@schema-weaver/pg-connector 0.0.0-stage → 2.0.0

package/dist/esm/execution/function-effects.js

@@ -0,0 +1,586 @@
+import { extendedQuery } from './types';
+import { isDeniedReadFunction } from './sql-parser';
+/* ------------------------------------------------------------------ */
+/* Catalogue query                                                     */
+/* ------------------------------------------------------------------ */
+/**
+ * One batched read of `pg_proc` for every name in the statement.
+ *
+ * `pg_function_is_visible()` is evaluated on the connection that will run the
+ * statement, so it reflects the same `search_path` the call itself will resolve
+ * through. The join is on `proname` alone and the narrowing happens in
+ * {@link verdictFor}, because which candidates are relevant depends on whether
+ * the statement qualified the name.
+ */
+const CATALOG_QUERY = 'SELECT n.nspname AS schema, p.proname AS name, p.provolatile AS provolatile, ' +
+    'p.prosecdef AS prosecdef, ' +
+    'pg_catalog.pg_function_is_visible(p.oid) AS visible ' +
+    'FROM pg_catalog.pg_proc p JOIN pg_catalog.pg_namespace n ON n.oid = p.pronamespace ' +
+    'WHERE p.proname = ANY($1::text[])';
+const SIDE_EFFECT_FAMILIES = [
+    // Delivered non-transactionally even inside a read-only transaction.
+    { kind: 'notified', prefixes: ['pg_notify'] },
+    { kind: 'advisory_lock', prefixes: ['pg_advisory_'] },
+    {
+        kind: 'xid_allocated',
+        prefixes: ['txid_current', 'pg_snapshot_', 'pg_current_xact_id', 'pg_current_snapshot'],
+    },
+    { kind: 'sequence', exact: ['nextval', 'setval', 'currval', 'lastval'] },
+    {
+        kind: 'session_mutation',
+        exact: [
+            'set_config',
+            'pg_reload_conf',
+            'pg_rotate_logfile',
+            'pg_terminate_backend',
+            'pg_cancel_backend',
+        ],
+        prefixes: ['pg_logical_emit_message', 'pg_logical_'],
+    },
+    {
+        kind: 'remote_io',
+        exact: [
+            'pg_file_write',
+            'pg_export_snapshot',
+            'pg_import_snapshot',
+            'pg_sleep',
+            'pg_stat_file',
+            'pg_tempfile',
+            'pg_read_file',
+            'pg_read_binary_file',
+            'pg_read_server_file',
+        ],
+        prefixes: [
+            'dblink',
+            'postgres_fdw',
+            'file_fdw',
+            'sqlite_fdw',
+            'mysql_fdw',
+            'pg_read_',
+            'pg_ls_',
+            'lo_',
+            'pg_sleep',
+        ],
+    },
+];
+/** Side-effect kinds implied by a function's bare name alone. */
+function nameSideEffects(bare) {
+    const kinds = [];
+    for (const family of SIDE_EFFECT_FAMILIES) {
+        if (family.exact?.includes(bare)) {
+            if (!kinds.includes(family.kind))
+                kinds.push(family.kind);
+            continue;
+        }
+        if (family.prefixes?.some((prefix) => bare.startsWith(prefix))) {
+            if (!kinds.includes(family.kind))
+                kinds.push(family.kind);
+        }
+    }
+    return kinds;
+}
+/**
+ * Ordering used when one name resolves to several overloads: the LEAST safe
+ * verdict in the set is the verdict for the reference.
+ */
+const EFFECT_SEVERITY = {
+    immutable: 0,
+    stable: 1,
+    unknown: 2,
+    volatile: 3,
+    security_definer: 4,
+};
+/** Map one `pg_proc` row onto an effect, `prosecdef` winning over volatility. */
+function effectFromRow(row) {
+    if (row.prosecdef)
+        return 'security_definer';
+    switch (row.provolatile) {
+        case 'i':
+            return 'immutable';
+        case 'v':
+            return 'volatile';
+        case 's':
+            return 'stable';
+        default:
+            return 'unknown';
+    }
+}
+/**
+ * Split a collected reference into `[schema, bare]` when it is qualified.
+ *
+ * `collectFunctionNames` lower-cases and dot-joins the raw parse-tree parts, so
+ * `a11_helper.read_any_file` arrives as two parts. A quoted identifier may
+ * itself contain a dot (`"my.func"()`), which is indistinguishable here — it
+ * resolves as an unknown schema and therefore as an unresolved name, which is
+ * the safe direction.
+ */
+function splitReference(name) {
+    const dot = name.indexOf('.');
+    if (dot <= 0 || dot === name.length - 1)
+        return { bare: name };
+    const schema = name.slice(0, dot);
+    const bare = name.slice(dot + 1);
+    if (schema.includes('.') || bare.includes('.'))
+        return { bare: name };
+    return { schema, bare };
+}
+/**
+ * Safe PostgreSQL catalog read functions that have zero mutation side effects.
+ * Even if PostgreSQL marks them as STABLE or VOLATILE in pg_proc (e.g. pg_table_size
+ * reads disk state so pg_proc has provolatile = 'v'), they are purely read-only
+ * catalog inspection / sizing helpers and must not demote a SELECT to a mutation.
+ */
+export const SAFE_READ_CATALOG_FUNCTIONS = new Set([
+    'pg_table_size',
+    'pg_relation_size',
+    'pg_total_relation_size',
+    'pg_indexes_size',
+    'pg_database_size',
+    'pg_tablespace_size',
+    'pg_size_pretty',
+    'format_type',
+    'obj_description',
+    'col_description',
+    'pg_get_userbyid',
+    'pg_get_expr',
+    'pg_get_indexdef',
+    'pg_get_constraintdef',
+    'pg_get_viewdef',
+    'pg_get_serial_sequence',
+    'pg_column_size',
+    'version',
+    'current_database',
+    'current_schema',
+    'current_user',
+    'session_user',
+    'pg_has_role',
+    'has_table_privilege',
+    'has_schema_privilege',
+    'has_database_privilege',
+    'has_function_privilege',
+    'has_any_column_privilege',
+    'has_column_privilege',
+    'has_sequence_privilege',
+    'has_server_privilege',
+    'has_foreign_data_wrapper_privilege',
+    'has_tablespace_privilege',
+    'has_type_privilege',
+    'round',
+    'ceil',
+    'ceiling',
+    'floor',
+    'abs',
+    'sign',
+    'coalesce',
+    'nullif',
+    'count',
+    'min',
+    'max',
+    'avg',
+    'sum',
+    'least',
+    'greatest',
+    'width_bucket',
+    'stddev',
+    'stddev_samp',
+    'stddev_pop',
+    'variance',
+    'var_samp',
+    'var_pop',
+    'percentile_cont',
+    'percentile_disc',
+    'lower',
+    'upper',
+    'trim',
+    'btrim',
+    'ltrim',
+    'rtrim',
+    'length',
+    'substr',
+    'substring',
+    'concat',
+    'concat_ws',
+    'to_char',
+    'to_date',
+    'to_timestamp',
+    'to_number',
+    'now',
+    'current_timestamp',
+    'current_date',
+    'current_time',
+    'date_trunc',
+    'date_part',
+    'extract',
+    'age',
+    'json_extract_path',
+    'json_extract_path_text',
+    'jsonb_extract_path',
+    'jsonb_extract_path_text',
+    'to_json',
+    'to_jsonb',
+    'encode',
+    'decode',
+    'md5',
+]);
+/** A reference with no catalogue answer: check if it is a non-dangerous catalog built-in, else unknown. */
+export function unresolvedRecord(name) {
+    const { schema, bare } = splitReference(name);
+    const isCatalog = schema === 'pg_catalog' || schema === undefined || schema === 'information_schema';
+    const isDangerous = isDeniedReadFunction(bare) || nameSideEffects(bare).length > 0;
+    if (isCatalog && (!isDangerous || SAFE_READ_CATALOG_FUNCTIONS.has(bare.toLowerCase()))) {
+        return {
+            name,
+            qualified_name: `${schema ?? 'pg_catalog'}.${bare}`,
+            schema: schema ?? 'pg_catalog',
+            effect: 'immutable',
+            side_effects: [],
+            resolved: true,
+        };
+    }
+    return {
+        name,
+        ...(schema !== undefined ? { qualified_name: `${schema}.${bare}`, schema } : {}),
+        effect: 'unknown',
+        side_effects: [...nameSideEffects(bare), 'unknown_effect'],
+        resolved: false,
+    };
+}
+/**
+ * The verdict for one reference, given every `pg_proc` row matching its bare
+ * name. See the module comment for the overload and schema rules.
+ */
+function verdictFor(name, rows) {
+    const { schema, bare } = splitReference(name);
+    let candidates = rows.filter((row) => row.name === bare);
+    if (schema !== undefined) {
+        // The statement named the schema, so that is the function it will call.
+        candidates = candidates.filter((row) => row.schema === schema);
+        if (candidates.length === 0)
+            return unresolvedRecord(name);
+    }
+    else {
+        const visible = candidates.filter((row) => row.visible);
+        // Visible means "what an unqualified call resolves to on this connection".
+        // Nothing visible means the reference cannot be pinned down, so every
+        // same-named function in the cluster stays a candidate.
+        if (visible.length > 0)
+            candidates = visible;
+    }
+    if (candidates.length === 0)
+        return unresolvedRecord(name);
+    let effect = 'immutable';
+    const sideEffects = new Set();
+    for (const row of candidates) {
+        const isCatalog = row.schema === 'pg_catalog' || row.schema === 'information_schema';
+        const isDangerous = isDeniedReadFunction(row.name) || nameSideEffects(row.name).length > 0 || row.prosecdef;
+        const isSafeCatalogFn = (isCatalog && !isDangerous) ||
+            ((isCatalog || row.schema === undefined) && SAFE_READ_CATALOG_FUNCTIONS.has(row.name.toLowerCase()));
+        const rowEffect = isSafeCatalogFn ? 'immutable' : effectFromRow(row);
+        if (EFFECT_SEVERITY[rowEffect] > EFFECT_SEVERITY[effect])
+            effect = rowEffect;
+        if (rowEffect !== 'immutable')
+            sideEffects.add('unknown_effect');
+        if (!isSafeCatalogFn) {
+            for (const kind of nameSideEffects(row.name))
+                sideEffects.add(kind);
+        }
+    }
+    const pickedSchema = schema ?? candidates.map((row) => row.schema).sort()[0];
+    return {
+        name,
+        qualified_name: `${pickedSchema}.${bare}`,
+        schema: pickedSchema,
+        effect,
+        side_effects: [...sideEffects],
+        resolved: true,
+    };
+}
+/**
+ * Verdicts cached per (database, name).
+ *
+ * The key includes the database because OIDs — and therefore which overload
+ * exists where — are only meaningful inside one catalogue. `dbKey` is the
+ * caller's stable identifier for it (the db alias), and an empty key is a
+ * caller that did not supply one, which keeps those verdicts in their own
+ * namespace instead of borrowing another database's answer.
+ */
+const VERDICT_CACHE = new Map();
+/**
+ * Ceiling on cached verdicts. Bounded because the key space includes every
+ * function name a caller can spell, and a long-running daemon should not grow
+ * without limit. Eviction is least-recently-inserted first, which is enough:
+ * a miss only costs one batched query.
+ */
+const MAX_CACHE_ENTRIES = 4096;
+/**
+ * How long a verdict may be reused.
+ *
+ * The catalogue is not immutable — `CREATE OR REPLACE FUNCTION` can turn an
+ * `IMMUTABLE` function into a `VOLATILE` one — so the cache is time-bounded as
+ * well as size-bounded. A short window keeps the stale-safe direction
+ * bounded, and `invalidateFunctionEffectCache()` lets a caller drop the whole
+ * namespace the moment it knows the catalogue moved (pool close, config
+ * change, or a statement it just executed that was not a read).
+ */
+const CACHE_TTL_MS = readTtlFromEnv();
+function readTtlFromEnv() {
+    const raw = process.env.SW_AGENT_FUNCTION_EFFECT_TTL_MS;
+    if (!raw)
+        return 60_000;
+    const parsed = Number.parseInt(raw, 10);
+    if (!Number.isFinite(parsed) || parsed < 0)
+        return 60_000;
+    return Math.min(parsed, 3_600_000);
+}
+function cacheKey(dbKey, name) {
+    return `${dbKey}\u0000${name.toLowerCase()}`;
+}
+function cacheGet(dbKey, name, now) {
+    const key = cacheKey(dbKey, name);
+    const hit = VERDICT_CACHE.get(key);
+    if (!hit)
+        return undefined;
+    if (now - hit.storedAt > CACHE_TTL_MS) {
+        VERDICT_CACHE.delete(key);
+        return undefined;
+    }
+    return hit.record;
+}
+function cachePut(dbKey, name, record, now) {
+    if (VERDICT_CACHE.size >= MAX_CACHE_ENTRIES) {
+        const oldest = VERDICT_CACHE.keys().next();
+        if (!oldest.done)
+            VERDICT_CACHE.delete(oldest.value);
+    }
+    VERDICT_CACHE.set(cacheKey(dbKey, name), { record, storedAt: now });
+}
+/**
+ * Drop cached verdicts so the next classification re-reads `pg_proc`.
+ *
+ * Call it when the catalogue may have changed underneath the cache: a pool
+ * closing, a db entry being re-pointed, or a statement that was not a read
+ * having just executed. Dropping an entry can only make the next verdict equal
+ * to the catalogue or stricter, so it is always safe to call.
+ *
+ * @param dbKey Only this database's verdicts when supplied; all of them
+ *   otherwise.
+ */
+export function invalidateFunctionEffectCache(dbKey) {
+    if (dbKey === undefined) {
+        VERDICT_CACHE.clear();
+        return;
+    }
+    const prefix = `${dbKey}\u0000`;
+    for (const key of [...VERDICT_CACHE.keys()]) {
+        if (key.startsWith(prefix))
+            VERDICT_CACHE.delete(key);
+    }
+}
+/** Number of cached verdicts. Diagnostics and tests only. */
+export function functionEffectCacheSize() {
+    return VERDICT_CACHE.size;
+}
+/* ------------------------------------------------------------------ */
+/* Analysis                                                            */
+/* ------------------------------------------------------------------ */
+function isQueryable(source) {
+    return typeof source.query === 'function';
+}
+async function readCatalog(source, bareNames) {
+    const run = async (queryable) => {
+        // ONE placeholder for the whole name list. Passing the names as separate
+        // bind parameters would send a scalar to `$1::text[]` and PostgreSQL would
+        // reject the whole statement — which the fail-closed path below would turn
+        // into "no verdict", silently escalating every query that calls a function.
+        const res = await queryable.query(extendedQuery(CATALOG_QUERY, [bareNames]));
+        const rows = [];
+        for (const raw of res.rows) {
+            const row = raw;
+            rows.push({
+                schema: String(row.schema),
+                name: String(row.name),
+                provolatile: String(row.provolatile),
+                prosecdef: row.prosecdef === true || row.prosecdef === 'true',
+                visible: row.visible === true || row.visible === 'true',
+            });
+        }
+        return rows;
+    };
+    try {
+        if (isQueryable(source))
+            return await run(source);
+        const { client, release } = await source.acquire();
+        try {
+            return await run(client);
+        }
+        finally {
+            release();
+        }
+    }
+    catch {
+        // A catalogue read that fails must not be mistaken for "no such function"
+        // with no effect. The caller gets `analysed: false` and refuses.
+        return null;
+    }
+}
+/**
+ * Resolve every function a statement references against `pg_proc`.
+ *
+ * Contract:
+ *   - No names in, `analysed: true` and no records: there is nothing to prove,
+ *     so `SELECT 1` is unaffected.
+ *   - No connection, or a failed catalogue read: `analysed: false` and every
+ *     unresolved name reported as `unknown`. The caller must then refuse the
+ *     statement. This is the required fail-closed direction.
+ *   - One batched query per call, whatever the number of names.
+ */
+export async function analyseFunctionEffects(names, source, options = {}) {
+    const dbKey = options.dbKey ?? '';
+    const now = options.now ?? Date.now;
+    const requested = [];
+    const seen = new Set();
+    for (const name of names) {
+        const key = name.toLowerCase();
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        requested.push(name);
+    }
+    if (requested.length === 0)
+        return { records: [], analysed: true };
+    const records = new Map();
+    const misses = [];
+    for (const name of requested) {
+        const hit = cacheGet(dbKey, name, now());
+        if (hit)
+            records.set(name.toLowerCase(), hit);
+        else
+            misses.push(name);
+    }
+    if (misses.length > 0) {
+        if (!source) {
+            for (const name of misses)
+                records.set(name.toLowerCase(), unresolvedRecord(name));
+            return { records: orderedRecords(requested, records), analysed: false };
+        }
+        const bareNames = [...new Set(misses.map((name) => splitReference(name).bare.toLowerCase()))];
+        const rows = await readCatalog(source, bareNames);
+        if (rows === null) {
+            for (const name of misses)
+                records.set(name.toLowerCase(), unresolvedRecord(name));
+            return { records: orderedRecords(requested, records), analysed: false };
+        }
+        for (const name of misses) {
+            const record = verdictFor(name, rows);
+            // A verdict that is not `immutable` may change on the next read and is
+            // cheap to re-derive; caching it costs one query either way. Only an
+            // `immutable` verdict — the one a caller will actually rely on — is
+            // worth remembering, and it is bounded by TTL and size regardless.
+            if (record.effect === 'immutable')
+                cachePut(dbKey, name, record, now());
+            records.set(name.toLowerCase(), record);
+        }
+    }
+    return { records: orderedRecords(requested, records), analysed: true };
+}
+function orderedRecords(requested, byLowerName) {
+    const out = [];
+    for (const name of requested) {
+        const record = byLowerName.get(name.toLowerCase());
+        if (record)
+            out.push(record);
+    }
+    return out;
+}
+/* ------------------------------------------------------------------ */
+/* Resolver factories                                                  */
+/* ------------------------------------------------------------------ */
+/**
+ * Build a resolver bound to one connection source.
+ *
+ * Pass this into `PermissionChecker.check` (and therefore into
+ * `classifyStatement`). Omit it and every statement that references a function
+ * is refused, which is the intended behaviour for a caller with no database to
+ * consult — see {@link analyseFunctionEffects}.
+ */
+export function createFunctionEffectResolver(source, options = {}) {
+    const dbKey = options.dbKey ?? '';
+    return (names) => analyseFunctionEffects(names, source, { dbKey });
+}
+/**
+ * A resolver over a `PoolManager`-shaped object.
+ *
+ * Exists so a caller that owns a pool but not a connection can wire the
+ * analysis in one line, and so the pool slot is held for the duration of the
+ * catalogue query only — the permission decision itself can block on a human
+ * approval, and holding a connection across that would exhaust the pool.
+ *
+ * Typed structurally rather than against `PoolManager` so this module does not
+ * depend on the connection layer.
+ */
+export function functionEffectResolverForPool(pool, dbEntry, options = {}) {
+    const dbKey = options.dbKey ?? '';
+    return async (names) => {
+        let client;
+        let release;
+        try {
+            ({ client, release } = await pool.acquire(dbEntry));
+        }
+        catch {
+            // No usable connection — a missing password, an unreachable host, an
+            // exhausted pool. This resolver must never throw: its contract is "report
+            // what the catalogue says, or report nothing", and a thrown error here
+            // would escape the permission decision and turn a fail-closed refusal
+            // into an `internal_error`. `analysed: false` is the fail-closed verdict.
+            return {
+                records: names.map((name) => unresolvedRecord(name.toLowerCase())),
+                analysed: false,
+            };
+        }
+        try {
+            return await analyseFunctionEffects(names, client, { dbKey });
+        }
+        finally {
+            release();
+        }
+    };
+}
+/**
+ * A resolver that answers from a fixed verdict table, for callers and tests
+ * that have no database to consult. Same contract as the real thing: anything
+ * not in the table is `unknown`, and therefore refused.
+ *
+ * NOT for a production execution path. It can only be as strict as the table it
+ * is handed, so wiring it in place of the catalogue read would reintroduce
+ * exactly the gap this module closes. It is here so the unit suite can drive
+ * the composed classifier without a server, and so a caller that genuinely has
+ * no database gets the fail-closed verdict explicitly instead of by omission.
+ */
+export function createStaticFunctionEffectResolver(verdicts, options = {}) {
+    const analysed = options.analysed ?? true;
+    return async (names) => {
+        const records = [];
+        for (const raw of names) {
+            const name = raw.toLowerCase();
+            const bare = splitReference(name).bare;
+            const looked = verdicts[name] ?? verdicts[bare];
+            if (looked === undefined || looked === 'unresolved') {
+                records.push(unresolvedRecord(name));
+                continue;
+            }
+            const sideEffects = new Set(nameSideEffects(bare));
+            if (looked !== 'immutable')
+                sideEffects.add('unknown_effect');
+            records.push({
+                name: raw,
+                qualified_name: `${splitReference(name).schema ?? 'pg_catalog'}.${bare}`,
+                schema: splitReference(name).schema ?? 'pg_catalog',
+                effect: looked,
+                side_effects: [...sideEffects],
+                resolved: true,
+            });
+        }
+        return { records, analysed };
+    };
+}
+//# sourceMappingURL=function-effects.js.map

package/dist/esm/execution/function-effects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"function-effects.js","sourceRoot":"","sources":["../../../src/execution/function-effects.ts"],"names":[],"mappings":"AAqDA,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AA2FpD,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE;;;;;;;;GAQG;AACH,MAAM,aAAa,GACjB,+EAA+E;IAC/E,4BAA4B;IAC5B,sDAAsD;IACtD,qFAAqF;IACrF,mCAAmC,CAAC;AAgCtC,MAAM,oBAAoB,GAAgC;IACxD,qEAAqE;IACrE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE;IAC7C,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,cAAc,CAAC,EAAE;IACrD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,CAAC,cAAc,EAAE,cAAc,EAAE,oBAAoB,EAAE,qBAAqB,CAAC;KACxF;IACD,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE;IACxE;QACE,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE;YACL,YAAY;YACZ,gBAAgB;YAChB,mBAAmB;YACnB,sBAAsB;YACtB,mBAAmB;SACpB;QACD,QAAQ,EAAE,CAAC,yBAAyB,EAAE,aAAa,CAAC;KACrD;IACD;QACE,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE;YACL,eAAe;YACf,oBAAoB;YACpB,oBAAoB;YACpB,UAAU;YACV,cAAc;YACd,aAAa;YACb,cAAc;YACd,qBAAqB;YACrB,qBAAqB;SACtB;QACD,QAAQ,EAAE;YACR,QAAQ;YACR,cAAc;YACd,UAAU;YACV,YAAY;YACZ,WAAW;YACX,UAAU;YACV,QAAQ;YACR,KAAK;YACL,UAAU;SACX;KACF;CACF,CAAC;AAEF,iEAAiE;AACjE,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,eAAe,GAAmC;IACtD,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,CAAC;IACT,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC;IACX,gBAAgB,EAAE,CAAC;CACpB,CAAC;AAEF,iFAAiF;AACjF,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO,kBAAkB,CAAC;IAC7C,QAAQ,GAAG,CAAC,WAAW,EAAE,CAAC;QACxB,KAAK,GAAG;YACN,OAAO,WAAW,CAAC;QACrB,KAAK,GAAG;YACN,OAAO,UAAU,CAAC;QACpB,KAAK,GAAG;YACN,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC;IACtE,eAAe;IACf,kBAAkB;IAClB,wBAAwB;IACxB,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,gBAAgB;IAChB,aAAa;IACb,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,aAAa;IACb,iBAAiB;IACjB,sBAAsB;IACtB,gBAAgB;IAChB,wBAAwB;IACxB,gBAAgB;IAChB,SAAS;IACT,kBAAkB;IAClB,gBAAgB;IAChB,cAAc;IACd,cAAc;IACd,aAAa;IACb,qBAAqB;IACrB,sBAAsB;IACtB,wBAAwB;IACxB,wBAAwB;IACxB,0BAA0B;IAC1B,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,oCAAoC;IACpC,0BAA0B;IAC1B,oBAAoB;IACpB,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,KAAK;IACL,MAAM;IACN,UAAU;IACV,QAAQ;IACR,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,OAAO;IACP,UAAU;IACV,cAAc;IACd,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,UAAU;IACV,UAAU;IACV,SAAS;IACT,iBAAiB;IACjB,iBAAiB;IACjB,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,WAAW;IACX,SAAS;IACT,SAAS;IACT,cAAc;IACd,WAAW;IACX,KAAK;IACL,mBAAmB;IACnB,cAAc;IACd,cAAc;IACd,YAAY;IACZ,WAAW;IACX,SAAS;IACT,KAAK;IACL,mBAAmB;IACnB,wBAAwB;IACxB,oBAAoB;IACpB,yBAAyB;IACzB,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,KAAK;CACN,CAAC,CAAC;AAEH,2GAA2G;AAC3G,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,oBAAoB,CAAC;IACrG,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACnF,IAAI,SAAS,IAAI,CAAC,CAAC,WAAW,IAAI,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO;YACL,IAAI;YACJ,cAAc,EAAE,GAAG,MAAM,IAAI,YAAY,IAAI,IAAI,EAAE;YACnD,MAAM,EAAE,MAAM,IAAI,YAAY;YAC9B,MAAM,EAAE,WAAW;YACnB,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;QAC1D,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,IAAe;IAC/C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAEzD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,wEAAwE;QACxE,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC/D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,2EAA2E;QAC3E,sEAAsE;QACtE,wDAAwD;QACxD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,UAAU,GAAG,OAAO,CAAC;IAC/C,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAE3D,IAAI,MAAM,GAAmB,WAAW,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,oBAAoB,CAAC;QACrF,MAAM,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC;QAC5G,MAAM,eAAe,GACnB,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC;YAC3B,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAEvG,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACrE,IAAI,eAAe,CAAC,SAAS,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC;YAAE,MAAM,GAAG,SAAS,CAAC;QAC7E,IAAI,SAAS,KAAK,WAAW;YAAE,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO;QACL,IAAI;QACJ,cAAc,EAAE,GAAG,YAAY,IAAI,IAAI,EAAE;QACzC,MAAM,EAAE,YAAY;QACpB,MAAM;QACN,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B;;;;;;;;;GASG;AACH,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC;AAEtC,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;IACxD,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,OAAO,GAAG,KAAK,SAAS,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY,EAAE,GAAW;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,YAAY,EAAE,CAAC;QACtC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY,EAAE,MAA4B,EAAE,GAAW;IACtF,IAAI,aAAa,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,aAAa,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,KAAK,QAAQ,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,uBAAuB;IACrC,OAAO,aAAa,CAAC,IAAI,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,SAAS,WAAW,CAAC,MAA4B;IAC/C,OAAO,OAAQ,MAAkC,CAAC,KAAK,KAAK,UAAU,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,MAA4B,EAC5B,SAA4B;IAE5B,MAAM,GAAG,GAAG,KAAK,EAAE,SAAkC,EAAsB,EAAE;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAC/B,aAAa,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAA2B,CACpE,CAAC;QACF,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAiB,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,GAA8B,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC;gBACR,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC1B,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;gBACtB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;gBACpC,SAAS,EAAE,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM;gBAC7D,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM;aACxD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,WAAW,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,iEAAiE;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAuB,EACvB,MAAoC,EACpC,UAAkD,EAAE;IAEpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAEpC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAEnE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IACxD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,IAAI,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;;YACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,MAAM,IAAI,IAAI,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC1E,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,KAAK,MAAM,IAAI,IAAI,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC1E,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtC,uEAAuE;YACvE,qEAAqE;YACrE,oEAAoE;YACpE,mEAAmE;YACnE,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CACrB,SAA4B,EAC5B,WAA8C;IAE9C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAoC,EACpC,UAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,OAAO,CAAC,KAAwB,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAkG,EAClG,OAAgB,EAChB,UAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,OAAO,KAAK,EAAE,KAAwB,EAAE,EAAE;QACxC,IAAI,MAA+B,CAAC;QACpC,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACH,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,0EAA0E;YAC1E,uEAAuE;YACvE,sEAAsE;YACtE,0EAA0E;YAC1E,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBAClE,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kCAAkC,CAChD,QAAiE,EACjE,UAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC1C,OAAO,KAAK,EAAE,KAAwB,EAAE,EAAE;QACxC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAiB,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YACnE,IAAI,MAAM,KAAK,WAAW;gBAAE,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,GAAG;gBACT,cAAc,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,YAAY,IAAI,IAAI,EAAE;gBACxE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,YAAY;gBACnD,MAAM,EAAE,MAAM;gBACd,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC;gBAC9B,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/execution/introspection.d.ts

@@ -0,0 +1,76 @@
+import { PoolManager } from './pool';
+import { DbEntry } from '../config/db-config';
+import { IntrospectPayload, IntrospectResultPayload } from '../protocol/messages';
+import type { Role } from '../protocol/envelope';
+/**
+ * How much of the schema a snapshot may carry.
+ *
+ * - `full` — everything, including `indexdef`, `check_clause`,
+ *   `column_default`, trigger function source, owners, comments and partition
+ *   bounds.
+ * - `structure` — relation names, column names/types/nullable, and the
+ *   primary-key/unique/foreign-key shape. Everything that is a *fact about the
+ *   data model* is kept; every field that is *database implementation detail or
+ *   business-rule expression* is dropped.
+ *
+ * Audit M-30: `ROLE_CAPABILITIES` granted `introspect` to all four roles while
+ * the snapshot returned the entire schema, so a `viewer` could exfiltrate the
+ * whole thing — index bodies, check-clause expressions (which encode validation
+ * rules), column defaults (which name sequences and generated columns) and
+ * trigger function source. Dropping `introspect` outright for the least
+ * privileged roles was the other option; it was rejected because a read-only
+ * user could then not populate a schema browser or write a valid join, which is
+ * the product's whole purpose for them. The reduced level keeps the product and
+ * removes the channel.
+ */
+export type IntrospectionDetail = 'full' | 'structure';
+/**
+ * Fields dropped at `structure` detail. Listed explicitly (rather than
+ * "delete whatever looks internal") so the reduction is auditable: adding a
+ * column to a snapshot query does not silently become a leak, it has to be added
+ * here deliberately.
+ */
+export declare const STRUCTURE_ONLY_DROPPED_FIELDS: readonly string[];
+export interface IntrospectorOptions {
+    poolManager: PoolManager;
+}
+export declare class Introspector {
+    private readonly poolManager;
+    constructor(opts: IntrospectorOptions);
+    /**
+     * Take a schema snapshot.
+     *
+     * `role` is the authenticated envelope's role; it selects the detail level via
+     * `introspectionDetailFor` in permissions/role-policy.ts. It defaults to
+     * `structure` rather than `full`, so a caller that forgets to pass it cannot
+     * leak the full schema — the reverse of the usual default would be fail-open.
+     *
+     * Every catalogue query below goes out through `extendedQuery`, so it travels
+     * over the extended query protocol: node-postgres takes the simple protocol
+     * whenever `values` is falsy, and that protocol executes every
+     * semicolon-separated statement in one round trip. The SQL here is
+     * agent-authored and carries no caller-supplied text, but pinning it means a
+     * future edit cannot quietly turn one catalogue query into a multi-command
+     * string.
+     */
+    introspect(payload: IntrospectPayload, dbEntry: DbEntry, role?: Role): Promise<IntrospectResultPayload>;
+}
+/**
+ * Major version from a PostgreSQL version string.
+ *
+ * `SELECT version()` returns e.g. `PostgreSQL 16.2 (Debian 16.2-1.pgdg120+1) on
+ * x86_64-pc-linux-gnu`, and a caller-supplied hint may be `16`, `16.2` or the
+ * same string. Only the leading `major.minor` is meaningful for compatibility,
+ * so the major is what is compared.
+ */
+export declare function parseMajorVersion(raw: string): number | null;
+/**
+ * Fail closed when the caller's declared server version is not the server we are
+ * connected to. An absent hint (`null`/blank) imposes no expectation.
+ *
+ * Throws a plain `Error`; the dispatcher converts it into an error frame, so the
+ * caller learns that no snapshot was taken rather than receiving one that
+ * answers a question it did not ask.
+ */
+export declare function assertVersionHintMatches(serverVersion: string, hint: string | null | undefined): void;
+//# sourceMappingURL=introspection.d.ts.map