koppler 0.0.0-stage → 0.0.2

package/dist/engine/processes.js

@@ -0,0 +1,350 @@
+// The processes Koppler starts: apps, tunnels and the canvas. Each runs detached, so it outlives the terminal or agent
+// session that started it, writes its log to a file, and has a record that says how to find it and stop it.
+import fs from 'node:fs';
+import http from 'node:http';
+import https from 'node:https';
+import path from 'node:path';
+import { execFileSync, spawn } from 'node:child_process';
+import { fail, Failure } from "../failure.js";
+import { logsDir, stateDir } from "../paths.js";
+import { appEnv } from "../safe-env.js";
+import { redact } from "../scrub.js";
+import { keepRunLog } from "./run-logs.js";
+import { keepPreviousLog } from "./session.js";
+import { APP_ID } from "../ids.js";
+import { writeJson } from "../json-files.js";
+const PROCS = path.join(stateDir(), 'procs');
+/** What a process started by Koppler can be called. */
+export const NAME = APP_ID;
+// How long an app with a port may take to answer: a build can take minutes.
+const START_WAIT = Number(process.env['KOPPLER_START_WAIT']) * 1000 || 300000;
+/** A program's output, or nothing when it fails or is not there. */
+export function sh(command, args) {
+    try {
+        return execFileSync(command, args, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
+    }
+    catch {
+        return '';
+    }
+}
+export const sleep = (ms) => new Promise(resolve => setTimeout(resolve, ms));
+/** A restart wrapper keeps flaky tunnels up; stopping kills the whole process group, wrapper included. */
+export function commandFor(argv, restart) {
+    const loop = 'while :; do "$@"; echo "koppler: exited with $?, restarting in 2s"; sleep 2; done';
+    return restart ? ['sh', '-c', loop, 'sh', ...argv] : argv;
+}
+const SWITCHES = {
+    '--restart': { restart: true },
+    '--dry-run': { dryRun: true },
+    '--lan': { lan: true },
+    '--test': { test: true },
+    '--no-test': { test: false },
+    '--mock': { mock: true },
+};
+/** Reads `<name> [options] [-- <command...>]`; throws with the reason when it cannot. */
+export function parseRun(args) {
+    const dash = args.indexOf('--');
+    const head = dash < 0 ? args : args.slice(0, dash);
+    const command = dash < 0 ? [] : args.slice(dash + 1);
+    const options = { name: head[0] ?? '', command, restart: false };
+    for (let at = 1; at < head.length; at++) {
+        const option = head[at] ?? '';
+        const value = () => head[++at] ?? '';
+        if (Object.hasOwn(SWITCHES, option))
+            Object.assign(options, SWITCHES[option]);
+        else if (option === '--cwd')
+            options.cwd = value();
+        else if (option === '--port')
+            options.port = Number(value());
+        else if (option === '--bind')
+            options.bind = value();
+        else if (option === '--env')
+            options.env = value();
+        else if (option === '--device')
+            options.device = value();
+        else if (option === '--ready')
+            options.ready = { url: value() };
+        else
+            throw new Error(`unknown option ${option}`);
+    }
+    if (!NAME.test(options.name))
+        throw new Error('name must be lowercase letters, digits and dashes');
+    if (dash >= 0 && command.length === 0)
+        throw new Error('nothing to run after --');
+    if (options.port !== undefined && !(options.port > 0 && options.port < 65536))
+        throw new Error('--port must be a TCP port');
+    if (options.bind !== undefined && !/^(localhost|127\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.test(options.bind))
+        throw new Error('--bind must be an address of this machine (localhost or 127.x.x.x)');
+    return options;
+}
+const recordPath = (name) => path.join(PROCS, `${name}.json`);
+export function readRecord(name) {
+    try {
+        return JSON.parse(fs.readFileSync(recordPath(name), 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/** Everything Koppler has started and not yet stopped, running or not. */
+export function records() {
+    try {
+        const names = fs.readdirSync(PROCS).filter(file => file.endsWith('.json'));
+        return names.map(file => readRecord(file.slice(0, -5))).filter(record => record !== null);
+    }
+    catch {
+        return [];
+    }
+}
+const psCommand = (pid) => sh('ps', ['-p', String(pid), '-o', 'command=']);
+const psStart = (pid) => sh('ps', ['-p', String(pid), '-o', 'lstart=']);
+/**
+ * Whether the process of a record still runs. A pid alone can be reused by an unrelated process, so it must be the one
+ * started then. Its start time says so; its command cannot, because it changes when a wrapper hands over to the app.
+ */
+export function alive(record) {
+    try {
+        process.kill(record.pid, 0);
+    }
+    catch {
+        return false;
+    }
+    return record.psStart ? psStart(record.pid) === record.psStart : psCommand(record.pid) === record.psCommand;
+}
+/**
+ * What listens on a port. With an address of its own (a tunnel on 127.0.0.2), only what listens there or on every
+ * address counts.
+ */
+export function listener(port, bind) {
+    const output = sh('lsof', ['-nP', `-iTCP:${String(port)}`, '-sTCP:LISTEN', '-Fpcn']);
+    const own = bind && !['localhost', '127.0.0.1'].includes(bind) ? [`${bind}:${String(port)}`, `*:${String(port)}`] : null;
+    // One block per process: its pid, its command, then the addresses it listens on.
+    for (const block of output.split(/^(?=p\d)/m)) {
+        const pid = /^p(\d+)/m.exec(block)?.[1];
+        const addresses = [...block.matchAll(/^n(.+)/gm)].map(match => match[1] ?? '');
+        if (pid && (!own || addresses.some(address => own.includes(address))))
+            return { pid: Number(pid), command: /^c(.+)/m.exec(block)?.[1] };
+    }
+    return null;
+}
+/** The last lines of a log, with secrets masked. */
+export function tailOf(file, lines) {
+    try {
+        return redact(fs.readFileSync(file, 'utf8').trimEnd().split('\n').slice(-lines).join('\n'));
+    }
+    catch {
+        return '';
+    }
+}
+/** How long ago, as "12m" or "3h05m". */
+export function uptime(since) {
+    const seconds = Math.floor((Date.now() - Date.parse(since)) / 1000);
+    const minutes = Math.floor(seconds / 60);
+    return seconds < 3600
+        ? `${String(minutes)}m`
+        : `${String(Math.floor(minutes / 60))}h${String(minutes % 60).padStart(2, '0')}m`;
+}
+function refuseWhatIsTaken(options) {
+    const existing = readRecord(options.name);
+    if (existing && alive(existing))
+        fail(`${options.name} is already running (pid ${String(existing.pid)}); koppler stop ${options.name} first`);
+    const held = options.port ? listener(options.port, options.bind) : null;
+    if (held && options.port)
+        fail(`port ${String(options.port)} is already held by pid ${String(held.pid)} (${held.command ?? '?'}); stop it or reuse it`);
+}
+/** Waits until an app with a port answers on it; a crash while it builds is reported, not "started". */
+async function waitForPort(record, port) {
+    console.log(`waiting for ${record.name} on port ${String(port)}…`);
+    const until = Date.now() + START_WAIT;
+    while (Date.now() < until && alive(record) && !listener(port, record.bind))
+        await sleep(1000);
+    if (!alive(record))
+        fail(`${record.name} exited before answering on port ${String(port)}; last lines of ${record.log}:\n${tailOf(record.log, 15)}`);
+    if (listener(port, record.bind))
+        return;
+    const waited = `${String(START_WAIT / 1000)}s`;
+    throw new Failure(`${record.name} is running (pid ${String(record.pid)}) but nothing answers on port ${String(port)} after ${waited}; see ${record.log}`, 2);
+}
+export const statusOf = (url) => new Promise(resolve => {
+    const get = url.protocol === 'https:' ? https.get : http.get;
+    // Its own development certificate is not one this process trusts; the address is on this machine.
+    const request = get(url, { rejectUnauthorized: false, timeout: 4000 }, response => {
+        response.resume();
+        resolve(response.statusCode ?? null);
+    });
+    request.once('timeout', () => request.destroy());
+    request.once('error', () => {
+        resolve(null);
+    });
+});
+/** Waits until the app says it is ready: a port can answer while startup is still failing. */
+async function waitUntilReady(record, port, ready) {
+    const url = new URL(ready.url, `http://${record.bind ?? 'localhost'}:${String(port)}`);
+    const wait = ready.timeout ? ready.timeout * 1000 : START_WAIT;
+    const wanted = (status) => status !== null && (ready.status === undefined ? status < 400 : status === ready.status);
+    console.log(`waiting for ${record.name} to be ready at ${url.pathname}…`);
+    const until = Date.now() + wait;
+    let last = null;
+    while (Date.now() < until && alive(record) && !wanted((last = await statusOf(url))))
+        await sleep(1000);
+    if (!alive(record))
+        fail(`${record.name} exited before it was ready; last lines of ${record.log}:\n${tailOf(record.log, 15)}`);
+    if (wanted(last))
+        return;
+    const said = last === null ? 'nothing answers there' : `it answers ${String(last)}`;
+    throw new Failure(`${record.name} is running (pid ${String(record.pid)}) but is not ready: ${said} at ${url.pathname} after ${String(wait / 1000)}s; see ${record.log}`, 2);
+}
+/** Starts a command detached, with its log and its record, and returns once it runs (and answers, when it has a port). */
+export async function startProcess(options) {
+    const { name, command } = options;
+    refuseWhatIsTaken(options);
+    fs.mkdirSync(logsDir(), { recursive: true, mode: 0o700 });
+    fs.mkdirSync(PROCS, { recursive: true, mode: 0o700 });
+    const log = path.join(logsDir(), `${name}.log`);
+    const program = command[0] ?? '';
+    const display = [path.isAbsolute(program) ? path.basename(program) : program, ...command.slice(1)].join(' ');
+    keepRunLog(name);
+    keepPreviousLog(log);
+    const fd = fs.openSync(log, 'w', 0o600);
+    fs.writeSync(fd, `${new Date().toLocaleString('sv-SE')} $ ${display}\n`);
+    const argv = commandFor(command, options.restart);
+    const cwd = path.resolve(options.cwd ?? process.cwd());
+    // An app started with its secrets does not inherit variables that would make its runtime load the caller's code.
+    const given = { ...process.env, ...options.setEnv };
+    const safe = options.holdsSecrets ? appEnv(given) : null;
+    if (safe && safe.dropped.length > 0)
+        console.log(`left out of ${name}'s environment, since they load extra code: ${safe.dropped.join(', ')}`);
+    const child = spawn(argv[0] ?? '', argv.slice(1), {
+        cwd,
+        detached: true,
+        stdio: ['ignore', fd, fd],
+        env: safe?.env ?? given,
+    });
+    let spawnError = null;
+    child.on('error', error => {
+        spawnError = error;
+    });
+    if (options.once)
+        return runToEnd(options, child, fd, log, display, cwd);
+    child.unref();
+    fs.closeSync(fd);
+    await sleep(300);
+    if (spawnError || !child.pid)
+        fail(`could not start ${name}: ${spawnError?.message ?? 'no pid'}`);
+    const record = {
+        name,
+        pid: child.pid,
+        command: display,
+        cwd,
+        restart: options.restart,
+        port: options.port ?? null,
+        ...(options.bind && { bind: options.bind }),
+        ...(options.env && { env: options.env }),
+        onStop: options.onStop ?? [],
+        log,
+        startedAt: new Date().toISOString(),
+        psCommand: psCommand(child.pid),
+        psStart: psStart(child.pid),
+        start: { ...options, cwd },
+    };
+    writeJson(recordPath(name), record);
+    await sleep(700);
+    if (!alive(record))
+        fail(`${name} exited right away; last lines of ${log}:\n${tailOf(log, 15)}`);
+    if (record.port)
+        await waitForPort(record, record.port);
+    if (record.port && options.ready)
+        await waitUntilReady(record, record.port, options.ready);
+    const answering = record.port ? `, answering on port ${String(record.port)}` : '';
+    console.log(`started ${name} (pid ${String(record.pid)})${answering}, log ${log}`);
+    return record;
+}
+/** Waits for a step that runs to completion; it is a running process meanwhile, so status, wait and stop see it. */
+async function runToEnd(options, child, fd, log, display, cwd) {
+    const { name } = options;
+    const ended = new Promise(resolve => {
+        child.once('exit', code => {
+            resolve(code);
+        });
+        child.once('error', () => {
+            resolve(null);
+        });
+    });
+    fs.closeSync(fd);
+    const record = {
+        name,
+        pid: child.pid ?? 0,
+        command: display,
+        cwd,
+        restart: false,
+        port: null,
+        ...(options.env && { env: options.env }),
+        onStop: [],
+        log,
+        startedAt: new Date().toISOString(),
+        psCommand: child.pid ? psCommand(child.pid) : '',
+        psStart: child.pid ? psStart(child.pid) : '',
+    };
+    if (child.pid)
+        writeJson(recordPath(name), record);
+    const expected = options.once?.exitCode ?? 0;
+    const seconds = options.once?.timeout ?? 600;
+    let timer;
+    const late = new Promise(resolve => {
+        timer = setTimeout(() => {
+            resolve('late');
+        }, seconds * 1000);
+    });
+    const code = await Promise.race([ended, late]);
+    clearTimeout(timer);
+    if (code === 'late') {
+        await stopOne(record);
+        fail(`${name} did not finish within ${String(seconds)}s; last lines of ${log}:\n${tailOf(log, 15)}`);
+    }
+    fs.rmSync(recordPath(name), { force: true });
+    if (code !== expected)
+        fail(`${name} ended with exit code ${String(code)}, not ${String(expected)}; last lines of ${log}:\n${tailOf(log, 15)}`);
+    console.log(`finished ${name} (exit code ${String(code)}), log ${log}`);
+    return record;
+}
+const runAll = (commands) => {
+    for (const [command, ...args] of commands)
+        if (command)
+            sh(command, args);
+};
+/** Stops one process and everything it started, and says in a line what happened. */
+export async function stopOne(record) {
+    const forget = () => {
+        // Some apps outlive their process, e.g. a mobile app on a simulator: close them too.
+        runAll(record.onStop);
+        fs.rmSync(recordPath(record.name), { force: true });
+    };
+    if (!alive(record)) {
+        forget();
+        return `${record.name}: was not running`;
+    }
+    const signal = (name) => {
+        try {
+            process.kill(-record.pid, name);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    };
+    // Every process of the app counts, not only the one Koppler started: a worker that outlives it keeps holding its
+    // port.
+    const running = () => signal(0);
+    signal('SIGTERM');
+    for (let tenths = 0; tenths < 80 && running(); tenths++)
+        await sleep(100);
+    const forced = running();
+    if (forced) {
+        signal('SIGKILL');
+        for (let tenths = 0; tenths < 20 && running(); tenths++)
+            await sleep(100);
+    }
+    forget();
+    return `${record.name}: stopped${forced ? ' (killed after 8s)' : ''}`;
+}
+//# sourceMappingURL=processes.js.map

package/dist/engine/processes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processes.js","sourceRoot":"","sources":["../../src/engine/processes.ts"],"names":[],"mappings":"AAAA,uHAAuH;AACvH,4GAA4G;AAC5G,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;AAC7C,uDAAuD;AACvD,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC;AAC3B,4EAA4E;AAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AA+D9E,oEAAoE;AACpE,MAAM,UAAU,EAAE,CAAC,OAAe,EAAE,IAAc;IAChD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AACD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAErF,0GAA0G;AAC1G,MAAM,UAAU,UAAU,CAAC,IAAc,EAAE,OAAgB;IACzD,MAAM,IAAI,GAAG,mFAAmF,CAAC;IACjG,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,MAAM,QAAQ,GAAwC;IACpD,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9B,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;IAC7B,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;IACtB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;IACxB,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;IAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;CACzB,CAAC;AACF,yFAAyF;AACzF,MAAM,UAAU,QAAQ,CAAC,IAAc;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAe,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7E,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;aACzE,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC;aAC9C,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;aACxD,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;aAChD,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC;aAC9C,IAAI,MAAM,KAAK,UAAU;YAAE,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;aACpD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;;YAC3D,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACnG,IAAI,IAAI,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACtE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAkB,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AACD,0EAA0E;AAC1E,MAAM,UAAU,OAAO;IACrB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;AACnF,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAChF;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,MAA4D;IAChF,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC;AAC9G,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAa;IAClD,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IACrF,MAAM,GAAG,GACP,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,iFAAiF;IACjF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACnE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,KAAa;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AACD,yCAAyC;AACzC,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,OAAO,OAAO,GAAG,IAAI;QACnB,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG;QACvB,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAmB;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,4BAA4B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC/G,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI;QACtB,IAAI,CACF,QAAQ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,wBAAwB,CACxH,CAAC;AACN,CAAC;AAED,wGAAwG;AACxG,KAAK,UAAU,WAAW,CAAC,MAAqB,EAAE,IAAY;IAC5D,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAChB,IAAI,CACF,GAAG,MAAM,CAAC,IAAI,oCAAoC,MAAM,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAC1H,CAAC;IACJ,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO;IACxC,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC;IAC/C,MAAM,IAAI,OAAO,CACf,GAAG,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,UAAU,MAAM,SAAS,MAAM,CAAC,GAAG,EAAE,EACtI,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAE,EAAE,CACnC,IAAI,OAAO,CAAgB,OAAO,CAAC,EAAE;IACnC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IAC7D,kGAAkG;IAClG,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC,EAAE;QAChF,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AACL,8FAA8F;AAC9F,KAAK,UAAU,cAAc,CAAC,MAAqB,EAAE,IAAY,EAAE,KAAY;IAC7E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,MAAM,CAAC,IAAI,IAAI,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE,CACvC,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,IAAI,mBAAmB,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAChC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACvG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAChB,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,8CAA8C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO;IACzB,MAAM,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACpF,MAAM,IAAI,OAAO,CACf,GAAG,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,GAAG,CAAC,QAAQ,UAAU,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,MAAM,CAAC,GAAG,EAAE,EACrJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,0HAA0H;AAC1H,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAmB;IACpD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAClC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7G,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,iHAAiH;IACjH,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,+CAA+C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAChD,GAAG;QACH,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;QACzB,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,KAAK;KACxB,CAAC,CAAC;IACH,IAAI,UAAU,GAAiB,IAAoB,CAAC;IACpD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;QACxB,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACzE,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjB,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,IAAI,CAAC,mBAAmB,IAAI,KAAK,UAAU,EAAE,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;IAElG,MAAM,MAAM,GAAkB;QAC5B,IAAI;QACJ,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,OAAO,EAAE,OAAO;QAChB,GAAG;QACH,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QAC1B,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3C,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,GAAG;QACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QAC3B,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE;KAC3B,CAAC;IACF,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,GAAG,IAAI,qCAAqC,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,IAAI;QAAE,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,SAAS,GAAG,EAAE,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oHAAoH;AACpH,KAAK,UAAU,QAAQ,CACrB,OAAmB,EACnB,KAA+B,EAC/B,EAAU,EACV,GAAW,EACX,OAAe,EACf,GAAW;IAEX,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,MAAM,KAAK,GAAG,IAAI,OAAO,CAAgB,OAAO,CAAC,EAAE;QACjD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;YACxB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjB,MAAM,MAAM,GAAkB;QAC5B,IAAI;QACJ,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;QACnB,OAAO,EAAE,OAAO;QAChB,GAAG;QACH,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,IAAI;QACV,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QACxC,MAAM,EAAE,EAAE;QACV,GAAG;QACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;QAChD,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;KAC7C,CAAC;IACF,IAAI,KAAK,CAAC,GAAG;QAAE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC;IAC7C,IAAI,KAAiC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAS,OAAO,CAAC,EAAE;QACzC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG,IAAI,0BAA0B,MAAM,CAAC,OAAO,CAAC,oBAAoB,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,QAAQ;QACnB,IAAI,CACF,GAAG,IAAI,yBAAyB,MAAM,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,QAAQ,CAAC,mBAAmB,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CACnH,CAAC;IACJ,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,eAAe,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,QAAoB,EAAE,EAAE;IACtC,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,QAAQ;QAAE,IAAI,OAAO;YAAE,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5E,CAAC,CAAC;AACF,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAqB;IACjD,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,qFAAqF;QACrF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC;QACT,OAAO,GAAG,MAAM,CAAC,IAAI,mBAAmB,CAAC;IAC3C,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,IAAwB,EAAE,EAAE;QAC1C,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,iHAAiH;IACjH,QAAQ;IACR,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;IACzB,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,SAAS,CAAC,CAAC;QAClB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,IAAI,OAAO,EAAE,EAAE,MAAM,EAAE;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,EAAE,CAAC;IACT,OAAO,GAAG,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxE,CAAC"}

package/dist/engine/query.js

@@ -0,0 +1,241 @@
+// A read-only database query with an app's stored connection string, for checking data (e.g. after a PROD fix) without
+// writing a script. The value never shows; the session and the transaction are read-only; one statement at a time.
+// The rows are real data: on PROD the user runs it in their own terminal, never the agent.
+// Usage: koppler query <app> [--env <env>] [--secret <NAME>] "<sql>"
+import { execFile, execFileSync } from 'node:child_process';
+import path from 'node:path';
+import { flagValue } from "../cli/output.js";
+import { fail } from "../failure.js";
+import { readStack } from "../data.js";
+import { BIN } from "../paths.js";
+import { clientEnv, findClient } from "../safe-env.js";
+import { parse } from "../secret-check.mjs";
+import { appOn, storeOf } from "../core/stack.js";
+const DATABASES = ['postgres', 'mysql'];
+const MAX_LINES = 500;
+const REFUSED = /password authentication failed|access denied|WRONGPASS/i;
+const UNREACHED = /connection refused|could not connect|can't connect|timeout|timed out|could not translate|unknown (mysql )?server host|ENOTFOUND/i;
+const reason = (text) => {
+    if (REFUSED.test(text))
+        return 'it refused the user name or password';
+    if (UNREACHED.test(text))
+        return 'nothing answers at its address (is the tunnel up?)';
+    return /read-only|read only/i.test(text) ? 'that statement writes, and this connection is read-only' : null;
+};
+// What only reads. The read-only transaction is a second line of defence: the statement itself must start with a
+// reading keyword and hold nothing that writes, ends the transaction, changes the session or the server, or runs a
+// client command. Words inside strings, quoted names and comments do not count.
+const READS = new Set(['select', 'with', 'explain', 'show', 'values', 'table', 'describe', 'desc']);
+const WRITES = new Set(('insert update delete merge upsert replace drop alter create truncate rename grant revoke ' +
+    'copy call do exec execute prepare deallocate set reset begin start commit rollback end abort savepoint ' +
+    'release lock unlock vacuum analyze analyse cluster reindex refresh listen notify unlisten load handler ' +
+    'into outfile dumpfile checkpoint discard security import kill shutdown flush install uninstall optimize repair').split(' '));
+// Functions that change the server or reach outside it even in a read-only transaction.
+const SIDE_EFFECTS = /^(dblink\w*|pg_terminate_backend|pg_cancel_backend|pg_reload_conf|pg_rotate_logfile|pg_advisory\w*|pg_try_advisory\w*|lo_\w+|set_config|nextval|setval|pg_read\w*file|pg_ls_dir|pg_stat_reset\w*|pg_switch_wal|pg_create_\w+|pg_drop_\w+|pg_sleep\w*|txid_current|sleep|benchmark|load_file|get_lock|release_lock|release_all_locks|sys_exec|sys_eval)$/i;
+/** The statement's own text, with strings, quoted names and comments taken out, in the database's own quoting rules. */
+export function bareSql(sql, type) {
+    const mysql = type === 'mysql';
+    let out = '';
+    let at = 0;
+    const here = (text) => sql.startsWith(text, at);
+    while (at < sql.length) {
+        const char = sql[at] ?? '';
+        if (here('--') || (mysql && char === '#')) {
+            const newline = sql.indexOf('\n', at);
+            at = newline < 0 ? sql.length : newline;
+            out += ' ';
+            continue;
+        }
+        if (here('/*')) {
+            // Postgres nests block comments; MySQL runs /*! ... */ as code, so it is refused.
+            if (mysql && here('/*!'))
+                return { error: 'MySQL executable comments (/*! */) are not allowed' };
+            let depth = 1;
+            at += 2;
+            while (at < sql.length && depth) {
+                if (!mysql && here('/*')) {
+                    depth++;
+                    at += 2;
+                }
+                else if (here('*/')) {
+                    depth--;
+                    at += 2;
+                }
+                else
+                    at++;
+            }
+            if (depth)
+                return { error: 'a comment is not closed' };
+            out += ' ';
+            continue;
+        }
+        const dollar = !mysql && char === '$' ? /^\$([A-Za-z_]\w*)?\$/.exec(sql.slice(at))?.[0] : undefined;
+        if (dollar) {
+            const end = sql.indexOf(dollar, at + dollar.length);
+            if (end < 0)
+                return { error: 'a $$ string is not closed' };
+            at = end + dollar.length;
+            out += " '' ";
+            continue;
+        }
+        if (char === "'" || char === '"' || (mysql && char === '`')) {
+            // MySQL strings take backslash escapes; Postgres only in E'...' strings.
+            const before = sql.slice(0, at);
+            const escapes = mysql ? char !== '`' : char === "'" && /[eE]$/.test(before) && !/\w[eE]$/.test(before);
+            let end = at + 1;
+            for (; end < sql.length; end++) {
+                if (escapes && sql[end] === '\\')
+                    end++;
+                else if (sql[end] === char) {
+                    if (sql[end + 1] !== char)
+                        break;
+                    end++;
+                }
+            }
+            if (end >= sql.length)
+                return { error: 'a quoted string or name is not closed' };
+            at = end + 1;
+            out += char === "'" ? " '' " : ' "q" ';
+            continue;
+        }
+        out += char;
+        at++;
+    }
+    return { bare: out };
+}
+/** One statement that only reads, without the trailing semicolon; or why not. */
+export function readOnlySql(sql, type) {
+    const statement = (sql ?? '').trim().replace(/;\s*$/, '');
+    if (!statement)
+        return { error: 'give the SQL to run, in quotes' };
+    const stripped = bareSql(statement, type);
+    if (stripped.error !== undefined)
+        return { error: stripped.error };
+    const { bare } = stripped;
+    if (bare.includes(';'))
+        return { error: 'one statement at a time' };
+    if (bare.includes('\\'))
+        return { error: 'database client commands (a backslash) are not allowed' };
+    const words = bare.toLowerCase().match(/[a-z_][a-z0-9_$]*/g) ?? [];
+    if (!READS.has(words[0] ?? ''))
+        return { error: 'only reading statements: SELECT, WITH, EXPLAIN, SHOW, VALUES, TABLE or DESCRIBE' };
+    const writes = words.find(word => WRITES.has(word));
+    if (writes)
+        return {
+            error: `"${writes.toUpperCase()}" can change data or the session, so it is not allowed here (quote a column with that name)`,
+        };
+    const calls = [...bare.matchAll(/([a-z_][\w$]*)\s*\(/gi)]
+        .map(match => match[1] ?? '')
+        .find(called => SIDE_EFFECTS.test(called));
+    if (calls)
+        return { error: `${calls}() changes the server or reaches outside it, so it is not allowed here` };
+    return { sql: statement };
+}
+/** The client call for a connection; the password goes in the environment, never on the command line. */
+export function clientCall(to, sql) {
+    const port = String(to.port);
+    if (to.type === 'postgres')
+        return {
+            bin: ['psql', 'libpq'],
+            env: {
+                PGPASSWORD: to.password,
+                PGCONNECT_TIMEOUT: '10',
+                PGOPTIONS: '-c default_transaction_read_only=on -c statement_timeout=30000',
+            },
+            args: [
+                ...['-h', to.host, '-p', port, '-U', to.user, '-d', to.database || 'postgres', '-X', '-v', 'ON_ERROR_STOP=1'],
+                ...['-c', `BEGIN TRANSACTION READ ONLY; ${sql}\n; ROLLBACK;`],
+            ],
+        };
+    if (to.type === 'mysql')
+        return {
+            bin: ['mysql', 'mysql-client'],
+            env: { MYSQL_PWD: to.password },
+            args: [
+                ...['--connect-timeout=10', '-h', to.host, '-P', port, '-u', to.user],
+                ...(to.database ? ['-D', to.database] : []),
+                ...['--table', '-e', `SET SESSION TRANSACTION READ ONLY; START TRANSACTION READ ONLY; ${sql}\n; ROLLBACK;`],
+            ],
+        };
+    return null;
+}
+/** The rows, or why not; never the value, and of the server's messages only a plain reason or the SQL error. */
+export async function runQuery(to, sql) {
+    const call = clientCall(to, sql);
+    if (!call)
+        return { error: `Koppler cannot query a ${to.type} connection` };
+    const client = findClient(...call.bin);
+    if (!client)
+        return { error: `the ${call.bin[0]} client is not installed (brew install ${call.bin[1]})` };
+    const ran = await new Promise(resolve => {
+        const options = { env: clientEnv(call.env), timeout: 60000, maxBuffer: 16 * 1024 * 1024 };
+        execFile(client, call.args, options, (error, stdout, stderr) => {
+            resolve({ failed: !!error, stdout, stderr });
+        });
+    });
+    if (ran.failed) {
+        const sqlError = ran.stderr.split('\n').find(line => /ERROR/i.test(line));
+        const why = reason(ran.stderr) ?? sqlError?.replace(/^.*?ERROR[: ]*/i, '') ?? 'see the database client';
+        return { error: `the query failed: ${why}` };
+    }
+    const lines = ran.stdout
+        .trimEnd()
+        .split('\n')
+        .filter(line => !/^(BEGIN|ROLLBACK|SET)$/.test(line.trim()));
+    return { rows: lines.slice(0, MAX_LINES).join('\n'), more: Math.max(0, lines.length - MAX_LINES) };
+}
+export async function queryCommand(args) {
+    const [app = '', sqlArg] = args.filter((arg, at) => !arg.startsWith('--') && !['--env', '--secret'].includes(args[at - 1] ?? ''));
+    const stack = readStack() ?? fail('no stack loaded (koppler init)');
+    const base = stack.apps[app] ?? fail('usage: koppler query <app> [--env <env>] [--secret <NAME>] "<sql>"');
+    const [first] = stack.envs;
+    const env = flagValue(args, '--env') ?? first ?? '';
+    if (!stack.envs.includes(env))
+        fail(`unknown env ${env}; the stack has ${stack.envs.join(', ')}`);
+    // Refused before any stored value is read (on PROD each read asks for the Keychain), whichever database it is for.
+    const early = DATABASES.map(type => readOnlySql(sqlArg, type));
+    const [refused] = early;
+    if (refused?.error !== undefined && early.every(checked => checked.error !== undefined))
+        fail(refused.error);
+    const store = storeOf(stack, app, env);
+    const named = flagValue(args, '--secret');
+    const name = base.name;
+    // The app's database secret: the one named, else the one the stack types as a database, else the only one that reads as one.
+    const candidates = (appOn(stack, app, env)?.secrets ?? []).filter(secret => secret.env && (!named || secret.env === named));
+    const read = (secret) => {
+        try {
+            return execFileSync(path.join(BIN, 'secret-store'), ['value', store, secret], {
+                encoding: 'utf8',
+                stdio: ['ignore', 'pipe', 'ignore'],
+            });
+        }
+        catch {
+            return '';
+        }
+    };
+    const typed = (type) => DATABASES.includes(type ?? '');
+    let chosen;
+    for (const secret of [...candidates.filter(one => typed(one.type)), ...candidates.filter(one => !one.type)]) {
+        const value = read(secret.env ?? '');
+        if (!value)
+            continue;
+        const to = parse(value, typed(secret.type) ? secret.type : undefined);
+        if (to && typed(to.type ?? undefined)) {
+            chosen = { name: secret.env ?? '', to: to };
+            break;
+        }
+    }
+    if (!chosen)
+        fail(`no stored database connection for ${name} on ${env.toUpperCase()}${named ? ` named ${named}` : ''} (store it first; koppler doctor ${app} --env ${env})`);
+    const statement = readOnlySql(sqlArg, chosen.to.type);
+    if (statement.error !== undefined)
+        fail(statement.error);
+    console.error(`${name} on ${env.toUpperCase()}, read-only, with ${chosen.name}:`);
+    const result = await runQuery(chosen.to, statement.sql);
+    if (result.error !== undefined)
+        fail(result.error);
+    console.log(result.rows);
+    if (result.more)
+        console.error(`(${String(result.more)} more lines not shown; add a LIMIT)`);
+}
+//# sourceMappingURL=query.js.map

package/dist/engine/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../src/engine/query.ts"],"names":[],"mappings":"AAAA,uHAAuH;AACvH,mHAAmH;AACnH,2FAA2F;AAC3F,qEAAqE;AACrE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAmB,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAGlD,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACxC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,OAAO,GAAG,yDAAyD,CAAC;AAC1E,MAAM,SAAS,GACb,kIAAkI,CAAC;AACrI,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;IAC9B,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,sCAAsC,CAAC;IACtE,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,oDAAoD,CAAC;IACtF,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9G,CAAC,CAAC;AAEF,iHAAiH;AACjH,mHAAmH;AACnH,gFAAgF;AAChF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AACpG,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CACE,2FAA2F;IAC3F,yGAAyG;IACzG,yGAAyG;IACzG,gHAAgH,CACjH,CAAC,KAAK,CAAC,GAAG,CAAC,CACb,CAAC;AACF,wFAAwF;AACxF,MAAM,YAAY,GAChB,0VAA0V,CAAC;AAE7V,wHAAwH;AACxH,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,IAAa;IAChD,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,CAAC;IAC/B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACtC,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACxC,GAAG,IAAI,GAAG,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACf,kFAAkF;YAClF,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;YACjG,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,EAAE,IAAI,CAAC,CAAC;YACR,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzB,KAAK,EAAE,CAAC;oBACR,EAAE,IAAI,CAAC,CAAC;gBACV,CAAC;qBAAM,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,KAAK,EAAE,CAAC;oBACR,EAAE,IAAI,CAAC,CAAC;gBACV,CAAC;;oBAAM,EAAE,EAAE,CAAC;YACd,CAAC;YACD,IAAI,KAAK;gBAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YACvD,GAAG,IAAI,GAAG,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpG,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;YAC3D,EAAE,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;YACzB,GAAG,IAAI,MAAM,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC5D,yEAAyE;YACzE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvG,IAAI,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YACjB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;gBAC/B,IAAI,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;oBAAE,GAAG,EAAE,CAAC;qBACnC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC3B,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI;wBAAE,MAAM;oBACjC,GAAG,EAAE,CAAC;gBACR,CAAC;YACH,CAAC;YACD,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;YACjF,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;YACb,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACvC,SAAS;QACX,CAAC;QACD,GAAG,IAAI,IAAI,CAAC;QACZ,EAAE,EAAE,CAAC;IACP,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,GAA8B,EAAE,IAAa;IACvE,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACpE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC;IACpG,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,iFAAiF,EAAE,CAAC;IACtG,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,IAAI,MAAM;QACR,OAAO;YACL,KAAK,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,6FAA6F;SAC7H,CAAC;IACJ,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;SACtD,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC5B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,wEAAwE,EAAE,CAAC;IAC9G,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC5B,CAAC;AAQD,yGAAyG;AACzG,MAAM,UAAU,UAAU,CAAC,EAAc,EAAE,GAAW;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,IAAI,KAAK,UAAU;QACxB,OAAO;YACL,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YACtB,GAAG,EAAE;gBACH,UAAU,EAAE,EAAE,CAAC,QAAQ;gBACvB,iBAAiB,EAAE,IAAI;gBACvB,SAAS,EAAE,gEAAgE;aAC5E;YACD,IAAI,EAAE;gBACJ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,CAAC;gBAC7G,GAAG,CAAC,IAAI,EAAE,gCAAgC,GAAG,eAAe,CAAC;aAC9D;SACF,CAAC;IACJ,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO;QACrB,OAAO;YACL,GAAG,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC;YAC9B,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE;YAC/B,IAAI,EAAE;gBACJ,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;gBACrE,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,mEAAmE,GAAG,eAAe,CAAC;aAC5G;SACF,CAAC;IACJ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAc,EAAE,GAAW;IACxD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;IAC5E,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,0CAA0C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1G,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAsD,OAAO,CAAC,EAAE;QAC3F,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC1F,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC7D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,EAAE,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,yBAAyB,CAAC;QACxG,OAAO,EAAE,KAAK,EAAE,qBAAqB,GAAG,EAAE,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM;SACrB,OAAO,EAAE;SACT,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;AACrG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,CAAC,GAAG,GAAG,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAC1F,CAAC;IACF,MAAM,KAAK,GAAG,SAAS,EAAE,IAAI,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,oEAAoE,CAAC,CAAC;IAC3G,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,eAAe,GAAG,mBAAmB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,mHAAmH;IACnH,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IACxB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,6HAA6H;IAC7H,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAC/D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,CACzD,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;gBAC5E,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,IAAwB,EAAkB,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3F,IAAI,MAAoD,CAAC;IACzD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5G,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtE,IAAI,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAgB,EAAE,CAAC;YAC1D,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM;QACT,IAAI,CACF,qCAAqC,IAAI,OAAO,GAAG,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,oCAAoC,GAAG,UAAU,GAAG,GAAG,CAC1J,CAAC;IACJ,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,WAAW,EAAE,qBAAqB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;AAC/F,CAAC"}