@qodalis/cli-server-node 1.0.0-beta.1 → 1.0.0-beta.10

package/dist/src/services/cli-shell-session-manager.js

@@ -0,0 +1,588 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CliShellSessionManager = void 0;
+const ws_1 = require("ws");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const logger_1 = require("../utils/logger");
+const cli_server_auth_1 = require("../auth/cli-server-auth");
+const cli_shell_options_1 = require("./cli-shell-options");
+const process_tree_1 = require("./process-tree");
+const logger = (0, logger_1.createLogger)('ShellSession');
+/** Longest delay `setTimeout` supports (~24.8 days); longer ones fire immediately. */
+const MAX_TIMEOUT_MS = 2 ** 31 - 1;
+/**
+ * Lazy-loads node-pty to avoid import failures when the native add-on is unavailable.
+ * @throws {Error} If node-pty cannot be loaded.
+ */
+let _pty;
+function getPty() {
+    if (!_pty) {
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            _pty = require('node-pty');
+        }
+        catch (err) {
+            throw new Error(`node-pty is required for shell sessions but failed to load: ${err.message}`);
+        }
+    }
+    return _pty;
+}
+/**
+ * Manages interactive PTY shell sessions over WebSocket connections and
+ * enforces Appendix C: access mode, session binding, limits, timeouts,
+ * minimal environment and audit.
+ */
+class CliShellSessionManager {
+    _options;
+    _enabled;
+    _auth;
+    _unsubscribe;
+    _sessions = new Set();
+    _nextId = 1;
+    _checkTimer;
+    _trustProxy;
+    constructor(options = {}) {
+        this._enabled = options.enabled ?? false;
+        this._options = options.shell ?? {};
+        this._trustProxy = options.trustProxy ?? false;
+    }
+    /**
+     * Trusted reverse-proxy hops (`true` = 1): the remote address is the
+     * `X-Forwarded-For` entry at index `len - hops` (`false`/0: the socket address).
+     */
+    setTrustProxy(trust) {
+        this._trustProxy = trust;
+    }
+    get enabled() {
+        return this._enabled;
+    }
+    setEnabled(enabled) {
+        this._enabled = enabled;
+    }
+    get options() {
+        return this._options;
+    }
+    setOptions(options) {
+        this._options = options ?? {};
+    }
+    /** Current access mode (`undefined` while the shell is disabled). */
+    get authMode() {
+        return this._enabled ? (0, cli_shell_options_1.resolveShellAuthMode)(this._options, !!this._auth) : undefined;
+    }
+    /** Installs the auth provider (users plugin); subscribes to its session events. */
+    setAuth(auth) {
+        if (auth === this._auth)
+            return;
+        this._unsubscribe?.();
+        this._unsubscribe = undefined;
+        this._auth = auth;
+        if (auth?.onSessionEvent) {
+            this._unsubscribe = auth.onSessionEvent((event) => this.onSessionEvent(event));
+        }
+    }
+    /** Logs the startup state: ERROR when locked, WARNING when anonymous. */
+    logStartupState() {
+        const mode = this.authMode;
+        if (mode === 'locked') {
+            logger.error('Shell is enabled but no access mode is configured, so it is LOCKED (every connection is refused). ' +
+                'Mount the users plugin (shell:execute permission), or set shell.token, shell.authorize, ' +
+                'or shell.allowAnonymous (not recommended).');
+        }
+        else if (mode === 'anonymous') {
+            logger.warn('WARNING: shell is enabled without authentication (shell.allowAnonymous). Anyone who can reach this server gets a shell.');
+        }
+        else if (mode) {
+            logger.info('Shell enabled (auth=%s)', mode);
+        }
+    }
+    /** Open sessions. */
+    getSessions() {
+        return [...this._sessions].map((s) => ({
+            id: s.id,
+            authMode: s.authMode,
+            mode: s.mode,
+            remoteAddress: s.remoteAddress,
+            userId: s.ctx?.userId,
+            userName: s.ctx?.userName,
+            sessionId: s.ctx?.sessionId,
+            startedAt: new Date(s.startedAt).toISOString(),
+        }));
+    }
+    /**
+     * Takes over an accepted shell WebSocket: authorizes it (closing with
+     * 4401/4403/4404/4429 when refused), then bridges it to a PTY.
+     */
+    async accept(ws, request, url) {
+        if (!this._enabled) {
+            ws.close(cli_shell_options_1.ShellCloseCodes.Disabled, 'shell disabled');
+            return;
+        }
+        const cols = clampDim(url.searchParams.get('cols'), 80);
+        const rows = clampDim(url.searchParams.get('rows'), 24);
+        const command = url.searchParams.get('cmd') || undefined;
+        const mode = command ? 'command' : 'interactive';
+        const remoteAddress = this.remoteAddressOf(request);
+        const authMode = (0, cli_shell_options_1.resolveShellAuthMode)(this._options, !!this._auth);
+        let decision;
+        try {
+            decision = await this.authorize(authMode, request, url, remoteAddress, mode);
+        }
+        catch {
+            decision = { ok: false, code: cli_shell_options_1.ShellCloseCodes.Forbidden, reason: 'forbidden' };
+        }
+        if (!decision.ok) {
+            closeWs(ws, decision.code, decision.reason);
+            return;
+        }
+        if (ws.readyState !== ws_1.WebSocket.OPEN)
+            return;
+        const limitKey = authMode === 'users' ? `user:${decision.ctx.userId}` : `addr:${remoteAddress}`;
+        const perUser = this._options.maxSessionsPerUser ?? cli_shell_options_1.SHELL_DEFAULTS.maxSessionsPerUser;
+        const total = this._options.maxSessions ?? cli_shell_options_1.SHELL_DEFAULTS.maxSessions;
+        let sameKey = 0;
+        for (const s of this._sessions)
+            if (s.limitKey === limitKey)
+                sameKey++;
+        if (sameKey >= perUser || this._sessions.size >= total) {
+            closeWs(ws, cli_shell_options_1.ShellCloseCodes.TooMany, 'too many shell sessions');
+            return;
+        }
+        const now = Date.now();
+        const session = {
+            id: `sh-${this._nextId++}`,
+            ws,
+            authMode,
+            mode,
+            remoteAddress,
+            limitKey,
+            ctx: decision.ctx,
+            request,
+            startedAt: now,
+            lastInput: now,
+            inputSinceCheck: false,
+            lastTouch: 0,
+            closed: false,
+        };
+        this._sessions.add(session);
+        this.ensureCheckTimer();
+        if (session.ctx) {
+            // A logout/revoke/permission change between ticket consumption (or a slow
+            // `authorize`) and the registration above emitted its event before this
+            // shell could hear it: revalidate once now, before anything is spawned.
+            await this.revalidateSession(session);
+            if (session.closed)
+                return;
+            if (ws.readyState !== ws_1.WebSocket.OPEN) {
+                this.end(session, undefined, undefined, 'closed');
+                return;
+            }
+        }
+        this.spawn(session, cols, rows, command);
+    }
+    /** Decides access for the given mode. */
+    async authorize(authMode, request, url, remoteAddress, mode) {
+        const o = this._options;
+        if (authMode === 'locked') {
+            return { ok: false, code: cli_shell_options_1.ShellCloseCodes.LoginRequired, reason: 'shell access is not configured' };
+        }
+        let ctx;
+        if (authMode === 'users') {
+            const ticket = url.searchParams.get('ticket');
+            try {
+                ctx = ticket ? await this._auth.consumeTicket(ticket) : undefined;
+            }
+            catch (err) {
+                if (err?.status === 403) {
+                    return { ok: false, code: cli_shell_options_1.ShellCloseCodes.Forbidden, reason: 'forbidden' };
+                }
+                ctx = undefined;
+            }
+            if (!ctx) {
+                return { ok: false, code: cli_shell_options_1.ShellCloseCodes.LoginRequired, reason: 'login required' };
+            }
+            if (!this._auth.hasPermission(ctx, cli_server_auth_1.CliServerPermissions.ShellExecute)) {
+                return { ok: false, code: cli_shell_options_1.ShellCloseCodes.Forbidden, reason: 'forbidden' };
+            }
+        }
+        // Every configured check among token/authorize must pass, whatever the mode.
+        if (o.token) {
+            const presented = (0, cli_shell_options_1.readBearerToken)(request, url);
+            if (!presented) {
+                return { ok: false, code: cli_shell_options_1.ShellCloseCodes.LoginRequired, reason: 'login required' };
+            }
+            if (!(0, cli_shell_options_1.tokensEqual)(presented, o.token)) {
+                return { ok: false, code: cli_shell_options_1.ShellCloseCodes.Forbidden, reason: 'forbidden' };
+            }
+        }
+        if (o.authorize) {
+            let allowed = false;
+            try {
+                allowed = (await o.authorize(request, { url, remoteAddress, mode })) === true;
+            }
+            catch (err) {
+                logger.warn('Shell authorize callback threw; denying (%s)', err?.message ?? 'error');
+                allowed = false;
+            }
+            if (!allowed) {
+                return { ok: false, code: cli_shell_options_1.ShellCloseCodes.Forbidden, reason: 'forbidden' };
+            }
+        }
+        return { ok: true, ctx };
+    }
+    spawn(session, cols, rows, command) {
+        const { ws } = session;
+        const { shell, args } = this.getShellInfo(command);
+        let nodePty;
+        try {
+            nodePty = getPty();
+        }
+        catch (err) {
+            logger.error('node-pty unavailable: %s', err.message ?? err);
+            this.send(ws, { type: 'error', message: 'shell is not available on this server' });
+            this.end(session, 1011, 'shell unavailable', 'error');
+            return;
+        }
+        // Set after the allow/set filtering: configuration can neither override nor drop it.
+        session.shellId = (0, process_tree_1.newShellId)();
+        try {
+            session.pty = nodePty.spawn(shell, args, {
+                name: 'xterm-256color',
+                cols,
+                rows,
+                cwd: this._options.cwd ?? os.homedir(),
+                env: { ...(0, cli_shell_options_1.buildShellEnv)(this._options.env, { shell, cols, rows }), [process_tree_1.SHELL_ID_ENV]: session.shellId },
+            });
+        }
+        catch (err) {
+            logger.error('Shell spawn failed: %s', err.message ?? err);
+            this.send(ws, { type: 'error', message: 'failed to start shell' });
+            this.end(session, 1011, 'shell failed', 'error');
+            return;
+        }
+        this.onOpened(session);
+        this.send(ws, {
+            type: 'ready',
+            shell: path.basename(shell),
+            os: os.platform() === 'win32' ? 'win32' : os.platform() === 'darwin' ? 'darwin' : 'linux',
+        });
+        session.pty.onData((data) => this.send(ws, { type: 'stdout', data }));
+        session.pty.onExit(({ exitCode }) => {
+            if (session.closed)
+                return;
+            this.send(ws, { type: 'exit', code: exitCode });
+            this.end(session, 1000, 'exit', 'exited', exitCode);
+        });
+        ws.on('message', (raw) => {
+            let msg;
+            try {
+                msg = JSON.parse(raw.toString());
+            }
+            catch {
+                logger.debug('Ignoring malformed WebSocket message');
+                return;
+            }
+            try {
+                if (msg.type === 'stdin' && typeof msg.data === 'string') {
+                    session.lastInput = Date.now();
+                    session.inputSinceCheck = true;
+                    session.pty?.write(msg.data);
+                }
+                else if (msg.type === 'resize') {
+                    session.pty?.resize(clampDim(String(msg.cols), cols), clampDim(String(msg.rows), rows));
+                }
+            }
+            catch {
+                logger.debug('Ignoring shell message after exit');
+            }
+        });
+        ws.on('close', () => this.end(session, undefined, undefined, 'closed'));
+        ws.on('error', (error) => {
+            logger.error('Shell socket error: %s', error.message ?? error);
+            this.end(session, undefined, undefined, 'error');
+        });
+        this.armTimers(session);
+    }
+    /** Idle (no stdin) and absolute duration timers ⇒ 4408. */
+    armTimers(session) {
+        const idle = this._options.idleTimeoutMs ?? cli_shell_options_1.SHELL_DEFAULTS.idleTimeoutMs;
+        if (idle > 0) {
+            const check = () => {
+                if (session.closed)
+                    return;
+                const remaining = session.lastInput + idle - Date.now();
+                if (remaining <= 0) {
+                    this.end(session, cli_shell_options_1.ShellCloseCodes.TimedOut, 'shell timed out', 'shell timed out');
+                }
+                else {
+                    session.idleTimer = setTimeout(check, Math.min(remaining, MAX_TIMEOUT_MS));
+                    session.idleTimer.unref?.();
+                }
+            };
+            session.idleTimer = setTimeout(check, Math.min(idle, MAX_TIMEOUT_MS));
+            session.idleTimer.unref?.();
+        }
+        const max = this._options.maxDurationMs;
+        if (max && max > 0) {
+            const deadline = Date.now() + max;
+            const expire = () => {
+                if (session.closed)
+                    return;
+                const remaining = deadline - Date.now();
+                if (remaining <= 0) {
+                    this.end(session, cli_shell_options_1.ShellCloseCodes.TimedOut, 'shell timed out', 'shell timed out');
+                }
+                else {
+                    session.durationTimer = setTimeout(expire, Math.min(remaining, MAX_TIMEOUT_MS));
+                    session.durationTimer.unref?.();
+                }
+            };
+            session.durationTimer = setTimeout(expire, Math.min(max, MAX_TIMEOUT_MS));
+            session.durationTimer.unref?.();
+        }
+    }
+    // ----------------------------------------------------- session binding
+    onSessionEvent(event) {
+        if (event.type === 'session-ended') {
+            for (const s of [...this._sessions]) {
+                if (s.ctx?.sessionId && s.ctx.sessionId === event.sessionId) {
+                    this.end(s, cli_shell_options_1.ShellCloseCodes.LoginRequired, 'session ended', 'session ended');
+                }
+            }
+        }
+        else {
+            void this.recheck(event.userId);
+        }
+    }
+    ensureCheckTimer() {
+        if (this._checkTimer || !this._auth)
+            return;
+        const interval = Math.min(Math.max(this._options.sessionCheckIntervalMs ?? cli_shell_options_1.SHELL_DEFAULTS.sessionCheckIntervalMs, 10), cli_shell_options_1.SHELL_DEFAULTS.maxSessionCheckIntervalMs);
+        this._checkTimer = setInterval(() => void this.recheck(), interval);
+        this._checkTimer.unref?.();
+    }
+    stopCheckTimerIfIdle() {
+        if (this._checkTimer && ![...this._sessions].some((s) => s.ctx)) {
+            clearInterval(this._checkTimer);
+            this._checkTimer = undefined;
+        }
+    }
+    /**
+     * Re-validates users-mode shells: session alive, user enabled, still holding
+     * `shell:execute` (identities from a host auth adapter are re-authenticated
+     * from the original upgrade request). Otherwise the shell is closed with 4401
+     * `session ended` (audit reason `session ended` or `permission removed`).
+     * The check itself never extends the session; stdin received since the
+     * previous check touches it first (at most once per 30 s).
+     */
+    async recheck(userId) {
+        for (const s of [...this._sessions]) {
+            if (s.closed || !s.ctx || (userId && s.ctx.userId !== userId))
+                continue;
+            await this.revalidateSession(s);
+        }
+    }
+    /** One re-check of a users-mode shell; ends it when the session ended or lost `shell:execute`. */
+    async revalidateSession(s) {
+        const auth = this._auth;
+        if (s.closed || !s.ctx)
+            return;
+        let fresh = s.ctx;
+        const now = Date.now();
+        const typed = s.inputSinceCheck;
+        s.inputSinceCheck = false;
+        try {
+            if (typed && auth?.touch && now - s.lastTouch >= cli_shell_options_1.SHELL_DEFAULTS.touchIntervalMs) {
+                s.lastTouch = now;
+                await auth.touch(s.ctx);
+            }
+            fresh = auth?.revalidate ? await auth.revalidate(s.ctx, s.request) : s.ctx;
+        }
+        catch {
+            fresh = undefined;
+        }
+        if (s.closed)
+            return;
+        if (!fresh || !auth || !auth.hasPermission(fresh, cli_server_auth_1.CliServerPermissions.ShellExecute)) {
+            this.end(s, cli_shell_options_1.ShellCloseCodes.LoginRequired, 'session ended', fresh ? 'permission removed' : 'session ended');
+        }
+        else {
+            s.ctx = { ...s.ctx, permissions: fresh.permissions };
+        }
+    }
+    // ------------------------------------------------------------ lifecycle
+    onOpened(session) {
+        if (session.authMode === 'users' && session.ctx) {
+            this.audit(session, 'shell_opened', {});
+        }
+        else {
+            logger.info('Shell opened (id=%s, auth=%s, mode=%s, remote=%s)', session.id, session.authMode, session.mode, session.remoteAddress);
+        }
+    }
+    /**
+     * Ends a session once (`why` is the audit reason: exited | closed | session ended |
+     * permission removed | shell timed out | server shutdown | error): kills the process tree, closes the socket with the
+     * given code (when still open) and audits/logs the close.
+     */
+    end(session, code, reason, why, exitCode) {
+        if (session.closed)
+            return;
+        session.closed = true;
+        this._sessions.delete(session);
+        if (session.idleTimer)
+            clearTimeout(session.idleTimer);
+        if (session.durationTimer)
+            clearTimeout(session.durationTimer);
+        this.stopCheckTimerIfIdle();
+        if (session.pty) {
+            killTree(session.pty, session.shellId);
+        }
+        if (code !== undefined) {
+            closeWs(session.ws, code, reason ?? '');
+        }
+        if (!session.pty)
+            return; // never opened
+        const durationMs = Date.now() - session.startedAt;
+        if (session.authMode === 'users' && session.ctx) {
+            this.audit(session, 'shell_closed', { durationMs, reason: why, ...(why === 'exited' ? { exitCode } : {}) });
+        }
+        else {
+            logger.info('Shell closed (id=%s, auth=%s, mode=%s, remote=%s, reason=%s, durationMs=%d)', session.id, session.authMode, session.mode, session.remoteAddress, why, durationMs);
+        }
+    }
+    audit(session, event, extra) {
+        const ctx = session.ctx;
+        const audit = this._auth?.audit;
+        if (!audit)
+            return;
+        audit
+            .call(this._auth, {
+            event,
+            userId: ctx.userId,
+            userName: ctx.userName,
+            actorId: ctx.userId,
+            actorName: ctx.userName,
+            metadata: {
+                mode: session.mode,
+                sessionId: ctx.sessionId,
+                remoteAddress: session.remoteAddress,
+                ...extra,
+            },
+        })
+            .catch((err) => logger.error('Shell audit failed: %s', err?.message ?? err));
+    }
+    /** Closes every open shell (server shutdown). */
+    dispose() {
+        for (const s of [...this._sessions]) {
+            this.end(s, 1001, 'server shutdown', 'server shutdown');
+        }
+        if (this._checkTimer)
+            clearInterval(this._checkTimer);
+        this._checkTimer = undefined;
+        this._unsubscribe?.();
+        this._unsubscribe = undefined;
+    }
+    // -------------------------------------------------------------- helpers
+    remoteAddressOf(request) {
+        return (0, cli_server_auth_1.clientAddress)(request, this._trustProxy);
+    }
+    /** Determines the shell binary and arguments based on options, platform and optional command. */
+    getShellInfo(command) {
+        if (os.platform() === 'win32') {
+            const shell = this._options.shell ?? 'powershell.exe';
+            return command ? { shell, args: ['-Command', command] } : { shell, args: [] };
+        }
+        const shell = this._options.shell ?? detectShell();
+        return command ? { shell, args: ['-c', command] } : { shell, args: [] };
+    }
+    /** Sends a JSON message to the WebSocket if the connection is open. */
+    send(ws, msg) {
+        if (ws.readyState === ws_1.WebSocket.OPEN) {
+            ws.send(JSON.stringify(msg));
+        }
+    }
+}
+exports.CliShellSessionManager = CliShellSessionManager;
+/** Detects the best available shell on Unix systems by checking $SHELL and common paths. */
+function detectShell() {
+    const candidates = [process.env.SHELL, '/bin/bash', '/usr/bin/bash', '/bin/sh'].filter(Boolean);
+    for (const candidate of candidates) {
+        try {
+            fs.accessSync(candidate, fs.constants.X_OK);
+            return candidate;
+        }
+        catch {
+            continue;
+        }
+    }
+    return '/bin/sh';
+}
+function clampDim(value, fallback) {
+    const n = parseInt(value ?? '', 10);
+    if (!Number.isFinite(n) || n <= 0)
+        return fallback;
+    return Math.min(n, 1000);
+}
+function closeWs(ws, code, reason) {
+    if (ws.readyState === ws_1.WebSocket.OPEN || ws.readyState === ws_1.WebSocket.CONNECTING) {
+        try {
+            ws.close(code, reason);
+        }
+        catch {
+            ws.terminate();
+        }
+    }
+}
+/**
+ * Kills the shell and everything it started. Unix: the descendant tree and every
+ * process carrying the shell's `QCLI_SHELL_ID` marker are collected before
+ * signalling (background jobs in their own process groups, `setsid`/`nohup`
+ * children, re-parented daemons), then HUP → TERM → (grace) → KILL.
+ */
+function killTree(pty, shellId) {
+    if (os.platform() !== 'win32') {
+        (0, process_tree_1.terminateProcessTree)(pty.pid, undefined, shellId);
+        return;
+    }
+    try {
+        pty.kill();
+    }
+    catch {
+        // already exited
+    }
+}
+//# sourceMappingURL=cli-shell-session-manager.js.map

package/dist/src/services/cli-shell-session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-shell-session-manager.js","sourceRoot":"","sources":["../../../src/services/cli-shell-session-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2BAA+B;AAE/B,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,4CAA+C;AAC/C,6DAMiC;AACjC,2DAS6B;AAC7B,iDAAgF;AAEhF,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,cAAc,CAAC,CAAC;AAE5C,sFAAsF;AACtF,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAEnC;;;GAGG;AACH,IAAI,IAA2C,CAAC;AAChD,SAAS,MAAM;IACX,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,IAAI,CAAC;YACD,iEAAiE;YACjE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACX,+DAA+D,GAAG,CAAC,OAAO,EAAE,CAC/E,CAAC;QACN,CAAC;IACL,CAAC;IACD,OAAO,IAAK,CAAC;AACjB,CAAC;AA0DD;;;;GAIG;AACH,MAAa,sBAAsB;IACvB,QAAQ,CAAkB;IAC1B,QAAQ,CAAU;IAClB,KAAK,CAAkB;IACvB,YAAY,CAAc;IACjB,SAAS,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC7C,OAAO,GAAG,CAAC,CAAC;IACZ,WAAW,CAAkB;IAE7B,WAAW,CAAmB;IAEtC,YAAY,UAAyF,EAAE;QACnG,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;IACnD,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,KAAuB;QACjC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,UAAU,CAAC,OAAgB;QACvB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,UAAU,CAAC,OAAwB;QAC/B,IAAI,CAAC,QAAQ,GAAG,OAAO,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,qEAAqE;IACrE,IAAI,QAAQ;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,wCAAoB,EAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,CAAC;IAED,mFAAmF;IACnF,OAAO,CAAC,IAAgC;QACpC,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK;YAAE,OAAO;QAChC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACnF,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,eAAe;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC3B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,KAAK,CACR,oGAAoG;gBAChG,0FAA0F;gBAC1F,4CAA4C,CACnD,CAAC;QACN,CAAC;aAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,yHAAyH,CAAC,CAAC;QAC3I,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IAED,qBAAqB;IACrB,WAAW;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM;YACrB,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ;YACzB,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS;YAC3B,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SACjD,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,EAAa,EAAE,OAAwB,EAAE,GAAQ;QAC1D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,EAAE,CAAC,KAAK,CAAC,mCAAe,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YACrD,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,IAAI,GAA8B,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;QAC5E,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAA,wCAAoB,EAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnE,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACD,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACL,QAAQ,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAe,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAK,EAAE,QAAQ,CAAC,MAAO,CAAC,CAAC;YAC9C,OAAO;QACX,CAAC;QACD,IAAI,EAAE,CAAC,UAAU,KAAK,cAAS,CAAC,IAAI;YAAE,OAAO;QAE7C,MAAM,QAAQ,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,GAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,aAAa,EAAE,CAAC;QACjG,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,IAAI,kCAAc,CAAC,kBAAkB,CAAC;QACtF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,kCAAc,CAAC,WAAW,CAAC;QACtE,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;QACvE,IAAI,OAAO,IAAI,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;YACrD,OAAO,CAAC,EAAE,EAAE,mCAAe,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;YAChE,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAiB;YAC1B,EAAE,EAAE,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE;YAC1B,EAAE;YACF,QAAQ;YACR,IAAI;YACJ,aAAa;YACb,QAAQ;YACR,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,OAAO;YACP,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,KAAK;SAChB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,0EAA0E;YAC1E,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,MAAM;gBAAE,OAAO;YAC3B,IAAI,EAAE,CAAC,UAAU,KAAK,cAAS,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAClD,OAAO;YACX,CAAC;QACL,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,yCAAyC;IACjC,KAAK,CAAC,SAAS,CACnB,QAA0B,EAC1B,OAAwB,EACxB,GAAQ,EACR,aAAqB,EACrB,IAA+B;QAE/B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACxB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAe,CAAC,aAAa,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;QACxG,CAAC;QAED,IAAI,GAAqC,CAAC;QAC1C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACD,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,IAAI,GAAG,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;oBACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAe,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;gBAC/E,CAAC;gBACD,GAAG,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAe,CAAC,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;YACxF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,KAAM,CAAC,aAAa,CAAC,GAAG,EAAE,sCAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAe,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YAC/E,CAAC;QACL,CAAC;QAED,6EAA6E;QAC7E,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACV,MAAM,SAAS,GAAG,IAAA,mCAAe,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAe,CAAC,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;YACxF,CAAC;YACD,IAAI,CAAC,IAAA,+BAAW,EAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAe,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YAC/E,CAAC;QACL,CAAC;QAED,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YACd,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC;gBACD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;YAClF,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE,OAAO,IAAI,OAAO,CAAC,CAAC;gBACrF,OAAO,GAAG,KAAK,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAe,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YAC/E,CAAC;QACL,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,OAAqB,EAAE,IAAY,EAAE,IAAY,EAAE,OAAgB;QAC7E,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QACvB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEnD,IAAI,OAAkC,CAAC;QACvC,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO;QACX,CAAC;QAED,qFAAqF;QACrF,OAAO,CAAC,OAAO,GAAG,IAAA,yBAAU,GAAE,CAAC;QAC/B,IAAI,CAAC;YACD,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE;gBACrC,IAAI,EAAE,gBAAgB;gBACtB,IAAI;gBACJ,IAAI;gBACJ,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,OAAO,EAAE;gBACtC,GAAG,EAAE,EAAE,GAAG,IAAA,iCAAa,EAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,2BAAY,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE;aACvG,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO;QACX,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEvB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC3B,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;SAC5F,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAChC,IAAI,OAAO,CAAC,MAAM;gBAAE,OAAO;YAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,IAAI,GAAkB,CAAC;YACvB,IAAI,CAAC;gBACD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAkB,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBACrD,OAAO;YACX,CAAC;YACD,IAAI,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvD,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC/B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;oBAC/B,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC;qBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC/B,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC5F,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACtD,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxE,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACrB,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAG,KAAe,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC;YAC1E,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,2DAA2D;IACnD,SAAS,CAAC,OAAqB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,kCAAc,CAAC,aAAa,CAAC;QACzE,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,GAAG,EAAE;gBACf,IAAI,OAAO,CAAC,MAAM;oBAAE,OAAO;gBAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;oBACjB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,mCAAe,CAAC,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;gBACtF,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;oBAC3E,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;gBAChC,CAAC;YACL,CAAC,CAAC;YACF,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAChC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QACxC,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC;YAClC,MAAM,MAAM,GAAG,GAAG,EAAE;gBAChB,IAAI,OAAO,CAAC,MAAM;oBAAE,OAAO;gBAC3B,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;oBACjB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,mCAAe,CAAC,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;gBACtF,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,aAAa,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;oBAChF,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;gBACpC,CAAC;YACL,CAAC,CAAC;YACF,OAAO,CAAC,aAAa,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;YAC1E,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;QACpC,CAAC;IACL,CAAC;IAED,wEAAwE;IAEhE,cAAc,CAAC,KAA4B;QAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;oBAC1D,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,mCAAe,CAAC,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;gBACjF,CAAC;YACL,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAEO,gBAAgB;QACpB,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,IAAI,kCAAc,CAAC,sBAAsB,EAAE,EAAE,CAAC,EAC3F,kCAAc,CAAC,yBAAyB,CAC3C,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;IAC/B,CAAC;IAEO,oBAAoB;QACxB,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QACjC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,MAAe;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;gBAAE,SAAS;YACxE,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED,kGAAkG;IAC1F,KAAK,CAAC,iBAAiB,CAAC,CAAe;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG;YAAE,OAAO;QAC/B,IAAI,KAAK,GAAqC,CAAC,CAAC,GAAG,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,CAAC,CAAC,eAAe,CAAC;QAChC,CAAC,CAAC,eAAe,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACD,IAAI,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,kCAAc,CAAC,eAAe,EAAE,CAAC;gBAC9E,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;gBAClB,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,KAAK,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACL,KAAK,GAAG,SAAS,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO;QACrB,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,sCAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;YACnF,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,mCAAe,CAAC,aAAa,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAChH,CAAC;aAAM,CAAC;YACJ,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QACzD,CAAC;IACL,CAAC;IAED,yEAAyE;IAEjE,QAAQ,CAAC,OAAqB;QAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACxI,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,GAAG,CAAC,OAAqB,EAAE,IAAwB,EAAE,MAA0B,EAAE,GAAW,EAAE,QAAiB;QACnH,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO;QAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,aAAa;YAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC/D,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,OAAO,CAAC,eAAe;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;QAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,IAAI,CACP,6EAA6E,EAC7E,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,UAAU,CACrF,CAAC;QACN,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAqB,EAAE,KAAsC,EAAE,KAA8B;QACvG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAI,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,KAAK;aACA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACd,KAAK;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,MAAM;YACnB,SAAS,EAAE,GAAG,CAAC,QAAQ;YACvB,QAAQ,EAAE;gBACN,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,GAAG,KAAK;aACX;SACJ,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,iDAAiD;IACjD,OAAO;QACH,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,WAAW;YAAE,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;IAClC,CAAC;IAED,yEAAyE;IAEjE,eAAe,CAAC,OAAwB;QAC5C,OAAO,IAAA,+BAAa,EAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,iGAAiG;IACzF,YAAY,CAAC,OAAgB;QACjC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,gBAAgB,CAAC;YACtD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAClF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,uEAAuE;IAC/D,IAAI,CAAC,EAAa,EAAE,GAAkB;QAC1C,IAAI,EAAE,CAAC,UAAU,KAAK,cAAS,CAAC,IAAI,EAAE,CAAC;YACnC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;CACJ;AA9eD,wDA8eC;AAED,4FAA4F;AAC5F,SAAS,WAAW;IAChB,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;IAC5G,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,SAAS,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACL,SAAS;QACb,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAoB,EAAE,QAAgB;IACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,OAAO,CAAC,EAAa,EAAE,IAAY,EAAE,MAAc;IACxD,IAAI,EAAE,CAAC,UAAU,KAAK,cAAS,CAAC,IAAI,IAAI,EAAE,CAAC,UAAU,KAAK,cAAS,CAAC,UAAU,EAAE,CAAC;QAC7E,IAAI,CAAC;YACD,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACL,EAAE,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC;IACL,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,GAA4B,EAAE,OAAgB;IAC5D,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAA,mCAAoB,EAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO;IACX,CAAC;IACD,IAAI,CAAC;QACD,GAAG,CAAC,IAAI,EAAE,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACL,iBAAiB;IACrB,CAAC;AACL,CAAC"}

package/dist/src/services/index.d.ts

@@ -0,0 +1,8 @@
+export { ICliCommandRegistry, CliCommandRegistry } from './cli-command-registry';
+export { ICliResponseBuilder, CliResponseBuilder } from './cli-response-builder';
+export { ICliCommandExecutorService, CliCommandExecutorService } from './cli-command-executor-service';
+export { CliEventSocketManager, CliWebSocketClientInfo } from './cli-event-socket-manager';
+export { CliShellSessionManager, CliShellSessionInfo } from './cli-shell-session-manager';
+export { CliShellOptions, CliShellEnvOptions, CliShellAuthMode, CliShellAuthorizeContext, ShellCloseCodes, resolveShellAuthMode, buildShellEnv, } from './cli-shell-options';
+export { CliLogSocketManager, CliLogWebSocketClientInfo } from './cli-log-socket-manager';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AACvG,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EACH,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,oBAAoB,EACpB,aAAa,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/src/services/index.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CliLogSocketManager = exports.buildShellEnv = exports.resolveShellAuthMode = exports.ShellCloseCodes = exports.CliShellSessionManager = exports.CliEventSocketManager = exports.CliCommandExecutorService = exports.CliResponseBuilder = exports.CliCommandRegistry = void 0;
+var cli_command_registry_1 = require("./cli-command-registry");
+Object.defineProperty(exports, "CliCommandRegistry", { enumerable: true, get: function () { return cli_command_registry_1.CliCommandRegistry; } });
+var cli_response_builder_1 = require("./cli-response-builder");
+Object.defineProperty(exports, "CliResponseBuilder", { enumerable: true, get: function () { return cli_response_builder_1.CliResponseBuilder; } });
+var cli_command_executor_service_1 = require("./cli-command-executor-service");
+Object.defineProperty(exports, "CliCommandExecutorService", { enumerable: true, get: function () { return cli_command_executor_service_1.CliCommandExecutorService; } });
+var cli_event_socket_manager_1 = require("./cli-event-socket-manager");
+Object.defineProperty(exports, "CliEventSocketManager", { enumerable: true, get: function () { return cli_event_socket_manager_1.CliEventSocketManager; } });
+var cli_shell_session_manager_1 = require("./cli-shell-session-manager");
+Object.defineProperty(exports, "CliShellSessionManager", { enumerable: true, get: function () { return cli_shell_session_manager_1.CliShellSessionManager; } });
+var cli_shell_options_1 = require("./cli-shell-options");
+Object.defineProperty(exports, "ShellCloseCodes", { enumerable: true, get: function () { return cli_shell_options_1.ShellCloseCodes; } });
+Object.defineProperty(exports, "resolveShellAuthMode", { enumerable: true, get: function () { return cli_shell_options_1.resolveShellAuthMode; } });
+Object.defineProperty(exports, "buildShellEnv", { enumerable: true, get: function () { return cli_shell_options_1.buildShellEnv; } });
+var cli_log_socket_manager_1 = require("./cli-log-socket-manager");
+Object.defineProperty(exports, "CliLogSocketManager", { enumerable: true, get: function () { return cli_log_socket_manager_1.CliLogSocketManager; } });
+//# sourceMappingURL=index.js.map

package/dist/src/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/index.ts"],"names":[],"mappings":";;;AAAA,+DAAiF;AAAnD,0HAAA,kBAAkB,OAAA;AAChD,+DAAiF;AAAnD,0HAAA,kBAAkB,OAAA;AAChD,+EAAuG;AAAlE,yIAAA,yBAAyB,OAAA;AAC9D,uEAA2F;AAAlF,iIAAA,qBAAqB,OAAA;AAC9B,yEAA0F;AAAjF,mIAAA,sBAAsB,OAAA;AAC/B,yDAQ6B;AAHzB,oHAAA,eAAe,OAAA;AACf,yHAAA,oBAAoB,OAAA;AACpB,kHAAA,aAAa,OAAA;AAEjB,mEAA0F;AAAjF,6HAAA,mBAAmB,OAAA"}