@omnitron-dev/omnitron 0.2.0 → 0.3.0

package/dist/daemon/daemon-state-store.service.js

@@ -0,0 +1,446 @@
+/**
+ * DaemonStateStore — unified SQLite-backed persistence for daemon-
+ * local state that must survive daemon restarts.
+ *
+ * Why SQLite (not OMNITRON_DB / PostgreSQL):
+ * ==========================================
+ * Daemon boots BEFORE infrastructure (Docker containers including
+ * PostgreSQL are provisioned BY the daemon). Daemon state has to be
+ * readable during the pre-infrastructure boot phase, so persistence
+ * via PostgreSQL would create a chicken-and-egg loop. SQLite (via
+ * `better-sqlite3`) ships in-process, has no boot-order dependency,
+ * provides WAL-mode crash-safe transactions, and Kysera gives the
+ * same typed-query surface our other state uses.
+ *
+ * What lives here (T-7 in the audit):
+ * ====================================
+ * Previously these were five separate `fs.writeFileSync(JSON)`
+ * surfaces with no transactional semantics across writes:
+ *
+ *   1. PersistedAppState  ← state-store.ts  (process registry for
+ *                          crash-recovery + reconcile-on-boot)
+ *   2. PidLock            ← pid-manager.ts (daemon PID file +
+ *                          signature)
+ *   3. ProjectRegistryEntry ← project.service.ts (registered projects)
+ *   4. NodeRegistryEntry  ← node-manager.service.ts (fleet nodes)
+ *   5. SecretsBlob        ← secrets.service.ts (encrypted secret store)
+ *
+ * Migrating each onto one transactional store eliminates the torn-
+ * write risk a single fs.writeFileSync had (kill -9 mid-write left
+ * truncated JSON; the daemon then booted with an empty registry and
+ * every supervised app was treated as new).
+ *
+ * Schema is kept deliberately key-value where the workload allows
+ * it (state_kv) and properly normalized only where queries need it
+ * (projects, nodes). All schemas are auto-migrated on first open;
+ * adding a new key never requires a separate migration step.
+ */
+import path from 'node:path';
+import { createRequire } from 'node:module';
+import { Kysely, SqliteDialect, sql } from 'kysely';
+import { expandPath } from '../shared/paths.js';
+import { ensurePrivateDir, sealFile } from '../shared/private-files.js';
+// `better-sqlite3` is loaded sync via createRequire because `initSync()`
+// can't `await import()`. The dynamic `await import()` in `getDb()`
+// still works because Node resolves both paths to the same module
+// graph entry.
+const requireCjs = createRequire(import.meta.url);
+// =============================================================================
+// Service
+// =============================================================================
+export class DaemonStateStore {
+    logger;
+    db = null;
+    /**
+     * Raw better-sqlite3 Database — exposed for callers that need
+     * synchronous reads (ProjectRegistry's constructor-time load,
+     * pid-manager's pre-DI bootstrap, etc.). Same connection the
+     * Kysely instance wraps; same WAL settings; same lifetime.
+     * `null` until the first `init()` / `getDb()`.
+     */
+    rawSqlite = null;
+    initialized = false;
+    /** Resolved absolute path — cached so callers can log/probe it. */
+    dbPath;
+    constructor(logger, dbPath = expandPath('~/.omnitron/data/daemon-state.db')) {
+        this.logger = logger;
+        this.dbPath = dbPath;
+    }
+    /**
+     * Force-open the database synchronously and return the raw
+     * better-sqlite3 handle. Callable from constructor-style code
+     * paths that can't await (legacy ProjectRegistry, pid-manager).
+     * Uses `require` instead of dynamic `import` to stay sync.
+     * Idempotent — subsequent calls return the cached handle.
+     */
+    initSync() {
+        if (this.rawSqlite)
+            return this.rawSqlite;
+        ensurePrivateDir(path.dirname(this.dbPath));
+        const BetterSqlite3 = requireCjs('better-sqlite3');
+        const database = new BetterSqlite3(this.dbPath);
+        database.pragma('journal_mode = WAL');
+        database.pragma('busy_timeout = 5000');
+        database.pragma('synchronous = NORMAL');
+        // better-sqlite3 creates the file at 0644 under a default umask, and this
+        // one holds the encrypted secrets, the project registry and the backup
+        // index. Sealed after the WAL pragma, because that is what creates the
+        // `-wal` and `-shm` sidecars — and they carry the same rows as the file
+        // they sit beside.
+        sealFile(this.dbPath);
+        this.rawSqlite = database;
+        // Apply DDL synchronously via raw exec — Kysely's sql tagged
+        // template requires the async wrapper. The schema is small
+        // enough that we can inline the CREATE TABLE statements here.
+        this.createTablesSync(database);
+        this.initialized = true;
+        this.logger.info({ path: this.dbPath }, 'Daemon state store initialized (sync)');
+        return database;
+    }
+    /**
+     * Sync KV read. Requires `initSync()` or `getDb()` to have
+     * completed at least once. Returns null on missing key or
+     * parse failure.
+     */
+    kvGetSync(key) {
+        const db = this.rawSqlite ?? this.initSync();
+        const row = db.prepare('SELECT value FROM state_kv WHERE key = ?').get(key);
+        if (!row)
+            return null;
+        try {
+            return JSON.parse(row.value);
+        }
+        catch (err) {
+            this.logger.warn({ key, err: err.message }, 'state_kv: JSON parse failed (sync)');
+            return null;
+        }
+    }
+    /** Sync KV write. Same atomicity as kvSet via SQLite WAL. */
+    kvSetSync(key, value) {
+        const db = this.rawSqlite ?? this.initSync();
+        const payload = JSON.stringify(value);
+        const now = new Date().toISOString();
+        db.prepare('INSERT INTO state_kv (key, value, updated_at) VALUES (?, ?, ?) ' +
+            'ON CONFLICT (key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at').run(key, payload, now);
+    }
+    /** Sync KV delete. Idempotent — silent on missing key. */
+    kvDeleteSync(key) {
+        const db = this.rawSqlite ?? this.initSync();
+        db.prepare('DELETE FROM state_kv WHERE key = ?').run(key);
+    }
+    /**
+     * Sync select-all from `projects`. ProjectRegistry calls this in
+     * its constructor — keeps the legacy synchronous API while the
+     * actual persistence is transactional under the hood.
+     */
+    selectProjectsSync() {
+        const db = this.rawSqlite ?? this.initSync();
+        return db
+            .prepare('SELECT name, path, config_hash, added_at, last_seen FROM projects ORDER BY added_at ASC')
+            .all();
+    }
+    /**
+     * Sync upsert into `projects`. ProjectRegistry's add/persist
+     * paths route through here so the row is durable as soon as the
+     * caller's function returns — no fire-and-forget queue, no race
+     * between persist() and the next list() reader.
+     */
+    upsertProjectSync(row) {
+        const db = this.rawSqlite ?? this.initSync();
+        const now = new Date().toISOString();
+        db.prepare('INSERT INTO projects (name, path, config_hash, added_at, last_seen) VALUES (?, ?, ?, ?, ?) ' +
+            'ON CONFLICT (name) DO UPDATE SET path = excluded.path, config_hash = excluded.config_hash, last_seen = excluded.last_seen').run(row.name, row.path, row.config_hash ?? null, row.added_at ?? now, row.last_seen ?? now);
+    }
+    /** Sync delete from `projects`. Idempotent. */
+    deleteProjectSync(name) {
+        const db = this.rawSqlite ?? this.initSync();
+        db.prepare('DELETE FROM projects WHERE name = ?').run(name);
+    }
+    // ===========================================================================
+    // Backups — typed helpers backing backup.service.ts
+    // ===========================================================================
+    /**
+     * Insert a backup metadata row. Called by `BackupService.createBackup`
+     * after the .sql.gz file is on disk. Atomic — the row is durable as
+     * soon as this returns, no .meta.json torn-write window.
+     */
+    insertBackupSync(row) {
+        const db = this.rawSqlite ?? this.initSync();
+        const now = new Date().toISOString();
+        db.prepare('INSERT INTO backups (id, app, path, size_bytes, created_at, metadata) VALUES (?, ?, ?, ?, ?, ?)').run(row.id, row.app, row.path, row.size_bytes, row.created_at ?? now, row.metadata ? JSON.stringify(row.metadata) : null);
+    }
+    /** List backup rows, optionally filtered by app. Newest first. */
+    selectBackupsSync(app) {
+        const db = this.rawSqlite ?? this.initSync();
+        if (app) {
+            return db
+                .prepare('SELECT id, app, path, size_bytes, created_at, metadata FROM backups WHERE app = ? ORDER BY created_at DESC')
+                .all(app);
+        }
+        return db
+            .prepare('SELECT id, app, path, size_bytes, created_at, metadata FROM backups ORDER BY created_at DESC')
+            .all();
+    }
+    /** Sync delete of a backup row. Idempotent. */
+    deleteBackupSync(id) {
+        const db = this.rawSqlite ?? this.initSync();
+        db.prepare('DELETE FROM backups WHERE id = ?').run(id);
+    }
+    // ===========================================================================
+    // Nodes — typed helpers backing node-manager.service.ts
+    // ===========================================================================
+    /** Upsert a fleet node row. INSERT … ON CONFLICT(id) DO UPDATE. */
+    upsertNodeSync(row) {
+        const db = this.rawSqlite ?? this.initSync();
+        const now = new Date().toISOString();
+        const meta = row.metadata ? JSON.stringify(row.metadata) : null;
+        db.prepare('INSERT INTO nodes (id, name, host, port, role, status, last_heartbeat, metadata, added_at, updated_at) ' +
+            'VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?) ' +
+            'ON CONFLICT (id) DO UPDATE SET ' +
+            '  name = excluded.name, host = excluded.host, port = excluded.port, ' +
+            '  role = excluded.role, status = excluded.status, ' +
+            '  last_heartbeat = excluded.last_heartbeat, metadata = excluded.metadata, ' +
+            '  updated_at = excluded.updated_at').run(row.id, row.name, row.host, row.port, row.role, row.status ?? 'unknown', row.last_heartbeat ?? null, meta, now, now);
+    }
+    /** List every persisted fleet node. */
+    selectNodesSync() {
+        const db = this.rawSqlite ?? this.initSync();
+        return db
+            .prepare('SELECT id, name, host, port, role, status, last_heartbeat, metadata, added_at, updated_at FROM nodes ORDER BY added_at ASC')
+            .all();
+    }
+    /** Sync delete of a node row. Idempotent. */
+    deleteNodeSync(id) {
+        const db = this.rawSqlite ?? this.initSync();
+        db.prepare('DELETE FROM nodes WHERE id = ?').run(id);
+    }
+    /** Update only the heartbeat + status — cheaper than a full upsert. */
+    touchNodeHeartbeatSync(id, status, timestamp = new Date().toISOString()) {
+        const db = this.rawSqlite ?? this.initSync();
+        db.prepare('UPDATE nodes SET status = ?, last_heartbeat = ?, updated_at = ? WHERE id = ?').run(status, timestamp, timestamp, id);
+    }
+    /**
+     * Lazy-init. The first caller pays the open + auto-create cost
+     * (~5 ms cold). Subsequent calls return the cached handle.
+     */
+    async getDb() {
+        if (this.db)
+            return this.db;
+        // Reuse the sync handle when `initSync()` got here first, and publish
+        // ours when it did not. The two used to be separate connections to the
+        // same file despite the comment on `rawSqlite` promising otherwise —
+        // a second fd, a second WAL reader, and a same-process writer that
+        // could only wait out the other on `busy_timeout`. One handle, one
+        // lifetime, and the documented invariant becomes true.
+        let database = this.rawSqlite;
+        if (!database) {
+            ensurePrivateDir(path.dirname(this.dbPath));
+            const BetterSqlite3 = (await import('better-sqlite3')).default;
+            database = new BetterSqlite3(this.dbPath);
+            // WAL mode + busy_timeout + synchronous=NORMAL is the same
+            // recipe SlaveStorageService uses; battle-tested under the
+            // metrics drain workload.
+            database.pragma('journal_mode = WAL');
+            database.pragma('busy_timeout = 5000');
+            database.pragma('synchronous = NORMAL');
+            sealFile(this.dbPath); // after the WAL pragma — see `initSync`
+            this.rawSqlite = database;
+        }
+        const dialect = new SqliteDialect({ database });
+        this.db = new Kysely({ dialect });
+        if (!this.initialized) {
+            await this.createTables();
+            this.initialized = true;
+            this.logger.info({ path: this.dbPath }, 'Daemon state store initialized');
+        }
+        return this.db;
+    }
+    /**
+     * Close both handles and return the store to its pre-`init` state.
+     *
+     * Two things here are load-bearing and were previously missing.
+     *
+     * `rawSqlite` is cleared as well as `db`. Before the two were unified
+     * they were separate connections to the same file, and destroying only
+     * the Kysely one left the sync handle open — so `kvGetSync()` kept
+     * answering, and kept its WAL lock, on a store the caller had closed.
+     * They share a handle now, but the field still has to be dropped or the
+     * next `getDb()` would wrap a closed database.
+     *
+     * `initialized` is reset. It guards `createTables()`, so leaving it
+     * set means a store reopened after `dispose()` never re-applies the
+     * DDL. Today the tables live in a file and survive, which is why this
+     * has never bitten; it stops being harmless the moment `createTables`
+     * gains a statement (a reopened store would silently lack the new
+     * table) or the path is `:memory:` (every query would fail with `no
+     * such table`). The flag buys four `CREATE TABLE IF NOT EXISTS` on an
+     * already-open handle — not enough to be worth a resurrection trap.
+     */
+    async dispose() {
+        if (this.db) {
+            await this.db.destroy();
+            this.db = null;
+        }
+        if (this.rawSqlite) {
+            // `db.destroy()` above already closed the shared handle when Kysely
+            // held it; better-sqlite3 throws on a double close, so ask first.
+            if (this.rawSqlite.open)
+                this.rawSqlite.close();
+            this.rawSqlite = null;
+        }
+        this.initialized = false;
+    }
+    // ===========================================================================
+    // High-level helpers — typed JSON KV
+    // ===========================================================================
+    /**
+     * Read a JSON-encoded value under `key`. Returns null when the key
+     * is absent OR the stored value fails to parse (the JSON.parse
+     * error is logged but not thrown — the caller is free to choose
+     * how to recover, typically by re-initialising the state).
+     */
+    async kvGet(key) {
+        const db = await this.getDb();
+        const row = await db
+            .selectFrom('state_kv')
+            .select('value')
+            .where('key', '=', key)
+            .executeTakeFirst();
+        if (!row)
+            return null;
+        try {
+            return JSON.parse(row.value);
+        }
+        catch (err) {
+            this.logger.warn({ key, err: err.message }, 'state_kv: JSON parse failed');
+            return null;
+        }
+    }
+    /**
+     * Atomically upsert a JSON value under `key`. Wraps the encode +
+     * write in a single transaction so a concurrent reader never sees
+     * a half-written row. WAL mode guarantees readers see the prior
+     * committed version until the transaction commits.
+     */
+    async kvSet(key, value) {
+        const db = await this.getDb();
+        const payload = JSON.stringify(value);
+        const now = new Date().toISOString();
+        await db
+            .insertInto('state_kv')
+            .values({ key, value: payload, updated_at: now })
+            .onConflict((oc) => oc.column('key').doUpdateSet({ value: payload, updated_at: now }))
+            .execute();
+    }
+    /** Drop a key. Idempotent — no error if the key doesn't exist. */
+    async kvDelete(key) {
+        const db = await this.getDb();
+        await db.deleteFrom('state_kv').where('key', '=', key).execute();
+    }
+    /** Walk every key starting with `prefix`. Used by reconcile paths. */
+    async kvKeys(prefix) {
+        const db = await this.getDb();
+        let q = db.selectFrom('state_kv').select('key');
+        if (prefix)
+            q = q.where('key', 'like', `${prefix}%`);
+        const rows = await q.execute();
+        return rows.map((r) => r.key);
+    }
+    // ===========================================================================
+    // Private — Schema Creation
+    // ===========================================================================
+    /**
+     * Synchronous DDL for the `initSync()` path. Same statements as
+     * `createTables()`, but issued through better-sqlite3's
+     * `database.exec()` instead of Kysera's async `sql` template.
+     */
+    createTablesSync(db) {
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS state_kv (
+        key TEXT PRIMARY KEY,
+        value TEXT NOT NULL,
+        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+      );
+      CREATE TABLE IF NOT EXISTS projects (
+        name TEXT PRIMARY KEY,
+        path TEXT NOT NULL,
+        config_hash TEXT,
+        added_at TEXT NOT NULL DEFAULT (datetime('now')),
+        last_seen TEXT NOT NULL DEFAULT (datetime('now'))
+      );
+      CREATE TABLE IF NOT EXISTS nodes (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        host TEXT NOT NULL,
+        port INTEGER NOT NULL,
+        role TEXT NOT NULL,
+        status TEXT NOT NULL DEFAULT 'unknown',
+        last_heartbeat TEXT,
+        metadata TEXT,
+        added_at TEXT NOT NULL DEFAULT (datetime('now')),
+        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+      );
+      CREATE INDEX IF NOT EXISTS idx_nodes_status ON nodes (status);
+      CREATE TABLE IF NOT EXISTS backups (
+        id TEXT PRIMARY KEY,
+        app TEXT NOT NULL,
+        path TEXT NOT NULL,
+        size_bytes INTEGER NOT NULL,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        metadata TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_backups_app_created ON backups (app, created_at);
+    `);
+    }
+    async createTables() {
+        if (!this.db)
+            return;
+        await sql `
+      CREATE TABLE IF NOT EXISTS state_kv (
+        key TEXT PRIMARY KEY,
+        value TEXT NOT NULL,
+        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `.execute(this.db);
+        await sql `
+      CREATE TABLE IF NOT EXISTS projects (
+        name TEXT PRIMARY KEY,
+        path TEXT NOT NULL,
+        config_hash TEXT,
+        added_at TEXT NOT NULL DEFAULT (datetime('now')),
+        last_seen TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `.execute(this.db);
+        await sql `
+      CREATE TABLE IF NOT EXISTS nodes (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        host TEXT NOT NULL,
+        port INTEGER NOT NULL,
+        role TEXT NOT NULL,
+        status TEXT NOT NULL DEFAULT 'unknown',
+        last_heartbeat TEXT,
+        metadata TEXT,
+        added_at TEXT NOT NULL DEFAULT (datetime('now')),
+        updated_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `.execute(this.db);
+        await sql `
+      CREATE INDEX IF NOT EXISTS idx_nodes_status ON nodes (status)
+    `.execute(this.db);
+        await sql `
+      CREATE TABLE IF NOT EXISTS backups (
+        id TEXT PRIMARY KEY,
+        app TEXT NOT NULL,
+        path TEXT NOT NULL,
+        size_bytes INTEGER NOT NULL,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        metadata TEXT
+      )
+    `.execute(this.db);
+        await sql `
+      CREATE INDEX IF NOT EXISTS idx_backups_app_created ON backups (app, created_at)
+    `.execute(this.db);
+    }
+}
+//# sourceMappingURL=daemon-state-store.service.js.map

package/dist/daemon/daemon-state-store.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-state-store.service.js","sourceRoot":"","sources":["../../src/daemon/daemon-state-store.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAExE,yEAAyE;AACzE,oEAAoE;AACpE,kEAAkE;AAClE,eAAe;AACf,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAoElD,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,OAAO,gBAAgB;IAeR,MAAM;IAdjB,EAAE,GAAuC,IAAI,CAAC;IACtD;;;;;;OAMG;IACK,SAAS,GAA6C,IAAI,CAAC;IAC3D,WAAW,GAAG,KAAK,CAAC;IAC5B,mEAAmE;IACnD,MAAM,CAAS;IAE/B,YACmB,MAAe,EAChC,MAAM,GAAW,UAAU,CAAC,kCAAkC,CAAC;sBAD9C,MAAM;QAGvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,QAAQ;QACN,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,UAAU,CAAC,gBAAgB,CAAoC,CAAC;QACtF,MAAM,QAAQ,GAAsC,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACvC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACxC,0EAA0E;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,mBAAmB;QACnB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,6DAA6D;QAC7D,2DAA2D;QAC3D,8DAA8D;QAC9D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAC;QACjF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAI,GAAW;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAkC,CAAC;QAC7G,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAM,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,oCAAoC,CAAC,CAAC;YAC7F,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,SAAS,CAAI,GAAW,EAAE,KAAQ;QAChC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,EAAE,CAAC,OAAO,CACR,iEAAiE;YAC/D,0FAA0F,CAC7F,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,0DAA0D;IAC1D,YAAY,CAAC,GAAW;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAOhB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,OAAO,EAAE;aACN,OAAO,CAAC,yFAAyF,CAAC;aAClG,GAAG,EAAwD,CAAC;IACjE,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,GAMjB;QACC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,EAAE,CAAC,OAAO,CACR,6FAA6F;YAC3F,2HAA2H,CAC9H,CAAC,GAAG,CACH,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,WAAW,IAAI,IAAI,EACvB,GAAG,CAAC,QAAQ,IAAI,GAAG,EACnB,GAAG,CAAC,SAAS,IAAI,GAAG,CACrB,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,iBAAiB,CAAC,IAAY;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,8EAA8E;IAC9E,oDAAoD;IACpD,8EAA8E;IAE9E;;;;OAIG;IACH,gBAAgB,CAAC,GAOhB;QACC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,EAAE,CAAC,OAAO,CACR,iGAAiG,CAClG,CAAC,GAAG,CACH,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,GAAG,EACP,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,UAAU,IAAI,GAAG,EACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CACnD,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,iBAAiB,CAAC,GAAY;QAQ5B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,EAAE;iBACN,OAAO,CAAC,4GAA4G,CAAC;iBACrH,GAAG,CAAC,GAAG,CAAsD,CAAC;QACnE,CAAC;QACD,OAAO,EAAE;aACN,OAAO,CAAC,8FAA8F,CAAC;aACvG,GAAG,EAAuD,CAAC;IAChE,CAAC;IAED,+CAA+C;IAC/C,gBAAgB,CAAC,EAAU;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,8EAA8E;IAC9E,wDAAwD;IACxD,8EAA8E;IAE9E,mEAAmE;IACnE,cAAc,CAAC,GASd;QACC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,EAAE,CAAC,OAAO,CACR,yGAAyG;YACvG,wCAAwC;YACxC,iCAAiC;YACjC,sEAAsE;YACtE,oDAAoD;YACpD,4EAA4E;YAC5E,oCAAoC,CACvC,CAAC,GAAG,CACH,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,MAAM,IAAI,SAAS,EACvB,GAAG,CAAC,cAAc,IAAI,IAAI,EAC1B,IAAI,EACJ,GAAG,EACH,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,eAAe;QAYb,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,OAAO,EAAE;aACN,OAAO,CACN,4HAA4H,CAC7H;aACA,GAAG,EAAqD,CAAC;IAC9D,CAAC;IAED,6CAA6C;IAC7C,cAAc,CAAC,EAAU;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,uEAAuE;IACvE,sBAAsB,CAAC,EAAU,EAAE,MAAc,EAAE,SAAS,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC7F,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,EAAE,CAAC,OAAO,CACR,8EAA8E,CAC/E,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC5B,sEAAsE;QACtE,uEAAuE;QACvE,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,uDAAuD;QACvD,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5C,MAAM,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,QAAQ,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1C,2DAA2D;YAC3D,2DAA2D;YAC3D,0BAA0B;YAC1B,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACtC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACvC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,wCAAwC;YAC/D,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC5B,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,EAAE,GAAG,IAAI,MAAM,CAAsB,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,oEAAoE;YACpE,kEAAkE;YAClE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI;gBAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAChD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,qCAAqC;IACrC,8EAA8E;IAE9E;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAI,GAAW;QACxB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,EAAE;aACjB,UAAU,CAAC,UAAU,CAAC;aACtB,MAAM,CAAC,OAAO,CAAC;aACf,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC;aACtB,gBAAgB,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAM,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,6BAA6B,CAAC,CAAC;YACtF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAI,GAAW,EAAE,KAAQ;QAClC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,EAAE;aACL,UAAU,CAAC,UAAU,CAAC;aACtB,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;aAChD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;aACrF,OAAO,EAAE,CAAC;IACf,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACnE,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,MAAM,CAAC,MAAe;QAC1B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,8EAA8E;IAC9E,4BAA4B;IAC5B,8EAA8E;IAE9E;;;;OAIG;IACK,gBAAgB,CAAC,EAAqC;QAC5D,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAmCP,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO;QAErB,MAAM,GAAG,CAAA;;;;;;KAMR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,GAAG,CAAA;;;;;;;;KAQR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,GAAG,CAAA;;;;;;;;;;;;;KAaR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,GAAG,CAAA;;KAER,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,GAAG,CAAA;;;;;;;;;KASR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,GAAG,CAAA;;KAER,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;CACF"}