devchain-cli 0.23.4 → 0.24.0

package/dist/server/modules/remotes/host/host-docker.dto.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerScanRequestSchema = exports.DockerArchiveWriteResultSchema = exports.DockerBindPrepareSchema = exports.DockerCapacityRequestSchema = exports.DOCKER_ARCHIVE_SHA256_TRAILER = exports.DOCKER_API_VERSION_HEADER = exports.COMPOSE_PROJECT_LABEL = exports.DOCKER_PROJECT_LABEL = exports.DockerResourceIdSchema = exports.DockerArchiveRequestSchema = exports.DockerContainerCreateSchema = exports.DockerNetworkCreateSchema = exports.DockerVolumeCreateSchema = exports.DockerIdsSchema = exports.DockerOwnerSchema = void 0;
+const zod_1 = require("zod");
+const node_path_1 = require("node:path");
+const identifier = zod_1.z
+    .string()
+    .min(1)
+    .max(256)
+    .regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]*$/);
+const projectId = zod_1.z.string().uuid();
+const labels = zod_1.z.record(zod_1.z.string()).default({});
+exports.DockerOwnerSchema = zod_1.z.object({ projectId }).strict();
+exports.DockerIdsSchema = zod_1.z.object({ ids: zod_1.z.array(identifier).max(10000) }).strict();
+exports.DockerVolumeCreateSchema = zod_1.z.object({ projectId, name: identifier, labels }).strict();
+exports.DockerNetworkCreateSchema = zod_1.z
+    .object({
+    projectId,
+    name: identifier,
+    labels,
+    internal: zod_1.z.boolean().default(false),
+    attachable: zod_1.z.boolean().default(false),
+    options: zod_1.z.record(zod_1.z.string()).default({}),
+})
+    .strict();
+exports.DockerContainerCreateSchema = zod_1.z
+    .object({
+    projectId,
+    name: identifier,
+    config: zod_1.z.record(zod_1.z.unknown()),
+})
+    .strict();
+exports.DockerArchiveRequestSchema = zod_1.z
+    .object({
+    projectId,
+    image: identifier,
+    mountType: zod_1.z.enum(['volume', 'bind']),
+    source: zod_1.z.string().min(1).max(4096),
+})
+    .strict();
+exports.DockerResourceIdSchema = identifier;
+exports.DOCKER_PROJECT_LABEL = 'dev.devchain.project';
+exports.COMPOSE_PROJECT_LABEL = 'com.docker.compose.project';
+exports.DOCKER_API_VERSION_HEADER = 'x-devchain-docker-api-version';
+exports.DOCKER_ARCHIVE_SHA256_TRAILER = 'x-devchain-archive-sha256';
+exports.DockerCapacityRequestSchema = zod_1.z
+    .object({ paths: zod_1.z.array(zod_1.z.string().min(1).max(4096)).max(64) })
+    .strict();
+const scanPath = zod_1.z
+    .string()
+    .min(1)
+    .max(4096)
+    .refine((path) => (0, node_path_1.isAbsolute)(path) && (0, node_path_1.normalize)(path) === path && !path.includes('\0'));
+exports.DockerBindPrepareSchema = zod_1.z
+    .object({
+    projectId,
+    paths: zod_1.z
+        .array(zod_1.z
+        .object({ path: scanPath, replace: zod_1.z.boolean(), image: identifier.optional() })
+        .strict()
+        .refine((bind) => !bind.replace || bind.image !== undefined))
+        .min(1)
+        .max(64),
+})
+    .strict();
+exports.DockerArchiveWriteResultSchema = zod_1.z
+    .object({ sha256: zod_1.z.string().regex(/^[0-9a-f]{64}$/), bytes: zod_1.z.number().int().nonnegative() })
+    .strict();
+exports.DockerScanRequestSchema = zod_1.z
+    .object({
+    paths: zod_1.z.array(scanPath).max(64).default([]),
+    volumes: zod_1.z.array(identifier).max(10000).optional(),
+})
+    .strict();
+//# sourceMappingURL=host-docker.dto.js.map

package/dist/server/modules/remotes/host/host-docker.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-docker.dto.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-docker.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,yCAAkD;AAGlD,MAAM,UAAU,GAAG,OAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AACpC,MAAM,MAAM,GAAG,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACnC,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACrD,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7E,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACtF,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,SAAS;IACT,IAAI,EAAE,UAAU;IAChB,MAAM;IACN,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,SAAS;IACT,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,SAAS;IACT,KAAK,EAAE,UAAU;IACjB,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,sBAAsB,GAAG,UAAU,CAAC;AASpC,QAAA,oBAAoB,GAAG,sBAAsB,CAAC;AAC9C,QAAA,qBAAqB,GAAG,4BAA4B,CAAC;AAMrD,QAAA,yBAAyB,GAAG,+BAA+B,CAAC;AAE5D,QAAA,6BAA6B,GAAG,2BAA2B,CAAC;AAE5D,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;KAC/D,MAAM,EAAE,CAAC;AAMZ,MAAM,QAAQ,GAAG,OAAC;KACf,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,IAAI,CAAC;KACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,IAAI,IAAA,qBAAS,EAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7E,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,SAAS;IACT,KAAK,EAAE,OAAC;SACL,KAAK,CACJ,OAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;SAC9E,MAAM,EAAE;SAER,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAC/D;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;CACX,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,8BAA8B,GAAG,OAAC;KAC5C,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;KAC7F,MAAM,EAAE,CAAC;AAGC,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/server/modules/remotes/host/host-docker.service.d.ts

@@ -0,0 +1,47 @@
+import { DockerArchiveJournal } from '../../core/controllers/docker-archive-journal';
+import { Readable } from 'node:stream';
+import { DockerVersion } from '../../core/controllers/docker-engine.client';
+import { DockerArchiveRequest, DockerContainerCreate, DockerNetworkCreate, DockerVolumeCreate, DockerVolumeHolder, DockerCapacityResult, DockerScanResult, DockerArchiveWriteResult, DockerBindPrepare } from './host-docker.dto';
+type Labels = Record<string, string>;
+type Volume = {
+    Name: string;
+    Labels?: Labels;
+};
+export declare class HostDockerService {
+    private readonly archives;
+    constructor(archives: DockerArchiveJournal);
+    version(signal?: AbortSignal): Promise<DockerVersion>;
+    private engine;
+    scan(paths: string[], signal?: AbortSignal, apiVersion?: string, holderVolumes?: string[]): Promise<DockerScanResult>;
+    capacity(paths: string[], signal?: AbortSignal): Promise<DockerCapacityResult>;
+    imagesPresent(ids: string[], signal?: AbortSignal, apiVersion?: string): Promise<{
+        ids: string[];
+    }>;
+    loadImage(body: Readable, signal?: AbortSignal, apiVersion?: string): Promise<void>;
+    saveImage(id: string, signal?: AbortSignal, apiVersion?: string): Promise<Readable>;
+    createVolume(input: DockerVolumeCreate, signal?: AbortSignal, apiVersion?: string): Promise<Volume>;
+    createNetwork(input: DockerNetworkCreate, signal?: AbortSignal, apiVersion?: string): Promise<{
+        Id: string;
+        created: boolean;
+    }>;
+    createContainer(input: DockerContainerCreate, signal?: AbortSignal, apiVersion?: string): Promise<{
+        Id: string;
+    }>;
+    holders(name: string, signal?: AbortSignal, apiVersion?: string): Promise<{
+        holders: DockerVolumeHolder[];
+    }>;
+    remove(kind: 'volumes' | 'containers' | 'networks', id: string, projectId: string, signal?: AbortSignal, apiVersion?: string): Promise<void>;
+    writeArchive(input: DockerArchiveRequest, body: Readable, signal?: AbortSignal, apiVersion?: string): Promise<DockerArchiveWriteResult>;
+    prepareBinds(input: DockerBindPrepare, signal?: AbortSignal, apiVersion?: string): Promise<void>;
+    private clearBind;
+    stopProject(projectId: string, signal?: AbortSignal, apiVersion?: string): Promise<{
+        stopped: string[];
+    }>;
+    stopContainer(id: string, projectId: string, signal?: AbortSignal, apiVersion?: string): Promise<void>;
+    readArchive(input: DockerArchiveRequest, signal?: AbortSignal, apiVersion?: string): Promise<Readable>;
+    private requireOwner;
+    private composeOwnsProjectVolume;
+    private composeHolder;
+    private archiveSource;
+}
+export {};

package/dist/server/modules/remotes/host/host-docker.service.js

@@ -0,0 +1,463 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostDockerService = void 0;
+const docker_archive_journal_1 = require("../../core/controllers/docker-archive-journal");
+const common_1 = require("@nestjs/common");
+const node_crypto_1 = require("node:crypto");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_stream_1 = require("node:stream");
+const promises_2 = require("node:stream/promises");
+const error_types_1 = require("../../../common/errors/error-types");
+const docker_engine_client_1 = require("../../core/controllers/docker-engine.client");
+const docker_archive_1 = require("../../core/controllers/docker-archive");
+const docker_runtime_1 = require("../../core/controllers/docker-runtime");
+const docker_settings_1 = require("../../core/controllers/docker-settings");
+const host_docker_dto_1 = require("./host-docker.dto");
+let HostDockerService = class HostDockerService {
+    archives;
+    constructor(archives) {
+        this.archives = archives;
+    }
+    async version(signal) {
+        return (await docker_engine_client_1.DockerEngineClient.connect(signal)).version(signal);
+    }
+    async engine(signal, apiVersion) {
+        const client = await docker_engine_client_1.DockerEngineClient.connect(signal);
+        if (apiVersion)
+            client.apiVersion = (0, docker_engine_client_1.selectDockerApiVersion)(await client.version(signal), {
+                ApiVersion: apiVersion,
+                MinAPIVersion: apiVersion,
+            });
+        return client;
+    }
+    async scan(paths, signal, apiVersion, holderVolumes) {
+        const client = await this.engine(signal, apiVersion);
+        const info = client.connectedInfo ?? (await client.info(signal));
+        if (!info.Architecture)
+            throw new docker_engine_client_1.DockerEngineError('invalid-response', 'Docker architecture is unavailable');
+        const containers = await client.json('GET', '/containers/json?all=true', undefined, { signal });
+        const volumes = await client.json('GET', '/volumes', undefined, { signal });
+        const existence = [];
+        for (const path of paths) {
+            signal?.throwIfAborted();
+            try {
+                await (0, promises_1.stat)(path);
+                existence.push({ path, exists: true });
+            }
+            catch (error) {
+                existence.push(error.code === 'ENOENT'
+                    ? { path, exists: false }
+                    : { path, unknown: true });
+            }
+        }
+        const metadata = new Map();
+        if (holderVolumes) {
+            const holders = containers.filter((container) => container.Mounts?.some((m) => (m.Type === 'volume' && m.Name && holderVolumes.includes(m.Name)) ||
+                (m.Type === 'bind' &&
+                    m.Source &&
+                    paths.some((p) => inside(p, m.Source) || inside(m.Source, p)))));
+            await Promise.all(holders.map(async (container) => {
+                try {
+                    const inspect = await client.json('GET', `/containers/${encodeURIComponent(container.Id)}/json`, undefined, { signal });
+                    metadata.set(container.Id, {
+                        created: inspect.Created,
+                        startedAt: inspect.State?.StartedAt,
+                        running: inspect.State?.Running,
+                    });
+                }
+                catch {
+                    signal?.throwIfAborted();
+                    metadata.set(container.Id, {});
+                }
+            }));
+        }
+        signal?.throwIfAborted();
+        return {
+            architecture: info.Architecture,
+            containers: containers.map((container) => ({
+                id: container.Id,
+                ...(metadata.has(container.Id) && { metadata: metadata.get(container.Id) }),
+                name: container.Names[0]?.replace(/^\//, '') ?? container.Id,
+                labels: container.Labels ?? {},
+                mounts: (container.Mounts ?? []).map((mount) => ({
+                    type: mount.Type,
+                    ...(mount.Name ? { name: mount.Name } : {}),
+                    ...(mount.Source ? { source: mount.Source } : {}),
+                    destination: mount.Destination,
+                })),
+            })),
+            volumes: (volumes.Volumes ?? []).map((volume) => ({
+                name: volume.Name,
+                driver: volume.Driver,
+                labels: volume.Labels ?? {},
+            })),
+            paths: existence,
+        };
+    }
+    async capacity(paths, signal) {
+        const home = (0, node_os_1.homedir)();
+        if (paths.some((path) => !(0, node_path_1.isAbsolute)(path) ||
+            (0, node_path_1.normalize)(path) !== path ||
+            path.includes('\0') ||
+            !inside(path, home)))
+            throw new error_types_1.AppError('Capacity paths must be absolute normalized paths under VM home', 'DOCKER_BIND_OUTSIDE_HOME', 403);
+        const results = [];
+        const canonicalHome = await (0, promises_1.realpath)(home).catch(() => null);
+        for (const path of paths) {
+            signal?.throwIfAborted();
+            try {
+                if (canonicalHome === null)
+                    throw new Error();
+                const resolved = await (0, promises_1.realpath)(await nearestExisting(path, home));
+                if (!inside(resolved, canonicalHome))
+                    throw new Error();
+                const sample = await (0, docker_runtime_1.dockerFilesystem)(resolved);
+                if (!sample || !Number.isFinite(sample.freeBytes) || sample.freeBytes < 0)
+                    throw new Error();
+                results.push({ ...sample, path });
+            }
+            catch {
+                results.push({ path, unknown: true });
+            }
+        }
+        signal?.throwIfAborted();
+        return { paths: results };
+    }
+    async imagesPresent(ids, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const present = [];
+        for (const id of new Set(ids)) {
+            try {
+                await client.json('GET', `/images/${encodeURIComponent(id)}/json`, undefined, { signal });
+                present.push(id);
+            }
+            catch (error) {
+                if (!(0, docker_engine_client_1.isDockerNotFound)(error))
+                    throw error;
+            }
+        }
+        return { ids: present };
+    }
+    async loadImage(body, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const response = await client.stream('POST', '/images/load?quiet=1', {
+            body,
+            headers: { 'Content-Type': 'application/x-tar' },
+            signal,
+        });
+        let line = '';
+        const consume = (value) => {
+            if (!value.trim())
+                return;
+            let message;
+            try {
+                message = JSON.parse(value);
+            }
+            catch {
+                throw new docker_engine_client_1.DockerEngineError('invalid-response', 'Invalid Docker image load response');
+            }
+            if (message.error || message.errorDetail)
+                throw new docker_engine_client_1.DockerEngineError('engine-error', 'Docker image load failed');
+        };
+        try {
+            for await (const chunk of response) {
+                line += chunk.toString('utf8');
+                let newline;
+                while ((newline = line.indexOf('\n')) >= 0) {
+                    consume(line.slice(0, newline));
+                    line = line.slice(newline + 1);
+                }
+                if (line.length > 1024 * 1024)
+                    throw new docker_engine_client_1.DockerEngineError('invalid-response', 'Docker image load response exceeds limit');
+            }
+            consume(line);
+        }
+        finally {
+            response.destroy();
+        }
+    }
+    async saveImage(id, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        return client.stream('GET', `/images/${encodeURIComponent(id)}/get`, { signal });
+    }
+    async createVolume(input, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const old = await (0, docker_engine_client_1.optionalDockerJson)(client, `/volumes/${encodeURIComponent(input.name)}`, signal);
+        if (old) {
+            this.requireOwner(old.Labels, input.projectId, true);
+            return { Name: old.Name, Labels: old.Labels };
+        }
+        const created = await client.json('POST', '/volumes/create', { Name: input.name, Labels: { ...input.labels, [host_docker_dto_1.DOCKER_PROJECT_LABEL]: input.projectId } }, { signal });
+        this.requireOwner(created.Labels, input.projectId, true);
+        return { Name: created.Name, Labels: created.Labels };
+    }
+    async createNetwork(input, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const old = await (0, docker_engine_client_1.optionalDockerJson)(client, `/networks/${encodeURIComponent(input.name)}`, signal);
+        if (old) {
+            this.requireOwner(old.Labels, input.projectId, true);
+            return { Id: old.Id, created: false };
+        }
+        const created = await client.json('POST', '/networks/create', {
+            Name: input.name,
+            Driver: 'bridge',
+            Internal: input.internal,
+            Attachable: input.attachable,
+            Options: input.options,
+            Labels: { ...input.labels, [host_docker_dto_1.DOCKER_PROJECT_LABEL]: input.projectId },
+        }, { signal });
+        return { Id: created.Id, created: true };
+    }
+    async createContainer(input, signal, apiVersion) {
+        const { HostConfig = {}, NetworkingConfig = {}, ...config } = input.config;
+        if (typeof config.Image !== 'string')
+            throw new error_types_1.AppError('Container image is required', 'DOCKER_INVALID_SETTINGS', 400);
+        const network = NetworkingConfig;
+        if (Object.keys(network).some((key) => key !== 'EndpointsConfig'))
+            throw new error_types_1.AppError('Unsupported network settings', 'DOCKER_INVALID_SETTINGS', 400);
+        const projected = (0, docker_settings_1.projectDockerCreate)({
+            Config: config,
+            HostConfig: HostConfig,
+            Image: config.Image,
+            NetworkSettings: { Networks: network.EndpointsConfig },
+        });
+        projected.Labels = {
+            ...config.Labels,
+            [host_docker_dto_1.DOCKER_PROJECT_LABEL]: input.projectId,
+        };
+        const client = await this.engine(signal, apiVersion);
+        return client.json('POST', `/containers/create?name=${encodeURIComponent(input.name)}`, projected, { signal });
+    }
+    async holders(name, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const containers = await client.json('GET', `/containers/json?all=true&filters=${encodeURIComponent(JSON.stringify({ volume: [name] }))}`, undefined, { signal });
+        return {
+            holders: containers
+                .filter((container) => container.Mounts?.some((mount) => mount.Type === 'volume' && mount.Name === name))
+                .map((container) => ({ id: container.Id, labels: container.Labels ?? {} })),
+        };
+    }
+    async remove(kind, id, projectId, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const resource = await client.json('GET', `/${kind}/${encodeURIComponent(id)}${kind === 'containers' ? '/json' : ''}`, undefined, { signal });
+        const labels = kind === 'containers' ? resource.Config.Labels : resource.Labels;
+        if (labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] !== projectId) {
+            if (kind !== 'containers' ||
+                labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] ||
+                !(await this.composeHolder(client, resource, projectId, signal)))
+                this.requireOwner(labels, projectId);
+        }
+        const exactId = kind === 'volumes' ? id : resource.Id;
+        if (!exactId)
+            throw new docker_engine_client_1.DockerEngineError('invalid-response', 'Docker resource identity is missing');
+        if (kind === 'containers')
+            await (0, docker_engine_client_1.changeDockerContainerState)(client, exactId, 'stop', signal);
+        await client.json('DELETE', `/${kind}/${encodeURIComponent(exactId)}`, undefined, { signal });
+    }
+    async writeArchive(input, body, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const source = await this.archiveSource(client, input, signal);
+        const helper = await this.archives.create(client, input.image, [{ Type: input.mountType, Source: source, Target: '/data' }], signal);
+        const hash = (0, node_crypto_1.createHash)('sha256');
+        let bytes = 0;
+        const toEngine = new node_stream_1.PassThrough();
+        const received = (async () => {
+            for await (const chunk of body) {
+                hash.update(chunk);
+                bytes += chunk.length;
+                if (toEngine.destroyed || toEngine.writableEnded)
+                    continue;
+                if (!toEngine.write(chunk))
+                    await new Promise((done) => {
+                        const settle = () => {
+                            toEngine.off('drain', settle).off('close', settle);
+                            done();
+                        };
+                        toEngine.on('drain', settle).on('close', settle);
+                    });
+            }
+            if (!toEngine.destroyed)
+                toEngine.end();
+        })();
+        try {
+            await Promise.all([
+                received,
+                (0, docker_archive_1.writeDockerArchive)(client, helper.id, toEngine, signal).catch((error) => {
+                    body.destroy();
+                    throw error;
+                }),
+            ]);
+        }
+        catch (error) {
+            toEngine.destroy();
+            await received.catch(() => undefined);
+            throw error;
+        }
+        finally {
+            await this.archives.cleanup(client, helper);
+        }
+        return { sha256: hash.digest('hex'), bytes };
+    }
+    async prepareBinds(input, signal, apiVersion) {
+        const home = (0, node_os_1.homedir)();
+        const canonicalHome = await (0, promises_1.realpath)(home);
+        for (const { path, replace, image } of input.paths) {
+            signal?.throwIfAborted();
+            if (path === home || !inside(path, home))
+                throw new error_types_1.AppError('Bind paths must be under the VM home', 'DOCKER_BIND_OUTSIDE_HOME', 403);
+            const existing = await nearestExisting(path);
+            const resolved = await (0, promises_1.realpath)(existing);
+            if (!inside(resolved, canonicalHome))
+                throw new error_types_1.AppError('Bind paths must be under the VM home', 'DOCKER_BIND_OUTSIDE_HOME', 403);
+            if (existing === path && (await (0, promises_1.lstat)(path)).isSymbolicLink())
+                throw new error_types_1.AppError('Bind paths must not be links', 'DOCKER_BIND_OUTSIDE_HOME', 403);
+            if (replace && existing === path) {
+                if (!(await (0, promises_1.lstat)(resolved)).isDirectory())
+                    await (0, promises_1.rm)(path, { force: true });
+                else if (!(await (0, promises_1.readdir)(resolved).then((entries) => entries.length === 0, () => false)))
+                    await this.clearBind(path, resolved, image, signal, apiVersion);
+            }
+            await (0, promises_1.mkdir)(path, { recursive: true });
+        }
+    }
+    async clearBind(path, target, image, signal, apiVersion) {
+        try {
+            await this.archives.clearBind(await this.engine(signal, apiVersion), image, target, signal);
+        }
+        catch (error) {
+            if (signal?.aborted)
+                throw error;
+            throw new error_types_1.AppError(`The VM folder ${path} could not be emptied for the fresh copy. Empty it on the VM (for example, sudo rm -rf ${path}/*) and press Retry, or Cancel.`, 'DOCKER_BIND_CLEAR_FAILED', 422);
+        }
+    }
+    async stopProject(projectId, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const filters = JSON.stringify({
+            label: [`${host_docker_dto_1.DOCKER_PROJECT_LABEL}=${projectId}`],
+            status: ['running', 'restarting', 'paused'],
+        });
+        const running = await client.json('GET', `/containers/json?filters=${encodeURIComponent(filters)}`, undefined, { signal });
+        const stopped = [];
+        for (const container of running) {
+            if (container.Labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] !== projectId)
+                continue;
+            await (0, docker_engine_client_1.changeDockerContainerState)(client, container.Id, 'stop', signal);
+            stopped.push(container.Id);
+        }
+        return { stopped };
+    }
+    async stopContainer(id, projectId, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const container = await client.json('GET', `/containers/${encodeURIComponent(id)}/json`, undefined, { signal });
+        const labels = container.Config.Labels ?? {};
+        if (labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] !== projectId) {
+            const compose = labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL];
+            const owned = !labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] &&
+                compose !== undefined &&
+                (await this.composeOwnsProjectVolume(client, compose, projectId, signal));
+            if (!owned)
+                this.requireOwner(labels, projectId);
+        }
+        await (0, docker_engine_client_1.changeDockerContainerState)(client, container.Id, 'stop', signal);
+    }
+    async readArchive(input, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const source = await this.archiveSource(client, input, signal);
+        const helper = await this.archives.create(client, input.image, [{ Type: input.mountType, Source: source, Target: '/data', ReadOnly: true }], signal);
+        let archive;
+        try {
+            archive = await (0, docker_archive_1.readDockerArchive)(client, helper.id, signal);
+        }
+        catch (error) {
+            await this.archives.cleanup(client, helper);
+            throw error;
+        }
+        const output = new node_stream_1.PassThrough();
+        void (async () => {
+            try {
+                await (0, promises_2.pipeline)(archive, output, { end: false });
+                await this.archives.cleanup(client, helper);
+                output.end();
+            }
+            catch {
+                await this.archives.cleanup(client, helper).catch(() => undefined);
+                output.destroy(new docker_engine_client_1.DockerEngineError('unavailable', 'Docker archive transfer failed'));
+            }
+        })();
+        return output;
+    }
+    requireOwner(labels, projectId, conflict = false) {
+        if (labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] !== projectId)
+            throw new error_types_1.AppError('Docker resource is not owned by this imported project', 'DOCKER_OWNERSHIP_REQUIRED', conflict ? 409 : 403);
+    }
+    async composeOwnsProjectVolume(client, compose, projectId, signal) {
+        const { Volumes } = await client.json('GET', `/volumes?filters=${encodeURIComponent(JSON.stringify({ label: [`${host_docker_dto_1.DOCKER_PROJECT_LABEL}=${projectId}`] }))}`, undefined, { signal });
+        return (Volumes?.some((volume) => volume.Labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] === projectId &&
+            volume.Labels?.[host_docker_dto_1.COMPOSE_PROJECT_LABEL] === compose) ?? false);
+    }
+    async composeHolder(client, container, projectId, signal) {
+        const compose = container.Config.Labels?.[host_docker_dto_1.COMPOSE_PROJECT_LABEL];
+        if (!compose)
+            return false;
+        for (const mount of container.Mounts ?? []) {
+            if (mount.Type !== 'volume' || !mount.Name)
+                continue;
+            const volume = await client.json('GET', `/volumes/${encodeURIComponent(mount.Name)}`, undefined, { signal });
+            if (volume.Labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] === projectId &&
+                volume.Labels?.[host_docker_dto_1.COMPOSE_PROJECT_LABEL] === compose)
+                return true;
+        }
+        return false;
+    }
+    async archiveSource(client, input, signal) {
+        if (input.mountType === 'volume') {
+            const volume = await client.json('GET', `/volumes/${encodeURIComponent(input.source)}`, undefined, { signal });
+            this.requireOwner(volume.Labels, input.projectId);
+            return volume.Name;
+        }
+        try {
+            const [home, source] = await Promise.all([
+                (0, promises_1.realpath)((0, node_os_1.homedir)()),
+                (0, promises_1.realpath)((0, node_path_1.resolve)(input.source)),
+            ]);
+            if (!inside(source, home))
+                throw new Error();
+            return source;
+        }
+        catch {
+            throw new error_types_1.AppError('Bind archive paths must exist under the VM home', 'DOCKER_BIND_OUTSIDE_HOME', 403);
+        }
+    }
+};
+exports.HostDockerService = HostDockerService;
+exports.HostDockerService = HostDockerService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [docker_archive_journal_1.DockerArchiveJournal])
+], HostDockerService);
+function inside(path, root) {
+    return path === root || path.startsWith(root + node_path_1.sep);
+}
+async function nearestExisting(path, stop) {
+    for (let candidate = path;; candidate = (0, node_path_1.dirname)(candidate)) {
+        try {
+            await (0, promises_1.lstat)(candidate);
+            return candidate;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT' || candidate === stop)
+                throw error;
+        }
+    }
+}
+//# sourceMappingURL=host-docker.service.js.map

package/dist/server/modules/remotes/host/host-docker.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-docker.service.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-docker.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0FAAqF;AACrF,2CAA4C;AAC5C,6CAAyC;AACzC,+CAA6E;AAC7E,qCAAkC;AAClC,yCAAyE;AACzE,6CAAoD;AACpD,mDAAgD;AAChD,oEAA8D;AAC9D,sFAQqD;AACrD,0EAA8F;AAC9F,0EAAyE;AACzE,4EAA6F;AAC7F,uDAc2B;AAWpB,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,QAA8B;QAA9B,aAAQ,GAAR,QAAQ,CAAsB;IAAG,CAAC;IAC/D,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,OAAO,CAAC,MAAM,yCAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IACO,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,UAAmB;QAC5D,MAAM,MAAM,GAAG,MAAM,yCAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,UAAU;YACZ,MAAM,CAAC,UAAU,GAAG,IAAA,6CAAsB,EAAC,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;gBACvE,UAAU,EAAE,UAAU;gBACtB,aAAa,EAAE,UAAU;aAC1B,CAAC,CAAC;QACL,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAe,EACf,MAAoB,EACpB,UAAmB,EACnB,aAAwB;QAExB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpB,MAAM,IAAI,wCAAiB,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAOlC,KAAK,EAAE,2BAA2B,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAE9B,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7C,MAAM,SAAS,GAA8B,EAAE,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAA,eAAI,EAAC,IAAI,CAAC,CAAC;gBACjB,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,CAAC,IAAI,CACX,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAChD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;oBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAC5B,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;QACzD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAC9C,SAAS,CAAC,MAAM,EAAE,IAAI,CACpB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM;oBAChB,CAAC,CAAC,MAAM;oBACR,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,MAAO,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,MAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CACrE,CACF,CAAC;YACF,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;gBAC9B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,KAAK,EACL,eAAe,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EACtD,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;oBACF,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE;wBACzB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS;wBACnC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO;qBAChC,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,EAAE,cAAc,EAAE,CAAC;oBACzB,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACzC,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3E,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE;gBAC5D,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE;gBAC9B,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC/C,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,WAAW,EAAE,KAAK,CAAC,WAAW;iBAC/B,CAAC,CAAC;aACJ,CAAC,CAAC;YACH,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChD,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;aAC5B,CAAC,CAAC;YACH,KAAK,EAAE,SAAS;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAe,EAAE,MAAoB;QAClD,MAAM,IAAI,GAAG,IAAA,iBAAO,GAAE,CAAC;QACvB,IACE,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC;YACjB,IAAA,qBAAS,EAAC,IAAI,CAAC,KAAK,IAAI;YACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CACtB;YAED,MAAM,IAAI,sBAAQ,CAChB,gEAAgE,EAChE,0BAA0B,EAC1B,GAAG,CACJ,CAAC;QACJ,MAAM,OAAO,GAAkC,EAAE,CAAC;QAElD,MAAM,aAAa,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,aAAa,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAQ,EAAC,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBACxD,MAAM,MAAM,GAAG,MAAM,IAAA,iCAAgB,EAAC,QAAQ,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC;oBACvE,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,GAAa,EACb,MAAoB,EACpB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,EAAE,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC1F,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAA,uCAAgB,EAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAc,EAAE,MAAoB,EAAE,UAAmB;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE;YACnE,IAAI;YACJ,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE;YAChD,MAAM;SACP,CAAC,CAAC;QACH,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE;YAChC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,OAAO;YAC1B,IAAI,OAAmD,CAAC;YACxD,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,wCAAiB,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,WAAW;gBACtC,MAAM,IAAI,wCAAiB,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAC5E,CAAC,CAAC;QACF,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACnC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC/B,IAAI,OAAe,CAAC;gBACpB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;oBAChC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;gBACjC,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;oBAC3B,MAAM,IAAI,wCAAiB,CACzB,kBAAkB,EAClB,0CAA0C,CAC3C,CAAC;YACN,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,MAAoB,EAAE,UAAmB;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAyB,EACzB,MAAoB,EACpB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,IAAA,yCAAkB,EAClC,MAAM,EACN,YAAY,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAC5C,MAAM,CACP,CAAC;QACF,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACrD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAChD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,MAAM,EACN,iBAAiB,EACjB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,sCAAoB,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,EAC1F,EAAE,MAAM,EAAE,CACX,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAA0B,EAC1B,MAAoB,EACpB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,IAAA,yCAAkB,EAClC,MAAM,EACN,aAAa,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAC7C,MAAM,CACP,CAAC;QACF,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,MAAM,EACN,kBAAkB,EAClB;YACE,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,sCAAoB,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE;SACrE,EACD,EAAE,MAAM,EAAE,CACX,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,KAA4B,EAC5B,MAAoB,EACpB,UAAmB;QAEnB,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,gBAAgB,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3E,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAClC,MAAM,IAAI,sBAAQ,CAAC,6BAA6B,EAAE,yBAAyB,EAAE,GAAG,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,gBAAwE,CAAC;QACzF,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,iBAAiB,CAAC;YAC/D,MAAM,IAAI,sBAAQ,CAAC,8BAA8B,EAAE,yBAAyB,EAAE,GAAG,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,IAAA,qCAAmB,EAAC;YACpC,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,UAA4B;YACxC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,eAAe,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,eAAe,EAAE;SACvD,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,GAAG;YACjB,GAAI,MAAM,CAAC,MAA6B;YACxC,CAAC,sCAAoB,CAAC,EAAE,KAAK,CAAC,SAAS;SACxC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,IAAI,CAChB,MAAM,EACN,2BAA2B,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAC3D,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,MAAoB,EACpB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAGlC,KAAK,EACL,qCAAqC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAC7F,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;QACF,OAAO;YACL,OAAO,EAAE,UAAU;iBAChB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CACpB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAClF;iBACA,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CACV,IAA2C,EAC3C,EAAU,EACV,SAAiB,EACjB,MAAoB,EACpB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,KAAK,EACL,IAAI,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAC3E,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAChF,IAAI,MAAM,EAAE,CAAC,sCAAoB,CAAC,KAAK,SAAS,EAAE,CAAC;YACjD,IACE,IAAI,KAAK,YAAY;gBACrB,MAAM,EAAE,CAAC,sCAAoB,CAAC;gBAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBAEhE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO;YACV,MAAM,IAAI,wCAAiB,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;QAEzF,IAAI,IAAI,KAAK,YAAY;YAAE,MAAM,IAAA,iDAA0B,EAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7F,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IAGD,KAAK,CAAC,YAAY,CAChB,KAA2B,EAC3B,IAAc,EACd,MAAoB,EACpB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CACvC,MAAM,EACN,KAAK,CAAC,KAAK,EACX,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAC5D,MAAM,CACP,CAAC;QACF,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,QAAQ,GAAG,IAAI,yBAAW,EAAE,CAAC;QAGnC,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAA6B,EAAE,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa;oBAAE,SAAS;gBAC3D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;oBACxB,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;wBAC/B,MAAM,MAAM,GAAG,GAAG,EAAE;4BAClB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;4BACnD,IAAI,EAAE,CAAC;wBACT,CAAC,CAAC;wBACF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACnD,CAAC,CAAC,CAAC;YACP,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC1C,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,QAAQ;gBACR,IAAA,mCAAkB,EAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;oBACf,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtC,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IAQD,KAAK,CAAC,YAAY,CAChB,KAAwB,EACxB,MAAoB,EACpB,UAAmB;QAEnB,MAAM,IAAI,GAAG,IAAA,iBAAO,GAAE,CAAC;QACvB,MAAM,aAAa,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,CAAC;QAC3C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACnD,MAAM,EAAE,cAAc,EAAE,CAAC;YAEzB,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;gBACtC,MAAM,IAAI,sBAAQ,CAAC,sCAAsC,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAC;YAC9F,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;gBAClC,MAAM,IAAI,sBAAQ,CAAC,sCAAsC,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAC;YAC9F,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,MAAM,IAAA,gBAAK,EAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE;gBAC3D,MAAM,IAAI,sBAAQ,CAAC,8BAA8B,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAC;YACtF,IAAI,OAAO,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACjC,IAAI,CAAC,CAAC,MAAM,IAAA,gBAAK,EAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE;oBAAE,MAAM,IAAA,aAAE,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;qBAEvE,IACH,CAAC,CAAC,MAAM,IAAA,kBAAO,EAAC,QAAQ,CAAC,CAAC,IAAI,CAC5B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EACjC,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;oBAEF,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAA,gBAAK,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,IAAY,EACZ,MAAc,EACd,KAAa,EACb,MAAoB,EACpB,UAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,KAAK,CAAC;YACjC,MAAM,IAAI,sBAAQ,CAChB,iBAAiB,IAAI,0FAA0F,IAAI,iCAAiC,EACpJ,0BAA0B,EAC1B,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,MAAoB,EACpB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,KAAK,EAAE,CAAC,GAAG,sCAAoB,IAAI,SAAS,EAAE,CAAC;YAC/C,MAAM,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,KAAK,EACL,4BAA4B,kBAAkB,CAAC,OAAO,CAAC,EAAE,EACzD,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;QACF,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAChC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC,sCAAoB,CAAC,KAAK,SAAS;gBAAE,SAAS;YACrE,MAAM,IAAA,iDAA0B,EAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAMD,KAAK,CAAC,aAAa,CACjB,EAAU,EACV,SAAiB,EACjB,MAAoB,EACpB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CACjC,KAAK,EACL,eAAe,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAC5C,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,sCAAoB,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,uCAAqB,CAAC,CAAC;YAC9C,MAAM,KAAK,GACT,CAAC,MAAM,CAAC,sCAAoB,CAAC;gBAC7B,OAAO,KAAK,SAAS;gBACrB,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YAC5E,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,IAAA,iDAA0B,EAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAA2B,EAC3B,MAAoB,EACpB,UAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CACvC,MAAM,EACN,KAAK,CAAC,KAAK,EACX,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAC5E,MAAM,CACP,CAAC;QACF,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAA,kCAAiB,EAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,yBAAW,EAAE,CAAC;QACjC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChD,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC5C,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACnE,MAAM,CAAC,OAAO,CAAC,IAAI,wCAAiB,CAAC,aAAa,EAAE,gCAAgC,CAAC,CAAC,CAAC;YACzF,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,MAA0B,EAAE,SAAiB,EAAE,QAAQ,GAAG,KAAK;QAClF,IAAI,MAAM,EAAE,CAAC,sCAAoB,CAAC,KAAK,SAAS;YAC9C,MAAM,IAAI,sBAAQ,CAChB,uDAAuD,EACvD,2BAA2B,EAC3B,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CACrB,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,MAA0B,EAC1B,OAAe,EACf,SAAiB,EACjB,MAAoB;QAEpB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CACnC,KAAK,EACL,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,sCAAoB,IAAI,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAC7G,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;QACF,OAAO,CACL,OAAO,EAAE,IAAI,CACX,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM,EAAE,CAAC,sCAAoB,CAAC,KAAK,SAAS;YACnD,MAAM,CAAC,MAAM,EAAE,CAAC,uCAAqB,CAAC,KAAK,OAAO,CACrD,IAAI,KAAK,CACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,MAA0B,EAC1B,SAAoB,EACpB,SAAiB,EACjB,MAAoB;QAEpB,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,uCAAqB,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,SAAS;YACrD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,KAAK,EACL,YAAY,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAC5C,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;YACF,IACE,MAAM,CAAC,MAAM,EAAE,CAAC,sCAAoB,CAAC,KAAK,SAAS;gBACnD,MAAM,CAAC,MAAM,EAAE,CAAC,uCAAqB,CAAC,KAAK,OAAO;gBAElD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACO,KAAK,CAAC,aAAa,CACzB,MAA0B,EAC1B,KAA2B,EAC3B,MAAoB;QAEpB,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,KAAK,EACL,YAAY,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAC9C,SAAS,EACT,EAAE,MAAM,EAAE,CACX,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAClD,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACvC,IAAA,mBAAQ,EAAC,IAAA,iBAAO,GAAE,CAAC;gBACnB,IAAA,mBAAQ,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;aAChC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAC7C,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,sBAAQ,CAChB,iDAAiD,EACjD,0BAA0B,EAC1B,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAtnBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAE4B,6CAAoB;GADhD,iBAAiB,CAsnB7B;AAGD,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,eAAG,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAa;IACxD,KAAK,IAAI,SAAS,GAAG,IAAI,GAAI,SAAS,GAAG,IAAA,mBAAO,EAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC;YAEH,MAAM,IAAA,gBAAK,EAAC,SAAS,CAAC,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;gBAAE,MAAM,KAAK,CAAC;QAC5F,CAAC;IACH,CAAC;AACH,CAAC"}