@omnitron-dev/omnitron 0.2.0 → 0.3.1

package/dist/services/node-manager.rpc-service.d.ts

@@ -2,8 +2,27 @@
  * NodeManager RPC Service — Netron endpoints for node management
  *
  * Only available on master omnitron. Slave cannot manage nodes.
+ *
+ * The health-monitor worker is an OPTIMISATION, not a dependency. Every
+ * endpoint that prefers it degrades to the daemon's own checks when the call
+ * fails. The guards used to test `this.healthWorkerProxy` for null — which is
+ * only ever true before the worker is wired and after the daemon begins
+ * shutting down — so a worker that CRASHED left a proxy that looked present
+ * and answered every call with
+ * `TitanError: Service with id HealthMonitor@1.0.0 not found`. The console's
+ * Refresh and Check buttons returned that error verbatim, and the fleet view
+ * went on rendering a status frozen at the worker's last report as though it
+ * were current.
+ *
+ * A crash is now the daemon's to notice: the worker's `onExit` drops the
+ * proxy and schedules a respawn, which wires a new one. What a failed CALL
+ * costs is that call, and no more — see `callWorker`.
  */
 import type { NodeManagerService, AddNodeInput, UpdateNodeInput, INodeWithStatus, INodeStatus, SshKeyInfo } from './node-manager.service.js';
+import type { NodeCheckConfig } from './remote-ops.service.js';
+import type { FleetHistoryConfig, IMeshNodeStatus, INodeIndicators, INodeSyncStatus, INodeRelayStats, INodeClusterState, INodeDaemonAnswer, INodeUpgradePlan, INodeRolloutStart } from '../shared/dto/nodes.js';
+import type { DaemonStatusDto, AggregatedHealthDto, AggregatedMetricsDto } from '../config/types.js';
+import type { ISyncStatus } from '../shared/dto/project.js';
 import type { INodeHealthSummary } from '../workers/types.js';
 import type { NodeHealthRepository, HealthCheckRow, UptimeBucket } from './node-health.repository.js';
 /** Interface for the health worker proxy methods we call */
@@ -11,13 +30,27 @@ interface IHealthWorkerProxy {
     triggerCheck(nodeId?: string): Promise<INodeHealthSummary[]>;
     getStatusSummaries(): Promise<INodeHealthSummary[]>;
 }
-export declare class NodeManagerRpcService {
+import type { IOmnitronNodesService } from '../shared/dto/services.js';
+export declare class NodeManagerRpcService implements IOmnitronNodesService {
     private readonly nodeManager;
+    /** The audit trail, when this daemon has one — see `ProjectRpcService`. */
+    private readonly audit?;
     private healthWorkerProxy;
     private healthRepo;
-    constructor(nodeManager: NodeManagerService);
+    private remoteDeployer;
+    private upgrades;
+    private slaveConnector;
+    private titanHealth;
+    private syncService;
+    private telemetryRelay;
+    private leaderElection;
+    constructor(nodeManager: NodeManagerService, 
+    /** The audit trail, when this daemon has one — see `ProjectRpcService`. */
+    audit?: import('./audit.service.js').AuditService | undefined);
     /** Set the health worker proxy after the worker is spawned */
     setHealthWorkerProxy(proxy: IHealthWorkerProxy | null): void;
+    /** Whether fleet checks are currently being served by the worker. */
+    hasHealthWorker(): boolean;
     /** Set the PG repository for direct history reads */
     setHealthRepository(repo: NodeHealthRepository | null): void;
     listNodes(): INodeWithStatus[];
@@ -28,12 +61,36 @@ export declare class NodeManagerRpcService {
     updateNode(data: {
         id: string;
     } & UpdateNodeInput): ReturnType<NodeManagerService['updateNode']>;
+    /**
+     * Remove a node, and everything keyed to it.
+     *
+     * The check history goes too. It is keyed by an id that will never be
+     * issued again, nothing can read it back, and the retention sweep only
+     * looks at age — so a fleet that churns nodes accumulates rows no query
+     * will ever name. Deletion that stops at the registry row is deletion of
+     * the part you can see.
+     */
     removeNode(data: {
         id: string;
-    }): void;
+    }): Promise<void>;
     checkNodeStatus(data: {
         id: string;
     }): Promise<INodeStatus>;
+    /**
+     * Check every node, returning each one's STATUS.
+     *
+     * Two methods run the same round. This one answers `INodeStatus[]` — the
+     * three reachability layers with their errors — and `triggerNodeCheck({})`
+     * answers `INodeHealthSummary[]`, which adds `consecutiveFailures` and
+     * `lastSeenOnline` and drops the per-layer detail. Neither is redundant and
+     * neither had a production caller: the console now uses both, one for the
+     * diagnosis panel and one for "has it been down since Tuesday or did it
+     * blink once".
+     *
+     * Which to call is decided by which of those two answers you need, and
+     * saying so here is cheaper than the next reader discovering the difference
+     * after choosing the wrong one.
+     */
     checkAllNodes(): Promise<INodeStatus[]>;
     /** Read check history from PG directly (not via worker) */
     getCheckHistory(data: {
@@ -49,18 +106,311 @@ export declare class NodeManagerRpcService {
         bucketCount?: number;
         intervalMs?: number;
     }): Promise<UptimeBucket[]>;
+    /**
+     * Every node's aggregated health.
+     *
+     * From the daemon's own summaries when the worker cannot answer, like
+     * every other endpoint here. It answered `[]` — measured 2026-09-23: 3
+     * entries, then 0 the moment one unrelated call detached the worker — and
+     * an empty list on the page whose subject is the fleet reads as «no
+     * nodes», while the daemon held a summary for each of them.
+     */
     getNodeHealthSummaries(): Promise<INodeHealthSummary[]>;
     triggerNodeCheck(data: {
         nodeId?: string;
     }): Promise<INodeHealthSummary[]>;
+    /**
+     * Install a bundle on a node, beside what it is running.
+     *
+     * On the daemon rather than in the CLI because the node's credentials are
+     * in the daemon's vault. `nodeToDeployTarget` resolves them here and they
+     * go no further; the caller passes an id and gets back whether it worked.
+     *
+     * OPERATOR, not VIEWER: this writes several hundred megabytes to a remote
+     * machine.
+     */
+    installBundleOnNode(data: {
+        nodeId: string;
+        archivePath: string;
+        version: string;
+    }): Promise<boolean>;
+    /**
+     * Make an installed version current, and restart the node into it.
+     *
+     * Separate from the install for the reason the versioned layout exists:
+     * this is the only step that changes what the node serves.
+     */
+    activateBundleOnNode(data: {
+        nodeId: string;
+        version: string;
+        keepVersions?: number;
+    }): Promise<boolean>;
+    /** Recovery reaches the node by SSH even when its daemon cannot answer. */
+    recoverBundleOnNode(data: {
+        nodeId: string;
+        receiptId: string;
+    }): Promise<boolean>;
+    /**
+     * Upgrade a node's omnitron to the one this daemon is built from.
+     *
+     * `fleet upgrade` does the same thing from a terminal, and the console
+     * could not do it at all: the two methods above take an archive path on
+     * THIS filesystem, and only the CLI knew how to produce one. The service
+     * behind this builds it, then calls exactly those two.
+     *
+     * Started and polled, not awaited: a build is minutes, and an RPC that
+     * takes minutes is one that times out somewhere in the middle.
+     */
+    upgradeNode(data: {
+        nodeId: string;
+    }): Promise<{
+        started: boolean;
+        reason?: string;
+    }>;
+    /** Where each node's upgrade got to. Newest state per node. */
+    getUpgradeProgress(): Promise<import('./node-upgrade.service.js').NodeUpgradeProgress[]>;
+    /**
+     * What a rollout would do to each node, before anything ships.
+     *
+     * A read, not an action — `CONTROL_PLANE_READ_ROLES` rather than
+     * `OPERATOR_ROLES` — so an operator without deploy rights can still see
+     * what the fleet is running and what it would take to move it.
+     */
+    planUpgrade(data?: {
+        nodeIds?: string[];
+        build?: boolean;
+    }): Promise<INodeUpgradePlan>;
+    /** Queue a rollout across several nodes. Returns once queued, not once done. */
+    upgradeNodes(data: {
+        nodeIds: string[];
+        concurrency?: number;
+    }): Promise<INodeRolloutStart>;
+    /** Drop a node from a running rollout, if it has not started installing. */
+    cancelUpgrade(data: {
+        nodeId: string;
+    }): Promise<{
+        stopped: boolean;
+        because: string;
+    }>;
+    /** Wired by the daemon at startup, on a master. */
+    setUpgradeService(service: import('./node-upgrade.service.js').NodeUpgradeService | null): void;
+    /**
+     * The deployer, made once and kept.
+     *
+     * Lazily, because a daemon that never upgrades a node should not pay for an
+     * execution engine at boot — and because `RemoteDeployer` is only reachable
+     * from these two methods, so there is nothing else to construct it for.
+     */
+    private deployer;
+    /** Wired by the daemon at startup, on a master. */
+    setRemoteDeployer(deployer: import('./remote-deployer.service.js').RemoteDeployer | null): void;
+    /**
+     * The daemon's mesh connector, so the console can be told what it sees —
+     * and so the daemon's own node check asks the daemon over it.
+     *
+     * Handed on to the node manager here rather than by a second line in the
+     * daemon: this is the one place the daemon gives the connector to the node
+     * services, and the check path that needs it is the one this service falls
+     * back to (`checkNodeStatus` without a worker), as is the daemon's own
+     * fallback loop.
+     */
+    setSlaveConnector(connector: import('../cluster/slave-connector.js').SlaveConnector | null): void;
+    /**
+     * This daemon's own titan-health, for the local node's indicators.
+     *
+     * A remote node is asked over the mesh; the local one cannot be, because a
+     * daemon has no mesh connection to itself.
+     */
+    setTitanHealth(service: {
+        check(): Promise<{
+            status: string;
+            indicators: Record<string, unknown>;
+        }>;
+    } | null): void;
+    /** This daemon's own replication state, for the local node. */
+    setSyncService(service: {
+        getStatus(): Promise<ISyncStatus>;
+    } | null): void;
+    /** This daemon's own telemetry relay, for the local node. */
+    setTelemetryRelay(relay: {
+        stats(): unknown;
+    } | null): void;
+    /** This daemon's own election state, for the local node. */
+    setLeaderElection(election: {
+        getClusterState(): unknown;
+    } | null): void;
+    /**
+       * Ask a service ON the node, wherever the node is.
+       *
+       * The console's own clients are bound to the daemon it is connected to, so
+       * every question about a node used to be answerable only about the local
+       * one. `SlaveConnector.invokeOnSlave` has always been able to reach any
+       * service on any node over the mesh and had exactly one caller; this is the
+       * seam the node readers share, so adding the next one is a method name
+       * rather than another copy of the plumbing.
+       *
+       * `ok: false` carries the REASON and never a verdict. A node outside the
+       * mesh has not answered; saying "unhealthy" or "not replicating" about
+       * silence sends an operator to repair the wrong thing.
+       */
+    private askNode;
+    /**
+     * What the node's OWN titan-health says about it.
+     *
+     * Every omnitron daemon runs `TitanHealthModule` and answers `Health@1.0.0`,
+     * with titan's built-in indicators — memory, event loop, disk, database,
+     * redis — plus the two this daemon registers: docker and the apps it
+     * supervises. The remote nodes have had all of it since they were
+     * provisioned, and nothing ever asked them: the console's `health` client is
+     * bound to `daemonClient.daemon`, so it only ever spoke to the daemon it was
+     * connected to.
+     *
+     * There is no new mechanism here. `SlaveConnector.invokeOnSlave` already
+     * calls any service on any node over the mesh — it had exactly one caller,
+     * `OmnitronInfra.provisionStack` — and `Health@1.0.0` is already answering
+     * on the other side.
+     *
+     * `reachable: false` with a reason is NOT `unhealthy`. A node that cannot be
+     * asked has not reported anything, and rendering silence as a verdict is the
+     * same mistake as reading an unmeasured SSH layer as a refusal.
+     */
+    getNodeIndicators(data: {
+        nodeId: string;
+    }): Promise<INodeIndicators>;
+    /**
+     * What the node's own daemon reports, asked over the mesh.
+     *
+     * `fleet status`, `fleet health` and `fleet metrics` each dial
+     * `host:9700` and ask `OmnitronDaemon` from the CLI. A node whose daemon
+     * port is not open to this master answers nothing — which is the normal
+     * state of a hardened server and the whole reason the mesh tunnels over
+     * SSH. Measured on the test node while it was running six apps with every
+     * port listening:
+     *
+     *     SERVER     HOST                 STATUS   APPS
+     *     sample-test  37.27.130.185:9700   offline  0
+     *
+     * Three methods rather than one relay taking a service name: a viewer may
+     * ask a node what it is running, and may not use this master as a proxy for
+     * arbitrary calls into it.
+     */
+    getNodeDaemonStatus(data: {
+        nodeId: string;
+    }): Promise<INodeDaemonAnswer<DaemonStatusDto>>;
+    getNodeDaemonHealth(data: {
+        nodeId: string;
+    }): Promise<INodeDaemonAnswer<AggregatedHealthDto>>;
+    getNodeDaemonMetrics(data: {
+        nodeId: string;
+    }): Promise<INodeDaemonAnswer<AggregatedMetricsDto>>;
+    /** One of the three questions above, put through `askNode`. */
+    private daemonAnswer;
+    /**
+     * Whether the node's data is actually MOVING.
+     *
+     * Every other reading on the node page answers "can we reach it". A node can
+     * be green on all of them and replicate nothing — and for every registered
+     * node that no stack had been deployed onto, that is exactly what happened:
+     * 47,407 entries buffered on one, none delivered, over eleven hours, while
+     * the page showed it healthy.
+     *
+     * `OmnitronSync.getSyncStatus` has answered this since it was written; its
+     * own docblock says "for webapp monitoring" and the console has never known
+     * the service exists. `pendingItems` climbing with `lastSyncAt` standing
+     * still is the whole diagnosis, and it was one call away the entire time.
+     */
+    getNodeSyncStatus(data: {
+        nodeId: string;
+    }): Promise<INodeSyncStatus>;
+    /**
+       * The node's telemetry relay: what it buffered, sent, failed and DROPPED.
+       *
+       * `getNodeSyncStatus` answers whether the log/metric replication is moving.
+       * This answers the other pipe — the telemetry relay — and it carries the one
+       * counter in the fleet that reports LOSS. `totalDropped` is what the buffer
+       * threw away because it was full, and a number that only ever goes up while
+       * nobody looks is how a gap in the metrics is discovered months later from
+       * the chart rather than from the daemon that made it.
+       *
+       * `OmnitronTelemetry.getRelayStats` has answered this since it was written —
+       * the file's own header says "Webapp → Leader telemetry stats (relay
+       * health)" — and the console has never called it.
+       */
+    getNodeRelayStats(data: {
+        nodeId: string;
+    }): Promise<INodeRelayStats>;
+    /**
+       * Which node each node thinks is the leader.
+       *
+       * The fourth reader through `askNode`, and the one that is only meaningful
+       * ACROSS nodes: a single node's answer is unremarkable, and two nodes naming
+       * different leaders, or sitting in different terms, is a split brain — the
+       * state in which every node is individually healthy and the fleet is not.
+       * Nothing in the console could see it, because `OmnitronCluster` is one of
+       * the services its client does not know, and `getClusterState`'s own
+       * docblock says it is "used by CLI and webapp dashboard".
+       */
+    getNodeClusterState(data: {
+        nodeId: string;
+    }): Promise<INodeClusterState>;
+    /**
+     * Whether each node is replicating, and how it is being reached.
+     *
+     * The node page could say a node was up — SSH answers, the daemon answers
+     * a ping — while nothing it collected ever arrived. Reachability and
+     * membership are different questions, and only the second one is about
+     * whether the data on the master is the whole of what the fleet knows.
+     *
+     * Three states are worth distinguishing, and the console renders all
+     * three: not in the mesh at all; connected but UNAUTHENTICATED, which
+     * answers pings and can replicate nothing; and connected over an SSH
+     * tunnel, which works but says the node's daemon port is closed to this
+     * master and is worth knowing before someone debugs the latency.
+     */
+    getMeshStatus(): Promise<IMeshNodeStatus[]>;
     listSshKeys(): SshKeyInfo[];
-    getCheckConfig(): ReturnType<NodeManagerService['getCheckConfig']>;
-    setCheckConfig(data: {
-        pingEnabled?: boolean;
-        pingTimeout?: number;
-        sshTimeout?: number;
-        omnitronCheckTimeout?: number;
-    }): ReturnType<NodeManagerService['getCheckConfig']>;
+    getCheckConfig(): NodeCheckConfig;
+    /** How much history exists, and how wide one uptime-bar segment is. */
+    getHistoryConfig(): FleetHistoryConfig;
+    setCheckConfig(data: Partial<NodeCheckConfig>): NodeCheckConfig;
+    /**
+     * Call the health worker, or report that this call could not be served by it.
+     *
+     * `null` means "no answer from the worker for THIS call" — no proxy, or a
+     * call that threw. Either way the caller takes the in-process path.
+     *
+     * The proxy is kept. It used to be dropped on ANY error, and nothing but a
+     * respawn ever wired it again — so one call the worker refused, from a
+     * worker that was alive and checking, detached it for the life of the
+     * process. Measured 2026-09-23: `omnitron node check 16f3dd5a` (the id
+     * `node list` prints) reached the worker as an unknown id, the worker threw
+     * `Node not found`, `getNodeHealthSummaries` fell from 3 entries to 0, and
+     * every later check went through the daemon's own path. The same happened
+     * on 2026-09-22 from one `RPC request timed out after 5000ms` on a loaded
+     * host. A process that has actually gone is the daemon's to notice, and it
+     * does: the worker's `onExit` clears this proxy (daemon.ts,
+     * startHealthMonitorWorker) and a respawn wires the next one.
+     */
+    private callWorker;
+    /**
+     * Refuse an id the registry does not hold, before anything is asked about it.
+     *
+     * Checked here, not left to the worker: the worker throws for an id it
+     * does not know, and a throw from the worker is what used to detach it
+     * (see `callWorker`). An unknown id is the caller's mistake and is answered
+     * as one, in the registry's words.
+     */
+    private assertRegistered;
+    /**
+     * The worker's answers about nodes the registry still holds.
+     *
+     * The worker is told of a removal by an IPC call that can fail, and its
+     * answers are its own memory: measured 2026-09-23, a node removed at
+     * 07:28:00Z came back from `checkAllNodes` 82 minutes later as `online`,
+     * and the CLI printed it as a bare id with two green dots. A status with no
+     * node behind it is not a status of anything.
+     */
+    private registeredOnly;
 }
 export {};
 //# sourceMappingURL=node-manager.rpc-service.d.ts.map

package/dist/services/node-manager.rpc-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-manager.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/node-manager.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,WAAW,EACX,UAAU,EACX,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEtG,4DAA4D;AAC5D,UAAU,kBAAkB;IAC1B,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC7D,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;CACrD;AAED,qBACa,qBAAqB;IAIpB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAHxC,OAAO,CAAC,iBAAiB,CAAmC;IAC5D,OAAO,CAAC,UAAU,CAAqC;gBAE1B,WAAW,EAAE,kBAAkB;IAE5D,8DAA8D;IAC9D,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,IAAI;IAI5D,qDAAqD;IACrD,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI;IAK5D,SAAS,IAAI,eAAe,EAAE;IAK9B,OAAO,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe,GAAG,IAAI;IAKrD,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAKtE,UAAU,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAMhG,UAAU,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAKhC,eAAe,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAe3D,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAW7C,2DAA2D;IAErD,eAAe,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAK1F;;;OAGG;IAEG,YAAY,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAM1G,sBAAsB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAMvD,gBAAgB,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAMhF,WAAW,IAAI,UAAU,EAAE;IAK3B,cAAc,IAAI,UAAU,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAKlE,cAAc,CAAC,IAAI,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,UAAU,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;CAI5K"}
+{"version":3,"file":"node-manager.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/node-manager.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,KAAK,EACV,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,WAAW,EACX,UAAU,EACX,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EACxI,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACrG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEtG,4DAA4D;AAC5D,UAAU,kBAAkB;IAC1B,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC7D,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;CACrD;AAED,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAoBvE,qBACa,qBAAsB,YAAW,qBAAqB;IAmB/D,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IApBzB,OAAO,CAAC,iBAAiB,CAAmC;IAC5D,OAAO,CAAC,UAAU,CAAqC;IAEvD,OAAO,CAAC,cAAc,CAAsE;IAE5F,OAAO,CAAC,QAAQ,CAAuE;IAEvF,OAAO,CAAC,cAAc,CAAuE;IAE7F,OAAO,CAAC,WAAW,CAA8F;IAEjH,OAAO,CAAC,WAAW,CAAsD;IAEzE,OAAO,CAAC,cAAc,CAAqC;IAE3D,OAAO,CAAC,cAAc,CAA+C;IAErE,YACmB,WAAW,EAAE,kBAAkB;IAChD,2EAA2E;IAC1D,KAAK,CAAC,EAAE,OAAO,oBAAoB,EAAE,YAAY,GAAG,SAAS,EAC5E;IAEJ,8DAA8D;IAC9D,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAE3D;IAED,qEAAqE;IACrE,eAAe,IAAI,OAAO,CAEzB;IAED,qDAAqD;IACrD,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAE3D;IAGD,SAAS,IAAI,eAAe,EAAE,CAE7B;IAGD,OAAO,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe,GAAG,IAAI,CAEpD;IAGK,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAU3E;IAGK,UAAU,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe,GAAG,UAAU,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAYrG;IAED;;;;;;;;OAQG;IAEG,UAAU,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBpD;IAGK,eAAe,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAWhE;IAED;;;;;;;;;;;;;;OAcG;IAEG,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAc5C;IAED,2DAA2D;IAErD,eAAe,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAGzF;IAED;;;OAGG;IAEG,YAAY,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAO/G;IAED;;;;;;;;OAQG;IAEG,sBAAsB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAK5D;IAGK,gBAAgB,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAgB/E;IAED;;;;;;;;;OASG;IAEG,mBAAmB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAa1G;IAED;;;;;OAKG;IAEG,oBAAoB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAmB7G;IAED,2EAA2E;IAErE,mBAAmB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAcvF;IAED;;;;;;;;;;OAUG;IAEG,WAAW,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAY1F;IAED,+DAA+D;IAEzD,kBAAkB,IAAI,OAAO,CAAC,OAAO,2BAA2B,EAAE,mBAAmB,EAAE,CAAC,CAE7F;IASD;;;;;;OAMG;IAEG,WAAW,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2C3F;IAED,gFAAgF;IAE1E,YAAY,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAwBhG;IAED,4EAA4E;IAEtE,aAAa,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAO5F;IAED,mDAAmD;IACnD,iBAAiB,CAAC,OAAO,EAAE,OAAO,2BAA2B,EAAE,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAE9F;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAOhB,mDAAmD;IACnD,iBAAiB,CAAC,QAAQ,EAAE,OAAO,8BAA8B,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAE9F;IAED;;;;;;;;;OASG;IACH,iBAAiB,CAAC,SAAS,EAAE,OAAO,+BAA+B,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAGhG;IAED;;;;;OAKG;IACH,cAAc,CAAC,OAAO,EAAE;QAAE,KAAK,IAAI,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAA;KAAE,GAAG,IAAI,GAAG,IAAI,CAElH;IAED,+DAA+D;IAC/D,cAAc,CAAC,OAAO,EAAE;QAAE,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;KAAE,GAAG,IAAI,GAAG,IAAI,CAE1E;IAED,6DAA6D;IAC7D,iBAAiB,CAAC,KAAK,EAAE;QAAE,KAAK,IAAI,OAAO,CAAA;KAAE,GAAG,IAAI,GAAG,IAAI,CAE1D;IAED,4DAA4D;IAC5D,iBAAiB,CAAC,QAAQ,EAAE;QAAE,eAAe,IAAI,OAAO,CAAA;KAAE,GAAG,IAAI,GAAG,IAAI,CAEvE;IAEH;;;;;;;;;;;;;SAaK;YACW,OAAO;IA4BrB;;;;;;;;;;;;;;;;;;;OAmBG;IAEG,iBAAiB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAW1E;IAED;;;;;;;;;;;;;;;;OAgBG;IAEG,mBAAmB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC,CAE/F;IAGK,mBAAmB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAEnG;IAGK,oBAAoB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC,CAErG;IAED,+DAA+D;YACjD,YAAY;IAW1B;;;;;;;;;;;;;OAaG;IAEG,iBAAiB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAW1E;IAEH;;;;;;;;;;;;;SAaK;IAEG,iBAAiB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAW1E;IAGH;;;;;;;;;;SAUK;IAEG,mBAAmB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAW9E;IAGD;;;;;;;;;;;;;OAaG;IAEG,aAAa,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAgBhD;IAGD,WAAW,IAAI,UAAU,EAAE,CAE1B;IAGD,cAAc,IAAI,eAAe,CAEhC;IAED,uEAAuE;IAEvE,gBAAgB,IAAI,kBAAkB,CAErC;IAGD,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAG9D;IAMD;;;;;;;;;;;;;;;;;OAiBG;YACW,UAAU;IAcxB;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;CAGvB"}