synapse-mcp 1.0.0 → 1.0.2

package/dist/services/docker/container-service.js

@@ -0,0 +1,347 @@
+import { DEFAULT_EXEC_MAX_BUFFER, DEFAULT_EXEC_TIMEOUT } from "../../constants.js";
+import { logError } from "../../utils/errors.js";
+import { narrowToDefaultHost } from "../../utils/host-utils.js";
+import { applyPagination } from "../../utils/pagination.js";
+import { createStreamContext, executeWithTimeout, setupExecInstance, } from "./utils/exec-handler.js";
+import { parseDockerLogs, parseTimeSpec } from "./utils/log-parser.js";
+/**
+ * Service for Docker container operations.
+ * Handles container lifecycle, monitoring, and execution.
+ */
+export class ContainerService {
+    clientManager;
+    constructor(clientManager) {
+        this.clientManager = clientManager;
+    }
+    matchesContainerIdentifier(container, containerId) {
+        const query = containerId.trim();
+        if (!query)
+            return false;
+        if (container.Id.startsWith(query))
+            return true;
+        const normalizedQuery = query.replace(/^\//, "");
+        const names = Array.isArray(container.Names) ? container.Names : [];
+        return names.some((name) => name.replace(/^\//, "") === normalizedQuery);
+    }
+    /**
+     * List containers across multiple hosts with filtering and pagination.
+     *
+     * @param hosts - List of Docker hosts to query
+     * @param options - Filtering and pagination options
+     * @param options.state - Filter by container state
+     * @param options.nameFilter - Filter by container name (partial match)
+     * @param options.imageFilter - Filter by image name (partial match)
+     * @param options.labelFilter - Filter by label (format: "key=value")
+     * @param options.limit - Maximum number of containers to return
+     * @param options.offset - Number of containers to skip before returning results
+     * @returns Promise resolving to array of container information
+     */
+    async listContainers(hosts, options = {}) {
+        const targetHosts = narrowToDefaultHost(hosts);
+        // Query all hosts in parallel using Promise.allSettled
+        const results = await Promise.allSettled(targetHosts.map((host) => this.listContainersOnHost(host, options)));
+        // Collect results from successful queries, log failures
+        const containers = [];
+        for (let i = 0; i < results.length; i++) {
+            const result = results[i];
+            if (result.status === "fulfilled") {
+                containers.push(...result.value);
+            }
+            else {
+                logError(result.reason, {
+                    operation: "listContainers",
+                    metadata: { host: targetHosts[i].name },
+                });
+            }
+        }
+        // Apply pagination using shared utility
+        return applyPagination(containers, options.offset, options.limit);
+    }
+    /**
+     * List containers on a single host (internal helper).
+     */
+    async listContainersOnHost(host, options) {
+        const docker = await this.clientManager.getClient(host);
+        const listOptions = {
+            all: options.state !== "running",
+        };
+        // Add label filter if specified
+        if (options.labelFilter) {
+            listOptions.filters = { label: [options.labelFilter] };
+        }
+        const containers = await docker.listContainers(listOptions);
+        const results = [];
+        for (const c of containers) {
+            const containerState = c.State?.toLowerCase();
+            // Apply state filter
+            if (options.state && options.state !== "all") {
+                if (options.state === "stopped" && containerState !== "exited")
+                    continue;
+                if (options.state === "paused" && containerState !== "paused")
+                    continue;
+                if (options.state === "running" && containerState !== "running")
+                    continue;
+            }
+            const names = Array.isArray(c.Names) ? c.Names : [];
+            const name = names[0]?.replace(/^\//, "") || c.Id.slice(0, 12);
+            // Apply name filter
+            if (options.nameFilter && !name.toLowerCase().includes(options.nameFilter.toLowerCase())) {
+                continue;
+            }
+            // Apply image filter
+            if (options.imageFilter &&
+                !c.Image.toLowerCase().includes(options.imageFilter.toLowerCase())) {
+                continue;
+            }
+            results.push({
+                id: c.Id,
+                name,
+                image: c.Image,
+                state: containerState,
+                status: c.Status,
+                created: new Date(c.Created * 1000).toISOString(),
+                ports: (c.Ports || []).map((p) => ({
+                    containerPort: p.PrivatePort,
+                    hostPort: p.PublicPort,
+                    protocol: p.Type,
+                    hostIp: p.IP,
+                })),
+                labels: c.Labels || {},
+                hostName: host.name,
+            });
+        }
+        return results;
+    }
+    /**
+     * Find which host a container is on.
+     * Performs parallel scan across hosts for optimal performance.
+     *
+     * Note: For cache-optimized lookups, use DockerService.findContainerHost() with
+     * ContainerHostMapCache instead. The cache requires client-provider capability
+     * and is integrated at the facade level.
+     *
+     * @param containerId - Container ID, name, or ID prefix
+     * @param hosts - List of hosts to search
+     * @returns Host and container info if found, null otherwise
+     */
+    async findContainerHost(containerId, hosts) {
+        if (hosts.length === 0) {
+            return null;
+        }
+        // Parallel scan across hosts with early return: resolve immediately when found.
+        return new Promise((resolve) => {
+            let completed = 0;
+            let settled = false;
+            const finishIfDone = () => {
+                completed += 1;
+                if (!settled && completed === hosts.length) {
+                    settled = true;
+                    resolve(null);
+                }
+            };
+            for (const host of hosts) {
+                void (async () => {
+                    try {
+                        const docker = await this.clientManager.getClient(host);
+                        const containers = await docker.listContainers({ all: true });
+                        const found = containers.find((container) => this.matchesContainerIdentifier(container, containerId));
+                        if (found && !settled) {
+                            settled = true;
+                            resolve({ host, container: found });
+                            return;
+                        }
+                    }
+                    catch (error) {
+                        // Log errors but continue searching other hosts
+                        logError(error, { metadata: { containerId } });
+                    }
+                    finally {
+                        finishIfDone();
+                    }
+                })();
+            }
+        });
+    }
+    /**
+     * Perform action on container.
+     *
+     * @param containerId - Container ID or name
+     * @param action - Action to perform
+     * @param host - Host configuration
+     */
+    async containerAction(containerId, action, host) {
+        const container = await this.getContainer(containerId, host);
+        switch (action) {
+            case "start":
+                await container.start();
+                break;
+            case "stop":
+                await container.stop({ t: 10 });
+                break;
+            case "restart":
+                await container.restart({ t: 10 });
+                break;
+            case "pause":
+                await container.pause();
+                break;
+            case "unpause":
+                await container.unpause();
+                break;
+        }
+    }
+    /**
+     * Get container by ID or name.
+     */
+    async getContainer(containerId, host) {
+        const docker = await this.clientManager.getClient(host);
+        return docker.getContainer(containerId);
+    }
+    /**
+     * Get container logs.
+     *
+     * @param containerId - Container ID or name
+     * @param host - Host configuration
+     * @param options - Log filtering options
+     * @returns Promise resolving to array of log entries
+     */
+    async getContainerLogs(containerId, host, options = {}) {
+        const container = await this.getContainer(containerId, host);
+        const logOptions = {
+            stdout: options.stream !== "stderr",
+            stderr: options.stream !== "stdout",
+            tail: options.lines || 100,
+            timestamps: true,
+            follow: false,
+        };
+        if (options.since) {
+            logOptions.since = parseTimeSpec(options.since);
+        }
+        if (options.until) {
+            logOptions.until = parseTimeSpec(options.until);
+        }
+        const logs = await container.logs(logOptions);
+        return parseDockerLogs(logs.toString());
+    }
+    /**
+     * Get container stats.
+     *
+     * @param containerId - Container ID or name
+     * @param host - Host configuration
+     * @param containerName - Optional container name (avoids redundant inspect() call)
+     * @returns Promise resolving to container resource usage stats
+     */
+    async getContainerStats(containerId, host, containerName) {
+        const container = await this.getContainer(containerId, host);
+        const stats = await container.stats({ stream: false });
+        // Calculate CPU percentage
+        const cpuDelta = stats.cpu_stats.cpu_usage.total_usage - stats.precpu_stats.cpu_usage.total_usage;
+        const systemDelta = stats.cpu_stats.system_cpu_usage - stats.precpu_stats.system_cpu_usage;
+        const cpuCount = stats.cpu_stats.online_cpus || 1;
+        const cpuPercent = systemDelta > 0 ? (cpuDelta / systemDelta) * cpuCount * 100 : 0;
+        // Memory stats
+        const memUsage = stats.memory_stats.usage || 0;
+        const memLimit = stats.memory_stats.limit || 1;
+        const memPercent = (memUsage / memLimit) * 100;
+        // Network stats
+        let netRx = 0, netTx = 0;
+        if (stats.networks) {
+            for (const net of Object.values(stats.networks)) {
+                netRx += net.rx_bytes || 0;
+                netTx += net.tx_bytes || 0;
+            }
+        }
+        // Block I/O
+        let blockRead = 0, blockWrite = 0;
+        if (stats.blkio_stats?.io_service_bytes_recursive) {
+            for (const entry of stats.blkio_stats.io_service_bytes_recursive) {
+                if (entry.op === "read")
+                    blockRead += entry.value;
+                if (entry.op === "write")
+                    blockWrite += entry.value;
+            }
+        }
+        // Use provided name if available, otherwise fetch via inspect()
+        // This eliminates 1 API call per container when name is known (50% reduction)
+        let finalName;
+        if (containerName) {
+            finalName = containerName;
+        }
+        else {
+            const info = await container.inspect();
+            finalName = info.Name.replace(/^\//, "");
+        }
+        return {
+            containerId,
+            containerName: finalName,
+            cpuPercent: Math.round(cpuPercent * 100) / 100,
+            memoryUsage: memUsage,
+            memoryLimit: memLimit,
+            memoryPercent: Math.round(memPercent * 100) / 100,
+            networkRx: netRx,
+            networkTx: netTx,
+            blockRead,
+            blockWrite,
+        };
+    }
+    /**
+     * Execute a command inside a container.
+     *
+     * @param containerId - Container ID or name
+     * @param host - Host configuration
+     * @param options - Execution options
+     * @param options.command - Shell command to execute
+     * @param options.user - Optional user to run as
+     * @param options.workdir - Optional working directory
+     * @param options.timeout - Optional timeout in ms (default 30s, max 5min)
+     * @returns Promise resolving to stdout, stderr, and exit code
+     * @throws Error if timeout exceeded or buffer limit exceeded
+     */
+    async execContainer(containerId, host, options) {
+        const container = await this.getContainer(containerId, host);
+        const timeout = options.timeout ?? DEFAULT_EXEC_TIMEOUT;
+        const maxBuffer = DEFAULT_EXEC_MAX_BUFFER;
+        const exec = await setupExecInstance(container, options);
+        const docker = await this.clientManager.getClient(host);
+        const context = await createStreamContext(exec, docker.modem, maxBuffer);
+        try {
+            await executeWithTimeout(context, timeout, maxBuffer);
+            const inspection = await exec.inspect();
+            return {
+                stdout: Buffer.concat(context.stdoutChunks).toString().trimEnd(),
+                stderr: Buffer.concat(context.stderrChunks).toString().trimEnd(),
+                exitCode: inspection.ExitCode ?? 0,
+            };
+        }
+        catch (error) {
+            context.cleanup();
+            throw error;
+        }
+    }
+    /**
+     * List running processes inside a container.
+     *
+     * @param containerId - Container ID or name
+     * @param host - Host configuration
+     * @returns Promise resolving to process list with titles and data
+     */
+    async getContainerProcesses(containerId, host) {
+        const container = await this.getContainer(containerId, host);
+        const result = await container.top();
+        return {
+            titles: result.Titles ?? [],
+            processes: result.Processes ?? [],
+        };
+    }
+    /**
+     * Inspect a container to get detailed information.
+     *
+     * @param containerId - Container ID or name
+     * @param host - Host configuration
+     * @returns Promise resolving to Docker container inspection data
+     */
+    async inspectContainer(containerId, host) {
+        const container = await this.getContainer(containerId, host);
+        return container.inspect();
+    }
+}
+//# sourceMappingURL=container-service.js.map

package/dist/services/docker/container-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-service.js","sourceRoot":"","sources":["../../../src/services/docker/container-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAWnF,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEvE;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACP;IAApB,YAAoB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAE5C,0BAA0B,CAChC,SAAuD,EACvD,WAAmB;QAEnB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,SAAS,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEhD,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,eAAe,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,cAAc,CAClB,KAAmB,EACnB,UAOI,EAAE;QAEN,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAE/C,uDAAuD;QACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CACpE,CAAC;QAEF,wDAAwD;QACxD,MAAM,UAAU,GAAoB,EAAE,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;oBACtB,SAAS,EAAE,gBAAgB;oBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,OAAO,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAChC,IAAgB,EAChB,OAKC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,WAAW,GAAgC;YAC/C,GAAG,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS;SACjC,CAAC;QAEF,gCAAgC;QAChC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,WAAW,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAoB,EAAE,CAAC;QAEpC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAA4B,CAAC;YAExE,qBAAqB;YACrB,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC7C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,cAAc,KAAK,QAAQ;oBAAE,SAAS;gBACzE,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,cAAc,KAAK,QAAQ;oBAAE,SAAS;gBACxE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS;oBAAE,SAAS;YAC5E,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAE/D,oBAAoB;YACpB,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzF,SAAS;YACX,CAAC;YAED,qBAAqB;YACrB,IACE,OAAO,CAAC,WAAW;gBACnB,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,EAClE,CAAC;gBACD,SAAS;YACX,CAAC;YAED,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI;gBACJ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;gBACjD,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACjC,aAAa,EAAE,CAAC,CAAC,WAAW;oBAC5B,QAAQ,EAAE,CAAC,CAAC,UAAU;oBACtB,QAAQ,EAAE,CAAC,CAAC,IAAqB;oBACjC,MAAM,EAAE,CAAC,CAAC,EAAE;iBACb,CAAC,CAAC;gBACH,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;gBACtB,QAAQ,EAAE,IAAI,CAAC,IAAI;aACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,iBAAiB,CACrB,WAAmB,EACnB,KAAmB;QAEnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,gFAAgF;QAChF,OAAO,IAAI,OAAO,CAChB,CAAC,OAAO,EAAE,EAAE;YACV,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,YAAY,GAAG,GAAS,EAAE;gBAC9B,SAAS,IAAI,CAAC,CAAC;gBACf,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC3C,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,CAAC,KAAK,IAAI,EAAE;oBACf,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;wBACxD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;wBAE9D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC1C,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,WAAW,CAAC,CACxD,CAAC;wBAEF,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;4BACtB,OAAO,GAAG,IAAI,CAAC;4BACf,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;4BACpC,OAAO;wBACT,CAAC;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,gDAAgD;wBAChD,QAAQ,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;oBACjD,CAAC;4BAAS,CAAC;wBACT,YAAY,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,MAA0D,EAC1D,IAAgB;QAEhB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE7D,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,OAAO;gBACV,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;gBACxB,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChC,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,OAAO;gBACV,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;gBACxB,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM;QACV,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,WAAmB,EAAE,IAAgB;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,IAAgB,EAChB,UAKI,EAAE;QAEN,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE7D,MAAM,UAAU,GAQZ;YACF,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,QAAQ;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,QAAQ;YACnC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG;YAC1B,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,KAAK;SACd,CAAC;QAEF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,iBAAiB,CACrB,WAAmB,EACnB,IAAgB,EAChB,aAAsB;QAEtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEvD,2BAA2B;QAC3B,MAAM,QAAQ,GACZ,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC;QACnF,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,gBAAgB,GAAG,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC;QAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnF,eAAe;QACf,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC;QAE/C,gBAAgB;QAChB,IAAI,KAAK,GAAG,CAAC,EACX,KAAK,GAAG,CAAC,CAAC;QACZ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChD,KAAK,IAAK,GAA4B,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACrD,KAAK,IAAK,GAA4B,CAAC,QAAQ,IAAI,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,YAAY;QACZ,IAAI,SAAS,GAAG,CAAC,EACf,UAAU,GAAG,CAAC,CAAC;QACjB,IAAI,KAAK,CAAC,WAAW,EAAE,0BAA0B,EAAE,CAAC;YAClD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,0BAA0B,EAAE,CAAC;gBACjE,IAAI,KAAK,CAAC,EAAE,KAAK,MAAM;oBAAE,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC;gBAClD,IAAI,KAAK,CAAC,EAAE,KAAK,OAAO;oBAAE,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC;YACtD,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,8EAA8E;QAC9E,IAAI,SAAiB,CAAC;QACtB,IAAI,aAAa,EAAE,CAAC;YAClB,SAAS,GAAG,aAAa,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YACvC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO;YACL,WAAW;YACX,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;YAC9C,WAAW,EAAE,QAAQ;YACrB,WAAW,EAAE,QAAQ;YACrB,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;YACjD,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,KAAK;YAChB,SAAS;YACT,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,aAAa,CACjB,WAAmB,EACnB,IAAgB,EAChB,OAA+E;QAE/E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,oBAAoB,CAAC;QACxD,MAAM,SAAS,GAAG,uBAAuB,CAAC;QAE1C,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAEzE,IAAI,CAAC;YACH,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAEtD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAExC,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE;gBAChE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE;gBAChE,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,CAAC;aACnC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,qBAAqB,CACzB,WAAmB,EACnB,IAAgB;QAEhB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC;QAErC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;SAClC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,IAAgB;QAEhB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACF"}

package/dist/services/docker/image-service.d.ts

@@ -0,0 +1,82 @@
+import type { HostConfig, ImageInfo, ListImagesOptions } from "../../types.js";
+import type { ClientManager } from "./utils/client-manager.js";
+/**
+ * Service for Docker image operations.
+ * Handles image lifecycle, pulling, building, and management.
+ */
+export declare class ImageService {
+    private clientManager;
+    constructor(clientManager: ClientManager);
+    /**
+     * List images across multiple hosts with optional filtering.
+     *
+     * @param hosts - List of Docker hosts to query
+     * @param options - Filtering options (danglingOnly)
+     * @returns Promise resolving to array of image information
+     */
+    listImages(hosts: HostConfig[], options?: ListImagesOptions): Promise<ImageInfo[]>;
+    /**
+     * List images from a single host (internal helper).
+     */
+    private listImagesOnHost;
+    /**
+     * Pull an image from a registry.
+     *
+     * @param imageName - Image name with optional tag (e.g., "nginx:latest")
+     * @param host - Host configuration
+     * @returns Promise resolving to pull status
+     * @throws Error if image name is empty or pull fails
+     */
+    pullImage(imageName: string, host: HostConfig): Promise<{
+        status: string;
+    }>;
+    /**
+     * Remove an image from a host.
+     *
+     * @param imageId - Image ID or tag
+     * @param host - Host configuration
+     * @param options - Remove options (force)
+     * @returns Promise resolving to removal status
+     */
+    removeImage(imageId: string, host: HostConfig, options?: {
+        force?: boolean;
+    }): Promise<{
+        status: string;
+    }>;
+    /**
+     * Build an image from a Dockerfile (SSH-based for remote hosts).
+     *
+     * SECURITY: Implements path traversal protection (CWE-22)
+     * - Requires absolute paths for context and dockerfile
+     * - Rejects any path containing .. or . components
+     * - Validates character set to prevent injection
+     *
+     * @param host - Docker host configuration
+     * @param options - Build options (context, tag, dockerfile, noCache)
+     * @returns Promise resolving to build status
+     * @throws Error if paths contain directory traversal or invalid characters
+     */
+    buildImage(host: HostConfig, options: {
+        context: string;
+        tag: string;
+        dockerfile?: string;
+        noCache?: boolean;
+    }): Promise<{
+        status: string;
+    }>;
+    /**
+     * Recreate a container (stop, remove, pull latest, start with same config).
+     *
+     * @param containerId - Container ID or name
+     * @param host - Host configuration
+     * @param options - Recreate options (pull)
+     * @returns Promise resolving to recreation status and new container ID
+     */
+    recreateContainer(containerId: string, host: HostConfig, options?: {
+        pull?: boolean;
+    }): Promise<{
+        status: string;
+        containerId: string;
+    }>;
+}
+//# sourceMappingURL=image-service.d.ts.map

package/dist/services/docker/image-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-service.d.ts","sourceRoot":"","sources":["../../../src/services/docker/image-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG/D;;;GAGG;AACH,qBAAa,YAAY;IACX,OAAO,CAAC,aAAa;gBAAb,aAAa,EAAE,aAAa;IAEhD;;;;;;OAMG;IACG,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAW5F;;OAEG;YACW,gBAAgB;IAmB9B;;;;;;;OAOG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAyBjF;;;;;;;OAOG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO,GAChC,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAS9B;;;;;;;;;;;;OAYG;IACG,UAAU,CACd,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,GACA,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAmE9B;;;;;;;OAOG;IACG,iBAAiB,CACrB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAO,GAC/B,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAsCpD"}

package/dist/services/docker/image-service.js

@@ -0,0 +1,193 @@
+import { narrowToDefaultHost } from "../../utils/host-utils.js";
+import { formatImageId } from "./utils/formatters.js";
+/**
+ * Service for Docker image operations.
+ * Handles image lifecycle, pulling, building, and management.
+ */
+export class ImageService {
+    clientManager;
+    constructor(clientManager) {
+        this.clientManager = clientManager;
+    }
+    /**
+     * List images across multiple hosts with optional filtering.
+     *
+     * @param hosts - List of Docker hosts to query
+     * @param options - Filtering options (danglingOnly)
+     * @returns Promise resolving to array of image information
+     */
+    async listImages(hosts, options = {}) {
+        const targetHosts = narrowToDefaultHost(hosts);
+        const results = await Promise.allSettled(targetHosts.map((host) => this.listImagesOnHost(host, options)));
+        return results
+            .filter((r) => r.status === "fulfilled")
+            .flatMap((r) => r.value);
+    }
+    /**
+     * List images from a single host (internal helper).
+     */
+    async listImagesOnHost(host, options) {
+        const docker = await this.clientManager.getClient(host);
+        const images = await docker.listImages({
+            filters: options.danglingOnly ? { dangling: ["true"] } : undefined,
+        });
+        return images.map((img) => ({
+            id: formatImageId(img.Id),
+            tags: img.RepoTags || ["<none>:<none>"],
+            size: img.Size,
+            created: new Date(img.Created * 1000).toISOString(),
+            containers: img.Containers || 0,
+            hostName: host.name,
+        }));
+    }
+    /**
+     * Pull an image from a registry.
+     *
+     * @param imageName - Image name with optional tag (e.g., "nginx:latest")
+     * @param host - Host configuration
+     * @returns Promise resolving to pull status
+     * @throws Error if image name is empty or pull fails
+     */
+    async pullImage(imageName, host) {
+        if (!imageName || imageName.trim() === "") {
+            throw new Error("Image name is required");
+        }
+        const docker = await this.clientManager.getClient(host);
+        return new Promise((resolve, reject) => {
+            docker.pull(imageName, (err, stream) => {
+                if (err) {
+                    reject(new Error(`Failed to pull image: ${err.message}`));
+                    return;
+                }
+                docker.modem.followProgress(stream, (err) => {
+                    if (err) {
+                        reject(new Error(`Pull failed: ${err.message}`));
+                    }
+                    else {
+                        resolve({ status: `Successfully pulled ${imageName}` });
+                    }
+                });
+            });
+        });
+    }
+    /**
+     * Remove an image from a host.
+     *
+     * @param imageId - Image ID or tag
+     * @param host - Host configuration
+     * @param options - Remove options (force)
+     * @returns Promise resolving to removal status
+     */
+    async removeImage(imageId, host, options = {}) {
+        const docker = await this.clientManager.getClient(host);
+        const image = docker.getImage(imageId);
+        await image.remove({ force: options.force });
+        return { status: `Successfully removed image ${imageId}` };
+    }
+    /**
+     * Build an image from a Dockerfile (SSH-based for remote hosts).
+     *
+     * SECURITY: Implements path traversal protection (CWE-22)
+     * - Requires absolute paths for context and dockerfile
+     * - Rejects any path containing .. or . components
+     * - Validates character set to prevent injection
+     *
+     * @param host - Docker host configuration
+     * @param options - Build options (context, tag, dockerfile, noCache)
+     * @returns Promise resolving to build status
+     * @throws Error if paths contain directory traversal or invalid characters
+     */
+    async buildImage(host, options) {
+        // For remote builds, we need to use SSH and docker build command
+        // dockerode's build() requires local tar stream which won't work for remote
+        const { context, tag, dockerfile, noCache } = options;
+        // Validate inputs
+        if (!/^[a-zA-Z0-9._\-/:]+$/.test(tag)) {
+            throw new Error(`Invalid image tag: ${tag}`);
+        }
+        // Use secure path validation (prevents directory traversal)
+        const { validateSecurePath } = await import("../../utils/path-security.js");
+        validateSecurePath(context, "context");
+        if (dockerfile) {
+            validateSecurePath(dockerfile, "dockerfile");
+        }
+        const args = ["build", "-t", tag];
+        if (noCache) {
+            args.push("--no-cache");
+        }
+        if (dockerfile) {
+            args.push("-f", dockerfile);
+        }
+        args.push(context);
+        // Execute via SSH for remote hosts, or locally for socket connections
+        if (host.host.startsWith("/")) {
+            // Local socket - use docker directly
+            const { execFile } = await import("node:child_process");
+            const { promisify } = await import("node:util");
+            const execFileAsync = promisify(execFile);
+            await execFileAsync("docker", args, { timeout: 600000 }); // 10 min timeout for builds
+        }
+        else {
+            // Remote - use SSH
+            const { validateHostForSsh } = await import("../ssh.js");
+            const { validateAlphanumeric } = await import("../../utils/validation.js");
+            const { execFile } = await import("node:child_process");
+            const { promisify } = await import("node:util");
+            const execFileAsync = promisify(execFile);
+            validateHostForSsh(host);
+            validateAlphanumeric(host.name, "host name");
+            const sshArgs = [
+                "-o",
+                "BatchMode=yes",
+                "-o",
+                "ConnectTimeout=5",
+                "-o",
+                "StrictHostKeyChecking=accept-new",
+                host.name,
+                `docker ${args.join(" ")}`,
+            ];
+            await execFileAsync("ssh", sshArgs, { timeout: 600000 });
+        }
+        return { status: `Successfully built image ${tag}` };
+    }
+    /**
+     * Recreate a container (stop, remove, pull latest, start with same config).
+     *
+     * @param containerId - Container ID or name
+     * @param host - Host configuration
+     * @param options - Recreate options (pull)
+     * @returns Promise resolving to recreation status and new container ID
+     */
+    async recreateContainer(containerId, host, options = {}) {
+        const docker = await this.clientManager.getClient(host);
+        const container = docker.getContainer(containerId);
+        // Get current container config
+        const info = await container.inspect();
+        const imageName = info.Config.Image;
+        // Stop container if running
+        if (info.State.Running) {
+            await container.stop();
+        }
+        // Remove container
+        await container.remove();
+        // Pull latest image if requested
+        if (options.pull !== false) {
+            await this.pullImage(imageName, host);
+        }
+        // Create new container with same config
+        const newContainer = await docker.createContainer({
+            ...info.Config,
+            HostConfig: info.HostConfig,
+            NetworkingConfig: {
+                EndpointsConfig: info.NetworkSettings.Networks,
+            },
+        });
+        // Start new container
+        await newContainer.start();
+        return {
+            status: "Container recreated successfully",
+            containerId: newContainer.id,
+        };
+    }
+}
+//# sourceMappingURL=image-service.js.map

package/dist/services/docker/image-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-service.js","sourceRoot":"","sources":["../../../src/services/docker/image-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;GAGG;AACH,MAAM,OAAO,YAAY;IACH;IAApB,YAAoB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAEpD;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,KAAmB,EAAE,UAA6B,EAAE;QACnE,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAChE,CAAC;QAEF,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,CAAC,EAA4C,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;aACjF,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,IAAgB,EAChB,OAA0B;QAE1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC;YACrC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACnE,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1B,EAAE,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC;YACvC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;YACnD,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;YAC/B,QAAQ,EAAE,IAAI,CAAC,IAAI;SACpB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,IAAgB;QACjD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAExD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAiB,EAAE,MAA6B,EAAE,EAAE;gBAC1E,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBAC1D,OAAO;gBACT,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,GAAiB,EAAE,EAAE;oBACxD,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBACnD,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,EAAE,MAAM,EAAE,uBAAuB,SAAS,EAAE,EAAE,CAAC,CAAC;oBAC1D,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CACf,OAAe,EACf,IAAgB,EAChB,UAA+B,EAAE;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEvC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAE7C,OAAO,EAAE,MAAM,EAAE,8BAA8B,OAAO,EAAE,EAAE,CAAC;IAC7D,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CACd,IAAgB,EAChB,OAKC;QAED,iEAAiE;QACjE,4EAA4E;QAE5E,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAEtD,kBAAkB;QAClB,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,4DAA4D;QAC5D,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC5E,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEvC,IAAI,UAAU,EAAE,CAAC;YACf,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAa,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAE5C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnB,sEAAsE;QACtE,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,qCAAqC;YACrC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YAE1C,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,4BAA4B;QACxF,CAAC;aAAM,CAAC;YACN,mBAAmB;YACnB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YAE1C,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACzB,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAE7C,MAAM,OAAO,GAAG;gBACd,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,kBAAkB;gBAClB,IAAI;gBACJ,kCAAkC;gBAClC,IAAI,CAAC,IAAI;gBACT,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;aAC3B,CAAC;YAEF,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,4BAA4B,GAAG,EAAE,EAAE,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,iBAAiB,CACrB,WAAmB,EACnB,IAAgB,EAChB,UAA8B,EAAE;QAEhC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAEnD,+BAA+B;QAC/B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAEpC,4BAA4B;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,mBAAmB;QACnB,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC;QAEzB,iCAAiC;QACjC,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QAED,wCAAwC;QACxC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;YAChD,GAAG,IAAI,CAAC,MAAM;YACd,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,gBAAgB,EAAE;gBAChB,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ;aAC/C;SACF,CAAC,CAAC;QAEH,sBAAsB;QACtB,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAE3B,OAAO;YACL,MAAM,EAAE,kCAAkC;YAC1C,WAAW,EAAE,YAAY,CAAC,EAAE;SAC7B,CAAC;IACJ,CAAC;CACF"}