@smart-data-engines/sde 0.1.0-dev.0

package/dist/demo/weather.js

@@ -0,0 +1,334 @@
+/** Bounded customer workload. Values and runtime credentials remain in this process. */
+import { isDeepStrictEqual } from 'node:util';
+import { randomUUID } from 'node:crypto';
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { setTimeout as pause } from 'node:timers/promises';
+import { EngineError, MapRolledBack, MigrationRefused } from '../errors.js';
+import { PostgresEngine } from '../engines/postgres.js';
+import { ClickHouseEngine } from '../engines/clickhouse.js';
+import { Session } from '../session.js';
+import { Recorder, windowRecord } from '../telemetry.js';
+import { baseTime, celsiusBaseCents, celsiusModulus, generatorId, humidityBase, humidityModulus, reading } from './model.js';
+import { DemoRefused, project, read, write } from './project.js';
+/** What a run can drive. The CLI offers and the runtime accepts this one list. */
+export const workloads = ['mixed', 'point', 'analytics', 'fleet', 'alerts'];
+/** The fleet checks one cross-station page exactly; its count and sum cover the whole window. */
+const fleetPage = 100;
+const maxRunRows = 10000;
+/**
+ * The alert threshold. Humidity is 30 + sequence % 70, so a reading alerts when sequence % 70 is 65
+ * or more - five readings in seventy, known exactly from the sequence number.
+ */
+export const alertHumidity = 95;
+export const alertPage = 100;
+function recoverable(error) {
+    return error instanceof EngineError || error instanceof MapRolledBack || error instanceof MigrationRefused;
+}
+function same(actual, expected) {
+    if (!isDeepStrictEqual(actual, expected))
+        throw new DemoRefused('A logical read did not match this run.');
+}
+/**
+ * A run that stopped, failed, before it recorded its first write: it wrote no row. A run records the
+ * batch it is about to write before writing it, so no pending batch and no acknowledged or verified
+ * row means nothing reached the engine. Without this, a first run that could not open its session -
+ * a missing driver - stopped every later fleet run in that directory.
+ */
+function failedBeforeWriting(report) {
+    return report.status === 'incomplete' && report.pending === null && report.generator_id === generatorId &&
+        ['acknowledged_rows', 'verified_after_uncertain_rows', 'verified_rows']
+            .every(field => report[field] === 0);
+}
+/**
+ * Every earlier run of this project, by run ID, with the rows it verified.
+ *
+ * Fleet analytics reads every station's rows in one time window, and every run in a directory writes
+ * the same timeline, so the exact answer is a sum over the runs - known exactly, because generated
+ * values depend only on the sequence number and each run's local report says how many rows it
+ * verified. A run that did not complete makes that sum unknowable, so the workload refuses instead
+ * of comparing a read with a guess - except a run that failed before its first write, which wrote no
+ * row (failedBeforeWriting). The same rules as the Python starter's fleet_runs.
+ */
+export function fleetRuns(root, projectId) {
+    const runs = new Map();
+    const directory = join(root, 'runs');
+    if (!existsSync(directory))
+        return runs;
+    for (const name of readdirSync(directory).sort()) {
+        const path = join(directory, name, 'report.json');
+        if (!existsSync(path))
+            continue;
+        const report = read(path).value;
+        if (report.project_id !== projectId)
+            continue;
+        const identity = report.run_id, rows = report.verified_rows;
+        if (failedBeforeWriting(report) && identity === name)
+            continue;
+        if (typeof identity !== 'string' || !/^[0-9a-f]{32}$/.test(identity) || name !== identity ||
+            report.status !== 'complete' || report.pending !== null || report.generator_id !== generatorId ||
+            typeof rows !== 'number' || !Number.isSafeInteger(rows) || rows < 0 || rows > maxRunRows) {
+            throw new DemoRefused("Fleet analytics reads every run's rows, so every earlier run of this project must " +
+                'be complete; inspect the unfinished run first.');
+        }
+        runs.set(identity, rows);
+    }
+    return runs;
+}
+/**
+ * The first page, row count and celsius total of the window holding sequences 1..through. A page is
+ * in key order, station then time; a station is its run's namespace and is ASCII, so the default
+ * string order is the engines' byte order.
+ */
+export function fleetExpected(runs, through, limit) {
+    const page = [];
+    let total = 0, cents = 0n;
+    const ordered = [...runs.keys()].sort((left, right) => {
+        const a = reading(left, 0, 1).station, b = reading(right, 0, 1).station;
+        return a < b ? -1 : a > b ? 1 : 0;
+    });
+    for (const identity of ordered) {
+        const rows = Math.min(through, runs.get(identity));
+        total += rows;
+        for (let sequence = 1; sequence <= rows; sequence++) {
+            cents += BigInt(celsiusBaseCents + sequence % celsiusModulus);
+            if (page.length < limit)
+                page.push(reading(identity, 0, sequence));
+        }
+    }
+    return [page, total, `${cents / 100n}.${String(cents % 100n).padStart(2, '0')}`];
+}
+/**
+ * The first page, count and celsius total of this run's alerts among sequences 1..through. One
+ * station, so key order - station, then time - is sequence order. With no alert yet the total is
+ * null, as the library reports a summary of no values on every engine. The same rules as the Python
+ * starter's alert_expected.
+ */
+export function alertExpected(runId, through, limit) {
+    const page = [];
+    let total = 0, cents = 0n;
+    for (let sequence = 1; sequence <= through; sequence++) {
+        if (humidityBase + sequence % humidityModulus < alertHumidity)
+            continue;
+        total++;
+        cents += BigInt(celsiusBaseCents + sequence % celsiusModulus);
+        if (page.length < limit)
+            page.push(reading(runId, 0, sequence));
+    }
+    return [page, total, total ? `${cents / 100n}.${String(cents % 100n).padStart(2, '0')}` : null];
+}
+/**
+ * Refuse before a run's report exists when a binding's driver cannot be imported. Without this the
+ * first session open failed inside the run's retry loop: ten seconds of retries, a message that could
+ * only say the operation did not complete, and a report left `incomplete`. ClickHouse is spoken over
+ * fetch and needs no package. The import is the adapter's own, resolved from this package.
+ */
+export async function requireDrivers(dialects, load = name => import(name)) {
+    if (![...dialects].includes('postgres'))
+        return;
+    try {
+        await load('pg');
+    }
+    catch {
+        throw new DemoRefused("The PostgreSQL binding needs the 'pg' package: npm install pg");
+    }
+}
+export async function runWeather(root, options = {}) {
+    const { iterations = 10, batchSize = 10, intervalMs = 100, recoveryMs = 10000, workload = 'mixed' } = options;
+    if (![iterations, batchSize, intervalMs, recoveryMs].every(Number.isSafeInteger) ||
+        iterations < 1 || iterations > 1000 || batchSize < 1 || batchSize > 1000 || iterations * batchSize > maxRunRows ||
+        intervalMs < 0 || intervalMs > 1000 || recoveryMs < 0 || recoveryMs > 30000 ||
+        !workloads.includes(workload))
+        throw new DemoRefused('Invalid bounded workload options.');
+    const { model, bindings, projectId, activeMap } = project(root);
+    await requireDrivers(Object.values(bindings).map(binding => binding.dialect));
+    // Read before this run's own report exists; a run that starts later is not in the window.
+    const earlier = workload === 'fleet' ? fleetRuns(root, projectId) : new Map();
+    const factories = {};
+    for (const [name, binding] of Object.entries(bindings))
+        factories[name] = () => binding.dialect === 'postgres' ? new PostgresEngine(binding.dsn) : new ClickHouseEngine(binding.dsn);
+    const runId = randomUUID().replaceAll('-', ''), directory = join(root, 'runs', runId);
+    const recorder = new Recorder(model.version);
+    let session, fingerprint;
+    const report = { protocol: 2, generator_id: generatorId, run_id: runId, language: 'typescript', status: 'running', workload,
+        sdk_version: String(JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8')).version),
+        sdk_module: new URL('../index.js', import.meta.url).href, project_id: projectId, model_version: model.version,
+        acknowledged_rows: 0, verified_after_uncertain_rows: 0, verified_rows: 0, pending: null,
+        map_versions: [], read_retries: 0 };
+    function checkpoint() { write(join(directory, 'report.json'), report); }
+    async function opened(fresh = false) {
+        const placement = activeMap();
+        if (fresh || session === undefined || placement.fingerprint !== fingerprint) {
+            if (session !== undefined) {
+                await session.close();
+                session = undefined;
+            }
+            const required = new Set(Object.values(placement.groups).flatMap(group => [group.source, ...group.derived].map(material => material.engine)));
+            const activeFactories = Object.fromEntries([...required].map(name => {
+                if (!factories[name])
+                    throw new DemoRefused('An active materialization has no local binding.');
+                return [name, factories[name]];
+            }));
+            session = await Session.connect(model, placement, activeFactories, { recorder, projectId });
+            fingerprint = placement.fingerprint;
+            if (!report.map_versions.includes(placement.mapVersion))
+                report.map_versions.push(placement.mapVersion);
+        }
+        return session;
+    }
+    async function readRetry(action) {
+        const deadline = performance.now() + recoveryMs;
+        let fresh = false;
+        for (;;) {
+            try {
+                return await action(await opened(fresh));
+            }
+            catch (error) {
+                if (!recoverable(error) || performance.now() >= deadline)
+                    throw error;
+                report.read_retries++;
+                fresh = true;
+                await pause(50);
+            }
+        }
+    }
+    async function checkRows(client, rows) {
+        for (const row of rows) {
+            const actual = await client.get('WeatherReading', { station: row.station, at: row.at }, { fresh: true });
+            if (actual === null)
+                return false;
+            same(actual, row);
+        }
+        return true;
+    }
+    checkpoint();
+    const began = process.hrtime.bigint();
+    try {
+        // The group's size at the start of the run and again at its end, for the window: the engine's
+        // catalogue answers with numbers, and a refused read leaves the size unknown.
+        await readRetry(current => current.measureStorage());
+        for (let iteration = 0; iteration < iterations; iteration++) {
+            const first = iteration * batchSize + 1;
+            const rows = Array.from({ length: batchSize }, (_, index) => reading(runId, 0, first + index));
+            const client = await readRetry(async (current) => current);
+            report.pending = { first, count: batchSize };
+            checkpoint();
+            try {
+                await client.saveMany('WeatherReading', rows);
+                report.acknowledged_rows += batchSize;
+            }
+            catch (error) {
+                if (!(error instanceof EngineError))
+                    throw error;
+                const deadline = performance.now() + recoveryMs;
+                for (;;) {
+                    try {
+                        if (await checkRows(await opened(true), rows)) {
+                            report.verified_after_uncertain_rows += batchSize;
+                            break;
+                        }
+                    }
+                    catch (readError) {
+                        if (!recoverable(readError))
+                            throw readError;
+                    }
+                    if (performance.now() >= deadline)
+                        throw new DemoRefused('Write outcome is uncertain. Inspect the pending range locally; the starter did not replay it.');
+                    await pause(50);
+                }
+            }
+            report.pending = null;
+            checkpoint();
+            const last = rows.at(-1), count = first + batchSize - 1, where = { station: last.station };
+            for (let index = 0; index < (workload === 'point' ? 20 : 1); index++) {
+                same(await readRetry(current => current.get('WeatherReading', { station: last.station, at: last.at })), last);
+            }
+            if (workload === 'fleet') {
+                // Every station, one time window: the traffic a time-first layout is for. The expected
+                // answer is exact, from this directory's run reports (fleetRuns).
+                const window = new Map(earlier).set(runId, count);
+                const [expected, rows, celsius] = fleetExpected(window, count, fleetPage);
+                const bounds = { field: 'at', low: reading(runId, 0, 1).at, high: reading(runId, 0, count + 1).at };
+                const page = await readRetry(current => current.scan('WeatherReading', { bounds, limit: expected.length }));
+                if (page.rows.length !== expected.length)
+                    throw new DemoRefused("The fleet page did not match this directory's runs.");
+                page.rows.forEach((row, index) => same(row, expected[index]));
+                if (await readRetry(current => current.count('WeatherReading', { bounds })) !== BigInt(rows)) {
+                    throw new DemoRefused("The fleet count did not match this directory's runs.");
+                }
+                const summary = await readRetry(current => current.summarize('WeatherReading', 'celsius', { bounds }));
+                if (summary.count !== BigInt(rows) || summary.total !== celsius) {
+                    throw new DemoRefused("The exact fleet summary did not match this directory's runs.");
+                }
+            }
+            else if (workload === 'alerts') {
+                // One station's readings at or above the alert threshold: a range on humidity, a field
+                // outside the key, which the key cannot serve and an index can. Exact from the generator.
+                const [expected, alerts, celsius] = alertExpected(runId, count, alertPage);
+                const bounds = { field: 'humidity', low: BigInt(alertHumidity) };
+                const page = await readRetry(current => current.scan('WeatherReading', { where, bounds, limit: alertPage }));
+                if (page.rows.length !== expected.length)
+                    throw new DemoRefused('The alert page did not match this run.');
+                page.rows.forEach((row, index) => same(row, expected[index]));
+                if (await readRetry(current => current.count('WeatherReading', { where, bounds })) !== BigInt(alerts)) {
+                    throw new DemoRefused('The alert count did not match this run.');
+                }
+                const summary = await readRetry(current => current.summarize('WeatherReading', 'celsius', { where, bounds }));
+                if (summary.count !== BigInt(alerts) || summary.total !== celsius) {
+                    throw new DemoRefused('The exact alert summary did not match this run.');
+                }
+            }
+            else if (workload !== 'point' || iteration === iterations - 1) {
+                const page = await readRetry(current => current.scan('WeatherReading', {
+                    where, bounds: { field: 'at', low: baseTime }, limit: Math.min(count, 1000),
+                }));
+                if (page.rows.length !== Math.min(count, 1000))
+                    throw new DemoRefused('The bounded page has a different length.');
+                page.rows.forEach((row, index) => same(row, reading(runId, 0, index + 1)));
+                if (await readRetry(current => current.count('WeatherReading', { where })) !== BigInt(count)) {
+                    throw new DemoRefused('The logical count did not match this run.');
+                }
+                const summary = await readRetry(current => current.summarize('WeatherReading', 'celsius', { where }));
+                let cents = 0n;
+                for (let index = 1; index <= count; index++)
+                    cents += BigInt(1525 + index % 1000);
+                const total = `${cents / 100n}.${String(cents % 100n).padStart(2, '0')}`;
+                if (summary.count !== BigInt(count) || summary.total !== total)
+                    throw new DemoRefused('The exact summary did not match this run.');
+            }
+            report.verified_rows = count;
+            checkpoint();
+            if (intervalMs && iteration + 1 < iterations)
+                await pause(intervalMs);
+        }
+        await readRetry(current => current.measureStorage());
+        report.status = 'complete';
+    }
+    catch (error) {
+        report.status = 'incomplete';
+        report.failure = error instanceof Error ? error.name : 'UnknownError';
+        throw error;
+    }
+    finally {
+        report.elapsed_ns = String(process.hrtime.bigint() - began);
+        try {
+            if (session !== undefined)
+                await session.close();
+        }
+        catch (error) {
+            report.status = 'incomplete';
+            report.cleanup_failed = true;
+            throw error;
+        }
+        finally {
+            const window = recorder.roll();
+            if (window !== undefined) {
+                write(join(directory, 'window.json'), windowRecord(window, model));
+                recorder.acknowledge(1);
+            }
+            checkpoint();
+        }
+    }
+    return report;
+}
+//# sourceMappingURL=weather.js.map

package/dist/demo/weather.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"weather.js","sourceRoot":"","sources":["../../src/demo/weather.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAC5H,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAEhE,kFAAkF;AAClF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAA;AAEpF,iGAAiG;AACjG,MAAM,SAAS,GAAG,GAAG,CAAA;AACrB,MAAM,UAAU,GAAG,KAAK,CAAA;AACxB;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAA;AAC/B,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAA;AAa5B,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,YAAY,gBAAgB,CAAA;AAC5G,CAAC;AACD,SAAS,IAAI,CAAC,MAAkB,EAAE,QAAa;IAC7C,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,wCAAwC,CAAC,CAAA;AAC3G,CAAC;AACD;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,MAA+B;IAC1D,OAAO,MAAM,CAAC,MAAM,KAAK,YAAY,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW;QACpG,CAAC,mBAAmB,EAAE,+BAA+B,EAAE,eAAe,CAAW;aAC/E,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AAC1C,CAAC;AACD;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,SAAiB;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAQ;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAA;QAC/B,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,SAAQ;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,aAAa,CAAA;QAC3D,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAQ;QAC9D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK,QAAQ;YACrF,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW;YAC9F,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,UAAU,EAAE,CAAC;YAC7F,MAAM,IAAI,WAAW,CAAC,oFAAoF;gBACxG,gDAAgD,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAyB,EAAE,OAAe,EAAE,KAAa;IACrF,MAAM,IAAI,GAAU,EAAE,CAAA;IACtB,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,CAAA;IACzB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACpD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;QACvE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IACF,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,CAAA;QACnD,KAAK,IAAI,IAAI,CAAA;QACb,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;YACpD,KAAK,IAAI,MAAM,CAAC,gBAAgB,GAAG,QAAQ,GAAG,cAAc,CAAC,CAAA;YAC7D,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;AAClF,CAAC;AACD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,OAAe,EAAE,KAAa;IACzE,MAAM,IAAI,GAAU,EAAE,CAAA;IACtB,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,CAAA;IACzB,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,IAAI,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;QACvD,IAAI,YAAY,GAAG,QAAQ,GAAG,eAAe,GAAG,aAAa;YAAE,SAAQ;QACvE,KAAK,EAAE,CAAA;QACP,KAAK,IAAI,MAAM,CAAC,gBAAgB,GAAG,QAAQ,GAAG,cAAc,CAAC,CAAA;QAC7D,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AACjG,CAAC;AACD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAA0B,EAAE,OAA2C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;IAE3F,IAAI,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAM;IAC/C,IAAI,CAAC;QAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAC9B,MAAM,IAAI,WAAW,CAAC,+DAA+D,CAAC,CAAA;IACxF,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,UAAsB,EAAE;IACrE,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAE,UAAU,GAAG,GAAG,EAAE,UAAU,GAAG,KAAK,EAAE,QAAQ,GAAG,OAAO,EAAE,GAAG,OAAO,CAAA;IAC7G,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;QAC5E,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,IAAI,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,IAAI,IAAI,UAAU,GAAG,SAAS,GAAG,UAAU;QAC/G,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,IAAI,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,KAAK;QAC3E,CAAE,SAA+B,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,mCAAmC,CAAC,CAAA;IACpH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7E,0FAA0F;IAC1F,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAA;IAC7F,MAAM,SAAS,GAAwC,EAAE,CAAA;IACzD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAC7E,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtG,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACrF,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC5C,IAAI,OAA4B,EAAE,WAA+B,CAAA;IACjE,MAAM,MAAM,GAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ;QACpI,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7G,UAAU,EAAE,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO;QAC7G,iBAAiB,EAAE,CAAC,EAAE,6BAA6B,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI;QACvF,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;IACrC,SAAS,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAA,CAAC,CAAC;IACvE,KAAK,UAAU,MAAM,CAAC,KAAK,GAAG,KAAK;QACjC,MAAM,SAAS,GAAG,SAAS,EAAE,CAAA;QAC7B,IAAI,KAAK,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YAC5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,GAAG,SAAS,CAAA;YAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CACvE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;YACrE,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBAClE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,WAAW,CAAC,iDAAiD,CAAC,CAAA;gBAC9F,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAE,CAAC,CAAA;YACjC,CAAC,CAAC,CAAC,CAAA;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;YAC3F,WAAW,GAAG,SAAS,CAAC,WAAW,CAAA;YACnC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;gBAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACzG,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,KAAK,UAAU,SAAS,CAAI,MAAuC;QACjE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,UAAU,CAAA;QAC/C,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,SAAS,CAAC;YACR,IAAI,CAAC;gBAAC,OAAO,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;YAAC,CAAC;YAChD,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,MAAM,KAAK,CAAA;gBACrE,MAAM,CAAC,YAAY,EAAE,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAA;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,UAAU,SAAS,CAAC,MAAe,EAAE,IAAW;QACnD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACxG,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAA;YACjC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACnB,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,UAAU,EAAE,CAAA;IACZ,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IACrC,IAAI,CAAC;QACH,8FAA8F;QAC9F,8EAA8E;QAC9E,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QACpD,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,CAAC,CAAA;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,CAAA;YAC9F,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE,CAAC,OAAO,CAAC,CAAA;YACxD,MAAM,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAAC,UAAU,EAAE,CAAA;YAC1D,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;gBAAC,MAAM,CAAC,iBAAiB,IAAI,SAAS,CAAA;YAAC,CAAC;YAC5F,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;oBAAE,MAAM,KAAK,CAAA;gBAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,UAAU,CAAA;gBAC/C,SAAS,CAAC;oBACR,IAAI,CAAC;wBACH,IAAI,MAAM,SAAS,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;4BAAC,MAAM,CAAC,6BAA6B,IAAI,SAAS,CAAC;4BAAC,MAAK;wBAAC,CAAC;oBAC7G,CAAC;oBAAC,OAAO,SAAS,EAAE,CAAC;wBAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;4BAAE,MAAM,SAAS,CAAA;oBAAC,CAAC;oBACpE,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;wBAAE,MAAM,IAAI,WAAW,CACtD,+FAA+F,CAAC,CAAA;oBAClG,MAAM,KAAK,CAAC,EAAE,CAAC,CAAA;gBACjB,CAAC;YACH,CAAC;YACD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YAAC,UAAU,EAAE,CAAA;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;YAC3F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACrE,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;YAC/G,CAAC;YACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,uFAAuF;gBACvF,kEAAkE;gBAClE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;gBACjD,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;gBACzE,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;gBACnG,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;gBAC3G,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;oBAAE,MAAM,IAAI,WAAW,CAAC,qDAAqD,CAAC,CAAA;gBACtH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAE,CAAC,CAAC,CAAA;gBAC9D,IAAI,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7F,MAAM,IAAI,WAAW,CAAC,sDAAsD,CAAC,CAAA;gBAC/E,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;gBACtG,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBAChE,MAAM,IAAI,WAAW,CAAC,8DAA8D,CAAC,CAAA;gBACvF,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,uFAAuF;gBACvF,0FAA0F;gBAC1F,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;gBAC1E,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAA;gBAChE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;gBAC5G,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;oBAAE,MAAM,IAAI,WAAW,CAAC,wCAAwC,CAAC,CAAA;gBACzG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAE,CAAC,CAAC,CAAA;gBAC9D,IAAI,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtG,MAAM,IAAI,WAAW,CAAC,yCAAyC,CAAC,CAAA;gBAClE,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;gBAC7G,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBAClE,MAAM,IAAI,WAAW,CAAC,iDAAiD,CAAC,CAAA;gBAC1E,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,KAAK,OAAO,IAAI,SAAS,KAAK,UAAU,GAAG,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBACrE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC;iBAC5E,CAAC,CAAC,CAAA;gBACH,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC;oBAAE,MAAM,IAAI,WAAW,CAAC,0CAA0C,CAAC,CAAA;gBACjH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC1E,IAAI,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7F,MAAM,IAAI,WAAW,CAAC,2CAA2C,CAAC,CAAA;gBACpE,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;gBACrG,IAAI,KAAK,GAAG,EAAE,CAAA;gBACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,KAAK,EAAE,KAAK,EAAE;oBAAE,KAAK,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,CAAA;gBACjF,MAAM,KAAK,GAAG,GAAG,KAAK,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;gBACxE,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;oBAAE,MAAM,IAAI,WAAW,CAAC,2CAA2C,CAAC,CAAA;YACpI,CAAC;YACD,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC;YAAC,UAAU,EAAE,CAAA;YAC1C,IAAI,UAAU,IAAI,SAAS,GAAG,CAAC,GAAG,UAAU;gBAAE,MAAM,KAAK,CAAC,UAAU,CAAC,CAAA;QACvE,CAAC;QACD,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QACpD,MAAM,CAAC,MAAM,GAAG,UAAU,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;QAAC,MAAM,CAAC,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;QAAC,MAAM,KAAK,CAAA;IAClH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAA;QAC3D,IAAI,CAAC;YAAC,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;QACxD,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;YAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;gBACjF,CAAC;YACP,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAA;YAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;gBAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;YAAC,CAAC;YACzH,UAAU,EAAE,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/engines/_clickhouse-connection.d.ts

@@ -0,0 +1,17 @@
+import { type ConnectionOptions } from 'node:tls';
+export interface ConnectionParameters {
+    readonly host: string;
+    readonly port: number;
+    readonly username: string;
+    readonly password: string;
+    readonly database: string;
+    readonly secure: boolean;
+    readonly ca_cert: string | null;
+    readonly connect_timeout: number;
+    readonly send_receive_timeout: number;
+    readonly receive_timeout_supplied: boolean;
+    readonly protocol: 'http:' | 'https:';
+}
+export declare function parseDsn(dsn: string): ConnectionParameters;
+/** Read the selected CA once for this connection; never change process-global trust. */
+export declare function verifiedTls(target: ConnectionParameters): ConnectionOptions;

package/dist/engines/_clickhouse-connection.js

@@ -0,0 +1,182 @@
+/** Strict, portable connection intent; no driver-specific DSN fallback. */
+import { X509Certificate } from 'node:crypto';
+import { closeSync, constants, fstatSync, openSync, readSync } from 'node:fs';
+import { isIP } from 'node:net';
+import { isAbsolute } from 'node:path';
+import { createSecureContext } from 'node:tls';
+import { EngineError } from '../errors.js';
+import { verifyPeerIdentity } from './_tls-peer-identity.js';
+const PARAMETERS = new Set(['secure', 'verify', 'ca_cert', 'connect_timeout', 'send_receive_timeout']);
+function refuse(field) {
+    throw new EngineError(`Invalid ClickHouse connection ${field}; no connection was opened.`);
+}
+function decode(value, field, form = false) {
+    try {
+        const result = decodeURIComponent(form ? value.replace(/\+/g, ' ') : value);
+        if (/[\u0000-\u001f\u007f]/u.test(result))
+            return refuse(field);
+        return result;
+    }
+    catch {
+        return refuse(field);
+    }
+}
+function seconds(value, fallback) {
+    if (value === undefined)
+        return fallback;
+    if (!/^(?:[0-9]+(?:\.[0-9]*)?|\.[0-9]+)(?:[eE][+-]?[0-9]+)?$/.test(value))
+        return refuse('timeout');
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed) || parsed < 0.001 || parsed > 2147483.647)
+        return refuse('timeout');
+    return parsed;
+}
+export function parseDsn(dsn) {
+    if (typeof dsn !== 'string' || /[\u0000-\u0020\u007f\\#\p{White_Space}]/u.test(dsn))
+        return refuse('URI');
+    try {
+        encodeURIComponent(dsn);
+    }
+    catch {
+        return refuse('URI');
+    }
+    const matched = /^([A-Za-z][A-Za-z0-9+.-]*):\/\/([^/?#]*)(\/[^?#]*)?(?:\?([^#]*))?$/.exec(dsn);
+    if (matched === null)
+        return refuse('URI');
+    const scheme = matched[1].toLowerCase();
+    if (!['http', 'https', 'clickhouse', 'clickhouses'].includes(scheme))
+        return refuse('scheme');
+    const authority = matched[2];
+    const pieces = authority.split('@');
+    if (pieces.length > 2)
+        return refuse('authority');
+    const hostPort = pieces[pieces.length - 1];
+    let username = 'default', password = '';
+    if (pieces.length === 2) {
+        const userinfo = pieces[0], separator = userinfo.indexOf(':');
+        username = decode(separator < 0 ? userinfo : userinfo.slice(0, separator), 'username');
+        password = separator < 0 ? '' : decode(userinfo.slice(separator + 1), 'password');
+        if (username === '' || username.includes(':'))
+            return refuse('username');
+    }
+    let host, rawPort;
+    if (hostPort.startsWith('[')) {
+        const close = hostPort.indexOf(']');
+        if (close < 0)
+            return refuse('host');
+        const rawHost = hostPort.slice(1, close), remainder = hostPort.slice(close + 1);
+        if (isIP(rawHost) !== 6 || (remainder !== '' && !remainder.startsWith(':')))
+            return refuse('host');
+        host = new URL(`http://[${rawHost}]/`).hostname.slice(1, -1).toLowerCase();
+        rawPort = remainder === '' ? undefined : remainder.slice(1);
+    }
+    else {
+        const pair = hostPort.split(':');
+        if (pair.length > 2)
+            return refuse('host');
+        host = pair[0].toLowerCase();
+        rawPort = pair[1];
+        const labels = (host.endsWith('.') ? host.slice(0, -1) : host).split('.');
+        if (host.length > 253 || labels.some((label) => !/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(label)))
+            return refuse('host');
+        if (isIP(host) !== 4 && /^(?:0x[0-9a-f]+|[0-9]+)(?:\.(?:0x[0-9a-f]+|[0-9]+))*\.?$/.test(host))
+            return refuse('host');
+    }
+    const path = matched[3];
+    if (path === undefined || !/^\/[^/]+$/.test(path))
+        return refuse('database');
+    const database = decode(path.slice(1), 'database');
+    if (database === '' || database.includes('/') || database === '.' || database === '..')
+        return refuse('database');
+    const options = new Map();
+    const query = matched[4];
+    if (query !== undefined && query !== '')
+        for (const entry of query.split('&')) {
+            const separator = entry.indexOf('=');
+            if (separator <= 0)
+                return refuse('query option');
+            const key = decode(entry.slice(0, separator), 'query option', true);
+            const value = decode(entry.slice(separator + 1), 'query option', true);
+            if (!PARAMETERS.has(key) || options.has(key))
+                return refuse('query option');
+            options.set(key, value);
+        }
+    let secure = scheme === 'https' || scheme === 'clickhouses';
+    const requested = options.get('secure');
+    if (requested !== undefined) {
+        if (requested !== 'true' && requested !== 'false')
+            return refuse('secure option');
+        const wanted = requested === 'true';
+        if ((scheme === 'http' && wanted) || (secure && !wanted))
+            return refuse('conflicting transport');
+        secure = wanted;
+    }
+    let port;
+    if (rawPort !== undefined) {
+        if (!/^[0-9]+$/.test(rawPort))
+            return refuse('port');
+        port = Number(rawPort);
+        if (!Number.isInteger(port) || port < 1 || port > 65535)
+            return refuse('port');
+    }
+    else
+        port = scheme === 'http' ? 80 : scheme === 'https' ? 443 : secure ? 8443 : 8123;
+    if (scheme === 'clickhouse' && requested === undefined && (port === 443 || port === 8443))
+        return refuse('ambiguous TLS port; use an explicit secure scheme or option');
+    if (options.has('verify') && (options.get('verify') !== 'true' || !secure))
+        return refuse('verify option');
+    const ca = options.get('ca_cert') ?? null;
+    if (ca !== null && (!secure || !isAbsolute(ca)))
+        return refuse('CA option');
+    return Object.freeze({ host, port, username, password, database, secure, ca_cert: ca,
+        connect_timeout: seconds(options.get('connect_timeout'), 10),
+        send_receive_timeout: seconds(options.get('send_receive_timeout'), 15),
+        receive_timeout_supplied: options.has('send_receive_timeout'),
+        protocol: secure ? 'https:' : 'http:',
+    });
+}
+/** Read the selected CA once for this connection; never change process-global trust. */
+export function verifiedTls(target) {
+    let ca;
+    if (target.ca_cert !== null) {
+        try {
+            const limit = 1024 * 1024;
+            const fd = openSync(target.ca_cert, constants.O_RDONLY | constants.O_NONBLOCK);
+            try {
+                const info = fstatSync(fd);
+                if (!info.isFile() || info.size === 0 || info.size > limit)
+                    return refuse('CA file');
+                const buffer = Buffer.alloc(limit + 1);
+                let size = 0;
+                while (size < buffer.length) {
+                    const received = readSync(fd, buffer, size, buffer.length - size, null);
+                    if (received === 0)
+                        break;
+                    size += received;
+                }
+                if (size === 0 || size > limit)
+                    return refuse('CA file');
+                ca = buffer.subarray(0, size);
+            }
+            finally {
+                closeSync(fd);
+            }
+            const text = ca.toString('utf8');
+            const blocks = text.match(/-----BEGIN CERTIFICATE-----[\s\S]*?-----END CERTIFICATE-----/g);
+            if (blocks === null || blocks.length === 0)
+                return refuse('CA file');
+            for (const block of blocks)
+                new X509Certificate(block);
+            createSecureContext({ ca });
+        }
+        catch {
+            return refuse('CA file');
+        }
+    }
+    return {
+        ...(ca === undefined ? {} : { ca }), rejectUnauthorized: true,
+        ...(isIP(target.host) === 0 ? { servername: target.host } : {}),
+        checkServerIdentity: (_host, certificate) => verifyPeerIdentity(target.host, certificate),
+    };
+}
+//# sourceMappingURL=_clickhouse-connection.js.map

package/dist/engines/_clickhouse-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_clickhouse-connection.js","sourceRoot":"","sources":["../../src/engines/_clickhouse-connection.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,mBAAmB,EAA0B,MAAM,UAAU,CAAA;AAEtE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAgB5D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,CAAC,CAAA;AACtG,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,IAAI,WAAW,CAAC,iCAAiC,KAAK,6BAA6B,CAAC,CAAA;AAC5F,CAAC;AACD,SAAS,MAAM,CAAC,KAAa,EAAE,KAAa,EAAE,IAAI,GAAG,KAAK;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAC3E,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/D,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IAAC,CAAC;AAClC,CAAC;AACD,SAAS,OAAO,CAAC,KAAyB,EAAE,QAAgB;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACxC,IAAI,CAAC,wDAAwD,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;IACnG,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,KAAK,IAAI,MAAM,GAAG,WAAW;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;IAChG,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACzG,IAAI,CAAC;QAAC,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,oEAAoE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9F,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAA;IACxC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC7F,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;IAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;IAC3C,IAAI,QAAQ,GAAG,SAAS,EAAE,QAAQ,GAAG,EAAE,CAAA;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAE,EAAE,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC9D,QAAQ,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,UAAU,CAAC,CAAA;QACtF,QAAQ,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;QACjF,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC1E,CAAC;IACD,IAAI,IAAY,EAAE,OAA2B,CAAA;IAC7C,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;QACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC/E,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;QAClG,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1E,OAAO,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAA;QAC7B,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzE,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;QAC7H,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;IACtH,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACvB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;IAClD,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IACjH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACpC,IAAI,SAAS,IAAI,CAAC;gBAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAA;YACjD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,CAAA;YACnE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,CAAA;YACtE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAA;YAC3E,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACzB,CAAC;IACD,IAAI,MAAM,GAAG,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,aAAa,CAAA;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAA;QACjF,MAAM,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;QACnC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAA;QAChG,MAAM,GAAG,MAAM,CAAA;IACjB,CAAC;IACD,IAAI,IAAY,CAAA;IAChB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;QACpD,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;QACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;IAChF,CAAC;;QAAM,IAAI,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACtF,IAAI,MAAM,KAAK,YAAY,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,6DAA6D,CAAC,CAAA;IACvK,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAA;IAC1G,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAA;IACzC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAClF,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;QAC5D,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,EAAE,CAAC;QACtE,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC7D,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;KACtC,CAAC,CAAA;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,MAA4B;IACtD,IAAI,EAAsB,CAAA;IAC1B,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAA;YACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;YAC9E,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;gBAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK;oBAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;gBACpF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;gBACtC,IAAI,IAAI,GAAG,CAAC,CAAA;gBACZ,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAA;oBACvE,IAAI,QAAQ,KAAK,CAAC;wBAAE,MAAK;oBACzB,IAAI,IAAI,QAAQ,CAAA;gBAClB,CAAC;gBACD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,GAAG,KAAK;oBAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;gBACxD,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;YAC/B,CAAC;oBAAS,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAA;YAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAA;YAC1F,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;YACpE,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,IAAI,eAAe,CAAC,KAAK,CAAC,CAAA;YACtD,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAA;QAAC,CAAC;IACtC,CAAC;IACD,OAAO;QACL,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAI;QAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,mBAAmB,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC;KAC1F,CAAA;AACH,CAAC"}

package/dist/engines/_tls-peer-identity.d.ts

@@ -0,0 +1,2 @@
+import { type PeerCertificate } from 'node:tls';
+export declare function verifyPeerIdentity(host: string, certificate: PeerCertificate): Error | undefined;

package/dist/engines/_tls-peer-identity.js

@@ -0,0 +1,23 @@
+/** Native peer-name checks, separate from TLS's certificate-chain verification. */
+import { X509Certificate } from 'node:crypto';
+import { isIP } from 'node:net';
+import { checkServerIdentity } from 'node:tls';
+function mismatch() {
+    return Object.assign(new Error('TLS peer certificate does not match the configured host.'), { code: 'ERR_TLS_CERT_ALTNAME_INVALID' });
+}
+export function verifyPeerIdentity(host, certificate) {
+    try {
+        if (isIP(host) === 0)
+            return checkServerIdentity(host, certificate);
+        // Node 22.23.2 applies domainToASCII before recognizing an IP, losing bare IPv6 addresses.
+        // OpenSSL's X509 IP check uses the actual DER certificate without a textual SAN parser.
+        if (!Buffer.isBuffer(certificate.raw) || certificate.raw.length === 0)
+            return mismatch();
+        return new X509Certificate(certificate.raw).checkIP(host) === undefined ? mismatch() : undefined;
+    }
+    catch {
+        // Missing/malformed peer material must never turn a verification error into acceptance.
+        return mismatch();
+    }
+}
+//# sourceMappingURL=_tls-peer-identity.js.map

package/dist/engines/_tls-peer-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_tls-peer-identity.js","sourceRoot":"","sources":["../../src/engines/_tls-peer-identity.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAC/B,OAAO,EAAE,mBAAmB,EAAwB,MAAM,UAAU,CAAA;AAEpE,SAAS,QAAQ;IACf,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0DAA0D,CAAC,EACxF,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,WAA4B;IAC3E,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACnE,2FAA2F;QAC3F,wFAAwF;QACxF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,EAAE,CAAA;QACxF,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,wFAAwF;QACxF,OAAO,QAAQ,EAAE,CAAA;IACnB,CAAC;AACH,CAAC"}