@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/db-backup/restore-preflight.service.js

@@ -0,0 +1,551 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var DatabaseRestorePreflightService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabaseRestorePreflightService = exports.defaultRestorePreflightSeam = exports.RESTORE_PREFLIGHT_SEAM = exports.RESTORE_GATE_IDS = exports.BUILTIN_RESTORE_GATE_IDS = exports.RESTORE_SCHEMA_OVERRIDE_FIELD = exports.GUIDED_RESTORE_JOBS = exports.PREFLIGHT_PROBE_TIMEOUT_MS = exports.RESTORE_RUNBOOK_PATH = void 0;
+exports.buildGuidedRestoreCommands = buildGuidedRestoreCommands;
+const promises_1 = require("node:fs/promises");
+const common_1 = require("@nestjs/common");
+const db_backup_1 = require("@marinoscar/platform-contract/db-backup");
+Object.defineProperty(exports, "BUILTIN_RESTORE_GATE_IDS", { enumerable: true, get: function () { return db_backup_1.BUILTIN_RESTORE_GATE_IDS; } });
+Object.defineProperty(exports, "RESTORE_GATE_IDS", { enumerable: true, get: function () { return db_backup_1.RESTORE_GATE_IDS; } });
+Object.defineProperty(exports, "RESTORE_SCHEMA_OVERRIDE_FIELD", { enumerable: true, get: function () { return db_backup_1.RESTORE_SCHEMA_OVERRIDE_FIELD; } });
+const index_1 = require("../core/index");
+const index_2 = require("../settings/index");
+const admin_connection_util_1 = require("./admin-connection.util");
+const migration_state_util_1 = require("./migration-state.util");
+const restore_gate_registry_1 = require("./restore-gate.registry");
+const restore_gates_builtin_1 = require("./restore-gates.builtin");
+Object.defineProperty(exports, "RESTORE_RUNBOOK_PATH", { enumerable: true, get: function () { return restore_gates_builtin_1.RESTORE_RUNBOOK_PATH; } });
+const pg_dump_util_1 = require("./pg-dump.util");
+const pg_version_util_1 = require("./pg-version.util");
+/**
+ * Wall-clock bound on the cluster probes, in milliseconds.
+ *
+ * Pre-flight runs inside an HTTP request and every query it issues is a
+ * trivial catalog read, so anything approaching this is a network that accepts
+ * a TCP connection and then swallows packets — the shape a firewall rule
+ * change produces. Without the bound that request hangs until the proxy gives
+ * up, and the operator learns nothing.
+ *
+ * ⚠ IT IS NOT `statement_timeout`, WHICH STAYS 0. See
+ * `admin-connection.util.ts`: a timeout that abandons a `CREATE DATABASE`
+ * halfway buys only ambiguity. Nothing in this service creates anything, which
+ * is exactly why this one is safe to set here and nowhere else.
+ *
+ * @stability experimental
+ */
+exports.PREFLIGHT_PROBE_TIMEOUT_MS = 15_000;
+/**
+ * Parallel jobs suggested in the guided `pg_restore` command.
+ *
+ * A suggestion in a command an operator can edit, not a policy — but it must
+ * be a real number rather than a placeholder, because the whole value of the
+ * guided path is that it can be pasted. Four is safe on any server that can
+ * host this application and well short of `MAX_RESTORE_JOBS`.
+ *
+ * @stability experimental
+ */
+exports.GUIDED_RESTORE_JOBS = 4;
+/**
+ * The gates whose failure means "this deployment cannot do this automatically,
+ * and here is how a human can".
+ *
+ * ⚠ `pg_client_version` IS A CAPABILITY GATE AND IS DELIBERATELY NOT IN THIS
+ * LIST. Its only actionable failure is the block (see
+ * {@link DatabaseRestorePreflightService.versionGate}), and its other non-pass
+ * verdict is `unknown` — an unparseable version banner, which is not evidence
+ * that anything is wrong. Routing that to `guided` would send an operator into
+ * a manual restore, during an incident, because a string did not parse.
+ *
+ * A list rather than a predicate over `kind`, so that adding a gate is a
+ * decision about whether its failure has a manual answer, taken here, once.
+ */
+const GUIDED_GATE_IDS = [
+    'admin_connection',
+    'createdb_privilege',
+    'extensions',
+    'rls_bypass',
+];
+/**
+ * Injection token for {@link RestorePreflightSeam}.
+ *
+ * OPTIONAL, AND LEFT UNBOUND in `DbBackupModule` — the same discipline
+ * `DB_BACKUP_ENGINE`, `DB_BACKUP_TIMERS`, `JOB_CLOCK` and `JOB_RANDOM` follow.
+ * The application always probes the real cluster; only a test that constructs
+ * this service directly can substitute one. A stubbed cluster in production
+ * would report a clean pre-flight against nothing at all, which is the single
+ * most dangerous lie this subsystem could tell.
+ *
+ * @stability experimental
+ */
+exports.RESTORE_PREFLIGHT_SEAM = 'RESTORE_PREFLIGHT_SEAM';
+/**
+ * The real seam. Every member is a thin binding to the utility that owns it.
+ *
+ * @stability experimental
+ */
+exports.defaultRestorePreflightSeam = {
+    resolveConnection: () => (0, admin_connection_util_1.resolveAdminConnection)(),
+    withAdminConnection: (config, fn) => (0, admin_connection_util_1.withAdminConnection)(config, fn, { timeoutMs: exports.PREFLIGHT_PROBE_TIMEOUT_MS }),
+    checkClientVersion: () => (0, pg_version_util_1.checkPgClientVersion)({
+        // The `pg` seam rather than a Prisma query, matching the backup engine:
+        // it answers "what major is the server" without going through an ORM
+        // that is bound to a database a restore is about to rename.
+        readServerVersionNum: () => (0, pg_version_util_1.readServerVersionNumWithPgClient)(),
+    }),
+    readFreeDiskBytes: async (path) => {
+        try {
+            const stats = await (0, promises_1.statfs)(path);
+            // `bavail`, not `bfree`: the difference is the reserved blocks only root
+            // may use, and a restore does not run as root. Reporting `bfree` would
+            // promise space that `CREATE DATABASE` cannot actually have.
+            return BigInt(stats.bsize) * BigInt(stats.bavail);
+        }
+        catch {
+            return null;
+        }
+    },
+};
+/**
+ * The restore pre-flight: every gate, read-only. It creates, drops, renames and alters nothing.
+ *
+ * @stability experimental
+ */
+let DatabaseRestorePreflightService = DatabaseRestorePreflightService_1 = class DatabaseRestorePreflightService {
+    prisma;
+    settings;
+    logger = new common_1.Logger(DatabaseRestorePreflightService_1.name);
+    seam;
+    constructor(prisma, settings, seam) {
+        this.prisma = prisma;
+        this.settings = settings;
+        this.seam = seam ?? exports.defaultRestorePreflightSeam;
+    }
+    /**
+     * Answers "can this backup be restored, and what will it cost?" without
+     * changing anything.
+     *
+     * @param run - the backup row. Looked up, permission-checked and
+     * `completed`-filtered by #286's endpoint — this service answers a question
+     * about a row it is given, exactly as `getDownloadUrl` does about one it
+     * fetched.
+     */
+    async check(run, options = {}) {
+        const now = options.now ?? new Date();
+        const policy = await this.settings.getDatabaseBackupPolicy();
+        const connection = this.seam.resolveConnection();
+        const scratchDatabase = (0, admin_connection_util_1.buildScratchDatabaseName)(connection.liveDatabase, now);
+        const oldDatabase = (0, admin_connection_util_1.buildOldDatabaseName)(connection.liveDatabase, now);
+        // The version pair and the cluster probes are independent, and both are
+        // network round trips; running them together keeps the whole pre-flight
+        // inside one perceptible pause rather than two.
+        const [version, cluster, liveMigration] = await Promise.all([
+            this.readVersionCheck(),
+            // The probe session carries the dump's and the restore's startup option
+            // (#740), so the `rls_bypass` gate sees it reach the server; on the
+            // maintenance database it changes nothing else.
+            this.probeCluster({ ...connection, options: pg_dump_util_1.RLS_BYPASS_PGOPTIONS }),
+            (0, migration_state_util_1.readLatestAppliedMigration)(this.prisma),
+        ]);
+        const freeDiskBytes = cluster.dataDirectory === null
+            ? null
+            : await this.seam.readFreeDiskBytes(cluster.dataDirectory);
+        const comparison = (0, migration_state_util_1.compareMigrationNames)(run.migrationName, liveMigration);
+        // The gates are a registry (`restore-gate.registry.ts`): the eight
+        // built-ins in their historical order, then the app's. Every gate is
+        // read-only and gets a read-only context; a gate that throws or hangs is a
+        // `block` naming it (fail closed).
+        const gates = await (0, restore_gate_registry_1.evaluateRestoreGates)(this.gateContext({
+            run,
+            policy,
+            now,
+            connection,
+            liveMigration,
+            facts: {
+                version,
+                cluster,
+                connection: {
+                    host: connection.host,
+                    port: connection.port,
+                    user: connection.user,
+                    database: connection.database,
+                    liveDatabase: connection.liveDatabase,
+                },
+                freeDiskBytes,
+                migrationComparison: comparison,
+            },
+            overrideSchemaMismatch: options.overrideSchemaMismatch === true,
+        }));
+        const rollback = this.planRollback(policy, cluster, freeDiskBytes);
+        const base = {
+            runId: run.id,
+            targetDatabase: connection.liveDatabase,
+            scratchDatabase,
+            oldDatabase,
+            gates,
+            rollback,
+            archiveMigration: run.migrationName,
+            liveMigration,
+            databaseSizeBytes: cluster.databaseSizeBytes?.toString() ?? null,
+            freeDiskBytes: freeDiskBytes?.toString() ?? null,
+        };
+        return this.decide(base, run, connection, comparison);
+    }
+    /** The read-only context every gate receives. No handle in it can write. */
+    gateContext(input) {
+        const { run } = input;
+        return Object.freeze({
+            run: Object.freeze({
+                id: run.id,
+                storageKey: run.storageKey,
+                storageProvider: run.storageProvider,
+                sizeBytes: String(run.sizeBytes ?? 0),
+                migrationName: run.migrationName ?? null,
+                createdAt: run.createdAt,
+            }),
+            policy: input.policy,
+            now: input.now,
+            targetDatabase: input.connection.liveDatabase,
+            liveMigration: input.liveMigration,
+            overrideSchemaMismatch: input.overrideSchemaMismatch,
+            settings: Object.freeze({
+                get: async (namespace) => {
+                    try {
+                        const value = await this.settings.getNamespace(namespace);
+                        return value !== null && typeof value === 'object' ? value : undefined;
+                    }
+                    catch {
+                        // An unregistered namespace: the app has not configured whatever
+                        // the gate depends on, which the gate reads as "not applicable".
+                        return undefined;
+                    }
+                },
+            }),
+            facts: input.facts,
+        });
+    }
+    // =========================================================================
+    // Outcome
+    // =========================================================================
+    /**
+     * Turns the gate verdicts into one of the three outcomes.
+     *
+     * The precedence — hard block, then guided, then the overridable block — is
+     * argued in this file's header. It lives in one place so that adding a gate
+     * cannot change it by accident.
+     */
+    decide(base, run, connection, comparison) {
+        const blocking = base.gates.filter((gate) => gate.verdict === 'block');
+        // 1. A non-overridable block. Today that is only the client/server version
+        //    pair, and it comes first because nothing else matters if the binaries
+        //    cannot speak to the server: the guided block would hand the operator
+        //    commands run by the same `pg_restore` that cannot read it.
+        const hard = blocking.find((gate) => gate.kind !== 'overridable');
+        if (hard !== undefined) {
+            return {
+                ...base,
+                outcome: 'blocked',
+                block: {
+                    gateId: hard.id,
+                    message: hard.detail,
+                    overridable: false,
+                    overrideParameter: null,
+                },
+            };
+        }
+        // 2. A capability failure. `guided` outranks the schema block on purpose —
+        //    see the header: telling an operator to re-send with an override when
+        //    the automated path cannot run at all is a loop, not an instruction.
+        const capabilityFailures = base.gates.filter((gate) => gate.verdict === 'warning' && GUIDED_GATE_IDS.includes(gate.id));
+        if (capabilityFailures.length > 0) {
+            return {
+                ...base,
+                outcome: 'guided',
+                guidance: {
+                    reason: capabilityFailures.map((gate) => gate.detail).join(' '),
+                    commands: buildGuidedRestoreCommands({
+                        connection,
+                        run,
+                        scratchDatabase: base.scratchDatabase,
+                        oldDatabase: base.oldDatabase,
+                        schemaMismatch: comparison === 'archive_older' || comparison === 'archive_newer',
+                    }),
+                    runbook: restore_gates_builtin_1.RESTORE_RUNBOOK_PATH,
+                },
+            };
+        }
+        // 3. The schema gate, which a human may override.
+        const overridable = blocking[0];
+        if (overridable !== undefined) {
+            return {
+                ...base,
+                outcome: 'blocked',
+                block: {
+                    gateId: overridable.id,
+                    message: overridable.detail,
+                    overridable: true,
+                    overrideParameter: db_backup_1.RESTORE_SCHEMA_OVERRIDE_FIELD,
+                },
+            };
+        }
+        return { ...base, outcome: 'ok' };
+    }
+    // =========================================================================
+    // Probes
+    // =========================================================================
+    /** {@link checkPgClientVersion}, degraded to `unknown` rather than thrown. */
+    async readVersionCheck() {
+        try {
+            return await this.seam.checkClientVersion();
+        }
+        catch (error) {
+            // The utility already fails open on every internal error; this catch
+            // covers the seam itself. An unreadable version must never be the reason
+            // a restore was refused, for the same reason it must never be the reason
+            // a backup did not happen.
+            this.logger.warn(`The PostgreSQL client/server version pair could not be read: ${describe(error)}`);
+            return {
+                status: 'unknown',
+                clientMajor: null,
+                serverMajor: null,
+                message: 'The PostgreSQL client/server version pair could not be read.',
+            };
+        }
+    }
+    /**
+     * Every cluster read, in ONE session.
+     *
+     * One connection rather than one per probe, because each of them is a
+     * connection to the server whose `max_connections` a restore is about to
+     * stress — and because a probe that leaks a session leaks it to the cluster
+     * whose live database has to be free of sessions before a rename can succeed.
+     *
+     * NEVER THROWS. An unreachable cluster is a VERDICT (`guided`), not an
+     * exception: the operator's next step is the manual path, which needs the
+     * rest of this result to be built.
+     */
+    async probeCluster(connection) {
+        const empty = {
+            reachable: false,
+            error: null,
+            canCreateDatabase: null,
+            missingExtensions: [],
+            checkedExtensions: null,
+            databaseSizeBytes: null,
+            dataDirectory: null,
+            distinctClientAddresses: null,
+            rlsBypass: null,
+        };
+        // Read through Prisma, deliberately: `pg_extension` is PER-DATABASE, and
+        // the admin session is attached to the maintenance database where the
+        // application's extensions are not installed. What the archive will try to
+        // create is what the LIVE database has.
+        const installed = await this.readInstalledExtensions();
+        try {
+            return await this.seam.withAdminConnection(connection, async (client) => {
+                const canCreateDatabase = await (0, admin_connection_util_1.probeCreateDatabasePrivilege)(client);
+                const dataDirectory = await (0, admin_connection_util_1.readDataDirectory)(client);
+                const databaseSizeBytes = await (0, admin_connection_util_1.readDatabaseSizeBytes)(client, connection.liveDatabase);
+                const distinctClientAddresses = await (0, admin_connection_util_1.countDistinctClientAddresses)(client, connection.liveDatabase);
+                const missingExtensions = installed === null ? [] : await findMissingExtensions(client, installed);
+                const rlsBypass = await (0, admin_connection_util_1.readRlsBypassCapability)(client);
+                return {
+                    reachable: true,
+                    error: null,
+                    canCreateDatabase,
+                    missingExtensions,
+                    checkedExtensions: installed?.length ?? null,
+                    databaseSizeBytes,
+                    dataDirectory,
+                    distinctClientAddresses,
+                    rlsBypass,
+                };
+            });
+        }
+        catch (error) {
+            this.logger.warn(`The PostgreSQL maintenance connection could not be used for restore pre-flight, so ` +
+                `the guided path is the answer: ${describe(error)}`);
+            return { ...empty, error: describe(error) };
+        }
+    }
+    /**
+     * The extensions installed in the LIVE database.
+     *
+     * `null` when the read failed, which the gate reports as "could not check"
+     * rather than "nothing to check" — the two are very different answers and
+     * an empty array would quietly claim the safe one.
+     */
+    async readInstalledExtensions() {
+        try {
+            const rows = await this.prisma.$queryRaw `
+        SELECT extname FROM pg_extension ORDER BY extname
+      `;
+            return rows
+                .map((row) => row.extname)
+                .filter((name) => typeof name === 'string' && name.length > 0);
+        }
+        catch {
+            return null;
+        }
+    }
+    // =========================================================================
+    // Rollback plan
+    // =========================================================================
+    /**
+     * What the way back will be, after disk has had its say.
+     *
+     * Reads the SAME two numbers {@link diskGate} does, so the verdict an
+     * operator sees and the plan the restore would follow cannot disagree. When
+     * the numbers are unreadable the configured mode stands: a downgrade on a
+     * guess would silently remove a rollback guarantee the operator asked for.
+     */
+    planRollback(policy, cluster, freeDiskBytes) {
+        const configured = policy.restoreRollbackMode;
+        if (configured !== 'retain_database') {
+            return {
+                configured,
+                effective: 'pre_restore_dump',
+                downgraded: false,
+                reason: null,
+            };
+        }
+        if (cluster.databaseSizeBytes === null || freeDiskBytes === null) {
+            return { configured, effective: 'retain_database', downgraded: false, reason: null };
+        }
+        const required = (0, restore_gates_builtin_1.requiredDiskBytes)(cluster.databaseSizeBytes, configured);
+        if (freeDiskBytes >= required) {
+            return { configured, effective: 'retain_database', downgraded: false, reason: null };
+        }
+        return {
+            configured,
+            effective: 'pre_restore_dump',
+            downgraded: true,
+            reason: `Keeping the displaced database needs about ${(0, restore_gates_builtin_1.formatBytes)(required)} and only ` +
+                `${(0, restore_gates_builtin_1.formatBytes)(freeDiskBytes)} is free, so it will be dropped and the pre-restore ` +
+                'archive becomes the way back. Rolling this restore back would then mean restoring ' +
+                'that archive — hours — rather than renaming a database — seconds.',
+        };
+    }
+};
+exports.DatabaseRestorePreflightService = DatabaseRestorePreflightService;
+exports.DatabaseRestorePreflightService = DatabaseRestorePreflightService = DatabaseRestorePreflightService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(exports.RESTORE_PREFLIGHT_SEAM)),
+    __metadata("design:paramtypes", [Object, index_2.SystemSettingsService, Object])
+], DatabaseRestorePreflightService);
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/** Which of a database's installed extensions this cluster cannot offer. */
+async function findMissingExtensions(client, installed) {
+    const missing = [];
+    // Serial rather than `Promise.all`: this is one connection, and node-postgres
+    // queues concurrent queries on a single client anyway. Writing it as a race
+    // would only make the order of the results — which is the order they are
+    // reported to a human in — non-deterministic.
+    for (const name of installed) {
+        if (!(await (0, admin_connection_util_1.probePgExtensionAvailable)(client, name)))
+            missing.push(name);
+    }
+    return missing;
+}
+/** Anything thrown, as a message. JavaScript lets you throw a string. */
+function describe(value) {
+    return value instanceof Error ? value.message : String(value);
+}
+/**
+ * THE GUIDED PATH'S ENTIRE DELIVERABLE: a shell block an operator can paste.
+ *
+ * ⚠ IT MUST BE COMPLETE AND CORRECTLY PARAMETERISED. Real host, real port,
+ * real user, real database names, real run id, real archive filename. A block
+ * with `<your-host>` in it is not instructions — it is homework, handed to
+ * somebody whose application is down, and every substitution they have to make
+ * by hand is a chance to point a `DROP`/`RENAME` at the wrong database. The
+ * tests assert this block BY STRING for exactly that reason.
+ *
+ * TWO VALUES ARE DELIBERATELY NOT INTERPOLATED, and neither is a placeholder in
+ * the "fill this in" sense:
+ *
+ *   - THE PASSWORD. Printing it would put a live database credential into an
+ *     HTTP response, a browser's memory, a screenshot and quite possibly a
+ *     support ticket. It is exported from the environment the operator already
+ *     has.
+ *   - THE SIGNED DOWNLOAD URL. It does not exist yet — it is minted, with a
+ *     five-minute expiry, by the command on the line above it.
+ *
+ * Nothing here hard-codes an application, product or repository name: every
+ * name in the block is derived from this deployment's own configuration.
+ *
+ * @stability experimental
+ */
+function buildGuidedRestoreCommands(context) {
+    const { connection, run, scratchDatabase, oldDatabase, schemaMismatch } = context;
+    const { host, port, user, liveDatabase, database: maintenanceDatabase } = connection;
+    const conn = `--host=${host} --port=${port} --username=${user}`;
+    const archiveFile = `/tmp/${basename(run.storageKey)}`;
+    const psql = `psql ${conn} --dbname=${maintenanceDatabase}`;
+    const lines = [
+        `# Manual restore of "${liveDatabase}" from backup run ${run.id}`,
+        `# Archive: ${run.storageKey}`,
+        '#',
+        '# Run these from a host that can reach the database server, as a role that may',
+        '# create databases (a superuser, or any role holding CREATEDB). The application',
+        '# role could not, which is why you are reading this instead of pressing a button.',
+        '#',
+        '# The database password is not printed here on purpose - export the one this',
+        '# deployment already uses before you start:',
+        '#   export PGPASSWORD=...',
+        '',
+        '# 1. Mint a five-minute download URL for the archive, then fetch it.',
+        `appctl api GET /api/admin/db-backup/runs/${run.id}/download`,
+        `curl -fSL -o ${archiveFile} "<the url printed by the command above>"`,
+        '',
+        '# 2. Create the scratch database. This is the step the application role',
+        '#    could not perform; nothing is touched in the live database yet.',
+        `createdb ${conn} ${scratchDatabase}`,
+        '',
+        '# 3. Replay the archive into it. --exit-on-error is load-bearing: without it',
+        '#    pg_restore logs failures, carries on, and exits 0 - and you would swap a',
+        '#    half-populated database into place believing it worked.',
+        '#    --enable-row-security with the app.rls_bypass startup option is the pair',
+        '#    every restore carries: the tenant tables force row-level security, and a',
+        '#    role that does not bypass it would otherwise write them without their rows.',
+        `PGOPTIONS='${pg_dump_util_1.RLS_BYPASS_PGOPTIONS}' pg_restore ${conn} --dbname=${scratchDatabase} \\`,
+        `  --no-owner --no-acl --exit-on-error --enable-row-security --jobs=${exports.GUIDED_RESTORE_JOBS} \\`,
+        `  ${archiveFile}`,
+        '',
+        '# 4. STOP THE APPLICATION. Everything below renames databases out from under',
+        '#    any process still connected, and a rename fails while a session is open.',
+        '',
+        '# 5. Swap. Both renames are catalog updates: each one either happens or does not.',
+        `${psql} \\`,
+        `  -c "SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname = '${liveDatabase}' AND pid <> pg_backend_pid();" \\`,
+        `  -c 'ALTER DATABASE "${liveDatabase}" RENAME TO "${oldDatabase}";' \\`,
+        `  -c 'ALTER DATABASE "${scratchDatabase}" RENAME TO "${liveDatabase}";'`,
+    ];
+    if (schemaMismatch) {
+        lines.push('', '# 6. The archive and the running code are at different migrations, so bring', '#    the restored database up to the schema the code expects before serving.', '#    Run this wherever you run migrations for this deployment:', '#      npm run prisma:migrate --workspace=api');
+    }
+    lines.push('', `# ${schemaMismatch ? 7 : 6}. Start the application, then verify before you delete anything.`, '#    The way back, while the displaced database still exists:', `#      ALTER DATABASE "${liveDatabase}" RENAME TO "${scratchDatabase}";`, `#      ALTER DATABASE "${oldDatabase}" RENAME TO "${liveDatabase}";`, '#', `# The whole procedure, with the failure cases, is in ${restore_gates_builtin_1.RESTORE_RUNBOOK_PATH}.`);
+    return lines.join('\n');
+}
+/** The last `/`-separated segment of a storage key. */
+function basename(storageKey) {
+    const parts = storageKey.split('/');
+    return parts[parts.length - 1] || storageKey;
+}
+//# sourceMappingURL=restore-preflight.service.js.map

package/dist/db-backup/restore-preflight.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-preflight.service.js","sourceRoot":"","sources":["../../src/db-backup/restore-preflight.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAo4BA,gEAqEC;AAz8BD,+CAA0C;AAE1C,2CAAsE;AAGtE,uEAMiD;AAiLxC,yGAtLP,oCAAwB,OAsLO;AAAE,iGArLjC,4BAAgB,OAqLiC;AAZ1C,8GAxKP,yCAA6B,OAwKO;AApKtC,yCAAgD;AAEhD,6CAA0D;AAC1D,mEAciC;AACjC,iEAA2F;AAC3F,mEAQiC;AACjC,mEAA+F;AAuFtF,qGAvFgC,4CAAoB,OAuFhC;AAtF7B,iDAAsD;AACtD,uDAI2B;AAmF3B;;;;;;;;;;;;;;;GAeG;AACU,QAAA,0BAA0B,GAAG,MAAM,CAAC;AAEjD;;;;;;;;;GASG;AACU,QAAA,mBAAmB,GAAG,CAAC,CAAC;AAmCrC;;;;;;;;;;;;;GAaG;AACH,MAAM,eAAe,GAA6B;IAChD,kBAAkB;IAClB,oBAAoB;IACpB,YAAY;IACZ,YAAY;CACb,CAAC;AAwLF;;;;;;;;;;;GAWG;AACU,QAAA,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D;;;;GAIG;AACU,QAAA,2BAA2B,GAAyB;IAC/D,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,8CAAsB,GAAE;IAEjD,mBAAmB,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAClC,IAAA,2CAAmB,EAAC,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,kCAA0B,EAAE,CAAC;IAE5E,kBAAkB,EAAE,GAAG,EAAE,CACvB,IAAA,sCAAoB,EAAC;QACnB,wEAAwE;QACxE,qEAAqE;QACrE,4DAA4D;QAC5D,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAA,kDAAgC,GAAE;KAC/D,CAAC;IAEJ,iBAAiB,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,iBAAM,EAAC,IAAI,CAAC,CAAC;YAEjC,yEAAyE;YACzE,uEAAuE;YACvE,6DAA6D;YAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC;AAOF;;;;GAIG;AAEI,IAAM,+BAA+B,uCAArC,MAAM,+BAA+B;IAME;IACzB;IANF,MAAM,GAAG,IAAI,eAAM,CAAC,iCAA+B,CAAC,IAAI,CAAC,CAAC;IAE1D,IAAI,CAAuB;IAE5C,YAC4C,MAAsB,EAC/C,QAA+B,EAGhD,IAA2B;QAJe,WAAM,GAAN,MAAM,CAAgB;QAC/C,aAAQ,GAAR,QAAQ,CAAuB;QAKhD,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,mCAA2B,CAAC;IAClD,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK,CACT,GAAsB,EACtB,UAAmC,EAAE;QAErC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,EAAE,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEjD,MAAM,eAAe,GAAG,IAAA,gDAAwB,EAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAA,4CAAoB,EAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAEvE,wEAAwE;QACxE,wEAAwE;QACxE,gDAAgD;QAChD,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,IAAI,CAAC,gBAAgB,EAAE;YACvB,wEAAwE;YACxE,oEAAoE;YACpE,gDAAgD;YAChD,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,mCAAoB,EAAE,CAAC;YACnE,IAAA,iDAA0B,EAAC,IAAI,CAAC,MAAM,CAAC;SACxC,CAAC,CAAC;QAEH,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa,KAAK,IAAI;YAC5B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,IAAA,4CAAqB,EAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAE3E,mEAAmE;QACnE,qEAAqE;QACrE,2EAA2E;QAC3E,mCAAmC;QACnC,MAAM,KAAK,GAAG,MAAM,IAAA,4CAAoB,EACtC,IAAI,CAAC,WAAW,CAAC;YACf,GAAG;YACH,MAAM;YACN,GAAG;YACH,UAAU;YACV,aAAa;YACb,KAAK,EAAE;gBACL,OAAO;gBACP,OAAO;gBACP,UAAU,EAAE;oBACV,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,YAAY,EAAE,UAAU,CAAC,YAAY;iBACtC;gBACD,aAAa;gBACb,mBAAmB,EAAE,UAAU;aAChC;YACD,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,KAAK,IAAI;SAChE,CAAC,CACH,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAyB;YACjC,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,cAAc,EAAE,UAAU,CAAC,YAAY;YACvC,eAAe;YACf,WAAW;YACX,KAAK;YACL,QAAQ;YACR,gBAAgB,EAAE,GAAG,CAAC,aAAa;YACnC,aAAa;YACb,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,IAAI;YAChE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,IAAI;SACjD,CAAC;QAEF,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,4EAA4E;IACpE,WAAW,CAAC,KAQnB;QACC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;QAEtB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;gBACjB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC;gBACrC,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI;gBACxC,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC;YACF,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY;YAC7C,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,GAAG,EAAE,KAAK,EAAE,SAAiB,EAAE,EAAE;oBAC/B,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,MAAO,IAAI,CAAC,QAAuE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;wBAC1H,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACtG,CAAC;oBAAC,MAAM,CAAC;wBACP,iEAAiE;wBACjE,iEAAiE;wBACjE,OAAO,SAAS,CAAC;oBACnB,CAAC;gBACH,CAAC;aACF,CAAC;YACF,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,UAAU;IACV,4EAA4E;IAE5E;;;;;;OAMG;IACK,MAAM,CACZ,IAA0B,EAC1B,GAAsB,EACtB,UAA2B,EAC3B,UAAoD;QAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QAEvE,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAClE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO;gBACL,GAAG,IAAI;gBACP,OAAO,EAAE,SAAS;gBAClB,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,OAAO,EAAE,IAAI,CAAC,MAAM;oBACpB,WAAW,EAAE,KAAK;oBAClB,iBAAiB,EAAE,IAAI;iBACxB;aACF,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAC1C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAC1E,CAAC;QAEF,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,GAAG,IAAI;gBACP,OAAO,EAAE,QAAQ;gBACjB,QAAQ,EAAE;oBACR,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC/D,QAAQ,EAAE,0BAA0B,CAAC;wBACnC,UAAU;wBACV,GAAG;wBACH,eAAe,EAAE,IAAI,CAAC,eAAe;wBACrC,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,cAAc,EAAE,UAAU,KAAK,eAAe,IAAI,UAAU,KAAK,eAAe;qBACjF,CAAC;oBACF,OAAO,EAAE,4CAAoB;iBAC9B;aACF,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;gBACL,GAAG,IAAI;gBACP,OAAO,EAAE,SAAS;gBAClB,KAAK,EAAE;oBACL,MAAM,EAAE,WAAW,CAAC,EAAE;oBACtB,OAAO,EAAE,WAAW,CAAC,MAAM;oBAC3B,WAAW,EAAE,IAAI;oBACjB,iBAAiB,EAAE,yCAA6B;iBACjD;aACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,4EAA4E;IAC5E,SAAS;IACT,4EAA4E;IAE5E,8EAA8E;IACtE,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,yEAAyE;YACzE,yEAAyE;YACzE,2BAA2B;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gEAAgE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAClF,CAAC;YAEF,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,8DAA8D;aACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,YAAY,CAAC,UAA2B;QACpD,MAAM,KAAK,GAAuB;YAChC,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,IAAI;YACX,iBAAiB,EAAE,IAAI;YACvB,iBAAiB,EAAE,EAAE;YACrB,iBAAiB,EAAE,IAAI;YACvB,iBAAiB,EAAE,IAAI;YACvB,aAAa,EAAE,IAAI;YACnB,uBAAuB,EAAE,IAAI;YAC7B,SAAS,EAAE,IAAI;SAChB,CAAC;QAEF,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,wCAAwC;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAEvD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACtE,MAAM,iBAAiB,GAAG,MAAM,IAAA,oDAA4B,EAAC,MAAM,CAAC,CAAC;gBACrE,MAAM,aAAa,GAAG,MAAM,IAAA,yCAAiB,EAAC,MAAM,CAAC,CAAC;gBACtD,MAAM,iBAAiB,GAAG,MAAM,IAAA,6CAAqB,EAAC,MAAM,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;gBACvF,MAAM,uBAAuB,GAAG,MAAM,IAAA,oDAA4B,EAChE,MAAM,EACN,UAAU,CAAC,YAAY,CACxB,CAAC;gBAEF,MAAM,iBAAiB,GACrB,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC3E,MAAM,SAAS,GAAG,MAAM,IAAA,+CAAuB,EAAC,MAAM,CAAC,CAAC;gBAExD,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,IAAI;oBACX,iBAAiB;oBACjB,iBAAiB;oBACjB,iBAAiB,EAAE,SAAS,EAAE,MAAM,IAAI,IAAI;oBAC5C,iBAAiB;oBACjB,aAAa;oBACb,uBAAuB;oBACvB,SAAS;iBACV,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,qFAAqF;gBACnF,kCAAkC,QAAQ,CAAC,KAAK,CAAC,EAAE,CACtD,CAAC;YAEF,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,uBAAuB;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAA6B;;OAEpE,CAAC;YAEF,OAAO,IAAI;iBACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;iBACzB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,gBAAgB;IAChB,4EAA4E;IAE5E;;;;;;;OAOG;IACK,YAAY,CAClB,MAAiC,EACjC,OAA2B,EAC3B,aAA4B;QAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,mBAAmB,CAAC;QAE9C,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;YACrC,OAAO;gBACL,UAAU;gBACV,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YACjE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,yCAAiB,EAAC,OAAO,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QAC1E,IAAI,aAAa,IAAI,QAAQ,EAAE,CAAC;YAC9B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC;QAED,OAAO;YACL,UAAU;YACV,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,IAAI;YAChB,MAAM,EACJ,8CAA8C,IAAA,mCAAW,EAAC,QAAQ,CAAC,YAAY;gBAC/E,GAAG,IAAA,mCAAW,EAAC,aAAa,CAAC,sDAAsD;gBACnF,oFAAoF;gBACpF,mEAAmE;SACtE,CAAC;IACJ,CAAC;CACF,CAAA;AAhYY,0EAA+B;0CAA/B,+BAA+B;IAD3C,IAAA,mBAAU,GAAE;IAOR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;IAEvB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,8BAAsB,CAAC,CAAA;6CAFJ,6BAAqB;GAPvC,+BAA+B,CAgY3C;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,4EAA4E;AAC5E,KAAK,UAAU,qBAAqB,CAClC,MAAwB,EACxB,SAAmB;IAEnB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,8EAA8E;IAC9E,4EAA4E;IAC5E,yEAAyE;IACzE,8CAA8C;IAC9C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,MAAM,IAAA,iDAAyB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yEAAyE;AACzE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAWD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAgB,0BAA0B,CAAC,OAA6B;IACtE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IAClF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,UAAU,CAAC;IAErF,MAAM,IAAI,GAAG,UAAU,IAAI,WAAW,IAAI,eAAe,IAAI,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,QAAQ,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,QAAQ,IAAI,aAAa,mBAAmB,EAAE,CAAC;IAE5D,MAAM,KAAK,GAAG;QACZ,wBAAwB,YAAY,qBAAqB,GAAG,CAAC,EAAE,EAAE;QACjE,cAAc,GAAG,CAAC,UAAU,EAAE;QAC9B,GAAG;QACH,gFAAgF;QAChF,iFAAiF;QACjF,mFAAmF;QACnF,GAAG;QACH,8EAA8E;QAC9E,6CAA6C;QAC7C,2BAA2B;QAC3B,EAAE;QACF,sEAAsE;QACtE,4CAA4C,GAAG,CAAC,EAAE,WAAW;QAC7D,gBAAgB,WAAW,2CAA2C;QACtE,EAAE;QACF,yEAAyE;QACzE,sEAAsE;QACtE,YAAY,IAAI,IAAI,eAAe,EAAE;QACrC,EAAE;QACF,8EAA8E;QAC9E,+EAA+E;QAC/E,8DAA8D;QAC9D,+EAA+E;QAC/E,+EAA+E;QAC/E,kFAAkF;QAClF,cAAc,mCAAoB,gBAAgB,IAAI,aAAa,eAAe,KAAK;QACvF,sEAAsE,2BAAmB,KAAK;QAC9F,KAAK,WAAW,EAAE;QAClB,EAAE;QACF,8EAA8E;QAC9E,+EAA+E;QAC/E,EAAE;QACF,mFAAmF;QACnF,GAAG,IAAI,KAAK;QACZ,iFAAiF,YAAY,oCAAoC;QACjI,yBAAyB,YAAY,gBAAgB,WAAW,QAAQ;QACxE,yBAAyB,eAAe,gBAAgB,YAAY,KAAK;KAC1E,CAAC;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CACR,EAAE,EACF,6EAA6E,EAC7E,8EAA8E,EAC9E,gEAAgE,EAChE,+CAA+C,CAChD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kEAAkE,EAC7F,+DAA+D,EAC/D,0BAA0B,YAAY,gBAAgB,eAAe,IAAI,EACzE,0BAA0B,WAAW,gBAAgB,YAAY,IAAI,EACrE,GAAG,EACH,wDAAwD,4CAAoB,GAAG,CAChF,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,uDAAuD;AACvD,SAAS,QAAQ,CAAC,UAAkB;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEpC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC;AAC/C,CAAC"}