@oneuptime/common 11.7.4 → 12.0.1

package/build/dist/Utils/AiRemediation/CommandPolicy.js

@@ -0,0 +1,303 @@
+import { AiRemediationCommandPolicyVerdict, MAX_COMMAND_LENGTH_CHARS, } from "../../Types/AutoRemediation/AiRemediationCommandPlan";
+/*
+ * Matched against a normalized copy of the command (quotes stripped,
+ * whitespace collapsed, lowercased) so trivial quoting does not evade them.
+ */
+const DENY_RULES = [
+    {
+        pattern: /\brm\s+(-[a-z]*\s+)*-[a-z]*[rf][a-z]*\b|\brm\s+(-[a-z]*\s+)*--force\b|\brm\s+(-[a-z]*\s+)*--recursive\b/,
+        reason: "recursive or forced file deletion",
+    },
+    {
+        pattern: /\bmkfs\b|\bwipefs\b|\bshred\b|\bblkdiscard\b/,
+        reason: "filesystem/device destruction",
+    },
+    {
+        pattern: /\bdd\b[^\n]*\bof=\/dev\//,
+        reason: "writing directly to a block device",
+    },
+    {
+        pattern: /\b(fdisk|parted|sgdisk|cfdisk)\b/,
+        reason: "disk partitioning",
+    },
+    {
+        pattern: />\s*\/dev\/(sd|nvme|vd|xvd|hd)/,
+        reason: "redirecting output onto a block device",
+    },
+    {
+        pattern: /\b(shutdown|reboot|halt|poweroff)\b|\binit\s+[06]\b|\bsystemctl\s+(poweroff|reboot|halt|kexec|suspend|hibernate)\b/,
+        reason: "host shutdown or reboot",
+    },
+    {
+        pattern: /:\s*\(\s*\)\s*\{/,
+        reason: "fork bomb",
+    },
+    {
+        pattern: /\b(curl|wget)\b[^\n]*\|\s*(ba|z|da|k)?sh\b/,
+        reason: "piping a network download into a shell",
+    },
+    {
+        pattern: /\b(ba|z|da|k)?sh\s+-c\s+[^\n]*\$\(\s*(curl|wget)\b/,
+        reason: "executing a network download",
+    },
+    {
+        pattern: /\/etc\/shadow\b|\/etc\/sudoers\b/,
+        reason: "touching the system credential store",
+    },
+    {
+        pattern: /\.ssh\/(id_[a-z0-9]+|authorized_keys)\b/,
+        reason: "touching SSH keys",
+    },
+    {
+        pattern: /\.aws\/credentials\b|\.kube\/config\b/,
+        reason: "touching cloud credential files",
+    },
+    {
+        pattern: /\buserdel\b|\bgroupdel\b|\bdeluser\b/,
+        reason: "deleting system users",
+    },
+    {
+        pattern: /\bchmod\s+(-[a-z]+\s+)*777\s+\/(\s|$)|\bchmod\s+(-[a-z]+\s+)*-r\b[^\n]*\s\/(\s|$)/,
+        reason: "recursive or world-writable permission change on /",
+    },
+    {
+        pattern: /\bchown\b[^\n]*\s-r\b[^\n]*\s\/(\s|$)/,
+        reason: "recursive ownership change on /",
+    },
+    {
+        pattern: /\bkill\s+(-9\s+|-kill\s+)?1(\s|$)|\bkillall5\b/,
+        reason: "killing PID 1",
+    },
+    {
+        pattern: /\biptables\s+(-[a-z]+\s+)*-f(\s|$)|\bnft\s+flush\s+ruleset\b|\bufw\s+disable\b/,
+        reason: "flushing or disabling the firewall",
+    },
+    {
+        pattern: /\bcrontab\s+(-[a-z]+\s+)*-r\b/,
+        reason: "removing all cron jobs",
+    },
+    {
+        pattern: /\bdrop\s+(database|table|schema)\b|\btruncate\s+table\b/,
+        reason: "destructive database statement",
+    },
+    {
+        pattern: /\bkubectl\s+delete\s+(ns|namespace|pv|persistentvolume|pvc|persistentvolumeclaim|crd|customresourcedefinition)s?\b/,
+        reason: "deleting cluster-level Kubernetes resources",
+    },
+    {
+        pattern: /\bhistory\s+-c\b|\bunset\s+histfile\b/,
+        reason: "shell history tampering",
+    },
+];
+const AUTO_EXECUTION_STRUCTURAL_RULES = [
+    {
+        test: (c) => {
+            return c.includes("\n") || c.includes("\r");
+        },
+        reason: "multi-line commands cannot auto-execute",
+    },
+    {
+        test: (c) => {
+            return c.includes(";");
+        },
+        reason: 'command chaining with ";" cannot auto-execute',
+    },
+    {
+        test: (c) => {
+            return c.includes("&");
+        },
+        reason: 'command chaining or backgrounding with "&" cannot auto-execute',
+    },
+    {
+        test: (c) => {
+            return c.includes("|");
+        },
+        reason: "pipes cannot auto-execute",
+    },
+    {
+        test: (c) => {
+            return c.includes("`") || c.includes("$(");
+        },
+        reason: "command substitution cannot auto-execute",
+    },
+    {
+        test: (c) => {
+            return c.includes(">") || c.includes("<");
+        },
+        reason: "redirection cannot auto-execute",
+    },
+];
+const MAX_ALLOWLIST_PATTERNS = 100;
+const MAX_ALLOWLIST_PATTERN_LENGTH = 500;
+export default class CommandPolicy {
+    /*
+     * The full evaluation used everywhere. allowlistPatterns are the
+     * operator-authored globs from the AutoRemediationRule; pass an empty
+     * array when evaluating for the approval path (nothing auto-approves).
+     */
+    static evaluateCommand(data) {
+        const command = data.command || "";
+        if (!command.trim()) {
+            return {
+                verdict: AiRemediationCommandPolicyVerdict.Denied,
+                reason: "Empty command.",
+            };
+        }
+        if (command.length > MAX_COMMAND_LENGTH_CHARS) {
+            return {
+                verdict: AiRemediationCommandPolicyVerdict.Denied,
+                reason: `Command exceeds the ${MAX_COMMAND_LENGTH_CHARS}-character limit.`,
+            };
+        }
+        const denyReason = CommandPolicy.getDenyReason(command);
+        if (denyReason) {
+            return {
+                verdict: AiRemediationCommandPolicyVerdict.Denied,
+                reason: `Denied by the remediation command policy: ${denyReason}. This command cannot run even with human approval.`,
+            };
+        }
+        const structuralReason = CommandPolicy.getAutoExecutionStructuralReason(command);
+        if (structuralReason) {
+            return {
+                verdict: AiRemediationCommandPolicyVerdict.RequiresApproval,
+                reason: `Requires human approval: ${structuralReason}.`,
+            };
+        }
+        if (CommandPolicy.matchesAllowlist({
+            command: command,
+            allowlistPatterns: data.allowlistPatterns,
+        })) {
+            return {
+                verdict: AiRemediationCommandPolicyVerdict.AutoApproved,
+                reason: "Matched the rule's command allowlist.",
+            };
+        }
+        return {
+            verdict: AiRemediationCommandPolicyVerdict.RequiresApproval,
+            reason: "Requires human approval: the command does not match the rule's command allowlist.",
+        };
+    }
+    // Null when clean, otherwise the human-readable reason it is denied.
+    static getDenyReason(command) {
+        const normalized = CommandPolicy.normalizeForInspection(command);
+        for (const rule of DENY_RULES) {
+            /*
+             * Fresh evaluation each call — DENY_RULES patterns are not /g, but
+             * be defensive about lastIndex anyway.
+             */
+            rule.pattern.lastIndex = 0;
+            if (rule.pattern.test(normalized)) {
+                return rule.reason;
+            }
+        }
+        return null;
+    }
+    // Null when the command is a single simple command eligible for auto mode.
+    static getAutoExecutionStructuralReason(command) {
+        for (const rule of AUTO_EXECUTION_STRUCTURAL_RULES) {
+            if (rule.test(command)) {
+                return rule.reason;
+            }
+        }
+        return null;
+    }
+    /*
+     * Glob match: "*" matches any run of characters (newlines never reach
+     * here — the structural guard runs first on the auto path). Whitespace
+     * runs are collapsed on both sides so formatting differences do not
+     * defeat a pattern. Full-string match, case-sensitive.
+     */
+    static matchesAllowlist(data) {
+        const patterns = (data.allowlistPatterns || [])
+            .filter((p) => {
+            return typeof p === "string" && p.trim().length > 0;
+        })
+            .slice(0, MAX_ALLOWLIST_PATTERNS);
+        if (patterns.length === 0) {
+            return false;
+        }
+        const command = CommandPolicy.collapseWhitespace(data.command);
+        for (const pattern of patterns) {
+            if (pattern.length > MAX_ALLOWLIST_PATTERN_LENGTH) {
+                continue;
+            }
+            const normalizedPattern = CommandPolicy.collapseWhitespace(pattern);
+            if (CommandPolicy.globMatches(normalizedPattern, command)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /*
+     * Linear-time glob match, deliberately NOT a compiled regex.
+     *
+     * A pattern is operator-authored but only project-admin-authored, and
+     * translating "*" runs into a regex ("a[\s\S]*b[\s\S]*c…") makes a pattern
+     * like "*ab*ab*ab*ab*z" backtrack catastrophically against a non-matching
+     * command — a saved rule would then be able to hang the Node event loop
+     * for every tenant on the pod. This two-pointer scan with backtracking on
+     * the LAST wildcard only is O(pattern x command) worst case and cannot
+     * blow up.
+     */
+    static globMatches(pattern, text) {
+        let patternIndex = 0;
+        let textIndex = 0;
+        let lastWildcardIndex = -1;
+        let matchAfterWildcard = 0;
+        while (textIndex < text.length) {
+            /*
+             * The wildcard branch MUST be tested before literal equality: a
+             * command may legitimately contain a literal "*" (for example
+             * "chmod 644 /var/www/*"), and consuming the pattern's "*" as a
+             * literal there would strand the rest of the text with no wildcard to
+             * absorb it. Treating "*" as a wildcard is never less permissive — it
+             * can still match a single literal "*" via the backtrack below.
+             */
+            if (patternIndex < pattern.length && pattern[patternIndex] === "*") {
+                lastWildcardIndex = patternIndex;
+                matchAfterWildcard = textIndex;
+                patternIndex++;
+                continue;
+            }
+            if (patternIndex < pattern.length &&
+                pattern[patternIndex] === text[textIndex]) {
+                patternIndex++;
+                textIndex++;
+                continue;
+            }
+            if (lastWildcardIndex >= 0) {
+                // Give the last wildcard one more character and retry from there.
+                patternIndex = lastWildcardIndex + 1;
+                matchAfterWildcard++;
+                textIndex = matchAfterWildcard;
+                continue;
+            }
+            return false;
+        }
+        // Trailing wildcards may absorb the empty remainder.
+        while (patternIndex < pattern.length && pattern[patternIndex] === "*") {
+            patternIndex++;
+        }
+        return patternIndex === pattern.length;
+    }
+    static collapseWhitespace(text) {
+        return (text || "").trim().replace(/\s+/g, " ");
+    }
+    /*
+     * Strip the quoting bash itself would strip before matching, so the
+     * cheapest evasions (rm -r"f", r\m -rf) do not walk past the denylist.
+     * Backslashes go too: bash reads `\m` as `m`, and no deny rule matches on
+     * a backslash, so removing them can only make matching stricter.
+     *
+     * This is not a shell parser and does not pretend to be one — see the
+     * header: the denylist is a backstop, and the layers that actually bound
+     * what may run unattended are the structural guard and the operator
+     * allowlist.
+     */
+    static normalizeForInspection(command) {
+        return CommandPolicy.collapseWhitespace(command)
+            .replace(/["'\\]/g, "")
+            .toLowerCase();
+    }
+}
+//# sourceMappingURL=CommandPolicy.js.map

package/build/dist/Utils/AiRemediation/CommandPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandPolicy.js","sourceRoot":"","sources":["../../../../Utils/AiRemediation/CommandPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,sDAAsD,CAAC;AAsC9D;;;GAGG;AACH,MAAM,UAAU,GAAoB;IAClC;QACE,OAAO,EACL,yGAAyG;QAC3G,MAAM,EAAE,mCAAmC;KAC5C;IACD;QACE,OAAO,EAAE,8CAA8C;QACvD,MAAM,EAAE,+BAA+B;KACxC;IACD;QACE,OAAO,EAAE,0BAA0B;QACnC,MAAM,EAAE,oCAAoC;KAC7C;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,MAAM,EAAE,mBAAmB;KAC5B;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,MAAM,EAAE,wCAAwC;KACjD;IACD;QACE,OAAO,EACL,oHAAoH;QACtH,MAAM,EAAE,yBAAyB;KAClC;IACD;QACE,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,WAAW;KACpB;IACD;QACE,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,wCAAwC;KACjD;IACD;QACE,OAAO,EAAE,oDAAoD;QAC7D,MAAM,EAAE,8BAA8B;KACvC;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,MAAM,EAAE,sCAAsC;KAC/C;IACD;QACE,OAAO,EAAE,yCAAyC;QAClD,MAAM,EAAE,mBAAmB;KAC5B;IACD;QACE,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,iCAAiC;KAC1C;IACD;QACE,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,uBAAuB;KAChC;IACD;QACE,OAAO,EACL,mFAAmF;QACrF,MAAM,EAAE,oDAAoD;KAC7D;IACD;QACE,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,iCAAiC;KAC1C;IACD;QACE,OAAO,EAAE,gDAAgD;QACzD,MAAM,EAAE,eAAe;KACxB;IACD;QACE,OAAO,EACL,gFAAgF;QAClF,MAAM,EAAE,oCAAoC;KAC7C;IACD;QACE,OAAO,EAAE,+BAA+B;QACxC,MAAM,EAAE,wBAAwB;KACjC;IACD;QACE,OAAO,EAAE,yDAAyD;QAClE,MAAM,EAAE,gCAAgC;KACzC;IACD;QACE,OAAO,EACL,oHAAoH;QACtH,MAAM,EAAE,6CAA6C;KACtD;IACD;QACE,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,yBAAyB;KAClC;CACF,CAAC;AAaF,MAAM,+BAA+B,GAA0B;IAC7D;QACE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE;YAClB,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,EAAE,yCAAyC;KAClD;IACD;QACE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE;YAClB,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE;YAClB,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,EAAE,gEAAgE;KACzE;IACD;QACE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE;YAClB,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,EAAE,2BAA2B;KACpC;IACD;QACE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE;YAClB,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,EAAE,0CAA0C;KACnD;IACD;QACE,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE;YAClB,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,EAAE,iCAAiC;KAC1C;CACF,CAAC;AAEF,MAAM,sBAAsB,GAAW,GAAG,CAAC;AAC3C,MAAM,4BAA4B,GAAW,GAAG,CAAC;AAEjD,MAAM,CAAC,OAAO,OAAO,aAAa;IAChC;;;;OAIG;IACI,MAAM,CAAC,eAAe,CAAC,IAG7B;QACC,MAAM,OAAO,GAAW,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAE3C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,iCAAiC,CAAC,MAAM;gBACjD,MAAM,EAAE,gBAAgB;aACzB,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,iCAAiC,CAAC,MAAM;gBACjD,MAAM,EAAE,uBAAuB,wBAAwB,mBAAmB;aAC3E,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAkB,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,iCAAiC,CAAC,MAAM;gBACjD,MAAM,EAAE,6CAA6C,UAAU,qDAAqD;aACrH,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GACpB,aAAa,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,iCAAiC,CAAC,gBAAgB;gBAC3D,MAAM,EAAE,4BAA4B,gBAAgB,GAAG;aACxD,CAAC;QACJ,CAAC;QAED,IACE,aAAa,CAAC,gBAAgB,CAAC;YAC7B,OAAO,EAAE,OAAO;YAChB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,EACF,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,iCAAiC,CAAC,YAAY;gBACvD,MAAM,EAAE,uCAAuC;aAChD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,iCAAiC,CAAC,gBAAgB;YAC3D,MAAM,EACJ,mFAAmF;SACtF,CAAC;IACJ,CAAC;IAED,qEAAqE;IAC9D,MAAM,CAAC,aAAa,CAAC,OAAe;QACzC,MAAM,UAAU,GAAW,aAAa,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACzE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B;;;eAGG;YACH,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2EAA2E;IACpE,MAAM,CAAC,gCAAgC,CAC5C,OAAe;QAEf,KAAK,MAAM,IAAI,IAAI,+BAA+B,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,gBAAgB,CAAC,IAG9B;QACC,MAAM,QAAQ,GAAkB,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;aAC3D,MAAM,CAAC,CAAC,CAAU,EAAE,EAAE;YACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAEpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAW,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEvE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;gBAClD,SAAS;YACX,CAAC;YACD,MAAM,iBAAiB,GACrB,aAAa,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,aAAa,CAAC,WAAW,CAAC,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;OAUG;IACI,MAAM,CAAC,WAAW,CAAC,OAAe,EAAE,IAAY;QACrD,IAAI,YAAY,GAAW,CAAC,CAAC;QAC7B,IAAI,SAAS,GAAW,CAAC,CAAC;QAC1B,IAAI,iBAAiB,GAAW,CAAC,CAAC,CAAC;QACnC,IAAI,kBAAkB,GAAW,CAAC,CAAC;QAEnC,OAAO,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B;;;;;;;eAOG;YACH,IAAI,YAAY,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE,CAAC;gBACnE,iBAAiB,GAAG,YAAY,CAAC;gBACjC,kBAAkB,GAAG,SAAS,CAAC;gBAC/B,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,IACE,YAAY,GAAG,OAAO,CAAC,MAAM;gBAC7B,OAAO,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EACzC,CAAC;gBACD,YAAY,EAAE,CAAC;gBACf,SAAS,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,IAAI,iBAAiB,IAAI,CAAC,EAAE,CAAC;gBAC3B,kEAAkE;gBAClE,YAAY,GAAG,iBAAiB,GAAG,CAAC,CAAC;gBACrC,kBAAkB,EAAE,CAAC;gBACrB,SAAS,GAAG,kBAAkB,CAAC;gBAC/B,SAAS;YACX,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qDAAqD;QACrD,OAAO,YAAY,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE,CAAC;YACtE,YAAY,EAAE,CAAC;QACjB,CAAC;QAED,OAAO,YAAY,KAAK,OAAO,CAAC,MAAM,CAAC;IACzC,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAAC,IAAY;QAC5C,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;;;OAUG;IACK,MAAM,CAAC,sBAAsB,CAAC,OAAe;QACnD,OAAO,aAAa,CAAC,kBAAkB,CAAC,OAAO,CAAC;aAC7C,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;aACtB,WAAW,EAAE,CAAC;IACnB,CAAC;CACF"}

package/build/dist/Utils/Dashboard/ClockWidgetFormat.js

@@ -0,0 +1,232 @@
+import { ClockWidgetFace, ClockWidgetHourFormat, } from "../../Types/Dashboard/DashboardComponents/DashboardClockComponent";
+import OneUptimeDate, { Moment } from "../../Types/Date";
+/**
+ * Every derivation the dashboard Clock widget needs to turn "now" into what
+ * it draws — the digit strings, the caption, the analog hand angles, and how
+ * long to sleep before the next repaint.
+ *
+ * It all lives here rather than in the React renderer because the interesting
+ * cases are all clock arithmetic and none of them need a DOM: half-hour and
+ * quarter-hour zone offsets, DST jumps, midnight/noon in 12-hour form, a
+ * timezone that no longer exists, and hand angles that have to stay smooth
+ * across the top of the hour.
+ */
+/** Degrees swept per second (and per minute) — a full turn over 60 steps. */
+const DEGREES_PER_SECOND = 6;
+/** Degrees swept per hour on a 12-hour dial. */
+const DEGREES_PER_HOUR = 30;
+const MILLISECONDS_PER_SECOND = 1000;
+const MILLISECONDS_PER_MINUTE = 60 * MILLISECONDS_PER_SECOND;
+/** Local hour at which the widget starts calling it daytime (inclusive). */
+const DAY_STARTS_AT_HOUR = 6;
+/** Local hour at which the widget stops calling it daytime (exclusive). */
+const DAY_ENDS_AT_HOUR = 18;
+export const isSupportedClockTimezone = (timezone) => {
+    if (typeof timezone !== "string") {
+        return false;
+    }
+    const trimmed = timezone.trim();
+    if (!trimmed) {
+        return false;
+    }
+    return Boolean(Moment.tz.zone(trimmed));
+};
+export const resolveClockTimezone = (timezone) => {
+    if (isSupportedClockTimezone(timezone)) {
+        return timezone.trim();
+    }
+    return OneUptimeDate.getCurrentTimezone().toString();
+};
+export const getCityFromTimezone = (timezone) => {
+    const segments = timezone
+        .split("/")
+        .map((segment) => {
+        return segment.trim();
+    })
+        .filter((segment) => {
+        return segment.length > 0;
+    });
+    const lastSegment = segments[segments.length - 1];
+    if (!lastSegment) {
+        return timezone.trim();
+    }
+    return lastSegment.replace(/_/g, " ");
+};
+export const getClockLabel = (data) => {
+    const trimmedLabel = (data.label || "").trim();
+    if (trimmedLabel) {
+        return trimmedLabel;
+    }
+    return getCityFromTimezone(data.timezone);
+};
+export const resolveUse12HourFormat = (hourFormat) => {
+    if (hourFormat === ClockWidgetHourFormat.TwelveHour) {
+        return true;
+    }
+    if (hourFormat === ClockWidgetHourFormat.TwentyFourHour) {
+        return false;
+    }
+    return OneUptimeDate.getUserPrefers12HourFormat();
+};
+export const isClockTimezoneFallback = (timezone) => {
+    if (typeof timezone !== "string" || !timezone.trim()) {
+        return false;
+    }
+    return !isSupportedClockTimezone(timezone);
+};
+export const getClockWidgetDisplay = (data) => {
+    const isFallbackTimezone = isClockTimezoneFallback(data.timezone);
+    const timezone = resolveClockTimezone(data.timezone);
+    const use12HourFormat = resolveUse12HourFormat(data.hourFormat);
+    const zoned = Moment(data.date).tz(timezone);
+    return {
+        label: getClockLabel({ label: data.label, timezone: timezone }),
+        time: zoned.format(use12HourFormat ? "h:mm" : "HH:mm"),
+        seconds: data.showSeconds ? zoned.format("ss") : null,
+        meridiem: use12HourFormat ? zoned.format("A") : null,
+        dateText: data.showDate ? zoned.format("ddd, MMM D") : null,
+        zoneAbbreviation: data.showTimezoneAbbreviation
+            ? OneUptimeDate.getZoneAbbrByTimezone(timezone, data.date)
+            : null,
+        timezone: timezone,
+        isFallbackTimezone: isFallbackTimezone,
+    };
+};
+export const getClockGmtOffsetText = (data) => {
+    const timezone = resolveClockTimezone(data.timezone);
+    const offsetInMinutes = Moment(data.date).tz(timezone).utcOffset();
+    return OneUptimeDate.getGmtOffsetFriendlyString(offsetInMinutes);
+};
+export const getClockHandAngles = (data) => {
+    const timezone = resolveClockTimezone(data.timezone);
+    const zoned = Moment(data.date).tz(timezone);
+    const seconds = zoned.seconds();
+    const minutes = zoned.minutes();
+    const hours = zoned.hours() % 12;
+    return {
+        hourAngleInDegrees: (hours + minutes / 60 + seconds / 3600) * DEGREES_PER_HOUR,
+        minuteAngleInDegrees: (minutes + seconds / 60) * DEGREES_PER_SECOND,
+        secondAngleInDegrees: seconds * DEGREES_PER_SECOND,
+    };
+};
+export const getMillisecondsUntilNextClockTick = (data) => {
+    const period = data.showSeconds
+        ? MILLISECONDS_PER_SECOND
+        : MILLISECONDS_PER_MINUTE;
+    const timeInMs = data.date.getTime();
+    if (!isFinite(timeInMs)) {
+        // An Invalid Date must not turn into a NaN (i.e. immediate) timeout.
+        return period;
+    }
+    /*
+     * `%` keeps the sign of the dividend, and pre-1970 instants are negative
+     * — normalise so the remainder is always the distance *past* the last
+     * boundary.
+     */
+    const sinceLastBoundary = ((timeInMs % period) + period) % period;
+    const untilNextBoundary = period - sinceLastBoundary;
+    /*
+     * Exactly on a boundary the remainder is 0 and this yields a full period,
+     * which is correct: the next boundary is one period away. The result is
+     * therefore always in 1..period and never 0, so the caller can never
+     * schedule a zero-delay timer that spins.
+     */
+    return untilNextBoundary;
+};
+export const isDaytimeAtClock = (data) => {
+    const timezone = resolveClockTimezone(data.timezone);
+    const hour = Moment(data.date).tz(timezone).hours();
+    return hour >= DAY_STARTS_AT_HOUR && hour < DAY_ENDS_AT_HOUR;
+};
+/**
+ * Seconds and the AM/PM marker are drawn at this fraction of the main time
+ * size, so they read as annotations rather than competing with the digits.
+ * The width estimate below has to know it too.
+ */
+export const CLOCK_SECONDARY_FONT_SCALE = 0.45;
+/** Advance width of one tabular-numeral, as a fraction of the font size. */
+const TABULAR_DIGIT_WIDTH_RATIO = 0.62;
+/** Vertical space one secondary line (label / date / zone) occupies. */
+const SECONDARY_LINE_HEIGHT_IN_PX = 16;
+/** The `gap-1` the renderer puts between every stacked row. */
+const CLOCK_ROW_GAP_IN_PX = 4;
+/** line-height on the time row, so its box is taller than the font size. */
+const CLOCK_TIME_LINE_HEIGHT_RATIO = 1.05;
+/**
+ * Padding the widget chrome puts between the tile edge and the widget's own
+ * content box. Mirrors DashboardBaseComponent, which wraps every widget in
+ * `padding: 12px`, widened to `28px 12px 12px 12px` in edit mode to leave room
+ * for the drag handle it overlays on the top of the tile.
+ *
+ * The canvas hands each widget its OUTER tile size, so a sizer that does not
+ * subtract this overflows the content box — most visibly on a short tile,
+ * where the last caption line gets clipped by the tile's overflow-hidden.
+ */
+const CLOCK_CHROME_HORIZONTAL_IN_PX = 24;
+const CLOCK_CHROME_VERTICAL_IN_PX = 24;
+const CLOCK_CHROME_VERTICAL_EDIT_MODE_IN_PX = 40;
+/** Breathing room kept inside the content box so nothing sits flush. */
+const CLOCK_HORIZONTAL_PADDING_IN_PX = 8;
+const CLOCK_VERTICAL_PADDING_IN_PX = 4;
+const MIN_CLOCK_FONT_SIZE_IN_PX = 14;
+const MAX_CLOCK_FONT_SIZE_IN_PX = 64;
+const MIN_ANALOG_DIAL_SIZE_IN_PX = 48;
+export const getClockCaptionLineCount = (display) => {
+    return (1 +
+        (display.dateText ? 1 : 0) +
+        (display.zoneAbbreviation ? 1 : 0) +
+        (display.isFallbackTimezone ? 1 : 0));
+};
+const getCaptionStackHeightInPx = (captionLineCount) => {
+    return captionLineCount * (SECONDARY_LINE_HEIGHT_IN_PX + CLOCK_ROW_GAP_IN_PX);
+};
+export const getClockContentBox = (data) => {
+    const verticalChrome = data.isEditMode
+        ? CLOCK_CHROME_VERTICAL_EDIT_MODE_IN_PX
+        : CLOCK_CHROME_VERTICAL_IN_PX;
+    return {
+        widthInPx: Math.max(data.widthInPx - CLOCK_CHROME_HORIZONTAL_IN_PX, 0),
+        heightInPx: Math.max(data.heightInPx - verticalChrome, 0),
+    };
+};
+export const getClockTimeWidthInFontUnits = (display) => {
+    // ":" + "ss", and " " + "AM", each drawn at the secondary size.
+    const secondsChars = display.seconds
+        ? (display.seconds.length + 1) * CLOCK_SECONDARY_FONT_SCALE
+        : 0;
+    const meridiemChars = display.meridiem
+        ? (display.meridiem.length + 1) * CLOCK_SECONDARY_FONT_SCALE
+        : 0;
+    return ((display.time.length + secondsChars + meridiemChars) *
+        TABULAR_DIGIT_WIDTH_RATIO);
+};
+export const getClockDigitalFontSizeInPx = (data) => {
+    const contentBox = getClockContentBox(data);
+    /*
+     * Divide by the line-height ratio rather than treating the font size as
+     * the row height: at `line-height: 1.05` the time row's box is taller
+     * than its font size, and that difference is enough to push the last
+     * caption past the tile's overflow-hidden edge on a short strip.
+     */
+    const heightBudget = Math.max((contentBox.heightInPx -
+        getCaptionStackHeightInPx(getClockCaptionLineCount(data.display)) -
+        CLOCK_VERTICAL_PADDING_IN_PX) /
+        CLOCK_TIME_LINE_HEIGHT_RATIO, MIN_CLOCK_FONT_SIZE_IN_PX);
+    const widthBudget = Math.max(contentBox.widthInPx - CLOCK_HORIZONTAL_PADDING_IN_PX, MIN_CLOCK_FONT_SIZE_IN_PX);
+    const widthLimited = widthBudget / getClockTimeWidthInFontUnits(data.display);
+    return Math.max(Math.min(heightBudget, widthLimited, MAX_CLOCK_FONT_SIZE_IN_PX), MIN_CLOCK_FONT_SIZE_IN_PX);
+};
+export const getClockAnalogDialSizeInPx = (data) => {
+    const contentBox = getClockContentBox(data);
+    const availableHeight = contentBox.heightInPx -
+        getCaptionStackHeightInPx(getClockCaptionLineCount(data.display)) -
+        CLOCK_VERTICAL_PADDING_IN_PX;
+    const availableWidth = contentBox.widthInPx - CLOCK_HORIZONTAL_PADDING_IN_PX;
+    return Math.max(Math.min(availableWidth, availableHeight), MIN_ANALOG_DIAL_SIZE_IN_PX);
+};
+export const resolveClockFace = (clockFace) => {
+    return clockFace === ClockWidgetFace.Analog
+        ? ClockWidgetFace.Analog
+        : ClockWidgetFace.Digital;
+};
+//# sourceMappingURL=ClockWidgetFormat.js.map

package/build/dist/Utils/Dashboard/ClockWidgetFormat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClockWidgetFormat.js","sourceRoot":"","sources":["../../../../Utils/Dashboard/ClockWidgetFormat.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,qBAAqB,GACtB,MAAM,mEAAmE,CAAC;AAC3E,OAAO,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAIzD;;;;;;;;;;GAUG;AAEH,6EAA6E;AAC7E,MAAM,kBAAkB,GAAW,CAAC,CAAC;AAErC,gDAAgD;AAChD,MAAM,gBAAgB,GAAW,EAAE,CAAC;AAEpC,MAAM,uBAAuB,GAAW,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAW,EAAE,GAAG,uBAAuB,CAAC;AAErE,4EAA4E;AAC5E,MAAM,kBAAkB,GAAW,CAAC,CAAC;AAErC,2EAA2E;AAC3E,MAAM,gBAAgB,GAAW,EAAE,CAAC;AAYpC,MAAM,CAAC,MAAM,wBAAwB,GAAqC,CACxE,QAAmC,EAC1B,EAAE;IACX,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAW,QAAQ,CAAC,IAAI,EAAE,CAAC;IAExC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC,CAAC;AAWF,MAAM,CAAC,MAAM,oBAAoB,GAAiC,CAChE,QAAmC,EAC3B,EAAE;IACV,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAQ,QAAmB,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,OAAO,aAAa,CAAC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,CAAC;AACvD,CAAC,CAAC;AAUF,MAAM,CAAC,MAAM,mBAAmB,GAAgC,CAC9D,QAAgB,EACR,EAAE;IACV,MAAM,QAAQ,GAAkB,QAAQ;SACrC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAe,EAAU,EAAE;QAC/B,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,OAAe,EAAW,EAAE;QACnC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEL,MAAM,WAAW,GAAuB,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEtE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC,CAAC;AAWF,MAAM,CAAC,MAAM,aAAa,GAA0B,CAAC,IAGpD,EAAU,EAAE;IACX,MAAM,YAAY,GAAW,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC,CAAC;AAUF,MAAM,CAAC,MAAM,sBAAsB,GAAmC,CACpE,UAAoD,EAC3C,EAAE;IACX,IAAI,UAAU,KAAK,qBAAqB,CAAC,UAAU,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,KAAK,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,aAAa,CAAC,0BAA0B,EAAE,CAAC;AACpD,CAAC,CAAC;AAkCF,MAAM,CAAC,MAAM,uBAAuB,GAAoC,CACtE,QAAmC,EAC1B,EAAE;IACX,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC,CAAC;AAmBF,MAAM,CAAC,MAAM,qBAAqB,GAAkC,CAAC,IAQpE,EAAsB,EAAE;IACvB,MAAM,kBAAkB,GAAY,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAW,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAY,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEzE,MAAM,KAAK,GAAe,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAEzD,OAAO;QACL,KAAK,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC/D,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACrD,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;QACpD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3D,gBAAgB,EAAE,IAAI,CAAC,wBAAwB;YAC7C,CAAC,CAAC,aAAa,CAAC,qBAAqB,CAAC,QAAoB,EAAE,IAAI,CAAC,IAAI,CAAC;YACtE,CAAC,CAAC,IAAI;QACR,QAAQ,EAAE,QAAQ;QAClB,kBAAkB,EAAE,kBAAkB;KACvC,CAAC;AACJ,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,qBAAqB,GAAkC,CAAC,IAGpE,EAAU,EAAE;IACX,MAAM,QAAQ,GAAW,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC;IAE3E,OAAO,aAAa,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC;AACnE,CAAC,CAAC;AAuBF,MAAM,CAAC,MAAM,kBAAkB,GAA+B,CAAC,IAG9D,EAAmB,EAAE;IACpB,MAAM,QAAQ,GAAW,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAe,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAW,KAAK,CAAC,OAAO,EAAE,CAAC;IACxC,MAAM,OAAO,GAAW,KAAK,CAAC,OAAO,EAAE,CAAC;IACxC,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IAEzC,OAAO;QACL,kBAAkB,EAChB,CAAC,KAAK,GAAG,OAAO,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG,gBAAgB;QAC5D,oBAAoB,EAAE,CAAC,OAAO,GAAG,OAAO,GAAG,EAAE,CAAC,GAAG,kBAAkB;QACnE,oBAAoB,EAAE,OAAO,GAAG,kBAAkB;KACnD,CAAC;AACJ,CAAC,CAAC;AAmBF,MAAM,CAAC,MAAM,iCAAiC,GAC5C,CAAC,IAAuD,EAAU,EAAE;IAClE,MAAM,MAAM,GAAW,IAAI,CAAC,WAAW;QACrC,CAAC,CAAC,uBAAuB;QACzB,CAAC,CAAC,uBAAuB,CAAC;IAE5B,MAAM,QAAQ,GAAW,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,qEAAqE;QACrE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,MAAM,iBAAiB,GAAW,CAAC,CAAC,QAAQ,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;IAC1E,MAAM,iBAAiB,GAAW,MAAM,GAAG,iBAAiB,CAAC;IAE7D;;;;;OAKG;IACH,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC;AAcJ,MAAM,CAAC,MAAM,gBAAgB,GAA6B,CAAC,IAG1D,EAAW,EAAE;IACZ,MAAM,QAAQ,GAAW,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;IAE5D,OAAO,IAAI,IAAI,kBAAkB,IAAI,IAAI,GAAG,gBAAgB,CAAC;AAC/D,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAW,IAAI,CAAC;AAEvD,4EAA4E;AAC5E,MAAM,yBAAyB,GAAW,IAAI,CAAC;AAE/C,wEAAwE;AACxE,MAAM,2BAA2B,GAAW,EAAE,CAAC;AAE/C,+DAA+D;AAC/D,MAAM,mBAAmB,GAAW,CAAC,CAAC;AAEtC,4EAA4E;AAC5E,MAAM,4BAA4B,GAAW,IAAI,CAAC;AAElD;;;;;;;;;GASG;AACH,MAAM,6BAA6B,GAAW,EAAE,CAAC;AACjD,MAAM,2BAA2B,GAAW,EAAE,CAAC;AAC/C,MAAM,qCAAqC,GAAW,EAAE,CAAC;AAEzD,wEAAwE;AACxE,MAAM,8BAA8B,GAAW,CAAC,CAAC;AACjD,MAAM,4BAA4B,GAAW,CAAC,CAAC;AAE/C,MAAM,yBAAyB,GAAW,EAAE,CAAC;AAC7C,MAAM,yBAAyB,GAAW,EAAE,CAAC;AAC7C,MAAM,0BAA0B,GAAW,EAAE,CAAC;AAmB9C,MAAM,CAAC,MAAM,wBAAwB,GAAqC,CACxE,OAA2B,EACnB,EAAE;IACV,OAAO,CACL,CAAC;QACD,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACrC,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,yBAAyB,GAAkC,CAC/D,gBAAwB,EAChB,EAAE;IACV,OAAO,gBAAgB,GAAG,CAAC,2BAA2B,GAAG,mBAAmB,CAAC,CAAC;AAChF,CAAC,CAAC;AAiBF,MAAM,CAAC,MAAM,kBAAkB,GAA+B,CAAC,IAI9D,EAAmB,EAAE;IACpB,MAAM,cAAc,GAAW,IAAI,CAAC,UAAU;QAC5C,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,2BAA2B,CAAC;IAEhC,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,6BAA6B,EAAE,CAAC,CAAC;QACtE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC,CAAC;KAC1D,CAAC;AACJ,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,4BAA4B,GACvC,CAAC,OAA2B,EAAU,EAAE;IACtC,gEAAgE;IAChE,MAAM,YAAY,GAAW,OAAO,CAAC,OAAO;QAC1C,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,0BAA0B;QAC3D,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,aAAa,GAAW,OAAO,CAAC,QAAQ;QAC5C,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,0BAA0B;QAC5D,CAAC,CAAC,CAAC,CAAC;IAEN,OAAO,CACL,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,YAAY,GAAG,aAAa,CAAC;QACpD,yBAAyB,CAC1B,CAAC;AACJ,CAAC,CAAC;AAeJ,MAAM,CAAC,MAAM,2BAA2B,GACtC,CAAC,IAKA,EAAU,EAAE;IACX,MAAM,UAAU,GAAoB,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAE7D;;;;;OAKG;IACH,MAAM,YAAY,GAAW,IAAI,CAAC,GAAG,CACnC,CAAC,UAAU,CAAC,UAAU;QACpB,yBAAyB,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,4BAA4B,CAAC;QAC7B,4BAA4B,EAC9B,yBAAyB,CAC1B,CAAC;IAEF,MAAM,WAAW,GAAW,IAAI,CAAC,GAAG,CAClC,UAAU,CAAC,SAAS,GAAG,8BAA8B,EACrD,yBAAyB,CAC1B,CAAC;IAEF,MAAM,YAAY,GAChB,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE3D,OAAO,IAAI,CAAC,GAAG,CACb,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,yBAAyB,CAAC,EAC/D,yBAAyB,CAC1B,CAAC;AACJ,CAAC,CAAC;AAaJ,MAAM,CAAC,MAAM,0BAA0B,GACrC,CAAC,IAKA,EAAU,EAAE;IACX,MAAM,UAAU,GAAoB,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAE7D,MAAM,eAAe,GACnB,UAAU,CAAC,UAAU;QACrB,yBAAyB,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,4BAA4B,CAAC;IAE/B,MAAM,cAAc,GAClB,UAAU,CAAC,SAAS,GAAG,8BAA8B,CAAC;IAExD,OAAO,IAAI,CAAC,GAAG,CACb,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,EACzC,0BAA0B,CAC3B,CAAC;AACJ,CAAC,CAAC;AAOJ,MAAM,CAAC,MAAM,gBAAgB,GAA6B,CACxD,SAA6C,EAC5B,EAAE;IACnB,OAAO,SAAS,KAAK,eAAe,CAAC,MAAM;QACzC,CAAC,CAAC,eAAe,CAAC,MAAM;QACxB,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC;AAC9B,CAAC,CAAC"}