watch-tail 0.6.2 → 0.7.1

package/build/server/chunks/chunks/{archive.js-C2D-5edp.js → archive.js-D2jtMmDo.js}

@@ -1,10 +1,90 @@
-import { d as detectRequestId, a as detectLevelWithSource, i as isLogLevel, L as LEVEL_RANK } from './log-buffer.js-BI_gQOls.js';
-import { mkdirSync, statSync } from 'node:fs';
+import { r as resolveAwsConfig, c as createStsClient, p as parseRegionParam } from './env2.js-C5BgBJDY.js';
+import { g as getCallerIdentityWith } from './identity.js-NmGXxBz3.js';
+import { d as detectRequestId, a as detectLevelWithSource, e as eventDurationMs, i as isLogLevel, L as LEVEL_RANK } from './log-buffer.js-A9FA-Qv8.js';
+import { mkdirSync, statSync, readFileSync, writeFileSync, renameSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { join, dirname } from 'node:path';
+import { resolve, join, dirname } from 'node:path';
+import { randomUUID, createHash } from 'node:crypto';
 import { setTimeout } from 'node:timers/promises';
-import { createHash } from 'node:crypto';
 
+//#region src/lib/server/archive-location.ts
+/** Account/region archive routing. Cached identities are for offline reads only. */
+/** Resolve STS separately so a Logs-only endpoint never receives identity requests. */
+async function identify(env, region) {
+	const client = createStsClient(resolveAwsConfig(env, region, "sts"));
+	try {
+		const effectiveRegion = region ?? await client.config.region();
+		return {
+			account: (await getCallerIdentityWith(client, { signal: AbortSignal.timeout(5e3) })).account,
+			region: effectiveRegion
+		};
+	} finally {
+		client.destroy();
+	}
+}
+function hash(value) {
+	return createHash("sha256").update(value).digest("hex");
+}
+function valid(identity) {
+	return typeof identity?.account === "string" && /^\d{12}$/.test(identity.account) && typeof identity.region === "string" && !!identity.region && parseRegionParam(identity.region).ok;
+}
+/** Resolves an archive path without guessing an account when AWS is unavailable. */
+var ArchiveLocator = class {
+	lookup;
+	#pending = /* @__PURE__ */ new Map();
+	#known = /* @__PURE__ */ new Map();
+	constructor(lookup = identify) {
+		this.lookup = lookup;
+	}
+	async locate(basePath, env, selection) {
+		const config = resolveAwsConfig(env, selection.region);
+		const root = env.WATCH_TAIL_ARCHIVE_DIR?.trim() || dirname(basePath);
+		const stsEndpoint = resolveAwsConfig(env, selection.region, "sts").endpoint;
+		const key = hash(JSON.stringify([
+			config.endpoint,
+			config.region,
+			env.AWS_PROFILE || "default",
+			env.AWS_CONFIG_FILE,
+			env.AWS_SHARED_CREDENTIALS_FILE,
+			env.AWS_ROLE_ARN,
+			env.AWS_WEB_IDENTITY_TOKEN_FILE,
+			env.AWS_ACCESS_KEY_ID,
+			env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI,
+			env.AWS_CONTAINER_CREDENTIALS_FULL_URI,
+			...stsEndpoint && stsEndpoint !== config.endpoint ? [stsEndpoint] : []
+		]));
+		const cachePath = join(root, "identities", `${key}.json`);
+		let pending = this.#pending.get(key);
+		if (!pending) {
+			pending = this.lookup(env, config.region);
+			this.#pending.set(key, pending);
+		}
+		let identity;
+		try {
+			identity = await pending;
+		} catch (error) {
+			let cached = selection.readOnly ? this.#known.get(cachePath) : void 0;
+			if (selection.readOnly && !cached) try {
+				cached = JSON.parse(readFileSync(cachePath, "utf8"));
+			} catch {}
+			if (!cached || !valid(cached) || config.region && cached.region !== config.region) throw error;
+			identity = cached;
+		} finally {
+			this.#pending.delete(key);
+		}
+		if (!valid(identity) || config.region && config.region !== identity.region) throw new Error("AWS did not return a valid archive account and region");
+		this.#known.set(cachePath, identity);
+		try {
+			mkdirSync(dirname(cachePath), { recursive: true });
+			const temporary = `${cachePath}.${randomUUID()}.tmp`;
+			writeFileSync(temporary, JSON.stringify(identity), { mode: 384 });
+			renameSync(temporary, cachePath);
+		} catch {}
+		const namespace = config.endpoint ? join("endpoints", hash(config.endpoint)) : "";
+		return join(root, namespace, identity.account, identity.region, "archive.duckdb");
+	}
+};
+//#endregion
 //#region src/lib/server/archive-sql.ts
 /**
 * SQL and row mapping for the local DuckDB archive.
@@ -427,6 +507,7 @@ function seriesScope(request, groups) {
 function buildSeriesQuery(request) {
 	const bucketMs = Math.max(1, Math.round(request.bucketMs));
 	const scope = seriesScope(request, request.logGroups.length > 0 ? request.logGroups : [""]);
+	if (request.metric === "duration") return buildDurationSeriesQuery(request, scope.where, scope.params);
 	if (request.by === "request") return buildRequestSeriesQuery(request, bucketMs, scope.where, scope.params);
 	const params = [
 		BigInt(bucketMs),
@@ -480,6 +561,23 @@ function buildRequestSeriesQuery(request, bucketMs, where, scopeParams) {
 		params
 	};
 }
+/** Duration points are not bucketed: one point at each request's first observed timestamp. */
+function buildDurationSeriesQuery(request, where, scopeParams) {
+	const levels = request.levels ?? [];
+	const having = levels.length ? ` HAVING level_rank IN (${levels.map(() => "?").join(", ")})` : "";
+	return {
+		sql: `WITH requests AS (
+			SELECT request_id, log_group, min(timestamp_ms) AS start_ms,
+			max(timestamp_ms) - min(timestamp_ms) AS duration_ms,
+			first(message ORDER BY timestamp_ms DESC, seq DESC) AS last_message,
+			max(${levelRankCase("coalesce(level, 'unknown')")}) AS level_rank
+			FROM log_events WHERE ${where.join(" AND ")} AND request_id IS NOT NULL AND request_id <> ''
+			GROUP BY request_id, log_group${having})
+			SELECT start_ms AS bucket, log_group, ${levelNameCase("level_rank")} AS level,
+			1 AS events, request_id, duration_ms, last_message FROM requests ORDER BY bucket, log_group, request_id`,
+		params: [...scopeParams, ...levels.map((level) => LEVEL_RANK[level])]
+	};
+}
 /** Maps the rows of {@link buildSeriesQuery} onto chart points. */
 function rowsToSeries(rows) {
 	const points = [];
@@ -492,7 +590,11 @@ function rowsToSeries(rows) {
 			t,
 			group,
 			level: typeof level === "string" && level.length > 0 ? level : "unknown",
-			events: toNumber(pick(row, "events")) ?? 0
+			events: toNumber(pick(row, "events")) ?? 0,
+			...typeof row.request_id === "string" ? {
+				requestId: row.request_id,
+				durationMs: (toNumber(row.duration_ms) ?? 0) + eventDurationMs(typeof row.last_message === "string" ? row.last_message : "")
+			} : {}
 		});
 	}
 	return points;
@@ -546,8 +648,8 @@ function isDisabled(value) {
 *
 * Vitest sets `VITEST`, and `NODE_ENV=test` covers other harnesses. Tests must
 * not append to the archive of the machine they run on, so the archive is off
-* unless a test asks for it through `WATCH_STREAM_ARCHIVE_DB` or
-* `WATCH_STREAM_ARCHIVE=on`.
+* unless a test asks for it through `WATCH_TAIL_ARCHIVE_DB` or
+* `WATCH_TAIL_ARCHIVE=on`.
 */
 function isTestProcess(env) {
 	return env.VITEST !== void 0 || env.NODE_ENV === "test";
@@ -555,15 +657,15 @@ function isTestProcess(env) {
 /**
 * Resolves the archive file path.
 *
-* `WATCH_STREAM_ARCHIVE_DB` wins; otherwise the file lives in the platform's
+* `WATCH_TAIL_ARCHIVE_DB` wins; otherwise the file lives in the platform's
 * data directory (`XDG_DATA_HOME`, `%LOCALAPPDATA%` or
 * `~/Library/Application Support`), never in the current directory, so history
 * survives running the CLI from a different folder.
 */
 function resolveArchiveConfig(env, platform = process.platform, home = homedir()) {
-	const path = env.WATCH_STREAM_ARCHIVE_DB?.trim() ?? "";
+	const path = env.WATCH_TAIL_ARCHIVE_DB?.trim() ?? "";
 	const dataDir = env.XDG_DATA_HOME?.trim() ?? (platform === "darwin" ? join(home, "Library", "Application Support") : platform === "win32" ? env.LOCALAPPDATA?.trim() ?? join(home, "AppData", "Local") : join(home, ".local", "share"));
-	const requested = env.WATCH_STREAM_ARCHIVE?.trim() ?? "";
+	const requested = env.WATCH_TAIL_ARCHIVE?.trim() ?? "";
 	return {
 		enabled: isDisabled(requested) ? false : path.length > 0 || requested.length > 0 ? true : !isTestProcess(env),
 		path: path.length > 0 ? path : join(dataDir, ARCHIVE_DIR_NAME, ARCHIVE_FILE_NAME)
@@ -800,24 +902,30 @@ var LogArchive = class LogArchive {
 		});
 	}
 };
-/** The archive for the running server, opened once per process. */
-var sharedArchive = null;
-/**
-* Returns the process-wide archive for `env`, opening it on first use.
-*
-* The same file is never opened twice per process; a disabled archive
-* (`WATCH_STREAM_ARCHIVE=off`) is remembered so no driver import is attempted.
-*/
-function getArchive(env, load) {
-	if (sharedArchive === null) {
-		const config = resolveArchiveConfig(env);
-		sharedArchive = config.enabled ? LogArchive.open({
-			path: config.path,
+/** A single opening promise per absolute file path prevents duplicate DuckDB writers. */
+var sharedArchives = /* @__PURE__ */ new Map();
+var archiveLocator = new ArchiveLocator();
+/** Opens the selected account/region archive; explicit --db paths remain file overrides. */
+async function getArchive(env, selection = {}, load) {
+	const config = resolveArchiveConfig(env);
+	if (!config.enabled) return LogArchive.unavailable(config.path);
+	let path = config.path;
+	if (!env.WATCH_TAIL_ARCHIVE_DB?.trim()) try {
+		path = await archiveLocator.locate(config.path, env, selection);
+	} catch (error) {
+		return LogArchive.unavailable(config.path, `Cannot select account archive: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	path = resolve(path);
+	let archive = sharedArchives.get(path);
+	if (!archive) {
+		archive = LogArchive.open({
+			path,
 			...{} 
-		}) : Promise.resolve(LogArchive.unavailable(config.path));
+		});
+		sharedArchives.set(path, archive);
 	}
-	return sharedArchive;
+	return archive;
 }
 
 export { getArchive as g };
-//# sourceMappingURL=archive.js-C2D-5edp.js.map
+//# sourceMappingURL=archive.js-D2jtMmDo.js.map

package/build/server/chunks/chunks/archive.js-D2jtMmDo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js-D2jtMmDo.js","sources":["../../../../.svelte-kit/output/server/chunks/archive.js"],"sourcesContent":["import { a as createStsClient, c as resolveAwsConfig, s as parseRegionParam } from \"./env2.js\";\nimport { t as getCallerIdentityWith } from \"./identity.js\";\nimport { a as detectLevelWithSource, d as isLogLevel, m as eventDurationMs, n as LEVEL_RANK, o as detectRequestId } from \"./log-buffer.js\";\nimport { mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { createHash, randomUUID } from \"node:crypto\";\nimport { setTimeout } from \"node:timers/promises\";\n//#region src/lib/server/archive-location.ts\n/** Account/region archive routing. Cached identities are for offline reads only. */\n/** Resolve STS separately so a Logs-only endpoint never receives identity requests. */\nasync function identify(env, region) {\n\tconst client = createStsClient(resolveAwsConfig(env, region, \"sts\"));\n\ttry {\n\t\tconst effectiveRegion = region ?? await client.config.region();\n\t\treturn {\n\t\t\taccount: (await getCallerIdentityWith(client, { signal: AbortSignal.timeout(5e3) })).account,\n\t\t\tregion: effectiveRegion\n\t\t};\n\t} finally {\n\t\tclient.destroy();\n\t}\n}\nfunction hash(value) {\n\treturn createHash(\"sha256\").update(value).digest(\"hex\");\n}\nfunction valid(identity) {\n\treturn typeof identity?.account === \"string\" && /^\\d{12}$/.test(identity.account) && typeof identity.region === \"string\" && !!identity.region && parseRegionParam(identity.region).ok;\n}\n/** Resolves an archive path without guessing an account when AWS is unavailable. */\nvar ArchiveLocator = class {\n\tlookup;\n\t#pending = /* @__PURE__ */ new Map();\n\t#known = /* @__PURE__ */ new Map();\n\tconstructor(lookup = identify) {\n\t\tthis.lookup = lookup;\n\t}\n\tasync locate(basePath, env, selection) {\n\t\tconst config = resolveAwsConfig(env, selection.region);\n\t\tconst root = env.WATCH_TAIL_ARCHIVE_DIR?.trim() || dirname(basePath);\n\t\tconst stsEndpoint = resolveAwsConfig(env, selection.region, \"sts\").endpoint;\n\t\tconst key = hash(JSON.stringify([\n\t\t\tconfig.endpoint,\n\t\t\tconfig.region,\n\t\t\tenv.AWS_PROFILE || \"default\",\n\t\t\tenv.AWS_CONFIG_FILE,\n\t\t\tenv.AWS_SHARED_CREDENTIALS_FILE,\n\t\t\tenv.AWS_ROLE_ARN,\n\t\t\tenv.AWS_WEB_IDENTITY_TOKEN_FILE,\n\t\t\tenv.AWS_ACCESS_KEY_ID,\n\t\t\tenv.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI,\n\t\t\tenv.AWS_CONTAINER_CREDENTIALS_FULL_URI,\n\t\t\t...stsEndpoint && stsEndpoint !== config.endpoint ? [stsEndpoint] : []\n\t\t]));\n\t\tconst cachePath = join(root, \"identities\", `${key}.json`);\n\t\tlet pending = this.#pending.get(key);\n\t\tif (!pending) {\n\t\t\tpending = this.lookup(env, config.region);\n\t\t\tthis.#pending.set(key, pending);\n\t\t}\n\t\tlet identity;\n\t\ttry {\n\t\t\tidentity = await pending;\n\t\t} catch (error) {\n\t\t\tlet cached = selection.readOnly ? this.#known.get(cachePath) : void 0;\n\t\t\tif (selection.readOnly && !cached) try {\n\t\t\t\tcached = JSON.parse(readFileSync(cachePath, \"utf8\"));\n\t\t\t} catch {}\n\t\t\tif (!cached || !valid(cached) || config.region && cached.region !== config.region) throw error;\n\t\t\tidentity = cached;\n\t\t} finally {\n\t\t\tthis.#pending.delete(key);\n\t\t}\n\t\tif (!valid(identity) || config.region && config.region !== identity.region) throw new Error(\"AWS did not return a valid archive account and region\");\n\t\tthis.#known.set(cachePath, identity);\n\t\ttry {\n\t\t\tmkdirSync(dirname(cachePath), { recursive: true });\n\t\t\tconst temporary = `${cachePath}.${randomUUID()}.tmp`;\n\t\t\twriteFileSync(temporary, JSON.stringify(identity), { mode: 384 });\n\t\t\trenameSync(temporary, cachePath);\n\t\t} catch {}\n\t\tconst namespace = config.endpoint ? join(\"endpoints\", hash(config.endpoint)) : \"\";\n\t\treturn join(root, namespace, identity.account, identity.region, \"archive.duckdb\");\n\t}\n};\n//#endregion\n//#region src/lib/server/archive-sql.ts\n/**\n* SQL and row mapping for the local DuckDB archive.\n*\n* DuckDB is a native dependency and is loaded lazily by `archive.ts`; everything\n* in this file is plain text and pure functions so the archive can be unit\n* tested without the driver. Column order matters: {@link ARCHIVE_INSERT_COLUMNS}\n* is the contract with {@link toArchiveParams}, and the `SELECT` in\n* {@link buildPageQuery} uses the same names as {@link rowsToPage}.\n*\n* `level` and `request_id` are both derived from the message on the way in, and\n* both may be NULL in an archive written by an older build. NULL does not mean\n* the same thing for the two columns: for `level` it is a verdict (\"this line\n* carries no level\"), while for `request_id` it means \"not looked at yet\", since\n* the client can still detect an id in the message it renders. {@link rowsToPage}\n* and the request-id backfill below are written from that difference.\n*/\n/**\n* Statements that bring a database file up to the current schema.\n*\n* Every statement is idempotent so an existing archive can be opened by a newer\n* build without a migration step. `seq` orders events by arrival, which keeps\n* paging stable when many events share a millisecond timestamp.\n*/\nvar ARCHIVE_SCHEMA = [\n\t`CREATE SEQUENCE IF NOT EXISTS log_events_seq`,\n\t`CREATE TABLE IF NOT EXISTS log_events (\n\t\tregion VARCHAR NOT NULL,\n\t\tlog_group VARCHAR NOT NULL,\n\t\tlog_stream VARCHAR,\n\t\tevent_key VARCHAR NOT NULL,\n\t\tevent_id VARCHAR,\n\t\ttimestamp_ms BIGINT NOT NULL,\n\t\tingestion_time_ms BIGINT,\n\t\tmessage VARCHAR NOT NULL,\n\t\tlevel VARCHAR,\n\t\tlevel_source VARCHAR,\n\t\trequest_id VARCHAR,\n\t\tseq BIGINT NOT NULL DEFAULT nextval('log_events_seq'),\n\t\tarchived_at TIMESTAMP NOT NULL DEFAULT now()\n\t)`,\n\t`ALTER TABLE log_events ADD COLUMN IF NOT EXISTS level VARCHAR`,\n\t`ALTER TABLE log_events ADD COLUMN IF NOT EXISTS level_source VARCHAR`,\n\t`ALTER TABLE log_events ADD COLUMN IF NOT EXISTS request_id VARCHAR`,\n\t`CREATE TABLE IF NOT EXISTS archive_meta (key VARCHAR PRIMARY KEY, value VARCHAR)`,\n\t`CREATE UNIQUE INDEX IF NOT EXISTS log_events_unique ON log_events (region, log_group, event_key)`,\n\t`CREATE INDEX IF NOT EXISTS log_events_time ON log_events (region, log_group, timestamp_ms)`\n];\n/** Columns written by {@link buildInsertSql}, in binding order. */\nvar ARCHIVE_INSERT_COLUMNS = [\n\t\"region\",\n\t\"log_group\",\n\t\"log_stream\",\n\t\"event_key\",\n\t\"event_id\",\n\t\"timestamp_ms\",\n\t\"ingestion_time_ms\",\n\t\"message\",\n\t\"level\",\n\t\"level_source\",\n\t\"request_id\"\n];\n/** Escape character used with `LIKE`/`ILIKE` so user input cannot inject wildcards. */\nvar LIKE_ESCAPE = \"\\\\\";\n/**\n* Stable identity of an event inside one log group.\n*\n* CloudWatch event ids are unique per log group and are reused as the key;\n* events without an id (floci and LocalStack omit them) get a deterministic\n* hash of timestamp, stream and message, so re-scanning the same window is\n* idempotent instead of duplicating rows.\n*/\nfunction archiveEventKey(event) {\n\tif (event.id !== null && event.id.length > 0) return event.id;\n\treturn `h:${createHash(\"sha256\").update(`${event.timestamp}\\u0000${event.streamName ?? \"\"}\\u0000${event.message}`).digest(\"hex\").slice(0, 32)}`;\n}\n/** Renders `count` placeholder rows, one group of columns per row. */\nfunction placeholderRows(count) {\n\tconst row = `(${ARCHIVE_INSERT_COLUMNS.map(() => \"?\").join(\", \")})`;\n\treturn Array.from({ length: count }, () => row).join(\", \");\n}\n/**\n* Builds a multi-row `INSERT OR IGNORE`, so events already archived are skipped\n* by the unique index instead of raising.\n*/\nfunction buildInsertSql(rowCount) {\n\tif (!Number.isInteger(rowCount) || rowCount < 1) throw new RangeError(`rowCount must be a positive integer, received ${String(rowCount)}`);\n\treturn `INSERT OR IGNORE INTO log_events (${ARCHIVE_INSERT_COLUMNS.join(\", \")}) VALUES ${placeholderRows(rowCount)}`;\n}\n/**\n* Flattens events into the parameter list {@link buildInsertSql} expects.\n*\n* The request id is detected here, exactly like the level, so the archive holds\n* what a reader of the line would see rather than whatever a writer claimed.\n*/\nfunction toArchiveParams(region, logGroup, events) {\n\tconst params = [];\n\tfor (const event of events) {\n\t\tconst detected = detectLevelWithSource(event.message);\n\t\tparams.push(region, logGroup, event.streamName ?? null, archiveEventKey(event), event.id ?? null, BigInt(Math.round(event.timestamp)), event.ingestionTime === void 0 ? null : BigInt(Math.round(event.ingestionTime)), event.message, detected.level, detected.source, detectRequestId(event.message));\n\t}\n\treturn params;\n}\n/** Column list shared by {@link buildPageQuery} and {@link rowsToPage}. */\nvar PAGE_COLUMNS = `region, log_group, log_stream, event_key, event_id, timestamp_ms, ingestion_time_ms, message, level, level_source, request_id, seq`;\n/** Escapes `LIKE` metacharacters so a search term is matched literally. */\nfunction escapeLike(value) {\n\treturn value.replace(/[\\\\%_]/g, (match) => `${LIKE_ESCAPE}${match}`);\n}\n/**\n* Builds one keyset page of archived events.\n*\n* Ordering is `(timestamp_ms, seq)`, and the cursor compares the same tuple, so\n* pages never repeat or skip a row even when thousands of events share a\n* timestamp.\n*/\nfunction buildPageQuery(request) {\n\tconst limit = Math.max(1, Math.round(request.limit));\n\tconst groups = request.logGroups.length > 0 ? request.logGroups : [\"\"];\n\tconst where = [\n\t\t\"region = ?\",\n\t\t`log_group IN (${groups.map(() => \"?\").join(\", \")})`,\n\t\t\"timestamp_ms >= ?\",\n\t\t\"timestamp_ms <= ?\"\n\t];\n\tconst params = [\n\t\trequest.region,\n\t\t...groups,\n\t\tBigInt(Math.round(request.startTime)),\n\t\tBigInt(Math.round(request.endTime))\n\t];\n\tconst search = request.search?.trim() ?? \"\";\n\tif (search.length > 0) {\n\t\twhere.push(`message ILIKE ? ESCAPE '${LIKE_ESCAPE}'`);\n\t\tparams.push(`%${escapeLike(search)}%`);\n\t}\n\tconst prefix = request.streamPrefix?.trim() ?? \"\";\n\tif (prefix.length > 0) {\n\t\twhere.push(`log_stream LIKE ? ESCAPE '${LIKE_ESCAPE}'`);\n\t\tparams.push(`${escapeLike(prefix)}%`);\n\t}\n\tconst levels = request.levels ?? [];\n\tif (levels.length > 0) {\n\t\twhere.push(`level IN (${levels.map(() => \"?\").join(\", \")})`);\n\t\tparams.push(...levels);\n\t}\n\tconst after = request.after ?? null;\n\tif (after !== null) {\n\t\twhere.push(\"(timestamp_ms > ? OR (timestamp_ms = ? AND seq > ?))\");\n\t\tparams.push(BigInt(Math.round(after.timestamp)), BigInt(Math.round(after.timestamp)), BigInt(Math.round(after.seq)));\n\t}\n\tparams.push(BigInt(limit));\n\treturn {\n\t\tsql: `SELECT ${PAGE_COLUMNS} FROM log_events WHERE ${where.join(\" AND \")} ORDER BY timestamp_ms, seq LIMIT ?`,\n\t\tparams\n\t};\n}\n/** Converts a DuckDB value (which may be a bigint) into a JS number. */\nfunction toNumber(value) {\n\tif (typeof value === \"number\") return Number.isFinite(value) ? value : null;\n\tif (typeof value === \"bigint\") return Number(value);\n\tif (typeof value === \"string\" && value.trim().length > 0) {\n\t\tconst parsed = Number(value);\n\t\treturn Number.isFinite(parsed) ? parsed : null;\n\t}\n\treturn null;\n}\n/** Converts a nullable DuckDB string column into `string` or `null`. */\nfunction toNullableString(value) {\n\tif (typeof value === \"string\") return value.length > 0 ? value : null;\n\treturn null;\n}\n/** Reads one column from a row object, tolerating case differences. */\nfunction pick(row, column) {\n\tif (column in row) return row[column];\n\tconst upper = column.toUpperCase();\n\tif (upper in row) return row[upper];\n}\n/**\n* Maps query rows onto wire events plus the cursor of the last row.\n*\n* Rows without a usable timestamp are dropped rather than rendered as 1970.\n*/\nfunction rowsToPage(rows) {\n\tconst events = [];\n\tlet last = null;\n\tfor (const row of rows) {\n\t\tconst timestamp = toNumber(pick(row, \"timestamp_ms\"));\n\t\tconst seq = toNumber(pick(row, \"seq\"));\n\t\tif (timestamp === null || seq === null) continue;\n\t\tconst rawLevel = pick(row, \"level\");\n\t\tconst group = toNullableString(pick(row, \"log_group\"));\n\t\tconst event = {\n\t\t\tid: toNullableString(pick(row, \"event_key\")),\n\t\t\ttimestamp,\n\t\t\tmessage: typeof pick(row, \"message\") === \"string\" ? pick(row, \"message\") : \"\",\n\t\t\tlevel: isLogLevel(rawLevel) ? rawLevel : null\n\t\t};\n\t\tif (group !== null) event.group = group;\n\t\tconst requestId = toNullableString(pick(row, \"request_id\"));\n\t\tif (requestId !== null) event.requestId = requestId;\n\t\tconst streamName = toNullableString(pick(row, \"log_stream\"));\n\t\tif (streamName !== null) event.streamName = streamName;\n\t\tconst ingestionTime = toNumber(pick(row, \"ingestion_time_ms\"));\n\t\tif (ingestionTime !== null) event.ingestionTime = ingestionTime;\n\t\tevents.push(event);\n\t\tlast = {\n\t\t\ttimestamp,\n\t\t\tseq\n\t\t};\n\t}\n\treturn {\n\t\tevents,\n\t\tlast\n\t};\n}\n/** Aggregate query behind {@link ArchiveTotals}. */\nvar ARCHIVE_TOTALS_SQL = `SELECT count(*) AS rows, count(DISTINCT log_group) AS groups, count(DISTINCT region) AS regions, min(timestamp_ms) AS oldest, max(timestamp_ms) AS newest FROM log_events`;\n/** Log groups held by the archive, optionally limited to one region. */\nfunction buildGroupsQuery(region) {\n\tconst where = region === null || region.length === 0 ? \"\" : \"WHERE region = ?\";\n\treturn {\n\t\tsql: `SELECT region, log_group, count(*) AS events, min(timestamp_ms) AS oldest, max(timestamp_ms) AS newest FROM log_events ${where} GROUP BY region, log_group ORDER BY region, log_group`,\n\t\tparams: where === \"\" ? [] : [region]\n\t};\n}\n/** Maps the single row of {@link ARCHIVE_TOTALS_SQL}. */\nfunction rowToTotals(row) {\n\tif (row === void 0) return {\n\t\trows: 0,\n\t\tgroups: 0,\n\t\tregions: 0,\n\t\toldest: null,\n\t\tnewest: null\n\t};\n\treturn {\n\t\trows: toNumber(pick(row, \"rows\")) ?? 0,\n\t\tgroups: toNumber(pick(row, \"groups\")) ?? 0,\n\t\tregions: toNumber(pick(row, \"regions\")) ?? 0,\n\t\toldest: toNumber(pick(row, \"oldest\")),\n\t\tnewest: toNumber(pick(row, \"newest\"))\n\t};\n}\n/** Maps the rows of {@link buildGroupsQuery}. */\nfunction rowsToGroups(rows) {\n\tconst groups = [];\n\tfor (const row of rows) {\n\t\tconst region = pick(row, \"region\");\n\t\tconst logGroup = pick(row, \"log_group\");\n\t\tif (typeof region !== \"string\" || typeof logGroup !== \"string\") continue;\n\t\tgroups.push({\n\t\t\tregion,\n\t\t\tlogGroup,\n\t\t\tevents: toNumber(pick(row, \"events\")) ?? 0,\n\t\t\toldest: toNumber(pick(row, \"oldest\")),\n\t\t\tnewest: toNumber(pick(row, \"newest\"))\n\t\t});\n\t}\n\treturn groups;\n}\n/**\n* Row budget of one request-id backfill pass.\n*\n* The pass runs on every open, so it has to stay cheap. 20000 messages is a\n* fraction of a second of regex work, and an archive with more than that scans\n* the rest on the next open, because the watermark moves.\n*/\nvar REQUEST_ID_BACKFILL_LIMIT = 2e4;\n/** `archive_meta` key holding the request-id backfill watermark. */\nvar REQUEST_ID_BACKFILL_KEY = \"request_id_backfill\";\n/** Highest `seq` in the archive: the ceiling of a backfill pass. */\nvar ARCHIVE_MAX_SEQ_SQL = `SELECT max(seq) AS maxSeq FROM log_events`;\n/** Reads the single row of {@link ARCHIVE_MAX_SEQ_SQL}; `null` for an empty archive. */\nfunction rowToMaxSeq(row) {\n\treturn row === void 0 ? null : toNumber(pick(row, \"maxSeq\"));\n}\n/** Statement that reads the backfill watermark; no row means it never ran. */\nfunction buildRequestIdBackfillStateQuery() {\n\treturn `SELECT value FROM archive_meta WHERE key = '${REQUEST_ID_BACKFILL_KEY}'`;\n}\n/** Statement that stores the backfill watermark, which is the highest scanned `seq`. */\nfunction buildRequestIdBackfillStateWrite() {\n\treturn `INSERT OR REPLACE INTO archive_meta (key, value) VALUES ('${REQUEST_ID_BACKFILL_KEY}', ?)`;\n}\n/** Reads the watermark row; an absent row or junk means \"scan from the start\". */\nfunction rowToBackfillWatermark(row) {\n\tconst value = row === void 0 ? null : toNumber(pick(row, \"value\"));\n\treturn value === null || value < 0 ? null : value;\n}\n/**\n* Builds the scan that finds rows archived before `request_id` existed.\n*\n* `seq` is selected although the update does not need it: the caller stores\n* where the pass stopped. `afterSeq` skips the range a previous pass already\n* looked at, which is what lets a capped pass resume - a message with no request\n* id stays NULL for ever, so without the lower bound every pass would start on\n* the same id-less rows and never reach the rows above them.\n*/\nfunction buildRequestIdBackfillQuery(request) {\n\tconst limit = Math.max(1, Math.round(request.limit));\n\tconst scanned = request.afterSeq ?? 0;\n\tconst after = scanned > 0 ? \" AND seq > ?\" : \"\";\n\tconst params = [BigInt(Math.round(request.maxSeq))];\n\tif (scanned > 0) params.push(BigInt(Math.round(scanned)));\n\tparams.push(BigInt(limit));\n\treturn {\n\t\tsql: `SELECT event_key, log_group, region, message, seq FROM log_events WHERE seq <= ?${after} AND request_id IS NULL ORDER BY seq LIMIT ?`,\n\t\tparams\n\t};\n}\n/** Maps the rows of {@link buildRequestIdBackfillQuery}, dropping unusable ones. */\nfunction rowsToBackfillCandidates(rows) {\n\tconst candidates = [];\n\tfor (const row of rows) {\n\t\tconst seq = toNumber(pick(row, \"seq\"));\n\t\tconst region = pick(row, \"region\");\n\t\tconst logGroup = pick(row, \"log_group\");\n\t\tconst eventKey = pick(row, \"event_key\");\n\t\tconst message = pick(row, \"message\");\n\t\tif (seq === null || typeof region !== \"string\" || typeof logGroup !== \"string\" || typeof eventKey !== \"string\" || typeof message !== \"string\") continue;\n\t\tcandidates.push({\n\t\t\tseq,\n\t\t\tregion,\n\t\t\tlogGroup,\n\t\t\teventKey,\n\t\t\tmessage\n\t\t});\n\t}\n\treturn candidates;\n}\n/** Highest `seq` of a scanned set, or `null` when nothing was scanned. */\nfunction maxSeqOf(candidates) {\n\tlet highest = null;\n\tfor (const candidate of candidates) if (highest === null || candidate.seq > highest) highest = candidate.seq;\n\treturn highest;\n}\n/**\n* Detects the request id of every candidate.\n*\n* A message that yields no id is dropped rather than written as an empty string:\n* it is a finished row, not a failure, and the watermark moves past it so it is\n* never looked at again.\n*/\nfunction planRequestIdBackfill(candidates) {\n\tconst updates = [];\n\tfor (const candidate of candidates) {\n\t\tconst requestId = detectRequestId(candidate.message);\n\t\tif (requestId === null) continue;\n\t\tupdates.push({\n\t\t\tregion: candidate.region,\n\t\t\tlogGroup: candidate.logGroup,\n\t\t\teventKey: candidate.eventKey,\n\t\t\trequestId\n\t\t});\n\t}\n\treturn updates;\n}\n/**\n* Builds one `UPDATE ... FROM (VALUES ...)` that writes many ids at once.\n*\n* One statement per chunk instead of one per row keeps a 20000-row pass down to\n* a handful of statements, and the predicate is an exact row match on the unique\n* index (`region`, `log_group`, `event_key`).\n*/\nfunction buildRequestIdBackfillUpdate(rowCount) {\n\tif (!Number.isInteger(rowCount) || rowCount < 1) throw new RangeError(`rowCount must be a positive integer, received ${String(rowCount)}`);\n\treturn `UPDATE log_events SET request_id = v.request_id FROM (VALUES ${Array.from({ length: rowCount }, () => \"(?, ?, ?, ?)\").join(\", \")}) AS v(region, log_group, event_key, request_id) WHERE log_events.region = v.region AND log_events.log_group = v.log_group AND log_events.event_key = v.event_key`;\n}\n/** Flattens updates into the parameter list {@link buildRequestIdBackfillUpdate} expects. */\nfunction toRequestIdBackfillParams(updates) {\n\tconst params = [];\n\tfor (const update of updates) params.push(update.region, update.logGroup, update.eventKey, update.requestId);\n\treturn params;\n}\n/** Levels and their rank, highest first; `unknown` is left to the `ELSE` branch. */\nfunction rankArms() {\n\treturn Object.entries(LEVEL_RANK).filter(([level]) => level !== \"unknown\");\n}\n/**\n* SQL `CASE` that turns a level into its severity rank.\n*\n* Generated from {@link LEVEL_RANK} so the ranks have one source of truth: the\n* statement and the UI cannot disagree about which level is worse.\n*/\nfunction levelRankCase(expression) {\n\treturn `CASE ${expression} ${rankArms().map(([level, rank]) => `WHEN '${level}' THEN ${rank}`).join(\" \")} ELSE ${LEVEL_RANK.unknown} END`;\n}\n/** SQL `CASE` that turns a severity rank back into a level name. */\nfunction levelNameCase(expression) {\n\treturn `CASE ${expression} ${rankArms().map(([level, rank]) => `WHEN ${rank} THEN '${level}'`).join(\" \")} ELSE 'unknown' END`;\n}\n/** The `WHERE` clause both series forms share: one region, one window, one or more groups. */\nfunction seriesScope(request, groups) {\n\treturn {\n\t\twhere: [\n\t\t\t\"region = ?\",\n\t\t\t`log_group IN (${groups.map(() => \"?\").join(\", \")})`,\n\t\t\t\"timestamp_ms >= ?\",\n\t\t\t\"timestamp_ms <= ?\"\n\t\t],\n\t\tparams: [\n\t\t\trequest.region,\n\t\t\t...groups,\n\t\t\tBigInt(Math.round(request.startTime)),\n\t\t\tBigInt(Math.round(request.endTime))\n\t\t]\n\t};\n}\n/**\n* Builds the bucketed counts behind the chart.\n*\n* One statement returns every series. The bucket is plain integer arithmetic on\n* `timestamp_ms`, so it cannot drift with a time zone; NULL levels are reported\n* as `unknown` rather than dropped; and a level filter matches only rows that\n* carry one of the requested levels.\n*\n* `by: 'request'` selects the request form below; `by: 'event'` (the default)\n* keeps the event form unchanged.\n*/\nfunction buildSeriesQuery(request) {\n\tconst bucketMs = Math.max(1, Math.round(request.bucketMs));\n\tconst scope = seriesScope(request, request.logGroups.length > 0 ? request.logGroups : [\"\"]);\n\tif (request.metric === \"duration\") return buildDurationSeriesQuery(request, scope.where, scope.params);\n\tif (request.by === \"request\") return buildRequestSeriesQuery(request, bucketMs, scope.where, scope.params);\n\tconst params = [\n\t\tBigInt(bucketMs),\n\t\tBigInt(bucketMs),\n\t\t...scope.params\n\t];\n\tconst where = scope.where.slice();\n\tconst levels = request.levels ?? [];\n\tif (levels.length > 0) {\n\t\twhere.push(`level IN (${levels.map(() => \"?\").join(\", \")})`);\n\t\tparams.push(...levels);\n\t}\n\treturn {\n\t\tsql: `SELECT CAST(floor(timestamp_ms / ?) * ? AS BIGINT) AS bucket, log_group, coalesce(level, 'unknown') AS level, count(*) AS events FROM log_events WHERE ${where.join(\" AND \")} GROUP BY bucket, log_group, level ORDER BY bucket, log_group, level`,\n\t\tparams\n\t};\n}\n/**\n* Builds the request form: one mark per request instead of one per line.\n*\n* `coalesce(request_id, event_key)` makes a line with no request id a request of\n* its own, so no line is dropped. A request is placed at its FIRST line\n* (`min(timestamp_ms)`) and counted once, and it takes the WORST level of its\n* lines (`max` of the ranks). A level filter selects on that same worst level in\n* the `HAVING`: asking for errors keeps every request that logged one, whatever\n* else it logged, and drops the requests that stayed below it.\n*\n* BIND ORDER: DuckDB binds `?` positionally in statement text order, and the CTE\n* comes first, so the parameters are the scope ones, then one rank per requested\n* level (the RANKS, not the level names), and the bucket width LAST - the\n* opposite of the event form above.\n*/\nfunction buildRequestSeriesQuery(request, bucketMs, where, scopeParams) {\n\tconst levels = request.levels ?? [];\n\tconst having = levels.length > 0 ? ` HAVING level_rank IN (${levels.map(() => \"?\").join(\", \")})` : \"\";\n\tconst params = [\n\t\t...scopeParams,\n\t\t...levels.map((level) => LEVEL_RANK[level]),\n\t\tBigInt(bucketMs),\n\t\tBigInt(bucketMs)\n\t];\n\treturn {\n\t\tsql: [\n\t\t\t\"WITH requests AS (\",\n\t\t\t`SELECT coalesce(request_id, event_key) AS request_key, log_group, min(timestamp_ms) AS start_ms, max(${levelRankCase(`coalesce(level, 'unknown')`)}) AS level_rank`,\n\t\t\t`FROM log_events WHERE ${where.join(\" AND \")}`,\n\t\t\t`GROUP BY request_key, log_group${having})`,\n\t\t\t`SELECT CAST(floor(start_ms / ?) * ? AS BIGINT) AS bucket, log_group, ${levelNameCase(\"level_rank\")} AS level, count(*) AS events`,\n\t\t\t\"FROM requests GROUP BY bucket, log_group, level ORDER BY bucket, log_group, level\"\n\t\t].join(\" \"),\n\t\tparams\n\t};\n}\n/** Duration points are not bucketed: one point at each request's first observed timestamp. */\nfunction buildDurationSeriesQuery(request, where, scopeParams) {\n\tconst levels = request.levels ?? [];\n\tconst having = levels.length ? ` HAVING level_rank IN (${levels.map(() => \"?\").join(\", \")})` : \"\";\n\treturn {\n\t\tsql: `WITH requests AS (\n\t\t\tSELECT request_id, log_group, min(timestamp_ms) AS start_ms,\n\t\t\tmax(timestamp_ms) - min(timestamp_ms) AS duration_ms,\n\t\t\tfirst(message ORDER BY timestamp_ms DESC, seq DESC) AS last_message,\n\t\t\tmax(${levelRankCase(\"coalesce(level, 'unknown')\")}) AS level_rank\n\t\t\tFROM log_events WHERE ${where.join(\" AND \")} AND request_id IS NOT NULL AND request_id <> ''\n\t\t\tGROUP BY request_id, log_group${having})\n\t\t\tSELECT start_ms AS bucket, log_group, ${levelNameCase(\"level_rank\")} AS level,\n\t\t\t1 AS events, request_id, duration_ms, last_message FROM requests ORDER BY bucket, log_group, request_id`,\n\t\tparams: [...scopeParams, ...levels.map((level) => LEVEL_RANK[level])]\n\t};\n}\n/** Maps the rows of {@link buildSeriesQuery} onto chart points. */\nfunction rowsToSeries(rows) {\n\tconst points = [];\n\tfor (const row of rows) {\n\t\tconst t = toNumber(pick(row, \"bucket\"));\n\t\tconst group = pick(row, \"log_group\");\n\t\tconst level = pick(row, \"level\");\n\t\tif (t === null || typeof group !== \"string\") continue;\n\t\tpoints.push({\n\t\t\tt,\n\t\t\tgroup,\n\t\t\tlevel: typeof level === \"string\" && level.length > 0 ? level : \"unknown\",\n\t\t\tevents: toNumber(pick(row, \"events\")) ?? 0,\n\t\t\t...typeof row.request_id === \"string\" ? {\n\t\t\t\trequestId: row.request_id,\n\t\t\t\tdurationMs: (toNumber(row.duration_ms) ?? 0) + eventDurationMs(typeof row.last_message === \"string\" ? row.last_message : \"\")\n\t\t\t} : {}\n\t\t});\n\t}\n\treturn points;\n}\n//#endregion\n//#region src/lib/server/archive.ts\n/**\n* Local DuckDB archive of the events the app has streamed.\n*\n* The driver (`@duckdb/node-api` plus its per-platform native binding) is an\n* optional dependency: it is imported lazily, on the first request that needs\n* it, and every failure is turned into an unavailable archive instead of an\n* error. The rest of the app therefore works unchanged on platforms where the\n* binding is missing.\n*\n* One process owns the file: DuckDB allows a single writer, and the SvelteKit\n* server is that writer. Statements are serialised through an internal queue so\n* a stream writing while another request reads cannot interleave on the\n* connection.\n*/\n/** Package name of the optional DuckDB driver. */\nvar DUCKDB_MODULE = \"@duckdb/node-api\";\n/** Directory name used under the platform data directory. */\nvar ARCHIVE_DIR_NAME = \"watch-tail\";\n/** File name of the archive inside {@link ARCHIVE_DIR_NAME}. */\nvar ARCHIVE_FILE_NAME = \"archive.duckdb\";\n/**\n* Imports the optional DuckDB driver.\n*\n* The specifier is held in a variable on purpose: bundlers must leave the\n* import alone so Node resolves it at run time, where a missing binding can be\n* reported as an unavailable archive rather than a build error.\n*/\nasync function loadDuckDbDriver() {\n\tconst loaded = await import(DUCKDB_MODULE);\n\tif (typeof loaded.DuckDBInstance?.create !== \"function\") throw new Error(`${DUCKDB_MODULE} did not expose DuckDBInstance.create`);\n\treturn loaded;\n}\nvar DISABLED_VALUES = /* @__PURE__ */ new Set([\n\t\"0\",\n\t\"false\",\n\t\"no\",\n\t\"off\"\n]);\n/** True when an environment value means \"off\". */\nfunction isDisabled(value) {\n\treturn value !== void 0 && DISABLED_VALUES.has(value.trim().toLowerCase());\n}\n/**\n* True when this process is a test runner.\n*\n* Vitest sets `VITEST`, and `NODE_ENV=test` covers other harnesses. Tests must\n* not append to the archive of the machine they run on, so the archive is off\n* unless a test asks for it through `WATCH_TAIL_ARCHIVE_DB` or\n* `WATCH_TAIL_ARCHIVE=on`.\n*/\nfunction isTestProcess(env) {\n\treturn env.VITEST !== void 0 || env.NODE_ENV === \"test\";\n}\n/**\n* Resolves the archive file path.\n*\n* `WATCH_TAIL_ARCHIVE_DB` wins; otherwise the file lives in the platform's\n* data directory (`XDG_DATA_HOME`, `%LOCALAPPDATA%` or\n* `~/Library/Application Support`), never in the current directory, so history\n* survives running the CLI from a different folder.\n*/\nfunction resolveArchiveConfig(env, platform = process.platform, home = homedir()) {\n\tconst path = env.WATCH_TAIL_ARCHIVE_DB?.trim() ?? \"\";\n\tconst dataDir = env.XDG_DATA_HOME?.trim() ?? (platform === \"darwin\" ? join(home, \"Library\", \"Application Support\") : platform === \"win32\" ? env.LOCALAPPDATA?.trim() ?? join(home, \"AppData\", \"Local\") : join(home, \".local\", \"share\"));\n\tconst requested = env.WATCH_TAIL_ARCHIVE?.trim() ?? \"\";\n\treturn {\n\t\tenabled: isDisabled(requested) ? false : path.length > 0 || requested.length > 0 ? true : !isTestProcess(env),\n\t\tpath: path.length > 0 ? path : join(dataDir, ARCHIVE_DIR_NAME, ARCHIVE_FILE_NAME)\n\t};\n}\n/**\n* A short, non-throwing description of an unknown failure.\n*\n* A conflicting lock is the one failure a user can act on, and DuckDB's own\n* message buries the reason in a pid and a documentation link, so it is\n* reported as what it means for this app.\n*/\nfunction describeOpenError(error, path) {\n\tconst message = error instanceof Error ? error.message : String(error);\n\tif (/Could not set lock|Conflicting lock/i.test(message)) return `the archive file ${path} is locked by another process (another watch-tail is using it); use --db to keep a separate file`;\n\treturn message;\n}\n/** True when the failure is the exclusive file lock. */\nfunction isLockError(error) {\n\tconst message = error instanceof Error ? error.message : String(error);\n\treturn /Could not set lock|Conflicting lock/i.test(message);\n}\n/**\n* One DuckDB file holding every event the app has streamed.\n*\n* `open` never throws: a missing driver, a locked file or a corrupt database all\n* produce an instance with `available === false` and the reason on `error`. The\n* read and write methods then behave as no-ops, so callers never have to guard\n* their happy path.\n*/\nvar LogArchive = class LogArchive {\n\t/** Database file this archive uses. */\n\tpath;\n\t#connection = null;\n\t#available = false;\n\t#error = null;\n\t#queue = Promise.resolve();\n\tconstructor(path) {\n\t\tthis.path = path;\n\t}\n\t/**\n\t* Opens (and creates) the archive.\n\t*\n\t* Statements are executed in order: the sequence first, then the table, then\n\t* the indexes, so an existing file from an older build is upgraded in place.\n\t* The request-id backfill runs last, inside the same serialised path, and\n\t* cannot fail the open.\n\t*/\n\tstatic async open(options) {\n\t\tconst archive = new LogArchive(options.path);\n\t\tconst load = options.load ?? loadDuckDbDriver;\n\t\tconst ensureDir = options.ensureDir ?? ((dir) => mkdirSync(dir, { recursive: true }));\n\t\ttry {\n\t\t\tensureDir(dirname(options.path));\n\t\t\tconst driver = await load();\n\t\t\tfor (let attempt = 1;; attempt += 1) try {\n\t\t\t\tconst connection = await (await driver.DuckDBInstance.create(options.path)).connect();\n\t\t\t\tfor (const statement of ARCHIVE_SCHEMA) await connection.run(statement);\n\t\t\t\tarchive.#connection = connection;\n\t\t\t\tarchive.#available = true;\n\t\t\t\tawait archive.#backfillRequestIds();\n\t\t\t\tbreak;\n\t\t\t} catch (error) {\n\t\t\t\tif (attempt >= 3 || !isLockError(error)) throw error;\n\t\t\t\tawait setTimeout(150);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tarchive.#available = false;\n\t\t\tarchive.#error = describeOpenError(error, options.path);\n\t\t}\n\t\treturn archive;\n\t}\n\t/**\n\t* An archive that is off by configuration or could not be opened.\n\t*\n\t* Every method degrades to a no-op, so callers can use one code path for\n\t* \"no DuckDB on this machine\" and \"the user asked for no archive\".\n\t*/\n\tstatic unavailable(path, error = null) {\n\t\tconst archive = new LogArchive(path);\n\t\tarchive.#available = false;\n\t\tarchive.#error = error;\n\t\treturn archive;\n\t}\n\t/** True when the archive can be read and written. */\n\tget available() {\n\t\treturn this.#available;\n\t}\n\t/** Why the archive is unavailable, or the last failure, or `null`. */\n\tget error() {\n\t\treturn this.#error;\n\t}\n\t/** Runs one task after every task queued before it. */\n\t#enqueue(task) {\n\t\tconst next = this.#queue.then(task, task);\n\t\tthis.#queue = next.then(() => void 0, () => void 0);\n\t\treturn next;\n\t}\n\t/** Runs a statement, returning the failure instead of throwing. */\n\tasync #guard(fallback, task) {\n\t\tif (this.#connection === null) return fallback;\n\t\treturn this.#enqueue(async () => {\n\t\t\ttry {\n\t\t\t\treturn await task();\n\t\t\t} catch (error) {\n\t\t\t\tthis.#error = error instanceof Error ? error.message : String(error);\n\t\t\t\treturn fallback;\n\t\t\t}\n\t\t});\n\t}\n\t/**\n\t* Migrates the request id of rows written before the column existed.\n\t*\n\t* It runs inside {@link LogArchive.#guard}, so it shares the serialised\n\t* statement queue with every other write and reports a failure on `error`\n\t* instead of letting it escape `open`. The watermark is the highest `seq` the\n\t* migration has looked at, so a capped or interrupted pass carries on from\n\t* there on the next open and no row is scanned twice; a row whose message\n\t* holds no id stays NULL, which is the archive's answer for that row.\n\t*/\n\tasync #backfillRequestIds() {\n\t\tawait this.#guard(void 0, async () => {\n\t\t\tconst connection = this.#connection;\n\t\t\tif (connection === null) return;\n\t\t\tconst ceiling = rowToMaxSeq((await connection.runAndReadAll(ARCHIVE_MAX_SEQ_SQL)).getRowObjects()[0]);\n\t\t\tif (ceiling === null) return;\n\t\t\tconst watermark = rowToBackfillWatermark((await connection.runAndReadAll(buildRequestIdBackfillStateQuery())).getRowObjects()[0]);\n\t\t\tif (watermark !== null && watermark >= ceiling) return;\n\t\t\tconst { sql, params } = buildRequestIdBackfillQuery({\n\t\t\t\tmaxSeq: ceiling,\n\t\t\t\tafterSeq: watermark,\n\t\t\t\tlimit: REQUEST_ID_BACKFILL_LIMIT\n\t\t\t});\n\t\t\tconst candidates = rowsToBackfillCandidates((await connection.runAndReadAll(sql, params)).getRowObjects());\n\t\t\tconst updates = planRequestIdBackfill(candidates);\n\t\t\tfor (let start = 0; start < updates.length; start += 500) {\n\t\t\t\tconst chunk = updates.slice(start, start + 500);\n\t\t\t\tawait connection.run(buildRequestIdBackfillUpdate(chunk.length), toRequestIdBackfillParams(chunk));\n\t\t\t}\n\t\t\tconst scanned = candidates.length < 2e4 ? ceiling : maxSeqOf(candidates);\n\t\t\tawait connection.run(buildRequestIdBackfillStateWrite(), [String(scanned ?? ceiling)]);\n\t\t});\n\t}\n\t/**\n\t* Writes one batch of streamed events.\n\t*\n\t* Batches are split into chunks of {@link ARCHIVE_INSERT_CHUNK} rows, and\n\t* `INSERT OR IGNORE` plus the unique index make a repeated scan idempotent.\n\t* Failures never propagate: a full disk must not interrupt a log stream.\n\t*/\n\tasync record(region, logGroup, events) {\n\t\tif (events.length === 0) return 0;\n\t\treturn this.#guard(0, async () => {\n\t\t\tconst connection = this.#connection;\n\t\t\tif (connection === null) return 0;\n\t\t\tlet written = 0;\n\t\t\tfor (let start = 0; start < events.length; start += 500) {\n\t\t\t\tconst chunk = events.slice(start, start + 500);\n\t\t\t\tawait connection.run(buildInsertSql(chunk.length), toArchiveParams(region, logGroup, chunk));\n\t\t\t\twritten += chunk.length;\n\t\t\t}\n\t\t\treturn written;\n\t\t});\n\t}\n\t/** Reads one page of archived events. */\n\tasync page(request) {\n\t\tconst empty = {\n\t\t\tevents: [],\n\t\t\tlast: null\n\t\t};\n\t\treturn this.#guard(empty, async () => {\n\t\t\tconst connection = this.#connection;\n\t\t\tif (connection === null) return empty;\n\t\t\tconst { sql, params } = buildPageQuery(request);\n\t\t\treturn rowsToPage((await connection.runAndReadAll(sql, params)).getRowObjects());\n\t\t});\n\t}\n\t/**\n\t* Bucketed counts for the chart, per group and level.\n\t*\n\t* The request is forwarded as it arrives: it carries the grouping that says\n\t* whether a mark counts an event or a request.\n\t*/\n\tasync seriesQuery(request) {\n\t\treturn this.#guard([], async () => {\n\t\t\tconst connection = this.#connection;\n\t\t\tif (connection === null) return [];\n\t\t\tconst { sql, params } = buildSeriesQuery(request);\n\t\t\treturn rowsToSeries((await connection.runAndReadAll(sql, params)).getRowObjects());\n\t\t});\n\t}\n\t/** Aggregate row count and time bounds. */\n\tasync totals() {\n\t\treturn this.#guard(rowToTotals(void 0), async () => {\n\t\t\tconst connection = this.#connection;\n\t\t\tif (connection === null) return rowToTotals(void 0);\n\t\t\treturn rowToTotals((await connection.runAndReadAll(ARCHIVE_TOTALS_SQL)).getRowObjects()[0]);\n\t\t});\n\t}\n\t/** Log groups held by the archive, optionally limited to one region. */\n\tasync groups(region = null) {\n\t\treturn this.#guard([], async () => {\n\t\t\tconst connection = this.#connection;\n\t\t\tif (connection === null) return [];\n\t\t\tconst { sql, params } = buildGroupsQuery(region);\n\t\t\treturn rowsToGroups((await connection.runAndReadAll(sql, params)).getRowObjects());\n\t\t});\n\t}\n\t/** Status for `GET /api/archive`, including the file size on disk. */\n\tasync status() {\n\t\tconst totals = await this.totals();\n\t\tlet bytes = null;\n\t\tif (this.#available) try {\n\t\t\tbytes = statSync(this.path).size;\n\t\t} catch {\n\t\t\tbytes = null;\n\t\t}\n\t\treturn {\n\t\t\tpath: this.path,\n\t\t\tavailable: this.#available,\n\t\t\terror: this.#error,\n\t\t\tbytes,\n\t\t\ttotals\n\t\t};\n\t}\n\t/** Closes the connection. Safe to call twice. */\n\tasync close() {\n\t\tconst connection = this.#connection;\n\t\tthis.#connection = null;\n\t\tthis.#available = false;\n\t\tif (connection?.closeSync === void 0) return;\n\t\tawait this.#enqueue(async () => {\n\t\t\tconnection.closeSync?.();\n\t\t});\n\t}\n};\n/** A single opening promise per absolute file path prevents duplicate DuckDB writers. */\nvar sharedArchives = /* @__PURE__ */ new Map();\nvar archiveLocator = new ArchiveLocator();\n/** Opens the selected account/region archive; explicit --db paths remain file overrides. */\nasync function getArchive(env, selection = {}, load) {\n\tconst config = resolveArchiveConfig(env);\n\tif (!config.enabled) return LogArchive.unavailable(config.path);\n\tlet path = config.path;\n\tif (!env.WATCH_TAIL_ARCHIVE_DB?.trim()) try {\n\t\tpath = await archiveLocator.locate(config.path, env, selection);\n\t} catch (error) {\n\t\treturn LogArchive.unavailable(config.path, `Cannot select account archive: ${error instanceof Error ? error.message : String(error)}`);\n\t}\n\tpath = resolve(path);\n\tlet archive = sharedArchives.get(path);\n\tif (!archive) {\n\t\tarchive = LogArchive.open({\n\t\t\tpath,\n\t\t\t...load === void 0 ? {} : { load }\n\t\t});\n\t\tsharedArchives.set(path, archive);\n\t}\n\treturn archive;\n}\n//#endregion\nexport { getArchive as t };\n"],"names":[],"mappings":";;;;;;;;;AAQA;AACA;AACA;AACA,eAAe,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE;AACrC,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC,IAAI;AACL,EAAE,MAAM,eAAe,GAAG,MAAM,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;AAChE,EAAE,OAAO;AACT,GAAG,OAAO,EAAE,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO;AAC/F,GAAG,MAAM,EAAE;AACX,GAAG;AACH,CAAC,CAAC,SAAS;AACX,EAAE,MAAM,CAAC,OAAO,EAAE;AAClB,CAAC;AACD;AACA,SAAS,IAAI,CAAC,KAAK,EAAE;AACrB,CAAC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;AACxD;AACA,SAAS,KAAK,CAAC,QAAQ,EAAE;AACzB,CAAC,OAAO,OAAO,QAAQ,EAAE,OAAO,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE;AACtL;AACA;AACA,IAAI,cAAc,GAAG,MAAM;AAC3B,CAAC,MAAM;AACP,CAAC,QAAQ,mBAAmB,IAAI,GAAG,EAAE;AACrC,CAAC,MAAM,mBAAmB,IAAI,GAAG,EAAE;AACnC,CAAC,WAAW,CAAC,MAAM,GAAG,QAAQ,EAAE;AAChC,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM;AACtB,CAAC;AACD,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC;AACxD,EAAE,MAAM,IAAI,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC;AACtE,EAAE,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ;AAC7E,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;AAClC,GAAG,MAAM,CAAC,QAAQ;AAClB,GAAG,MAAM,CAAC,MAAM;AAChB,GAAG,GAAG,CAAC,WAAW,IAAI,SAAS;AAC/B,GAAG,GAAG,CAAC,eAAe;AACtB,GAAG,GAAG,CAAC,2BAA2B;AAClC,GAAG,GAAG,CAAC,YAAY;AACnB,GAAG,GAAG,CAAC,2BAA2B;AAClC,GAAG,GAAG,CAAC,iBAAiB;AACxB,GAAG,GAAG,CAAC,sCAAsC;AAC7C,GAAG,GAAG,CAAC,kCAAkC;AACzC,GAAG,GAAG,WAAW,IAAI,WAAW,KAAK,MAAM,CAAC,QAAQ,GAAG,CAAC,WAAW,CAAC,GAAG;AACvE,GAAG,CAAC,CAAC;AACL,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3D,EAAE,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;AACtC,EAAE,IAAI,CAAC,OAAO,EAAE;AAChB,GAAG,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;AAC5C,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC;AAClC,EAAE;AACF,EAAE,IAAI,QAAQ;AACd,EAAE,IAAI;AACN,GAAG,QAAQ,GAAG,MAAM,OAAO;AAC3B,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE;AAClB,GAAG,IAAI,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM;AACxE,GAAG,IAAI,SAAS,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,IAAI;AAC1C,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACxD,GAAG,CAAC,CAAC,MAAM,CAAC;AACZ,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,KAAK;AACjG,GAAG,QAAQ,GAAG,MAAM;AACpB,EAAE,CAAC,SAAS;AACZ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;AAC5B,EAAE;AACF,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC;AACtJ,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC;AACtC,EAAE,IAAI;AACN,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrD,GAAG,MAAM,SAAS,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC;AACvD,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACpE,GAAG,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC;AACnC,EAAE,CAAC,CAAC,MAAM,CAAC;AACX,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE;AACnF,EAAE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;AACnF,CAAC;AACD,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,cAAc,GAAG;AACrB,CAAC,CAAC,4CAA4C,CAAC;AAC/C,CAAC,CAAC;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE,CAAC;AACH,CAAC,CAAC,6DAA6D,CAAC;AAChE,CAAC,CAAC,oEAAoE,CAAC;AACvE,CAAC,CAAC,kEAAkE,CAAC;AACrE,CAAC,CAAC,gFAAgF,CAAC;AACnF,CAAC,CAAC,gGAAgG,CAAC;AACnG,CAAC,CAAC,0FAA0F;AAC5F,CAAC;AACD;AACA,IAAI,sBAAsB,GAAG;AAC7B,CAAC,QAAQ;AACT,CAAC,WAAW;AACZ,CAAC,YAAY;AACb,CAAC,WAAW;AACZ,CAAC,UAAU;AACX,CAAC,cAAc;AACf,CAAC,mBAAmB;AACpB,CAAC,SAAS;AACV,CAAC,OAAO;AACR,CAAC,cAAc;AACf,CAAC;AACD,CAAC;AACD;AACA,IAAI,WAAW,GAAG,IAAI;AACtB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,eAAe,CAAC,KAAK,EAAE;AAChC,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,KAAK,CAAC,EAAE;AAC9D,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAChJ;AACA;AACA,SAAS,eAAe,CAAC,KAAK,EAAE;AAChC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC3D;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,QAAQ,EAAE;AAClC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,MAAM,IAAI,UAAU,CAAC,CAAC,8CAA8C,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3I,CAAC,OAAO,CAAC,kCAAkC,EAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;AACrH;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;AACnD,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;AAC7B,EAAE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC;AACvD,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,aAAa,KAAK,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACzS,CAAC;AACD,CAAC,OAAO,MAAM;AACd;AACA;AACA,IAAI,YAAY,GAAG,CAAC,kIAAkI,CAAC;AACvJ;AACA,SAAS,UAAU,CAAC,KAAK,EAAE;AAC3B,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,KAAK,CAAC,EAAE,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACrE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,OAAO,EAAE;AACjC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;AACvE,CAAC,MAAM,KAAK,GAAG;AACf,EAAE,YAAY;AACd,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACtD,EAAE,mBAAmB;AACrB,EAAE;AACF,EAAE;AACF,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,OAAO,CAAC,MAAM;AAChB,EAAE,GAAG,MAAM;AACX,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACvC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACpC,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;AAC5C,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;AACxB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AACvD,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AACD,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE;AAClD,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;AACxB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AACzD,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AACD,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE;AACpC,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;AACxB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;AACxB,CAAC;AACD,CAAC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI;AACpC,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE;AACrB,EAAE,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC;AACpE,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACtH,CAAC;AACD,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC,OAAO;AACR,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,uBAAuB,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,mCAAmC,CAAC;AAC/G,EAAE;AACF,EAAE;AACF;AACA;AACA,SAAS,QAAQ,CAAC,KAAK,EAAE;AACzB,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI;AAC5E,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,OAAO,MAAM,CAAC,KAAK,CAAC;AACpD,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE;AAC3D,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;AAC9B,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI;AAChD,CAAC;AACD,CAAC,OAAO,IAAI;AACZ;AACA;AACA,SAAS,gBAAgB,CAAC,KAAK,EAAE;AACjC,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI;AACtE,CAAC,OAAO,IAAI;AACZ;AACA;AACA,SAAS,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE;AAC3B,CAAC,IAAI,MAAM,IAAI,GAAG,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE;AACnC,CAAC,IAAI,KAAK,IAAI,GAAG,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC;AACpC;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,UAAU,CAAC,IAAI,EAAE;AAC1B,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,IAAI,IAAI,GAAG,IAAI;AAChB,CAAC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;AACzB,EAAE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AACvD,EAAE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACxC,EAAE,IAAI,SAAS,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE;AAC1C,EAAE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;AACrC,EAAE,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACxD,EAAE,MAAM,KAAK,GAAG;AAChB,GAAG,EAAE,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AAC/C,GAAG,SAAS;AACZ,GAAG,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;AAChF,GAAG,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG;AAC5C,GAAG;AACH,EAAE,IAAI,KAAK,KAAK,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK;AACzC,EAAE,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AAC7D,EAAE,IAAI,SAAS,KAAK,IAAI,EAAE,KAAK,CAAC,SAAS,GAAG,SAAS;AACrD,EAAE,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AAC9D,EAAE,IAAI,UAAU,KAAK,IAAI,EAAE,KAAK,CAAC,UAAU,GAAG,UAAU;AACxD,EAAE,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAChE,EAAE,IAAI,aAAa,KAAK,IAAI,EAAE,KAAK,CAAC,aAAa,GAAG,aAAa;AACjE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;AACpB,EAAE,IAAI,GAAG;AACT,GAAG,SAAS;AACZ,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE;AACF,EAAE;AACF;AACA;AACA,IAAI,kBAAkB,GAAG,CAAC,yKAAyK,CAAC;AACpM;AACA,SAAS,gBAAgB,CAAC,MAAM,EAAE;AAClC,CAAC,MAAM,KAAK,GAAG,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,kBAAkB;AAC/E,CAAC,OAAO;AACR,EAAE,GAAG,EAAE,CAAC,uHAAuH,EAAE,KAAK,CAAC,sDAAsD,CAAC;AAC9L,EAAE,MAAM,EAAE,KAAK,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM;AACrC,EAAE;AACF;AACA;AACA,SAAS,WAAW,CAAC,GAAG,EAAE;AAC1B,CAAC,IAAI,GAAG,KAAK,MAAM,EAAE,OAAO;AAC5B,EAAE,IAAI,EAAE,CAAC;AACT,EAAE,MAAM,EAAE,CAAC;AACX,EAAE,OAAO,EAAE,CAAC;AACZ,EAAE,MAAM,EAAE,IAAI;AACd,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,OAAO;AACR,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;AACxC,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC;AAC5C,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC;AAC9C,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACvC,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;AACtC,EAAE;AACF;AACA;AACA,SAAS,YAAY,CAAC,IAAI,EAAE;AAC5B,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;AACzB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;AACpC,EAAE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;AACzC,EAAE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE;AAClE,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,MAAM;AACT,GAAG,QAAQ;AACX,GAAG,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC;AAC7C,GAAG,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACxC,GAAG,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;AACvC,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,OAAO,MAAM;AACd;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,yBAAyB,GAAG,GAAG;AACnC;AACA,IAAI,uBAAuB,GAAG,qBAAqB;AACnD;AACA,IAAI,mBAAmB,GAAG,CAAC,yCAAyC,CAAC;AACrE;AACA,SAAS,WAAW,CAAC,GAAG,EAAE;AAC1B,CAAC,OAAO,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC7D;AACA;AACA,SAAS,gCAAgC,GAAG;AAC5C,CAAC,OAAO,CAAC,4CAA4C,EAAE,uBAAuB,CAAC,CAAC,CAAC;AACjF;AACA;AACA,SAAS,gCAAgC,GAAG;AAC5C,CAAC,OAAO,CAAC,0DAA0D,EAAE,uBAAuB,CAAC,KAAK,CAAC;AACnG;AACA;AACA,SAAS,sBAAsB,CAAC,GAAG,EAAE;AACrC,CAAC,MAAM,KAAK,GAAG,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK;AAClD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,2BAA2B,CAAC,OAAO,EAAE;AAC9C,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC;AACtC,CAAC,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,GAAG,cAAc,GAAG,EAAE;AAChD,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1D,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC,OAAO;AACR,EAAE,GAAG,EAAE,CAAC,gFAAgF,EAAE,KAAK,CAAC,4CAA4C,CAAC;AAC7I,EAAE;AACF,EAAE;AACF;AACA;AACA,SAAS,wBAAwB,CAAC,IAAI,EAAE;AACxC,CAAC,MAAM,UAAU,GAAG,EAAE;AACtB,CAAC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;AACzB,EAAE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACxC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;AACpC,EAAE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;AACzC,EAAE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;AACzC,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC;AACtC,EAAE,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;AACjJ,EAAE,UAAU,CAAC,IAAI,CAAC;AAClB,GAAG,GAAG;AACN,GAAG,MAAM;AACT,GAAG,QAAQ;AACX,GAAG,QAAQ;AACX,GAAG;AACH,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,OAAO,UAAU;AAClB;AACA;AACA,SAAS,QAAQ,CAAC,UAAU,EAAE;AAC9B,CAAC,IAAI,OAAO,GAAG,IAAI;AACnB,CAAC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,IAAI,OAAO,KAAK,IAAI,IAAI,SAAS,CAAC,GAAG,GAAG,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC,GAAG;AAC7G,CAAC,OAAO,OAAO;AACf;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,qBAAqB,CAAC,UAAU,EAAE;AAC3C,CAAC,MAAM,OAAO,GAAG,EAAE;AACnB,CAAC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE;AACrC,EAAE,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC;AACtD,EAAE,IAAI,SAAS,KAAK,IAAI,EAAE;AAC1B,EAAE,OAAO,CAAC,IAAI,CAAC;AACf,GAAG,MAAM,EAAE,SAAS,CAAC,MAAM;AAC3B,GAAG,QAAQ,EAAE,SAAS,CAAC,QAAQ;AAC/B,GAAG,QAAQ,EAAE,SAAS,CAAC,QAAQ;AAC/B,GAAG;AACH,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,OAAO,OAAO;AACf;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,4BAA4B,CAAC,QAAQ,EAAE;AAChD,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,MAAM,IAAI,UAAU,CAAC,CAAC,8CAA8C,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3I,CAAC,OAAO,CAAC,6DAA6D,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,iKAAiK,CAAC;AAC5S;AACA;AACA,SAAS,yBAAyB,CAAC,OAAO,EAAE;AAC5C,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;AAC7G,CAAC,OAAO,MAAM;AACd;AACA;AACA,SAAS,QAAQ,GAAG;AACpB,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,SAAS,CAAC;AAC3E;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,UAAU,EAAE;AACnC,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;AAC1I;AACA;AACA,SAAS,aAAa,CAAC,UAAU,EAAE;AACnC,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC;AAC9H;AACA;AACA,SAAS,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE;AACtC,CAAC,OAAO;AACR,EAAE,KAAK,EAAE;AACT,GAAG,YAAY;AACf,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvD,GAAG,mBAAmB;AACtB,GAAG;AACH,GAAG;AACH,EAAE,MAAM,EAAE;AACV,GAAG,OAAO,CAAC,MAAM;AACjB,GAAG,GAAG,MAAM;AACZ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACxC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACrC;AACA,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE;AACnC,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC3D,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC,CAAC;AAC5F,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;AACvG,CAAC,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,OAAO,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;AAC3G,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,MAAM,CAAC,QAAQ,CAAC;AAClB,EAAE,MAAM,CAAC,QAAQ,CAAC;AAClB,EAAE,GAAG,KAAK,CAAC;AACX,EAAE;AACF,CAAC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;AAClC,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE;AACpC,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;AACxB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;AACxB,CAAC;AACD,CAAC,OAAO;AACR,EAAE,GAAG,EAAE,CAAC,uJAAuJ,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,oEAAoE,CAAC;AAC1P,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;AACxE,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE;AACpC,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;AACtG,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,GAAG,WAAW;AAChB,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC;AAC7C,EAAE,MAAM,CAAC,QAAQ,CAAC;AAClB,EAAE,MAAM,CAAC,QAAQ;AACjB,EAAE;AACF,CAAC,OAAO;AACR,EAAE,GAAG,EAAE;AACP,GAAG,oBAAoB;AACvB,GAAG,CAAC,qGAAqG,EAAE,aAAa,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,eAAe,CAAC;AACvK,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACjD,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9C,GAAG,CAAC,qEAAqE,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC,6BAA6B,CAAC;AACrI,GAAG;AACH,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;AACb,EAAE;AACF,EAAE;AACF;AACA;AACA,SAAS,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE;AAC/D,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE;AACpC,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;AAClG,CAAC,OAAO;AACR,EAAE,GAAG,EAAE,CAAC;AACR;AACA;AACA;AACA,OAAO,EAAE,aAAa,CAAC,4BAA4B,CAAC,CAAC;AACrD,yBAAyB,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/C,iCAAiC,EAAE,MAAM,CAAC;AAC1C,yCAAyC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;AACvE,0GAA0G,CAAC;AAC3G,EAAE,MAAM,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC;AACtE,EAAE;AACF;AACA;AACA,SAAS,YAAY,CAAC,IAAI,EAAE;AAC5B,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE;AACzB,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACzC,EAAE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;AACtC,EAAE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;AAClC,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AAC/C,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,CAAC;AACJ,GAAG,KAAK;AACR,GAAG,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,SAAS;AAC3E,GAAG,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC;AAC7C,GAAG,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,GAAG;AAC3C,IAAI,SAAS,EAAE,GAAG,CAAC,UAAU;AAC7B,IAAI,UAAU,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,GAAG,GAAG,CAAC,YAAY,GAAG,EAAE;AAC/H,IAAI,GAAG;AACP,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,OAAO,MAAM;AACd;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,aAAa,GAAG,kBAAkB;AACtC;AACA,IAAI,gBAAgB,GAAG,YAAY;AACnC;AACA,IAAI,iBAAiB,GAAG,gBAAgB;AACxC;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,gBAAgB,GAAG;AAClC,CAAC,MAAM,MAAM,GAAG,MAAM,OAAO,aAAa,CAAC;AAC3C,CAAC,IAAI,OAAO,MAAM,CAAC,cAAc,EAAE,MAAM,KAAK,UAAU,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,qCAAqC,CAAC,CAAC;AAClI,CAAC,OAAO,MAAM;AACd;AACA,IAAI,eAAe,mBAAmB,IAAI,GAAG,CAAC;AAC9C,CAAC,GAAG;AACJ,CAAC,OAAO;AACR,CAAC,IAAI;AACL,CAAC;AACD,CAAC,CAAC;AACF;AACA,SAAS,UAAU,CAAC,KAAK,EAAE;AAC3B,CAAC,OAAO,KAAK,KAAK,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC3E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,GAAG,EAAE;AAC5B,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;AACxD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,oBAAoB,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,GAAG,OAAO,EAAE,EAAE;AAClF,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,EAAE;AACrD,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,QAAQ,KAAK,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC,GAAG,QAAQ,KAAK,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACxO,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE;AACvD,CAAC,OAAO;AACR,EAAE,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC;AAC/G,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB;AAClF,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE;AACxC,CAAC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;AACvE,CAAC,IAAI,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,gGAAgG,CAAC;AAC5L,CAAC,OAAO,OAAO;AACf;AACA;AACA,SAAS,WAAW,CAAC,KAAK,EAAE;AAC5B,CAAC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;AACvE,CAAC,OAAO,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC;AAC5D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,UAAU,GAAG,MAAM,UAAU,CAAC;AAClC;AACA,CAAC,IAAI;AACL,CAAC,WAAW,GAAG,IAAI;AACnB,CAAC,UAAU,GAAG,KAAK;AACnB,CAAC,MAAM,GAAG,IAAI;AACd,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE;AAC3B,CAAC,WAAW,CAAC,IAAI,EAAE;AACnB,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI;AAClB,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,aAAa,IAAI,CAAC,OAAO,EAAE;AAC5B,EAAE,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;AAC9C,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,gBAAgB;AAC/C,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACvF,EAAE,IAAI;AACN,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACnC,GAAG,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE;AAC9B,GAAG,KAAK,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,EAAE,IAAI;AAC5C,IAAI,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;AACzF,IAAI,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;AAC3E,IAAI,OAAO,CAAC,WAAW,GAAG,UAAU;AACpC,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI;AAC7B,IAAI,MAAM,OAAO,CAAC,mBAAmB,EAAE;AACvC,IAAI;AACJ,GAAG,CAAC,CAAC,OAAO,KAAK,EAAE;AACnB,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK;AACxD,IAAI,MAAM,UAAU,CAAC,GAAG,CAAC;AACzB,GAAG;AACH,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE;AAClB,GAAG,OAAO,CAAC,UAAU,GAAG,KAAK;AAC7B,GAAG,OAAO,CAAC,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;AAC1D,EAAE;AACF,EAAE,OAAO,OAAO;AAChB,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE;AACxC,EAAE,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC;AACtC,EAAE,OAAO,CAAC,UAAU,GAAG,KAAK;AAC5B,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK;AACxB,EAAE,OAAO,OAAO;AAChB,CAAC;AACD;AACA,CAAC,IAAI,SAAS,GAAG;AACjB,EAAE,OAAO,IAAI,CAAC,UAAU;AACxB,CAAC;AACD;AACA,CAAC,IAAI,KAAK,GAAG;AACb,EAAE,OAAO,IAAI,CAAC,MAAM;AACpB,CAAC;AACD;AACA,CAAC,QAAQ,CAAC,IAAI,EAAE;AAChB,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;AAC3C,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,MAAM,EAAE,MAAM,MAAM,CAAC;AACrD,EAAE,OAAO,IAAI;AACb,CAAC;AACD;AACA,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;AAC9B,EAAE,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,OAAO,QAAQ;AAChD,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY;AACnC,GAAG,IAAI;AACP,IAAI,OAAO,MAAM,IAAI,EAAE;AACvB,GAAG,CAAC,CAAC,OAAO,KAAK,EAAE;AACnB,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;AACxE,IAAI,OAAO,QAAQ;AACnB,GAAG;AACH,EAAE,CAAC,CAAC;AACJ,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,MAAM,mBAAmB,GAAG;AAC7B,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY;AACxC,GAAG,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;AACtC,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE;AAC5B,GAAG,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;AACxG,GAAG,IAAI,OAAO,KAAK,IAAI,EAAE;AACzB,GAAG,MAAM,SAAS,GAAG,sBAAsB,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,gCAAgC,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;AACpI,GAAG,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,OAAO,EAAE;AACnD,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,2BAA2B,CAAC;AACvD,IAAI,MAAM,EAAE,OAAO;AACnB,IAAI,QAAQ,EAAE,SAAS;AACvB,IAAI,KAAK,EAAE;AACX,IAAI,CAAC;AACL,GAAG,MAAM,UAAU,GAAG,wBAAwB,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;AAC7G,GAAG,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC;AACpD,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,GAAG,EAAE;AAC7D,IAAI,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,GAAG,CAAC;AACnD,IAAI,MAAM,UAAU,CAAC,GAAG,CAAC,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAC;AACtG,GAAG;AACH,GAAG,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC;AAC3E,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,gCAAgC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC;AACzF,EAAE,CAAC,CAAC;AACJ,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;AACxC,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,CAAC;AACnC,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,YAAY;AACpC,GAAG,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;AACtC,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE,OAAO,CAAC;AACpC,GAAG,IAAI,OAAO,GAAG,CAAC;AAClB,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,GAAG,EAAE;AAC5D,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,GAAG,CAAC;AAClD,IAAI,MAAM,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AAChG,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM;AAC3B,GAAG;AACH,GAAG,OAAO,OAAO;AACjB,EAAE,CAAC,CAAC;AACJ,CAAC;AACD;AACA,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE;AACrB,EAAE,MAAM,KAAK,GAAG;AAChB,GAAG,MAAM,EAAE,EAAE;AACb,GAAG,IAAI,EAAE;AACT,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY;AACxC,GAAG,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;AACtC,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE,OAAO,KAAK;AACxC,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC;AAClD,GAAG,OAAO,UAAU,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;AACnF,EAAE,CAAC,CAAC;AACJ,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE;AAC5B,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY;AACrC,GAAG,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;AACtC,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE,OAAO,EAAE;AACrC,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC;AACpD,GAAG,OAAO,YAAY,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;AACrF,EAAE,CAAC,CAAC;AACJ,CAAC;AACD;AACA,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,YAAY;AACtD,GAAG,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;AACtC,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE,OAAO,WAAW,CAAC,MAAM,CAAC;AACtD,GAAG,OAAO,WAAW,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9F,EAAE,CAAC,CAAC;AACJ,CAAC;AACD;AACA,CAAC,MAAM,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE;AAC7B,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY;AACrC,GAAG,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;AACtC,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE,OAAO,EAAE;AACrC,GAAG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC;AACnD,GAAG,OAAO,YAAY,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;AACrF,EAAE,CAAC,CAAC;AACJ,CAAC;AACD;AACA,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE;AACpC,EAAE,IAAI,KAAK,GAAG,IAAI;AAClB,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI;AAC3B,GAAG,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI;AACnC,EAAE,CAAC,CAAC,MAAM;AACV,GAAG,KAAK,GAAG,IAAI;AACf,EAAE;AACF,EAAE,OAAO;AACT,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI;AAClB,GAAG,SAAS,EAAE,IAAI,CAAC,UAAU;AAC7B,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM;AACrB,GAAG,KAAK;AACR,GAAG;AACH,GAAG;AACH,CAAC;AACD;AACA,CAAC,MAAM,KAAK,GAAG;AACf,EAAE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;AACrC,EAAE,IAAI,CAAC,WAAW,GAAG,IAAI;AACzB,EAAE,IAAI,CAAC,UAAU,GAAG,KAAK;AACzB,EAAE,IAAI,UAAU,EAAE,SAAS,KAAK,MAAM,EAAE;AACxC,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY;AAClC,GAAG,UAAU,CAAC,SAAS,IAAI;AAC3B,EAAE,CAAC,CAAC;AACJ,CAAC;AACD,CAAC;AACD;AACA,IAAI,cAAc,mBAAmB,IAAI,GAAG,EAAE;AAC9C,IAAI,cAAc,GAAG,IAAI,cAAc,EAAE;AACzC;AACA,eAAe,UAAU,CAAC,GAAG,EAAE,SAAS,GAAG,EAAE,EAAE,IAAI,EAAE;AACrD,CAAC,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC;AACzC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;AAChE,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,EAAE,IAAI;AAC7C,EAAE,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC;AACjE,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE;AACjB,EAAE,OAAO,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,+BAA+B,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxI,CAAC;AACD,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;AACrB,CAAC,IAAI,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;AACvC,CAAC,IAAI,CAAC,OAAO,EAAE;AACf,EAAE,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC;AAC5B,GAAG,IAAI;AACP,GAAG,GAAqB,EAAE;AAC1B,GAAG,CAAC;AACJ,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;AACnC,CAAC;AACD,CAAC,OAAO,OAAO;AACf;;"}

package/build/server/chunks/chunks/{aws.js-DkPqAybc.js → env2.js-C5BgBJDY.js}

@@ -1,6 +1,9 @@
+import { b as private_env } from './shared-server.js-Dn5XheXH.js';
 import { j as json } from './utils.js-BIlHjgGW.js';
 import { CloudWatchLogsClient } from '@aws-sdk/client-cloudwatch-logs';
 import { STSClient } from '@aws-sdk/client-sts';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
 
 //#region src/lib/server/api.ts
 /**
@@ -82,7 +85,7 @@ function hasAmbientCredentials(env) {
 	return CREDENTIAL_ENV_KEYS.some((key) => normalize(env[key]) !== null);
 }
 /**
-* Resolves the region, endpoint, local flag and credential source for CloudWatch Logs.
+* Resolves the region, endpoint, local flag and credential source for an AWS service.
 *
 * Region precedence: an explicit region parameter, then `AWS_REGION`, then
 * `AWS_DEFAULT_REGION`. When none of them is set the result is `null`, which
@@ -93,8 +96,8 @@ function hasAmbientCredentials(env) {
 * credential source is configured at all, in which case the emulator's
 * throwaway keys are used.
 */
-function resolveAwsConfig(env, regionParam) {
-	const endpoint = normalize(env.AWS_ENDPOINT_URL_LOGS) ?? normalize(env.AWS_ENDPOINT_URL);
+function resolveAwsConfig(env, regionParam, service = "logs") {
+	const endpoint = normalize(service === "sts" ? env.AWS_ENDPOINT_URL_STS : env.AWS_ENDPOINT_URL_LOGS) ?? normalize(env.AWS_ENDPOINT_URL);
 	const region = normalize(regionParam) ?? normalize(env.AWS_REGION) ?? normalize(env.AWS_DEFAULT_REGION);
 	const local = endpoint !== null && isLocalEndpoint(endpoint);
 	return {
@@ -246,7 +249,7 @@ function describeAwsError(error) {
 	};
 }
 /**
-* Creates an STS client with the same resolved settings as the Logs client.
+* Creates an STS client with settings resolved for the STS service.
 *
 * Used for `GetCallerIdentity`, which answers the question the UI cannot: whose
 * credentials are these, if they work at all.
@@ -260,6 +263,60 @@ function createStsClient(config) {
 	if (config.credentials === "emulator-default") options.credentials = EMULATOR_CREDENTIALS;
 	return new STSClient(options);
 }
+//#endregion
+//#region src/lib/server/env.ts
+/** Name of the git-ignored file that holds local (floci) connection settings. */
+var LOCAL_ENV_FILE = ".env.local";
+var localEnvChecked = false;
+/** Reads `process.env` through `globalThis`, so this file needs no `@types/node`. */
+function processEnv() {
+	return globalThis.process?.env ?? {};
+}
+/**
+* Loads a dotenv file into `process.env`.
+*
+* Existing environment variables win, matching `node --env-file` semantics.
+* Returns true only when a file was found and parsed.
+*/
+function loadEnvFile(path) {
+	const runtime = globalThis;
+	const loader = runtime.process?.loadEnvFile;
+	if (typeof loader !== "function" || !existsSync(path)) return false;
+	try {
+		loader.call(runtime.process, path);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Loads `<cwd>/.env.local` once.
+*
+* SvelteKit exposes `.env` values through `$env/dynamic/private`, but the AWS
+* SDK's credential and region providers read `process.env` directly, so the
+* file has to be applied to the process too. Run `pnpm floci:up` to create it.
+*/
+function ensureLocalEnv(cwd) {
+	if (localEnvChecked) return false;
+	localEnvChecked = true;
+	const base = globalThis.process?.cwd?.();
+	if (base === void 0) return false;
+	return loadEnvFile(join(base, LOCAL_ENV_FILE));
+}
+/**
+* Reads the effective server environment.
+*
+* `$env/dynamic/private` does resolve under vitest, but it is a snapshot taken
+* when the module is first evaluated, so the live `process.env` map is merged
+* last and wins.
+*/
+function readEnv() {
+	ensureLocalEnv();
+	return {
+		...private_env,
+		...processEnv()
+	};
+}
 
-export { REGION_PARAM_HINT as R, apiError as a, resolveEffectiveRegion as b, createLogsClient as c, describeAwsError as d, createStsClient as e, parseRegionParam as p, resolveAwsConfig as r };
-//# sourceMappingURL=aws.js-DkPqAybc.js.map
+export { REGION_PARAM_HINT as R, apiError as a, readEnv as b, createStsClient as c, createLogsClient as d, resolveEffectiveRegion as e, describeAwsError as f, parseRegionParam as p, resolveAwsConfig as r };
+//# sourceMappingURL=env2.js-C5BgBJDY.js.map

package/build/server/chunks/chunks/env2.js-C5BgBJDY.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env2.js-C5BgBJDY.js","sources":["../../../../.svelte-kit/output/server/chunks/env2.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { CloudWatchLogsClient } from \"@aws-sdk/client-cloudwatch-logs\";\nimport { STSClient } from \"@aws-sdk/client-sts\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\n//#region src/lib/server/api.ts\n/**\n* Builds a JSON error response that never leaks stack traces.\n*\n* Use 400 for bad input, 502 for upstream CloudWatch Logs failures and 499\n* when the client aborted the request.\n*/\nfunction apiError(status, message, code, details) {\n\tconst body = { error: message };\n\tif (code !== void 0) body.code = code;\n\tif (details !== void 0 && details.length > 0) body.details = details;\n\treturn json(body, { status });\n}\n//#endregion\n//#region src/lib/server/aws.ts\n/**\n* Throwaway credentials for local emulators only.\n*\n* floci and LocalStack verify the request signature but accept any non-empty\n* key pair, so these keys make a local endpoint work out of the box.\n*/\nvar EMULATOR_CREDENTIALS = {\n\taccessKeyId: \"test\",\n\tsecretAccessKey: \"test\"\n};\n/** Environment variables that indicate that ambient credentials are configured. */\nvar CREDENTIAL_ENV_KEYS = [\n\t\"AWS_ACCESS_KEY_ID\",\n\t\"AWS_PROFILE\",\n\t\"AWS_SHARED_CREDENTIALS_FILE\",\n\t\"AWS_CONFIG_FILE\",\n\t\"AWS_WEB_IDENTITY_TOKEN_FILE\",\n\t\"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\",\n\t\"AWS_CONTAINER_CREDENTIALS_FULL_URI\",\n\t\"AWS_ROLE_ARN\"\n];\n/**\n* Display-only region used when nothing else can be resolved. It is never sent\n* to the SDK.\n*/\nvar FALLBACK_REGION = \"us-east-1\";\n/** User-facing hint for a malformed `region` query parameter. */\nvar REGION_PARAM_HINT = \"Invalid region: expected a region code such as us-east-1 or us-west-2-lax-1a\";\n/** Region codes and local-zone codes only: lowercase letters, digits and dashes. */\nvar REGION_PATTERN = /^[a-z0-9-]{1,64}$/;\n/** Hosts that are always considered local, including the IPv6 loopback form. */\nvar LOCAL_HOSTS = /* @__PURE__ */ new Set([\n\t\"localhost\",\n\t\"127.0.0.1\",\n\t\"0.0.0.0\",\n\t\"::1\",\n\t\"[::1]\"\n]);\n/** Substrings that identify a known local AWS emulator. */\nvar LOCAL_HINTS = [\"floci\", \"localstack\"];\nvar MAX_DETAIL_LENGTH = 300;\n/** Trims a value and treats blank strings as absent. */\nfunction normalize(value) {\n\tif (typeof value !== \"string\") return null;\n\tconst trimmed = value.trim();\n\treturn trimmed.length > 0 ? trimmed : null;\n}\n/** Extracts a lowercase host from an endpoint, tolerating missing schemes. */\nfunction hostOf(endpoint) {\n\ttry {\n\t\treturn new URL(endpoint).hostname.toLowerCase();\n\t} catch {\n\t\treturn (/^[a-z][a-z0-9+.-]*:\\/\\/([^/?#]+)/i.exec(endpoint)?.[1] ?? endpoint).toLowerCase();\n\t}\n}\n/** True when the endpoint targets a local emulator such as floci or LocalStack. */\nfunction isLocalEndpoint(endpoint) {\n\tconst host = hostOf(endpoint);\n\tif (LOCAL_HOSTS.has(host)) return true;\n\treturn LOCAL_HINTS.some((hint) => host.includes(hint));\n}\n/** True when any ambient credential source is configured (non-blank) in the environment. */\nfunction hasAmbientCredentials(env) {\n\treturn CREDENTIAL_ENV_KEYS.some((key) => normalize(env[key]) !== null);\n}\n/**\n* Resolves the region, endpoint, local flag and credential source for an AWS service.\n*\n* Region precedence: an explicit region parameter, then `AWS_REGION`, then\n* `AWS_DEFAULT_REGION`. When none of them is set the result is `null`, which\n* lets the SDK resolve the region from the ambient AWS configuration (profile,\n* SSO, instance metadata) instead of this app inventing one.\n*\n* Credentials stay `ambient` unless the endpoint is local and no ambient\n* credential source is configured at all, in which case the emulator's\n* throwaway keys are used.\n*/\nfunction resolveAwsConfig(env, regionParam, service = \"logs\") {\n\tconst endpoint = normalize(service === \"sts\" ? env.AWS_ENDPOINT_URL_STS : env.AWS_ENDPOINT_URL_LOGS) ?? normalize(env.AWS_ENDPOINT_URL);\n\tconst region = normalize(regionParam) ?? normalize(env.AWS_REGION) ?? normalize(env.AWS_DEFAULT_REGION);\n\tconst local = endpoint !== null && isLocalEndpoint(endpoint);\n\treturn {\n\t\tregion,\n\t\tendpoint,\n\t\tlocal,\n\t\tcredentials: local && !hasAmbientCredentials(env) ? \"emulator-default\" : \"ambient\"\n\t};\n}\n/**\n* Validates the optional `region` query parameter.\n*\n* A blank value means \"not supplied\" and is accepted as `null`. Any other\n* value must look like a region code or a local-zone code.\n*/\nfunction parseRegionParam(value) {\n\tconst trimmed = typeof value === \"string\" ? value.trim() : \"\";\n\tif (trimmed.length === 0) return {\n\t\tok: true,\n\t\tregion: null\n\t};\n\tif (!REGION_PATTERN.test(trimmed)) return {\n\t\tok: false,\n\t\tregion: null\n\t};\n\treturn {\n\t\tok: true,\n\t\tregion: trimmed\n\t};\n}\n/**\n* Creates a CloudWatch Logs client.\n*\n* Credentials stay ambient unless {@link AwsConfig.credentials} asks for the\n* emulator defaults: this never reads key material from the environment and\n* never sets `credentials` for a real AWS endpoint, so the SDK default provider\n* chain is used unchanged. The region is only set when the caller asked for\n* one, so the SDK can otherwise resolve it from `AWS_REGION`, the shared\n* profile or SSO.\n*/\nfunction createLogsClient(config) {\n\tconst options = { maxAttempts: 3 };\n\tif (config.region !== null) options.region = config.region;\n\tif (config.endpoint !== null) options.endpoint = config.endpoint;\n\tif (config.credentials === \"emulator-default\") options.credentials = EMULATOR_CREDENTIALS;\n\treturn new CloudWatchLogsClient(options);\n}\nasync function resolveEffectiveRegion(client, config) {\n\tif (config.region !== null) return config.region;\n\ttry {\n\t\tconst region = await client.config.region();\n\t\treturn typeof region === \"string\" && region.trim().length > 0 ? region.trim() : FALLBACK_REGION;\n\t} catch {\n\t\treturn FALLBACK_REGION;\n\t}\n}\nvar ERROR_MESSAGES = {\n\taborted: \"The CloudWatch Logs request was aborted\",\n\t\"missing-credentials\": \"AWS credentials are missing or expired\",\n\t\"missing-region\": \"No AWS region is configured. Set AWS_REGION or add a region to your AWS profile.\",\n\t\"access-denied\": \"Access denied by CloudWatch Logs\",\n\t\"not-found\": \"The CloudWatch Logs resource was not found\",\n\tunreachable: \"The CloudWatch Logs endpoint is unreachable\",\n\tthrottled: \"CloudWatch Logs is throttling requests\",\n\tunknown: \"CloudWatch Logs request failed\"\n};\n/** Codes whose message is user guidance and must not be amended with SDK text. */\nvar FIXED_MESSAGE_CODES = /* @__PURE__ */ new Set([\"missing-region\"]);\n/** Collects name, message, status and a lowercase search haystack from an error chain. */\nfunction readErrorFacts(error) {\n\tconst parts = [];\n\tlet name = \"\";\n\tlet message = \"\";\n\tlet code = \"\";\n\tlet status = null;\n\tlet current = error;\n\tfor (let depth = 0; depth < 4 && current !== null && current !== void 0; depth += 1) {\n\t\tif (current instanceof Error) {\n\t\t\tif (name === \"\") name = current.name;\n\t\t\tif (message === \"\") message = current.message;\n\t\t\tparts.push(current.name, current.message);\n\t\t} else if (typeof current === \"string\") {\n\t\t\tif (message === \"\") message = current;\n\t\t\tparts.push(current);\n\t\t} else if (typeof current === \"object\") {\n\t\t\tconst like = current;\n\t\t\tif (name === \"\" && typeof like.name === \"string\") name = like.name;\n\t\t\tif (message === \"\" && typeof like.message === \"string\") message = like.message;\n\t\t\tif (code === \"\" && typeof like.code === \"string\") code = like.code;\n\t\t\tif (status === null && typeof like.$metadata?.httpStatusCode === \"number\") status = like.$metadata.httpStatusCode;\n\t\t\tif (typeof like.name === \"string\") parts.push(like.name);\n\t\t\tif (typeof like.message === \"string\") parts.push(like.message);\n\t\t\tif (typeof like.code === \"string\") parts.push(like.code);\n\t\t\tcurrent = like.cause;\n\t\t\tcontinue;\n\t\t}\n\t\tbreak;\n\t}\n\treturn {\n\t\tname,\n\t\tmessage: message.trim(),\n\t\tcode,\n\t\tstatus,\n\t\thaystack: parts.join(\" \").toLowerCase()\n\t};\n}\n/** True when the error says that no AWS region could be resolved. */\nfunction isRegionFailure(loweredName, haystack) {\n\treturn loweredName.includes(\"regionprovider\") || loweredName.includes(\"regionnotset\") || loweredName.includes(\"missingregion\") || haystack.includes(\"region is missing\") || haystack.includes(\"region is not configured\") || haystack.includes(\"region is required\") || haystack.includes(\"missing region\") || haystack.includes(\"no region is configured\") || haystack.includes(\"region not set\") || haystack.includes(\"region must be specified\") || haystack.includes(\"region not accepted\") || haystack.includes(\"is not a valid hostname component\");\n}\n/** Maps a thrown value to a machine-readable error code. */\nfunction classify(facts) {\n\tconst { name, code, status, haystack } = facts;\n\tconst loweredName = name.toLowerCase();\n\tif (loweredName === \"aborterror\" || code === \"ABORT_ERR\" || code === \"ERR_CANCELED\") return \"aborted\";\n\tif (loweredName.includes(\"credentialsprovider\") || loweredName.includes(\"expiredtoken\") || haystack.includes(\"could not load credentials\") || haystack.includes(\"credential is expired\") || haystack.includes(\"token has expired\") || haystack.includes(\"resolve credentials\")) return \"missing-credentials\";\n\tif (isRegionFailure(loweredName, haystack)) return \"missing-region\";\n\tif (loweredName.includes(\"accessdenied\") || loweredName.includes(\"invalidclienttokenid\") || loweredName.includes(\"invalidsignature\") || loweredName.includes(\"unrecognizedclient\") || loweredName.includes(\"unauthorized\") || loweredName.includes(\"signaturedoesnotmatch\") || status === 401 || status === 403) return \"access-denied\";\n\tif (loweredName.includes(\"resourcenotfound\") || loweredName.includes(\"loggroupnotfound\") || haystack.includes(\"does not exist\") || status === 404) return \"not-found\";\n\tif (loweredName.includes(\"throttl\") || loweredName.includes(\"toomanyrequests\") || loweredName.includes(\"requestlimitexceeded\") || status === 429) return \"throttled\";\n\tif ([\n\t\t\"econnrefused\",\n\t\t\"econnreset\",\n\t\t\"enotfound\",\n\t\t\"eaiagain\",\n\t\t\"etimedout\",\n\t\t\"ehostunreach\",\n\t\t\"enetunreach\"\n\t].some((token) => haystack.includes(token)) || haystack.includes(\"connection refused\") || haystack.includes(\"socket hang up\") || haystack.includes(\"fetch failed\") || haystack.includes(\"getaddrinfo\") || haystack.includes(\"network error\") || haystack.includes(\"timeout\") || haystack.includes(\"unreachable\")) return \"unreachable\";\n\treturn \"unknown\";\n}\n/**\n* Turns a thrown SDK or network error into a short human message plus a\n* machine-readable code such as `missing-credentials`, `missing-region` or\n* `unreachable`.\n*/\nfunction describeAwsError(error) {\n\tconst facts = readErrorFacts(error);\n\tconst code = classify(facts);\n\tconst base = ERROR_MESSAGES[code] ?? ERROR_MESSAGES.unknown;\n\tif (FIXED_MESSAGE_CODES.has(code)) return {\n\t\tmessage: base,\n\t\tcode\n\t};\n\tconst detail = facts.message.length > MAX_DETAIL_LENGTH ? `${facts.message.slice(0, MAX_DETAIL_LENGTH)}...` : facts.message;\n\treturn {\n\t\tmessage: detail.length > 0 && !base.toLowerCase().includes(detail.toLowerCase()) ? `${base}: ${detail}` : base,\n\t\tcode\n\t};\n}\n/**\n* Creates an STS client with settings resolved for the STS service.\n*\n* Used for `GetCallerIdentity`, which answers the question the UI cannot: whose\n* credentials are these, if they work at all.\n*/\nfunction createStsClient(config) {\n\tconst options = {\n\t\tregion: config.region ?? void 0,\n\t\tmaxAttempts: 2\n\t};\n\tif (config.endpoint !== null) options.endpoint = config.endpoint;\n\tif (config.credentials === \"emulator-default\") options.credentials = EMULATOR_CREDENTIALS;\n\treturn new STSClient(options);\n}\n//#endregion\n//#region src/lib/server/env.ts\n/** Name of the git-ignored file that holds local (floci) connection settings. */\nvar LOCAL_ENV_FILE = \".env.local\";\nvar localEnvChecked = false;\n/** Reads `process.env` through `globalThis`, so this file needs no `@types/node`. */\nfunction processEnv() {\n\treturn globalThis.process?.env ?? {};\n}\n/**\n* Loads a dotenv file into `process.env`.\n*\n* Existing environment variables win, matching `node --env-file` semantics.\n* Returns true only when a file was found and parsed.\n*/\nfunction loadEnvFile(path) {\n\tconst runtime = globalThis;\n\tconst loader = runtime.process?.loadEnvFile;\n\tif (typeof loader !== \"function\" || !existsSync(path)) return false;\n\ttry {\n\t\tloader.call(runtime.process, path);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n/**\n* Loads `<cwd>/.env.local` once.\n*\n* SvelteKit exposes `.env` values through `$env/dynamic/private`, but the AWS\n* SDK's credential and region providers read `process.env` directly, so the\n* file has to be applied to the process too. Run `pnpm floci:up` to create it.\n*/\nfunction ensureLocalEnv(cwd) {\n\tif (localEnvChecked) return false;\n\tlocalEnvChecked = true;\n\tconst base = cwd ?? globalThis.process?.cwd?.();\n\tif (base === void 0) return false;\n\treturn loadEnvFile(join(base, LOCAL_ENV_FILE));\n}\n/**\n* Reads the effective server environment.\n*\n* `$env/dynamic/private` does resolve under vitest, but it is a snapshot taken\n* when the module is first evaluated, so the live `process.env` map is merged\n* last and wins.\n*/\nfunction readEnv() {\n\tensureLocalEnv();\n\treturn {\n\t\t...private_env,\n\t\t...processEnv()\n\t};\n}\n//#endregion\nexport { createStsClient as a, resolveAwsConfig as c, createLogsClient as i, resolveEffectiveRegion as l, FALLBACK_REGION as n, describeAwsError as o, REGION_PARAM_HINT as r, parseRegionParam as s, readEnv as t, apiError as u };\n"],"names":[],"mappings":";;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;AAClD,CAAC,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE;AAChC,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI;AAEtC,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;AAC9B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,oBAAoB,GAAG;AAC3B,CAAC,WAAW,EAAE,MAAM;AACpB,CAAC,eAAe,EAAE;AAClB,CAAC;AACD;AACA,IAAI,mBAAmB,GAAG;AAC1B,CAAC,mBAAmB;AACpB,CAAC,aAAa;AACd,CAAC,6BAA6B;AAC9B,CAAC,iBAAiB;AAClB,CAAC,6BAA6B;AAC9B,CAAC,wCAAwC;AACzC,CAAC,oCAAoC;AACrC,CAAC;AACD,CAAC;AACD;AACA;AACA;AACA;AACA,IAAI,eAAe,GAAG,WAAW;AACjC;AACG,IAAC,iBAAiB,GAAG;AACxB;AACA,IAAI,cAAc,GAAG,mBAAmB;AACxC;AACA,IAAI,WAAW,mBAAmB,IAAI,GAAG,CAAC;AAC1C,CAAC,WAAW;AACZ,CAAC,WAAW;AACZ,CAAC,SAAS;AACV,CAAC,KAAK;AACN,CAAC;AACD,CAAC,CAAC;AACF;AACA,IAAI,WAAW,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC;AACzC,IAAI,iBAAiB,GAAG,GAAG;AAC3B;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,OAAO,IAAI;AAC3C,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE;AAC7B,CAAC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,GAAG,IAAI;AAC3C;AACA;AACA,SAAS,MAAM,CAAC,QAAQ,EAAE;AAC1B,CAAC,IAAI;AACL,EAAE,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE;AACjD,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,CAAC,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,EAAE,WAAW,EAAE;AAC5F,CAAC;AACD;AACA;AACA,SAAS,eAAe,CAAC,QAAQ,EAAE;AACnC,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;AAC9B,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI;AACvC,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvD;AACA;AACA,SAAS,qBAAqB,CAAC,GAAG,EAAE;AACpC,CAAC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;AACvE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,EAAE;AAC9D,CAAC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,KAAK,KAAK,GAAG,GAAG,CAAC,oBAAoB,GAAG,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC;AACxI,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACxG,CAAC,MAAM,KAAK,GAAG,QAAQ,KAAK,IAAI,IAAI,eAAe,CAAC,QAAQ,CAAC;AAC7D,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE,QAAQ;AACV,EAAE,KAAK;AACP,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,kBAAkB,GAAG;AAC3E,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,KAAK,EAAE;AACjC,CAAC,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE;AAC9D,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO;AAClC,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO;AAC3C,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,MAAM,EAAE;AACV,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,MAAM,EAAE;AAClC,CAAC,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE;AACnC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;AAC3D,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ;AACjE,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,kBAAkB,EAAE,OAAO,CAAC,WAAW,GAAG,oBAAoB;AAC1F,CAAC,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC;AACzC;AACA,eAAe,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE;AACtD,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,OAAO,MAAM,CAAC,MAAM;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;AAC7C,EAAE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,eAAe;AACjG,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,eAAe;AACxB,CAAC;AACD;AACA,IAAI,cAAc,GAAG;AACrB,CAAC,OAAO,EAAE,yCAAyC;AACnD,CAAC,qBAAqB,EAAE,wCAAwC;AAChE,CAAC,gBAAgB,EAAE,kFAAkF;AACrG,CAAC,eAAe,EAAE,kCAAkC;AACpD,CAAC,WAAW,EAAE,4CAA4C;AAC1D,CAAC,WAAW,EAAE,6CAA6C;AAC3D,CAAC,SAAS,EAAE,wCAAwC;AACpD,CAAC,OAAO,EAAE;AACV,CAAC;AACD;AACA,IAAI,mBAAmB,mBAAmB,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACrE;AACA,SAAS,cAAc,CAAC,KAAK,EAAE;AAC/B,CAAC,MAAM,KAAK,GAAG,EAAE;AACjB,CAAC,IAAI,IAAI,GAAG,EAAE;AACd,CAAC,IAAI,OAAO,GAAG,EAAE;AACjB,CAAC,IAAI,IAAI,GAAG,EAAE;AACd,CAAC,IAAI,MAAM,GAAG,IAAI;AAClB,CAAC,IAAI,OAAO,GAAG,KAAK;AACpB,CAAC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE;AACtF,EAAE,IAAI,OAAO,YAAY,KAAK,EAAE;AAChC,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI;AACvC,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO;AAChD,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC;AAC5C,EAAE,CAAC,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;AAC1C,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE,OAAO,GAAG,OAAO;AACxC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;AACtB,EAAE,CAAC,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;AAC1C,GAAG,MAAM,IAAI,GAAG,OAAO;AACvB,GAAG,IAAI,IAAI,KAAK,EAAE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI;AACrE,GAAG,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC,OAAO;AACjF,GAAG,IAAI,IAAI,KAAK,EAAE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI;AACrE,GAAG,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,cAAc,KAAK,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc;AACpH,GAAG,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC3D,GAAG,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;AACjE,GAAG,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC3D,GAAG,OAAO,GAAG,IAAI,CAAC,KAAK;AACvB,GAAG;AACH,EAAE;AACF,EAAE;AACF,CAAC;AACD,CAAC,OAAO;AACR,EAAE,IAAI;AACN,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;AACzB,EAAE,IAAI;AACN,EAAE,MAAM;AACR,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW;AACvC,EAAE;AACF;AACA;AACA,SAAS,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE;AAChD,CAAC,OAAO,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mCAAmC,CAAC;AAC1hB;AACA;AACA,SAAS,QAAQ,CAAC,KAAK,EAAE;AACzB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK;AAC/C,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE;AACvC,CAAC,IAAI,WAAW,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,cAAc,EAAE,OAAO,SAAS;AACtG,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,qBAAqB;AAC7S,CAAC,IAAI,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,gBAAgB;AACpE,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,OAAO,eAAe;AACxU,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,MAAM,KAAK,GAAG,EAAE,OAAO,WAAW;AACtK,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,MAAM,KAAK,GAAG,EAAE,OAAO,WAAW;AACrK,CAAC,IAAI;AACL,EAAE,cAAc;AAChB,EAAE,YAAY;AACd,EAAE,WAAW;AACb,EAAE,UAAU;AACZ,EAAE,WAAW;AACb,EAAE,cAAc;AAChB,EAAE;AACF,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,aAAa;AACvU,CAAC,OAAO,SAAS;AACjB;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,KAAK,EAAE;AACjC,CAAC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;AACpC,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC;AAC7B,CAAC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,OAAO;AAC5D,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO;AAC3C,EAAE,OAAO,EAAE,IAAI;AACf,EAAE;AACF,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,iBAAiB,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO;AAC5H,CAAC,OAAO;AACR,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI;AAChH,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,CAAC,MAAM,OAAO,GAAG;AACjB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;AACjC,EAAE,WAAW,EAAE;AACf,EAAE;AACF,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ;AACjE,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,kBAAkB,EAAE,OAAO,CAAC,WAAW,GAAG,oBAAoB;AAC1F,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC;AAC9B;AACA;AACA;AACA;AACA,IAAI,cAAc,GAAG,YAAY;AACjC,IAAI,eAAe,GAAG,KAAK;AAC3B;AACA,SAAS,UAAU,GAAG;AACtB,CAAC,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE;AACrC;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW,CAAC,IAAI,EAAE;AAC3B,CAAC,MAAM,OAAO,GAAG,UAAU;AAC3B,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW;AAC5C,CAAC,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACpE,CAAC,IAAI;AACL,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;AACpC,EAAE,OAAO,IAAI;AACb,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,KAAK;AACd,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,IAAI,eAAe,EAAE,OAAO,KAAK;AAClC,CAAC,eAAe,GAAG,IAAI;AACvB,CAAC,MAAM,IAAI,GAAU,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI;AAChD,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE,OAAO,KAAK;AAClC,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AAC/C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,OAAO,GAAG;AACnB,CAAC,cAAc,EAAE;AACjB,CAAC,OAAO;AACR,EAAE,GAAG,WAAW;AAChB,EAAE,GAAG,UAAU;AACf,EAAE;AACF;;"}

package/build/server/chunks/chunks/identity.js-NmGXxBz3.js

@@ -0,0 +1,22 @@
+import { GetCallerIdentityCommand } from '@aws-sdk/client-sts';
+
+//#region src/lib/server/identity.ts
+/**
+* `sts:GetCallerIdentity` for the resolved configuration.
+*
+* This is the cheapest honest answer to "do these credentials work, and whose
+* are they?": one call, no permissions beyond the implicit
+* `sts:GetCallerIdentity`, and it returns the ARN to show the user.
+*/
+/** Reads the caller identity with an existing client. */
+async function getCallerIdentityWith(client, options = {}) {
+	const response = await client.send(new GetCallerIdentityCommand({}), { abortSignal: options.signal });
+	return {
+		arn: response.Arn ?? "",
+		account: response.Account ?? "",
+		userId: response.UserId ?? ""
+	};
+}
+
+export { getCallerIdentityWith as g };
+//# sourceMappingURL=identity.js-NmGXxBz3.js.map

package/build/server/chunks/chunks/identity.js-NmGXxBz3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js-NmGXxBz3.js","sources":["../../../../.svelte-kit/output/server/chunks/identity.js"],"sourcesContent":["import { GetCallerIdentityCommand } from \"@aws-sdk/client-sts\";\n//#region src/lib/server/identity.ts\n/**\n* `sts:GetCallerIdentity` for the resolved configuration.\n*\n* This is the cheapest honest answer to \"do these credentials work, and whose\n* are they?\": one call, no permissions beyond the implicit\n* `sts:GetCallerIdentity`, and it returns the ARN to show the user.\n*/\n/** Reads the caller identity with an existing client. */\nasync function getCallerIdentityWith(client, options = {}) {\n\tconst response = await client.send(new GetCallerIdentityCommand({}), { abortSignal: options.signal });\n\treturn {\n\t\tarn: response.Arn ?? \"\",\n\t\taccount: response.Account ?? \"\",\n\t\tuserId: response.UserId ?? \"\"\n\t};\n}\n//#endregion\nexport { getCallerIdentityWith as t };\n"],"names":[],"mappings":";;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE,EAAE;AAC3D,CAAC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACtG,CAAC,OAAO;AACR,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,EAAE;AACzB,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;AACjC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI;AAC7B,EAAE;AACF;;"}

package/build/server/chunks/chunks/{internal2.js-627EG4am.js → internal2.js--RCssYze.js}

@@ -163,7 +163,7 @@ var options = {
 		app: ({ head, body, assets, nonce, env }) => "<!doctype html>\n<html lang=\"en\">\n	<head>\n		<meta charset=\"utf-8\" />\n		<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n		<meta name=\"text-scale\" content=\"scale\" />\n		<meta name=\"theme-color\" content=\"#0a0a0a\" />\n		" + head + "\n	</head>\n	<body data-sveltekit-preload-data=\"hover\">\n		<div style=\"display: contents\">" + body + "</div>\n	</body>\n</html>\n",
 		error: error_template_default
 	},
-	version_hash: "ymp2l7"
+	version_hash: "7ipnb"
 };
 async function get_hooks() {
 	let handle;
@@ -185,4 +185,4 @@ async function get_hooks() {
 }
 
 export { get_hooks as g, options as o, read_implementation as r, set_read_implementation as s };
-//# sourceMappingURL=internal2.js-627EG4am.js.map
+//# sourceMappingURL=internal2.js--RCssYze.js.map