@omnitron-dev/omnitron 0.3.0 → 0.3.2

package/dist/services/terminal.rpc-service.js

@@ -0,0 +1,508 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { RecoveryMutation } from '../daemon/recovery-state.js';
+import { randomUUID, createHash } from 'node:crypto';
+import { Service, Public } from '@omnitron-dev/titan/decorators';
+import { Errors } from '@omnitron-dev/titan/errors';
+import { ADMIN_ROLES } from '../shared/roles.js';
+import { getCurrentAuth, runWithAuth } from './auth-context.js';
+import { isSshHostFingerprint, nodeHostFingerprint, nodeHostPinKey, nodeSshIdentity } from './node-host-key.js';
+import { XecTerminalDriver } from './terminal-ssh.js';
+export const TERMINAL_LIMITS = {
+    outputBytes: 256 * 1024,
+    readBytes: 64 * 1024,
+    inputBytes: 8192,
+    readWaitMs: 5000,
+};
+export const DEFAULT_TERMINAL_POLICY = {
+    enabled: true,
+    maxSessions: 32,
+    maxSessionsPerOwner: 8,
+    idleTimeoutMs: 15 * 60_000,
+    absoluteTimeoutMs: 8 * 60 * 60_000,
+    disconnectTimeoutMs: 90_000,
+};
+/** Limits are server policy, never values supplied by a browser. */
+export function terminalPolicy(input = {}) {
+    const policy = { ...DEFAULT_TERMINAL_POLICY, ...input };
+    if (typeof policy.enabled !== 'boolean')
+        throw new Error('terminal.enabled must be boolean');
+    for (const key of [
+        'maxSessions',
+        'maxSessionsPerOwner',
+        'idleTimeoutMs',
+        'absoluteTimeoutMs',
+        'disconnectTimeoutMs',
+    ]) {
+        if (!Number.isSafeInteger(policy[key]) || policy[key] < 1)
+            throw new Error(`terminal.${key} must be a positive integer`);
+    }
+    if (policy.maxSessions > 128 || policy.maxSessionsPerOwner > 32)
+        throw new Error('Terminal session caps exceed the supported maximum');
+    return policy;
+}
+function dimension(value, name) {
+    if (!Number.isInteger(value) || value < 2 || value > 500)
+        throw Errors.badRequest(`${name} must be an integer from 2 to 500`);
+    return value;
+}
+function textId(value) {
+    if (typeof value !== 'string' || !value || value.length > 200)
+        throw Errors.badRequest('A valid identifier is required');
+    return value;
+}
+/** One owner per shell. No public attach token, raw command logs, or persisted transcript. */
+let TerminalRpcService = class TerminalRpcService {
+    nodes;
+    auth;
+    store;
+    audit;
+    driver;
+    now;
+    activeSessionCount() { return [...this.sessions.values()].filter(session => session.closedAt === undefined).length; }
+    sessions = new Map();
+    probing = new Set();
+    policy;
+    timer;
+    sweeping = false;
+    stopped = false;
+    constructor(nodes, auth, store, audit, options = {}, driver = new XecTerminalDriver(), now = Date.now) {
+        this.nodes = nodes;
+        this.auth = auth;
+        this.store = store;
+        this.audit = audit;
+        this.driver = driver;
+        this.now = now;
+        this.policy = terminalPolicy(options);
+        this.timer = setInterval(() => {
+            void this.sweep().catch(() => {
+                for (const session of this.sessions.values())
+                    this.finish(session, 'control_plane_unavailable');
+            });
+        }, 2000);
+        this.timer.unref();
+    }
+    async owner() {
+        if (this.stopped || !this.policy.enabled)
+            throw Errors.forbidden('SSH terminals are disabled on this daemon');
+        const auth = getCurrentAuth();
+        if (!auth?.roles?.includes('admin') || !auth.userId)
+            throw Errors.forbidden('SSH terminal requires an administrator');
+        // This marker is assigned by the owner-only Unix transport, never from a JWT.
+        if (auth.userId === 'omnitron-local' && auth.metadata?.['source'] === 'local-unix-socket')
+            return { key: 'local-unix', auth };
+        const sessionId = auth.metadata?.['sessionId'];
+        if (typeof sessionId !== 'string')
+            throw Errors.forbidden('SSH terminal requires an active human session');
+        const owner = { key: `${auth.userId}:${sessionId}`, sessionId, auth };
+        if (!(await this.valid(owner)))
+            throw Errors.forbidden('SSH terminal session has expired, been revoked, or lost administrator access');
+        return owner;
+    }
+    async valid(owner) {
+        if (!owner.sessionId)
+            return true;
+        // Bypass the transport token cache: revocation and demotion take effect on every operation.
+        const current = await this.auth.validateSession(owner.sessionId);
+        return current?.id === owner.auth.userId && current.role === 'admin';
+    }
+    node(id) {
+        const node = this.nodes.getNode(textId(id));
+        if (!node || node.isLocal)
+            throw Errors.badRequest('Select a registered remote SSH node');
+        return node;
+    }
+    pin(node) {
+        return nodeHostFingerprint(this.store, node);
+    }
+    async capabilities() {
+        await this.owner();
+        return { ...this.policy };
+    }
+    async inspectHost(data) {
+        const owner = await this.owner();
+        const node = this.node(data?.nodeId);
+        if (this.probing.has(owner.key) || this.probing.size >= 8)
+            throw Errors.badRequest('An SSH host key probe is already in progress; try again shortly');
+        this.probing.add(owner.key);
+        try {
+            const observed = await this.driver.probe({ host: node.host, port: node.sshPort });
+            return { nodeId: node.id, host: node.host, port: node.sshPort, observed, trusted: this.pin(node) };
+        }
+        finally {
+            this.probing.delete(owner.key);
+        }
+    }
+    async trustHost(data) {
+        await this.owner();
+        const node = this.node(data?.nodeId);
+        if (!isSshHostFingerprint(data.fingerprint))
+            throw Errors.badRequest('Provide the independently verified SHA256 host fingerprint');
+        const targetIdentity = nodeSshIdentity(node);
+        const previous = this.pin(node);
+        if (data.previous !== previous)
+            throw Errors.badRequest('The trusted host key changed; inspect the node again');
+        await this.audit.record({
+            action: 'terminal.host-key.trust.requested',
+            resourceType: 'node',
+            resourceId: node.id,
+            details: { fingerprint: data.fingerprint, previous, host: node.host, username: node.sshUser },
+        }, true);
+        // Audit is async: recheck the registry and pin before committing a trust change.
+        await this.owner();
+        if (nodeSshIdentity(this.node(node.id)) !== targetIdentity || this.pin(node) !== previous)
+            throw Errors.badRequest('Node or host key changed; inspect it again');
+        this.store.kvSetSync(nodeHostPinKey(node.id), {
+            fingerprint: data.fingerprint,
+            target: nodeSshIdentity(node),
+        });
+        if (previous !== data.fingerprint) {
+            for (const session of this.sessions.values())
+                if (session.view.nodeId === node.id)
+                    this.finish(session, 'host_key_changed');
+            this.nodes.emit('node:ssh-trust-changed', node);
+        }
+        await this.audit.record({
+            action: 'terminal.host-key.trust',
+            resourceType: 'node',
+            resourceId: node.id,
+            details: { fingerprint: data.fingerprint, previous, host: node.host, username: node.sshUser },
+        });
+    }
+    async open(data) {
+        const owner = await this.owner();
+        const node = this.node(data?.nodeId);
+        const cols = dimension(data.cols, 'cols'), rows = dimension(data.rows, 'rows');
+        const fingerprint = this.pin(node);
+        if (!fingerprint)
+            throw Errors.forbidden('Verify and trust this node’s SSH host key before opening a terminal');
+        const active = [...this.sessions.values()].filter((s) => s.view.state !== 'closed');
+        if (active.length >= this.policy.maxSessions ||
+            active.filter((s) => s.owner.key === owner.key).length >= this.policy.maxSessionsPerOwner)
+            throw Errors.badRequest('Terminal session limit reached; close an existing session first');
+        // Closed transcripts are short-lived, but rapid open/close loops must also be bounded.
+        if (this.sessions.size >= this.policy.maxSessions * 2) {
+            for (const [id, session] of this.sessions) {
+                if (session.view.state === 'closed')
+                    this.sessions.delete(id);
+                if (this.sessions.size < this.policy.maxSessions * 2)
+                    break;
+            }
+        }
+        const at = this.now();
+        const session = {
+            owner,
+            created: at,
+            inputAt: at,
+            readAt: at,
+            output: Buffer.alloc(0),
+            end: 0,
+            nextInput: 0,
+            writing: false,
+            reading: false,
+            abort: new AbortController(),
+            targetIdentity: nodeSshIdentity(node),
+            view: {
+                id: randomUUID(),
+                nodeId: node.id,
+                nodeName: node.name,
+                host: node.host,
+                username: node.sshUser,
+                fingerprint,
+                cols,
+                rows,
+                createdAt: new Date(at).toISOString(),
+                state: 'connecting',
+            },
+        };
+        // Reserve before the first await, so concurrent opens cannot bypass caps.
+        this.sessions.set(session.view.id, session);
+        try {
+            await this.audit.record({
+                action: 'terminal.open.requested',
+                resourceType: 'terminal',
+                resourceId: session.view.id,
+                details: { nodeId: node.id, host: node.host, username: node.sshUser, fingerprint },
+            }, true);
+            const target = await this.nodes.nodeToSshTarget(node);
+            if (!(await this.valid(owner)) ||
+                nodeSshIdentity(this.node(node.id)) !== session.targetIdentity ||
+                this.pin(this.node(node.id)) !== fingerprint)
+                throw new Error('Terminal access or host key changed');
+            session.pty = await this.driver.connect(target, fingerprint, cols, rows, (bytes) => this.append(session, bytes), (reason, code) => this.finish(session, reason, code), session.abort.signal);
+            if (session.view.state === 'closed') {
+                session.pty.close();
+                throw new Error(session.view.reason);
+            }
+            session.view.state = 'open';
+            await this.audit.record({
+                action: 'terminal.open',
+                resourceType: 'terminal',
+                resourceId: session.view.id,
+                details: { nodeId: node.id },
+            });
+            return { ...session.view };
+        }
+        catch (err) {
+            this.finish(session, 'open_failed');
+            throw err;
+        }
+    }
+    async list() {
+        const owner = await this.owner();
+        return [...this.sessions.values()].filter((s) => s.owner.key === owner.key).map((s) => ({ ...s.view }));
+    }
+    async owned(id) {
+        const owner = await this.owner();
+        const session = this.sessions.get(textId(id));
+        if (!session || session.owner.key !== owner.key)
+            throw Errors.forbidden('Terminal is unavailable to this session');
+        if (session.view.state !== 'closed') {
+            const node = this.nodes.getNode(session.view.nodeId);
+            if (!node || nodeSshIdentity(node) !== session.targetIdentity || this.pin(node) !== session.view.fingerprint)
+                this.finish(session, 'node_changed');
+        }
+        return session;
+    }
+    async read(data) {
+        const session = await this.owned(data?.id);
+        if (!Number.isSafeInteger(data.cursor) || data.cursor < 0 || data.cursor > session.end)
+            throw Errors.badRequest('Invalid terminal output cursor');
+        if (session.reading)
+            throw Errors.badRequest('A terminal output read is already pending');
+        session.reading = true;
+        session.readAt = this.now();
+        try {
+            if (data.wait !== false && data.cursor === session.end && session.view.state !== 'closed') {
+                await new Promise((resolve) => {
+                    const timer = setTimeout(done, TERMINAL_LIMITS.readWaitMs);
+                    function done() {
+                        clearTimeout(timer);
+                        delete session.wake;
+                        resolve();
+                    }
+                    session.wake = done;
+                });
+            }
+            // A session could be revoked while a long poll was waiting.
+            if (!(await this.valid(session.owner))) {
+                this.finish(session, 'access_revoked');
+                throw Errors.forbidden('Terminal access was revoked');
+            }
+            const start = Math.max(data.cursor, session.end - session.output.length);
+            const cursor = Math.min(session.end, start + TERMINAL_LIMITS.readBytes);
+            return {
+                cursor,
+                data: session.output
+                    .subarray(start - (session.end - session.output.length), cursor - (session.end - session.output.length))
+                    .toString('base64'),
+                droppedBytes: start - data.cursor,
+                hasMore: cursor < session.end,
+                session: { ...session.view },
+            };
+        }
+        finally {
+            session.reading = false;
+        }
+    }
+    async write(data) {
+        const session = await this.owned(data?.id);
+        if (typeof data.data !== 'string' ||
+            data.data.length > Math.ceil(TERMINAL_LIMITS.inputBytes / 3) * 4 ||
+            !data.data.length)
+            throw Errors.badRequest('Terminal input must contain 1 to 8192 bytes encoded as base64');
+        const bytes = Buffer.from(data.data, 'base64');
+        if (!bytes.length || bytes.length > TERMINAL_LIMITS.inputBytes || bytes.toString('base64') !== data.data)
+            throw Errors.badRequest('Terminal input must contain 1 to 8192 bytes encoded as canonical base64');
+        if (!Number.isSafeInteger(data.sequence) || data.sequence < 0)
+            throw Errors.badRequest('Invalid terminal input sequence');
+        const digest = createHash('sha256').update(bytes).digest('hex');
+        // Retrying an acknowledged write does not execute pasted commands twice.
+        if (data.sequence === session.nextInput - 1 && digest === session.lastDigest)
+            return { nextSequence: session.nextInput };
+        if (session.view.state !== 'open' || !session.pty)
+            throw Errors.badRequest('Terminal is not open');
+        if (session.writing || data.sequence !== session.nextInput)
+            throw Errors.badRequest('Terminal input is out of order; reconnect before sending more input');
+        session.writing = true;
+        session.inputAt = this.now();
+        try {
+            await session.pty.write(bytes);
+            session.lastDigest = digest;
+            session.nextInput++;
+            return { nextSequence: session.nextInput };
+        }
+        catch {
+            this.finish(session, 'input_failed');
+            throw new Error('Terminal input failed; session closed to prevent ambiguous replay');
+        }
+        finally {
+            session.writing = false;
+        }
+    }
+    async resize(data) {
+        const session = await this.owned(data?.id);
+        const cols = dimension(data.cols, 'cols'), rows = dimension(data.rows, 'rows');
+        if (session.view.state !== 'open')
+            return;
+        session.pty?.resize(cols, rows);
+        session.view.cols = cols;
+        session.view.rows = rows;
+    }
+    async close(data) {
+        const owner = await this.owner();
+        const session = this.sessions.get(textId(data?.id));
+        // Closing an already-pruned session is a no-op, but still requires live authority.
+        if (!session)
+            return;
+        if (session.owner.key !== owner.key)
+            throw Errors.forbidden('Terminal is unavailable to this session');
+        this.finish(session, 'closed_by_operator');
+    }
+    append(session, data) {
+        if (session.view.state === 'closed')
+            return;
+        session.end += data.length;
+        session.output = Buffer.concat([session.output, data]).subarray(-TERMINAL_LIMITS.outputBytes);
+        // Copy the bounded view: a tiny subarray must not retain an arbitrarily large parent.
+        session.output = Buffer.from(session.output);
+        session.wake?.();
+    }
+    finish(session, reason, exitCode) {
+        if (session.view.state === 'closed')
+            return;
+        session.view.state = 'closed';
+        session.view.reason = reason;
+        if (exitCode !== undefined)
+            session.view.exitCode = exitCode;
+        session.closedAt = this.now();
+        session.abort.abort();
+        session.pty?.close();
+        session.wake?.();
+        void Promise.resolve(runWithAuth(session.owner.auth, () => this.audit.record({
+            action: 'terminal.close',
+            resourceType: 'terminal',
+            resourceId: session.view.id,
+            details: {
+                nodeId: session.view.nodeId,
+                reason,
+                durationMs: this.now() - session.created,
+                outputBytes: session.end,
+            },
+        }))).catch(() => undefined);
+    }
+    async sweep() {
+        if (this.sweeping || this.stopped)
+            return;
+        this.sweeping = true;
+        try {
+            for (const [id, session] of this.sessions) {
+                const now = this.now();
+                if (session.view.state === 'closed') {
+                    if (now - (session.closedAt ?? now) > 60_000)
+                        this.sessions.delete(id);
+                    continue;
+                }
+                let reason = null;
+                if (now - session.created > this.policy.absoluteTimeoutMs)
+                    reason = 'maximum_lifetime';
+                else if (now - session.inputAt > this.policy.idleTimeoutMs)
+                    reason = 'idle_timeout';
+                else if (now - session.readAt > this.policy.disconnectTimeoutMs)
+                    reason = 'client_disconnected';
+                else {
+                    try {
+                        if (!(await this.valid(session.owner)))
+                            reason = 'access_revoked';
+                    }
+                    catch {
+                        reason = 'session_store_unavailable';
+                    }
+                    const node = this.nodes.getNode(session.view.nodeId);
+                    if (!node || nodeSshIdentity(node) !== session.targetIdentity || this.pin(node) !== session.view.fingerprint)
+                        reason = 'node_changed';
+                }
+                if (reason)
+                    this.finish(session, reason);
+            }
+        }
+        finally {
+            this.sweeping = false;
+        }
+    }
+    dispose() {
+        this.stopped = true;
+        clearInterval(this.timer);
+        for (const session of this.sessions.values())
+            this.finish(session, 'daemon_stopped');
+        this.sessions.clear();
+    }
+};
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], TerminalRpcService.prototype, "capabilities", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TerminalRpcService.prototype, "inspectHost", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TerminalRpcService.prototype, "trustHost", null);
+__decorate([
+    RecoveryMutation(),
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TerminalRpcService.prototype, "open", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], TerminalRpcService.prototype, "list", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TerminalRpcService.prototype, "read", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TerminalRpcService.prototype, "write", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TerminalRpcService.prototype, "resize", null);
+__decorate([
+    Public({ auth: { roles: ADMIN_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TerminalRpcService.prototype, "close", null);
+TerminalRpcService = __decorate([
+    Service({ name: 'OmnitronTerminal' }),
+    __metadata("design:paramtypes", [Object, Object, Object, Object, Object, Object, Function])
+], TerminalRpcService);
+export { TerminalRpcService };
+//# sourceMappingURL=terminal.rpc-service.js.map

package/dist/services/terminal.rpc-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.rpc-service.js","sourceRoot":"","sources":["../../src/services/terminal.rpc-service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKhE,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAE,iBAAiB,EAAyC,MAAM,mBAAmB,CAAC;AAE7F,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW,EAAE,GAAG,GAAG,IAAI;IACvB,SAAS,EAAE,EAAE,GAAG,IAAI;IACpB,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;CACR,CAAC;AACX,MAAM,CAAC,MAAM,uBAAuB,GAAmB;IACrD,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,EAAE;IACf,mBAAmB,EAAE,CAAC;IACtB,aAAa,EAAE,EAAE,GAAG,MAAM;IAC1B,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,MAAM;IAClC,mBAAmB,EAAE,MAAM;CAC5B,CAAC;AA0BF,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,KAAK,GAA4B,EAAE;IAChE,MAAM,MAAM,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,KAAK,EAAE,CAAC;IACxD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7F,KAAK,MAAM,GAAG,IAAI;QAChB,aAAa;QACb,qBAAqB;QACrB,eAAe;QACf,mBAAmB;QACnB,qBAAqB;KACb,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,6BAA6B,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,GAAG,GAAG,IAAI,MAAM,CAAC,mBAAmB,GAAG,EAAE;QAC7D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,IAAK,KAAgB,GAAG,GAAG;QAC9E,MAAM,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACtE,OAAO,KAAe,CAAC;AACzB,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAC3D,MAAM,MAAM,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8FAA8F;AAEvF,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAUV,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IAEL,MAAM;IACN,GAAG;IAftB,kBAAkB,KAAa,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5G,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,MAAM,CAAiB;IACvB,KAAK,CAAiC;IAC/C,QAAQ,GAAG,KAAK,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC;IAExB,YACmB,KAAuE,EACvE,IAA0C,EAC1C,KAAwD,EACxD,KAAmC,EACpD,OAAO,GAA4B,EAAE,EACpB,MAAM,GAAmB,IAAI,iBAAiB,EAAE,EAChD,GAAG,GAAiB,IAAI,CAAC,GAAG;qBAN5B,KAAK;oBACL,IAAI;qBACJ,KAAK;qBACL,KAAK;sBAEL,MAAM;mBACN,GAAG;QAEpB,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC3B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;oBAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;YAClG,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;QAC9G,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YACjD,MAAM,MAAM,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACnE,8EAA8E;QAC9E,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,mBAAmB;YACvF,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,MAAM,MAAM,CAAC,SAAS,CAAC,+CAA+C,CAAC,CAAC;QAC3G,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,MAAM,CAAC,SAAS,CAAC,8EAA8E,CAAC,CAAC;QACzG,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,KAAY;QAC9B,IAAI,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAClC,4FAA4F;QAC5F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjE,OAAO,OAAO,EAAE,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC;IACvE,CAAC;IAEO,IAAI,CAAC,EAAW;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,UAAU,CAAC,qCAAqC,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,GAAG,CAAC,IAA4C;QACtD,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;YACvD,MAAM,MAAM,CAAC,UAAU,CAAC,iEAAiE,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAClF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrG,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAC,IAAsE;QACpF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC;YACzC,MAAM,MAAM,CAAC,UAAU,CAAC,4DAA4D,CAAC,CAAC;QACxF,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,MAAM,CAAC,UAAU,CAAC,sDAAsD,CAAC,CAAC;QAChH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CACrB;YACE,MAAM,EAAE,mCAAmC;YAC3C,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE;SAC9F,EACD,IAAI,CACL,CAAC;QACF,iFAAiF;QACjF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ;YACvF,MAAM,MAAM,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE;oBAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,MAAM,EAAE,yBAAyB;YACjC,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE;SAC9F,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,IAAI,CAAC,IAAoD;QAC7D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EACvC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,WAAW;YAAE,MAAM,MAAM,CAAC,SAAS,CAAC,qEAAqE,CAAC,CAAC;QAChH,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;QACpF,IACE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW;YACxC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAEzF,MAAM,MAAM,CAAC,UAAU,CAAC,iEAAiE,CAAC,CAAC;QAC7F,uFAAuF;QACvF,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACtD,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC;oBAAE,MAAM;YAC9D,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,OAAO,GAAY;YACvB,KAAK;YACL,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,GAAG,EAAE,CAAC;YACN,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAI,eAAe,EAAE;YAC5B,cAAc,EAAE,eAAe,CAAC,IAAI,CAAC;YACrC,IAAI,EAAE;gBACJ,EAAE,EAAE,UAAU,EAAE;gBAChB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,OAAO;gBACtB,WAAW;gBACX,IAAI;gBACJ,IAAI;gBACJ,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;gBACrC,KAAK,EAAE,YAAY;aACpB;SACF,CAAC;QACF,0EAA0E;QAC1E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CACrB;gBACE,MAAM,EAAE,yBAAyB;gBACjC,YAAY,EAAE,UAAU;gBACxB,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;gBAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE;aACnF,EACD,IAAI,CACL,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACtD,IACE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,cAAc;gBAC9D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,WAAW;gBAE5C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACrC,MAAM,EACN,WAAW,EACX,IAAI,EACJ,IAAI,EACJ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EACtC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EACpD,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;YAC5B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,eAAe;gBACvB,YAAY,EAAE,UAAU;gBACxB,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;gBAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACpC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,EAAW;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,MAAM,MAAM,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACnH,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,WAAW;gBAC1G,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAGK,AAAN,KAAK,CAAC,IAAI,CAAC,IAAoD;QAC7D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG;YACpF,MAAM,MAAM,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,UAAU,CAAC,2CAA2C,CAAC,CAAC;QAC1F,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC1F,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAClC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;oBAC3D,SAAS,IAAI;wBACX,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,OAAO,OAAO,CAAC,IAAI,CAAC;wBACpB,OAAO,EAAE,CAAC;oBACZ,CAAC;oBACD,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBACtB,CAAC,CAAC,CAAC;YACL,CAAC;YACD,4DAA4D;YAC5D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;gBACvC,MAAM,MAAM,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;YACxE,OAAO;gBACL,MAAM;gBACN,IAAI,EAAE,OAAO,CAAC,MAAM;qBACjB,QAAQ,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;qBACvG,QAAQ,CAAC,QAAQ,CAAC;gBACrB,YAAY,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM;gBACjC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG;gBAC7B,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE;aAC7B,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK,CAAC,IAAoD;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3C,IACE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC;YAChE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAEjB,MAAM,MAAM,CAAC,UAAU,CAAC,+DAA+D,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI;YACtG,MAAM,MAAM,CAAC,UAAU,CAAC,yEAAyE,CAAC,CAAC;QACrG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC;YAC3D,MAAM,MAAM,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,yEAAyE;QACzE,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,SAAS,GAAG,CAAC,IAAI,MAAM,KAAK,OAAO,CAAC,UAAU;YAC1E,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,MAAM,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QACnG,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,SAAS;YACxD,MAAM,MAAM,CAAC,UAAU,CAAC,qEAAqE,CAAC,CAAC;QACjG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC;YAC5B,OAAO,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM,CAAC,IAAgD;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EACvC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO;QAC1C,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK,CAAC,IAAoB;QAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACpD,mFAAmF;QACnF,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,MAAM,MAAM,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACvG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC7C,CAAC;IAEO,MAAM,CAAC,OAAgB,EAAE,IAAY;QAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAC5C,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC9F,sFAAsF;QACtF,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,OAAgB,EAAE,MAAc,EAAE,QAAiB;QAChE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAC5C,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAC7B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7D,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,KAAK,OAAO,CAAC,OAAO,CAClB,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,MAAM,EAAE,gBAAgB;YACxB,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;YAC3B,OAAO,EAAE;gBACP,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;gBAC3B,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO;gBACxC,WAAW,EAAE,OAAO,CAAC,GAAG;aACzB;SACF,CAAC,CACH,CACF,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACpC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,MAAM;wBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACvE,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,GAAkB,IAAI,CAAC;gBACjC,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB;oBAAE,MAAM,GAAG,kBAAkB,CAAC;qBAClF,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa;oBAAE,MAAM,GAAG,cAAc,CAAC;qBAC/E,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB;oBAAE,MAAM,GAAG,qBAAqB,CAAC;qBAC3F,CAAC;oBACJ,IAAI,CAAC;wBACH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;4BAAE,MAAM,GAAG,gBAAgB,CAAC;oBACpE,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,GAAG,2BAA2B,CAAC;oBACvC,CAAC;oBACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrD,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,WAAW;wBAC1G,MAAM,GAAG,cAAc,CAAC;gBAC5B,CAAC;gBACD,IAAI,MAAM;oBAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF,CAAA;AArVO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;sDAIxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;qDAaxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;mDAqCxC;AAIK;IAFL,gBAAgB,EAAE;IAClB,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;8CA2FxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;8CAIxC;AAeK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;8CAuCxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;+CAkCxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;gDASxC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;;;;+CAQxC;AAxUU,kBAAkB;IAD9B,OAAO,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;;GACzB,kBAAkB,CAkZ9B"}

package/dist/services/trace-collector.rpc-service.js

@@ -13,7 +13,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 import { Service, Public } from '@omnitron-dev/titan/decorators';
-import { VIEWER_ROLES } from '../shared/roles.js';
+import { OPERATOR_ROLES, VIEWER_ROLES } from '../shared/roles.js';
 let TraceRpcService = class TraceRpcService {
     traces;
     constructor(traces) {
@@ -38,13 +38,13 @@ let TraceRpcService = class TraceRpcService {
     }
 };
 __decorate([
-    Public({ auth: { roles: VIEWER_ROLES } }),
+    Public({ auth: { roles: OPERATOR_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], TraceRpcService.prototype, "ingestSpan", null);
 __decorate([
-    Public({ auth: { roles: VIEWER_ROLES } }),
+    Public({ auth: { roles: OPERATOR_ROLES } }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)

package/dist/services/trace-collector.rpc-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"trace-collector.rpc-service.js","sourceRoot":"","sources":["../../src/services/trace-collector.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAY3C,IAAM,eAAe,GAArB,MAAM,eAAe;IACG,MAAM;IAAnC,YAA6B,MAA6B;sBAA7B,MAAM;IAA0B,CAAC;IAGxD,AAAN,KAAK,CAAC,UAAU,CAAC,IAAe;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAA4B;QAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAAyB;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAiB;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;IACrC,CAAC;CACF,CAAA;AAzBO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;iDAIzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;kDAIzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;+CAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;kDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;oDAGzC;AA5BU,eAAe;IAD3B,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;;GACvB,eAAe,CA6B3B"}
+{"version":3,"file":"trace-collector.rpc-service.js","sourceRoot":"","sources":["../../src/services/trace-collector.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAY3D,IAAM,eAAe,GAArB,MAAM,eAAe;IACG,MAAM;IAAnC,YAA6B,MAA6B;sBAA7B,MAAM;IAA0B,CAAC;IAGxD,AAAN,KAAK,CAAC,UAAU,CAAC,IAAe;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAA4B;QAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAC,IAAyB;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CAAC,IAAiB;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;IACrC,CAAC;CACF,CAAA;AAzBO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;kDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;+CAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;kDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;oDAGzC;AA5BU,eAAe;IAD3B,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;;GACvB,eAAe,CA6B3B"}

package/dist/services/wait-for-postgres.d.ts

@@ -24,5 +24,5 @@
  * password" and "database refuses connections" all arrived as the same
  * sentence, naming a duration rather than a cause.
  */
-export declare function waitForPostgres(host: string, port: number, user: string, password: string, timeoutMs: number): Promise<void>;
+export declare function waitForPostgres(host: string, port: number, user: string, password: string, timeoutMs: number, connectionString?: string): Promise<void>;
 //# sourceMappingURL=wait-for-postgres.d.ts.map

package/dist/services/wait-for-postgres.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wait-for-postgres.d.ts","sourceRoot":"","sources":["../../src/services/wait-for-postgres.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAsDf"}
+{"version":3,"file":"wait-for-postgres.d.ts","sourceRoot":"","sources":["../../src/services/wait-for-postgres.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC,CAsCf"}

package/dist/services/wait-for-postgres.js

@@ -24,42 +24,21 @@
  * password" and "database refuses connections" all arrived as the same
  * sentence, naming a duration rather than a cause.
  */
-export async function waitForPostgres(host, port, user, password, timeoutMs) {
+export async function waitForPostgres(host, port, user, password, timeoutMs, connectionString) {
     const startedAt = Date.now();
     const deadline = startedAt + timeoutMs;
-    const { Client } = await import('pg').catch(() => ({ Client: null }));
+    const { Client } = await import('pg');
     const failure = (kind, lastError) => {
         const waited = Math.round((Date.now() - startedAt) / 1000);
         const last = lastError ? ` Last attempt: ${lastError.message}.` : '';
         return new Error(`Postgres at ${host}:${port} ${kind} (waited ${waited}s, limit ${timeoutMs}ms).${last}`, lastError ? { cause: lastError } : undefined);
     };
     let lastError = null;
-    if (!Client) {
-        // `pg` unavailable in this build — fall back to a TCP connect probe.
-        const net = await import('node:net');
-        while (Date.now() < deadline) {
-            const ok = await new Promise((resolve) => {
-                const sock = net.createConnection({ host, port }, () => {
-                    sock.end();
-                    resolve(true);
-                });
-                sock.once('error', (err) => {
-                    lastError = err;
-                    resolve(false);
-                });
-                sock.setTimeout(2_000, () => {
-                    sock.destroy();
-                    resolve(false);
-                });
-            });
-            if (ok)
-                return;
-            await new Promise((r) => setTimeout(r, 500));
-        }
-        throw failure('was not reachable', lastError);
-    }
     while (Date.now() < deadline) {
-        const client = new Client({ host, port, user, password, database: 'postgres', connectionTimeoutMillis: 2_000 });
+        const attemptBudget = Math.max(1, Math.min(2_000, deadline - Date.now()));
+        const client = new Client({ host, port, user, password, database: 'postgres',
+            ...(connectionString ? { connectionString } : {}),
+            connectionTimeoutMillis: attemptBudget, query_timeout: attemptBudget });
         try {
             await client.connect();
             await client.query('SELECT 1');
@@ -69,7 +48,13 @@ export async function waitForPostgres(host, port, user, password, timeoutMs) {
         catch (err) {
             lastError = err;
             await client.end().catch(() => { });
-            await new Promise((r) => setTimeout(r, 500));
+            // Authentication, authorization and missing databases need an operator, not retries.
+            if (['28P01', '28000', '3D000', '42501'].includes(err.code ?? '')) {
+                throw failure('rejected the migration connection', lastError);
+            }
+            const remaining = deadline - Date.now();
+            if (remaining > 0)
+                await new Promise((r) => setTimeout(r, Math.min(500, remaining)));
         }
     }
     throw failure('did not become ready', lastError);