ysk-server-core 1.0.0

package/dist/hosting/project-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-service.js","sourceRoot":"","sources":["../../src/hosting/project-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAsB,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAmBpE,MAAM,OAAO,cAAc;IAEN;IACA;IACA;IACA;IAJnB,YACmB,QAA2B,EAC3B,IAAkB,EAClB,OAAe,EACf,KAAuB;QAHvB,aAAQ,GAAR,QAAQ,CAAmB;QAC3B,SAAI,GAAJ,IAAI,CAAc;QAClB,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAkB;IACvC,CAAC;IAEJ,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,+EAA+E;IACvE,kBAAkB,CAAC,GAAe;QACxC,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;QACxE,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,KAeZ;QAMC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,wEAAwE;QACxE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAC9D,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,UAAU,EACrB,EAAE,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EACrD,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAC/E,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClD,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU;oBAAE,OAAO,IAAI,CAAC;gBAC/D,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;YACH,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,UAAU,EACrB,EAAE,CAAC,2BAA2B,EAAE;oBAC9B,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,EAAE;iBAC1C,CAAC,EACF,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5B,IAAI,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC1C,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC7C,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YACtB,cAAc,GAAG,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC;QACxD,CAAC;QACD,4DAA4D;QAC5D,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;YACnF,cAAc,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;QACD,2DAA2D;QAC3D,cAAc,GAAG,uBAAuB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,oBAAoB,CAAC;YAChC,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;YACP,cAAc;YACd,GAAG,EAAE,KAAK,CAAC,GAAG;SAAE,CAAC,CAAC;QAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/D,mDAAmD;QACnD,6EAA6E;QAC7E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,wBAAwB;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;QAEjD,IAAI,WAAW,GAAG;YAChB,SAAS,EAAE,KAAK;YAChB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK;gBACX,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC;gBACxB,CAAC,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;SAAE,CAAC;QAExD,IAAI,KAAK,EAAE,CAAC;YACV,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CACtC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,aAAa,CACd,CAAC;YACF,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;gBACnB,OAAO,GAAG,aAAa,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,8EAA8E;gBAC9E,OAAO,GAAG,UAAU,CAAC;gBACrB,WAAW,GAAG;oBACZ,GAAG,WAAW;oBACd,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;iBAAE,CAAC;YACrF,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,aAAa,CACX,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAC7B,IAAI,CAAC,SAAS,CACZ;YACE,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,aAAa;YACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAAE,EACvC,IAAI,EACJ,CAAC,CACF,EACD,MAAM,CACP,CAAC;QAEF,IAAI,KAAK,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YACvC,qDAAqD;YACrD,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CACxB;gBACE,MAAM;gBACN,IAAI;gBACJ,YAAY,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;aACnI,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,QAA4D,CAAC;QACjE,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,QAAQ,GAAG,mBAAmB,CAAC;gBAC7B,UAAU,EAAE,KAAK,CAAC,UAA2B;gBAC7C,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,IAAI;gBACvB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,aAAa;aAAE,CAAC,CAAC;QAClC,CAAC;QAED,oFAAoF;QACpF,MAAM,cAAc,GAClB,OAAO,KAAK,KAAK;YACjB,OAAO,KAAK,QAAQ;YACpB,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,aAAa,GACjB,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;YACvC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;YACpC,KAAK,CAAC,aAAa,GAAG,CAAC;YACvB,KAAK,CAAC,aAAa,GAAG,KAAK;YACzB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpE,+EAA+E;QAC/E,IAAI,SAA6B,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,IAAI,YAAY,CAAC,CAAC;YACjE,MAAM,IAAI,GACR,OAAO,KAAK,KAAK;gBACf,CAAC,CAAC,iBAAiB,CAAC;oBAChB,UAAU;oBACV,OAAO,EAAE,UAAU;oBACnB,cAAc,EAAE,qBAAqB,EAAE;oBACvC,GAAG,EAAE,KAAK;oBACV,gBAAgB,EAAE,IAAI;iBACvB,CAAC;gBACJ,CAAC,CAAC,iBAAiB,CAAC;oBAChB,UAAU;oBACV,OAAO,EAAE,UAAU;oBACnB,GAAG,EAAE,KAAK;oBACV,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CAAC;YACT,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC;YAC5D,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,KAAK,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YACvC,uFAAuF;YACvF,MAAM,IAAI,CAAC,IAAI;iBACZ,UAAU,CACT;gBACE,MAAM;gBACN,IAAI;gBACJ,YAAY,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;aACnI,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB;iBACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,0BAA0B,CAAC;gBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBACnC,OAAO;aACR,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,GAAe;YACtB,EAAE;YACF,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,OAAO;YACvB,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAClC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACpC,QAAQ,EAAE,OAAO;YACjB,OAAO;YACP,eAAe,EAAE,cAAc;YAC/B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,YAAY;YAC9B,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB;YACvD,cAAc,EAAE,WAAW,CAAC,EAAE;YAC9B,WAAW,EAAE,KAAK;YAClB,IAAI,EAAE,KAAK;YACX,cAAc,EAAE,aAAa;YAC7B,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAClE,aAAa,EAAE,KAAK,CAAC,WAAW;YAChC,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;SAAE,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACjB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE;gBACN,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO;gBACP,aAAa;gBACb,WAAW;gBACX,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ;aAAE;YACZ,EAAE,EAAE,IAAI;SAAE,CAAC,CAAC;QAEd,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC;YACnB,WAAW;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,QAAQ;SAAE,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,oBAAoB,CACxB,EAAU,EACV,KAAa;QAQb,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACvD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,WAAW,EAAE;oBACX,SAAS,EAAE,KAAK;oBAChB,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC;iBAAE;gBAClC,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC5C,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;aAAE,CAAC;QACxC,CAAC;QAED,MAAM,aAAa,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;QAClC,MAAM,QAAQ,GAAG;YACf,qBAAqB,GAAG,CAAC,WAAW,sBAAsB;YAC1D,MAAM,GAAG,CAAC,UAAU,8CAA8C,GAAG,CAAC,WAAW,eAAe,aAAa,4CAA4C,GAAG,CAAC,UAAU,EAAE;YACzK,8DAA8D;YAC9D,cAAc,aAAa,IAAI,GAAG,CAAC,UAAU,sBAAsB;YACnE,YAAY,aAAa,QAAQ,aAAa,SAAS,aAAa,MAAM;SAC3E,CAAC;QAEF,qDAAqD;QACrD,IACE,YAAY;YACZ,YAAY,KAAK,aAAa;YAC9B,UAAU,CAAC,YAAY,CAAC;YACxB,qBAAqB,CAAC,YAAY,EAAE;gBAClC,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,GAAG,CAAC,UAAU;aAAE,CAAC,EAC9B,CAAC;YACD,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,GAAG,CAAC,sBAAsB,CAC1G,CAAC;QACJ,CAAC;QAED,QAAQ,CAAC,IAAI,CACX,YAAY,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,IAAI,aAAa,EAAE,EAChE,aAAa,aAAa,EAAE,CAC7B,CAAC;QACF,+EAA+E;QAC/E,QAAQ,CAAC,IAAI,CAAC,GAAG,yBAAyB,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAE3E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxF,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzC,8DAA8D;YAC9D,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;gBACrD,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,EAAE;oBACnC,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,MAAM;oBACpC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,EAAE;oBAC9C,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,GAAG;oBAC/B,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACjB,KAAK;YACL,MAAM,EAAE,sBAAsB;YAC9B,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE;YACpE,EAAE,EAAE,WAAW,CAAC,EAAE;SAAE,CAAC,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,WAAW;YACX,eAAe,EAAE,KAAK;YACtB,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY;SAAE,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB,CAC3B,KAAa,EACb,IAAgD;QAUhD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACvD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,EAAE;gBACX,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC5C,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;aAClC,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,OAAO,EAAE,CAAC,CAAC,QAAQ;YACnB,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YACxC,WAAW,EAAE,CAAC,CAAC,aAAa;SAC7B,CAAC,CAAC,CAAC;QACJ,IAAI,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC5E,IAAI,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAqE,EAAE,CAAC;QACrF,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAChE,IAAI,CAAC,CAAC,EAAE;gBAAE,SAAS,EAAE,CAAC;;gBACjB,MAAM,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,GAAG,CAAC,SAAS;gBACjB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,EAAE,EAAE,MAAM,KAAK,CAAC;YAChB,SAAS,EAAE,OAAO,CAAC,MAAM;YACzB,SAAS;YACT,MAAM;YACN,OAAO;YACP,eAAe,EAAE,KAAK;YACtB,YAAY,EAAE,KAAK;SACpB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CACtB,EAAU,EACV,KAAa,EACb,IAAuC;QAUvC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,IAAI,GAAG,sBAAsB,CAAC;YAClC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,aAAa,EAAE,GAAG,CAAC,cAAc;SAAE,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAEhC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;YAC3F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,KAAK;gBACL,IAAI;gBACJ,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC5C,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBACjC,OAAO,EAAE,GAAG,CAAC,QAAQ;aAAE,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK;gBACL,IAAI;gBACJ,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC5C,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;aAAE,CAAC;QACxC,CAAC;QAED,uCAAuC;QACvC,MAAM,IAAI,GAAG,eAAe,GAAG,CAAC,UAAU,UAAU,CAAC;QACrD,MAAM,IAAI,CAAC,IAAI;aACZ,UAAU,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;aAC9D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEnD,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEpC,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,kBAAkB,KAAK,KAAK,IAAI,YAAY,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACnF,IACE,YAAY;gBACZ,UAAU,CAAC,YAAY,CAAC;gBACxB,qBAAqB,CAAC,YAAY,EAAE;oBAClC,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,GAAG,CAAC,UAAU;iBAAE,CAAC,EAC9B,CAAC;gBACD,6DAA6D;gBAC7D,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;gBACrC,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;oBACtF,IAAI,CAAC;wBACH,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACvD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC7D,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACjG,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACjB,KAAK;YACL,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;YACpC,EAAE,EAAE,IAAI,CAAC,EAAE;SAAE,CAAC,CAAC;QAEjB,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK;YACL,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,KAAK;YACtB,YAAY,EAAE,KAAK;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;SAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,QAAkB,EAClB,SAAiB,EACjB,OAAe;QAEf,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,2DAA2D;YAC3D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACjF,MAAM,KAAK,GACT,CAAC,CAAC,QAAQ,KAAK,CAAC;gBAChB,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,YAAY,CAAC,CAAC,QAAQ,GAAG,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,mCAAmC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CACxC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,2BAA2B,CAAC,EAC1D,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC;QACxF,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACnC,mFAAmF;QACnF,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC;QACzC,OAAO;YACL,SAAS,EAAE,IAAI;YACf,EAAE;YACF,MAAM,EAAE,CAAC,GAAG,OAAO,EAAE,MAAM,SAAS,KAAK,UAAU,EAAE,EAAE,gBAAgB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAAE,CAAC;IAClG,CAAC;IAED;;OAEG;IACH,aAAa,CACX,EAAU,EACV,UAAkB,EAClB,KAAa,EACb,KAAK,GAAG,KAAK;QAEb,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,mBAAmB,CAAC;YACnC,UAAU;YACV,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,WAAW,EAAE,GAAG,CAAC,IAAI;YACrB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK;SAAE,CAAC,CAAC;QACX,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,cAAc;SAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACjB,KAAK;YACL,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE;YAChC,EAAE,EAAE,QAAQ,CAAC,EAAE;SAAE,CAAC,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,EAAU,EACV,KAAa,EACb,oBAAoD,IAAI;QAExD,6EAA6E;QAC7E,MAAM,IAAI,GACR,OAAO,iBAAiB,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI,EAAE;YACvD,CAAC,CAAC,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC;QAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE;gBAC7E,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,UAAU,EACrB,EAAE,CAAC,kCAAkC,EAAE;oBACrC,YAAY,EAAE,6CAA6C;iBAC5D,CAAC,EACF,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CACrD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,eAAe,GAAG,CAAC,UAAU,UAAU,CAAC;QACrD,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,UAAU,OAAO,CAAC;QAE3C,wBAAwB;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/E,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACpB,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC7C,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;wBAC3B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;oBACzC,CAAC;oBAAC,MAAM,CAAC;wBACP,KAAK;oBACP,CAAC;gBACH,CAAC;gBACD,UAAU,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK;YACP,CAAC;QACH,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,IAAI;iBACZ,UAAU,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;iBAC1E,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,2BAA2B,IAAI,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;iBAC7E,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,SAAS,CAAC,CAAC,CAAC;YAC/D,MAAM,IAAI,CAAC,IAAI;iBACZ,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,6BAA6B,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;iBACrF,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI;iBACZ,UAAU,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;iBACjE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACvE,CAAC;QAED,yCAAyC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACtE,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,EAAE,CAAC;YAClF,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;gBACxC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,qBAAqB,SAAS,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,IAAI;iBACZ,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;iBACrF,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACV,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;YAC1D,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9E,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;oBACvE,SAAS,EAAE,MAAM;iBAClB,CAAC,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC;YACnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,UAAU,OAAO,CAAC,CAAC;YACrF,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACnC,KAAK,CAAC,IAAI,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK;gBACP,CAAC;YACH,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,UAAU,OAAO,CAAC,CAAC;YACxF,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrC,KAAK,CAAC,IAAI,CAAC,iCAAiC,WAAW,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK;gBACP,CAAC;YACH,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,IAAI;qBACZ,UAAU,CACT;oBACE,MAAM;oBACN,IAAI;oBACJ;wBACE,kBAAkB,GAAG,mBAAmB,GAAG,CAAC,UAAU,2BAA2B;wBACjF,uBAAuB,GAAG,0BAA0B;wBACpD,aAAa,IAAI,sBAAsB;wBACvC,sCAAsC,IAAI,2BAA2B;wBACrE,8CAA8C;qBAC/C,CAAC,IAAI,CAAC,IAAI,CAAC;iBACb,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB;qBACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;qBACjE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACX,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CACpF,CAAC;YACN,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CACX,uBAAuB,GAAG,CAAC,MAAM,6CAA6C,CAC/E,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,IAAI,WAAW,IAAI,GAAG,CAAC,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC/C,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,GAAG,CAAC,UAAU;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;iBAAM,IAAI,MAAM,EAAE,CAAC;gBAClB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CACnC;oBACE,MAAM;oBACN,IAAI;oBACJ,cAAc,GAAG,CAAC,UAAU,oBAAoB,GAAG,CAAC,UAAU,eAAe;iBAC9E,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvE,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;wBAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACzD,CAAC,CAAC,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC7C,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI;qBACZ,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,CAAC,WAAW,sBAAsB,CAAC,EAAE;oBAC7E,SAAS,EAAE,KAAK;iBACjB,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,GACb,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBACvD,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACvD,IAAI,SAAS,EAAE,CAAC;oBACd,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;wBAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC3C,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACzD,CAAC;oBACD,KAAK,CAAC,IAAI,CAAC,8BAA8B,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC3D,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CACX,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CACjE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,WAAW,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjE,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,cAAc;QACd,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAEhD,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACjB,KAAK;YACL,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE;gBACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,WAAW;gBACX,KAAK;gBACL,QAAQ;aACT;YACD,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,EAAE;YACb,YAAY,EAAE,WAAW;YACzB,KAAK;YACL,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CACb,EAAU,EACV,IAAuB,EACvB,KAAa;QAEb,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACjB,KAAK;YACL,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;YAChC,EAAE,EAAE,IAAI;SAAE,CAAC,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED,6FAA6F;IAC7F,aAAa,CACX,EAAU,EACV,KAaC,EACD,KAAa;QAEb,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACxG,IAAI,MAAM,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;gBACvF,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,+EAA+E;QAC/E,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC5C,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE;oBAAE,OAAO,KAAK,CAAC;gBAC9B,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC/C,IAAI,OAAO,IAAI,OAAO,KAAK,MAAM;oBAAE,OAAO,IAAI,CAAC;gBAC/C,OAAO,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC;YACH,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,UAAU,EACrB,EAAE,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,EAC1E,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GACX,KAAK,CAAC,aAAa,KAAK,SAAS;YAC/B,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC;YAC/C,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,WAAW,GAAG,SAAS,CAAC;aAC/C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACrC,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE;YAC3B,MAAM;YACN,cAAc,EAAE,OAAO;YACvB,WAAW,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW;YAChF,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;YACtD,iBAAiB,EACf,KAAK,CAAC,eAAe,KAAK,IAAI;gBAC5B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;oBACnC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,SAAS;oBAC3C,CAAC,CAAC,GAAG,CAAC,iBAAiB;YAC7B,cAAc,EACZ,KAAK,CAAC,YAAY,KAAK,IAAI;gBACzB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;oBAChC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,SAAS;oBACxC,CAAC,CAAC,GAAG,CAAC,cAAc;YAC1B,cAAc,EACZ,KAAK,CAAC,YAAY,KAAK,IAAI;gBACzB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;oBAChC,CAAC,CAAC,KAAK,CAAC,YAAY,IAAI,SAAS;oBACjC,CAAC,CAAC,GAAG,CAAC,cAAc;YAC1B,QAAQ,EAAE,WAAW;YACrB,OAAO,EACL,KAAK,CAAC,MAAM,KAAK,IAAI;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;oBAC1B,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS;oBAClC,CAAC,CAAC,GAAG,CAAC,OAAO;YACnB,gBAAgB,EACd,KAAK,CAAC,cAAc,KAAK,IAAI;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;oBAClC,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,cAAc,CAAC;oBACtD,CAAC,CAAC,GAAG,CAAC,gBAAgB;YAC5B,cAAc,EACZ,KAAK,CAAC,aAAa,KAAK,IAAI;gBAC1B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBACjC,CAAC,CAAC,CAAC,GAAG,EAAE;wBACJ,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;wBACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK;4BAAE,OAAO,GAAG,CAAC,cAAc,CAAC;wBAC3E,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACvB,CAAC,CAAC,EAAE;oBACN,CAAC,CAAC,GAAG,CAAC,cAAc;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACjB,KAAK;YACL,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE;YAC1E,EAAE,EAAE,IAAI;SAAE,CAAC,CAAC;QACd,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;CACF;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,iBAAiB;IACjB,OAAO;IACP,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH,SAAS,8BAA8B,CAAC,GAAW;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,2BAA2B,GAAG,EAAE,EAAE;YAC1E,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,GAAe;IAC5B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;QACvC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,cAAc,EAAE,uBAAuB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS;QACtF,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACpC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACvB,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,YAAY,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;KAAE,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA6B,EAAE,OAAgB;IACvE,MAAM,WAAW,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,WAAW;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/hosting/project-user-run.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Run project workloads as the project's Linux user (isolation).
+ * Production (root + YSK_EXECUTE): hard-require os_provisioned; build/start via runuser.
+ * Degraded: allow control-plane user with honest notes — never fake isolation.
+ */
+import { type ChildProcess } from 'node:child_process';
+import type { HostExecutor } from '../host/executor.js';
+import type { ProjectRow } from '../repositories/project-repo.js';
+export type IsolationMode = 'isolated' | 'degraded';
+/**
+ * When control plane is root+execute, deploy must have OS isolation.
+ * Degraded mode does not throw (caller marks degraded).
+ */
+export declare function assertOsIsolationForDeploy(row: ProjectRow, host: HostExecutor, action?: string): void;
+/** True when we can and should run as the project user. */
+export declare function canRunAsProjectUser(row: ProjectRow, host: HostExecutor): boolean;
+export declare function isolationModeFor(row: ProjectRow, host: HostExecutor): IsolationMode;
+/**
+ * chown -R project home to linux_user:linux_group (root only).
+ */
+export declare function chownProjectHome(host: HostExecutor, row: ProjectRow, notes?: string[]): Promise<{
+    ok: boolean;
+}>;
+/**
+ * Run a shell command as project user when isolated; else as control-plane user.
+ */
+export declare function runAsProjectUser(host: HostExecutor, row: ProjectRow, shellCmd: string, opts?: {
+    timeoutMs?: number;
+    cwd?: string;
+    notes?: string[];
+}): Promise<{
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    mode: IsolationMode;
+}>;
+/**
+ * Spawn detached process as project user when possible.
+ * Prefer: runuser -u USER -- bash -lc '…'
+ */
+export declare function spawnAsProjectUser(input: {
+    row: ProjectRow;
+    host: HostExecutor;
+    /** Shell body (already without outer bash -lc) */
+    shellCmd: string;
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    logOutFd: number;
+    logErrFd: number;
+    notes?: string[];
+}): {
+    child: ChildProcess;
+    mode: IsolationMode;
+};
+/** Shell single-quote escape */
+export declare function shellQuote(s: string): string;
+/**
+ * Live check: `id user` succeeds (optional strengthen provisioned flag).
+ */
+export declare function linuxUserExists(host: HostExecutor, linuxUser: string): Promise<boolean>;
+//# sourceMappingURL=project-user-run.d.ts.map

package/dist/hosting/project-user-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-user-run.d.ts","sourceRoot":"","sources":["../../src/hosting/project-user-run.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAS,KAAK,YAAY,EAAqB,MAAM,oBAAoB,CAAC;AACjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAGlE,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,UAAU,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,YAAY,EAClB,MAAM,SAAyB,GAC9B,IAAI,CAaN;AAED,2DAA2D;AAC3D,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAOhF;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,aAAa,CAEnF;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,YAAY,EAClB,GAAG,EAAE,UAAU,EACf,KAAK,CAAC,EAAE,MAAM,EAAE,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CA4C1B;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,YAAY,EAClB,GAAG,EAAE,UAAU,EACf,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC5D,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,CAkBpF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB,GAAG;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAoB/C;AAED,gCAAgC;AAChC,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAOlB"}

package/dist/hosting/project-user-run.js

@@ -0,0 +1,130 @@
+/**
+ * Run project workloads as the project's Linux user (isolation).
+ * Production (root + YSK_EXECUTE): hard-require os_provisioned; build/start via runuser.
+ * Degraded: allow control-plane user with honest notes — never fake isolation.
+ */
+import { spawn } from 'node:child_process';
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+/**
+ * When control plane is root+execute, deploy must have OS isolation.
+ * Degraded mode does not throw (caller marks degraded).
+ */
+export function assertOsIsolationForDeploy(row, host, action = tl('notes.auto.n1497')) {
+    if (!host.executeEnabled() || !host.isRoot())
+        return;
+    if (!row.os_provisioned) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.t0141', { v0: (action) }) +
+            tl('notes.auto.t0142', { v0: (row.id), v1: (row.linux_user) }), { httpStatus: 403, details: { projectId: row.id, linuxUser: row.linux_user } });
+    }
+    if (!row.linux_user?.trim()) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0697'), { httpStatus: 400 });
+    }
+}
+/** True when we can and should run as the project user. */
+export function canRunAsProjectUser(row, host) {
+    return Boolean(host.executeEnabled() &&
+        host.isRoot() &&
+        row.os_provisioned &&
+        row.linux_user?.trim());
+}
+export function isolationModeFor(row, host) {
+    return canRunAsProjectUser(row, host) ? 'isolated' : 'degraded';
+}
+/**
+ * chown -R project home to linux_user:linux_group (root only).
+ */
+export async function chownProjectHome(host, row, notes) {
+    if (!canRunAsProjectUser(row, host)) {
+        notes?.push(tl('notes.auto.n1254'));
+        return { ok: false };
+    }
+    const home = row.home_dir;
+    const u = row.linux_user;
+    const g = row.linux_group || u;
+    // Owner = project user; then re-apply ysk-web group bits so www-data/nginx can read public trees
+    // (plain chown -R user:user would leave Apache/Nginx unable to read → 403/502 on PHP/static).
+    const r = await host.runCommand([
+        'bash',
+        '-c',
+        [
+            `chown -R ${shellQuote(u)}:${shellQuote(g)} ${shellQuote(home)}`,
+            `chmod 750 ${shellQuote(home)}`,
+            `groupadd --system ysk-web 2>/dev/null || true`,
+            `id www-data >/dev/null 2>&1 && usermod -aG ysk-web www-data 2>/dev/null || true`,
+            `id nginx >/dev/null 2>&1 && usermod -aG ysk-web nginx 2>/dev/null || true`,
+            `usermod -aG ysk-web ${shellQuote(u)} 2>/dev/null || true`,
+            `chgrp ysk-web ${shellQuote(home)} 2>/dev/null || true`,
+            `chmod 750 ${shellQuote(home)} 2>/dev/null || true`,
+            `for d in app/public public app app/public/public_html; do`,
+            `  p=${shellQuote(home)}/$d`,
+            `  if [ -d "$p" ]; then chgrp -R ysk-web "$p" 2>/dev/null || true; chmod -R g+rX "$p" 2>/dev/null || true; fi`,
+            `done`,
+            // Roundcube/Snappy writable dirs (temp, logs, db) must be project-user writeable
+            `for d in app/public/temp app/public/logs app/public/db app/public/public_html/temp; do`,
+            `  p=${shellQuote(home)}/$d`,
+            `  if [ -d "$p" ]; then chown -R ${shellQuote(u)}:${shellQuote(g)} "$p" 2>/dev/null || true; chmod -R ug+rwX "$p" 2>/dev/null || true; fi`,
+            `done`,
+            `if [ -f ${shellQuote(home)}/app/public/db/roundcube.db ]; then chown ${shellQuote(u)}:${shellQuote(g)} ${shellQuote(home)}/app/public/db/roundcube.db; chmod 664 ${shellQuote(home)}/app/public/db/roundcube.db; fi`,
+        ].join('\n'),
+    ], { timeoutMs: 60_000 });
+    if (r.exitCode === 0) {
+        notes?.push(tl('notes.auto.t0143', { v0: (u), v1: (g), v2: (home) }));
+        notes?.push('ysk-web group readability reapplied for public trees');
+        return { ok: true };
+    }
+    notes?.push(tl('notes.tpl.chownFailed', { detail: (r.stderr || r.stdout || '').slice(0, 200) }));
+    return { ok: false };
+}
+/**
+ * Run a shell command as project user when isolated; else as control-plane user.
+ */
+export async function runAsProjectUser(host, row, shellCmd, opts) {
+    const timeoutMs = opts?.timeoutMs ?? 120_000;
+    const cwd = opts?.cwd ?? row.home_dir;
+    const mode = isolationModeFor(row, host);
+    if (mode === 'isolated') {
+        const wrapped = `cd ${shellQuote(cwd)} && ${shellCmd}`;
+        const r = await host.runCommand(['runuser', '-u', row.linux_user, '--', 'bash', '-lc', wrapped], { timeoutMs });
+        opts?.notes?.push(tl('notes.auto.t0144', { v0: (row.linux_user) }));
+        return { ...r, mode };
+    }
+    opts?.notes?.push(tl('notes.auto.n0516'));
+    const r = await host.runCommand(['bash', '-c', `cd ${shellQuote(cwd)} && ${shellCmd}`], {
+        timeoutMs,
+    });
+    return { ...r, mode };
+}
+/**
+ * Spawn detached process as project user when possible.
+ * Prefer: runuser -u USER -- bash -lc '…'
+ */
+export function spawnAsProjectUser(input) {
+    const mode = isolationModeFor(input.row, input.host);
+    const opts = {
+        cwd: input.cwd,
+        env: input.env,
+        detached: true,
+        stdio: ['ignore', input.logOutFd, input.logErrFd],
+    };
+    if (mode === 'isolated') {
+        input.notes?.push(tl('notes.auto.t0145', { v0: (input.row.linux_user) }));
+        const child = spawn('runuser', ['-u', input.row.linux_user, '--', 'bash', '-lc', input.shellCmd], opts);
+        return { child, mode };
+    }
+    input.notes?.push(tl('notes.auto.n0377'));
+    const child = spawn('bash', ['-lc', input.shellCmd], opts);
+    return { child, mode };
+}
+/** Shell single-quote escape */
+export function shellQuote(s) {
+    return `'${String(s).replace(/'/g, `'\\''`)}'`;
+}
+/**
+ * Live check: `id user` succeeds (optional strengthen provisioned flag).
+ */
+export async function linuxUserExists(host, linuxUser) {
+    const r = await host.runCommand(['bash', '-c', `id ${shellQuote(linuxUser)} >/dev/null 2>&1; echo $?`], { timeoutMs: 5_000 });
+    const code = r.stdout.trim().split(/\n/).pop();
+    return code === '0';
+}
+//# sourceMappingURL=project-user-run.js.map

package/dist/hosting/project-user-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-user-run.js","sourceRoot":"","sources":["../../src/hosting/project-user-run.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAwC,MAAM,oBAAoB,CAAC;AAGjF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAI5D;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAe,EACf,IAAkB,EAClB,MAAM,GAAG,EAAE,CAAC,kBAAkB,CAAC;IAE/B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO;IACrD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAChB,UAAU,CAAC,UAAU,EACrB,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAChE,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,mBAAmB,CAAC,GAAe,EAAE,IAAkB;IACrE,OAAO,OAAO,CACZ,IAAI,CAAC,cAAc,EAAE;QACnB,IAAI,CAAC,MAAM,EAAE;QACb,GAAG,CAAC,cAAc;QAClB,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAe,EAAE,IAAkB;IAClE,OAAO,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAkB,EAClB,GAAe,EACf,KAAgB;IAEhB,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QACpC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;IAC/B,iGAAiG;IACjG,8FAA8F;IAC9F,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B;QACE,MAAM;QACN,IAAI;QACJ;YACE,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE;YAChE,aAAa,UAAU,CAAC,IAAI,CAAC,EAAE;YAC/B,+CAA+C;YAC/C,iFAAiF;YACjF,2EAA2E;YAC3E,uBAAuB,UAAU,CAAC,CAAC,CAAC,sBAAsB;YAC1D,iBAAiB,UAAU,CAAC,IAAI,CAAC,sBAAsB;YACvD,aAAa,UAAU,CAAC,IAAI,CAAC,sBAAsB;YACnD,2DAA2D;YAC3D,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK;YAC5B,8GAA8G;YAC9G,MAAM;YACN,iFAAiF;YACjF,wFAAwF;YACxF,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK;YAC5B,mCAAmC,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,yEAAyE;YAC1I,MAAM;YACN,WAAW,UAAU,CAAC,IAAI,CAAC,6CAA6C,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,0CAA0C,UAAU,CAAC,IAAI,CAAC,iCAAiC;SACtN,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,KAAK,EAAE,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAkB,EAClB,GAAe,EACf,QAAgB,EAChB,IAA6D;IAE7D,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,OAAO,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC;IACtC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,QAAQ,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,EAC/D,EAAE,SAAS,EAAE,CACd,CAAC;QACF,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,QAAQ,EAAE,CAAC,EAAE;QACtF,SAAS;KACV,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAUlC;IACC,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,IAAI,GAAiB;QACzB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC;KAClD,CAAC;IACF,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,KAAK,CACjB,SAAS,EACT,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EACjE,IAAI,CACL,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAkB,EAClB,SAAiB;IAEjB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC,SAAS,CAAC,2BAA2B,CAAC,EACtE,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/C,OAAO,IAAI,KAAK,GAAG,CAAC;AACtB,CAAC"}

package/dist/hosting/project-web-group.d.ts

@@ -0,0 +1,21 @@
+import type { HostExecutor } from '../host/executor.js';
+/** Shared group for panel + web server read access */
+export declare const YSK_WEB_GROUP = "ysk-web";
+export interface WebGroupApplyResult {
+    ok: boolean;
+    notes: string[];
+    applied: boolean;
+    blocked: boolean;
+}
+/**
+ * Ensure ysk-web exists, add project user + www-data, fix home group bits.
+ */
+export declare function applyProjectWebGroupAccess(input: {
+    host: HostExecutor;
+    linuxUser: string;
+    linuxGroup?: string;
+    homeDir: string;
+}): Promise<WebGroupApplyResult>;
+/** Shell lines for inclusion in useradd provision scripts */
+export declare function webGroupProvisionCommands(linuxUser: string, homeDir: string): string[];
+//# sourceMappingURL=project-web-group.d.ts.map

package/dist/hosting/project-web-group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-web-group.d.ts","sourceRoot":"","sources":["../../src/hosting/project-web-group.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,sDAAsD;AACtD,eAAO,MAAM,aAAa,YAAY,CAAC;AAEvC,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAgD/B;AAED,6DAA6D;AAC7D,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAWtF"}

package/dist/hosting/project-web-group.js

@@ -0,0 +1,79 @@
+import { tl } from 'ysk-server-shared';
+/**
+ * Nginx/static readability: shared system group so www-data can read project homes
+ * without world-readable 755.
+ *
+ * Strategy A (Hestia-style):
+ * - groupadd ysk-web
+ * - usermod -aG ysk-web www-data (if exists)
+ * - usermod -aG ysk-web $linuxUser
+ * - chgrp ysk-web home; chmod 750
+ * - public dirs g+rX
+ */
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { shellQuote } from './project-user-run.js';
+/** Shared group for panel + web server read access */
+export const YSK_WEB_GROUP = 'ysk-web';
+/**
+ * Ensure ysk-web exists, add project user + www-data, fix home group bits.
+ */
+export async function applyProjectWebGroupAccess(input) {
+    const notes = [];
+    if (!input.host.executeEnabled() || !input.host.isRoot()) {
+        return {
+            ok: false,
+            applied: false,
+            blocked: true,
+            notes: [tl('notes.auto.n0475')],
+        };
+    }
+    const u = input.linuxUser.trim();
+    const home = input.homeDir;
+    if (!u || !home) {
+        return { ok: false, applied: false, blocked: false, notes: [tl('notes.auto.n1324')] };
+    }
+    const safeUser = u.replace(/[^a-zA-Z0-9._-]/g, '');
+    if (safeUser !== u) {
+        return { ok: false, applied: false, blocked: false, notes: [tl('notes.auto.t0348', { v0: (u) })] };
+    }
+    const script = [
+        `groupadd --system ${YSK_WEB_GROUP} 2>/dev/null || true`,
+        `id www-data >/dev/null 2>&1 && usermod -aG ${YSK_WEB_GROUP} www-data 2>/dev/null || true`,
+        `id nginx >/dev/null 2>&1 && usermod -aG ${YSK_WEB_GROUP} nginx 2>/dev/null || true`,
+        `usermod -aG ${YSK_WEB_GROUP} ${safeUser} 2>/dev/null || true`,
+        existsSync(home)
+            ? `chgrp -R ${YSK_WEB_GROUP} ${shellQuote(home)} 2>/dev/null || true`
+            : `true`,
+        existsSync(home) ? `chmod 750 ${shellQuote(home)} 2>/dev/null || true` : `true`,
+        // public / static trees group-readable
+        ...['app/public', 'public', 'app'].map((rel) => {
+            const p = join(home, rel);
+            return existsSync(p)
+                ? `chmod -R g+rX ${shellQuote(p)} 2>/dev/null || true`
+                : `true`;
+        }),
+    ].join('\n');
+    const r = await input.host.runCommand(['bash', '-c', script], { timeoutMs: 60_000 });
+    if (r.exitCode === 0) {
+        notes.push(tl('notes.auto.t0349', { v0: (YSK_WEB_GROUP), v1: (safeUser) }));
+        return { ok: true, applied: true, blocked: false, notes };
+    }
+    notes.push(tl('notes.auto.t0350', { v0: ((r.stderr || r.stdout || '').slice(0, 200)) }));
+    return { ok: false, applied: false, blocked: false, notes };
+}
+/** Shell lines for inclusion in useradd provision scripts */
+export function webGroupProvisionCommands(linuxUser, homeDir) {
+    const u = linuxUser.replace(/[^a-zA-Z0-9._-]/g, '');
+    if (!u)
+        return [];
+    return [
+        `groupadd --system ${YSK_WEB_GROUP} 2>/dev/null || true`,
+        `id www-data >/dev/null 2>&1 && usermod -aG ${YSK_WEB_GROUP} www-data 2>/dev/null || true`,
+        `usermod -aG ${YSK_WEB_GROUP} ${u} 2>/dev/null || true`,
+        `chgrp -R ${YSK_WEB_GROUP} ${homeDir} 2>/dev/null || true`,
+        `chmod 750 ${homeDir} 2>/dev/null || true`,
+        `chmod -R g+rX ${homeDir}/app/public ${homeDir}/public ${homeDir}/app 2>/dev/null || true`,
+    ];
+}
+//# sourceMappingURL=project-web-group.js.map

package/dist/hosting/project-web-group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-web-group.js","sourceRoot":"","sources":["../../src/hosting/project-web-group.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,sDAAsD;AACtD,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AASvC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAKhD;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;SAChC,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;IAC3B,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACrG,CAAC;IAED,MAAM,MAAM,GAAG;QACb,qBAAqB,aAAa,sBAAsB;QACxD,8CAA8C,aAAa,+BAA+B;QAC1F,2CAA2C,aAAa,4BAA4B;QACpF,eAAe,aAAa,IAAI,QAAQ,sBAAsB;QAC9D,UAAU,CAAC,IAAI,CAAC;YACd,CAAC,CAAC,YAAY,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,sBAAsB;YACrE,CAAC,CAAC,MAAM;QACV,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAM;QAC/E,uCAAuC;QACvC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1B,OAAO,UAAU,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,iBAAiB,UAAU,CAAC,CAAC,CAAC,sBAAsB;gBACtD,CAAC,CAAC,MAAM,CAAC;QACb,CAAC,CAAC;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAChE,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,yBAAyB,CAAC,SAAiB,EAAE,OAAe;IAC1E,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO;QACL,qBAAqB,aAAa,sBAAsB;QACxD,8CAA8C,aAAa,+BAA+B;QAC1F,eAAe,aAAa,IAAI,CAAC,sBAAsB;QACvD,YAAY,aAAa,IAAI,OAAO,sBAAsB;QAC1D,aAAa,OAAO,sBAAsB;QAC1C,iBAAiB,OAAO,eAAe,OAAO,WAAW,OAAO,0BAA0B;KAC3F,CAAC;AACJ,CAAC"}

package/dist/hosting/project.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Project / Site isolation model — independent Linux user/group per project.
+ *
+ * Contract:
+ * - homeDir = /home/ysk-server-{projectId}
+ * - linuxUser derived from projectId (≤32 chars), not display name
+ * - One user ↔ one project; names immutable after create
+ */
+import type { ProjectDto } from 'ysk-server-shared';
+/** Canonical home directory prefix (trailing path is full project UUID). */
+export declare const PROJECT_HOME_PREFIX = "/home/ysk-server-";
+/** Linux username prefix (short; total user ≤ 32). */
+export declare const LINUX_USER_PREFIX = "ysks_";
+/**
+ * Canonical project home: /home/ysk-server-{projectId}
+ */
+export declare function projectHomeDir(projectId: string): string;
+/**
+ * Safe Linux username from project id (stable, unique, ≤32).
+ * Uses first 12 hex chars of UUID → `ysks_{12hex}` (16 chars).
+ */
+export declare function deriveLinuxUserFromProjectId(projectId: string): string;
+/**
+ * @deprecated Prefer deriveLinuxUserFromProjectId — name-based users collide.
+ * Kept for legacy project rows and tests that still reference slug users.
+ */
+export declare function deriveLinuxUser(projectName: string): string;
+/**
+ * True if path is the canonical /home/ysk-server-{projectId}.
+ */
+export declare function isCanonicalProjectHome(homeDir: string, projectId: string): boolean;
+/**
+ * Allow delete/chown only for:
+ * - /home/ysk-server-{uuid}
+ * - control-plane degraded shadow …/homes/ysk-server-{id}
+ * - legacy …/projects/{linuxUser}
+ */
+export declare function isSafeProjectHomePath(homeDir: string, opts: {
+    projectId: string;
+    dataDir?: string;
+    linuxUser?: string;
+}): boolean;
+/**
+ * Build project isolation plan (pure — does not call useradd).
+ */
+export declare function planProjectIsolation(input: {
+    id: string;
+    name: string;
+    domain?: string;
+    runtime: ProjectDto['runtime'];
+    runtimeVersion?: string;
+    env?: 'staging' | 'production';
+}): {
+    project: ProjectDto;
+    commands: string[];
+    notes: string[];
+};
+//# sourceMappingURL=project.d.ts.map

package/dist/hosting/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/hosting/project.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AAEvD,sDAAsD;AACtD,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAEzC;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAOxD;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAetE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAW3D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAElF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAkBT;AASD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAChC,GAAG;IACF,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CA2CA"}

package/dist/hosting/project.js

@@ -0,0 +1,154 @@
+/**
+ * Project / Site isolation model — independent Linux user/group per project.
+ *
+ * Contract:
+ * - homeDir = /home/ysk-server-{projectId}
+ * - linuxUser derived from projectId (≤32 chars), not display name
+ * - One user ↔ one project; names immutable after create
+ */
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+/** Canonical home directory prefix (trailing path is full project UUID). */
+export const PROJECT_HOME_PREFIX = '/home/ysk-server-';
+/** Linux username prefix (short; total user ≤ 32). */
+export const LINUX_USER_PREFIX = 'ysks_';
+/**
+ * Canonical project home: /home/ysk-server-{projectId}
+ */
+export function projectHomeDir(projectId) {
+    const id = projectId.trim();
+    if (!id || id.includes('/') || id.includes('..')) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0683'), {
+            httpStatus: 400
+        });
+    }
+    return `${PROJECT_HOME_PREFIX}${id}`;
+}
+/**
+ * Safe Linux username from project id (stable, unique, ≤32).
+ * Uses first 12 hex chars of UUID → `ysks_{12hex}` (16 chars).
+ */
+export function deriveLinuxUserFromProjectId(projectId) {
+    const hex = projectId
+        .toLowerCase()
+        .replace(/-/g, '')
+        .replace(/[^a-f0-9]/g, '');
+    if (hex.length < 8) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0684'), {
+            httpStatus: 400
+        });
+    }
+    const base = hex.slice(0, 12);
+    const name = `${LINUX_USER_PREFIX}${base}`;
+    if (name.length > 32) {
+        return name.slice(0, 32);
+    }
+    return name;
+}
+/**
+ * @deprecated Prefer deriveLinuxUserFromProjectId — name-based users collide.
+ * Kept for legacy project rows and tests that still reference slug users.
+ */
+export function deriveLinuxUser(projectName) {
+    const slug = projectName
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '_')
+        .replace(/^_+|_+$/g, '')
+        .slice(0, 24);
+    if (!slug) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0689'), {
+            httpStatus: 400
+        });
+    }
+    return `ysk_${slug}`;
+}
+/**
+ * True if path is the canonical /home/ysk-server-{projectId}.
+ */
+export function isCanonicalProjectHome(homeDir, projectId) {
+    return homeDir === projectHomeDir(projectId);
+}
+/**
+ * Allow delete/chown only for:
+ * - /home/ysk-server-{uuid}
+ * - control-plane degraded shadow …/homes/ysk-server-{id}
+ * - legacy …/projects/{linuxUser}
+ */
+export function isSafeProjectHomePath(homeDir, opts) {
+    const home = homeDir.replace(/\/+$/, '');
+    if (home === projectHomeDir(opts.projectId))
+        return true;
+    // UUID-ish project id in path
+    if (home === `${PROJECT_HOME_PREFIX}${opts.projectId}`)
+        return true;
+    if (opts.dataDir) {
+        const shadow = joinPosix(opts.dataDir, 'homes', `ysk-server-${opts.projectId}`);
+        if (home === shadow.replace(/\/+$/, ''))
+            return true;
+        if (opts.linuxUser) {
+            const legacy = joinPosix(opts.dataDir, 'projects', opts.linuxUser);
+            if (home === legacy.replace(/\/+$/, ''))
+                return true;
+        }
+    }
+    // Absolute /home/ysk-server-* only (reject /home/other)
+    if (home.startsWith(PROJECT_HOME_PREFIX) && !home.slice(PROJECT_HOME_PREFIX.length).includes('/')) {
+        return home === projectHomeDir(opts.projectId);
+    }
+    return false;
+}
+function joinPosix(...parts) {
+    return parts
+        .map((p, i) => (i === 0 ? p.replace(/\/+$/, '') : p.replace(/^\/+|\/+$/g, '')))
+        .filter(Boolean)
+        .join('/');
+}
+/**
+ * Build project isolation plan (pure — does not call useradd).
+ */
+export function planProjectIsolation(input) {
+    if (!input.name?.trim()) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.needProjectName'), { httpStatus: 400 });
+    }
+    if (!input.id?.trim()) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0682'), { httpStatus: 400 });
+    }
+    const linuxUser = deriveLinuxUserFromProjectId(input.id);
+    const linuxGroup = linuxUser;
+    const homeDir = projectHomeDir(input.id);
+    const project = {
+        id: input.id,
+        name: input.name.trim(),
+        domain: input.domain,
+        linuxUser,
+        linuxGroup,
+        homeDir,
+        runtime: input.runtime,
+        runtimeVersion: input.runtimeVersion,
+        env: input.env ?? 'production'
+    };
+    const commands = [
+        `groupadd --system ${linuxGroup} 2>/dev/null || true`,
+        `id ${linuxUser} >/dev/null 2>&1 || useradd --system --gid ${linuxGroup} --home-dir ${homeDir} --create-home --shell /usr/sbin/nologin ${linuxUser}`,
+        `mkdir -p ${homeDir}/app ${homeDir}/logs ${homeDir}/tmp`,
+        `chown -R ${linuxUser}:${linuxGroup} ${homeDir}`,
+        `chmod 750 ${homeDir}`,
+        // ysk-web: allow www-data to read static trees (see project-web-group.ts)
+        `groupadd --system ysk-web 2>/dev/null || true`,
+        `id www-data >/dev/null 2>&1 && usermod -aG ysk-web www-data 2>/dev/null || true`,
+        `usermod -aG ysk-web ${linuxUser} 2>/dev/null || true`,
+        `chgrp -R ysk-web ${homeDir} 2>/dev/null || true`,
+        `chmod -R g+rX ${homeDir}/app ${homeDir}/app/public ${homeDir}/public 2>/dev/null || true`,
+    ];
+    return {
+        project,
+        commands,
+        notes: [
+            tl('notes.auto.n1043'),
+            `home：${homeDir}`,
+            `user：${linuxUser}`,
+            tl('notes.auto.n0474'),
+            tl('notes.auto.n1546'),
+        ]
+    };
+}
+//# sourceMappingURL=project.js.map

package/dist/hosting/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/hosting/project.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAE5D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEvD,sDAAsD;AACtD,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAEzC;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAChE,UAAU,EAAE,GAAG;SAAE,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,mBAAmB,GAAG,EAAE,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,SAAiB;IAC5D,MAAM,GAAG,GAAG,SAAS;SAClB,WAAW,EAAE;SACb,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAChE,UAAU,EAAE,GAAG;SAAE,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,iBAAiB,GAAG,IAAI,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,MAAM,IAAI,GAAG,WAAW;SACrB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAChE,UAAU,EAAE,GAAG;SAAE,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,SAAiB;IACvE,OAAO,OAAO,KAAK,cAAc,CAAC,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,IAAiE;IAEjE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,8BAA8B;IAC9B,IAAI,IAAI,KAAK,GAAG,mBAAmB,GAAG,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAChF,IAAI,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvD,CAAC;IACH,CAAC;IACD,wDAAwD;IACxD,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClG,OAAO,IAAI,KAAK,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,GAAG,KAAe;IACnC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;SAC9E,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAOpC;IAKC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,SAAS,GAAG,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,OAAO,GAAe;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS;QACT,UAAU;QACV,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,YAAY;KAAE,CAAC;IACnC,MAAM,QAAQ,GAAG;QACf,qBAAqB,UAAU,sBAAsB;QACrD,MAAM,SAAS,8CAA8C,UAAU,eAAe,OAAO,4CAA4C,SAAS,EAAE;QACpJ,YAAY,OAAO,QAAQ,OAAO,SAAS,OAAO,MAAM;QACxD,YAAY,SAAS,IAAI,UAAU,IAAI,OAAO,EAAE;QAChD,aAAa,OAAO,EAAE;QACtB,0EAA0E;QAC1E,+CAA+C;QAC/C,iFAAiF;QACjF,uBAAuB,SAAS,sBAAsB;QACtD,oBAAoB,OAAO,sBAAsB;QACjD,iBAAiB,OAAO,QAAQ,OAAO,eAAe,OAAO,6BAA6B;KAC3F,CAAC;IACF,OAAO;QACL,OAAO;QACP,QAAQ;QACR,KAAK,EAAE;YACL,EAAE,CAAC,kBAAkB,CAAC;YACtB,QAAQ,OAAO,EAAE;YACjB,QAAQ,SAAS,EAAE;YACnB,EAAE,CAAC,kBAAkB,CAAC;YACtB,EAAE,CAAC,kBAAkB,CAAC;SACvB;KAAE,CAAC;AACR,CAAC"}