@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.3

package/dist/telemetry/testing/conformance.js

@@ -0,0 +1,626 @@
+"use strict";
+// =============================================================================
+// The telemetry slice's conformance suite (PP-4.6)
+// =============================================================================
+//
+// "Conformance suites travel with packages" (docs/specs/platform-packages.md):
+// the slice's invariants used to be enforced by tests that live in the
+// platform repository, so an app that consumed the package stopped being
+// checked. This suite is those invariants as a registered
+// `ConformanceSuite`, run in every app through `runPlatformConformance()`:
+//
+//   1  metric groups       every registered group is well formed, and computes
+//                          against an empty schema with everything `skipped`
+//   2  route permissions   every route declares exactly its permissions
+//   3  doctor read-only    no telemetry Doctor check can write, enqueue or audit
+//   4  no secrets          the connection and config responses never carry a
+//                          stored password
+//   5  queue rule          the app's cron scan covers the slice's cron
+//   6  boot without store  the module boots with no GreptimeDB and every
+//                          dashboard route answers its documented response
+//
+// EVERYTHING IS DISCOVERED, nothing is a hand-kept list of routes, groups or
+// checks: groups from `metricGroupRegistry`, routes from the Nest metadata of
+// the controllers `TelemetryModule.forRoot` builds, Doctor checks from the
+// providers that inject the `DoctorCheckRegistry`. The expectations below are
+// rules (a permission per route SHAPE) so a new route that matches no rule is
+// itself a finding.
+//
+// Check 7 (web/API permission parity) runs in the web test suite
+// (`apps/web/src/__tests__/config/telemetryParity.test.ts`) and check 8 (infra
+// drift) is `platform-infra sync --check` in CI.
+//
+// Each check is also an exported function over its input, so the package proves
+// it FAILS on a deliberately broken fixture (`test/telemetry/conformance.spec.ts`).
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.telemetryConformanceSuite = exports.CONFORMANCE_SECRETS = exports.bootStubApp = exports.TELEMETRY_CRON_FILE = void 0;
+exports.checkMetricGroups = checkMetricGroups;
+exports.checkMetricGroupsOnEmptySchema = checkMetricGroupsOnEmptySchema;
+exports.discoverRoutes = discoverRoutes;
+exports.checkRoutePermissions = checkRoutePermissions;
+exports.discoverDoctorChecks = discoverDoctorChecks;
+exports.checkDoctorReadOnly = checkDoctorReadOnly;
+exports.checkCronCoverage = checkCronCoverage;
+exports.checkNoSecretsInResponses = checkNoSecretsInResponses;
+exports.checkBootsWithoutTelemetry = checkBootsWithoutTelemetry;
+const common_1 = require("@nestjs/common");
+const constants_1 = require("@nestjs/common/constants");
+const config_1 = require("@nestjs/config");
+const core_1 = require("@nestjs/core");
+const telemetry_1 = require("@marinoscar/platform-contract/telemetry");
+const index_1 = require("../../doctor/index");
+const index_2 = require("../../testing/index");
+const telemetry_ai_enabled_guard_1 = require("../assistant/telemetry-ai-enabled.guard");
+const telemetry_connection_test_service_1 = require("../connection/telemetry-connection-test.service");
+const telemetry_dashboard_service_1 = require("../dashboard/telemetry-dashboard.service");
+const ports_1 = require("../ports");
+const telemetry_query_errors_1 = require("../query/telemetry-query.errors");
+const telemetry_permissions_1 = require("../telemetry.permissions");
+const telemetry_module_1 = require("../telemetry.module");
+const metric_group_1 = require("../metrics/metric-group");
+const metric_catalog_helpers_1 = require("../metrics/metric-catalog.helpers");
+const metric_catalog_helpers_2 = require("../metrics/metric-catalog.helpers");
+const metric_catalog_1 = require("../metrics/metric-catalog");
+const metric_group_registry_1 = require("../metrics/metric-group.registry");
+const stub_ports_1 = require("./stub-ports");
+const FILE_GROUPS = 'metric-groups';
+const FILE_ROUTES = 'routes';
+const FILE_DOCTOR = 'doctor';
+const FILE_CRON = 'cron';
+const FILE_SECRETS = 'no-secrets';
+const FILE_BOOT = 'boot';
+const finding = (file, message) => ({ file, message });
+const lines = (findings) => findings.map((f) => `${f.file}: ${f.message}`);
+// ---- check 1: metric groups ---------------------------------------------------------
+/**
+ * Check 1, static half: every group has a unique id matching
+ * {@link METRIC_GROUP_ID_PATTERN} and a non-empty label; family, ratio and table
+ * keys are unique across groups; every unit is in `METRIC_UNITS`; every filter
+ * key is a `METRIC_FILTER_COLUMNS` key; every entry names the group that holds it.
+ *
+ * @param groups - the groups to check.
+ * @returns the violations; empty means conformant.
+ *
+ * @stability experimental
+ */
+function checkMetricGroups(groups) {
+    const out = [];
+    const units = new Set(metric_catalog_helpers_1.METRIC_UNITS);
+    const filters = new Set(Object.keys(metric_catalog_helpers_2.METRIC_FILTER_COLUMNS));
+    const ids = new Map();
+    const keys = new Map();
+    for (const group of groups) {
+        const where = `group "${group.id}"`;
+        ids.set(group.id, (ids.get(group.id) ?? 0) + 1);
+        if (typeof group.id !== 'string' || !metric_group_registry_1.METRIC_GROUP_ID_PATTERN.test(group.id)) {
+            out.push(finding(FILE_GROUPS, `${where}: id must match ${metric_group_registry_1.METRIC_GROUP_ID_PATTERN}`));
+        }
+        if (typeof group.label !== 'string' || group.label.trim() === '')
+            out.push(finding(FILE_GROUPS, `${where}: label is empty`));
+        const entries = [
+            ...group.families.map((f) => ({ kind: 'family', key: f.key, group: f.group, units: [f.unit], filters: f.filters })),
+            ...(group.ratios ?? []).map((r) => ({ kind: 'ratio', key: r.key, group: r.group, units: [r.unit], filters: [] })),
+            ...(group.tables ?? []).map((t) => ({
+                kind: 'table',
+                key: t.key,
+                group: t.group,
+                units: [...t.parts.map((p) => p.unit), ...(t.derived ?? []).map((d) => d.unit)],
+                filters: t.filters,
+            })),
+        ];
+        for (const entry of entries) {
+            const name = `${where}: ${entry.kind} "${entry.key}"`;
+            const owner = keys.get(entry.key);
+            if (owner !== undefined)
+                out.push(finding(FILE_GROUPS, `${name} key is already used by group "${owner}"; keys are unique across groups`));
+            keys.set(entry.key, group.id);
+            if (entry.group !== group.id)
+                out.push(finding(FILE_GROUPS, `${name} declares group "${entry.group}"`));
+            for (const unit of entry.units) {
+                if (!units.has(unit))
+                    out.push(finding(FILE_GROUPS, `${name} has unit "${unit}"; expected one of METRIC_UNITS`));
+            }
+            for (const filter of entry.filters) {
+                if (!filters.has(filter))
+                    out.push(finding(FILE_GROUPS, `${name} has filter "${filter}"; expected one of ${[...filters].join(', ')}`));
+            }
+        }
+    }
+    for (const [id, count] of ids) {
+        if (count > 1)
+            out.push(finding(FILE_GROUPS, `group id "${id}" is declared ${count} times`));
+    }
+    return out;
+}
+/**
+ * Check 1, dynamic half: every group computes against an EMPTY schema (the
+ * store has no metric table) without throwing, reporting everything in
+ * `skipped` and nothing as a tile, series or table. A group that errors, or one
+ * that renders a number out of nothing, would break the dashboard of a fresh stack.
+ *
+ * @param groups - the groups; each must be registered in `metricGroupRegistry` (the computation reads it).
+ * @param compute - what runs one group; default `computeMetricGroup` with an empty schema. A test passes a broken one.
+ * @returns the violations; empty means conformant.
+ *
+ * @stability experimental
+ */
+async function checkMetricGroupsOnEmptySchema(groups, compute = (id) => (0, metric_group_1.computeMetricGroup)({
+    group: id,
+    window: { from: new Date(0), to: new Date(3_600_000), previousFrom: new Date(-3_600_000), bucketSeconds: 60 },
+    filters: {},
+    tables: (0, metric_catalog_1.metricTablesOf)({ tables: [] }),
+    runner: { maybe: async () => null },
+    now: new Date(3_600_000),
+})) {
+    const out = [];
+    for (const group of groups) {
+        const where = `group "${group.id}"`;
+        let result;
+        try {
+            result = await compute(group.id);
+        }
+        catch (error) {
+            out.push(finding(FILE_GROUPS, `${where}: computing against an empty schema threw: ${error.message}`));
+            continue;
+        }
+        if (result.available)
+            out.push(finding(FILE_GROUPS, `${where}: reports available with no metric table in the store`));
+        if (result.tiles.length + result.series.length + result.tables.length > 0) {
+            out.push(finding(FILE_GROUPS, `${where}: renders tiles, series or tables with no metric table in the store`));
+        }
+        const skipped = new Set(result.skipped);
+        const keys = [...group.families.map((f) => f.key), ...(group.ratios ?? []).map((r) => r.key), ...(group.tables ?? []).map((t) => t.key)];
+        for (const key of keys) {
+            if (!skipped.has(key))
+                out.push(finding(FILE_GROUPS, `${where}: "${key}" is not reported in skipped with no metric table in the store`));
+        }
+    }
+    return out;
+}
+const trimSlashes = (value) => value.replace(/^\/+|\/+$/g, '');
+/**
+ * Every route of `controllers`, from `@Controller`/`@Get`/... metadata and the
+ * permissions recorded by the package's test host (`createTestPlatformHost`).
+ *
+ * @param controllers - controller classes, e.g. `TelemetryModule.forRoot(...).controllers`.
+ * @returns the routes, in declaration order.
+ *
+ * @stability experimental
+ */
+function discoverRoutes(controllers) {
+    const routes = [];
+    for (const controller of controllers) {
+        const prefix = trimSlashes(String(Reflect.getMetadata(constants_1.PATH_METADATA, controller) ?? ''));
+        const controllerGuards = Reflect.getMetadata(constants_1.GUARDS_METADATA, controller) ?? [];
+        for (const name of Object.getOwnPropertyNames(controller.prototype)) {
+            const handler = controller.prototype[name];
+            if (typeof handler !== 'function' || !Reflect.hasMetadata(constants_1.METHOD_METADATA, handler))
+                continue;
+            const own = trimSlashes(String(Reflect.getMetadata(constants_1.PATH_METADATA, handler) ?? ''));
+            routes.push({
+                method: common_1.RequestMethod[Reflect.getMetadata(constants_1.METHOD_METADATA, handler)] ?? 'UNKNOWN',
+                path: [prefix, own].filter(Boolean).join('/'),
+                permissions: Reflect.getMetadata(index_2.TEST_REQUIRED_PERMISSIONS_KEY, handler),
+                guards: [...controllerGuards, ...(Reflect.getMetadata(constants_1.GUARDS_METADATA, handler) ?? [])],
+                handler,
+            });
+        }
+    }
+    return routes;
+}
+const { READ, WRITE, QUERY } = telemetry_permissions_1.TELEMETRY_PERMISSIONS;
+const { AI_USE, SYSTEM_SETTINGS_READ, SYSTEM_SETTINGS_WRITE } = telemetry_permissions_1.TELEMETRY_HOST_PERMISSIONS;
+/**
+ * The permissions each route SHAPE must declare. A rule per shape, not per
+ * path: the routes are discovered, and one that matches no rule is a finding.
+ */
+const ROUTE_RULES = [
+    { shape: /^(GET) admin\/telemetry\/(config|status)$/, permissions: [READ] },
+    { shape: /^PUT admin\/telemetry\/config$/, permissions: [WRITE] },
+    { shape: /^(POST) admin\/telemetry\/(query|export)$/, permissions: [QUERY] },
+    { shape: /^GET admin\/telemetry\/schema$/, permissions: [QUERY] },
+    { shape: /^GET admin\/telemetry\/dashboard\/[a-z-]+$/, permissions: [QUERY] },
+    { shape: /^GET admin\/telemetry\/connection$/, permissions: [READ] },
+    { shape: /^(PUT|DELETE) admin\/telemetry\/connection$/, permissions: [WRITE] },
+    { shape: /^POST admin\/telemetry\/connection\/test$/, permissions: [WRITE] },
+    { shape: /^GET admin\/telemetry\/stack$/, permissions: [SYSTEM_SETTINGS_READ] },
+    { shape: /^POST admin\/telemetry\/stack\/deploy$/, permissions: [SYSTEM_SETTINGS_WRITE] },
+    { shape: /^POST admin\/telemetry\/assistant\/stream$/, permissions: [QUERY, AI_USE], guard: telemetry_ai_enabled_guard_1.TelemetryAiEnabledGuard },
+    // `@Auth()` only: any signed-in user may ask whether telemetry is on.
+    { shape: /^GET telemetry\/config$/, permissions: [] },
+];
+/** Every permission string the slice may enforce: exactly these, never a variant. */
+const KNOWN_PERMISSIONS = new Set([...Object.values(telemetry_permissions_1.TELEMETRY_PERMISSIONS), ...Object.values(telemetry_permissions_1.TELEMETRY_HOST_PERMISSIONS)]);
+/**
+ * Check 2: every route under `admin/telemetry` and `telemetry` declares exactly
+ * the permissions its shape requires (the table in the slice README, heading
+ * "Permissions and settings"), every permission is one of the slice's exact
+ * strings, no route is public, the assistant route sits behind the AI-enabled
+ * guard, and every rule matches at least one route (a renamed route fails here
+ * rather than silently dropping out of the check).
+ *
+ * @param routes - the routes, from {@link discoverRoutes}.
+ * @returns the violations; empty means conformant.
+ *
+ * @stability experimental
+ */
+function checkRoutePermissions(routes) {
+    const out = [];
+    const matched = new Set();
+    for (const route of routes) {
+        const name = `${route.method} /${route.path}`;
+        if (!/^(admin\/)?telemetry(\/|$)/.test(route.path)) {
+            out.push(finding(FILE_ROUTES, `${name}: a route outside admin/telemetry and telemetry in the telemetry module`));
+            continue;
+        }
+        if (route.permissions === undefined) {
+            out.push(finding(FILE_ROUTES, `${name}: declares no access decorator, so it is public`));
+            continue;
+        }
+        for (const permission of route.permissions) {
+            if (!KNOWN_PERMISSIONS.has(permission))
+                out.push(finding(FILE_ROUTES, `${name}: enforces "${permission}", which is not a telemetry permission string`));
+        }
+        const rule = ROUTE_RULES.find((candidate) => candidate.shape.test(`${route.method} ${route.path}`));
+        if (!rule) {
+            out.push(finding(FILE_ROUTES, `${name}: matches no permission rule; add the route's shape to the conformance suite`));
+            continue;
+        }
+        matched.add(rule.shape);
+        const actual = [...route.permissions].sort().join(', ');
+        const expected = [...rule.permissions].sort().join(', ');
+        if (actual !== expected) {
+            out.push(finding(FILE_ROUTES, `${name}: declares [${actual}] but must declare [${expected}]`));
+        }
+        if (rule.guard && !route.guards.includes(rule.guard)) {
+            out.push(finding(FILE_ROUTES, `${name}: is not behind ${rule.guard.name}`));
+        }
+    }
+    for (const rule of ROUTE_RULES) {
+        if (!matched.has(rule.shape))
+            out.push(finding(FILE_ROUTES, `no route matches ${rule.shape}: it was renamed or removed`));
+    }
+    return out;
+}
+// ---- check 3: the Doctor stays read-only --------------------------------------------
+/** Constructor dependencies a Doctor check must never have (classes, and tokens injected with `@Inject`). */
+const FORBIDDEN_DOCTOR_DEPENDENCIES = [
+    { dependency: telemetry_connection_test_service_1.TelemetryConnectionTestService, why: 'the connection test audits every attempt, and a Doctor run must not write' },
+    { dependency: telemetry_dashboard_service_1.TelemetryDashboardService, why: 'its reads are audited' },
+    { dependency: ports_1.TELEMETRY_AUDIT_SINK, why: 'a check records no audit row' },
+    { dependency: ports_1.TELEMETRY_JOBS, why: 'a check enqueues no job' },
+];
+const nameOf = (dependency) => typeof dependency === 'function' ? dependency.name : String(dependency?.description ?? dependency);
+/**
+ * The providers that register themselves as Doctor checks: classes with a
+ * `run` method whose constructor injects the `DoctorCheckRegistry`.
+ *
+ * @param providers - a module's provider list, e.g. `TelemetryModule.forRoot(...).providers`.
+ * @returns the check classes.
+ *
+ * @stability experimental
+ */
+function discoverDoctorChecks(providers) {
+    return providers.filter((provider) => {
+        if (typeof provider !== 'function')
+            return false;
+        const params = Reflect.getMetadata('design:paramtypes', provider) ?? [];
+        return typeof provider.prototype?.run === 'function' && params.includes(index_1.DoctorCheckRegistry);
+    });
+}
+/**
+ * Check 3: no Doctor check of the slice injects the audited connection test,
+ * the audited dashboard service, the audit sink or the jobs port. The check
+ * reads the constructor's `design:paramtypes` and `@Inject` tokens
+ * (`self:paramtypes`).
+ *
+ * @param checks - the check classes, from {@link discoverDoctorChecks}.
+ * @returns the violations; empty means conformant.
+ *
+ * @stability experimental
+ */
+function checkDoctorReadOnly(checks) {
+    const out = [];
+    for (const check of checks) {
+        const types = Reflect.getMetadata('design:paramtypes', check) ?? [];
+        const tokens = (Reflect.getMetadata('self:paramtypes', check) ?? []).map((entry) => entry.param);
+        for (const { dependency, why } of FORBIDDEN_DOCTOR_DEPENDENCIES) {
+            if (types.includes(dependency) || tokens.includes(dependency)) {
+                out.push(finding(FILE_DOCTOR, `${check.name} injects ${nameOf(dependency)}: ${why}`));
+            }
+        }
+    }
+    return out;
+}
+// ---- check 5: the queue rule ---------------------------------------------------------
+/**
+ * The slice's cron, relative to its source root.
+ *
+ * @stability experimental
+ */
+exports.TELEMETRY_CRON_FILE = 'tasks/telemetry-retention.task.ts';
+/**
+ * Check 5: the app's `cron-enqueue-only` scan roots hold the slice's retention
+ * cron, so the queue rule ("a `@Cron` only enqueues") is enforced on it. Runs
+ * the cron suite's own scan over `roots` and looks for the file.
+ *
+ * @param roots - the roots the app's cron suite scans.
+ * @returns the violations; empty means conformant.
+ *
+ * @stability experimental
+ */
+function checkCronCoverage(roots) {
+    const report = index_2.cronEnqueueOnlySuite.check({ sourceRoots: roots }, { exempt: [], minCronFiles: 1 });
+    const covered = report.scannedFiles.cronFiles?.some((file) => file === exports.TELEMETRY_CRON_FILE || file.endsWith(`/${exports.TELEMETRY_CRON_FILE}`));
+    return covered
+        ? []
+        : [
+            finding(FILE_CRON, `the cron scan roots do not contain ${exports.TELEMETRY_CRON_FILE}: add the slice's source root (packages/platform-api/src/telemetry) to the cron-enqueue-only sourceRoots`),
+        ];
+}
+/**
+ * Boots `TelemetryModule.forRoot` with the stub ports, the package's test host,
+ * the Doctor module and an `OTEL_ENABLED=false` configuration. Nothing listens
+ * on a port; requests go through Fastify's `inject`.
+ *
+ * @param input - what the stubs and the configuration hold.
+ * @returns the initialised application; the caller closes it.
+ *
+ * @stability experimental
+ */
+const bootStubApp = async (input) => {
+    const host = (0, index_2.createTestPlatformHost)();
+    const { module } = (0, stub_ports_1.createStubTelemetryPorts)(input.ports);
+    // Loaded here, not at the top, so importing this entry needs no Fastify adapter until a check boots the module.
+    const { FastifyAdapter } = require('@nestjs/platform-fastify');
+    let ConformanceAppModule = class ConformanceAppModule {
+    };
+    ConformanceAppModule = __decorate([
+        (0, common_1.Module)({
+            imports: [
+                config_1.ConfigModule.forRoot({
+                    isGlobal: true,
+                    ignoreEnvFile: true,
+                    load: [() => ({ otel: { enabled: false }, ...(input.greptime ? { greptime: input.greptime } : {}) })],
+                }),
+                index_1.DoctorModule.forRoot({ host, supportBundle: false }),
+                telemetry_module_1.TelemetryModule.forRoot({ host, imports: [module] }),
+            ],
+        })
+    ], ConformanceAppModule);
+    const app = await core_1.NestFactory.create(ConformanceAppModule, new FastifyAdapter(), { logger: false });
+    await app.init();
+    await app.getHttpAdapter().getInstance().ready();
+    return app;
+};
+exports.bootStubApp = bootStubApp;
+/**
+ * The passwords check 4 seeds. Distinctive on purpose: a substring match can
+ * only be the secret.
+ *
+ * @stability experimental
+ */
+exports.CONFORMANCE_SECRETS = {
+    storedReader: 'conformance-stored-reader-secret-7f3a',
+    storedAdmin: 'conformance-stored-admin-secret-91c2',
+    environmentReader: 'conformance-env-reader-secret-5d08',
+    environmentAdmin: 'conformance-env-admin-secret-b64e',
+};
+/**
+ * Check 4: `GET /admin/telemetry/connection` and `GET /admin/telemetry/config`
+ * never carry a stored password. Boots the module with known passwords in the
+ * credential store (and in the `greptime` deployment default), a stored custom
+ * connection row, and asserts none of the four appears in the serialised
+ * responses. `TELEMETRY_CONNECTION_CARRIES_NO_SECRET` (the contract's
+ * compile-time proof that the connection type has no field able to hold one)
+ * must still be `true`.
+ *
+ * @param createApp - builds the app; default {@link bootStubApp}. A test passes a leaky one.
+ * @returns the violations; empty means conformant.
+ *
+ * @stability experimental
+ */
+async function checkNoSecretsInResponses(createApp = exports.bootStubApp) {
+    const out = [];
+    if (telemetry_1.TELEMETRY_CONNECTION_CARRIES_NO_SECRET !== true) {
+        out.push(finding(FILE_SECRETS, 'TELEMETRY_CONNECTION_CARRIES_NO_SECRET is not true: the connection type can hold a secret'));
+    }
+    const app = await createApp({
+        ports: {
+            credentials: { reader: exports.CONFORMANCE_SECRETS.storedReader, admin: exports.CONFORMANCE_SECRETS.storedAdmin },
+            rows: {
+                telemetry_connection: { host: 'db.conformance.test', pgPort: 4003, database: 'public', readerUser: 'reader', adminUser: 'admin' },
+            },
+        },
+        greptime: {
+            host: 'greptimedb',
+            pgPort: 4003,
+            database: 'public',
+            readerUser: 'reader',
+            readerPassword: exports.CONFORMANCE_SECRETS.environmentReader,
+            adminUser: 'admin',
+            adminPassword: exports.CONFORMANCE_SECRETS.environmentAdmin,
+            available: true,
+        },
+    });
+    try {
+        for (const url of ['/admin/telemetry/connection', '/admin/telemetry/config']) {
+            const response = await app.inject({ method: 'GET', url, headers: { [index_2.TEST_PERMISSIONS_HEADER]: telemetry_permissions_1.TELEMETRY_PERMISSIONS.READ } });
+            if (response.statusCode !== 200) {
+                out.push(finding(FILE_SECRETS, `GET ${url} answered ${response.statusCode}, not 200, so it proves nothing`));
+                continue;
+            }
+            for (const [name, secret] of Object.entries(exports.CONFORMANCE_SECRETS)) {
+                if (response.body.includes(secret))
+                    out.push(finding(FILE_SECRETS, `GET ${url} carries the ${name} password`));
+            }
+        }
+    }
+    finally {
+        await app.close();
+    }
+    return out;
+}
+/** The query parameters a route requires, with a valid value each, from its `@ApiQuery` metadata. */
+function requiredQuery(handler) {
+    const parameters = (Reflect.getMetadata('swagger/apiParameters', handler) ?? []);
+    const query = {};
+    for (const parameter of parameters) {
+        if (parameter.in !== 'query' || !parameter.required)
+            continue;
+        query[parameter.name] = String((parameter.enum ?? parameter.schema?.enum ?? ['x'])[0]);
+    }
+    return query;
+}
+/**
+ * Check 6: `TelemetryModule.forRoot` boots with `OTEL_ENABLED=false`, no
+ * GreptimeDB and an empty configuration, and every dashboard route answers
+ * with its documented response: `200` (a route that reads only memory) or `503`
+ * with `details.reason` `TELEMETRY_NOT_CONFIGURED`. Never a `500`.
+ *
+ * @param createApp - builds the app; default {@link bootStubApp}.
+ * @returns the violations; empty means conformant.
+ *
+ * @stability experimental
+ */
+async function checkBootsWithoutTelemetry(createApp = exports.bootStubApp) {
+    const out = [];
+    let app;
+    try {
+        app = await createApp({});
+    }
+    catch (error) {
+        return [finding(FILE_BOOT, `TelemetryModule.forRoot did not boot without a telemetry store: ${error.message}`)];
+    }
+    try {
+        const controllers = (stubModule().controllers ?? []);
+        const dashboard = controllers.find((controller) => Reflect.getMetadata(constants_1.PATH_METADATA, controller) === 'admin/telemetry/dashboard');
+        const routes = dashboard ? discoverRoutes([dashboard]).filter((route) => route.method === 'GET') : [];
+        if (routes.length === 0)
+            out.push(finding(FILE_BOOT, 'no dashboard route found to exercise'));
+        for (const route of routes) {
+            const response = await app.inject({
+                method: 'GET',
+                url: `/${route.path}`,
+                query: requiredQuery(route.handler),
+                headers: { [index_2.TEST_PERMISSIONS_HEADER]: telemetry_permissions_1.TELEMETRY_PERMISSIONS.QUERY },
+            });
+            const body = (response.body ? safeJson(response.body) : undefined);
+            const documented = response.statusCode === 200 ||
+                (response.statusCode === 503 && body?.details?.reason === telemetry_query_errors_1.TELEMETRY_ERROR_REASONS.NOT_CONFIGURED);
+            if (!documented) {
+                out.push(finding(FILE_BOOT, `GET /${route.path} answered ${response.statusCode}${body?.details?.reason ? ` (${body.details.reason})` : ''} with no telemetry store; expected 200 or 503 TELEMETRY_NOT_CONFIGURED`));
+            }
+        }
+    }
+    finally {
+        await app.close();
+    }
+    return out;
+}
+function safeJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+// ---- the suite ------------------------------------------------------------------------
+/** The module the sync checks inspect: the real routes and providers, the package's test host, no ports bound. */
+function stubModule() {
+    return telemetry_module_1.TelemetryModule.forRoot({ host: (0, index_2.createTestPlatformHost)(), imports: [] });
+}
+function check(_context, options) {
+    const module = stubModule();
+    const routes = discoverRoutes((module.controllers ?? []));
+    const doctorChecks = discoverDoctorChecks(module.providers ?? []);
+    const groups = options.metricGroups ?? metric_group_registry_1.metricGroupRegistry.list();
+    return {
+        scanned: { metricGroups: groups.length, routes: routes.length, doctorChecks: doctorChecks.length },
+        scannedFiles: {},
+        findings: [
+            ...checkMetricGroups(groups),
+            ...checkRoutePermissions(routes),
+            ...checkDoctorReadOnly(doctorChecks),
+            ...(options.cronSourceRoots ? checkCronCoverage(options.cronSourceRoots) : []),
+        ],
+    };
+}
+const findingsIn = (report, file) => lines(report.findings.filter((f) => f.file === file));
+function cases(options) {
+    return [
+        {
+            // The failure this guards: the discovery breaks and every case below passes over nothing.
+            name: 'discovers the groups, routes and Doctor checks, so a broken scan cannot pass vacuously',
+            run: (report, expect) => {
+                expect(report.scanned.metricGroups).toBeGreaterThanOrEqual(6);
+                expect(report.scanned.routes).toBeGreaterThanOrEqual(21);
+                expect(report.scanned.doctorChecks).toBeGreaterThanOrEqual(5);
+            },
+        },
+        {
+            name: '1. every metric group has a unique id, a label, known units and filters, and unique keys',
+            run: (report, expect) => expect(findingsIn(report, FILE_GROUPS)).toEqual([]),
+        },
+        {
+            name: '1. every metric group computes against an empty schema with everything skipped',
+            run: async (_report, expect) => expect(lines(await checkMetricGroupsOnEmptySchema(options.metricGroups ?? metric_group_registry_1.metricGroupRegistry.list()))).toEqual([]),
+        },
+        {
+            name: '2. every route declares exactly its permissions, and none is public',
+            run: (report, expect) => expect(findingsIn(report, FILE_ROUTES)).toEqual([]),
+        },
+        {
+            name: '3. no Doctor check can write, enqueue or audit',
+            run: (report, expect) => expect(findingsIn(report, FILE_DOCTOR)).toEqual([]),
+        },
+        {
+            name: '4. the connection and config responses never carry a stored password',
+            run: async (_report, expect) => expect(lines(await checkNoSecretsInResponses())).toEqual([]),
+        },
+        ...(options.cronSourceRoots
+            ? [
+                {
+                    name: "5. the app's cron scan covers the telemetry retention cron",
+                    run: (report, expect) => expect(findingsIn(report, FILE_CRON)).toEqual([]),
+                },
+            ]
+            : [
+                {
+                    name: '5. cron coverage: skipped, no cronSourceRoots given',
+                    run: () => undefined,
+                },
+            ]),
+        {
+            name: '6. boots without a telemetry store and every dashboard route answers its documented response',
+            run: async (_report, expect) => expect(lines(await checkBootsWithoutTelemetry())).toEqual([]),
+        },
+    ];
+}
+/**
+ * The suite behind `runPlatformConformance({ suites: { telemetry } })`: the
+ * telemetry slice's invariants 1 to 6 (see this file's header). Registered in
+ * {@link conformanceSuites} when `@marinoscar/platform-api/telemetry/testing`
+ * is imported.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+exports.telemetryConformanceSuite = {
+    id: 'telemetry',
+    title: 'the telemetry slice keeps its invariants',
+    description: 'Metric groups are well formed and degrade to skipped, every route declares exactly its permissions, Doctor checks are read-only, responses carry no secret, the cron is enqueue-only, and the module boots without a store.',
+    check,
+    cases,
+};
+if (!index_2.conformanceSuites.has(exports.telemetryConformanceSuite.id))
+    index_2.conformanceSuites.register(exports.telemetryConformanceSuite);
+//# sourceMappingURL=conformance.js.map

package/dist/telemetry/testing/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../../src/telemetry/testing/conformance.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,mDAAmD;AACnD,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,uEAAuE;AACvE,yEAAyE;AACzE,0DAA0D;AAC1D,2EAA2E;AAC3E,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,wEAAwE;AACxE,iFAAiF;AACjF,6EAA6E;AAC7E,2CAA2C;AAC3C,uEAAuE;AACvE,yEAAyE;AACzE,2EAA2E;AAC3E,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,oBAAoB;AACpB,EAAE;AACF,iEAAiE;AACjE,+EAA+E;AAC/E,iDAAiD;AACjD,EAAE;AACF,gFAAgF;AAChF,oFAAoF;AACpF,gFAAgF;;;;;;;;;AA6FhF,8CA4CC;AAuCD,wEAiCC;AAiCD,wCAmBC;AAyCD,sDAoCC;AAwBD,oDAMC;AAaD,kDAYC;AAqBD,8CAWC;AAqGD,8DAuCC;AA8BD,gEAiCC;AAlnBD,2CAAsF;AACtF,wDAA2F;AAC3F,2CAA8C;AAC9C,uCAA2C;AAE3C,uEAAiG;AAEjG,8CAAuE;AACvE,+CAM6B;AAE7B,wFAAkF;AAClF,uGAAiG;AACjG,0FAAqF;AACrF,oCAAgE;AAChE,4EAA0E;AAC1E,oEAA6F;AAC7F,0DAAsD;AACtD,0DAA6D;AAC7D,8EAAiE;AACjE,8EAA0E;AAC1E,8DAA6E;AAC7E,4EAAqH;AACrH,6CAAwF;AAwCxF,MAAM,WAAW,GAAG,eAAe,CAAC;AACpC,MAAM,WAAW,GAAG,QAAQ,CAAC;AAC7B,MAAM,WAAW,GAAG,QAAQ,CAAC;AAC7B,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,YAAY,GAAG,YAAY,CAAC;AAClC,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,OAAe,EAAsB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3F,MAAM,KAAK,GAAG,CAAC,QAAuC,EAAY,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEpH,wFAAwF;AAExF;;;;;;;;;;GAUG;AACH,SAAgB,iBAAiB,CAAC,MAAiC;IACjE,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,qCAAY,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,IAAI,CAAC,8CAAqB,CAAC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,UAAU,KAAK,CAAC,EAAE,GAAG,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,+CAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,mBAAmB,+CAAuB,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,kBAAkB,CAAC,CAAC,CAAC;QAE7H,MAAM,OAAO,GAA8G;YACzH,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACnH,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAc,EAAE,CAAC,CAAC;YAC7H,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClC,IAAI,EAAE,OAAO;gBACb,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC/E,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;SACJ,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,KAAK,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,GAAG,GAAG,CAAC;YACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,kCAAkC,KAAK,kCAAkC,CAAC,CAAC,CAAC;YAC1I,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,oBAAoB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACxG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,cAAc,IAAI,iCAAiC,CAAC,CAAC,CAAC;YACnH,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,gBAAgB,MAAM,sBAAsB,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACzI,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,KAAK,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AA2BD;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,8BAA8B,CAClD,MAAiC,EACjC,UAA8B,CAAC,EAAE,EAAE,EAAE,CACnC,IAAA,iCAAkB,EAAC;IACjB,KAAK,EAAE,EAAiB;IACxB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE;IAC7G,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,IAAA,+BAAc,EAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE;IACnC,GAAG,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;CACzB,CAAC;IAEJ,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,UAAU,KAAK,CAAC,EAAE,GAAG,CAAC;QACpC,IAAI,MAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,8CAA+C,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjH,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,uDAAuD,CAAC,CAAC,CAAC;QACtH,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,qEAAqE,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzI,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,MAAM,GAAG,gEAAgE,CAAC,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAsBD,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAE/E;;;;;;;;GAQG;AACH,SAAgB,cAAc,CAAC,WAAqC;IAClE,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,yBAAa,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAc,OAAO,CAAC,WAAW,CAAC,2BAAe,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC3F,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpE,MAAM,OAAO,GAAI,UAAU,CAAC,SAAqC,CAAC,IAAI,CAAC,CAAC;YACxE,IAAI,OAAO,OAAO,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,2BAAe,EAAE,OAAO,CAAC;gBAAE,SAAS;YAC9F,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,yBAAa,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,sBAAa,CAAC,OAAO,CAAC,WAAW,CAAC,2BAAe,EAAE,OAAO,CAAW,CAAC,IAAI,SAAS;gBAC3F,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC7C,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,qCAA6B,EAAE,OAAO,CAAyB;gBAChG,MAAM,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAE,OAAO,CAAC,WAAW,CAAC,2BAAe,EAAE,OAAO,CAA2B,IAAI,EAAE,CAAC,CAAC;gBAClH,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,6CAAqB,CAAC;AACrD,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,GAAG,kDAA0B,CAAC;AAE3F;;;GAGG;AACH,MAAM,WAAW,GAAsF;IACrG,EAAE,KAAK,EAAE,2CAA2C,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE;IAC3E,EAAE,KAAK,EAAE,gCAAgC,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE;IACjE,EAAE,KAAK,EAAE,2CAA2C,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE;IAC5E,EAAE,KAAK,EAAE,gCAAgC,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE;IACjE,EAAE,KAAK,EAAE,4CAA4C,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE;IAC7E,EAAE,KAAK,EAAE,oCAAoC,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE;IACpE,EAAE,KAAK,EAAE,6CAA6C,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE;IAC9E,EAAE,KAAK,EAAE,2CAA2C,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE;IAC5E,EAAE,KAAK,EAAE,+BAA+B,EAAE,WAAW,EAAE,CAAC,oBAAoB,CAAC,EAAE;IAC/E,EAAE,KAAK,EAAE,wCAAwC,EAAE,WAAW,EAAE,CAAC,qBAAqB,CAAC,EAAE;IACzF,EAAE,KAAK,EAAE,4CAA4C,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,oDAAuB,EAAE;IACrH,sEAAsE;IACtE,EAAE,KAAK,EAAE,yBAAyB,EAAE,WAAW,EAAE,EAAE,EAAE;CACtD,CAAC;AAEF,qFAAqF;AACrF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,6CAAqB,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,kDAA0B,CAAC,CAAC,CAAC,CAAC;AAEnI;;;;;;;;;;;;GAYG;AACH,SAAgB,qBAAqB,CAAC,MAAiC;IACrE,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,yEAAyE,CAAC,CAAC,CAAC;YACjH,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,iDAAiD,CAAC,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,eAAe,UAAU,+CAA+C,CAAC,CAAC,CAAC;QAC1J,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,8EAA8E,CAAC,CAAC,CAAC;YACtH,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,eAAe,MAAM,uBAAuB,QAAQ,GAAG,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,mBAAoB,IAAI,CAAC,KAA0B,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,oBAAoB,IAAI,CAAC,KAAK,6BAA6B,CAAC,CAAC,CAAC;IAC5H,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wFAAwF;AAExF,6GAA6G;AAC7G,MAAM,6BAA6B,GAAwD;IACzF,EAAE,UAAU,EAAE,kEAA8B,EAAE,GAAG,EAAE,2EAA2E,EAAE;IAChI,EAAE,UAAU,EAAE,uDAAyB,EAAE,GAAG,EAAE,uBAAuB,EAAE;IACvE,EAAE,UAAU,EAAE,4BAAoB,EAAE,GAAG,EAAE,8BAA8B,EAAE;IACzE,EAAE,UAAU,EAAE,sBAAc,EAAE,GAAG,EAAE,yBAAyB,EAAE;CAC/D,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,UAAmB,EAAU,EAAE,CAC7C,OAAO,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAE,UAAqB,EAAE,WAAW,IAAI,UAAU,CAAC,CAAC;AAEjH;;;;;;;;GAQG;AACH,SAAgB,oBAAoB,CAAC,SAA6B;IAChE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAA6B,EAAE;QAC9D,IAAI,OAAO,QAAQ,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,MAAM,GAAc,OAAO,CAAC,WAAW,CAAC,mBAAmB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnF,OAAO,OAAO,QAAQ,CAAC,SAAS,EAAE,GAAG,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,2BAAmB,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,mBAAmB,CAAC,MAAgC;IAClE,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAc,OAAO,CAAC,WAAW,CAAC,mBAAmB,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAI,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,EAAE,CAA+B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChI,KAAK,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,6BAA6B,EAAE,CAAC;YAChE,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,YAAY,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AAEzF;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,mCAAmC,CAAC;AAEvE;;;;;;;;;GASG;AACH,SAAgB,iBAAiB,CAAC,KAAwB;IACxD,MAAM,MAAM,GAAG,4BAAoB,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;IACnG,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,2BAAmB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,2BAAmB,EAAE,CAAC,CAAC,CAAC;IACxI,OAAO,OAAO;QACZ,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE,OAAO,CACL,SAAS,EACT,sCAAsC,2BAAmB,0GAA0G,CACpK;SACF,CAAC;AACR,CAAC;AAuBD;;;;;;;;;GASG;AACI,MAAM,WAAW,GAAyB,KAAK,EAAE,KAAK,EAAE,EAAE;IAC/D,MAAM,IAAI,GAAG,IAAA,8BAAsB,GAAE,CAAC;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,qCAAwB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,gHAAgH;IAChH,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,0BAA0B,CAA8C,CAAC;IAa5G,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;KAAG,CAAA;IAAvB,oBAAoB;QAXzB,IAAA,eAAM,EAAC;YACN,OAAO,EAAE;gBACP,qBAAY,CAAC,OAAO,CAAC;oBACnB,QAAQ,EAAE,IAAI;oBACd,aAAa,EAAE,IAAI;oBACnB,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;iBACtG,CAAC;gBACF,oBAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;gBACpD,kCAAe,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;aACrD;SACF,CAAC;OACI,oBAAoB,CAAG;IAE7B,MAAM,GAAG,GAAG,MAAM,kBAAW,CAAC,MAAM,CAAyB,oBAAoB,EAAE,IAAI,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5H,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACjB,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAvBW,QAAA,WAAW,eAuBtB;AAkBF;;;;;GAKG;AACU,QAAA,mBAAmB,GAAuB;IACrD,YAAY,EAAE,uCAAuC;IACrD,WAAW,EAAE,sCAAsC;IACnD,iBAAiB,EAAE,oCAAoC;IACvD,gBAAgB,EAAE,mCAAmC;CACtD,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,yBAAyB,CAAC,YAAkC,mBAAW;IAC3F,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,IAAI,kDAAsC,KAAK,IAAI,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,2FAA2F,CAAC,CAAC,CAAC;IAC/H,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC;QAC1B,KAAK,EAAE;YACL,WAAW,EAAE,EAAE,MAAM,EAAE,2BAAmB,CAAC,YAAY,EAAE,KAAK,EAAE,2BAAmB,CAAC,WAAW,EAAE;YACjG,IAAI,EAAE;gBACJ,oBAAoB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE;aAClI;SACF;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,2BAAmB,CAAC,iBAAiB;YACrD,SAAS,EAAE,OAAO;YAClB,aAAa,EAAE,2BAAmB,CAAC,gBAAgB;YACnD,SAAS,EAAE,IAAI;SAChB;KACF,CAAC,CAAC;IACH,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,CAAC,6BAA6B,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC7E,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,+BAAuB,CAAC,EAAE,6CAAqB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9H,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAChC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,GAAG,aAAa,QAAQ,CAAC,UAAU,iCAAiC,CAAC,CAAC,CAAC;gBAC7G,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,2BAAmB,CAAC,EAAE,CAAC;gBACjE,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,GAAG,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC;YACjH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qGAAqG;AACrG,SAAS,aAAa,CAAC,OAAgB;IACrC,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,uBAAuB,EAAE,OAAiB,CAAC,IAAI,EAAE,CAMvF,CAAC;IACH,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,EAAE,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ;YAAE,SAAS;QAC9D,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,0BAA0B,CAAC,YAAkC,mBAAW;IAC5F,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,IAAI,GAA2B,CAAC;IAChC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,mEAAoE,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,CAAC,WAAW,IAAI,EAAE,CAAyB,CAAC;QAC7E,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,yBAAa,EAAE,UAAU,CAAC,KAAK,2BAA2B,CAAC,CAAC;QACnI,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC,CAAC;QAE9F,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE;gBACrB,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;gBACnC,OAAO,EAAE,EAAE,CAAC,+BAAuB,CAAC,EAAE,6CAAqB,CAAC,KAAK,EAAE;aACpE,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAkD,CAAC;YACpH,MAAM,UAAU,GACd,QAAQ,CAAC,UAAU,KAAK,GAAG;gBAC3B,CAAC,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,gDAAuB,CAAC,cAAc,CAAC,CAAC;YACpG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,KAAK,CAAC,IAAI,aAAa,QAAQ,CAAC,UAAU,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,wEAAwE,CAAC,CAAC,CAAC;YACtN,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,0FAA0F;AAE1F,kHAAkH;AAClH,SAAS,UAAU;IACjB,OAAO,kCAAe,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAA,8BAAsB,GAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,KAAK,CAAC,QAA4C,EAAE,OAAoC;IAC/F,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAyB,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,IAAI,2CAAmB,CAAC,IAAI,EAAE,CAAC;IAElE,OAAO;QACL,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,MAAM,EAAE;QAClG,YAAY,EAAE,EAAE;QAChB,QAAQ,EAAE;YACR,GAAG,iBAAiB,CAAC,MAAM,CAAC;YAC5B,GAAG,qBAAqB,CAAC,MAAM,CAAC;YAChC,GAAG,mBAAmB,CAAC,YAAY,CAAC;YACpC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,MAAyB,EAAE,IAAY,EAAY,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AAEhI,SAAS,KAAK,CAAC,OAAoC;IACjD,OAAO;QACL;YACE,0FAA0F;YAC1F,IAAI,EAAE,wFAAwF;YAC9F,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;gBAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;gBACzD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YAChE,CAAC;SACF;QACD;YACE,IAAI,EAAE,0FAA0F;YAChG,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC7E;QACD;YACE,IAAI,EAAE,gFAAgF;YACtF,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAC7B,MAAM,CAAC,KAAK,CAAC,MAAM,8BAA8B,CAAC,OAAO,CAAC,YAAY,IAAI,2CAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACtH;QACD;YACE,IAAI,EAAE,qEAAqE;YAC3E,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC7E;QACD;YACE,IAAI,EAAE,gDAAgD;YACtD,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC7E;QACD;YACE,IAAI,EAAE,sEAAsE;YAC5E,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,yBAAyB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC7F;QACD,GAAG,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,4DAA4D;oBAClE,GAAG,EAAE,CAAC,MAAyB,EAAE,MAA6C,EAAE,EAAE,CAChF,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;iBAC1B;aAC5B;YACH,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,qDAAqD;oBAC3D,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;iBACK;aAC5B,CAAC;QACN;YACE,IAAI,EAAE,8FAA8F;YACpG,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,0BAA0B,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9F;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACU,QAAA,yBAAyB,GAAkD;IACtF,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,0CAA0C;IACjD,WAAW,EACT,6NAA6N;IAC/N,KAAK;IACL,KAAK;CACN,CAAC;AAEF,IAAI,CAAC,yBAAiB,CAAC,GAAG,CAAC,iCAAyB,CAAC,EAAE,CAAC;IAAE,yBAAiB,CAAC,QAAQ,CAAC,iCAAyB,CAAC,CAAC"}