,\n  l3EndpointToString,\n  l34EndpointToString,\n  parseL3Endpoint,\n} from \"./network\"\n\nexport const dnsRecordMediator = new ImplementationMediator(\n  \"dns-record\",\n  z.object({ name: z.string(), args: z.custom<ResolvedDnsRecordArgs>() }),\n  z.instanceof(ComponentResource),\n)\n\nexport type DnsRecordArgs = {\n  /**\n   * The DNS provider to use.\n   */\n  provider: Input<dns.Provider>\n\n  /**\n   * The name of the DNS record.\n   * If not provided, the name of the resource will be used.\n   */\n  name?: Input<string>\n\n  /**\n   * The type of the DNS record.\n   *\n   * If not provided, will be automatically detected based on the value.\n   */\n  type?: Input<string>\n\n  /**\n   * The value of the DNS record.\n   */\n  value: Input<InputL3Endpoint>\n\n  /**\n   * Whether the DNS record is proxied (e.g. to provide DDoS protection).\n   *\n   * Available only for public IPs and some DNS providers like Cloudflare.\n   * If not supported, the DNS provider will ignore this value.\n   */\n  proxied?: Input<boolean>\n\n  /**\n   * The TTL of the DNS record.\n   *\n   * If not provided, the DNS provider will use its default value.\n   */\n  ttl?: Input<number>\n\n  /**\n   * The priority of the DNS record.\n   *\n   * Only used for some DNS record types (e.g. MX).\n   */\n  priority?: Input<number>\n\n  /**\n   * Wait for the DNS record to be created/updated at the specified environment(s) before continuing.\n   */\n  waitAt?: InputOrArray<CommandHost>\n}\n\nexport type ResolvedDnsRecordArgs = Pick<DnsRecordArgs, \"name\" | \"priority\" | \"ttl\" | \"proxied\"> & {\n  /**\n   * The value of the DNS record.\n   */\n  value: Input<string>\n\n  /**\n   * The type of the DNS record.\n   */\n  type: Input<string>\n}\n\nexport type DnsRecordSetArgs = Omit<DnsRecordArgs, \"provider\" | \"value\"> & {\n  /**\n   * The DNS providers to use to create the DNS records.\n   *\n   * If multiple providers matched the specified domain, records will be created for each of them.\n   */\n  providers: Input<dns.Provider[]>\n\n  /**\n   * The value of the DNS record.\n   */\n  value?: Input<InputL3Endpoint>\n\n  /**\n   * The values of the DNS records.\n   */\n  values?: InputArray<InputL3Endpoint>\n}\n\nfunction getTypeByEndpoint(endpoint: network.L3Endpoint): string {\n  switch (endpoint.type) {\n    case \"ipv4\":\n      return \"A\"\n    case \"ipv6\":\n      return \"AAAA\"\n    case \"hostname\":\n      return \"CNAME\"\n  }\n}\n\n/**\n * Creates a DNS record for the specified value and waits for it to be resolved.\n *\n * Uses the specified DNS provider to create the record.\n */\nexport class DnsRecord extends ComponentResource {\n  /**\n   * The underlying dns record resource.\n   */\n  readonly dnsRecord: Output<ComponentResource>\n\n  /**\n   * The commands to be executed after the DNS record is created/updated.\n   *\n   * These commands will wait for the DNS record to be resolved to the specified value.\n   */\n  readonly waitCommands: Output<Command[]>\n\n  constructor(name: string, args: DnsRecordArgs, opts?: ResourceOptions) {\n    super(\"highstate:common:DnsRecord\", name, args, opts)\n\n    const l3Endpoint = output(args.value).apply(value => parseL3Endpoint(value))\n    const resolvedValue = l3Endpoint.apply(l3EndpointToString)\n    const resolvedType = args.type ? output(args.type) : l3Endpoint.apply(getTypeByEndpoint)\n\n    this.dnsRecord = output(args.provider).apply(provider => {\n      return dnsRecordMediator.call(provider.implRef, {\n        name,\n        args: {\n          name: args.name,\n          priority: args.priority,\n          ttl: args.ttl,\n          value: resolvedValue,\n          type: resolvedType,\n        },\n      })\n    })\n\n    this.waitCommands = output({\n      waitAt: args.waitAt,\n      resolvedType,\n      proxied: args.proxied,\n    }).apply(({ waitAt, resolvedType, proxied }) => {\n      if (resolvedType === \"CNAME\") {\n        // TODO: handle CNAME records\n        return []\n      }\n\n      const resolvedHosts = waitAt ? [waitAt].flat() : []\n\n      if (proxied) {\n        // for proxied records do not verify the value since we do not know the actual IP addressa\n\n        return (resolvedHosts as Unwrap<CommandHost>[]).map(host => {\n          const hostname = host === \"local\" ? \"local\" : host.hostname\n\n          return new Command(\n            `${name}.wait-for-dns.${hostname}`,\n            {\n              host,\n              create: [\n                interpolate`while ! getent hosts \"${args.name}\";`,\n                interpolate`do echo \"Waiting for DNS record \\\"${args.name}\\\" to be available...\";`,\n                `sleep 5;`,\n                `done`,\n              ],\n            },\n            { parent: this },\n          )\n        })\n      }\n\n      return (resolvedHosts as Unwrap<CommandHost>[]).map(host => {\n        const hostname = host === \"local\" ? \"local\" : host.hostname\n\n        return new Command(\n          `${name}.wait-for-dns.${hostname}`,\n          {\n            host,\n            create: [\n              interpolate`while ! getent hosts \"${args.name}\" | grep \"${resolvedValue}\";`,\n              interpolate`do echo \"Waiting for DNS record \\\"${args.name}\" to resolve to \"${resolvedValue}\"...\";`,\n              `sleep 5;`,\n              `done`,\n            ],\n          },\n          { parent: this },\n        )\n      })\n    })\n  }\n}\n\n/**\n * Creates a set of DNS records for the specified values and waits for them to be resolved.\n */\nexport class DnsRecordSet extends ComponentResource {\n  /**\n   * The underlying dns record resources.\n   */\n  readonly dnsRecords: Output<DnsRecord[]>\n\n  /**\n   * The flat list of all wait commands for the DNS records.\n   */\n  readonly waitCommands: Output<Command[]>\n\n  constructor(name: string, args: DnsRecordSetArgs, opts?: ResourceOptions) {\n    super(\"highstate:common:DnsRecordSet\", name, args, opts)\n\n    const matchedProviders = output({\n      providers: args.providers,\n      name: args.name ?? name,\n    }).apply(({ providers }) => {\n      const matchedProviders = providers.filter(provider => name.endsWith(provider.domain))\n\n      if (matchedProviders.length === 0) {\n        throw new Error(`No DNS provider matched the domain \"${name}\"`)\n      }\n\n      return matchedProviders\n    })\n\n    this.dnsRecords = normalizeInputsAndMap(args.value, args.values, value => {\n      return output({\n        name: args.name ?? name,\n        providers: matchedProviders,\n      }).apply(({ name, providers }) => {\n        return providers.flatMap(provider => {\n          const l3Endpoint = parseL3Endpoint(value)\n\n          return new DnsRecord(\n            `${name}.${provider.id}.${l3EndpointToString(l3Endpoint)}`,\n            {\n              name,\n              provider,\n              value: l3Endpoint,\n              type: args.type ?? getTypeByEndpoint(l3Endpoint),\n              proxied: args.proxied,\n              ttl: args.ttl,\n              priority: args.priority,\n              waitAt: args.waitAt,\n            },\n            { parent: this },\n          )\n        })\n      })\n    }).apply(flat)\n\n    this.waitCommands = this.dnsRecords\n      .apply(records => records.flatMap(record => record.waitCommands))\n      .apply(flat)\n  }\n\n  private static readonly dnsRecordSetCache = new Map<string, DnsRecordSet>()\n\n  /**\n   * Creates a DNS record set for the specified endpoints and waits for it to be resolved.\n   *\n   * If a DNS record set with the same name already exists, it will be reused.\n   *\n   * @param name The name of the DNS record set.\n   * @param args The arguments for the DNS record set.\n   * @param opts The options for the resource.\n   */\n  static createOnce(name: string, args: DnsRecordSetArgs, opts?: ResourceOptions): DnsRecordSet {\n    return getOrCreate(\n      DnsRecordSet.dnsRecordSetCache,\n      name,\n      () => new DnsRecordSet(name, args, opts),\n    )\n  }\n}\n\n/**\n * Registers the DNS record set for the given endpoints and prepends the corresponding hostname endpoint to the list.\n *\n * Waits for the DNS record set to be created/updated before continuing.\n *\n * Ignores the \"hostname\" endpoints in the list.\n *\n * @param endpoints The list of endpoints to register. Will be modified in place.\n * @param fqdn The FQDN to register the DNS record set for. If not provided, no DNS record set will be created and array will not be modified.\n * @param fqdnEndpointFilter The filter to apply to the endpoints before passing them to the DNS record set. Does not apply to the resulted endpoint list.\n * @param dnsProviders The DNS providers to use to create the DNS records.\n */\nexport async function updateEndpointsWithFqdn<TEndpoint extends network.L34Endpoint>(\n  endpoints: Input<TEndpoint[]>,\n  fqdn: string | undefined,\n  fqdnEndpointFilter: network.EndpointFilter,\n  patchMode: ArrayPatchMode,\n  dnsProviders: Input<dns.Provider[]>,\n): Promise<{ endpoints: TEndpoint[]; dnsRecordSet: DnsRecordSet | undefined }> {\n  const resolvedEndpoints = await toPromise(endpoints)\n\n  if (!fqdn) {\n    return {\n      endpoints: resolvedEndpoints as TEndpoint[],\n      dnsRecordSet: undefined,\n    }\n  }\n\n  const filteredEndpoints = filterEndpoints(resolvedEndpoints, fqdnEndpointFilter)\n\n  const dnsRecordSet = new DnsRecordSet(fqdn, {\n    providers: dnsProviders,\n    values: filteredEndpoints,\n    waitAt: \"local\",\n  })\n\n  const portProtocolGroups = groupBy(filteredEndpoints, endpoint =>\n    endpoint.port ? `${endpoint.port}-${endpoint.protocol}` : \"\",\n  )\n\n  const newEndpoints: TEndpoint[] = []\n\n  for (const group of Object.values(portProtocolGroups)) {\n    newEndpoints.unshift({\n      type: \"hostname\",\n      hostname: fqdn,\n      visibility: group[0].visibility,\n      port: group[0].port,\n      protocol: group[0].protocol,\n    } as TEndpoint)\n  }\n\n  await toPromise(\n    dnsRecordSet.waitCommands.apply(waitCommands => waitCommands.map(command => command.stdout)),\n  )\n\n  if (patchMode === \"prepend\") {\n    return {\n      endpoints: uniqueBy(\n        //\n        [...newEndpoints, ...(resolvedEndpoints as TEndpoint[])],\n        endpoint => l34EndpointToString(endpoint),\n      ),\n      dnsRecordSet,\n    }\n  }\n\n  return {\n    endpoints: newEndpoints,\n    dnsRecordSet,\n  }\n}\n","import type { TlsCertificate } from \"./tls\"\nimport { z } from \"@highstate/contract\"\nimport { type common, network } from \"@highstate/library\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type Output,\n  output,\n  Resource,\n} from \"@highstate/pulumi\"\nimport { ImplementationMediator } from \"./impl-ref\"\n\nexport const gatewayRouteMediator = new ImplementationMediator(\n  \"gateway-route\",\n  z.object({\n    name: z.string(),\n    spec: z.custom<GatewayRouteSpec>(),\n    opts: z.custom<ComponentResourceOptions>().optional(),\n  }),\n  z.object({\n    resource: z.instanceof(Resource),\n    endpoints: network.l3EndpointEntity.schema.array(),\n  }),\n)\n\nexport type GatewayRouteSpec = {\n  /**\n   * The FQDN to expose the workload on.\n   */\n  fqdn?: Input<string>\n\n  /**\n   * The endpoints of the backend workload to route traffic to.\n   */\n  endpoints: Input<network.L4Endpoint[]>\n\n  /**\n   * The native data to pass to the implementation.\n   *\n   * This is used for data which implementation may natively understand,\n   * such as Kubernetes `Service` resources.\n   *\n   * Implementations may use this data to create more efficient routes\n   * using native resources.\n   */\n  nativeData?: Input<unknown>\n\n  /**\n   * The TLS certificate to use for the route.\n   */\n  tlsCertificate?: Input<TlsCertificate | undefined>\n} & (\n  | {\n      type: \"http\"\n\n      /**\n       * Whether to expose the workload over plain HTTP.\n       *\n       * By default, the workload will be exposed over HTTPS.\n       */\n      insecure?: Input<boolean>\n\n      /**\n       * The relative path to expose the workload on.\n       *\n       * By default, the workload will be exposed on the root path (`/`).\n       */\n      path?: Input<string>\n    }\n  | {\n      type: \"l3\"\n\n      /**\n       * The ports to request for the workload.\n       *\n       * The order must match the order of the ports in the service.\n       *\n       * If not provided, random ports will be assigned.\n       */\n      ports?: number\n    }\n)\n\nexport type GatewayRouteArgs = GatewayRouteSpec & {\n  /**\n   * The gateway to attach the route to.\n   */\n  gateway: Input<common.Gateway>\n}\n\nexport class GatewayRoute extends ComponentResource {\n  /**\n   * The underlying resource created by the implementation.\n   */\n  readonly resource: Output<Resource>\n\n  /**\n   * The endpoints of the gateway which serve this route.\n   *\n   * In most cases, this will be a single endpoint of the gateway shared for all routes.\n   */\n  readonly endpoints: Output<network.L3Endpoint[]>\n\n  constructor(name: string, args: GatewayRouteArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:common:GatewayRoute\", name, args, opts)\n\n    const { resource, endpoints } = gatewayRouteMediator.callOutput(output(args.gateway).implRef, {\n      name,\n      spec: args,\n      opts: { ...opts, parent: this },\n    })\n\n    this.resource = resource\n    this.endpoints = endpoints\n  }\n}\n","import type { common } from \"@highstate/library\"\nimport { getOrCreate, z } from \"@highstate/contract\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type InputArray,\n  normalizeInputs,\n  type Output,\n  output,\n  Resource,\n} from \"@highstate/pulumi\"\nimport { ImplementationMediator } from \"./impl-ref\"\n\nexport const tlsCertificateMediator = new ImplementationMediator(\n  \"tls-certificate\",\n  z.object({\n    name: z.string(),\n    spec: z.custom<TlsCertificateSpec>(),\n    opts: z.custom<ComponentResourceOptions>().optional(),\n  }),\n  z.instanceof(Resource),\n)\n\nexport type TlsCertificateSpec = {\n  /**\n   * The common name for the certificate.\n   */\n  commonName?: Input<string>\n\n  /**\n   * The alternative DNS names for the certificate.\n   */\n  dnsNames?: InputArray<string>\n\n  /**\n   * The native data to pass to the implementation.\n   *\n   * This is used for data which implementation may natively understand\n   * and may use this data to create certificates using native resources.\n   */\n  nativeData?: unknown\n}\n\nexport type TlsCertificateArgs = TlsCertificateSpec & {\n  /**\n   * The issuer to use for the certificate.\n   */\n  issuer?: Input<common.TlsIssuer>\n\n  /**\n   * The issuers to use for the certificate.\n   *\n   * If multiple issuers are provided, the certificate will be created using the first issuer that supports the requested common name.\n   */\n  issuers?: InputArray<common.TlsIssuer>\n}\n\nexport class TlsCertificate extends ComponentResource {\n  /**\n   * The underlying resource created by the implementation.\n   */\n  readonly resource: Output<Resource>\n\n  constructor(name: string, args: TlsCertificateArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:common:TlsCertificate\", name, args, opts)\n\n    const issuers = normalizeInputs(args.issuer, args.issuers)\n\n    this.resource = output({\n      issuers,\n      commonName: args.commonName,\n      dnsNames: args.dnsNames,\n    }).apply(async ({ issuers, commonName, dnsNames }) => {\n      // for now, we require single issuer to match all requested names\n      const matchedIssuer = issuers.find(issuer => {\n        if (commonName && !commonName.endsWith(issuer.domain)) {\n          return false\n        }\n\n        if (dnsNames && !dnsNames.every(name => name.endsWith(issuer.domain))) {\n          return false\n        }\n\n        return true\n      })\n\n      if (!matchedIssuer) {\n        throw new Error(\n          `No TLS issuer matched the common name \"${commonName}\" and DNS names \"${dnsNames?.join(\", \") ?? \"\"}\"`,\n        )\n      }\n\n      return await tlsCertificateMediator.call(matchedIssuer.implRef, {\n        name,\n        spec: args,\n      })\n    })\n  }\n\n  private static readonly tlsCertificateCache = new Map<string, TlsCertificate>()\n\n  /**\n   * Creates a TLS certificate for the specified common name and DNS names.\n   *\n   * If a TLS certificate with the same name already exists, it will be reused.\n   *\n   * @param name The name of the TLS certificate.\n   * @param args The arguments for the TLS certificate.\n   * @param opts The options for the resource.\n   */\n  static createOnce(\n    name: string,\n    args: TlsCertificateArgs,\n    opts?: ComponentResourceOptions,\n  ): TlsCertificate {\n    return getOrCreate(\n      TlsCertificate.tlsCertificateCache,\n      name,\n      () => new TlsCertificate(name, args, opts),\n    )\n  }\n}\n","import type { common } from \"@highstate/library\"\nimport type { Except } from \"type-fest\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type Output,\n  output,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { DnsRecordSet } from \"./dns\"\nimport { GatewayRoute, type GatewayRouteSpec } from \"./gateway\"\nimport { TlsCertificate } from \"./tls\"\n\nexport type AccessPointRouteArgs = Except<GatewayRouteSpec, \"nativeData\"> & {\n  /**\n   * The access point to use to expose the route.\n   */\n  accessPoint: Input<common.AccessPoint>\n\n  /**\n   * The native data to pass to the gateway route implementation.\n   */\n  gatewayNativeData?: unknown\n\n  /**\n   * The native data to pass to the tls ceertificate implementation.\n   */\n  tlsCertificateNativeData?: unknown\n}\n\nexport class AccessPointRoute extends ComponentResource {\n  /**\n   * The created gateway route.\n   */\n  readonly route: GatewayRoute\n\n  /**\n   * The DNS record set created for the route.\n   *\n   * May be shared between multiple routes with the same FQDN.\n   */\n  readonly dnsRecordSet?: Output<DnsRecordSet | undefined>\n\n  /**\n   * The TLS certificate created for the route.\n   *\n   * May be shared between multiple routes with the same FQDN.\n   */\n  readonly tlsCertificate?: Output<TlsCertificate | undefined>\n\n  constructor(name: string, args: AccessPointRouteArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:common:AccessPointRoute\", name, args, opts)\n\n    // 1. create TLS certificate if the route is HTTPS and the access point has TLS issuers\n    if (args.fqdn && args.type === \"http\" && !args.insecure) {\n      this.tlsCertificate = output(args.accessPoint).apply(accessPoint => {\n        if (accessPoint.tlsIssuers.length === 0) {\n          return undefined\n        }\n\n        return TlsCertificate.createOnce(\n          name,\n          {\n            issuers: accessPoint.tlsIssuers,\n            dnsNames: args.fqdn ? [args.fqdn] : [],\n            nativeData: args.tlsCertificateNativeData,\n          },\n          { ...opts, parent: this },\n        )\n      })\n    }\n\n    // 2. create the route and resolve the gateway endpoints\n    this.route = new GatewayRoute(\n      name,\n      {\n        ...args,\n        gateway: output(args.accessPoint).gateway,\n        tlsCertificate: this.tlsCertificate,\n        nativeData: args.gatewayNativeData,\n      },\n      { ...opts, parent: this },\n    )\n\n    // 3. register DNS records if FQDN is provided and the access point has DNS providers\n    if (args.fqdn) {\n      this.dnsRecordSet = output(args.accessPoint).apply(async accessPoint => {\n        if (accessPoint.dnsProviders.length === 0) {\n          return undefined\n        }\n\n        const fqdn = await toPromise(args.fqdn)\n        if (!fqdn) {\n          return undefined\n        }\n\n        return DnsRecordSet.createOnce(\n          fqdn,\n          {\n            providers: output(args.accessPoint).dnsProviders,\n            values: this.route.endpoints,\n            waitAt: \"local\",\n            proxied: accessPoint.proxied,\n          },\n          { ...opts, parent: this },\n        )\n      })\n    }\n  }\n}\n","import type { common, network } from \"@highstate/library\"\nimport { createHash } from \"node:crypto\"\nimport { createReadStream } from \"node:fs\"\nimport { cp, mkdir, mkdtemp, rename, rm, stat, writeFile } from \"node:fs/promises\"\nimport { tmpdir } from \"node:os\"\nimport { basename, dirname, extname, join } from \"node:path\"\nimport { Readable } from \"node:stream\"\nimport { pipeline } from \"node:stream/promises\"\nimport { type CommonObjectMeta, type File, HighstateSignature } from \"@highstate/contract\"\nimport { asset, toPromise } from \"@highstate/pulumi\"\nimport { minimatch } from \"minimatch\"\nimport * as tar from \"tar\"\nimport unzipper from \"unzipper\"\nimport { type InputL7Endpoint, l7EndpointToString, parseL7Endpoint } from \"./network\"\n\nexport type FolderPackOptions = {\n  /**\n   * The patterns to include in the packed archive.\n   * If not provided, all files and folders will be included.\n   */\n  include?: string[]\n\n  /**\n   * The patterns to exclude from the packed archive.\n   * Applied after include patterns.\n   * If not provided, no files or folders will be excluded.\n   */\n  exclude?: string[]\n}\n\n/**\n * Creates Pulumi asset from Highstate file.\n *\n * @param file The file entity to create the asset from.\n * @returns The created asset.\n */\nexport function assetFromFile(file: common.File): asset.Asset {\n  if (file.content.type === \"remote\") {\n    return new asset.RemoteAsset(l7EndpointToString(file.content.endpoint))\n  }\n\n  if (file.content.type === \"local\") {\n    return new asset.FileAsset(file.content.path)\n  }\n\n  if (file.content.type === \"artifact\") {\n    throw new Error(\n      \"Artifact-based files cannot be converted to Pulumi assets directly. Use MaterializedFile instead.\",\n    )\n  }\n\n  if (file.content.isBinary) {\n    throw new Error(\n      \"Cannot create asset from inline binary file content. Please open an issue if you need this feature.\",\n    )\n  }\n\n  return new asset.StringAsset(file.content.value)\n}\n\n/**\n * Creates Pulumi archive from Highstate folder.\n *\n * @param folder The folder entity to create the asset archive from.\n * @returns The created asset archive.\n */\nexport function archiveFromFolder(folder: common.Folder): asset.Archive {\n  if (folder.content.type === \"remote\") {\n    return new asset.RemoteArchive(l7EndpointToString(folder.content.endpoint))\n  }\n\n  if (folder.content.type === \"local\") {\n    return new asset.FileArchive(folder.content.path)\n  }\n\n  if (folder.content.type === \"artifact\") {\n    throw new Error(\n      \"Artifact-based folders cannot be converted to Pulumi assets directly. Use MaterializedFolder instead.\",\n    )\n  }\n\n  const files: Record<string, asset.Asset> = {}\n\n  for (const file of folder.content.files) {\n    files[file.meta.name] = assetFromFile(file)\n  }\n\n  for (const subfolder of folder.content.folders) {\n    files[subfolder.meta.name] = archiveFromFolder(subfolder)\n  }\n\n  return new asset.AssetArchive(files)\n}\n\n/**\n * Extracts a tar or zip archive from a stream to a destination directory.\n *\n * @param stream The stream containing the archive data\n * @param destinationPath The path where to extract the archive\n * @param archiveType The type of archive ('tar' or 'zip')\n */\nasync function unarchiveFromStream(\n  stream: Readable,\n  destinationPath: string,\n  archiveType: \"tar\" | \"zip\",\n): Promise<void> {\n  await mkdir(destinationPath, { recursive: true })\n\n  switch (archiveType) {\n    case \"tar\": {\n      const extractStream = tar.extract({\n        cwd: destinationPath,\n        strict: true,\n      })\n\n      await pipeline(stream, extractStream)\n      return\n    }\n    case \"zip\": {\n      // Extract directly from stream using unzipper\n      await pipeline(stream, unzipper.Extract({ path: destinationPath }))\n      return\n    }\n  }\n}\n\n/**\n * Determines the archive type based on file extension or content type.\n *\n * @param fileName The name of the file\n * @param contentType Optional content type from HTTP headers\n * @returns The detected archive type or null if not an archive\n */\nfunction detectArchiveType(fileName: string, contentType?: string): \"tar\" | \"zip\" | null {\n  const ext = extname(fileName).toLowerCase()\n\n  if (ext === \".tar\" || ext === \".tgz\" || ext === \".tar.gz\") {\n    return \"tar\"\n  }\n\n  if (ext === \".zip\") {\n    return \"zip\"\n  }\n\n  // Fallback to content type\n  if (contentType) {\n    if (contentType.includes(\"tar\") || contentType.includes(\"gzip\")) {\n      return \"tar\"\n    }\n    if (contentType.includes(\"zip\")) {\n      return \"zip\"\n    }\n  }\n\n  return null\n}\n\n/**\n * The `MaterializedFile` class represents a file entity that has been materialized\n * to a local filesystem path.\n *\n * It handles creating a temporary directory, writing the file content to that directory,\n * and cleaning up the temporary files when disposed.\n *\n * For improved cleanup reliability, the class will use HIGHSTATE_TEMP_PATH as the base\n * directory for temporary files if available, allowing for centralized cleanup by the runner.\n */\nexport class MaterializedFile implements AsyncDisposable {\n  private _tmpPath?: string\n  private _path!: string\n  private _disposed = false\n\n  readonly artifactMeta: CommonObjectMeta\n\n  constructor(\n    readonly entity: common.File,\n    readonly parent?: MaterializedFolder,\n  ) {\n    this.artifactMeta = {\n      title: `Materialized file \"${entity.meta.name}\"`,\n    }\n  }\n\n  get path(): string {\n    return this._path\n  }\n\n  private async _open(): Promise<void> {\n    if (this.parent) {\n      // if the parent folder is provided, the file path is relative to the parent folder\n      this._path = join(this.parent.path, this.entity.meta.name)\n    } else {\n      // otherwise, the file path is in a temporary directory\n      // use HIGHSTATE_TEMP_PATH as base if available for better cleanup reliability\n      const tempBase = process.env.HIGHSTATE_TEMP_PATH || tmpdir()\n      this._tmpPath = await mkdtemp(join(tempBase, \"highstate-file-\"))\n      this._path = join(this._tmpPath, this.entity.meta.name)\n    }\n\n    switch (this.entity.content.type) {\n      case \"embedded\": {\n        const content = this.entity.content.isBinary\n          ? Buffer.from(this.entity.content.value, \"base64\")\n          : this.entity.content.value\n\n        await writeFile(this._path, content, { mode: this.entity.meta.mode })\n        break\n      }\n      case \"local\": {\n        await cp(this.entity.content.path, this._path, { mode: this.entity.meta.mode })\n        break\n      }\n      case \"remote\": {\n        const response = await fetch(l7EndpointToString(this.entity.content.endpoint))\n        if (!response.ok) throw new Error(`Failed to fetch: ${response.statusText}`)\n\n        const arrayBuffer = await response.arrayBuffer()\n        await writeFile(this._path, Buffer.from(arrayBuffer), { mode: this.entity.meta.mode })\n\n        break\n      }\n      case \"artifact\": {\n        const artifactPath = process.env.HIGHSTATE_ARTIFACT_READ_PATH\n        if (!artifactPath) {\n          throw new Error(\n            \"HIGHSTATE_ARTIFACT_READ_PATH environment variable is not set but required for artifact content\",\n          )\n        }\n\n        const tgzPath = join(artifactPath, `${this.entity.content.hash}.tgz`)\n\n        // extract the tgz file directly to the target path\n        const readStream = createReadStream(tgzPath)\n        await unarchiveFromStream(readStream, dirname(this._path), \"tar\")\n        break\n      }\n    }\n  }\n\n  async [Symbol.asyncDispose](): Promise<void> {\n    if (this._disposed) return\n    this._disposed = true\n\n    try {\n      if (this._tmpPath) {\n        // clear the whole temporary directory if it was created\n        await rm(this._tmpPath, { recursive: true, force: true })\n      } else {\n        // otherwise, just remove the file\n        await rm(this._path, { force: true })\n      }\n    } catch (error) {\n      // ignore errors during cleanup, as the file might have been already removed\n      // or the temporary directory might not exist\n      // TODO: centralized logging for unit code\n      console.warn(\"failed to clean up materialized file:\", error)\n    }\n  }\n\n  /**\n   * Packs the materialized file into an artifact and returns the file entity with artifact content.\n   *\n   * Creates a tgz archive of the file and stores it in HIGHSTATE_ARTIFACT_WRITE_PATH where it will be collected by Highstate.\n   */\n  async pack(): Promise<File> {\n    const writeDir = process.env.HIGHSTATE_ARTIFACT_WRITE_PATH\n    if (!writeDir) {\n      throw new Error(\"HIGHSTATE_ARTIFACT_WRITE_PATH environment variable is not set\")\n    }\n\n    // read actual file stats from filesystem\n    const fileStats = await stat(this._path)\n\n    // create tgz archive of the file\n    const tempBase = process.env.HIGHSTATE_TEMP_PATH || tmpdir()\n    const tempArchivePath = join(tempBase, `highstate-pack-${Date.now()}.tgz`)\n\n    try {\n      await tar.create(\n        {\n          gzip: true,\n          file: tempArchivePath,\n          cwd: dirname(this._path),\n          noMtime: true, // to reproduce the same archive every time\n        },\n        [basename(this._path)],\n      )\n\n      // calculate hash of the archive\n      const fileContent = createReadStream(tempArchivePath)\n      const hash = createHash(\"sha256\")\n\n      for await (const chunk of fileContent) {\n        hash.update(chunk as Buffer)\n      }\n\n      const hashValue = hash.digest(\"hex\")\n\n      // move archive to write directory with hash name\n      const finalArchivePath = join(writeDir, `${hashValue}.tgz`)\n      await rename(tempArchivePath, finalArchivePath)\n\n      const newMeta = {\n        name: this.entity.meta.name,\n        mode: fileStats.mode & 0o777, // extract only permission bits\n        size: fileStats.size,\n      }\n\n      // return file entity with artifact content using actual filesystem stats\n      return {\n        meta: newMeta,\n        content: {\n          type: \"artifact\",\n          [HighstateSignature.Artifact]: true,\n          hash: hashValue,\n          meta: await toPromise(this.artifactMeta),\n        },\n      }\n    } finally {\n      // clean up temporary archive\n      try {\n        await rm(tempArchivePath, { force: true })\n      } catch {\n        // ignore cleanup errors\n      }\n    }\n  }\n\n  /**\n   * Creates an empty materialized file with the given name.\n   *\n   * @param name The name of the file to create\n   * @param content Optional initial content of the file (default is empty string)\n   * @param mode Optional file mode (permissions)\n   * @returns A new MaterializedFile instance representing an empty file\n   */\n  static async create(name: string, content = \"\", mode?: number): Promise<MaterializedFile> {\n    const entity: common.File = {\n      meta: {\n        name,\n        mode,\n        size: 0,\n      },\n      content: {\n        type: \"embedded\",\n        value: content,\n      },\n    }\n\n    const materializedFile = new MaterializedFile(entity)\n\n    try {\n      await materializedFile._open()\n    } catch (error) {\n      await materializedFile[Symbol.asyncDispose]()\n      throw error\n    }\n\n    return materializedFile\n  }\n\n  static async open(file: common.File, parent?: MaterializedFolder): Promise<MaterializedFile> {\n    const materializedFile = new MaterializedFile(file, parent)\n\n    try {\n      await materializedFile._open()\n    } catch (error) {\n      await materializedFile[Symbol.asyncDispose]()\n      throw error\n    }\n\n    return materializedFile\n  }\n}\n\n/**\n * The `MaterializedFolder` class represents a folder entity that has been materialized\n * to a local filesystem path.\n *\n * It handles creating a temporary directory, copying the folder content to that directory,\n * and cleaning up the temporary files when disposed.\n *\n * For improved cleanup reliability, the class will use HIGHSTATE_TEMP_PATH as the base\n * directory for temporary files if available, allowing for centralized cleanup by the runner.\n */\nexport class MaterializedFolder implements AsyncDisposable {\n  private _tmpPath?: string\n  private _path!: string\n  private _disposed = false\n\n  private readonly _disposables: AsyncDisposable[] = []\n\n  readonly artifactMeta: CommonObjectMeta\n\n  constructor(\n    readonly entity: common.Folder,\n    readonly parent?: MaterializedFolder,\n  ) {\n    this.artifactMeta = {\n      title: `Materialized folder \"${entity.meta.name}\"`,\n    }\n  }\n\n  get path(): string {\n    return this._path\n  }\n\n  private async _open(): Promise<void> {\n    if (this.parent) {\n      // if the parent folder is provided, the folder path is relative to the parent folder\n      this._path = join(this.parent.path, this.entity.meta.name)\n    } else {\n      // otherwise, the folder path is in a temporary directory\n      // use HIGHSTATE_TEMP_PATH as base if available for better cleanup reliability\n      const tempBase = process.env.HIGHSTATE_TEMP_PATH || tmpdir()\n      this._tmpPath = await mkdtemp(join(tempBase, \"highstate-folder-\"))\n      this._path = join(this._tmpPath, this.entity.meta.name)\n    }\n\n    switch (this.entity.content.type) {\n      case \"embedded\": {\n        // create the folder itself\n        await mkdir(this._path, { mode: this.entity.meta.mode })\n\n        for (const file of this.entity.content.files) {\n          const materializedFile = await MaterializedFile.open(file, this)\n          this._disposables.push(materializedFile)\n        }\n\n        for (const subfolder of this.entity.content.folders) {\n          const materializedFolder = await MaterializedFolder.open(subfolder, this)\n          this._disposables.push(materializedFolder)\n        }\n\n        break\n      }\n      case \"local\": {\n        // Check if the local path is an archive file that needs extraction\n        const archiveType = detectArchiveType(this.entity.content.path)\n\n        if (archiveType) {\n          // Extract archive to the destination path\n          const readStream = createReadStream(this.entity.content.path)\n          await unarchiveFromStream(readStream, this._path, archiveType)\n        } else {\n          // Regular directory copy\n          await cp(this.entity.content.path, this._path, {\n            recursive: true,\n            mode: this.entity.meta.mode,\n          })\n        }\n\n        break\n      }\n      case \"remote\": {\n        const response = await fetch(l7EndpointToString(this.entity.content.endpoint))\n        if (!response.ok) throw new Error(`Failed to fetch: ${response.statusText}`)\n        if (!response.body) throw new Error(\"Response body is empty\")\n\n        // Try to detect archive type from URL or content type\n        const url = new URL(l7EndpointToString(this.entity.content.endpoint))\n        const archiveType = detectArchiveType(\n          url.pathname,\n          response.headers.get(\"content-type\") || undefined,\n        )\n\n        if (!archiveType) {\n          throw new Error(\"Remote folder content must be an archive (tar, tar.gz, tgz, or zip)\")\n        }\n\n        if (!response.body) {\n          throw new Error(\"Response body is empty\")\n        }\n\n        const reader = response.body.getReader()\n        const stream = new Readable({\n          async read() {\n            try {\n              const { done, value } = await reader.read()\n              if (done) {\n                this.push(null)\n              } else {\n                this.push(Buffer.from(value))\n              }\n            } catch (error) {\n              this.destroy(error instanceof Error ? error : new Error(String(error)))\n            }\n          },\n        })\n\n        await unarchiveFromStream(stream, this._path, archiveType)\n\n        break\n      }\n      case \"artifact\": {\n        const artifactPath = process.env.HIGHSTATE_ARTIFACT_READ_PATH\n\n        if (!artifactPath) {\n          throw new Error(\n            \"HIGHSTATE_ARTIFACT_READ_PATH environment variable is not set but required for artifact content\",\n          )\n        }\n\n        const tgzPath = join(artifactPath, `${this.entity.content.hash}.tgz`)\n\n        // extract the tgz file directly to the target path\n        const readStream = createReadStream(tgzPath)\n        await unarchiveFromStream(readStream, dirname(this._path), \"tar\")\n\n        break\n      }\n    }\n  }\n\n  async [Symbol.asyncDispose](): Promise<void> {\n    if (this._disposed) return\n    this._disposed = true\n\n    try {\n      if (this._tmpPath) {\n        // clear the whole temporary directory if it was created\n        await rm(this._tmpPath, { recursive: true, force: true })\n      } else {\n        // otherwise, just remove the folder\n        await rm(this._path, { recursive: true, force: true })\n      }\n    } catch (error) {\n      // ignore errors during cleanup, as the folder might have been already removed\n      // or the temporary directory might not exist\n      // TODO: centralized logging for unit code\n      console.warn(\"failed to clean up materialized folder:\", error)\n    }\n\n    // dispose all materialized children\n    for (const disposable of this._disposables) {\n      await disposable[Symbol.asyncDispose]()\n    }\n  }\n\n  /**\n   * Packs the materialized folder into an artifact and returns the folder entity with artifact content.\n   *\n   * Creates a tgz archive of the entire folder and stores it in HIGHSTATE_ARTIFACT_WRITE_PATH where it will be collected by Highstate.\n   */\n  async pack({ include, exclude }: FolderPackOptions = {}): Promise<common.Folder> {\n    const writeDir = process.env.HIGHSTATE_ARTIFACT_WRITE_PATH\n    if (!writeDir) {\n      throw new Error(\"HIGHSTATE_ARTIFACT_WRITE_PATH environment variable is not set\")\n    }\n\n    // read actual folder stats from filesystem\n    const folderStats = await stat(this._path)\n\n    // create tgz archive of the folder\n    const tempBase = process.env.HIGHSTATE_TEMP_PATH || tmpdir()\n    const tempArchivePath = join(tempBase, `highstate-pack-${Date.now()}.tgz`)\n\n    const entity = this.entity\n\n    try {\n      await tar.create(\n        {\n          gzip: true,\n          file: tempArchivePath,\n          cwd: dirname(this._path),\n\n          filter(path) {\n            // match without the folder name prefix\n            path = path.slice(entity.meta.name.length + 1)\n\n            // handle explicit excludes\n            for (const pattern of exclude ?? []) {\n              if (minimatch(path, pattern)) {\n                return false\n              }\n            }\n\n            // try to match include patterns\n            for (const pattern of include ?? []) {\n              if (minimatch(path, pattern)) {\n                return true\n              }\n            }\n\n            // include all files if no include patterns are specified\n            return !include || include.length === 0\n          },\n\n          // to reproduce the same archive every time\n          portable: true,\n          noMtime: true,\n        },\n        [basename(this._path)],\n      )\n\n      // calculate hash of the archive\n      const fileContent = createReadStream(tempArchivePath)\n      const hash = createHash(\"sha256\")\n\n      for await (const chunk of fileContent) {\n        hash.update(chunk as Buffer)\n      }\n\n      const hashValue = hash.digest(\"hex\")\n\n      // move archive to write directory with hash name\n      const finalArchivePath = join(writeDir, `${hashValue}.tgz`)\n      await rename(tempArchivePath, finalArchivePath)\n\n      const newMeta = {\n        name: this.entity.meta.name,\n        mode: folderStats.mode & 0o777, // extract only permission bits\n      }\n\n      // return folder entity with artifact content using actual filesystem stats\n      return {\n        meta: newMeta,\n        content: {\n          [HighstateSignature.Artifact]: true,\n          type: \"artifact\",\n          hash: hashValue,\n          meta: await toPromise(this.artifactMeta),\n        },\n      }\n    } finally {\n      // clean up temporary archive\n      try {\n        await rm(tempArchivePath, { force: true })\n      } catch {\n        // ignore cleanup errors\n      }\n    }\n  }\n\n  /**\n   * Creates an empty materialized folder with the given name.\n   *\n   * @param name The name of the folder to create\n   * @param mode Optional folder mode (permissions)\n   * @param parent Optional parent folder to create the folder in\n   * @returns A new MaterializedFolder instance representing an empty folder\n   */\n  static async create(\n    name: string,\n    mode?: number,\n    parent?: MaterializedFolder,\n  ): Promise<MaterializedFolder> {\n    const entity: common.Folder = {\n      meta: {\n        name,\n        mode,\n      },\n      content: {\n        type: \"embedded\",\n        files: [],\n        folders: [],\n      },\n    }\n\n    const materializedFolder = new MaterializedFolder(entity, parent)\n\n    try {\n      await materializedFolder._open()\n    } catch (error) {\n      await materializedFolder[Symbol.asyncDispose]()\n      throw error\n    }\n\n    return materializedFolder\n  }\n\n  static async open(\n    folder: common.Folder,\n    parent?: MaterializedFolder,\n  ): Promise<MaterializedFolder> {\n    const materializedFolder = new MaterializedFolder(folder, parent)\n\n    try {\n      await materializedFolder._open()\n    } catch (error) {\n      await materializedFolder[Symbol.asyncDispose]()\n      throw error\n    }\n\n    return materializedFolder\n  }\n}\n\n/**\n * Fetches the size of a file from a given L7 endpoint.\n *\n * @param endpoint The L7 endpoint to fetch the file size from.\n * @returns The size of the file in bytes.\n * @throws If the protocol is not HTTP/HTTPS or if the request fails.\n */\nexport async function fetchFileSize(endpoint: network.L7Endpoint): Promise<number> {\n  if (endpoint.appProtocol !== \"http\" && endpoint.appProtocol !== \"https\") {\n    throw new Error(\n      `Unsupported protocol: ${endpoint.appProtocol}. Only HTTP and HTTPS are supported.`,\n    )\n  }\n\n  const url = l7EndpointToString(endpoint)\n  const response = await fetch(url, { method: \"HEAD\" })\n\n  if (!response.ok) {\n    throw new Error(`Failed to fetch file size: ${response.statusText}`)\n  }\n\n  const contentLength = response.headers.get(\"content-length\")\n  if (!contentLength) {\n    throw new Error(\"Content-Length header is missing in the response\")\n  }\n\n  const size = parseInt(contentLength, 10)\n  if (Number.isNaN(size)) {\n    throw new Error(`Invalid Content-Length value: ${contentLength}`)\n  }\n\n  return size\n}\n\n/**\n * Extracts the name from an L7 endpoint URL without its file extension.\n */\nexport function getNameByEndpoint(endpoint: InputL7Endpoint): string {\n  const parsedEndpoint = parseL7Endpoint(endpoint)\n\n  return parsedEndpoint.resource ? basename(parsedEndpoint.resource) : \"\"\n}\n","import { bytesToHex, randomBytes } from \"@noble/hashes/utils\"\nimport { secureMask } from \"micro-key-producer/password.js\"\n\n/**\n * Generates a secure random password strong enough for online use.\n *\n * It uses \"Safari Keychain Secure Password\" format.\n *\n * The approximate entropy is [71 bits](https://support.apple.com/guide/security/automatic-strong-passwords-secc84c811c4/web).\n */\nexport function generatePassword(): string {\n  return secureMask.apply(randomBytes(32)).password\n}\n\ntype KeyFormatMap = {\n  raw: Uint8Array\n  hex: string\n  base64: string\n}\n\n/**\n * Generates a secure random key strong enough for offline use such as encryption.\n *\n * The strong entropy is 256 bits.\n *\n * @param format The format of the generated key. By default, it is \"hex\".\n */\nexport function generateKey<TFormat extends keyof KeyFormatMap = \"hex\">(\n  format: TFormat = \"hex\" as TFormat,\n): KeyFormatMap[TFormat] {\n  const bytes = randomBytes(32)\n\n  if (format === \"raw\") {\n    return bytes as KeyFormatMap[TFormat]\n  }\n\n  if (format === \"base64\") {\n    return Buffer.from(bytes).toString(\"base64\") as KeyFormatMap[TFormat]\n  }\n\n  return bytesToHex(bytes) as KeyFormatMap[TFormat]\n}\n","{\n  \"terminal-ssh\": {\n    \"name\": \"ghcr.io/exeteres/highstate/terminal-ssh\",\n    \"tag\": \"latest\",\n    \"image\": \"ghcr.io/exeteres/highstate/terminal-ssh:latest@sha256:99380e0405522afa0058eedce124c1970a87408663365b2dbce737801a7cd5d1\"\n  }\n}\n","import type { common, network, ssh } from \"@highstate/library\"\nimport { stripNullish, type UnitTerminal } from \"@highstate/contract\"\nimport {\n  fileFromString,\n  type Input,\n  type Output,\n  output,\n  secret,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { remote } from \"@pulumi/command\"\nimport getKeys, { PrivateExport } from \"micro-key-producer/ssh.js\"\nimport { randomBytes } from \"micro-key-producer/utils.js\"\nimport * as images from \"../../assets/images.json\"\nimport { Command } from \"./command\"\nimport { l3EndpointToL4, l3EndpointToString } from \"./network\"\n\nexport async function createSshTerminal(\n  credentials: Input<ssh.Connection>,\n): Promise<Output<UnitTerminal>> {\n  const resolvedCredentials = await toPromise(credentials)\n\n  const command = [\"ssh\", \"-tt\", \"-o\", \"UserKnownHostsFile=/known_hosts\"]\n\n  // TODO: select best endpoint based on the environment\n  const endpoint = resolvedCredentials.endpoints[0]\n\n  command.push(\"-p\", endpoint.port.toString())\n\n  if (resolvedCredentials.keyPair) {\n    command.push(\"-i\", \"/private_key\")\n  }\n\n  command.push(`${resolvedCredentials.user}@${l3EndpointToString(endpoint)}`)\n\n  if (resolvedCredentials.password) {\n    command.unshift(\"sshpass\", \"-f\", \"/password\")\n  }\n\n  return output({\n    name: \"ssh\",\n\n    meta: {\n      title: \"Shell\",\n      description: \"Connect to the server via SSH.\",\n      icon: \"gg:remote\",\n    },\n\n    spec: {\n      image: images[\"terminal-ssh\"].image,\n      command,\n\n      files: stripNullish({\n        \"/password\": resolvedCredentials.password\n          ? fileFromString(\"password\", resolvedCredentials.password, { isSecret: true })\n          : undefined,\n\n        \"/private_key\": resolvedCredentials.keyPair?.privateKey\n          ? fileFromString(\"private_key\", resolvedCredentials.keyPair.privateKey, {\n              isSecret: true,\n              mode: 0o600,\n            })\n          : undefined,\n\n        \"/known_hosts\": fileFromString(\n          \"known_hosts\",\n          `${l3EndpointToString(endpoint)} ${resolvedCredentials.hostKey}`,\n          { mode: 0o644 },\n        ),\n      }),\n    },\n  })\n}\n\n/**\n * Generates a secure random SSH private key.\n * The key is generated using the Ed25519 algorithm.\n *\n * @returns The generated SSH private key in PEM format.\n */\nexport function generateSshPrivateKey(): Output<string> {\n  const seed = randomBytes(32)\n\n  return secret(getKeys(seed).privateKey)\n}\n\n/**\n * Converts a private SSH key string to a KeyPair object.\n *\n * @param privateKeyString The private key string to convert.\n * @returns An Output of the KeyPair object.\n */\nexport function sshPrivateKeyToKeyPair(privateKeyString: Input<string>): Output<ssh.KeyPair> {\n  return output(privateKeyString).apply(privateKeyString => {\n    const privateKeyStruct = PrivateExport.decode(privateKeyString)\n\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n    const privKey = privateKeyStruct.keys[0].privKey.privKey as Uint8Array\n\n    const { fingerprint, publicKey } = getKeys(privKey.slice(0, 32))\n\n    return output({\n      type: \"ed25519\" as const,\n      fingerprint,\n      publicKey,\n      privateKey: secret(privateKeyString),\n    })\n  })\n}\n\nexport type ServerOptions = {\n  /**\n   * The local name of the server to namespace resources.\n   */\n  name: string\n\n  /**\n   * The fallback hostname to use if the server cannot be determined.\n   *\n   * If not provided, the `name` will be used as the fallback hostname.\n   */\n  fallbackHostname?: string\n\n  /**\n   * The L3 endpoints of the server.\n   */\n  endpoints: network.L3Endpoint[]\n\n  /**\n   * The arguments for the SSH connection.\n   */\n  sshArgs?: Partial<ssh.Args>\n\n  /**\n   * The password for the SSH connection.\n   */\n  sshPassword?: Input<string>\n\n  /**\n   * The private key for the SSH connection.\n   */\n  sshPrivateKey?: Input<string>\n\n  /**\n   * The SSH key pair for the server.\n   * If provided, it will take precedence over the `sshPrivateKey` argument.\n   */\n  sshKeyPair?: Input<ssh.KeyPair>\n\n  /**\n   * Whether to wait for the server to respond to a ping command before returning.\n   *\n   * If true, the command will wait for a successful ping response before proceeding.\n   *\n   * By default, this is equal to `!waitForSsh`, so when `waitForSsh` is true, no extra ping is performed.\n   */\n  waitForPing?: boolean\n\n  /**\n   * The interval in seconds to wait between ping attempts.\n   *\n   * Only used if `waitForPing` is true.\n   * By default, it will wait 5 seconds between attempts.\n   */\n  pingInterval?: number\n\n  /**\n   * The timeout in seconds to wait for the server to respond to a ping command.\n   *\n   * Only used if `waitForPing` is true.\n   * By default, it will wait 5 minutes (300 seconds) before timing out.\n   */\n  pingTimeout?: number\n\n  /**\n   * Whether to wait for the SSH service to be available before returning.\n   *\n   * If true, the command will wait for the SSH service to respond before proceeding.\n   *\n   * By default, this is true if `sshArgs.enabled` is true, otherwise false.\n   */\n  waitForSsh?: boolean\n\n  /**\n   * The interval in seconds to wait between SSH connection attempts.\n   *\n   * Only used if `waitForSsh` is true.\n   * By default, it will wait 5 seconds between attempts.\n   */\n  sshCheckInterval?: number\n\n  /**\n   * The timeout in seconds to wait for the SSH service to respond.\n   *\n   * Only used if `waitForSsh` is true.\n   * By default, it will wait 5 minutes (300 seconds) before timing out.\n   */\n  sshCheckTimeout?: number\n}\n\nexport type ServerBundle = {\n  /**\n   * The server entity created with the provided options.\n   */\n  server: Output<common.Server>\n\n  /**\n   * The SSH terminal created for the server.\n   */\n  terminal?: Output<UnitTerminal>\n}\n\n/**\n * Creates a server entity with the provided options and returns a bundle containing the server entity and terminal.\n *\n * Basically, it just a convenience function that calls `createServerEntity` and `createSshTerminal`.\n *\n * @param options The options for creating the server entity.\n * @returns A promise that resolves to a ServerBundle containing the server entity and terminal.\n */\nexport async function createServerBundle(options: ServerOptions): Promise<ServerBundle> {\n  const server = await createServerEntity(options)\n  const ssh = await toPromise(server.ssh)\n\n  return {\n    server,\n    terminal: ssh ? await createSshTerminal(ssh) : undefined,\n  }\n}\n\n/**\n * Creates a server entity with the provided options.\n * It will create a command to check the SSH service and return the server entity.\n *\n * @param options The options for creating the server entity.\n * @returns A promise that resolves to the created server entity.\n */\nexport async function createServerEntity({\n  name,\n  fallbackHostname,\n  endpoints,\n  sshArgs = { enabled: true, port: 22, user: \"root\" },\n  sshPassword,\n  sshPrivateKey,\n  sshKeyPair,\n  pingInterval,\n  pingTimeout,\n  waitForPing,\n  waitForSsh,\n  sshCheckInterval,\n  sshCheckTimeout,\n}: ServerOptions): Promise<Output<common.Server>> {\n  if (endpoints.length === 0) {\n    throw new Error(\"At least one L3 endpoint is required to create a server entity\")\n  }\n\n  fallbackHostname ??= name\n  waitForSsh ??= sshArgs.enabled\n  waitForPing ??= !waitForSsh\n\n  if (waitForPing) {\n    await Command.waitFor(`${name}.ping`, {\n      host: \"local\",\n      create: `ping -c 1 ${l3EndpointToString(endpoints[0])}`,\n      timeout: pingTimeout ?? 300,\n      interval: pingInterval ?? 5,\n      triggers: [Date.now()],\n    }).wait()\n  }\n\n  if (!sshArgs.enabled) {\n    return output({\n      hostname: name,\n      endpoints,\n    })\n  }\n\n  const sshHost = sshArgs?.host ?? l3EndpointToString(endpoints[0])\n\n  if (waitForSsh) {\n    await Command.waitFor(`${name}.ssh`, {\n      host: \"local\",\n      create: `nc -zv ${sshHost} ${sshArgs.port}`,\n      timeout: sshCheckTimeout ?? 300,\n      interval: sshCheckInterval ?? 5,\n      triggers: [Date.now()],\n    }).wait()\n  }\n\n  const connection = output({\n    host: sshHost,\n    port: sshArgs.port,\n    user: sshArgs.user,\n    password: sshPassword,\n    privateKey: sshKeyPair ? output(sshKeyPair).privateKey : sshPrivateKey,\n    dialErrorLimit: 3,\n  })\n\n  const hostnameResult = new remote.Command(\"hostname\", {\n    connection,\n    create: \"hostname\",\n    triggers: [Date.now()],\n  })\n\n  const hostKeyResult = new remote.Command(\"host-key\", {\n    connection,\n    create: \"cat /etc/ssh/ssh_host_ed25519_key.pub\",\n    triggers: [Date.now()],\n  })\n\n  return output({\n    endpoints,\n    hostname: hostnameResult.stdout.apply(x => x.trim()),\n    ssh: {\n      endpoints: [l3EndpointToL4(sshHost, sshArgs.port ?? 22)],\n      user: sshArgs.user ?? \"root\",\n      hostKey: hostKeyResult.stdout.apply(x => x.trim()),\n      password: connection.password,\n      keyPair: sshKeyPair\n        ? sshKeyPair\n        : sshPrivateKey\n          ? sshPrivateKeyToKeyPair(sshPrivateKey)\n          : undefined,\n    },\n  })\n}\n"]}

package/dist/index.js

@@ -1,3 +1,3 @@
-export { AccessPointRoute, Command, DnsRecord, DnsRecordSet, GatewayRoute, ImplementationMediator, MaterializedFile, MaterializedFolder, TlsCertificate, archiveFromFolder, assetFromFile, createServerBundle, createServerEntity, createSshTerminal, dnsRecordMediator, fetchFileSize, filterEndpoints, gatewayRouteMediator, generateKey, generatePassword, generateSshPrivateKey, getNameByEndpoint, getServerConnection, l34EndpointToString, l3EndpointToCidr, l3EndpointToL4, l3EndpointToString, l4EndpointToString, l4EndpointWithProtocolToString, l7EndpointToString, parseEndpoints, parseL34Endpoint, parseL3Endpoint, parseL4Endpoint, parseL7Endpoint, requireInputL3Endpoint, requireInputL4Endpoint, sshPrivateKeyToKeyPair, tlsCertificateMediator, updateEndpoints, updateEndpointsWithFqdn } from './chunk-FHSPC2ZL.js';
+export { AccessPointRoute, Command, DnsRecord, DnsRecordSet, GatewayRoute, ImplementationMediator, MaterializedFile, MaterializedFolder, TlsCertificate, archiveFromFolder, assetFromFile, createServerBundle, createServerEntity, createSshTerminal, dnsRecordMediator, fetchFileSize, filterEndpoints, gatewayRouteMediator, generateKey, generatePassword, generateSshPrivateKey, getNameByEndpoint, getServerConnection, l34EndpointToString, l3EndpointToCidr, l3EndpointToL4, l3EndpointToString, l4EndpointToString, l4EndpointWithProtocolToString, l7EndpointToString, parseEndpoints, parseL34Endpoint, parseL3Endpoint, parseL4Endpoint, parseL7Endpoint, requireInputL3Endpoint, requireInputL4Endpoint, sshPrivateKeyToKeyPair, tlsCertificateMediator, updateEndpoints, updateEndpointsWithFqdn } from './chunk-RKTGGVPZ.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/units/databases/existing-mariadb/index.js

@@ -1,4 +1,4 @@
-import { parseEndpoints } from '../../../chunk-FHSPC2ZL.js';
+import { parseEndpoints } from '../../../chunk-RKTGGVPZ.js';
 import { databases } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/dist/units/databases/existing-mongodb/index.js

@@ -1,4 +1,4 @@
-import { parseEndpoints } from '../../../chunk-FHSPC2ZL.js';
+import { parseEndpoints } from '../../../chunk-RKTGGVPZ.js';
 import { databases } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/dist/units/databases/existing-postgresql/index.js

@@ -1,4 +1,4 @@
-import { parseEndpoints } from '../../../chunk-FHSPC2ZL.js';
+import { parseEndpoints } from '../../../chunk-RKTGGVPZ.js';
 import { databases } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/dist/units/dns/record-set/index.js

@@ -1,4 +1,4 @@
-import { updateEndpointsWithFqdn } from '../../../chunk-FHSPC2ZL.js';
+import { updateEndpointsWithFqdn } from '../../../chunk-RKTGGVPZ.js';
 import { dns } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/dist/units/existing-server/index.js

@@ -1,4 +1,4 @@
-import { requireInputL3Endpoint, createServerBundle, l3EndpointToString } from '../../chunk-FHSPC2ZL.js';
+import { requireInputL3Endpoint, createServerBundle, l3EndpointToString } from '../../chunk-RKTGGVPZ.js';
 import { common } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 import { map } from 'remeda';

package/dist/units/network/l3-endpoint/index.js

@@ -1,4 +1,4 @@
-import { parseL3Endpoint } from '../../../chunk-FHSPC2ZL.js';
+import { parseL3Endpoint } from '../../../chunk-RKTGGVPZ.js';
 import { network } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/dist/units/network/l4-endpoint/index.js

@@ -1,4 +1,4 @@
-import { parseL4Endpoint } from '../../../chunk-FHSPC2ZL.js';
+import { parseL4Endpoint } from '../../../chunk-RKTGGVPZ.js';
 import { network } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/dist/units/script/index.js

@@ -1,4 +1,4 @@
-import { Command } from '../../chunk-FHSPC2ZL.js';
+import { Command } from '../../chunk-RKTGGVPZ.js';
 import { common } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/dist/units/server-dns/index.js

@@ -1,4 +1,4 @@
-import { updateEndpointsWithFqdn, l3EndpointToString } from '../../chunk-FHSPC2ZL.js';
+import { updateEndpointsWithFqdn, l3EndpointToString } from '../../chunk-RKTGGVPZ.js';
 import { common } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/dist/units/server-patch/index.js

@@ -1,4 +1,4 @@
-import { updateEndpoints, l3EndpointToString } from '../../chunk-FHSPC2ZL.js';
+import { updateEndpoints, l3EndpointToString } from '../../chunk-RKTGGVPZ.js';
 import { common } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/dist/units/ssh/key-pair/index.js

@@ -1,4 +1,4 @@
-import { generateSshPrivateKey, sshPrivateKeyToKeyPair } from '../../../chunk-FHSPC2ZL.js';
+import { generateSshPrivateKey, sshPrivateKeyToKeyPair } from '../../../chunk-RKTGGVPZ.js';
 import { ssh } from '@highstate/library';
 import { forUnit } from '@highstate/pulumi';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highstate/common",
-  "version": "0.9.27",
+  "version": "0.9.28",
   "type": "module",
   "files": [
     "dist",
@@ -91,9 +91,9 @@
     "biome:check": "biome check --error-on-warnings"
   },
   "dependencies": {
-    "@highstate/contract": "^0.9.27",
-    "@highstate/library": "^0.9.27",
-    "@highstate/pulumi": "^0.9.27",
+    "@highstate/contract": "^0.9.28",
+    "@highstate/library": "^0.9.28",
+    "@highstate/pulumi": "^0.9.28",
     "@noble/hashes": "^1.7.1",
     "@pulumi/command": "^1.0.2",
     "micro-key-producer": "^0.7.3",
@@ -104,11 +104,11 @@
   },
   "devDependencies": {
     "@biomejs/biome": "2.2.0",
-    "@highstate/cli": "^0.9.27",
+    "@highstate/cli": "^0.9.28",
     "@types/tar": "^6.1.13",
     "@types/unzipper": "^0.10.11",
     "@typescript/native-preview": "^7.0.0-dev.20250920.1",
     "type-fest": "^4.41.0"
   },
-  "gitHead": "e4dfdb6c1394a6739591f9881c4f5f11d9daa0ba"
+  "gitHead": "6de09d98fa66e808c42aba7fe65e6e0762945b9b"
 }

package/src/shared/access-point.ts

@@ -101,6 +101,7 @@ export class AccessPointRoute extends ComponentResource {
             providers: output(args.accessPoint).dnsProviders,
             values: this.route.endpoints,
             waitAt: "local",
+            proxied: accessPoint.proxied,
           },
           { ...opts, parent: this },
         )

package/dist/chunk-FHSPC2ZL.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/shared/network.ts","../src/shared/command.ts","../src/shared/impl-ref.ts","../src/shared/dns.ts","../src/shared/gateway.ts","../src/shared/tls.ts","../src/shared/access-point.ts","../src/shared/files.ts","../src/shared/passwords.ts","../assets/images.json","../src/shared/ssh.ts"],"names":["ssh","command","environment","env","triggers","toPromise","output","ComponentResource","resolvedType","interpolate","matchedProviders","name","flat","uniqueBy","z","Resource","issuers","getOrCreate","terminal-ssh","randomBytes","privateKeyString","remote"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAkCO,SAAS,mBAAmB,UAAA,EAAwC;AACzE,EAAA,QAAQ,WAAW,IAAA;AAAM,IACvB,KAAK,MAAA;AACH,MAAA,OAAO,UAAA,CAAW,OAAA;AAAA,IACpB,KAAK,MAAA;AACH,MAAA,OAAO,UAAA,CAAW,OAAA;AAAA,IACpB,KAAK,UAAA;AACH,MAAA,OAAO,UAAA,CAAW,QAAA;AAAA;AAExB;AAQO,SAAS,mBAAmB,UAAA,EAAwC;AACzE,EAAA,IAAI,UAAA,CAAW,SAAS,MAAA,EAAQ;AAC9B,IAAA,OAAO,CAAA,CAAA,EAAI,UAAA,CAAW,OAAO,CAAA,EAAA,EAAK,WAAW,IAAI,CAAA,CAAA;AAAA,EACnD;AAEA,EAAA,OAAO,GAAG,kBAAA,CAAmB,UAAU,CAAC,CAAA,CAAA,EAAI,WAAW,IAAI,CAAA,CAAA;AAC7D;AAQO,SAAS,+BAA+B,UAAA,EAAwC;AACrF,EAAA,MAAM,QAAA,GAAW,CAAA,EAAG,UAAA,CAAW,QAAQ,CAAA,GAAA,CAAA;AAEvC,EAAA,OAAO,CAAA,EAAG,QAAQ,CAAA,EAAG,kBAAA,CAAmB,UAAU,CAAC,CAAA,CAAA;AACrD;AASO,SAAS,mBAAmB,UAAA,EAAwC;AACzE,EAAA,MAAM,QAAA,GAAW,CAAA,EAAG,UAAA,CAAW,WAAW,CAAA,GAAA,CAAA;AAE1C,EAAA,IAAI,QAAA,GAAW,mBAAmB,UAAU,CAAA;AAE5C,EAAA,IAAI,WAAW,QAAA,EAAU;AACvB,IAAA,QAAA,IAAY,CAAA,CAAA,EAAI,WAAW,QAAQ,CAAA,CAAA;AAAA,EACrC;AAEA,EAAA,OAAO,CAAA,EAAG,QAAQ,CAAA,EAAG,QAAQ,CAAA,CAAA;AAC/B;AAQO,SAAS,oBAAoB,WAAA,EAA0C;AAC5E,EAAA,IAAI,YAAY,IAAA,EAAM;AACpB,IAAA,OAAO,mBAAmB,WAAW,CAAA;AAAA,EACvC;AAEA,EAAA,OAAO,mBAAmB,WAAW,CAAA;AACvC;AAEA,IAAM,eAAA,GACJ,6KAAA;AAEF,IAAM,cAAA,GACJ,iMAAA;AAUK,SAAS,iBAAiB,WAAA,EAAoD;AACnF,EAAA,IAAI,OAAO,gBAAgB,QAAA,EAAU;AACnC,IAAA,OAAO,WAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,KAAA,CAAM,eAAe,CAAA;AAC/C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,WAAW,CAAA,CAAA,CAAG,CAAA;AAAA,EAC5D;AAEA,EAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,MAAM,QAAA,EAAU,IAAA,KAAS,KAAA,CAAM,MAAA;AAEvD,EAAA,IAAI,QAAA,IAAY,QAAA,KAAa,KAAA,IAAS,QAAA,KAAa,KAAA,EAAO;AACxD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,QAAQ,CAAA,CAAA,CAAG,CAAA;AAAA,EAC/D;AAEA,EAAA,IAAI,UAAA,GAAyC,QAAA;AAE7C,EAAA,IAAI,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AACzC,IAAA,UAAA,GAAa,UAAA;AAAA,EACf,CAAA,MAAA,IAAW,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AAChD,IAAA,UAAA,GAAa,UAAA;AAAA,EACf;AAEA,EAAA,MAAM,gBAAA,GAAmB,OAAO,KAAA,GAAQ,MAAA;AAExC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA,GAAO,MAAA,GAAS,IAAA,GAAO,MAAA,GAAS,UAAA;AAAA,IACtC,UAAA;AAAA,IACA,SAAS,IAAA,IAAQ,IAAA;AAAA,IACjB,QAAA;AAAA,IACA,IAAA,EAAM,IAAA,GAAO,QAAA,CAAS,IAAA,EAAM,EAAE,CAAA,GAAI,MAAA;AAAA,IAClC,QAAA,EAAU,WAAY,QAAA,GAAkC;AAAA,GAC1D;AACF;AAUO,SAAS,gBAAgB,UAAA,EAAiD;AAC/E,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AAClC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,MAAA,GAAS,iBAAiB,UAAU,CAAA;AAE1C,EAAA,IAAI,OAAO,IAAA,EAAM;AACf,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0CAAA,EAA6C,UAAU,CAAA,CAAA,CAAG,CAAA;AAAA,EAC5E;AAEA,EAAA,OAAO,MAAA;AACT;AAOO,SAAS,gBAAgB,UAAA,EAAiD;AAC/E,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AAClC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,MAAA,GAAS,iBAAiB,UAAU,CAAA;AAE1C,EAAA,IAAI,CAAC,OAAO,IAAA,EAAM;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,UAAU,CAAA,CAAA,CAAG,CAAA;AAAA,EACjE;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,IAAM,kBAAA,GACJ,uHAAA;AAEF,IAAM,kBAAA,GACJ,kMAAA;AAWF,eAAsB,sBAAA,CACpB,aACA,aAAA,EAC6B;AAC7B,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,gBAAgB,WAAW,CAAA;AAAA,EACpC;AAEA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,OAAO,UAAU,aAAa,CAAA;AAAA,EAChC;AAEA,EAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AACxC;AAWA,eAAsB,sBAAA,CACpB,aACA,aAAA,EAC6B;AAC7B,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,gBAAgB,WAAW,CAAA;AAAA,EACpC;AAEA,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,OAAO,UAAU,aAAa,CAAA;AAAA,EAChC;AAEA,EAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AACxC;AAUO,SAAS,cAAA,CACd,UAAA,EACA,IAAA,EACA,QAAA,GAA+B,KAAA,EACX;AACpB,EAAA,OAAO;AAAA,IACL,GAAG,gBAAgB,UAAU,CAAA;AAAA,IAC7B,IAAA;AAAA,IACA;AAAA,GACF;AACF;AAWO,SAAS,eAAA,CAId,SAAA,EACA,MAAA,EACA,KAAA,EACiC;AACjC,EAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,IAAA,SAAA,GAAY,UAAU,MAAA,CAAO,CAAA,QAAA,KAAY,OAAO,QAAA,CAAS,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EAC/E,WAAW,SAAA,CAAU,IAAA,CAAK,cAAY,QAAA,CAAS,UAAA,KAAe,QAAQ,CAAA,EAAG;AACvE,IAAA,SAAA,GAAY,SAAA,CAAU,MAAA,CAAO,CAAA,QAAA,KAAY,QAAA,CAAS,eAAe,QAAQ,CAAA;AAAA,EAC3E,WAAW,SAAA,CAAU,IAAA,CAAK,cAAY,QAAA,CAAS,UAAA,KAAe,UAAU,CAAA,EAAG;AACzE,IAAA,SAAA,GAAY,SAAA,CAAU,MAAA,CAAO,CAAA,QAAA,KAAY,QAAA,CAAS,eAAe,UAAU,CAAA;AAAA,EAC7E;AAEA,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,SAAA,GAAY,UAAU,MAAA,CAAO,CAAA,QAAA,KAAY,MAAM,QAAA,CAAS,QAAA,CAAS,IAAa,CAAC,CAAA;AAAA,EACjF;AAEA,EAAA,OAAO,SAAA;AACT;AAUO,SAAS,iBAAiB,UAAA,EAAwC;AACvE,EAAA,QAAQ,WAAW,IAAA;AAAM,IACvB,KAAK,MAAA;AACH,MAAA,OAAO,CAAA,EAAG,WAAW,OAAO,CAAA,GAAA,CAAA;AAAA,IAC9B,KAAK,MAAA;AACH,MAAA,OAAO,CAAA,EAAG,WAAW,OAAO,CAAA,IAAA,CAAA;AAAA,IAC9B,KAAK,UAAA;AACH,MAAA,MAAM,IAAI,MAAM,iCAAiC,CAAA;AAAA;AAEvD;AAEA,IAAM,eAAA,GAAkB,CAAC,KAAA,EAAO,MAAM,CAAA;AAU/B,SAAS,gBAAgB,UAAA,EAAiD;AAC/E,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AAClC,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,KAAA,CAAM,cAAc,CAAA;AAC7C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,UAAU,CAAA,CAAA,CAAG,CAAA;AAAA,EACxD;AAEA,EAAA,MAAM,EAAE,aAAa,IAAA,EAAM,IAAA,EAAM,UAAU,IAAA,EAAM,QAAA,KAAa,KAAA,CAAM,MAAA;AAEpE,EAAA,IAAI,UAAA,GAAyC,QAAA;AAE7C,EAAA,IAAI,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AACzC,IAAA,UAAA,GAAa,UAAA;AAAA,EACf,CAAA,MAAA,IAAW,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AAChD,IAAA,UAAA,GAAa,UAAA;AAAA,EACf;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA,GAAO,MAAA,GAAS,IAAA,GAAO,MAAA,GAAS,UAAA;AAAA,IACtC,UAAA;AAAA,IACA,SAAS,IAAA,IAAQ,IAAA;AAAA,IACjB,QAAA;AAAA;AAAA,IAGA,IAAA,EAAM,IAAA,GAAO,QAAA,CAAS,IAAA,EAAM,EAAE,CAAA,GAAI,GAAA;AAAA;AAAA,IAGlC,QAAA,EAAU,eAAA,CAAgB,QAAA,CAAS,WAAW,IAAI,KAAA,GAAQ,KAAA;AAAA,IAE1D,WAAA;AAAA,IACA,UAAU,QAAA,IAAY;AAAA,GACxB;AACF;AAWA,eAAsB,eAAA,CACpB,gBAAA,EACA,SAAA,EACA,cAAA,EACA,OAAuB,SAAA,EACA;AACvB,EAAA,MAAM,wBAAA,GAA2B,MAAM,SAAA,CAAU,gBAAgB,CAAA;AACjE,EAAA,MAAM,YAAA,GAAe,MAAM,cAAA,CAAe,SAAA,EAAW,cAAc,CAAA;AAEnE,EAAA,IAAI,SAAS,SAAA,EAAW;AACtB,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,OAAO,QAAA;AAAA,IACL,CAAC,GAAG,YAAA,EAAc,GAAG,wBAAwB,CAAA;AAAA,IAC7C;AAAA,GACF;AACF;AASA,eAAsB,cAAA,CACpB,WACA,cAAA,EACuB;AACvB,EAAA,MAAM,sBAAA,GAAyB,MAAM,SAAA,CAAU,cAAc,CAAA;AAE7D,EAAA,OAAO,QAAA;AAAA,IACL,CAAC,GAAI,SAAA,EAAW,GAAA,CAAI,gBAAgB,CAAA,IAAK,EAAC,EAAI,GAAI,sBAAA,IAA0B,EAAG,CAAA;AAAA,IAC/E;AAAA,GACF;AACF;ACrYO,SAAS,oBACd,GAAA,EAC2C;AAC3C,EAAA,OAAO,MAAA,CAAO,GAAG,CAAA,CAAE,KAAA,CAAM,CAAAA,IAAAA,MAAQ;AAAA,IAC/B,IAAA,EAAM,kBAAA,CAAmBA,IAAAA,CAAI,SAAA,CAAU,CAAC,CAAC,CAAA;AAAA,IACzC,IAAA,EAAMA,IAAAA,CAAI,SAAA,CAAU,CAAC,CAAA,CAAE,IAAA;AAAA,IACvB,MAAMA,IAAAA,CAAI,IAAA;AAAA,IACV,UAAUA,IAAAA,CAAI,QAAA;AAAA,IACd,UAAA,EAAYA,KAAI,OAAA,EAAS,UAAA;AAAA,IACzB,cAAA,EAAgB,CAAA;AAAA,IAChB,SAASA,IAAAA,CAAI;AAAA,GACf,CAAE,CAAA;AACJ;AAiIA,SAAS,cAAc,OAAA,EAAoC;AACzD,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC1B,IAAA,OAAO,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,EACzB;AAEA,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,gBAAgB,GAAA,EAAqB;AAC5C,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,CAAC,OAAA,KAAoB,MAAA,CAAO,OAAO,CAAA;AAAA,EAC5C;AAEA,EAAA,OAAO,CAAC,OAAA,KAAoB,WAAA,CAAA,IAAA,EAAkB,GAAG,QAAQ,OAAO,CAAA,CAAA;AAClE;AAEA,SAAS,oBAAoB,WAAA,EAAoD;AAC/E,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,CAAC,OAAA,KAAoB,MAAA,CAAO,OAAO,CAAA;AAAA,EAC5C;AAEA,EAAA,OAAO,CAAC,OAAA,KACN,MAAA,CAAO,EAAE,SAAS,WAAA,EAAa,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,OAAA,EAAAC,QAAAA,EAAS,WAAA,EAAAC,cAAY,KAAM;AACnE,IAAA,IAAI,CAACA,YAAAA,IAAe,MAAA,CAAO,KAAKA,YAAW,CAAA,CAAE,WAAW,CAAA,EAAG;AACzD,MAAA,OAAOD,QAAAA;AAAA,IACT;AAEA,IAAA,MAAM,YAAY,MAAA,CAAO,OAAA,CAAQC,YAAW,CAAA,CACzC,GAAA,CAAI,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM,UAAU,GAAG,CAAA,EAAA,EAAK,KAAK,CAAA,CAAA,CAAG,CAAA,CAChD,KAAK,MAAM,CAAA;AAEd,IAAA,OAAO,CAAA,EAAG,SAAS,CAAA,IAAA,EAAOD,QAAO,CAAA,CAAA;AAAA,EACnC,CAAC,CAAA;AACL;AAEA,SAAS,eAAA,CAAgB,OAAA,GAAyB,GAAA,EAAK,QAAA,GAA0B,CAAA,EAAG;AAClF,EAAA,OAAO,CAAC,OAAA;AAAA;AAAA,IAEN,sBAAsB,OAAO,CAAA,kBAAA,EAAqB,cAAc,OAAO,CAAC,cAAc,QAAQ,CAAA,OAAA;AAAA,GAAA;AAClG;AAEA,SAAS,mBAAA,CACP,KACA,QAAA,EACA;AACA,EAAA,OAAO,MAAA,CAAO,EAAE,GAAA,EAAK,QAAA,EAAU,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,GAAA,EAAAE,IAAAA,EAAK,QAAA,EAAAC,WAAS,KAAM;AAC5D,IAAA,IAAI,CAACA,SAAAA,EAAU;AACb,MAAA,OAAOD,IAAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,SAAA,CAAUC,SAAQ,CAAC,CAAA;AAC5C,IAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,SAAS,KAAK,CAAA;AAEhD,IAAA,OAAO;AAAA,MACL,GAAGD,IAAAA;AAAA,MACH,6BAAA,EAA+B;AAAA,KACjC;AAAA,EACF,CAAC,CAAA;AACH;AAEO,IAAM,OAAA,GAAN,MAAM,QAAA,SAAgB,iBAAA,CAAkB;AAAA,EAC7B,MAAA;AAAA,EACA,MAAA;AAAA,EAEhB,WAAA,CAAY,IAAA,EAAc,IAAA,EAAmB,IAAA,EAAiC;AAC5E,IAAA,KAAA,CAAM,0BAAA,EAA4B,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAElD,IAAA,MAAM,WAAA,GAAc,mBAAA;AAAA,MAClB,IAAA,CAAK,WAAA;AAAA,MACL,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,OAAA,GACJ,IAAA,CAAK,IAAA,KAAS,OAAA,GACV,IAAI,KAAA,CAAM,OAAA;AAAA,MACR,IAAA;AAAA,MACA;AAAA,QACE,QAAQ,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAAE,MAAM,aAAa,CAAA;AAAA,QAC/C,MAAA,EAAQ,KAAK,MAAA,GAAS,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,KAAA,CAAM,aAAa,CAAA,GAAI,MAAA;AAAA,QACjE,MAAA,EAAQ,KAAK,MAAA,GAAS,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,KAAA,CAAM,aAAa,CAAA,GAAI,MAAA;AAAA,QACjE,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,QAAA,EAAU,KAAK,QAAA,GAAW,MAAA,CAAO,KAAK,QAAQ,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,GAAI,MAAA;AAAA,QAC9D,GAAA,EAAK,IAAA,CAAK,GAAA,IAAO,OAAA,EAAQ;AAAA,QACzB,WAAA;AAAA,QACA,OAAO,IAAA,CAAK;AAAA,OACd;AAAA,MACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,KAC1B,GACA,IAAI,MAAA,CAAO,OAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,YAAY,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,MAAM,CAAA,MAAA,KAAU;AAC5C,UAAA,IAAI,CAAC,OAAO,GAAA,EAAK;AACf,YAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,MAAA,CAAO,QAAQ,CAAA,wBAAA,CAA0B,CAAA;AAAA,UAC1E;AAEA,UAAA,OAAO,mBAAA,CAAoB,OAAO,GAAG,CAAA;AAAA,QACvC,CAAC,CAAA;AAAA,QAED,QAAQ,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CACvB,MAAM,aAAa,CAAA,CACnB,KAAA,CAAM,eAAA,CAAgB,KAAK,GAAG,CAAC,EAC/B,KAAA,CAAM,mBAAA,CAAoB,WAAW,CAAC,CAAA;AAAA,QAEzC,MAAA,EAAQ,KAAK,MAAA,GACT,MAAA,CAAO,KAAK,MAAM,CAAA,CACf,MAAM,aAAa,CAAA,CACnB,MAAM,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAC,CAAA,CAC/B,MAAM,mBAAA,CAAoB,WAAW,CAAC,CAAA,GACzC,MAAA;AAAA,QAEJ,MAAA,EAAQ,KAAK,MAAA,GACT,MAAA,CAAO,KAAK,MAAM,CAAA,CACf,MAAM,aAAa,CAAA,CACnB,MAAM,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAC,CAAA,CAC/B,MAAM,mBAAA,CAAoB,WAAW,CAAC,CAAA,GACzC,MAAA;AAAA,QAEJ,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,QAAA,EAAU,KAAK,QAAA,GAAW,MAAA,CAAO,KAAK,QAAQ,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,GAAI,MAAA;AAAA,QAC9D,OAAO,IAAA,CAAK,KAAA;AAAA,QAEZ,sBAAA,EAAwB;AAAA;AAAA;AAAA,OAI1B;AAAA,MACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,KAC1B;AAEN,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AACtB,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AAEtB,IAAA,IAAA,CAAK,eAAA,CAAgB;AAAA,MACnB,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,QAAQ,IAAA,CAAK;AAAA,KACd,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,IAAA,GAAwB;AAC5B,IAAA,OAAO,MAAME,SAAAA,CAAU,IAAA,CAAK,MAAM,CAAA;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,cAAA,CACL,IAAA,EACA,OAAA,EACA,IAAA,EACS;AACT,IAAA,OAAO,IAAI,QAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,MAAM,OAAA,CAAQ,IAAA;AAAA,QACd,QAAQ,WAAA,CAAA,oBAAA,EAAkC,OAAA,CAAQ,IAAI,CAAA,YAAA,EAAe,QAAQ,IAAI,CAAA,CAAA;AAAA,QACjF,MAAA,EAAQ,WAAA,CAAA,OAAA,EAAqB,OAAA,CAAQ,IAAI,CAAA,CAAA;AAAA,QACzC,OAAO,OAAA,CAAQ;AAAA,OACjB;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,eAAA,CACL,IAAA,EACA,OAAA,EACA,IAAA,EACS;AACT,IAAA,OAAO,IAAI,QAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,MAAM,OAAA,CAAQ,IAAA;AAAA,QACd,QAAQ,WAAA,CAAA,iBAAA,EAA+B,OAAA,CAAQ,IAAI,CAAA,0BAAA,EAA6B,QAAQ,IAAI,CAAA,CAAA,CAAA;AAAA,QAC5F,OAAA,EAAS;AAAA,OACX;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAO,OAAA,CAAQ,IAAA,EAAc,IAAA,EAAmB,IAAA,EAA0C;AACxF,IAAA,OAAO,IAAI,QAAA;AAAA,MACT,IAAA;AAAA,MACA;AAAA,QACE,GAAG,IAAA;AAAA,QACH,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAAE,KAAA,CAAM,eAAA,CAAgB,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAC,CAAA;AAAA,QAC9E,MAAA,EAAQ,IAAA,CAAK,MAAA,GACT,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,KAAA,CAAM,eAAA,CAAgB,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAC,CAAA,GACtE,MAAA;AAAA,QACJ,MAAA,EAAQ,IAAA,CAAK,MAAA,GACT,MAAA,CAAO,KAAK,MAAM,CAAA,CAAE,KAAA,CAAM,eAAA,CAAgB,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,QAAQ,CAAC,CAAA,GACtE;AAAA,OACN;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AClXO,IAAM,yBAAN,MAGL;AAAA,EACA,WAAA,CACW,IAAA,EACQ,WAAA,EACA,YAAA,EACjB;AAHS,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACQ,IAAA,IAAA,CAAA,WAAA,GAAA,WAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAAA,EAChB;AAAA,EAEH,SAAA,CACE,YACA,IAAA,EAIA;AACA,IAAA,OAAO,OACL,OACA,IAAA,KACoC;AACpC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,WAAA,CAAY,SAAA,CAAU,KAAK,CAAA;AACpD,MAAA,IAAI,CAAC,YAAY,OAAA,EAAS;AACxB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,qCAAqC,IAAA,CAAK,IAAI,CAAA,GAAA,EAAM,WAAA,CAAY,MAAM,OAAO,CAAA;AAAA,SAC/E;AAAA,MACF;AAEA,MAAA,MAAM,UAAA,GAAa,UAAA,CAAW,SAAA,CAAU,IAAI,CAAA;AAC5C,MAAA,IAAI,CAAC,WAAW,OAAA,EAAS;AACvB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,oCAAoC,IAAA,CAAK,IAAI,CAAA,GAAA,EAAM,UAAA,CAAW,MAAM,OAAO,CAAA;AAAA,SAC7E;AAAA,MACF;AAEA,MAAA,MAAM,SAAS,MAAM,IAAA,CAAK,WAAA,CAAY,IAAA,EAAM,WAAW,IAAI,CAAA;AAC3D,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AAEvD,MAAA,IAAI,CAAC,aAAa,OAAA,EAAS;AACzB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,uCAAuC,IAAA,CAAK,IAAI,CAAA,GAAA,EAAM,YAAA,CAAa,MAAM,OAAO,CAAA;AAAA,SAClF;AAAA,MACF;AAEA,MAAA,OAAO,YAAA,CAAa,IAAA;AAAA,IACtB,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,IAAA,CACJ,OAAA,EACA,KAAA,EACiC;AACjC,IAAA,MAAM,eAAA,GAAkB,MAAMA,SAAAA,CAAU,OAAO,CAAA;AAC/C,IAAA,MAAM,aAAA,GAAgB,MAAMA,SAAAA,CAAU,KAAK,CAAA;AAE3C,IAAA,MAAM,aAAa,CAAA,EAAG,eAAA,CAAgB,OAAO,CAAA,MAAA,EAAS,KAAK,IAAI,CAAA,CAAA;AAE/D,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AAEF,MAAA,IAAA,GAAO,MAAM,OAAO,UAAA,CAAA;AAAA,IACtB,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,UAAU,CAAA,6BAAA,CAAA,EAAiC;AAAA,QACrF,KAAA,EAAO;AAAA,OACR,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,CAAE,MAAA,CAAO,CAAA,KAAA,KAAS,OAAO,KAAA,CAAM,CAAC,CAAA,KAAM,UAAU,CAAA;AAKjF,IAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6CAAA,EAAgD,UAAU,CAAA,EAAA,CAAI,CAAA;AAAA,IAChF;AAEA,IAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACpB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,mDAAA,EAAsD,UAAU,CAAA,GAAA,EAAM,KAAA,CAAM,GAAA,CAAI,CAAA,IAAA,KAAQ,IAAA,CAAK,CAAC,CAAC,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,uCAAA;AAAA,OAE7G;AAAA,IACF;AAEA,IAAA,MAAM,CAAC,QAAA,EAAU,QAAQ,CAAA,GAAI,MAAM,CAAC,CAAA;AAEpC,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AAEF,MAAA,MAAA,GAAS,MAAM,QAAA,CAAS,aAAA,EAAe,eAAA,CAAgB,IAAI,CAAA;AAAA,IAC7D,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAQ,CAAA,EAAA,CAAA,EAAM,KAAK,CAAA;AACtE,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yBAAA,EAA4B,QAAQ,CAAA,QAAA,CAAU,CAAA;AAAA,IAChE;AAEA,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACvD,IAAA,IAAI,CAAC,aAAa,OAAA,EAAS;AACzB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,yBAAA,EAA4B,QAAQ,CAAA,2BAAA,EAA8B,YAAA,CAAa,MAAM,OAAO,CAAA;AAAA,OAC9F;AAAA,IACF;AAEA,IAAA,OAAO,YAAA,CAAa,IAAA;AAAA,EACtB;AAAA,EAEA,UAAA,CACE,SACA,KAAA,EACwC;AACxC,IAAA,OAAOC,MAAAA,CAAO,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS,KAAK,CAAC,CAAA;AAAA,EACzC;AACF;AChGO,IAAM,oBAAoB,IAAI,sBAAA;AAAA,EACnC,YAAA;AAAA,EACA,CAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,EAAG,IAAA,EAAM,CAAA,CAAE,MAAA,EAA8B,EAAG,CAAA;AAAA,EACtE,CAAA,CAAE,WAAWC,iBAAiB;AAChC;AAqFA,SAAS,kBAAkB,QAAA,EAAsC;AAC/D,EAAA,QAAQ,SAAS,IAAA;AAAM,IACrB,KAAK,MAAA;AACH,MAAA,OAAO,GAAA;AAAA,IACT,KAAK,MAAA;AACH,MAAA,OAAO,MAAA;AAAA,IACT,KAAK,UAAA;AACH,MAAA,OAAO,OAAA;AAAA;AAEb;AAOO,IAAM,SAAA,GAAN,cAAwBA,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAItC,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAAqB,IAAA,EAAwB;AACrE,IAAA,KAAA,CAAM,4BAAA,EAA8B,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAEpD,IAAA,MAAM,UAAA,GAAaD,OAAO,IAAA,CAAK,KAAK,EAAE,KAAA,CAAM,CAAA,KAAA,KAAS,eAAA,CAAgB,KAAK,CAAC,CAAA;AAC3E,IAAA,MAAM,aAAA,GAAgB,UAAA,CAAW,KAAA,CAAM,kBAAkB,CAAA;AACzD,IAAA,MAAM,YAAA,GAAe,KAAK,IAAA,GAAOA,MAAAA,CAAO,KAAK,IAAI,CAAA,GAAI,UAAA,CAAW,KAAA,CAAM,iBAAiB,CAAA;AAEvF,IAAA,IAAA,CAAK,YAAYA,MAAAA,CAAO,IAAA,CAAK,QAAQ,CAAA,CAAE,MAAM,CAAA,QAAA,KAAY;AACvD,MAAA,OAAO,iBAAA,CAAkB,IAAA,CAAK,QAAA,CAAS,OAAA,EAAS;AAAA,QAC9C,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,MAAM,IAAA,CAAK,IAAA;AAAA,UACX,UAAU,IAAA,CAAK,QAAA;AAAA,UACf,KAAK,IAAA,CAAK,GAAA;AAAA,UACV,KAAA,EAAO,aAAA;AAAA,UACP,IAAA,EAAM;AAAA;AACR,OACD,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,IAAA,CAAK,eAAeA,MAAAA,CAAO;AAAA,MACzB,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,YAAA;AAAA,MACA,SAAS,IAAA,CAAK;AAAA,KACf,EAAE,KAAA,CAAM,CAAC,EAAE,MAAA,EAAQ,YAAA,EAAAE,aAAAA,EAAc,OAAA,EAAQ,KAAM;AAC9C,MAAA,IAAIA,kBAAiB,OAAA,EAAS;AAE5B,QAAA,OAAO,EAAC;AAAA,MACV;AAEA,MAAA,MAAM,gBAAgB,MAAA,GAAS,CAAC,MAAM,CAAA,CAAE,IAAA,KAAS,EAAC;AAElD,MAAA,IAAI,OAAA,EAAS;AAGX,QAAA,OAAQ,aAAA,CAAwC,IAAI,CAAA,IAAA,KAAQ;AAC1D,UAAA,MAAM,QAAA,GAAW,IAAA,KAAS,OAAA,GAAU,OAAA,GAAU,IAAA,CAAK,QAAA;AAEnD,UAAA,OAAO,IAAI,OAAA;AAAA,YACT,CAAA,EAAG,IAAI,CAAA,cAAA,EAAiB,QAAQ,CAAA,CAAA;AAAA,YAChC;AAAA,cACE,IAAA;AAAA,cACA,MAAA,EAAQ;AAAA,gBACNC,WAAAA,CAAAA,sBAAAA,EAAoC,KAAK,IAAI,CAAA,EAAA,CAAA;AAAA,gBAC7CA,WAAAA,CAAAA,kCAAAA,EAAgD,KAAK,IAAI,CAAA,uBAAA,CAAA;AAAA,gBACzD,CAAA,QAAA,CAAA;AAAA,gBACA,CAAA,IAAA;AAAA;AACF,aACF;AAAA,YACA,EAAE,QAAQ,IAAA;AAAK,WACjB;AAAA,QACF,CAAC,CAAA;AAAA,MACH;AAEA,MAAA,OAAQ,aAAA,CAAwC,IAAI,CAAA,IAAA,KAAQ;AAC1D,QAAA,MAAM,QAAA,GAAW,IAAA,KAAS,OAAA,GAAU,OAAA,GAAU,IAAA,CAAK,QAAA;AAEnD,QAAA,OAAO,IAAI,OAAA;AAAA,UACT,CAAA,EAAG,IAAI,CAAA,cAAA,EAAiB,QAAQ,CAAA,CAAA;AAAA,UAChC;AAAA,YACE,IAAA;AAAA,YACA,MAAA,EAAQ;AAAA,cACNA,WAAAA,CAAAA,sBAAAA,EAAoC,IAAA,CAAK,IAAI,CAAA,UAAA,EAAa,aAAa,CAAA,EAAA,CAAA;AAAA,cACvEA,WAAAA,CAAAA,kCAAAA,EAAgD,IAAA,CAAK,IAAI,CAAA,iBAAA,EAAoB,aAAa,CAAA,MAAA,CAAA;AAAA,cAC1F,CAAA,QAAA,CAAA;AAAA,cACA,CAAA,IAAA;AAAA;AACF,WACF;AAAA,UACA,EAAE,QAAQ,IAAA;AAAK,SACjB;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AACF;AAKO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqBF,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAIzC,UAAA;AAAA;AAAA;AAAA;AAAA,EAKA,YAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAAwB,IAAA,EAAwB;AACxE,IAAA,KAAA,CAAM,+BAAA,EAAiC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAEvD,IAAA,MAAM,mBAAmBD,MAAAA,CAAO;AAAA,MAC9B,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,IAAA,EAAM,KAAK,IAAA,IAAQ;AAAA,KACpB,CAAA,CAAE,KAAA,CAAM,CAAC,EAAE,WAAU,KAAM;AAC1B,MAAA,MAAMI,iBAAAA,GAAmB,UAAU,MAAA,CAAO,CAAA,QAAA,KAAY,KAAK,QAAA,CAAS,QAAA,CAAS,MAAM,CAAC,CAAA;AAEpF,MAAA,IAAIA,iBAAAA,CAAiB,WAAW,CAAA,EAAG;AACjC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oCAAA,EAAuC,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,MAChE;AAEA,MAAA,OAAOA,iBAAAA;AAAA,IACT,CAAC,CAAA;AAED,IAAA,IAAA,CAAK,aAAa,qBAAA,CAAsB,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,QAAQ,CAAA,KAAA,KAAS;AACxE,MAAA,OAAOJ,MAAAA,CAAO;AAAA,QACZ,IAAA,EAAM,KAAK,IAAA,IAAQ,IAAA;AAAA,QACnB,SAAA,EAAW;AAAA,OACZ,EAAE,KAAA,CAAM,CAAC,EAAE,IAAA,EAAAK,KAAAA,EAAM,WAAU,KAAM;AAChC,QAAA,OAAO,SAAA,CAAU,QAAQ,CAAA,QAAA,KAAY;AACnC,UAAA,MAAM,UAAA,GAAa,gBAAgB,KAAK,CAAA;AAExC,UAAA,OAAO,IAAI,SAAA;AAAA,YACT,CAAA,EAAGA,KAAI,CAAA,CAAA,EAAI,QAAA,CAAS,EAAE,CAAA,CAAA,EAAI,kBAAA,CAAmB,UAAU,CAAC,CAAA,CAAA;AAAA,YACxD;AAAA,cACE,IAAA,EAAAA,KAAAA;AAAA,cACA,QAAA;AAAA,cACA,KAAA,EAAO,UAAA;AAAA,cACP,IAAA,EAAM,IAAA,CAAK,IAAA,IAAQ,iBAAA,CAAkB,UAAU,CAAA;AAAA,cAC/C,SAAS,IAAA,CAAK,OAAA;AAAA,cACd,KAAK,IAAA,CAAK,GAAA;AAAA,cACV,UAAU,IAAA,CAAK,QAAA;AAAA,cACf,QAAQ,IAAA,CAAK;AAAA,aACf;AAAA,YACA,EAAE,QAAQ,IAAA;AAAK,WACjB;AAAA,QACF,CAAC,CAAA;AAAA,MACH,CAAC,CAAA;AAAA,IACH,CAAC,CAAA,CAAE,KAAA,CAAMC,IAAI,CAAA;AAEb,IAAA,IAAA,CAAK,YAAA,GAAe,IAAA,CAAK,UAAA,CACtB,KAAA,CAAM,CAAA,OAAA,KAAW,OAAA,CAAQ,OAAA,CAAQ,CAAA,MAAA,KAAU,MAAA,CAAO,YAAY,CAAC,CAAA,CAC/D,MAAMA,IAAI,CAAA;AAAA,EACf;AAAA,EAEA,OAAwB,iBAAA,mBAAoB,IAAI,GAAA,EAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW1E,OAAO,UAAA,CAAW,IAAA,EAAc,IAAA,EAAwB,IAAA,EAAsC;AAC5F,IAAA,OAAO,WAAA;AAAA,MACL,aAAA,CAAa,iBAAA;AAAA,MACb,IAAA;AAAA,MACA,MAAM,IAAI,aAAA,CAAa,IAAA,EAAM,MAAM,IAAI;AAAA,KACzC;AAAA,EACF;AACF;AAcA,eAAsB,uBAAA,CACpB,SAAA,EACA,IAAA,EACA,kBAAA,EACA,WACA,YAAA,EAC6E;AAC7E,EAAA,MAAM,iBAAA,GAAoB,MAAMP,SAAAA,CAAU,SAAS,CAAA;AAEnD,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO;AAAA,MACL,SAAA,EAAW,iBAAA;AAAA,MACX,YAAA,EAAc;AAAA,KAChB;AAAA,EACF;AAEA,EAAA,MAAM,iBAAA,GAAoB,eAAA,CAAgB,iBAAA,EAAmB,kBAAkB,CAAA;AAE/E,EAAA,MAAM,YAAA,GAAe,IAAI,YAAA,CAAa,IAAA,EAAM;AAAA,IAC1C,SAAA,EAAW,YAAA;AAAA,IACX,MAAA,EAAQ,iBAAA;AAAA,IACR,MAAA,EAAQ;AAAA,GACT,CAAA;AAED,EAAA,MAAM,kBAAA,GAAqB,OAAA;AAAA,IAAQ,iBAAA;AAAA,IAAmB,CAAA,QAAA,KACpD,SAAS,IAAA,GAAO,CAAA,EAAG,SAAS,IAAI,CAAA,CAAA,EAAI,QAAA,CAAS,QAAQ,CAAA,CAAA,GAAK;AAAA,GAC5D;AAEA,EAAA,MAAM,eAA4B,EAAC;AAEnC,EAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,CAAO,kBAAkB,CAAA,EAAG;AACrD,IAAA,YAAA,CAAa,OAAA,CAAQ;AAAA,MACnB,IAAA,EAAM,UAAA;AAAA,MACN,QAAA,EAAU,IAAA;AAAA,MACV,UAAA,EAAY,KAAA,CAAM,CAAC,CAAA,CAAE,UAAA;AAAA,MACrB,IAAA,EAAM,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,MACf,QAAA,EAAU,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA,KACP,CAAA;AAAA,EAChB;AAEA,EAAA,MAAMA,SAAAA;AAAA,IACJ,YAAA,CAAa,aAAa,KAAA,CAAM,CAAA,YAAA,KAAgB,aAAa,GAAA,CAAI,CAAA,OAAA,KAAW,OAAA,CAAQ,MAAM,CAAC;AAAA,GAC7F;AAEA,EAAA,IAAI,cAAc,SAAA,EAAW;AAC3B,IAAA,OAAO;AAAA,MACL,SAAA,EAAWQ,QAAAA;AAAA;AAAA,QAET,CAAC,GAAG,YAAA,EAAc,GAAI,iBAAiC,CAAA;AAAA,QACvD,CAAA,QAAA,KAAY,oBAAoB,QAAQ;AAAA,OAC1C;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,YAAA;AAAA,IACX;AAAA,GACF;AACF;ACtWO,IAAM,uBAAuB,IAAI,sBAAA;AAAA,EACtC,eAAA;AAAA,EACAC,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,IACf,IAAA,EAAMA,EAAE,MAAA,EAAyB;AAAA,IACjC,IAAA,EAAMA,CAAAA,CAAE,MAAA,EAAiC,CAAE,QAAA;AAAS,GACrD,CAAA;AAAA,EACDA,EAAE,MAAA,CAAO;AAAA,IACP,QAAA,EAAUA,CAAAA,CAAE,UAAA,CAAW,QAAQ,CAAA;AAAA,IAC/B,SAAA,EAAW,OAAA,CAAQ,gBAAA,CAAiB,MAAA,CAAO,KAAA;AAAM,GAClD;AACH;AAmEO,IAAM,YAAA,GAAN,cAA2BP,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAIzC,QAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAAwB,IAAA,EAAiC;AACjF,IAAA,KAAA,CAAM,+BAAA,EAAiC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAEvD,IAAA,MAAM,EAAE,QAAA,EAAU,SAAA,EAAU,GAAI,oBAAA,CAAqB,WAAWD,MAAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,OAAA,EAAS;AAAA,MAC5F,IAAA;AAAA,MACA,IAAA,EAAM,IAAA;AAAA,MACN,IAAA,EAAM,EAAE,GAAG,IAAA,EAAM,QAAQ,IAAA;AAAK,KAC/B,CAAA;AAED,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AACF;ACtGO,IAAM,yBAAyB,IAAI,sBAAA;AAAA,EACxC,iBAAA;AAAA,EACAQ,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,IACf,IAAA,EAAMA,EAAE,MAAA,EAA2B;AAAA,IACnC,IAAA,EAAMA,CAAAA,CAAE,MAAA,EAAiC,CAAE,QAAA;AAAS,GACrD,CAAA;AAAA,EACDA,CAAAA,CAAE,WAAWC,QAAQ;AACvB;AAoCO,IAAM,cAAA,GAAN,MAAM,eAAA,SAAuBR,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAI3C,QAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAA0B,IAAA,EAAiC;AACnF,IAAA,KAAA,CAAM,iCAAA,EAAmC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAEzD,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,IAAA,CAAK,MAAA,EAAQ,KAAK,OAAO,CAAA;AAEzD,IAAA,IAAA,CAAK,WAAWD,MAAAA,CAAO;AAAA,MACrB,OAAA;AAAA,MACA,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,UAAU,IAAA,CAAK;AAAA,KAChB,EAAE,KAAA,CAAM,OAAO,EAAE,OAAA,EAAAU,QAAAA,EAAS,UAAA,EAAY,QAAA,EAAS,KAAM;AAEpD,MAAA,MAAM,aAAA,GAAgBA,QAAAA,CAAQ,IAAA,CAAK,CAAA,MAAA,KAAU;AAC3C,QAAA,IAAI,cAAc,CAAC,UAAA,CAAW,QAAA,CAAS,MAAA,CAAO,MAAM,CAAA,EAAG;AACrD,UAAA,OAAO,KAAA;AAAA,QACT;AAEA,QAAA,IAAI,QAAA,IAAY,CAAC,QAAA,CAAS,KAAA,CAAM,CAAAL,KAAAA,KAAQA,KAAAA,CAAK,QAAA,CAAS,MAAA,CAAO,MAAM,CAAC,CAAA,EAAG;AACrE,UAAA,OAAO,KAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA;AAAA,MACT,CAAC,CAAA;AAED,MAAA,IAAI,CAAC,aAAA,EAAe;AAClB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,0CAA0C,UAAU,CAAA,iBAAA,EAAoB,UAAU,IAAA,CAAK,IAAI,KAAK,EAAE,CAAA,CAAA;AAAA,SACpG;AAAA,MACF;AAEA,MAAA,OAAO,MAAM,sBAAA,CAAuB,IAAA,CAAK,aAAA,CAAc,OAAA,EAAS;AAAA,QAC9D,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,OAAwB,mBAAA,mBAAsB,IAAI,GAAA,EAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW9E,OAAO,UAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACgB;AAChB,IAAA,OAAOM,WAAAA;AAAA,MACL,eAAA,CAAe,mBAAA;AAAA,MACf,IAAA;AAAA,MACA,MAAM,IAAI,eAAA,CAAe,IAAA,EAAM,MAAM,IAAI;AAAA,KAC3C;AAAA,EACF;AACF;AC3FO,IAAM,gBAAA,GAAN,cAA+BV,iBAAAA,CAAkB;AAAA;AAAA;AAAA;AAAA,EAI7C,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAc,IAAA,EAA4B,IAAA,EAAiC;AACrF,IAAA,KAAA,CAAM,mCAAA,EAAqC,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAG3D,IAAA,IAAI,KAAK,IAAA,IAAQ,IAAA,CAAK,SAAS,MAAA,IAAU,CAAC,KAAK,QAAA,EAAU;AACvD,MAAA,IAAA,CAAK,iBAAiBD,MAAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,MAAM,CAAA,WAAA,KAAe;AAClE,QAAA,IAAI,WAAA,CAAY,UAAA,CAAW,MAAA,KAAW,CAAA,EAAG;AACvC,UAAA,OAAO,MAAA;AAAA,QACT;AAEA,QAAA,OAAO,cAAA,CAAe,UAAA;AAAA,UACpB,IAAA;AAAA,UACA;AAAA,YACE,SAAS,WAAA,CAAY,UAAA;AAAA,YACrB,UAAU,IAAA,CAAK,IAAA,GAAO,CAAC,IAAA,CAAK,IAAI,IAAI,EAAC;AAAA,YACrC,YAAY,IAAA,CAAK;AAAA,WACnB;AAAA,UACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,SAC1B;AAAA,MACF,CAAC,CAAA;AAAA,IACH;AAGA,IAAA,IAAA,CAAK,QAAQ,IAAI,YAAA;AAAA,MACf,IAAA;AAAA,MACA;AAAA,QACE,GAAG,IAAA;AAAA,QACH,OAAA,EAASA,MAAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,OAAA;AAAA,QAClC,gBAAgB,IAAA,CAAK,cAAA;AAAA,QACrB,YAAY,IAAA,CAAK;AAAA,OACnB;AAAA,MACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,KAC1B;AAGA,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,IAAA,CAAK,eAAeA,MAAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,KAAA,CAAM,OAAM,WAAA,KAAe;AACtE,QAAA,IAAI,WAAA,CAAY,YAAA,CAAa,MAAA,KAAW,CAAA,EAAG;AACzC,UAAA,OAAO,MAAA;AAAA,QACT;AAEA,QAAA,MAAM,IAAA,GAAO,MAAMD,SAAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AACtC,QAAA,IAAI,CAAC,IAAA,EAAM;AACT,UAAA,OAAO,MAAA;AAAA,QACT;AAEA,QAAA,OAAO,YAAA,CAAa,UAAA;AAAA,UAClB,IAAA;AAAA,UACA;AAAA,YACE,SAAA,EAAWC,MAAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,YAAA;AAAA,YACpC,MAAA,EAAQ,KAAK,KAAA,CAAM,SAAA;AAAA,YACnB,MAAA,EAAQ;AAAA,WACV;AAAA,UACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,IAAA;AAAK,SAC1B;AAAA,MACF,CAAC,CAAA;AAAA,IACH;AAAA,EACF;AACF;ACzEO,SAAS,cAAc,IAAA,EAAgC;AAC5D,EAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAA,KAAS,QAAA,EAAU;AAClC,IAAA,OAAO,IAAI,KAAA,CAAM,WAAA,CAAY,mBAAmB,IAAA,CAAK,OAAA,CAAQ,QAAQ,CAAC,CAAA;AAAA,EACxE;AAEA,EAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAA,KAAS,OAAA,EAAS;AACjC,IAAA,OAAO,IAAI,KAAA,CAAM,SAAA,CAAU,IAAA,CAAK,QAAQ,IAAI,CAAA;AAAA,EAC9C;AAEA,EAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAA,KAAS,UAAA,EAAY;AACpC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,CAAK,QAAQ,QAAA,EAAU;AACzB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AACjD;AAQO,SAAS,kBAAkB,MAAA,EAAsC;AACtE,EAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,IAAA,KAAS,QAAA,EAAU;AACpC,IAAA,OAAO,IAAI,KAAA,CAAM,aAAA,CAAc,mBAAmB,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAC,CAAA;AAAA,EAC5E;AAEA,EAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,IAAA,KAAS,OAAA,EAAS;AACnC,IAAA,OAAO,IAAI,KAAA,CAAM,WAAA,CAAY,MAAA,CAAO,QAAQ,IAAI,CAAA;AAAA,EAClD;AAEA,EAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,IAAA,KAAS,UAAA,EAAY;AACtC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,QAAqC,EAAC;AAE5C,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO;AACvC,IAAA,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,IAAI,CAAA,GAAI,cAAc,IAAI,CAAA;AAAA,EAC5C;AAEA,EAAA,KAAA,MAAW,SAAA,IAAa,MAAA,CAAO,OAAA,CAAQ,OAAA,EAAS;AAC9C,IAAA,KAAA,CAAM,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,GAAI,kBAAkB,SAAS,CAAA;AAAA,EAC1D;AAEA,EAAA,OAAO,IAAI,KAAA,CAAM,YAAA,CAAa,KAAK,CAAA;AACrC;AASA,eAAe,mBAAA,CACb,MAAA,EACA,eAAA,EACA,WAAA,EACe;AACf,EAAA,MAAM,KAAA,CAAM,eAAA,EAAiB,EAAE,SAAA,EAAW,MAAM,CAAA;AAEhD,EAAA,QAAQ,WAAA;AAAa,IACnB,KAAK,KAAA,EAAO;AACV,MAAA,MAAM,gBAAoB,GAAA,CAAA,OAAA,CAAQ;AAAA,QAChC,GAAA,EAAK,eAAA;AAAA,QACL,MAAA,EAAQ;AAAA,OACT,CAAA;AAED,MAAA,MAAM,QAAA,CAAS,QAAQ,aAAa,CAAA;AACpC,MAAA;AAAA,IACF;AAAA,IACA,KAAK,KAAA,EAAO;AAEV,MAAA,MAAM,QAAA,CAAS,QAAQ,QAAA,CAAS,OAAA,CAAQ,EAAE,IAAA,EAAM,eAAA,EAAiB,CAAC,CAAA;AAClE,MAAA;AAAA,IACF;AAAA;AAEJ;AASA,SAAS,iBAAA,CAAkB,UAAkB,WAAA,EAA4C;AACvF,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAQ,CAAA,CAAE,WAAA,EAAY;AAE1C,EAAA,IAAI,GAAA,KAAQ,MAAA,IAAU,GAAA,KAAQ,MAAA,IAAU,QAAQ,SAAA,EAAW;AACzD,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,IAAA,OAAO,KAAA;AAAA,EACT;AAGA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,IAAI,YAAY,QAAA,CAAS,KAAK,KAAK,WAAA,CAAY,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,IAAI,WAAA,CAAY,QAAA,CAAS,KAAK,CAAA,EAAG;AAC/B,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT;AAYO,IAAM,gBAAA,GAAN,MAAM,iBAAA,CAA4C;AAAA,EAOvD,WAAA,CACW,QACA,MAAA,EACT;AAFS,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAET,IAAA,IAAA,CAAK,YAAA,GAAe;AAAA,MAClB,KAAA,EAAO,CAAA,mBAAA,EAAsB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,KAC/C;AAAA,EACF;AAAA,EAbQ,QAAA;AAAA,EACA,KAAA;AAAA,EACA,SAAA,GAAY,KAAA;AAAA,EAEX,YAAA;AAAA,EAWT,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,MAAc,KAAA,GAAuB;AACnC,IAAA,IAAI,KAAK,MAAA,EAAQ;AAEf,MAAA,IAAA,CAAK,KAAA,GAAQ,KAAK,IAAA,CAAK,MAAA,CAAO,MAAM,IAAA,CAAK,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IAC3D,CAAA,MAAO;AAGL,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,mBAAA,IAAuB,MAAA,EAAO;AAC3D,MAAA,IAAA,CAAK,WAAW,MAAM,OAAA,CAAQ,IAAA,CAAK,QAAA,EAAU,iBAAiB,CAAC,CAAA;AAC/D,MAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,IAAA,CAAK,UAAU,IAAA,CAAK,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IACxD;AAEA,IAAA,QAAQ,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA;AAAM,MAChC,KAAK,UAAA,EAAY;AACf,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,WAChC,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,QAAQ,KAAA,EAAO,QAAQ,CAAA,GAC/C,IAAA,CAAK,OAAO,OAAA,CAAQ,KAAA;AAExB,QAAA,MAAM,SAAA,CAAU,IAAA,CAAK,KAAA,EAAO,OAAA,EAAS,EAAE,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,EAAM,CAAA;AACpE,QAAA;AAAA,MACF;AAAA,MACA,KAAK,OAAA,EAAS;AACZ,QAAA,MAAM,EAAA,CAAG,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,IAAA,CAAK,KAAA,EAAO,EAAE,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAC9E,QAAA;AAAA,MACF;AAAA,MACA,KAAK,QAAA,EAAU;AACb,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,kBAAA,CAAmB,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAC,CAAA;AAC7E,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,iBAAA,EAAoB,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAE3E,QAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,EAAY;AAC/C,QAAA,MAAM,SAAA,CAAU,IAAA,CAAK,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,EAAG,EAAE,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAErF,QAAA;AAAA,MACF;AAAA,MACA,KAAK,UAAA,EAAY;AACf,QAAA,MAAM,YAAA,GAAe,QAAQ,GAAA,CAAI,4BAAA;AACjC,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,MAAM,IAAI,KAAA;AAAA,YACR;AAAA,WACF;AAAA,QACF;AAEA,QAAA,MAAM,OAAA,GAAU,KAAK,YAAA,EAAc,CAAA,EAAG,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,IAAA,CAAM,CAAA;AAGpE,QAAA,MAAM,UAAA,GAAa,iBAAiB,OAAO,CAAA;AAC3C,QAAA,MAAM,oBAAoB,UAAA,EAAY,OAAA,CAAQ,IAAA,CAAK,KAAK,GAAG,KAAK,CAAA;AAChE,QAAA;AAAA,MACF;AAAA;AACF,EACF;AAAA,EAEA,OAAO,MAAA,CAAO,YAAY,CAAA,GAAmB;AAC3C,IAAA,IAAI,KAAK,SAAA,EAAW;AACpB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AAEjB,IAAA,IAAI;AACF,MAAA,IAAI,KAAK,QAAA,EAAU;AAEjB,QAAA,MAAM,EAAA,CAAG,KAAK,QAAA,EAAU,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,MAC1D,CAAA,MAAO;AAEL,QAAA,MAAM,GAAG,IAAA,CAAK,KAAA,EAAO,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,MACtC;AAAA,IACF,SAAS,KAAA,EAAO;AAId,MAAA,OAAA,CAAQ,IAAA,CAAK,yCAAyC,KAAK,CAAA;AAAA,IAC7D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAA,GAAsB;AAC1B,IAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,6BAAA;AAC7B,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,IACjF;AAGA,IAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,IAAA,CAAK,KAAK,CAAA;AAGvC,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,mBAAA,IAAuB,MAAA,EAAO;AAC3D,IAAA,MAAM,kBAAkB,IAAA,CAAK,QAAA,EAAU,kBAAkB,IAAA,CAAK,GAAA,EAAK,CAAA,IAAA,CAAM,CAAA;AAEzE,IAAA,IAAI;AACF,MAAA,MAAU,GAAA,CAAA,MAAA;AAAA,QACR;AAAA,UACE,IAAA,EAAM,IAAA;AAAA,UACN,IAAA,EAAM,eAAA;AAAA,UACN,GAAA,EAAK,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA;AAAA,UACvB,OAAA,EAAS;AAAA;AAAA,SACX;AAAA,QACA,CAAC,QAAA,CAAS,IAAA,CAAK,KAAK,CAAC;AAAA,OACvB;AAGA,MAAA,MAAM,WAAA,GAAc,iBAAiB,eAAe,CAAA;AACpD,MAAA,MAAM,IAAA,GAAO,WAAW,QAAQ,CAAA;AAEhC,MAAA,WAAA,MAAiB,SAAS,WAAA,EAAa;AACrC,QAAA,IAAA,CAAK,OAAO,KAAe,CAAA;AAAA,MAC7B;AAEA,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAGnC,MAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,QAAA,EAAU,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAC1D,MAAA,MAAM,MAAA,CAAO,iBAAiB,gBAAgB,CAAA;AAE9C,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA;AAAA,QACvB,IAAA,EAAM,UAAU,IAAA,GAAO,GAAA;AAAA;AAAA,QACvB,MAAM,SAAA,CAAU;AAAA,OAClB;AAGA,MAAA,OAAO;AAAA,QACL,IAAA,EAAM,OAAA;AAAA,QACN,OAAA,EAAS;AAAA,UACP,IAAA,EAAM,UAAA;AAAA,UACN,CAAC,kBAAA,CAAmB,QAAQ,GAAG,IAAA;AAAA,UAC/B,IAAA,EAAM,SAAA;AAAA,UACN,IAAA,EAAM,MAAMD,SAAAA,CAAU,IAAA,CAAK,YAAY;AAAA;AACzC,OACF;AAAA,IACF,CAAA,SAAE;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,EAAA,CAAG,eAAA,EAAiB,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,MAC3C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAa,MAAA,CAAO,IAAA,EAAc,OAAA,GAAU,IAAI,IAAA,EAA0C;AACxF,IAAA,MAAM,MAAA,GAAsB;AAAA,MAC1B,IAAA,EAAM;AAAA,QACJ,IAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACR;AAAA,MACA,OAAA,EAAS;AAAA,QACP,IAAA,EAAM,UAAA;AAAA,QACN,KAAA,EAAO;AAAA;AACT,KACF;AAEA,IAAA,MAAM,gBAAA,GAAmB,IAAI,iBAAA,CAAiB,MAAM,CAAA;AAEpD,IAAA,IAAI;AACF,MAAA,MAAM,iBAAiB,KAAA,EAAM;AAAA,IAC/B,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,gBAAA,CAAiB,MAAA,CAAO,YAAY,CAAA,EAAE;AAC5C,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,gBAAA;AAAA,EACT;AAAA,EAEA,aAAa,IAAA,CAAK,IAAA,EAAmB,MAAA,EAAwD;AAC3F,IAAA,MAAM,gBAAA,GAAmB,IAAI,iBAAA,CAAiB,IAAA,EAAM,MAAM,CAAA;AAE1D,IAAA,IAAI;AACF,MAAA,MAAM,iBAAiB,KAAA,EAAM;AAAA,IAC/B,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,gBAAA,CAAiB,MAAA,CAAO,YAAY,CAAA,EAAE;AAC5C,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,gBAAA;AAAA,EACT;AACF;AAYO,IAAM,kBAAA,GAAN,MAAM,mBAAA,CAA8C;AAAA,EASzD,WAAA,CACW,QACA,MAAA,EACT;AAFS,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAET,IAAA,IAAA,CAAK,YAAA,GAAe;AAAA,MAClB,KAAA,EAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,KACjD;AAAA,EACF;AAAA,EAfQ,QAAA;AAAA,EACA,KAAA;AAAA,EACA,SAAA,GAAY,KAAA;AAAA,EAEH,eAAkC,EAAC;AAAA,EAE3C,YAAA;AAAA,EAWT,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,MAAc,KAAA,GAAuB;AACnC,IAAA,IAAI,KAAK,MAAA,EAAQ;AAEf,MAAA,IAAA,CAAK,KAAA,GAAQ,KAAK,IAAA,CAAK,MAAA,CAAO,MAAM,IAAA,CAAK,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IAC3D,CAAA,MAAO;AAGL,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,mBAAA,IAAuB,MAAA,EAAO;AAC3D,MAAA,IAAA,CAAK,WAAW,MAAM,OAAA,CAAQ,IAAA,CAAK,QAAA,EAAU,mBAAmB,CAAC,CAAA;AACjE,MAAA,IAAA,CAAK,QAAQ,IAAA,CAAK,IAAA,CAAK,UAAU,IAAA,CAAK,MAAA,CAAO,KAAK,IAAI,CAAA;AAAA,IACxD;AAEA,IAAA,QAAQ,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA;AAAM,MAChC,KAAK,UAAA,EAAY;AAEf,QAAA,MAAM,KAAA,CAAM,KAAK,KAAA,EAAO,EAAE,MAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,EAAM,CAAA;AAEvD,QAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO;AAC5C,UAAA,MAAM,gBAAA,GAAmB,MAAM,gBAAA,CAAiB,IAAA,CAAK,MAAM,IAAI,CAAA;AAC/D,UAAA,IAAA,CAAK,YAAA,CAAa,KAAK,gBAAgB,CAAA;AAAA,QACzC;AAEA,QAAA,KAAA,MAAW,SAAA,IAAa,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,OAAA,EAAS;AACnD,UAAA,MAAM,kBAAA,GAAqB,MAAM,mBAAA,CAAmB,IAAA,CAAK,WAAW,IAAI,CAAA;AACxE,UAAA,IAAA,CAAK,YAAA,CAAa,KAAK,kBAAkB,CAAA;AAAA,QAC3C;AAEA,QAAA;AAAA,MACF;AAAA,MACA,KAAK,OAAA,EAAS;AAEZ,QAAA,MAAM,WAAA,GAAc,iBAAA,CAAkB,IAAA,CAAK,MAAA,CAAO,QAAQ,IAAI,CAAA;AAE9D,QAAA,IAAI,WAAA,EAAa;AAEf,UAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,IAAA,CAAK,MAAA,CAAO,QAAQ,IAAI,CAAA;AAC5D,UAAA,MAAM,mBAAA,CAAoB,UAAA,EAAY,IAAA,CAAK,KAAA,EAAO,WAAW,CAAA;AAAA,QAC/D,CAAA,MAAO;AAEL,UAAA,MAAM,GAAG,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,KAAK,KAAA,EAAO;AAAA,YAC7C,SAAA,EAAW,IAAA;AAAA,YACX,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK;AAAA,WACxB,CAAA;AAAA,QACH;AAEA,QAAA;AAAA,MACF;AAAA,MACA,KAAK,QAAA,EAAU;AACb,QAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,kBAAA,CAAmB,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAC,CAAA;AAC7E,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,iBAAA,EAAoB,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAC3E,QAAA,IAAI,CAAC,QAAA,CAAS,IAAA,EAAM,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAG5D,QAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,kBAAA,CAAmB,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAC,CAAA;AACpE,QAAA,MAAM,WAAA,GAAc,iBAAA;AAAA,UAClB,GAAA,CAAI,QAAA;AAAA,UACJ,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK;AAAA,SAC1C;AAEA,QAAA,IAAI,CAAC,WAAA,EAAa;AAChB,UAAA,MAAM,IAAI,MAAM,qEAAqE,CAAA;AAAA,QACvF;AAEA,QAAA,IAAI,CAAC,SAAS,IAAA,EAAM;AAClB,UAAA,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAAA,QAC1C;AAEA,QAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,CAAK,SAAA,EAAU;AACvC,QAAA,MAAM,MAAA,GAAS,IAAI,QAAA,CAAS;AAAA,UAC1B,MAAM,IAAA,GAAO;AACX,YAAA,IAAI;AACF,cAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,cAAA,IAAI,IAAA,EAAM;AACR,gBAAA,IAAA,CAAK,KAAK,IAAI,CAAA;AAAA,cAChB,CAAA,MAAO;AACL,gBAAA,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,cAC9B;AAAA,YACF,SAAS,KAAA,EAAO;AACd,cAAA,IAAA,CAAK,OAAA,CAAQ,iBAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,YACxE;AAAA,UACF;AAAA,SACD,CAAA;AAED,QAAA,MAAM,mBAAA,CAAoB,MAAA,EAAQ,IAAA,CAAK,KAAA,EAAO,WAAW,CAAA;AAEzD,QAAA;AAAA,MACF;AAAA,MACA,KAAK,UAAA,EAAY;AACf,QAAA,MAAM,YAAA,GAAe,QAAQ,GAAA,CAAI,4BAAA;AAEjC,QAAA,IAAI,CAAC,YAAA,EAAc;AACjB,UAAA,MAAM,IAAI,KAAA;AAAA,YACR;AAAA,WACF;AAAA,QACF;AAEA,QAAA,MAAM,OAAA,GAAU,KAAK,YAAA,EAAc,CAAA,EAAG,KAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,IAAA,CAAM,CAAA;AAGpE,QAAA,MAAM,UAAA,GAAa,iBAAiB,OAAO,CAAA;AAC3C,QAAA,MAAM,oBAAoB,UAAA,EAAY,OAAA,CAAQ,IAAA,CAAK,KAAK,GAAG,KAAK,CAAA;AAEhE,QAAA;AAAA,MACF;AAAA;AACF,EACF;AAAA,EAEA,OAAO,MAAA,CAAO,YAAY,CAAA,GAAmB;AAC3C,IAAA,IAAI,KAAK,SAAA,EAAW;AACpB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AAEjB,IAAA,IAAI;AACF,MAAA,IAAI,KAAK,QAAA,EAAU;AAEjB,QAAA,MAAM,EAAA,CAAG,KAAK,QAAA,EAAU,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,MAC1D,CAAA,MAAO;AAEL,QAAA,MAAM,EAAA,CAAG,KAAK,KAAA,EAAO,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,MACvD;AAAA,IACF,SAAS,KAAA,EAAO;AAId,MAAA,OAAA,CAAQ,IAAA,CAAK,2CAA2C,KAAK,CAAA;AAAA,IAC/D;AAGA,IAAA,KAAA,MAAW,UAAA,IAAc,KAAK,YAAA,EAAc;AAC1C,MAAA,MAAM,UAAA,CAAW,MAAA,CAAO,YAAY,CAAA,EAAE;AAAA,IACxC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,IAAA,CAAK,EAAE,SAAS,OAAA,EAAQ,GAAuB,EAAC,EAA2B;AAC/E,IAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,6BAAA;AAC7B,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,IACjF;AAGA,IAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,IAAA,CAAK,KAAK,CAAA;AAGzC,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,mBAAA,IAAuB,MAAA,EAAO;AAC3D,IAAA,MAAM,kBAAkB,IAAA,CAAK,QAAA,EAAU,kBAAkB,IAAA,CAAK,GAAA,EAAK,CAAA,IAAA,CAAM,CAAA;AAEzE,IAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AAEpB,IAAA,IAAI;AACF,MAAA,MAAU,GAAA,CAAA,MAAA;AAAA,QACR;AAAA,UACE,IAAA,EAAM,IAAA;AAAA,UACN,IAAA,EAAM,eAAA;AAAA,UACN,GAAA,EAAK,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA;AAAA,UAEvB,OAAO,IAAA,EAAM;AAEX,YAAA,IAAA,GAAO,KAAK,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AAG7C,YAAA,KAAA,MAAW,OAAA,IAAW,OAAA,IAAW,EAAC,EAAG;AACnC,cAAA,IAAI,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA,EAAG;AAC5B,gBAAA,OAAO,KAAA;AAAA,cACT;AAAA,YACF;AAGA,YAAA,KAAA,MAAW,OAAA,IAAW,OAAA,IAAW,EAAC,EAAG;AACnC,cAAA,IAAI,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA,EAAG;AAC5B,gBAAA,OAAO,IAAA;AAAA,cACT;AAAA,YACF;AAGA,YAAA,OAAO,CAAC,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,CAAA;AAAA,UACxC,CAAA;AAAA;AAAA,UAGA,QAAA,EAAU,IAAA;AAAA,UACV,OAAA,EAAS;AAAA,SACX;AAAA,QACA,CAAC,QAAA,CAAS,IAAA,CAAK,KAAK,CAAC;AAAA,OACvB;AAGA,MAAA,MAAM,WAAA,GAAc,iBAAiB,eAAe,CAAA;AACpD,MAAA,MAAM,IAAA,GAAO,WAAW,QAAQ,CAAA;AAEhC,MAAA,WAAA,MAAiB,SAAS,WAAA,EAAa;AACrC,QAAA,IAAA,CAAK,OAAO,KAAe,CAAA;AAAA,MAC7B;AAEA,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA;AAGnC,MAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,QAAA,EAAU,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAC1D,MAAA,MAAM,MAAA,CAAO,iBAAiB,gBAAgB,CAAA;AAE9C,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA;AAAA,QACvB,IAAA,EAAM,YAAY,IAAA,GAAO;AAAA;AAAA,OAC3B;AAGA,MAAA,OAAO;AAAA,QACL,IAAA,EAAM,OAAA;AAAA,QACN,OAAA,EAAS;AAAA,UACP,CAAC,kBAAA,CAAmB,QAAQ,GAAG,IAAA;AAAA,UAC/B,IAAA,EAAM,UAAA;AAAA,UACN,IAAA,EAAM,SAAA;AAAA,UACN,IAAA,EAAM,MAAMA,SAAAA,CAAU,IAAA,CAAK,YAAY;AAAA;AACzC,OACF;AAAA,IACF,CAAA,SAAE;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,EAAA,CAAG,eAAA,EAAiB,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,MAC3C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,aAAa,MAAA,CACX,IAAA,EACA,IAAA,EACA,MAAA,EAC6B;AAC7B,IAAA,MAAM,MAAA,GAAwB;AAAA,MAC5B,IAAA,EAAM;AAAA,QACJ,IAAA;AAAA,QACA;AAAA,OACF;AAAA,MACA,OAAA,EAAS;AAAA,QACP,IAAA,EAAM,UAAA;AAAA,QACN,OAAO,EAAC;AAAA,QACR,SAAS;AAAC;AACZ,KACF;AAEA,IAAA,MAAM,kBAAA,GAAqB,IAAI,mBAAA,CAAmB,MAAA,EAAQ,MAAM,CAAA;AAEhE,IAAA,IAAI;AACF,MAAA,MAAM,mBAAmB,KAAA,EAAM;AAAA,IACjC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,kBAAA,CAAmB,MAAA,CAAO,YAAY,CAAA,EAAE;AAC9C,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,kBAAA;AAAA,EACT;AAAA,EAEA,aAAa,IAAA,CACX,MAAA,EACA,MAAA,EAC6B;AAC7B,IAAA,MAAM,kBAAA,GAAqB,IAAI,mBAAA,CAAmB,MAAA,EAAQ,MAAM,CAAA;AAEhE,IAAA,IAAI;AACF,MAAA,MAAM,mBAAmB,KAAA,EAAM;AAAA,IACjC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,kBAAA,CAAmB,MAAA,CAAO,YAAY,CAAA,EAAE;AAC9C,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,kBAAA;AAAA,EACT;AACF;AASA,eAAsB,cAAc,QAAA,EAA+C;AACjF,EAAA,IAAI,QAAA,CAAS,WAAA,KAAgB,MAAA,IAAU,QAAA,CAAS,gBAAgB,OAAA,EAAS;AACvE,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,sBAAA,EAAyB,SAAS,WAAW,CAAA,oCAAA;AAAA,KAC/C;AAAA,EACF;AAEA,EAAA,MAAM,GAAA,GAAM,mBAAmB,QAAQ,CAAA;AACvC,EAAA,MAAM,WAAW,MAAM,KAAA,CAAM,KAAK,EAAE,MAAA,EAAQ,QAAQ,CAAA;AAEpD,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,aAAA,GAAgB,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAC3D,EAAA,IAAI,CAAC,aAAA,EAAe;AAClB,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACpE;AAEA,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,aAAA,EAAe,EAAE,CAAA;AACvC,EAAA,IAAI,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8BAAA,EAAiC,aAAa,CAAA,CAAE,CAAA;AAAA,EAClE;AAEA,EAAA,OAAO,IAAA;AACT;AAKO,SAAS,kBAAkB,QAAA,EAAmC;AACnE,EAAA,MAAM,cAAA,GAAiB,gBAAgB,QAAQ,CAAA;AAE/C,EAAA,OAAO,cAAA,CAAe,QAAA,GAAW,QAAA,CAAS,cAAA,CAAe,QAAQ,CAAA,GAAI,EAAA;AACvE;AC/sBO,SAAS,gBAAA,GAA2B;AACzC,EAAA,OAAO,UAAA,CAAW,KAAA,CAAM,WAAA,CAAY,EAAE,CAAC,CAAA,CAAE,QAAA;AAC3C;AAeO,SAAS,WAAA,CACd,SAAkB,KAAA,EACK;AACvB,EAAA,MAAM,KAAA,GAAQ,YAAY,EAAE,CAAA;AAE5B,EAAA,IAAI,WAAW,KAAA,EAAO;AACpB,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,WAAW,QAAA,EAAU;AACvB,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EAC7C;AAEA,EAAA,OAAO,WAAW,KAAK,CAAA;AACzB;;;ACxCE,IAAAa,YAAAA,GAAgB;AAAA,EAGd,KAAA,EAAS;AACX,CAAA;;;ACYF,eAAsB,kBACpB,WAAA,EAC+B;AAC/B,EAAA,MAAM,mBAAA,GAAsB,MAAMb,SAAAA,CAAU,WAAW,CAAA;AAEvD,EAAA,MAAM,OAAA,GAAU,CAAC,KAAA,EAAO,KAAA,EAAO,MAAM,iCAAiC,CAAA;AAGtE,EAAA,MAAM,QAAA,GAAW,mBAAA,CAAoB,SAAA,CAAU,CAAC,CAAA;AAEhD,EAAA,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAM,QAAA,CAAS,IAAA,CAAK,UAAU,CAAA;AAE3C,EAAA,IAAI,oBAAoB,OAAA,EAAS;AAC/B,IAAA,OAAA,CAAQ,IAAA,CAAK,MAAM,cAAc,CAAA;AAAA,EACnC;AAEA,EAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,mBAAA,CAAoB,IAAI,IAAI,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAE,CAAA;AAE1E,EAAA,IAAI,oBAAoB,QAAA,EAAU;AAChC,IAAA,OAAA,CAAQ,OAAA,CAAQ,SAAA,EAAW,IAAA,EAAM,WAAW,CAAA;AAAA,EAC9C;AAEA,EAAA,OAAOC,MAAAA,CAAO;AAAA,IACZ,IAAA,EAAM,KAAA;AAAA,IAEN,IAAA,EAAM;AAAA,MACJ,KAAA,EAAO,OAAA;AAAA,MACP,WAAA,EAAa,gCAAA;AAAA,MACb,IAAA,EAAM;AAAA,KACR;AAAA,IAEA,IAAA,EAAM;AAAA,MACJ,OAAcY,YAAAA,CAAgB,KAAA;AAAA,MAC9B,OAAA;AAAA,MAEA,OAAO,YAAA,CAAa;AAAA,QAClB,WAAA,EAAa,mBAAA,CAAoB,QAAA,GAC7B,cAAA,CAAe,UAAA,EAAY,mBAAA,CAAoB,QAAA,EAAU,EAAE,QAAA,EAAU,IAAA,EAAM,CAAA,GAC3E,MAAA;AAAA,QAEJ,cAAA,EAAgB,oBAAoB,OAAA,EAAS,UAAA,GACzC,eAAe,aAAA,EAAe,mBAAA,CAAoB,QAAQ,UAAA,EAAY;AAAA,UACpE,QAAA,EAAU,IAAA;AAAA,UACV,IAAA,EAAM;AAAA,SACP,CAAA,GACD,MAAA;AAAA,QAEJ,cAAA,EAAgB,cAAA;AAAA,UACd,aAAA;AAAA,UACA,GAAG,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA,EAAI,oBAAoB,OAAO,CAAA,CAAA;AAAA,UAC9D,EAAE,MAAM,GAAA;AAAM;AAChB,OACD;AAAA;AACH,GACD,CAAA;AACH;AAQO,SAAS,qBAAA,GAAwC;AACtD,EAAA,MAAM,IAAA,GAAOC,cAAY,EAAE,CAAA;AAE3B,EAAA,OAAO,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,CAAE,UAAU,CAAA;AACxC;AAQO,SAAS,uBAAuB,gBAAA,EAAsD;AAC3F,EAAA,OAAOb,MAAAA,CAAO,gBAAgB,CAAA,CAAE,KAAA,CAAM,CAAAc,iBAAAA,KAAoB;AACxD,IAAA,MAAM,gBAAA,GAAmB,aAAA,CAAc,MAAA,CAAOA,iBAAgB,CAAA;AAG9D,IAAA,MAAM,OAAA,GAAU,gBAAA,CAAiB,IAAA,CAAK,CAAC,EAAE,OAAA,CAAQ,OAAA;AAEjD,IAAA,MAAM,EAAE,aAAa,SAAA,EAAU,GAAI,QAAQ,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAE/D,IAAA,OAAOd,MAAAA,CAAO;AAAA,MACZ,IAAA,EAAM,SAAA;AAAA,MACN,WAAA;AAAA,MACA,SAAA;AAAA,MACA,UAAA,EAAY,OAAOc,iBAAgB;AAAA,KACpC,CAAA;AAAA,EACH,CAAC,CAAA;AACH;AAgHA,eAAsB,mBAAmB,OAAA,EAA+C;AACtF,EAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB,OAAO,CAAA;AAC/C,EAAA,MAAM,GAAA,GAAM,MAAMf,SAAAA,CAAU,MAAA,CAAO,GAAG,CAAA;AAEtC,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,QAAA,EAAU,GAAA,GAAM,MAAM,iBAAA,CAAkB,GAAG,CAAA,GAAI;AAAA,GACjD;AACF;AASA,eAAsB,kBAAA,CAAmB;AAAA,EACvC,IAAA;AAAA,EACA,gBAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAU,EAAE,OAAA,EAAS,MAAM,IAAA,EAAM,EAAA,EAAI,MAAM,MAAA,EAAO;AAAA,EAClD,WAAA;AAAA,EACA,aAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF,CAAA,EAAkD;AAChD,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,MAAM,gEAAgE,CAAA;AAAA,EAClF;AAEA,EAAA,gBAAA,KAAqB,IAAA;AACrB,EAAA,UAAA,KAAe,OAAA,CAAQ,OAAA;AACvB,EAAA,WAAA,KAAgB,CAAC,UAAA;AAEjB,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAM,OAAA,CAAQ,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,KAAA,CAAA,EAAS;AAAA,MACpC,IAAA,EAAM,OAAA;AAAA,MACN,QAAQ,CAAA,UAAA,EAAa,kBAAA,CAAmB,SAAA,CAAU,CAAC,CAAC,CAAC,CAAA,CAAA;AAAA,MACrD,SAAS,WAAA,IAAe,GAAA;AAAA,MACxB,UAAU,YAAA,IAAgB,CAAA;AAAA,MAC1B,QAAA,EAAU,CAAC,IAAA,CAAK,GAAA,EAAK;AAAA,KACtB,EAAE,IAAA,EAAK;AAAA,EACV;AAEA,EAAA,IAAI,CAAC,QAAQ,OAAA,EAAS;AACpB,IAAA,OAAOC,MAAAA,CAAO;AAAA,MACZ,QAAA,EAAU,IAAA;AAAA,MACV;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,UAAU,OAAA,EAAS,IAAA,IAAQ,kBAAA,CAAmB,SAAA,CAAU,CAAC,CAAC,CAAA;AAEhE,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAM,OAAA,CAAQ,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,IAAA,CAAA,EAAQ;AAAA,MACnC,IAAA,EAAM,OAAA;AAAA,MACN,MAAA,EAAQ,CAAA,OAAA,EAAU,OAAO,CAAA,CAAA,EAAI,QAAQ,IAAI,CAAA,CAAA;AAAA,MACzC,SAAS,eAAA,IAAmB,GAAA;AAAA,MAC5B,UAAU,gBAAA,IAAoB,CAAA;AAAA,MAC9B,QAAA,EAAU,CAAC,IAAA,CAAK,GAAA,EAAK;AAAA,KACtB,EAAE,IAAA,EAAK;AAAA,EACV;AAEA,EAAA,MAAM,aAAaA,MAAAA,CAAO;AAAA,IACxB,IAAA,EAAM,OAAA;AAAA,IACN,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,QAAA,EAAU,WAAA;AAAA,IACV,UAAA,EAAY,UAAA,GAAaA,MAAAA,CAAO,UAAU,EAAE,UAAA,GAAa,aAAA;AAAA,IACzD,cAAA,EAAgB;AAAA,GACjB,CAAA;AAED,EAAA,MAAM,cAAA,GAAiB,IAAIe,MAAAA,CAAO,OAAA,CAAQ,UAAA,EAAY;AAAA,IACpD,UAAA;AAAA,IACA,MAAA,EAAQ,UAAA;AAAA,IACR,QAAA,EAAU,CAAC,IAAA,CAAK,GAAA,EAAK;AAAA,GACtB,CAAA;AAED,EAAA,MAAM,aAAA,GAAgB,IAAIA,MAAAA,CAAO,OAAA,CAAQ,UAAA,EAAY;AAAA,IACnD,UAAA;AAAA,IACA,MAAA,EAAQ,uCAAA;AAAA,IACR,QAAA,EAAU,CAAC,IAAA,CAAK,GAAA,EAAK;AAAA,GACtB,CAAA;AAED,EAAA,OAAOf,MAAAA,CAAO;AAAA,IACZ,SAAA;AAAA,IACA,UAAU,cAAA,CAAe,MAAA,CAAO,MAAM,CAAA,CAAA,KAAK,CAAA,CAAE,MAAM,CAAA;AAAA,IACnD,GAAA,EAAK;AAAA,MACH,WAAW,CAAC,cAAA,CAAe,SAAS,OAAA,CAAQ,IAAA,IAAQ,EAAE,CAAC,CAAA;AAAA,MACvD,IAAA,EAAM,QAAQ,IAAA,IAAQ,MAAA;AAAA,MACtB,SAAS,aAAA,CAAc,MAAA,CAAO,MAAM,CAAA,CAAA,KAAK,CAAA,CAAE,MAAM,CAAA;AAAA,MACjD,UAAU,UAAA,CAAW,QAAA;AAAA,MACrB,SAAS,UAAA,GACL,UAAA,GACA,aAAA,GACE,sBAAA,CAAuB,aAAa,CAAA,GACpC;AAAA;AACR,GACD,CAAA;AACH","file":"chunk-FHSPC2ZL.js","sourcesContent":["import type { ArrayPatchMode, network } from \"@highstate/library\"\nimport { type Input, toPromise } from \"@highstate/pulumi\"\nimport { uniqueBy } from \"remeda\"\n\n/**\n * The L3 or L4 endpoint for some service.\n *\n * The format is: `[protocol://]endpoint[:port]`\n */\nexport type InputL34Endpoint = network.L34Endpoint | string\n\n/**\n * The L3 endpoint for some service.\n */\nexport type InputL3Endpoint = network.L3Endpoint | string\n\n/**\n * The L4 endpoint for some service.\n */\nexport type InputL4Endpoint = network.L4Endpoint | string\n\n/**\n * The L7 endpoint for some service.\n *\n * The format is: `appProtocol://endpoint[:port][/resource]`\n */\nexport type InputL7Endpoint = network.L7Endpoint | string\n\n/**\n * Stringifies a L3 endpoint object into a string.\n *\n * @param l3Endpoint The L3 endpoint object to stringify.\n * @returns The string representation of the L3 endpoint.\n */\nexport function l3EndpointToString(l3Endpoint: network.L3Endpoint): string {\n  switch (l3Endpoint.type) {\n    case \"ipv4\":\n      return l3Endpoint.address\n    case \"ipv6\":\n      return l3Endpoint.address\n    case \"hostname\":\n      return l3Endpoint.hostname\n  }\n}\n\n/**\n * Stringifies a L4 endpoint object into a string.\n *\n * @param l4Endpoint The L4 endpoint object to stringify.\n * @returns The string representation of the L4 endpoint.\n */\nexport function l4EndpointToString(l4Endpoint: network.L4Endpoint): string {\n  if (l4Endpoint.type === \"ipv6\") {\n    return `[${l4Endpoint.address}]:${l4Endpoint.port}`\n  }\n\n  return `${l3EndpointToString(l4Endpoint)}:${l4Endpoint.port}`\n}\n\n/**\n * Stringifies a L4 endpoint object into a string with protocol.\n *\n * @param l4Endpoint The L4 endpoint object to stringify.\n * @returns The string representation of the L4 endpoint with protocol.\n */\nexport function l4EndpointWithProtocolToString(l4Endpoint: network.L4Endpoint): string {\n  const protocol = `${l4Endpoint.protocol}://`\n\n  return `${protocol}${l4EndpointToString(l4Endpoint)}`\n}\n\n/**\n * Stringifies a L7 endpoint object into a string.\n *\n * The format is: `appProtocol://endpoint[:port][/resource]`\n * @param l7Endpoint The L7 endpoint object to stringify.\n * @returns The string representation of the L7 endpoint.\n */\nexport function l7EndpointToString(l7Endpoint: network.L7Endpoint): string {\n  const protocol = `${l7Endpoint.appProtocol}://`\n\n  let endpoint = l4EndpointToString(l7Endpoint)\n\n  if (l7Endpoint.resource) {\n    endpoint += `/${l7Endpoint.resource}`\n  }\n\n  return `${protocol}${endpoint}`\n}\n\n/**\n * Stringifies a L3 or L4 endpoint object into a string.\n *\n * @param l34Endpoint The L3 or L4 endpoint object to stringify.\n * @returns The string representation of the L3 or L4 endpoint.\n */\nexport function l34EndpointToString(l34Endpoint: network.L34Endpoint): string {\n  if (l34Endpoint.port) {\n    return l4EndpointToString(l34Endpoint)\n  }\n\n  return l3EndpointToString(l34Endpoint)\n}\n\nconst L34_ENDPOINT_RE =\n  /^(?:(?<protocol>[a-z]+):\\/\\/)?(?:(?:\\[?(?<ipv6>[0-9A-Fa-f:]+)\\]?)|(?<ipv4>(?:\\d{1,3}\\.){3}\\d{1,3})|(?<hostname>[a-zA-Z0-9-*]+(?:\\.[a-zA-Z0-9-*]+)*))(?::(?<port>\\d{1,5}))?$/\n\nconst L7_ENDPOINT_RE =\n  /^(?<appProtocol>[a-z]+):\\/\\/(?:(?:\\[?(?<ipv6>[0-9A-Fa-f:]+)\\]?)|(?<ipv4>(?:\\d{1,3}\\.){3}\\d{1,3})|(?<hostname>[a-zA-Z0-9-*]+(?:\\.[a-zA-Z0-9-*]+)*))(?::(?<port>\\d{1,5}))?(?:\\/(?<resource>.*))?$/\n\n/**\n * Parses a L3 or L4 endpoint from a string.\n *\n * The format is `[protocol://]endpoint[:port]`.\n *\n * @param l34Endpoint The L3 or L4 endpoint string to parse.\n * @returns The parsed L3 or L4 endpoint object.\n */\nexport function parseL34Endpoint(l34Endpoint: InputL34Endpoint): network.L34Endpoint {\n  if (typeof l34Endpoint === \"object\") {\n    return l34Endpoint\n  }\n\n  const match = l34Endpoint.match(L34_ENDPOINT_RE)\n  if (!match) {\n    throw new Error(`Invalid L3/L4 endpoint: \"${l34Endpoint}\"`)\n  }\n\n  const { protocol, ipv6, ipv4, hostname, port } = match.groups!\n\n  if (protocol && protocol !== \"tcp\" && protocol !== \"udp\") {\n    throw new Error(`Invalid L4 endpoint protocol: \"${protocol}\"`)\n  }\n\n  let visibility: network.EndpointVisibility = \"public\"\n\n  if (ipv4 && IPV4_PRIVATE_REGEX.test(ipv4)) {\n    visibility = \"external\"\n  } else if (ipv6 && IPV6_PRIVATE_REGEX.test(ipv6)) {\n    visibility = \"external\"\n  }\n\n  const fallbackProtocol = port ? \"tcp\" : undefined\n\n  return {\n    type: ipv6 ? \"ipv6\" : ipv4 ? \"ipv4\" : \"hostname\",\n    visibility,\n    address: ipv6 || ipv4,\n    hostname: hostname,\n    port: port ? parseInt(port, 10) : undefined,\n    protocol: protocol ? (protocol as network.L4Protocol) : fallbackProtocol,\n  } as network.L34Endpoint\n}\n\n/**\n * Parses a L3 endpoint from a string.\n *\n * The same as `parseL34Endpoint`, but only for L3 endpoints and will throw an error if the endpoint contains a port.\n *\n * @param l3Endpoint The L3 endpoint string to parse.\n * @returns The parsed L3 endpoint object.\n */\nexport function parseL3Endpoint(l3Endpoint: InputL3Endpoint): network.L3Endpoint {\n  if (typeof l3Endpoint === \"object\") {\n    return l3Endpoint\n  }\n\n  const parsed = parseL34Endpoint(l3Endpoint)\n\n  if (parsed.port) {\n    throw new Error(`Port cannot be specified in L3 endpoint: \"${l3Endpoint}\"`)\n  }\n\n  return parsed\n}\n\n/**\n * Parses a L4 endpoint from a string.\n *\n * The same as `parseL34Endpoint`, but only for L4 endpoints and will throw an error if the endpoint does not contain a port.\n */\nexport function parseL4Endpoint(l4Endpoint: InputL4Endpoint): network.L4Endpoint {\n  if (typeof l4Endpoint === \"object\") {\n    return l4Endpoint\n  }\n\n  const parsed = parseL34Endpoint(l4Endpoint)\n\n  if (!parsed.port) {\n    throw new Error(`No port found in L4 endpoint: \"${l4Endpoint}\"`)\n  }\n\n  return parsed\n}\n\nconst IPV4_PRIVATE_REGEX =\n  /^(?:10|127)(?:\\.\\d{1,3}){3}$|^(?:172\\.1[6-9]|172\\.2[0-9]|172\\.3[0-1])(?:\\.\\d{1,3}){2}$|^(?:192\\.168)(?:\\.\\d{1,3}){2}$/\n\nconst IPV6_PRIVATE_REGEX =\n  /^(?:fc|fd)(?:[0-9a-f]{2}){0,2}::(?:[0-9a-f]{1,4}:){7}[0-9a-f]{1,4}$|^::(?:ffff:(?:10|127)(?:\\.\\d{1,3}){3}|(?:172\\.1[6-9]|172\\.2[0-9]|172\\.3[0-1])(?:\\.\\d{1,3}){2}|(?:192\\.168)(?:\\.\\d{1,3}){2})$/\n\n/**\n * Helper function to get the input L3 endpoint from the raw endpoint or input endpoint.\n *\n * If neither is provided, an error is thrown.\n *\n * @param rawEndpoint The raw endpoint string to parse.\n * @param inputEndpoint The input endpoint object to use if the raw endpoint is not provided.\n * @returns The parsed L3 endpoint object.\n */\nexport async function requireInputL3Endpoint(\n  rawEndpoint: string | undefined,\n  inputEndpoint: Input<network.L3Endpoint> | undefined,\n): Promise<network.L3Endpoint> {\n  if (rawEndpoint) {\n    return parseL3Endpoint(rawEndpoint)\n  }\n\n  if (inputEndpoint) {\n    return toPromise(inputEndpoint)\n  }\n\n  throw new Error(\"No endpoint provided\")\n}\n\n/**\n * Helper function to get the input L4 endpoint from the raw endpoint or input endpoint.\n *\n * If neither is provided, an error is thrown.\n *\n * @param rawEndpoint The raw endpoint string to parse.\n * @param inputEndpoint The input endpoint object to use if the raw endpoint is not provided.\n * @returns The parsed L4 endpoint object.\n */\nexport async function requireInputL4Endpoint(\n  rawEndpoint: string | undefined,\n  inputEndpoint: Input<network.L4Endpoint> | undefined,\n): Promise<network.L4Endpoint> {\n  if (rawEndpoint) {\n    return parseL4Endpoint(rawEndpoint)\n  }\n\n  if (inputEndpoint) {\n    return toPromise(inputEndpoint)\n  }\n\n  throw new Error(\"No endpoint provided\")\n}\n\n/**\n * Converts L3 endpoint to L4 endpoint by adding a port and protocol.\n *\n * @param l3Endpoint The L3 endpoint to convert.\n * @param port The port to add to the L3 endpoint.\n * @param protocol The protocol to add to the L3 endpoint. Defaults to \"tcp\".\n * @returns The L4 endpoint with the port and protocol added.\n */\nexport function l3EndpointToL4(\n  l3Endpoint: InputL3Endpoint,\n  port: number,\n  protocol: network.L4Protocol = \"tcp\",\n): network.L4Endpoint {\n  return {\n    ...parseL3Endpoint(l3Endpoint),\n    port,\n    protocol,\n  }\n}\n\n/**\n * Filters the endpoints based on the given filter.\n *\n * @param endpoints The list of endpoints to filter.\n * @param filter The filter to apply. If not provided, the endpoints will be filtered by the most accessible type: `public` > `external` > `internal`.\n * @param types The list of endpoint types to filter by. If provided, only endpoints of these types will be returned.\n *\n * @returns The filtered list of endpoints.\n */\nexport function filterEndpoints<\n  TEndpoint extends network.L34Endpoint,\n  TType extends network.L34Endpoint[\"type\"],\n>(\n  endpoints: TEndpoint[],\n  filter?: network.EndpointFilter,\n  types?: TType[],\n): (TEndpoint & { type: TType })[] {\n  if (filter?.length) {\n    endpoints = endpoints.filter(endpoint => filter.includes(endpoint.visibility))\n  } else if (endpoints.some(endpoint => endpoint.visibility === \"public\")) {\n    endpoints = endpoints.filter(endpoint => endpoint.visibility === \"public\")\n  } else if (endpoints.some(endpoint => endpoint.visibility === \"external\")) {\n    endpoints = endpoints.filter(endpoint => endpoint.visibility === \"external\")\n  }\n\n  if (types?.length) {\n    endpoints = endpoints.filter(endpoint => types.includes(endpoint.type as TType))\n  }\n\n  return endpoints as (TEndpoint & { type: TType })[]\n}\n\n/**\n * Converts a L3 endpoint to CIDR notation.\n *\n * If the endpoint is a hostname, an error is thrown.\n *\n * @param l3Endpoint The L3 endpoint to convert.\n * @returns The CIDR notation of the L3 endpoint.\n */\nexport function l3EndpointToCidr(l3Endpoint: network.L3Endpoint): string {\n  switch (l3Endpoint.type) {\n    case \"ipv4\":\n      return `${l3Endpoint.address}/32`\n    case \"ipv6\":\n      return `${l3Endpoint.address}/128`\n    case \"hostname\":\n      throw new Error(\"Cannot convert hostname to CIDR\")\n  }\n}\n\nconst udpAppProtocols = [\"dns\", \"dhcp\"]\n\n/**\n * Parses a L7 endpoint from a string.\n *\n * The format is: `appProtocol://endpoint[:port][/resource]`\n *\n * @param l7Endpoint The L7 endpoint string to parse.\n * @returns The parsed L7 endpoint object.\n */\nexport function parseL7Endpoint(l7Endpoint: InputL7Endpoint): network.L7Endpoint {\n  if (typeof l7Endpoint === \"object\") {\n    return l7Endpoint\n  }\n\n  const match = l7Endpoint.match(L7_ENDPOINT_RE)\n  if (!match) {\n    throw new Error(`Invalid L7 endpoint: \"${l7Endpoint}\"`)\n  }\n\n  const { appProtocol, ipv6, ipv4, hostname, port, resource } = match.groups!\n\n  let visibility: network.EndpointVisibility = \"public\"\n\n  if (ipv4 && IPV4_PRIVATE_REGEX.test(ipv4)) {\n    visibility = \"external\"\n  } else if (ipv6 && IPV6_PRIVATE_REGEX.test(ipv6)) {\n    visibility = \"external\"\n  }\n\n  return {\n    type: ipv6 ? \"ipv6\" : ipv4 ? \"ipv4\" : \"hostname\",\n    visibility,\n    address: ipv6 || ipv4,\n    hostname: hostname,\n\n    // Default port for L7 endpoints (TODO: add more specific defaults for common protocols)\n    port: port ? parseInt(port, 10) : 443,\n\n    // L7 endpoints typically use TCP, but can also use UDP for specific protocols\n    protocol: udpAppProtocols.includes(appProtocol) ? \"udp\" : \"tcp\",\n\n    appProtocol,\n    resource: resource || \"\",\n  } as network.L7Endpoint\n}\n\n/**\n * Updates the endpoints based on the given mode.\n *\n * @param currentEndpoints The current endpoints to update.\n * @param endpoints The new endpoints to add in string format.\n * @param inputEndpoints The input endpoints to add in object format.\n * @param mode The mode to use when updating the endpoints. Can be \"replace\" or \"prepend\". Defaults to \"prepend\".\n * @returns The updated list of endpoints with duplicates removed.\n */\nexport async function updateEndpoints<TEndpoints extends network.L34Endpoint>(\n  currentEndpoints: Input<TEndpoints[]>,\n  endpoints: string[] | undefined,\n  inputEndpoints: Input<TEndpoints[]> | undefined,\n  mode: ArrayPatchMode = \"prepend\",\n): Promise<TEndpoints[]> {\n  const resolvedCurrentEndpoints = await toPromise(currentEndpoints)\n  const newEndpoints = await parseEndpoints(endpoints, inputEndpoints)\n\n  if (mode === \"replace\") {\n    return newEndpoints as TEndpoints[]\n  }\n\n  return uniqueBy(\n    [...newEndpoints, ...resolvedCurrentEndpoints],\n    l34EndpointToString,\n  ) as TEndpoints[]\n}\n\n/**\n * Parses a list of endpoints from strings and input objects.\n *\n * @param endpoints The list of endpoint strings to parse.\n * @param inputEndpoints The list of input endpoint objects to use.\n * @returns The parsed list of endpoint objects with duplicates removed.\n */\nexport async function parseEndpoints<TEndpoints extends network.L34Endpoint>(\n  endpoints: string[] | undefined,\n  inputEndpoints: Input<TEndpoints[]> | undefined,\n): Promise<TEndpoints[]> {\n  const resolvedInputEndpoints = await toPromise(inputEndpoints)\n\n  return uniqueBy(\n    [...(endpoints?.map(parseL34Endpoint) ?? []), ...(resolvedInputEndpoints ?? [])],\n    l34EndpointToString,\n  ) as TEndpoints[]\n}\n","import type { common, ssh } from \"@highstate/library\"\nimport { homedir } from \"node:os\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type InputOrArray,\n  interpolate,\n  type Output,\n  output,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { sha256 } from \"@noble/hashes/sha2\"\nimport { local, remote, type types } from \"@pulumi/command\"\nimport { flat } from \"remeda\"\nimport { l3EndpointToString } from \"./network\"\n\n/**\n * Creates a connection object for the given SSH credentials.\n *\n * @param ssh The SSH credentials.\n * @returns An output connection object for Pulumi remote commands.\n */\nexport function getServerConnection(\n  ssh: Input<ssh.Connection>,\n): Output<types.input.remote.ConnectionArgs> {\n  return output(ssh).apply(ssh => ({\n    host: l3EndpointToString(ssh.endpoints[0]),\n    port: ssh.endpoints[0].port,\n    user: ssh.user,\n    password: ssh.password,\n    privateKey: ssh.keyPair?.privateKey,\n    dialErrorLimit: 3,\n    hostKey: ssh.hostKey,\n  }))\n}\n\nexport type CommandHost = \"local\" | Input<common.Server>\nexport type CommandRunMode = \"auto\" | \"prefer-host\"\n\nexport type CommandArgs = {\n  /**\n   * The host to run the command on.\n   *\n   * Can be \"local\" for local execution or a server object for remote execution.\n   */\n  host: CommandHost\n\n  /**\n   * The command to run when the resource is created.\n   *\n   * If an array is provided, it will be joined with spaces.\n   */\n  create: InputOrArray<string>\n\n  /**\n   * The command to run when the resource is updated or one of the triggers changes.\n   *\n   * If not set, the `create` command will be used.\n   */\n  update?: InputOrArray<string>\n\n  /**\n   * The command to run when the resource is deleted.\n   */\n  delete?: InputOrArray<string>\n\n  /**\n   * The stdin content to pass to the command.\n   */\n  stdin?: Input<string>\n\n  /**\n   * The logging level for the command.\n   */\n  logging?: Input<local.Logging>\n\n  /**\n   * The triggers for the command.\n   *\n   * They will be captured in the command's state and will trigger the command to run again\n   * if they change.\n   */\n  triggers?: InputOrArray<unknown>\n\n  /**\n   * The update triggers for the command.\n   *\n   * Unlike `triggers`, which replace the entire resource on change, these will only trigger the `update` command.\n   *\n   * Under the hood, it is implemented using a hash of the provided values and passing it as environment variable.\n   * It is recommended to pass only primitive values (strings, numbers, booleans) or small objects/arrays for proper serialization.\n   */\n  updateTriggers?: InputOrArray<unknown>\n\n  /**\n   * The working directory for the command.\n   *\n   * If not set, the command will run in the user's home directory (for both local and remote hosts).\n   */\n  cwd?: Input<string>\n\n  /**\n   * The environment variables to set for the command.\n   */\n  environment?: Input<Record<string, Input<string>>>\n\n  /**\n   * The run mode for the command.\n   *\n   * - `auto` (default): if the `image` is set, it will always run in a container, never on the host;\n   * otherwise, it will run on the host.\n   *\n   * - `prefer-host`: it will try to run on the host if the executable is available;\n   * otherwise, it will run in a container or throw an error if the `image` is not set.\n   */\n  runMode?: CommandRunMode\n\n  /**\n   * The container image to use to run the command.\n   */\n  image?: Input<string>\n\n  /**\n   * The paths to mount if the command runs in a container.\n   *\n   * They will be mounted to the same paths in the container.\n   */\n  mounts?: InputOrArray<string>\n}\n\nexport type TextFileArgs = {\n  /**\n   * The host to run the command on.\n   */\n  host: CommandHost\n\n  /**\n   * The absolute path to the file on the host.\n   */\n  path: Input<string>\n\n  /**\n   * The content to write to the file.\n   */\n  content: Input<string>\n}\n\nexport type WaitForArgs = CommandArgs & {\n  /**\n   * The timeout in seconds to wait for the command to complete.\n   *\n   * Defaults to 5 minutes (300 seconds).\n   */\n  timeout?: Input<number>\n\n  /**\n   * The interval in seconds to wait between checks.\n   *\n   * Defaults to 5 seconds.\n   */\n  interval?: Input<number>\n}\n\nfunction createCommand(command: string | string[]): string {\n  if (Array.isArray(command)) {\n    return command.join(\" \")\n  }\n\n  return command\n}\n\nfunction wrapWithWorkDir(dir?: Input<string>) {\n  if (!dir) {\n    return (command: string) => output(command)\n  }\n\n  return (command: string) => interpolate`cd \"${dir}\" && ${command}`\n}\n\nfunction wrapWithEnvironment(environment?: Input<Record<string, Input<string>>>) {\n  if (!environment) {\n    return (command: string) => output(command)\n  }\n\n  return (command: string) =>\n    output({ command, environment }).apply(({ command, environment }) => {\n      if (!environment || Object.keys(environment).length === 0) {\n        return command\n      }\n\n      const envExport = Object.entries(environment)\n        .map(([key, value]) => `export ${key}=\"${value}\"`)\n        .join(\" && \")\n\n      return `${envExport} && ${command}`\n    })\n}\n\nfunction wrapWithWaitFor(timeout: Input<number> = 300, interval: Input<number> = 5) {\n  return (command: string | string[]) =>\n    // TOD: escape the command\n    interpolate`timeout ${timeout} bash -c 'while ! ${createCommand(command)}; do sleep ${interval}; done'`\n}\n\nfunction applyUpdateTriggers(\n  env: Input<Record<string, Input<string>>> | undefined,\n  triggers: InputOrArray<unknown> | undefined,\n) {\n  return output({ env, triggers }).apply(({ env, triggers }) => {\n    if (!triggers) {\n      return env\n    }\n\n    const hash = sha256(JSON.stringify(triggers))\n    const hashHex = Buffer.from(hash).toString(\"hex\")\n\n    return {\n      ...env,\n      HIGHSTATE_UPDATE_TRIGGER_HASH: hashHex,\n    }\n  })\n}\n\nexport class Command extends ComponentResource {\n  public readonly stdout: Output<string>\n  public readonly stderr: Output<string>\n\n  constructor(name: string, args: CommandArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:common:Command\", name, args, opts)\n\n    const environment = applyUpdateTriggers(\n      args.environment,\n      args.updateTriggers,\n    ) as local.CommandArgs[\"environment\"]\n\n    const command =\n      args.host === \"local\"\n        ? new local.Command(\n            name,\n            {\n              create: output(args.create).apply(createCommand),\n              update: args.update ? output(args.update).apply(createCommand) : undefined,\n              delete: args.delete ? output(args.delete).apply(createCommand) : undefined,\n              logging: args.logging,\n              triggers: args.triggers ? output(args.triggers).apply(flat) : undefined,\n              dir: args.cwd ?? homedir(),\n              environment,\n              stdin: args.stdin,\n            },\n            { ...opts, parent: this },\n          )\n        : new remote.Command(\n            name,\n            {\n              connection: output(args.host).apply(server => {\n                if (!server.ssh) {\n                  throw new Error(`The server \"${server.hostname}\" has no SSH credentials`)\n                }\n\n                return getServerConnection(server.ssh)\n              }),\n\n              create: output(args.create)\n                .apply(createCommand)\n                .apply(wrapWithWorkDir(args.cwd))\n                .apply(wrapWithEnvironment(environment)),\n\n              update: args.update\n                ? output(args.update)\n                    .apply(createCommand)\n                    .apply(wrapWithWorkDir(args.cwd))\n                    .apply(wrapWithEnvironment(environment))\n                : undefined,\n\n              delete: args.delete\n                ? output(args.delete)\n                    .apply(createCommand)\n                    .apply(wrapWithWorkDir(args.cwd))\n                    .apply(wrapWithEnvironment(environment))\n                : undefined,\n\n              logging: args.logging,\n              triggers: args.triggers ? output(args.triggers).apply(flat) : undefined,\n              stdin: args.stdin,\n\n              addPreviousOutputInEnv: false,\n\n              // TODO: does not work if server do not define AcceptEnv\n              // environment,\n            },\n            { ...opts, parent: this },\n          )\n\n    this.stdout = command.stdout\n    this.stderr = command.stderr\n\n    this.registerOutputs({\n      stdout: this.stdout,\n      stderr: this.stderr,\n    })\n  }\n\n  /**\n   * Waits for the command to complete and returns its output.\n   * The standard output will be returned.\n   */\n  async wait(): Promise<string> {\n    return await toPromise(this.stdout)\n  }\n\n  /**\n   * Creates a command that writes the given content to a file on the host.\n   * The file will be created if it does not exist, and overwritten if it does.\n   *\n   * Use for small text files like configuration files.\n   */\n  static createTextFile(\n    name: string,\n    options: TextFileArgs,\n    opts?: ComponentResourceOptions,\n  ): Command {\n    return new Command(\n      name,\n      {\n        host: options.host,\n        create: interpolate`mkdir -p $(dirname \"${options.path}\") && cat > ${options.path}`,\n        delete: interpolate`rm -rf ${options.path}`,\n        stdin: options.content,\n      },\n      opts,\n    )\n  }\n\n  /**\n   * Creates a command that waits for a file to be created and then reads its content.\n   * This is useful for waiting for a file to be generated by another process.\n   *\n   * Use for small text files like configuration files.\n   */\n  static receiveTextFile(\n    name: string,\n    options: Omit<TextFileArgs, \"content\">,\n    opts?: ComponentResourceOptions,\n  ): Command {\n    return new Command(\n      name,\n      {\n        host: options.host,\n        create: interpolate`while ! test -f \"${options.path}\"; do sleep 1; done; cat \"${options.path}\"`,\n        logging: \"stderr\",\n      },\n      opts,\n    )\n  }\n\n  /**\n   * Creates a command that waits for a condition to be met.\n   * The command will run until the condition is met or the timeout is reached.\n   *\n   * The condition is considered met if the command returns a zero exit code.\n   *\n   * @param name The name of the command resource.\n   * @param args The arguments for the command, including the condition to check.\n   * @param opts Optional resource options.\n   */\n  static waitFor(name: string, args: WaitForArgs, opts?: ComponentResourceOptions): Command {\n    return new Command(\n      name,\n      {\n        ...args,\n        create: output(args.create).apply(wrapWithWaitFor(args.timeout, args.interval)),\n        update: args.update\n          ? output(args.update).apply(wrapWithWaitFor(args.timeout, args.interval))\n          : undefined,\n        delete: args.delete\n          ? output(args.delete).apply(wrapWithWaitFor(args.timeout, args.interval))\n          : undefined,\n      },\n      opts,\n    )\n  }\n}\n","import type { z } from \"@highstate/contract\"\nimport type { ImplementationReference } from \"@highstate/library\"\nimport { type Input, type Output, output, toPromise, type Unwrap } from \"@highstate/pulumi\"\n\n/**\n * The ImplementationMediator is used as a contract between the calling code and the implementation.\n *\n * From the calling code perspective, it provides a way to define the input and output schemas for the implementation\n * and call the implementation with the provided input.\n *\n * From the implementation perspective, it provides a way to get zod function with automatic type inference and validation.\n */\nexport class ImplementationMediator<\n  TInputSchema extends z.ZodType,\n  TOutputSchema extends z.ZodType,\n> {\n  constructor(\n    readonly path: string,\n    private readonly inputSchema: TInputSchema,\n    private readonly outputSchema: TOutputSchema,\n  ) {}\n\n  implement<TDataSchema extends z.ZodType>(\n    dataSchema: TDataSchema,\n    func: (\n      input: z.infer<TInputSchema>,\n      data: z.infer<TDataSchema>,\n    ) => z.infer<TOutputSchema> | Promise<z.infer<TOutputSchema>>,\n  ) {\n    return async (\n      input: z.infer<TInputSchema>,\n      data: z.infer<TDataSchema>,\n    ): Promise<z.infer<TOutputSchema>> => {\n      const parsedInput = this.inputSchema.safeParse(input)\n      if (!parsedInput.success) {\n        throw new Error(\n          `Invalid input for implementation \"${this.path}\": ${parsedInput.error.message}`,\n        )\n      }\n\n      const parsedData = dataSchema.safeParse(data)\n      if (!parsedData.success) {\n        throw new Error(\n          `Invalid data for implementation \"${this.path}\": ${parsedData.error.message}`,\n        )\n      }\n\n      const result = await func(parsedInput.data, parsedData.data)\n      const parsedResult = this.outputSchema.safeParse(result)\n\n      if (!parsedResult.success) {\n        throw new Error(\n          `Invalid output from implementation \"${this.path}\": ${parsedResult.error.message}`,\n        )\n      }\n\n      return parsedResult.data\n    }\n  }\n\n  async call(\n    implRef: Input<ImplementationReference>,\n    input: Input<z.infer<TInputSchema>>,\n  ): Promise<z.infer<TOutputSchema>> {\n    const resolvedImplRef = await toPromise(implRef)\n    const resolvedInput = await toPromise(input)\n\n    const importPath = `${resolvedImplRef.package}/impl/${this.path}`\n\n    let impl: Record<string, unknown>\n    try {\n      // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment\n      impl = await import(importPath)\n    } catch (error) {\n      throw new Error(`Failed to import module \"${importPath}\" required by implementation.`, {\n        cause: error,\n      })\n    }\n\n    const funcs = Object.entries(impl).filter(value => typeof value[1] === \"function\") as [\n      string,\n      (...args: unknown[]) => unknown,\n    ][]\n\n    if (funcs.length === 0) {\n      throw new Error(`No implementation functions found in module \"${importPath}\".`)\n    }\n\n    if (funcs.length > 1) {\n      throw new Error(\n        `Multiple implementation functions found in module \"${importPath}\": ${funcs.map(func => func[0]).join(\", \")}. ` +\n          \"Ensure only one function is exported.\",\n      )\n    }\n\n    const [funcName, implFunc] = funcs[0]\n\n    let result: unknown\n    try {\n      // eslint-disable-next-line @typescript-eslint/no-unsafe-call\n      result = await implFunc(resolvedInput, resolvedImplRef.data)\n    } catch (error) {\n      console.error(`Error in implementation function \"${funcName}\":`, error)\n      throw new Error(`Implementation function \"${funcName}\" failed`)\n    }\n\n    const parsedResult = this.outputSchema.safeParse(result)\n    if (!parsedResult.success) {\n      throw new Error(\n        `Implementation function \"${funcName}\" returned invalid result: ${parsedResult.error.message}`,\n      )\n    }\n\n    return parsedResult.data\n  }\n\n  callOutput(\n    implRef: Input<ImplementationReference>,\n    input: Input<z.infer<TInputSchema>>,\n  ): Output<Unwrap<z.infer<TOutputSchema>>> {\n    return output(this.call(implRef, input))\n  }\n}\n","import type { ArrayPatchMode, dns, network } from \"@highstate/library\"\nimport { getOrCreate, z } from \"@highstate/contract\"\nimport {\n  ComponentResource,\n  type Input,\n  type InputArray,\n  type InputOrArray,\n  interpolate,\n  normalizeInputsAndMap,\n  type Output,\n  output,\n  type ResourceOptions,\n  toPromise,\n  type Unwrap,\n} from \"@highstate/pulumi\"\nimport { flat, groupBy, uniqueBy } from \"remeda\"\nimport { Command, type CommandHost } from \"./command\"\nimport { ImplementationMediator } from \"./impl-ref\"\nimport {\n  filterEndpoints,\n  type InputL3Endpoint,\n  l3EndpointToString,\n  l34EndpointToString,\n  parseL3Endpoint,\n} from \"./network\"\n\nexport const dnsRecordMediator = new ImplementationMediator(\n  \"dns-record\",\n  z.object({ name: z.string(), args: z.custom<ResolvedDnsRecordArgs>() }),\n  z.instanceof(ComponentResource),\n)\n\nexport type DnsRecordArgs = {\n  /**\n   * The DNS provider to use.\n   */\n  provider: Input<dns.Provider>\n\n  /**\n   * The name of the DNS record.\n   * If not provided, the name of the resource will be used.\n   */\n  name?: Input<string>\n\n  /**\n   * The type of the DNS record.\n   *\n   * If not provided, will be automatically detected based on the value.\n   */\n  type?: Input<string>\n\n  /**\n   * The value of the DNS record.\n   */\n  value: Input<InputL3Endpoint>\n\n  /**\n   * Whether the DNS record is proxied (e.g. to provide DDoS protection).\n   *\n   * Available only for public IPs and some DNS providers like Cloudflare.\n   * If not supported, the DNS provider will ignore this value.\n   */\n  proxied?: Input<boolean>\n\n  /**\n   * The TTL of the DNS record.\n   *\n   * If not provided, the DNS provider will use its default value.\n   */\n  ttl?: Input<number>\n\n  /**\n   * The priority of the DNS record.\n   *\n   * Only used for some DNS record types (e.g. MX).\n   */\n  priority?: Input<number>\n\n  /**\n   * Wait for the DNS record to be created/updated at the specified environment(s) before continuing.\n   */\n  waitAt?: InputOrArray<CommandHost>\n}\n\nexport type ResolvedDnsRecordArgs = Pick<DnsRecordArgs, \"name\" | \"priority\" | \"ttl\" | \"proxied\"> & {\n  /**\n   * The value of the DNS record.\n   */\n  value: Input<string>\n\n  /**\n   * The type of the DNS record.\n   */\n  type: Input<string>\n}\n\nexport type DnsRecordSetArgs = Omit<DnsRecordArgs, \"provider\" | \"value\"> & {\n  /**\n   * The DNS providers to use to create the DNS records.\n   *\n   * If multiple providers matched the specified domain, records will be created for each of them.\n   */\n  providers: Input<dns.Provider[]>\n\n  /**\n   * The value of the DNS record.\n   */\n  value?: Input<InputL3Endpoint>\n\n  /**\n   * The values of the DNS records.\n   */\n  values?: InputArray<InputL3Endpoint>\n}\n\nfunction getTypeByEndpoint(endpoint: network.L3Endpoint): string {\n  switch (endpoint.type) {\n    case \"ipv4\":\n      return \"A\"\n    case \"ipv6\":\n      return \"AAAA\"\n    case \"hostname\":\n      return \"CNAME\"\n  }\n}\n\n/**\n * Creates a DNS record for the specified value and waits for it to be resolved.\n *\n * Uses the specified DNS provider to create the record.\n */\nexport class DnsRecord extends ComponentResource {\n  /**\n   * The underlying dns record resource.\n   */\n  readonly dnsRecord: Output<ComponentResource>\n\n  /**\n   * The commands to be executed after the DNS record is created/updated.\n   *\n   * These commands will wait for the DNS record to be resolved to the specified value.\n   */\n  readonly waitCommands: Output<Command[]>\n\n  constructor(name: string, args: DnsRecordArgs, opts?: ResourceOptions) {\n    super(\"highstate:common:DnsRecord\", name, args, opts)\n\n    const l3Endpoint = output(args.value).apply(value => parseL3Endpoint(value))\n    const resolvedValue = l3Endpoint.apply(l3EndpointToString)\n    const resolvedType = args.type ? output(args.type) : l3Endpoint.apply(getTypeByEndpoint)\n\n    this.dnsRecord = output(args.provider).apply(provider => {\n      return dnsRecordMediator.call(provider.implRef, {\n        name,\n        args: {\n          name: args.name,\n          priority: args.priority,\n          ttl: args.ttl,\n          value: resolvedValue,\n          type: resolvedType,\n        },\n      })\n    })\n\n    this.waitCommands = output({\n      waitAt: args.waitAt,\n      resolvedType,\n      proxied: args.proxied,\n    }).apply(({ waitAt, resolvedType, proxied }) => {\n      if (resolvedType === \"CNAME\") {\n        // TODO: handle CNAME records\n        return []\n      }\n\n      const resolvedHosts = waitAt ? [waitAt].flat() : []\n\n      if (proxied) {\n        // for proxied records do not verify the value since we do not know the actual IP addressa\n\n        return (resolvedHosts as Unwrap<CommandHost>[]).map(host => {\n          const hostname = host === \"local\" ? \"local\" : host.hostname\n\n          return new Command(\n            `${name}.wait-for-dns.${hostname}`,\n            {\n              host,\n              create: [\n                interpolate`while ! getent hosts \"${args.name}\";`,\n                interpolate`do echo \"Waiting for DNS record \\\"${args.name}\\\" to be available...\";`,\n                `sleep 5;`,\n                `done`,\n              ],\n            },\n            { parent: this },\n          )\n        })\n      }\n\n      return (resolvedHosts as Unwrap<CommandHost>[]).map(host => {\n        const hostname = host === \"local\" ? \"local\" : host.hostname\n\n        return new Command(\n          `${name}.wait-for-dns.${hostname}`,\n          {\n            host,\n            create: [\n              interpolate`while ! getent hosts \"${args.name}\" | grep \"${resolvedValue}\";`,\n              interpolate`do echo \"Waiting for DNS record \\\"${args.name}\" to resolve to \"${resolvedValue}\"...\";`,\n              `sleep 5;`,\n              `done`,\n            ],\n          },\n          { parent: this },\n        )\n      })\n    })\n  }\n}\n\n/**\n * Creates a set of DNS records for the specified values and waits for them to be resolved.\n */\nexport class DnsRecordSet extends ComponentResource {\n  /**\n   * The underlying dns record resources.\n   */\n  readonly dnsRecords: Output<DnsRecord[]>\n\n  /**\n   * The flat list of all wait commands for the DNS records.\n   */\n  readonly waitCommands: Output<Command[]>\n\n  constructor(name: string, args: DnsRecordSetArgs, opts?: ResourceOptions) {\n    super(\"highstate:common:DnsRecordSet\", name, args, opts)\n\n    const matchedProviders = output({\n      providers: args.providers,\n      name: args.name ?? name,\n    }).apply(({ providers }) => {\n      const matchedProviders = providers.filter(provider => name.endsWith(provider.domain))\n\n      if (matchedProviders.length === 0) {\n        throw new Error(`No DNS provider matched the domain \"${name}\"`)\n      }\n\n      return matchedProviders\n    })\n\n    this.dnsRecords = normalizeInputsAndMap(args.value, args.values, value => {\n      return output({\n        name: args.name ?? name,\n        providers: matchedProviders,\n      }).apply(({ name, providers }) => {\n        return providers.flatMap(provider => {\n          const l3Endpoint = parseL3Endpoint(value)\n\n          return new DnsRecord(\n            `${name}.${provider.id}.${l3EndpointToString(l3Endpoint)}`,\n            {\n              name,\n              provider,\n              value: l3Endpoint,\n              type: args.type ?? getTypeByEndpoint(l3Endpoint),\n              proxied: args.proxied,\n              ttl: args.ttl,\n              priority: args.priority,\n              waitAt: args.waitAt,\n            },\n            { parent: this },\n          )\n        })\n      })\n    }).apply(flat)\n\n    this.waitCommands = this.dnsRecords\n      .apply(records => records.flatMap(record => record.waitCommands))\n      .apply(flat)\n  }\n\n  private static readonly dnsRecordSetCache = new Map<string, DnsRecordSet>()\n\n  /**\n   * Creates a DNS record set for the specified endpoints and waits for it to be resolved.\n   *\n   * If a DNS record set with the same name already exists, it will be reused.\n   *\n   * @param name The name of the DNS record set.\n   * @param args The arguments for the DNS record set.\n   * @param opts The options for the resource.\n   */\n  static createOnce(name: string, args: DnsRecordSetArgs, opts?: ResourceOptions): DnsRecordSet {\n    return getOrCreate(\n      DnsRecordSet.dnsRecordSetCache,\n      name,\n      () => new DnsRecordSet(name, args, opts),\n    )\n  }\n}\n\n/**\n * Registers the DNS record set for the given endpoints and prepends the corresponding hostname endpoint to the list.\n *\n * Waits for the DNS record set to be created/updated before continuing.\n *\n * Ignores the \"hostname\" endpoints in the list.\n *\n * @param endpoints The list of endpoints to register. Will be modified in place.\n * @param fqdn The FQDN to register the DNS record set for. If not provided, no DNS record set will be created and array will not be modified.\n * @param fqdnEndpointFilter The filter to apply to the endpoints before passing them to the DNS record set. Does not apply to the resulted endpoint list.\n * @param dnsProviders The DNS providers to use to create the DNS records.\n */\nexport async function updateEndpointsWithFqdn<TEndpoint extends network.L34Endpoint>(\n  endpoints: Input<TEndpoint[]>,\n  fqdn: string | undefined,\n  fqdnEndpointFilter: network.EndpointFilter,\n  patchMode: ArrayPatchMode,\n  dnsProviders: Input<dns.Provider[]>,\n): Promise<{ endpoints: TEndpoint[]; dnsRecordSet: DnsRecordSet | undefined }> {\n  const resolvedEndpoints = await toPromise(endpoints)\n\n  if (!fqdn) {\n    return {\n      endpoints: resolvedEndpoints as TEndpoint[],\n      dnsRecordSet: undefined,\n    }\n  }\n\n  const filteredEndpoints = filterEndpoints(resolvedEndpoints, fqdnEndpointFilter)\n\n  const dnsRecordSet = new DnsRecordSet(fqdn, {\n    providers: dnsProviders,\n    values: filteredEndpoints,\n    waitAt: \"local\",\n  })\n\n  const portProtocolGroups = groupBy(filteredEndpoints, endpoint =>\n    endpoint.port ? `${endpoint.port}-${endpoint.protocol}` : \"\",\n  )\n\n  const newEndpoints: TEndpoint[] = []\n\n  for (const group of Object.values(portProtocolGroups)) {\n    newEndpoints.unshift({\n      type: \"hostname\",\n      hostname: fqdn,\n      visibility: group[0].visibility,\n      port: group[0].port,\n      protocol: group[0].protocol,\n    } as TEndpoint)\n  }\n\n  await toPromise(\n    dnsRecordSet.waitCommands.apply(waitCommands => waitCommands.map(command => command.stdout)),\n  )\n\n  if (patchMode === \"prepend\") {\n    return {\n      endpoints: uniqueBy(\n        //\n        [...newEndpoints, ...(resolvedEndpoints as TEndpoint[])],\n        endpoint => l34EndpointToString(endpoint),\n      ),\n      dnsRecordSet,\n    }\n  }\n\n  return {\n    endpoints: newEndpoints,\n    dnsRecordSet,\n  }\n}\n","import type { TlsCertificate } from \"./tls\"\nimport { z } from \"@highstate/contract\"\nimport { type common, network } from \"@highstate/library\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type Output,\n  output,\n  Resource,\n} from \"@highstate/pulumi\"\nimport { ImplementationMediator } from \"./impl-ref\"\n\nexport const gatewayRouteMediator = new ImplementationMediator(\n  \"gateway-route\",\n  z.object({\n    name: z.string(),\n    spec: z.custom<GatewayRouteSpec>(),\n    opts: z.custom<ComponentResourceOptions>().optional(),\n  }),\n  z.object({\n    resource: z.instanceof(Resource),\n    endpoints: network.l3EndpointEntity.schema.array(),\n  }),\n)\n\nexport type GatewayRouteSpec = {\n  /**\n   * The FQDN to expose the workload on.\n   */\n  fqdn?: Input<string>\n\n  /**\n   * The endpoints of the backend workload to route traffic to.\n   */\n  endpoints: Input<network.L4Endpoint[]>\n\n  /**\n   * The native data to pass to the implementation.\n   *\n   * This is used for data which implementation may natively understand,\n   * such as Kubernetes `Service` resources.\n   *\n   * Implementations may use this data to create more efficient routes\n   * using native resources.\n   */\n  nativeData?: Input<unknown>\n\n  /**\n   * The TLS certificate to use for the route.\n   */\n  tlsCertificate?: Input<TlsCertificate | undefined>\n} & (\n  | {\n      type: \"http\"\n\n      /**\n       * Whether to expose the workload over plain HTTP.\n       *\n       * By default, the workload will be exposed over HTTPS.\n       */\n      insecure?: Input<boolean>\n\n      /**\n       * The relative path to expose the workload on.\n       *\n       * By default, the workload will be exposed on the root path (`/`).\n       */\n      path?: Input<string>\n    }\n  | {\n      type: \"l3\"\n\n      /**\n       * The ports to request for the workload.\n       *\n       * The order must match the order of the ports in the service.\n       *\n       * If not provided, random ports will be assigned.\n       */\n      ports?: number\n    }\n)\n\nexport type GatewayRouteArgs = GatewayRouteSpec & {\n  /**\n   * The gateway to attach the route to.\n   */\n  gateway: Input<common.Gateway>\n}\n\nexport class GatewayRoute extends ComponentResource {\n  /**\n   * The underlying resource created by the implementation.\n   */\n  readonly resource: Output<Resource>\n\n  /**\n   * The endpoints of the gateway which serve this route.\n   *\n   * In most cases, this will be a single endpoint of the gateway shared for all routes.\n   */\n  readonly endpoints: Output<network.L3Endpoint[]>\n\n  constructor(name: string, args: GatewayRouteArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:common:GatewayRoute\", name, args, opts)\n\n    const { resource, endpoints } = gatewayRouteMediator.callOutput(output(args.gateway).implRef, {\n      name,\n      spec: args,\n      opts: { ...opts, parent: this },\n    })\n\n    this.resource = resource\n    this.endpoints = endpoints\n  }\n}\n","import type { common } from \"@highstate/library\"\nimport { getOrCreate, z } from \"@highstate/contract\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type InputArray,\n  normalizeInputs,\n  type Output,\n  output,\n  Resource,\n} from \"@highstate/pulumi\"\nimport { ImplementationMediator } from \"./impl-ref\"\n\nexport const tlsCertificateMediator = new ImplementationMediator(\n  \"tls-certificate\",\n  z.object({\n    name: z.string(),\n    spec: z.custom<TlsCertificateSpec>(),\n    opts: z.custom<ComponentResourceOptions>().optional(),\n  }),\n  z.instanceof(Resource),\n)\n\nexport type TlsCertificateSpec = {\n  /**\n   * The common name for the certificate.\n   */\n  commonName?: Input<string>\n\n  /**\n   * The alternative DNS names for the certificate.\n   */\n  dnsNames?: InputArray<string>\n\n  /**\n   * The native data to pass to the implementation.\n   *\n   * This is used for data which implementation may natively understand\n   * and may use this data to create certificates using native resources.\n   */\n  nativeData?: unknown\n}\n\nexport type TlsCertificateArgs = TlsCertificateSpec & {\n  /**\n   * The issuer to use for the certificate.\n   */\n  issuer?: Input<common.TlsIssuer>\n\n  /**\n   * The issuers to use for the certificate.\n   *\n   * If multiple issuers are provided, the certificate will be created using the first issuer that supports the requested common name.\n   */\n  issuers?: InputArray<common.TlsIssuer>\n}\n\nexport class TlsCertificate extends ComponentResource {\n  /**\n   * The underlying resource created by the implementation.\n   */\n  readonly resource: Output<Resource>\n\n  constructor(name: string, args: TlsCertificateArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:common:TlsCertificate\", name, args, opts)\n\n    const issuers = normalizeInputs(args.issuer, args.issuers)\n\n    this.resource = output({\n      issuers,\n      commonName: args.commonName,\n      dnsNames: args.dnsNames,\n    }).apply(async ({ issuers, commonName, dnsNames }) => {\n      // for now, we require single issuer to match all requested names\n      const matchedIssuer = issuers.find(issuer => {\n        if (commonName && !commonName.endsWith(issuer.domain)) {\n          return false\n        }\n\n        if (dnsNames && !dnsNames.every(name => name.endsWith(issuer.domain))) {\n          return false\n        }\n\n        return true\n      })\n\n      if (!matchedIssuer) {\n        throw new Error(\n          `No TLS issuer matched the common name \"${commonName}\" and DNS names \"${dnsNames?.join(\", \") ?? \"\"}\"`,\n        )\n      }\n\n      return await tlsCertificateMediator.call(matchedIssuer.implRef, {\n        name,\n        spec: args,\n      })\n    })\n  }\n\n  private static readonly tlsCertificateCache = new Map<string, TlsCertificate>()\n\n  /**\n   * Creates a TLS certificate for the specified common name and DNS names.\n   *\n   * If a TLS certificate with the same name already exists, it will be reused.\n   *\n   * @param name The name of the TLS certificate.\n   * @param args The arguments for the TLS certificate.\n   * @param opts The options for the resource.\n   */\n  static createOnce(\n    name: string,\n    args: TlsCertificateArgs,\n    opts?: ComponentResourceOptions,\n  ): TlsCertificate {\n    return getOrCreate(\n      TlsCertificate.tlsCertificateCache,\n      name,\n      () => new TlsCertificate(name, args, opts),\n    )\n  }\n}\n","import type { common } from \"@highstate/library\"\nimport type { Except } from \"type-fest\"\nimport {\n  ComponentResource,\n  type ComponentResourceOptions,\n  type Input,\n  type Output,\n  output,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { DnsRecordSet } from \"./dns\"\nimport { GatewayRoute, type GatewayRouteSpec } from \"./gateway\"\nimport { TlsCertificate } from \"./tls\"\n\nexport type AccessPointRouteArgs = Except<GatewayRouteSpec, \"nativeData\"> & {\n  /**\n   * The access point to use to expose the route.\n   */\n  accessPoint: Input<common.AccessPoint>\n\n  /**\n   * The native data to pass to the gateway route implementation.\n   */\n  gatewayNativeData?: unknown\n\n  /**\n   * The native data to pass to the tls ceertificate implementation.\n   */\n  tlsCertificateNativeData?: unknown\n}\n\nexport class AccessPointRoute extends ComponentResource {\n  /**\n   * The created gateway route.\n   */\n  readonly route: GatewayRoute\n\n  /**\n   * The DNS record set created for the route.\n   *\n   * May be shared between multiple routes with the same FQDN.\n   */\n  readonly dnsRecordSet?: Output<DnsRecordSet | undefined>\n\n  /**\n   * The TLS certificate created for the route.\n   *\n   * May be shared between multiple routes with the same FQDN.\n   */\n  readonly tlsCertificate?: Output<TlsCertificate | undefined>\n\n  constructor(name: string, args: AccessPointRouteArgs, opts?: ComponentResourceOptions) {\n    super(\"highstate:common:AccessPointRoute\", name, args, opts)\n\n    // 1. create TLS certificate if the route is HTTPS and the access point has TLS issuers\n    if (args.fqdn && args.type === \"http\" && !args.insecure) {\n      this.tlsCertificate = output(args.accessPoint).apply(accessPoint => {\n        if (accessPoint.tlsIssuers.length === 0) {\n          return undefined\n        }\n\n        return TlsCertificate.createOnce(\n          name,\n          {\n            issuers: accessPoint.tlsIssuers,\n            dnsNames: args.fqdn ? [args.fqdn] : [],\n            nativeData: args.tlsCertificateNativeData,\n          },\n          { ...opts, parent: this },\n        )\n      })\n    }\n\n    // 2. create the route and resolve the gateway endpoints\n    this.route = new GatewayRoute(\n      name,\n      {\n        ...args,\n        gateway: output(args.accessPoint).gateway,\n        tlsCertificate: this.tlsCertificate,\n        nativeData: args.gatewayNativeData,\n      },\n      { ...opts, parent: this },\n    )\n\n    // 3. register DNS records if FQDN is provided and the access point has DNS providers\n    if (args.fqdn) {\n      this.dnsRecordSet = output(args.accessPoint).apply(async accessPoint => {\n        if (accessPoint.dnsProviders.length === 0) {\n          return undefined\n        }\n\n        const fqdn = await toPromise(args.fqdn)\n        if (!fqdn) {\n          return undefined\n        }\n\n        return DnsRecordSet.createOnce(\n          fqdn,\n          {\n            providers: output(args.accessPoint).dnsProviders,\n            values: this.route.endpoints,\n            waitAt: \"local\",\n          },\n          { ...opts, parent: this },\n        )\n      })\n    }\n  }\n}\n","import type { common, network } from \"@highstate/library\"\nimport { createHash } from \"node:crypto\"\nimport { createReadStream } from \"node:fs\"\nimport { cp, mkdir, mkdtemp, rename, rm, stat, writeFile } from \"node:fs/promises\"\nimport { tmpdir } from \"node:os\"\nimport { basename, dirname, extname, join } from \"node:path\"\nimport { Readable } from \"node:stream\"\nimport { pipeline } from \"node:stream/promises\"\nimport { type CommonObjectMeta, type File, HighstateSignature } from \"@highstate/contract\"\nimport { asset, toPromise } from \"@highstate/pulumi\"\nimport { minimatch } from \"minimatch\"\nimport * as tar from \"tar\"\nimport unzipper from \"unzipper\"\nimport { type InputL7Endpoint, l7EndpointToString, parseL7Endpoint } from \"./network\"\n\nexport type FolderPackOptions = {\n  /**\n   * The patterns to include in the packed archive.\n   * If not provided, all files and folders will be included.\n   */\n  include?: string[]\n\n  /**\n   * The patterns to exclude from the packed archive.\n   * Applied after include patterns.\n   * If not provided, no files or folders will be excluded.\n   */\n  exclude?: string[]\n}\n\n/**\n * Creates Pulumi asset from Highstate file.\n *\n * @param file The file entity to create the asset from.\n * @returns The created asset.\n */\nexport function assetFromFile(file: common.File): asset.Asset {\n  if (file.content.type === \"remote\") {\n    return new asset.RemoteAsset(l7EndpointToString(file.content.endpoint))\n  }\n\n  if (file.content.type === \"local\") {\n    return new asset.FileAsset(file.content.path)\n  }\n\n  if (file.content.type === \"artifact\") {\n    throw new Error(\n      \"Artifact-based files cannot be converted to Pulumi assets directly. Use MaterializedFile instead.\",\n    )\n  }\n\n  if (file.content.isBinary) {\n    throw new Error(\n      \"Cannot create asset from inline binary file content. Please open an issue if you need this feature.\",\n    )\n  }\n\n  return new asset.StringAsset(file.content.value)\n}\n\n/**\n * Creates Pulumi archive from Highstate folder.\n *\n * @param folder The folder entity to create the asset archive from.\n * @returns The created asset archive.\n */\nexport function archiveFromFolder(folder: common.Folder): asset.Archive {\n  if (folder.content.type === \"remote\") {\n    return new asset.RemoteArchive(l7EndpointToString(folder.content.endpoint))\n  }\n\n  if (folder.content.type === \"local\") {\n    return new asset.FileArchive(folder.content.path)\n  }\n\n  if (folder.content.type === \"artifact\") {\n    throw new Error(\n      \"Artifact-based folders cannot be converted to Pulumi assets directly. Use MaterializedFolder instead.\",\n    )\n  }\n\n  const files: Record<string, asset.Asset> = {}\n\n  for (const file of folder.content.files) {\n    files[file.meta.name] = assetFromFile(file)\n  }\n\n  for (const subfolder of folder.content.folders) {\n    files[subfolder.meta.name] = archiveFromFolder(subfolder)\n  }\n\n  return new asset.AssetArchive(files)\n}\n\n/**\n * Extracts a tar or zip archive from a stream to a destination directory.\n *\n * @param stream The stream containing the archive data\n * @param destinationPath The path where to extract the archive\n * @param archiveType The type of archive ('tar' or 'zip')\n */\nasync function unarchiveFromStream(\n  stream: Readable,\n  destinationPath: string,\n  archiveType: \"tar\" | \"zip\",\n): Promise<void> {\n  await mkdir(destinationPath, { recursive: true })\n\n  switch (archiveType) {\n    case \"tar\": {\n      const extractStream = tar.extract({\n        cwd: destinationPath,\n        strict: true,\n      })\n\n      await pipeline(stream, extractStream)\n      return\n    }\n    case \"zip\": {\n      // Extract directly from stream using unzipper\n      await pipeline(stream, unzipper.Extract({ path: destinationPath }))\n      return\n    }\n  }\n}\n\n/**\n * Determines the archive type based on file extension or content type.\n *\n * @param fileName The name of the file\n * @param contentType Optional content type from HTTP headers\n * @returns The detected archive type or null if not an archive\n */\nfunction detectArchiveType(fileName: string, contentType?: string): \"tar\" | \"zip\" | null {\n  const ext = extname(fileName).toLowerCase()\n\n  if (ext === \".tar\" || ext === \".tgz\" || ext === \".tar.gz\") {\n    return \"tar\"\n  }\n\n  if (ext === \".zip\") {\n    return \"zip\"\n  }\n\n  // Fallback to content type\n  if (contentType) {\n    if (contentType.includes(\"tar\") || contentType.includes(\"gzip\")) {\n      return \"tar\"\n    }\n    if (contentType.includes(\"zip\")) {\n      return \"zip\"\n    }\n  }\n\n  return null\n}\n\n/**\n * The `MaterializedFile` class represents a file entity that has been materialized\n * to a local filesystem path.\n *\n * It handles creating a temporary directory, writing the file content to that directory,\n * and cleaning up the temporary files when disposed.\n *\n * For improved cleanup reliability, the class will use HIGHSTATE_TEMP_PATH as the base\n * directory for temporary files if available, allowing for centralized cleanup by the runner.\n */\nexport class MaterializedFile implements AsyncDisposable {\n  private _tmpPath?: string\n  private _path!: string\n  private _disposed = false\n\n  readonly artifactMeta: CommonObjectMeta\n\n  constructor(\n    readonly entity: common.File,\n    readonly parent?: MaterializedFolder,\n  ) {\n    this.artifactMeta = {\n      title: `Materialized file \"${entity.meta.name}\"`,\n    }\n  }\n\n  get path(): string {\n    return this._path\n  }\n\n  private async _open(): Promise<void> {\n    if (this.parent) {\n      // if the parent folder is provided, the file path is relative to the parent folder\n      this._path = join(this.parent.path, this.entity.meta.name)\n    } else {\n      // otherwise, the file path is in a temporary directory\n      // use HIGHSTATE_TEMP_PATH as base if available for better cleanup reliability\n      const tempBase = process.env.HIGHSTATE_TEMP_PATH || tmpdir()\n      this._tmpPath = await mkdtemp(join(tempBase, \"highstate-file-\"))\n      this._path = join(this._tmpPath, this.entity.meta.name)\n    }\n\n    switch (this.entity.content.type) {\n      case \"embedded\": {\n        const content = this.entity.content.isBinary\n          ? Buffer.from(this.entity.content.value, \"base64\")\n          : this.entity.content.value\n\n        await writeFile(this._path, content, { mode: this.entity.meta.mode })\n        break\n      }\n      case \"local\": {\n        await cp(this.entity.content.path, this._path, { mode: this.entity.meta.mode })\n        break\n      }\n      case \"remote\": {\n        const response = await fetch(l7EndpointToString(this.entity.content.endpoint))\n        if (!response.ok) throw new Error(`Failed to fetch: ${response.statusText}`)\n\n        const arrayBuffer = await response.arrayBuffer()\n        await writeFile(this._path, Buffer.from(arrayBuffer), { mode: this.entity.meta.mode })\n\n        break\n      }\n      case \"artifact\": {\n        const artifactPath = process.env.HIGHSTATE_ARTIFACT_READ_PATH\n        if (!artifactPath) {\n          throw new Error(\n            \"HIGHSTATE_ARTIFACT_READ_PATH environment variable is not set but required for artifact content\",\n          )\n        }\n\n        const tgzPath = join(artifactPath, `${this.entity.content.hash}.tgz`)\n\n        // extract the tgz file directly to the target path\n        const readStream = createReadStream(tgzPath)\n        await unarchiveFromStream(readStream, dirname(this._path), \"tar\")\n        break\n      }\n    }\n  }\n\n  async [Symbol.asyncDispose](): Promise<void> {\n    if (this._disposed) return\n    this._disposed = true\n\n    try {\n      if (this._tmpPath) {\n        // clear the whole temporary directory if it was created\n        await rm(this._tmpPath, { recursive: true, force: true })\n      } else {\n        // otherwise, just remove the file\n        await rm(this._path, { force: true })\n      }\n    } catch (error) {\n      // ignore errors during cleanup, as the file might have been already removed\n      // or the temporary directory might not exist\n      // TODO: centralized logging for unit code\n      console.warn(\"failed to clean up materialized file:\", error)\n    }\n  }\n\n  /**\n   * Packs the materialized file into an artifact and returns the file entity with artifact content.\n   *\n   * Creates a tgz archive of the file and stores it in HIGHSTATE_ARTIFACT_WRITE_PATH where it will be collected by Highstate.\n   */\n  async pack(): Promise<File> {\n    const writeDir = process.env.HIGHSTATE_ARTIFACT_WRITE_PATH\n    if (!writeDir) {\n      throw new Error(\"HIGHSTATE_ARTIFACT_WRITE_PATH environment variable is not set\")\n    }\n\n    // read actual file stats from filesystem\n    const fileStats = await stat(this._path)\n\n    // create tgz archive of the file\n    const tempBase = process.env.HIGHSTATE_TEMP_PATH || tmpdir()\n    const tempArchivePath = join(tempBase, `highstate-pack-${Date.now()}.tgz`)\n\n    try {\n      await tar.create(\n        {\n          gzip: true,\n          file: tempArchivePath,\n          cwd: dirname(this._path),\n          noMtime: true, // to reproduce the same archive every time\n        },\n        [basename(this._path)],\n      )\n\n      // calculate hash of the archive\n      const fileContent = createReadStream(tempArchivePath)\n      const hash = createHash(\"sha256\")\n\n      for await (const chunk of fileContent) {\n        hash.update(chunk as Buffer)\n      }\n\n      const hashValue = hash.digest(\"hex\")\n\n      // move archive to write directory with hash name\n      const finalArchivePath = join(writeDir, `${hashValue}.tgz`)\n      await rename(tempArchivePath, finalArchivePath)\n\n      const newMeta = {\n        name: this.entity.meta.name,\n        mode: fileStats.mode & 0o777, // extract only permission bits\n        size: fileStats.size,\n      }\n\n      // return file entity with artifact content using actual filesystem stats\n      return {\n        meta: newMeta,\n        content: {\n          type: \"artifact\",\n          [HighstateSignature.Artifact]: true,\n          hash: hashValue,\n          meta: await toPromise(this.artifactMeta),\n        },\n      }\n    } finally {\n      // clean up temporary archive\n      try {\n        await rm(tempArchivePath, { force: true })\n      } catch {\n        // ignore cleanup errors\n      }\n    }\n  }\n\n  /**\n   * Creates an empty materialized file with the given name.\n   *\n   * @param name The name of the file to create\n   * @param content Optional initial content of the file (default is empty string)\n   * @param mode Optional file mode (permissions)\n   * @returns A new MaterializedFile instance representing an empty file\n   */\n  static async create(name: string, content = \"\", mode?: number): Promise<MaterializedFile> {\n    const entity: common.File = {\n      meta: {\n        name,\n        mode,\n        size: 0,\n      },\n      content: {\n        type: \"embedded\",\n        value: content,\n      },\n    }\n\n    const materializedFile = new MaterializedFile(entity)\n\n    try {\n      await materializedFile._open()\n    } catch (error) {\n      await materializedFile[Symbol.asyncDispose]()\n      throw error\n    }\n\n    return materializedFile\n  }\n\n  static async open(file: common.File, parent?: MaterializedFolder): Promise<MaterializedFile> {\n    const materializedFile = new MaterializedFile(file, parent)\n\n    try {\n      await materializedFile._open()\n    } catch (error) {\n      await materializedFile[Symbol.asyncDispose]()\n      throw error\n    }\n\n    return materializedFile\n  }\n}\n\n/**\n * The `MaterializedFolder` class represents a folder entity that has been materialized\n * to a local filesystem path.\n *\n * It handles creating a temporary directory, copying the folder content to that directory,\n * and cleaning up the temporary files when disposed.\n *\n * For improved cleanup reliability, the class will use HIGHSTATE_TEMP_PATH as the base\n * directory for temporary files if available, allowing for centralized cleanup by the runner.\n */\nexport class MaterializedFolder implements AsyncDisposable {\n  private _tmpPath?: string\n  private _path!: string\n  private _disposed = false\n\n  private readonly _disposables: AsyncDisposable[] = []\n\n  readonly artifactMeta: CommonObjectMeta\n\n  constructor(\n    readonly entity: common.Folder,\n    readonly parent?: MaterializedFolder,\n  ) {\n    this.artifactMeta = {\n      title: `Materialized folder \"${entity.meta.name}\"`,\n    }\n  }\n\n  get path(): string {\n    return this._path\n  }\n\n  private async _open(): Promise<void> {\n    if (this.parent) {\n      // if the parent folder is provided, the folder path is relative to the parent folder\n      this._path = join(this.parent.path, this.entity.meta.name)\n    } else {\n      // otherwise, the folder path is in a temporary directory\n      // use HIGHSTATE_TEMP_PATH as base if available for better cleanup reliability\n      const tempBase = process.env.HIGHSTATE_TEMP_PATH || tmpdir()\n      this._tmpPath = await mkdtemp(join(tempBase, \"highstate-folder-\"))\n      this._path = join(this._tmpPath, this.entity.meta.name)\n    }\n\n    switch (this.entity.content.type) {\n      case \"embedded\": {\n        // create the folder itself\n        await mkdir(this._path, { mode: this.entity.meta.mode })\n\n        for (const file of this.entity.content.files) {\n          const materializedFile = await MaterializedFile.open(file, this)\n          this._disposables.push(materializedFile)\n        }\n\n        for (const subfolder of this.entity.content.folders) {\n          const materializedFolder = await MaterializedFolder.open(subfolder, this)\n          this._disposables.push(materializedFolder)\n        }\n\n        break\n      }\n      case \"local\": {\n        // Check if the local path is an archive file that needs extraction\n        const archiveType = detectArchiveType(this.entity.content.path)\n\n        if (archiveType) {\n          // Extract archive to the destination path\n          const readStream = createReadStream(this.entity.content.path)\n          await unarchiveFromStream(readStream, this._path, archiveType)\n        } else {\n          // Regular directory copy\n          await cp(this.entity.content.path, this._path, {\n            recursive: true,\n            mode: this.entity.meta.mode,\n          })\n        }\n\n        break\n      }\n      case \"remote\": {\n        const response = await fetch(l7EndpointToString(this.entity.content.endpoint))\n        if (!response.ok) throw new Error(`Failed to fetch: ${response.statusText}`)\n        if (!response.body) throw new Error(\"Response body is empty\")\n\n        // Try to detect archive type from URL or content type\n        const url = new URL(l7EndpointToString(this.entity.content.endpoint))\n        const archiveType = detectArchiveType(\n          url.pathname,\n          response.headers.get(\"content-type\") || undefined,\n        )\n\n        if (!archiveType) {\n          throw new Error(\"Remote folder content must be an archive (tar, tar.gz, tgz, or zip)\")\n        }\n\n        if (!response.body) {\n          throw new Error(\"Response body is empty\")\n        }\n\n        const reader = response.body.getReader()\n        const stream = new Readable({\n          async read() {\n            try {\n              const { done, value } = await reader.read()\n              if (done) {\n                this.push(null)\n              } else {\n                this.push(Buffer.from(value))\n              }\n            } catch (error) {\n              this.destroy(error instanceof Error ? error : new Error(String(error)))\n            }\n          },\n        })\n\n        await unarchiveFromStream(stream, this._path, archiveType)\n\n        break\n      }\n      case \"artifact\": {\n        const artifactPath = process.env.HIGHSTATE_ARTIFACT_READ_PATH\n\n        if (!artifactPath) {\n          throw new Error(\n            \"HIGHSTATE_ARTIFACT_READ_PATH environment variable is not set but required for artifact content\",\n          )\n        }\n\n        const tgzPath = join(artifactPath, `${this.entity.content.hash}.tgz`)\n\n        // extract the tgz file directly to the target path\n        const readStream = createReadStream(tgzPath)\n        await unarchiveFromStream(readStream, dirname(this._path), \"tar\")\n\n        break\n      }\n    }\n  }\n\n  async [Symbol.asyncDispose](): Promise<void> {\n    if (this._disposed) return\n    this._disposed = true\n\n    try {\n      if (this._tmpPath) {\n        // clear the whole temporary directory if it was created\n        await rm(this._tmpPath, { recursive: true, force: true })\n      } else {\n        // otherwise, just remove the folder\n        await rm(this._path, { recursive: true, force: true })\n      }\n    } catch (error) {\n      // ignore errors during cleanup, as the folder might have been already removed\n      // or the temporary directory might not exist\n      // TODO: centralized logging for unit code\n      console.warn(\"failed to clean up materialized folder:\", error)\n    }\n\n    // dispose all materialized children\n    for (const disposable of this._disposables) {\n      await disposable[Symbol.asyncDispose]()\n    }\n  }\n\n  /**\n   * Packs the materialized folder into an artifact and returns the folder entity with artifact content.\n   *\n   * Creates a tgz archive of the entire folder and stores it in HIGHSTATE_ARTIFACT_WRITE_PATH where it will be collected by Highstate.\n   */\n  async pack({ include, exclude }: FolderPackOptions = {}): Promise<common.Folder> {\n    const writeDir = process.env.HIGHSTATE_ARTIFACT_WRITE_PATH\n    if (!writeDir) {\n      throw new Error(\"HIGHSTATE_ARTIFACT_WRITE_PATH environment variable is not set\")\n    }\n\n    // read actual folder stats from filesystem\n    const folderStats = await stat(this._path)\n\n    // create tgz archive of the folder\n    const tempBase = process.env.HIGHSTATE_TEMP_PATH || tmpdir()\n    const tempArchivePath = join(tempBase, `highstate-pack-${Date.now()}.tgz`)\n\n    const entity = this.entity\n\n    try {\n      await tar.create(\n        {\n          gzip: true,\n          file: tempArchivePath,\n          cwd: dirname(this._path),\n\n          filter(path) {\n            // match without the folder name prefix\n            path = path.slice(entity.meta.name.length + 1)\n\n            // handle explicit excludes\n            for (const pattern of exclude ?? []) {\n              if (minimatch(path, pattern)) {\n                return false\n              }\n            }\n\n            // try to match include patterns\n            for (const pattern of include ?? []) {\n              if (minimatch(path, pattern)) {\n                return true\n              }\n            }\n\n            // include all files if no include patterns are specified\n            return !include || include.length === 0\n          },\n\n          // to reproduce the same archive every time\n          portable: true,\n          noMtime: true,\n        },\n        [basename(this._path)],\n      )\n\n      // calculate hash of the archive\n      const fileContent = createReadStream(tempArchivePath)\n      const hash = createHash(\"sha256\")\n\n      for await (const chunk of fileContent) {\n        hash.update(chunk as Buffer)\n      }\n\n      const hashValue = hash.digest(\"hex\")\n\n      // move archive to write directory with hash name\n      const finalArchivePath = join(writeDir, `${hashValue}.tgz`)\n      await rename(tempArchivePath, finalArchivePath)\n\n      const newMeta = {\n        name: this.entity.meta.name,\n        mode: folderStats.mode & 0o777, // extract only permission bits\n      }\n\n      // return folder entity with artifact content using actual filesystem stats\n      return {\n        meta: newMeta,\n        content: {\n          [HighstateSignature.Artifact]: true,\n          type: \"artifact\",\n          hash: hashValue,\n          meta: await toPromise(this.artifactMeta),\n        },\n      }\n    } finally {\n      // clean up temporary archive\n      try {\n        await rm(tempArchivePath, { force: true })\n      } catch {\n        // ignore cleanup errors\n      }\n    }\n  }\n\n  /**\n   * Creates an empty materialized folder with the given name.\n   *\n   * @param name The name of the folder to create\n   * @param mode Optional folder mode (permissions)\n   * @param parent Optional parent folder to create the folder in\n   * @returns A new MaterializedFolder instance representing an empty folder\n   */\n  static async create(\n    name: string,\n    mode?: number,\n    parent?: MaterializedFolder,\n  ): Promise<MaterializedFolder> {\n    const entity: common.Folder = {\n      meta: {\n        name,\n        mode,\n      },\n      content: {\n        type: \"embedded\",\n        files: [],\n        folders: [],\n      },\n    }\n\n    const materializedFolder = new MaterializedFolder(entity, parent)\n\n    try {\n      await materializedFolder._open()\n    } catch (error) {\n      await materializedFolder[Symbol.asyncDispose]()\n      throw error\n    }\n\n    return materializedFolder\n  }\n\n  static async open(\n    folder: common.Folder,\n    parent?: MaterializedFolder,\n  ): Promise<MaterializedFolder> {\n    const materializedFolder = new MaterializedFolder(folder, parent)\n\n    try {\n      await materializedFolder._open()\n    } catch (error) {\n      await materializedFolder[Symbol.asyncDispose]()\n      throw error\n    }\n\n    return materializedFolder\n  }\n}\n\n/**\n * Fetches the size of a file from a given L7 endpoint.\n *\n * @param endpoint The L7 endpoint to fetch the file size from.\n * @returns The size of the file in bytes.\n * @throws If the protocol is not HTTP/HTTPS or if the request fails.\n */\nexport async function fetchFileSize(endpoint: network.L7Endpoint): Promise<number> {\n  if (endpoint.appProtocol !== \"http\" && endpoint.appProtocol !== \"https\") {\n    throw new Error(\n      `Unsupported protocol: ${endpoint.appProtocol}. Only HTTP and HTTPS are supported.`,\n    )\n  }\n\n  const url = l7EndpointToString(endpoint)\n  const response = await fetch(url, { method: \"HEAD\" })\n\n  if (!response.ok) {\n    throw new Error(`Failed to fetch file size: ${response.statusText}`)\n  }\n\n  const contentLength = response.headers.get(\"content-length\")\n  if (!contentLength) {\n    throw new Error(\"Content-Length header is missing in the response\")\n  }\n\n  const size = parseInt(contentLength, 10)\n  if (Number.isNaN(size)) {\n    throw new Error(`Invalid Content-Length value: ${contentLength}`)\n  }\n\n  return size\n}\n\n/**\n * Extracts the name from an L7 endpoint URL without its file extension.\n */\nexport function getNameByEndpoint(endpoint: InputL7Endpoint): string {\n  const parsedEndpoint = parseL7Endpoint(endpoint)\n\n  return parsedEndpoint.resource ? basename(parsedEndpoint.resource) : \"\"\n}\n","import { bytesToHex, randomBytes } from \"@noble/hashes/utils\"\nimport { secureMask } from \"micro-key-producer/password.js\"\n\n/**\n * Generates a secure random password strong enough for online use.\n *\n * It uses \"Safari Keychain Secure Password\" format.\n *\n * The approximate entropy is [71 bits](https://support.apple.com/guide/security/automatic-strong-passwords-secc84c811c4/web).\n */\nexport function generatePassword(): string {\n  return secureMask.apply(randomBytes(32)).password\n}\n\ntype KeyFormatMap = {\n  raw: Uint8Array\n  hex: string\n  base64: string\n}\n\n/**\n * Generates a secure random key strong enough for offline use such as encryption.\n *\n * The strong entropy is 256 bits.\n *\n * @param format The format of the generated key. By default, it is \"hex\".\n */\nexport function generateKey<TFormat extends keyof KeyFormatMap = \"hex\">(\n  format: TFormat = \"hex\" as TFormat,\n): KeyFormatMap[TFormat] {\n  const bytes = randomBytes(32)\n\n  if (format === \"raw\") {\n    return bytes as KeyFormatMap[TFormat]\n  }\n\n  if (format === \"base64\") {\n    return Buffer.from(bytes).toString(\"base64\") as KeyFormatMap[TFormat]\n  }\n\n  return bytesToHex(bytes) as KeyFormatMap[TFormat]\n}\n","{\n  \"terminal-ssh\": {\n    \"name\": \"ghcr.io/exeteres/highstate/terminal-ssh\",\n    \"tag\": \"latest\",\n    \"image\": \"ghcr.io/exeteres/highstate/terminal-ssh:latest@sha256:99380e0405522afa0058eedce124c1970a87408663365b2dbce737801a7cd5d1\"\n  }\n}\n","import type { common, network, ssh } from \"@highstate/library\"\nimport { stripNullish, type UnitTerminal } from \"@highstate/contract\"\nimport {\n  fileFromString,\n  type Input,\n  type Output,\n  output,\n  secret,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { remote } from \"@pulumi/command\"\nimport getKeys, { PrivateExport } from \"micro-key-producer/ssh.js\"\nimport { randomBytes } from \"micro-key-producer/utils.js\"\nimport * as images from \"../../assets/images.json\"\nimport { Command } from \"./command\"\nimport { l3EndpointToL4, l3EndpointToString } from \"./network\"\n\nexport async function createSshTerminal(\n  credentials: Input<ssh.Connection>,\n): Promise<Output<UnitTerminal>> {\n  const resolvedCredentials = await toPromise(credentials)\n\n  const command = [\"ssh\", \"-tt\", \"-o\", \"UserKnownHostsFile=/known_hosts\"]\n\n  // TODO: select best endpoint based on the environment\n  const endpoint = resolvedCredentials.endpoints[0]\n\n  command.push(\"-p\", endpoint.port.toString())\n\n  if (resolvedCredentials.keyPair) {\n    command.push(\"-i\", \"/private_key\")\n  }\n\n  command.push(`${resolvedCredentials.user}@${l3EndpointToString(endpoint)}`)\n\n  if (resolvedCredentials.password) {\n    command.unshift(\"sshpass\", \"-f\", \"/password\")\n  }\n\n  return output({\n    name: \"ssh\",\n\n    meta: {\n      title: \"Shell\",\n      description: \"Connect to the server via SSH.\",\n      icon: \"gg:remote\",\n    },\n\n    spec: {\n      image: images[\"terminal-ssh\"].image,\n      command,\n\n      files: stripNullish({\n        \"/password\": resolvedCredentials.password\n          ? fileFromString(\"password\", resolvedCredentials.password, { isSecret: true })\n          : undefined,\n\n        \"/private_key\": resolvedCredentials.keyPair?.privateKey\n          ? fileFromString(\"private_key\", resolvedCredentials.keyPair.privateKey, {\n              isSecret: true,\n              mode: 0o600,\n            })\n          : undefined,\n\n        \"/known_hosts\": fileFromString(\n          \"known_hosts\",\n          `${l3EndpointToString(endpoint)} ${resolvedCredentials.hostKey}`,\n          { mode: 0o644 },\n        ),\n      }),\n    },\n  })\n}\n\n/**\n * Generates a secure random SSH private key.\n * The key is generated using the Ed25519 algorithm.\n *\n * @returns The generated SSH private key in PEM format.\n */\nexport function generateSshPrivateKey(): Output<string> {\n  const seed = randomBytes(32)\n\n  return secret(getKeys(seed).privateKey)\n}\n\n/**\n * Converts a private SSH key string to a KeyPair object.\n *\n * @param privateKeyString The private key string to convert.\n * @returns An Output of the KeyPair object.\n */\nexport function sshPrivateKeyToKeyPair(privateKeyString: Input<string>): Output<ssh.KeyPair> {\n  return output(privateKeyString).apply(privateKeyString => {\n    const privateKeyStruct = PrivateExport.decode(privateKeyString)\n\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n    const privKey = privateKeyStruct.keys[0].privKey.privKey as Uint8Array\n\n    const { fingerprint, publicKey } = getKeys(privKey.slice(0, 32))\n\n    return output({\n      type: \"ed25519\" as const,\n      fingerprint,\n      publicKey,\n      privateKey: secret(privateKeyString),\n    })\n  })\n}\n\nexport type ServerOptions = {\n  /**\n   * The local name of the server to namespace resources.\n   */\n  name: string\n\n  /**\n   * The fallback hostname to use if the server cannot be determined.\n   *\n   * If not provided, the `name` will be used as the fallback hostname.\n   */\n  fallbackHostname?: string\n\n  /**\n   * The L3 endpoints of the server.\n   */\n  endpoints: network.L3Endpoint[]\n\n  /**\n   * The arguments for the SSH connection.\n   */\n  sshArgs?: Partial<ssh.Args>\n\n  /**\n   * The password for the SSH connection.\n   */\n  sshPassword?: Input<string>\n\n  /**\n   * The private key for the SSH connection.\n   */\n  sshPrivateKey?: Input<string>\n\n  /**\n   * The SSH key pair for the server.\n   * If provided, it will take precedence over the `sshPrivateKey` argument.\n   */\n  sshKeyPair?: Input<ssh.KeyPair>\n\n  /**\n   * Whether to wait for the server to respond to a ping command before returning.\n   *\n   * If true, the command will wait for a successful ping response before proceeding.\n   *\n   * By default, this is equal to `!waitForSsh`, so when `waitForSsh` is true, no extra ping is performed.\n   */\n  waitForPing?: boolean\n\n  /**\n   * The interval in seconds to wait between ping attempts.\n   *\n   * Only used if `waitForPing` is true.\n   * By default, it will wait 5 seconds between attempts.\n   */\n  pingInterval?: number\n\n  /**\n   * The timeout in seconds to wait for the server to respond to a ping command.\n   *\n   * Only used if `waitForPing` is true.\n   * By default, it will wait 5 minutes (300 seconds) before timing out.\n   */\n  pingTimeout?: number\n\n  /**\n   * Whether to wait for the SSH service to be available before returning.\n   *\n   * If true, the command will wait for the SSH service to respond before proceeding.\n   *\n   * By default, this is true if `sshArgs.enabled` is true, otherwise false.\n   */\n  waitForSsh?: boolean\n\n  /**\n   * The interval in seconds to wait between SSH connection attempts.\n   *\n   * Only used if `waitForSsh` is true.\n   * By default, it will wait 5 seconds between attempts.\n   */\n  sshCheckInterval?: number\n\n  /**\n   * The timeout in seconds to wait for the SSH service to respond.\n   *\n   * Only used if `waitForSsh` is true.\n   * By default, it will wait 5 minutes (300 seconds) before timing out.\n   */\n  sshCheckTimeout?: number\n}\n\nexport type ServerBundle = {\n  /**\n   * The server entity created with the provided options.\n   */\n  server: Output<common.Server>\n\n  /**\n   * The SSH terminal created for the server.\n   */\n  terminal?: Output<UnitTerminal>\n}\n\n/**\n * Creates a server entity with the provided options and returns a bundle containing the server entity and terminal.\n *\n * Basically, it just a convenience function that calls `createServerEntity` and `createSshTerminal`.\n *\n * @param options The options for creating the server entity.\n * @returns A promise that resolves to a ServerBundle containing the server entity and terminal.\n */\nexport async function createServerBundle(options: ServerOptions): Promise<ServerBundle> {\n  const server = await createServerEntity(options)\n  const ssh = await toPromise(server.ssh)\n\n  return {\n    server,\n    terminal: ssh ? await createSshTerminal(ssh) : undefined,\n  }\n}\n\n/**\n * Creates a server entity with the provided options.\n * It will create a command to check the SSH service and return the server entity.\n *\n * @param options The options for creating the server entity.\n * @returns A promise that resolves to the created server entity.\n */\nexport async function createServerEntity({\n  name,\n  fallbackHostname,\n  endpoints,\n  sshArgs = { enabled: true, port: 22, user: \"root\" },\n  sshPassword,\n  sshPrivateKey,\n  sshKeyPair,\n  pingInterval,\n  pingTimeout,\n  waitForPing,\n  waitForSsh,\n  sshCheckInterval,\n  sshCheckTimeout,\n}: ServerOptions): Promise<Output<common.Server>> {\n  if (endpoints.length === 0) {\n    throw new Error(\"At least one L3 endpoint is required to create a server entity\")\n  }\n\n  fallbackHostname ??= name\n  waitForSsh ??= sshArgs.enabled\n  waitForPing ??= !waitForSsh\n\n  if (waitForPing) {\n    await Command.waitFor(`${name}.ping`, {\n      host: \"local\",\n      create: `ping -c 1 ${l3EndpointToString(endpoints[0])}`,\n      timeout: pingTimeout ?? 300,\n      interval: pingInterval ?? 5,\n      triggers: [Date.now()],\n    }).wait()\n  }\n\n  if (!sshArgs.enabled) {\n    return output({\n      hostname: name,\n      endpoints,\n    })\n  }\n\n  const sshHost = sshArgs?.host ?? l3EndpointToString(endpoints[0])\n\n  if (waitForSsh) {\n    await Command.waitFor(`${name}.ssh`, {\n      host: \"local\",\n      create: `nc -zv ${sshHost} ${sshArgs.port}`,\n      timeout: sshCheckTimeout ?? 300,\n      interval: sshCheckInterval ?? 5,\n      triggers: [Date.now()],\n    }).wait()\n  }\n\n  const connection = output({\n    host: sshHost,\n    port: sshArgs.port,\n    user: sshArgs.user,\n    password: sshPassword,\n    privateKey: sshKeyPair ? output(sshKeyPair).privateKey : sshPrivateKey,\n    dialErrorLimit: 3,\n  })\n\n  const hostnameResult = new remote.Command(\"hostname\", {\n    connection,\n    create: \"hostname\",\n    triggers: [Date.now()],\n  })\n\n  const hostKeyResult = new remote.Command(\"host-key\", {\n    connection,\n    create: \"cat /etc/ssh/ssh_host_ed25519_key.pub\",\n    triggers: [Date.now()],\n  })\n\n  return output({\n    endpoints,\n    hostname: hostnameResult.stdout.apply(x => x.trim()),\n    ssh: {\n      endpoints: [l3EndpointToL4(sshHost, sshArgs.port ?? 22)],\n      user: sshArgs.user ?? \"root\",\n      hostKey: hostKeyResult.stdout.apply(x => x.trim()),\n      password: connection.password,\n      keyPair: sshKeyPair\n        ? sshKeyPair\n        : sshPrivateKey\n          ? sshPrivateKeyToKeyPair(sshPrivateKey)\n          : undefined,\n    },\n  })\n}\n"]}