koppler 0.0.0-stage → 0.0.1

package/dist/server/sanitize.js

@@ -0,0 +1,242 @@
+// What the page sends is never taken as it comes: a board, a layout or a prompt keeps only its known fields, each cut
+// to size, so no endpoint can be used to write anything else.
+import fs from 'node:fs';
+import path from 'node:path';
+import { githubFile, readFile } from "../github.js";
+import { APP_ID, RUN_ID } from "../ids.js";
+export const MAX_NOTE = 4000;
+const text = (value, max = 200) => (typeof value === 'string' ? value.slice(0, max) : '');
+const num = (value) => (typeof value === 'number' && Number.isFinite(value) ? value : 0);
+const isId = (value) => typeof value === 'string' && APP_ID.test(value);
+const isObject = (value) => !!value && typeof value === 'object';
+const isMap = (value) => isObject(value) && !Array.isArray(value);
+const listOf = (value) => (Array.isArray(value) ? value : []);
+/** A value read as an object: anything else has none of the fields asked for. */
+const fieldsOf = (value) => (isObject(value) ? value : {});
+const xy = (value) => ({ x: num(fieldsOf(value)['x']), y: num(fieldsOf(value)['y']) });
+const note = (value) => (typeof value === 'string' && value ? { note: text(value, MAX_NOTE) } : {});
+/** A card that is not an app: a tunnel, a queue or an outside system. */
+const CARD = /^(tunnel:[\w.-]{1,253}:\d{1,5}|(queue|outside):[a-z0-9-]{1,64})$/;
+const WHEN = /^\d{4}-\d\d-\d\dT[\d:.]+Z$/;
+const TIDY = ['down', 'right'];
+const SIDES = ['top', 'right', 'bottom', 'left'];
+const slot = (value) => Number.isInteger(value) && value >= 0 && value < 1000 ? value : null;
+const shift = (value) => (typeof value === 'number' && Math.abs(value) <= 10000 ? value : null);
+/** The waypoints a cable runs through. */
+const waypoints = (value) => {
+    const points = listOf(value)
+        .filter(point => isObject(point) && Number.isFinite(point['x']) && Number.isFinite(point['y']))
+        .slice(0, 20)
+        .map(xy);
+    return points.length ? points : null;
+};
+const cables = (value) => listOf(value)
+    .map(fieldsOf)
+    .filter(edge => isId(edge['from']) && isId(edge['to']));
+/** Where a board's cards and tunnels sit, and which sides its cables use: kept with the board so it reopens as it was left. */
+function boardLayout(given) {
+    if (!isMap(given) || !isObject(given['nodes']))
+        return null;
+    const nodes = Object.fromEntries(Object.entries(given['nodes'])
+        .filter(([key]) => isId(key))
+        .slice(0, 200)
+        .map(([key, at]) => [key, xy(at)]));
+    if (!Object.keys(nodes).length)
+        return null;
+    const infra = Object.fromEntries(Object.entries(fieldsOf(given['infra']))
+        .filter(([key]) => CARD.test(key))
+        .slice(0, 100)
+        .map(([key, at]) => [key, xy(at)]));
+    // Per cable: its two sides, two unused places, its slot on each side, its waypoints, and where Arrange centred
+    // each end. Older boards hold only the sides.
+    const sides = Object.fromEntries(Object.entries(fieldsOf(given['sides']))
+        .filter(([key]) => key.split('>').length === 2 && key.split('>').every(isId))
+        .flatMap(([key, value]) => {
+        const [fromSide, toSide, , , fromSlot, toSlot, points, fromShift, toShift] = listOf(value);
+        if (!SIDES.includes(fromSide) || !SIDES.includes(toSide))
+            return [];
+        const more = [null, null, slot(fromSlot), slot(toSlot), waypoints(points), shift(fromShift), shift(toShift)];
+        return [[key, [fromSide, toSide, ...(more.some(one => one !== null) ? more : [])]]];
+    })
+        .slice(0, 500));
+    const tidy = given['tidy'];
+    return {
+        nodes,
+        ...(Object.keys(infra).length && { infra }),
+        ...(Object.keys(sides).length && { sides }),
+        ...(TIDY.includes(tidy) && { tidy: tidy }),
+    };
+}
+/** A short list of app ids, such as the outside systems put on a board. */
+const ids = (given) => [...new Set(listOf(given).filter((id) => typeof id === 'string' && isId(id)))].slice(0, 50);
+export function sanitizePresets(list) {
+    return listOf(list)
+        .slice(0, 50)
+        .map(fieldsOf)
+        .filter(preset => typeof preset['name'] === 'string' && preset['name'] && isMap(preset['nodes']))
+        .map(preset => {
+        const { version, source } = preset;
+        const layout = boardLayout(preset['layout']);
+        const nodes = Object.entries(preset['nodes']).filter(([key]) => isId(key));
+        return {
+            name: text(preset['name'], 80),
+            ...(typeof version === 'number' && Number.isInteger(version) && version >= 0 && version < 1000 && { version }),
+            nodes: Object.fromEntries(nodes.map(([key, given]) => {
+                const node = fieldsOf(given);
+                return [
+                    key,
+                    {
+                        run: text(node['run'], 16),
+                        ...(!!node['platform'] && { platform: text(node['platform'], 16) }),
+                        ...(!!node['branch'] && { branch: text(node['branch']) }),
+                        ...note(node['note']),
+                        ...(node['tunnels'] === false && { tunnels: false }),
+                        ...(node['queues'] === true && { queues: true }),
+                        ...(node['watch'] === true && { watch: true }),
+                    },
+                ];
+            })),
+            edges: cables(preset['edges']).map(edge => ({ from: edge['from'], to: edge['to'] })),
+            ...(typeof source === 'string' && source && { source: text(source, 300) }),
+            ...(layout && { layout }),
+            ...(ids(preset['outside']).length && { outside: ids(preset['outside']) }),
+        };
+    });
+}
+/** The presets in a file: one preset, a list of them, or a stack.json with "presets". */
+export const presetsIn = (data) => {
+    const inside = fieldsOf(data)['presets'];
+    return sanitizePresets(Array.isArray(data) ? data : Array.isArray(inside) ? inside : [data]);
+};
+const MAX_PRESET_BYTES = 300 * 1024;
+/** The boards in a file on GitHub, read through the user's own gh login (private repos), else as a public file. */
+export async function fetchPresets(link) {
+    // A board file on this Mac, as `koppler board open` names it: a .json file, of which only the boards are read.
+    const local = path.isAbsolute(link) && link.endsWith('.json');
+    const file = local ? null : githubFile(link);
+    if (!local && !file)
+        return { error: 'Only https links to a file on GitHub, or a board file here, can be opened.' };
+    let body;
+    try {
+        body = local ? fs.readFileSync(link, 'utf8') : file && (await readFile(file));
+    }
+    catch {
+        body = null;
+    }
+    if (body === null || body.length > MAX_PRESET_BYTES)
+        return { error: 'Could not read that file. Check the link, and that gh is signed in for a private repo.' };
+    let data;
+    try {
+        data = JSON.parse(body);
+    }
+    catch {
+        return { error: 'That file is not JSON.' };
+    }
+    const presets = presetsIn(data);
+    return presets.length ? { presets } : { error: 'No board found in that file.' };
+}
+/** A layout is the canvas state: only its known fields are kept, so the endpoint cannot be used to write anything else. */
+export function sanitizeLayout(input) {
+    if (!isMap(input) || !isMap(input['nodes']) || !Array.isArray(input['edges']))
+        return null;
+    const nodes = {};
+    for (const [key, node] of Object.entries(input['nodes'])) {
+        if (!isId(key) || !isObject(node))
+            continue;
+        const changes = node['changes'];
+        // The libraries the app runs with a local copy of, by package name.
+        const libraries = listOf(node['libraries'])
+            .filter(name => typeof name === 'string' && name)
+            .slice(0, 50)
+            .map(name => text(name, 214));
+        nodes[key] = {
+            x: num(node['x']),
+            y: num(node['y']),
+            branch: text(node['branch']),
+            run: text(node['run'], 16),
+            ...(!!node['platform'] && { platform: text(node['platform'], 16) }),
+            ...note(node['note']),
+            ...(node['hideTunnels'] === true && { hideTunnels: true }),
+            ...(node['showQueues'] === true && { showQueues: true }),
+            ...(node['watch'] === true && { watch: true }),
+            ...(['set-aside', 'take-along'].includes(changes) && { changes }),
+            ...(libraries.length > 0 && { libraries }),
+            ...(typeof node['full'] === 'number' && node['full'] > 0 && { full: Math.min(Math.round(node['full']), 5000) }),
+        };
+    }
+    const edges = cables(input['edges']).map(edge => ({
+        from: edge['from'],
+        to: edge['to'],
+        fromSide: text(edge['fromSide'], 8),
+        toSide: text(edge['toSide'], 8),
+        ...(slot(edge['fromSlot']) !== null && { fromSlot: edge['fromSlot'] }),
+        ...(slot(edge['toSlot']) !== null && { toSlot: edge['toSlot'] }),
+        ...(shift(edge['fromShift']) !== null && { fromShift: edge['fromShift'] }),
+        ...(shift(edge['toShift']) !== null && { toShift: edge['toShift'] }),
+        ...(waypoints(edge['points']) && { points: waypoints(edge['points']) }),
+    }));
+    // Where tunnel, queue and outside cards sit, keyed by tunnel:<host>:<port>, queue:<id> or outside:<id>.
+    const infra = Object.fromEntries(Object.entries(isMap(input['infra']) ? input['infra'] : {})
+        .filter(([key, at]) => CARD.test(key) && isObject(at))
+        .slice(0, 100)
+        .map(([key, at]) => [key, xy(at)]));
+    const presets = sanitizePresets(input['presets']);
+    // Recently deleted boards, newest first, each with when it was deleted.
+    const trash = listOf(input['trash'])
+        .slice(0, 20)
+        .flatMap(deleted => {
+        const [preset] = sanitizePresets([deleted]);
+        const when = fieldsOf(deleted)['deleted'];
+        return preset && typeof when === 'string' && WHEN.test(when) ? [{ ...preset, deleted: when }] : [];
+    });
+    // The boards opened lately, newest first, each with when.
+    const recent = listOf(input['recent'])
+        .map(fieldsOf)
+        .filter(({ name, at }) => typeof name === 'string' && name && typeof at === 'string' && WHEN.test(at))
+        .slice(0, 20)
+        .map(({ name, at }) => ({ name: text(name, 80), at }));
+    const dismissed = listOf(input['dismissed'])
+        .filter(one => typeof one === 'string')
+        .slice(0, 200)
+        .map(one => one.slice(0, 400));
+    // The queues run locally instead of the deployed ones, and the queues taken off the board.
+    const chosen = (given, value) => Object.fromEntries(Object.entries(isMap(given) ? given : {})
+        .filter(([key, has]) => isId(key) && has === value)
+        .slice(0, 200));
+    const queues = chosen(input['queues'], 'local');
+    const hiddenQueues = chosen(input['hiddenQueues'], true);
+    const hiddenOutside = chosen(input['hiddenOutside'], true);
+    const { keptLive, tidy, preset } = input;
+    const pan = fieldsOf(input['pan']);
+    return {
+        env: text(input['env'], 8),
+        mode: text(input['mode'], 8),
+        ...(dismissed.length && { dismissed }),
+        ...(typeof keptLive === 'string' && RUN_ID.test(keptLive) && { keptLive }),
+        ...(Object.keys(infra).length && { infra }),
+        ...(Object.keys(queues).length && { queues }),
+        ...(Object.keys(hiddenQueues).length && { hiddenQueues }),
+        ...(Object.keys(hiddenOutside).length && { hiddenOutside }),
+        ...(ids(input['outside']).length && { outside: ids(input['outside']) }),
+        ...(TIDY.includes(tidy) && { tidy }),
+        ...(input['scratch'] === true && { scratch: true }),
+        ...(presets.length && { presets }),
+        ...(trash.length && { trash }),
+        ...(recent.length && { recent }),
+        ...(typeof preset === 'string' && preset && { preset: text(preset, 80) }),
+        ...note(input['note']),
+        zoom: num(input['zoom']) || 1,
+        pan: { x: num(pan['x']), y: num(pan['y']) },
+        nodes,
+        edges,
+    };
+}
+const PROMPT_TAGS = new Set(['koppler', 'koppler-stop', 'koppler-reply', 'koppler-fix', 'koppler-facts']);
+/** A prompt from the standalone page: only the canvas's own kinds, with a bounded text and data object. */
+export function sanitizePrompt(input) {
+    const { tag, text: said, data } = fieldsOf(input);
+    if (typeof tag !== 'string' || !PROMPT_TAGS.has(tag) || typeof said !== 'string')
+        return null;
+    return { tag, text: said.slice(0, 20000), data: isMap(data) ? data : {}, at: new Date().toISOString() };
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/server/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/server/sanitize.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,8DAA8D;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAwC3C,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC;AAC7B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,GAAG,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACnG,MAAM,GAAG,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,MAAM,IAAI,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClG,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAkB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC1F,MAAM,KAAK,GAAG,CAAC,KAAc,EAAkB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC3F,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACtF,iFAAiF;AACjF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpE,MAAM,EAAE,GAAG,CAAC,KAAc,EAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;AACvG,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7G,yEAAyE;AACzE,MAAM,IAAI,GAAG,kEAAkE,CAAC;AAChF,MAAM,IAAI,GAAG,4BAA4B,CAAC;AAC1C,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC/B,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACjD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAC9B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,IAAK,KAAgB,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/F,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACzG,0CAA0C;AAC1C,MAAM,SAAS,GAAG,CAAC,KAAc,EAAkB,EAAE;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;SACzB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;SAC9F,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC,CAAC;AACF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAChC,MAAM,CAAC,KAAK,CAAC;KACV,GAAG,CAAC,QAAQ,CAAC;KACb,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE5D,+HAA+H;AAC/H,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAC5B,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACb,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CACrC,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACb,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CACrC,CAAC;IACF,+GAA+G;IAC/G,8CAA8C;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC5E,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAyB,EAAE;QAC/C,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,AAAD,EAAG,AAAD,EAAG,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAgB,CAAC;YAAE,OAAO,EAAE,CAAC;QACxF,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7G,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CACjB,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO;QACL,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAC3C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAc,CAAC,IAAI,EAAE,IAAI,EAAE,IAAc,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,GAAG,GAAG,CAAC,KAAc,EAAE,EAAE,CAC7B,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAE5G,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC;SAChB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,QAAQ,CAAC;SACb,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;SAChG,GAAG,CAAC,MAAM,CAAC,EAAE;QACZ,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAC9B,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9G,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAwB,EAAE;gBAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC7B,OAAO;oBACL,GAAG;oBACH;wBACE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;wBAC1B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;wBACnE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;wBACzD,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACrB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,EAAE,OAAO,EAAE,KAAc,EAAE,CAAC;wBAC7D,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC;wBACzD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAa,EAAE,CAAC;qBACxD;iBACF,CAAC;YACJ,CAAC,CAAC,CACH;YACD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAW,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAW,EAAE,CAAC,CAAC;YACxG,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AACD,yFAAyF;AACzF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAa,EAAY,EAAE;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/F,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpC,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY;IAEZ,+GAA+G;IAC/G,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,4EAA4E,EAAE,CAAC;IACpH,IAAI,IAAmB,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB;QACjD,OAAO,EAAE,KAAK,EAAE,wFAAwF,EAAE,CAAC;IAC7G,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;AAClF,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,oEAAoE;QACpE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;aACxC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC;aAChD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5B,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAC1B,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACnE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAC9C,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3E,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YAC1C,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;SAChH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;QACd,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC,CAAC,CAAC;IACJ,wGAAwG;IACxG,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;SACrD,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACb,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CACrC,CAAC;IACF,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,wEAAwE;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,OAAO,CAAC,OAAO,CAAC,EAAE;QACjB,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,MAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,CAAC,CAAC,CAAC;IACL,0DAA0D;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SACnC,GAAG,CAAC,QAAQ,CAAC;SACb,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACrG,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;SACzC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;SACtC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACb,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACjC,2FAA2F;IAC3F,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,KAAc,EAAE,EAAE,CAChD,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,KAAK,CAAC;SAClD,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CACjB,CAAC;IACJ,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5B,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAC3C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,IAAI,EAAE,YAAY,EAAE,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,IAAI,EAAE,aAAa,EAAE,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAc,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnD,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAC9B,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;QAChC,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;QACzE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;QAC7B,GAAG,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE;QAC3C,KAAK;QACL,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;AAC1G,2GAA2G;AAC3G,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9F,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAC1G,CAAC"}

package/dist/server/secrets.js

@@ -0,0 +1,111 @@
+// Credentials for the canvas: the secrets each app declares per environment, whether each is stored, and the panel's
+// requests to store, remove or test one. Names and fetch steps only, never values.
+import { execFile } from 'node:child_process';
+import path from 'node:path';
+import { isProtected } from "../core/plan.js";
+import { readStack } from "../data.js";
+import { APP, BIN } from "../paths.js";
+import { storeOf } from "../core/stack.js";
+const said = (value) => (typeof value === 'string' ? value : JSON.stringify(value));
+// The panel stores the value itself, so the closing "then run secret-set" step is left out.
+const CLOSING_STEP = /[,;.]?\s*(and\s+|then\s+)*run:?\s+(<skill>\/bin\/secret-set|koppler secret set)\b.*$/is;
+export function declaredSecrets(stack) {
+    const out = {};
+    const [first] = stack?.envs ?? [];
+    for (const [id, base] of Object.entries(stack?.apps ?? {}))
+        for (const env of stack?.envs ?? []) {
+            const overlay = env === first ? undefined : base?.envs?.[env];
+            const written = ({ ...base, ...overlay }.secrets ?? []);
+            const list = written.flatMap(secret => {
+                const one = (secret ?? {});
+                return typeof one['env'] === 'string' && /^[A-Za-z_][A-Za-z0-9_]*$/.test(one['env']) ? [one] : [];
+            });
+            if (!list.length)
+                continue;
+            // Fetch steps written for the first environment are not offered for another one.
+            const own = env === first || !!overlay?.secrets;
+            (out[id] ??= {})[env] = list.map(secret => {
+                const { type, when } = secret;
+                const fetch = (secret['fetch'] ?? {});
+                return {
+                    name: secret['env'],
+                    ...(typeof type === 'string' && /^[a-z]{1,20}$/.test(type) && { type }),
+                    ...(own && !!when && { when: said(when) }),
+                    ...(own && !!fetch.cli && { fetchCli: said(fetch.cli).replaceAll('<skill>', APP) }),
+                    ...(own &&
+                        !!fetch.ui && {
+                        fetchUi: said(fetch.ui).replace(CLOSING_STEP, '').trim(),
+                    }),
+                };
+            });
+        }
+    return out;
+}
+const runScript = (name, args, input, env) => new Promise(resolve => {
+    const options = { timeout: 60000, maxBuffer: 64 * 1024, ...(env && { env: { ...process.env, ...env } }) };
+    const child = execFile(path.join(BIN, name), args, options, (error, stdout) => {
+        const code = error ? (typeof error.code === 'number' ? error.code : 1) : 0;
+        resolve({ code, out: stdout.trim() });
+    });
+    child.stdin?.end(input);
+});
+let storedNames = {};
+let storedAt = 0;
+/** Which names each store holds, asked again at most every five seconds. */
+async function refreshStored(force = false) {
+    if (!force && Date.now() - storedAt < 5000)
+        return;
+    storedAt = Date.now();
+    const { code, out } = await runScript('secret-store', ['names']);
+    if (code !== 0)
+        return;
+    storedNames = Object.fromEntries(out
+        .split('\n')
+        .filter(Boolean)
+        .map(line => {
+        const [store = '', names = ''] = line.split(/:\s*/);
+        return [store, names.split(/\s+/).filter(Boolean)];
+    }));
+}
+/** The declared secrets of the stack in use, each with whether it is stored. */
+export async function secretsStatus() {
+    const stack = readStack();
+    if (!stack)
+        return {};
+    await refreshStored();
+    const declared = declaredSecrets(stack);
+    for (const [id, envs] of Object.entries(declared))
+        for (const [env, list] of Object.entries(envs))
+            for (const secret of list)
+                secret.stored = (storedNames[storeOf(stack, id, env)] ?? []).includes(secret.name);
+    return declared;
+}
+/** A request from the Credentials panel: only for a secret the stack declares for that app and environment. */
+export async function secretRequest(action, body) {
+    const stack = readStack();
+    const { app, env, name, value } = (body ?? {});
+    const declared = stack && typeof app === 'string' && typeof env === 'string'
+        ? declaredSecrets(stack)[app]?.[env]?.find(secret => secret.name === name)
+        : undefined;
+    if (!stack || !declared || typeof app !== 'string' || typeof env !== 'string')
+        return { status: 400, body: { error: 'The stack does not declare that credential.' } };
+    const store = storeOf(stack, app, env);
+    if (action === 'set') {
+        if (typeof value !== 'string' || !value.trim() || value.length > 16384)
+            return { status: 400, body: { error: 'Paste the value first.' } };
+        // A protected environment's value is stored so that every read asks the user.
+        const mark = { KOPPLER_SECRET_PROTECTED: isProtected(stack, env) ? '1' : '0' };
+        const { code } = await runScript('secret-store', ['set', store, declared.name], value.replace(/\r?\n$/, ''), mark);
+        await refreshStored(true);
+        return code === 0 ? { status: 200, body: { ok: true } } : { status: 500, body: { error: 'Could not store it.' } };
+    }
+    if (action === 'remove') {
+        await runScript('secret-store', ['remove', store, declared.name]);
+        await refreshStored(true);
+        return { status: 200, body: { ok: true } };
+    }
+    const type = declared.type ? ['--type', declared.type] : [];
+    const { code, out } = await runScript('secret-test', [store, declared.name, ...type]);
+    return { status: 200, body: { ok: code === 0, message: out || 'failed: the check did not finish' } };
+}
+//# sourceMappingURL=secrets.js.map

package/dist/server/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/server/secrets.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,mFAAmF;AACnF,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAiB,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AA8B3C,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7F,4FAA4F;AAC5F,MAAM,YAAY,GAAG,wFAAwF,CAAC;AAE9G,MAAM,UAAU,eAAe,CAAC,KAAqC;IACnE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,OAAO,IAAI,EAAE,CAAc,CAAC;YACrE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;gBACpC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;gBACtD,OAAO,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpG,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,SAAS;YAC3B,iFAAiF;YACjF,MAAM,GAAG,GAAG,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;YAChD,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;gBACxC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;gBAC9B,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAoC,CAAC;gBACzE,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,KAAK,CAAW;oBAC7B,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;oBACvE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;oBACnF,GAAG,CAAC,GAAG;wBACL,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI;wBACZ,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;qBACzD,CAAC;iBACL,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,KAAc,EAAE,GAA4B,EAAE,EAAE,CAC/F,IAAI,OAAO,CAAgC,OAAO,CAAC,EAAE;IACnD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;IAC1G,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,IAAI,WAAW,GAA6B,EAAE,CAAC;AAC/C,IAAI,QAAQ,GAAG,CAAC,CAAC;AACjB,4EAA4E;AAC5E,KAAK,UAAU,aAAa,CAAC,KAAK,GAAG,KAAK;IACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI;QAAE,OAAO;IACnD,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO;IACvB,WAAW,GAAG,MAAM,CAAC,WAAW,CAC9B,GAAG;SACA,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CACL,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,aAAa,EAAE,CAAC;IACtB,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5C,KAAK,MAAM,MAAM,IAAI,IAAI;gBAAE,MAAM,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAA6C,EAAE,IAAa;IAC9F,MAAM,KAAK,GAAoB,SAAS,EAAE,CAAC;IAC3C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IAC1E,MAAM,QAAQ,GACZ,KAAK,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;QACzD,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;QAC1E,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;QAC3E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,6CAA6C,EAAE,EAAE,CAAC;IACzF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;YACpE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,CAAC;QACpE,8EAA8E;QAC9E,MAAM,IAAI,GAAG,EAAE,wBAAwB,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACnH,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,kCAAkC,EAAE,EAAE,CAAC;AACvG,CAAC"}