pg-admin-mcp 0.0.0-stage → 0.1.0

package/dist/core/paginate.js

@@ -0,0 +1,195 @@
+import { createHash } from 'node:crypto';
+import { PgMcpError } from './errors.js';
+function effectiveNulls(col) {
+    return col.nulls ?? (col.direction === 'ASC' ? 'LAST' : 'FIRST');
+}
+const MAX_CURSOR_BASE64_LENGTH = 4000;
+function invalidCursor(reason) {
+    return new PgMcpError({
+        code: 'CURSOR_INVALID',
+        message: `pagination cursor is invalid: ${reason}`,
+        hint: 'omit the cursor to start from the first page, or pass back the exact nextCursor value from the previous call',
+    });
+}
+/**
+ * Hashes the query shape (table, filter, sort columns/directions — whatever
+ * the caller considers load-bearing) so a cursor minted for one query can
+ * never be replayed against a differently-shaped one. Not a security
+ * boundary, a correctness one: 16 hex chars (64 bits) is plenty to catch
+ * accidental/adversarial replay across queries.
+ */
+export function computeShapeHash(shape) {
+    return createHash('sha256').update(JSON.stringify(shape)).digest('hex').slice(0, 16);
+}
+/** Base64url, JSON envelope: `{ v: sort values, h: shape hash }`. */
+export function encodeCursor(sortValues, queryShapeHash) {
+    const payload = { v: sortValues, h: queryShapeHash };
+    return Buffer.from(JSON.stringify(payload), 'utf8').toString('base64url');
+}
+function isCursorScalar(x) {
+    return x === null || typeof x === 'string' || typeof x === 'number' || typeof x === 'boolean';
+}
+function isSortValueArray(x) {
+    return (Array.isArray(x) &&
+        x.every((v) => typeof v === 'object' && v !== null && typeof v.column === 'string' && isCursorScalar(v.value)));
+}
+/**
+ * Decodes and validates a cursor, rejecting anything malformed, oversized, or
+ * tampered — including a shape hash that does not match `queryShapeHash` for
+ * the request currently being served (a cursor minted for a different filter,
+ * sort, or table).
+ */
+export function decodeCursor(cursor, queryShapeHash) {
+    if (cursor.length === 0 || cursor.length > MAX_CURSOR_BASE64_LENGTH) {
+        throw invalidCursor('empty or too large');
+    }
+    let json;
+    try {
+        json = Buffer.from(cursor, 'base64url').toString('utf8');
+    }
+    catch {
+        throw invalidCursor('not valid base64url');
+    }
+    let payload;
+    try {
+        payload = JSON.parse(json);
+    }
+    catch {
+        throw invalidCursor('not valid JSON');
+    }
+    if (typeof payload !== 'object' || payload === null)
+        throw invalidCursor('malformed payload');
+    const { v, h } = payload;
+    if (typeof h !== 'string' || !isSortValueArray(v))
+        throw invalidCursor('malformed payload');
+    if (h !== queryShapeHash)
+        throw invalidCursor('was minted for a different query (filter, sort, or table changed)');
+    return v;
+}
+/**
+ * Appends a tiebreaker column so keyset comparisons are always over a unique
+ * key, even when the caller's own sort columns are not unique on their own
+ * (e.g. `ORDER BY created_at` with duplicate timestamps would otherwise skip
+ * or repeat rows across pages).
+ *
+ * Prefers the relation's primary key (already unique, already indexed, so the
+ * keyset predicate stays sargable). Falls back to `ctid` — PostgreSQL's
+ * physical row identifier — only when there is no primary key to use; `ctid`
+ * has a btree-comparable type and is always present, but it is stable only
+ * within a transaction (a concurrent `VACUUM`/`UPDATE` can move a row), so it
+ * is the last resort, not the default.
+ */
+/**
+ * Reverses `quoteIdent`: every `SafeIdent` reaching this module was produced
+ * there, so stripping the wrapping quotes and un-doubling embedded ones is a
+ * total, safe inverse — not a new identifier-trust boundary. Falls through
+ * unchanged for the one hardcoded, never-quoted literal this module also
+ * treats as a `SafeIdent`: `'ctid' as SafeIdent` below.
+ */
+function unquoteIdent(ident) {
+    const raw = ident;
+    return raw.startsWith('"') && raw.endsWith('"') ? raw.slice(1, -1).replace(/""/g, '"') : raw;
+}
+export function withTiebreaker(columns, pkColumns) {
+    const already = new Set(columns.map((c) => c.name));
+    const tiebreakers = pkColumns.length > 0
+        ? pkColumns
+            .map((ident) => ({ name: unquoteIdent(ident), ident, direction: 'ASC' }))
+            .filter((c) => !already.has(c.name))
+        : already.has('ctid')
+            ? []
+            : [{ name: 'ctid', ident: 'ctid', direction: 'ASC' }];
+    return [...columns, ...tiebreakers];
+}
+export function orderByClause(columns) {
+    return columns.map((c) => `${c.ident} ${c.direction} NULLS ${effectiveNulls(c)}`).join(', ');
+}
+/**
+ * Reads the sort values off the last row of a page — the seed for the next
+ * page's cursor. A non-scalar sort-column value (e.g. a sort column that
+ * turned out to be an array/object type) means this page cannot be
+ * continued — that is a server-side condition, not a malformed *caller*
+ * cursor, but it still must surface through the same `PgMcpError` taxonomy
+ * every other tool failure does (never a bare `Error`, which `toToolResult`
+ * would render as an unclassified `PG_ERROR`-shaped message anyway, but
+ * without a `code`/`hint` a caller can act on).
+ */
+export function cursorValuesFromRow(row, columns) {
+    return columns.map((c) => {
+        const raw = row[c.name];
+        const value = raw instanceof Date ? raw.toISOString() : raw;
+        if (!isCursorScalar(value)) {
+            throw new PgMcpError({
+                code: 'PG_ERROR',
+                message: `sort column "${c.name}" has a non-scalar value and cannot seed a keyset cursor`,
+                hint: 'choose a different sort column (scalar, non-array/object) or drop pagination for this query',
+            });
+        }
+        return { column: c.name, value };
+    });
+}
+/**
+ * Builds a parameterized `WHERE` fragment for "rows after this cursor",
+ * correct under mixed ASC/DESC columns: a plain row-wise `(a, b) > (x, y)`
+ * comparison assumes every column compares the same direction, so this
+ * expands to the general OR-chain instead —
+ * `(c1 ⊘ v1) OR (c1 = v1 AND c2 ⊘ v2) OR (c1 = v1 AND c2 = v2 AND c3 ⊘ v3) …`
+ * where `⊘` is `>` for an ASC column and `<` for a DESC one. Every value is a
+ * bound parameter (`$N`), starting at `startParamIndex` so this can be spliced
+ * into a WHERE clause that already has other parameterized filters ahead of it.
+ *
+ * Equality-prefix branches use `IS NOT DISTINCT FROM` rather than `=` — plain
+ * `=` is never true against a NULL prior-column value, which would silently
+ * drop every later branch whenever an earlier sort column is nullable.
+ *
+ * Nullable sort columns are the sharp edge here: `effectiveNulls(col)` must
+ * report the exact same placement `orderByClause` emits for that column, or
+ * the keyset predicate and the `ORDER BY` disagree and rows get skipped or
+ * repeated across pages. Per column, "strictly after cursor value `v`" is:
+ *   - `v` non-null, `NULLS LAST`  -> `(col ⊘ v OR col IS NULL)` (NULL sorts
+ *     after every non-null value, so it is always "after" a non-null cursor).
+ *   - `v` non-null, `NULLS FIRST` -> `col ⊘ v` (NULLs already sort before any
+ *     non-null value, so none of them are "after" a non-null cursor).
+ *   - `v` null, `NULLS FIRST`     -> `col IS NOT NULL` (every non-null value
+ *     sorts after every NULL; other NULLs are equal, deferred to the next
+ *     branch's equality prefix).
+ *   - `v` null, `NULLS LAST`      -> `FALSE` (NULL is already the maximum
+ *     element; nothing sorts after it).
+ */
+export function buildKeysetWhere(columns, cursorValues, startParamIndex) {
+    const params = [];
+    let paramIndex = startParamIndex;
+    const byColumn = new Map(cursorValues.map((v) => [v.column, v.value]));
+    const branches = [];
+    for (let i = 0; i < columns.length; i++) {
+        const col = columns[i];
+        if (col === undefined)
+            continue;
+        if (!byColumn.has(col.name))
+            continue; // no cursor value for this column -> first page, caller passes an empty cursorValues
+        const eqParts = [];
+        for (let j = 0; j < i; j++) {
+            const prior = columns[j];
+            if (prior === undefined)
+                continue;
+            const value = byColumn.get(prior.name) ?? null;
+            params.push(value);
+            eqParts.push(`${prior.ident} IS NOT DISTINCT FROM $${paramIndex++}`);
+        }
+        const value = byColumn.get(col.name) ?? null;
+        const op = col.direction === 'ASC' ? '>' : '<';
+        const nulls = effectiveNulls(col);
+        let colCondition;
+        if (value === null) {
+            colCondition = nulls === 'FIRST' ? `${col.ident} IS NOT NULL` : 'FALSE';
+        }
+        else {
+            params.push(value);
+            const base = `${col.ident} ${op} $${paramIndex++}`;
+            colCondition = nulls === 'LAST' ? `(${base} OR ${col.ident} IS NULL)` : base;
+        }
+        branches.push(eqParts.length === 0 ? colCondition : `(${[...eqParts, colCondition].join(' AND ')})`);
+    }
+    return { clause: branches.length === 0 ? 'TRUE' : branches.join(' OR '), params };
+}
+//# sourceMappingURL=paginate.js.map

package/dist/core/paginate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paginate.js","sourceRoot":"","sources":["../../src/core/paginate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmDzC,SAAS,cAAc,CAAC,GAA4C;IAClE,OAAO,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAEtC,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,IAAI,UAAU,CAAC;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,iCAAiC,MAAM,EAAE;QAClD,IAAI,EAAE,8GAA8G;KACrH,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,UAAgC,EAAE,cAAsB;IACnF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,CAAU;IAChC,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,CAAC;AAChG,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAChB,CAAC,CAAC,KAAK,CACL,CAAC,CAAC,EAAkB,EAAE,CACpB,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAQ,CAAe,CAAC,MAAM,KAAK,QAAQ,IAAI,cAAc,CAAE,CAAe,CAAC,KAAK,CAAC,CAC/H,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,cAAsB;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QACpE,MAAM,aAAa,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,CAAC,qBAAqB,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC9F,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,OAAuC,CAAC;IACzD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAAE,MAAM,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC5F,IAAI,CAAC,KAAK,cAAc;QAAE,MAAM,aAAa,CAAC,mEAAmE,CAAC,CAAC;IAEnH,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;GAYG;AACH;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAgB;IACpC,MAAM,GAAG,GAAG,KAAe,CAAC;IAC5B,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAA8B,EAAE,SAA+B;IAC5F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,WAAW,GACf,SAAS,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,SAAS;aACN,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAc,EAAE,CAAC,CAAC;aACjF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YACnB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAmB,EAAE,SAAS,EAAE,KAAc,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAA8B;IAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,UAAU,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAQ,EAAE,OAA8B;IAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5D,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,gBAAgB,CAAC,CAAC,IAAI,0DAA0D;gBACzF,IAAI,EAAE,6FAA6F;aACpG,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA8B,EAC9B,YAAkC,EAClC,eAAuB;IAEvB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,IAAI,UAAU,GAAG,eAAe,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,qFAAqF;QAE5H,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,0BAA0B,UAAU,EAAE,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAC7C,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,YAAoB,CAAC;QACzB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,YAAY,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,UAAU,EAAE,EAAE,CAAC;YACnD,YAAY,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvG,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AACpF,CAAC"}

package/dist/core/paths.js

@@ -0,0 +1,392 @@
+import { once } from 'node:events';
+import { createWriteStream } from 'node:fs';
+import { access, link, open, realpath, rename, rm, stat, unlink } from 'node:fs/promises';
+import path from 'node:path';
+import process from 'node:process';
+import { finished } from 'node:stream/promises';
+import { readString } from '../config/env.js';
+import { PgMcpError } from './errors.js';
+/**
+ * The one path policy for every file-producing tool (`export`, `copy`, and
+ * later `backup`/`schema_snapshot`) — see design.md "Workspace and file
+ * paths". One resolution rule, identical in container and host mode:
+ *
+ * - A **relative** input resolves against `allowedDirs[0]` (`dumps/x.csv` ->
+ *   `<allowedDirs[0]>/dumps/x.csv`).
+ * - An **absolute** input is normalized as-is.
+ * - Either way, the candidate's **parent directory is `realpath`'d** — which
+ *   catches a symlink escape and still works for a file that does not exist
+ *   yet, since only the parent (not the file itself) has to exist — and the
+ *   result must land inside one of `allowedDirs`, each realpath'd the same
+ *   way so a symlinked allow-listed directory does not falsely reject
+ *   everything inside it.
+ * - An explicit `..` segment anywhere in the raw input (or in the resolved
+ *   candidate) is refused outright, before any filesystem call. An empty
+ *   `allowedDirs` refuses everything — the correct default for a host run
+ *   that never set `PG_MCP_ALLOWED_DIRS`.
+ *
+ * **The containment check is segment-wise, never `startsWith`.** `startsWith`
+ * is the classic bug here: `/workspace-evil` starts with `/workspace` as a
+ * string but is not inside it as a directory. {@link resolveWorkspacePath}
+ * compares path *segments* instead, so `/workspace-evil/x` is correctly
+ * refused against an allow-list of `/workspace`. Comparison is
+ * case-insensitive on `win32` (NTFS/ReFS default) and case-sensitive
+ * everywhere else, decided by `opts.platform` (defaults to `process.platform`,
+ * overridable so a Windows test run can still exercise the POSIX branch).
+ */
+const PARTIAL_SUFFIX = '.partial';
+function hasErrnoCode(err, code) {
+    return typeof err === 'object' && err !== null && 'code' in err && err.code === code;
+}
+function isEnoent(err) {
+    return hasErrnoCode(err, 'ENOENT');
+}
+/** Every path segment, `/` and `\` both treated as separators regardless of platform (an operator could type either into an env var). */
+function rawSegments(p) {
+    return p.split(/[\\/]/);
+}
+function pathSegments(p) {
+    return rawSegments(p).filter((s) => s.length > 0);
+}
+/**
+ * Refuses an explicit `..` path segment, and a NUL byte. Exported so
+ * `core/audit.ts` (a different, allow-list-independent path setting) shares
+ * this one check instead of carrying its own copy that could drift from this
+ * one.
+ *
+ * The NUL check is here rather than at the caller because without it a `\0`
+ * sails past every containment check and only blows up inside `node:fs` as a
+ * raw `TypeError`/`ERR_INVALID_ARG_VALUE` — an internal-looking crash where
+ * the caller deserves `PATH_DENIED`.
+ */
+export function assertNoTraversalSegment(raw) {
+    if (raw.includes('\0')) {
+        throw new PgMcpError({
+            code: 'PATH_DENIED',
+            message: `"${raw.replace(/\0/g, '\\0')}" contains a NUL byte`,
+            hint: 'remove the NUL byte — a path is plain text, and node:fs rejects embedded NULs outright',
+        });
+    }
+    if (rawSegments(raw).includes('..')) {
+        throw new PgMcpError({
+            code: 'PATH_DENIED',
+            message: `"${raw}" contains a '..' path segment`,
+            hint: 'remove the .. segment — paths resolve relative to an allowed directory and are never allowed to climb above it',
+        });
+    }
+}
+/**
+ * `realpath`s the nearest existing ancestor of `p` and re-appends whatever
+ * trailing segments do not exist yet, so a not-yet-created export
+ * destination (or an allow-listed directory in a from-scratch test) still
+ * gets every *real* symlink along the way resolved, without requiring the
+ * full path to already exist on disk.
+ */
+async function nearestExistingRealDir(p) {
+    try {
+        return await realpath(p);
+    }
+    catch (err) {
+        if (!isEnoent(err))
+            throw err;
+        const parent = path.dirname(p);
+        if (parent === p)
+            return p; // reached the filesystem root; nothing left to resolve
+        const realParent = await nearestExistingRealDir(parent);
+        return path.join(realParent, path.basename(p));
+    }
+}
+function normalizeForCompare(segment, platform) {
+    return platform === 'win32' ? segment.toLowerCase() : segment;
+}
+/**
+ * True when `dir` is `candidate` itself or a proper ancestor of it, compared
+ * segment-by-segment — never `candidate.startsWith(dir)` (see the module doc
+ * for why that is the classic bug).
+ */
+function isWithinOrEqual(candidate, dir, platform) {
+    const candidateSegs = pathSegments(candidate).map((s) => normalizeForCompare(s, platform));
+    const dirSegs = pathSegments(dir).map((s) => normalizeForCompare(s, platform));
+    if (candidateSegs.length < dirSegs.length)
+        return false;
+    return dirSegs.every((seg, i) => seg === candidateSegs[i]);
+}
+/**
+ * Resolves a caller-supplied file path against `allowedDirs`, per the module
+ * doc above. Returns the real, absolute, symlink-resolved path a tool should
+ * actually open — or throws `PgMcpError` with code `PATH_DENIED`.
+ */
+export async function resolveWorkspacePath(input, allowedDirs, opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    if (allowedDirs.length === 0) {
+        throw new PgMcpError({
+            code: 'PATH_DENIED',
+            message: `"${input}" was refused: no allowed directory is configured`,
+            hint: 'set PG_MCP_ALLOWED_DIRS (or this profile\'s ALLOWED_DIRS) to a mounted directory to enable file I/O',
+        });
+    }
+    assertNoTraversalSegment(input);
+    const anchor = allowedDirs[0]; // non-empty checked above
+    const candidate = path.isAbsolute(input) ? path.normalize(input) : path.resolve(anchor, input);
+    assertNoTraversalSegment(candidate);
+    const parentDir = path.dirname(candidate);
+    const baseName = path.basename(candidate);
+    let realParent;
+    try {
+        realParent = await nearestExistingRealDir(parentDir);
+    }
+    catch (err) {
+        throw new PgMcpError({
+            code: 'PATH_DENIED',
+            message: `"${input}" could not be resolved: ${err instanceof Error ? err.message : String(err)}`,
+            hint: 'check that the destination directory (or its nearest existing ancestor) is readable',
+            cause: err,
+        });
+    }
+    const resolvedAllowedDirs = await Promise.all(allowedDirs.map((dir) => nearestExistingRealDir(path.resolve(dir)).catch(() => path.resolve(dir))));
+    const resolved = path.join(realParent, baseName);
+    const withinAllowList = resolvedAllowedDirs.some((dir) => isWithinOrEqual(realParent, dir, platform));
+    if (!withinAllowList) {
+        // Containment is checked on the PARENT, so an input that *is* an allowed
+        // directory fails it — its parent is above the allow-list. Refusing is
+        // right (a file is what every caller wants, and an export would put its
+        // `.partial` sibling outside the allow-list), but "outside every allowed
+        // directory" is a lie about the one path the operator explicitly allowed.
+        const isAllowedDirItself = resolvedAllowedDirs.some((dir) => isWithinOrEqual(resolved, dir, platform));
+        throw new PgMcpError({
+            code: 'PATH_DENIED',
+            message: isAllowedDirItself
+                ? `"${input}" is an allowed directory itself, not a file inside one`
+                : `"${input}" resolves to ${resolved}, which is outside every allowed directory`,
+            hint: isAllowedDirItself
+                ? 'append a file name — every tool here reads or writes a file, never a directory'
+                : `use a path under one of: ${allowedDirs.join(', ')}`,
+            details: { input, allowedDirs: [...allowedDirs] },
+        });
+    }
+    return resolved;
+}
+/**
+ * Renders the host-visible form of a resolved workspace path, from
+ * `PG_MCP_WORKSPACE_HOST_PATH` — set by an operator to the real host
+ * directory that is bind-mounted onto `allowedDirs[0]` inside the container,
+ * so a response can tell a human where the file actually landed on their
+ * machine. `undefined` when the env var is unset, or when `resolvedPath`
+ * is not under `allowedDirs[0]` at all (nothing sane to render).
+ */
+export function renderHostPath(resolvedPath, allowedDirs, env = process.env) {
+    const hostRoot = readString(env, 'PG_MCP_WORKSPACE_HOST_PATH');
+    const anchor = allowedDirs[0];
+    if (hostRoot === undefined || anchor === undefined)
+        return undefined;
+    const rel = path.relative(path.resolve(anchor), resolvedPath);
+    if (rel.startsWith('..') || path.isAbsolute(rel))
+        return undefined;
+    if (rel === '')
+        return hostRoot;
+    const trimmedHostRoot = hostRoot.replace(/[\\/]+$/, '');
+    return `${trimmedHostRoot}/${rel.split(path.sep).join('/')}`;
+}
+/**
+ * The size refusal, exported because `tools/copy.ts` re-counts bytes as they
+ * stream past and must raise the identical error mid-flight — a file that grew
+ * after the `fstat` cannot slip through by being late.
+ */
+export function fileTooLarge(filePath, bytes, opts) {
+    return new PgMcpError({
+        code: 'LIMIT_EXCEEDED',
+        message: `"${filePath}" is ${bytes} bytes, over the ${opts.maxBytes}-byte ${opts.limitLabel} limit`,
+        hint: opts.limitHint,
+        details: { path: filePath, bytes, maxBytes: opts.maxBytes },
+    });
+}
+/**
+ * **The one read-side path policy.** Resolves an operator-supplied path,
+ * refuses it — for containment, for kind and for size — *before a single byte
+ * is read*, and hands back the open handle the caller streams or reads from.
+ * The caller owns that handle and must close it on every path.
+ *
+ * This existed three times before Phase 6 (`tools/copy.ts#resolveImportSource`,
+ * `tools/_snapshot_io.ts#readSnapshotFile`, and would have been a fourth in
+ * `postgres_restore` — the one that feeds an archive to `pg_restore`). Three
+ * independent copies of a security check are three chances for one of them to
+ * drift; this is the single copy, and each caller supplies only its wording.
+ *
+ * Four things happen here, and each closes a specific hole:
+ *
+ * 1. **Double {@link resolveWorkspacePath}.** The first call realpaths the
+ *    *parent* only (deliberately — a write destination need not exist yet), so
+ *    a symlink planted inside an allowed directory would be followed straight
+ *    out of the allow-list. `realpath` then follows the file itself and the
+ *    second call proves where it really landed is still inside.
+ * 2. **Open once, check the handle.** Every check above is on a *name*, and a
+ *    name can be re-pointed between the last check and the read. `handle.stat()`
+ *    is an fstat on the open inode; the bytes the caller gets are the bytes of
+ *    the inode this function approved.
+ * 3. **`ino` comparison** against a path-based `stat` of the resolved path,
+ *    which refuses a swap that happened after the open. `ino` only, deliberately:
+ *    on Windows a path-based `stat` reports `dev: 0` while an `fstat` on the same
+ *    file reports the real volume, so comparing `dev` would refuse every read
+ *    there.
+ * 4. **Size cap before the read**, from the fstat — not after a `readFile` has
+ *    already pulled 564 MB into the heap.
+ */
+export async function resolveWorkspaceFileForRead(input, allowedDirs, opts) {
+    const candidate = await resolveWorkspacePath(input, allowedDirs);
+    let handle;
+    try {
+        handle = await open(candidate, 'r');
+    }
+    catch (err) {
+        throw new PgMcpError({
+            code: 'PATH_DENIED',
+            message: `"${input}" does not exist or cannot be read`,
+            hint: opts.missingHint,
+            details: { input },
+            cause: err,
+        });
+    }
+    try {
+        const info = await handle.stat();
+        if (!info.isFile()) {
+            throw new PgMcpError({
+                code: 'PATH_DENIED',
+                message: `"${input}" is not a regular file`,
+                hint: opts.notFileHint,
+                details: { input },
+            });
+        }
+        const resolvedPath = await resolveWorkspacePath(await realpath(candidate), allowedDirs);
+        const onDisk = await stat(resolvedPath);
+        if (onDisk.ino !== info.ino) {
+            throw new PgMcpError({
+                code: 'PATH_DENIED',
+                message: `"${input}" was replaced while it was being checked — the open file is not the one at that path`,
+                hint: 'nothing was read; re-run once the path is stable',
+                details: { input },
+            });
+        }
+        if (info.size > opts.maxBytes)
+            throw fileTooLarge(resolvedPath, info.size, opts);
+        return { path: resolvedPath, bytes: info.size, handle };
+    }
+    catch (err) {
+        await handle.close();
+        throw err;
+    }
+}
+function alreadyExists(finalPath, cause) {
+    return new PgMcpError({
+        code: 'PATH_DENIED',
+        message: `"${finalPath}" already exists`,
+        hint: 'pass overwrite: true to replace it, or choose a different destination path',
+        ...(cause === undefined ? {} : { cause }),
+    });
+}
+/**
+ * Publishes the finished partial file under `finalPath`.
+ *
+ * `overwrite: false` links-then-unlinks rather than renaming: `link` fails
+ * `EEXIST` when the destination appeared *after* the up-front `access` check,
+ * so the refusal is atomic with the publish instead of racing it (`rename`
+ * silently replaces whatever is there). `overwrite: true` renames, which is
+ * the atomic replace it asked for.
+ *
+ * ponytail: a filesystem with no hard links (some network shares / bind
+ * mounts) falls back to `rename`, which restores the old check-then-act race.
+ * Acceptable because the refusal is a courtesy against clobbering, not a
+ * security boundary — containment is `resolveWorkspacePath`'s job. Drop the
+ * fallback if a target filesystem ever makes the race reachable in practice.
+ */
+async function publish(partialPath, finalPath, overwrite) {
+    if (overwrite) {
+        await rename(partialPath, finalPath);
+        return;
+    }
+    try {
+        await link(partialPath, finalPath);
+    }
+    catch (err) {
+        if (hasErrnoCode(err, 'EEXIST')) {
+            await rm(partialPath, { force: true });
+            throw alreadyExists(finalPath, err);
+        }
+        await rename(partialPath, finalPath);
+        return;
+    }
+    await unlink(partialPath);
+}
+/**
+ * Writes to `<finalPath>.partial`, handing `write` an open destination
+ * stream. On success the partial file is published as `finalPath`; on any
+ * failure (from `write` itself, or a stream error it lets escape) the
+ * partial file is removed and `finalPath` is never created or touched — so a
+ * killed process leaves at most a `.partial` file lying around, never
+ * something under the real name that looks like a complete artifact.
+ * Shared by `export`, `copy`, and later `backup`/`schema_snapshot`.
+ *
+ * **`wx`, not `w`.** `.partial` is a fully predictable name that
+ * `resolveWorkspacePath` never sees, and `w` follows a symlink: a symlink
+ * pre-planted there sends the export's bytes straight through to wherever it
+ * points, outside the allow-list that was just checked. The same flag also let
+ * two concurrent exports to one path share a single file — interleaving their
+ * bytes while both reported success and a byte count. `wx` refuses an existing
+ * entry of any kind, which closes both at once.
+ */
+export async function writeFileAtomic(finalPath, write, opts = {}) {
+    const overwrite = opts.overwrite === true;
+    if (!overwrite) {
+        const exists = await access(finalPath).then(() => true, () => false);
+        // Cheap early refusal so a long export is not run for nothing; `publish`
+        // below is what makes the refusal race-free.
+        if (exists)
+            throw alreadyExists(finalPath);
+    }
+    const partialPath = `${finalPath}${PARTIAL_SUFFIX}`;
+    const dest = createWriteStream(partialPath, { flags: 'wx' });
+    // A write already in flight when we destroy the stream lands afterwards and
+    // emits ERR_STREAM_DESTROYED; with no listener Node turns that into an
+    // uncaughtException and kills the server. The error that matters is the one
+    // being thrown out of here, so this secondary one is absorbed.
+    dest.on('error', () => undefined);
+    try {
+        // `createWriteStream` opens asynchronously, so an `EEXIST` from `wx`
+        // arrives as an 'error' event, not a throw — wait for the open here rather
+        // than letting it surface later as an opaque stream failure.
+        await once(dest, 'open');
+    }
+    catch (err) {
+        dest.destroy();
+        // Deliberately does NOT remove partialPath: it belongs to another writer,
+        // or it is the planted symlink this flag exists to refuse.
+        if (hasErrnoCode(err, 'EEXIST')) {
+            throw new PgMcpError({
+                code: 'PATH_DENIED',
+                message: `"${partialPath}" already exists, so a write to "${finalPath}" is already in progress`,
+                hint: `wait for it to finish; if nothing is running, a killed process left it behind — delete ${partialPath} and re-run`,
+                cause: err,
+            });
+        }
+        throw err;
+    }
+    try {
+        await write(dest);
+        // The fd must be closed before the file is published: on Windows a rename
+        // or link of a file with an open handle fails EPERM. `stream.pipeline`
+        // (what every shipped caller uses) already ends the stream, so this is a
+        // no-op there — but a `write` that returns without ending it must not be
+        // left to corrupt the result.
+        if (!dest.writableEnded)
+            dest.end();
+        await finished(dest);
+    }
+    catch (err) {
+        dest.destroy();
+        await rm(partialPath, { force: true });
+        throw err;
+    }
+    const bytes = dest.bytesWritten;
+    await publish(partialPath, finalPath, overwrite);
+    return bytes;
+}
+//# sourceMappingURL=paths.js.map

package/dist/core/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAmB,MAAM,kBAAkB,CAAC;AAC3G,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,cAAc,GAAG,UAAU,CAAC;AAElC,SAAS,YAAY,CAAC,GAAY,EAAE,IAAY;IAC9C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,IAAK,GAA0B,CAAC,IAAI,KAAK,IAAI,CAAC;AAC/G,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,yIAAyI;AACzI,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,uBAAuB;YAC7D,IAAI,EAAE,wFAAwF;SAC/F,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,IAAI,GAAG,gCAAgC;YAChD,IAAI,EAAE,gHAAgH;SACvH,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,sBAAsB,CAAC,CAAS;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,uDAAuD;QACnF,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,QAAyB;IACrE,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAiB,EAAE,GAAW,EAAE,QAAyB;IAChF,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,IAAI,aAAa,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,WAA8B,EAC9B,OAAoC,EAAE;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAEnD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,IAAI,KAAK,mDAAmD;YACrE,IAAI,EAAE,qGAAqG;SAC5G,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAW,CAAC,CAAC,0BAA0B;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/F,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAE1C,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,IAAI,KAAK,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAChG,IAAI,EAAE,qFAAqF;YAC3F,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IAED,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3C,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CACnG,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtG,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvG,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,kBAAkB;gBACzB,CAAC,CAAC,IAAI,KAAK,yDAAyD;gBACpE,CAAC,CAAC,IAAI,KAAK,iBAAiB,QAAQ,4CAA4C;YAClF,IAAI,EAAE,kBAAkB;gBACtB,CAAC,CAAC,gFAAgF;gBAClF,CAAC,CAAC,4BAA4B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACxD,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,WAA8B,EAC9B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAErE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAEhC,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,GAAG,eAAe,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/D,CAAC;AAmBD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,KAAa,EAAE,IAA8B;IAC1F,OAAO,IAAI,UAAU,CAAC;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,IAAI,QAAQ,QAAQ,KAAK,oBAAoB,IAAI,CAAC,QAAQ,SAAS,IAAI,CAAC,UAAU,QAAQ;QACnG,IAAI,EAAE,IAAI,CAAC,SAAS;QACpB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAa,EACb,WAA8B,EAC9B,IAA8B;IAE9B,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAEjE,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,IAAI,KAAK,oCAAoC;YACtD,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,OAAO,EAAE,EAAE,KAAK,EAAE;YAClB,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,IAAI,KAAK,yBAAyB;gBAC3C,IAAI,EAAE,IAAI,CAAC,WAAW;gBACtB,OAAO,EAAE,EAAE,KAAK,EAAE;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,IAAI,KAAK,uFAAuF;gBACzG,IAAI,EAAE,kDAAkD;gBACxD,OAAO,EAAE,EAAE,KAAK,EAAE;aACnB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ;YAAE,MAAM,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEjF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAOD,SAAS,aAAa,CAAC,SAAiB,EAAE,KAAe;IACvD,OAAO,IAAI,UAAU,CAAC;QACpB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI,SAAS,kBAAkB;QACxC,IAAI,EAAE,4EAA4E;QAClF,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,OAAO,CAAC,WAAmB,EAAE,SAAiB,EAAE,SAAkB;IAC/E,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,KAAqD,EACrD,OAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;IAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;QACF,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,MAAM;YAAE,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,SAAS,GAAG,cAAc,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,+DAA+D;IAC/D,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,qEAAqE;QACrE,2EAA2E;QAC3E,6DAA6D;QAC7D,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,0EAA0E;QAC1E,2DAA2D;QAC3D,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,IAAI,WAAW,oCAAoC,SAAS,0BAA0B;gBAC/F,IAAI,EAAE,0FAA0F,WAAW,aAAa;gBACxH,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,8BAA8B;QAC9B,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;IAChC,MAAM,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC"}