host-execution-mcp 1.0.0

package/dist/ssh/access-sftp.js

@@ -0,0 +1,456 @@
+/**
+ * Hop1 local ↔ accessClient transfers via ssh2-sftp-client (independent TCP).
+ * Directory = list + per-file put/get (not uploadDir/downloadDir).
+ *
+ * skipIfComplete gate strength = verify mode (no auto-upgrade to sha256).
+ * verify fail on skip → fallthrough rewrite (never throw-only).
+ */
+import fs from "node:fs/promises";
+import path from "node:path";
+import SftpClient from "ssh2-sftp-client";
+import { resolveAccessSshIdentity, resolveSshAuthOptions } from "../config.js";
+import { getPinnedParadiAuth, resolveParadiConnectParams, } from "../access/paradi-auth.js";
+import { toAccessUnavailableError } from "./access-errors.js";
+import { createProgressReporter, createTransferId, DEFAULT_CONNECTION_TIMEOUT_MS, DEFAULT_PROGRESS_INTERVAL_MS, resolveEffectiveVerify, sha256File, throwIfAborted, transferSkipFields, } from "../utils/copy-transfer.js";
+function posixJoin(...parts) {
+    return parts
+        .join("/")
+        .replace(/\\/g, "/")
+        .replace(/\/+/g, "/")
+        .replace(/\/$/, "") || "/";
+}
+function isAbortError(error, signal) {
+    return signal?.aborted === true || (error instanceof Error && error.message === "Copy aborted");
+}
+async function walkLocalFiles(root) {
+    const out = [];
+    async function walk(abs, rel) {
+        const st = await fs.stat(abs);
+        if (st.isFile()) {
+            out.push({ localPath: abs, remotePath: rel, size: st.size });
+            return;
+        }
+        if (!st.isDirectory()) {
+            return;
+        }
+        const names = await fs.readdir(abs);
+        for (const name of names) {
+            await walk(path.join(abs, name), rel ? `${rel}/${name}` : name);
+        }
+    }
+    await walk(root, "");
+    return out;
+}
+async function walkRemoteFiles(sftp, root) {
+    const out = [];
+    async function walk(remoteAbs, rel) {
+        const list = await sftp.list(remoteAbs);
+        for (const item of list) {
+            const childRel = rel ? `${rel}/${item.name}` : item.name;
+            const childAbs = posixJoin(remoteAbs, item.name);
+            if (item.type === "d") {
+                await walk(childAbs, childRel);
+            }
+            else if (item.type === "-") {
+                out.push({ localPath: childRel, remotePath: childAbs, size: item.size });
+            }
+        }
+    }
+    await walk(root, "");
+    return out;
+}
+async function connectSftp(config, connectionTimeoutMs) {
+    const auth = resolveSshAuthOptions(config);
+    const sftp = new SftpClient();
+    const connectOpts = {
+        readyTimeout: connectionTimeoutMs,
+    };
+    if (config.accessKind === "paradi-gateway") {
+        // Prefer process pin (set after first successful Access SSH). Fallback matches
+        // resolveAccessSshIdentity (compound override or slash).
+        const mode = getPinnedParadiAuth(config) ??
+            (config.accessParadiAuth === "compound" ? "compound" : "slash");
+        const params = resolveParadiConnectParams(config, mode);
+        connectOpts.host = params.host;
+        connectOpts.port = params.port;
+        connectOpts.username = params.username;
+        if (params.password) {
+            connectOpts.password = params.password;
+        }
+        else if (auth.password) {
+            connectOpts.password = auth.password;
+        }
+    }
+    else {
+        const identity = resolveAccessSshIdentity(config);
+        connectOpts.host = identity.host;
+        connectOpts.port = identity.port;
+        connectOpts.username = identity.username;
+        if (auth.password) {
+            connectOpts.password = auth.password;
+        }
+    }
+    if (auth.privateKey) {
+        connectOpts.privateKey = auth.privateKey;
+    }
+    if (auth.agent) {
+        connectOpts.agent = auth.agent;
+    }
+    try {
+        await sftp.connect(connectOpts);
+        return sftp;
+    }
+    catch (error) {
+        const unavailable = toAccessUnavailableError(error, config.accessHost, config.accessPort, "connect");
+        throw unavailable ?? error;
+    }
+}
+async function safeEnd(sftp) {
+    if (!sftp) {
+        return;
+    }
+    try {
+        await sftp.end();
+    }
+    catch {
+        // ignore
+    }
+}
+async function remoteFileSize(sftp, remotePath) {
+    try {
+        const st = await sftp.stat(remotePath);
+        return st.size;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function remoteIsDirectory(sftp, remotePath) {
+    try {
+        await sftp.list(remotePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function verifyFile(sftp, localPath, remotePath, expectedSize, verify, execSha256) {
+    if (verify === "none") {
+        return;
+    }
+    const localStat = await fs.stat(localPath);
+    const remoteSize = await remoteFileSize(sftp, remotePath);
+    if (localStat.size !== expectedSize) {
+        throw new Error(`Local size mismatch: local=${localStat.size} expected=${expectedSize}`);
+    }
+    if (remoteSize !== expectedSize) {
+        throw new Error(`Remote size mismatch: remote=${remoteSize} expected=${expectedSize}`);
+    }
+    if (verify === "size+sha256") {
+        const [localHash, remoteHash] = await Promise.all([
+            sha256File(localPath),
+            execSha256(remotePath),
+        ]);
+        if (localHash !== remoteHash) {
+            throw new Error(`sha256 mismatch: local=${localHash} remote=${remoteHash}`);
+        }
+    }
+}
+/**
+ * Transfer a local file or directory to/from accessClient over an independent SFTP connection.
+ */
+export async function transferLocalAccess(params, execSha256) {
+    const { direction, localPath, remotePath, config } = params;
+    const opts = params.options ?? {};
+    const transferId = opts.transferId ?? createTransferId();
+    const skipIfComplete = opts.skipIfComplete === true;
+    const verify = resolveEffectiveVerify(skipIfComplete, opts.verify);
+    const totalTimeoutMs = opts.totalTimeoutMs ?? config.defaultTimeoutMs;
+    const connectionTimeoutMs = opts.connectionTimeoutMs ?? DEFAULT_CONNECTION_TIMEOUT_MS;
+    const progressIntervalMs = opts.progressIntervalMs ?? DEFAULT_PROGRESS_INTERVAL_MS;
+    const signal = opts.signal;
+    const sha = (p) => execSha256(p, totalTimeoutMs);
+    throwIfAborted(signal);
+    let sftp = null;
+    let abortHandler;
+    const run = async () => {
+        sftp = await connectSftp(config, connectionTimeoutMs);
+        throwIfAborted(signal);
+        abortHandler = () => {
+            void safeEnd(sftp);
+        };
+        if (signal) {
+            if (signal.aborted) {
+                throw new Error("Copy aborted");
+            }
+            signal.addEventListener("abort", abortHandler, { once: true });
+        }
+        const localStat = await fs.stat(localPath).catch(() => undefined);
+        if (direction === "upload") {
+            if (!localStat) {
+                throw new Error(`Local path not found: ${localPath}`);
+            }
+            if (localStat.isFile()) {
+                return uploadOneFile(sftp, localPath, remotePath, localStat.size);
+            }
+            if (localStat.isDirectory()) {
+                return uploadDirectory(sftp, localPath, remotePath);
+            }
+            throw new Error(`Unsupported local path type: ${localPath}`);
+        }
+        const isDir = await remoteIsDirectory(sftp, remotePath).catch(() => false);
+        if (isDir) {
+            return downloadDirectory(sftp, remotePath, localPath);
+        }
+        const remoteSize = await remoteFileSize(sftp, remotePath);
+        if (remoteSize === undefined) {
+            throw new Error(`Remote path not found: ${remotePath}`);
+        }
+        return downloadOneFile(sftp, remotePath, localPath, remoteSize);
+    };
+    function resultBase(bytes, totalBytes, skippedBytes, usedFastPath) {
+        return {
+            bytes,
+            totalBytes,
+            ...transferSkipFields(skippedBytes, verify),
+            transferId,
+            verified: verify !== "none",
+            usedFastPath,
+        };
+    }
+    async function uploadOneFile(client, local, remote, size) {
+        const remoteDir = path.posix.dirname(remote.replace(/\\/g, "/"));
+        if (remoteDir && remoteDir !== ".") {
+            await client.mkdir(remoteDir, true);
+        }
+        if (skipIfComplete) {
+            try {
+                const existing = await remoteFileSize(client, remote);
+                if (existing === size) {
+                    await verifyFile(client, local, remote, size, verify, sha);
+                    opts.onProgress?.({
+                        transferred: size,
+                        total: size,
+                        percent: 100,
+                        skippedBytes: size,
+                    });
+                    return resultBase(size, size, size, false);
+                }
+            }
+            catch (error) {
+                if (isAbortError(error, signal)) {
+                    throw error;
+                }
+            }
+        }
+        const reporter = createProgressReporter(progressIntervalMs, opts.onProgress, 0);
+        await client.fastPut(local, remote, {
+            step: (total_transferred, _chunk, total) => {
+                reporter.report(total_transferred, total);
+            },
+        });
+        reporter.flush(size, size);
+        await verifyFile(client, local, remote, size, verify, sha);
+        return resultBase(size, size, 0, true);
+    }
+    async function downloadOneFile(client, remote, local, size) {
+        await fs.mkdir(path.dirname(local), { recursive: true });
+        if (skipIfComplete) {
+            try {
+                const st = await fs.stat(local);
+                if (st.isFile() && st.size === size) {
+                    await verifyFile(client, local, remote, size, verify, sha);
+                    opts.onProgress?.({
+                        transferred: size,
+                        total: size,
+                        percent: 100,
+                        skippedBytes: size,
+                    });
+                    return resultBase(size, size, size, false);
+                }
+            }
+            catch (error) {
+                if (isAbortError(error, signal)) {
+                    throw error;
+                }
+            }
+        }
+        if (size === 0) {
+            await fs.writeFile(local, "");
+            return resultBase(0, 0, 0, false);
+        }
+        const reporter = createProgressReporter(progressIntervalMs, opts.onProgress, 0);
+        await client.fastGet(remote, local, {
+            step: (total_transferred, _chunk, total) => {
+                reporter.report(total_transferred, total);
+            },
+        });
+        reporter.flush(size, size);
+        await verifyFile(client, local, remote, size, verify, sha);
+        return resultBase(size, size, 0, true);
+    }
+    async function uploadDirectory(client, localRoot, remoteRoot) {
+        const files = await walkLocalFiles(localRoot);
+        const totalBytes = files.reduce((s, f) => s + f.size, 0);
+        await client.mkdir(remoteRoot.replace(/\\/g, "/"), true);
+        let transferred = 0;
+        let skippedBytes = 0;
+        const reporter = createProgressReporter(progressIntervalMs, opts.onProgress, 0);
+        for (const file of files) {
+            throwIfAborted(signal);
+            const remoteFile = posixJoin(remoteRoot, file.remotePath);
+            const remoteDir = path.posix.dirname(remoteFile);
+            await client.mkdir(remoteDir, true);
+            let skipped = false;
+            if (skipIfComplete) {
+                try {
+                    const existing = await remoteFileSize(client, remoteFile);
+                    if (existing === file.size) {
+                        await verifyFile(client, file.localPath, remoteFile, file.size, verify, sha);
+                        skipped = true;
+                        skippedBytes += file.size;
+                        transferred += file.size;
+                        reporter.report(transferred, totalBytes);
+                    }
+                }
+                catch (error) {
+                    if (isAbortError(error, signal)) {
+                        throw error;
+                    }
+                }
+            }
+            if (!skipped) {
+                await client.fastPut(file.localPath, remoteFile, {
+                    step: (n, _c, fileTotal) => {
+                        reporter.report(transferred + n, totalBytes);
+                        void fileTotal;
+                    },
+                });
+                transferred += file.size;
+                reporter.report(transferred, totalBytes);
+            }
+        }
+        reporter.flush(transferred, totalBytes);
+        const remoteFiles = await walkRemoteFiles(client, remoteRoot.replace(/\\/g, "/"));
+        await verifyDirectoryTree(client, files, remoteFiles, "upload", verify, sha);
+        return resultBase(transferred, totalBytes, skippedBytes, skippedBytes < totalBytes);
+    }
+    async function downloadDirectory(client, remoteRoot, localRoot) {
+        const remoteFiles = await walkRemoteFiles(client, remoteRoot.replace(/\\/g, "/"));
+        const totalBytes = remoteFiles.reduce((s, f) => s + f.size, 0);
+        await fs.mkdir(localRoot, { recursive: true });
+        let transferred = 0;
+        let skippedBytes = 0;
+        const reporter = createProgressReporter(progressIntervalMs, opts.onProgress, 0);
+        const localFiles = [];
+        for (const file of remoteFiles) {
+            throwIfAborted(signal);
+            const rel = file.localPath.replace(/\\/g, "/");
+            const localFile = path.join(localRoot, rel.replace(/\//g, path.sep));
+            await fs.mkdir(path.dirname(localFile), { recursive: true });
+            let skipped = false;
+            if (skipIfComplete) {
+                try {
+                    const st = await fs.stat(localFile);
+                    if (st.isFile() && st.size === file.size) {
+                        await verifyFile(client, localFile, file.remotePath, file.size, verify, sha);
+                        skipped = true;
+                        skippedBytes += file.size;
+                        transferred += file.size;
+                        localFiles.push({
+                            localPath: localFile,
+                            remotePath: rel,
+                            size: file.size,
+                        });
+                        reporter.report(transferred, totalBytes);
+                    }
+                }
+                catch (error) {
+                    if (isAbortError(error, signal)) {
+                        throw error;
+                    }
+                }
+            }
+            if (!skipped) {
+                await client.fastGet(file.remotePath, localFile, {
+                    step: (n) => {
+                        reporter.report(transferred + n, totalBytes);
+                    },
+                });
+                transferred += file.size;
+                localFiles.push({
+                    localPath: localFile,
+                    remotePath: rel,
+                    size: file.size,
+                });
+                reporter.report(transferred, totalBytes);
+            }
+        }
+        reporter.flush(transferred, totalBytes);
+        await verifyDirectoryTree(client, localFiles, remoteFiles, "download", verify, sha);
+        return resultBase(transferred, totalBytes, skippedBytes, skippedBytes < totalBytes);
+    }
+    try {
+        const result = await Promise.race([
+            run(),
+            new Promise((_, reject) => {
+                const t = setTimeout(() => {
+                    reject(new Error(`Hop1 total timeout after ${totalTimeoutMs}ms`));
+                }, totalTimeoutMs);
+                t.unref?.();
+            }),
+        ]);
+        return result;
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        if (/total timeout/i.test(msg)) {
+            const timeoutErr = new Error(msg);
+            timeoutErr.code = "TIMEOUT";
+            throw timeoutErr;
+        }
+        throw error;
+    }
+    finally {
+        if (signal && abortHandler) {
+            signal.removeEventListener("abort", abortHandler);
+        }
+        await safeEnd(sftp);
+    }
+}
+/**
+ * Path-aligned directory verify.
+ * upload localFiles: remotePath=rel, localPath=abs
+ * download localFiles: remotePath=rel, localPath=abs
+ * remoteFiles: localPath=rel, remotePath=abs
+ */
+async function verifyDirectoryTree(sftp, localFiles, remoteFiles, _mode, verify, execSha256) {
+    if (verify === "none") {
+        return;
+    }
+    const remoteByRel = new Map(remoteFiles.map((f) => [f.localPath.replace(/\\/g, "/"), f]));
+    const localBytes = localFiles.reduce((s, f) => s + f.size, 0);
+    const remoteBytes = remoteFiles.reduce((s, f) => s + f.size, 0);
+    if (localFiles.length !== remoteFiles.length || localBytes !== remoteBytes) {
+        throw new Error(`Directory verify failed: local files=${localFiles.length} bytes=${localBytes} ` +
+            `remote files=${remoteFiles.length} bytes=${remoteBytes}`);
+    }
+    for (const lf of localFiles) {
+        const rel = lf.remotePath.replace(/\\/g, "/");
+        const rf = remoteByRel.get(rel);
+        if (!rf || rf.size !== lf.size) {
+            throw new Error(`Directory verify path/size mismatch for ${rel}`);
+        }
+    }
+    if (verify === "size+sha256") {
+        for (const lf of localFiles) {
+            const rel = lf.remotePath.replace(/\\/g, "/");
+            const rf = remoteByRel.get(rel);
+            if (!rf) {
+                throw new Error(`Directory verify missing remote for ${rel}`);
+            }
+            await verifyFile(sftp, lf.localPath, rf.remotePath, lf.size, "size+sha256", execSha256);
+        }
+    }
+}
+//# sourceMappingURL=access-sftp.js.map

package/dist/ssh/access-sftp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-sftp.js","sourceRoot":"","sources":["../../src/ssh/access-sftp.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,UAAU,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EACL,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,6BAA6B,EAC7B,4BAA4B,EAC5B,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,kBAAkB,GAInB,MAAM,2BAA2B,CAAC;AAkBnC,SAAS,SAAS,CAAC,GAAG,KAAe;IACnC,OAAO,KAAK;SACT,IAAI,CAAC,GAAG,CAAC;SACT,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,MAAoB;IACxD,OAAO,MAAM,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC;AAClG,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,GAAW;QAC1C,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAgB,EAAE,IAAY;IAC3D,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,UAAU,IAAI,CAAC,SAAiB,EAAE,GAAW;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAiB,EAAE,mBAA2B;IACvE,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;IAC9B,MAAM,WAAW,GAA4B;QAC3C,YAAY,EAAE,mBAAmB;KAClC,CAAC;IAEF,IAAI,MAAM,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;QAC3C,+EAA+E;QAC/E,yDAAyD;QACzD,MAAM,IAAI,GACR,mBAAmB,CAAC,MAAM,CAAC;YAC3B,CAAC,MAAM,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxD,WAAW,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,WAAW,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,WAAW,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,WAAW,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACvC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAClD,WAAW,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QACjC,WAAW,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QACjC,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACzC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACjC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,GAAG,wBAAwB,CAC1C,KAAK,EACL,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,UAAU,EACjB,SAAS,CACV,CAAC;QACF,MAAM,WAAW,IAAI,KAAK,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAuB;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAgB,EAAE,UAAkB;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC,IAAI,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAgB,EAAE,UAAkB;IACnE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAgB,EAChB,SAAiB,EACjB,UAAkB,EAClB,YAAoB,EACpB,MAAsB,EACtB,UAAmD;IAEnD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1D,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,CAAC,IAAI,aAAa,YAAY,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,aAAa,YAAY,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,UAAU,CAAC,SAAS,CAAC;YACrB,UAAU,CAAC,UAAU,CAAC;SACvB,CAAC,CAAC;QACH,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,0BAA0B,SAAS,WAAW,UAAU,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAiC,EACjC,UAAsE;IAEtE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,EAAE,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC;IACpD,MAAM,MAAM,GAAG,sBAAsB,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,gBAAgB,CAAC;IACtE,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;IACtF,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,4BAA4B,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAEzD,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,IAAI,GAAsB,IAAI,CAAC;IACnC,IAAI,YAAsC,CAAC;IAE3C,MAAM,GAAG,GAAG,KAAK,IAAiC,EAAE;QAClD,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACtD,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvB,YAAY,GAAG,GAAG,EAAE;YAClB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAElE,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,OAAO,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC5B,OAAO,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAClE,CAAC,CAAC;IAEF,SAAS,UAAU,CACjB,KAAa,EACb,UAAkB,EAClB,YAAoB,EACpB,YAAqB;QAErB,OAAO;YACL,KAAK;YACL,UAAU;YACV,GAAG,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC;YAC3C,UAAU;YACV,QAAQ,EAAE,MAAM,KAAK,MAAM;YAC3B,YAAY;SACb,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,aAAa,CAC1B,MAAkB,EAClB,KAAa,EACb,MAAc,EACd,IAAY;QAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,SAAS,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACtD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtB,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;oBAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,WAAW,EAAE,IAAI;wBACjB,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE,GAAG;wBACZ,YAAY,EAAE,IAAI;qBACnB,CAAC,CAAC;oBACH,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;oBAChC,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,kBAAkB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE;YAClC,IAAI,EAAE,CAAC,iBAAyB,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE;gBACjE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;SACF,CAAC,CAAC;QACH,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,MAAkB,EAClB,MAAc,EACd,KAAa,EACb,IAAY;QAEZ,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;oBACpC,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;oBAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,WAAW,EAAE,IAAI;wBACjB,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE,GAAG;wBACZ,YAAY,EAAE,IAAI;qBACnB,CAAC,CAAC;oBACH,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;oBAChC,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9B,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,kBAAkB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE;YAClC,IAAI,EAAE,CAAC,iBAAyB,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE;gBACjE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;SACF,CAAC,CAAC;QACH,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,MAAkB,EAClB,SAAiB,EACjB,UAAkB;QAElB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,kBAAkB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAChF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;oBAC1D,IAAI,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC3B,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;wBAC7E,OAAO,GAAG,IAAI,CAAC;wBACf,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC;wBAC1B,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;wBACzB,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;oBAC3C,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;wBAChC,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE;oBAC/C,IAAI,EAAE,CAAC,CAAS,EAAE,EAAU,EAAE,SAAiB,EAAE,EAAE;wBACjD,QAAQ,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;wBAC7C,KAAK,SAAS,CAAC;oBACjB,CAAC;iBACF,CAAC,CAAC;gBACH,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;gBACzB,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAClF,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7E,OAAO,UAAU,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,GAAG,UAAU,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,UAAU,iBAAiB,CAC9B,MAAkB,EAClB,UAAkB,EAClB,SAAiB;QAEjB,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,kBAAkB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACpC,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;wBACzC,MAAM,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;wBAC7E,OAAO,GAAG,IAAI,CAAC;wBACf,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC;wBAC1B,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;wBACzB,UAAU,CAAC,IAAI,CAAC;4BACd,SAAS,EAAE,SAAS;4BACpB,UAAU,EAAE,GAAG;4BACf,IAAI,EAAE,IAAI,CAAC,IAAI;yBAChB,CAAC,CAAC;wBACH,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;oBAC3C,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;wBAChC,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE;oBAC/C,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE;wBAClB,QAAQ,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;oBAC/C,CAAC;iBACF,CAAC,CAAC;gBACH,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC;gBACzB,UAAU,CAAC,IAAI,CAAC;oBACd,SAAS,EAAE,SAAS;oBACpB,UAAU,EAAE,GAAG;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;iBAChB,CAAC,CAAC;gBACH,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACxC,MAAM,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACpF,OAAO,UAAU,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,GAAG,UAAU,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,GAAG,EAAE;YACL,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;oBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,cAAc,IAAI,CAAC,CAAC,CAAC;gBACpE,CAAC,EAAE,cAAc,CAAC,CAAC;gBACnB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACd,CAAC,CAAC;SACH,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;YACjC,UAAwC,CAAC,IAAI,GAAG,SAAS,CAAC;YAC3D,MAAM,UAAU,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,IAAI,YAAY,EAAE,CAAC;YAC3B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAgB,EAChB,UAAuB,EACvB,WAAwB,EACxB,KAA4B,EAC5B,MAAsB,EACtB,UAAmD;IAEnD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,wCAAwC,UAAU,CAAC,MAAM,UAAU,UAAU,GAAG;YAC9E,gBAAgB,WAAW,CAAC,MAAM,UAAU,WAAW,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/ssh/bastion-client.d.ts

@@ -0,0 +1,60 @@
+import type { AppConfig } from "../config.js";
+import { type SftpCopyOptions, type SftpTransferResult } from "../utils/copy-transfer.js";
+import { type AccessCheckResult } from "./bastion-errors.js";
+export interface ExecOutput {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    durationMs: number;
+}
+export declare class BastionClient {
+    private client;
+    private connecting;
+    /** Serializes ensureBastionReady / check cache updates. */
+    private gate;
+    private readonly config;
+    private readyUntil;
+    private unavailableUntil;
+    private lastUnavailable;
+    constructor(config: AppConfig);
+    /**
+     * Ensure bastion is reachable (TTL-cached). Uses an ephemeral SSH probe ?
+     * never disconnects an in-flight shared exec session on success.
+     */
+    ensureBastionReady(): Promise<void>;
+    /**
+     * Short-timeout Local to ACCESS probe (ephemeral client; <=10s worst case).
+     * Respects negative TTL (returns cached failure). Does not sever shared exec SSH.
+     */
+    check(): Promise<AccessCheckResult>;
+    exec(command: string, timeoutMs?: number, cwd?: string, signal?: AbortSignal): Promise<ExecOutput>;
+    disconnect(): void;
+    /**
+     * Upload local path (file or directory) ? bastion via independent Hop1 SFTP.
+     * Transfer-phase errors are not reclassified into ACCESS_UNAVAILABLE.
+     */
+    uploadPath(localPath: string, remotePath: string, options?: SftpCopyOptions): Promise<SftpTransferResult>;
+    /**
+     * Download bastion path (file or directory) ? local via independent Hop1 SFTP.
+     */
+    downloadPath(remotePath: string, localPath: string, options?: SftpCopyOptions): Promise<SftpTransferResult>;
+    private withGate;
+    private markReady;
+    /**
+     * Record a connect-phase failure. Negative TTL only for classified causes
+     * (not UNKNOWN), so transient unknowns are not blackholed for 15s.
+     */
+    private markConnectUnavailable;
+    /** Ephemeral SSH + shell probe; never assigns or disconnects `this.client`. */
+    private probeEphemeral;
+    private remoteSha256;
+    private ensureConnected;
+    private ensureConnectedUnlocked;
+    private requireClient;
+    /**
+     * Open a dedicated ssh2 Client with readyTimeout + hard deadline
+     * (covers TCP blackhole where ssh2 readyTimeout alone is insufficient).
+     */
+    private openSshClient;
+    private execOnClient;
+}