ysk-server-core 1.0.0

package/dist/hosting/project-ops.d.ts

@@ -0,0 +1,324 @@
+/**
+ * Project operations: real Node process deploy (pidfile + listen + HTTP health)
+ * and Nginx publish with correct upstream port.
+ */
+import { type OpsResultDto, type ApplyStatus } from 'ysk-server-shared';
+import type { HostExecutor } from '../host/executor.js';
+import type { ProjectRepository, ProjectRow } from '../repositories/project-repo.js';
+import type { AuditRepository } from '../repositories/audit-repo.js';
+import { gitSync } from './git-deploy.js';
+import { checkProjectQuota } from './quota.js';
+import { type ApplyOsLimitsResult, type OsUserLive } from './project-os-user.js';
+export type OpsProcessStatus = 'stopped' | 'starting' | 'running' | 'unhealthy' | 'failed';
+export type DeployMode = 'systemd' | 'pm2' | 'pidfile' | 'none';
+/**
+ * Coerce a doc_root string to a safe relative path under project home.
+ * Strips leading slashes (legacy "absolute-looking" values), drops `..`.
+ */
+export declare function coerceProjectDocRootRel(raw: string | null | undefined): string;
+/**
+ * Normalize project document root for API save (relative to home only).
+ * Rejects `..` and empty; leading slash is stripped (same as home-relative intent).
+ */
+export declare function normalizeProjectDocRoot(raw: string | null | undefined): string | undefined;
+/** Resolve document root: relative doc_root under home, default app/public */
+export declare function resolveProjectDocRoot(row: ProjectRow): string;
+/** Relative doc_root for nginx publish (static/php). */
+export declare function resolveProjectDocRootRel(row: ProjectRow): string;
+/**
+ * Pick process port: explicit opts → preferred_port → existing → free range.
+ * Preferred port busy by another process → validation error (honest).
+ */
+export declare function resolveProcessPort(opts: {
+    requested?: number;
+    preferred?: number;
+    current?: number;
+    from: number;
+    to: number;
+}): Promise<number>;
+/** PHP edge mode from last deploy (publish must not overwrite php -S with dead FPM). */
+export declare function resolvePhpEdgeMode(row: ProjectRow): 'php_fpm' | 'php_proxy';
+/**
+ * Project ops result — extends shared OpsResultDto (single honesty contract).
+ */
+export interface OpsApplyResult extends OpsResultDto {
+    projectId: string;
+    pidfile?: string;
+    processStatus: OpsProcessStatus;
+    health?: {
+        ok: boolean;
+        status?: number;
+        body?: string;
+        ms?: number;
+        error?: string;
+    };
+    listening: boolean;
+    nginxPath?: string;
+    written: string[];
+    /** true when process was only pidfile-spawned (not system systemd) */
+    degraded?: boolean;
+    apply_status?: ApplyStatus;
+    deployMode?: DeployMode;
+    nginxReloaded?: boolean;
+    systemdUnit?: string;
+    nginxStatus?: string;
+    pm2App?: string;
+}
+export declare class ProjectOpsService {
+    private readonly projects;
+    private readonly host;
+    private readonly dataDir;
+    private readonly audit?;
+    constructor(projects: ProjectRepository, host: HostExecutor, dataDir: string, audit?: AuditRepository | undefined);
+    /**
+     * Full Node deploy path:
+     * 1) write app artifacts (.env, entry stub, unit)
+     * 2) allocate port
+     * 3) stop previous process if any
+     * 4) spawn node (detached) + pidfile
+     * 5) wait until port listens and HTTP returns 2xx
+     * 6) rewrite nginx conf with real upstream
+     * 7) persist status on project row
+     */
+    deployNode(projectId: string, opts: {
+        actor: string;
+        port?: number;
+        entry?: string;
+        nodeVersion?: string;
+        enableSystemd?: boolean;
+        /** Prefer PM2 when not using systemd (needs YSK_EXECUTE + pm2 on PATH) */
+        preferPm2?: boolean;
+        healthTimeoutMs?: number;
+        memoryMax?: string;
+        cpuQuotaPercent?: number;
+    }): Promise<OpsApplyResult>;
+    /**
+     * Stop process via systemd / PM2 / pidfile (SIGTERM then SIGKILL).
+     */
+    stopNode(projectId: string, actor: string): Promise<OpsApplyResult>;
+    /**
+     * Static site deploy: ensure public/index.html, write nginx root conf,
+     * optional system conf.d sync + reload when root+EXECUTE.
+     * No process spawn (no port) — status is "published" when conf written.
+     */
+    deployStatic(projectId: string, opts: {
+        actor: string;
+        ssl?: boolean;
+        reload?: boolean;
+    }): Promise<OpsApplyResult>;
+    /**
+     * Live health check against stored port; updates last_health.
+     */
+    health(projectId: string): Promise<OpsApplyResult>;
+    /** Write htpasswd under dataDir when project has HTTP basic auth credentials. */
+    private writeProjectHtpasswd;
+    /**
+     * Write/update nginx conf for project and optionally sync to system conf.d.
+     * Runtime-aware: static / php-fpm / reverse-proxy.
+     */
+    publishNginx(projectId: string, opts: {
+        actor: string;
+        systemConfDir?: string;
+        ssl?: boolean;
+        /** When true (default if EXECUTE), run nginx -t + reload */
+        reload?: boolean;
+        forceHttps?: boolean;
+        hsts?: boolean;
+    }): Promise<OpsApplyResult>;
+    /**
+     * Sync managed conf.d → system and optionally nginx -t + reload.
+     */
+    private syncNginxLive;
+    /**
+     * After create+template (or explicit goLive): deploy by runtime then publish nginx.
+     * Does not rollback project row on failure — returns honest notes.
+     */
+    goLive(projectId: string, opts: {
+        actor: string;
+        port?: number;
+    }): Promise<{
+        ok: boolean;
+        deploy?: OpsApplyResult;
+        publish?: OpsApplyResult;
+        notes: string[];
+    }>;
+    /**
+     * Suspend: stop process + publish 503 vhost + status=suspended.
+     */
+    suspend(projectId: string, actor: string): Promise<OpsApplyResult>;
+    /**
+     * Unsuspend: clear suspended flag and re-publish normal nginx (no SSL by default).
+     */
+    unsuspend(projectId: string, actor: string): Promise<OpsApplyResult>;
+    private publishSuspendedNginx;
+    /**
+     * Live status from pidfile / systemd / port (system truth).
+     */
+    liveStatus(projectId: string): Promise<{
+        projectId: string;
+        processStatus: OpsProcessStatus;
+        port?: number;
+        pid?: number;
+        listening: boolean;
+        pidAlive: boolean;
+        systemdActive?: string;
+        degraded: boolean;
+        deployMode: string;
+        lastHealth?: Record<string, unknown>;
+        osProvisioned: boolean;
+        linuxUser: string;
+    }>;
+    /**
+     * Git clone/pull into project app dir, then redeploy runtime (all kinds).
+     */
+    gitDeploy(projectId: string, opts: {
+        actor: string;
+        gitUrl?: string;
+        branch?: string;
+        redeploy?: boolean;
+        depth?: number;
+        entry?: string;
+        skipBuild?: boolean;
+    }): Promise<OpsApplyResult & {
+        git?: Awaited<ReturnType<typeof gitSync>>;
+    }>;
+    /**
+     * Write env vars to app/.env and store on project.
+     */
+    setEnv(projectId: string, envVars: Record<string, string>, actor: string): OpsApplyResult;
+    /**
+     * Tar backup of project home under dataDir/backups.
+     */
+    backup(projectId: string, actor: string): Promise<OpsApplyResult & {
+        archivePath?: string;
+    }>;
+    /**
+     * PHP deploy dual-mode:
+     * - production: Nginx → Apache backend → PHP-FPM (root + YSK_EXECUTE)
+     * - degraded: `php -S` + nginx proxy (verifiable without root)
+     */
+    deployPhp(projectId: string, opts: {
+        actor: string;
+        port?: number;
+        phpVersion?: string;
+        enableApache?: boolean;
+        /** Prefer production Apache+FPM path (default true when root+EXECUTE) */
+        preferFpm?: boolean;
+        /** Force php -S even if FPM/Apache available */
+        forceBuiltin?: boolean;
+        healthTimeoutMs?: number;
+    }): Promise<OpsApplyResult>;
+    /**
+     * Set systemd resource limits stored for next deploy (+ optional live set-property via applyOsLimits).
+     */
+    setResources(projectId: string, resources: {
+        memoryMax?: string;
+        cpuQuotaPercent?: number;
+        tasksMax?: number;
+        limitNofile?: number;
+    }, actor: string): OpsApplyResult;
+    /**
+     * Set soft disk quota (MiB); hard setquota runs on applyOsLimits when available.
+     */
+    setQuota(projectId: string, quotaMb: number, actor: string): Promise<OpsApplyResult & {
+        quota?: Awaited<ReturnType<typeof checkProjectQuota>>;
+    }>;
+    getOsUser(projectId: string): Promise<{
+        live: OsUserLive;
+        limits: {
+            quotaMb?: number;
+            memoryMax?: string;
+            cpuQuotaPercent?: number;
+            tasksMax?: number;
+            limitNofile?: number;
+            shell?: string;
+            accountLocked?: boolean;
+        };
+    }>;
+    /**
+     * Patch shell / lock + resource fields then apply to OS (best-effort).
+     */
+    patchOsUser(projectId: string, patch: {
+        shell?: string;
+        accountLocked?: boolean;
+        memoryMax?: string;
+        cpuQuotaPercent?: number;
+        tasksMax?: number;
+        limitNofile?: number;
+        quotaMb?: number;
+    }, actor: string): Promise<ApplyOsLimitsResult & {
+        projectId: string;
+    }>;
+    applyOsLimits(projectId: string, actor: string): Promise<ApplyOsLimitsResult & {
+        projectId: string;
+    }>;
+    chownOsHome(projectId: string, actor: string): Promise<{
+        ok: boolean;
+        notes: string[];
+        projectId: string;
+    }>;
+    quotaStatus(projectId: string): Promise<import("./quota.js").QuotaStatus>;
+    private require;
+    /** Multi-CDN real client IP opts for nginx renderers. */
+    private nginxRealIpOpts;
+    private stopProcess;
+    /**
+     * Deploy process-style runtimes: python / go / rust
+     * (Node keeps deployNode for PM2/systemd richness.)
+     * Build optional → write unit → pidfile spawn → health check → nginx proxy conf.
+     */
+    deployProcess(projectId: string, opts: {
+        actor: string;
+        entry?: string;
+        port?: number;
+        skipBuild?: boolean;
+        healthTimeoutMs?: number;
+    }): Promise<OpsApplyResult>;
+}
+/**
+ * Whether systemd unit is actually running after enable --now.
+ * enable exit 0 alone is insufficient (203/EXEC dies immediately).
+ */
+export declare function assertSystemdUnitHealthy(host: HostExecutor, unitName: string): Promise<{
+    ok: boolean;
+    active: string;
+    result: string;
+    mainPid?: number;
+    notes: string[];
+    detail: string;
+}>;
+/**
+ * Stop + disable project systemd unit so PM2 (or a new unit start) can bind the port.
+ * Idempotent; safe when unit missing.
+ */
+export declare function stopAndDisableProjectUnit(host: HostExecutor, unitName: string): Promise<string[]>;
+/**
+ * True if a project linux user (ysks_*) can exec this path.
+ * Rejects root-private and per-user toolchains (hermes/nvm/cargo under /root).
+ */
+export declare function isProjectUserExecutablePath(bin: string): boolean;
+/** @deprecated use isProjectUserExecutablePath */
+export declare function isProjectUserExecutableNodePath(bin: string): boolean;
+export type ResolveNodeBinaryResult = {
+    path: string;
+    notes: string[];
+};
+/**
+ * Resolve Node binary for project deploy (systemd User=ysks_*).
+ * Prefer /usr/local/ysk/node/<major>/bin/node (toolchain install layout).
+ * Never put panel process.execPath under /root into systemd (203/EXEC).
+ *
+ * Degraded deploys (no root / no execute) may use panel nvm/hermes path because
+ * the process runs as the panel user, not ysks_*.
+ */
+export declare function resolveNodeBinary(version?: string, host?: Pick<HostExecutor, 'pathExists' | 'isRoot' | 'executeEnabled'>): ResolveNodeBinaryResult;
+/** String path helper for callers that only need the path. */
+export declare function resolveNodeBinaryPath(version?: string, host?: Pick<HostExecutor, 'pathExists' | 'isRoot' | 'executeEnabled'>): string;
+/**
+ * Prefer Django wsgi, then FastAPI main:app, then app.py / main.py script.
+ */
+export declare function detectPythonEntry(appDir: string): string | null;
+/** Read [package] name from Cargo.toml for release binary path. */
+export declare function resolveCargoPackageName(appDir: string): string | null;
+export declare function isPidAlive(pid: number): boolean;
+//# sourceMappingURL=project-ops.d.ts.map

package/dist/hosting/project-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-ops.d.ts","sourceRoot":"","sources":["../../src/hosting/project-ops.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,OAAO,EAAwB,KAAK,YAAY,EAAE,KAAK,WAAW,EAAK,MAAM,mBAAmB,CAAC;AACjG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAoBrE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAW1C,OAAO,EAAoC,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAWjF,OAAO,EAIL,KAAK,mBAAmB,EACxB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEhD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE3F,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAS9E;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAkB1F;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAG7D;AAED,wDAAwD;AACxD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAEhE;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBlB;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,UAAU,GACd,SAAS,GAAG,WAAW,CASzB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,YAAY;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,gBAAgB,CAAC;IAChC,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAHN,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,eAAe,YAAA;IAG1C;;;;;;;;;OASG;IACG,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,0EAA0E;QAC1E,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GACA,OAAO,CAAC,cAAc,CAAC;IAyZ1B;;OAEG;IACG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAkCzE;;;;OAIG;IACG,YAAY,CAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,MAAM,CAAC,EAAE,OAAO,CAAC;KAClB,GACA,OAAO,CAAC,cAAc,CAAC;IA+I1B;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAuDxD,iFAAiF;YACnE,oBAAoB;IAuBlC;;;OAGG;IACG,YAAY,CAChB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,4DAA4D;QAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GACA,OAAO,CAAC,cAAc,CAAC;IA+M1B;;OAEG;YACW,aAAa;IAiD3B;;;OAGG;IACG,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GACrC,OAAO,CAAC;QACT,EAAE,EAAE,OAAO,CAAC;QACZ,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IA0FF;;OAEG;IACG,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAgCxE;;OAEG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;YAkB5D,qBAAqB;IA+CnC;;OAEG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,gBAAgB,CAAC;QAChC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,OAAO,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,aAAa,EAAE,OAAO,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAqCF;;OAEG;IACG,SAAS,CACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GACA,OAAO,CAAC,cAAc,GAAG;QAAE,GAAG,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC;IAmE1E;;OAEG;IACH,MAAM,CACJ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,KAAK,EAAE,MAAM,GACZ,cAAc;IA4BjB;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA4BlG;;;;OAIG;IACG,SAAS,CACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,yEAAyE;QACzE,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,gDAAgD;QAChD,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GACA,OAAO,CAAC,cAAc,CAAC;IA4V1B;;OAEG;IACH,YAAY,CACV,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE;QACT,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,EACD,KAAK,EAAE,MAAM,GACZ,cAAc;IAyDjB;;OAEG;IACG,QAAQ,CACZ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,cAAc,GAAG;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAA;KAAE,CAAC;IA8BhF,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1C,IAAI,EAAE,UAAU,CAAC;QACjB,MAAM,EAAE;YACN,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,aAAa,CAAC,EAAE,OAAO,CAAC;SACzB,CAAC;KACH,CAAC;IAeF;;OAEG;IACG,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;QACL,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,EACD,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,mBAAmB,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IA+BjD,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAerG,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAYzD,WAAW,CAAC,SAAS,EAAE,MAAM;IASnC,OAAO,CAAC,OAAO;IAQf,yDAAyD;IACzD,OAAO,CAAC,eAAe;YAYT,WAAW;IAgCzB;;;;OAIG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GACA,OAAO,CAAC,cAAc,CAAC;CAoS3B;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IACT,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAuBD;AAeD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CAYnB;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAchE;AAED,kDAAkD;AAClD,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEpE;AAED,MAAM,MAAM,uBAAuB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAExE;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,CAAC,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,GAAG,QAAQ,GAAG,gBAAgB,CAAC,GACpE,uBAAuB,CA0DzB;AAED,8DAA8D;AAC9D,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,GAAG,QAAQ,GAAG,gBAAgB,CAAC,GACpE,MAAM,CAER;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoB/D;AAED,mEAAmE;AACnE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUrE;AAYD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO/C"}