@zincapp/znvault-cli 4.24.2 → 4.24.4

package/dist/commands/mysql/run.js

@@ -11,26 +11,37 @@
  *     the lifetime of the run. The inode is kept alive solely by the inherited
  *     fd; closing it (cleanup) reclaims the bytes. This removes the old
  *     "spawn-then-unlink" race: spawn() returns when the child is forked but
- *     BEFORE it exec's mysql and reads --defaults-extra-file, so unlinking after
+ *     BEFORE it exec's mysql and reads --defaults-file, so unlinking after
  *     spawn could win the race and crash mysql with
  *     "Failed to open required defaults file".
- *   - `--defaults-extra-file=/dev/fd/<fd>` is ALWAYS the first argument (mysql
- *     rejects it in any other position).
+ *   - `--defaults-file=/dev/fd/<fd>` is ALWAYS the first argument (clients
+ *     reject it in any other position). A preflight capability probe adds
+ *     `--no-login-paths` for Oracle MySQL; MariaDB omits that unsupported flag.
+ *     This is load-bearing: `--defaults-extra-file` would still read ambient
+ *     option files afterwards, allowing ~/.my.cnf to override the leased
+ *     host/user/password. Oracle's `--no-login-paths` also excludes
+ *     .mylogin.cnf; MariaDB has no login-path facility.
+ *   - Non-interactive exec always adds `--binary-mode`. Both Oracle MySQL and
+ *     MariaDB then treat `\\!`/`system` as SQL input instead of executing local
+ *     shell commands, while retaining DELIMITER support.
  *   - The child INHERITS the fd at the SAME number N, so `/dev/fd/N` resolves to
  *     the same inode inside the child (see buildChildStdio).
- *   - `MYSQL_HISTFILE=/dev/null` is injected into the child env so executed
- *     SQL is not persisted to ~/.mysql_history (spec F4).
+ *   - The mysql child receives a minimal, non-secret environment allowlist.
+ *     Vault authentication variables and unrelated process secrets are never
+ *     inherited. `MYSQL_HISTFILE=/dev/null` prevents SQL history persistence
+ *     (spec F4).
  *   - No --host / --port flags are added; connection coordinates come from the
  *     cnf written by B2 (spec F2 — no client-side override). Caller passthrough
- *     is scrubbed of any host/port/defaults/password override flag, since mysql
- *     CLI flags override option-file values (last-wins) and would otherwise
- *     re-point the leased credential at an arbitrary server (F2 bypass).
+ *     is restricted to a fixed allowlist of argument-free presentation flags.
+ *     This prevents current and future mysql options from overriding the
+ *     target, credentials, input fence or printing the defaults file.
  *   - This module never re-opens the cnf path itself; mysql reads it via the
  *     inherited fd. The parent's own copy of the fd is released by cleanup()
  *     once the child has exited (spec F3 hygiene).
  */
 import * as fs from 'node:fs';
 import * as path from 'node:path';
+import { spawnSync } from 'node:child_process';
 // ─────────────────────────────────────────────────────────────────────────────
 // PATH resolution
 // ─────────────────────────────────────────────────────────────────────────────
@@ -64,8 +75,64 @@ export function assertMysqlOnPath() {
         'and ensure it is on your PATH.');
 }
 // ─────────────────────────────────────────────────────────────────────────────
-// Passthrough flag allow/deny (spec F2 — no client-side connection override)
+// Passthrough flag allowlist (spec F2 — no client-side connection override)
 // ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Fixed, argument-free mysql options that cannot select a target/credential,
+ * execute alternate input, run local commands, write files, or print defaults.
+ * Unknown options are rejected even when they appear harmless: mysql/mariadb's
+ * my_getopt modifiers and abbreviations are extensible and denylisting them has
+ * repeatedly proven unsafe.
+ */
+const ALLOWED_PASSTHROUGH_LONG_FLAGS = new Set([
+    '--auto-rehash',
+    '--auto-vertical-output',
+    '--batch',
+    '--binary-as-hex',
+    '--column-names',
+    '--column-type-info',
+    '--comments',
+    '--compress',
+    '--force',
+    '--html',
+    '--ignore-spaces',
+    '--line-numbers',
+    '--no-auto-rehash',
+    '--one-database',
+    '--quick',
+    '--raw',
+    '--reconnect',
+    '--safe-updates',
+    '--show-warnings',
+    '--silent',
+    '--skip-column-names',
+    '--skip-line-numbers',
+    '--table',
+    '--unbuffered',
+    '--vertical',
+    '--verbose',
+    '--wait',
+    '--xml',
+]);
+/** Argument-free short equivalents of the allowed long flags above. */
+const ALLOWED_PASSTHROUGH_SHORT_FLAGS = new Set([
+    'A', 'B', 'b', 'C', 'c', 'E', 'f', 'H', 'i', 'L', 'N', 'n',
+    'o', 'q', 'r', 's', 't', 'v', 'w', 'X',
+]);
+function isAllowedPassthroughToken(token) {
+    if (token.startsWith('--')) {
+        // Every allowlisted long flag is argument-free. Reject = forms even for an
+        // allowed head so a boolean value cannot invert or reinterpret it.
+        return !token.includes('=') && ALLOWED_PASSTHROUGH_LONG_FLAGS.has(token);
+    }
+    if (!/^-[^-][A-Za-z]*$/.test(token))
+        return false;
+    for (let index = 1; index < token.length; index++) {
+        if (!ALLOWED_PASSTHROUGH_SHORT_FLAGS.has(token[index]))
+            return false;
+    }
+    return true;
+}
 /**
  * Connection/credential/defaults flags that a caller MUST NOT be able to inject
  * via `-- <passthrough>`.
@@ -90,36 +157,291 @@ const FORBIDDEN_PASSTHROUGH_FLAGS = new Set([
     '--defaults-extra-file',
     '--defaults-file',
     '--login-path',
+    '--no-login-paths',
     '--no-defaults',
+    // Alternate target/user selectors and transports.
+    '--user',
+    '-u',
+    '--socket',
+    '-S',
+    '--protocol',
+    '--dns-srv-name',
+    '--database',
+    '-D',
     // Password — must come from the leased cnf only, never from argv.
     '--password',
     '-p',
 ]);
 /**
- * Reject any passthrough token that is (or starts with `=`-form of) a forbidden
- * connection/credential/defaults override flag.
+ * Flags which could disable or reinterpret the non-interactive input fence.
+ * `--binary-mode` is server-selected by runMysql for exec mode; callers may
+ * neither negate it nor re-enable client commands / supply alternate argv SQL.
+ */
+const FORBIDDEN_INPUT_CONTROL_FLAGS = new Set([
+    '--binary-mode',
+    '--commands',
+    '--named-commands',
+    '-G',
+    '--execute',
+    '-e',
+    '--init-command',
+    '--init-command-add',
+]);
+/** Meta options that can expose credentials read from the inherited cnf. */
+const FORBIDDEN_SECRET_OUTPUT_FLAGS = new Set([
+    '--print-defaults',
+]);
+const MYSQL_LONG_OPTION_MODIFIERS = [
+    'autoset',
+    'loose',
+    'enable',
+    'disable',
+    'skip',
+    'maximum',
+];
+const MAX_LONG_OPTION_MODIFIER_DEPTH = 8;
+function canonicalLongFlag(flag) {
+    // my_getopt accepts `_` as `-` in long options, so the filter must do the
+    // same or `--defaults_file`, `--login_path`, etc. bypass their dashed forms.
+    let canonical = flag.replaceAll('_', '-');
+    // my_getopt composes these modifiers and accepts abbreviations for every
+    // segment. For example, all of these can negate our earlier --binary-mode:
+    //   --enable-skip-binary-mode
+    //   --loose-enable-skip-binary-mode
+    //   --loo-ena-ski-bin
+    //   --loose-maximum-skip-binary-mode
+    // MariaDB additionally composes --autoset-*; Oracle rejects it, but the CLI
+    // supports both families and therefore enforces the union fail-closed.
+    // Strip the chain iteratively so the final security-sensitive option is
+    // always checked. Bound the loop and fail closed instead of allowing an
+    // attacker-controlled modifier chain to escape canonicalisation.
+    for (let depth = 0; canonical.startsWith('--'); depth++) {
+        const body = canonical.slice(2);
+        const separator = body.indexOf('-');
+        if (separator <= 0)
+            break;
+        const segment = body.slice(0, separator);
+        const modifier = MYSQL_LONG_OPTION_MODIFIERS.find(candidate => candidate.startsWith(segment));
+        if (modifier === undefined)
+            break;
+        if (depth >= MAX_LONG_OPTION_MODIFIER_DEPTH) {
+            throw new Error(`Passthrough flag '${flag}' is not allowed — mysql option modifier ` +
+                'chain exceeds the safe canonicalisation limit.');
+        }
+        canonical = `--${body.slice(separator + 1)}`;
+    }
+    return canonical;
+}
+/**
+ * mysql accepts unambiguous long-option abbreviations (`--hos` for `--host`).
+ * Reject both the full forbidden spelling and every prefix mysql could resolve
+ * to it. Longer unrelated options such as `--hostgroup` remain unaffected.
+ */
+function matchesForbiddenLongFlag(flag, forbidden) {
+    if (!flag.startsWith('--') || flag.length <= 2)
+        return false;
+    for (const candidate of forbidden) {
+        if (candidate.startsWith('--') && candidate.startsWith(flag))
+            return true;
+    }
+    return false;
+}
+/**
+ * Apply the forbidden-option matcher to every segment suffix of a long option.
+ *
+ * This is the fail-closed backstop for current or future my_getopt modifiers:
+ * even if a client learns an unknown `--foo-` wrapper, `--foo-bin` exposes the
+ * `--bin` suffix and `--foo-skip-binary-mode` exposes `--binary-mode`. The
+ * known modifier canonicaliser remains useful for precise diagnostics and its
+ * explicit depth bound, but security does not depend on our modifier list being
+ * eternally complete.
+ */
+function hasForbiddenLongFlagSuffix(flag, forbidden) {
+    const normalized = flag.replaceAll('_', '-');
+    if (!normalized.startsWith('--'))
+        return false;
+    const segments = normalized.slice(2).split('-').filter(Boolean);
+    for (let index = 0; index < segments.length; index++) {
+        const suffix = `--${segments.slice(index).join('-')}`;
+        if (matchesForbiddenLongFlag(suffix, forbidden))
+            return true;
+    }
+    return false;
+}
+const FORBIDDEN_CONNECTION_SHORT_FLAGS = new Set([
+    'h', // host
+    'P', // port
+    'u', // user
+    'S', // socket
+    'D', // database
+    'p', // password
+]);
+const FORBIDDEN_INPUT_SHORT_FLAGS = new Set([
+    'e', // execute
+    'G', // named-commands
+]);
+/**
+ * Find a forbidden option anywhere in a mysql short-option cluster.
+ *
+ * mysql accepts clusters and attached arguments, so looking only at token[1]
+ * is unsafe: `-vh127.0.0.1`, `-vP3307`, `-vuother` and `-vppassword`
+ * all place a security-sensitive option after an innocuous `-v`. All currently
+ * supported innocuous mysql short options are argument-less; every short
+ * option that can select a target, credential or alternate SQL input is in one
+ * of the sets above. Scanning the complete token therefore handles both
+ * clusters and attached arguments without changing benign clusters such as
+ * `-vvv`, `-BNrs` or `-fvt`.
+ */
+function findForbiddenShortFlag(token) {
+    if (!/^-[^-]/.test(token))
+        return undefined;
+    for (const letter of token.slice(1)) {
+        if (FORBIDDEN_CONNECTION_SHORT_FLAGS.has(letter)) {
+            return { flag: `-${letter}`, kind: 'connection' };
+        }
+        if (FORBIDDEN_INPUT_SHORT_FLAGS.has(letter)) {
+            return { flag: `-${letter}`, kind: 'input' };
+        }
+    }
+    return undefined;
+}
+/**
+ * Accept only the fixed allowlist of argument-free presentation flags.
+ * Forbidden-option recognition below exists for actionable diagnostics; the
+ * final generic rejection is the security boundary for unknown future flags.
  *
  * Recognised forms for a forbidden flag `--host`:
  *   - exact:   `--host`        (its value is the next token)
  *   - inline:  `--host=value`
  *   - short:   `-h`            (value is next token)  / `-P`, `-p`
  *
- * Tokens that merely START with a forbidden name but are a different flag
- * (e.g. `--hostgroup`, `--port-something`) are NOT rejected.
- *
- * @throws Error naming the offending flag and citing F2, on the first match.
+ * @throws Error naming the first non-allowlisted token.
  */
 export function assertPassthroughAllowed(passthrough) {
     for (const token of passthrough) {
+        if (isAllowedPassthroughToken(token))
+            continue;
         // Normalise an inline `--flag=value` to its flag head for the lookup.
         const eqIdx = token.indexOf('=');
         const flag = eqIdx === -1 ? token : token.slice(0, eqIdx);
-        if (FORBIDDEN_PASSTHROUGH_FLAGS.has(flag)) {
-            throw new Error(`Passthrough flag '${flag}' is not allowed — host/port come from the ` +
+        const canonicalFlag = canonicalLongFlag(flag);
+        const forbiddenShort = findForbiddenShortFlag(flag);
+        if (matchesForbiddenLongFlag(canonicalFlag, FORBIDDEN_SECRET_OUTPUT_FLAGS)
+            || hasForbiddenLongFlagSuffix(flag, FORBIDDEN_SECRET_OUTPUT_FLAGS)) {
+            throw new Error(`Passthrough flag '${flag}' is not allowed — credentials from the ` +
+                'leased defaults file must never be printed.');
+        }
+        if (matchesForbiddenLongFlag(canonicalFlag, FORBIDDEN_PASSTHROUGH_FLAGS)
+            || hasForbiddenLongFlagSuffix(flag, FORBIDDEN_PASSTHROUGH_FLAGS)
+            || forbiddenShort?.kind === 'connection') {
+            throw new Error(`Passthrough flag '${flag}' is not allowed` +
+                `${forbiddenShort === undefined ? '' : ` (contains ${forbiddenShort.flag})`} — ` +
+                'host/port come from the ' +
                 `leased connection and cannot be overridden (see F2).`);
         }
+        if (matchesForbiddenLongFlag(canonicalFlag, FORBIDDEN_INPUT_CONTROL_FLAGS)
+            || hasForbiddenLongFlagSuffix(flag, FORBIDDEN_INPUT_CONTROL_FLAGS)
+            || forbiddenShort?.kind === 'input') {
+            throw new Error(`Passthrough flag '${flag}' is not allowed` +
+                `${forbiddenShort === undefined ? '' : ` (contains ${forbiddenShort.flag})`} — ` +
+                'non-interactive SQL must ' +
+                'remain fenced by server-selected --binary-mode.');
+        }
+        throw new Error(`Passthrough token '${token}' is not allowed — only fixed, ` +
+            'argument-free mysql presentation flags may be passed through.');
+    }
+}
+/**
+ * Validate the optional positional schema before it reaches mysql argv.
+ *
+ * MySQL identifiers can be broader when quoted inside SQL, but the CLI schema
+ * selector is deliberately a conservative ASCII contract. This prevents a
+ * value beginning with `-` from being interpreted as a client option and keeps
+ * control characters or shell-like path material out of process arguments.
+ */
+export function assertSafeMysqlDatabase(database) {
+    if (database === undefined)
+        return;
+    if (!/^[A-Za-z0-9_$][A-Za-z0-9_$.-]{0,63}$/.test(database)) {
+        throw new Error('Invalid MySQL database/schema: expected 1-64 ASCII identifier ' +
+            'characters, beginning with a letter, digit, underscore, or dollar sign.');
     }
 }
+export function assertMysqlExecCapabilities(capabilities) {
+    if (!capabilities.supportsBinaryMode) {
+        throw new Error('mysql client cannot disable local commands for piped SQL; install a supported MySQL or MariaDB client');
+    }
+}
+const capabilityCache = new Map();
+function buildMysqlChildEnv() {
+    const env = { MYSQL_HISTFILE: '/dev/null' };
+    const exactAllowed = [
+        'PATH',
+        'TERM',
+        'TZ',
+        'TMPDIR',
+        'LANG',
+        'LC_ALL',
+        'LC_CTYPE',
+        'LC_MESSAGES',
+        'LC_COLLATE',
+        'LC_NUMERIC',
+        'LC_TIME',
+        'LC_MONETARY',
+        'LC_ADDRESS',
+        'LC_IDENTIFICATION',
+        'LC_MEASUREMENT',
+        'LC_NAME',
+        'LC_PAPER',
+        'LC_TELEPHONE',
+    ];
+    for (const name of exactAllowed) {
+        const value = process.env[name];
+        if (value !== undefined)
+            env[name] = value;
+    }
+    return env;
+}
+/**
+ * Probe option-file isolation before a lease/permit is consumed.
+ *
+ * Oracle MySQL clients expose --no-login-paths and require it to exclude
+ * .mylogin.cnf. MariaDB clients do not implement login paths and reject that
+ * flag, so their exclusive --defaults-file is sufficient. Unknown clients
+ * without the Oracle flag fail closed.
+ */
+export function inspectMysqlClient(binary = assertMysqlOnPath()) {
+    const cached = capabilityCache.get(binary);
+    if (cached !== undefined)
+        return cached;
+    const result = spawnSync(binary, ['--no-defaults', '--help'], {
+        encoding: 'utf8',
+        env: buildMysqlChildEnv(),
+        timeout: 5_000,
+        maxBuffer: 2 * 1024 * 1024,
+    });
+    if (result.error !== undefined || result.status !== 0) {
+        throw new Error('Unable to inspect mysql client capabilities safely');
+    }
+    const help = result.stdout + '\n' + result.stderr;
+    if (!/(?:^|\s)--defaults-file(?:[=\s]|$)/m.test(help)) {
+        throw new Error('mysql client does not support an exclusive --defaults-file');
+    }
+    const supportsNoLoginPaths = /(?:^|\s)--no-login-paths(?:[=\s]|$)/m.test(help);
+    const supportsBinaryMode = /(?:^|\s)--binary-mode(?:[=\s]|$)/m.test(help);
+    const family = /mariadb/i.test(help) ? 'mariadb' : 'mysql';
+    if (!supportsNoLoginPaths && family !== 'mariadb') {
+        throw new Error('Oracle mysql client cannot disable login paths; install a supported MySQL or MariaDB client');
+    }
+    const capabilities = {
+        binary,
+        family,
+        supportsNoLoginPaths,
+        supportsBinaryMode,
+    };
+    capabilityCache.set(binary, capabilities);
+    return capabilities;
+}
 /**
  * Build the mysql argv and child environment.
  *
@@ -128,44 +450,52 @@ export function assertPassthroughAllowed(passthrough) {
  * without spawning real mysql.
  *
  * Security invariants:
- *   - `--defaults-extra-file=<fdPath>` is args[0].
+ *   - `--defaults-file=<fdPath>` is args[0]. Oracle MySQL then receives
+ *     `--no-login-paths`; MariaDB omits the unsupported flag after probing.
+ *   - Exec invocations force `--binary-mode` before the positional schema.
  *   - No --user / -u / --password / -p / MYSQL_PWD in args or env.
  *   - No --host / --port / -h / -P flags (connection coords from cnf).
- *   - Forbidden override flags in `passthrough` are rejected (spec F2).
+ *   - Only fixed, argument-free passthrough flags are accepted (spec F2).
+ *   - The child environment is a non-secret allowlist; Vault credentials and
+ *     ambient MySQL selectors are never inherited.
  *   - MYSQL_HISTFILE=/dev/null overrides any pre-existing value.
  *
- * @throws If `passthrough` contains a forbidden connection/credential/defaults
- *         override flag (see assertPassthroughAllowed).
+ * @throws If `passthrough` contains a token outside the fixed safe allowlist.
  */
 export function buildMysqlInvocation(opts) {
-    const { fdPath, database, passthrough = [] } = opts;
+    const { fdPath, database, passthrough = [], supportsNoLoginPaths = true, binaryMode = false, } = opts;
+    assertSafeMysqlDatabase(database);
     // F2: reject host/port/defaults/password overrides BEFORE they reach argv.
     assertPassthroughAllowed(passthrough);
-    // --defaults-extra-file MUST be first (mysql enforces this).
-    const args = [`--defaults-extra-file=${fdPath}`];
-    // database as a positional arg (spec F8 — narrows the default schema only).
-    if (database) {
-        args.push(database);
-    }
-    // Caller-supplied pass-through flags appended verbatim at the end (now safe —
-    // forbidden connection/credential overrides were rejected above).
+    // --defaults-file MUST be first (mysql enforces this). Unlike
+    // --defaults-extra-file, it excludes ~/.my.cnf and the other ordinary option
+    // files. MySQL still reads .mylogin.cnf unless --no-login-paths is present.
+    const args = [`--defaults-file=${fdPath}`];
+    if (supportsNoLoginPaths)
+        args.push('--no-login-paths');
+    if (binaryMode)
+        args.push('--binary-mode');
+    // Validated presentation flags remain options and therefore precede the
+    // explicit option terminator.
     args.push(...passthrough);
-    // Child env: inherit everything, then suppress history (spec F4).
-    // Critically: do NOT add MYSQL_PWD, MYSQL_USER, --password, etc.
-    const env = {
-        ...process.env,
-        MYSQL_HISTFILE: '/dev/null',
-    };
-    // Scrub any ambient MYSQL_PWD so the password comes ONLY from the cnf
-    // (spec: never from env). Also scrub MYSQL_PWD_PATH for completeness.
-    delete env.MYSQL_PWD;
-    delete env.MYSQL_PWD_PATH;
+    // Add a second defence against option injection: even a future validator
+    // regression cannot turn the positional schema into --print-defaults, -e,
+    // --host, etc. Both supported clients accept `--` before the database.
+    if (database !== undefined) {
+        args.push('--', database);
+    }
+    // Child env: explicit non-secret allowlist. Copying process.env here would
+    // leak the consumer's ZNVAULT_API_KEY/ZNVAULT_PASSWORD (and arbitrary CI
+    // secrets) into the external mysql process. Locale/terminal variables are
+    // sufficient for deterministic client behaviour; the binary path is already
+    // resolved before spawn. MYSQL_HISTFILE is fixed, never caller-controlled.
+    const env = buildMysqlChildEnv();
     return { args, env };
 }
 /**
  * Build the `stdio` array for spawning mysql so that the cnf fd is inherited by
  * the child at the SAME numeric index `fd`. This is what makes
- * `--defaults-extra-file=/dev/fd/<fd>` resolve correctly in the child: the
+ * `--defaults-file=/dev/fd/<fd>` resolve correctly in the child: the
  * child must have an fd open at exactly `fd`.
  *
  * Layout:
@@ -212,16 +542,17 @@ export function buildChildStdio(fd, stdin0) {
  *
  * - Resolves with the child's numeric exit code (caller/CI relies on non-zero).
  * - The cnf fd (`opts.fd`) is inherited by the child at the SAME number so
- *   `--defaults-extra-file=/dev/fd/<fd>` resolves in the child (spec F1). The
+ *   `--defaults-file=/dev/fd/<fd>` resolves in the child (spec F1). The
  *   directory entry was already unlinked in createMyCnf — there is NOTHING to
  *   unlink here, and NO post-spawn unlink race.
  * - 'connect' mode: stdin/stdout/stderr are inherited (interactive terminal);
  *   the cnf fd is additionally inherited at index `fd`.
  * - 'exec' mode: stdin (index 0) is wired as:
- *     1. files (concatenated, in order) → stdin pipe
- *     2. sql (string) → stdin pipe
- *     3. parent stdin (if not a TTY) → piped through (inherit)
- *     4. parent stdin is a TTY and neither files nor sql provided → Error
+ *     1. input (exact Buffer) → stdin pipe
+ *     2. files (concatenated, in order) → stdin pipe
+ *     3. sql (string) → stdin pipe
+ *     4. parent stdin (if not a TTY) → piped through (inherit)
+ *     5. parent stdin is a TTY and no source was provided → Error
  *   stdout/stderr are inherited; the cnf fd is inherited at index `fd`.
  *
  * The parent's own copy of `opts.fd` is intentionally NOT closed here — the
@@ -236,12 +567,24 @@ export function buildChildStdio(fd, stdin0) {
  * @throws If exec mode is requested but no SQL source is available.
  */
 export async function runMysql(opts) {
+    // Fail closed before even resolving/probing the local client. This ordering
+    // is security-relevant for recovery permits: an invalid passthrough must be
+    // rejected deterministically even when mysql is absent, and no client-side
+    // capability check or spawn may happen first. buildMysqlInvocation repeats
+    // the check at the final argv assembly boundary as defence in depth.
+    assertPassthroughAllowed(opts.passthrough ?? []);
+    assertSafeMysqlDatabase(opts.database);
     const { spawn } = await import('node:child_process');
     const mysqlBin = assertMysqlOnPath();
+    const capabilities = inspectMysqlClient(mysqlBin);
+    if (opts.mode === 'exec')
+        assertMysqlExecCapabilities(capabilities);
     const { args, env } = buildMysqlInvocation({
         fdPath: opts.fdPath,
         database: opts.database,
         passthrough: opts.passthrough,
+        supportsNoLoginPaths: capabilities.supportsNoLoginPaths,
+        binaryMode: opts.mode === 'exec',
     });
     if (opts.mode === 'connect') {
         // Interactive: inherit std streams + the cnf fd at its own number.
@@ -256,6 +599,16 @@ export async function runMysql(opts) {
     // stdin (index 0) is 'pipe' when we feed SQL ourselves (files / sql), and
     // 'inherit' when we pass the parent's piped stdin through. The cnf fd (>= 3)
     // is a separate, higher index — no collision with stdin.
+    if (opts.input !== undefined) {
+        const input = opts.input;
+        const stdio = buildChildStdio(opts.fd, 'pipe');
+        const child = spawn(mysqlBin, args, { stdio, env });
+        return new Promise((resolve, reject) => {
+            child.on('error', (err) => { reject(err); });
+            child.on('close', (code) => { resolve(code ?? 1); });
+            child.stdin.end(input);
+        });
+    }
     if (opts.files && opts.files.length > 0) {
         // Read + concatenate files in order, pipe the result.
         const fsModule = await import('node:fs');

package/dist/commands/mysql/run.js.map

@@ -1 +1 @@
-{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/commands/mysql/run.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,wEAAwE;YACxE,4DAA4D;YAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,SAAS,IAAI,CAAC,CAAC;YACxE,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,kCAAkC;QAClC,gFAAgF;QAChF,gCAAgC,CACjC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC;IAC/D,+DAA+D;IAC/D,QAAQ;IACR,IAAI;IACJ,QAAQ;IACR,IAAI;IACJ,6EAA6E;IAC7E,uBAAuB;IACvB,iBAAiB;IACjB,cAAc;IACd,eAAe;IACf,kEAAkE;IAClE,YAAY;IACZ,IAAI;CACL,CAAC,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAA8B;IACrE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,sEAAsE;QACtE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAE1D,IAAI,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,6CAA6C;gBACtE,sDAAsD,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAuBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA8B;IAIjE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpD,2EAA2E;IAC3E,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAEtC,6DAA6D;IAC7D,MAAM,IAAI,GAAa,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IAE3D,4EAA4E;IAC5E,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtB,CAAC;IAED,8EAA8E;IAC9E,kEAAkE;IAClE,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;IAE1B,kEAAkE;IAClE,iEAAiE;IACjE,MAAM,GAAG,GAAsB;QAC7B,GAAG,OAAO,CAAC,GAAG;QACd,cAAc,EAAE,WAAW;KAC5B,CAAC;IAEF,sEAAsE;IACtE,sEAAsE;IACtE,OAAO,GAAG,CAAC,SAAS,CAAC;IACrB,OAAO,GAAG,CAAC,cAAc,CAAC;IAE1B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AAYD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,MAA0B;IACpE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,0EAA0E;QAC1E,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,IAAI,KAAK,CACb,mCAAmC,MAAM,CAAC,EAAE,CAAC,4BAA4B;YACzE,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAiB,IAAI,KAAK,CAAa,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;aAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;;YAC7C,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;IAC3B,CAAC;IACD,sEAAsE;IACtE,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;IACf,OAAO,KAAK,CAAC;AACf,CAAC;AAwCD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC;QACzC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,mEAAmE;QACnE,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,yDAAyD;IAEzD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,sDAAsD;QACtD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAErC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,uEAAuE;YACvE,qEAAqE;YACpE,KAAK,CAAC,KAA+B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3B,oCAAoC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,sDAAsD;YACrD,KAAK,CAAC,KAA+B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,8CAA8C;YAC9C,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,gCAAgC;IAChC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/commands/mysql/run.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,SAAS,EAAC,MAAM,oBAAoB,CAAC;AAE7C,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,wEAAwE;YACxE,4DAA4D;YAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,SAAS,IAAI,CAAC,CAAC;YACxE,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,kCAAkC;QAClC,gFAAgF;QAChF,gCAAgC,CACjC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IAClE,eAAe;IACf,wBAAwB;IACxB,SAAS;IACT,iBAAiB;IACjB,gBAAgB;IAChB,oBAAoB;IACpB,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,iBAAiB;IACjB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,SAAS;IACT,OAAO;IACP,aAAa;IACb,gBAAgB;IAChB,iBAAiB;IACjB,UAAU;IACV,qBAAqB;IACrB,qBAAqB;IACrB,SAAS;IACT,cAAc;IACd,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AAEH,uEAAuE;AACvE,MAAM,+BAA+B,GAAwB,IAAI,GAAG,CAAC;IACnE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;IAC1D,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;CACvC,CAAC,CAAC;AAEH,SAAS,yBAAyB,CAAC,KAAa;IAC9C,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,mEAAmE;QACnE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC;IAC/D,+DAA+D;IAC/D,QAAQ;IACR,IAAI;IACJ,QAAQ;IACR,IAAI;IACJ,6EAA6E;IAC7E,uBAAuB;IACvB,iBAAiB;IACjB,cAAc;IACd,kBAAkB;IAClB,eAAe;IACf,kDAAkD;IAClD,QAAQ;IACR,IAAI;IACJ,UAAU;IACV,IAAI;IACJ,YAAY;IACZ,gBAAgB;IAChB,YAAY;IACZ,IAAI;IACJ,kEAAkE;IAClE,YAAY;IACZ,IAAI;CACL,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACjE,eAAe;IACf,YAAY;IACZ,kBAAkB;IAClB,IAAI;IACJ,WAAW;IACX,IAAI;IACJ,gBAAgB;IAChB,oBAAoB;CACrB,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAC;IACjE,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG;IAClC,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,SAAS;CACD,CAAC;AACX,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAEzC,SAAS,iBAAiB,CAAC,IAAY;IACrC,0EAA0E;IAC1E,6EAA6E;IAC7E,IAAI,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE1C,yEAAyE;IACzE,2EAA2E;IAC3E,8BAA8B;IAC9B,oCAAoC;IACpC,sBAAsB;IACtB,qCAAqC;IACrC,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,iEAAiE;IACjE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAC5D,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAC9B,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM;QAClC,IAAI,KAAK,IAAI,8BAA8B,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,2CAA2C;gBACpE,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAC/B,IAAY,EACZ,SAA8B;IAE9B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,0BAA0B,CACjC,IAAY,EACZ,SAA8B;IAE9B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,IAAI,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,gCAAgC,GAAwB,IAAI,GAAG,CAAC;IACpE,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,SAAS;IACd,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;CACjB,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC;IAC/D,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,iBAAiB;CACvB,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,SAAS,sBAAsB,CAAC,KAAa;IAI3C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,IAAI,gCAAgC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,OAAO,EAAC,IAAI,EAAE,IAAI,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAC,CAAC;QAClD,CAAC;QACD,IAAI,2BAA2B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAC,IAAI,EAAE,IAAI,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAA8B;IACrE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,yBAAyB,CAAC,KAAK,CAAC;YAAE,SAAS;QAE/C,sEAAsE;QACtE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAEpD,IACE,wBAAwB,CAAC,aAAa,EAAE,6BAA6B,CAAC;eACnE,0BAA0B,CAAC,IAAI,EAAE,6BAA6B,CAAC,EAClE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,0CAA0C;gBACnE,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QACD,IACE,wBAAwB,CAAC,aAAa,EAAE,2BAA2B,CAAC;eACjE,0BAA0B,CAAC,IAAI,EAAE,2BAA2B,CAAC;eAC7D,cAAc,EAAE,IAAI,KAAK,YAAY,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,kBAAkB;gBAC3C,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,cAAc,CAAC,IAAI,GAAG,KAAK;gBAChF,0BAA0B;gBAC1B,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,IACE,wBAAwB,CAAC,aAAa,EAAE,6BAA6B,CAAC;eACnE,0BAA0B,CAAC,IAAI,EAAE,6BAA6B,CAAC;eAC/D,cAAc,EAAE,IAAI,KAAK,OAAO,EACnC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,kBAAkB;gBAC3C,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,cAAc,CAAC,IAAI,GAAG,KAAK;gBAChF,2BAA2B;gBAC3B,iDAAiD,CAClD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sBAAsB,KAAK,iCAAiC;YAC5D,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AA8BD;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAA4B;IAClE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,gEAAgE;YAChE,yEAAyE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AASD,MAAM,UAAU,2BAA2B,CACzC,YAAqC;IAErC,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAmC,CAAC;AAEnE,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAsB,EAAC,cAAc,EAAE,WAAW,EAAC,CAAC;IAC7D,MAAM,YAAY,GAAG;QACnB,MAAM;QACN,MAAM;QACN,IAAI;QACJ,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,UAAU;QACV,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,SAAS;QACT,aAAa;QACb,YAAY;QACZ,mBAAmB;QACnB,gBAAgB;QAChB,SAAS;QACT,UAAU;QACV,cAAc;KACN,CAAC;IACX,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAM,GAAG,iBAAiB,EAAE;IAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE;QAC5D,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,kBAAkB,EAAE;QACzB,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,oBAAoB,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,kBAAkB,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3D,IAAI,CAAC,oBAAoB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAA4B;QAC5C,MAAM;QACN,MAAM;QACN,oBAAoB;QACpB,kBAAkB;KACnB,CAAC;IACF,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC1C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA8B;IAIjE,MAAM,EACJ,MAAM,EACN,QAAQ,EACR,WAAW,GAAG,EAAE,EAChB,oBAAoB,GAAG,IAAI,EAC3B,UAAU,GAAG,KAAK,GACnB,GAAG,IAAI,CAAC;IAET,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,2EAA2E;IAC3E,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAEtC,8DAA8D;IAC9D,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,IAAI,GAAa,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IACrD,IAAI,oBAAoB;QAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACxD,IAAI,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE3C,wEAAwE;IACxE,8BAA8B;IAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;IAE1B,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IAEjC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AAYD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,MAA0B;IACpE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,0EAA0E;QAC1E,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,IAAI,KAAK,CACb,mCAAmC,MAAM,CAAC,EAAE,CAAC,4BAA4B;YACzE,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAiB,IAAI,KAAK,CAAa,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;aAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;;YAC7C,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;IAC3B,CAAC;IACD,sEAAsE;IACtE,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;IACf,OAAO,KAAK,CAAC;AACf,CAAC;AA8CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,wBAAwB,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACjD,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEvC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,2BAA2B,CAAC,YAAY,CAAC,CAAC;IACpE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC;QACzC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,oBAAoB,EAAE,YAAY,CAAC,oBAAoB;QACvD,UAAU,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM;KACjC,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,mEAAmE;QACnE,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,yDAAyD;IAEzD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,KAAK,CAAC,KAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,sDAAsD;QACtD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAErC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,uEAAuE;YACvE,qEAAqE;YACpE,KAAK,CAAC,KAA+B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3B,oCAAoC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,sDAAsD;YACrD,KAAK,CAAC,KAA+B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,8CAA8C;YAC9C,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,gCAAgC;IAChC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/mysql/types.d.ts

@@ -26,4 +26,11 @@ export interface MysqlAliasAddOptions {
     /** Role name or ID to bind to the alias. */
     role: string;
 }
+/** Options for the one-shot Recovery Fence v1 consumer. */
+export interface MysqlExecPermitOptions {
+    /** PostgreSQL-authoritative epoch copied from the issued permit. */
+    fenceEpoch: string;
+    /** SQL files to concatenate and feed over stdin. No inline SQL option exists. */
+    file: string[];
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/commands/mysql/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/commands/mysql/types.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,0CAA0C;AAC1C,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wCAAwC;AACxC,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC3D,yEAAyE;IACzE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qCAAqC;AACrC,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;CACd"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/commands/mysql/types.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,0CAA0C;AAC1C,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wCAAwC;AACxC,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC3D,yEAAyE;IACzE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qCAAqC;AACrC,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;CACd;AAED,2DAA2D;AAC3D,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB"}

package/dist/lib/client/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/lib/client/http.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,sBAAsB,CAAC;AAK7E;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;;CAKhD;AAwCD;;GAEG;AACH,qBAAa,UAAU;IAUrB,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,gBAAgB,CAAC,CAAU;IACnC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,cAAc,CAA8B;gBAExC,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC;IAc1C;;;;OAIG;IACH,SAAS,CAAC,cAAc,IAAI,MAAM;IAIlC,iFAAiF;IACjF,SAAS,CAAC,eAAe,IAAI,OAAO;IAIpC;;;OAGG;IACH,SAAS,KAAK,OAAO,IAAI,MAAM,CAE9B;IAED,oEAAoE;IACpE,SAAS,KAAK,QAAQ,IAAI,OAAO,CAEhC;IAED;;OAEG;IACH,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,IAAI;IAKjD;;OAEG;IACH,UAAU,IAAI,MAAM;IAIpB;;;;OAIG;YACW,gBAAgB;IAuC9B;;;;;;;;;;OAUG;IACG,YAAY,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgElE,sFAAsF;YACxE,oBAAoB;IAwClC;;OAEG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAqBtF;;OAEG;IACG,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAuKrD;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA+BvD;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IASjC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAgBhC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAiBhD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAiB/C,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAiBjD,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAe1C"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/lib/client/http.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,sBAAsB,CAAC;AAK7E;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;;CAKhD;AAwCD;;GAEG;AACH,qBAAa,UAAU;IAUrB,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,gBAAgB,CAAC,CAAU;IACnC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,cAAc,CAA8B;gBAExC,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC;IAc1C;;;;OAIG;IACH,SAAS,CAAC,cAAc,IAAI,MAAM;IAIlC,iFAAiF;IACjF,SAAS,CAAC,eAAe,IAAI,OAAO;IAIpC;;;OAGG;IACH,SAAS,KAAK,OAAO,IAAI,MAAM,CAE9B;IAED,oEAAoE;IACpE,SAAS,KAAK,QAAQ,IAAI,OAAO,CAEhC;IAED;;OAEG;IACH,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,IAAI;IAKjD;;OAEG;IACH,UAAU,IAAI,MAAM;IAIpB;;;;OAIG;YACW,gBAAgB;IAuC9B;;;;;;;;;;OAUG;IACG,YAAY,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgElE,sFAAsF;YACxE,oBAAoB;IAwClC;;OAEG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAqBtF;;OAEG;IACG,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IA0LrD;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA+BvD;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IASjC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAgBhC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAiBhD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAiB/C,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAiBjD,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAe1C"}