harper 5.1.20 → 5.2.0-alpha.5

package/dist/utility/logging/readLog.js

@@ -45,6 +45,7 @@ const events_1 = require("events");
 const configUtils_ts_1 = require("../../config/configUtils.js");
 const hdbError_ts_1 = require("../errors/hdbError.js");
 const Server_ts_1 = require("../../server/Server.js");
+const string_decoder_1 = require("string_decoder");
 const DEFAULT_READ_LOG_LIMIT = 1000;
 const ESTIMATED_AVERAGE_ENTRY_SIZE = 200;
 exports.default = readLog;
@@ -59,8 +60,10 @@ async function readLog(request) {
     if (validation) {
         throw (0, hdbError_ts_1.handleHDBError)(validation, validation.message, hdbError_ts_1.hdbErrors.HTTP_STATUS_CODES.BAD_REQUEST, undefined, undefined, true);
     }
-    // start pulling logs from the other nodes now so it can be done in parallel
-    let whenReplicatedResponse = Server_ts_1.server.replication.replicateOperation(request);
+    // Start pulling logs from the other nodes now so it can be done in parallel. A live SSE
+    // tail (below) is local-only and never fans out, so skip replication on that path — the
+    // buffered read still aggregates the cluster for point-in-time queries.
+    let whenReplicatedResponse = isStreamingRequest(request) ? undefined : Server_ts_1.server.replication.replicateOperation(request);
     const logPath = (0, configUtils_ts_1.getConfigPath)(hdbTerms.HDB_SETTINGS_NAMES.LOG_PATH_KEY);
     const rawLogName = request.log_name === undefined ? hdbTerms.LOG_NAMES.HDB : request.log_name;
     const logName = path.extname(rawLogName) === '.log' ? rawLogName : `${rawLogName}.log`;
@@ -80,6 +83,24 @@ async function readLog(request) {
     const start = request.start === undefined ? 0 : request.start;
     const max = start + limit;
     const filter = request.filter;
+    // SSE mode: the server attached a ProgressEmitter as `request.progress` (see
+    // serverHandlers.js) because the client sent `Accept: text/event-stream`. Instead of a
+    // one-shot array, stream the recent backlog and then tail new lines live until the client
+    // disconnects. Scoped to this node's log file; the buffered path above is what aggregates
+    // the cluster for point-in-time reads.
+    if (isStreamingRequest(request)) {
+        return streamLogTail(request.progress, {
+            readLogPath,
+            level,
+            levelDefined,
+            from,
+            fromDefined,
+            to,
+            toDefined,
+            limit,
+            filter,
+        });
+    }
     let fileStart = 0;
     if (order === 'desc' && !from && !to) {
         fileStart = Math.max(fs.statSync(readLogPath).size - (max + 5) * ESTIMATED_AVERAGE_ENTRY_SIZE, 0);
@@ -369,4 +390,286 @@ function insertAscending(value, result) {
     }
     result.splice(low, 0, value);
 }
+// The marker that begins every log line — `TIMESTAMP [thread] [level]...: ` — matching the
+// buffered reader's regex so the two paths parse identically.
+const LOG_ENTRY_MARKER = /(?:^|\n)(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:[\d.]+Z) \[(.+?)]: /g;
+// How often a live tail polls the log file for appended bytes. fs.watchFile is stat-poll
+// based, which is far more robust across platforms and log rotation than fs.watch's rename
+// events; sub-second latency is plenty for a human watching logs.
+const TAIL_POLL_INTERVAL_MS = 250;
+// Cap the live-tail backlog regardless of a caller-supplied `limit`, so an unbounded `limit`
+// can neither seek-read a huge slice into memory nor drive an O(n·limit) eviction on connect.
+// Deeper history is the buffered read_log's job; the tail is about what happens next.
+const MAX_SSE_BACKLOG_ENTRIES = 1000;
+// A transient delta-read failure is retried this many times (with this delay) before the tail
+// gives up and emits a terminal error so the client can fall back to polling.
+const TAIL_READ_MAX_RETRIES = 3;
+const TAIL_READ_RETRY_MS = 250;
+function isStreamingRequest(request) {
+    return !!request.progress && typeof request.progress.emit === 'function';
+}
+function makeLogEntry(timestamp, tagsString, message) {
+    const tags = tagsString.split('] [');
+    const thread = tags[0];
+    const level = tags[1];
+    tags.splice(0, 2);
+    return { timestamp, thread, level, tags, message };
+}
+function matchesLogFilters(entry, params) {
+    const { level, levelDefined, from, fromDefined, to, toDefined, filter } = params;
+    if (filter !== undefined) {
+        const hit = ['timestamp', 'thread', 'level', 'tags', 'message'].some((attr) => {
+            const value = entry[attr];
+            if (Array.isArray(value))
+                return value.some((v) => v.includes(filter));
+            return typeof value === 'string' && value.includes(filter);
+        });
+        if (!hit)
+            return false;
+    }
+    if (levelDefined && entry.level !== level)
+        return false;
+    if (fromDefined || toDefined) {
+        const when = new Date(entry.timestamp);
+        if (fromDefined && when < from)
+            return false;
+        if (toDefined && when > to)
+            return false;
+    }
+    return true;
+}
+// Stateful incremental parser: fed appended chunks over time, it emits an entry only once the
+// next marker delimits its (possibly multi-line) message. It never force-emits a pending
+// entry — the same instance spans the backlog read and the live tail (see streamLogTail), so a
+// line torn across the snapshot boundary stays pending and is completed by the tail's next
+// read rather than emitted truncated with its continuation dropped. `reset()` clears state on
+// log rotation.
+function createIncrementalLogParser(onEntry) {
+    let remaining = '';
+    let pending;
+    // One RegExp per parser instance. Each push runs `exec` to completion (until null), which
+    // resets lastIndex to 0; we also reset it explicitly at the top of push for robustness.
+    const reader = new RegExp(LOG_ENTRY_MARKER);
+    return {
+        push(text) {
+            const data = remaining + text;
+            reader.lastIndex = 0;
+            let lastPosition = 0;
+            let parsed;
+            while ((parsed = reader.exec(data))) {
+                if (pending) {
+                    onEntry(makeLogEntry(pending.timestamp, pending.tagsString, data.slice(lastPosition, parsed.index)));
+                }
+                const [intro, timestamp, tagsString] = parsed;
+                pending = { timestamp, tagsString };
+                lastPosition = parsed.index + intro.length;
+            }
+            remaining = data.slice(lastPosition);
+        },
+        reset() {
+            pending = undefined;
+            remaining = '';
+        },
+    };
+}
+/**
+ * Stream the local log over SSE: replay the recent (bounded) backlog, then tail newly-appended
+ * lines until the client disconnects (the emitter's `signal` aborts) — or, if reads fail past
+ * retry, emit a terminal `error` so the client falls back to polling instead of watching a
+ * silently-stalled "live" stream. Resolves when the tail ends so the SSE wrapper can close.
+ *
+ * A single parser and decoder span both the backlog read and the live tail with no flush at
+ * the seam, so a line (or multi-byte character) torn across the snapshot boundary stays pending
+ * and is completed by the tail's next read — never emitted truncated with its continuation
+ * dropped. (A consequence: the newest backlog line is delivered once the following line
+ * delimits it, matching how the tail delimits every entry.)
+ */
+function streamLogTail(progress, params) {
+    const { readLogPath, limit } = params;
+    const signal = progress.signal;
+    const emit = (entry) => progress.emit('log', entry);
+    // The tail never shows more backlog than this, whatever `limit` asks for (see the constant).
+    const backlogLimit = Math.min(limit, MAX_SSE_BACKLOG_ENTRIES);
+    return new Promise((resolve) => {
+        if (signal?.aborted)
+            return resolve();
+        let offset = 0;
+        let pumping = false;
+        let pumpQueued = false;
+        let watching = false;
+        let finished = false;
+        let readFailures = 0;
+        // While replaying the backlog, matching entries are collected here (capped) rather than
+        // emitted; once the boundary is passed `backlogPhase` flips and entries emit live.
+        let backlogPhase = true;
+        const backlogEntries = [];
+        // One decoder + one parser for the whole session (backlog + tail): a multi-byte char (or a
+        // line) split across the boundary is held/pending and finished by the next read, not
+        // flushed as U+FFFD or truncated. Reset together only on rotation.
+        let decoder = new string_decoder_1.StringDecoder('utf8');
+        const parser = createIncrementalLogParser((entry) => {
+            if (!matchesLogFilters(entry, params))
+                return;
+            if (backlogPhase) {
+                backlogEntries.push(entry);
+                if (backlogEntries.length > backlogLimit)
+                    backlogEntries.shift();
+            }
+            else {
+                emit(entry);
+            }
+        });
+        function finish() {
+            if (finished)
+                return;
+            finished = true;
+            if (watching)
+                fs.unwatchFile(readLogPath, onChange);
+            resolve();
+        }
+        // Wait `ms`, or resolve early on disconnect so a retry delay never outlives the connection.
+        const abortableDelay = (ms) => new Promise((res) => {
+            if (signal?.aborted)
+                return res();
+            const timer = setTimeout(() => {
+                signal?.removeEventListener('abort', onAbort);
+                res();
+            }, ms);
+            timer.unref?.();
+            const onAbort = () => {
+                clearTimeout(timer);
+                res();
+            };
+            signal?.addEventListener('abort', onAbort, { once: true });
+        });
+        // Stream [offset, end] inclusive through the session decoder + shared parser, decoding and
+        // pushing each fs chunk as it arrives (never materializing the whole delta) and advancing
+        // `offset` per chunk, so peak memory is one chunk and a mid-range error simply resumes from
+        // where it stopped. Yields to backpressure between chunks. Returns false if the read errored.
+        async function drainTo(end) {
+            const rs = fs.createReadStream(readLogPath, { start: offset, end });
+            try {
+                for await (const chunk of rs) {
+                    if (signal?.aborted) {
+                        rs.destroy();
+                        return true;
+                    }
+                    parser.push(decoder.write(chunk));
+                    offset += chunk.length;
+                    if (progress.paused)
+                        await progress.whenWritable();
+                }
+                return true;
+            }
+            catch (err) {
+                harper_logger_ts_1.default.warn(`read_log SSE tail: failed reading ${readLogPath} near offset ${offset}: ${err?.message ?? err}`);
+                return false;
+            }
+        }
+        // Single-flight pump: drain all appended bytes into the parser. A change arriving while a
+        // pump runs sets `pumpQueued` so the loop runs once more, rather than being missed in the
+        // window between "caught up" and clearing `pumping`.
+        async function pump() {
+            if (pumping) {
+                pumpQueued = true;
+                return;
+            }
+            pumping = true;
+            try {
+                do {
+                    pumpQueued = false;
+                    while (!signal?.aborted) {
+                        let size;
+                        try {
+                            size = (await fs.promises.stat(readLogPath)).size;
+                        }
+                        catch {
+                            break;
+                        }
+                        if (size < offset) {
+                            // Truncation or rotation: restart from the new file and reset decode/parse state.
+                            offset = 0;
+                            decoder = new string_decoder_1.StringDecoder('utf8');
+                            parser.reset();
+                        }
+                        if (size <= offset)
+                            break;
+                        if (progress.paused) {
+                            await progress.whenWritable();
+                            continue;
+                        }
+                        const ok = await drainTo(size - 1);
+                        if (signal?.aborted)
+                            break;
+                        if (!ok) {
+                            if (++readFailures > TAIL_READ_MAX_RETRIES) {
+                                // Don't leave the client staring at a silently-stalled "live" stream: a
+                                // terminal error is its cue to fall back to polling.
+                                progress.emit('error', {
+                                    message: `read_log live tail could not read ${readLogPath} after ${TAIL_READ_MAX_RETRIES} retries`,
+                                    code: 'READ_LOG_TAIL_READ_ERROR',
+                                });
+                                finish();
+                                return;
+                            }
+                            await abortableDelay(TAIL_READ_RETRY_MS);
+                            continue; // resume from the advanced offset
+                        }
+                        readFailures = 0;
+                    }
+                } while (pumpQueued && !signal?.aborted);
+            }
+            finally {
+                pumping = false;
+            }
+        }
+        function onChange() {
+            void pump();
+        }
+        const startTail = () => {
+            // `offset` is already the backlog boundary, so the tail picks up strictly from there.
+            // Without a disconnect signal we can't safely tail forever; degrade to backlog-only so
+            // the client polls instead.
+            if (!signal || signal.aborted)
+                return finish();
+            fs.watchFile(readLogPath, { interval: TAIL_POLL_INTERVAL_MS }, onChange);
+            watching = true;
+            signal.addEventListener('abort', finish, { once: true });
+            // Catch anything appended between the backlog snapshot and arming the watcher.
+            void pump();
+        };
+        // Replay the backlog through the shared parser/decoder, then tail from the same boundary.
+        (async () => {
+            let startSize = 0;
+            try {
+                startSize = fs.statSync(readLogPath).size;
+            }
+            catch {
+                startSize = 0;
+            }
+            if (startSize > 0) {
+                // Bound the backlog read to roughly the last `backlogLimit` entries so a large log
+                // file can't be seek-read into memory all at once (mirrors the buffered path). A
+                // partial first line the seek lands in is dropped by the parser, as in that path.
+                offset = Math.max(startSize - (backlogLimit + 5) * ESTIMATED_AVERAGE_ENTRY_SIZE, 0);
+                await drainTo(startSize - 1); // collects into backlogEntries; read errors are logged, best-effort
+            }
+            // Hand off to the live tail: flip to emit mode and deliver the collected backlog. The
+            // parser's pending entry (the newest, possibly boundary-torn line) is deliberately left
+            // pending — the tail finishes it — so nothing is emitted truncated.
+            backlogPhase = false;
+            for (const entry of backlogEntries) {
+                if (signal?.aborted)
+                    break;
+                emit(entry);
+                if (progress.paused)
+                    await progress.whenWritable();
+            }
+            startTail();
+        })().catch((err) => {
+            harper_logger_ts_1.default.warn(`read_log SSE tail: backlog replay failed for ${readLogPath}: ${err?.message ?? err}`);
+            startTail();
+        });
+    });
+}
 //# sourceMappingURL=readLog.js.map

package/dist/utility/logging/readLog.js.map

@@ -1 +1 @@
-{"version":3,"file":"readLog.js","sourceRoot":"","sources":["../../../utility/logging/readLog.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEb,yDAA2C;AAC3C,0EAA2C;AAC3C,+FAA6D;AAC7D,2CAA6B;AAC7B,6CAA+B;AAC/B,mCAA8B;AAC9B,gEAA4D;AAC5D,uDAAkE;AAClE,sDAAgD;AAEhD,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEzC,kBAAe,OAAO,CAAC;AAEvB;;;;;GAKG;AACH,KAAK,UAAU,OAAO,CAAC,OAAY;IAClC,MAAM,UAAU,GAAG,IAAA,6BAAS,EAAC,OAAO,CAAC,CAAC;IACtC,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,IAAA,4BAAc,EACnB,UAAU,EACV,UAAU,CAAC,OAAO,EAClB,uBAAS,CAAC,iBAAiB,CAAC,WAAW,EACvC,SAAS,EACT,SAAS,EACT,IAAI,CACJ,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,IAAI,sBAAsB,GAAG,kBAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAG,IAAA,8BAAa,EAAC,QAAQ,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,MAAM,CAAC;IACvF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEhD,wDAAwD;IACxD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;IACjD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC;IAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC;IAC3C,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACnF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACtC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,4BAA4B,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,kBAAkB,GAAG,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAClF,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,0BAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,eAAe,CAAC;IACpB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;QACzC,IAAI,MAAM,GAAG,6DAA6D,CAAC;QAC3E,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;QAC9B,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC;QACX,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACxC,IAAI,kBAAkB,CAAC,SAAS;gBAAE,MAAM;YACxC,IAAI,eAAe,EAAE,CAAC;gBACrB,eAAe,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACpE,YAAY,CAAC,eAAe,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC;YAC5C,IAAI,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClB,eAAe,GAAG;gBACjB,SAAS;gBACT,MAAM;gBACN,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,EAAE;aACX,CAAC;YACF,YAAY,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5C,CAAC;QACD,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QACjC,IAAI,kBAAkB,CAAC,SAAS;YAAE,OAAO;QACzC,IAAI,eAAe,EAAE,CAAC;YACrB,eAAe,CAAC,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;YAC3C,YAAY,CAAC,eAAe,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,MAAM,EAAE,CAAC;IAC5B,SAAS,YAAY,CAAC,IAAS;QAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,IACC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;gBACjE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBACvD,CAAC;gBACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC,CAAC,EACD,CAAC;gBACF,KAAK,GAAG,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,OAAO;QACpB,CAAC;QAED,yGAAyG;QACzG,cAAc,EAAE,CAAC;QACjB,IAAI,cAAc,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAC/B,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC3B,YAAY,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,QAAQ,CAAC;QACb,IAAI,MAAM,CAAC;QACX,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,YAAY,IAAI,WAAW,IAAI,SAAS;gBAC5C,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBAEtB,iIAAiI;gBACjI,uCAAuC;gBACvC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAC/F,oGAAoG;qBAC/F,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBAC3E,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,wEAAwE;gBACxE,MAAM;YACP,KAAK,YAAY,IAAI,WAAW;gBAC/B,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE1B,2HAA2H;gBAC3H,uCAAuC;gBACvC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,QAAQ,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAC1E,oHAAoH;qBAC/G,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;oBACtD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,gEAAgE;gBAChE,MAAM;YACP,KAAK,YAAY,IAAI,SAAS;gBAC7B,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBAEtB,yHAAyH;gBACzH,uCAAuC;gBACvC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBACxE,kHAAkH;qBAC7G,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACpD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,gEAAgE;gBAChE,MAAM;YACP,KAAK,WAAW,IAAI,SAAS;gBAC5B,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBAEtB,8FAA8F;gBAC9F,uCAAuC;gBACvC,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBACvE,oGAAoG;qBAC/F,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACnD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,wEAAwE;gBACxE,MAAM;YACP,KAAK,YAAY;gBAChB,uEAAuE;gBACvE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBACnD,0FAA0F;qBACrF,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC/B,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,sEAAsE;gBACtE,MAAM;YACP,KAAK,WAAW;gBACf,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE1B,wFAAwF;gBACxF,uCAAuC;gBACvC,IAAI,OAAO,IAAI,QAAQ,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAClD,sGAAsG;qBACjG,IAAI,OAAO,IAAI,QAAQ,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;oBAChD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,gEAAgE;gBAChE,MAAM;YACP,KAAK,SAAS;gBACb,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBAEtB,sFAAsF;gBACtF,uCAAuC;gBACvC,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAChD,oGAAoG;qBAC/F,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;oBAC9C,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,gEAAgE;gBAChE,MAAM;YACP;gBACC,mEAAmE;gBACnE,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAC3B,+CAA+C;qBAC1C,CAAC;oBACL,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,IAAA,aAAI,EAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,kBAAkB,GAAG,MAAM,sBAAsB,CAAC;IACtD,IAAI,kBAAkB,CAAC,UAAU,EAAE,CAAC;QACnC,+EAA+E;QAC/E,KAAK,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,GAAG,kBAAM,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,8CAA8C;QAC9C,KAAK,IAAI,UAAU,IAAK,kBAA0B,CAAC,UAAU,EAAE,CAAC;YAC/D,IAAI,IAAI,GAAI,UAAkB,CAAC,IAAI,CAAC;YACpC,IAAK,UAAkB,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7C,qDAAqD;gBACrD,gBAAgB,CACf;oBACC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,KAAK,EAAE,OAAO;oBACd,IAAI;oBACJ,OAAO,EAAE,0BAA0B,UAAU,CAAC,MAAM,EAAE;iBACtD,EACD,KAAK,EACL,MAAM,CACN,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,KAAK,IAAI,IAAI,IAAK,UAAkB,CAAC,OAAO,EAAE,CAAC;oBAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBACjB,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBACvC,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,IAAS,EAAE,KAAyB,EAAE,MAAa;IAC5E,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACtB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC5B,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAU,EAAE,MAAa;IAClD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC;QACnB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,OAAO;YAAE,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;;YACxD,IAAI,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAU,EAAE,MAAa;IACjD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC;QACnB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,OAAO;YAAE,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;;YACxD,IAAI,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"readLog.js","sourceRoot":"","sources":["../../../utility/logging/readLog.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEb,yDAA2C;AAC3C,0EAA2C;AAC3C,+FAA6D;AAC7D,2CAA6B;AAC7B,6CAA+B;AAC/B,mCAA8B;AAC9B,gEAA4D;AAC5D,uDAAkE;AAClE,sDAAgD;AAChD,mDAA+C;AAE/C,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEzC,kBAAe,OAAO,CAAC;AAEvB;;;;;GAKG;AACH,KAAK,UAAU,OAAO,CAAC,OAAY;IAClC,MAAM,UAAU,GAAG,IAAA,6BAAS,EAAC,OAAO,CAAC,CAAC;IACtC,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,IAAA,4BAAc,EACnB,UAAU,EACV,UAAU,CAAC,OAAO,EAClB,uBAAS,CAAC,iBAAiB,CAAC,WAAW,EACvC,SAAS,EACT,SAAS,EACT,IAAI,CACJ,CAAC;IACH,CAAC;IACD,wFAAwF;IACxF,wFAAwF;IACxF,wEAAwE;IACxE,IAAI,sBAAsB,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEtH,MAAM,OAAO,GAAG,IAAA,8BAAa,EAAC,QAAQ,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,MAAM,CAAC;IACvF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEhD,wDAAwD;IACxD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;IACjD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC;IAC/C,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC;IAC3C,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACnF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9B,6EAA6E;IAC7E,uFAAuF;IACvF,0FAA0F;IAC1F,0FAA0F;IAC1F,uCAAuC;IACvC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE;YACtC,WAAW;YACX,KAAK;YACL,YAAY;YACZ,IAAI;YACJ,WAAW;YACX,EAAE;YACF,SAAS;YACT,KAAK;YACL,MAAM;SACN,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACtC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,4BAA4B,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,kBAAkB,GAAG,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAClF,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,0BAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,eAAe,CAAC;IACpB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;QACzC,IAAI,MAAM,GAAG,6DAA6D,CAAC;QAC3E,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;QAC9B,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC;QACX,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACxC,IAAI,kBAAkB,CAAC,SAAS;gBAAE,MAAM;YACxC,IAAI,eAAe,EAAE,CAAC;gBACrB,eAAe,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACpE,YAAY,CAAC,eAAe,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC;YAC5C,IAAI,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClB,eAAe,GAAG;gBACjB,SAAS;gBACT,MAAM;gBACN,KAAK;gBACL,IAAI;gBACJ,OAAO,EAAE,EAAE;aACX,CAAC;YACF,YAAY,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5C,CAAC;QACD,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QACjC,IAAI,kBAAkB,CAAC,SAAS;YAAE,OAAO;QACzC,IAAI,eAAe,EAAE,CAAC;YACrB,eAAe,CAAC,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;YAC3C,YAAY,CAAC,eAAe,CAAC,CAAC;QAC/B,CAAC;IACF,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,MAAM,EAAE,CAAC;IAC5B,SAAS,YAAY,CAAC,IAAS;QAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,IACC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;gBACjE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBACvD,CAAC;gBACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC,CAAC,EACD,CAAC;gBACF,KAAK,GAAG,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,KAAK;gBAAE,OAAO;QACpB,CAAC;QAED,yGAAyG;QACzG,cAAc,EAAE,CAAC;QACjB,IAAI,cAAc,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAC/B,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC3B,YAAY,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,QAAQ,CAAC;QACb,IAAI,MAAM,CAAC;QACX,QAAQ,IAAI,EAAE,CAAC;YACd,KAAK,YAAY,IAAI,WAAW,IAAI,SAAS;gBAC5C,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBAEtB,iIAAiI;gBACjI,uCAAuC;gBACvC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAC/F,oGAAoG;qBAC/F,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBAC3E,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,wEAAwE;gBACxE,MAAM;YACP,KAAK,YAAY,IAAI,WAAW;gBAC/B,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE1B,2HAA2H;gBAC3H,uCAAuC;gBACvC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,QAAQ,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAC1E,oHAAoH;qBAC/G,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;oBACtD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,gEAAgE;gBAChE,MAAM;YACP,KAAK,YAAY,IAAI,SAAS;gBAC7B,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBAEtB,yHAAyH;gBACzH,uCAAuC;gBACvC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBACxE,kHAAkH;qBAC7G,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACpD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,gEAAgE;gBAChE,MAAM;YACP,KAAK,WAAW,IAAI,SAAS;gBAC5B,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBAEtB,8FAA8F;gBAC9F,uCAAuC;gBACvC,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBACvE,oGAAoG;qBAC/F,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACnD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,wEAAwE;gBACxE,MAAM;YACP,KAAK,YAAY;gBAChB,uEAAuE;gBACvE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBACnD,0FAA0F;qBACrF,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;oBAC/B,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,sEAAsE;gBACtE,MAAM;YACP,KAAK,WAAW;gBACf,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE1B,wFAAwF;gBACxF,uCAAuC;gBACvC,IAAI,OAAO,IAAI,QAAQ,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAClD,sGAAsG;qBACjG,IAAI,OAAO,IAAI,QAAQ,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;oBAChD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,gEAAgE;gBAChE,MAAM;YACP,KAAK,SAAS;gBACb,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnC,MAAM,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;gBAEtB,sFAAsF;gBACtF,uCAAuC;gBACvC,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAChD,oGAAoG;qBAC/F,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;oBAC9C,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,gEAAgE;gBAChE,MAAM;YACP;gBACC,mEAAmE;gBACnE,IAAI,KAAK,GAAG,KAAK;oBAAE,KAAK,EAAE,CAAC;gBAC3B,+CAA+C;qBAC1C,CAAC;oBACL,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;oBACtC,KAAK,EAAE,CAAC;oBACR,iFAAiF;oBACjF,IAAI,KAAK,KAAK,GAAG;wBAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,IAAA,aAAI,EAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,kBAAkB,GAAG,MAAM,sBAAsB,CAAC;IACtD,IAAI,kBAAkB,CAAC,UAAU,EAAE,CAAC;QACnC,+EAA+E;QAC/E,KAAK,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,GAAG,kBAAM,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,8CAA8C;QAC9C,KAAK,IAAI,UAAU,IAAK,kBAA0B,CAAC,UAAU,EAAE,CAAC;YAC/D,IAAI,IAAI,GAAI,UAAkB,CAAC,IAAI,CAAC;YACpC,IAAK,UAAkB,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7C,qDAAqD;gBACrD,gBAAgB,CACf;oBACC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,KAAK,EAAE,OAAO;oBACd,IAAI;oBACJ,OAAO,EAAE,0BAA0B,UAAU,CAAC,MAAM,EAAE;iBACtD,EACD,KAAK,EACL,MAAM,CACN,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,KAAK,IAAI,IAAI,IAAK,UAAkB,CAAC,OAAO,EAAE,CAAC;oBAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBACjB,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBACvC,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,IAAS,EAAE,KAAyB,EAAE,MAAa;IAC5E,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACtB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC5B,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAU,EAAE,MAAa;IAClD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC;QACnB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,OAAO;YAAE,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;;YACxD,IAAI,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAU,EAAE,MAAa;IACjD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC;QACnB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,OAAO;YAAE,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;;YACxD,IAAI,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAsBD,2FAA2F;AAC3F,8DAA8D;AAC9D,MAAM,gBAAgB,GAAG,6DAA6D,CAAC;AACvF,yFAAyF;AACzF,2FAA2F;AAC3F,kEAAkE;AAClE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,6FAA6F;AAC7F,8FAA8F;AAC9F,sFAAsF;AACtF,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,8FAA8F;AAC9F,8EAA8E;AAC9E,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,SAAS,kBAAkB,CAAC,OAAY;IACvC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC;AAC1E,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,UAAkB,EAAE,OAAe;IAC3E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClB,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAe,EAAE,MAAwB;IACnE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACjF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACxF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;IACxB,CAAC;IACD,IAAI,YAAY,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,WAAW,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,WAAW,IAAI,IAAI,GAAI,IAAa;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,SAAS,IAAI,IAAI,GAAI,EAAW;YAAE,OAAO,KAAK,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,8FAA8F;AAC9F,yFAAyF;AACzF,+FAA+F;AAC/F,2FAA2F;AAC3F,8FAA8F;AAC9F,gBAAgB;AAChB,SAAS,0BAA0B,CAAC,OAAkC;IACrE,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,OAA8D,CAAC;IACnE,0FAA0F;IAC1F,wFAAwF;IACxF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC5C,OAAO;QACN,IAAI,CAAC,IAAY;YAChB,MAAM,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC;YAC9B,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;YACrB,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,MAAM,CAAC;YACX,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACrC,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtG,CAAC;gBACD,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC;gBAC9C,OAAO,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;gBACpC,YAAY,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;YAC5C,CAAC;YACD,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACtC,CAAC;QACD,KAAK;YACJ,OAAO,GAAG,SAAS,CAAC;YACpB,SAAS,GAAG,EAAE,CAAC;QAChB,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,QAAa,EAAE,MAAwB;IAC7D,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACtC,MAAM,MAAM,GAA4B,QAAQ,CAAC,MAAM,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9D,6FAA6F;IAC7F,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IAE9D,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACpC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QAEtC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,wFAAwF;QACxF,mFAAmF;QACnF,IAAI,YAAY,GAAG,IAAI,CAAC;QACxB,MAAM,cAAc,GAAe,EAAE,CAAC;QACtC,2FAA2F;QAC3F,qFAAqF;QACrF,mEAAmE;QACnE,IAAI,OAAO,GAAG,IAAI,8BAAa,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,0BAA0B,CAAC,CAAC,KAAK,EAAE,EAAE;YACnD,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC;gBAAE,OAAO;YAC9C,IAAI,YAAY,EAAE,CAAC;gBAClB,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3B,IAAI,cAAc,CAAC,MAAM,GAAG,YAAY;oBAAE,cAAc,CAAC,KAAK,EAAE,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,KAAK,CAAC,CAAC;YACb,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,SAAS,MAAM;YACd,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,QAAQ;gBAAE,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACpD,OAAO,EAAE,CAAC;QACX,CAAC;QAED,4FAA4F;QAC5F,MAAM,cAAc,GAAG,CAAC,EAAU,EAAE,EAAE,CACrC,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE;YACzB,IAAI,MAAM,EAAE,OAAO;gBAAE,OAAO,GAAG,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9C,GAAG,EAAE,CAAC;YACP,CAAC,EAAE,EAAE,CAAC,CAAC;YACP,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,GAAG,EAAE;gBACpB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,GAAG,EAAE,CAAC;YACP,CAAC,CAAC;YACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEJ,2FAA2F;QAC3F,0FAA0F;QAC1F,4FAA4F;QAC5F,8FAA8F;QAC9F,KAAK,UAAU,OAAO,CAAC,GAAW;YACjC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC;gBACJ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,EAAE,EAAE,CAAC;oBAC9B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;wBACrB,EAAE,CAAC,OAAO,EAAE,CAAC;wBACb,OAAO,IAAI,CAAC;oBACb,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC,CAAC;oBAC5C,MAAM,IAAK,KAAgB,CAAC,MAAM,CAAC;oBACnC,IAAI,QAAQ,CAAC,MAAM;wBAAE,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;gBACpD,CAAC;gBACD,OAAO,IAAI,CAAC;YACb,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBACnB,0BAAS,CAAC,IAAI,CACb,qCAAqC,WAAW,gBAAgB,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAChG,CAAC;gBACF,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QAED,0FAA0F;QAC1F,0FAA0F;QAC1F,qDAAqD;QACrD,KAAK,UAAU,IAAI;YAClB,IAAI,OAAO,EAAE,CAAC;gBACb,UAAU,GAAG,IAAI,CAAC;gBAClB,OAAO;YACR,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBACJ,GAAG,CAAC;oBACH,UAAU,GAAG,KAAK,CAAC;oBACnB,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;wBACzB,IAAI,IAAY,CAAC;wBACjB,IAAI,CAAC;4BACJ,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;wBACnD,CAAC;wBAAC,MAAM,CAAC;4BACR,MAAM;wBACP,CAAC;wBACD,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;4BACnB,kFAAkF;4BAClF,MAAM,GAAG,CAAC,CAAC;4BACX,OAAO,GAAG,IAAI,8BAAa,CAAC,MAAM,CAAC,CAAC;4BACpC,MAAM,CAAC,KAAK,EAAE,CAAC;wBAChB,CAAC;wBACD,IAAI,IAAI,IAAI,MAAM;4BAAE,MAAM;wBAC1B,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;4BACrB,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;4BAC9B,SAAS;wBACV,CAAC;wBACD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;wBACnC,IAAI,MAAM,EAAE,OAAO;4BAAE,MAAM;wBAC3B,IAAI,CAAC,EAAE,EAAE,CAAC;4BACT,IAAI,EAAE,YAAY,GAAG,qBAAqB,EAAE,CAAC;gCAC5C,wEAAwE;gCACxE,qDAAqD;gCACrD,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE;oCACtB,OAAO,EAAE,qCAAqC,WAAW,UAAU,qBAAqB,UAAU;oCAClG,IAAI,EAAE,0BAA0B;iCAChC,CAAC,CAAC;gCACH,MAAM,EAAE,CAAC;gCACT,OAAO;4BACR,CAAC;4BACD,MAAM,cAAc,CAAC,kBAAkB,CAAC,CAAC;4BACzC,SAAS,CAAC,kCAAkC;wBAC7C,CAAC;wBACD,YAAY,GAAG,CAAC,CAAC;oBAClB,CAAC;gBACF,CAAC,QAAQ,UAAU,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE;YAC1C,CAAC;oBAAS,CAAC;gBACV,OAAO,GAAG,KAAK,CAAC;YACjB,CAAC;QACF,CAAC;QAED,SAAS,QAAQ;YAChB,KAAK,IAAI,EAAE,CAAC;QACb,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,EAAE;YACtB,sFAAsF;YACtF,uFAAuF;YACvF,4BAA4B;YAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,MAAM,EAAE,CAAC;YAC/C,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE,QAAQ,CAAC,CAAC;YACzE,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,+EAA+E;YAC/E,KAAK,IAAI,EAAE,CAAC;QACb,CAAC,CAAC;QAEF,0FAA0F;QAC1F,CAAC,KAAK,IAAI,EAAE;YACX,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC;gBACJ,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS,GAAG,CAAC,CAAC;YACf,CAAC;YACD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBACnB,mFAAmF;gBACnF,iFAAiF;gBACjF,kFAAkF;gBAClF,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,4BAA4B,EAAE,CAAC,CAAC,CAAC;gBACpF,MAAM,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,oEAAoE;YACnG,CAAC;YACD,sFAAsF;YACtF,wFAAwF;YACxF,oEAAoE;YACpE,YAAY,GAAG,KAAK,CAAC;YACrB,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;gBACpC,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM;gBAC3B,IAAI,CAAC,KAAK,CAAC,CAAC;gBACZ,IAAI,QAAQ,CAAC,MAAM;oBAAE,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;YACpD,CAAC;YACD,SAAS,EAAE,CAAC;QACb,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAClB,0BAAS,CAAC,IAAI,CAAC,gDAAgD,WAAW,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;YACtG,SAAS,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/utility/operationPermissions.d.ts

@@ -23,7 +23,25 @@ export declare const OPERATION_PERMISSION_GROUPS: {
      * or admin reads (get_configuration, logs). Add those explicitly when needed.
      */
     readonly standard_user: readonly ["search", "search_by_conditions", "search_by_hash", "search_by_id", "search_by_value", "sql", "describe_all", "describe_schema", "describe_database", "describe_table", "user_info", "get_job", "get_analytics", "list_metrics", "describe_metric", "insert", "update", "upsert", "delete", "csv_data_load", "csv_file_load", "csv_url_load", "import_from_s3"];
+    /**
+     * Drive the built-in agent (#626): send prompts, read/list sessions, and approve/cancel
+     * runs. Grants a scoped, non-super_user "delegation" role access to the agent without full
+     * super_user (all agent ops are super_user by default). Deliberately EXCLUDES set_agent_config
+     * — changing the agent's model/approval policy stays an operator (super_user) action.
+     */
+    readonly agent: readonly ["agent_prompt", "get_agent_session", "list_agent_sessions", "cancel_agent_run", "approve_agent_action"];
 };
+/**
+ * Mark a dynamically-registered operation name as a valid target for role `operations` grants.
+ * Called by registerOperationPermission so a component op declaring a permission can actually be
+ * granted (not just enforced). Enum-backed op names are already valid; this covers custom names.
+ */
+export declare function registerGrantableOperation(name: string): void;
+/**
+ * Remove a dynamically-registered grantable operation name. Mirrors registerGrantableOperation;
+ * primarily for tests that register throwaway ops and must not leak them into the global set.
+ */
+export declare function unregisterGrantableOperation(name: string): void;
 /**
  * Validates that every entry in an operations array is a known operation name or group name.
  * Returns the first invalid entry, or null if all entries are valid.

package/dist/utility/operationPermissions.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OPERATION_PERMISSION_GROUPS = void 0;
+exports.registerGrantableOperation = registerGrantableOperation;
+exports.unregisterGrantableOperation = unregisterGrantableOperation;
 exports.validateOperations = validateOperations;
 exports.expandOperationsPerms = expandOperationsPerms;
 const hdbTerms_ts_1 = require("./hdbTerms.js");
@@ -80,16 +82,48 @@ exports.OPERATION_PERMISSION_GROUPS = {
         hdbTerms_ts_1.OPERATIONS_ENUM.CSV_URL_LOAD,
         hdbTerms_ts_1.OPERATIONS_ENUM.IMPORT_FROM_S3,
     ],
+    /**
+     * Drive the built-in agent (#626): send prompts, read/list sessions, and approve/cancel
+     * runs. Grants a scoped, non-super_user "delegation" role access to the agent without full
+     * super_user (all agent ops are super_user by default). Deliberately EXCLUDES set_agent_config
+     * — changing the agent's model/approval policy stays an operator (super_user) action.
+     */
+    agent: [
+        hdbTerms_ts_1.OPERATIONS_ENUM.AGENT_PROMPT,
+        hdbTerms_ts_1.OPERATIONS_ENUM.GET_AGENT_SESSION,
+        hdbTerms_ts_1.OPERATIONS_ENUM.LIST_AGENT_SESSIONS,
+        hdbTerms_ts_1.OPERATIONS_ENUM.CANCEL_AGENT_RUN,
+        hdbTerms_ts_1.OPERATIONS_ENUM.APPROVE_AGENT_ACTION,
+    ],
 };
 const validOps = new Set(Object.values(hdbTerms_ts_1.OPERATIONS_ENUM));
 const validGroups = new Set(Object.keys(exports.OPERATION_PERMISSION_GROUPS));
+// Operations registered dynamically at runtime (server.registerOperation with a declared
+// permission) whose names may fall outside OPERATIONS_ENUM. Tracked so they're grantable in a
+// role's `operations` allowlist (add_role/alter_role/impersonation validate against this set too).
+const dynamicallyRegisteredOps = new Set();
+/**
+ * Mark a dynamically-registered operation name as a valid target for role `operations` grants.
+ * Called by registerOperationPermission so a component op declaring a permission can actually be
+ * granted (not just enforced). Enum-backed op names are already valid; this covers custom names.
+ */
+function registerGrantableOperation(name) {
+    dynamicallyRegisteredOps.add(name);
+}
+/**
+ * Remove a dynamically-registered grantable operation name. Mirrors registerGrantableOperation;
+ * primarily for tests that register throwaway ops and must not leak them into the global set.
+ */
+function unregisterGrantableOperation(name) {
+    dynamicallyRegisteredOps.delete(name);
+}
 /**
  * Validates that every entry in an operations array is a known operation name or group name.
  * Returns the first invalid entry, or null if all entries are valid.
  */
 function validateOperations(operations) {
     for (const op of operations) {
-        if (typeof op !== 'string' || (!validOps.has(op) && !validGroups.has(op))) {
+        if (typeof op !== 'string' || (!validOps.has(op) && !validGroups.has(op) && !dynamicallyRegisteredOps.has(op))) {
             return String(op);
         }
     }

package/dist/utility/operationPermissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"operationPermissions.js","sourceRoot":"","sources":["../../utility/operationPermissions.ts"],"names":[],"mappings":";;;AAuFA,gDAOC;AAMD,sDAWC;AA/GD,+CAAgD;AAEhD;;;GAGG;AACU,QAAA,2BAA2B,GAAG;IAC1C;;;;;OAKG;IACH,SAAS,EAAE;QACV,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;KAC/B;IACD;;;;;OAKG;IACH,UAAU,EAAE;QACX,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,QAAQ;QACxB,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,kBAAkB;KAClC;IACD;;;;OAIG;IACH,aAAa,EAAE;QACd,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,YAAY;QACZ,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,cAAc;KAC9B;CACQ,CAAC;AAEX,MAAM,QAAQ,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,6BAAe,CAAC,CAAC,CAAC;AACtE,MAAM,WAAW,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,mCAA2B,CAAC,CAAC,CAAC;AAEnF;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,UAA8B;IAChE,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,UAA6B;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,mCAA2B,CAAC,IAAgD,CAAC,CAAC;QAC5F,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,MAAM,EAAE,IAAI,KAAK;gBAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC"}
+{"version":3,"file":"operationPermissions.js","sourceRoot":"","sources":["../../utility/operationPermissions.ts"],"names":[],"mappings":";;;AAyGA,gEAEC;AAMD,oEAEC;AAMD,gDAOC;AAMD,sDAWC;AAjJD,+CAAgD;AAEhD;;;GAGG;AACU,QAAA,2BAA2B,GAAG;IAC1C;;;;;OAKG;IACH,SAAS,EAAE;QACV,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;KAC/B;IACD;;;;;OAKG;IACH,UAAU,EAAE;QACX,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,QAAQ;QACxB,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,kBAAkB;KAClC;IACD;;;;OAIG;IACH,aAAa,EAAE;QACd,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,YAAY;QACZ,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,cAAc;KAC9B;IACD;;;;;OAKG;IACH,KAAK,EAAE;QACN,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,gBAAgB;QAChC,6BAAe,CAAC,oBAAoB;KACpC;CACQ,CAAC;AAEX,MAAM,QAAQ,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,6BAAe,CAAC,CAAC,CAAC;AACtE,MAAM,WAAW,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,mCAA2B,CAAC,CAAC,CAAC;AACnF,yFAAyF;AACzF,8FAA8F;AAC9F,mGAAmG;AACnG,MAAM,wBAAwB,GAAgB,IAAI,GAAG,EAAE,CAAC;AAExD;;;;GAIG;AACH,SAAgB,0BAA0B,CAAC,IAAY;IACtD,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAgB,4BAA4B,CAAC,IAAY;IACxD,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,UAA8B;IAChE,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAChH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,UAA6B;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,mCAA2B,CAAC,IAAgD,CAAC,CAAC;QAC5F,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,MAAM,EAAE,IAAI,KAAK;gBAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC"}

package/dist/utility/operation_authorization.d.ts

@@ -1,3 +1,20 @@
+/**
+ * Register an authorization entry for a dynamically-registered operation (via
+ * server.registerOperation), so it flows through verifyPerms and the role `operations`
+ * allowlist exactly like a built-in op — instead of hand-rolling an inline super_user check.
+ * Keyed by the snake_case API operation name (which registerOperation also forces onto the
+ * handler's `.name`, the key verifyPerms looks up). SU-only by default.
+ */
+export declare function registerOperationPermission(apiName: string, { requiresSu, perms }?: {
+    requiresSu?: boolean;
+    perms?: string[];
+}): void;
+/**
+ * Remove an authorization entry registered via registerOperationPermission (both the verifyPerms
+ * entry and the grantable-op mark). Mirrors registerOperationPermission; primarily for tests that
+ * register throwaway ops and must not leak them into the process-global registries.
+ */
+export declare function unregisterOperationPermission(apiName: string): void;
 /**
  * Verifies permissions and restrictions for a SQL operation based on the user's assigned role.
  * @param ast - The SQL statement in Syntax Tree form.

package/dist/utility/operation_authorization.js

@@ -36,6 +36,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerOperationPermission = registerOperationPermission;
+exports.unregisterOperationPermission = unregisterOperationPermission;
 exports.verifyPermsAST = verifyPermsAST;
 exports.verifyPerms = verifyPerms;
 exports.hasPermissions = hasPermissions;
@@ -83,6 +85,7 @@ const PermissionResponseObject_ts_1 = __importDefault(require("../security/data_
 const hdbError_ts_1 = require("../utility/errors/hdbError.js");
 const regDeprecated = __importStar(require("../resources/registrationDeprecated.js"));
 const deploymentOperations = __importStar(require("../components/deploymentOperations.js"));
+const secretOperations = __importStar(require("../components/secretOperations.js"));
 const requiredPermissions = new Map();
 const DELETE_PERM = 'delete';
 const INSERT_PERM = 'insert';
@@ -142,6 +145,28 @@ class permission {
         this.api_name = apiName;
     }
 }
+/**
+ * Register an authorization entry for a dynamically-registered operation (via
+ * server.registerOperation), so it flows through verifyPerms and the role `operations`
+ * allowlist exactly like a built-in op — instead of hand-rolling an inline super_user check.
+ * Keyed by the snake_case API operation name (which registerOperation also forces onto the
+ * handler's `.name`, the key verifyPerms looks up). SU-only by default.
+ */
+function registerOperationPermission(apiName, { requiresSu = false, perms = [] } = {}) {
+    requiredPermissions.set(apiName, new permission(requiresSu, perms, apiName));
+    // Also make the op grantable in a role's `operations` allowlist (validateOperations), so a
+    // declared permission can be both enforced AND granted — not just enforced.
+    (0, operationPermissions_ts_1.registerGrantableOperation)(apiName);
+}
+/**
+ * Remove an authorization entry registered via registerOperationPermission (both the verifyPerms
+ * entry and the grantable-op mark). Mirrors registerOperationPermission; primarily for tests that
+ * register throwaway ops and must not leak them into the process-global registries.
+ */
+function unregisterOperationPermission(apiName) {
+    requiredPermissions.delete(apiName);
+    (0, operationPermissions_ts_1.unregisterGrantableOperation)(apiName);
+}
 requiredPermissions.set(write.insert.name, new permission(false, [INSERT_PERM], terms.OPERATIONS_ENUM.INSERT));
 requiredPermissions.set(write.update.name, new permission(false, [UPDATE_PERM], terms.OPERATIONS_ENUM.UPDATE));
 requiredPermissions.set(write.upsert.name, new permission(false, [INSERT_PERM, UPDATE_PERM], terms.OPERATIONS_ENUM.UPSERT));
@@ -197,6 +222,9 @@ requiredPermissions.set(functionsOperations.getCustomFunctions.name, new permiss
 requiredPermissions.set(functionsOperations.getComponents.name, new permission(true, [], terms.OPERATIONS_ENUM.GET_COMPONENTS));
 requiredPermissions.set(functionsOperations.getComponentFile.name, new permission(true, [], terms.OPERATIONS_ENUM.GET_COMPONENT_FILE));
 requiredPermissions.set(functionsOperations.setComponentFile.name, new permission(true, []));
+requiredPermissions.set(functionsOperations.getEnvKeys.name, new permission(true, [], terms.OPERATIONS_ENUM.GET_ENV_KEYS));
+requiredPermissions.set(functionsOperations.setEnvValue.name, new permission(true, [], terms.OPERATIONS_ENUM.SET_ENV_VALUE));
+requiredPermissions.set(functionsOperations.deleteEnvValue.name, new permission(true, [], terms.OPERATIONS_ENUM.DELETE_ENV_VALUE));
 requiredPermissions.set(functionsOperations.dropComponent.name, new permission(true, []));
 requiredPermissions.set(functionsOperations.getCustomFunction.name, new permission(true, [], terms.OPERATIONS_ENUM.GET_CUSTOM_FUNCTION));
 requiredPermissions.set(functionsOperations.setCustomFunction.name, new permission(true, []));
@@ -207,6 +235,14 @@ requiredPermissions.set(functionsOperations.packageComponent.name, new permissio
 requiredPermissions.set(functionsOperations.deployComponent.name, new permission(true, []));
 requiredPermissions.set(deploymentOperations.handleListDeployments.name, new permission(true, [], terms.OPERATIONS_ENUM.LIST_DEPLOYMENTS));
 requiredPermissions.set(deploymentOperations.handleGetDeployment.name, new permission(true, [], terms.OPERATIONS_ENUM.GET_DEPLOYMENT));
+// Secrets-store operations. All SU-only; the handlers ALSO enforce super_user directly, so these
+// cannot be delegated through a role's `operations` allowlist (gate-2 bypass below).
+requiredPermissions.set(secretOperations.setSecret.name, new permission(true, [], terms.OPERATIONS_ENUM.SET_SECRET));
+requiredPermissions.set(secretOperations.grantSecret.name, new permission(true, [], terms.OPERATIONS_ENUM.GRANT_SECRET));
+requiredPermissions.set(secretOperations.revokeSecret.name, new permission(true, [], terms.OPERATIONS_ENUM.REVOKE_SECRET));
+requiredPermissions.set(secretOperations.listSecrets.name, new permission(true, [], terms.OPERATIONS_ENUM.LIST_SECRETS));
+requiredPermissions.set(secretOperations.deleteSecret.name, new permission(true, [], terms.OPERATIONS_ENUM.DELETE_SECRET));
+requiredPermissions.set(secretOperations.getSecretsPublicKey.name, new permission(true, [], terms.OPERATIONS_ENUM.GET_SECRETS_PUBLIC_KEY));
 //Below are functions that are currently open to all roles
 requiredPermissions.set(regDeprecated.getRegistrationInfo.name, new permission(false, []));
 requiredPermissions.set(user.userInfo.name, new permission(false, [], terms.OPERATIONS_ENUM.USER_INFO));
@@ -231,6 +267,8 @@ module.exports = {
     verifyPerms,
     verifyPermsAST,
     verifyBulkLoadAttributePerms,
+    registerOperationPermission,
+    unregisterOperationPermission,
 };
 /**
  * Verifies permissions and restrictions for a SQL operation based on the user's assigned role.