@marinoscar/platform-contract 0.0.0-stage → 0.1.0-next.4

package/dist/esm/telemetry/connection.js

@@ -0,0 +1,447 @@
+// =============================================================================
+// /api/admin/telemetry/connection (issue #558; moved here from the API's
+// `telemetry/connection/dto/telemetry-connection.dto.ts` and the value
+// schemas of `telemetry/connection/telemetry-connection.schema.ts` by #702)
+// =============================================================================
+//
+// Passwords are WRITE-ONLY. They appear in the two request bodies and in no
+// response: a response carries a masked `credentials.<login>` status built
+// from the credential store's description, which cannot decrypt anything.
+//
+// The stored connection (`system_settings` row `telemetry_connection`) is
+// non-secret by construction: `TelemetryConnectionCarriesNoSecret` below stops
+// compiling if a password field is added to it. Where it is stored, its
+// credential purpose and the deployment host resolution stay in the API.
+// =============================================================================
+import { z } from 'zod';
+import { TELEMETRY_CONNECTION_DEFAULTS, TELEMETRY_CONNECTION_HOST_MODES, TELEMETRY_CONNECTION_SOURCES, TELEMETRY_DATABASE_PATTERN, TELEMETRY_HOSTNAME_PATTERN, } from './constants.js';
+import { wireEnum } from './enum.js';
+// ---- IP literals -------------------------------------------------------------
+//
+// The same grammar as Node's `net.isIP` (lib/internal/net.js), so the host
+// rule is identical in the browser, which has no `node:net`. The API's
+// `telemetry-connection.schema.spec.ts` compares the two over a corpus.
+const V4_SEG = '(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])';
+const V4_STR = `(?:${V4_SEG}\\.){3}${V4_SEG}`;
+const IPV4 = new RegExp(`^${V4_STR}$`);
+const V6_SEG = '(?:[0-9a-fA-F]{1,4})';
+const IPV6 = new RegExp('^(?:' +
+    `(?:${V6_SEG}:){7}(?:${V6_SEG}|:)|` +
+    `(?:${V6_SEG}:){6}(?:${V4_STR}|:${V6_SEG}|:)|` +
+    `(?:${V6_SEG}:){5}(?::${V4_STR}|(?::${V6_SEG}){1,2}|:)|` +
+    `(?:${V6_SEG}:){4}(?:(?::${V6_SEG}){0,1}:${V4_STR}|(?::${V6_SEG}){1,3}|:)|` +
+    `(?:${V6_SEG}:){3}(?:(?::${V6_SEG}){0,2}:${V4_STR}|(?::${V6_SEG}){1,4}|:)|` +
+    `(?:${V6_SEG}:){2}(?:(?::${V6_SEG}){0,3}:${V4_STR}|(?::${V6_SEG}){1,5}|:)|` +
+    `(?:${V6_SEG}:){1}(?:(?::${V6_SEG}){0,4}:${V4_STR}|(?::${V6_SEG}){1,6}|:)|` +
+    `(?::(?:(?::${V6_SEG}){0,5}:${V4_STR}|(?::${V6_SEG}){1,7}|:))` +
+    ')(?:%[0-9a-zA-Z-.:]{1,})?$');
+/**
+ * `4` for an IPv4 literal, `6` for an IPv6 literal (zone id allowed), `0`
+ * otherwise: the same answers as Node's `net.isIP`, without Node.
+ *
+ * @stability stable
+ */
+export function telemetryIpVersion(value) {
+    if (IPV4.test(value))
+        return 4;
+    if (IPV6.test(value))
+        return 6;
+    return 0;
+}
+// ---- field validators ----------------------------------------------------------
+/**
+ * A GreptimeDB host: a hostname ({@link TELEMETRY_HOSTNAME_PATTERN}) or a bare
+ * IPv4/IPv6 address, trimmed, 1..253 characters. No scheme, port or path.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryHostSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(253)
+    .refine((value) => telemetryIpVersion(value) !== 0 || TELEMETRY_HOSTNAME_PATTERN.test(value), {
+    message: 'host must be a hostname or an IP address — no scheme, port or path',
+});
+/**
+ * A host as SUBMITTED on the admin form: absent, `null` or blank means
+ * AUTOMATIC (output `null`: the deployment host, resolved at use); anything
+ * else is a custom host validated by {@link telemetryHostSchema}.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryOptionalHostSchema = z
+    .string()
+    .nullish()
+    .transform((value) => (value?.trim() ? value.trim() : null))
+    .pipe(telemetryHostSchema.nullable());
+/**
+ * GreptimeDB's Postgres-wire port: an integer 1..65535.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryPgPortSchema = z.number().int().min(1).max(65535);
+/**
+ * A connection's database: trimmed, 1..128 characters, a plain identifier
+ * ({@link TELEMETRY_DATABASE_PATTERN}).
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryDatabaseSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .max(128)
+    .regex(TELEMETRY_DATABASE_PATTERN, {
+    message: 'database must be a plain identifier (letters, digits and underscores, not starting with a digit)',
+});
+/**
+ * A GreptimeDB login name: trimmed, 1..128 characters.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryUserSchema = z.string().trim().min(1).max(128);
+// ---- the stored value ------------------------------------------------------------
+/**
+ * A stored CUSTOM connection: `host`, `pgPort`, `database`, `readerUser` and
+ * `adminUser` (`null`: no admin login, so retention cannot be applied). The
+ * two passwords live in the encrypted credential store, never here.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryCustomConnectionValueSchema = z.object({
+    /** The custom host. */
+    host: telemetryHostSchema,
+    /** GreptimeDB's Postgres-wire port. */
+    pgPort: telemetryPgPortSchema,
+    /** The database telemetry is written to. */
+    database: telemetryDatabaseSchema,
+    /** The read-only login. */
+    readerUser: telemetryUserSchema,
+    /** Null: no admin login, so retention cannot be applied (reads still work). */
+    adminUser: telemetryUserSchema.nullable(),
+});
+/**
+ * A stored AUTOMATIC connection: `{ host: null }`, a marker only. The
+ * deployment supplies the host, port, database, logins and passwords at every
+ * refresh; extra keys of older rows are stripped on parse.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryAutomaticConnectionValueSchema = z.object({
+    /** Always `null`: the host is the deployment's. */
+    host: z.null(),
+});
+/**
+ * The stored connection row's `value`: custom or automatic. Non-secret by
+ * construction ({@link TelemetryConnectionCarriesNoSecret}).
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryConnectionValueSchema = z.union([
+    telemetryCustomConnectionValueSchema,
+    telemetryAutomaticConnectionValueSchema,
+]);
+/**
+ * The value of {@link TelemetryConnectionCarriesNoSecret}; it only compiles
+ * while the proof holds.
+ *
+ * @stability stable
+ */
+export const TELEMETRY_CONNECTION_CARRIES_NO_SECRET = true;
+// ---- request bodies ----------------------------------------------------------------
+/** A password as submitted. Not trimmed: a secret is stored byte for byte. */
+const passwordSchema = z.string().max(1024);
+/**
+ * `readerUser` — blank is "not sent" (an automatic host needs none; a custom
+ * one is refused without it, below).
+ */
+const readerUserSchema = z
+    .string()
+    .trim()
+    .max(128)
+    .optional()
+    .transform((value) => (value ? value : undefined));
+/**
+ * `adminUser` — null (or an empty string) means "no admin login", which
+ * removes a stored admin password. Absent (undefined) is only accepted for an
+ * automatic host; a custom one must say which (or null).
+ */
+const adminUserSchema = z
+    .string()
+    .trim()
+    .max(128)
+    .nullish()
+    .transform((value) => (value === undefined ? undefined : value ? value : null));
+/**
+ * AUTOMATIC vs CUSTOM (issue #570). A blank host means the GreptimeDB deployed
+ * with this application, whose port, database, logins and passwords the
+ * deployment supplies: every other field is then accepted (older clients send
+ * them) and IGNORED. A custom host needs `readerUser` and `adminUser` (or
+ * null), exactly as before.
+ */
+function requireLoginsForCustomHost(value, ctx) {
+    if (value.host === null)
+        return;
+    if (!value.readerUser) {
+        ctx.addIssue({ code: 'custom', path: ['readerUser'], message: 'readerUser is required for a custom host' });
+    }
+    if (value.adminUser === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['adminUser'],
+            message: 'adminUser is required for a custom host (send null for no admin login)',
+        });
+    }
+}
+/**
+ * `PUT /api/admin/telemetry/connection` body. A blank or absent `host` is
+ * AUTOMATIC and every other field is ignored; a custom host needs
+ * `readerUser` and `adminUser` (or `null`). An omitted or empty password
+ * keeps the stored one. Output: `host` is `null` for automatic, `pgPort`
+ * defaults to 4003 and `database` to `public`.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const updateTelemetryConnectionSchema = z
+    .object({
+    /**
+     * Hostname or IP address of GreptimeDB's Postgres-wire endpoint (no scheme,
+     * port or path) — a CUSTOM GreptimeDB. Omit it, or send null or blank, for
+     * AUTOMATIC: the GreptimeDB deployed with this application. Automatic is
+     * stored as a marker only; its host, port, database, logins and passwords
+     * all come from the deployment, and every other field of this body is
+     * ignored.
+     */
+    host: telemetryOptionalHostSchema,
+    /** Custom host only (ignored when automatic). GreptimeDB's Postgres-wire port. Omitted: 4003. */
+    pgPort: telemetryPgPortSchema.default(TELEMETRY_CONNECTION_DEFAULTS.pgPort),
+    /** Custom host only (ignored when automatic). A plain identifier. Omitted: `public`. */
+    database: telemetryDatabaseSchema.default(TELEMETRY_CONNECTION_DEFAULTS.database),
+    /** Custom host only, and required there: the read-only GreptimeDB user. Ignored when automatic. */
+    readerUser: readerUserSchema,
+    /**
+     * Custom host only. Write-only. Omit or send empty to KEEP the stored
+     * reader password; a save with none stored and none sent is a 400.
+     * Ignored when automatic.
+     */
+    readerPassword: passwordSchema.optional(),
+    /**
+     * Custom host only, and required there: the DDL-capable user retention
+     * needs, or null for none (retention is then not applied). Ignored when
+     * automatic.
+     */
+    adminUser: adminUserSchema,
+    /**
+     * Custom host only. Write-only. Omit or send empty to KEEP the stored
+     * admin password. Ignored when `adminUser` is null (the stored one is then
+     * deleted) and when automatic.
+     */
+    adminPassword: passwordSchema.optional(),
+})
+    .superRefine(requireLoginsForCustomHost);
+/**
+ * `POST /api/admin/telemetry/connection/test` body: a CANDIDATE connection,
+ * not necessarily saved, in the shape of {@link updateTelemetryConnectionSchema}.
+ * A blank host probes the deployment's own GreptimeDB with its own logins;
+ * for a custom host, a blank password means "the password the connection in
+ * force uses for that login".
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const testTelemetryConnectionSchema = updateTelemetryConnectionSchema;
+// ---- responses ----------------------------------------------------------------------
+/**
+ * Masked, non-secret facts about one stored password: `configured`, `hint`
+ * (the credential store's mask, never the password), `updatedAt` and
+ * `updatedByUserId`.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryCredentialStatusSchema = z.object({
+    /**
+     * Whether a password is present for this login in the connection's source
+     * (the deployment's while `deploymentManaged`, the credential store's for a
+     * custom host).
+     */
+    configured: z.boolean(),
+    /**
+     * The credential store's mask (`••••Xk9q`) so an admin can tell two
+     * passwords apart. Never the password. Always null for the deployment
+     * default: the environment's value is not the store's to describe.
+     */
+    hint: z.string().nullable(),
+    /** When the password was last stored, or `null`. */
+    updatedAt: z.iso.datetime().nullable(),
+    /** Who stored it, or `null`. */
+    updatedByUserId: z.string().nullable(),
+});
+/**
+ * The GreptimeDB deployed with this application, as the deployment describes
+ * it: `host`, `pgPort`, `database`, `readerUser`, `adminUser`,
+ * `readerConfigured` and `adminConfigured`. Non-secret: never a password.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryDeploymentConnectionSchema = z.object({
+    /** The deployment host an automatic connection uses. */
+    host: z.string(),
+    /** The deployment's Postgres-wire port. */
+    pgPort: z.number().int(),
+    /** The deployment's database. */
+    database: z.string(),
+    /** Empty when the deployment provisions no reader login. */
+    readerUser: z.string(),
+    /** The deployment's admin login, or `null` when it provisions none. */
+    adminUser: z.string().nullable(),
+    /** The deployment provides a reader user and its password. Never the password itself. */
+    readerConfigured: z.boolean(),
+    /** The deployment provides an admin user and its password. Never the password itself. */
+    adminConfigured: z.boolean(),
+});
+/**
+ * `GET /api/admin/telemetry/connection` (and the `PUT` / `DELETE`
+ * responses): where the connection comes from, its host as configured and as
+ * used, the deployment's own connection, the logins, masked password
+ * statuses and the row `version` (send it back as `If-Match`).
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryConnectionResponseSchema = z.object({
+    /**
+     * Where the connection in force comes from: `stored` (saved on this page —
+     * a custom host, or the automatic marker), `environment` (nothing saved:
+     * the deployment's own GreptimeDB) or `none`.
+     */
+    source: wireEnum(TELEMETRY_CONNECTION_SOURCES),
+    /**
+     * The host as CONFIGURED: null when it is automatic (a stored automatic
+     * connection, `source` `environment` or `source` `none`); a literal only for
+     * a stored custom host.
+     */
+    host: z.string().nullable(),
+    /**
+     * The host actually used (or, for `source` `none`, the one an automatic
+     * host would use: the deployment host). Empty only for a stored connection
+     * that does not validate.
+     */
+    effectiveHost: z.string(),
+    /** `auto` — `host` is null and `effectiveHost` is the deployment host; `custom` — a literal. */
+    hostMode: wireEnum(TELEMETRY_CONNECTION_HOST_MODES),
+    /**
+     * True when the whole connection (port, database, logins, passwords) comes
+     * from the deployment and nothing but the host mode is the administrator's
+     * to set: `source` `environment`, or a stored automatic host. The form
+     * then collects no credentials.
+     */
+    deploymentManaged: z.boolean(),
+    /**
+     * The GreptimeDB deployed with this application — what an automatic host
+     * uses (and what `pgPort`/`database`/users show while `deploymentManaged`).
+     * Present whatever is in force, so a form switching back to automatic can
+     * say what it will get.
+     */
+    deployment: telemetryDeploymentConnectionSchema,
+    /**
+     * Why a deployment-managed connection cannot be used, in administrator
+     * language (for example, the deployment provisions no reader login), or
+     * null. Always null for a custom host: its problems are a test's to find.
+     */
+    problem: z.string().nullable(),
+    /** The Postgres-wire port in force. */
+    pgPort: z.number().int(),
+    /** The database in force. */
+    database: z.string(),
+    /** Empty when `source` is `none`. */
+    readerUser: z.string(),
+    /** The admin login in force, or `null` for none. */
+    adminUser: z.string().nullable(),
+    /** A host, a reader login and its password: telemetry can be read. */
+    configured: z.boolean(),
+    /** The admin login is usable as well, so retention can be applied. */
+    adminConfigured: z.boolean(),
+    /** Masked status of the two stored passwords. Never a password. */
+    credentials: z.object({
+        /** The reader login's password. */
+        reader: telemetryCredentialStatusSchema,
+        /** The admin login's password. */
+        admin: telemetryCredentialStatusSchema,
+    }),
+    /** The stored connection's version — send it back as `If-Match`. `0` when nothing is stored. */
+    version: z.number().int(),
+    /** When the connection was last saved, or `null`. */
+    updatedAt: z.iso.datetime().nullable(),
+    /** Who saved it last, or `null`. */
+    updatedBy: z
+        .object({
+        /** The user's id. */
+        id: z.string(),
+        /** The user's email. */
+        email: z.string(),
+    })
+        .nullable(),
+});
+/**
+ * One login's probe in a connection test: `success`, `latencyMs`, `version`
+ * (reader only) and `error` (never a password or connection string).
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryConnectionProbeSchema = z.object({
+    /** Whether the login connected and the statement ran. */
+    success: z.boolean(),
+    /** Wall-clock time of the connect + statement, in milliseconds. */
+    latencyMs: z.number().int(),
+    /** `SELECT version()` — reader check only. */
+    version: z.string().optional(),
+    /** The driver's or server's message. Never a password or connection string. */
+    error: z.string().optional(),
+});
+/**
+ * `{ skipped: true }`: the candidate had no admin user, so the admin login
+ * was not checked.
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryConnectionSkippedSchema = z.object({
+    /** No admin user in the candidate, so the admin login was not checked. */
+    skipped: z.literal(true),
+});
+/**
+ * `POST /api/admin/telemetry/connection/test` response, always a 200: the
+ * `host` probed, `hostMode`, the `reader` probe and the `admin` probe (or
+ * skipped).
+ *
+ * @extensionPoint schema
+ * @stability stable
+ */
+export const telemetryConnectionTestResultSchema = z.object({
+    /** The host actually probed — the deployment host when the request left `host` blank. */
+    host: z.string(),
+    /**
+     * `auto` — the request left `host` blank, so the deployment's own GreptimeDB
+     * was probed with the deployment's logins (submitted credentials ignored);
+     * `custom` — the submitted host and credentials.
+     */
+    hostMode: wireEnum(TELEMETRY_CONNECTION_HOST_MODES),
+    /** `SELECT version()` as the reader. */
+    reader: telemetryConnectionProbeSchema,
+    /** `SHOW CREATE DATABASE <database>` as the admin, or skipped. */
+    admin: z.union([telemetryConnectionProbeSchema, telemetryConnectionSkippedSchema]),
+});
+//# sourceMappingURL=connection.js.map

package/dist/esm/telemetry/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../../src/telemetry/connection.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,yEAAyE;AACzE,uEAAuE;AACvE,4EAA4E;AAC5E,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,wEAAwE;AACxE,yEAAyE;AACzE,gFAAgF;AAEhF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,4BAA4B,EAC5B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,iFAAiF;AACjF,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,wEAAwE;AAExE,MAAM,MAAM,GAAG,sDAAsD,CAAC;AACtE,MAAM,MAAM,GAAG,MAAM,MAAM,UAAU,MAAM,EAAE,CAAC;AAC9C,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC;AACvC,MAAM,MAAM,GAAG,sBAAsB,CAAC;AACtC,MAAM,IAAI,GAAG,IAAI,MAAM,CACrB,MAAM;IACJ,MAAM,MAAM,WAAW,MAAM,MAAM;IACnC,MAAM,MAAM,WAAW,MAAM,KAAK,MAAM,MAAM;IAC9C,MAAM,MAAM,YAAY,MAAM,QAAQ,MAAM,YAAY;IACxD,MAAM,MAAM,eAAe,MAAM,UAAU,MAAM,QAAQ,MAAM,YAAY;IAC3E,MAAM,MAAM,eAAe,MAAM,UAAU,MAAM,QAAQ,MAAM,YAAY;IAC3E,MAAM,MAAM,eAAe,MAAM,UAAU,MAAM,QAAQ,MAAM,YAAY;IAC3E,MAAM,MAAM,eAAe,MAAM,UAAU,MAAM,QAAQ,MAAM,YAAY;IAC3E,cAAc,MAAM,UAAU,MAAM,QAAQ,MAAM,YAAY;IAC9D,4BAA4B,CAC/B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mFAAmF;AAEnF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;IAC5F,OAAO,EAAE,oEAAoE;CAC9E,CAAC,CAAC;AAEL;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,EAAE;KACR,OAAO,EAAE;KACT,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KAC3D,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,0BAA0B,EAAE;IACjC,OAAO,EAAE,kGAAkG;CAC5G,CAAC,CAAC;AAEL;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAErE,qFAAqF;AAErF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,uBAAuB;IACvB,IAAI,EAAE,mBAAmB;IACzB,uCAAuC;IACvC,MAAM,EAAE,qBAAqB;IAC7B,4CAA4C;IAC5C,QAAQ,EAAE,uBAAuB;IACjC,2BAA2B;IAC3B,UAAU,EAAE,mBAAmB;IAC/B,+EAA+E;IAC/E,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,mDAAmD;IACnD,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;CACf,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC;IACpD,oCAAoC;IACpC,uCAAuC;CACxC,CAAC,CAAC;AAyDH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAuC,IAAI,CAAC;AAE/F,uFAAuF;AAEvF,8EAA8E;AAC9E,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAE5C;;;GAGG;AACH,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,GAAG,CAAC;KACR,QAAQ,EAAE;KACV,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,GAAG,CAAC;KACR,OAAO,EAAE;KACT,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAElF;;;;;;GAMG;AACH,SAAS,0BAA0B,CACjC,KAA8E,EAC9E,GAAoB;IAEpB,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO;IAEhC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,wEAAwE;SAClF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN;;;;;;;OAOG;IACH,IAAI,EAAE,2BAA2B;IACjC,iGAAiG;IACjG,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,6BAA6B,CAAC,MAAM,CAAC;IAC3E,wFAAwF;IACxF,QAAQ,EAAE,uBAAuB,CAAC,OAAO,CAAC,6BAA6B,CAAC,QAAQ,CAAC;IACjF,mGAAmG;IACnG,UAAU,EAAE,gBAAgB;IAC5B;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;IACzC;;;;OAIG;IACH,SAAS,EAAE,eAAe;IAC1B;;;;OAIG;IACH,aAAa,EAAE,cAAc,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,WAAW,CAAC,0BAA0B,CAAC,CAAC;AAiB3C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAS7E,wFAAwF;AAExF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB;;;;OAIG;IACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,oDAAoD;IACpD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,gCAAgC;IAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AASH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,wDAAwD;IACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,2CAA2C;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,iCAAiC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,4DAA4D;IAC5D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,uEAAuE;IACvE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,yFAAyF;IACzF,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,yFAAyF;IACzF,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;CAC7B,CAAC,CAAC;AASH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD;;;;OAIG;IACH,MAAM,EAAE,QAAQ,CAAC,4BAA4B,CAAC;IAC9C;;;;OAIG;IACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,gGAAgG;IAChG,QAAQ,EAAE,QAAQ,CAAC,+BAA+B,CAAC;IACnD;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B;;;;;OAKG;IACH,UAAU,EAAE,mCAAmC;IAC/C;;;;OAIG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,uCAAuC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,6BAA6B;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,qCAAqC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,oDAAoD;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,sEAAsE;IACtE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,sEAAsE;IACtE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,mEAAmE;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,mCAAmC;QACnC,MAAM,EAAE,+BAA+B;QACvC,kCAAkC;QAClC,KAAK,EAAE,+BAA+B;KACvC,CAAC;IACF,gGAAgG;IAChG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,qDAAqD;IACrD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,oCAAoC;IACpC,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,qBAAqB;QACrB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,wBAAwB;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AASH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,yDAAyD;IACzD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,mEAAmE;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,+EAA+E;IAC/E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AASH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,0EAA0E;IAC1E,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACzB,CAAC,CAAC;AASH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,yFAAyF;IACzF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB;;;;OAIG;IACH,QAAQ,EAAE,QAAQ,CAAC,+BAA+B,CAAC;IACnD,wCAAwC;IACxC,MAAM,EAAE,8BAA8B;IACtC,kEAAkE;IAClE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,8BAA8B,EAAE,gCAAgC,CAAC,CAAC;CACnF,CAAC,CAAC"}