@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.3

package/dist/telemetry/connection/telemetry-connection.schema.js

@@ -0,0 +1,106 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.telemetryUserSchema = exports.telemetryPgPortSchema = exports.telemetryOptionalHostSchema = exports.telemetryHostSchema = exports.telemetryDatabaseSchema = exports.telemetryCustomConnectionValueSchema = exports.telemetryConnectionValueSchema = exports.telemetryAutomaticConnectionValueSchema = exports.TELEMETRY_DATABASE_PATTERN = exports.TELEMETRY_CONNECTION_CARRIES_NO_SECRET = exports.TELEMETRY_GREPTIME_CREDENTIAL_LABELS = exports.TELEMETRY_CONNECTION_ROLES = exports.TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE = exports.TELEMETRY_DEFAULT_DATABASE = exports.TELEMETRY_DEFAULT_PG_PORT = exports.TELEMETRY_DEFAULT_HOST = exports.TELEMETRY_CONNECTION_SETTINGS_KEY = void 0;
+exports.telemetryDeploymentHost = telemetryDeploymentHost;
+const telemetry_1 = require("@marinoscar/platform-contract/telemetry");
+// =============================================================================
+// The stored GreptimeDB connection — `system_settings.key = 'telemetry_connection'`
+// (issue #558, epic #528)
+// =============================================================================
+//
+// WHAT IS STORED, AND WHERE
+// -----------------------------------------------------------------------------
+//
+//   system_settings row 'telemetry_connection'   custom:    host, pgPort, database,
+//                                                           readerUser, adminUser
+//                                                automatic: { host: null } only — the
+//                                                           deployment supplies the rest (#570)
+//   credentials (telemetry_greptime, reader)     the reader's password (custom host only)
+//   credentials (telemetry_greptime, admin)      the admin's password  (custom host only)
+//
+// The two passwords live in the encrypted credential store and nowhere else;
+// the row carries no field able to hold one (compile-time proof below).
+//
+// WHY A ROW OF ITS OWN, NOT A NAMESPACE INSIDE 'global'. The same reason the
+// email settings have one (`email/email-settings.service.ts`): the generic
+// `PUT/PATCH /api/system-settings` owns the 'global' row, and a key it does
+// not model is either clobbered by it or carried forward with a "preserved
+// unknown key" warning on every unrelated save. A separate row cannot be
+// touched by that endpoint at all, keeps the connection out of
+// `GET /api/system-settings`, and gives `If-Match` a version counter of its
+// own, so saving an unrelated setting cannot make this form's save conflict.
+// ABSENT ROW = NOTHING STORED, which is what selects the deployment default
+// (see `TelemetryConnectionService`).
+//
+// WHAT IS DELIBERATELY NOT HERE: THE WRITER CREDENTIAL AND THE HTTP PORT.
+// `GREPTIME_WRITER_*` and `GREPTIME_HTTP_PORT` are consumed only by the OTel
+// collector (which writes telemetry over HTTP) and the GreptimeDB container
+// (which provisions its users from them). The API never writes telemetry and
+// never speaks HTTP to GreptimeDB, so it has no use for either — and storing
+// an unused write-capable secret here would widen what a compromise of the
+// API's database yields, for nothing. They stay environment-only.
+// =============================================================================
+/** The `system_settings.key` the stored connection lives under. */
+exports.TELEMETRY_CONNECTION_SETTINGS_KEY = 'telemetry_connection';
+/**
+ * The host GreptimeDB answers on in every supported deployment: the Docker
+ * Compose service name `greptimedb`, on the API's network, in both
+ * `infra/compose/telemetry.compose.yml` and `vps.telemetry.compose.yml` (and
+ * `.env.example` ships `GREPTIME_HOST=greptimedb`). It is the last resort of
+ * the DEPLOYMENT HOST (`GREPTIME_HOST` when set and non-blank, else this), which
+ * a stored connection with an AUTOMATIC host (`host: null`, issue #562)
+ * resolves to at refresh time, so it follows the deployment instead of freezing
+ * a literal an operator never chose.
+ */
+exports.TELEMETRY_DEFAULT_HOST = 'greptimedb';
+/** GreptimeDB's Postgres-wire default port, and its default database (`TELEMETRY_CONNECTION_DEFAULTS` in the contract). */
+exports.TELEMETRY_DEFAULT_PG_PORT = telemetry_1.TELEMETRY_CONNECTION_DEFAULTS.pgPort;
+exports.TELEMETRY_DEFAULT_DATABASE = telemetry_1.TELEMETRY_CONNECTION_DEFAULTS.database;
+/** The deployment host: `GREPTIME_HOST` when set and non-blank, else `TELEMETRY_DEFAULT_HOST`. */
+function telemetryDeploymentHost(environmentHost) {
+    return environmentHost?.trim() || exports.TELEMETRY_DEFAULT_HOST;
+}
+/** Credential-store purpose (and cipher sub-key domain) of the two passwords. */
+exports.TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE = 'telemetry_greptime';
+/** The two logins the API uses. Also the credential names inside the purpose. */
+exports.TELEMETRY_CONNECTION_ROLES = ['reader', 'admin'];
+/** Admin-UI labels written alongside each credential. Non-secret. */
+exports.TELEMETRY_GREPTIME_CREDENTIAL_LABELS = {
+    reader: 'GreptimeDB read-only login (telemetry explorer, status)',
+    admin: 'GreptimeDB admin login (telemetry retention)',
+};
+// -----------------------------------------------------------------------------
+// The stored value and its field validators
+// -----------------------------------------------------------------------------
+//
+// The value schemas (`telemetryConnectionValueSchema` and its custom/automatic
+// halves), the host, port, database and user validators and the compile-time
+// proof that the stored row carries no secret
+// (`TELEMETRY_CONNECTION_CARRIES_NO_SECRET`) live in
+// `@marinoscar/platform-contract/telemetry` (#702): the admin form validates
+// with the same rules. The host rule there reproduces `net.isIP` without Node
+// (`telemetry-connection.schema.spec.ts` compares the two).
+//
+// The database name is held to a plain identifier because the retention job
+// interpolates it UNQUOTED into `ALTER DATABASE` (GreptimeDB resolves a quoted
+// name literally there) and refuses anything else — see `PLAIN_IDENTIFIER` in
+// `handlers/telemetry-retention.handler.ts`. Accepting more would save a
+// connection whose retention can never be applied.
+//
+// Adding a `readerPassword` (or any secret-like name) to the value schemas
+// makes the proof resolve to `never` and the contract stops compiling. The
+// passwords belong in `CredentialsService` under
+// `TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE`, never in a row whose value the
+// audit trail copies.
+var telemetry_2 = require("@marinoscar/platform-contract/telemetry");
+Object.defineProperty(exports, "TELEMETRY_CONNECTION_CARRIES_NO_SECRET", { enumerable: true, get: function () { return telemetry_2.TELEMETRY_CONNECTION_CARRIES_NO_SECRET; } });
+Object.defineProperty(exports, "TELEMETRY_DATABASE_PATTERN", { enumerable: true, get: function () { return telemetry_2.TELEMETRY_DATABASE_PATTERN; } });
+Object.defineProperty(exports, "telemetryAutomaticConnectionValueSchema", { enumerable: true, get: function () { return telemetry_2.telemetryAutomaticConnectionValueSchema; } });
+Object.defineProperty(exports, "telemetryConnectionValueSchema", { enumerable: true, get: function () { return telemetry_2.telemetryConnectionValueSchema; } });
+Object.defineProperty(exports, "telemetryCustomConnectionValueSchema", { enumerable: true, get: function () { return telemetry_2.telemetryCustomConnectionValueSchema; } });
+Object.defineProperty(exports, "telemetryDatabaseSchema", { enumerable: true, get: function () { return telemetry_2.telemetryDatabaseSchema; } });
+Object.defineProperty(exports, "telemetryHostSchema", { enumerable: true, get: function () { return telemetry_2.telemetryHostSchema; } });
+Object.defineProperty(exports, "telemetryOptionalHostSchema", { enumerable: true, get: function () { return telemetry_2.telemetryOptionalHostSchema; } });
+Object.defineProperty(exports, "telemetryPgPortSchema", { enumerable: true, get: function () { return telemetry_2.telemetryPgPortSchema; } });
+Object.defineProperty(exports, "telemetryUserSchema", { enumerable: true, get: function () { return telemetry_2.telemetryUserSchema; } });
+//# sourceMappingURL=telemetry-connection.schema.js.map

package/dist/telemetry/connection/telemetry-connection.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-connection.schema.js","sourceRoot":"","sources":["../../../src/telemetry/connection/telemetry-connection.schema.ts"],"names":[],"mappings":";;;AA4DA,0DAEC;AA9DD,uEAAwF;AAExF,gFAAgF;AAChF,oFAAoF;AACpF,0BAA0B;AAC1B,gFAAgF;AAChF,EAAE;AACF,4BAA4B;AAC5B,gFAAgF;AAChF,EAAE;AACF,oFAAoF;AACpF,kFAAkF;AAClF,sFAAsF;AACtF,gGAAgG;AAChG,0FAA0F;AAC1F,0FAA0F;AAC1F,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,+DAA+D;AAC/D,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,kEAAkE;AAClE,gFAAgF;AAEhF,mEAAmE;AACtD,QAAA,iCAAiC,GAAG,sBAAsB,CAAC;AAExE;;;;;;;;;GASG;AACU,QAAA,sBAAsB,GAAG,YAAY,CAAC;AAEnD,2HAA2H;AAC9G,QAAA,yBAAyB,GAAG,yCAA6B,CAAC,MAAM,CAAC;AACjE,QAAA,0BAA0B,GAAG,yCAA6B,CAAC,QAAQ,CAAC;AAEjF,kGAAkG;AAClG,SAAgB,uBAAuB,CAAC,eAA0C;IAChF,OAAO,eAAe,EAAE,IAAI,EAAE,IAAI,8BAAsB,CAAC;AAC3D,CAAC;AAED,iFAAiF;AACpE,QAAA,qCAAqC,GAAG,oBAAoB,CAAC;AAE1E,iFAAiF;AACpE,QAAA,0BAA0B,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;AAGvE,qEAAqE;AACxD,QAAA,oCAAoC,GAA4C;IAC3F,MAAM,EAAE,yDAAyD;IACjE,KAAK,EAAE,8CAA8C;CACtD,CAAC;AAEF,gFAAgF;AAChF,4CAA4C;AAC5C,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,8CAA8C;AAC9C,qDAAqD;AACrD,6EAA6E;AAC7E,8EAA8E;AAC9E,4DAA4D;AAC5D,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,yEAAyE;AACzE,mDAAmD;AACnD,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,iDAAiD;AACjD,0EAA0E;AAC1E,sBAAsB;AAEtB,qEAWiD;AAV/C,mIAAA,sCAAsC,OAAA;AACtC,uHAAA,0BAA0B,OAAA;AAC1B,oIAAA,uCAAuC,OAAA;AACvC,2HAAA,8BAA8B,OAAA;AAC9B,iIAAA,oCAAoC,OAAA;AACpC,oHAAA,uBAAuB,OAAA;AACvB,gHAAA,mBAAmB,OAAA;AACnB,wHAAA,2BAA2B,OAAA;AAC3B,kHAAA,qBAAqB,OAAA;AACrB,gHAAA,mBAAmB,OAAA"}

package/dist/telemetry/connection/telemetry-connection.service.d.ts

@@ -0,0 +1,197 @@
+import { OnModuleDestroy, OnModuleInit } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { type TelemetryCredentialInfo as CredentialInfo, type TelemetryCredentialStore, type TelemetrySettingsStore } from '../ports';
+import { type TelemetryConnectionRole, type TelemetryConnectionValue } from './telemetry-connection.schema';
+/**
+ * What an administrator is told when the GreptimeDB deployed with this
+ * application lacks a login. Administrator language: no file, variable or
+ * command names — fixing it is an application update, not a form field.
+ */
+export declare const DEPLOYMENT_READER_MISSING_MESSAGE: string;
+export declare const DEPLOYMENT_ADMIN_MISSING_MESSAGE: string;
+/** How often every instance re-reads the stored connection. */
+export declare const TELEMETRY_CONNECTION_REFRESH_MS = 5000;
+/** `auto`: the host is the deployment host, resolved at refresh. `custom`: a literal someone chose. */
+export type TelemetryHostMode = 'auto' | 'custom';
+/** Where the resolved connection came from. */
+export type TelemetryConnectionSource = 'stored' | 'environment' | 'none';
+/** The `greptime` block of `config/configuration.ts` — the deployment default. */
+export interface GreptimeEnvironmentConfig {
+    host: string;
+    pgPort: number;
+    database: string;
+    readerUser: string;
+    readerPassword: string;
+    adminUser: string;
+    adminPassword: string;
+    available: boolean;
+}
+interface LoginSnapshot {
+    user: string;
+    passwordSet: boolean;
+    /** Changes whenever the password does. Part of the pool fingerprint. */
+    version: string | null;
+}
+/** The resolved connection, minus every secret. */
+export interface TelemetryConnectionSnapshot {
+    source: TelemetryConnectionSource;
+    /** The EFFECTIVE host — what a pool connects to. Empty when there is none (source `none`, or an unusable row). */
+    host: string;
+    /**
+     * `auto` when the host is the deployment host (a stored `host: null`, the
+     * environment source — `GREPTIME_HOST` is the deployment host — or no
+     * connection at all), `custom` when it is a literal an administrator stored.
+     */
+    hostMode: TelemetryHostMode;
+    /**
+     * The whole connection — port, database, logins and passwords — comes from
+     * the deployment (`GREPTIME_*`), not the admin page: source `environment`,
+     * or a stored automatic (null) host (issue #570). False for a custom host,
+     * an unusable row and `none`.
+     */
+    deploymentManaged: boolean;
+    pgPort: number;
+    database: string;
+    reader: LoginSnapshot;
+    /** Null when no admin login is configured. */
+    admin: LoginSnapshot | null;
+}
+/**
+ * The GreptimeDB deployed with this application, as the deployment describes
+ * it — what an automatic connection resolves to. Non-secret: whether each
+ * login is complete, never its password.
+ */
+export interface TelemetryDeploymentConnection {
+    host: string;
+    pgPort: number;
+    database: string;
+    readerUser: string;
+    adminUser: string | null;
+    /** A reader user and its password are both provisioned. */
+    readerConfigured: boolean;
+    /** An admin user and its password are both provisioned. */
+    adminConfigured: boolean;
+}
+/** What a pool is built from. Holds a plaintext password: use it and drop it. */
+export interface TelemetryConnectionCredentials {
+    host: string;
+    /** `host` is the deployment host of an automatic (null) host, not a literal override. */
+    automaticHost: boolean;
+    port: number;
+    database: string;
+    user: string;
+    password: string;
+    /** Identifies this exact connection; a pool built from it is stale once it differs. */
+    fingerprint: string;
+}
+/** A fresh read of everything the admin page shows. Non-secret. */
+export interface TelemetryConnectionState {
+    snapshot: TelemetryConnectionSnapshot;
+    /** The stored value, or null when nothing is stored (or it does not parse). */
+    stored: TelemetryConnectionValue | null;
+    /** The stored row's provenance, or null when there is no row. */
+    row: {
+        version: number;
+        updatedAt: Date;
+        updatedByUser: {
+            id: string;
+            email: string;
+        } | null;
+    } | null;
+    /** The credential store's view of both passwords (whatever the source). */
+    credentials: Record<TelemetryConnectionRole, CredentialInfo | null>;
+}
+export declare class TelemetryConnectionService implements OnModuleInit, OnModuleDestroy {
+    private readonly settingsStore;
+    private readonly credentials;
+    private readonly logger;
+    private readonly environment;
+    /**
+     * Seeded from the environment so the sync accessors have an answer before
+     * the first refresh (and so a unit test can build a client with no
+     * database). `onModuleInit` replaces it with the real resolution.
+     */
+    private snapshot;
+    private refreshTimer;
+    private refreshFailing;
+    private lastInvalidRowWarned;
+    constructor(configService: ConfigService, settingsStore: TelemetrySettingsStore, credentials: TelemetryCredentialStore);
+    /** One awaited refresh (never throws), then the interval. */
+    onModuleInit(): Promise<void>;
+    onModuleDestroy(): void;
+    /** Where the connection in force came from. */
+    get source(): TelemetryConnectionSource;
+    /**
+     * Where GreptimeDB is in this deployment: `GREPTIME_HOST` when non-blank,
+     * else `TELEMETRY_DEFAULT_HOST`. What an automatic (null) host resolves to.
+     */
+    get deploymentHost(): string;
+    /** The deployment's own GreptimeDB connection (non-secret), whatever is in force. */
+    describeDeployment(): TelemetryDeploymentConnection;
+    /**
+     * Why the connection in force cannot be used, in administrator language, or
+     * null. Only a deployment-managed connection has an answer here: its gaps
+     * are the deployment's, which nothing on the admin page can fill. `role`
+     * `admin` also reports a missing admin login (retention).
+     */
+    configurationProblem(role?: TelemetryConnectionRole): string | null;
+    /** The GreptimeDB database telemetry is written to. */
+    get database(): string;
+    /** A host, a reader login and its password — i.e. telemetry can be read. */
+    isConfigured(): boolean;
+    /** The admin login (retention, `SHOW CREATE DATABASE`) is usable as well. */
+    isAdminConfigured(): boolean;
+    /**
+     * An opaque identity of the connection a login would use right now, or
+     * null when that login is not configured. `GreptimeClient` keys its pools by
+     * it: a different answer means the pool it holds is stale.
+     */
+    fingerprint(role: TelemetryConnectionRole): string | null;
+    /** A copy of the snapshot. Non-secret. */
+    describeSnapshot(): TelemetryConnectionSnapshot;
+    /**
+     * The full connection for one login, password included, or null when that
+     * login is not configured (or its stored password has since gone).
+     *
+     * ⚠ Holds a plaintext password. Call it when building a pool and let the
+     * result go out of scope; never cache it, never log it.
+     */
+    resolveCredentials(role: TelemetryConnectionRole): Promise<TelemetryConnectionCredentials | null>;
+    /**
+     * The password the connection IN FORCE would use for this login — the
+     * deployment's when it is deployment-managed (the environment source, or a
+     * stored automatic host), the credential store's for a custom host, none
+     * when there is no connection. For the connection test's "blank means the
+     * current one".
+     *
+     * ⚠ Plaintext. Same rules as `resolveCredentials`.
+     */
+    currentPassword(role: TelemetryConnectionRole): Promise<string | null>;
+    /**
+     * The deployment's own password for this login (`GREPTIME_*`), or null when
+     * it provisions none. What an automatic connection uses — and the only
+     * password a connection test of an automatic host may use.
+     *
+     * ⚠ Plaintext. Same rules as `resolveCredentials`.
+     */
+    deploymentPassword(role: TelemetryConnectionRole): string | null;
+    private passwordOf;
+    /**
+     * Re-reads the stored row and the credentials' metadata, replaces the
+     * snapshot, and returns the full (non-secret) state. THROWS on a failed
+     * read, leaving the snapshot as it was — for a caller that must know (an
+     * admin read or write). The background refresh uses `refreshSafely`.
+     */
+    refresh(): Promise<TelemetryConnectionState>;
+    /** `refresh`, but never throws: a failure keeps the last snapshot and logs once per outage. */
+    refreshSafely(): Promise<boolean>;
+    /** The deployment default, as a snapshot (source `none` when it names no host). */
+    environmentSnapshot(): TelemetryConnectionSnapshot;
+    /**
+     * The deployment's GreptimeDB, every field from `GREPTIME_*`: what the
+     * environment source and a stored automatic host both resolve to.
+     */
+    private deploymentSnapshot;
+}
+export {};
+//# sourceMappingURL=telemetry-connection.service.d.ts.map

package/dist/telemetry/connection/telemetry-connection.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-connection.service.d.ts","sourceRoot":"","sources":["../../../src/telemetry/connection/telemetry-connection.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAGL,KAAK,uBAAuB,IAAI,cAAc,EAC9C,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC5B,MAAM,UAAU,CAAC;AAClB,OAAO,EAOL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAE9B,MAAM,+BAA+B,CAAC;AA6EvC;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,QAEH,CAAC;AAC5C,eAAO,MAAM,gCAAgC,QAEiB,CAAC;AAE/D,+DAA+D;AAC/D,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAQrD,uGAAuG;AACvG,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAElD,+CAA+C;AAC/C,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,aAAa,GAAG,MAAM,CAAC;AAE1E,kFAAkF;AAClF,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,wEAAwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,mDAAmD;AACnD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,yBAAyB,CAAC;IAClC,kHAAkH;IAClH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,QAAQ,EAAE,iBAAiB,CAAC;IAC5B;;;;;OAKG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,8CAA8C;IAC9C,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,2DAA2D;IAC3D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,2DAA2D;IAC3D,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,iFAAiF;AACjF,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,mEAAmE;AACnE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,2BAA2B,CAAC;IACtC,+EAA+E;IAC/E,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACxC,iEAAiE;IACjE,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC;QAAC,aAAa,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACtG,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC,uBAAuB,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;CACrE;AAED,qBACa,0BAA2B,YAAW,YAAY,EAAE,eAAe;IAgB1C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAhBlE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;IACtE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IAExD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAA8B;IAC9C,OAAO,CAAC,YAAY,CAA+B;IACnD,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,oBAAoB,CAAS;gBAGnC,aAAa,EAAE,aAAa,EACuB,aAAa,EAAE,sBAAsB,EACnC,WAAW,EAAE,wBAAwB;IAiB5F,6DAA6D;IACvD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAUnC,eAAe,IAAI,IAAI;IAWvB,+CAA+C;IAC/C,IAAI,MAAM,IAAI,yBAAyB,CAEtC;IAED;;;OAGG;IACH,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,qFAAqF;IACrF,kBAAkB,IAAI,6BAA6B;IAcnD;;;;;OAKG;IACH,oBAAoB,CAAC,IAAI,GAAE,uBAAkC,GAAG,MAAM,GAAG,IAAI;IAU7E,uDAAuD;IACvD,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,4EAA4E;IAC5E,YAAY,IAAI,OAAO;IAMvB,6EAA6E;IAC7E,iBAAiB,IAAI,OAAO;IAM5B;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,GAAG,IAAI;IAQzD,0CAA0C;IAC1C,gBAAgB,IAAI,2BAA2B;IAQ/C;;;;;;OAMG;IACG,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;IAqBvG;;;;;;;;OAQG;IACG,eAAe,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI5E;;;;;;OAMG;IACH,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,GAAG,IAAI;YAMlD,UAAU;IAcxB;;;;;OAKG;IACG,OAAO,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAyDlD,+FAA+F;IACzF,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC;IAuBvC,mFAAmF;IACnF,mBAAmB,IAAI,2BAA2B;IAoBlD;;;OAGG;IACH,OAAO,CAAC,kBAAkB;CAwB3B"}