@statuser/cli 0.0.0-stage → 0.1.1

package/dist/servers-config/export.js

@@ -0,0 +1,72 @@
+import { fieldsFor, isSecretHeader, MANAGED_PROTOCOLS, } from './fields.js';
+/**
+ * Pure: the `servers` section for a project. Every entry is built from an
+ * allowlist of the fields its protocol uses — a GET response also carries
+ * leftovers of a previous protocol, masks and the heartbeat token, and none
+ * of that belongs in a file people commit.
+ */
+export function exportServers(servers) {
+    const result = {
+        entries: [],
+        headerVariables: [],
+        withSecrets: [],
+        pausedCount: 0,
+        scenarioCount: 0,
+    };
+    for (const server of [...servers].sort((a, b) => a.id - b.id)) {
+        if (server.protocol === 'scenario') {
+            result.scenarioCount += 1;
+            continue;
+        }
+        if (!MANAGED_PROTOCOLS.includes(server.protocol)) {
+            continue;
+        }
+        const protocol = server.protocol;
+        if (server.status === 'paused')
+            result.pausedCount += 1;
+        const entry = {
+            id: server.id,
+            name: server.name,
+            protocol,
+        };
+        const source = server;
+        for (const field of fieldsFor(protocol)) {
+            const value = source[field];
+            if (value === null || value === undefined)
+                continue;
+            if (field === 'body' && value === '')
+                continue;
+            if (field === 'headers') {
+                if (!Array.isArray(value) || !value.length)
+                    continue;
+                entry.headers = value.map((header, index) => {
+                    if (isSecretHeader(header.key)) {
+                        const variable = headerVariable(server.id, header.key, index);
+                        result.headerVariables.push(variable);
+                        return { key: header.key, value: `$${variable}` };
+                    }
+                    // A literal value starting with `$` would read as a reference.
+                    const literal = header.value.startsWith('$')
+                        ? `$${header.value}`
+                        : header.value;
+                    return { key: header.key, value: literal };
+                });
+                continue;
+            }
+            entry[field] = value;
+        }
+        if ((protocol === 'http' || protocol === 'keyword'
+            ? server.http_auth_type !== 'none' && server.http_auth_type !== null
+            : false) ||
+            (protocol === 'llm' && server.llm_api_key_masked)) {
+            result.withSecrets.push({ id: server.id, name: server.name });
+        }
+        result.entries.push(entry);
+    }
+    return result;
+}
+function headerVariable(serverId, header, index) {
+    const name = header.toUpperCase().replace(/[^A-Z0-9]+/g, '_');
+    return `STATUSER_${serverId}_${index}_${name}`.replace(/_+$/, '');
+}
+//# sourceMappingURL=export.js.map

package/dist/servers-config/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/servers-config/export.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,cAAc,EACd,iBAAiB,GAElB,MAAM,aAAa,CAAC;AAYrB;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAAiB;IAC7C,MAAM,MAAM,GAAiB;QAC3B,OAAO,EAAE,EAAE;QACX,eAAe,EAAE,EAAE;QACnB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,CAAC;KACjB,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAA2B,CAAC,EAAE,CAAC;YACpE,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA2B,CAAC;QACpD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;QAExD,MAAM,KAAK,GAA4B;YACrC,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ;SACT,CAAC;QACF,MAAM,MAAM,GAAG,MAA4C,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YACpD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,EAAE;gBAAE,SAAS;YAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;oBAAE,SAAS;gBACrD,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,CACvB,CAAC,MAAsC,EAAE,KAAa,EAAE,EAAE;oBACxD,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC/B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;wBAC9D,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBACtC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,EAAE,CAAC;oBACpD,CAAC;oBACD,+DAA+D;oBAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;wBAC1C,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE;wBACpB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBACjB,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBAC7C,CAAC,CACF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;QACD,IACE,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS;YAC5C,CAAC,CAAC,MAAM,CAAC,cAAc,KAAK,MAAM,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI;YACpE,CAAC,CAAC,KAAK,CAAC;YACV,CAAC,QAAQ,KAAK,KAAK,IAAI,MAAM,CAAC,kBAAkB,CAAC,EACjD,CAAC;YACD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAa;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,YAAY,QAAQ,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/dist/servers-config/fields.js

@@ -0,0 +1,172 @@
+export const MANAGED_PROTOCOLS = [
+    'http',
+    'keyword',
+    'ping',
+    'tcp',
+    'dns',
+    'heartbeat',
+    'llm',
+];
+// Mirrors the backend (`servers.service.ts`): which settings a protocol
+// actually uses. A field outside this list is not exported, and a file that
+// sets it is rejected — the backend would keep it without effect or reset it.
+const SSL_DOMAIN = ['http', 'keyword', 'dns'];
+const CONFIRM_DELAY = [
+    'http',
+    'keyword',
+    'ping',
+    'tcp',
+    'llm',
+];
+const LATENCY = ['http', 'keyword', 'tcp', 'llm'];
+const HTTP_LIKE = ['http', 'keyword'];
+/** Readable settings the file manages, by protocol. */
+export function fieldsFor(protocol) {
+    const fields = ['description', 'check_interval'];
+    if (protocol !== 'heartbeat')
+        fields.push('host');
+    // DNS is checked from the backend through fixed resolvers: the server's
+    // timeout and regions are stored but change nothing.
+    if (protocol !== 'heartbeat' && protocol !== 'dns') {
+        fields.push('request_timeout', 'locations');
+    }
+    if (CONFIRM_DELAY.includes(protocol))
+        fields.push('incident_confirm_delay');
+    if (LATENCY.includes(protocol)) {
+        fields.push('is_latency_alert_enabled', 'latency_trigger_ms');
+    }
+    if (SSL_DOMAIN.includes(protocol)) {
+        fields.push('is_ssl_check', 'is_domain_check', 'is_blocklist_check');
+    }
+    if (HTTP_LIKE.includes(protocol)) {
+        fields.push('http_method', 'body', 'headers', 'http_auth_type', 'http_auth_username', 'is_follow_redirects', 'success_http_codes');
+    }
+    if (protocol === 'keyword')
+        fields.push('keyword', 'keyword_mode');
+    if (protocol === 'tcp')
+        fields.push('port');
+    if (protocol === 'dns')
+        fields.push('dns_record_types');
+    if (protocol === 'heartbeat')
+        fields.push('heartbeat_grace_interval');
+    if (protocol === 'llm')
+        fields.push('llm_provider', 'llm_model');
+    return fields;
+}
+/**
+ * Write-only settings: the API never returns them, so they are never
+ * exported, and a file that sets one sends it on every apply.
+ */
+export function secretFieldsFor(protocol) {
+    if (HTTP_LIKE.includes(protocol)) {
+        return ['http_auth_password', 'http_auth_token'];
+    }
+    if (protocol === 'llm')
+        return ['llm_api_key'];
+    return [];
+}
+const SET_FIELDS = new Set([
+    'locations',
+    'dns_record_types',
+    'success_http_codes',
+]);
+/**
+ * Comparable form of a value as the backend stores it: strings trimmed,
+ * an empty body equal to none, order-free lists sorted, success codes in
+ * lower case.
+ */
+export function normalize(field, value) {
+    if (field === 'body') {
+        return typeof value === 'string' ? value.trim() : '';
+    }
+    if (field === 'headers') {
+        return Array.isArray(value)
+            ? value.map((h) => ({
+                key: String(h.key).trim(),
+                value: String(h.value).trim(),
+            }))
+            : [];
+    }
+    if (SET_FIELDS.has(field) && Array.isArray(value)) {
+        const items = value.map((item) => String(item).trim());
+        return (field === 'success_http_codes'
+            ? items.map((item) => item.toLowerCase())
+            : items).sort();
+    }
+    if (typeof value === 'string') {
+        const trimmed = value.trim();
+        return field === 'description' && !trimmed ? null : trimmed;
+    }
+    return value ?? null;
+}
+export function sameValue(field, a, b) {
+    return (JSON.stringify(normalize(field, a)) === JSON.stringify(normalize(field, b)));
+}
+// Header names whose values usually carry credentials.
+// Wide on purpose: a value shown by mistake is a leak, a value hidden by
+// mistake is one `statuser api` call away. `key` covers X-Access-Key,
+// Ocp-Apim-Subscription-Key and the like.
+const SECRET_HEADER = /authorization|auth|cookie|token|secret|passw|key|session|signature|credential|private/i;
+export function isSecretHeader(name) {
+    return SECRET_HEADER.test(name);
+}
+/**
+ * The account-wide key the backend uses to reject a duplicate monitor
+ * (`ServersService.findDuplicateServer`). Two servers with equal keys
+ * cannot coexist, whatever their names and projects.
+ */
+export function duplicateKey(state) {
+    const protocol = state.protocol;
+    const str = (field) => String(normalize(field, state[field]) ?? '');
+    // JSON keeps the parts apart: with a plain separator `a|b` + `c` and
+    // `a` + `b|c` would collide.
+    if (protocol === 'heartbeat')
+        return JSON.stringify(['heartbeat', str('name')]);
+    if (protocol === 'llm') {
+        return JSON.stringify([
+            'llm',
+            str('host'),
+            str('llm_provider'),
+            str('llm_model'),
+        ]);
+    }
+    const parts = [protocol, str('host')];
+    if (protocol === 'tcp')
+        parts.push(str('port'));
+    if (protocol === 'http' || protocol === 'keyword') {
+        parts.push(str('http_method'), str('body'));
+    }
+    if (protocol === 'keyword')
+        parts.push(str('keyword'), str('keyword_mode'));
+    return JSON.stringify(parts);
+}
+/**
+ * Whether the API would take `existing` for a duplicate of `next`
+ * (`findDuplicateServer`). Directed: a null port, method, keyword or mode
+ * of `next` is left out of the search, so it matches any value there.
+ * `duplicateKey` stays the test for "the identity changed".
+ */
+export function isDuplicateOf(next, existing) {
+    const protocol = next.protocol;
+    if (existing.protocol !== protocol)
+        return false;
+    if (protocol === 'heartbeat' || protocol === 'llm') {
+        return duplicateKey(next) === duplicateKey(existing);
+    }
+    const value = (state, field) => normalize(field, state[field]) ?? null;
+    const same = (field) => value(next, field) === value(existing, field);
+    const sameIfSet = (field) => value(next, field) === null || same(field);
+    if (!same('host'))
+        return false;
+    if (protocol === 'tcp' && !sameIfSet('port'))
+        return false;
+    if (protocol === 'http' || protocol === 'keyword') {
+        if (!sameIfSet('http_method') || !same('body'))
+            return false;
+    }
+    if (protocol === 'keyword') {
+        return sameIfSet('keyword') && sameIfSet('keyword_mode');
+    }
+    return true;
+}
+//# sourceMappingURL=fields.js.map

package/dist/servers-config/fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fields.js","sourceRoot":"","sources":["../../src/servers-config/fields.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,MAAM;IACN,SAAS;IACT,MAAM;IACN,KAAK;IACL,KAAK;IACL,WAAW;IACX,KAAK;CACN,CAAC;AAEF,wEAAwE;AACxE,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,UAAU,GAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AACjE,MAAM,aAAa,GAAsB;IACvC,MAAM;IACN,SAAS;IACT,MAAM;IACN,KAAK;IACL,KAAK;CACN,CAAC;AACF,MAAM,OAAO,GAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACrE,MAAM,SAAS,GAAsB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAEzD,uDAAuD;AACvD,MAAM,UAAU,SAAS,CAAC,QAAyB;IACjD,MAAM,MAAM,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACjD,IAAI,QAAQ,KAAK,WAAW;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,wEAAwE;IACxE,qDAAqD;IACrD,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,oBAAoB,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CACT,aAAa,EACb,MAAM,EACN,SAAS,EACT,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,CACrB,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,WAAW;QAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACtE,IAAI,QAAQ,KAAK,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAyB;IACvD,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,WAAW;IACX,kBAAkB;IAClB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,KAAc;IACrD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAiC,EAAE,EAAE,CAAC,CAAC;gBAChD,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;gBACzB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;aAC9B,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,CACL,KAAK,KAAK,oBAAoB;YAC5B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACzC,CAAC,CAAC,KAAK,CACV,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAK,KAAK,aAAa,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,CAAU,EAAE,CAAU;IAC7D,OAAO,CACL,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,yEAAyE;AACzE,sEAAsE;AACtE,0CAA0C;AAC1C,MAAM,aAAa,GACjB,wFAAwF,CAAC;AAE3F,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAA8B;IACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,qEAAqE;IACrE,6BAA6B;IAC7B,IAAI,QAAQ,KAAK,WAAW;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK;YACL,GAAG,CAAC,MAAM,CAAC;YACX,GAAG,CAAC,cAAc,CAAC;YACnB,GAAG,CAAC,WAAW,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAA6B,EAC7B,QAAiC;IAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAkB,CAAC;IACzC,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACnD,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,KAA8B,EAAE,KAAa,EAAE,EAAE,CAC9D,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAClC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,QAAQ,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/servers-config/forbidden-host.js

@@ -0,0 +1,75 @@
+import { isIP } from 'node:net';
+// A copy of the backend's host gate (`assertServerHostPublic`): `localhost`
+// and `*.localhost`, and the address literals of `isForbiddenIp`
+// (src/utils/assert-public-webhook-url.ts) are refused with
+// `server_host_not_allowed`. Other names are not resolved here — a name
+// resolves differently from the user's network than from ours, and a refusal
+// we cannot be sure of would block a valid apply.
+function ipv4ToInt(ip) {
+    const parts = ip.split('.').map(Number);
+    if (parts.length !== 4 || parts.some((n) => !(n >= 0 && n <= 255))) {
+        return null;
+    }
+    return (((parts[0] << 24) >>> 0) + (parts[1] << 16) + (parts[2] << 8) + parts[3]);
+}
+function inCidrV4(ip, base, prefix) {
+    const ipInt = ipv4ToInt(ip);
+    const baseInt = ipv4ToInt(base);
+    if (ipInt === null || baseInt === null)
+        return false;
+    const mask = prefix === 0 ? 0 : (0xffffffff << (32 - prefix)) >>> 0;
+    return (ipInt & mask) === (baseInt & mask);
+}
+const FORBIDDEN_V4 = [
+    ['0.0.0.0', 8],
+    ['127.0.0.0', 8],
+    ['10.0.0.0', 8],
+    ['172.16.0.0', 12],
+    ['192.168.0.0', 16],
+    ['100.64.0.0', 10],
+    ['169.254.0.0', 16],
+];
+function isForbiddenIPv4(ip) {
+    return FORBIDDEN_V4.some(([base, prefix]) => inCidrV4(ip, base, prefix));
+}
+function isForbiddenIPv6(ip) {
+    const s = ip.toLowerCase();
+    const dotted = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(s);
+    if (dotted)
+        return isForbiddenIPv4(dotted[1]);
+    const hex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(s);
+    if (hex) {
+        const high = parseInt(hex[1], 16);
+        const low = parseInt(hex[2], 16);
+        return isForbiddenIPv4([high >> 8, high & 0xff, low >> 8, low & 0xff].join('.'));
+    }
+    return (s === '::1' ||
+        s === '::' ||
+        s.startsWith('fc') ||
+        s.startsWith('fd') ||
+        /^fe[89ab]/.test(s));
+}
+/** True when the backend surely refuses the host as internal. */
+export function isForbiddenHost(rawHost) {
+    const trimmed = rawHost.trim();
+    const withScheme = /^[a-z][a-z\d+.-]*:\/\//i.test(trimmed)
+        ? trimmed
+        : `https://${trimmed}`;
+    let host;
+    try {
+        host = new URL(withScheme).hostname.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+    host = host.replace(/^\[/, '').replace(/\]$/, '');
+    if (host === 'localhost' || host.endsWith('.localhost'))
+        return true;
+    const version = isIP(host);
+    if (version === 4)
+        return isForbiddenIPv4(host);
+    if (version === 6)
+        return isForbiddenIPv6(host);
+    return false;
+}
+//# sourceMappingURL=forbidden-host.js.map

package/dist/servers-config/forbidden-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forbidden-host.js","sourceRoot":"","sources":["../../src/servers-config/forbidden-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,4EAA4E;AAC5E,iEAAiE;AACjE,4DAA4D;AAC5D,wEAAwE;AACxE,6EAA6E;AAC7E,kDAAkD;AAElD,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CACL,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU,EAAE,IAAY,EAAE,MAAc;IACxD,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,YAAY,GAA4B;IAC5C,CAAC,SAAS,EAAE,CAAC,CAAC;IACd,CAAC,WAAW,EAAE,CAAC,CAAC;IAChB,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,aAAa,EAAE,EAAE,CAAC;IACnB,CAAC,YAAY,EAAE,EAAE,CAAC;IAClB,CAAC,aAAa,EAAE,EAAE,CAAC;CACpB,CAAC;AAEF,SAAS,eAAe,CAAC,EAAU;IACjC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,+CAA+C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,MAAM;QAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QAClC,OAAO,eAAe,CACpB,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,CACL,CAAC,KAAK,KAAK;QACX,CAAC,KAAK,IAAI;QACV,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAClB,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAClB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QACxD,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC;IACzB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/servers-config/host-pattern.js

@@ -0,0 +1,6 @@
+// Copy of `urlPattern` in the backend (`utils/server-host-validators.ts`):
+// the host of every protocol except heartbeat is checked against it. Keep
+// the two equal — a stricter copy refuses valid files, a looser one lets
+// apply stop half-way on the backend's 400.
+export const HOST_PATTERN = /^(https?:\/\/)?((([a-zA-Z0-9\u00a1-\uffff-]+|xn--[a-zA-Z0-9-]+)\.)+(xn--[a-zA-Z0-9-]+|[a-zA-Z\u00a1-\uffff]{2,})|((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?))|(\[(?:([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?)(\.|$)){3}|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?)(\.|$)){3}))|([0-9a-fA-F]{1,4}:){1,5}:((25[0-5]|(2[0-4][0-9]|[01]?[0-9][0-9]?)(\.|$)){3}))\]))(?::(6553[0-5]|655[0-2]\d|65[0-4]\d{2}|6[0-4]\d{3}|[1-5]\d{4}|[1-9]\d{0,3}))?(\/[^\s#?]*)?(\?[^\s#]*)?(#[^\s]*)?$/;
+//# sourceMappingURL=host-pattern.js.map

package/dist/servers-config/host-pattern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-pattern.js","sourceRoot":"","sources":["../../src/servers-config/host-pattern.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,4CAA4C;AAC5C,MAAM,CAAC,MAAM,YAAY,GACvB,giCAAgiC,CAAC"}

package/dist/servers-config/parse.js

@@ -0,0 +1,260 @@
+import { t } from '../i18n.js';
+import { HOST_PATTERN } from './host-pattern.js';
+import { textLength } from '../text-length.js';
+import { resolveEnvValue } from '../scenarios/config.js';
+import { fieldsFor, MANAGED_PROTOCOLS, secretFieldsFor, } from './fields.js';
+const LOCATIONS = ['msk-1', 'spb-1', 'ala-1', 'nyc-1', 'ams-1'];
+const DNS_TYPES = [
+    'A',
+    'AAAA',
+    'CNAME',
+    'MX',
+    'TXT',
+    'NS',
+    'SOA',
+    'PTR',
+    'SRV',
+];
+const ENUMS = {
+    http_method: ['head', 'get', 'options', 'post', 'put', 'patch'],
+    keyword_mode: ['present', 'absent'],
+    http_auth_type: ['none', 'basic', 'bearer'],
+    llm_provider: ['openai_compatible', 'anthropic_compatible'],
+};
+// API bounds (`create-server.dto.ts`); checked here so a value the API
+// rejects never stops apply after earlier writes.
+const YEAR = 31_536_000;
+const RANGES = {
+    check_interval: [60, 3600],
+    request_timeout: [1, 60],
+    incident_confirm_delay: [0, 3600],
+    latency_trigger_ms: [50, 60_000],
+    heartbeat_grace_interval: [0, YEAR],
+    port: [1, 65_535],
+};
+const BOOLEANS = [
+    'is_latency_alert_enabled',
+    'is_ssl_check',
+    'is_domain_check',
+    'is_blocklist_check',
+    'is_follow_redirects',
+];
+// String fields and their `MaxLength`; `null` — no limit.
+const STRINGS = {
+    host: 300,
+    description: 500,
+    body: null,
+    keyword: 256,
+    http_auth_username: 256,
+    llm_model: 128,
+};
+const SECRET_MAX = {
+    http_auth_password: 4096,
+    http_auth_token: 4096,
+    llm_api_key: 512,
+};
+const NAME_MAX = 150;
+// What `sanitizeHeaders` keeps: an RFC 7230 token as the name and no
+// control characters in the value. Anything else the backend drops silently,
+// so a file with it would wipe the server's headers on apply.
+const HEADER_NAME = /^[!#$%&'*+.^_`|~0-9a-zA-Z-]+$/;
+// eslint-disable-next-line no-control-regex
+const HEADER_CONTROL = /[\x00-\x08\x0a-\x1f\x7f]/;
+// HTTP credentials allow no control characters at all (`server-http-auth.ts`).
+// eslint-disable-next-line no-control-regex
+const AUTH_CONTROL = /[\x00-\x1f\x7f]/;
+// `SUCCESS_HTTP_CODE_PATTERN` and its list size in the backend.
+const SUCCESS_CODE = /^[1-5](xx|\d\d)$/;
+const SUCCESS_CODES_MAX = 20;
+/**
+ * Validates the `servers` section. Everything that can be checked without
+ * the API is checked here, before the first write: unknown or misplaced
+ * fields, types, ranges, lengths, header names, missing `$VAR`s.
+ */
+export function parseServersSection(raw, env, fail, 
+// A file finds an entry without an id by its name on every run; a single
+// `servers add` creates and is done, so the name may be left out there.
+options = {}) {
+    if (!Array.isArray(raw))
+        return fail(`servers: ${t.cfgArray}`);
+    const result = [];
+    for (const [index, item] of raw.entries()) {
+        const at = `servers[${index}]`;
+        if (typeof item !== 'object' || item === null || Array.isArray(item)) {
+            return fail(`${at}: ${t.cfgObject}`);
+        }
+        const entry = item;
+        const protocol = entry.protocol;
+        if (!MANAGED_PROTOCOLS.includes(protocol)) {
+            return fail(`${at}.protocol: ${t.cfgProtocol(MANAGED_PROTOCOLS.join(', '))}`);
+        }
+        if (entry.id !== undefined &&
+            (!Number.isInteger(entry.id) || entry.id <= 0)) {
+            return fail(`${at}.id: ${t.cfgPositiveInt}`);
+        }
+        const name = typeof entry.name === 'string' && entry.name.trim()
+            ? entry.name.trim()
+            : null;
+        if (entry.name !== undefined && entry.name !== null && name === null) {
+            return fail(`${at}.name: ${t.cfgNonEmptyString}`);
+        }
+        if (name !== null && textLength(name) > NAME_MAX) {
+            return fail(`${at}.name: ${t.cfgMaxLength(NAME_MAX)}`);
+        }
+        if (name === null && entry.id === undefined && !options.allowUnnamed) {
+            return fail(`${at}: ${t.cfgNameOrId}`);
+        }
+        const readable = new Set(fieldsFor(protocol));
+        const secret = new Set(secretFieldsFor(protocol));
+        const fields = {};
+        const secrets = {};
+        for (const [key, value] of Object.entries(entry)) {
+            if (key === 'id' || key === 'name' || key === 'protocol')
+                continue;
+            if (secret.has(key)) {
+                // An empty Basic password is legal; tokens and keys are not.
+                if (typeof value !== 'string' ||
+                    (!value && key !== 'http_auth_password')) {
+                    return fail(`${at}.${key}: ${t.cfgString}`);
+                }
+                let resolved = resolveEnvValue(value, `${at}.${key}`, env);
+                if (key === 'http_auth_token' || key === 'llm_api_key') {
+                    // The backend trims a token or key and refuses an empty one: a
+                    // blank LLM key would silently leave the check without the model.
+                    resolved = resolved.trim();
+                    if (!resolved)
+                        return fail(`${at}.${key}: ${t.cfgString}`);
+                }
+                if (key !== 'llm_api_key' && AUTH_CONTROL.test(resolved)) {
+                    return fail(`${at}.${key}: ${t.cfgControlChars}`);
+                }
+                // HTTP credentials are measured in UTF-16 units (`resolveHttpAuth`),
+                // the LLM key by `@MaxLength`.
+                const length = key === 'llm_api_key' ? textLength(resolved) : resolved.length;
+                if (length > SECRET_MAX[key]) {
+                    return fail(`${at}.${key}: ${t.cfgMaxLength(SECRET_MAX[key])}`);
+                }
+                secrets[key] = resolved;
+                continue;
+            }
+            if (!readable.has(key)) {
+                return fail(`${at}.${key}: ${t.cfgNotUsedBy(protocol)}`);
+            }
+            const problem = checkField(key, value, protocol);
+            if (problem)
+                return fail(`${at}.${key}: ${problem}`);
+            if (key === 'headers') {
+                const headers = value.map((h) => ({
+                    key: h.key.trim(),
+                    value: resolveEnvValue(h.value, `${at}.headers`, env).trim(),
+                }));
+                for (const header of headers) {
+                    if (!HEADER_NAME.test(header.key)) {
+                        return fail(`${at}.headers: ${t.cfgHeaderName(header.key)}`);
+                    }
+                    if (HEADER_CONTROL.test(header.value)) {
+                        return fail(`${at}.headers: ${t.cfgHeaderValue(header.key)}`);
+                    }
+                }
+                fields.headers = headers;
+                continue;
+            }
+            if (key === 'success_http_codes') {
+                // Stored as the API stores them, so the plan check sees `2xx`.
+                fields[key] = value.map((v) => v.trim().toLowerCase());
+                continue;
+            }
+            fields[key] = value;
+        }
+        result.push({
+            at,
+            id: entry.id,
+            name,
+            nameGiven: entry.name !== undefined,
+            protocol,
+            fields,
+            secrets,
+        });
+    }
+    return result;
+}
+function checkField(key, value, protocol) {
+    const range = RANGES[key];
+    if (range) {
+        const max = key === 'check_interval' && protocol === 'heartbeat' ? YEAR : range[1];
+        return Number.isInteger(value) &&
+            value >= range[0] &&
+            value <= max
+            ? null
+            : t.cfgRange(range[0], max);
+    }
+    if (BOOLEANS.includes(key)) {
+        return typeof value === 'boolean' ? null : t.cfgBoolean;
+    }
+    if (key in STRINGS) {
+        if (typeof value !== 'string')
+            return t.cfgString;
+        if (key === 'host' && !HOST_PATTERN.test(value.trim())) {
+            return t.cfgHostInvalid;
+        }
+        // The API trims these and refuses an empty result.
+        if ((key === 'keyword' || key === 'llm_model') && !value.trim()) {
+            return t.cfgString;
+        }
+        if (key === 'http_auth_username') {
+            // RFC 7617: the colon separates username and password.
+            if (value.includes(':'))
+                return t.cfgUsernameColon;
+            if (AUTH_CONTROL.test(value))
+                return t.cfgControlChars;
+        }
+        const max = STRINGS[key];
+        // The login goes to the API as written, and its length is checked
+        // there untrimmed.
+        // The login is also checked trimmed and in UTF-16 units when the
+        // authorization is resolved (`resolveHttpAuth`).
+        const tooLong = key === 'http_auth_username'
+            ? textLength(value) > max || value.trim().length > max
+            : textLength(value.trim()) > max;
+        return typeof max === 'number' && tooLong ? t.cfgMaxLength(max) : null;
+    }
+    if (ENUMS[key]) {
+        return ENUMS[key].includes(value)
+            ? null
+            : t.cfgOneOf(ENUMS[key].join(', '));
+    }
+    if (key === 'locations') {
+        // An empty list leaves the server without agents: it would never be checked.
+        return Array.isArray(value) &&
+            value.length > 0 &&
+            value.every((v) => LOCATIONS.includes(v))
+            ? null
+            : t.cfgListOf(LOCATIONS.join(', '));
+    }
+    if (key === 'dns_record_types') {
+        return Array.isArray(value) &&
+            value.length > 0 &&
+            value.every((v) => DNS_TYPES.includes(v))
+            ? null
+            : t.cfgListOf(DNS_TYPES.join(', '));
+    }
+    if (key === 'success_http_codes') {
+        return Array.isArray(value) &&
+            value.length >= 1 &&
+            value.length <= SUCCESS_CODES_MAX &&
+            value.every((v) => typeof v === 'string' && SUCCESS_CODE.test(v.trim().toLowerCase()))
+            ? null
+            : t.cfgSuccessCodes(SUCCESS_CODES_MAX);
+    }
+    if (key === 'headers') {
+        return Array.isArray(value) &&
+            value.every((h) => typeof h === 'object' &&
+                h !== null &&
+                typeof h.key === 'string' &&
+                typeof h.value === 'string')
+            ? null
+            : t.cfgHeaders;
+    }
+    return null;
+}
+//# sourceMappingURL=parse.js.map

package/dist/servers-config/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../src/servers-config/parse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,eAAe,GAEhB,MAAM,aAAa,CAAC;AAgBrB,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAChE,MAAM,SAAS,GAAG;IAChB,GAAG;IACH,MAAM;IACN,OAAO;IACP,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;CACN,CAAC;AACF,MAAM,KAAK,GAA6B;IACtC,WAAW,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC;IAC/D,YAAY,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IACnC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;IAC3C,YAAY,EAAE,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;CAC5D,CAAC;AACF,uEAAuE;AACvE,kDAAkD;AAClD,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,MAAM,GAAqC;IAC/C,cAAc,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC;IAC1B,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IACxB,sBAAsB,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;IACjC,kBAAkB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AACF,MAAM,QAAQ,GAAG;IACf,0BAA0B;IAC1B,cAAc;IACd,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AACF,0DAA0D;AAC1D,MAAM,OAAO,GAAkC;IAC7C,IAAI,EAAE,GAAG;IACT,WAAW,EAAE,GAAG;IAChB,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,GAAG;IACZ,kBAAkB,EAAE,GAAG;IACvB,SAAS,EAAE,GAAG;CACf,CAAC;AACF,MAAM,UAAU,GAA2B;IACzC,kBAAkB,EAAE,IAAI;IACxB,eAAe,EAAE,IAAI;IACrB,WAAW,EAAE,GAAG;CACjB,CAAC;AACF,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,qEAAqE;AACrE,6EAA6E;AAC7E,8DAA8D;AAC9D,MAAM,WAAW,GAAG,+BAA+B,CAAC;AACpD,4CAA4C;AAC5C,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAClD,+EAA+E;AAC/E,4CAA4C;AAC5C,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,gEAAgE;AAChE,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAY,EACZ,GAAsB,EACtB,IAAgC;AAChC,yEAAyE;AACzE,wEAAwE;AACxE,UAAsC,EAAE;IAExC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,WAAW,KAAK,GAAG,CAAC;QAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,GAAG,IAA+B,CAAC;QAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAA2B,CAAC;QACnD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,CACT,GAAG,EAAE,cAAc,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,EAAE,KAAK,SAAS;YACtB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAK,KAAK,CAAC,EAAa,IAAI,CAAC,CAAC,EAC1D,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,GACR,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;YACjD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;YACnB,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,UAAU;gBAAE,SAAS;YACnE,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,6DAA6D;gBAC7D,IACE,OAAO,KAAK,KAAK,QAAQ;oBACzB,CAAC,CAAC,KAAK,IAAI,GAAG,KAAK,oBAAoB,CAAC,EACxC,CAAC;oBACD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC9C,CAAC;gBACD,IAAI,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC3D,IAAI,GAAG,KAAK,iBAAiB,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;oBACvD,+DAA+D;oBAC/D,kEAAkE;oBAClE,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC3B,IAAI,CAAC,QAAQ;wBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,GAAG,KAAK,aAAa,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;gBACpD,CAAC;gBACD,qEAAqE;gBACrE,+BAA+B;gBAC/B,MAAM,MAAM,GACV,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjE,IAAI,MAAM,GAAG,UAAU,CAAC,GAAG,CAAE,EAAE,CAAC;oBAC9B,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACjD,IAAI,OAAO;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;YACrD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAI,KAA+C,CAAC,GAAG,CAClE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACN,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;oBACjB,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;iBAC7D,CAAC,CACH,CAAC;gBACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;wBAClC,OAAO,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC/D,CAAC;oBACD,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;wBACtC,OAAO,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;gBACjC,+DAA+D;gBAC/D,MAAM,CAAC,GAAG,CAAC,GAAI,KAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;gBACrE,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,EAAE;YACF,EAAE,EAAE,KAAK,CAAC,EAAwB;YAClC,IAAI;YACJ,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS;YACnC,QAAQ;YACR,MAAM;YACN,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CACjB,GAAW,EACX,KAAc,EACd,QAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,GAAG,GACP,GAAG,KAAK,gBAAgB,IAAI,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,KAAgB,IAAI,KAAK,CAAC,CAAC,CAAC;YAC5B,KAAgB,IAAI,GAAG;YACxB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;QACnB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,SAAS,CAAC;QAClD,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACvD,OAAO,CAAC,CAAC,cAAc,CAAC;QAC1B,CAAC;QACD,mDAAmD;QACnD,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChE,OAAO,CAAC,CAAC,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;YACjC,uDAAuD;YACvD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC,gBAAgB,CAAC;YACnD,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC,eAAe,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,kEAAkE;QAClE,mBAAmB;QACnB,iEAAiE;QACjE,iDAAiD;QACjD,MAAM,OAAO,GACX,GAAG,KAAK,oBAAoB;YAC1B,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,GAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,GAAI;YACxD,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,GAAI,CAAC;QACtC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACf,OAAO,KAAK,CAAC,GAAG,CAAE,CAAC,QAAQ,CAAC,KAAe,CAAC;YAC1C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,6EAA6E;QAC7E,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACzC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,KAAK,CAAC,MAAM,GAAG,CAAC;YAChB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACzC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,KAAK,CAAC,MAAM,IAAI,iBAAiB;YACjC,KAAK,CAAC,KAAK,CACT,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CACrE;YACD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,KAAK,CAAC,KAAK,CACT,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,KAAK,QAAQ;gBACrB,CAAC,KAAK,IAAI;gBACV,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;gBACzB,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAC9B;YACD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}