@numa-tech/numa 1.12.10 → 1.13.0

package/dist/clusters/kubeconfig-discovery.js

@@ -0,0 +1,280 @@
+import { execFile } from "node:child_process";
+import { createHash, randomUUID, X509Certificate } from "node:crypto";
+import { z } from "zod";
+import { ClusterError } from "./errors.js";
+import { ClusterObservationBatchRequestSchema } from "./schemas.js";
+const SHA256 = /^[0-9a-f]{64}$/u;
+const SAFE_CONTEXT = /^[^\u0000-\u001f\u007f]{1,512}$/u;
+const SAFE_VERSION = /^[A-Za-z0-9.+_-]{1,80}$/u;
+const LocalObservationSchema = z.object({
+    context_name: z.string().min(1).max(512),
+    default_namespace: z.string().min(1).max(253),
+    provider: z.string().regex(/^[A-Z0-9._-]{1,40}$/u),
+    region: z.string().regex(/^[a-z0-9-]{1,80}$/u).nullable(),
+    kubernetes_version: z.string().min(1).max(80),
+    provider_cluster_id: z.string().min(1).max(320).nullable(),
+    provider_cluster_id_sha256: z.string().regex(SHA256).nullable(),
+    kube_system_uid_sha256: z.string().regex(SHA256),
+    endpoint_sha256: z.string().regex(SHA256),
+    certificate_authority_sha256: z.string().regex(SHA256).nullable(),
+    observed_at: z.string().datetime({ offset: true })
+}).strict();
+const LocalFailureSchema = z.object({
+    context_name: z.string().min(1).max(512),
+    code: z.enum(["CONFIG_UNREADABLE", "CLUSTER_UNREACHABLE", "CLUSTER_FACTS_INVALID"])
+}).strict();
+export const LocalKubeconfigDiscoveryPlanSchema = z.object({
+    schema_version: z.literal(1),
+    kind: z.literal("numa.cluster.kubeconfig-discovery"),
+    collection_id: z.string().regex(/^col_[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u),
+    generated_at: z.string().datetime({ offset: true }),
+    observations: z.array(LocalObservationSchema).max(100),
+    failures: z.array(LocalFailureSchema).max(100)
+}).strict().refine((value) => value.observations.length + value.failures.length > 0, {
+    message: "discovery plan must contain at least one context result"
+});
+function sha256(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+export const execFileKubectl = (args, timeoutMs) => new Promise((resolve, reject) => {
+    execFile("kubectl", args, {
+        encoding: "utf8",
+        timeout: timeoutMs,
+        maxBuffer: 1024 * 1024,
+        windowsHide: true
+    }, (error, stdout) => {
+        if (error) {
+            const code = "code" in error ? error.code : undefined;
+            reject(new ClusterError(code === "ENOENT" ? "kubectl is not installed or is not available on PATH." : "kubectl command failed without exposing remote diagnostics.", code === "ENOENT" ? "CLUSTER_KUBECTL_NOT_FOUND" : "CLUSTER_KUBECTL_FAILED"));
+            return;
+        }
+        resolve(stdout);
+    });
+});
+function safeContextForOutput(value) {
+    const trimmed = value.trim();
+    if (SAFE_CONTEXT.test(trimmed) && !/:\/\//u.test(trimmed) && !/(?:token|password|secret|credential)\s*[=:]/iu.test(trimmed)) {
+        return trimmed;
+    }
+    return `context_${sha256(value).slice(0, 16)}`;
+}
+function canonicalEndpoint(value) {
+    let endpoint;
+    try {
+        endpoint = new URL(value.trim());
+    }
+    catch {
+        throw new ClusterError("Kubernetes API endpoint is invalid.", "CLUSTER_KUBECTL_FAILED");
+    }
+    if (!["https:", "http:"].includes(endpoint.protocol) || endpoint.username || endpoint.password
+        || endpoint.search || endpoint.hash) {
+        throw new ClusterError("Kubernetes API endpoint is invalid.", "CLUSTER_KUBECTL_FAILED");
+    }
+    const protocol = endpoint.protocol.toLowerCase();
+    const hostname = endpoint.hostname.toLowerCase();
+    const port = endpoint.port && !((protocol === "https:" && endpoint.port === "443") || (protocol === "http:" && endpoint.port === "80"))
+        ? `:${endpoint.port}` : "";
+    const path = endpoint.pathname.replace(/\/+$/u, "");
+    return `${protocol}//${hostname}${port}${path}`;
+}
+export function endpointSha256(value) {
+    return sha256(canonicalEndpoint(value));
+}
+export function certificateAuthoritySha256(base64Value) {
+    const compact = base64Value.replace(/\s+/gu, "");
+    if (!compact || !/^[A-Za-z0-9+/]*={0,2}$/u.test(compact) || compact.length % 4 !== 0)
+        return undefined;
+    let decoded;
+    try {
+        decoded = Buffer.from(compact, "base64");
+    }
+    catch {
+        return undefined;
+    }
+    if (!decoded.length)
+        return undefined;
+    try {
+        const text = decoded.toString("utf8");
+        const pemCertificates = text.match(/-----BEGIN CERTIFICATE-----[\s\S]*?-----END CERTIFICATE-----/gu);
+        const certificates = pemCertificates?.length
+            ? pemCertificates.map((pem) => new X509Certificate(pem).raw)
+            : [new X509Certificate(decoded).raw];
+        return sha256(Buffer.concat(certificates));
+    }
+    catch {
+        return undefined;
+    }
+}
+function parseVersion(value) {
+    let body;
+    try {
+        body = JSON.parse(value);
+    }
+    catch {
+        throw new ClusterError("kubectl version response is invalid.", "CLUSTER_KUBECTL_FAILED");
+    }
+    const version = body && typeof body === "object" && "serverVersion" in body
+        && body.serverVersion && typeof body.serverVersion === "object" && "gitVersion" in body.serverVersion
+        ? body.serverVersion.gitVersion : undefined;
+    if (typeof version !== "string" || !SAFE_VERSION.test(version.trim())) {
+        throw new ClusterError("Kubernetes server version is invalid.", "CLUSTER_KUBECTL_FAILED");
+    }
+    return version.trim();
+}
+function inferProvider(profileClusterId, nodeFacts) {
+    const lines = nodeFacts.split(/\r?\n/gu).map((line) => line.trim()).filter(Boolean);
+    let provider = profileClusterId ? "ACK" : "UNKNOWN";
+    let region = null;
+    for (const line of lines.slice(0, 20)) {
+        const [regionLabel = "", providerId = ""] = line.split("\t", 2);
+        if (!region && /^[a-z0-9-]{1,80}$/u.test(regionLabel))
+            region = regionLabel;
+        const lower = providerId.toLowerCase();
+        if (lower.startsWith("aliyun://"))
+            provider = "ACK";
+        else if (provider === "UNKNOWN" && lower.startsWith("aws://"))
+            provider = "AWS_EKS";
+        else if (provider === "UNKNOWN" && lower.startsWith("azure://"))
+            provider = "AZURE_AKS";
+        else if (provider === "UNKNOWN" && /^(?:gce|gke|google):\/\//u.test(lower))
+            provider = "GOOGLE_GKE";
+        if (!region) {
+            const matched = lower.match(/\b(?:cn|ap|eu|us|me|sa|af)-[a-z0-9-]+/u);
+            if (matched)
+                region = matched[0].replace(/-[a-z]$/u, "");
+        }
+    }
+    return { provider, region };
+}
+function kubeArgs(kubeconfig, args) {
+    return kubeconfig ? ["--kubeconfig", kubeconfig, ...args] : args;
+}
+async function optionalRun(runner, args, timeoutMs) {
+    try {
+        return await runner(args, timeoutMs);
+    }
+    catch {
+        return "";
+    }
+}
+async function collectOne(rawContext, options, runner, observedAt) {
+    const timeoutMs = (options.timeoutSeconds ?? 5) * 1000 + 1500;
+    const base = (args) => kubeArgs(options.kubeconfig, args);
+    const context = ["--context", rawContext];
+    const requestTimeout = `--request-timeout=${options.timeoutSeconds ?? 5}s`;
+    const [namespace, endpoint, caData] = await Promise.all([
+        runner(base(["config", "view", "--minify", ...context, "-o", "jsonpath={.contexts[0].context.namespace}"]), timeoutMs),
+        runner(base(["config", "view", "--minify", ...context, "-o", "jsonpath={.clusters[0].cluster.server}"]), timeoutMs),
+        optionalRun(runner, base(["config", "view", "--raw", "--flatten", "--minify", ...context, "-o", "jsonpath={.clusters[0].cluster.certificate-authority-data}"]), timeoutMs)
+    ]);
+    const canonicalEndpointHash = endpointSha256(endpoint);
+    const [versionJson, kubeSystemUid, profileClusterIdRaw, nodeFacts] = await Promise.all([
+        runner(base([...context, requestTimeout, "version", "-o", "json"]), timeoutMs),
+        runner(base([...context, requestTimeout, "get", "namespace", "kube-system", "-o", "jsonpath={.metadata.uid}"]), timeoutMs),
+        optionalRun(runner, base([...context, requestTimeout, "-n", "kube-system", "get", "configmap", "ack-cluster-profile", "-o", "jsonpath={.data.clusterid}"]), timeoutMs),
+        optionalRun(runner, base([...context, requestTimeout, "get", "nodes", "-o", "jsonpath={range .items[*]}{.metadata.labels.topology\\.kubernetes\\.io/region}{\"\\t\"}{.spec.providerID}{\"\\n\"}{end}"]), timeoutMs)
+    ]);
+    const uid = kubeSystemUid.trim().toLowerCase();
+    if (!/^[0-9a-f-]{32,64}$/u.test(uid))
+        throw new ClusterError("kube-system UID is invalid.", "CLUSTER_KUBECTL_FAILED");
+    const profileValue = profileClusterIdRaw.trim();
+    const providerClusterId = /^c[0-9a-f]{32}$/u.test(profileValue) ? profileValue : "";
+    const { provider, region } = inferProvider(providerClusterId, nodeFacts);
+    return {
+        context_name: safeContextForOutput(rawContext),
+        default_namespace: namespace.trim() || "default",
+        provider,
+        region,
+        kubernetes_version: parseVersion(versionJson),
+        provider_cluster_id: providerClusterId || null,
+        provider_cluster_id_sha256: providerClusterId ? sha256(providerClusterId) : null,
+        kube_system_uid_sha256: sha256(uid),
+        endpoint_sha256: canonicalEndpointHash,
+        certificate_authority_sha256: certificateAuthoritySha256(caData) ?? null,
+        observed_at: observedAt
+    };
+}
+export async function discoverKubeconfig(options = {}, dependencies = {}) {
+    const timeoutSeconds = options.timeoutSeconds ?? 5;
+    if (!Number.isInteger(timeoutSeconds) || timeoutSeconds < 1 || timeoutSeconds > 30) {
+        throw new ClusterError("timeout must be an integer between 1 and 30 seconds.", "CLUSTER_CLI_INPUT_INVALID");
+    }
+    const runner = dependencies.runner ?? execFileKubectl;
+    const timeoutMs = timeoutSeconds * 1000 + 1500;
+    const listed = await runner(kubeArgs(options.kubeconfig, ["config", "get-contexts", "-o", "name"]), timeoutMs);
+    const contexts = listed.split(/\r?\n/gu).map((item) => item.trim()).filter(Boolean);
+    if (contexts.length > 100)
+        throw new ClusterError("kubeconfig contains more than 100 contexts; select one with --context.", "CLUSTER_CLI_INPUT_INVALID");
+    const selected = options.context ? contexts.filter((item) => item === options.context) : contexts;
+    if (options.context && !selected.length)
+        throw new ClusterError("Requested kube context was not found.", "CLUSTER_CLI_INPUT_INVALID");
+    if (!selected.length)
+        throw new ClusterError("No kube contexts were found.", "CLUSTER_CLI_INPUT_INVALID");
+    const generatedAt = (dependencies.now?.() ?? new Date()).toISOString();
+    const observations = [];
+    const failures = [];
+    for (const rawContext of selected) {
+        try {
+            observations.push(await collectOne(rawContext, { ...options, timeoutSeconds }, runner, generatedAt));
+        }
+        catch (error) {
+            failures.push({
+                context_name: safeContextForOutput(rawContext),
+                code: error instanceof ClusterError && error.code === "CLUSTER_KUBECTL_FAILED"
+                    ? "CLUSTER_UNREACHABLE" : "CLUSTER_FACTS_INVALID"
+            });
+        }
+    }
+    const result = LocalKubeconfigDiscoveryPlanSchema.safeParse({
+        schema_version: 1,
+        kind: "numa.cluster.kubeconfig-discovery",
+        collection_id: `col_${dependencies.collectionId?.() ?? randomUUID()}`,
+        generated_at: generatedAt,
+        observations,
+        failures
+    });
+    if (!result.success)
+        throw new ClusterError(`Local discovery result is invalid: ${result.error.message}`, "CLUSTER_PLAN_INVALID");
+    return result.data;
+}
+function canonicalFingerprintTuple(item) {
+    return [
+        item.provider_cluster_id_sha256 ?? "",
+        item.kube_system_uid_sha256,
+        item.endpoint_sha256,
+        item.certificate_authority_sha256 ?? ""
+    ].join("\0");
+}
+export function observationBatchFromPlan(plan, sourceKey) {
+    const parsed = LocalKubeconfigDiscoveryPlanSchema.safeParse(plan);
+    if (!parsed.success)
+        throw new ClusterError(`Local discovery plan is invalid: ${parsed.error.message}`, "CLUSTER_PLAN_INVALID");
+    const source = sourceKey.trim();
+    if (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,119}$/u.test(source)) {
+        throw new ClusterError("source must be a stable source key.", "CLUSTER_CLI_INPUT_INVALID");
+    }
+    if (!parsed.data.observations.length)
+        throw new ClusterError("Discovery plan has no successful observations to submit.", "CLUSTER_PLAN_INVALID");
+    const observations = parsed.data.observations.map((item) => ({
+        observationKey: `obs_${sha256(`${source}\0${parsed.data.collection_id}\0${item.context_name}\0${canonicalFingerprintTuple(item)}`)}`,
+        observedAt: item.observed_at,
+        observedName: item.context_name.slice(0, 200),
+        provider: item.provider,
+        ...(item.region == null ? {} : { region: item.region }),
+        kubernetesVersion: item.kubernetes_version,
+        ...(item.provider_cluster_id == null ? {} : {
+            providerClusterId: item.provider_cluster_id,
+            providerClusterIdSha256: item.provider_cluster_id_sha256 ?? undefined
+        }),
+        kubeSystemUidSha256: item.kube_system_uid_sha256,
+        endpointSha256: item.endpoint_sha256,
+        ...(item.certificate_authority_sha256 == null ? {} : {
+            certificateAuthoritySha256: item.certificate_authority_sha256
+        })
+    }));
+    const batch = ClusterObservationBatchRequestSchema.safeParse({ observations });
+    if (!batch.success)
+        throw new ClusterError(`Observation batch is invalid: ${batch.error.message}`, "CLUSTER_PLAN_INVALID");
+    return batch.data;
+}
+//# sourceMappingURL=kubeconfig-discovery.js.map

package/dist/clusters/kubeconfig-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubeconfig-discovery.js","sourceRoot":"","sources":["../../src/clusters/kubeconfig-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,oCAAoC,EAGrC,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,YAAY,GAAG,kCAAkC,CAAC;AACxD,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACzD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC1D,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC/D,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAChD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IACzC,4BAA4B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IACjE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;CACpF,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qEAAqE,CAAC;IACtG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACnD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;IACnF,OAAO,EAAE,yDAAyD;CACnE,CAAC,CAAC;AAoBH,SAAS,MAAM,CAAC,KAAsB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACjG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE;QACxB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,IAAI,GAAG,IAAI;QACtB,WAAW,EAAE,IAAI;KAClB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACnB,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,MAAM,CAAC,IAAI,YAAY,CACrB,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC,6DAA6D,EAC3I,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,wBAAwB,CAC3E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5H,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,QAAa,CAAC;IAClB,IAAI,CAAC;QAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAC/C,MAAM,IAAI,YAAY,CAAC,qCAAqC,EAAE,wBAAwB,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;WACzF,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,YAAY,CAAC,qCAAqC,EAAE,wBAAwB,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrI,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO,GAAG,QAAQ,KAAK,QAAQ,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvG,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IAC7E,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACrG,MAAM,YAAY,GAAG,eAAe,EAAE,MAAM;YAC1C,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;YAC5D,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAClD,MAAM,IAAI,YAAY,CAAC,sCAAsC,EAAE,wBAAwB,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,eAAe,IAAI,IAAI;WACtE,IAAI,CAAC,aAAa,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,YAAY,IAAI,IAAI,CAAC,aAAa;QACrG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,uCAAuC,EAAE,wBAAwB,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,gBAAwB,EAAE,SAAiB;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpF,IAAI,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,WAAW,GAAG,EAAE,EAAE,UAAU,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,MAAM,GAAG,WAAW,CAAC;QAC5E,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,QAAQ,GAAG,KAAK,CAAC;aAC/C,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,QAAQ,GAAG,SAAS,CAAC;aAC/E,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,QAAQ,GAAG,WAAW,CAAC;aACnF,IAAI,QAAQ,KAAK,SAAS,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,QAAQ,GAAG,YAAY,CAAC;QACpG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACtE,IAAI,OAAO;gBAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,UAA8B,EAAE,IAAc;IAC9D,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAqB,EAAE,IAAc,EAAE,SAAiB;IACjF,IAAI,CAAC;QAAC,OAAO,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,UAAkB,EAClB,OAAmC,EACnC,MAAqB,EACrB,UAAkB;IAElB,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAC9D,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,qBAAqB,OAAO,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC;IAC3E,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,2CAA2C,CAAC,CAAC,EAAE,SAAS,CAAC;QACtH,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC,EAAE,SAAS,CAAC;QACnH,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,4DAA4D,CAAC,CAAC,EAAE,SAAS,CAAC;KAC3K,CAAC,CAAC;IACH,MAAM,qBAAqB,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,CAAC,WAAW,EAAE,aAAa,EAAE,mBAAmB,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC,EAAE,SAAS,CAAC;QAC1H,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,4BAA4B,CAAC,CAAC,EAAE,SAAS,CAAC;QACtK,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,yHAAyH,CAAC,CAAC,EAAE,SAAS,CAAC;KACpN,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wBAAwB,CAAC,CAAC;IACtH,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO;QACL,YAAY,EAAE,oBAAoB,CAAC,UAAU,CAAC;QAC9C,iBAAiB,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,SAAS;QAChD,QAAQ;QACR,MAAM;QACN,kBAAkB,EAAE,YAAY,CAAC,WAAW,CAAC;QAC7C,mBAAmB,EAAE,iBAAiB,IAAI,IAAI;QAC9C,0BAA0B,EAAE,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;QAChF,sBAAsB,EAAE,MAAM,CAAC,GAAG,CAAC;QACnC,eAAe,EAAE,qBAAqB;QACtC,4BAA4B,EAAE,0BAA0B,CAAC,MAAM,CAAC,IAAI,IAAI;QACxE,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAO,GAA+B,EAAE,EACxC,YAAY,GAAoC,EAAE;IAElD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,EAAE,EAAE,CAAC;QACnF,MAAM,IAAI,YAAY,CAAC,sDAAsD,EAAE,2BAA2B,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,eAAe,CAAC;IACtD,MAAM,SAAS,GAAG,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/G,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpF,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,YAAY,CAAC,wEAAwE,EAAE,2BAA2B,CAAC,CAAC;IACzJ,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClG,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,uCAAuC,EAAE,2BAA2B,CAAC,CAAC;IACtI,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,8BAA8B,EAAE,2BAA2B,CAAC,CAAC;IAC1G,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvE,MAAM,YAAY,GAAiD,EAAE,CAAC;IACtE,MAAM,QAAQ,GAA6C,EAAE,CAAC;IAC9D,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACvG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,YAAY,EAAE,oBAAoB,CAAC,UAAU,CAAC;gBAC9C,IAAI,EAAE,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB;oBAC5E,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,uBAAuB;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC;QAC1D,cAAc,EAAE,CAAC;QACjB,IAAI,EAAE,mCAAmC;QACzC,aAAa,EAAE,OAAO,YAAY,CAAC,YAAY,EAAE,EAAE,IAAI,UAAU,EAAE,EAAE;QACrE,YAAY,EAAE,WAAW;QACzB,YAAY;QACZ,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,sCAAsC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAClI,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,yBAAyB,CAAC,IAA0D;IAC3F,OAAO;QACL,IAAI,CAAC,0BAA0B,IAAI,EAAE;QACrC,IAAI,CAAC,sBAAsB;QAC3B,IAAI,CAAC,eAAe;QACpB,IAAI,CAAC,4BAA4B,IAAI,EAAE;KACxC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAkC,EAAE,SAAiB;IAC5F,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAChI,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,YAAY,CAAC,qCAAqC,EAAE,2BAA2B,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,0DAA0D,EAAE,sBAAsB,CAAC,CAAC;IACjJ,MAAM,YAAY,GAA8B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtF,cAAc,EAAE,OAAO,MAAM,CAAC,GAAG,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,YAAY,KAAK,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QACpI,UAAU,EAAE,IAAI,CAAC,WAAW;QAC5B,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACvD,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;QAC1C,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1C,iBAAiB,EAAE,IAAI,CAAC,mBAAmB;YAC3C,uBAAuB,EAAE,IAAI,CAAC,0BAA0B,IAAI,SAAS;SACtE,CAAC;QACF,mBAAmB,EAAE,IAAI,CAAC,sBAAsB;QAChD,cAAc,EAAE,IAAI,CAAC,eAAe;QACpC,GAAG,CAAC,IAAI,CAAC,4BAA4B,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnD,0BAA0B,EAAE,IAAI,CAAC,4BAA4B;SAC9D,CAAC;KACH,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,oCAAoC,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,iCAAiC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAC3H,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC"}