@oneuptime/common 14.0.8 → 14.0.10

package/build/dist/Models/DatabaseModels/ResourceAiAgent.js

@@ -0,0 +1,439 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import Project from "./Project";
+import BaseModel from "./DatabaseBaseModel/DatabaseBaseModel";
+import ColumnAccessControl from "../../Types/Database/AccessControl/ColumnAccessControl";
+import TableAccessControl from "../../Types/Database/AccessControl/TableAccessControl";
+import ColumnLength from "../../Types/Database/ColumnLength";
+import ColumnType from "../../Types/Database/ColumnType";
+import TableColumn from "../../Types/Database/TableColumn";
+import TableColumnType from "../../Types/Database/TableColumnType";
+import TableMetadata from "../../Types/Database/TableMetadata";
+import TenantColumn from "../../Types/Database/TenantColumn";
+import IconProp from "../../Types/Icon/IconProp";
+import ObjectID from "../../Types/ObjectID";
+import Permission from "../../Types/Permission";
+import AiResourceType from "../../Types/ResourceAiAgent/AiResourceType";
+import { Column, Entity, Index, JoinColumn, ManyToOne } from "typeorm";
+/*
+ * Who may see a resource's AI agent: whoever may read a resource of any of
+ * the AiResourceType models (DockerHost, PodmanHost, DockerSwarmCluster,
+ * ProxmoxCluster, VMwareVCenter, CephCluster, DatabaseServer, Host) — the
+ * roles every one of their read lists shares, plus each model's own Read
+ * permission. The table is polymorphic, so no one list can be "exactly the
+ * resource's readers" the way KubernetesAiAgent's is the cluster's: the
+ * per-type check (the caller may read THIS resource) is the resource AI
+ * access API's, which reads the row as root after loading the resource
+ * with the caller's permissions. Nobody writes a row through the API — the
+ * agent registers and heartbeats through /resource-ai-agent-ingest, and an
+ * admin reset goes through the resource AI access API, both as root.
+ */
+const RESOURCE_READERS = [
+    Permission.ProjectOwner,
+    Permission.ProjectAdmin,
+    Permission.ProjectMember,
+    Permission.Viewer,
+    Permission.SettingsAdmin,
+    Permission.SettingsMember,
+    Permission.SettingsViewer,
+    Permission.ReadDockerHost,
+    Permission.ReadPodmanHost,
+    Permission.ReadDockerSwarmCluster,
+    Permission.ReadProxmoxCluster,
+    Permission.ReadVMwareVCenter,
+    Permission.ReadCephCluster,
+    Permission.ReadDatabaseServer,
+    Permission.ReadHost,
+];
+/*
+ * The resource AI agent of one infrastructure resource (a Docker or Podman
+ * host, a Docker Swarm, Proxmox or Ceph cluster, a vCenter, a database
+ * server or a host): the slim executor installed next to the resource's
+ * telemetry collector (image oneuptime/resource-ai-agent). Like the
+ * Kubernetes AI agent it is deliberately NOT a Runner: it never appears on
+ * the Runners page, is never handed a credential (it uses only credentials
+ * from its own environment and mounts) and runs nothing but AI resource
+ * commands — RunnerJob rows of step type ResourceCommand targeted at it
+ * through RunnerJob.targetResourceAiAgentId.
+ *
+ * One row per resource, keyed by (resourceType, resourceId). resourceId has
+ * no foreign key on purpose: it points into a different table for every
+ * resourceType. The row goes with its project (ON DELETE CASCADE); nothing
+ * ties it to the resource row in the database, so removing it with its
+ * resource is the server's job.
+ *
+ * The agent registers with the project's telemetry ingestion key and
+ * receives an agent key; only the key's sha256 is kept (keyHash), and no
+ * user can read it. The dashboard reads the row through the resource's AI
+ * access status, which is why there is no CRUD API and no API documentation
+ * for this table (KubernetesAiAgent and UserProjectSsoConsent are the
+ * precedent).
+ */
+let ResourceAiAgent = class ResourceAiAgent extends BaseModel {
+    constructor() {
+        super(...arguments);
+        this.project = undefined;
+        this.projectId = undefined;
+        /*
+         * Which model resourceId points into: an AiResourceType value, stored as
+         * spelled (the enum values are the database contract).
+         */
+        this.resourceType = undefined;
+        /*
+         * The resource row (in the table resourceType names). No foreign key: a
+         * column can reference only one table.
+         */
+        this.resourceId = undefined;
+        /*
+         * The identity the agent registered with — the one its resource's
+         * collector reports (a host name, a cluster name, a database endpoint) —
+         * as it last presented it.
+         */
+        this.resourceIdentifier = undefined;
+        /*
+         * sha256 (hex) of the agent key the agent presents on every request after
+         * registration. The key itself is never stored. Null after an admin reset:
+         * no key matches, so the running agent fails authentication and registers
+         * again. Unreadable by every role — even a hash of a bearer credential is
+         * nothing the dashboard or the API should hand out.
+         */
+        this.keyHash = undefined;
+        this.agentVersion = undefined;
+        /*
+         * The agent's last reported posture (ResourceAiAgentPosture), always read
+         * back through parseResourceAiAgentPosture. The server forces
+         * resourceType and resourceIdentifier before storing it.
+         */
+        this.posture = undefined;
+        this.lastAliveAt = undefined;
+        this.connectionStatus = undefined;
+        this.lastRegisteredAt = undefined;
+        /*
+         * The TelemetryIngestionKey whose request last minted this agent's key
+         * (TelemetryRequest.ingestionKeyPolicy.ingestionKeyId), so an operator
+         * who revokes a leaked key can tell which agents it registered. No foreign
+         * key: deleting an ingestion key must not delete or re-key an agent.
+         */
+        this.registeredWithIngestionKeyId = undefined;
+        this.lastRefusedRegistrationAt = undefined;
+        this.lastRefusedRegistrationReason = undefined;
+    }
+};
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        manyToOneRelationColumn: "projectId",
+        type: TableColumnType.Entity,
+        modelType: Project,
+        title: "Project",
+        description: "Relation to Project Resource in which this object belongs",
+    }),
+    ManyToOne(() => {
+        return Project;
+    }, {
+        eager: false,
+        nullable: false,
+        onDelete: "CASCADE",
+        orphanedRowAction: "nullify",
+    }),
+    JoinColumn({ name: "projectId" }),
+    __metadata("design:type", Project)
+], ResourceAiAgent.prototype, "project", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    Index(),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        required: true,
+        canReadOnRelationQuery: true,
+        title: "Project ID",
+        description: "ID of your OneUptime Project in which this object belongs",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: false,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], ResourceAiAgent.prototype, "projectId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    Index(),
+    TableColumn({
+        type: TableColumnType.ShortText,
+        required: true,
+        canReadOnRelationQuery: true,
+        title: "Resource Type",
+        description: "The kind of resource this AI agent runs next to: DockerHost, PodmanHost, DockerSwarmCluster, ProxmoxCluster, VMwareVCenter, CephCluster, DatabaseServer or Host.",
+        example: AiResourceType.DockerHost,
+    }),
+    Column({
+        type: ColumnType.ShortText,
+        length: ColumnLength.ShortText,
+        nullable: false,
+    }),
+    __metadata("design:type", String)
+], ResourceAiAgent.prototype, "resourceType", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    Index(),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        required: true,
+        canReadOnRelationQuery: true,
+        title: "Resource ID",
+        description: "ID of the resource this AI agent runs next to, in the table its resource type names. A resource has at most one agent.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: false,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], ResourceAiAgent.prototype, "resourceId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.LongText,
+        required: false,
+        title: "Resource Identifier",
+        description: "The identity the agent registered its resource with (the host name, cluster name or database endpoint its telemetry collector reports). Set by the server.",
+    }),
+    Column({
+        type: ColumnType.LongText,
+        length: ColumnLength.LongText,
+        nullable: true,
+    }),
+    __metadata("design:type", String)
+], ResourceAiAgent.prototype, "resourceIdentifier", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: [],
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ShortText,
+        required: false,
+        title: "Key Hash",
+        description: "SHA-256 of the key the agent authenticates with. Set by the server; never readable.",
+    }),
+    Column({
+        type: ColumnType.ShortText,
+        length: ColumnLength.ShortText,
+        nullable: true,
+    }),
+    __metadata("design:type", String)
+], ResourceAiAgent.prototype, "keyHash", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ShortText,
+        required: false,
+        title: "Agent Version",
+        description: "Self-reported version of the resource AI agent. Updated on registration and every heartbeat.",
+    }),
+    Column({
+        type: ColumnType.ShortText,
+        length: ColumnLength.ShortText,
+        nullable: true,
+    }),
+    __metadata("design:type", String)
+], ResourceAiAgent.prototype, "agentVersion", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.JSON,
+        required: false,
+        title: "Posture",
+        description: "What the agent last reported about itself: whether it may write, the targets it may write to, the targets it never changes, whether it could reach its resource and the resource's version. Set by the server.",
+    }),
+    Column({
+        type: ColumnType.JSON,
+        nullable: true,
+    }),
+    __metadata("design:type", Object)
+], ResourceAiAgent.prototype, "posture", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.Date,
+        required: false,
+        canReadOnRelationQuery: true,
+        title: "Last Alive At",
+        description: "Most recent registration or heartbeat from this agent.",
+    }),
+    Column({
+        type: ColumnType.Date,
+        nullable: true,
+    }),
+    __metadata("design:type", Date)
+], ResourceAiAgent.prototype, "lastAliveAt", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ShortText,
+        required: true,
+        isDefaultValueColumn: true,
+        canReadOnRelationQuery: true,
+        title: "Connection Status",
+        description: "connected while the agent registers and heartbeats; disconnected once it signs off or is reset. It is online only when connected AND its last heartbeat is recent.",
+        defaultValue: "disconnected",
+    }),
+    Column({
+        type: ColumnType.ShortText,
+        length: ColumnLength.ShortText,
+        nullable: false,
+        default: "disconnected",
+    }),
+    __metadata("design:type", String)
+], ResourceAiAgent.prototype, "connectionStatus", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.Date,
+        required: false,
+        title: "Last Registered At",
+        description: "When the agent last registered and was issued a key.",
+    }),
+    Column({
+        type: ColumnType.Date,
+        nullable: true,
+    }),
+    __metadata("design:type", Date)
+], ResourceAiAgent.prototype, "lastRegisteredAt", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ObjectID,
+        required: false,
+        title: "Registered With Ingestion Key ID",
+        description: "ID of the telemetry ingestion key the agent last registered with.",
+    }),
+    Column({
+        type: ColumnType.ObjectID,
+        nullable: true,
+        transformer: ObjectID.getDatabaseTransformer(),
+    }),
+    __metadata("design:type", ObjectID)
+], ResourceAiAgent.prototype, "registeredWithIngestionKeyId", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.Date,
+        required: false,
+        title: "Last Refused Registration At",
+        description: "When another agent last tried to register for this resource and was refused.",
+    }),
+    Column({
+        type: ColumnType.Date,
+        nullable: true,
+    }),
+    __metadata("design:type", Date)
+], ResourceAiAgent.prototype, "lastRefusedRegistrationAt", void 0);
+__decorate([
+    ColumnAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        update: [],
+    }),
+    TableColumn({
+        type: TableColumnType.ShortText,
+        required: false,
+        title: "Last Refused Registration Reason",
+        description: "Why that registration was refused, for example previous_instance_online.",
+    }),
+    Column({
+        type: ColumnType.ShortText,
+        length: ColumnLength.ShortText,
+        nullable: true,
+    }),
+    __metadata("design:type", String)
+], ResourceAiAgent.prototype, "lastRefusedRegistrationReason", void 0);
+ResourceAiAgent = __decorate([
+    TenantColumn("projectId"),
+    TableAccessControl({
+        create: [],
+        read: RESOURCE_READERS,
+        delete: [],
+        update: [],
+    })
+    /*
+     * One agent per live resource, enforced by the database: two agents
+     * registering for the same new resource at once must not both create a
+     * row. Named, and declared here rather than only in a migration, so
+     * TypeORM's schema builder recognises it and never generates a DROP for it.
+     */
+    ,
+    Index("IDX_ResourceAiAgent_projectId_resourceType_resourceId", ["projectId", "resourceType", "resourceId"], {
+        unique: true,
+        where: '"deletedAt" IS NULL',
+    }),
+    TableMetadata({
+        tableName: "ResourceAiAgent",
+        singularName: "Resource AI Agent",
+        pluralName: "Resource AI Agents",
+        icon: IconProp.ServerStack,
+        tableDescription: "The AI agent installed next to an infrastructure resource (a Docker or Podman host, a Docker Swarm, Proxmox or Ceph cluster, a VMware vCenter, a database server or a host): the executor OneUptime AI uses to investigate (and, when allowed, fix) that resource. One per resource. Managed by the server; not user-writable.",
+    }),
+    Entity({
+        name: "ResourceAiAgent",
+    })
+], ResourceAiAgent);
+export default ResourceAiAgent;
+//# sourceMappingURL=ResourceAiAgent.js.map

package/build/dist/Models/DatabaseModels/ResourceAiAgent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResourceAiAgent.js","sourceRoot":"","sources":["../../../../Models/DatabaseModels/ResourceAiAgent.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,SAAS,MAAM,uCAAuC,CAAC;AAC9D,OAAO,mBAAmB,MAAM,wDAAwD,CAAC;AACzF,OAAO,kBAAkB,MAAM,uDAAuD,CAAC;AACvF,OAAO,YAAY,MAAM,mCAAmC,CAAC;AAC7D,OAAO,UAAU,MAAM,iCAAiC,CAAC;AACzD,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,eAAe,MAAM,sCAAsC,CAAC;AACnE,OAAO,aAAa,MAAM,oCAAoC,CAAC;AAC/D,OAAO,YAAY,MAAM,mCAAmC,CAAC;AAC7D,OAAO,QAAQ,MAAM,2BAA2B,CAAC;AAEjD,OAAO,QAAQ,MAAM,sBAAsB,CAAC;AAC5C,OAAO,UAAU,MAAM,wBAAwB,CAAC;AAChD,OAAO,cAAc,MAAM,4CAA4C,CAAC;AAKxE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEvE;;;;;;;;;;;;GAYG;AACH,MAAM,gBAAgB,GAAsB;IAC1C,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,aAAa;IACxB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,aAAa;IACxB,UAAU,CAAC,cAAc;IACzB,UAAU,CAAC,cAAc;IACzB,UAAU,CAAC,cAAc;IACzB,UAAU,CAAC,cAAc;IACzB,UAAU,CAAC,sBAAsB;IACjC,UAAU,CAAC,kBAAkB;IAC7B,UAAU,CAAC,iBAAiB;IAC5B,UAAU,CAAC,eAAe;IAC1B,UAAU,CAAC,kBAAkB;IAC7B,UAAU,CAAC,QAAQ;CACpB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAiCY,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,SAAS;IAAvC;;QAyBN,YAAO,GAAa,SAAS,CAAC;QAoB9B,cAAS,GAAc,SAAS,CAAC;QAExC;;;WAGG;QAqBI,iBAAY,GAAoB,SAAS,CAAC;QAEjD;;;WAGG;QAoBI,eAAU,GAAc,SAAS,CAAC;QAEzC;;;;WAIG;QAkBI,uBAAkB,GAAY,SAAS,CAAC;QAE/C;;;;;;WAMG;QAkBI,YAAO,GAAY,SAAS,CAAC;QAmB7B,iBAAY,GAAY,SAAS,CAAC;QAEzC;;;;WAIG;QAiBI,YAAO,GAAgB,SAAS,CAAC;QAkBjC,gBAAW,GAAU,SAAS,CAAC;QAuB/B,qBAAgB,GAAqC,SAAS,CAAC;QAiB/D,qBAAgB,GAAU,SAAS,CAAC;QAE3C;;;;;WAKG;QAkBI,iCAA4B,GAAc,SAAS,CAAC;QAkBpD,8BAAyB,GAAU,SAAS,CAAC;QAmB7C,kCAA6B,GAClC,SAAS,CAAC;IACd,CAAC;CAAA,CAAA;AA7RQ;IAxBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,uBAAuB,EAAE,WAAW;QACpC,IAAI,EAAE,eAAe,CAAC,MAAM;QAC5B,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,2DAA2D;KACzE,CAAC;IACD,SAAS,CACR,GAAG,EAAE;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,EACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,SAAS;QACnB,iBAAiB,EAAE,SAAS;KAC7B,CACF;IACA,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BACjB,OAAO;gDAAa;AAoB9B;IAlBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,QAAQ,EAAE,IAAI;QACd,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,2DAA2D;KACzE,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACiB,QAAQ;kDAAa;AA0BjC;IApBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,QAAQ,EAAE,IAAI;QACd,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,kKAAkK;QACpK,OAAO,EAAE,cAAc,CAAC,UAAU;KACnC,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,MAAM,EAAE,YAAY,CAAC,SAAS;QAC9B,QAAQ,EAAE,KAAK;KAChB,CAAC;;qDAC+C;AAyB1C;IAnBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,KAAK,EAAE;IACP,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,QAAQ,EAAE,IAAI;QACd,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,wHAAwH;KAC3H,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACkB,QAAQ;mDAAa;AAwBlC;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,4JAA4J;KAC/J,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,MAAM,EAAE,YAAY,CAAC,QAAQ;QAC7B,QAAQ,EAAE,IAAI;KACf,CAAC;;2DAC6C;AA0BxC;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,UAAU;QACjB,WAAW,EACT,qFAAqF;KACxF,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,MAAM,EAAE,YAAY,CAAC,SAAS;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC;;gDACkC;AAmB7B;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,8FAA8F;KACjG,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,MAAM,EAAE,YAAY,CAAC,SAAS;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC;;qDACuC;AAuBlC;IAhBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,SAAS;QAChB,WAAW,EACT,gNAAgN;KACnN,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;KACf,CAAC;;gDACsC;AAkBjC;IAhBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,QAAQ,EAAE,KAAK;QACf,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,wDAAwD;KACtE,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;KACf,CAAC;8BACmB,IAAI;oDAAa;AAuB/B;IArBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,QAAQ,EAAE,IAAI;QACd,oBAAoB,EAAE,IAAI;QAC1B,sBAAsB,EAAE,IAAI;QAC5B,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,oKAAoK;QACtK,YAAY,EAAE,cAAc;KAC7B,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,MAAM,EAAE,YAAY,CAAC,SAAS;QAC9B,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,cAAc;KACxB,CAAC;;yDACoE;AAiB/D;IAfN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,sDAAsD;KACpE,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;KACf,CAAC;8BACwB,IAAI;yDAAa;AAyBpC;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,kCAAkC;QACzC,WAAW,EACT,mEAAmE;KACtE,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,sBAAsB,EAAE;KAC/C,CAAC;8BACoC,QAAQ;qEAAa;AAkBpD;IAhBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,8EAA8E;KACjF,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,IAAI;KACf,CAAC;8BACiC,IAAI;kEAAa;AAmB7C;IAjBN,mBAAmB,CAAC;QACnB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;KACX,CAAC;IACD,WAAW,CAAC;QACX,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,kCAAkC;QACzC,WAAW,EACT,0EAA0E;KAC7E,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,UAAU,CAAC,SAAS;QAC1B,MAAM,EAAE,YAAY,CAAC,SAAS;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC;;sEAEU;AArTO,eAAe;IAhCnC,YAAY,CAAC,WAAW,CAAC;IACzB,kBAAkB,CAAC;QAClB,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;KACX,CAAC;IACF;;;;;OAKG;;IACF,KAAK,CACJ,uDAAuD,EACvD,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,EAC3C;QACE,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,qBAAqB;KAC7B,CACF;IACA,aAAa,CAAC;QACb,SAAS,EAAE,iBAAiB;QAC5B,YAAY,EAAE,mBAAmB;QACjC,UAAU,EAAE,oBAAoB;QAChC,IAAI,EAAE,QAAQ,CAAC,WAAW;QAC1B,gBAAgB,EACd,gUAAgU;KACnU,CAAC;IACD,MAAM,CAAC;QACN,IAAI,EAAE,iBAAiB;KACxB,CAAC;GACmB,eAAe,CAsTnC;eAtToB,eAAe"}