@nifrajs/mcp-db 3.3.0 → 4.0.0

package/dist/internal/shared.js

@@ -0,0 +1,538 @@
+/**
+ * What both database engines share and the MCP layer reuses: the refusal codes, the SQLite statement
+ * gates, the caps and the JSON-safe result shape. No runtime imports, so `@nifrajs/mcp-db` itself
+ * stays free of `node:*` modules; `engine.ts` re-exports all of it.
+ */
+const REFUSAL_FIXES = {
+    NIFRA_DB_NOT_DECLARED: 'Export devDatabase from nifra.config.ts, e.g. export const devDatabase = { kind: "sqlite", file: "./data/app.db" }. nifra never reads DATABASE_URL on its own.',
+    NIFRA_DB_CONFIG: "Correct the devDatabase field the message names. Unknown fields are refused, so a misspelled guard cannot silently drop out.",
+    NIFRA_DB_OUTSIDE_ROOT: "Keep the database file inside the project, or list its path in devDatabase.allowFiles.",
+    NIFRA_DB_REMOTE_HOST: "Point devDatabase.url at a local database (localhost, 127.0.0.1, ::1, *.localhost or a unix socket), or name the host in devDatabase.allowHosts.",
+    NIFRA_DB_SUPERUSER: "Connect as a read-only role: run `nifra db role`, apply the SQL it prints, and use that role in devDatabase.url. `nifra db schema` keeps working meanwhile.",
+    NIFRA_DB_EXTENSION: "Connect as a role that cannot use the extension or language, or name it in devDatabase.allowExtensions to accept that a query can reach outside this database.",
+    NIFRA_DB_QUERY_OFF: "devDatabase.query is false. Remove it to allow read-only queries, or use `nifra db schema`.",
+    NIFRA_DB_WRITE_REFUSED: "Send one read-only SELECT (or WITH ... SELECT). Writes, DDL, CALL, DO, COPY and several statements at once are refused.",
+    NIFRA_DB_FUNCTION_REFUSED: "Remove the named function: it reaches outside a read-only query (server files, other sessions, settings, locks, sequences, notifications or another database).",
+    NIFRA_DB_TABLE_EXCLUDED: "The query reads a relation the declaration does not expose: a table in devDatabase.exclude, a system catalog, a schema outside the allowed ones, or a name that does not exist. Run `nifra db schema` for what is exposed.",
+    NIFRA_DB_COLUMN_REFUSED: "The query reads a masked column (a credential name such as password or token, or one in devDatabase.redactColumns) in some form. A masked column cannot be read at all, not even aliased, filtered on or passed to a function: select the other columns by name, or list the column in devDatabase.revealColumns if it holds no secret.",
+    NIFRA_DB_TIMEOUT: "Narrow the query (a WHERE clause, an index, a LIMIT) or raise devDatabase.timeoutMs.",
+    NIFRA_DB_QUERY_FAILED: "The database rejected the statement. Correct the SQL and retry.",
+    NIFRA_DB_DRIVER: "Check that the database is running and that devDatabase points at it. The message carries the driver's error.",
+};
+/** Build a {@link DbRefusal} for `code` with its fix and docs anchor. */
+export function dbRefusal(code, message) {
+    return {
+        code,
+        message,
+        fix: REFUSAL_FIXES[code],
+        docsAnchor: `agents#${code
+            .toLowerCase()
+            .replace(/^nifra_/, "")
+            .replaceAll("_", "-")}`,
+    };
+}
+/** True for a value {@link dbRefusal} built. */
+export function isDbRefusal(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        "code" in value &&
+        typeof value.code === "string" &&
+        Object.hasOwn(REFUSAL_FIXES, value.code) &&
+        "message" in value &&
+        typeof value.message === "string");
+}
+// ---------------------------------------------------------------------------------------------------
+// Statement gates
+// ---------------------------------------------------------------------------------------------------
+const stripSqlNoise = (sql) => sql
+    // Strings first so comment markers inside literals don't count.
+    .replace(/'(?:[^']|'')*'/g, "''")
+    .replace(/"(?:[^"]|"")*"/g, '""')
+    .replace(/--[^\n]*/g, " ")
+    .replace(/\/\*[\s\S]*?\*\//g, " ");
+// SQLite's bare-identifier alphabet. Non-ASCII is included because SQLite treats any byte >= 0x80 as
+// an identifier character; leaving it out would end a word early and split one table name into two.
+const WORD_START = /[A-Za-z_\u0080-\uffff]/;
+const WORD_PART = /[A-Za-z0-9_$\u0080-\uffff]/;
+/**
+ * Tokenize far enough to name every relation. A regex cannot do this job: SQLite needs no separator
+ * between a keyword and a quoted identifier (`FROM"users"` is legal), and it accepts four identifier
+ * quotings - `"x"`, `[x]`, `` `x` ``, and bare. A `\s+`-anchored pattern silently reads none of
+ * those as a table reference, which is exactly how an aliased `FROM"users"AS habits` slipped past
+ * the allowlist and returned a non-exposed table's rows.
+ *
+ * String literals and comments become nothing, so a `FROM` inside attacker-controlled text is inert.
+ */
+function tokenizeSql(sql) {
+    const tokens = [];
+    let i = 0;
+    /** Read a quoted identifier, collapsing the doubled-delimiter escape SQLite uses for `"` and `` ` ``. */
+    const readQuoted = (close, escapable) => {
+        let value = "";
+        i++; // past the opening delimiter
+        while (i < sql.length) {
+            if (sql[i] === close) {
+                if (escapable && sql[i + 1] === close) {
+                    value += close;
+                    i += 2;
+                    continue;
+                }
+                i++;
+                tokens.push({ kind: "word", value, bare: false });
+                return;
+            }
+            value += sql[i];
+            i++;
+        }
+        // Unterminated - emit what we have. The caller's single-statement and plan checks still run.
+        tokens.push({ kind: "word", value, bare: false });
+    };
+    while (i < sql.length) {
+        const char = sql[i];
+        if (char === " " || char === "\t" || char === "\n" || char === "\r" || char === "\f") {
+            i++;
+        }
+        else if (char === "-" && sql[i + 1] === "-") {
+            const end = sql.indexOf("\n", i);
+            i = end === -1 ? sql.length : end + 1;
+        }
+        else if (char === "/" && sql[i + 1] === "*") {
+            const end = sql.indexOf("*/", i + 2);
+            i = end === -1 ? sql.length : end + 2;
+        }
+        else if (char === "'") {
+            // Literal: consumed and dropped, so its contents can never be read as SQL.
+            i++;
+            while (i < sql.length) {
+                if (sql[i] === "'") {
+                    if (sql[i + 1] === "'") {
+                        i += 2;
+                        continue;
+                    }
+                    i++;
+                    break;
+                }
+                i++;
+            }
+        }
+        else if (char === '"') {
+            readQuoted('"', true);
+        }
+        else if (char === "`") {
+            readQuoted("`", true);
+        }
+        else if (char === "[") {
+            readQuoted("]", false); // MSSQL-style bracket quoting: no escape form
+        }
+        else if (WORD_START.test(char)) {
+            const start = i;
+            while (i < sql.length && WORD_PART.test(sql[i]))
+                i++;
+            tokens.push({ kind: "word", value: sql.slice(start, i), bare: true });
+        }
+        else if (char >= "0" && char <= "9") {
+            while (i < sql.length && /[0-9A-Za-z._]/.test(sql[i]))
+                i++;
+        }
+        else {
+            tokens.push({ kind: "punct", value: char, bare: false });
+            i++;
+        }
+    }
+    return tokens;
+}
+/** True when `token` is the unquoted keyword `word` (case-insensitive). */
+const isKeyword = (token, word) => token?.bare === true && token.value.toLowerCase() === word;
+/**
+ * Every relation the statement names after `FROM`/`JOIN`, lowercased, with CTE names excluded.
+ * A schema qualifier resolves to its table (`main.habits` -> `habits`); a subquery contributes
+ * nothing of its own because its inner `FROM` is tokenized alongside everything else.
+ */
+function relationNames(sql) {
+    const tokens = tokenizeSql(sql);
+    // `name AS (` only ever introduces a CTE - a column alias cannot be followed by a paren - so this
+    // needs no `WITH` tracking to be exact.
+    const ctes = new Set();
+    for (let i = 1; i < tokens.length - 1; i++) {
+        const name = tokens[i - 1];
+        if (isKeyword(tokens[i], "as") && tokens[i + 1]?.value === "(" && name.kind === "word") {
+            ctes.add(name.value.toLowerCase());
+        }
+    }
+    const names = [];
+    const relationAt = (index) => {
+        const first = tokens[index];
+        if (first === undefined || first.kind !== "word")
+            return undefined; // `FROM (subquery)` - nothing to name here
+        // A qualified reference names the table second; an unqualified one names it first.
+        const qualified = tokens[index + 1]?.value === "." && tokens[index + 2]?.kind === "word";
+        const table = qualified ? tokens[index + 2].value : first.value;
+        return { name: table.toLowerCase(), next: qualified ? index + 3 : index + 1 };
+    };
+    const addRelation = (index) => {
+        const relation = relationAt(index);
+        if (relation === undefined)
+            return undefined;
+        if (relation.name !== "" && !ctes.has(relation.name))
+            names.push(relation.name);
+        return relation.next;
+    };
+    // Comma joins are part of the FROM table-source grammar but do not have a JOIN keyword. Walk the
+    // source list after every FROM and collect each top-level comma operand. The walk is deliberately
+    // conservative: an uncertain token is left for SQLite's plan check, while an apparent relation is
+    // always added so an alias cannot hide an unexposed table.
+    const clauseBoundary = new Set([
+        "where",
+        "group",
+        "order",
+        "having",
+        "limit",
+        "offset",
+        "union",
+        "except",
+        "intersect",
+        "window",
+        "returning",
+    ]);
+    for (let i = 0; i < tokens.length; i++) {
+        const from = isKeyword(tokens[i], "from");
+        const join = isKeyword(tokens[i], "join");
+        if (!from && !join)
+            continue;
+        const next = addRelation(i + 1);
+        if (join || next === undefined)
+            continue;
+        let depth = 0;
+        for (let j = next; j < tokens.length; j++) {
+            const token = tokens[j];
+            if (token === undefined)
+                break;
+            if (token.value === "(") {
+                depth++;
+                continue;
+            }
+            if (token.value === ")") {
+                if (depth === 0)
+                    break;
+                depth--;
+                continue;
+            }
+            if (depth !== 0)
+                continue;
+            if (token.bare && clauseBoundary.has(token.value.toLowerCase()))
+                break;
+            if (token.value !== ",")
+                continue;
+            // A comma at the source-list level is another table reference. If it is a subquery, the nested
+            // FROM scan below still finds its base tables; no relation is inferred from the opening paren.
+            const afterComma = addRelation(j + 1);
+            if (afterComma !== undefined)
+                j = afterComma - 1;
+        }
+    }
+    return [...new Set(names)];
+}
+/** Reject multi-statement input: allow one terminator only when it is the final character. */
+/**
+ * Names a statement defines as CTEs, column lists included (`WITH RECURSIVE c(x) AS (...)`), which
+ * {@link gateSqliteStatement}'s relation scan does not see past. Only for callers whose own check of
+ * the compiled statement is the authority on real tables: a CTE that reads a table still opens it.
+ */
+export function sqliteCteNames(sql) {
+    const tokens = tokenizeSql(stripSqlNoise(sql));
+    const names = new Set();
+    for (let i = 0; i < tokens.length; i++) {
+        const name = tokens[i];
+        if (name?.kind !== "word")
+            continue;
+        let j = i + 1;
+        if (tokens[j]?.value === "(" && tokens[j]?.kind === "punct") {
+            let depth = 0;
+            for (; j < tokens.length; j++) {
+                const value = tokens[j]?.kind === "punct" ? tokens[j]?.value : undefined;
+                if (value === "(")
+                    depth++;
+                else if (value === ")" && --depth === 0)
+                    break;
+            }
+            j++;
+        }
+        if (!isKeyword(tokens[j], "as"))
+            continue;
+        j++;
+        if (isKeyword(tokens[j], "not"))
+            j++;
+        if (isKeyword(tokens[j], "materialized"))
+            j++;
+        if (tokens[j]?.value === "(" && tokens[j]?.kind === "punct")
+            names.add(name.value.toLowerCase());
+    }
+    return [...names];
+}
+const isSingleStatement = (sql) => {
+    let quote = null;
+    let lineComment = false;
+    let blockComment = false;
+    for (let i = 0; i < sql.length; i++) {
+        const char = sql[i];
+        const next = sql[i + 1];
+        if (lineComment) {
+            if (char === "\n")
+                lineComment = false;
+            continue;
+        }
+        if (blockComment) {
+            if (char === "*" && next === "/") {
+                blockComment = false;
+                i++;
+            }
+            continue;
+        }
+        if (quote !== null) {
+            if (char === quote) {
+                if (next === quote)
+                    i++;
+                else
+                    quote = null;
+            }
+            continue;
+        }
+        if (char === "'" || char === '"') {
+            quote = char;
+            continue;
+        }
+        if (char === "-" && next === "-") {
+            lineComment = true;
+            i++;
+            continue;
+        }
+        if (char === "/" && next === "*") {
+            blockComment = true;
+            i++;
+            continue;
+        }
+        if (char === ";") {
+            return sql.slice(i + 1).trim() === "";
+        }
+    }
+    return true;
+};
+const isReadStatement = (sql) => {
+    const head = stripSqlNoise(sql).trim().toLowerCase();
+    return head.startsWith("select") || head.startsWith("with");
+};
+/** Remove one trailing statement terminator (and anything after it) while preserving literals and
+ * identifiers. Wrapping the query in a bounded subquery must not let a trailing comment consume the
+ * wrapper's closing parenthesis. */
+function executableSql(sql) {
+    let quote = null;
+    let lineComment = false;
+    let lineCommentStart = -1;
+    let blockComment = false;
+    for (let i = 0; i < sql.length; i++) {
+        const char = sql[i];
+        const next = sql[i + 1];
+        if (lineComment) {
+            if (char === "\n") {
+                lineComment = false;
+                lineCommentStart = -1;
+            }
+            continue;
+        }
+        if (blockComment) {
+            if (char === "*" && next === "/") {
+                blockComment = false;
+                i++;
+            }
+            continue;
+        }
+        if (quote !== null) {
+            if (char === quote) {
+                if (next === quote)
+                    i++;
+                else
+                    quote = null;
+            }
+            continue;
+        }
+        if (char === "'" || char === '"') {
+            quote = char;
+            continue;
+        }
+        if (char === "-" && next === "-") {
+            lineComment = true;
+            lineCommentStart = i;
+            i++;
+            continue;
+        }
+        if (char === "/" && next === "*") {
+            blockComment = true;
+            i++;
+            continue;
+        }
+        if (char === ";")
+            return sql.slice(0, i).trim();
+    }
+    if (lineComment && lineCommentStart >= 0)
+        return sql.slice(0, lineCommentStart).trim();
+    return sql.trim();
+}
+/**
+ * Gate one statement before SQLite sees it: non-empty, a single statement, SELECT/WITH only, and every
+ * relation it names after `FROM`/`JOIN` exposed. Returns the statement without its terminator, ready
+ * to wrap. Relation names are checked here as well as in the plan because SQLite's plan names an
+ * alias as the scan target (`users AS habits` plans as `SCAN habits`).
+ */
+export function gateSqliteStatement(input, exposed) {
+    const sql = input.trim();
+    if (sql === "")
+        return { ok: false, reason: "empty", text: "empty query" };
+    if (!isSingleStatement(sql)) {
+        return { ok: false, reason: "multiple", text: "only a single statement is allowed" };
+    }
+    if (!isReadStatement(sql)) {
+        return {
+            ok: false,
+            reason: "not-read",
+            text: "only SELECT (or WITH…SELECT) statements are allowed",
+        };
+    }
+    const query = executableSql(sql);
+    for (const relation of relationNames(query)) {
+        if (!exposed(relation)) {
+            return {
+                ok: false,
+                reason: "unexposed",
+                relation,
+                text: `query touches ${JSON.stringify(relation)}, which is not exposed`,
+            };
+        }
+    }
+    return { ok: true, query };
+}
+/**
+ * The first relation an `EXPLAIN QUERY PLAN` result scans or searches that `exposed` rejects, as the
+ * plan spells it, or `undefined` when every scanned relation is exposed.
+ */
+export function unexposedPlanRelation(planRows, exposed) {
+    for (const row of planRows) {
+        const detail = typeof row.detail === "string" ? row.detail : "";
+        // SQLite also emits non-table nodes such as `SCAN CONSTANT ROW` for a
+        // constant-only SELECT. Only treat a scan/search target as a relation
+        // when it is not one of those planner pseudo-nodes.
+        if (/^SCAN\s+CONSTANT\s+ROW$/i.test(detail.trim()) ||
+            /^SCAN\s+SUBQUERY\s+\d+$/i.test(detail.trim())) {
+            continue;
+        }
+        // A schema-qualified reference plans as `SCAN main.habits`. The table is the last dotted
+        // segment; reading the first would reject `main.habits` as a table literally named "main".
+        const match = /(?:SCAN|SEARCH)\s+(?:TABLE\s+)?(?:[A-Za-z_][A-Za-z0-9_]*\.)?([A-Za-z_][A-Za-z0-9_]*)/i.exec(detail);
+        if (match !== null) {
+            const relation = match[1]?.toLowerCase() ?? "";
+            if (!exposed(relation))
+                return match[1];
+        }
+    }
+    return undefined;
+}
+/** Wrap a gated query so SQLite materializes at most one row beyond `maxRows`. */
+export function boundedSqliteQuery(query, maxRows) {
+    // nifra-expect sql-dynamic: wraps a query already through gateSqliteStatement in a bounding subselect; it runs on a query-only connection
+    return `SELECT * FROM (${query}) AS "__nifra_result" LIMIT ${maxRows + 1}`;
+}
+/** Wrap a gated query to count its rows (re-executes it). */
+export function countSqliteQuery(query) {
+    // nifra-expect sql-dynamic: wraps a query already through gateSqliteStatement in a counting subselect; it runs on a query-only connection
+    return `SELECT count(*) AS "__nifra_total" FROM (${query}) AS "__nifra_count"`;
+}
+// ---------------------------------------------------------------------------------------------------
+// Caps and result shape
+// ---------------------------------------------------------------------------------------------------
+/**
+ * Serialize `build(shown)` for the largest `shown <= count` (halving from `count`) whose JSON fits
+ * `maxBytes`. `undefined` when even `build(0)` does not fit.
+ */
+export function fitToBytes(count, build, maxBytes) {
+    const encoder = new TextEncoder();
+    let shown = count;
+    let value = build(shown);
+    let serialized = JSON.stringify(value);
+    while (encoder.encode(serialized).byteLength > maxBytes && shown > 0) {
+        shown = Math.max(0, Math.floor(shown / 2));
+        value = build(shown);
+        serialized = JSON.stringify(value);
+    }
+    if (encoder.encode(serialized).byteLength > maxBytes)
+        return undefined;
+    return { value, serialized, shown };
+}
+/** The value a masked cell carries. */
+export const REDACTED_CELL = "[redacted]";
+const MAX_CELL_DEPTH = 32;
+const MIN_SAFE = BigInt(Number.MIN_SAFE_INTEGER);
+const MAX_SAFE = BigInt(Number.MAX_SAFE_INTEGER);
+/**
+ * One database value as JSON: bytes become `<n bytes>`, a bigint outside the safe range a string,
+ * a date an ISO string, a non-finite number a string. Strings go through `redaction.text`, and a
+ * key inside a JSON value that `redaction.column` matches is masked.
+ */
+export function toJsonCell(value, redaction = {}, depth = 0) {
+    if (value === null || value === undefined)
+        return null;
+    switch (typeof value) {
+        case "string":
+            return redaction.text === undefined ? value : redaction.text(value);
+        case "number":
+            return Number.isFinite(value) ? value : String(value);
+        case "bigint":
+            return value >= MIN_SAFE && value <= MAX_SAFE ? Number(value) : value.toString();
+        case "boolean":
+            return value;
+        case "object":
+            break;
+        default:
+            return String(value);
+    }
+    if (value instanceof Date)
+        return Number.isNaN(value.getTime()) ? null : value.toISOString();
+    if (value instanceof Uint8Array || value instanceof ArrayBuffer) {
+        return `<${value.byteLength} bytes>`;
+    }
+    if (depth >= MAX_CELL_DEPTH)
+        return "[nested]";
+    if (Array.isArray(value))
+        return value.map((item) => toJsonCell(item, redaction, depth + 1));
+    // Null prototype: a `__proto__` key in database JSON stays an ordinary key.
+    const out = Object.create(null);
+    for (const [key, item] of Object.entries(value)) {
+        out[key] =
+            item !== null && redaction.column?.(key) === true
+                ? REDACTED_CELL
+                : toJsonCell(item, redaction, depth + 1);
+    }
+    return out;
+}
+/**
+ * Cap, mask and normalize rows fetched as arrays (at most `maxRows + 1`, so truncation is known
+ * without counting). The byte cap halves the row count until the JSON fits.
+ */
+export function shapeRows(columns, rows, options) {
+    const redaction = options.redaction ?? {};
+    const masked = columns.map((column) => redaction.column?.(column) === true);
+    const kept = rows.slice(0, options.maxRows);
+    const cells = kept.map((row) => row.map((value, index) => masked[index] === true
+        ? value === null || value === undefined
+            ? null
+            : REDACTED_CELL
+        : toJsonCell(value, redaction)));
+    const fit = fitToBytes(cells.length, (shown) => ({ columns, rows: cells.slice(0, shown) }), options.maxResultBytes);
+    const shown = fit?.shown ?? 0;
+    return {
+        columns,
+        rows: cells.slice(0, shown),
+        rowCount: shown,
+        truncated: rows.length > options.maxRows || shown < cells.length,
+        redactedColumns: columns.filter((_, index) => masked[index] === true),
+    };
+}
+//# sourceMappingURL=shared.js.map

package/dist/internal/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/internal/shared.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA2CH,MAAM,aAAa,GAA4C;IAC7D,qBAAqB,EACnB,gKAAgK;IAClK,eAAe,EACb,8HAA8H;IAChI,qBAAqB,EACnB,wFAAwF;IAC1F,oBAAoB,EAClB,kJAAkJ;IACpJ,kBAAkB,EAChB,6JAA6J;IAC/J,kBAAkB,EAChB,gKAAgK;IAClK,kBAAkB,EAChB,6FAA6F;IAC/F,sBAAsB,EACpB,yHAAyH;IAC3H,yBAAyB,EACvB,gKAAgK;IAClK,uBAAuB,EACrB,4NAA4N;IAC9N,uBAAuB,EACrB,yUAAyU;IAC3U,gBAAgB,EACd,sFAAsF;IACxF,qBAAqB,EAAE,iEAAiE;IACxF,eAAe,EACb,+GAA+G;CAClH,CAAA;AAED,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,IAAmB,EAAE,OAAe;IAC5D,OAAO;QACL,IAAI;QACJ,OAAO;QACP,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC;QACxB,UAAU,EAAE,UAAU,IAAI;aACvB,WAAW,EAAE;aACb,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;aACtB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE;KAC1B,CAAA;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC;QACxC,SAAS,IAAI,KAAK;QAClB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAClC,CAAA;AACH,CAAC;AAED,sGAAsG;AACtG,kBAAkB;AAClB,sGAAsG;AAEtG,MAAM,aAAa,GAAG,CAAC,GAAW,EAAU,EAAE,CAC5C,GAAG;IACD,gEAAgE;KAC/D,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC;KAChC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC;KAChC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;KACzB,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;AAEtC,qGAAqG;AACrG,oGAAoG;AACpG,MAAM,UAAU,GAAG,wBAAwB,CAAA;AAC3C,MAAM,SAAS,GAAG,4BAA4B,CAAA;AAY9C;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,MAAM,GAAe,EAAE,CAAA;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,yGAAyG;IACzG,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,SAAkB,EAAQ,EAAE;QAC7D,IAAI,KAAK,GAAG,EAAE,CAAA;QACd,CAAC,EAAE,CAAA,CAAC,6BAA6B;QACjC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBACrB,IAAI,SAAS,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;oBACtC,KAAK,IAAI,KAAK,CAAA;oBACd,CAAC,IAAI,CAAC,CAAA;oBACN,SAAQ;gBACV,CAAC;gBACD,CAAC,EAAE,CAAA;gBACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;gBACjD,OAAM;YACR,CAAC;YACD,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAA;YACf,CAAC,EAAE,CAAA;QACL,CAAC;QACD,6FAA6F;QAC7F,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,CAAC,CAAA;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAW,CAAA;QAC7B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrF,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAChC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;QACvC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACpC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;QACvC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,2EAA2E;YAC3E,CAAC,EAAE,CAAA;YACH,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBACtB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACnB,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACvB,CAAC,IAAI,CAAC,CAAA;wBACN,SAAQ;oBACV,CAAC;oBACD,CAAC,EAAE,CAAA;oBACH,MAAK;gBACP,CAAC;gBACD,CAAC,EAAE,CAAA;YACL,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACvB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACvB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA,CAAC,8CAA8C;QACvE,CAAC;aAAM,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,CAAC,CAAA;YACf,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC;gBAAE,CAAC,EAAE,CAAA;YAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACvE,CAAC;aAAM,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC;gBAAE,CAAC,EAAE,CAAA;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACxD,CAAC,EAAE,CAAA;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,KAA2B,EAAE,IAAY,EAAW,EAAE,CACvE,KAAK,EAAE,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAA;AAE5D;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC/B,kGAAkG;IAClG,wCAAwC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAa,CAAA;QACtC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACvF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,UAAU,GAAG,CACjB,KAAa,EACiD,EAAE;QAChE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,SAAS,CAAA,CAAC,2CAA2C;QAC9G,mFAAmF;QACnF,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAA;QACxF,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAc,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;QAC7E,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAA;IAC/E,CAAC,CAAA;IACD,MAAM,WAAW,GAAG,CAAC,KAAa,EAAsB,EAAE;QACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;QAClC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QAC5C,IAAI,QAAQ,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC/E,OAAO,QAAQ,CAAC,IAAI,CAAA;IACtB,CAAC,CAAA;IACD,iGAAiG;IACjG,kGAAkG;IAClG,kGAAkG;IAClG,2DAA2D;IAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC7B,OAAO;QACP,OAAO;QACP,OAAO;QACP,QAAQ;QACR,OAAO;QACP,QAAQ;QACR,OAAO;QACP,QAAQ;QACR,WAAW;QACX,QAAQ;QACR,WAAW;KACZ,CAAC,CAAA;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACzC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,SAAQ;QAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/B,IAAI,IAAI,IAAI,IAAI,KAAK,SAAS;YAAE,SAAQ;QACxC,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;YACvB,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAK;YAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;gBACxB,KAAK,EAAE,CAAA;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;gBACxB,IAAI,KAAK,KAAK,CAAC;oBAAE,MAAK;gBACtB,KAAK,EAAE,CAAA;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,KAAK,KAAK,CAAC;gBAAE,SAAQ;YACzB,IAAI,KAAK,CAAC,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBAAE,MAAK;YACtE,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG;gBAAE,SAAQ;YACjC,+FAA+F;YAC/F,+FAA+F;YAC/F,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACrC,IAAI,UAAU,KAAK,SAAS;gBAAE,CAAC,GAAG,UAAU,GAAG,CAAC,CAAA;QAClD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED,8FAA8F;AAC9F;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACtB,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM;YAAE,SAAQ;QACnC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5D,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;gBACxE,IAAI,KAAK,KAAK,GAAG;oBAAE,KAAK,EAAE,CAAA;qBACrB,IAAI,KAAK,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC;oBAAE,MAAK;YAChD,CAAC;YACD,CAAC,EAAE,CAAA;QACL,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YAAE,SAAQ;QACzC,CAAC,EAAE,CAAA;QACH,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAAE,CAAC,EAAE,CAAA;QACpC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC;YAAE,CAAC,EAAE,CAAA;QAC7C,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AACnB,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAW,EAAE;IACjD,IAAI,KAAK,GAAqB,IAAI,CAAA;IAClC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACvB,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,IAAI;gBAAE,WAAW,GAAG,KAAK,CAAA;YACtC,SAAQ;QACV,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,YAAY,GAAG,KAAK,CAAA;gBACpB,CAAC,EAAE,CAAA;YACL,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,IAAI,KAAK,KAAK;oBAAE,CAAC,EAAE,CAAA;;oBAClB,KAAK,GAAG,IAAI,CAAA;YACnB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,WAAW,GAAG,IAAI,CAAA;YAClB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAA;YACnB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;QACvC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,GAAW,EAAW,EAAE;IAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AAC7D,CAAC,CAAA;AAED;;oCAEoC;AACpC,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,KAAK,GAAqB,IAAI,CAAA;IAClC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAA;IACzB,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACvB,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,WAAW,GAAG,KAAK,CAAA;gBACnB,gBAAgB,GAAG,CAAC,CAAC,CAAA;YACvB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,YAAY,GAAG,KAAK,CAAA;gBACpB,CAAC,EAAE,CAAA;YACL,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,IAAI,KAAK,KAAK;oBAAE,CAAC,EAAE,CAAA;;oBAClB,KAAK,GAAG,IAAI,CAAA;YACnB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,WAAW,GAAG,IAAI,CAAA;YAClB,gBAAgB,GAAG,CAAC,CAAA;YACpB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAA;YACnB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACjD,CAAC;IACD,IAAI,WAAW,IAAI,gBAAgB,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAA;IACtF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;AACnB,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,OAAsC;IAEtC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACxB,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;IAC1E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAA;IACtF,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,qDAAqD;SAC5D,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAChC,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,WAAW;gBACnB,QAAQ;gBACR,IAAI,EAAE,iBAAiB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,wBAAwB;aACxE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAkD,EAClD,OAAsC;IAEtC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/D,sEAAsE;QACtE,sEAAsE;QACtE,oDAAoD;QACpD,IACE,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9C,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAC9C,CAAC;YACD,SAAQ;QACV,CAAC;QACD,yFAAyF;QACzF,2FAA2F;QAC3F,MAAM,KAAK,GACT,uFAAuF,CAAC,IAAI,CAC1F,MAAM,CACP,CAAA;QACH,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;YAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,OAAe;IAC/D,0IAA0I;IAC1I,OAAO,kBAAkB,KAAK,+BAA+B,OAAO,GAAG,CAAC,EAAE,CAAA;AAC5E,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,0IAA0I;IAC1I,OAAO,4CAA4C,KAAK,sBAAsB,CAAA;AAChF,CAAC;AAED,sGAAsG;AACtG,wBAAwB;AACxB,sGAAsG;AAEtG;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,KAAa,EACb,KAA2B,EAC3B,QAAgB;IAEhB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;IACxB,IAAI,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACtC,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,GAAG,QAAQ,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACrE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;QAC1C,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QACpB,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,GAAG,QAAQ;QAAE,OAAO,SAAS,CAAA;IACtE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AACrC,CAAC;AAUD,uCAAuC;AACvC,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAA;AAEzC,MAAM,cAAc,GAAG,EAAE,CAAA;AACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAEhD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,YAAyB,EAAE,EAAE,KAAK,GAAG,CAAC;IAC/E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACtD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrE,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACvD,KAAK,QAAQ;YACX,OAAO,KAAK,IAAI,QAAQ,IAAI,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAA;QAClF,KAAK,SAAS;YACZ,OAAO,KAAK,CAAA;QACd,KAAK,QAAQ;YACX,MAAK;QACP;YACE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACxB,CAAC;IACD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;IAC5F,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;QAChE,OAAO,IAAI,KAAK,CAAC,UAAU,SAAS,CAAA;IACtC,CAAC;IACD,IAAI,KAAK,IAAI,cAAc;QAAE,OAAO,UAAU,CAAA;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;IAC5F,4EAA4E;IAC5E,MAAM,GAAG,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI;gBAC/C,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAoBD;;;GAGG;AACH,MAAM,UAAU,SAAS,CACvB,OAA0B,EAC1B,IAAqC,EACrC,OAAyB;IAEzB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAA;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACvB,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI;QACpB,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YACrC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,aAAa;QACjB,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CACjC,CACF,CAAA;IACD,MAAM,GAAG,GAAG,UAAU,CACpB,KAAK,CAAC,MAAM,EACZ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,EACrD,OAAO,CAAC,cAAc,CACvB,CAAA;IACD,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,CAAC,CAAA;IAC7B,OAAO;QACL,OAAO;QACP,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;QAC3B,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM;QAChE,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;KACtE,CAAA;AACH,CAAC"}

package/dist/internal/sqlite-session.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The execution lanes `run_query` uses: a reusable read-only worker for a file-backed database, and an
+ * in-process lane for one that cannot be reopened. Not part of the public engine - the CLI's database
+ * tool runs each query in its own subprocess instead, which bounds the work by killing the process.
+ */
+import type { SqliteDatabaseLike } from "./shared.js";
+export declare class QueryTimeoutError extends Error {
+    constructor();
+}
+/** One execution lane for `run_query`: `run` resolves rows, or rejects once the deadline passes. */
+export interface QuerySession {
+    run(sql: string, deadline: number): Promise<unknown[]>;
+    close(): Promise<void>;
+}
+/**
+ * Pick the lane once, at construction. A file-backed database is isolated in a reusable read-only
+ * worker, which is the only arrangement that can actually stop a running statement. Anything else
+ * runs in process - every database keeps working, none is refused.
+ */
+export declare function openQuerySession(db: SqliteDatabaseLike): QuerySession;
+//# sourceMappingURL=sqlite-session.d.ts.map

package/dist/internal/sqlite-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-session.d.ts","sourceRoot":"","sources":["../../src/internal/sqlite-session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED,oGAAoG;AACpG,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IACtD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAoPD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,kBAAkB,GAAG,YAAY,CAIrE"}